pfSense

Update copyright years to include 2023

Hide stderr output when the mmcsd0 device does not exist

Test to make sure we have a ZFS partition before trying to run zpool commands

Remount ZFS datasets after configuring RAM disks to ensure they are used. For #13182

Fix RAM disk handling in pfSense-rc on ZFS

Revert "Fixes RAM disk handling on ZFS (support boot environments)"

This reverts commit e6b47d6812b1a46738c75a8991cd1393b200d7ef

Fixes RAM disk handling on ZFS (support boot environments)

Revert "Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182"

This reverts commit b9097e4cfe3fcbdec86a00a5a470d93d05ea8102

Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182

Enable /etc/rc.d/zfsbe support in pfSense-rc

Attempt to clear the ZFS label off the end of the disk before expanding

This prevents hangs when importing the pool due to garbage on the end of
the disk

Password prompt on encrypted ECL config.xml. Feature #12685

Sanity check the clock at boot. Issue NG 7447

netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem

Update the Copyright year of the files owned by Rubicon/Netgate.

Fix reservation on CE installs with a pool called 'zroot'.

pfSense-rc: Fix ZFS reservation

e804230c08 introduced an error when USE_ZFS is not set:

Starting syslog...done.
[: : bad number
Starting CRON... done.

Fix it by only checking if variable is not empty

Add a ZFS reservation of 10%

Change /var/run to tmpfs. Implements #12145

Add P2 Keep Alive function. Implements #12169

Works for VTI and Tunnel mode. Checks every 5 minutes if the P2 is connected and
initiates if it doesn't.

Since a failed initiation takes ~3-4 minutes to timeout, running more
frequently is counterproductive.

Unmount var and tmp ZFS on boot. Fixes #11617

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Ignore the UFS journal when pfSense tries to fix a disk corruption.

Not all UFS issues are present on journal, which can make the fsck miss some
issues.

This change improves the pfSense chances of fixing UFS issues.

RAM Disk robustness improvements. Fixes NG 3173

• Prevents RAM disk from being partially enabled and left in a broken
  state if the RAM disks cannot be created
• Prevents RAM disks from potentially overcommitting free kernel memory,
  which FreeBSD now prevents, but could result in errors....

Ticket #9612: Reboot early when needed

When fsck -z doesn't work on first attempt due to old binary, reboot
before configure the system to make it faster

Ticket #9612: Prevent infinite loop and skip zfs

• Detect when system does not contain any UFS partitions and skip it to
  run fsck -z
• On a system with a broken filesystem it could end up on an infinite
  loop since fsck -z call would always return != 0. Save a counter on...

Fix #9612: Reboot twice if needed and run fsck -z

After changing pfSense-rc to create /.fix_for_SA-19-10.ufs file to flag
system to run fsck -z during pre-install stage it started failing
because fsck binary, at that point while only kernel was upgraded, still...

This is 2020. Issue #9245

Fix #9612: Run fsck -z once during upgrade

Add dedicated auth log. Implements #9754

Note in the system log when bootup is complete.

Change logging to plain text, deprecate clog. Issue #8350

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Fixed #9245 updating copyright notices

Deprecate the built-in relayd Load Balancer. Closes #9386

It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.

Fix handling of special swap cases. Fixes #9281

Alternate swap device location tactics. Issue #9182

Fix #7604: Rework pkg reinstall on config restore

- Remove old code needed to upgrade fom < 2.3 to 2.3
- Simplify logic using a single file /conf/needs_package_sync
- Create /etc/rc.package_reinstall_all, a script used to reinstall all
packages present in config but not on pkg database...

Do not run rc.start_packages when restoring a config backup

Start packages after pfSense-upgrade finished

Do not rely on internet connection when running 2nd/3rd upgrade stages

Make our rc ready for recently introduced exit code in fsck

Inspired by: https://svnweb.freebsd.org/base?view=revision&revision=331015

Apply microcode update on boot

Ticket #8208

When restoring backup, do not call pfSense-upgrade on boot

Update the Copyright notice for pfSense.

Reorder reading the product name in pfSense-rc so it happens after all filesystems are mounted. Fixes #8065

Check for /bootpool and import the bootpool zfs pool if present. Fixes #8063

Simplify the code a little bit.

Mount the disk (the root slice) as read-only before running the fsck in the preen mode.

This force the flush of all pending writes to disk and thus put the disk in a consistent state.

The second effect of this change is that the file system can actually be recovered now, because otherwise with the root slice mounted as read-write, the fsck cannot write any changes.

Custom logo is a svg and a css files now

Only run swapon and rc.savecore when the SWAPDEVICE is valid.

Remove /root/force_growfs after use it

Make sure pkg metadata is updated at least once daily. It will be used to speedup GUI parts related to pkg update

Fix var/empty operation not permitted

Update version string at end of boot

Really fix #7120 after a bad copy/paste

Fix #7086: Copy files over from /var before umount it and move to MFS

Make sure all ZFS volumes are mounted during boot and only mount /var and /tmp when MFS is disabled. Fixes #7086

Make sure /var/tmp permissions are correct. Fixes #7120

Ticket #6340:

- Stop misusing fsck F parameter, it's supposed to be used when you
plan to run background fsck after filesystems are mounted, what is
not the case on pfSense
Increase attempts to mount all filesystems as read-write to 10
- If we cannot mount filesystems as read-write, start a recovery shell...

RAM Disk Management - Update II - Restore RAM Disk Soon as it is Created and Include Logs

Restoring the RAM disk as soon as it is available will make it easier to include additional content that needs to persist across reboots for packages etc.
Include the logs in the RAM disk store so they will persist across reboots.

Make sure ZFS partiion is mounted read-write before try to change items in filesystem

Ticket #6096: Remove target before try to move, also use mv -f to avoid human interaction

Exclude /var/empty from tar extract and make sure its permissions are respected when it's created

Silence kenv calls

Remove deprecated code

/var/etc/* has been removed above

Remove config files symlinks from /etc to /var/etc. Fixes #5538

We don't need to remove newsyslog.conf

Add our own ddb.conf

Add options to console menu reboot selection to reboot into single user mode and to reboot and force a filesystem check. Implements #6639

Deprecate nanobsd platform and remove all conditionals that uses it

Retire cdrom platform support

Remove hideplatform global config and all uses of it

Latest nginx requires /var/log/nginx/ to exist, so for users with /var in RAM it needs created.

Remove some more dangling PPTP bits.

Move copyright from ESF to Netgate

Move to Apache License 2.0

Review license / copyright on all files (final round)

Review license / copyright on all files (1st round)

Move /etc/ascii-art to /usr/local/share/pfSense

Create /home on rc if it's necessary, then remove home/.empty file from git repo

Create openssl.cnf symlink during boot

Teach rc script to copy custom_logos over default one

Rename /etc/rc(.shutdown) -> /etc/pfSense-rc(.shutdown) and stop overlapping FreeBSD-src files