pfSense

Spell WireGuard properly

Fix the wireguard configuration file, start tunnels at boot.

Add the Endpoint port, fix the configuration permissions.

Remove the WG tunnel when a tunnel is removed.

Update the Copyright year.

A subsequent commit will deal with .po's.

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

RADIUS authentication via shell/ssh. Implement #10545

Add option to disable NTP server. Issue #3567

RAM Disk robustness improvements. Fixes NG 3173

• Prevents RAM disk from being partially enabled and left in a broken
  state if the RAM disks cannot be created
• Prevents RAM disks from potentially overcommitting free kernel memory,
  which FreeBSD now prevents, but could result in errors....

This is 2020. Issue #9245

cosmetic

working

IPsec swanctl conversion. Implements #9603

• Converted IPsec configuration code from ipsec.conf ipsec/stroke style
  to swanctl.conf swanctl/vici style. Issue #9603
• Split up much of the single large IPsec configuration function into
  multiple functions as appropriate....

Add option to trust local CA entries. Implements #4068

Similar to closed PR #3558 from overhacked, but with a number of
changes.

Fix copyright message years to reflect BSDP -> ESF -> Netgate

Normalize some copyright messages

Add GUI components for MDS mitigation. Implements #9532

While here, add option to disable PTI display in sysinfo widget.
Implements #9323

Deprecate the built-in relayd Load Balancer. Closes #9386

It is not available on FreeBSD 12 with OpenSSL 1.1.x.

Users can migrate to the HAProxy package.

Fix the spamming of warnings about ttyv0 not being available on ARM64 devices.

While here, use a more meaningful name for the function.

Fix #7604: Rework pkg reinstall on config restore

- Remove old code needed to upgrade fom < 2.3 to 2.3
- Simplify logic using a single file /conf/needs_package_sync
- Create /etc/rc.package_reinstall_all, a script used to reinstall all
packages present in config but not on pkg database...

Improve readability on booting message

Ticket #8208

When restoring backup, set default pkg repository

Fix quoting on rc.bootup conf_path changes

Force the configuration reload after the initial interface assignment.

Also, always save the assign_complete status.

Replace some hardcoded paths.

Fix #7469

• Rename local_sync_accounts() to local_reset_accounts() and keep it
  only being used /etc/rc.bootup
• Reimplement local_sync_accounts() receiving a list of users and
  groups to be added and/or deleted
• Remove call to filter_configure xmlrpc method from...

Merge pull request #3899 from PiBa-NL/20180111-bootup-step-messages

bootup, add information about what bootup step is being done

Update the Copyright notice for pfSense.

Abort the initial interface setup when no interfaces are found.

Merge pull request #3823 from PiBa-NL/20170919-bootupcomplete

fix for leftover dhcp6c lock file(s) after unclean shutdown

notifycation, bootup complete

Setup upgrade code for wireless interfaces to the new format needed for 2.4, and switch rc.bootup so the config upgrade happens before a mismatch test, otherwise we can't fix this type of situation. Fixes #7809

bootup, change message to "Checking config backups consistency..." to tell whats taking time, as there is usually little to cleanup involved

Use recently added hwaddr field to restore original MAC address

save uniqueid during boot

Fix #7364 Console assigned VLAN disappears after reboot

Vendor MAC Retention - Update

Only write if changed or missing.

Vast majority of reboots will not have a change so don't hit the file system with a needless write. RAM disk enabled systems will always write due to missing the file on boot up.

Vendor MAC Retention File Consolidate

Use a single file for vendor MAC retention (vendor_mac).
a) Writes only one file during boot up rather than a file for each interface.
b) More efficient than numerous tiny files.
c) Friendlier to write cycle sensitive media in a RAM disk disabled system.

Vendor MAC Retention File Relocate

Relocate the vendor MAC retention file to /var/db directory.
a) It's more at home here with other network interface stuff.
b) Friendlier to write cycle sensitive media in a RAM disk enabled system.

Retain vendor MAC address for all interfaces during boot. Ticket #7011

RAM Disk Management - Update II - Restore RAM Disk Soon as it is Created and Include Logs

Restoring the RAM disk as soon as it is available will make it easier to include additional content that needs to persist across reboots for packages etc.
Include the logs in the RAM disk store so they will persist across reboots.

RAM Disk Management

1) Treat the RAM disk more like a permanent storage device with content managed/restored by the system and made available at boot up, before needed by any services.
a) Handle saving and restoring RAM disk content at reboot/shutdown/boot centrally in more of a system manged fashion....

Remove old hacks used to upgrade from 2.1 to 2.2

Fix #7021: Deprecate device polling

Fix #6857

During boot local_sync_acocunts() should be able to access LDAP server
on a non-local network or also resolve LDAP server hostname. To make it
possible move calls to create static routes and start dnsmasq/unbound
to run earlier

Deprecate nanobsd platform and remove all conditionals that uses it

Remove all calls to conf_mount_r* functions

Retire cdrom platform support

Move copyright from ESF to Netgate

Move to Apache License 2.0

Review license / copyright on all files (final round)

Review license / copyright on all files (1st round)

Move terminal config from cons25 to xterm, same used by FreeBSD

A simple fix for #6120

- Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port()

Alias Tables RAM Disk Store

If ramdisk is enabled keep a copy of the alias tables to restore at boot time. Otherwise unpredictable behavior may occur due to some aliases not being available when the firewall rules load.

Because alias tables are typically somewhat static, the following strategies are employed to keep write cycles to a minimum for SSD and flash drive type devices friendliness....

Do not try to register pre-installed packages on read-only media

Ticket #6053

- Do not call ntpdate before start ntpd, ntpd g parameter is enough
Deprecate /usr/local/sbin/ntpdate_sync_once.sh
- Remove system_ntp_configure parameter and always start ntpd

(cherry picked from commit 5a758355ec9a20ff75c9191b6915df64255fb8be)

Have recovery mode go to a shell as intended.

Detect binary packages installed but not registered in the system and do it during boot

Avoid triggering initial wizard before reboot

If you use the the webGUI to reset to factory defaults, then while the
existing system is shutting down you navigate off to the dashboard, the
initial setup wizard will start. The trigger_initial_wizard flag file is...

Automatically choose some interface combinations

on factory default boot.
This allows the system to switch interfaces from the newer ones in the
default config (e.g. em0 em1) back to the interfaces used by:
Alix - vr1 vr0
APU - re1 re2
that match the WAN and LAN labels printed on many existing devices....

Redmine #4279 Package reinstall displayed when shutting down before upgrade

Use a different flag file to indicate that a package reinstall is
required after a reboot is done first. This avoids the possibility that
the user navigates in the webGUI during the time while the shutdown is...

Reinstall packages from old versions when upgrading to 2.3

Merge pull request #1803 from nagyrobi/patch-18

Use product_name global variable in more places

Move main pfSense content to src/