Craig's pfSense Page: Toolchain Notes

Toolchain Notes

Here are some notes on setting up to cross compile pfSense ports on a FreeBSD poudriere build box.

Use poudriere to build the qemu-user-static package. Add configuration to /etc/rc.conf:

qemu_user_static_enable="YES"

Run the rc.d script:

service qemu_user_static start

Add to /usr/local/etc/poudriere.conf:

GIT_URL=git://github.com/pfsense/FreeBSD-ports.git

(This works for me because I do not build any other FreeBSD jails from git -- yet.)

Build the jail; use the Versions of pfSense and FreeBSD page, to map your pfsense target version to the FreeBSD version. For example 2.4.5_1 was built with 11.3-STABLE@r357046 (use -c for create, -u for update):

poudriere jail -x -c -j 11pfsense -a arm64.aarch64 -m svn -v stable/11@357046
poudriere jail -x -u -j 11pfsense -a arm64.aarch64 -m svn -v stable/11@357046

Check out the ports tree; poudriere defaults to master so specify the "devel" branch:

poudriere ports -v -c -m git -B devel -p pfsense

To update the ports tree use:

poudriere ports -v -u -m git -B devel -p pfsense

I like to tweak root's dot files in the jail:

# Edit dot files
zfs list -t snapshot 
zfs destroy tank/poudriere/jails/11pfsense@clean
vi /usr/local/poudriere/jails/11pfsense/root/.cshrc
zfs snapshot tank/poudriere/jails/11pfsense@clean

Create a jail specific poudriere make.conf.

cd /usr/src && git clone https://github.com/pfsense/pfsense.git 
cp -i /usr/src/pfsense/tools/conf/pfPorts/make.conf \
    /usr/local/etc/poudriere.d/pfsense-make.conf

Turn off warning sleep delays:

echo WARNING_WAIT=0 >> /usr/local/etc/poudriere.d/pfsense-make.conf
echo DEV_WARNING_WAIT=0 >> /usr/local/etc/poudriere.d/pfsense-make.conf

Set the default Python versions to match for 2.4.4 use 2.7:

echo 'DEFAULT_VERSIONS+= python=2.7' >> /usr/local/etc/poudriere.d/pfsense-make.conf

For 2.4.5 and later use 3.7:

echo 'DEFAULT_VERSIONS+= python3=3.7' >> /usr/local/etc/poudriere.d/pfsense-make.conf
echo 'DEFAULT_VERSIONS+= python=3.7' >> /usr/local/etc/poudriere.d/pfsense-make.conf

Because 2.4.5 is built on 11.3-STABLE and 11.3 has pasted end-of-life you will also need to enable builds for unsupported systems: ALLOW_UNSUPPORTED_SYSTEM=1

echo 'ALLOW_UNSUPPORTED_SYSTEM=1' >> /usr/local/etc/poudriere.d/pfsense-make.conf

Build something:

poudriere bulk -C -j 11pfsense -p pfsense net-mgmt/pfSense-pkg-arpwatch

GitHub Forking

Fork https://github.com/pfsense/FreeBSD-ports

Clone a local copy of the devel branch:

git clone -b devel git@github.com:leres/FreeBSD-ports.git leres-FreeBSD-ports

Check/set/check the git upstream:

git remote -v
git remote add upstream https://github.com/pfsense/FreeBSD-ports.git
git remote -v