[OPNsense] Error to configure OPNsense

[frontend-report]

Script: OPNsense

Reported by: @BillyFlex

Guidelines

• Read and understood guidelines: yes
• Verbose mode used: no

Issue occurs during: Initial Creation / Installation

Environment

• Linux distribution: Other
• Proxmox version: 9.1
• Default settings: Yes
• Advanced settings: Yes
• Exact command: bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/vm/opnsense-vm.sh)"

Description

Don't finish installation of opnsense

Steps to reproduce

Sending line: fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in

Error output

No commands are being executed because we are not connected to the instance.
Look attchments with error

Additional context

PVE 9.2.11

Attachments

[MickLesk]

/pocketbase opnsense-vm is_disabled=true

[github-actions]

✅ PocketBase Bot: Updated opnsense-vm successfully!

Changes applied:

• is_disabled → true

CT sync skipped: No mapped CT defaults changed.

Executed by @MickLesk

[BillyFlex]

Hi,
I've reviewed and updated your Opnsense script.
It now works correctly with the advanced settings, but I haven't verified that the entire process works correctly with the default settings.
You can try it at the following address : https://raw.githubusercontent.com/BillyFlex/opnsense-vm/refs/heads/main/opnsense-vm.sh

[aroldobossoni]

💡 Troubleshooting & Permanent Fix for Console / Boot & Hardware Config

Following up on the OPNsense VM issues (especially console loss, bootloader desync after updates, and CPU cryptographic performance), here is a complete diagnostic walkthrough and verified configuration for Proxmox VE.

---

1️⃣ Emergency Access via Proxmox CLI (Serial Terminal)

When the noVNC web console becomes unresponsive or hangs during boot:

1. SSH into the Proxmox VE host:

   ssh root@<PROXMOX_HOST_IP>

2. Attach directly to the VM serial socket (replace 106 with your <VMID>):

   qm terminal <VM_ID>

   • Press Enter to wake the prompt.
   • Log in with root credentials and select option 8 for the shell.
   • Exit sequence: Press Ctrl + O to disconnect cleanly without stopping the VM.

---

2️⃣ Persistent Bootloader & Dual Console Configuration

To ensure boot messages and the console are visible simultaneously across both noVNC (VGA/EFI) and Proxmox Serial Terminal (serial0), apply the following persistent settings:

A. Set Dual Bootloader Output (/boot.config or /boot/boot.config):

echo "-S115200 -D" > /boot.config

• -S115200: sets serial baud rate to 115200.
• -D: enables Dual Console mode (video + serial).

B. Configure Persistent Loader Overrides (/boot/loader.conf.local):

(Using .local ensures changes persist across OPNsense system upgrades without being overwritten by /boot/loader.conf)

cat << 'EOF' > /boot/loader.conf.local
# --- Dual Console Configuration ---
boot_multicons="YES"
boot_serial="YES"
comconsole_speed="115200"
console="comconsole,vidconsole"
autoboot_delay="3"

# --- VirtIO Kernel Optimizations ---
virtio_load="YES"
virtio_pci_load="YES"
virtio_net_load="YES"
virtio_scsi_load="YES"
EOF

---

3️⃣ Recommended VM Hardware & CPU Profile (/etc/pve/qemu-server/<VMID>.conf)

For optimal FreeBSD kernel performance and hardware cryptographic acceleration (AES-NI for WireGuard/IPsec/OpenVPN):

agent: 1
bios: ovmf
boot: order=scsi0
cores: 4
cpu: host
efidisk0: <STORAGE_POOL>:vm-106-disk-0,efitype=4m,size=4M
machine: q35
memory: 8192
name: OPNsense
net0: virtio=02:00:00:00:00:01,bridge=vmbr0
net1: virtio=02:00:00:00:00:02,bridge=vmbr1
numa: 0
ostype: other
scsi0: <STORAGE_POOL>:vm-106-disk-1,discard=on,ssd=1,size=20G
scsihw: virtio-scsi-pci
serial0: socket
sockets: 1
tablet: 0

🔑 Key Notes:

• cpu: host (or x86-64-v2-AES): Exposes AES-NI and CPU crypto extensions to FreeBSD, drastically improving VPN and packet inspection throughput.
• machine: q35: Modern PCIe topology recommended for recent FreeBSD releases.
• serial0: socket: Provides the backend for qm terminal.
• ostype: other: Recommended for FreeBSD guests to prevent Linux-specific guest assumptions.