Boot Environment Tips & Tricks

Reboot to Roll Back

  • Create a new ZFS Boot Environment before making potentially disruptive changes to the firewall. This represents the current known-good state of the firewall.


    While boot environments are helpful, they do not remove the need for off-device backups. Take separate configuration backups before starting any potentially disruptive set of changes.

  • Activate the new ZFS Boot Environment persistently with fa-star-o

  • Proceed to make the changes and monitor the firewall state.

If the changes caused a problem:

  • Reboot and the firewall will restart from the ZFS Boot Environment with the known-good state.

If the changes are OK:

  • Activate the default ZFS Boot Environment to continue using the new changes on future reboots.