net/frr: add manual config

net/frr/src/etc/inc/plugins.inc.d/frr.inc

@@ -40,6 +40,22 @@ function frr_carp_enabled()
         (string)$model->enablecarp == '1';
 }
 
+function frr_configure()
+{
+    return [
+        'frr_sync' => ['frr_configure_do'],
+    ];
+}
+
+function frr_configure_do($verbose = false)
+{
+    $model = new \OPNsense\Quagga\General();
+    if (!$model->manual_config->isEmpty()) {
+        return;
+    }
+    (new \OPNsense\Core\Backend())->configdpRun('template reload', ['OPNsense/Quagga']);
+}
+
 function frr_firewall($fw)
 {
     global $config;

net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/Api/ServiceController.php

@@ -38,7 +38,8 @@
 class ServiceController extends ApiMutableServiceControllerBase
 {
     protected static $internalServiceClass = '\OPNsense\Quagga\General';
-    protected static $internalServiceTemplate = 'OPNsense/Quagga';
+    // We intentionally only reload this template to allow manual_config for the templates
+    protected static $internalServiceTemplate = 'OPNsense/Quagga/rc_conf_d';
     protected static $internalServiceEnabled = 'enabled';
     protected static $internalServiceName = 'quagga';
 

net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/general.xml

@@ -3,8 +3,17 @@
         <id>general.enabled</id>
         <label>Enable</label>
         <type>checkbox</type>
+        <style>manual_config</style>
         <help>This will activate the routing service. Without enabling it globally, none of the individual services will run.</help>
     </field>
+    <field>
+        <id>general.manual_config</id>
+        <label>Manual config</label>
+        <type>checkbox</type>
+        <style>manual_config</style>
+        <advanced>true</advanced>
+        <help>Disable configuration file generation and manage the file (/usr/local/etc/frr/frr.conf) manually.</help>
+    </field>
     <field>
         <id>general.profile</id>
         <label>Profile</label>
@@ -16,12 +25,14 @@
         <id>general.enablecarp</id>
         <label>Enable CARP Failover</label>
         <type>checkbox</type>
+        <style>manual_config</style>
         <help>This will activate the routing service only on the master device. The backup device will stop the service completely.</help>
     </field>
     <field>
         <id>general.enablesnmp</id>
         <label>Enable SNMP AgentX Support</label>
         <type>checkbox</type>
+        <style>manual_config</style>
         <help>This will activate support for Net-SNMP AgentX.</help>
     </field>
     <field>
@@ -40,6 +51,7 @@
         <id>general.fwrules</id>
         <label>Firewall rules</label>
         <type>checkbox</type>
+        <style>manual_config</style>
         <help>Enable automatically created firewall rules, when additional policies are needed, disable this and define your own custom policies in the Firewall section.</help>
     </field>
 </form>

net/frr/src/opnsense/mvc/app/library/OPNsense/System/Status/FrrManualConfigStatus.php

@@ -0,0 +1,57 @@
+<?php
+
+/*
+ * Copyright (C) 2026 Deciso B.V.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice,
+ *    this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions in the documentation and/or other
+ *    materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+ * AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
+ * OR CONSEQUENTIAL DAMAGES INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES, LOSS OF USE, DATA, OR PROFITS, OR BUSINESS
+ * INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ * CONTRACT, STRICT LIABILITY, OR TORT INCLUDING NEGLIGENCE OR OTHERWISE
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+namespace OPNsense\System\Status;
+
+use OPNsense\Quagga\General;
+use OPNsense\System\AbstractStatus;
+use OPNsense\System\SystemStatusCode;
+
+class FrrManualConfigStatus extends AbstractStatus
+{
+    public function __construct()
+    {
+        $this->internalPriority = 2;
+        $this->internalPersistent = true;
+        $this->internalIsBanner = true;
+        $this->internalTitle = gettext('FRR manual configuration');
+        $this->internalScope = [
+            '/ui/quagga/*'
+        ];
+    }
+
+    public function collectStatus()
+    {
+        if (!(new General())->manual_config->isEmpty()) {
+            $this->internalMessage = gettext(
+                'Manual FRR configuration is enabled. Configuration file generation is disabled. Settings configured here may no longer affect the active FRR configuration.'
+            );
+            $this->internalStatus = SystemStatusCode::NOTICE;
+        }
+    }
+}

net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/General.xml

@@ -7,6 +7,7 @@
             <Default>0</Default>
             <Required>Y</Required>
         </enabled>
+        <manual_config type="BooleanField"/>
         <profile type="OptionField">
             <Required>Y</Required>
             <Default>traditional</Default>

net/frr/src/opnsense/mvc/app/views/OPNsense/Quagga/general.volt

@@ -45,6 +45,30 @@ POSSIBILITY OF SUCH DAMAGE.
                 updateServiceControlUI('quagga');
             }
         });
+
+        /* Manual configuration, hide all config elements except manual_config fields */
+        $("#general\\.manual_config").change(function() {
+            let manual_config = $(this).is(':checked');
+
+            if (manual_config) {
+                if (!$("#show_advanced_frm_general_settings").hasClass('fa-toggle-on')) {
+                    /* enforce advanced mode so the user notices the checkbox */
+                    $("#show_advanced_frm_general_settings").click();
+                }
+
+                $("#frm_general_settings").find('tr').each(function() {
+                    if ($(this).find('.manual_config').length == 0) {
+                        $(this).hide();
+                    } else {
+                        $(this).show();
+                    }
+                });
+            } else {
+                $("#frm_general_settings").find('tr').show();
+            }
+
+            $('.selectpicker').selectpicker('refresh');
+        });
     });
 </script>
 

net/frr/src/opnsense/scripts/frr/setup.sh

@@ -19,6 +19,9 @@ chown -R $user:$group /var/run/frr
 touch /var/log/frr.log
 chown $user:$group /var/log/frr.log
 
+# Reload templates here since we allow manual_config
+/usr/local/sbin/pluginctl -c frr_sync
+
 # register Security Associations
 /usr/local/opnsense/scripts/frr/register_sas
 

net/frr/src/opnsense/service/templates/OPNsense/Quagga/+TARGETS

@@ -1,4 +1,3 @@
-frr:/etc/rc.conf.d/frr
 frr.conf:/usr/local/etc/frr/frr.conf
 vtysh.conf:/usr/local/etc/frr/vtysh.conf
 ospf6d_carp.conf:/usr/local/etc/frr/ospf6d_carp.conf

net/frr/src/opnsense/service/templates/OPNsense/Quagga/rc_conf_d/+TARGETS

@@ -0,0 +1 @@
+frr:/etc/rc.conf.d/frr