Could the issue be that sys-net was set as a --property netvm= during the installation of mirage-firewall, and so it refuses to operate without it?
Could the issue be that sys-net was set as a --property netvm= during the installation of mirage-firewall, and so it refuses to operate without it?