> This could be improved for 6.6. Maybe you should set a marker in > the filesystem instead, indicating that rc.firsttime was already run. > The upgrade procedure could remove the marker.
This is pretty common during new installs. I think in 6.5 fw_update is run automatically when the system boots, so it should just take care of itself. If not, just run 'doas fw_update' once you have network connectivity.