TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Gadgets

    BSD Now

    Created by three guys who love BSD, we cover the latest news and have an extensive series of tutorials, as well as interviews with various people from all areas of the BSD community. It also serves as a platform for support and questions. We love and advocate FreeBSD, OpenBSD, NetBSD, DragonFlyBSD and TrueOS. Our show aims to be helpful and informative for new users that want to learn about them, but still be entertaining for the people who are already pros.
    The show airs on Wednesdays at 2:00PM (US Eastern time) and the edited version is usually up the following day.

    Advertise
    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    500: Guarding the Wire Mar 30, 2023

    Wireguard VPN Server with Unbound on OpenBSD, Auditing for OpenZFS Storage Performance, OpenBSD 7.2 on a Thinkpad X201, Practical Guides to fzf, Replacing postfix with dma, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    How To Set Up a Wireguard VPN Server with Unbound on OpenBSD

    Auditing for OpenZFS Storage Performance

    News Roundup

    Some notes on OpenBSD 7.2 on a Thinkpad X201

    fzf

    • A Practical Guide to fzf: Building a File Explorer
    • A Practical Guide to fzf: Shell Integration *** ### Replacing postfix with dma *** ###Tarsnap
      • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dennis - Thanks

    • Luna - Trillian

    • Lyubomir - ipfw question

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    499: Dan Langille Interview Mar 23, 2023

    We’re interviewing Dan Langille about his new server project. He’ll talk to us about the things he’s building, some of which are a bit out of the ordinary. We’re also talking about BSDCan 2023 and what to expect after returning to an in-presence conference format. Enjoy!

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Interview - Dan Langille - dan@langille.org / @twitter

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Special Guest: Dan Langille.


    498: Dropping Privileges Mar 16, 2023

    OpenZFS auditing for storage Performance, Privilege drop; privilege separation; and restricted-service operating mode in OpenBSD, OPNsense 23.1.1 release, Cloning a System with Ansible, FOSDEM 2023, BSDCan 2023 Travel Grants

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    OpenZFS auditing for storage Performance

    Privilege drop, privilege separation, and restricted-service operating mode in OpenBSD

    News Roundup

    OPNsense 23.1.1 released

    Cloning a System with Ansible

    FOSDEM 2023

    BSDCan 2023 Travel Grant Application Now Open

    The Undeadly Bits

    Game of Trees milestone
    Game of Trees Daemon - video and slides (May make the older game of trees obsolete)
    amd64 execute-only committed to -current
    Using /bin/eject with USB flash drives
    Tunneling vxlan(4) over WireGuard wg(4)
    Console screendumps
    Execute-only status report
    OpenBSD in Canada
    Privilege drop, privilege separation, and restricted-service operating mode in OpenBSD
    Theo de Raadt on pinsyscall(2)

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Kevin - PLUG
    • Luna - FOSDEM ***
      • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    497: Random Relinking SSHD Mar 09, 2023

    How to Catch a Bitcoin Miner, A Call For More Collaboration, zstd updates, hating hackathons, How to monitor multiple log files at once, KeePassXC, sshd random relinking at boot, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Sysadmin Series - How to Catch a Bitcoin Miner

    A Call For More Collaboration & Harmony Among BSD Hardware Drivers

    • [Slides](https://fosdem.org/2023/schedule/event/bsd_driver_harmony/attachments/slides/5976/export/events/attachments/bsd_driver_harmony/slides/5976/BSD_Driver_Harmony_FOSDEM.pdf)
    • Video is embedded on the schedule event page
    

    Printing on FreeBSD

    News Roundup

    zstd updates

    I hate hackathons

    How to monitor multiple log files at once

    Notes to self: KeePassXC

    sshd random relinking at boot

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Nelson - aix.md
    • Adrian - vbsdcon
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    496: Hacking the CLI Mar 02, 2023

    Automation and Hacking Your FreeBSD CLI, Run your own instant messaging service on FreeBSD, Watch Netflix on FreeBSD, HardenedBSD January 2023 Status Report, How To Set Up SSH Keys With YubiKey as two-factor authentication, OpenSSH fixes double-free memory bug that’s pokable over the network, A late announcement, but better late than never, Next NYC*BUG and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Automation and Hacking Your FreeBSD CLI

    Run your own instant messaging service on FreeBSD

    News Roundup

    Watch Netflix on FreeBSD

    HardenedBSD January 2023 Status Report

    How To Set Up SSH Keys With YubiKey as two-factor authentication (U2F/FIDO2)

    OpenSSH fixes double-free memory bug that’s pokable over the network

    A late announcement, but better late than never

    Next NYC*BUG: March? April? Certainly May!

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Daniel - Plan 9 lives
    • Jason - nvd driver
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    495: Limited Jail Time Feb 23, 2023

    FreeBSD Status Report Fourth Quarter 2022, How to limit a jail, the parallel port, Hello System 0.8, Solbournes in space, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Status Report Fourth Quarter 2022

    How to limit a jail

    News Roundup

    The parallel port

    Hello System 0.8 is out

    Solbournes in space

    Beastie Bits

    • Collecting notes for future “historians” was: Earliest UNIX Workstations?
    • New Open Position: FreeBSD Userland Software Developer
    • The One Lone Audiobook now exclusive on my store ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    494: Unix workstation extinction Feb 16, 2023

    Mass extinction of UNIX workstations, Determine Who Can Log In to an SSH Server, Factors When Considering FreeBSD vs. Linux Packages, A Visual Guide to SSH Tunnels, Harvesting the Noise While it’s Fresh, Bastille - The Jail Manager on FreeBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The mass extinction of UNIX workstations

    whoarethey: Determine Who Can Log In to an SSH Server

    News Roundup

    FreeBSD vs. Linux 5 Factors When Considering FreeBSD vs. Linux: Packages

    A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding

    Harvesting the Noise While it’s Fresh, Revisited

    Bastille - The Jail Manager on FreeBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    493: Dotfile Management Feb 09, 2023

    Write Admin tools from Day One, Differentiating between Data Security and Data Integrity, 45 year-old Unix tool is finally getting an upgrade, OpenBSD 7.2 on an ODROID-HC4, Dotfiles Management, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Write Admin tools from Day One

    Differentiating between Data Security and Data Integrity

    News Roundup

    This 45 year-old Unix tool is finally getting an upgrade

    Installing OpenBSD 7.2 on an ODROID-HC4

    Dotfiles Management

    Beastie Bits

    FreeBSD Journal - November/December 2022 - Observability and Metrics
    HAMMER2 file system for NetBSD
    Running OpenBSD 7.2 on your laptop is really hard (not)
    MinIO on OpenBSD 7.2: Install
    WireGuard VPN on OpenBSD
    A tool for glamorous shell scripts
    Visualize your git commits with a heat map in the terminal

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    492: Feeling for NetBSD Feb 02, 2023

    Writing your own operating system, Continuous Integration and Quality Assurance Update, feeling for the NetBSD community, Testing wanted: execute-only on amd64, GCC uses Modula-2 and Rust, do they work on OpenBSD, Unix is dead; long live Unix, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Part 1: Writing your own operating system

    2022 in Review: Continuous Integration and Quality Assurance Update

    News Roundup

    I feel for the NetBSD community

    Testing wanted: execute-only on amd64

    GCC now includes Modula-2 and Rust. Do they work on OpenBSD?

    Unix is dead. Long live Unix!

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [Kevin - Advent of Computing podcast covers BSD](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/492/feedback/Kevin%20-%20Advent%20of%20Computing%20podcast%20covers%20BSD.md)
    • [ilo - thanks](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/492/feedback/ilo%20-%20thanks.md)
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    491: Catch the Spammers Jan 26, 2023

    Dragonfly BSD 6.4 is out, Running OpenZFS – Choosing Between FreeBSD and Linux, OpenBSD Mastery: Filesystems ebook leaks, catching 71% spam, crazy unix shell prompts, Linux Binary Compatibility: Ubuntu on FreeBSD, Reproducible Builds Summit Venice 2022, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Dragonfly BSD 6.4 is out

    Running OpenZFS – Choosing Between FreeBSD and Linux

    News Roundup

    “OpenBSD Mastery: Filesystems” ebook leaking out

    Can Your Spam-eater Manage to Catch Seventy-one Percent Like This Other Service?

    Crazy unix shell prompts

    Linux Binary Compatibility: Ubuntu on FreeBSD

    Reproducible Builds Summit Venice 2022

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Felix - Managing Jails with ansible
    • John Baldwin - bhyve networking setup article
    • Welton - bhyve webadmin
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    490: New Year’s Plan9’ing Jan 19, 2023

    FreeBSD Foundation’s Software Development review of 2022, what can we learn from Vintage Computing, OpenBSD KDE Status Report 2022, a Decade of HardenedBSD, In Praise of Plan9, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    2022 in Review: Software Development

    What can we learn from Vintage Computing

    News Roundup

    OpenBSD KDE Status Report 2022

    A Decade of HardenedBSD

    In Praise of Plan9

    Beastie Bits

    LibreSSL 3.7.0 Released
    OPNsense 22.7.10 released
    BSDCan 2023 call for papers
    How to lock OpenSSH authentication agent
    Once upon a time long ago, I was sitting alone in the UCLA ARPANET site...

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    489: Refreshing Perspective Jan 12, 2023

    FreeBSD vs. Linux – Networking, HDMI sound output through TV speakers on FreeBSD 13, Getting started with tmux, Samba Active Directory, OpenIKED 7.2 released, FreeBSD Plasma 5 GUI Install, DHCP server howto in German, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD vs. Linux – Networking

    (Solved), HDMI sound output through TV speakers Freebsd 13 or @4 plus VCHIQ audio patch - Raspberry Pi Forums

    News Roundup

    Getting started with tmux

    Samba Active Directory

    OpenIKED 7.2 released

    FreeBSD Plasma 5 GUI Install

    • Original German Article ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    488: Old ping(8) bug Jan 05, 2023

    Finding a 24 year old bug in ping(8), The Role of Operating Systems in IOT, Authentication gateway with SSH on OpenBSD, FreeBSD 12.4 is out, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Fuzzing ping(8) … and finding a 24 year old bug

    The Role of Operating Systems in IOT

    News Roundup

    Authentication gateway with SSH on OpenBSD

    FreeBSD 12.4 is out

    Beastie Bits

    Vagrant FreeBSD Boxbuilder
    LibreSSL 3.7.0 Released
    OPNsense 22.7.9 released
    BIOS Memory Map for vmd(8) Rewrite in Progress

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    487: EuroBSDcon Interviews Pt. 2 Dec 29, 2022

    This year end episode of BSDNow features a trip report to EuroBSDcon by Mr. BSD.tv, as well as an interview with FreeBSD committer John Baldwin. Happy New Year, 2023!

    NOTES***
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    EuroBSDCon 2022 Trip Report

    Interview 3 - John Baldwin - email@email / @twitter

    Interview topic

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    486: EuroBSDcon interviews Dec 22, 2022

    This special episode features two interviews we did at EuroBSDcon in Vienna this year. We talk with FreeBSD developers about how they got started, their current projects and more. Also, consider donating to your favorite BSD Foundation to keep the projects going.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Help the OpenBSD Foundation Reach Its 2022 Funding Goal

    • [FreeBSD Foundation Donation Link](https://freebsdfoundation.org/donate/)
    • [NetBSD Foundation Donation Link](http://www.netbsd.org/donations/#how-to-donate)
    

    Interview 1 - Brooks Davis - email@email / @twitter

    Interview topic

    Interview 2 - Olivier Cochard-Labbe - email@email / @twitter

    Interview topic

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***

    Feedback/Questions

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    485: FreeBSD Home Assistant Dec 15, 2022

    Tails of the M1 GPU, Getting Home Assistant running in a FreeBSD 13.1 jail, interview with AWK creator Dr. Brian Kernighan, Next steps toward mimmutable, Unix's (technical) history is mostly old now, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Tails of the M1 GPU

    Getting Home Assistant running in a FreeBSD 13.1 jail

    News Roundup

    A brief interview with AWK creator Dr. Brian Kernighan

    Next steps toward mimmutable, from deraadt@

    Unix's (technical) history is mostly old now

    MWL Update

    • Fediverse Servers, plus mac_portacl on FreeBSD
    • Fifty Books. Thirty Years. What Next?
    • Mailing List Freebies

    Beastie Bits

    • More #FreeBSD Power Saving Notes
    • Hacker Stations
    • The Cult of DD
    • RavynOS
      • ravynOS (previously called airyxOS) is an open-source operating system based on FreeBSD, CMU Mach, and Apple open-source code that aims to be compatible with macOS applications and has no hardware restrictions.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    484: Birth of stderr Dec 08, 2022

    Virtualization showdown, The Birth of Standard Error, why Steam started picking a random font, Maintaining Sufficient Free Space with ZFS, updated Apple M1/M2 bootloader, code, FreeBSD on my workstation, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Virtualization showdown – FreeBSD’s bhyve vs. Linux’s KVM

    The Birth of Standard Error

    News Roundup

    Investigating why Steam started picking a random font

    Curious Case of Maintaining Sufficient Free Space with ZFS

    Call for testing on updated Apple M1/M2 bootloader code

    FreeBSD on my workstation

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - Initial Setup
    • Joseph - openbsd and postgresql
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    483: ZFS Time Machine Dec 01, 2022

    Research Unix Version 6 in the Open SIMH PDP-11 Emulator, The Hot Tub Time Machine is Your ZFS Turn-Back-Time Method, NFS on NetBSD: server and client side, HardenedBSD October 2022 Status Report, Nushell : Introduction, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Installing and Using Research Unix Version 6 in the Open SIMH PDP-11 Emulator

    httm – The Hot Tub Time Machine is Your ZFS Turn-Back-Time Method

    News Roundup

    NFS on NetBSD: server and client side

    HardenedBSD October 2022 Status Report

    Nushell : Introduction

    Beastie Bits

    Unix Pipe Game
    Slides - The “other” FreeBSD optimizations used by Netflix to serve video at 800Gb/s from a single server
    My FreeBSD Friday Lecture: The Writing Scholar’s Guide to FreeBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dan - Response to Hans
    • Johnny - bhyve question
    • Manuel - EuroBSDcon social event
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    482: BSD XFCE Desktop Nov 24, 2022

    5 Key Reasons to Consider Open Source Storage, OpenBSD Minimalist Desktop, BSD XFCE, Alpine Linux VM on bhyve - with root on ZFS, FreeBSD Jail Quick Setup with Networking, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    5 Key Reasons to Consider Open Source Storage Over Commercial Offerings

    OpenBSD Minimalist Desktop

    News Roundup

    BSD-XFCE

    Creating an Alpine Linux VM on bhyve - with root on ZFS (optionally encrypted)

    FreeBSD Jail Quick Setup with Networking (2022)

    Beastie Bits

    EuroBSDcon videos are now up
    LibreSSL 3.6.1 released
    Raspberry Pi 4 with FreeBSD 13-RELEASE: A Perfect Miniature Homelab

    AsiaBSDcon 2023 CfP

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • John - Allan's meetup
    • Matthew - atime and a question
    • Valentin - Becoming a FreeBSD Developer
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    481: Fiery Crackers Nov 17, 2022

    FreeBSD Q3 2022 status report, Leveraging MinIO and OpenZFS to avoid vendor lock in, FreeBSD on Firecracker platform, How Much Faster Is Making A Tar Archive Without Gzip, Postgres from packages on OpenBSD, Upgrading an NVMe zpool from 222G to 1TB drives, Don't use Reddit for Linux or BSD related questions, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Quarterly Status Report Third Quarter 2022

    Avoid Infrastructure Vendor Lock-in by leveraging MinIO and OpenZFS

    Announcing the FreeBSD/Firecracker platform

    News Roundup

    How Much Faster Is Making A Tar Archive Without Gzip?

    PostgreSQL from packages on OpenBSD

    Upgrading an NVMe zpool from 222G to 1TB drives

    PSA: Don't use Reddit for Linux or BSD related questions

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Hinnerk - vnet jails
      Tom’s response example: https://adventurist.me/posts/00304

    • Hugo - Apple M2

    • kevin - emacs backspace
      )

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    480: OpenBSD 7.2 Nov 10, 2022

    OpenBSD 7.2 and FuguIta have been released, Learn the Whys and Hows with the FreeBSD Sec Team, how to get notified about FreeBSD updates, using unbound for ad blocking on OpenBSD, further memory protections on OpenBSD current, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    OpenBSD 7.2 has been released

    • FuguIta 7.2 is out as well *** ### Keeping FreeBSD Secure: Learn the Whys and Hows with the FreeBSD Sec Team

    News Roundup

    Howto: be notified of FreeBSD upgrades, security updates and package updates at login

    Ads blocking with OpenBSD unbound(8)

    Further memory protections committed to -current

    Beastie Bits

    • [“OpenBSD Mastery: Filesystems” Print/Ebook Bundle Preorder](https://mwl.io/archives/22352)
    • [Klara is hiring a FreeBSD Kernel Developer](https://klarasystems.com/careers/freebsd-kernel-developer/)
    • [FreeBSD 12.4-BETA1 Now Available](https://lists.freebsd.org/archives/freebsd-stable/2022-October/000920.html)
    • [Hunting kernel lock and interrupt latency](https://mail-index.netbsd.org/tech-kern/2022/10/30/msg028499.html)
    • [EuroBSDcon 2022 videos available](https://undeadly.org/cgi?action=article;sid=20221027232308)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Charles - BSD Now Bingo
    • Jake - FreeBSD Security defaults
    • Sam - FreeBSD and SSDs
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    479: OpenBSD Docker Host Nov 03, 2022

    EuroBSDcon 2022 as first BSD conference, Red Hat’s OpenShift vs FreeBSD Jails, Running a Docker Host under OpenBSD using vmd(8), history of sending signals to Unix process groups, Toolchains adventures - Q3 2022, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    EuroBSDCon 2022, my first BSD conference (and how they are different)

    Red Hat’s OpenShift vs FreeBSD Jails

    News Roundup

    The history of sending signals to Unix process groups

    Running a Docker Host under OpenBSD using vmd(8)

    Toolchains adventures - Q3 2022

    Beastie Bits

    -current has moved to 7.2
    Several /sbin daemons are now dynamically-linked
    Announcing the pkgsrc 2022Q3 branch

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Hans - datacenters and dust
    • Tim - Boot issue
    • aaron- dwm tiling ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    478: Debunking sudo myths Oct 27, 2022

    Open Source in Enterprise Environments, Your Comprehensive Guide to rc(8): FreeBSD Services and Automation, How Rob Pike got hired by Dennis Richie, what FreeBSD machines rubenerd uses, new debugbreak command, 7 sudo myths debunked

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Open Source in Enterprise Environments - Where Are We Now and What Is Our Way Forward?

    Your Comprehensive Guide to rc(8): FreeBSD Services and Automation

    News Roundup

    How Rob Pike got hired by Dennis Richie

    Cartron asks what FreeBSD machines I use

    My new debugbreak command

    7 sudo myths debunked

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Andy - sharing and acls
    • Reptilicus Rex - boot environments
    • i3luefire - byhve issue ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    477: Uninitialized Memory Disclosures Oct 20, 2022

    Analyzing BSD Kernels for Uninitialized Memory Disclosures Using Binary Ninja, Sharing Dual-Licensed Drivers between Linux and FreeBSD, favorite Things About The OpenBSD Packet Filter Tools, How to trigger services restart after OpenBSD update, Gems from the Man Page Trenches, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Mindshare: Analyzing Bsd Kernels for Uninitialized Memory Disclosures Using Binary Ninja

    Sharing Dual-Licensed Drivers between Linux and FreeBSD

    News Roundup

    A Few of My Favorite Things About The OpenBSD Packet Filter Tools

    How to trigger services restart after OpenBSD update

    Gems from the Man Page Trenches

    Beastie Bits

    The MIPS ThinkPad
    Nix Gems
    Running PalmOS without PalmOS
    "OpenBSD Mastery: Filesystems" draft done!

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - zfs and databases
    • Kevin - EMACS
    • Michal - virtual OSS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    476: Warren Toomey interview Oct 13, 2022

    In this special episode, we interview Warren Toomey from the Unix Historical Society. We chat about his involvement in preserving old Unix systems and why that is important.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Interview - Warren Toomey - wkt@tuhs.org

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Warren Toomey.


    475: Prompt Injection Attacks Oct 06, 2022

    Prompt injection attacks against GPT-3, the History of Package Management on FreeBSD, A fresh look at FreeBSD, File Management Tools for Your Favorite Shell, Quick Guide about Video Playback on FreeBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Prompt injection attacks against GPT-3

    A Quick Look at the History of Package Management on FreeBSD

    News Roundup

    A fresh look at FreeBSD

    File Management Tools for Your Favorite Shell

    Video Playback on FreeBSD – Quick Guide

    Beastie Bits

    ps(1) gains support for tree-like display of processes
    ... interesting old-timey UNIXes ...
    A retro style online SSH client to play Nethack
    The Good, the Bad, and the Ugly: The Unix! Legacy
    Game of Trees 0.75 released

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ken - HPR
    • Kevin - FreeBSD and EMACS
    • Nathan - Handbook contribution Question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    474: EuroBSDcon 2022 Sep 29, 2022

    Deploying FreeBSD on Oracle Cloud, A Tale of 300,000 Imaginary Friends, EuroBSDcon 2022 recap, OpenBSD Mastery: Filesystems” Status Report, OpenBGPD 7.6 Released, immutable userland mappings, Portable OpenSSH commits now SSH-signed, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Deploying FreeBSD on Oracle Cloud

    The Things Spammers Believe - A Tale of 300,000 Imaginary Friends

    EuroBSDcon 2022

    News Roundup

    “OpenBSD Mastery: Filesystems” Status Report

    OpenBGPD 7.6 Released

    OpenBSD may soon gain further memory protections: immutable userland mappings

    Portable OpenSSH commits now SSH-signed

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    473: Rusty Kernel Modules Sep 22, 2022

    Writing FreeBSD kernel modules in Rust, Details behind the FreeBSD aio LPE, Linux subsystem for FreeBSD, FreeBSD Journal: Science, Systems, and FreeBSD, NetBSD improves Amiga support, OpenBSD on Scaleway Elastic Metal, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Writing FreeBSD Kernel modules in Rust

    Details behind the FreeBSD aio LPE

    News Roundup

    Linux Subsystem for FreeBSD

    FreeBSD Journal: Science, Systems, and FreeBSD

    NetBSD improves its support for the Commodore Amiga

    Installing OpenBSD on Scaleway Elastic Metal

    Beastie Bits

    • /usr/games removed from the default $PATH

    • How to install and configure mDNSResponder

    • How to use consistent exit codes in shell scripts

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [TheHolm - zfs question)[https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/469/feedback/TheHolm%20-%20zfs%20question.md] ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    472: Consistent Exit Code Sep 15, 2022

    FreeBSD on the Framework Laptop, Win32 is the only stable ABI on Linux, why OpenBSD’s documentation is so good, configure dma for mail delivery in jails on internet hosts, introducing muxfs, RAID1C boot support, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD on the Framework laptop

    Win32 is the only stable ABI on Linux

    News Roundup

    Why is the OpenBSD documentation so good?

    How I configure dma for mail delivery in jails on my internet hosts

    Introducing muxfs

    RAID 1C boot support added

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [Oliver - shell tip)[https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/469/feedback/Oliver%20-%20shell%20tip.md]
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    471: De-Penguinization Sep 08, 2022

    Ten Things To Do After Installing FreeBSD, BSD for Linux users, r2k22 Hackathon Report on rpki-client, Configuring OpenIKED, De-Penguin Me, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Ten Things To Do After Installing FreeBSD

    News Roundup

    hpr3655 :: BSD for Linux users

    r2k22 Hackathon Report: Job Snijders (job@) on rpki-client and more

    Configuring OpenIKED

    De-Penguin Me

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    470: 0mp interview Sep 01, 2022

    In this special episode, we are interviewing Mateusz Piotrowski about his various roles in the FreeBSD project, his ports work, and a few other interesting things he’s involved with. Enjoy this interview episode, we’ll be back with a regular episode next week.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Interview - Mateusz Piotrowski - 0mp@freebsd.org / @0mpts

    Interview

    • BR: Welcome Mateusz. Can you tell our audience a bit about yourself and how you got started with Unix/BSD?
    • TJ: What can we blame you for (prior/current work, planned projects)?
    • BR: You served as the first doceng secretary and joined the FreeBSD core team in this term. What interested you in these roles and what do you want to accomplish in this term?
    • TJ: You are also busy with maintaining some FreeBSD ports. What ports are those?
    • BR: Can you tell us a bit about your thesis work?
    • TJ: What does open source work mean for you?
    • BR: Do you have a cool Unix/BSD tip for us?
    • TJ: Is there anything else that you'd like to mention before we let you go?

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Mateusz Piotrowski.


    469: Ctrl-C Reset Aug 25, 2022

    FreeBSD Q2 2022 Status Report, FreeBSD in Science, fastest yes(1) in the west, Why Programmers Can’t "Reset" Programs With Ctrl-C, Run Slack in FreeBSD’s Linuxulator, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Q2 2022 Status Report

    FreeBSD in Science

    News Roundup

    Fastest yes(1) in the west

    Ctrl-C: Why Programmers Can’t "Reset" Programs With Ctrl-C, but Used to Be Able To, and Why They Should Be Able to Again

    Run Slack in FreeBSD’s Linuxulator

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    468: Apples and CHERI Aug 18, 2022

    Advocating for FreeBSD in 2022 and Beyond, NetBSD 9.3 released, OPNsense 22.7 available, CHERI-based computer runs KDE for the first time, Run FreeBSD 13.1-RELEASE for ARM64 in QEMU on Apple Silicon Mac, and more

    Notes
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Advocating for FreeBSD in 2022 and Beyond

    NetBSD 9.3 released

    News Roundup

    OPNsense 22.7 released

    CHERI-based computer runs KDE for the first time

    Guide: Run FreeBSD 13.1-RELEASE for ARM64 in QEMU on Apple Silicon Mac

    Beastie Bits

    • [In -current, dhclient(8) now just logs warnings and executes ifconfig(8)](http://undeadly.org/cgi?action=article;sid=20220703114819)
    • [Freshly installed #NetBSD 4.0.1 booting on a 80386 DX40 with 8MB of RAM in 2022](https://twitter.com/lefinnois/status/1553246084675375104)
    • [nerdctl](https://twitter.com/woodsb02/status/1554481441060560898?s=28&t=8K7_A1RiWnCDU_Mme4_Yqw)
    • [Even more Randomness](https://undeadly.org/cgi?action=article;sid=20220731110742)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    467: Minecraft on NetBSD Aug 11, 2022

    Installing BSDs on Cubieboard1, Self-hosting a static site with OpenBSD, httpd, and relayd, NetBSD can also run a Minecraft server, A Little Story About the yes Unix Command, Shell History: Unix, OpenBGPD 7.5 released, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Installing BSDs on Cubieboard1

    Self-hosting a static site with OpenBSD, httpd, and relayd

    News Roundup

    NetBSD can also run a Minecraft server

    A Little Story About the yes Unix Command

    Shell History: Unix

    OpenBGPD 7.5 released

    Beastie Bits

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ludensen - Feedback

    • Vidar - OpenRGB

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    466: cat(1)’s efficiency Aug 04, 2022

    Contributing to Open Source Beyond Software Development, bringing TLS 1.3 to the Internet of Old Things, How efficient can cat(1) be, boost the speed of Unix shell programs, Running FreeBSD VNET Jails on AWS EC2 with Bastille, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Contributing to Open Source Beyond Software Development

    Crypto Ancienne 2.0 now brings TLS 1.3 to the Internet of Old Things (except BeOS)

    News Roundup

    How efficient can cat(1) be?

    Technique significantly boosts the speeds of programs that run in the Unix shell

    • [binpa.sh](http://binpa.sh/)
    

    Running FreeBSD VNET Jails on AWS EC2 with Bastille

    Beastie Bits

    Game of Trees 0.74 released
    OpenBSD -current has moved to 7.2-beta
    A Unix Command Line Crash Course
    BSD.DOG vimrc
    FreeBSD Speedruns

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    465: Deep Space Debugging Jul 28, 2022

    Debugging Lisp in Deep Space, 0 Dependency Websites with OpenBSD & AsciiDoc, Deleting old snapshots on FreeBSD, Full multiprocess support in lldb-server, Basic fix between pf tables and macros, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    NASA Programmer Remembers Debugging Lisp in Deep Space

    0 Dependency Websites with OpenBSD & AsciiDoc

    News Roundup

    FreeBSD - Deleting old snapshots

    Full multiprocess support in lldb-server

    Basic fix between pf tables and macros on FreeBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ben - Jail Question
    • Malcolm - encryption
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    464: Compiling with kefir Jul 21, 2022

    From 0 to bhyve on FreeBSD, Analyze OpenBSD’s Kernel with Domain-Specific Knowledge, OpenBSD Webzine: ISSUE #10, HardenedBSD June 2022 Status Report, two new C compilers: chibicc and kefir in OpenBSD, SSD TRIM in NetBSD HEAD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    From 0 to Bhyve on FreeBSD 13.1

    Analyze OpenBSD’s Kernel with Domain-Specific Knowledge

    News Roundup

    OpenBSD Webzine: ISSUE #10

    HardenedBSD June 2022 Status Report

    OpenBSD has two new C compilers: chibicc and kefir

    SSD TRIM in NetBSD HEAD (-current)

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    463: The 1.0 Legend Jul 14, 2022

    Differences between base and ports LLVM in OpenBSD, Netgraph for FreeBSD’s bhyve Networking, Audio on FreeBSD – Quick Guide, FreeBSD’s Legend starts at 1.0, Hacker News running by FreeBSD, TrueNAS 13, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Differences between base and ports LLVM in OpenBSD

    Using Netgraph for FreeBSD’s bhyve Networking

    News Roundup

    Audio on FreeBSD – Quick Guide

    [Legends start at 1.0! – FreeBSD in 1993]

    • Part 1
    • Part 2 *** ### Hacker News running by FreeBSD. Take that, Linux! *** ### TrueNAS 13 ***

    Beastie Bits

    • Notable OpenBSD news you may have missed, 2022-06-28 edition
    • rEFInd design for all the BSDs
    • OpenBGPD 7.4 released
    • Hotfix GhostBSD 22.06.18 ISO is now available *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - Jails Question

    • Freezr - A few questions

    • A different Brad - Drive question

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    462: OpenBSD Sales Pitch Jul 07, 2022

    The Design and Implementation of the NetBSD rc.d system, selling OpenBSD as a salesperson, Speeding up autoconf with caching, Allowing non-root execution of a jailed application, Configure login(1) and sshd(8) for YubiKey on OpenBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The Design and Implementation of the NetBSD rc.d system

    How I would sell OpenBSD as a salesperson

    News Roundup

    Speeding up autoconf with caching

    Allowing non-root execution of a jailed application

    Configure login(1) and sshd(8) for YubiKey on OpenBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Glen - Thanks Todd

    • Karl - Memory Question

    • alejandro - Tom's laptop

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    461: Persistent Memory Allocation Jun 30, 2022

    Q1 FreeBSD Quarterly Status Report 2022, Nginx on OpenBSD 7.1, Persistent Memory Allocation, Colorize your BSD shell, cgit With Gitolite and Nginx on FreeBSD 13, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Quarterly Status Report First Quarter 2022

    Installing Nginx on OpenBSD 7.1

    News Roundup

    Live Webinar: Open-source Virtualization: Getting started with bhyve

    • Hosted by Jim Salter and Allan Jude
    • Live July 12th at 13:00 ET
    • Available on-demand a few days later

    Persistent Memory Allocation

    Colorize your BSD shell

    How to Install cgit With Gitolite and Nginx on FreeBSD 13

    EuroBSDCon 2022 (Austria) Program announced

    • Come to Austria and learn about the latest happenings in the BSDs
    • 2 days of tutorials, and 2 days of 3 concurrent tracks of talks
    • Registration is open now. See you there! ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - Drive question
    • Carl - Wiring question
    • Jon - Jails question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    460: OpenBSD airport folklore Jun 23, 2022

    Containerd gains support for launching Linux containers on FreeBSD, OpenBSD 7.1 on PINE64 RockPro64, true minimalistic window manager does not exist, OpenBSD folklore, HardenedBSD May 2022 Status Report, DragonFlyBSD 6.2.2 out, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Containerd gains support for launching Linux containers on FreeBSD

    • Uses Linux compat and the Linux Jails concept to deploy a full Linux container userland on FreeBSD

    OpenBSD 7.1 on PINE64 RockPro64

    News Roundup

    Live Webinar: Open-source Virtualization: Getting started with bhyve

    • Hosted by Jim Salter and Allan Jude
    • Live July 12th at 13:00 ET
    • Available on-demand a few days later

    The True Minimalistic Window Manager Does Not Exist

    OpenBSD folklore and share/misc/airport

    HardenedBSD May 2022 Status Report

    DragonFlyBSD 6.2.2 out

    • Changelog ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Norbert - question
    • Paulo - network question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    459: NetBSD Kernel benchmark Jun 16, 2022

    Evaluating FreeBSD CURRENT for Production Use, Time Machine-like Backups on OpenBSD, FreeBSD on the Graviton 3, Compiling the NetBSD kernel as a benchmark, Network Management with the OpenBSD Packet Filter Toolset from BSDCan 2022, Hardware Detection & Diagnostics for New FreeBSD Users, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Evaluating FreeBSD CURRENT for Production Use

    Time Machine like Backups on OpenBSD

    News Roundup

    FreeBSD on the Graviton 3

    Compiling the NetBSD kernel as a benchmark

    Network Management with the OpenBSD Packet Filter Toolset from BSDCan 2022

    Hardware Detection & Diagnostics for New FreeBSD Users & PCs

    Beastie Bits

    • [NetBSD - Announcing Google Summer of Code 2022 projects](https://blog.netbsd.org/tnf/entry/announcing_google_summer_of_code3)
    • [Welcome FreeBSD Google Summer of Code Participants](https://freebsdfoundation.org/blog/welcome-freebsd-google-summer-of-code-participants/)
    • [Network from Scratch](https://www.networksfromscratch.com)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    458: Traceroute interpretation Jun 09, 2022

    Fundamentals of the FreeBSD Shell, Spammers in the Public Cloud, locking user accounts properly, overgrowth on NetBSD, moreutils, ctwm & spleen, interpreting a traceroute, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Fundamentals of the FreeBSD Shell

    Spammers in the Public Cloud, Protected by SPF; Intensified Password Groping Still Ongoing; Spamware Hawked to Spamtraps

    News Roundup

    A cautionary tale about locking Linux & FreeBSD user accounts

    Overgrowth runs on NetBSD

    moreutils

    NetBSD, CTWM, and Spleen

    How to properly interpret a traceroute or mtr

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Lets talk a bit about some of the events happening this year, BSDCan in virtual this weekend, emfcamp is this weekend too and in person, MCH is this summer and eurobsdcon is in september. How were the postgres conferences benedict?

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    457: The NetBSD Wheelbarrow Jun 02, 2022

    Journey to ZFS RAIDZ1 on NetBSD, FreeBSD networking basics: WiFi and Bluetooth, smuggling code into the playstation via NetBSD driver hole, KDE FreeBSD CI, remembering buildtool, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The journey to ZFS raidz1 with different sized disks (On NetBSD) (Wheelbarrow optional)

    FreeBSD Networking Basics: WiFi and Bluetooth

    News Roundup

    Playstation: Hole in NetBSD driver could allow code smuggling

    • Archive link if the page is down (no images)
    • Original Announcment
    • German Article

    KDE-FreeBSD CI

    Remembering Buildtool

    Beastie Bits

    By the Way... Kubernetes for FreeBSD
    FreeBSD Games Directory
    Candlelit Console patch set to the framebuffer console

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dan - A couple things
    • Paul - BSD Business Justifications
    • Todd - Feedback to prior feedback
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    456: FreeBSD 13.1 May 26, 2022

    FreeBSD 13.1 is released, Unix command line conventions over time, Branching for NetBSD 10, Microbhyve, Own your Calendar and Contacts with OpenBSD, the PSARC case for ZFS, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD 13.1 Release is available

    Unix command line conventions over time

    News Roundup

    Branching for NetBSD 10

    Microbyhve

    Own Your Calendar & Contacts With OpenBSD, Baïkal, and FOSS Android

    Twenty years ago today, Jeff filed the PSARC case for the ZFS filesystem

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Scott - FreeBSD and supercomputing
    • Nick - Thanks and some shout outs
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    455: Ken Thompson Singularity May 19, 2022

    OpenBSD is the Perfect OS post Nuclear Apocalypse, Multiprocess support for LLDB, porting the new Hare compiler to OpenBSD, Writing my first OpenBSD game using Godot, FreeBSD 13 on Thinkpad T460s, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    OpenBSD is the Perfect OS post Nuclear Apocalypse

    Multiprocess support for LLDB

    News Roundup

    I ported the new Hare compiler to OpenBSD

    Writing my first OpenBSD game using Godot

    FreeBSD 13 on Thinkpad T460s

    Beastie Bits

    Open Source Voices interview with Deb Goodkin
    Tachyum Successfully Runs FreeBSD in Prodigy Ecosystem, Expands Open-Source OS Support
    MidnightBSD Minor Update 2.1.7
    LibreSSL 3.5.2 Released
    OpenBGPD 7.3 is out
    Playing the game Bottomless on OpenBSD
    Windows Central: OpenBSD already has a version for Apple Silicon
    OpenBSD Webzine #9 is out
    In the "Everone makes mistakes catagory" : I forgot to enable compression on ZFS
    "Ken Thompson is a singularity" ~Brian Kernighan

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ben - Securing FreeBSD

    • Dave - BSD certifications

    • Sam - maintaining a port

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    454: Compiling 50% faster May 12, 2022

    OpenBSD 7.1 is out, Building Your Own FreeBSD-based NAS with ZFS Part 2, Let's try V on OpenBSD, Waiting for Randot, Compiling an OpenBSD kernel 50% faster, A Salute for 10+ years of service, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    OpenBSD 7.1 is out

    Building Your Own FreeBSD-based NAS with ZFS Part 2

    News Roundup

    Let's try V on OpenBSD

    Waiting for Randot (or: nia and maya were right and I was wrong)

    Compiling an openbsd kernel 50% faster

    A Salute for 10+ years of service https://archive.ph/JL5hf (if the site is down)

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Glenn - Toms Home Lab

    • I_am_chunky_pie - unix tool writing

    • Mike - Making Routers

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    453: TwinCat/BSD Hypervisor May 05, 2022

    Building Your Own FreeBSD-based NAS, Writing a device driver for Unix V6, EC2: What Colin Percival’s been up to, Beckhoff releases TwinCAT/BSD Hypervisor, Writing a NetBSD kernel module, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Building Your Own FreeBSD-based NAS

    Writing a device driver for Unix V6

    News Roundup

    FreeBSD/EC2: What I've been up to

    Beckhoff has released its TwinCAT/BSD Hypervisor

    Writing a NetBSD kernel module

    Benedicts Git Finds

    • Projects
      • Run anything (like full blown GTK apps) under Capsicum
      • Twitter client for UEFI
      • n³ The unorthodox terminal file manager
      • OpenVi: Portable OpenBSD vi for UNIX systems
    • Gists and Articles
      • Step-by-step instructions on installing the latest NVIDIA drivers on FreeBSD 13.0 and above
      • FreeBSD SSH Hardening
      • GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Ben - Backing Up

    Ethan - Thanks

    Maxi - question about note taking

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    452: The unknown hackers Apr 28, 2022

    The unknown hackers, Papers we love to read, Dual Boot Homelab in The Bedroom by the bed testbed, OpenSSH 9.0 released, OS battle: OpenBSD vs. NixOS, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The unknown hackers

    • Bill Jolitz passed away in March 2022 ***

    FreeBSD Documentation: Papers We Love To Read

    News Roundup

    FreeBSD/Ubuntu Dual Boot Homelab in The Bedroom by the bed testbed

    OpenSSH 9.0 has been released

    Operating systems battle: OpenBSD vs NixOS

    Beastie Bits

    Celebrating 50 years of the Unix Operating System
    Kickstarter Campaign Results
    FreeBSD Virtualization Series

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Jeff - ZFS checksum repair

    Nelson - General Thanks

    Sam - FOSS Power Support

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    451: Tuning ZFS recordsize Apr 21, 2022

    Full system backups with FFS snapshots, ZFS and dump(8), tuning recordsize in OpenZFS, Optimizing FreeBSD Power Consumption on Modern Intel Laptops, remember to check for ZFS filesystems being mounted, Use tcpdump to save wireless bridge, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Full system backups with FFS snapshots, ZFS and dump(8)

    Tuning Recordsize in OpenZFS

    News Roundup

    Optimizing FreeBSD Power Consumption on Modern Intel Laptops

    I need to remember to check for ZFS filesystems being mounted

    Use tcpdump to save wireless bridge

    Beastie Bits

    • [FreeBSD on the Vortex86DX CPU](https://www.cambus.net/freebsd-on-the-vortex86dx-cpu/)
    • [HAMMER2 vs USB stick pulls](https://www.dragonflydigest.com/2022/03/22/26800.html)
    • [New US mirror for DragonFly](https://www.dragonflydigest.com/2022/03/09/26742.html)
    • [HelloSystem 13.1 RC1](https://github.com/helloSystem/ISO/releases/tag/experimental-13.1-RC1)
    • [Video introduction to OpenBSD 7.0](https://www.youtube.com/watch?v=KeUsE-3nSes)
    • [Losses in the community](https://minnie.tuhs.org/pipermail/tuhs/2022-April/025643.html)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Sam - BSD Laptops
    • Reese - Electric Groff
    • Alexandra - New to BSD
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    450: Unix Tool Writing Apr 14, 2022

    The ideas that made Unix, hints for writing Unix tools, cron best practices, three different sorts of filesystem errors, LibreSSL 3.5.1 released, taskwarrior to manage tasks, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Unix Philosophy: A Quick Look at the Ideas that Made Unix

    Hints for writing Unix Tools

    News Roundup

    Cron best practices

    Filesystems can experience at least three different sorts of errors

    LibreSSL 3.5.1 development branch as well as 3.4.3 (stable) and 3.3.6 released

    Taskwarrior to manage tasks

    Beastie Bits

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Andrew - virtualization
    • Brad - jails applications and interoperability
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    449: Reproducible clean $HOME Apr 07, 2022

    FreeBSD Status Report 4th Quarter 2021, Reproducible clean $HOME in OpenBSD using impermanence, Making RockPro64 a NetBSD Server, helloSystem 0.7.0 is out, lazy approach to FreeBSD dual-booting, going to jail, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Quarterly Status Report 4th Quarter 2021

    Reproducible clean $HOME in OpenBSD using impermanence

    News Roundup

    Making RockPro64 a NetBSD Server

    helloSystem 0.7.0 is out

    My lazy approach to FreeBSD dual-booting

    Going to jail

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • No Feedback emails this week, so instead we can have “Story Time with Allan” and he can regale us with an entertaining BSD story.
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    448: Controlling Resource Limits Mar 31, 2022

    Controlling Resource Limits with rctl in FreeBSD, It’s always DNS, Google Summer of Code in BSD Projects, Rsync Technical Notes - Q4 2021, Userland CPU frequency scheduling for OpenBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Controlling Resource Limits with rctl in FreeBSD

    It's DNS. Of course it's DNS, it's always DNS.

    News Roundup

    GSOC

    • [Work with FreeBSD in Google Summer of Code](https://freebsdfoundation.org/blog/work-with-freebsd-in-google-summer-of-code/)
    • [The NetBSD Foundation is a mentoring organization at Google Summer of Code 2022](https://blog.netbsd.org/tnf/entry/the_netbsd_foundation_is_a)
    

    Rsync Technical Notes - Q4 2021

    Userland CPU frequency scheduling for OpenBSD

    Beastie Bits

    • Unofficial HardenedBSD liveCD
    • The eurobsdcon 2022 CFP is open
    • Testing parallel forwarding
    • OpenBSD iwx(4) gains 11ac 80MHz channel support
    • OpenBSD/arm64 on Apple M1 systems
    • FreeBSD on the CubieBoard2

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Eric - periodic notifications
    Kevin - no question

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    447: Path to BSD Mar 24, 2022

    FreeBSD Foundation Proposals, UNIX: On the Path to BSD, Fujitsu ends its mainframe and Unix services, Install burpsuite on FreeBSD using Linuxulator, new OpenBSD Webzine is out, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Project Proposal Overview

    UNIX: On the Path to BSD

    News Roundup

    Fujitsu is ending its mainframe and Unix services

    TUTORIAL: Install burpsuite on FreeBSD using Linuxulator

    OpenBSD Webzine

    Beastie Bits

    • A Trio if OPNsense releases:
      • 21.7.8
      • 21.10.3
      • 22.1.1
    • FreeBSD 12.2 end-of-life
    • DragonFly as a KVM guest
    • RIP Lorinda Cherry
    • Precursor: From Boot to Root ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • No Feedback emails this week, so instead Tom can regale us with an entertaining BSD story.

      • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    446: Debugging ioctl problems Mar 17, 2022

    Restoring a Tadpole SPARCbook 3, The FreeBSD Boot Process, Debugging an ioctl Problem on OpenBSD, Why my game PC runs FreeBSD and Kubuntu, DNSSEC, Badgers, and Orcs, Oh My, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Restoring a Tadpole SPARCbook 3 Part 1: Introduction

    The FreeBSD Boot Process

    News Roundup

    Debugging an ioctl Problem on OpenBSD

    Why my game PC runs FreeBSD and Kubuntu

    DNSSEC, Badgers, and Orcs, Oh My!

    Beastie Bits

    • [LibreSSL 3.5.0 development branch released](https://undeadly.org/cgi?action=article;sid=20220301063844)
    • [OpenSSH updated to 8.9](https://undeadly.org/cgi?action=article;sid=20220301063428)
    • [Recent developments in OpenBSD, 2022-02-21 summary](https://undeadly.org/cgi?action=article;sid=20220221060700)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Jonathan - X-Wing and Tie Fighter
    Joshontech - pool options

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    445: Journey to BSD Mar 10, 2022

    Idiot's guide to OpenBSD on the Pinebook Pro, FreeBSD Periodic Scripts, history of service management in Unix, journey from macOS to FreeBSD, Unix processes “infecting” each other, navidrom music server on FreeBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The complete idiot's guide to OpenBSD on the Pinebook Pro

    FreeBSD Periodic Scripts

    News Roundup

    The history (sort of) of service management in Unix

    My journey from macOS to FreeBSD

    A nice story about Unix processes "infecting" each other

    Navidrome music server on FreeBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Tyler - Is this enough for VMs
    • Kevin - BSD from RAMdisk
    • Malcolm - wired headset in FreeBSD
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    444: Historic Developments Mar 03, 2022

    The History of Berkeley DB, modern inetd in FreeBSD, the Unix argv[0] issue, retrocomputing can be more than games, read section 8 of the Unix users manual, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    A Conversation with Margo Seltzer and Mike Olson: The history of Berkeley DB

    Modern inetd in FreeBSD

    News Roundup

    The reason Unix has the argv[0] issue (and API)

    Retrocomputing can be more than games

    You should read Section 8 of the Unix User's Manual

    Beastie Bits

    • New 'Reckless guide to OpenBSD' published
    • GhostBSD Online Meetup
    • HAMBug online meeting, March 8th @ 18:30 ET
    • HardenedBSD 12-STABLE support will be dropped in May 2022
    • Option options for getopt
    • New Tarsnap version is out
    • pfSense Plus version 22.01 and pfSense CE version 2.6.0 Software are Now Available

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Karst - replacing disks
    • TheHolm - zfs and booting
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    443: Certified Unix Compliant Feb 24, 2022

    Certifying an OS Unix compliant, 2021 FreeBSD Foundation Impact Report, Netflix, Disney, and other widevine content on FreeBSD, file hashes updated for NetBSD 8.1, Playing with CD-RWs on FreeBSD, Why "process substitution" is a late feature in Unix shells, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    What goes into making an OS to be Unix compliant certified?

    2021 FreeBSD Foundation Impact Report

    News Roundup

    Play Netflix, Disney, and other widevine content on FreeBSD

    Note: two files changed and hashes/signatures updated for NetBSD 8.1

    Playing with CD-RWs on FreeBSD

    Why "process substitution" is a late feature in Unix shells

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Marty - shell communities
    • Nate - Helping Mike Out
    • Tom - convincing others to switch ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    442: Birthing Unix Feb 17, 2022

    The Birth of Unix, Help request for three big Lumina items, FreeBSD 13 on Thinkpad T460s, HardenedBSD January 2022 Status Report, OPNsense 22.1 "Observant Owl" released, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    The Birth of Unix

    Help requested for three big items for Lumina

    News Roundup

    FreeBSD 13 on Thinkpad T460s

    HardenedBSD January 2022 Status Report

    OPNsense 22.1 "Observant Owl" released

    Beastie Bits

    • The early days of Unix at Bell Labs - Brian Kernighan (LCA 2022 Online)
    • BastilleBSD User Survey Smallest desktop of the day with BSD: Raspberry Pi 400
    • Reminder BSDCan 2022 - online only
    • Joshua Stein Video: Q&A
    • DNSSEC Mastery, second edition, creeping out *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Alec - Playstation FreeBSD-Linux question
    • Nelson - Interesting Interview
    • Oscar - Omni OS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    441: Migration to BSD Feb 10, 2022

    Migrating our servers from Linux to FreeBSD, Cluster provisioning with Nomad and Pot on FreeBSD, LibBSDDialog, FreeBSD 13.0 Base Jails with ZFS and VNET, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Why we're migrating (many of) our servers from Linux to FreeBSD

    Cluster provisioning with Nomad and Pot on FreeBSD

    News Roundup

    LibBSDDialog

    FreeBSD 13.0 Base Jails with ZFS and VNET

    Beastie Bits

    • OpenBSD on the Pinephone
    • FreeBSD SSH Hardening
    • Making the ZFS file system
    • A Linux Users Experience Switching To OpenBSD
    • Add Nix, a purely functional package manager to FreeBSD
    • ioztat is a storage load analysis tool for OpenZFS *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Scott - esxi
    • The Holm - noob question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    440: BSD Inside Zone Feb 03, 2022

    GhostBSD 22.01 is available, Packet Scheduling with Dummynet and FreeBSD, Inside zone installation, Why the FreeBSD Desktop and my Linux Rant, How to install Gnome on OpenBSD, The important Unix idea of the "virtual filesystem switch", and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    GhostBSD 22.01 is available

    Packet Scheduling with Dummynet and FreeBSD

    News Roundup

    Inside zone installation

    Why the FreeBSD Desktop and my Linux Rant

    How to install Gnome on OpenBSD

    The important Unix idea of the "virtual filesystem switch"

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Paul - A Plug
    • Rollniak - Bhyve Questions
    • Russell - pf pointers ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    439: Browser Tab Unix Jan 27, 2022

    ACM: It takes a community, Don’t use discord for OSS projects, Unix in a browser tab, OpenIndiana Hipster 2021.10 available, Omni OS CE v11 is out, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    It takes a community - ACM

    PSA: Dont use Discord for Open Source Projects

    • Jeffrey Paul - Discord Is Not An Acceptable Choice For Free Software Projects
    • Drew deVault - Dont use Discord for FOSS

    News Roundup

    Unix in your Browser Tab

    OpenIndiana Hipster 2021.10 is here

    Omni OS CE v11 r151040 is out

    Beastie Bits

    • Deb from the FreeBSD Foundation on FLOSS Weekly
    • Jailfox - BastilleBSD template to bootstrap Firefox.
    • FreeBSD Journal Nov/Dec 2021
    • First call through the 3ESS
    • OpenBSD for minimalists

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dale - two zfs questions
    • Johnny - home question
    • Mike - GhostBSD in a VM
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    438: Toolchain Adventures Jan 20, 2022

    FreeBSD Foundation reviews 2021 activities, DragonflyBSD 6.2.1 is here, Lumina Desktop 1.6.2 available, toolchain adventures, The OpenBSD BASED Challenge Day 7, Bastille Template: AdGuard Home, setting up ZSH on FreeBSD and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Foundation 2021 in Review

    • Software Development
    • Year End Fundraising Report
    • Infrastructure Support
    • Advocacy
    • FreeBSD 2022 CfP

    DragonFlyBSD 6.2.1 is out

    News Roundup

    Lumina Desktop 1.6.2 is out

    Toolchain Adventures

    The OpenBSD BASED Challenge Day 7

    Bastille Template: AdGuard Home

    Setting up ZSH on FreeBSD

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Producers Note:  We did get some Christmas AMA questions in after we recorded that episode (since we recorded it early) but don't worry, I’ve made a note of them and we’ll save them for our next AMA episode. 
    
    • Patrick - Volume
    • Reptilicus Rex - FreeBSD Docs Team
    • michael - question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    437: Audit that package Jan 13, 2022

    Using FreeBSD’s pkg-audit, 20 year old bug that went to Mars, FreeBSD on Slimbook, LLDB FreeBSD kernel core dump support, Steam on OpenBSD, Cool but obscure X11 tools, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Using FreeBSD’s pkg-audit

    The 20 year old bug that went to Mars

    It's rare that you come across a bug so subtle that it can last for two decades. But, that's exactly what has happened with the Lempel-Ziv-Oberhumer (LZO) algorithm. Initially written in 1994, Markus Oberhumer designed a sophisticated and extremely efficient compression algorithm so elegant and well architected that it outperforms zlib and bzip by four or five times their decompression speed.

    I was impressed to find out that his LZO algorithm has gone to the planet Mars on NASA devices multiple times! Most recently, LZO has touched down on the red planet within the Mars Curiosity Rover, which just celebrated its first martian anniversary on Tuesday.

    In the past few years, LZO has gained traction in file systems as well. LZO can be used in the Linux kernel within btrfs, squashfs, jffs2, and ubifs. A recent variant of the algorithm, LZ4, is used for compression in ZFS for Solaris, Illumos, and FreeBSD.

    With its popularity increasing, Lempel-Ziv-Oberhumer has been rewritten by many engineering firms for both closed and open systems. These rewrites, however, have always been based on Oberhumer's core open source implementation. As a result, they all inherited a subtle integer overflow. Even LZ4 has the same exact bug, but changed very slightly.

    Because the LZO algorithm is considered a library function, each specific implementation must be evaluated for risk, regardless of whether the algorithm used has been patched. Why? We are talking about code that has existed in the wild for two decades. The scope of this algorithm touches everything from embedded microcontrollers on the Mars Rover, mainframe operating systems, modern day desktops, and mobile phones. Engineers that have used LZO must evaluate the use case to identify whether or not the implementation is vulnerable, and in what format.

    News Roundup

    FreeBSD on Slimbook -- 14 months of updates

    LLDB FreeBSD kernel core dump support

    Steam on OpenBSD

    Beastie Bits

    • [OpenSSH Agent Restriction](http://undeadly.org/cgi?action=article;sid=20211220061017)
    • [OpenBSD’s Clang upgraded to version 13](http://undeadly.org/cgi?action=article;sid=20211220060327)
    • [Cool, but obscure X11 tools](http://cyber.dabamos.de/unix/x11/)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    436: Unix Standards Battle Jan 06, 2022

    UNIX Wars, What every IT person needs to know about OpenBSD Part 3, FreeBSD 12.3 is here, TrueNAS 13 begins, what Unix pre-boot envs looked liked, run Unix on Microcontrollers with PDP-11 emulators and more.

    NOTES

    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    UNIX Wars – The Battle for Standards

    What every IT person needs to know about OpenBSD Part 3: That packet filter

    FreeBSD 12.3-RELEASE Release Notes

    News Roundup

    TrueNAS 12.0-U7 is Released & TrueNAS 13.0 Begins

    A bit on what Unix system pre-boot environments used to look like

    RUN UNIX ON MICROCONTROLLERS WITH PDP-11 EMULATOR

    Beastie Bits

    • [BSDCan 2022 is a go.](https://www.bsdcan.org/2022/)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    435: Year End Interview Dec 30, 2021

    In this last episode of 2021, we interview Solene from OpenBSD. She’s blogging about her experiences with OpenBSD on dataswamp.org, the webzine she created, how she got involved and other topics. Enjoy and best wishes for 2022!

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Interview - Solene Rapenne - solene+www@dataswamp.org / [@solene@bsd.network](@solene@bsd.network (mastodon))

    https://dataswamp.org/~solene/2021-07-26-old-computer-challenge-after.html

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Solène Rapenne.


    434: It’s Quiz-mas time Dec 23, 2021

    In this special xmas episode we let the audience interview us using questions they sent us and we’ll answer now. Tom, Allan, JT, and I are all here, so stay tuned for some interesting answers to your questions.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Interview

    Allan - allanjude@freebsd.org / Twitter : @allanjude

    Benedict - bcr@freebsd.org / Twitter : @bsdbcr

    Tom - thj@freebsd.org / Twitter : @adventureloop

    JT - jt@obs-sec.com / Twitter : @q5sys

    Tarsnap

    • This week’s episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    433: GhostBSD of Christmas Dec 16, 2021

    GhostBSD 21.11.24 ISO available, why v7 matters so much, OpenBSD on VIA Eden X2 powered HP t510 Thin Client, OctoPkg GUI Package Manager, chdir(2) support in posix_spawn(3), install doas on FreeBSD, Access Modem's Web Interface with OPNsense, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    GhostBSD 21.11.24 ISO is now available

    Why v7 matters so much

    News Roundup

    OpenBSD on the VIA Eden X2 powered HP t510 Thin Client

    OctoPkg: A Great GUI Package Manager In FreeBSD

    Project Report: Add support for chdir(2) support in posix_spawn(3)

    How To Install doas in FreeBSD 13

    How to Access Your Modem's Web Interface with OPNsense

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    No feedback for this episode because no one sent any in. :(
    I guess we’ve answered every BSD and Unix question that everyone has.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    432: Introducing OpenZFS 3.0 - Yeah Dec 09, 2021

    HAMBug hybrid meeting, Demystifying OpenZFS 2.0, OpenZFS 3.0 introduced at Dev Summit, HardenedBSD Home Infrastructure Status, Running Awk in parallel, FreeBSD Announces Wayland 1.19.91, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    HAMBug hybrid meeting

    • Hoping to squeeze in an in-person meeting incase the pandemic situation regresses *** ### Demystifying OpenZFS 2.0
    • Do you like the articles we post? We are looking for authors (or even just your ideas) to keep providing these high quality articles.
    • Job Posting *** ### OpenZFS 3.0 Introduced at Dev Summit *** ### OpenZFS vdev properties feature has been merged ***

    News Roundup

    October 2021 Home Infrastructure Status

    Running Awk in parallel to process 256M records

    FreeBSD Announce wayland 1.19.91

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - running linux binaries under FreeBSD
    • Lars - Finding BSD Topics via search engine
    • Marc - Your views on this question on Reddit
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    431: FreeBSD EC2 Agents Dec 02, 2021

    Why use OpenBSD part 2, FreeBSD on the RISC-V Architecture, OpenBSD Webzine Issue 4, Ending up liking GNOME, OPNsense 21.7.5 released, Jenkins with FreeBSD Agents in EC2, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    What every IT person needs to know about OpenBSD Part 2: Why use OpenBSD?

    Looking Towards the Future: FreeBSD on the RISC-V Architecture

    News Roundup

    OpenBSD Webzine Issue 4

    How I ended up liking GNOME

    OPNsense 21.7.5 released

    Jenkins with FreeBSD Agents in ec2

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Andreas - ZFS and Trim
    • Hamza - swift on the BSDs
    • Kendall - how many mirror
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    430: OpenBSD Onwards Nov 25, 2021

    Manipulate a ZFS pool from Rescue System, FreeBSD 3rd Quarter Report, Monitoring FreeBSD jails form the host, OpenBSD on RPI4 with Full Disk Encryption, Onwards with OpenBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    Going From Recovery Mode to Normal Operations with OpenZFS Manipulating a Pool from the Rescue System

    Monitoring FreeBSD jails from the host

    News Roundup

    FreeBSD Quarterly Status Report 3rd Quarter 2021

    OpenBSD on Raspberry Pi 4 with Full-Disk Encryption

    Catchup 2021-11-03

    Beastie Bits

    • [Manage Kubernetes cluster from FreeBSD with kubectl](https://www.youtube.com/watch?v=iUxJIXKtK7c)
    • [amdgpu support in DragonFly](https://www.dragonflydigest.com/2021/11/08/26343.html)
    • [Today is the 50th Anniversary of the 1st Edition of Unix...](https://twitter.com/bsdimp/status/1456019089466421248?s=20)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Efraim - response to IPFS and an overlay filesystem
    • Paul - FS Send question
    • sev - Freebsd & IPA ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    429: Advanced ZFS Snapshots Nov 18, 2021

    FreeBSD Foundation October Fundraising Update, Advanced ZFS Snapshots, Full WireGuard setup with OpenBSD, MidnightBSD a Linux Alternative, FreeBSD Audio, Tuning Power Consumption on FreeBSD Laptops, Thoughts on Spelling Fixes, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    FreeBSD Foundation October 2021 Fundraising Update

    Advanced ZFS Snapshots

    News Roundup

    Full WireGuard setup with OpenBSD

    MidnightBSD a Linux Alternative

    FreeBSD Audio

    Tuning Power Consumption on FreeBSD Laptops and Intel Speed Shift (6th Gen and Later)

    Some Thoughts on Spelling Fixes

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Bens feedback to Benedict's feedback to Bens question about zpoolboy
    • hcddbz - Old Technical Books
    • jason - a jails question ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    428: Cult of BSD Nov 11, 2021

    OpenBSD Part 1: How it all started, Explaining top(1) on FreeBSD, Measuring power efficiency of a CPU frequency scheduler on OpenBSD, CultBSD, a whole lot of BSD bits, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

    Headlines

    What every IT person needs to know about OpenBSD Part 1: How it all started

    Explaining top(1) on FreeBSD

    News Roundup

    Measuring power efficiency of a CPU frequency scheduler on OpenBSD

    CultBSD

    Beastie Bits

    • [OpenBSD on the HiFive Unmatched](https://kernelpanic.life/hardware/hifive-unmatched.html)
    • [Advanced Documentation Retrieval on FreeBSD](https://adventurist.me/posts/00306)
    • [OpenBSD Webzine Issue 3 is out](https://webzine.puffy.cafe/issue-3.html)
    • [How to connect and use Bluetooth headphones on FreeBSD](https://forums.freebsd.org/threads/bluetooth-audio-how-to-connect-and-use-bluetooth-headphones-on-freebsd.82671/)
    • [How To: Execute Firefox in a jail using iocage and ssh/jailme](https://forums.freebsd.org/threads/how-to-execute-firefox-in-a-jail-using-iocage-and-ssh-jailme.53362/)
    • [Understanding AWK](https://earthly.dev/blog/awk-examples/)
    • [“Domesticate Your Badgers” Kickstarter Opens](https://mwl.io/archives/13297)
    • [Bootstrap an OPNsense development environment in Vagrant](https://github.com/punktDe/vagrant-opnsense)
    • [VLANs Bridges and LAG Interface best practice questions](https://www.truenas.com/community/threads/vlans-bridges-and-lag-interface-best-practice-questions.93275/)
    • [A Console Desktop](https://pspodcasting.net/dan/blog/2018/console_desktop.html)
    • [CharmBUG Casual BSD Meetup and Games (Online)](https://www.meetup.com/CharmBUG/events/281822524)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dan - ZFS question
    • Lars - Thanks for the interview
    • jesse - migrating data from old laptop ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    427: Logging is important Nov 04, 2021

    Build Your FreeBSD Developer Workstation, logging is important, how BSD authentication works, pfSense turns 15 years old, OPNsense Business Edition 21.10 released, getting started with pot, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap
    If you like BSDNow, consider supporting us on Patreon

    Headlines

    Building Your FreeBSD Developer Workstation Setup

    What I learned from Russian students: logging is important

    News Roundup

    How BSD Authentication works

    pfSense Software is 15 Today!

    OPNsense® Business Edition 21.10 released

    Getting started with pot

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ## Feedback/Questions
    • Benjamin - Question for Benedict
    • Nelson - Episode 419 correction
    • Peter - state machines

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    426: OpenBSD 7.0 Hero Oct 28, 2021

    A Good Time to Use OpenZFS Slog, OpenBSD 7.0 is out, OpenBSD and Wayland, UVM faults yield significant performance boost, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    If you like BSDNow, consider supporting us on Patreon

    What Makes a Good Time to Use OpenZFS Slog and When Should You Avoid It

    OpenBSD 7.0 is out

    News Roundup

    OpenBSD and Wayland

    Unlocking UVM faults yields significant performance boost

    Beastie Bits

    PLAN 9 DESKTOP GUIDE
    libvirt and DragonFly
    EuroBSDCon 2021 videos are available
    Issue#1 of OpenBSD Webzine
    The Beastie has landed.
    It’s 1998 and you are Sun Microsystems...

    • Reply link that's down RSA/SHA1 signature type disabled by default in OpenSSH *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dan - IPFS
    • Jack - IPFS
    • Johnny - AdvanceBSD

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    425: Releases galore Oct 21, 2021

    The New Architecture on the Block, OpenBSD on Vortex86DX CPU, lots of new releases, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    RISC-V: The New Architecture on the Block

    • If you want more RISC-V, check out JT's interview with Mark Himelstein the CTO of RISC-V International *** ### OpenBSD on the Vortex86DX CPU *** ## News Roundup aka there’s been lots of releases recently so lets go through them: ### Lumina 1.6.1 ### opnsense 21.7.3 ### LibreSSL patches ### OpenBGPD 7.2 ### Midnight BSD 2.1.0 ### GhostBSD 21.09 ISO ### helloSystemv0.6

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brandon - FreeBSD question
    • Bruce - Fixing a weird Apache Bug
    • Dan - zfs question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    424: Unveiling OpenBSD’s pledge Oct 14, 2021

    J language working on OpenBSD, Comparing FreeBSD GELI and OpenZFS encrypted pools, What is FreeBSD, actually?, OpenBSD's pledge and unveil from Python, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    I got the J language working on OpenBSD

    Rubenerd: Comparing FreeBSD GELI and OpenZFS encrypted pools with keys

    News Roundup

    What is FreeBSD, actually? Think again.

    OpenBSD's pledge and unveil from Python

    Beastie Bits

    • [Hibernate time reduced](http://undeadly.org/cgi?action=article;sid=20210831050932)
    • [(open)rsync gains include/exclude support](http://undeadly.org/cgi?action=article;sid=20210830081715)
    • [Producer JT's latest ancient find that he needs help with](https://twitter.com/q5sys/status/1440105555754848257)
    • [Doas comes to MidnightBSD](https://github.com/slicer69/doas)
    • [FreeBSD SSH Hardening](https://gist.github.com/koobs/e01cf8869484a095605404cd0051eb11)
    • [OpenBSD 6.8 and you](https://home.nuug.no/~peter/openbsd_and_you/#1)
    • [By default, scp(1) now uses SFTP protocol](https://undeadly.org/cgi?action=article;sid=20210910074941)
    • [FreeBSD 11.4 end-of-life](https://lists.freebsd.org/pipermail/freebsd-announce/2021-September/002060.html)
    • [sched_ule(4): Improve long-term load balancer](https://cgit.freebsd.org/src/commit/?id=e745d729be60a47b49eb19c02a6864a747fb2744)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    423: RACK the Stack Oct 07, 2021

    FreeBSD serves Netflix Video at 400Gb/s, Using the RACK TCP stack, an OpenBSD script to update packages fast, Plasma System Monitor and FreeBSD, TrueNAS vs FreeNAS (and why you should upgrade!), auto lock screen on OpenBSD using xidle and xlock, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Serving Netflix Video at 400Gb/s on FreeBSD

    Using the FreeBSD RACK TCP Stack

    News Roundup

    pkgupdate, an OpenBSD script to update packages fast

    Plasma System Monitor and FreeBSD

    TrueNAS vs FreeNAS (and why you should upgrade!)

    Automatically lock screen on OpenBSD using xidle and xlock

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ben - LightDM with Slick-Greeter.md
    • Dave - Cloned Interface.md
    • MJ Rodriguez - Sony.md
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    422: The Brian Callahan Interview Sep 30, 2021

    We interview Dr. Brian Callahan about his language porting work for OpenBSD, teaching with BSDs and recruiting students into projects, research, and his work at NYC*BUG in this week’s episode of BSDnow.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Interview - Dr. Brian Robert Callahan - https://briancallahan.net/ / bcallah@bsdnetwork

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Brian Callahan.


    421: ZFS eats CPU Sep 23, 2021

    Useless use of GNU, Meet the 2021 FreeBSD GSoC Students, historical note on Unix portability, vm86-based venix emulator, ZFS Mysteriously Eating CPU, traceroute gets speed boost, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Useless use of GNU

    Meet the 2021 FreeBSD Google Summer of Code Students

    News Roundup

    Large Unix programs were historically not all that portable between Unixes

    • References this article: I’m not sure that UNIX won *** ### A new path: vm86-based venix emulator *** ### ZFS Is Mysteriously Eating My CPU *** ### traceroute(8) gets speed boost ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Al - TransAtlantic Cables
    • Christopher - NVMe
    • JohnnyK - Vivaldi ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    420: OpenBSD makes life better Sep 16, 2021

    Choosing The Right ZFS Pool Layout, changes in OpenBSD that make life better, GhostBSD 21.09.06 ISO's now available, Fair Internet bandwidth management with OpenBSD, NetBSD wifi router project update, NetBSD on the Apple M1, HardenedBSD August Status Report, FreeBSD Journal on Wireless and Desktop, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Choosing The Right ZFS Pool Layout

    Recent and not so recent changes in OpenBSD that make life better (and may turn up elsewhere too)

    News Roundup

    GhostBSD 21.09.06 ISO's now available

    Fair Internet bandwidth management on a network using OpenBSD

    NetBSD wifi router project update

    • Bonus NetBSD Recent Developments: NetBSD on the Apple M1 *** ### HardenedBSD August 2021 Status Report ### FreeBSD Journal July/August 2021: Desktop/Wireless *** ### Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • James - backup question
    • Jonathon - certifications
    • Marty - RPG CLI ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    419: Rethinking OS installs Sep 09, 2021

    Reviewing a first OpenBSD port, NetBSD 9.2 on a DEC Alpha CPU in QEMU with X11, FreeBSD Experiment Rethinks the OS Install, GhostBSD switching to FreeBSD rc.d, Irix gets LLVM, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Reviewing my first OpenBSD port, and what I'd do differently 10 years later

    Install NetBSD 9.2 on a DEC Alpha CPU in QEMU with X11

    News Roundup

    FreeBSD Experiment Rethinks the OS Install

    The switch to FreeBSD rc.d is coming

    Irix gets LLVM

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Miceal - a few questions
    • Nelson - dummynet
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    418: The greatest time in history to be a creator Sep 02, 2021

    In this episode, we interview Michael W. Lucas about his latest book projects including Git sync murder, TLS Mastery, getting paid for creative work, writing tools and techniques, and more.

    NOTES

    Interview - Michael W. Lucas - mwl@mwl.io / @mwlauthor

    • Cashflow for Creators
    • Charity Auction Against Human Trafficking
    • This is the rfc about what to not do.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Special Guest: Michael W Lucas.


    417: bhyve private cloud Aug 26, 2021

    Achieving RPO/RTO Objectives with ZFS pt 1, FreeBSD Foundation Q2 report, OpenBSD full Tor setup, MyBee - bhyve as private cloud, FreeBSD home fileserver expansion, OpenBSD on Framework Laptop, portable GELI, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Achieving RPO/RTO Objectives with ZFS - Part 1

    FreeBSD Foundation Q2 Report

    OpenBSD full Tor setup

    News Roundup

    MyBee — FreeBSD OS and hypervisor bhyve as private cloud

    Expanding our FreeBSD home file server

    OpenBSD on the Framework Laptop

    Portable GELI

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Chunky_pie - zfs question
    • Paul - several questions
    • chris - firewall question ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    416: netcat printing Aug 19, 2021

    OpenZFS snapshots, OpenSUSE on Bastille, printing with netcat, new opnsense 21.1.8 released, new pfsense plus software available, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Lets talk OpenZFS snapshots

    OpenSUSE in Bastille

    News Roundup

    CUPS printing with netcat

    Opnsense-21.1.8

    pfSense® Plus Software Version 21.05.1 is Now Available

    Beastie Bits

    • [MAC Inspired FreeBSD release](https://github.com/mszoek/airyx)
    • [Implement unprivileged chroot](https://cgit.freebsd.org/src/commit/?id=a40cf4175c90142442d0c6515f6c83956336699b)
    • [InitWare: A systemd fork that runs on BSD](https://github.com/InitWare/InitWare)
    • [multics gets a new release](https://multics-wiki.swenson.org/index.php/Main_Page)
    • [Open Source Voices interview with Tom Jones](https://www.opensourcevoices.org/17)
    • [PDP 11/03 Engineering Drawings](https://twitter.com/q5sys/status/1423092689084551171)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Oliver - zfs
    • anders - vms
    • jeff - byhve guests
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    415: Wrong OS Switch Aug 12, 2021

    Wrong Way to Switch Server OS, Net/1 and Net/2 – A Path to Freedom, Permissions Two Mistakes, OpenBSD progress in supporting riscv64 platform, I2P intro, git sync murder is out, GhostBSD init system poll, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    The Wrong Way to Switch Operating Systems on Your Server

    History of FreeBSD Part 5: Net/1 and Net/2 – A Path to Freedom

    News Roundup

    Permissions Two Mistakes

    Progress in support for the riscv64 platform

    I2P Intro

    “$ git sync murder” is out, so: how many books have I written?

    What init system would you prefer to use under GhostBSD?

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - Replication Benedict writes after the show was over: The tool is called https://github.com/allanjude/zxfer Tom tweeted right after recording stopped: https://twitter.com/adventureloop/status/1420478529238622210
    • Caleb - Pronunciation of Gemini
    • Dan - Writeup about a DO FreeBSD Droplet
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    414: Running online conferences Aug 05, 2021

    OpenZFS 2.1 is out, FreeBSD TCP Performance System Controls, IPFS OpenBSD, tips for running an online conference, fanless OpenBSD laptop, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    OpenZFS 2.1 is out

    FreeBSD TCP Performance System Controls

    News Roundup

    IPFS OpenBSD

    Tips for running an online conference

    My Fanless OpenBSD Desktop

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Bruce - Upgrading
    • Chris - SMB Followup
    • dmilith - kTLS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    413: BSD/Linux Chimera Jul 29, 2021

    Updating GCC GNAT (Ada) in pkgsrc/NetBSD, AdvanceBSD thoughts 2/2, FreeBSD from a NetBSD user’s perspective, FPGA programming and DragonFly, Chimera Linux, EuroBSDcon 2021, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Updating GCC GNAT (Ada) in pkgsrc/NetBSD

    Advance!BSD – thoughts on a not-for-profit project to support *BSD (2/2)

    News Roundup

    FreeBSD from a NetBSD user’s perspective

    FPGA programming and DragonFly

    Chimera Linux - A Linux distribution based on FreeBSD userland and LLVM

    EuroBSDcon 2021

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Charlie - several questions
    • Dan - kernel driver or module question
    • James - Apple M1 ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    412: Command-line secrets Jul 22, 2021

    FreeBSD Performance Observability, Advance!BSD thoughts 1/2, Lumina Desktop Maintainership Change, How to Handle Secrets on the Command Line, Like NetBSD DragonFlyBSD Now Has "COVID", and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD Performance Observability

    Advance!BSD – thoughts on a not-for-profit project to support *BSD (1/2)

    News Roundup

    Maintainership Change :: Lumina Desktop Environment

    Study the past if you would define the Future

    How to Handle Secrets on the Command Line

    Following NetBSD, DragonFlyBSD Now Has "COVID"

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Jim - freebsd kde
    • michal - zfs question
    • tim - lumina and snapshots ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    411: FreeBSD Deep Dive Jul 15, 2021

    Unix System Architecture Evolution, Deep Dive into FreeBSD’s Strengths, how developers chose names, OPNsense 21.1.7 released, Support for chdir(2) in posix_spawn(3), vagrant-freebsd-boxbuilder, OpenBSD’s IATA airport code file, and more

    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    The Evolution of the Unix System Architecture

    • Full IEEE article: https://ieeexplore.ieee.org/document/8704965
    

    Deep Diving Into the Strengths of FreeBSD

    Interesting read on how Developers choose Names

    News Roundup

    OPNsense 21.1.7 released

    Support for chdir(2) in posix_spawn(3)

    vagrant-freebsd-boxbuilder

    OpenBSD has a file with 3-letter IATA airport codes

    Beastie Bits

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • lyubo - ipfw question
    • michael - a netbsd story
    • sven - a dogs garage
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    410: OpenBSD Consumer Gateway Jul 08, 2021

    Open Source and Blogging Bubbles, Building Customized FreeBSD Images, Updating Minecraft in FreeBSD, Upgrading FreeBSD jails using mkjail, Dragonfly 6.0 Performance benchmark, OpenBSD Consumer Gateway Launch, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    The Open-Source Software bubble that is and the blogging bubble that was

    Building Customized FreeBSD Images

    News Roundup

    Updating to Minecraft 1.17 in FreeBSD

    Upgrading a FreeBSD 12.2 jail to FreeBSD 13 using mkjail

    DragonFlyBSD 6.0 Is Performing Very Well Against Ubuntu Linux, FreeBSD 13.0

    An OpenBSD Consumer Gateway Launch

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • CY - bearssl
    • Marc - that tarsnap ad
    • nycbug
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    409: The Filesystem Dungeon Jul 01, 2021

    DTrace network probes, next 50 years of shell programming, NetBSD on the Vortex86DX CPU, system CPU time in top, your filesystem as a dungeon, diving into toolchains, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    DTrace Network Probes

    Unix Shell Programming: The Next 50 Years

    News Roundup

    NetBSD on the Vortex86DX CPU

    System CPU time – ‘sys’ time in top

    rpg-cli —your filesystem as a dungeon!

    Diving into toolchains

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [Alfred - Advice](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/409/feedback/Alfred%20-%20Advice)
    • [CY - Portable Patch Util](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/409/feedback/CY%20-%20Portable%20Patch%20Util)
    • [Denis - State of ZFS Ecosystem](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/409/feedback/Denis%20-%20State%20of%20ZFS%20Ecosystem)
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    408: FreeBSD DevSummit 2021 Jun 24, 2021

    Report from virtual FreeBSD DevSummit 2021, another promising release by FreeBSD Based helloSystem, GearBSD, OpenBGPD release, Let’s Encrypt on OpenBSD, FreeBSD 13 on the Panasonic Let’s Note, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    2021 FreeBSD Developer Summit

    helloSystem – FreeBSD Based OS Brings another Promising Release 0.5.0

    News Roundup

    GearBSD: a project to help automating your OpenBSD

    OpenBGPD 7.0 released

    Simple use of Let's Encrypt on OpenBSD is pleasantly straightforward (as of 6.8)

    FreeBSD 13 on the Panasonic Let’s Note CF-RZ6

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [Paul - ZFS Questions](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/408/feedback/Paul%20-%20ZFS%20Questions)
    • [Rafael - relic](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/408/feedback/Rafael%20-%20relic)
    • [matthew - sendfile and ktls](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/408/feedback/matthew%20-%20sendfile%20and%20ktls)
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    407: The jail Detail Jun 17, 2021

    Confining the omnipotent root, Jails with ZFS and PF on DigitalOcean, NomadBSD 130R is out, KDE Plasma Wayland on FreeBSD, Firefox under FreeBSD with Privacy, Using NetBSD’s pkgsrc everywhere, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Jails: Confining the omnipotent root

    • A dramatic reading of portions of the paper: Papers We Love: FreeBSD Jails and Solaris Zones *** ### Using Jails with ZFS and PF on DigitalOcean *** ## News Roundup ### NomadBSD 130R is out *** ### KDE Plasma Wayland - a week in FreeBSD *** ### Install Firefox under FreeBSD and Set it Up with Privacy *** Using NetBSD’s pkgsrc everywhere I can ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Malcolm - restoring a single file
    • Nathan - wireless support
    • bluefire - zfs special vdev Push to next show with Allan
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    406: Jailed Gemini Capsule Jun 10, 2021

    Gemini Capsule in a FreeBSD Jail, FreeBSD Quarterly status report 2021Q1, NetBSD VM on bhyve (on TrueNAS), Interview with Michael Lucas, WireGuard Returns as Experimental Package in pfSense, CGI with Awk on OpenBSD httpd, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Gemini Capsule in a FreeBSD Jail

    With the recent release of FreeBSD 13, I wanted to test it out on a spare RaspberryPi 3 that was part of my old Kubernetes cluster.
    In particular, FreeBSD Jails have always interested me, although I’ve never used them in practice. Over the years I’ve managed operating system virtualization through Solaris Zones and Docker containers, and Jails seem like and good middle ground between the two - easier to manage than zones and closer to the OS than Docker.
    I also want to run my own Gemini capsule locally to use some of the features that my other hosted capsules don’t have (like SCGI/CGI) and setting up a capsule in a Jail is a good way to learn both at the same time.

    FreeBSD Quarterly status report 2021Q1

    News Roundup

    NetBSD VM on bhyve (on TrueNAS)

    My new NAS at home is running TrueNAS Core. So far, it has been excellent, however I struggled a bit setting up a NetBSD VM on it. Part of the problem is that a lot of the docs and how-tos I found are stale, and the information in it no longer applies.
    TrueNAS Core allows running VMs using bhyve, which is FreeBSD’s hypervisor. NetBSD is not an officially supported OS, at least according to the guest OS chooser in the TrueNAS web UI :) But since the release of NetBSD 9 a while ago, things have become far simpler than they used to be – with one caveat (see below).

    Interview with Michael Lucas *BSD, Unix, IT and other books author

    Michael Lucas is a famous IT book author. Perhaps best know for FreeBSD, OpenBSD, and Unix book series. He worked as a system administrator for many years and has now become a full-time book writer. Lately, I did a quick Q and A with Michael about his journey as a professional book author and his daily workflow for writing books.
    +

    pfSense – WireGuard Returns as Experimental Package

    CGI with Awk on OpenBSD httpd

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questionsing

    • Adam - system state during upgrade
    • paul - BSD grep
    • sub - feedback
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    405: OOM Killer Feature Jun 03, 2021

    NetBSD 9.2 released, DragonFly 6.0 is out, Home Network Monitoring using Prometheus, Preventing FreeBSD to kill PostgreSQL, Customizing Emacs for Git Commit Messages, Deleting old FreeBSD boot environments, Always be quitting, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    NetBSD 9.2 Released

    DragonFly 6.0 is out!

    • Release Notes *** ### EuroBSDCon 2021 will be online *** ## News Roundup ### Home Network Monitoring using Prometheus > This blog post describes my setup for monitoring various devices on my home network suh as servers, laptops/desktops, networking gear etc. The setup and configuration is squarely geared towards small/medium sized network monitoring. A similar setup might work for large networks, but you will need to plan your compute/storage/bandwidth capacities accordingly. I’m running all the monitoring software on FreeBSD, but you can run it on your choice of OS. Just make sure to install the packages using your OS’s package manager. *** ### Preventing FreeBSD to kill PostgreSQL (aka OOM Killer prevention) > There are a lot of interesting articles on how to prevent the Out of Memory Killer (OOM killer in short) on Linux to ruin your day, or better your night. One particularly well done explanation about how the OOM Killer works, and how to help PostgreSQL to survive, is, in my humble opinion, the one from Percona Blog. *** ### Customizing Emacs for Git Commit Messages >I do a lot of commits to the FreeBSD project and elsewhere. It would be nice if I could setup emacs in a custom way for each commit message that I'm editing. > Fortunately, GNU Emacs provides a nice way to do just that. While I likely could do some of these things with git commit hooks, I find this to be a little nicer. *** ### Deleting old FreeBSD boot environments > I like boot environments (BE) on FreeBSD. They were especially handy when building the AWS host for FreshPorts, since I had no serial console. I would create a BE saving the current status, then make some changes. I’d mark the current BE as boot once, so I could boot back in the known good BE. Worst case, I could mount the storage onto a rescue EC2 instance and adjust the bootfs value of the zpool. ***

    Always be quitting

    A good philosophy to live by at work is to “always be quitting”. No, don’t be constantly thinking of leaving your job. But act as if you might leave on short notice. Counterintuitively, this will make you a better engineer and open up growth opportunities.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Christopher - zfs question
    • Chris - two questions
    • Vas - zpools and moving to FreeBSD 13
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    404: 404 BSD Now Hosts Not Found May 27, 2021

    Allan, Benedict and Tom are MIA, so JT fills in with two friends.

    This episode of BSDNow is brought to you by Tarsnap
    CoHosts this week:
    • Ash Gokhale: https://twitter.com/xpi
    • Jeff Propes : CoHost of The Opinion Dominion

    This weeks format follows the format of one of JT's other shows: The Opinion Dominion.

    Centralized vs Decentralized Management

    Ash’s draid article at Klara

    openbsd’s 50th release + Release Notes

    Beastie Bits

    •  Interesting dtrace papers I found this week.  The first is unfortunately paywalled by an industry journal but hopefully it’ll be publicly available soon.    
        ◦ [Using Dtrace for Machine Learning Solutions in Malware Detection](https://ieeexplore.ieee.org/document/9225633)
        ◦ [Process Monitoring on Sequences of System Call Count Vectors](https://arxiv.org/pdf/1707.03821.pdf)
        ◦ Sounds Similar to:
    
    • Optimyze Cloud](https://twitter.com/OptimyzeCloud/status/1386424419418099712)
    • CADETS that GNN is working on]

      • Practical IOT Hacking book out by no starch press

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. Open Source Voices episode with Colin Percival

    RIP Dan kaminski

    • https://www.nytimes.com/2021/04/27/technology/daniel-kaminsky-dead.html
    • https://www.darkreading.com/vulnerabilities---threats/in-appreciation-dan-kaminsky/d/d-id/1340830
    • https://www.securityweek.com/security-researcher-dan-kaminsky-passes-away
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    403: The Linuxulator Investment May 20, 2021

    Why You Should Use BSD Licensing for Your Next Open Source Project or Product, Update on FreeBSD Foundation Investment in Linuxulator, OPNsense 21.1.5 released, FreeBSD meetings on the Desktop, Running FreeBSD jails with containerd 1.5, Markdown, DocBook, and the quest for semantic documentation on NetBSD.org, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Why You Should Use BSD Licensing for Your Next Open Source Project or Product

    The term “open source” has its origins in the context of software development, designating a specific approach to developing computer programs. Nowadays, however, it stands for a broad set of values – open source means open exchange, transparency, collaborative participation and development for the benefit of the entire community.

    Update on FreeBSD Foundation Investment in Linuxulator

    Dr. Emmett Brown’s similar-sounding Flux Capacitor from the movie Back to the Future bridged the dimension of time, uniting past, present, and future for the McFlys. Similarly, the FreeBSDⓇ Linuxulator project also bridges dimensions – in our case, these are LinuxⓇ and FreeBSD.

    News Roundup

    OPNsense 21.1.5 released

    This is mainly a security and reliablility update. There are several FreeBSD
    security advisories and updates for third party tools such as curl.

    • OPNsense to rebase on FreeBSD 13 *** ### FreeBSD meetings on the Desktop FreeBSD on the desktop is a whole stack - X11, Qt, KDE Frameworks, KDE Plasma and KDE Gear, and Wayland, and Poppler and GTK - o my! *** ### Running FreeBSD jails with containerd 1.5 containerd 1.5.0 was released today and now works on a new operating system: FreeBSD! This new release includes a series of patches (1, 2, 3, 4, 5, 6, 7, 8, 9, 10) which allow containerd to build, enable the native and zfs snapshotters, and use a compatible runtime like runj. *** ### Markdown, DocBook, and the quest for semantic documentation on NetBSD.org Recently, I’ve been doing a lot of maintenance of the NetBSD website. It contains a boatload of documentation, much of which was originally written in the 2000s. It has some special requirements: it has to work in text-based web browsers like lynx, or maybe even without any working browser installed at all, or just ftp(1) for downloading plain text over HTTP. Naturally, the most important parts are static, suitable for serving from the standard NetBSD http server, which runs from inetd by default. ***

    Beastie Bits

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Alrekur - An Interesting FreeBSD Find They presented at the FreeBSD Vendor summit last year too: https://www.youtube.com/watch?v=8LUdZseNrpE
    • Sven - feedback
    • Robert - firewalling
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    402: Goodbye GPL May 13, 2021

    It's time to say goodbye to the GPL, a new OCI Runtime for FreeBSD Jails, A bit of Xenix history, On Updating QEMU's bsd-user fork, FreeBSD 13 on a 12 year old laptop, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    It's time to say goodbye to the GPL

    The trigger for this post is the reinstating of Richard Stallman, a very problematic character, to the board of the Free Software Foundation (FSF). I am appalled by this move, and join others in the call for his removal.
    This occasion has caused me to reevaluate the position of the FSF in computing. It is the steward of the GNU project (a part of Linux distributions, loosely speaking), and of a family of software licenses centred around the GNU General Public License (GPL). These efforts are unfortunately tainted by Stallman’s behaviour. However, this is not what I actually want to talk about today.

    runj: a new OCI Runtime for FreeBSD Jails

    Today, I open-sourced runj, a new experimental, proof-of-concept OCI-compatible runtime for FreeBSD jails. For the past 6.5 years I’ve been working on Linux containers, but never really had much experience with FreeBSD jails. runj (pronounced “run jay”) is a vehicle for me to learn more about FreeBSD in general and jails in particular. With my position on the Technical Oversight Board of the Open Containers Initiative, I’m also interested in understanding how the OCI runtime specification can be adapted to other operating systems like FreeBSD.

    News Roundup

    A Bit of Xenix History

    From 1986 to 1989, I worked in the Xenix1 group at Microsoft. It was my first job out of school, and I was the most junior person on the team. I was hopelessly naive, inexperienced, generally clueless, and borderline incompetent, but my coworkers were kind, supportive and enormously forgiving – just a lovely bunch of folks.

    On Updating QEMU's bsd-user fork

    FreeBSD 13 on a 12 year old laptop

    My old (2009) HP laptop now runs FreeBSD 13.0-RELEASE.

    Beastie Bits

    • Registration is now open for the June 2021 #FreeBSD Developers Summit
    • 6.0RC1 images available
    • Lexical File Names in Plan 9 or Getting Dot-Dot Right
    • The history of UTF-8 as told by Rob Pike
    • Initial Support for the riscv64 Architecture *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Hamza - Congrats on 400
    • Renato - DTS and ContainerD
    • Rob - Music
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    401: OpenBSD Dog Garage May 06, 2021

    Dog's Garage Runs OpenBSD, EuroBSDcon 2021 Call for Papers, FreeBSD’s iostat, The state of toolchains in NetBSD, Bandwidth limiting on OpenBSD 6.8, FreeBSD's ports migration to git and its impact on HardenedBSD, TrueNAS 12.0-U3 has been released, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    My Dog's Garage Runs OpenBSD

    I was inspired by the April 2017 article in undeadly.org about getting OpenBSD running on a Raspberry Pi 3B+. My goal was to use a Raspberry Pi running OpenBSD to monitor the temperature in my garage from my home. My dog has his own little "apartment" inside the garage, so I want to keep an eye on the temperature. (I don't rely on this device. He sleeps inside the house whenever he wants.)

    EuroBSDcon 2021 Call for Papers

    FreeBSD iostat

    The state of toolchains in NetBSD

    While FreeBSD and OpenBSD both switched to using LLVM/Clang as their base system compiler, NetBSD picked a different path and remained with GCC and binutils regardless of the license change to GPLv3. However, it doesn't mean that the NetBSD project endorses this license, and the NetBSD Foundation's has issued a statement about its position on the subject.

    • NetBSD’s statement ***

    News Roundup

    Bandwidth limiting on OpenBSD 6.8

    I will explain how to limit bandwidth on OpenBSD using its firewall PF (Packet Filter) queuing capability. It is a very powerful feature but it may be hard to understand at first. What is very important to understand is that it's technically not possible to limit the bandwidth of the whole system, because once data is getting on your network interface, it's already there and got by your router, what is possible is to limit the upload rate to cap the download rate.

    FreeBSD's ports migration to git and its impact on HardenedBSD

    FreeBSD completed their ports migration from subversion to git. Prior to the official switch, we used the read-only mirror FreeBSD had at GitHub[1]. The new repo is at [2]. A cursory glance at the new repo will show that the commit hashes changed. This presents an issue with HardenedBSD's ports tree in our merge-based workflow.

    TrueNAS 12.0-U3 has been released

    iXsystems is excited to announce TrueNAS 12.0-U3 was released today and marks an important milestone in the transition from FreeNAS to TrueNAS. TrueNAS 12.0 is now considered by iXsystems to be a higher quality release than FreeNAS 11.3-U5, our previous benchmark. The new TrueNAS documentation site has also reached a point where it has more content and capabilities than FreeNAS. TrueNAS 12.0 is ready for mission-critical enterprise deployments.

    Beastie Bits

    • Joyent provides pkgsrc for MacOS X
    • Archives of old Irix documentation
    • FreeBSD Developer/Vendor Summit 2021 ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Andre - splitting zfs array
    • Bruce - Command Change
    • Dan - Annoyances with ZFS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    400: FreeBSD became 13 Apr 29, 2021

    FreeBSD 13 is here, multi-factor authentication on OpenBSD, KDE on FreeBSD 2021o2, NetBSD GSoC report, a working D compiler on OpenBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD 13.0 R Annoucement

    • OpenZFS 2.0 (almost 2.1) is included in 13.0
    • Removed support for previously-deprecated algorithms in geli(8).
    • The armv8crypto(4) driver now supports AES-GCM which is used by IPsec and kernel TLS.
    

    Enable multi-factor authentication on OpenBSD

    In this article I will explain how to add a bit more security to your OpenBSD system by adding a requirement for user logging into the system, locally or by ssh. I will explain how to setup 2 factor authentication (2FA) using TOTP on OpenBSD

    News Roundup

    KDE on FreeBSD 2021o2

    Gosh, second octant already! Well, let’s take a look at the big things that happened in KDE-on-FreeBSD in these six-and-a-half weeks.

    GSoC Reports: Make system(3), popen(3) and popenve(3) use posix_spawn(3) internally (Final report)

    My code can be found at github.com/teknokatze/src in the gsoc2020 branch, at the time of writing some of it is still missing. The test facilities and logs can be found in github.com/teknokatze/gsoc2020. A diff can be found at github which will later be split into several patches before it is sent to QA for merging.
    The initial and defined goal of this project was to make system(3) and popen(3) use posix_spawn(3) internally, which had been completed in June. For the second part I was given the task to replace fork+exec calls in our standard shell (sh) in one scenario. Similar to the previous goal we determined through implementation if the initial motivation, to get performance improvements, is correct otherwise we collect metrics for why posix_spawn() in this case should be avoided. This second part meant in practice that I had to add and change code in the kernel, add a new public libc function, and understand shell internals.

    A working D compiler on OpenBSD

    Dr. Brian Robert Callahan (bcallah@) blogged about his work in getting D compiler(s) working under OpenBSD.

    • Full Post ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Vasilis - upgrade question
    • Dennis - zfs questions
    • Daniel Dettlaff - KTLS question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    399: Comparing Sandboxes Apr 22, 2021

    Comparing sandboxing techniques, Statement on FreeBSD development processes, customizing FreeBSD ports and packages, the quest for a comfortable NetBSD desktop, Nginx as a TCP/UDP relay, HardenedBSD March 2021 Status Report, Detailed Behaviors of Unix Signal, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Comparing sandboxing techniques

    I had the opportunity to implement a sandbox and I'd like to write about the differences between the various sandboxing techniques available on three different operating systems: FreeBSD, Linux and OpenBSD.

    Statement on FreeBSD development processes

    In light of the recent commentary on FreeBSD's development practices, members of the Core team would like to issue the following statement.

    Customizing FreeBSD Ports and Packages

    A basic intro to building your own packages

    News Roundup

    FVWM(3) and the quest for a comfortable NetBSD desktop

    FVWM substantially allows one to build a fully-fledged lightweight desktop environment from scratch, with an almost unparalleled degree of freedom. Although using FVWM does not require any knowledge of programming languages, it is possible to extend it with M4, C, and Perl preprocessing.

    Nginx as a TCP/UDP relay

    In this tutorial I will explain how to use Nginx as a TCP or UDP relay as an alternative to Haproxy or Relayd. This mean nginx will be able to accept requests on a port (TCP/UDP) and relay it to another backend without knowing about the content. It also permits to negociates a TLS session with the client and relay to a non-TLS backend. In this example I will explain how to configure Nginx to accept TLS requests to transmit it to my Gemini server Vger, Gemini protocol has TLS as a requirement.

    HardenedBSD March 2021 Status Report

    This month, I worked on finding and fixing the regression that caused kernel panics on our package builders. I think I found the issue: I made it so that the HARDENEDBSD amd64 kernel just included GENERIC so that we follow FreeBSD's toggling of features. Doing so added QUEUE_MACRO_DEBUG_TRASH to our kernel config. That option is the likely culprit. If the next package build (with the option removed) completes, I will commit the change that removes QUEUE_MACRO_DEBUG_TRASH from the HARDENEDBSD amd64 kernel.

    Detailed Behaviors of Unix Signal

    When Unix is mentioned in this document it means macOS or Linux as they are the mainly used Unix at this moment. When shell is mentioned it means Bash or Zsh. Most demos are written in C for macOS with Apple libc and Linux with glibc.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • andrew - flatpak

    • chris - mac and truenas

    • robert - some questions

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    398: Coordinated Mars Time Apr 15, 2021

    FreeBSD 13.0 Full Desktop Experience, FreeBSD on ARM64 in the Cloud, Plan 9 from Bell Labs in Cyberspace, Inferno is open source as well, NetBSD hits donation milestone, grep returns (standard input) on FreeBSD, Random Programming Challenge, OpenBSD Adds Support for Coordinated Mars Time (MTC) and more

    NOTES

    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD 13.0 – Full Desktop Experience

    With the release of FreeBSD 13.0 on the horizon, I wanted to see how it shapes up on my Lenovo T450 laptop. Previous major releases on this laptop, using it as a workstation, felt very rough around the edges but with 13, it feels like the developers got it right.

    FreeBSD on ARM64 in the Cloud

    Until the end of June, Amazon AWS is offering free ARM64 Graviton instances, learn how to try out FreeBSD to ARMv8 in the cloud

    Plan 9 from Bell Labs in Cyberspace!

    The releases below represent the historical releases of Plan 9. The two versions of 4th Edition represent the initial release and the final version available from Bell Labs as it was updated and patched. All historical releases of Plan 9 have been re-released under the terms of the MIT license.

    • Inferno is open source as well *** ## News Roundup ### Hitting donation milestone, financial report for 2020 We nearly hit our 2020 donation milestone set after the release of 9.0 of $50,000. ***

    grep returns (standard input) on FreeBSD

    I was dealing with a bizarre error with grep(1) on FreeBSD, and it soon infected my macOS and NetBSD machines too. It was driving me crazy!

    Random Programming Challenge

    This better not be an April Fools Joke… I want to see this actually implemented. I’ll donate $100 to the first BSD that actually implements this for real. Who’s with me?

    OpenBSD Adds Support for Coordinated Mars Time (MTC)

    To make sure that OpenBSD can be used elsewhere than just earth, this diff introduces Coordinated Mars Time (MTC), the Mars equivalent of earth’s Universal Time (UTC).
    OpenZFS had a good one too

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brandon - router

    • Lawrence - Is BSD for me

    • miguel - printing

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    397: Fresh BSD 2021 Apr 08, 2021

    Customizing the FreeBSD Kernel, OpenBSD/loongson on the Lemote Fuloong, how ZFS on Linux brings up pools and filesystems at boot under systemd, LLDB: FreeBSD Legacy Process Plugin Removed, FreshBSD 2021, gmid, Danschmid’s Poudriere Guide in english, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Customizing the FreeBSD Kernel

    Learn more about customizing the build of the FreeBSD kernel and its loadable modules

    OpenBSD/loongson on the Lemote Fuloong

    In my article about running OpenBSD/loongson on the Lemote Yeeloong back in 2016, I mentioned looking for a Fuloong. All hope seemed lost until the Summer of 2017, when a fellow OpenBSD developer was contacted by a generous user (Thanks again, Lars!) offering to donate two Lemote Fuloong machines, and I was lucky enough to get one of those units.

    News Roundup

    How ZFS on Linux brings up pools and filesystems at boot under systemd

    On Solaris and Illumos, how ZFS pools and filesystems were brought up at boot was always a partial mystery to me (and it seemed to involve the kernel knowing a lot about /etc/zfs/zpool.cache). On Linux, additional software RAID arrays are brought up mostly through udev rules, which has its own complications. For a long time I had the general impression that ZFS on Linux also worked through udev rules to recognize vdev components, much like software RAID. However, this turns out to not be the case and the modern ZFS on Linux boot process is quite straightforward on systemd systems.

    LLDB: FreeBSD Legacy Process Plugin Removed

    During the past month we’ve successfully removed the legacy FreeBSD plugin and continued improving the new one. We have prepared an implementation of hardware breakpoint and watchpoint support for FreeBSD/AArch64, and iterated over all tests that currently fail on that platform. Therefore, we have concluded the second milestone.

    FreshBSD 2021

    6 weeks ago I created a branch for a significant rework of FreshBSD. Nearly 300 commits later, and just a week shy of our 15th anniversary, the result is what you’re looking at now. I hope you like it.

    gmid is a gemini server for unixes.

    Danschmid’s Poudriere Guide now in english

    The ports system is one of FreeBSD's greatest advantages for users who want flexibility and control over their software. It enables administrators to easily create and manage source-based installations using a system that is robust and predictable.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Tom Jones.


    396: License to thrill Apr 01, 2021

    FreeBSD Network Troubleshooting, The State of FreeBSD, dhcpleased, bhyve for Calamares Development, EFS automount and ebsnvme-id, Old Usenix pictures, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD Network Troubleshooting

    FreeBSD has a full set of debugging features, and the network stack is able to report a ton of information. So much that it can be hard to figure out what is relevant and what is not.

    The State of FreeBSD

    License to thrill: Ahead of v13.0, the FreeBSD team talks about Linux and the completed toolchain project that changes everything

    News Roundup

    dhcpleased(8) - DHCP client daemon

    With the following commit, Florian Obser (florian@) imported dhcpleased(8), DHCP daemon to acquire IPv4 address leases from servers, plus dhcpleasectl(8), a utility to control the daemon:

    bhyve for Calamares Development

    bhyve (pronounced “bee hive”) is a hypervisor for BSD systems (and Illumos / openSolaris). It is geared towards server workloads, but does support desktop-oriented operation as well. I spent some time wayyyy back in November wrestling with it in order to replace VirtualBox for Calamares testing on FreeBSD. The “golden hint” as far as I’m concerned came from Karen Bruner and now I have a functioning Calamares test-ground that is more useful than before.
    “Calamares is a free and open-source independent and distro-agnostic system installer for Linux distributions.“

    Some new FreeBSD/EC2 features: EFS automount and ebsnvme-id

    As my regular readers will be aware, I've been working on and gradually improving FreeBSD/EC2 for many years. Recently I've added two new features, which are available in the weekly HEAD and 12-STABLE snapshots and will appear in releases starting from 12.2-RELEASE.

    Old Usenix pictures

    Beastie Bits

    [https://2021.eurobsdcon.org/](CFP is open until May 26th, 2021)

    EuroBSDcon is the European technical conference for users and developers of BSD-based systems. The conference is scheduled to take place September 16-19 2021 in Vienna, Austria or as an all-online event if COVID-19 developments dictate. The tutorials will be held on Thursday and Friday to registered participants and the talks are presented to conference attendees on Saturday and Sunday.
    The Call for Talk and Presentation proposals period will close on May 26th, 2021. Prospective speakers will be notified of acceptance or otherwise by June 1st, 2021.

    [https://campgnd.com/](CFP is open until 2021-04-15)

    campgndd will be held May 28th, 29th and 30th 2021, from wherever you happen to be.
    We're looking for submissions on anything you're enthusiastic and excited about. If you enjoy it, the odds are we will too! You don't need to be an expert to propose anything.
    Some example of things we are looking for are:
    Talks
    Walkthroughs
    Music

    From the Desk of Michael Lucas…

    New Release: Only Footnotes
    I’ve lost count of the number of people who have told me that they purchase my books only for the footnotes. That’s okay. I don’t care why people buy my books, only that they do buy them. Nevertheless, I am a businessman living under capitalism and feel compelled to respond to my market.
    Allow me to present my latest release: Only Footnotes, a handsome hardcover-only compilation of decades of footnotes. From the back cover:
    -----
    Only Footnotes. Because that’s why you read his books.
    Academics hate footnotes. Michael W Lucas loves them. What he does with them wouldn’t pass academic muster, but that doesn’t mean the reader should skip them. The footnotes are the best part! Why not read only the footnotes, and skip all that other junk?
    After literal minutes of effort, Only Footnotes collects every single footnote from all of Lucas’ books to date.* Recycle those cumbersome treatises stuffed with irrelevant facts! No more flipping through pages and pages of actual technical knowledge looking for the offhand movie reference or half-formed joke. This slender, elegant volume contains everything the man ever passed off as his dubious, malformed “wisdom.”
    Smart books have footnotes. Smarter books are only footnotes.
    *plus additional annotations from the author. Because sometimes even a footnote needs a footnote.
    ----
    With interior illustrations by OpenBSD’s akoshibe, this distinguished tome would make fine inspirational reading for a system administrator, network engineer, or anyone sentenced to a life in information technology. Available at all fine bookstores, and many mediocre ones!
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Tom Jones.


    395: Tracing ARM’s history Mar 25, 2021

    Tracing the History of ARM and FreeBSD, Make ‘less’ more friendly, NomadBSD 1.4 Release, Create an Ubuntu Linux jail on FreeBSD 12.2, OPNsense 21.1.2 released, Midnight BSD and BastilleBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Tracing the History of ARM and FreeBSD

    When we think of computers, we generally think of laptops and desktops. Each one of these systems is powered by an Intel or AMD chip based on the x86 architecture. It might feel like you spend all day interacting with these kinds of systems, but you would be wrong.

    Unix Tip: Make ‘less’ more friendly

    You probably know about less: it is a standard tool that allows scrolling up and down in documents that do not fit on a single screen. Less has a very handy feature, which can be turned on by invoking it with the -i flag. This causes less to ignore case when searching. For example, ‘udf’ will find ‘udf’, ‘UDF’, ‘UdF’, and any other combination of upper-case and lower-case. If you’re used to searching in a web browser, this is probably what you want. But less is even more clever than that. If your search pattern contains upper-case letters, the ignore-case feature will be disabled. So if you’re looking for ‘QXml’, you will not be bothered by matches for the lower-case ‘qxml’. (This is equivalent to ignorecase + smartcase in vim.)

    News Roundup

    NomadBSD 1.4 Release

    Version 1.4 of NomadBSD, a persistent live system for USB flash drives based on FreeBSD and featuring a graphical user interface built around Openbox, has been released: “We are pleased to present the release of NomadBSD 1.4.

    Create an Ubuntu Linux jail on FreeBSD 12.2

    OPNsense 21.1.2 released

    Work has so far been focused on the firmware update process to ensure its safety around edge cases and recovery methods for the worst case. To that end 21.1.3 will likely receive the full revamp including API and GUI changes for a swift transition after thorough testing of the changes now available in the development package of this release.

    Midnight BSD and BastilleBSD

    We recently added a new port, mports/sysutils/bastille that allows you to manage containers. This is a port of a project that originally targetted FreeBSD, but also works on HardenedBSD.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Brad - monitoring with Grafana
    • Dennis - a few questions
    • Paul - FreeBSD 13
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    394: FreeBSD on Mars Mar 18, 2021

    Onboard Scheduler for the Mars 2020 Rover, Practical Guide to Storage of Large Amounts of Microscopy Data, OpenBSD guest with bhyve - OmniOS, NextCloud on OpenBSD, MySQL Transactions - the physical side, TrueNAS 12.0-U2.1 is released, HardenedBSD 2021 State of the Hardened Union, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Prototyping an Onboard Scheduler for the Mars 2020 Rover

    • The mars rover runs VxWorks, which is based on BSD, and uses the FreeBSD networking stack. While there has been a lot of type about the little helicopter that was inside the rover running Linux, the rover itself runs BSD. *** ### Practical Guide to Storage of Large Amounts of Microscopy Data > Biological imaging tools continue to increase in speed, scale, and resolution, often resulting in the collection of gigabytes or even terabytes of data in a single experiment. In comparison, the ability of research laboratories to store and manage this data is lagging greatly. This leads to limits on the collection of valuable data and slows data analysis and research progress. Here we review common ways researchers store data and outline the drawbacks and benefits of each method. We also offer a blueprint and budget estimation for a currently deployed data server used to store large datasets from zebrafish brain activity experiments using light-sheet microscopy. Data storage strategy should be carefully considered and different options compared when designing imaging experiments. *** ## News Roundup ### OpenBSD guest with bhyve - OmniOS > Today I will be creating a OpenBSD guest via bhyve on OmniOS. I will also be adding a Pass Through Ethernet Controller so I can have a multi-homed guest that will serve as a firewall/router. > This post will cover setting up bhyve on OmniOS, so it will also be a good introduction to bhyve. As well, I look into OpenBSD’s uEFI boot loader so if you have had trouble with this, then you are in the right place. *** ### NextCloud on OpenBSD > NextCloud and OpenBSD are complimentary to one another. NextCloud is an awesome, secure and private alternative for propietary platforms, whereas OpenBSD forms the most secure and solid foundation to serve it on. Setting it up in the best way isn’t hard, especially using this step by step tutorial.

    MySQL Transactions - the physical side

    So you talk to a database, doing transactions. What happens actually, behind the scenes? Let’s have a look.

    TrueNAS 12.0-U2.1 is released

    HardenedBSD 2021 State of the Hardened Union - NYCBUG - 2021-04-07

    Beastie Bits

    • FreeBSD Journal: Case Studies *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Al - BusyNAS

    • Jeff - ZFS and NFS on FreeBSD

    • Michael - remote unlock for encrypted systems

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    393: ZFS dRAID Mar 11, 2021

    Lessons learned from a 27 years old UNIX book, Finally dRAID, Setting up a Signal Proxy using FreeBSD, Annotate your PDF files on OpenBSD, Things You Should Do Now, Just: More unixy than Make, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Lessons learned from a 27 years old UNIX book

    One of the Amazon reviewers of "Sun Performance and Tuning: Java and the Internet" gave it 3/5 stars. While still a nice introduction, the book by Adrian Cockcroft has become dated — claimed Roland in 2003, which believe it or not was 18 years ago...

    dRAID, Finally!

    Admins will often use wide RAID stripes to maximize usable storage given a number of spindles. RAID-Z deployments with large stripe widths, ten or larger, are subject to poor resilver performance for a number of reasons. Resilvering a full vdev means reading from every healthy disk and continuously writing to the new spare. This will saturate the replacement disk with writes while scattering seeks over the rest of the vdev. For 14 wide RAID-Z2 vdevs using 12TB spindles, rebuilds can take weeks. Resilver I/O activity is deprioritized when the system has not been idle for a minimum period. Full zpools get fragmented and require additional I/O’s to recalculate data during reslivering. A pool can degenerate into a never ending cycle of rebuilds or loss of the pool Aka: the Death Spiral.

    News Roundup

    Setting up a Signal Proxy using FreeBSD

    With the events that the private messaging app Signal has been blocked in Iran, Signal has come up with an “proxy” solution akin to Tor’s Bridges, and have given instructions on how to do it.
    For people who prefer FreeBSD over Linux like myself, we obviously can’t run Docker, which is what Signal’s instructions focus on.
    Fortunately, the Docker image is just a fancy wrapper around nginx, and the configs can be ported to any OS. Here, I’ll show you how to set up a Signal Proxy on FreeBSD.

    Annotate your PDF files on OpenBSD

    On my journey to leave macOS, I regularly look to mimic some of the features I use. Namely, annotating (or signing) PDF files is a really simple task using Preview. I couldn’t do it on OpenBSD using Zathura, Xpdf etc. But there is a software in the ports that can achieve this: Xournal.
    Xournal is “an application for notetaking, sketching, keeping a journal using a stylus“. And now that my touchscreen is calibrated, highlighting can even be done with the fingers :)

    Things You Should Do Now

    Describes things you should do now when building software, because the cost to do them increases over time and eventually becomes prohibitive or impossible.

    Just: A command runner. More unixy than Make because it does even less.

    I think it's in the do-one-thing-well spirit of Unix, because it's just a command runner, no build system at all. Just has a bunch of nice features:

    • Can be invoked from any subdirectory
    • Arguments can be passed from the command line
    • Static error checking that catches syntax errors and typos
    • Excellent error messages with source context
    • The ability to list recipes from the command line
    • Recipes can be written in any language
    • Works on Linux, macOS, and Windows
    • And much more!

    Just doesn't replace Make, or any other build system, but it does replace reverse-searching your command history, telling colleagues the weird flags they need to pass to do the thing, and forgetting how to run old projects.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Marc - Confused about Snapshots Dan’s gist: https://gist.github.com/dlangille/3140e60a816226ed75365ba8af185085
    • Pete - A Question
    • Rick - ZFS Idea
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Dan Langille.


    392: macOS inspired Desktop Mar 04, 2021

    FreeBSD 13 BETA Benchmarks, FreeBSD Jails Deep Dive by Klara Systems, FreeBSD Foundation looking for a Senior Arm Kernel Engineer & OSS Project Coordinator, macOS-Inspired BSD Desktop OS by helloSystem, A Trip into FreeBSD and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD 13 BETA Benchmarks - Performance Is Much Better

    FreeBSD Jails – Deep Dive into the Beginning of FreeBSD Containers

    In recent years, containers and virtualization have become a buzzword in the Linux community, especially with the rise of Docker and Kubernetes. What many people probably don’t realize is that these ideas have been around for a very long time. Today, we will be looking at Jails and how they became part of FreeBSD.

    News Roundup

    FreeBSD Jobs

    • The FreeBSD Foundation is looking for a Senior Arm Kernel Engineer
    • The FreeBSD Foundation is also looking for an Open Source Project Coordinator. *** ### helloSystem Releases New ISOs For This macOS-Inspired BSD Desktop OS > The helloSystem motto is being a "desktop system for creators with focus on simplicity, elegance, and usability. Based on FreeBSD. Less, but better!" The desktop utilities are written with PyQt5. *** ### A Trip into FreeBSD > I normally deal with Linux machines. Linux is what I know and it's what I've been using since I was in college. A friend of mine has been coaxing me into trying out FreeBSD, and I decided to try it out and see what it's like. Here's some details about my experience and what I've learned. *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Beastie Bits

    • Testing Linux Steam Proton on GhostBSD with BSD linuxulator - NO Audio
    • New Build of DragonFlyBSD 5.8
    • Install OpenBSD 6.8 on PINE64 ROCK64 Media Board
    • FOSDEM BSD Track Videos are up ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Dan Langille.


    391: i386 tear shedding Feb 25, 2021

    Follow-up about FreeBSD jail advantages, Install Prometheus, Node Exporter and Grafana, Calibrate your touch-screen on OpenBSD, OPNsense 21.1 Marvelous Meerkat Released, NomadBSD 1.4-RC1, Lets all shed a Tear for 386, find mostly doesn't need xargs today on modern Unixes, OpenBSD KDE Status Report, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Follow-up about FreeBSD jail advantages

    I’ll admit I ran a lot of justifications together into a single paragraph because I wanted to get to configuring the jails themselves. They’re also, by and large, not specific to FreeBSD’s flavour of containerisation, though I still think it’s easily the most elegant implementation. Sometimes the simplest solution really is the best one.

    History of FreeBSD part 4: TCP/IP

    • How TCP/IP evolved and BSDs special contribution to the history of the Internet ***

    FreeBSD: Install Prometheus, Node Exporter and Grafana

    FreeBSD comes out of the box with three great tools for monitoring. If you need more info about how these tools work, please read the official documentation. I’ll explain the installation only and creating a simple dashboard.

    News Roundup

    Calibrate your touch-screen on OpenBSD

    I didn’t expected it but my refurbished T460s came with a touch-screen. It is recognized by default on OpenBSD and not well calibrated as-is. But that’s really simple to solve.

    Lets all shed a Tear for 386

    FreeBSD is designating i386 as a Tier 2 architecture starting with FreeBSD 13.0. The Project will continue to provide release images, binary updates, and pre-built packages for the 13.x branch. However, i386-specific issues (including SAs) may not be addressed in 13.x. The i386 platform will remain Tier 1 on FreeBSD 11.x and 12.x.

    OPNsense 21.1 Marvelous Meerkat Released

    For more than 6 years, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.

    NomadBSD 1.4-RC1

    We are pleased to present the first release candidate of NomadBSD 1.4.

    find mostly doesn't need xargs today on modern Unixes

    I've been using Unix for long enough that 'find | xargs' is a reflex. When I started and for a long time afterward, xargs was your only choice for efficiently executing a command over a bunch of find results.

    OpenBSD KDE Status Report

    OpenBSD has managed to drop KDE3 and KDE4 in the 6.8 -> 6.9 release cycle. That makes me very happy because it was a big piece of work and long discussions. This of course brings questions: Kde Plasma 5 package missing.
    After half a year of work, I managed to successfully update the Qt5 stack to the last LTS version 5.15.2. On the whole, the most work was updating QtWebengine. What a monster! With my CPU power at home, I can build it 1-2 times a day which makes testing a little bit annoying and time intensive.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Karl - Firefox webcam audio solution
    • Michal - openzfs
    • Dave - bufferbloat
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    390: Commercial Unix Killer Feb 18, 2021

    Did Linux kill Commercial Unix, three node GlusterFS setup on FreeBSD, OpenBSD on the Lenovo ThinkPad X1 Nano (1st Gen), NetBSD on EdgeRouter Lite, TLS Mastery first draft done

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Did Linux Kill Commercial Unix?

    Sales of commercial Unix have fallen off a cliff. There has to be something behind this dramatic decline. Has Linux killed its ancestor by becoming a perfectly viable replacement, like an operating system version of Invasion of the Body Snatchers?

    Wireguard: Simple and Secure VPN in FreeBSD

    • A great article by Tom Jones about setting up Wireguard on FreeBSD ***

    Setup a Three Node Replicated GlusterFS Cluster on FreeBSD

    GlusterFS (GFS) is the open source equivalent to Microsoft's Distributed Filesystem (DFS). It's a service that replicates the contents of a filesystem in real time from one server to another. Clients connect to any server and changes made to a file will replicate automatically. It's similar to something like rsync or syncthing, but much more automatic and transparent. A FreeBSD port has been available since v3.4, and (as of this post) is currently at version 8.0 with 9.0 being released soon.

    News Roundup

    OpenBSD on the Lenovo ThinkPad X1 Nano (1st Gen)

    Lenovo has finally made a smaller version of its X1 Carbon, something I’ve been looking forward to for years.

    NetBSD on the EdgeRouter Lite

    NetBSD-current now has pre-built octeon bootable images (which will appear in NetBSD 10.0) for the evbmips port, so I decided to finally give it a try. I've been happily running OpenBSD/octeon on my EdgeRouter Lite for a few years now, and have previously published some notes including more detail about the CPU.

    “TLS Mastery” first draft done!

    Beastie Bits

    • A Thread on a FreeBSD Desktop for PineBook Pro
    • FOSSASIA Conference - March 2021(Virtual)
    • WireGuard for pfSense Software
    • NetBSD logo to going Moon *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ### Producer's Note > Hey everybody, it’s JT here. After our AMA episode where I mentioned I was looking for older BSD Retail Copies, I was contacted by Andrew who hooked me up with a bunch of OpenBSD disks from the 4.x era. So shout out to him, and since that worked so well, I figured I'd give it another shot and ask that if anyone has any old Unixes that will run on an 8088, 8086, or 286 and you're willing to send me copies of the disks. I've recently dug out an old 286 system and I’d love to get a Unix OS on it. I know of Minix, Xenix and Microport, but I haven’t been able to find many versions of them. I've found Microport 1.3.3, and SCO Xenix... but that's about it. Let me know if you happen to have any other versions, or know where I can get them.

    Feedback/Questions

    • Christian - ZFS replication and verification
    • Iain - progress
    • Paul - APU2 device ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    389: Comfy FreeBSD Jails Feb 10, 2021

    A week with Plan 9, Exploring Swap on FreeBSD, how to create a FreeBSD pkg mirror using bastille and poudriere, How to set up FreeBSD 12 VNET jail with ZFS, Creating Comfy FreeBSD Jails Using Standard Tools, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    A Week With Plan 9

    I spent the first week of 2021 learning an OS called Plan 9 from Bell Labs. This is a fringe Operating System, long abandoned by it’s original authors. It's also responsible for a great deal of inspiration elsewhere. If you’ve used the Go language, /proc, UTF-8 or Docker, you’ve used Plan 9-designed features. This issue dives into Operating System internals and some moderately hard computer science topics. If that sort of thing isn’t your bag you might want to skip ahead. Normal service will resume shortly.

    Exploring Swap on FreeBSD

    On modern Unix-like systems such as FreeBSD, “swapping” refers to the activity of paging out the contents of memory to a disk and then paging it back in on demand. The page-out activity occurs in response to a lack of free memory in the system: the kernel tries to identify pages of memory that probably will not be accessed in the near future, and copies their contents to a disk for safekeeping until they are needed again. When an application attempts to access memory that has been swapped out, it blocks while the kernel fetches that saved memory from the swap disk, and then resumes execution as if nothing had happened.

    News Roundup

    How to create a FreeBSD pkg mirror using bastille and poudriere

    This a short how-to for creating a FreeBSD pkg mirror using BastilleBSD and Poudriere.

    How to set up FreeBSD 12 VNET jail with ZFS

    How do I install, set up and configure a FreeBSD 12 jail with VNET on ZFS? How can I create FreeBSD 12 VNET jail with /etc/jail.conf to run OpenVPN, Apache, Wireguard and other Internet-facing services securely on my BSD box?
    FreeBSD jail is nothing but operating system-level virtualization that allows partitioning a FreeBSD based Unix server. Such systems have their root user and access rights. Jails can use network subsystem virtualization infrastructure or share an existing network. FreeBSD jails are a powerful way to increase security. Usually, you create jail per services such as an Nginx/Apache webserver with PHP/Perl/Python app, WireGuard/OpeNVPN server, MariaDB/PgSQL server, and more. This page shows how to configure a FreeBSD Jail with vnet and ZFZ on FreeBSD 12.x.

    Creating Comfy FreeBSD Jails Using Standard Tools

    Docker has stormed into software development in recent years. While the concepts behind it are powerful and useful, similar tools have been used in systems for decades. FreeBSD’s jails in one of those tools which build upon even older chroot(2) To put it shortly, with these tools, you can make a safe environment separated from the rest of the system.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Chris - USB BSD variant
    • Jacob - host wifi through a jail
    • Jordan - new tool vs updating existing tool ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    388: Must-have security tool Feb 04, 2021

    FreeBSD Q4 2020 Status report, a must-have security tool from OpenBSD, Bastille Port Redirection and Persistence, FreeBSD Wall Display Computer, etymology of command-line tools, GhostBSD 21.01.15 Release Notes, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD quarterly status report for Q4 2020

    Block spammers/abusive IPs with Pf-badhost in OpenBSD. A 'must have' security tool!

    Pf-badhost is a very practical, robust, stable and lightweight security script for network servers.
    It's compatible with BSD based operating systems such as {Open,Free,Net,Dragonfly}BSD and MacOS. It prevents potentially-bad IP addresses that could possibly attack your servers (and waste your bandwidth and fill your logfiles), by blocking all those IPs contacting your server, and therefore it makes your server network/resources lighter and the logs of important services running on your server become simpler, more readable and efficient.

    News Roundup

    Bastille Port Redirection and Persistence

    Bastille supports redirecting (rdr) ports from the host system into target containers. This port redirection is commonly used when running Internet services such as web servers, dns servers, email and many others. Any service you want to make public outside of your cluster will likely require port redirection (with some exceptions, see below).

    FreeBSD Wall Display Computer

    I've recently added a wall mounted 30" monitor for Grafana in my home. I can highly recommend doing the same, especially in a world where more work from home is becoming the norm.

    The etymology of command-line tools

    GhostBSD 21.01.15 Release Notes

    I am happy to announce the availability of the new ISO 21.01.15. This new ISO comes with a clean-up of packages that include removing LibreOffice and Telegram from the default selection. We did this to bring the zfs RW live file systems to run without problem on 4GB of ram machine. We also removed the UFS full disk option from the installer. Users can still use custom partitions to setup UFS partition, but we discourage it. We also fixed the Next button's restriction in the custom partition related to some bug that people reported. We also fix the missing default locale setup and added the default setup for Linux Steam, not to forget this ISO includes kernel, userland and numerous application updates.

    Beastie Bits

    • Interview with Brian Kernighan *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    387: OpenBSD Broadcast Studio Jan 28, 2021

    GNN's tips for surviving Cabin Fever and Coding from Home, Self-host a password manager on OpenBSD, Preliminary OpenBSD Support added to OBS, Dan's CURL tip of the Day, List of some Shell goodies for OpenBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    GNN's tips for surviving Cabin Fever and Coding from Home

    Forgive me if this seems off topic, but I was wondering if you had any advice for the majority of us who are now KFH (koding from home). I don't know how KV works day to day, but it seems pretty clear that the status quo has changed at most workplaces in the last several months, and it's hard to know if there are things we could be doing to stay productive while we're all at home, ordering delivery, and microwaving our mail. Does KV have any good guidance?

    Self-host a password manager on OpenBSD

    I’ve been using Rubywarden to store and access my passwords from OpenBSD workstations and iOS toys. But recent redondant failures from the iOS App and rubywarden not being maintained anymore led to the need for a new solution.
    I was investing on pass+pgp+git but it was quite complex.

    News Roundup

    Preliminary OpenBSD Support added to OBS

    Dan's CURL tip of the Day

    List of some Shell goodies for OpenBSD

    I'm sharing here some practices I'm following and some small tips/tools which facilitate my usage of OpenBSD in my day to day.
    Some are really specific to my usage, others could be re-used.

    Beastie Bits

    • [Traditional text mode games from BSD](https://github.com/msharov/bsd-games)
    • [FreeBSD Easter Eggs](https://twitter.com/freebsdfrau/status/972893680473317377)
    • [A prehistory and history of Unix Slide Deck](https://docs.google.com/presentation/d/1BxnFiP_Hv3HJbbYRfSxpTym7GzqxJPQlTE6Ur5h1Al8/edit#slide=id.g951f86c343_0_95)
    • [How to use Android USB Tethering to get Internet on FreeBSD](https://www.youtube.com/watch?v=cAEmtrEZlV8)
    • [VPN'Othon #2 for CharmBUG](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/387/charmbug_event.md)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • [Kev - Ramdisk](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/387/feedback/kev%20-%20ramdisk.md)
    • [John - new to freebsd](https://github.com/BSDNow/bsdnow.tv/blob/master/episodes/387/feedback/John%20-%20new%20to%20freebsd)
    
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    386: Aye, 386! Jan 21, 2021

    Routing and Firewalling VLANS with FreeBSD, FreeBSD 12 VNET jail with ZFS howto, pkgsrc-2020Q4 released, FreeBSD on Raspberry Pi 4 With 4GB of RAM, HardenedBSD December 2020 Status Report, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Routing and Firewalling VLANS with FreeBSD

    In this article we are going to look at and integrate two network isolation technologies, VLANs and VNET. VLANs are common place, and if you have done some network management or design then you are likely to have interacted with them. The second are FreeBSDs VNET virtual network stacks, a powerful network stack isolation technology that gives FreeBSD jails super powers.
    Ethernet VLAN (standardised by IEEE 802.1Q) are an extension to Ethernet and provide an essential method for scaling network deployments. They are used in all environments to enable reuse of common infrastructure by isolating portions of networks from each other. VLANs allow the reuse of common cables, switches and routers to carry completely different networks. It is common to have data that must be separated from different networks carried on common cables until their VLAN tags are finally stripped at a gateway switch or router.

    How to set up FreeBSD 12 VNET jail with ZFS

    How do I install, set up and configure a FreeBSD 12 jail with VNET on ZFS? How can I create FreeBSD 12 VNET jail with /etc/jail.conf to run OpenVPN, Apache, Wireguard and other Internet-facing services securely on my BSD box?
    FreeBSD jail is nothing but operating system-level virtualization that allows partitioning a FreeBSD based Unix server. Such systems have their root user and access rights. Jails can use network subsystem virtualization infrastructure or share an existing network. FreeBSD jails are a powerful way to increase security. Usually, you create jail per services such as an Nginx/Apache webserver with PHP/Perl/Python app, WireGuard/OpeNVPN server, MariaDB/PgSQL server, and more. This page shows how to configure a FreeBSD Jail with vnet and ZFS on FreeBSD 12.x.

    News Roundup

    pkgsrc-2020Q4 released

    The pkgsrc developers are proud to announce the 69th quarterly release
    of pkgsrc, the cross-platform packaging system. pkgsrc is available
    with more than 24,000 packages, running on 23 separate platforms; more
    information on pkgsrc itself is available at https://www.pkgsrc.org/

    FreeBSD ON A Raspberry PI 4 With 4GB of RAM

    This is the story of how I managed to get FreeBSD running on a Raspberry Pi 4 with 4GB of RAM, though I think the setup story is pretty similar for those with 2GB and 8GB.1

    HardenedBSD December 2020 Status Report

    Happy New Year! On this the last day of 2020, I submit December's status report.

    Beastie Bits

    • Christmas Cards The Unix Way - with pic and troff
    • Fast RPI3 upgrade from source (cross compile) *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Robert - zfs question

    • Neb - AMA episode.md

    • Joe - puppet

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    385: Wireguard VPN mesh Jan 14, 2021

    Description: History of FreeBSD: Early Days of FreeBSD, mesh VPN using OpenBSD and WireGuard, FreeBSD Foundation Sponsors LLDB Improvements, Host your Cryptpad web office suite with OpenBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    History of FreeBSD - Part 3: Early Days of FreeBSD

    In this third part of our series on the history of FreeBSD, we start tracing the early days of FreeBSD and the events that would eventually shape the project and the future of open source software.

    A mesh VPN using OpenBSD and WireGuard

    WireGuard is a new coming to OpenBSD 6.8 and it looks like a simple and efficient way to connect computers.
    I own a few VPS (hello Vultr, hello OpenBSD.amsterdam) that tend to be connected through filtered public services and/or SSH tunnels. And that’s neither efficient nor easy to manage. Here comes the wg(4) era where all those peers will communicate with a bit more privacy and ease of management.

    News Roundup

    Foundation Sponsors FreeBSD LLDB Improvements

    With FreeBSD Foundation grant, Moritz Systems improved LLDB support for FreeBSD
    The LLDB project builds on libraries provided by LLVM and Clang to provide a great modern debugger. It uses the Clang ASTs and the expression parser, LLVM JIT, LLVM disassembler, etc so that it provides an experience that “just works”. It is also blazing fast and more permissively licensed than GDB, the GNU Debugger.
    LLDB is the default debugger in Xcode on macOS and supports debugging C, Objective-C, and C++ on the desktop and iOS devices and the simulator.

    Host your Cryptpad web office suite with OpenBSD

    In this article I will explain how to deploy your own Cryptpad instance with OpenBSD. Cryptpad is a web office suite featuring easy real time collaboration on documents. Cryptpad is written in JavaScript and the daemon acts as a web server.

    Beastie Bits

    • OPNsense 20.7.7 Released
    • Introducing OpenZFS 2.0 Webinar - Jan 20th @ noon Eastern / 17:00 UTC.
    • BSD In Die Hard
    • Managing jails with Ansible: a showcase for building a container infrastructure on FreeBSD
    • BSD Hardware
    • New WINE chapter in FreeBSD handbook ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***

    Feedback/Questions

    • scott- zfs question
    • Bruce - copy paste on esxi
    • Julian - an apology for Allan

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    384: In memoriam Jan 07, 2021

    Allen K. Briggs Memorial Scholarship, Toward an automated tracking of OpenBSD ports contributions, Trying OpenZFS 2 on FreeBSD 12.2-RELEASE, OpenBSD on TECLAST F7 Plus, Multi-volume support in HAMMER2, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Allen K. Briggs Memorial Scholarship

    Allen Briggs was one of the earliest members of the NetBSD community, pursuing his interest in macBSD, and moving to become a NetBSD developer when the two projects merged. Allen was known for his quiet and relaxed manner, and always brought a keen wisdom with him; allied with his acute technical expertise, he was one of the most valued members of the NetBSD community.
    The Allen K. Briggs Memorial Scholarship is an endowment to provide scholarships in perpetuity for summer programs at the North Carolina School of Science & Math, which Allen considered to be a place that fundamentally shaped him as a person. We would love to invite Allen's friends and colleagues from the BSD community to donate to this cause so that we can provide more scholarships to students with financial need each year. We are approximately halfway to our goal of $50K with aspirations to exceed that target and fund additional scholarships.

    Toward an automated tracking of OpenBSD ports contributions

    A first step for the CI service would be to create a database of diffs sent to ports. This would allow people to track what has been sent and not yet committed and what the state of the contribution is (build/don’t build, apply/don’t apply).

    News Roundup

    Trying OpenZFS 2 on FreeBSD 12.2-RELEASE

    OpenZFS 2 is a huge achievement, and makes me bullish about the long term prospects for the world’s most trustworthy and nicest to use storage system. You can even use try it today on FreeBSD 12.2-RELEASE, though I recommend tracking -CURRENT for these sorts of features.

    OpenBSD on TECLAST F7 Plus

    I got myself a TECLAST F7 Plus laptop. It comes preinstalled with Windows 10 but I planned to use it as my daily driver. So I installed OpenBSD 6.8 on it.

    Multi-volume support in HAMMER2

    • commit > This commit adds initial multi-volumes support for HAMMER2. Maximum supported volumes is 64. The feature and implementation is similar to multi-volumes support in HAMMER1. ***

    Beastie Bits

    • FreeBSD Last SVN Commit
    • FreeBSD First git Commit
    • Introducing OpenZFS 2.0 Webinar - Jan 20th @ noon Eastern / 17:00 UTC. ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. ***

    Feedback/Questions

    • jay - feedback for ian
    • Iebluefire - concerns about freebsd
    • mike - zfs cluster aware ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    383: Scale the tail Dec 31, 2020

    FreeBSD Remote Process Plugin Final Milestone achieved, Tailscale for OpenBSD, macOS to FreeBSD migration, monitoring of our OpenBSD machines, OPNsense 20.7.6 released, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD Remote Process Plugin: Final Milestone Achieved

    Moritz Systems have been contracted by the FreeBSD Foundation to modernize the LLDB debugger’s support for FreeBSD. We are working on a new plugin utilizing the more modern client-server layout that is already used by Darwin, Linux, NetBSD and (unofficially) OpenBSD. The new plugin is going to gradually replace the legacy one.

    Tailscale on OpenBSD

    I spent some time setting this up today evening and thought I’d post the steps here. Nothing fancy, just putting together various pieces actually.
    I assume you know what Tailscale is; if not check out their website. Basically it is a mesh network built on top of Wireguard. Using it you can have all your devices both within your LAN(s) and outside be on one overlay network as if they are all on the same LAN and can talk to each other. It’s my new favourite thing!

    News Roundup

    macOS to FreeBSD migration a.k.a why I left macOS

    This is not a technical documentation for how I migrated from macOS to FreeBSD. This is a high-level for why I migrated from macOS to FreeBSD.
    Not so long ago, I was using macOS as my daily driver. The main reason why I got a macbook was the underlying BSD Unix and the nice graphics it provides. Also, I have an iPhone. But they were also the same reasons for why I left macOS.

    Our monitoring of our OpenBSD machines, such as it is (as of November 2020

    We have a number of OpenBSD firewalls in service (along with some other OpenBSD servers for things like VPN endpoints), and I was recently asked how we monitor PF and overall network traffic on them. I had to disappoint the person who asked with my answer, because right now we mostly don't (although this is starting to change).

    OPNsense 20.7.6 released

    This update brings the usual mix of reliability fixes, plugin and third party software updates: FreeBSD, HardenedBSD, PHP, OpenSSH, StrongSwan, Suricata and Syslog-ng amongst others.
    Please note that Let's Encrypt users need to reissue their certificates manually after upgrading to this version to fix the embedded certificate chain issue with the current signing CA switch going on.

    NYC Bug Jan 2021 with Michael W. Lucas

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • cy - .so files
    • ben - mixer volume
    • probono - live cds
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    382: BSDNow Q&A 2020 Dec 24, 2020

    We asked for it, you answered our call. This episode features you interviewing us with questions that you sent in. JT, Allan, and Benedict answer everything that you ever wanted to know in this week’s special episode of BSDNow.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Interview - Allan Jude - [Allan.jude@gmail.com](Allan.jude@gmail.com) / @allanjude

    Interview - Benedict Reuschling - bcr@freebsd.org / @bsdbcr

    Interview - JT Pennington - jt@obs-sec.com / @q5sys

    AMA questions

    Benedict: You work at a university right? Were you already into tech before you started working there? What do you do there?
    Yes, I do work at the University of Applied Sciences, Darmstadt, Germany. I’m a lab engineer there (without a lab, but with a big data cluster). I teach in the winter semester an undergraduate, elective course called “Unix for Developers”. Yes, I was already in tech by that time. Did some previous work at companies before (selling hardware at the call-in hotline and later in the store) and during my CS studies.
    Allan: What’s the next big FreeBSD Project you plan on doing?

    JT: How did you get involved in BSD? Weren't you a Linux guy?

    All: Is there any way you can create an entire episode of BSDnow on hardware that runs OpenBSD and FreeBSD? We see you audacity, etc on a mac.
    Benedict: Not sure about OpenBSD (don’t use it), but FreeBSD should be doable for my part. If we switch from Skype to a different video chat tool, the rest is already there. Production side may be more difficult, but not impossible.

    All: if you could finish up one project right now... what would it be?
    Benedict: Updated ZFS chapter in the FreeBSD handbook.

    All: How did all of you guys meet?

    All: My question is, do you guys use FreeBSD as your main desktop OS? If not, what do you use?
    Benedict: No, but Mac OS is close enough. Doing a lot of SSHing into FreeBSD from there.
    All: Can you all give us the best shot of outside of their windows?
    JT’s answer: https://photos.smugmug.com/photos/i-2LSbspL/0/69437dbb/5K/i-2LSbspL-5K.jpg
    Allan: https://photos.app.goo.gl/UnKXnKMt6cn8FDhNA
    Benedict: No, it’s dark outside anyway. ;-)

    All: How old were you when you got your first computer and what was that computer?
    Allan: 12 or 13, a 486DX2/66hz with an insane 32mb of RAM, 400 and 500 MB SCSI HDDs, 14400 baud model, and a 1.7x CD rom drive
    Benedict: Around 13 or so. 386DX2, 4 MB RAM, IDE disk drive (no idea how big, but it wasn’t much), 3.5” floppy, DOS, and a lot of games.
    JT: Technically the first was a Atari 1200XL with a 6502 CPU running at 1.79 MHz 64KB RAM. It had it's own OS and you could load programs off of either cartridges, floppy disks, or cassette tapes. First PC Clone was a Packard Bell with a 386 and 1mb ram which later was upgraded to 4mb and a Dual speed CD-ROM. My dad got me a Compaq 286 laptop... this one (show)... a year or so later because he got tired of fighting me for the computer.

    All: Can we have a peek at your bookcase and what books are there?
    Allan: No picture handy, but my shelf is pretty small, mostly a collection of autographed FreeBSD books. I have D&I with all 3 autographs (took some travel to acquire), and a copy of my first book (FreeBSD Mastery: ZFS) autographed by Jeff Bonwick and Matt Ahrens, the creators of ZFS, plus a bunch of other big names in ZFS like George Wilson.
    JT’s answer: So... my library is packed away... but here’s about half of it... the rest is still in storage. https://photos.smugmug.com/photos/i-SBG2KDv/0/0b9856b8/4K/i-SBG2KDv-4K.jpg
    Software Collection: https://photos.smugmug.com/photos/i-HfTVPN9/0/ad610dd4/O/i-HfTVPN9.jpg
    Benedict: A mix of FreeBSD books (by MWL), the graveyard book, 4 hour work week, the once and future king (took me a long time to finish that one), Total Immersion swimming (still learning to swim) and some books in german language, fiction and tech. Groff lives in there while the pandemic lasts.

    All: What desktop/Window Manager/shell do each of you primarily use?
    Benedict: Mainly Mac OS, when on FreeBSD it’s i3. Zsh with zsh-autosuggestions currently.
    JT: Lumina/zsh
    Allan: Lumina and tcsh, want to learn zsh but never gotten time to change

    All: What spoken languages do you speak?
    Benedict: German and English (obviously), learning a bit of Spanish via Duolingo at the moment
    JT: English, Bad English, and some French.
    All: Do you have Non-Computer hobbies if so what are those?
    Benedict: Tai Chi Chuan (Yang Style)
    JT: I'd say photography, but that's a job for me. I have a lot of varied interests, Krav Maga, working on my VW Corrado, working on the old Victorian house I bought, and camping/backpacking. Ive done the northern half of the AT (Appalachian Trail, I want to finish it up and then do the PCT and CDT. (Pacific Crest Trail and Continental Divide Trail).

    All: When COVID passes, when are either of you are coming to BSD pizza night in Portland, OR, USA so I can buy you a beer/wine/whisky or pizza/coffee/tea (or six)

    Rapid Fire:

    All: What was the first car you ever owned?

    All: Do you own a vehicle and if so what is the make/model?

    All: Favorite Star franchise? Star Wars, Star Trek, Stargate, Battlestar, etc.

    JT: Will you ever host any more BSDNow episodes?

    All: Favorite superhero? Marvel and/or DC.

    All: Favorite game(s) of all time?

    All: Pants or no pants on virtual meetings/presentations?

    All: Do you or have you used alternative operating systems that are not "main stream or is considered retro" if so what are those?

    All: Who has more animals at home?

    Allan: Does Allan have any batteries for his tetris cubes? Can we see that thing light up?

    Allan and Benedict: Are you guys going to go on JT's new show?

    If you’re wondering what show this is, here are the two shows Im a host of:

    https://www.opensourcevoices.org & https://www.theopiniondominion.org

    Allan and Benedict: Have Allan or Benedict lost anything on the way to and from a conference?

    Benedict: Is Benedict going to do his NOEL blocks again?

    Benedict: Does Benedict make his bed every Wednesday morning? It always looks great!
    Not just Wednesdays, but pretty much every day. Here, watch this: https://www.youtube.com/watch?v=GKZRFDCbGTA Nuff said. ;-)
    JT: Are you batman because the episodes are always awesome sir so thank you
    JT’s answer: Can you ever admit to being batman? If I were batman wouldn't I have to deny it?

    All: What's your Daily Driver Hardware?

    All: Who has more servers or VMs at home?
    Benedict: Allan, easily
    JT: Allan definitely beats me with VMs, but I think I might give him a run on servers. 4x 4u HP DL580s, one HP DL980, three HP C3000 8 bay bladecenters, three HP C7000 16 bay Bladecenters, 2x Sun 280R, bunch of Dell and IBM 1Us… but all my stuff is old. Allan has all the new and shiny stuff.
    The Pile in the Kitchen: https://photos.smugmug.com/photos/i-HBScrpk/0/4b058cc5/X2/i-HBScrpk-X2.jpg
    The other pile: https://photos.smugmug.com/photos/i-wNxFszV/0/e7a4b2d6/X2/i-wNxFszV-X2.jpg

    All: What book(s) are you currently reading?
    Benedict: Antifragile by Nassim Taleb
    JT: Douglas Hofstader - Gödel, Escher, Bach: An Eternal Golden Braid. Douglas Rushkoff - program or be programmed. Also a 4 part book series on the American civil war written in the 1880s, by people in the civil war.

    All: Favorite mechanical keyboard switch? Cherry MX, Kalih, Gateron, etc.
    Benedict: Cherry MX brown currently
    Allan: Cherry MX Blue (Coolermaster Master Keys Pro-L)
    JT: I prefer scissor switches, so I use a Logitech K740.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    381: Shell origins Dec 17, 2020

    The Origin of the Shell, Return to Plan 9, ArisbluBSD: Why a new BSD?, OPNsense 20.7.5 released, Midnight BSD 2.0 Release Status, HardenedBSD November 2020 Status Report, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    The Origin of the Shell

    CTSS was developed during 1963 and 64. I was at MIT on the computer center staff at that time. After having written dozens of commands for CTSS, I reached the stage where I felt that commands should be usable as building blocks for writing more commands, just like subroutine libraries. Hence, I wrote "RUNCOM", a sort of shell driving the execution of command scripts, with argument substitution. The tool became instantly most popular, as it became possible to go home in the evening while leaving behind long runcoms executing overnight. It was quite neat for boring and repetitive tasks such as renaming, moving, updating, compiling, etc. whole directories of files for system and application maintenance and monitoring.

    Return to Plan 9

    Plan 9 from Bell Labs has held the same charm after my last visit that took a few days. This time I'll keep this operating system in an emulator where I can explore into it when I am distracted.

    News Roundup

    Why a new BSD?

    This article is to explain some decisions and plans made by the ArisbluBSD team, why we are making our own thing, and what the plan is for the OS. We mainly want to talk about five things: desktop, package management, software availability, custom software, and the future of the OS. We mostly want to explain what the goal of the OS is, and how we plan to expand in the near future. Without further ado, let's explain ArisbluBSD's plan.

    OPNsense 20.7.5 released

    We return briefly for a small patch set and plan to pin the 20.1 upgrade path to this particular version to avoid unnecessary stepping stones. We wish you all a healthy Friday. And of course: patch responsibly!

    Midnight BSD 2.0 Release Status

    We identified some issues with the 2.0 ISOs slated for release with the ZFS bootloader not working.
    Until this issue is resolved, we are unable to build release ISOs. We've left the old ones up as they work fine for anyone using UFS.

    HardenedBSD November 2020 Status Report

    We're getting close to the end of November. My wife and I have plans this weekend, so I thought I'd take the time to write November's status report today.

    Beastie Bits

    • [rga: ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc.](https://phiresky.github.io/blog/2019/rga--ripgrep-for-zip-targz-docx-odt-epub-jpg/)
    • [exa - A modern replacement for ls](https://the.exa.website/)
    • [The myriad meanings of pwd in Unix systems](https://qmacro.org/2020/11/08/the-meaning-of-pwd-in-unix-systems/)
    

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Karl - Camera Help
    • Alejandro - domain registrar
    • Johnny - thoughts on 372 ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    380: Early ZFS-mas Dec 10, 2020

    We read FreeBSD’s 3rd quarter status report, OpenZFS 2.0, adding check-hash checks in UFS filesystem, OpenSSL 3.0 /dev/crypto issues on FreeBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    3rd Quarter FreeBSD Report

    The call for submissions for the 4th Quarter is out

    OpenZFS 2.0

    This Monday, ZFS on Linux lead developer Brian Behlendorf published the OpenZFS 2.0.0 release to GitHub. Along with quite a lot of new features, the announcement brings an end to the former distinction between "ZFS on Linux" and ZFS elsewhere (for example, on FreeBSD). This move has been a long time coming—the FreeBSD community laid out its side of the roadmap two years ago—but this is the release that makes it official.

    News Roundup

    Revision 367034

    Various new check-hash checks have been added to the UFS filesystem
    over various major releases. Superblock check hashes were added for
    the 12 release and cylinder-group and inode check hashes will appear
    in the 13 release.

    OpenSSL 3.0 /dev/crypto issues on FreeBSD

    So, just learned that the OpenSSL devs decided to break /dev/crypto on FreeBSD.

    OS108-9.1 XFCE amd64 released

    • OS108 is a fast, open and Secure Desktop Operating System built on top of NetBSD. > Installing OS108 to your hard drive is done by using the sysinst utility, the process is basically the same as installing NetBSD itself. Please refer to the NetBSD guide for installation details, http://www.netbsd.org/docs/guide/en/part-install.html
    • Installation Video ***

    Beastie Bits

    • OpenBGPD 6.8p1 portable: released Nov 5th, 2020
    • IRC Awk Bot
    • Docker on FreeBSD using bhyve and sshfs
    • The UNIX Command Language (1976) ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • santi - openrc
    • trond - python2 and mailman
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    379: bhyve my guest Dec 03, 2020

    Adventures in Freebernetes, tracing kernel functions, The better way of building FreeBSD networks, New beginnings: CDBUG virtual meetings, LibreSSL update in DragonFly, Signal-cli with scli on FreeBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Adventures in Freebernetes: bhyve My Guest

    Part 2 of experiments in FreeBSD and Kubernetes: Creating your first guest

    Tracing Kernel Functions: FBT stack() and arg

    In my previous post I described how FBT intercepts function calls and vectors them into the DTrace framework. That laid the foundation for what I want to discuss in this post: the implementation of the stack() action and built-in arg variables. These features rely on the precise layout of the stack, the details of which I touched on previously. In this post I hope to illuminate those details a bit more with the help of some visuals, and then guide you through the implementation of these two DTrace features as they relate to the FBT provider.

    News Roundup

    Dummynet: The Better Way of Building FreeBSD Networks

    Dummynet is the FreeBSD traffic shaper, packet scheduler, and network emulator. Dummynet allows you to emulate a whole set of network environments in a straight-forward way. It has the ability to model delay, packet loss, and can act as a traffic shaper and policer. Dummynet is roughly equivalent to netem in Linux, but we have found that dummynet is easier to integrate and provides much more consistent results.

    New beginnings: CDBUG virtual meetings

    I had overwhelmingly positive responses from the broader *BSD community about restarting CDBUG meetings as virtual, at least for now. Hopefully this works well and even when we're back to in-person meetings we can still find a way to bring in virtual attendees.

    LibreSSL update in DragonFly

    DragonFly has a new version of libressl, noting cause it has a newer TLS1.3 implementation – something that may be necessary for you.

    Signal-cli with scli on FreeBSD

    So couple of days ago I migrated from macOS on Macbook Pro to FreeBSD on ThinkPad T480s.

    Beastie Bits

    • Firefox is not paxctl safe for NetBSD
    • FreeBSD 12.2-RELEASE on Microsoft Azure Marketplace

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • carlos - BSD Now around the world
    • paulo - freebsd on a Bananapi
      • paulo - followup
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    378: Networknomicon Nov 26, 2020

    Interview with Michael W. Lucas: SNMP and TLS book, cashflow for creators, book sale and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Interview with Michael W. Lucas

    SNMP Book
    The Networknomicon
    Sponsor the TLS Book
    Cashflow for creators
    Book sale

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Michael W Lucas.


    377: Firewall ban-sharing Nov 19, 2020

    History of FreeBD: BSDi and USL Lawsuits, Building a Website on Google Compute Engine, Firewall ban-sharing across machines, OpenVPN as default gateway on OpenBSD, Sorting out what the Single Unix Specification is, Switching from Apple to a Thinkpad for development, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    History of FreeBSD : Part 2 : BSDi and USL Lawsuits

    In this second part of our series on the history of FreeBSD, we continue to trace the pre-history of FreeBSD and the events that would eventually shape the project and the future of open source software.

    Building a Web Site on Google Compute Engine

    Here's how I deployed a web site to the Google Cloud Platform. I used FreeBSD for good performance, stability, and minimal complexity. I set up HTTPS with free Let's Encrypt TLS certificates for both RSA and ECC. Then I adjusted the Apache configuration for a good score from the authoritative Qualys server analysis.

    News Roundup

    Firewall ban-sharing across machines

    As described in My infrastructure as of 2019, my machines are located in three different sites and are loosely coupled. Nonetheless, I wanted to set things up so that if an IP address is acting maliciously toward one machine, all my machines block that IP at once so the meanie won't get to try one machine after another.

    OpenVPN as default gateway on OpenBSD

    If you plan to use an OpenVPN tunnel to reach your default gateway, which would make the tun interface in the egress group, and use tun0 in your pf.conf which is loaded before OpenVPN starts?
    Here are the few tips I use to solve the problems.

    Sorting out what the Single Unix Specification is and covers

    Sorting out what the Single Unix Specification is and covers
    October 8, 2020
    I've linked to the Single Unix Specification any number of times, for various versions of it (when I first linked to it, it was at issue 6, in 2006; it's now up to a 2018 edition). But I've never been quite clear what it covered and didn't cover, and how it related to POSIX and similar things. After yesterday's entry got me looking at the SuS site again, I decided to try to sort this out once and for all.

    Bye-bye, Apple

    The days of Apple products are behind me. I had been developing on a Macbook for over twelve years, but now, I’ve switched to an ever trending setup: OpenBSD on a Thinkpad.
    The new platform is a winner. Everything is clean, quick, and configurable. When I ps uaxww, I’m not hogging ‘gigs’ of RAM just to have things up and running. There’s no black magic that derails me at every turn. In short, my sanity has been long restored.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Chris - small projects
    • Jens - ZFS Question
      • One pool to rule them all
    • Shroyer - Dotnet on FreeBSD for Jellyfin ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    376: Build stable packages Nov 12, 2020

    FreeBSD 12.2 is available, ZFS Webinar, Enhancing Syzkaller support for NetBSD, how the OpenBSD -stable packages are built, OPNsense 20.7.4 released, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD 12.2 Release

    The release notes for FreeBSD 12.2-RELEASE contain a summary of the changes made to the FreeBSD base system on the 12-STABLE development line. This document lists applicable security advisories that were issued since the last release, as well as significant changes to the FreeBSD kernel and userland. Some brief remarks on upgrading are also presented.

    ZFS Webinar: November 18th

    Join us on November 18th for a live discussion with Allan Jude (VP of Engineering at Klara Inc) in this webinar centred on “best practices of ZFS”
    Building Your Storage Array – Everything from picking the best hardware to RAID-Z and using mirrors.
    Keeping up with Data Growth – Expanding and growing your pool, and of course, shrinking with device evacuation.
    Datasets and Properties – Controlling settings with properties and many other tricks!

    News Roundup

    Google Summer of Code 2020: [Final Report] Enhancing Syzkaller support for NetBSD

    Sys2syz would give an extra edge to Syzkaller for NetBSD. It has a potential of efficiently automating the conversion of syscall definitions to syzkaller’s grammar. This can aid in increasing the number of syscalls covered by Syzkaller significantly with the minimum possibility of manual errors. Let’s delve into its internals.

    How the OpenBSD -stable packages are built

    In this long blog post, I will write about the technical details of the OpenBSD stable packages building infrastructure. I have setup the infrastructure with the help of Theo De Raadt who provided me the hardware in summer 2019, since then, OpenBSD users can upgrade their packages using pkg_add -u for critical updates that has been backported by the contributors. Many thanks to them, without their work there would be no packages to build. Thanks to pea@ who is my backup for operating this infrastructure in case something happens to me.

    OPNsense 20.7.4 released

    This release finally wraps up the recent Netmap kernel changes and tests.
    The Realtek vendor driver was updated as well as third party software cURL,
    libxml2, OpenSSL, PHP, Suricata, Syslog-ng and Unbound just to name a couple
    of them.

    Beastie Bits

    • Binutils and linker changes
    • 28 Years of NetBSD contributions
    • Bluetooth Audio on OpenBSD
    • K8s Bhyve ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Sean - C Flags
    • Thierry - RPI ZFS question
      • Thierry's script ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    375: Virtually everything Nov 05, 2020

    bhyve - The FreeBSD Hypervisor, udf information leak, being a vim user instead of classic vi, FreeBSD on ESXi ARM Fling: Fixing Virtual Hardware, new FreeBSD Remote Process Plugin in LLDB, OpenBSD Laptop, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    bhyve - The FreeBSD Hypervisor

    FreeBSD has had varying degrees of support as a hypervisor host throughout its history. For a time during the mid-2000s, VMWare Workstation 3.x could be made to run under FreeBSD’s Linux Emulation, and Qemu was ported in 2004, and later the kQemu accelerator in 2005. Then in 2009 a port for VirtualBox was introduced. All of these solutions suffered from being a solution designed for a different operating system and then ported to FreeBSD, requiring constant maintenance.

    ZFS and FreeBSD Support

    Klara offers flexible Support Subscriptions for your ZFS and FreeBSD infrastructure. Get a world class team of experts to back you up. Check it out on our website!

    udf info leak

    FreeBSD UDF driver info leak
    Analysis done on FreeBSD release 11.0 because that's what I had around.

    • Fix committed to FreeBSD ***

    News Roundup

    I'm now a user of Vim, not classical Vi (partly because of windows)

    In the past I've written entries (such as this one) where I said that I was pretty much a Vi user, not really a Vim user, because I almost entirely stuck to Vi features. In a comment on my entry on not using and exploring Vim features, rjc reinforced this, saying that I seemed to be using vi instead of vim (and that there was nothing wrong with this). For a long time I thought this way myself, but these days this is not true any more. These days I really want Vim, not classical Vi.

    FreeBSD on ESXi ARM Fling: Fixing Virtual Hardware

    With the current state of FreeBSD on ARM in general, a number of hardware drivers are either set to not auto-load on boot, or are entirely missing altogether. This page is to document my findings with various bits of hardware, and if possible, list fixes.

    Introduction of a new FreeBSD Remote Process Plugin in LLDB

    Moritz Systems have been contracted by the FreeBSD Foundation to modernize the LLDB debugger’s support for FreeBSD. We are writing a new plugin utilizing the more modern client-server layout that is already used by Darwin, Linux, NetBSD and (unofficially) OpenBSD. The new plugin is going to gradually replace the legacy one.

    OpenBSD Laptop

    Hi, I know it’s been a while. I recently had to nuke and re-pave my personal laptop and I thought it would be a nice thing to share with the community how I set up OpenBSD on it so that I have a useful, modern, secure environment for getting work done. I’m not going to say I’m the expert on this or that this is the BEST way to set up OpenBSD, but I thought it would be worthwhile for folks doing Google searches to at least get my opinion on this. So, given that, let’s go…

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Ethan - Linux user wanting to try out OpenBSD
    • iian - Learning IT
    • johnny - bsd swag
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    374: OpenBSD’s 25th anniversary Oct 29, 2020

    OpenBSD 6.8 has been released, NetBSD 9.1 is out, OpenZFS devsummit report, BastilleBSD’s native container management for FreeBSD, cleaning up old tarsnap backups, Michael W. Lucas’ book sale, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    OpenBSD 6.8

    Released Oct 18, 2020. (OpenBSD's 25th anniversary)

    NetBSD 9.1 Released

    The NetBSD Project is pleased to announce NetBSD 9.1, the first update of the NetBSD 9 release branch. It represents a selected subset of fixes deemed important for security or stability reasons, as well as new features and enhancements.

    OpenZFS Developer Summit 2020

    As with most other conferences in the last six months, this year’s OpenZFS Developer’s Summit was a bit different than usual. Held via Zoom to accommodate for 2020’s new normal in terms of social engagements, the conference featured a mix of talks delivered live via webinars, and breakout sessions held as regular meetings. This helped recapture some of the “hallway track” that would be lost in an online conference.
    • After attending the conference, I wrote up some of my notes from each of the talks
    • Part 2

    ZFS and FreeBSD Support

    Klara offers flexible Support Subscriptions for your ZFS and FreeBSD infrastructure, simply sign up for our monthly subscription! What's even better is that for the month of October we are giving away 3 months for free, for every yearly subscription, and one month free when you sign up for a 6-months subscription! Check it out on our website!

    News Roundup

    BastilleBSD - native container management for FreeBSD

    Some time ago, I had the requirement to use FreeBSD in a project, and soon the question came up if Docker and Kubernetes can be used.
    On FreeBSD, Docker is not very well supported, and even if you can get it running, Linux is used in a Docker container. My experience with Docker on FreeBSD is awful, and so I started looking for alternatives.
    A quick search on one of the most significant online search engines led me to Jails and then to BastilleBSD.

    Tarsnap – cleaning up old backups

    I use Tarsnap for my critical data. Case in point, I use it to backup my Bacula database dump. I use Bacula to backup my hosts. The database in question keeps track of what was backed up, from what host, the file size, checksum, where that backup is now, and many other items. Losing this data is annoying but not a disaster. It can be recreated from the backup volumes, but that is time consuming. As it is, the file is dumped daily, and rsynced to multiple locations.

    MWL - BookSale

    For those interested in such things, I recently posted my 60,000th tweet. This prodded me to try an experiment I’ve been pondering for a while.
    Over at my ebookstore, two of my books are now on a “Name Your Own Price” sale. You can get git commit murder and PAM Mastery for any price you wish, with a minimum of $1.

    Beastie Bits

    • Brian Kernighan: UNIX, C, AWK, AMPL, and Go Programming | Lex Fridman Podcast #109
    • The UNIX Time-Sharing System - Dennis M. Ritchie and Ken Thompson - July 1974
    • Using a 1930 Teletype as a Linux Terminal *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • lars - infosec handbook
    • scott - zfs import
    • zhong - first episode
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    373: Kyle Evans Interview Oct 22, 2020

    We have an interview with Kyle Evans for you this week. We talk about his grep project, lua and flua in base, as well as bectl, being on the core team and a whole lot of other stuff.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Interview - Kyle Evans - kevans@freebsd.org / @kaevans91

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    372: Slow SSD scrubs Oct 15, 2020

    Wayland on BSD, My BSD sucks less than yours, Even on SSDs, ongoing activity can slow down ZFS scrubs drastically, OpenBSD on the Desktop, simple shell status bar for OpenBSD and cwm, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Wayland on BSD

    After I posted about the new default window manager in NetBSD I got a few questions, including "when is NetBSD switching from X11 to Wayland?", Wayland being X11's "new" rival. In this blog post, hopefully I can explain why we aren't yet!

    My BSD sucks less than yours

    This paper will look at some of the differences between the FreeBSD and OpenBSD operating systems. It is not intended to be solely technical but will also show the different "visions" and design decisions that rule the way things are implemented. It is expected to be a subjective view from two BSD developers and does not pretend to represent these projects in any way.

    Video

    • EuroBSDCon 2017 Part 1
    • EuroBSDCon 2017 Part 2

    News Roundup

    Even on SSDs, ongoing activity can slow down ZFS scrubs drastically

    Back in the days of our OmniOS fileservers, which used HDs (spinning rust) across iSCSI, we wound up changing kernel tunables to speed up ZFS scrubs and saw a significant improvement. When we migrated to our current Linux fileservers with SSDs, I didn't bother including these tunables (or the Linux equivalent), because I expected that SSDs were fast enough that it didn't matter. Indeed, our SSD pools generally scrub like lightning.

    OpenBSD on the Desktop (Part I)

    Let's install OpenBSD on a Lenovo Thinkpad X270. I used this computer for my computer science studies. It has both Arch Linux and Windows 10 installed as dual boot. Now that I'm no longer required to run Windows, I can ditch the dual boot and install an operating system of my choice.

    A simple shell status bar for OpenBSD and cwm(1)

    These days, I try to use simple and stock software as much as possible on my OpenBSD laptop. I’ve been playing with cwm(1) for weeks and I was missing a status bar. After trying things like Tint2, Polybar etc, I discovered @gonzalo’s termbar. Thanks a lot!
    As I love scripting, I decided to build my own.

    Beastie Bits

    DragonFly v5.8.3 released to address to issues
    OpenSSH 8.4 released

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Dane - FreeBSD vs Linux in Microservices and Containters
    • Mason - questions.md
    • Michael - Tmux License.md
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    371: Wildcards running wild Oct 08, 2020

    New Project: zedfs.com, TrueNAS CORE Ready for Deployment, IPC in FreeBSD 11: Performance Analysis, Unix Wildcards Gone Wild, Unix Wars, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    My New Project: zedfs.com

    Have you ever had an idea that keeps coming back to you over and over again? For a week? For a month? I know that feeling. My new project was born from this feeling.
    On this blog, I mix content a lot. I have written personal posts (not many of them, but still), FreeBSD development posts, development posts, security posts, and ZFS posts. This mixed content can be problematic sometimes. I share a lot of stuff here, and readers don’t know what to expect next. I am just excited by so many things, and I want to share that excitement with you!

    TrueNAS CORE is Ready for Deployment

    TrueNAS 12.0 RC1 was released yesterday and with it, TrueNAS CORE is ready for deployment. The merger of FreeNAS and TrueNAS into a unified software image can now begin its path into mainstream use. TrueNAS CORE is the new FreeNAS and is on schedule.
    The TrueNAS 12.0 BETA process started in June and has been the most successful BETA release ever with more than 3,000 users and only minor issues. Ars Technica provided a detailed technical walkthrough of the original BETA. There is a long list of features and performance improvements. During the BETA process, TrueNAS 12.0 demonstrated over 1.2 Million IOPS and over 23GB/s on a TrueNAS M60.

    News Roundup

    Interprocess Communication in FreeBSD 11: Performance Analysis

    Interprocess communication, IPC, is one of the most fundamental functions of a modern operating system, playing an essential role in the fabric of contemporary applications. This report conducts an investigation in FreeBSD of the real world performance considerations behind two of the most common IPC mechanisms; pipes and sockets. A simple benchmark provides a fair sense of effective bandwidth for each, and analysis using DTrace, hardware performance counters and the operating system’s source code is presented. We note that pipes outperform sockets by 63% on average across all configurations, and further that the size of userspace transmission buffers has a profound effect on performance — larger buffers are beneficial up to a point (∼ 32-64 KiB) after which performance collapses as a result of devastating cache exhaustion. A deep scrutiny of the probe effects at play is also presented, justifying the validity of conclusions drawn from these experiments.

    Back To The Future: Unix Wildcards Gone Wild

    First of all, this article has nothing to do with modern hacking techniques like ASLR bypass, ROP exploits, 0day remote kernel exploits or Chrome's Chain-14-Different-Bugs-To-Get-There... Nope, nothing of the above. This article will cover one interesting old-school Unix hacking technique, that will still work nowadays in 2013.

    Unix Wars

    Dozens of different operating systems have been developed over the years, but only Unix has grown in so many varieties. There are three main branches. Four factors have facilitated this growth...

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Chris - installing FreeBSD 13-current
    • Dane - FreeBSD History Lesson
    • Marc - linux compat
    • Mason - apropos battery
    • Paul - a topic idea

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    370: Testing shutdown Oct 01, 2020

    The world’s first OpenZFS based live image, FreeBSD Subversion to Git Migration video, FreeBSD Instant-workstation 2020, testing the shutdown mechanism, login_ldap added to OpenBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FuryBSD 2020-Q3 The world’s first OpenZFS based live image

    FuryBSD is a tool to test drive stock FreeBSD desktop images in read write mode to see if it will work for you before installing. In order to provide the most reliable experience possible while preserving the integrity of the system the LiveCD now leverages ZFS, compression, replication, a memory file system, and reroot (pivot root).

    FreeBSD Subversion to Git Migration: Pt 1 Why?

    FreeBSD moving to Git: Why? With luck, I'll be writing a few blogs on FreeBSD's move to git later this year. Today, we'll start with "why"?
    Video from Warner Losh

    News Roundup

    FreeBSD Instant-workstation 2020

    A little over a year ago I published an instant-workstation script for FreeBSD. The idea is to have an installed FreeBSD system, then run a shell script that uses only base-system utilities and installs and configures a workstation setup for you.

    nut – testing the shutdown mechanism

    Following on from my recent nut setup, this is the second in a series of three posts.
    The next post will deal with adjusting startup and shutdown times to be sure everything proceeds as required.

    login_ldap added to OpenBSD -current

    With this commit, Martijn van Duren (martijn@) added login_ldap(8) to -current

    • https://marc.info/?l=openbsd-cvs&m=159992319027593&w=2 ***

    Beastie Bits

    • NetBSD current now has GCC 9.3.0 for x86/ARM
    • MidnightBSD 1.2.8
    • MidnightBSD 2.0-Current
    • Retro UNIX 8086 v1 operating system has been developed by Erdogan Tan as a special purposed derivation of original UNIX v1 ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Rick - rcorder
    • Dan - machiatto bin
    • Luis - old episodes

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    369: Where rc.d belongs Sep 24, 2020

    High Availability Router/Firewall Using OpenBSD, CARP, pfsync, and ifstated, Building the Development Version of Emacs on NetBSD, rc.d belongs in libexec, not etc, FreeBSD 11.3 EOL, OPNsense 20.7.1 Released, MidnightBSD 1.2.7 out, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    High Availability Router/Firewall Using OpenBSD, CARP, pfsync, and ifstated

    I have been running OpenBSD on a Soekris net5501 for my router/firewall since early 2012. Because I run a multitude of services on this system (more on that later), the meager 500Mhz AMD Geode + 512MB SDRAM was starting to get a little sluggish while trying to do anything via the terminal. Despite the perceived performance hit during interactive SSH sessions, it still supported a full 100Mbit connection with NAT, so I wasn’t overly eager to change anything. Luckily though, my ISP increased the bandwidth available on my plan tier to 150Mbit+. Unfortunately, the Soekris only contained 4xVIA Rhine Fast Ethernet. So now, I was using a slow system and wasting money by not being able to fully utilize my connection.

    Building the Development Version of Emacs on NetBSD

    I hadn’t really planned on installing a NetBSD VM (after doing all the other two BSDs), but then a NetBSD-related Emacs bug report arrived.

    News Roundup

    rc.d belongs in libexec, not etc

    Let’s open with the controversy: the scripts that live under /etc/rc.d/ in FreeBSD, NetBSD, and OpenBSD are in the wrong place. They all should live in /libexec/rc.d/ because they are code, not configuration.
    This misplacement is something that has bugged me for ages but I never had the energy to open this can of worms back when I was very involved in NetBSD. I suspect it would have been a draining discussion and a very difficult thing to change.

    FreeBSD 11.3 EOL

    As of September 30, 2020, FreeBSD 11.3 will reach end-of-life and will no longer
    be supported by the FreeBSD Security Team. Users of FreeBSD 11.3 are strongly
    encouraged to upgrade to a newer release as soon as possible.

    OPNsense 20.7.1 Released

    Overall, the jump to HardenedBSD 12.1 is looking promising from our end. From the reported issues we still have more logging quirks to investigate and especially Netmap support (used in IPS and Sensei) is lacking in some areas that were previously working. Patches are being worked on already so we shall get there soon enough. Stay tuned.

    MidnightBSD 1.2.7 out

    MidnightBSD 1.2.7 is available via the FTP/HTTP and mirrors as well as github.
    It includes several bug fixes and security updates over the last ISO release and is recommended for new installations.
    Users who don't want to updatee the whole OS, should consider at least updating libmport as there are many package management fixes

    Beastie Bits

    • Tarsnap podcast
    • NetBSD Tips and Tricks
    • FreeBSD mini-git Primer
    • GhostBSD Financial Reports ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Daniel - Documentation Tooling
    • Fongaboo - Where did the ZFS tutorial Go?
    • Johnny - Browser Cold Wars ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    368: Changing OS roles Sep 17, 2020

    Modernizing the OpenBSD Console, OS roles have changed, FreeBSD Cluster with Pacemaker and Corosync, Wine in a 32-bit sandbox on 64-bit NetBSD, Find package which provides a file in OpenBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Modernizing the OpenBSD Console

    At the beginning were text mode consoles. Traditionally, *BSD and Linux on i386 and amd64 used text mode consoles which by default provided 25 rows of 80 columns, the "80x25 mode". This mode uses a 8x16 font stored in the VGA BIOS (which can be slightly different across vendors).
    OpenBSD uses the wscons(4) console framework, inherited from NetBSD

    OS roles have changed

    Though I do wonder sometimes, with just a slight tweak to history, how things might have been different. In another dimension somewhere, I’m using the latest BeOS-powered PowerPC laptop, and a shiny new Palm smartphone. Both of these represented the pinnacle of UI design in the 1990s, and still in the 2020s have yet to be surpassed. People call me an Apple fanboy, but I’d drop all of it in a second for that gear.

    News Roundup

    FreeBSD Cluster with Pacemaker and Corosync

    I always missed ‘proper’ cluster software for FreeBSD systems. Recently I got to run several Pacemaker/Corosync based clusters on Linux systems. I thought how to make similar high availability solutions on FreeBSD and I was really shocked when I figured out that both Pacemaker and Corosync tools are available in the FreeBSD Ports and packages as net/pacemaker2 and net/corosync2 respectively.

    Wine in a 32-bit sandbox on 64-bit NetBSD

    "Mainline pkgsrc" can't do strange multi-arch Wine builds yet, so a 32-bit sandbox seems like a reasonable way to use 32-bit Wine on amd64 without resorting to running real Windows in NVMM. We'll see if this was a viable alternative to re-reviewing the multi-arch support in pkgsrc-wip...
    We're using sandboxctl, which is a neat tool for quickly shelling into a different NetBSD userspace. Maybe you also don't trust the Windows applications you're running too much - sandboxctl creates a chroot based on a fresh system image, and chroot on NetBSD is fairly bombproof.

    Find package which provides a file in OpenBSD

    There is one very handy package on OpenBSD named pkglocatedb which provides the command pkglocate.
    If you need to find a file or binary/program and you don’t know which package contains it, use pkglocate.

    Beastie Bits

    • OpenBSD for 1.5 Years: Confessions of a Linux Heretic
    • OpenBSD 6.8 Beta Tagged
    • Hammer2 and growth
    • Understanding a FreeBSD kernel vulnerability ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Rob - 7 years
    • Kurt - Microserver
    • Rob - Interviews
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    367: Changing jail datasets Sep 10, 2020

    A 35 Year Old Bug in Patch, Sandbox for FreeBSD, Changing from one dataset to another within a jail, You don’t need tmux or screen for ZFS, HardenedBSD August 2020 Status Report and Call for Donations, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    A 35 Year Old Bug in Patch

    Larry Wall posted patch 1.3 to mod.sources on May 8, 1985. A number of versions followed over the years. It's been a faithful alley for a long, long time. I've never had a problem with patch until I embarked on the 2.11BSD restoration project. In going over the logs very carefully, I've discovered a bug that bites this effort twice. It's quite interesting to use 27 year old patches to find this bug while restoring a 29 year old OS...

    Sandbox for FreeBSD

    A sandbox is a software which artificially limits access to the specific resources on the target according to the assigned policy. The sandbox installs hooks to the kernel syscalls and other sub-systems in order to interrupt the events triggered by the application. From the application point of view, application working as usual, but when it wants to access, for instance, /dev/kmem the sandbox software decides against the assigned sandbox scheme whether to grant or deny access.
    In our case, the sandbox is a kernel module which uses MAC (Mandatory Access Control) Framework developed by the TrustedBSD team. All necessary hooks were introduced to the FreeBSD kernel.

    • Source Code
    • Documentation

    News Roundup

    Changing from one dataset to another within a jail

    ZFS has a the ability to share itself within a jail. That gives the jail some autonomy, and I like that.
    I’ve written briefly about that, specifically for iocage. More recently, I started using a zfs snapshot for caching clearing.
    The purpose of this post is to document the existing configuration of the production FreshPorts webserver and outline the plan on how to modify it for more zfs-snapshot-based cache clearing.

    You don’t need tmux or screen for ZFS

    Back in January I mentioned how to add redundancy to a ZFS pool by adding a mirrored drive. Someone with a private account on Twitter asked me why FreeBSD—and NetBSD!—doesn’t ship with a tmux or screen equivilent in base in order to daemonise the process and let them run in the background.
    ZFS already does this for its internal commands.

    HardenedBSD August 2020 Status Report and Call for Donations

    This last month has largely been a quiet one. I've restarted work on porting five-year-old work from the Code Pointer Integrity (CPI) project into HardenedBSD. Chiefly, I've started forward-porting the libc and rtld bits from the CPI project and now need to look at llvm compiler/linker enhancements. We need to be able to apply SafeStack to shared objects, not just application binaries. This forward-porting work I'm doing is to support that effort.
    The infrastructure has settled and is now churning normally and happily. We're still working out bandwidth issues. We hope to have a new fiber line ran by the end of September.
    As part of this status report, I'm issuing a formal call for donations. I'm aiming for $4,000.00 USD for a newer self-hosted Gitea server. I hope to purchase the new server before the end of 2020.

    Important parts of Unix's history happened before readline support was common

    Unix and things that run on Unix have been around for a long time now. In particular, GNU Readline was first released in 1989 (as was Bash), which is long enough ago for it (or lookalikes) to become pretty much pervasive, especially in Unix shells. Today it's easy to think of readline support as something that's always been there. But of course this isn't the case. Unix in its modern form dates from V7 in 1979 and 4.2 BSD in 1983, so a lot of Unix was developed before readline and was to some degree shaped by the lack of it.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Mason - mailserver
    • casey - freebsd on decline
    • denis - postgres ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    366: Bootloader zpool checkpoints Sep 03, 2020

    OpenZFS with ZSTD lands in FreeBSD 13, LibreSSL doc status update, FreeBSD on SPARC64 (is dead), Bringing zpool checkpoints to a FreeBSD bootloader, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    OpenZFS with ZSTD land in FreeBSD 13

    • ZStandard Compression for OpenZFS > The primary benefit is maintaining a completely shared code base with the community allowing FreeBSD to receive new features sooner and with less effort. > I would advise against doing 'zpool upgrade' or creating indispensable pools using new features until this change has had a month+ to soak.
    • Rebasing FreeBSD’s OpenZFS on the new upstream was sponsored by iXsystems
    • The competition of ZSTD support for OpenZFS was sponsored by the FreeBSD Foundation ***

    LibreSSL documentation status update

    More than six years ago, LibreSSL was forked from OpenSSL, and almost two years ago, i explained the status of LibreSSL documentation during EuroBSDCon 2018 in Bucuresti. So it seems providing an update might be in order.
    Note that this is not an update regarding LibreSSL status in general because i'm not the right person to talk about the big picture of working on the LibreSSL code, my work has been quite focussed on documentation. All the same, it is fair to say that even though the number of developers working on it is somewhat limited, the LibreSSL project is quite alive, typically having a release every few months. Progress continues being made with respect to porting and adding new functionality (for example regarding TLSv1.3, CMS, RSA-PSS, RSA-OAEP, GOST, SM3, SM4, XChaCha20 during the last two years), OpenSSL compatibility improvements (including providing additional OpenSSL-1.1 APIs), and lots of bug fixes and code cleanup.

    FreeBSD on SPARC64 (is dead)

    ’m coming pretty late to the party, because SPARC64 support in FreeBSD is apparently doomed: After the POWER platform made the switch to a LLVM/Clang-based toolchain, SPARC64 is one of the last ones that still uses the ancient GCC 4.2-based toolchain that the project wants to finally get rid off (it has already happened as I was writing this – looks like the firm plan was not so firm after all, since they killed it off early). And compared to the other platforms it has seen not too much love in recent times… SPARC64 being a great platform, I’d be quite sad to see it go. But before that happens let’s see what the current status is and what would need to be done if it were to survive, shall we?

    News Roundup

    Bringing zpool checkpoints to a FreeBSD bootloader

    Almost two years ago I wrote a blog post about checkpoints in ZFS. I didn’t hide that I was a big fan of them. That said, after those two years, I still feel that there are underappreciated features in the ZFS world, so I decided to do something about that.
    Currently, one of the best practices for upgrading your operating system is to use boot environments. They are a great feature for managing multiple kernels and userlands. They are based on juggling which ZFS datasets are mounted. Each dataset has its own version of the system. Unfortunately, boot environments have their limitations. If we, for example, upgrade our ZFS pool, we may not be able to use older versions of the system anymore.
    The big advantage of boot environments is that they have very good tools. Two main tools are beadm (which was created by vermaden) and bectl (which currently is in the FreeBSD base system). These tools allow us to create and manage boot environments.

    Beastie Bits

    • The First Unix Port
    • TLS Mastery updates, August 2020
    • What is the Oldest BSD Distribution still around today

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • ben - zfs send questions
    • lars - zfs pool question
    • neutron - bectl vs beadm
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    365: Whole year round Aug 27, 2020

    FreeBSD USB Audio, Kyua: An introduction for NetBSD users, Keeping backup ZFS on Linux kernel modules around, CLI Tools 235x Faster than Hadoop, FreeBSD Laptop Battery Life Status Command, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD USB Audio

    I recently got a Behringer UMC22 sound card for video conferencing and DJing. This page documents what I’ve learned about using this sound card, and USB audio in general, on FreeBSD.
    tl;dr: Everything works as long as the sound card follows the USB audio device class specification.

    Kyua: An introduction for NetBSD users

    Kyua's current goal is to reimplement only the ATF tools while maintaining backwards compatibility with the tests written with the ATF libraries (i.e. with the NetBSD test suite).
    Because Kyua is a replacement of some ATF components, the end goal is to integrate Kyua into the NetBSD base system (just as ATF is) and remove the deprecated ATF components. Removing the deprecated components will allow us to make the above-mentioned improvements to Kyua, as well as many others, without having to deal with the obsolete ATF code base. Discussing how and when this transition might happen is out of the scope of this document at the moment.

    News Roundup

    Keeping backup ZFS on Linux kernel modules around

    I'm a long term user of ZFS on Linux and over pretty much all of the time I've used it, I've built it from the latest development version. Generally this means I update my ZoL build at the same time as I update my Fedora kernel, since a ZoL update requires a kernel reboot anyway. This is a little bit daring, of course, although the ZoL development version has generally been quite solid (and this way I get the latest features and improvements long before I otherwise would).

    Command-line Tools can be 235x Faster than your Hadoop Cluster

    As I was browsing the web and catching up on some sites I visit periodically, I found a cool article from Tom Hayden about using Amazon Elastic Map Reduce (EMR) and mrjob in order to compute some statistics on win/loss ratios for chess games he downloaded from the millionbase archive, and generally have fun with EMR. Since the data volume was only about 1.75GB containing around 2 million chess games, I was skeptical of using Hadoop for the task, but I can understand his goal of learning and having fun with mrjob and EMR. Since the problem is basically just to look at the result lines of each file and aggregate the different results, it seems ideally suited to stream processing with shell commands. I tried this out, and for the same amount of data I was able to use my laptop to get the results in about 12 seconds (processing speed of about 270MB/sec), while the Hadoop processing took about 26 minutes (processing speed of about 1.14MB/sec).

    FreeBSD Laptop Find Out Battery Life Status Command

    I know how to find out battery life status using Linux operating system. How do I monitor battery status on a laptop running FreeBSD version 9.x/10.x/11.x/12.x?
    You can use any one of the following commands to get battery status under FreeBSD laptop including remaining battery life and more.

    Beastie Bits

    BSD Beer
    Awk for JSON
    Drawing Pictures The Unix Way - with pic and troff
    Refactoring the FreeBSD Kernel with Checked C

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Jason - German Locales
    • pcwizz - Router Style Device
    • predrag - OpenBSD Router Hardware ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    364: FreeBSD Wireless Grind Aug 20, 2020

    FreeBSD Qt WebEngine GPU Acceleration, the grind of FreeBSD’s wireless stack, thoughts on overlooking Illumos's syseventadm, when Unix learned to reboot, New EXT2/3/4 File-System driver in DragonflyBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD Qt WebEngine GPU Acceleration

    FreeBSD has a handful of Qt WebEngine-based browsers. Falkon, and Otter-Browser, and qutebrowser and probably others, too. All of them can run into issues on FreeBSD with GPU-accelerated rendering not working. Let’s look at some of the workarounds.

    NetBSD on the Nanopi Neo2

    The NanoPi NEO2 from FriendlyARM has been serving me well since 2018, being my test machine for OpenBSD/arm64 related things.
    As NetBSD/evbarm finally gained support for AArch64 in NetBSD 9.0, released back in February, I decided to give it a try on this device. The board only has 512MB of RAM, and this is where NetBSD really shines. Things have become a lot easier since jmcneill@ now provides bootable ARM images for a variety of devices, including the NanoPi NEO2.

    I'm back into the grind of FreeBSD's wireless stack and 802.11ac

    Yes, it's been a while since I posted here and yes, it's been a while since I was actively working on FreeBSD's wireless stack. Life's been .. well, life. I started the ath10k port in 2015. I wasn't expecting it to take 5 years, but here we are. My life has changed quite a lot since 2015 and a lot of the things I was doing in 2015 just stopped being fun for a while.
    But the stars have aligned and it's fun again, so here I am.

    News Roundup

    Some thoughts on us overlooking Illumos's syseventadm

    In a comment on my praise of ZFS on Linux's ZFS event daemon, Joshua M. Clulow noted that Illumos (and thus OmniOS) has an equivalent in syseventadm, which dates back to Solaris. I hadn't previously known about syseventadm, despite having run Solaris fileservers and OmniOS fileservers for the better part of a decade, and that gives me some tangled feelings.

    When Unix learned to reboot

    Recently, a friend asked me the history of halt, and when did we have to stop with the sync / sync / sync dance before running halt or reboot. The two are related, it turns out.

    DragonFlyBSD Lands New EXT2/3/4 File-System Driver

    While DragonFlyBSD has its own, original HAMMER2 file-system, for those needing to access data from EXT2/EXT3/EXT4 file-systems, there is a brand new "ext2fs" driver implementation for this BSD operating system.
    DragonFlyBSD has long offered an EXT2 file-system driver (that also handles EXT3 and EXT4) while hitting their Git tree this week is a new version. The new sys/vfs/ext2fs driver, which will ultimately replace their existing sys/gnu/vfs/ext2fs driver is based on a port from FreeBSD code. As such, this driver is BSD licensed rather than GPL. But besides the more liberal license to jive with the BSD world, this new driver has various feature/functionality improvements over the prior version. However, there are some known bugs so for the time being both file-system drivers will co-exist.

    Beastie Bits

    • LibreOffice 7.0 call for testing
    • More touchpad support

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    Casey - openbsd wirewall
    Daryl - zfs
    Raymond - hpe microserver

    • - Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    363: Traditional Unix toolchains Aug 13, 2020

    FreeBSD Q2 Quarterly Status report of 2020, Traditional Unix Toolchains, BastilleBSD 0.7 released, Finding meltdown on DragonflyBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD Quarterly Report

    This report will be covering FreeBSD related projects between April and June, and covers a diverse set of topics ranging from kernel updates over userland and ports, as well to third-party work.
    Some highlights picked with the roll of a d100 include, but are not limited to, the ability to forcibly unmounting UFS when the underlying media becomes inaccessible, added preliminary support for Bluetooth Low Energy, a introduction to the FreeBSD Office Hours, and a repository of software collections called potluck to be installed with the pot utility, as well as many many more things.
    As a little treat, readers can also get a rare report from the quarterly team.
    Finally, on behalf of the quarterly team, I would like to extend my deepest appreciation and thank you to salvadore@, who decided to take down his shingle. His contributions not just the quarterly reports themselves, but also the surrounding tooling to many-fold ease the work, are immeasurable.

    Traditional Unix Toolchains

    Older Unix systems tend to be fairly uniform in how they handle the so-called 'toolchain' for creating binaries. This blog will give a quick overview of the toolchain pipeline for Unix systems that follow the V7 tradition (which evolved along with Unix, a topic for a separate blog maybe).
    Unix is a pipeline based system, either physically or logically. One program takes input, process the data and produces output. The input and output have some interface they obey, usually text-based. The Unix toolchain is no different.

    News Roundup

    Bastille Day 2020 : v0.7 released

    This release matures the project from 0.6.x -> 0.7.x. Continued testing and bug fixes are proving Bastille capable for a range of use-cases. New (experimental) features are examples of innovation from community contribution and feedback. Thank you.

    Beastie Bits

    • Finding meltdown on DragonFly
    • NetBSD Server Outage ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Vincent - Gnome 3 question
    • Malcolm - ZFS question
    • Hassan - Video question
      • For those that watch on youtube, don’t forget to subscribe to our new YouTube Channel if you want updates when we post them on YT
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    362: 2.11-BSD restoration Aug 06, 2020

    Interview with Warner Losh about Unix history, the 2.11-BSD restoration project, the Unix heritage society, proper booting, and what devmatch is.

    Interview - Warner Losh - imp@freebsd.org / @bsdimp

    BSD 2.11 restoration project

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Special Guest: Warner Losh.


    361: Function-based MicroVM Jul 30, 2020

    Emulex: The Cheapest 10gbe for Your Homelab, In Search of 2.11BSD, as released, Fakecracker: NetBSD as a Function Based MicroVM, First powerpc64 snapshots available for OpenBSD, OPNsense 20.1.8 released, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Emulex: The Cheapest 10gbe for Your Homelab

    Years ago, the hunt for the cheapest 10gbe NICs resulted in buying Mellanox ConnectX-2 single-port 10gbe network cards from eBay for around $10. Nowadays those cards have increased in cost to around $20-30. While still cheap, not quite the cheapest. There are now alternatives!
    Before diving into details, let’s get something very clear. If you want the absolute simplest plug-and-play 10gbe LAN for your homelab, pay the extra for Mellanox. If you’re willing to go hands-on, do some simple manual configuration and installation, read on for my experiences with Emulex 10gbe NICs.
    Emulex NICs can often be had for around $15 on eBay, sometimes even cheaper. I recently picked up a set of 4 of these cards, which came bundled with 6 SFP+ 10g-SR modules for a grand total of $47.48. Considering I can usually find SFP+ modules for about $5/ea, these alone were worth $30.

    • I have also tried some Solarflare cards that I found cheap, they work ok, but are pickier about optics, and tend to be focused on low-latency, so often don’t manage to saturate the full 10 gbps, topping out around 8 gbps.
    • I have been using fs.com for optics, patch cables, and DACs. I find DACs are usually cheaper if you are just going between a server and a switch in the same rack, or direct between 2 servers. ***

    In Search of 2.11BSD, as released

    Almost all of the BSD releases have been well preserved. If you want to find 1BSD, or 2BSD or 4.3-TAHOE BSD you can find them online with little fuss. However, if you search for 2.11BSD, you'll find it easily enough, but it won't be the original. You'll find either the latest patched version (2.11BSD pl 469), or one of the earlier popular version (pl 430 is popular). You can even find the RetroBSD project which used 2.11BSD as a starting point to create systems for tiny mips-based PIC controllers. You'll find every single patch that's been issued for the system.

    News Roundup

    Fakecracker: NetBSD as a Function Based MicroVM

    In November 2018 AWS published an Open Source tool called Firecracker, mostly a virtual machine monitor relying on KVM, a small sized Linux kernel, and a stripped down version of Qemu. What baffled me was the speed at which the virtual machine would fire up and run the service. The whole process is to be compared to a container, but safer, as it does not share the kernel nor any resource, it is a separate and dedicated virtual machine.
    If you want to learn more on Firecracker‘s internals, here’s a very well put article.

    First powerpc64 snapshots available for OpenBSD

    Since we reported the first bits of powerpc64 support going into the tree on 16 May, work has progressed at a steady pace, resulting in snapshots now being available for this platform.
    So, if you have a POWER9 system idling around, go to your nearest mirror and fetch this snapshot. Keep in mind that as this is still very early days, very little handholding is available - you are basically on your own.

    OPNsense 20.1.8 released

    Sorry about the delay while we chased a race condition in the updates back to an issue with the latest FreeBSD package manager updates. For now we reverted to our current version but all relevant third party packages have been updated as updates became available over the last weeks, e.g. cURL and Python, and hostapd / wpa_supplicant amongst others.

    Beastie Bits

    • Old School Disk Partitioning
    • Nomad BSD 1.3.2 Released
    • Chai-Fi

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Poojan - ZFS Question
    • graceon - supermicro
    • zenbum - groff
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    Special Guest: Warner Losh.


    360: Full circle Jul 23, 2020

    Chasing a bad commit, New FreeBSD Core Team elected, Getting Started with NetBSD on the Pinebook Pro, FreeBSD on the Intel 10th Gen i3 NUC, pf table size check and change, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Chasing a bad commit

    While working on a big project where multiple teams merge their feature branches frequently into a release Git branch, developers often run into situations where they find that some of their work have been either removed, modified or affected by someone else's work accidentally. It can happen in smaller teams as well. Two features could have been working perfectly fine until they got merged together and broke something. That's a highly possible case. There are many other cases which could cause such hard to understand and subtle bugs which even continuous integration (CI) systems running the entire test suite of our projects couldn't catch.
    We are not going to discuss how such subtle bugs can get into our release branch because that's just a wild territory out there. Instead, we can definitely discuss about how to find a commit that deviated from an expected outcome of a certain feature. The deviation could be any behaviour of our code that we can measure distinctively — either good or bad in general.

    New FreeBSD Core Team Elected

    The FreeBSD Project is pleased to announce the completion of the 2020 Core Team election. Active committers to the project have elected your Eleventh FreeBSD Core Team.!

    • Baptiste Daroussin (bapt)
    • Ed Maste (emaste)
    • George V. Neville-Neil (gnn)
    • Hiroki Sato (hrs)
    • Kyle Evans (kevans)
    • Mark Johnston (markj)
    • Scott Long (scottl)
    • Sean Chittenden (seanc)
    • Warner Losh (imp) ***

    News Roundup

    Getting Started with NetBSD on the Pinebook Pro

    If you buy a Pinebook Pro now, it comes with Manjaro Linux on the internal eMMC storage. Let’s install NetBSD instead!
    The easiest way to get started is to buy a decent micro-SD card (what sort of markings it should have is a science of its own, by the way) and install NetBSD on that. On a warm boot (i.e. when rebooting a running system), the micro-SD card has priority compared to the eMMC, so the system will boot from there.

    • A FreeBSD developer has borrowed some of the NetBSD code to get audio working on RockPro64 and Pinebook Pro: https://twitter.com/kernelnomicon/status/1282790609778905088 ***

    FreeBSD on the Intel 10th Gen i3 NUC

    I have ended up with some 10th Gen i3 NUC's (NUC10i3FNH to be specific) to put to work in my testbed. These are quite new devices, the build date on the boxes is 13APR2020. Before I figure out what their true role is (one of them might have to run linux) I need to install FreeBSD -CURRENT and see how performance and hardware support is.

    pf table size check and change

    Did you know there’s a default size limit to pf’s state table? I did not, but it makes sense that there is one. If for some reason you bump into this limit (difficult for home use, I’d think), here’s how you change it
    There is a table-entries limit specified, you can see current settings with
    'pfctl -s all'. You can adjust the limits in the /etc/pf.conf file
    containing the rules with a line like this near the top:
    set limit table-entries 100000

    • In the original mail thread, there is mention of the FreeBSD sysctl net.pf.request_maxcount, which controls the maximum number of entries that can be sent as a single ioctl(). This allows the user to adjust the memory limit for how big of a list the kernel is willing to allocate memory for. ***

    Beastie Bits

    • tmux and bhyve
    • Azure and FreeBSD
    • Groff Tutorial *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups. Tarsnap Mastery

    Feedback/Questions

    • Chris - ZFS Question
    • Patrick - Tarsnap
    • Pin - pkgsrc ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    359: Throwaway Browser Jul 16, 2020

    Throw-Away Browser on FreeBSD With "pot" within 5 minutes, OmniOS as OpenBSD guest with bhyve, BSD vs Linux distro development, My FreeBSD Laptop Build, FreeBSD CURRENT Binary Upgrades, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Throw-Away Browser on FreeBSD With "pot" Within 5 Minutes

    pot is a great and relatively new jail management tool. It offers DevOps style provisioning and can even be used to provide Docker-like, scalable cloud services together with nomad and consul (more about this in Orchestrating jails with nomad and pot).

    OpenBSD guest with bhyve - OmniOS

    Today I will be creating a OpenBSD guest via bhyve on OmniOS. I will also be adding a Pass Through Ethernet Controller so I can have a multi-homed guest that will serve as a firewall/router.
    This post will cover setting up bhyve on OmniOS, so it will also be a good introduction to bhyve. As well, I look into OpenBSD’s uEFI boot loader so if you have had trouble with this, then you are in the right place.

    News Roundup

    BSD versus Linux distribution development

    Q: Comparing-apples-to-BSDs asks: I was reading one of the old articles from the archive. One of the things mentioned was how the BSDs have a distinct approach in terms of packaging the base system relative to userland apps, and that the Linux distros at the time were not following the same practice. Are there Linux distros that have adopted the same approach in modern times? If not, are there technical limitations that are preventing them from doing so, such as some distros supporting multiple kernel versions maybe?
    DistroWatch answers: In the article mentioned above, I made the observation that Linux distributions tend to take one of two approaches when it comes to packaging software. Generally a Linux distribution will either offer a rolling release, where virtually all packages are regularly upgraded to their latest stable releases, or a fixed release where almost all packages are kept at a set version number and only receive bug fixes for the life cycle of the distribution. Projects like Arch Linux and Void are popular examples of rolling, always-up-to-date distributions while Fedora and Ubuntu offer fixed platforms.

    My FreeBSD Laptop Build

    I have always liked Thinkpad hardware and when I started to do more commuting I decided I needed something that had a decent sized screen but fit well on a bus. Luckily about this time Lenovo gave me a nice gift in the Thinkpad X390. Its basically the famous X2xx series but with a 13” screen and smaller bezel.
    So with this laptop I figured it was time to actually put the docs together on how I got my FreeBSD workstation working on it. I will here in the near future have another post that will cover this for HardenedBSD as well since the steps are similar but have a few extra gotchas due to the extra hardening.

    FreeBSD CURRENT Binary Upgrades

    • Disclaimer This proof-of-concept is not a publication of FreeBSD.
    • Description up.bsd.lv is a proof-of-concept of binary updates for FreeBSD/amd64 CURRENT/HEAD to facilitate the exhaustive testing of FreeBSD and the bhyve hypervisor and OpenZFS 2.0 specifically. Updates are based on the SVN revisions of official FreeBSD Release Engineering bi-monthly snapshots.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Karl - pfsense
    • Val - esxi question
    • lars - openbsd router hardware

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    358: OpenBSD Kubernetes Clusters Jul 09, 2020

    Yubikey-agent on FreeBSD, Managing Kubernetes clusters from OpenBSD, History of FreeBSD part 1, Running Jitsi-Meet in a FreeBSD Jail, Command Line Bug Hunting in FreeBSD, Game of Github, Wireguard official merged into OpenBSD, and more

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    yubikey-agent on FreeBSD

    Some time ago Filippo Valsorda wrote yubikey-agent, seamless SSH agent for YubiKeys. I really like YubiKeys and worked on the FreeBSD support for U2F in Chromium and pyu2f, getting yubikey-agent ported looked like an interesting project. It took some hacking to make it work but overall it wasn’t hard. Following is the roadmap on how to get it set up on FreeBSD. The actual details depend on your system (as you will see)

    Manage Kubernetes clusters from OpenBSD

    This should work with OpenBSD 6.7. I write this while the source tree is locked for release, so even if I use -current this is as close as -current gets to -release
    Update 2020-06-05: we now have a port for kubectl. So, at least in -current things get a bit easier.

    News Roundup

    History of FreeBSD Part 1: Unix and BSD

    FreeBSD, a free and open-source Unix-like operating system has been around since 1993. However, its origins are directly linked to that of BSD, and further back, those of Unix. During this History of FreeBSD series, we will talk about how Unix came to be, and how Berkeley’s Unix developed at Bell Labs.

    Running Jitsi-Meet in a FreeBSD Jail

    Due to the situation with COVID-19 that also lead to people being confined to their homes in South Africa as well, we decided to provide a (freely usable of course) Jitsi Meet instance to the community being hosted in South Africa on our FreeBSD environment.
    That way, communities in South Africa and beyond have a free alternative to the commercial conferencing solutions with sometimes dubious security and privacy histories and at the same time improved user experience due to the lower latency of local hosting.

    • Grafana for Jitsi-Meet ***

    Command Line Bug Hunting in FreeBSD

    FreeBSD uses bugzilla for tracking bugs, taking feature requests, regressions and issues in the Operating System. The web interface for bugzilla is okay, but if you want to do a lot of batch operations it is slow to deal with. We are planning to run a bugsquash on July 11th and that really needs some tooling to help any hackers that show up process the giant bug list we have.

    Beastie Bits

    • Game of Github
    • + Wireguard official merged into OpenBSD ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Florian : Lua for $HOME
    • Kevin : FreeBSD Source Question
    • Tom : HomeLabs

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    357: Study the Code Jul 02, 2020

    OpenBSD 6.7 on PC Engines, NetBSD code study, DRM Update on OpenBSD, Booting FreeBSD on HPE Microserver SATA port, 3 ways to multiboot, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    OpenBSD 6.7 on PC Engines APU4D4

    I just got myself a PC Engines APU4D4. I miss an OpenBSD box providing home services. It’s quite simple to install and run OpenBSD on this machine. And you can even update the BIOS from OpenBSD.

    NetBSD code study

    News Roundup

    Booting FreeBSD off the HPE MicroServer Gen8 ODD SATA port

    My small homelab post generated a ton of questions and comments, most of them specific to running FreeBSD on the HP MicroServer. I’ll try and answer these over the coming week.
    Josh Paxton emailed to ask how I got FreeBSD booting on it, given the unconventional booting limitations of the hardware. I thought I wrote about it a few years ago, but maybe it’s on my proverbial draft heap. If you’re impatient, the script is in my lunchbox.

    3 ways to multiboot

    multiboot installation of a BSD system with other operating systems
    (OSs) on UEFI hardware is not officially supported by any of the
    popular

    Beastie Bits

    • pfSense2.4.5-Release-p1 now available
    • BSDCan 2020 TomSmyth - OpenBSD And OpenBGPD As ISP Controlplane
    • OpenBSD DRM Update *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • James - Apple T2

    • Michael - Jordyns ZFS Question

      • Note from JT
    • Rob - FreeBSD Freindly Registrar

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    356: Dig in Deeper Jun 25, 2020

    TrueNAS is Multi-OS, Encrypted ZFS on NetBSD, FreeBSD’s new Code of Conduct, Gaming on OpenBSD, dig a little deeper, Hammer2 and periodic snapshots, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    TrueNAS is Multi-OS

    There was a time in history where all that mattered was an Operating System (OS) and the hardware it ran on — the “pre-software era”, if you will. Your hardware dictated the OS you used.
    Once software applications became prominent, your hardware’s OS determined the applications you could run. Application vendors were forced to juggle the burden of “portability” between OS platforms, choosing carefully the operating systems they’d develop their software to. Then, there were the great OS Wars of the 1990s, replete with the rampant competition, licensing battles, and nasty lawsuits, which more or less gave birth to the “open source OS” era.
    The advent of the hypervisor simultaneously gave way to the “virtual era” which set us on a path of agnosticism toward the OS. Instead of choosing from the applications available for your chosen OS, you could simply install another OS on the same hardware for your chosen application. The OS became nothing but a necessary cog in the stack.
    TrueNAS open storage enables this “post-OS era” with support for storage clients of all UNIX flavors, Linux, FreeBSD, Windows, MacOS, VMware, Citrix, and many others. Containerization has carried that mentality even further. An operating system, like the hardware that runs it, is now just thought of as part of the “infrastructure”.

    Encrypted ZFS on NetBSD 9.0, for a FreeBSD guy

    I had one of my other HP Microservers brought back from the office last week to help with this working-from-home world we’re in right now. I was going to wipe an old version of Debian Wheezy/Xen and install FreeBSD to mirror my other machines before thinking: why not NetBSD?

    News Roundup

    FreeBSD's New Code of Conduct

    • FreeBSD Announcement Email

    Gaming on OpenBSD

    While no one would expect this, there are huge efforts from a small team to bring more games into OpenBSD. In fact, now some commercial games works natively now, thanks to Mono or Java. There are no wine or linux emulation layer in OpenBSD.
    Here is a small list of most well known games that run on OpenBSD:

    'dig' a little deeper

    I knew the existence of the dig command but didn't exactly know when and how to use it. Then, just recently I encountered an issue that allowed me to learn and make use of it.

    HAMMER2 and periodic snapshots

    The first version of HAMMER took automatic snapshots, set within the config for each filesystem. HAMMER2 now also takes automatic snapshots, via periodic(8) like most every repeating task on your DragonFly system.

    • git: Implement periodic hammer2 snapshots ***

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Cy - OpenSSL relicensing
    • Christian - lagg vlans and iocage
    • Brad - SMR ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    355: Man Page Origins Jun 18, 2020

    Upgrading OpenBSD, Where do Unix man pages come from?, Help for NetBSD’s VAX port, FreeBSD on Dell Latitude 7390, PFS Tool changes in DragonflyBSD, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    How to Upgrade OpenBSD and Build a Kernel

    Let's see how to upgrade your OpenBSD system. Maybe you are doing this because the latest release just came out. If so, this is pretty simple: back up your data, boot from install media, and select "Upgrade" instead of "Install". But maybe the latest release has been out for a few months. Why would we go through the trouble of building and installing a new kernel or other core system components? Maybe some patches have been released to improve system security or stability. It is pretty easy to build and install a kernel on OpenBSD, easier and simpler in many ways than it is on Linux.

    The History of man pages

    Where do UNIX manpages come from? Who introduced the section-based layout of NAME, SYNOPSIS, and so on? And for manpage authors: where were those economical two- and three-letter instructions developed?

    VAX port needs help

    The VAX is the oldest machine architecture still supported by NetBSD.
    Unfortunately there is another challenge, totally outside of NetBSD, but affecting the VAX port big time: the compiler support for VAX is ... let's say sub-optimal. It is also risking to be dropped completely by gcc upstream.
    Now here is where people can help: there is a bounty campaign to finance a gcc hacker to fix the hardest and most immediate issue with gcc for VAX. Without this being resolved, gcc will drop support for VAX in a near future version.

    My new FreeBSD Laptop: Dell Latitude 7390

    As a FreeBSD developer, I make a point of using FreeBSD whenever I can — including on the desktop. I've been running FreeBSD on laptops since 2004; this hasn't always been easy, but over the years I've found that the situation has generally been improving. One of the things we still lack is adequate documentation, however — so I'm writing this to provide an example for users and also Google bait in case anyone runs into some of the problems I had to address.

    PFS tool changes in DragonFly

    HAMMER2 just became a little more DWIM: the pfs-list and pfs-delete directives will now look across all mounted filesystems, not just the current directory’s mount path. pfs-delete won’t delete any filesystem name that appears in more than one place, though

    • git: hammer2 - Enhance pfs-list and pfs-delete Enhance pfs-list to list PFSs available across all mounted hammer2 filesystems instead of just the current directory's mount. A specific mount may be specified via -s mountpt. Enhance pfs-delete to look for the PFS name across all mounted hammer2 filesystems instead of just the current directory's mount. As a safety, pfs-delete will refuse to delete PFS names which are duplicated across multiple mounts. A specific mount may be specified via -s mountpt.

    Beastie Bits

    • BastilleBSD Templates
    • Tianocore update
    • Reminder: FreeBSD Office Hours on June 24, 2020 *** ###Tarsnap
    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Niclas - Regarding the Lenovo E595 user from Episode 340
    • Erik - What happened with the video
    • Igor - Boot Environments ***
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

    354: ZFS safekeeps data Jun 11, 2020

    FreeBSD 11.4-RC 2 available, OpenBSD 6.7 on a PineBook Pro 64, How OpenZFS Keeps Your Data Safe, Bringing FreeBSD to EC2, FreeBSD 2020 Community Survey, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    FreeBSD 11.4-RC2 Now Available

    The second RC build of the 11.4-RELEASE release cycle is now available.

    • 11.4-RELEASE notes (still in progress at the time of recording) ***

    Install OpenBSD 6.7-current on a PineBook Pro 64

    This document is work in progress and I'll update the date above once I change something. If you have something to add, remarks, etc please contact me. Preferably via Mastodon but other means of communication are also fine.

    News Roundup

    Understanding How OpenZFS Keeps Your Data Safe

    Veteran technology writer Jim Salter wrote an excellent guide on the ZFS file system’s features and performance that we absolutely had to share. There’s plenty of information in the article for ZFS newbies and advanced users alike. Be sure to check out the article over at Ars Technica to learn more about ZFS concepts including pools, vdevs, datasets, snapshots, and replication, just to name a few.

    Bringing FreeBSD to ec2

    Colin is the founder of Tarsnap, a secure online backup service which combines the flexibility and scriptability of the standard UNIX "tar" utility with strong encryption, deduplication, and the reliability of Amazon S3 storage. Having started work on Tarsnap in 2006, Colin is among the first generation of users of Amazon Web Services, and has written dozens of articles about his experiences with AWS on his blog.

    FreeBSD 2020 Community Survey

    The FreeBSD Core Team invites you to complete the 2020 FreeBSD Community Survey. The purpose of this survey is to collect quantitative data from the public in order to help guide the project’s priorities and efforts. This is only the second time a survey has been conducted by the FreeBSD Project and your input is valued.
    The survey will remain open for 14 days and will close on June 16th at 17:00 UTC (Tuesday 10am PDT).

    Beastie Bits

    • FreeBSD Project Proposals
    • TJ Hacking
    • Scotland Open Source podcast
    • Next FreeBSD Office Hours on June 24, 2020 ***

    Feedback/Questions

    • Tom - Writing for LPIrstudio
    • Luke - rstudio
    • Matt - Vlans and Jails
    • Morgan - Can I get some commentary on this issue

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Sponsored By:

    • Tarsnap Promo Code: bsdnow

    353: ZFS on Ironwolf Jun 04, 2020

    Scheduling in NetBSD, ZFS vs. RAID on Ironwolf disks, OpenBSD on Microsoft Surface Go 2, FreeBSD for Linux sysadmins, FreeBSD on Lenovo T480, and more.

    NOTES
    This episode of BSDNow is brought to you by Tarsnap

    Headlines

    Scheduling in NetBSD – Part 1

    In this blog, we will discuss about the 4.4BSD Thread scheduler one of the two schedulers in NetBSD and a few OS APIs that can be used to control the schedulers and get information while executing.

    ZFS versus RAID: Eight Ironwolf disks, two filesystems, one winner

    This has been a long while in the making—it's test results time. To truly understand the fundamentals of computer storage, it's important to explore the impact of various conventional RAID (Redundant Array of Inexpensive Disks) topologies on performance. It's also important to understand what ZFS is and how it works. But at some point, people (particularly computer enthusiasts on the Internet) want numbers.

    • If you want to hear more from Jim, he has a new bi-weekly podcast with Allan and Joe Ressington over at 2.5admins.com

    News Roundup

    OpenBSD on the Microsoft Surface Go 2

    I used OpenBSD on the original Surface Go back in 2018 and many things worked with the big exception of the internal Atheros WiFi. This meant I had to keep it tethered to a USB-C dock for Ethernet or use a small USB-A WiFi dongle plugged into a less-than-small USB-A-to-USB-C adapter.

    FreeBSD UNIX for Linux sysadmins

    If you’ve ever installed and explored another Linux distro (what Linux sysadmin hasn’t?!?), then exploring FreeBSD is going be somewhat similar with a few key differences.
    While there is no graphical installation, the installation process is straightforward and similar to installing a server-based Linux distro. Just make sure you choose the local_unbound package when prompted if you want to cache DNS lookups locally, as FreeBSD doesn’t have a built-in local DNS resolver that does this.
    Following installation, the directory structure is almost identical to Linux. Of course, you’ll notice some small differences here and there (e.g. regular user home directories are located under /usr/home instead of /home). Standard UNIX commands such as ls, chmod, find, which, ps, nice, ifconfig, netstat, sockstat (the ss command in Linux) are exactly as you’d expect, but with some different options here and there that you’ll see in the man pages. And yes, reboot and poweroff are there too.

    FreeBSD on the Lenovo Thinkpad T480

    Recently I replaced my 2014 MacBook Air with a Lenovo Thinkpad T480, on which I've installed FreeBSD, currently 12.1-RELEASE. This page documents my set-up along with various configuration tweaks and fixes.

    Tarsnap

    • This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

    Feedback/Questions

    • Benjamin - ZFS Question

    • Brad - swap_pager_getswapspace errors

    • Brandon - gaming

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Sponsored By:

    • Tarsnap Promo Code: bsdnow

    352: Introducing Randomness May 28, 2020

    A brief introduction to randomness, logs grinding netatalk to a halt, NetBSD core team changes, Using qemu guest agent on OpenBSD kvm/qemu guests, WireGuard patchset for OpenBSD, FreeBSD 12.1 on a laptop, and more.

    Headlines

    Entropy

    A brief introduction to randomness

    • Problem: Computers are very predictable. This is by design.

    But what if we want them to act unpredictably? This is very useful if we want to secure our private communications with randomized keys, or not let people cheat at video games, or if we're doing statistical simulations or similar.

    Logs grinding Netatalk on FreeBSD to a hault

    I’ve heard it said the cobbler’s children walk barefoot. While posessing the qualities of a famed financial investment strategy, it speaks to how we generally put more effort into things for others than ourselves; at least in business.
    The HP Microserver I share with Clara is a modest affair compared to what we run at work. It has six spinning rust drives and two SSDs which are ZFS-mirrored; not even in a RAID 10 equivalent. This is underlaid with GELI for encryption, and served to our Macs with Netatalk over gigabit Ethernet with jumbo frames.

    News Roundup

    NetBSD Core Team Changes

    Matt Thomas (matt@) has served on the NetBSD core team for over ten years, and has made many contributions, including ELF functionality, being the long-time VAX maintainer, gcc contributor, the generic pmap, and also networking functionality, and platform bring-up over the years. Matt has stepped down from the NetBSD core team, and we thank him for his many, extensive contributions.
    Robert Elz (kre@), a long time BSD contributor, has kindly accepted the offer to join the core team, and help us out with the benefit of his experience and advice over many years. Amongst other things, Robert has been maintaining our shell, liaising with the Austin Group, and bringing it up to date with modern functionality.

    Using qemu guest agent on OpenBSD kvm/qemu guests

    In a post to the ports@ mailing list, Landry Breuil (landry@) shared some of his notes on using qemu guest agent on OpenBSD kvm/qemu guests.

    WireGuard patchset for OpenBSD

    A while ago I wanted to learn more about OpenBSD development. So I picked a project, in this case WireGuard, to develop a native client for. Over the last two years, with many different iterations, and working closely with the WireGuard's creator (Jason [Jason A. Donenfeld - Ed.], CC'd), it started to become a serious project eventually reaching parity with other official implementations. Finally, we are here and I think it is time for any further development to happen inside the src tree.

    FreeBSD 12.1 on a laptop

    I’m using FreeBSD again on a laptop for some reasons so expect to read more about FreeBSD here. This tutorial explain how to get a graphical desktop using FreeBSD 12.1.

    Beastie Bits

    • List of useful FreeBSD Commands
    • Master Your Network With Unix Command Line Tools
    • Original Unix containers aka FreeBSD jails
    • Flashback : 2003 Article : Bill Joy's greatest gift to man – the vi editor
    • FreeBSD Journal March/April 2020 Filesystems: ZFS Encryption, FUSE, and more, plus Network Bridges
    • HAMBug meeting will be online again in June, so those from all over the world are welcome to join, June 9th (2nd Tuesday of each month) at 18:30 Eastern

    Feedback/Questions

    • + Lyubomir - GELI and ZFS
    • Patrick - powerd and powerd++
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    351: Heaven: OpenBSD 6.7 May 21, 2020

    Backup and Restore on NetBSD, OpenBSD 6.7 available, Building a WireGuard Jail with FreeBSD's standard tools, who gets to chown things and quotas, influence TrueNAS CORE roadmap, and more.

    Headlines

    Backup and Restore on NetBSD

    Putting together the bits and pieces of a backup and restore concept, while not being rocket science, always seems to be a little bit ungrateful. Most Admin Handbooks handle this topic only within few pages. After replacing my old Mac Mini's OS by NetBSD, I tried to implement an automated backup, allowing me to handle it similarly to the time machine backups I've been using before. Suggestions on how to improve are always welcome.

    BSD Release: OpenBSD 6.7

    The OpenBSD project produces and operating system which places focus on portability, standardisation, code correctness, proactive security and integrated cryptography. The project's latest release is OpenBSD 6.7 which introduces several new improvements to the cron scheduling daemon, improvements to the web server daemon, and the top command now offers scrollable output. These and many more changes can be found in the project's release announcement: "This is a partial list of new features and systems included in OpenBSD 6.7. For a comprehensive list, see the changelog leading to 6.7. General improvements and bugfixes: Reduced the minimum allowed number of chunks in a CONCAT volume from 2 to 1, increasing the number of volumes which can be created on a single disk with bioctl(8) from 7 to 15. This can be used to create more partitions than previously. Rewrote the cron(8) flag-parsing code to be getopt-like, allowing tight formations like -ns and flag repetition. Renamed the 'options' field in crontab(5) to 'flags'. Added crontab(5) -s flag to the command field, indicating that only a single instance of the job should run concurrently. Added cron(8) support for random time values using the ~ operator. Allowed cwm(1) configuration of window size based on percentage of the master window during horizontal and vertical tiling actions."

    • Release Announcement
    • Release Notes

    News Roundup

    Building a WireGuard Jail with the FreeBSD's Standard Tools

    Recently, I had an opportunity to build a WireGuard jail on a FreeBSD 12.1 host.
    As it was really quick and easy to setup and it has been working completely fine for a month, I’d like to share my experience with anyone interested in this topic.

    The Unix divide over who gets to chown things, and (disk space) quotas

    One of the famous big splits between the BSD Unix world and the System V world is whether ordinary users can use chown (the command and the system call) to give away their own files. In System V derived Unixes you were generally allowed to; in BSD derived Unixes you weren't. Until I looked it up now to make sure, I thought that BSD changed this behavior from V7 and that V7 had an unrestricted chown. However, this turns out to be wrong; in V7 Unix, chown(2) was restricted to root only.

    You Can Influence the TrueNAS CORE Roadmap!

    As many of you know, we’ve historically had three ticket types available in our tracker: Bugs, Features, and Improvements, which are all fairly self-explanatory. After some discussion internally, we’ve decided to implement a new type of ticket, a “Suggestion”. These will be replacing Feature and Improvement requests for the TrueNAS Community, simplifying things down to two options: Bugs and Suggestions. This change also introduces a slightly different workflow than before.

    Beastie Bits

    • FreeNAS Spare Parts Build: Testing ZFS With Imbalanced VDEVs and Mismatched Drives
    • TLSv1.3 server code enabled in LibreSSL in -current
    • Interview with Deb Goodkin ***

    Feedback/Questions

    • Bostjan - WireGaurd
    • Chad - ZFS Pool Design
    • Pedreo - Scale FreeBSD Jails

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    350: Speedy Bridges May 14, 2020

    5x if_bridge Performance Improvement, How Unix Won, Understanding VLAN Configuration on FreeBSD, Using bhyve PCI passthrough on OmniOS, TrueNAS 11.3-U2 Available, and more.

    Headlines

    5x if_bridge Performance Improvement

    With FreeBSD Foundation grant, Kristof Provost harnesses new parallel techniques to uncork performance bottleneck

    • Kristof also streamed some of his work, providing an interesting insight into how such development work happens
    • > https://www.twitch.tv/provostk/videos ***

    How Unix Won

    +> Unix has won in every conceivable way. And in true mythic style, it contains the seeds of its own eclipse. This is my subjective historical narrative of how that happened.

    I’m using the name “Unix” to include the entire family of operating systems descended from it, or that have been heavily influenced by it. That includes Linux, SunOS, Solaris, BSD, Mac OS X, and many, many others.
    Both major mobile OSs, Android and iOS, have Unix roots. Their billions of users dwarf those using clunky things like laptops and desktops, but even there, Windows is only the non-Unix viable OS. Almost everything running server-side in giant datacenters is Linux.
    How did Unix win?

    News Roundup

    Check logs of central syslog-ng log host on FreeBSD

    This blog post continues where the blog post A central log host with syslog-ng on FreeBSD left off. Open source solutions to check syslog log messages exist, such as Logcheck or Logwatch. Although these are not to difficult to implement and maintain, I still found these to much. So I went for my own home grown solution to check the syslog messages of the SoCruel.NU central log host. And the solution presented in this blog post works pretty well for me!

    Understanding VLAN Configuration on FreeBSD

    Until recently, I’ve never had a chance to use VLANs on FreeBSD hosts, though I sometimes configure them on ethernet switches.
    But when I was playing with vnet jails, I suddenly got interested in VLAN configuration on FreeBSD and experimented with it for some time.
    I wrote this short article to summarize my current understanding of how to configure VLANs on FreeBSD.

    Using bhyve PCI passthrough on OmniOS

    Some hardware is not supported in illumos yet, but luckily there is bhyve which supports pci passthrough to any guest operating system. To continue with my OmniOS desktop on "modern" hardware I would love wifi support, so why not using a bhyve guest as router zone which provide the required drivers?

    TrueNAS 11.3-U2 is Generally Available

    TrueNAS 11.3-U2.1 is generally available as of 4/22/2020. This update is based on FreeNAS 11.3-U2 which has had over 50k deployments and received excellent community and third party reviews. The Release Notes are available on the iXsystems.com website.

    Beastie Bits

    HardenedBSD April 2020 Status Report
    NYC Bug’s Mailing List - Listing of open Dev Jobs

    Feedback/Questions

    • Greg - Lenovo
    • Matt - BSD Packaging
    • Morgan - Performance

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv


    349: Entropy Overhaul May 07, 2020

    Encrypted Crash Dumps in FreeBSD, Time on Unix, Improve ZVOL sync write performance with a taskq, central log host with syslog-ng, NetBSD Entropy overhaul, Setting Up NetBSD Kernel Dev Environment, and more.

    Headlines

    EKCD - Encrypted Crash Dumps in FreeBSD

    Some time ago, I was describing how to configure networking crash dumps. In that post, I mentioned that there is also the possibility to encrypt crash dumps. Today we will look into this functionality. Initially, it was implemented during Google Summer of Code 2013 by my friend Konrad Witaszczyk, who made it available in FreeBSD 12. If you can understand Polish, you can also look into his presentation on BSD-PL on which he gave a comprehensive review of all kernel crash dumps features.

    The main issue with crash dumps is that they may include sensitive information available in memory during a crash. They will contain all the data from the kernel and the userland, like passwords, private keys, etc. While dumping them, they are written to unencrypted storage, so if somebody took out the hard drive, they could access sensitive data. If you are sending a crash dump through the network, it may be captured by third parties. Locally the data are written directly to a dump device, skipping the GEOM subsystem. The purpose of that is to allow a kernel to write a crash dump even in case a panic occurs in the GEOM subsystem. It means that a crash dump cannot be automatically encrypted with GELI.

    Time on Unix

    Time, a word that is entangled in everything in our lives, something we’re intimately familiar with. Keeping track of it is important for many activities we do.

    Over millennia we’ve developed different ways to calculate it. Most prominently, we’ve relied on the position the sun appears to be at in the sky, what is called apparent solar time.

    We’ve decided to split it as seasons pass, counting one full cycle of the 4 seasons as a year, a full rotation around the sun. We’ve also divided the passing of light to the lack thereof as days, a rotation of the earth on itself. Moving on to more precise clock divisions such as seconds, minutes, and hours, units that meant different things at different points in history. Ultimately, as travel got faster, the different ways of counting time that evolved in multiple places had to converge. People had to agree on what it all meant.

    See the article for more

    News Roundup

    Improve ZVOL sync write performance by using a taskq

    A central log host with syslog-ng on FreeBSD - Part 1

    syslog-ng is the Swiss army knife of log management. You can collect logs from any source, process them in real time and deliver them to wide range of destinations. It allows you to flexibly collect, parse, classify, rewrite and correlate logs from across your infrastructure. This is why syslog-ng is the perfect solution for the central log host of my (mainly) FreeBSD based infrastructure.

    HEADS UP: NetBSD Entropy Overhaul

    This week I committed an overhaul of the kernel entropy system. Please let me know if you observe any snags! For the technical background, see the thread on tech-kern a few months ago: https://mail-index.NetBSD.org/tech-kern/2019/12/21/msg025876.html.

    Setting Up NetBSD Kernel Dev Environment

    I used T_PAGEFLT’s blog post as a reference for setting my NetBSD kernel development environment since his website is down I’m putting down the steps here so it would be helpful for starters.

    Beastie Bits

    • You can now use ccache to speed up dsynth even more.
    • Improving libossaudio, and the future of OSS in NetBSD
    • DragonFlyBSD DHCPCD Import dhcpcd-9.0.2 with the following changes
    • Reminder: watch this space for upcoming FreeBSD Office Hours, next is May 13th at 2pm Eastern, 18:00 UTC

    Feedback/Questions

    • Ghislain - ZFS Question
    • Jake - Paypal Donations
    • Oswin - Hammer tutorial
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    348: BSD Community Collections Apr 30, 2020

    FuryBSD 2020Q2 Images Available, Technical reasons to choose FreeBSD over GNU/Linux, Ars technica reviews GhostBSD, “TLS Mastery” sponsorships open, BSD community show their various collections, a tale of OpenBSD secure memory allocator internals, learn to stop worrying and love SSDs, and more.

    Headlines

    FuryBSD 2020Q2 Images Available for XFCE and KDE

    The Q2 2020 images are not a visible leap forward but a functional leap forward. Most effort was spent creating a better out of box experience for automatic Ethernet configuration, working WiFi, webcam, and improved hypervisor support.

    Technical reasons to choose FreeBSD over GNU/Linux

    Since I wrote my article "Why you should migrate everything from Linux to BSD" I have been wanting to write something about the technical reasons to choose FreeBSD over GNU/Linux and while I cannot possibly cover every single reason, I can write about some of the things that I consider worth noting.

    News Roundup

    + Not actually Linux distro review deux: GhostBSD

    When I began work on the FreeBSD 12.1-RELEASE review last week, it didn't take long to figure out that the desktop portion wasn't going very smoothly.

    I think it's important for BSD-curious users to know of easier, gentler alternatives, so I did a little looking around and settled on GhostBSD for a follow-up review.

    GhostBSD is based on TrueOS, which itself derives from FreeBSD Stable. It was originally a Canadian distro, but—like most successful distributions—it has transcended its country of origin and can now be considered worldwide. Significant GhostBSD development takes place now in Canada, Italy, Germany, and the United States.

    “TLS Mastery” sponsorships open

    My next book will be TLS Mastery, all about Transport Layer Encryption, Let’s Encrypt, OCSP, and so on.

    This should be a shorter book, more like my DNSSEC or Tarsnap titles, or the first edition of Sudo Mastery. I would like a break from writing doorstops like the SNMP and jails books.

    JT (our producer) shared his Open Source Retail Box Collection on twitter this past weekend and there was a nice response from a few in the BSD Community showing their collections:

    • JT's post: https://twitter.com/q5sys/status/1251194823589138432

      • High Resolution Image to see the bottom shelf better: https://photos.smugmug.com/photos/i-9QTs2RR/0/f1742096/O/i-9QTs2RR.jpg
      • Closeup of the BSD Section: https://twitter.com/q5sys/status/1251294290782928897
    • Others jumped in with their collections:

      • Deb Goodkin's collection: https://twitter.com/dgoodkin/status/1251294016139743232 & https://twitter.com/dgoodkin/status/1251298125672660992
      • FreeBSD Frau's FreeBSD Collection: https://twitter.com/freebsdfrau/status/1251290430475350018
      • Jason Tubnor's OpenBSD Collection: https://twitter.com/Tubsta/status/1251265902214918144

    Do you have a nice collection, take a picture and send it in!

    Tale of OpenBSD secure memory allocator internals - malloc(3)

    Hi there,

    It's been a very long time I haven't written anything after my last OpenBSD blogs, that is,

    OpenBSD Kernel Internals — Creation of process from user-space to kernel space.

    OpenBSD: Introduction to execpromises in the pledge(2)

    pledge(2): OpenBSD's defensive approach to OS Security

    So, again I started reading OpenBSD source codes with debugger after reducing my sleep timings and managing to get some time after professional life. This time I have picked one of my favourite item from my wishlist to learn and share, that is, OpenBSD malloc(3), secure allocator

    How I learned to stop worrying and love SSDs

    my home FreeNAS runs two pools for data. One RAIDZ2 with four spinning disk drives and one mirror with two SSDs. Toying with InfluxDB and Grafana in the last couple of days I found that I seem to have a constant write load of 1 Megabyte (!) per second on the SSDs. What the ...?

    So I run three VMs on the SSDs in total. One with Windows 10, two with Ubuntu running Confluence, A wiki essentially, with files for attachments and MySQL as the backend database. Clearly the writes had to stop when the wikis were not used at all, just sitting idle, right?

    Well even with a full query log and quite some experience in the operation of web applications I could not figure out what Confluence is doing (productively, no doubt) but trust me, it writes a couple of hundred kbytes to the database each second just sitting idle.

    My infrastructure as of 2019

    I've wanted to write about my infrastructure for a while, but I kept thinking, "I'll wait until after I've done $next_thing_on_my_todo." Of course this cycle never ends, so I decided to write about its state at the end of 2019. Maybe I'll write an update on it in a couple of moons; who knows?

    For something different than our usual Beastie Bits… we bring you…

    We're all quarantined so lets install BSD on things! Install BSD on something this week, write it up and let us know about it, and maybe we'll feature you!

    • Installation of NetBSD on a Mac Mini

    • OpenBSD on the HP Envy 13

    • Install NetBSD on a Vintage Computer

    • BSDCan Home Lab Panel recording session: May 5th at 18:00 UTC

    • Allan started a series of FreeBSD Office Hours

    BSDNow is going Independent

    • After being part of Jupiter Broadcasting since we started back in 2013, BSDNow is moving to become independent. We extend a very large thank you to Jupiter Broadcasting and Linux Academy for hosting us for so many years, and allowing us to bring you over 100 episodes without advertisements. What does this mean for you, the listener? Not much will change, just make sure your subscription is via the RSS feed at BSDNow.tv rather than one of the Jupiter Broadcasting feeds. We will update you with more news as things settle out.

    Feedback/Questions

    • Todd - LinusTechTips Claims about ZFS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    347: New Directions Apr 23, 2020

    Rethinking OpenBSD security, FreeBSD 2020 Q1 status report, the notion of progress and user interfaces, Comments about Thomas E. Dickey on NetBSD curses, making Unix a little more Plan9-like, Not-actually Linux distro review: FreeBSD, and more.

    Headlines

    Rethinking OpenBSD Security

    OpenBSD aims to be a secure operating system. In the past few months there were quite a few security errata, however. That’s not too unusual, but some of the recent ones were a bit special. One might even say bad. The OpenBSD approach to security has a few aspects, two of which might be avoiding errors and minimizing the risk of mistakes. Other people have other ideas about how to build secure systems. I think it’s worth examining whether the OpenBSD approach works, or if this is evidence that it’s doomed to failure.
    I picked a few errata, not all of them, that were interesting and happened to suit my narrative.

    FreeBSD 2020 Q1 Quarterly report

    Welcome, to the quarterly reports, of the future! Well, at least the first quarterly report from 2020. The new timeline, mentioned in the last few reports, still holds, which brings us to this report, which covers the period of January 2020 - March 2020.

    News Roundup

    The Notion of Progress and User Interfaces

    One trait of modern Western culture is the notion of progress. A view claiming, at large, everything is getting better and better.

    How should we think about progress? Both in general and regarding technology?

    Thomas E. Dickey on NetBSD curses

    I was recently pointed at a web page on Thomas E. Dickeys site talking about NetBSD curses. It seems initially that the page was intended to be a pointer to some differences between ncurses and NetBSD curses and does appear to start off in this vein but it seems that the author has lost the plot as the document evolved and the tail end of it seems to be devolving into some sort of slanging match. I don't want to go through Mr. Dickey's document point by point, that would be tedious but I would like to pick out some of the things that I believe to be the most egregious. Please note that even though I am a NetBSD developer, the opinions below are my own and not the NetBSD projects.

    Making Unix a little more Plan9-like

    I’m not really interested in defending anything. I tried out plan9port and liked it, but I have to live in Unix land. Here’s how I set that up.

    A Warning

    The suckless community, and some of the plan9 communities, are dominated by jackasses. I hope that’s strong enough wording to impress the severity. Don’t go into IRC for help. Stay off the suckless email list. The software is great, the people who write it are well-spoken and well-reasoned, but for some reason the fandom is horrible to everyone.

    Not-actually Linux distro review: FreeBSD 12.1-RELEASE

    This month's Linux distro review isn't of a Linux distribution at all—instead, we're taking a look at FreeBSD, the original gangster of free Unix-like operating systems.

    The first FreeBSD release was in 1993, but the operating system's roots go further back—considerably further back. FreeBSD started out in 1992 as a patch-release of Bill and Lynne Jolitz's 386BSD—but 386BSD itself came from the original Berkeley Software Distribution (BSD). BSD itself goes back to 1977—for reference, Linus Torvalds was only seven years old then.

    Before we get started, I'd like to acknowledge something up front—our distro reviews include the desktop experience, and that is very much not FreeBSD's strength. FreeBSD is far, far better suited to running as a headless server than as a desktop! We're going to get a full desktop running on it anyway, because according to Lee Hutchinson, I hate myself—and also because we can't imagine readers wouldn't care about it.

    FreeBSD does not provide a good desktop experience, to say the least. But if you're hankering for a BSD-based desktop, don't worry—we're already planning a followup review of GhostBSD, a desktop-focused BSD distribution.

    Beastie Bits

    • Wifi renewal restarted
    • HAMMER2 and a quick start for DragonFly
    • Engineering NetBSD 9.0
    • Antivirus Protection using OPNsense Plugins
    • BSDCan Home Lab Panel recording session: May 5th at 18:00 UTC

    BSDNow is going Independent

    • After being part of Jupiter Broadcasting since we started back in 2013, BSDNow is moving to become independent. We extend a very large thank you to Jupiter Broadcasting and Linux Academy for hosting us for so many years, and allowing us to bring you over 100 episodes without advertisements. LinuxAcademy is now under new leadership, and we understand that cutbacks needed to be made, and that BSD is not their core product. That does not mean your favourite BSD podcast is going away, we will continue and we expect things will not look much different. What does this mean for you, the listener? Not much will change, just make sure your subscription is via the RSS feed at BSDNow.tv rather than one of the Jupiter Broadcasting feeds. We will update you with more news as things settle out.

    Feedback/Questions

    • Jordyn - ZFS Pool Problem

      • debug - https://github.com/BSDNow/bsdnow.tv/raw/master/episodes/347/feedback/dbg.txt
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Your browser does not support the HTML5 video tag.

    346: Core File Tales Apr 16, 2020

    Tales from a core file, Lenovo X260 BIOS Update with OpenBSD, the problem of Unix iowait and multi-CPU machines, Hugo workflow using FreeBSD Jails, Caddy, Restic; extending NetBSD-7 branch support, a tale of two hypervisor bugs, and more.

    Headlines

    Tales From a Core File - Lessons from the Unix stdio ABI: 40 Years Later

    On the side, I’ve been wrapping up some improvements to the classic Unix stdio libraries in illumos. stdio contains the classic functions like fopen(), printf(), and the security nightmare gets(). While working on support for fmemopen() and friends I got to reacquaint myself with some of the joys of the stdio ABI and its history from 7th Edition Unix. With that in mind, let’s dive into this, history, and some mistakes not to repeat. While this is written from the perspective of the C programming language, aspects of it apply to many other languages.

    Update Lenovo X260 BIOS with OpenBSD

    My X260 only runs OpenBSD and has no CD driver. But I still need to upgrade its BIOS from time to time. And this is possible using the ISO BIOS image.

    First off all, you need to download the “BIOS Update (Bootable CD)” from the Lenovo Support Website.

    News Roundup

    The problem of Unix iowait and multi-CPU machines

    Various Unixes have had a 'iowait' statistic for a long time now (although I can't find a source for where it originated; it's not in 4.x BSD, so it may have come through System V and sar). The traditional and standard definition of iowait is that it's the amount of time the system was idle but had at least one process waiting on disk IO. Rather than count this time as 'idle' (as you would if you had a three-way division of CPU time between user, system, and idle), some Unixes evolved to count this as a new category, 'iowait'.

    My Latest Self Hosted Hugo Workflow using FreeBSD Jails, Caddy, Restic and More

    After hosting with Netlify for a few years, I decided to head back to self hosting. Theres a few reasons for that but the main reasoning was that I had more control over how things worked.

    In this post, i’ll show you my workflow for deploying my Hugo generated site (www.jaredwolff.com). Instead of using what most people would go for, i’ll be doing all of this using a FreeBSD Jails based server. Plus i’ll show you some tricks i’ve learned over the years on bulk image resizing and more.

    Let’s get to it.

    Extending support for the NetBSD-7 branch

    Typically, some time after releasing a new NetBSD major version (such as NetBSD 9.0), we will announce the end-of-life of the N-2 branch, in this case NetBSD-7.

    We've decided to hold off on doing that to ensure our users don't feel rushed to perform a major version update on any remote machines, possibly needing to reach the machine if anything goes wrong.

    Security fixes will still be made to the NetBSD-7 branch.

    We hope you're all safe. Stay home.

    Tale of two hypervisor bugs - Escaping from FreeBSD bhyve

    VM escape has become a popular topic of discussion over the last few years. A good amount of research on this topic has been published for various hypervisors like VMware, QEMU, VirtualBox, Xen and Hyper-V. Bhyve is a hypervisor for FreeBSD supporting hardware-assisted virtualization. This paper details the exploitation of two bugs in bhyve - FreeBSD-SA-16:32.bhyve (VGA emulation heap overflow) and CVE-2018-17160 (Firmware Configuration device bss buffer overflow) and some generic techniques which could be used for exploiting other bhyve bugs. Further, the paper also discusses sandbox escapes using PCI device passthrough, and Control-Flow Integrity bypasses in HardenedBSD 12-CURRENT

    Beastie Bits

    • GhostBSD 20.02 Overview
    • FuryBSD 12.1 Overview > Joe Maloney got in touch to say that the issues in the video and other ones found have since been fixed. Now that's community feedback in action, and an example of a developer who does his best to help the community. A great guy indeed.
    • OS108-9.0 amd64 MATE released
    • FreeBSD hacking: carp panics & test
    • Inaugural FreeBSD Office Hours

    Feedback/Questions

    • Shody - systemd question
    • Ben - GELI and GPT
    • Stig - DIY NAS
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    345: Switchers to BSD Apr 09, 2020

    NetBSD 8.2 is available, NextCloud on OpenBSD, X11 screen locking, NetBSD and RISC OS running parallel, community feedback about switching to BSD, and more.

    Headlines

    NetBSD 8.2 is available!

    The third release in the NetBSD-8 is now available.

    This release includes all the security fixes in NetBSD-8 up until this point, and other fixes deemed important for stability.

    • Some highlights include:
      • x86: fixed regression in booting old CPUs
      • x86: Hyper-V Gen.2 VM framebuffer support
      • httpd(8): fixed various security issues
      • ixg(4): various fixes / improvements
      • x86 efiboot: add tftp support, fix issues on machines with many memory segments, improve graphics mode logic to work on more machines.
      • Various kernel memory info leaks fixes
      • Update expat to 2.2.8
      • Fix ryzen USB issues and support xHCI version 3.10.
      • Accept root device specification as NAME=label.
      • Add multiboot 2 support to x86 bootloaders.
      • Fix for CVE-2019-9506: 'Key Negotiation of Bluetooth' attack.
      • nouveau: limit the supported devices and fix firmware loading.
      • radeon: fix loading of the TAHITI VCE firmware.
      • named(8): stop using obsolete dnssec-lookaside.

    NextCloud on OpenBSD

    NextCloud and OpenBSD are complementary to one another. NextCloud is an awesome, secure and private alternative for proprietary platforms, whereas OpenBSD forms the most secure and solid foundation to serve it on. Setting it up in the best way isn’t hard, especially using this step by step tutorial.

    • Preface

    Back when this tutorial was initially written, things were different. The OpenBSD port relied on PHP 5.6 and there were no package updates. But the port improved (hats off, Gonzalo!) and package updates were introduced to the -stable branch (hats off, Solene!).

    A rewrite of this tutorial was long overdue. Right now, it is written for 6.6 -stable and will be updated once 6.7 is released. If you have any questions or desire some help, feel free to reach out.

    News Roundup

    X11 screen locking: a secure and modular approach

    For years I’ve been using XScreenSaver as a default, but I recently learned about xsecurelock and re-evaluated my screen-saving requirements

    NetBSD and RISC OS running parallel

    I have been experimenting with running two systems at the same time on the RK3399 SoC.
    It all begun when I figured out how to switch to the A72 cpu for RISC OS. When the switch was done, the A53 cpu just continued to execute code.
    OK I thought why not give it something to do!
    My first step was to run some small programs.
    It worked!

    • Thanks to Tom Jones for the pointer to this article

    Several weeks ago we covered a story about switching from Linux to BSD. Benedict and JT asked for community feedback as to their thoughts on the matter. Allan was out that week, so this will give him an opportunity to chime in with his thoughts as well.

    • Jamie - Dumping Linux for BSD
    • Matt - BSD Packaging
    • Brad - Linux vs BS
    • MJ - Linux vs BSD Feedback
    • Ben - Feedback for JT
    • Henrik - Why you should migrate everything to BSD

    Beastie Bits

    • ssh-copy-id now included
    • OPNsense 20.1.3 released
    • A Collection of prebuilt BSD Cloud Images
    • Instant terminal sharing

    Feedback/Questions

    • Ales - Manually verify signature files for pkg package
    • Shody - Yubikey
    • Mike - Site for hashes from old disks
      • Answer: https://docs.google.com/spreadsheets/d/19FmLs0jXxLkxAr0zwgdrXQd1qhbwvNHH6NvolvXKWTM/edit?usp=sharing
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    344: Grains of Salt Apr 02, 2020

    Shell text processing, data rebalancing on ZFS mirrors, Add Security Headers with OpenBSD relayd, ZFS filesystem hierarchy in ZFS pools, speeding up ZSH, How Unix pipes work, grow ZFS pools over time, the real reason ifconfig on Linux is deprecated, clear your terminal in style, and more.

    Headlines

    Text processing in the shell

    This article is part of a self-published book project by Balthazar Rouberol and Etienne Brodu, ex-roommates, friends and colleagues, aiming at empowering the up and coming generation of developers. We currently are hard at work on it!

    One of the things that makes the shell an invaluable tool is the amount of available text processing commands, and the ability to easily pipe them into each other to build complex text processing workflows. These commands can make it trivial to perform text and data analysis, convert data between different formats, filter lines, etc.

    When working with text data, the philosophy is to break any complex problem you have into a set of smaller ones, and to solve each of them with a specialized tool.

    Rebalancing data on ZFS mirrors

    One of the questions that comes up time and time again about ZFS is “how can I migrate my data to a pool on a few of my disks, then add the rest of the disks afterward?”

    If you just want to get the data moved and don’t care about balance, you can just copy the data over, then add the new disks and be done with it. But, it won’t be distributed evenly over the vdevs in your pool.

    Don’t fret, though, it’s actually pretty easy to rebalance mirrors. In the following example, we’ll assume you’ve got four disks in a RAID array on an old machine, and two disks available to copy the data to in the short term.

    News Roundup

    Using OpenBSD relayd to Add Security Headers

    I am a huge fan of OpenBSD’s built-in httpd server as it is simple, secure, and quite performant. With the modern push of the large search providers pushing secure websites, it is now important to add security headers to your website or risk having the search results for your website downgraded. Fortunately, it is very easy to do this when you combine httpd with relayd. While relayd is principally designed for layer 3 redirections and layer 7 relays, it just so happens that it makes a handy tool for adding the recommended security headers. My website automatically redirects users from http to https and this gets achieved using a simple redirection in /etc/httpd.conf So if you have a configuration similar to mine, then you will still want to have httpd listen on the egress interface on port 80. The key thing to change here is to have httpd listen on 127.0.0.1 on port 443.

    How we set up our ZFS filesystem hierarchy in our ZFS pools

    Our long standing practice here, predating even the first generation of our ZFS fileservers, is that we have two main sorts of filesystems, home directories (homedir filesystems) and what we call 'work directory' (workdir) filesystems. Homedir filesystems are called /h/NNN (for some NNN) and workdir filesystems are called /w/NNN; the NNN is unique across all of the different sorts of filesystems. Users are encouraged to put as much stuff as possible in workdirs and can have as many of them as they want, which mattered a lot more in the days when we used Solaris DiskSuite and had fixed-sized filesystems.

    Speeding up ZSH

    https://web.archive.org/web/20200315184849/https://blog.jonlu.ca/posts/speeding-up-zsh

    I was opening multiple shells for an unrelated project today and noticed how abysmal my shell load speed was. After the initial load it was relatively fast, but the actual shell start up was noticeably slow. I timed it with time and these were the results.

    In the future I hope to actually recompile zsh with additional profiling techniques and debug information - keeping an internal timer and having a flag output current time for each command in a tree fashion would make building heat maps really easy.

    How do Unix Pipes work

    Pipes are cool! We saw how handy they are in a previous blog post. Let’s look at a typical way to use the pipe operator. We have some output, and we want to look at the first lines of the output. Let’s download The Brothers Karamazov by Fyodor Dostoevsky, a fairly long novel.

    What we do to enable us to grow our ZFS pools over time

    In my entry on why ZFS isn't good at growing and reshaping pools, I mentioned that we go to quite some lengths in our ZFS environment to be able to incrementally expand our pools. Today I want to put together all of the pieces of that in one place to discuss what those lengths are.
    Our big constraint is that not only do we need to add space to pools over time, but we have a fairly large number of pools and which pools will have space added to them is unpredictable. We need a solution to pool expansion that leaves us with as much flexibility as possible for as long as possible. This pretty much requires being able to expand pools in relatively small increments of space.

    Linux maintains bugs: The real reason ifconfig on Linux is deprecated

    In my third installment of FreeBSD vs Linux, I will discuss underlying reasons for why Linux moved away from ifconfig(8) to ip(8).

    In the past, when people said, “Linux is a kernel, not an operating system”, I knew that was true but I always thought it was a rather pedantic criticism. Of course no one runs just the Linux kernel, you run a distribution of Linux. But after reviewing userland code, I understand the significant drawbacks to developing “just a kernel” in isolation from the rest of the system.

    Clear Your Terminal in Style

    if you’re someone like me who habitually clears their terminal, sometimes you want a little excitement in your life. Here is a way to do just that.

    This post revolves around the idea of giving a command a percent chance of running. While the topic at hand is not serious, this simple technique has potential in your scripts.

    Feedback/Questions

    • Guy - AMD GPU Help
    • MLShroyer13 - VLANs and Jails
    • Master One - ZFS Suspend/resume
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    343: FreeBSD, Corona: Fight! Mar 26, 2020

    Fighting the Coronavirus with FreeBSD, Wireguard VPN Howto in OPNsense, NomadBSD 1.3.1 available, fresh GhostBSD 20.02, New FuryBSD XFCE and KDE images, pf-badhost 0.3 released, and more.

    Headlines

    Fighting the Coronavirus with FreeBSD

    Here is a quick HOWTO for those who want to provide some FreeBSD based compute resources to help finding vaccines.

    UPDATE 2020-03-22: 0mp@ made a port out of this, it is in “biology/linux-foldingathome”.

    Per default it will now pick up some SARS-CoV‑2 (COVID-19) related folding tasks. There are some more config options (e.g. how much of the system resources are used). Please refer to the official Folding@Home site for more information about that. Be also aware that there is a big rise in compute resources donated to Folding@Home, so the pool of available work units may be empty from time to time, but they are working on adding more work units. Be patient.

    How to configure the Wireguard VPN in OPNsense

    WireGuard is a modern designed VPN that uses the latest cryptography for stronger security, is very lightweight, and is relatively easy to set up (mostly). I say ‘mostly’ because I found setting up WireGuard in OPNsense to be more difficult than I anticipated. The basic setup of the WireGuard VPN itself was as easy as the authors claim on their website, but I came across a few gotcha's. The gotcha's occur with functionality that is beyond the scope of the WireGuard protocol so I cannot fault them for that. My greatest struggle was configuring WireGuard to function similarly to my OpenVPN server. I want the ability to connect remotely to my home network from my iPhone or iPad, tunnel all traffic through the VPN, have access to certain devices and services on my network, and have the VPN devices use my home's Internet connection.

    WireGuard behaves more like a SSH server than a typical VPN server. With WireGuard, devices which have shared their cryptographic keys with each other are able to connect via an encrypted tunnel (like a SSH server configured to use keys instead of passwords). The devices that are connecting to one another are referred to as “peer” devices. When the peer device is an OPNsense router with WireGuard installed, for instance, it can be configured to allow access to various resources on your network. It becomes a tunnel into your network similar to OpenVPN (with the appropriate firewall rules enabled). I will refer to the WireGuard installation on OPNsense as the server rather than a “peer” to make it more clear which device I am configuring unless I am describing the user interface because that is the terminology used interchangeably by WireGuard.

    The documentation I found on WireGuard in OPNsense is straightforward and relatively easy to understand, but I had to wrestle with it for a little while to gain a better understanding on how it should be configured. I believe it was partially due to differing end goals – I was trying to achieve something a little different than the authors of other wiki/blog/forum posts. Piecing together various sources of information, I finally ended up with a configuration that met the goals stated above.

    News Roundup

    NomadBSD 1.3.1

    NomadBSD 1.3.1 has recently been made available. NomadBSD is a lightweight and portable FreeBSD distribution, designed to run on live on a USB flash drive, allowing you to plug, test, and play on different hardware. They have also started a forum as of yesterday, where you can ask questions and mingle with the NomadBSD community. Notable changes in 1.3.1 are base system upgraded to FreeBSD 12.1-p2. automatic network interface setup improved, image size increased to over 4GB, Thunderbird, Zeroconf, and some more listed below.

    GhostBSD 20.02

    Eric Turgeon, main developer of GhostBSD, has announced version 20.02 of the FreeBSD based operating system. Notable changes are ZFS partition into the custom partition editor installer, allowing you to install alongside with Windows, Linux, or macOS. Other changes are force upgrade all packages on system upgrade, improved update station, and powerd by default for laptop battery performance.

    New FuryBSD XFCE and KDE images

    This new release is now based on FreeBSD 12.1 with the latest FreeBSD quarterly packages. This brings XFCE up to 4.14, and KDE up to 5.17. In addition to updates this new ISO mostly addresses community bugs, community enhancement requests, and community pull requests. Due to the overwhelming amount of reports with GitHub hosting all new releases are now being pushed to SourceForge only for the time being. Previous releases will still be kept for archive purposes.

    pf-badhost 0.3 Released

    pf-badhost is a simple, easy to use badhost blocker that uses the power of the pf firewall to block many of the internet's biggest irritants. Annoyances such as SSH and SMTP bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing and/or compromised webhosts.

    Beastie Bits

    • DragonFly i915 drm update
    • CShell is punk rock
    • The most surprising Unix programs

    Feedback/Questions

    • Master One - Torn between OpenBSD and FreeBSD
    • Brad - Follow up to Linus ZFS story
    • Filipe Carvalho - Call for Portuguese BSD User Groups
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    342: Layout the DVA Mar 19, 2020

    OpenBSD Full disk encryption with coreboot and tianocore, FreeBSD 12.0 EOL, ZFS DVA layout, OpenBSD’s Go situation, AD updates requires changes in TrueNAS and FreeNAS, full name of FreeBSD’s root account, and more.

    Headlines

    OpenBSD Full Disk Encryption with CoreBoot and Tianocore Payload

    It has been a while since I have posted here so I wanted to share something that was surprisingly difficult for me to figure out. I have a Thinkpad T440p that I have flashed with Coreboot 4.11 with some special patches that allow the newer machine to work. When I got the laptop, the default BIOS was UEFI and I installed two operating systems.

    Windows 10 with bitlocker full disk encryption on the “normal” drive (I replaced the spinning 2.5″ disk with an SSD)

    Ubuntu 19.10 on the m.2 SATA drive that I installed using LUKS full disk encryption

    I purchased one of those carriers for the optical bay that allows you to install a third SSD and so I did that with the intent of putting OpenBSD on it. Since my other two operating systems were running full disk encryption, I wanted to do the same on OpenBSD.

    • See article for rest of story

    FreeBSD 12.0 EOL

    Dear FreeBSD community,

    As of February 29, 2020, FreeBSD 12.0 will reach end-of-life and will no longer be supported by the FreeBSD Security Team. Users of FreeBSD 12.0 are strongly encouraged to upgrade to a newer release as soon as possible.

    • 12.1 Active release
    • 12.2 Release Schedule

    News Roundup

    Some effects of the ZFS DVA format on data layout and growing ZFS pools

    One piece of ZFS terminology is DVA and DVAs, which is short for Data Virtual Address. For ZFS, a DVA is the equivalent of a block number in other filesystems; it tells ZFS where to find whatever data we're talking about. The short summary of what fields DVAs have and what they mean is that DVAs tell us how to find blocks by giving us their vdev (by number) and their byte offset into that particular vdev (and then their size). A typical DVA might say that you find what it's talking about on vdev 0 at byte offset 0x53a40ed000. There are some consequences of this that I hadn't really thought about until the other day.

    Right away we can see why ZFS has a problem removing a vdev; the vdev's number is burned into every DVA that refers to data on it. If there's no vdev 0 in the pool, ZFS has no idea where to even start looking for data because all addressing is relative to the vdev. ZFS pool shrinking gets around this by adding a translation layer that says where to find the portions of vdev 0 that you care about after it's been removed.

    Warning! Active Directory Security Changes Require TrueNAS and FreeNAS Updates.

    • Critical Information for Current FreeNAS and TrueNAS Users

    Microsoft is changing the security defaults for Active Directory to eliminate some security vulnerabilities in its protocols. Unfortunately, these new security defaults may disrupt existing FreeNAS/TrueNAS deployments once Windows systems are updated. The Windows updates may appear sometime in March 2020; no official date has been announced as of yet.

    FreeNAS and TrueNAS users that utilize Active Directory should update to version 11.3 (or 11.2-U8) to avoid potential disruption of their networks when updating to the latest versions of Windows software after March 1, 2020. Version 11.3 has been released and version 11.2-U8 will be available in early March.

    Full name of the FreeBSD Root Account

    NetBSD now has a users(7) and groups(7) manual. Looking into what entries existed in the passwd and group files I wondered about root’s full name who we now know as Charlie Root in the BSDs....

    OpenBSD Go Situation

    Over in the fediverse, Pete Zaitcev had a reaction to my entry on OpenBSD versus Prometheus for us:

    I don't think the situation is usually that bad. Our situation with Prometheus is basically a worst case scenario for Go on OpenBSD, and most people will have much better results, especially if you stick to supported OpenBSD versions.

    If you stick to supported OpenBSD versions, upgrading your machines as older OpenBSD releases fall out of support (as the OpenBSD people want you to do), you should not have any problems with your own Go programs. The latest Go release will support the currently supported OpenBSD versions (as long as OpenBSD remains a supported platform for Go), and the Go 1.0 compatibility guarantee means that you can always rebuild your current Go programs with newer versions of Go. You might have problems with compiled binaries that you don't want to rebuild, but my understanding is that this is the case for OpenBSD in general; it doesn't guarantee a stable ABI even for C programs (cf). If you use OpenBSD, you have to be prepared to rebuild your code after OpenBSD upgrades regardless of what language it's written in.

    Beastie Bits

    • Test your TOR
    • OPNsense 20.1.1 released
    • pkg for FreeBSD 1.13

    Feedback/Questions

    • Bostjan writes in about Wireguard
    • Charlie has a followup to wpa_supplicant as lower class citizen
    • Lars writes about LibreSSL as a positive example
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    341: U-NAS-ification Mar 12, 2020

    FreeBSD on Power, DragonflyBSD 5.8 is here, Unifying FreeNAS/TrueNAS, OpenBSD vs. Prometheus and Go, gcc 4.2.1 removed from FreeBSD base, and more.

    Headlines

    FreeBSD on Power

    The power and promise of all open source software is freedom. Another way to express freedom is choice — choice of platforms, deployment models, stacks, configurations, etc.

    The FreeBSD Foundation is dedicated to supporting and promoting the FreeBSD Project and community worldwide. But, what does this mean, exactly, you may wonder. The truth is it means many different things, but in all cases the Foundation acts to expand freedom and choice so that FreeBSD users have the power to serve their varied compute needs.

    This blog tells the story of one specific way the Foundation helps a member of the community provide greater hardware choice for all FreeBSD users.

    Dragonfly 5.8

    DragonFly version 5.8 brings a new dsynth utility for building your own binary dports packages, plus significant support work to speed up that build - up to and including the entire collection. Additional progress has been made on GPU and signal support.

    The details of all commits between the 5.6 and 5.8 branches are available in the associated commit messages for 5.8.0rc1 and 5.8.0. Also see /usr/src/UPDATING for specific file changes in PAM.

    • See article for rest of information

    2nd HamBUG meeting recap

    • The second meeting of the Hamilton BSD Users Group took place last night
    • The next meeting is scheduled for the 2nd Tuesday of the month, April 14th 2020

    News Roundup

    FreeNAS/TrueNAS Brand Unification

    FreeNAS and TrueNAS have been separate-but-related members of the #1 Open Source storage software family since 2012. FreeNAS is the free Open Source version with an expert community and has led the pursuit of innovations like Plugins and VMs. TrueNAS is the enterprise version for organizations of all sizes that need additional uptime and performance, as well as the enterprise-grade support necessary for critical data and applications.

    From the beginning at iXsystems, we’ve developed, tested, documented, and released both as separate products, even though the vast majority of code is shared. This was a deliberate technical decision in the beginning but over time became less of a necessity and more of “just how we’ve always done it”. Furthermore, to change it was going to require a serious overhaul to how we build and package both products, among other things, so we continued to kick the can down the road. As we made systematic improvements to development and QA efficiency over the past few years, the redundant release process became almost impossible to ignore as our next major efficiency roadblock to overcome. So, we’ve finally rolled up our sleeves.

    With the recent 11.3 release, TrueNAS gained parity with FreeNAS on features like VMs and Plugins, further homogenizing the code. Today, we announce the next phase of evolution for FreeNAS and TrueNAS.

    OpenBSD versus Prometheus (and Go).

    We have a decent number of OpenBSD machines that do important things (and that have sometimes experienced problems like running out of disk space), and we have a Prometheus based metrics and monitoring system. The Prometheus host agent has enough support for OpenBSD to be able to report on critical metrics, including things like local disk space. Despite all of this, after some investigation I've determined that it's not really sensible to even try to deploy the host agent on our OpenBSD machines. This is due to a combination of factors that have at their root OpenBSD's lack of ABI stability

    FreeBSD removed gcc from base

    As described in Warner's email message[1] to the FreeBSD-arch mailing list we have reached GCC 4.2.1's retirement date. At this time all supported architectures either use in-tree Clang, or rely on external toolchain (i.e., a contemporary GCC version from ports).

    GCC 4.2.1 was released July 18, 2007 and was imported into FreeBSD later that year, in r171825. GCC has served us well, but version 4.2.1 is obsolete and not used by default on any architecture in FreeBSD. It does not support modern C and does not support arm64 or RISC-V.

    Beastie Bits

    • New Archive location for Dragonfly 4.x
    • A dead simple git cheat sheet
    • Xorg 1.20.7 on HardenedBSD Comes with IE/RELRO+BIND_NOW/CFI/SafeStack Protections

    Feedback/Questions

    • Niclas writes in Regarding the Lenovo E595 user (episode 340)
    • Lyubomir writes about GELI and ZFS
    • Peter writes in about scaling FreeBSD jails
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    340: Check My Sums Mar 05, 2020

    Why ZFS is doing filesystem checksumming right, better TMPFS throughput performance on DragonFlyBSD, reshaping pools with ZFS, PKGSRC on Manjaro aarch64 Pinebook-pro, central log host with syslog-ng on FreeBSD, and more.

    Headlines

    Checksumming in filesystems, and why ZFS is doing it right

    One of the best aspects of ZFS is its reliability. This can be accomplished using a few features like copy-on-write approach and checksumming. Today we will look at how ZFS does checksumming and why it does it the proper way. Most of the file systems don’t provide any integrity checking and fail in several scenarios:

    • Data bit flips - when the data that we wanted to store are bit flipped by the hard drives, or cables, and the wrong data is stored on the hard drive.
    • Misdirected writes - when the CPU/cable/hard drive will bit flip a block to which the data should be written.
    • Misdirected read - when we miss reading the block when a bit flip occurred.
    • Phantom writes - when the write operation never made it to the disk. For example, a disk or kernel may have some bug that it will return success even if the hard drive never made the write. This problem can also occur when data is kept only in the hard drive cache.

    Checksumming may help us detect errors in a few of those situations.

    DragonFlyBSD Improves Its TMPFS Implementation For Better Throughput Performance

    It's been a while since last having any new magical optimizations to talk about by DragonFlyBSD lead developer Matthew Dillon, but on Wednesday he landed some significant temporary file-system "TMPFS" optimizations for better throughput including with swap.

    Of several interesting commits merged tonight, the improved write clustering is a big one. In particular, "Reduces low-memory tmpfs paging I/O overheads by 4x and generally increases paging throughput to SSD-based swap by 2x-4x. Tmpfs is now able to issue a lot more 64KB I/Os when under memory pressure."

    • https://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/4eb0bb82efc8ef32c4357cf812891c08d38d8860

    There's also a new tunable in the VM space as well as part of his commits on Wednesday night. This follows a lot of recent work on dsynth, improved page-out daemon pipelining, and other routine work.

    • https://gitweb.dragonflybsd.org/dragonfly.git/commit/bc47dbc18bf832e4badb41f2fd79159479a7d351

    This work is building up towards the eventual DragonFlyBSD 5.8 while those wanting to try the latest improvements right away can find their daily snapshots.

    News Roundup

    Why ZFS is not good at growing and reshaping pools (or shrinking them)

    recently read Mark McBride's Five Years of Btrfs (via), which has a significant discussion of why McBride chose Btrfs over ZFS that boils down to ZFS not being very good at evolving your pool structure. You might doubt this judgment from a Btrfs user, so let me say as both a fan of ZFS and a long term user of it that this is unfortunately quite true; ZFS is not a good choice if you want to modify your pool disk layout significantly over time. ZFS works best if the only change in your pools that you do is replacing drives with bigger drives. In our ZFS environment we go to quite some lengths to be able to expand pools incrementally over time, and while this works it both leaves us with unbalanced pools and means that we're basically forced to use mirroring instead of RAIDZ.

    (An unbalanced pool is one where some vdevs and disks have much more data than others. This is less of an issue for us now that we're using SSDs instead of HDs.)

    Using PKGSRC on Manjaro Linux aarch64 Pinebook-pro

    I wanted to see how pkgsrc works on aarch64 Linux Manjaro since it is a very mature framework that is very portable and supported by many architectures – pkgsrc (package source) is a package management system for Unix-like operating systems. It was forked from the FreeBSD ports collection in 1997 as the primary package management system for NetBSD.

    One might question why use pkgsrc on Arch based Manjaro, since the pacman package repository is very good on its own. I see alternative pkgsrc as a good automated build framework that offers a way to produce independent build environment /usr/pkg that does not interfere with the current Linux distribution in any way (all libraries are statically built)

    I have used the latest Manjaro for Pinebookpro and standard recommended tools as mentioned here https://wiki.netbsd.org/pkgsrc/how_to_use_pkgsrc_on_linux/

    A Central Log Host with syslog-ng on FreeBSD

    • Part 1

    syslog-ng is the Swiss army knife of log management. You can collect logs from any source, process them in real time and deliver them to wide range of destinations. It allows you to flexibly collect, parse, classify, rewrite and correlate logs from across your infrastructure. This is why syslog-ng is the perfect solution for the central log host of my (mainly) FreeBSD based infrastructure.

    • Part 2

    This blog post continues where the blog post A central log host with syslog-ng on FreeBSD left off. Open source solutions to check syslog log messages exist, such as Logcheck or Logwatch. Although these are not too difficult to implement and maintain, I still found these to much. So I went for my own home grown solution to check the syslog messages of the SoCruel.NU central log host.

    Beastie Bits

    • FreeBSD at Linux Conf 2020 session videos now online
    • Unlock your laptop with your phone
    • Managing a database of vulnerabilities for a package system: the pkgsrc study
    • Hamilton BSD User group will meet again on March 10th](http://studybsd.com/)
    • CharmBUG Meeting: March 24th 7pm in Severn, MD ***

    Feedback/Questions

    • Andrew - ZFS feature Flags
    • Sam - TwinCat BSD
    • Dacian - Freebsd + amdgpu + Lenovo E595
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    339: BSD Fundraising Feb 27, 2020

    Meet FuryBSD, NetBSD 9.0 has been released, OpenBSD Foundation 2019 campaign wrapup, a retrospective on OmniOS ZFS-based NFS fileservers, NetBSD Fundraising 2020 goal, OpenSSH 8.2 released, and more.## Headlines

    Meet FuryBSD: A New Desktop BSD Distribution

    At its heart, FuryBSD is a very simple beast. According to the site, “FuryBSD is a back to basics lightweight desktop distribution based on stock FreeBSD.” It is basically FreeBSD with a desktop environment pre-configured and several apps preinstalled. The goal is to quickly get a FreeBSD-based system running on your computer.

    You might be thinking that this sounds a lot like a couple of other BSDs that are available, such as NomadBSD and GhostBSD. The major difference between those BSDs and FuryBSD is that FuryBSD is much closer to stock FreeBSD. For example, FuryBSD uses the FreeBSD installer, while others have created their own installers and utilities.

    As it states on the site, “Although FuryBSD may resemble past graphical BSD projects like PC-BSD and TrueOS, FuryBSD is created by a different team and takes a different approach focusing on tight integration with FreeBSD. This keeps overhead low and maintains compatibility with upstream.” The lead dev also told me that “One key focus for FuryBSD is for it to be a small live media with a few assistive tools to test drivers for hardware.”

    Currently, you can go to the FuryBSD homepage and download either an XFCE or KDE LiveCD. A GNOME version is in the works.

    NetBSD 9.0

    The NetBSD Project is pleased to announce NetBSD 9.0, the seventeenth major release of the NetBSD operating system.

    This release brings significant improvements in terms of hardware support, quality assurance, security, along with new features and hundreds of bug fixes. Here are some highlights of this new release.

    News Roundup

    OpenBSD Foundation 2019 campaign wrapup

    Our target for 2019 was CDN$300K. Our community's continued generosity combined with our corporate donors exceeded that nicely. In addition we received the largest single donation in our history, CDN$380K from Smartisan. The return of Google was another welcome event. Altogether 2019 was our most successful campaign to date, yielding CDN$692K in total.

    We thank all our donors, Iridium (Smartisan), Platinum (Yandex, Google), Gold (Microsoft, Facebook) Silver (2Keys) and Bronze (genua, Thinkst Canary). But especially our community of smaller donors whose contributions are the bedrock of our support. Thank you all!

    • OpenBSD Foundation 2019 Fundraising Goal Exceeded

    A retrospective on our OmniOS ZFS-based NFS fileservers

    Our OmniOS fileservers have now been out of service for about six months, which makes it somewhat past time for a retrospective on them. Our OmniOS fileservers followed on our Solaris fileservers, which I wrote a two part retrospective on (part 1, part 2), and have now been replaced by our Linux fileservers. To be honest, I have been sitting on my hands about writing this retrospective because we have mixed feelings about our OmniOS fileservers.

    I will put the summary up front. OmniOS worked reasonably well for us over its lifespan here and looking back I think it was almost certainly the right choice for us at the time we made that choice (which was 2013 and 2014). However it was not without issues that marred our experience with it in practice, although not enough to make me regret that we ran it (and ran it for as long as we did). Part of our issues are likely due to a design mistake in making our fileservers too big, although this design mistake was probably magnified when we were unable to use Intel 10G-T networking in OmniOS.

    On the one hand, our OmniOS fileservers worked, almost always reliably. Like our Solaris fileservers before them, they ran quietly for years without needing much attention, delivering NFS fileservice to our Ubuntu servers; specifically, we ran them for about five years (2014 through 2019, although we started migrating away at the end of 2018). Over this time we had only minor hardware issues and not all that many disk failures, and we suffered no data loss (with ZFS checksums likely saving us several times, and certainly providing good reassurances). Our overall environment was easy to manage and was pretty much problem free in the face of things like failed disks. I'm pretty sure that our users saw a NFS environment that was solid, reliable, and performed well pretty much all of the time, which is the important thing. So OmniOS basically delivered the fileserver environment we wanted.

    NetBSD Fundraising 2020 goal

    Is it really more than 10 years since we last had an official fundraising drive?

    Looking at old TNF financial reports I noticed that we have been doing quite well financially over the last years, with a steady stream of small and medium donations, and most of the time only moderate expenditures. The last fundraising drive back in 2009 was a giant success, and we have lived off it until now.

    OpenSSH 8.2 released February 14, 2020

    OpenSSH 8.2 was released on 2020-02-14. It is available from the mirrors listed at https://www.openssh.com/.

    OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support.

    Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at:

    • https://www.openssh.com/donations.html

    Beastie Bits

    • FreeNAS vs. Unraid: GRUDGE MATCH!
    • Unix Toolbox
    • Rigs of Rods - OpenBSD Physics Game
    • NYCBug - Dr Vixie
    • Hamilton BSD User group will meet again on March 10th](http://studybsd.com/)
    • BSD Stockholm - Meetup March 3rd 2020

    Feedback/Questions

    • Shirkdog - Question
    • Master One - ZFS + Suspend/resume
    • Micah Roth - ZFS write caching
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    338: iocage in Jail Feb 20, 2020

    Distrowatch reviews FuryBSD, LLDB on i386 for NetBSD, wpa_supplicant as lower-class citizen, KDE on FreeBSD updates, Travel Grant for BSDCan open, ZFS dataset for testing iocage within a jail, and more.

    Headlines

    Distrowatch Fury BSD Review

    FuryBSD is the most recent addition to the DistroWatch database and provides a live desktop operating system based on FreeBSD. FuryBSD is not entirely different in its goals from NomadBSD, which we discussed recently. I wanted to take this FreeBSD-based project for a test drive and see how it compares to NomadBSD and other desktop-oriented projects in the FreeBSD family.

    FuryBSD supplies hybrid ISO/USB images which can be used to run a live desktop. There are two desktop editions currently, both for 64-bit (x86_64) machines: Xfce and KDE Plasma. The Xfce edition is 1.4GB in size and is the flavour I downloaded. The KDE Plasma edition is about 3.0GB in size.

    My fresh install of FuryBSD booted to a graphical login screen. From there I could sign into my account, which brings up the Xfce desktop. The installed version of Xfce is the same as the live version, with a few minor changes. Most of the desktop icons have been removed with just the file manager launchers remaining. The Getting Started and System Information icons have been removed. Otherwise the experience is virtually identical to the live media.

    FuryBSD uses a theme that is mostly grey and white with creamy yellow folder icons. The application menu launchers tend to have neutral icons, neither particularly bright and detailed or minimal.

    LLDB now works on i386

    Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.

    In February 2019, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues, fixing watchpoint and threading support.

    The original NetBSD port of LLDB was focused on amd64 only. In January, I have extended it to support i386 executables. This includes both 32-bit builds of LLDB (running natively on i386 kernel or via compat32) and debugging 32-bit programs from 64-bit LLDB.

    News Roundup

    wpa_supplicant is definitely a lower-class citizen, sorry

    wpa_supplicant is definitely a lower-class citizen, sorry.

    I increasingly wonder why this stuff matters; transit costs are so much lower than the period when eduroam was setup, and their reliance on 802.11x is super weird in a world where, for the most part
    + entire cities have open wifi in their downtown core
    + edu vs edu+transit split horizon problems have to be solved anyways
    + many universities have parallel open wifi
    + rate limiting / fare-share approaches for the open-net, on unmetered
    + flat-rate solves the problem
    + LTE hotspot off a phone isn't a rip off anymore
    + other open networks exist

    essentially no one else feels compelled to do use 802.11x for a so called "semi-open access network", so I think they've lost the plot on friction vs benefit.

    (we've held hackathons at EDU campus that are locked down like that, and in every case we've said no way, gotten a wire with open net, and built our own wifi. we will not subject our developers to that extra complexity).

    KDE FreeBSD Updates Feb 2020

    Some bits and bobs from the KDE FreeBSD team in february 2020. We met at the FreeBSD devsummit before FOSDEM, along with other FreeBSD people. Plans were made, schemes were forged, and Groff the Goat was introduced to some new people.

    • The big ticket things:
      • Frameworks are at 5.66
      • Plasma is at 5.17.5 (the beta 5.18 hasn’t been tried)
      • KDE release service has landed 19.12.2 (same day it was released)
    • Developer-centric:
      • KDevelop is at 5.5.0
      • KUserfeedback landed its 1.0.0 release
      • CMake is 3.16.3
    • Applications:
      • Musescore is at 3.4.2
      • Elisa now part of the KDE release service updates
    • Fuure work:
      • KIO-Fuse probably needs extra real-world testing on FreeBSD. I don’t have that kind of mounts (just NFS in /etc/fstab) so I’m not the target audience.
      • KTextEditor is missing .editorconfig support. That can come in with the next frameworks update, when consumers update anyway. Chasing it in an intermediate release is a bit problematic because it does require some rebuilds of consumers.

    Travel Grant Application for BSDCan is now open

    Hi everyone,

    The Travel Grant Application for BSDCan 2020 is now open. The Foundation can help you attend BSDCan through our travel grant program. Travel grants are available to FreeBSD developers and advocates who need assistance with travel expenses for attending conferences related to FreeBSD development. BSDCan 2020 applications are due April 9, 2020. Find out more and apply at: https://www.freebsdfoundation.org/what-we-do/grants/travel-grants/

    Did you know the Foundation also provides grants for technical events not specifically focused on BSD? If you feel that your attendance at one of these events will benefit the FreeBSD Project and Community and you need assistance getting there, please fill out the general travel grant application. Your application must be received 7 weeks prior to the event. The general application can be found here: https://goo.gl/forms/QzsOMR8Jra0vqFYH2

    Creating a ZFS dataset for testing iocage within a jail

    • Be warned, this failed. I’m stalled and I have not completed this.

    I’m going to do jails within a jail. I already do that with poudriere in a jail but here I want to test an older version of iocage before upgrading my current jail hosts to a newer version.

    • In this post:
      • FreeBSD 12.1
      • py36-iocage-1.2_3
      • py36-iocage-1.2_4

    This post includes my errors and mistakes. Perhaps you should proceed carefully and read it all first.

    Beastie Bits

    • Reminder: the FreeBSD Journal is free! Check out these great articles
    • Serenity GUI desktop running on an OpenBSD kernel
    • The Open Source Parts of MacOS
    • FOSDEM videos available

    Feedback/Questions

    • Michael - Install with ZFS
    • Mohammad - Server Freeze
    • Todd - ZFS Questions
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    337: Kubernetes on bhyve Feb 13, 2020

    Happinesses and stresses of full-time FOSS work, building a FreeBSD fileserver, Kubernetes on FreeBSD bhyve, NetBSD 9 RC1 available, OPNSense 20.1 is here, HardenedBSD’s idealistic future, and more.

    Headlines

    The happinesses and stresses of full-time FOSS work

    In the past few days, several free software maintainers have come out to discuss the stresses of their work. Though the timing was suggestive, my article last week on the philosophy of project governance was, at best, only tangentially related to this topic - I had been working on that article for a while. I do have some thoughts that I’d like to share about what kind of stresses I’ve dealt with as a FOSS maintainer, and how I’ve managed (or often mismanaged) it.

    February will mark one year that I’ve been working on self-directed free software projects full-time. I was planning on writing an optimistic retrospective article around this time, but given the current mood of the ecosystem I think it would be better to be realistic. In this stage of my career, I now feel at once happier, busier, more fulfilled, more engaged, more stressed, and more depressed than I have at any other point in my life.

    The good parts are numerous. I’m able to work on my life’s passions, and my projects are in the best shape they’ve ever been thanks to the attention I’m able to pour into them. I’ve also been able to do more thoughtful, careful work; with the extra time I’ve been able to make my software more robust and reliable than it’s ever been. The variety of projects I can invest my time into has also increased substantially, with what was once relegated to minor curiosities now receiving a similar amount of attention as my larger projects were receiving in my spare time before. I can work from anywhere in the world, at any time, not worrying about when to take time off and when to put my head down and crank out a lot of code.

    The frustrations are numerous, as well. I often feel like I’ve bit off more than I can chew. This has been the default state of affairs for me for a long time; I’m often neglecting half of my projects in order to obtain progress by leaps and bounds in just a few. Working on FOSS full-time has cast this model’s disadvantages into greater relief, as I focus on a greater breadth of projects and spend more time on them.

    Building a FreeBSD File Server

    Recently at my job, I was faced with a task to develop a file server explicitly suited for the requirements of the company. Needless to say, any configuration of a kind depends on what the infrastructure needs. So, drawing from my personal experience and numerous materials on the web, I came up with the combination FreeBSD+SAMBA+AD as the most appropriate. It appears to be a perfect choice for this environment, and harmonic addition to the existing network configuration since FreeBSD + SAMBA + AD enables admins with the broad range of possibilities for access control. However, as nothing is perfect, this configuration isn’t the best choice if your priority is data protection because it won’t be able to reach the necessary levels of reliability and fault tolerance without outside improvements.

    Now, since we’ve established that, let’s move on to the next point. This article’s describing the process of building a test environment while concentrating primarily on the details of the configuration. As the author, though, I must say I’m in no way suggesting that this is the only way! The following configuration will be presented in its initial stage, with the minimum requirements necessary to get the job done, and its purpose in one specific situation only. Here, look at this as a useful strategy to solve similar tasks. Well, let’s get started!

    Report from the first Hamilton BSD Users Group Meeting

    February 11th was the first meeting of this new user group, founded by John Young and myself

    11 people attended, and a lot of good discussions were had

    One of the attendees already owns a domain that fits well for the group, so we will be getting that setup over the next few weeks, as well as the twitter account, and other organization stuff.

    Special thanks to the illumos users who drove in from Buffalo to attend, although they may have actually had a shorter drive than a few of the other attendees.

    The next meeting is scheduled again for the 2nd Tuesday of the month, March 10th.

    We are still discussing if we should meet at a restaurant again, or try to get a space at the local college or innovation hub where we can have a projector etc.

    News Roundup

    Kubernetes on FreeBSD Bhyve

    There are quite a few solutions for container orchestration, but the most popular (or the most famous and highly advertised, is probably, a Kubernetes) Since I plan to conduct many experiments with installing and configuring k8s, I need a laboratory in which I can quickly and easily deploy a cluster in any quantities for myself. In my work and everyday life I use two OS very tightly - Linux and FreeBSD OS. Kubernetes and docker are Linux-centric projects, and at first glance, you should not expect any useful participation and help from FreeBSD here. As the saying goes, an elephant can be made out of a fly, but it will no longer fly. However, two tempting things come to mind - this is very good integration and work in the FreeBSD ZFS file system, from which it would be nice to use the snapshot mechanism, COW and reliability. And the second is the bhyve hypervisor, because we still need the docker and k8s loader in the form of the Linux kernel. Thus, we need to connect a certain number of actions in various ways, most of which are related to starting and pre-configuring virtual machines. This is typical of both a Linux-based server and FreeBSD. What exactly will work under the hood to run virtual machines does not play a big role. And if so - let's take a FreeBSD here!

    NetBSD 9 RC1 Available

    We hope this will lead to the best NetBSD release ever (only to be topped by NetBSD 10 next year).

    • Here are a few highlights of the new release:

      • Support for Arm AArch64 (64-bit Armv8-A) machines, including "Arm ServerReady" compliant machines (SBBR+SBSA)
      • Enhanced hardware support for Armv7-A
      • Updated GPU drivers (e.g. support for Intel Kabylake)
      • Enhanced virtualization support
      • Support for hardware-accelerated virtualization (NVMM)
      • Support for Performance Monitoring Counters
      • Support for Kernel ASLR
      • Support several kernel sanitizers (KLEAK, KASAN, KUBSAN)
      • Support for userland sanitizers
      • Audit of the network stack
      • Many improvements in NPF
      • Updated ZFS
      • Reworked error handling and NCQ support in the SATA subsystem
      • Support a common framework for USB Ethernet drivers (usbnet)
    • You can download binaries of NetBSD 9.0_RC1 from our Fastly-provided CDN: https://cdn.netbsd.org/pub/NetBSD/NetBSD-9.0_RC1/

    OPNsense 20.1 Keen Kingfisher released

    For over 5 years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.

    20.1, nicknamed "Keen Kingfisher", is a subtle improvement on sustainable firewall experience. This release adds VXLAN and additional loopback device support, IPsec public key authentication and elliptic curve TLS certificate creation amongst others. Third party software has been updated to their latest versions. The logging frontend was rewritten for MVC with seamless API support. On the far side the documentation increased in quality as well as quantity and now presents itself in a familiar menu layout.

    Idealistic Future for HardenedBSD

    Over the past month, we purchased and deployed the new 13-CURRENT/amd64 package building server. We published our first 13-CURRENT/amd64 production package build using that server. We then rebuilt the old package building server to act as the 12-STABLE/amd64 package building server. This post signifies a very important milestone: we have now fully recovered from last year's death of our infrastructure. Our 12-STABLE/amd64 repo, previously out-of-date by many months, is now fully up-to-date!

    HardenedBSD is in a very unique position to provide innovative solutions to at-risk and underprivileged populations. As such, we are making human rights endeavors a defining area of focus. Our infrastructure will integrate various privacy and anonymity enhancing technologies and techniques to protect lives. Our operating system's security posture will increase, especially with our focus on exploit mitigations.

    Navigating the intersection between human rights and information security directly impacts lives. HardenedBSD's 2020 mission and focus is to deliver an entire hardened ecosystem that is unfriendly towards those who would oppress or censor their people. This includes a subtle shift in priorities to match this new mission and focus. While we implement exploit mitigations and further harden the ecosystem, we will seek out opportunities to contribute a tangible and unique impact on human rights issues. Providing Tor Onion Services for our core infrastructure is the first step in likely many to come towards securely helping those in need.

    Beastie Bits

    • Warner Losh's FOSDEM talk
    • Relational Pipes v0.15
    • A reminder for where to find NetBSD ARM images
    • New Safe Memory Reclamation feature in UMA
    • BSD Users Stockholm Meetup

    Feedback/Questions

    • ZFS - Rosetta Stone Document?
    • Pat - Question
    • Sigflup - Wayland on the BSDs
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    336: Archived Knowledge Feb 06, 2020

    Linux couldn’t duplicate OpenBSD, FreeBSD Q4 status report, OPNsense 19.7.9 released, archives retain and pass on knowledge, HardenedBSD Tor Onion Service v3 Nodes, and more.

    Headlines

    OpenBSD has to be a BSD Unix and you couldn't duplicate it with Linux

    OpenBSD has a well deserved reputation for putting security and a clean system (for code, documentation, and so on) first, and everything else second. OpenBSD is of course based on BSD (it's right there in the name) and descends from FreeBSD NetBSD (you can read the history here). But one of the questions you could ask about it is whether it had to be that way, and in particular if you could build something like OpenBSD on top of Linux. I believe that the answer is no.

    Linux and the *BSDs have a significantly different model of what they are. BSDs have a 'base system' that provides an integrated and fully operational core Unix, covering the kernel, C library and compiler, and the normal Unix user level programs, all maintained and distributed by the particular BSD. Linux is not a single unit this way, and instead all of the component parts are maintained separately and assembled in various ways by various Linux distributions. Both approaches have their advantages, but one big one for the BSD approach is that it enables global changes.

    Making global changes is an important part of what makes OpenBSD's approach to improving security, code maintenance, and so on work. Because it directly maintains everything as a unit, OpenBSD is in a position to introduce new C library or kernel APIs (or change them) and then immediately update all sorts of things in user level programs to use the new API. This takes a certain amount of work, of course, but it's possible to do it at all. And because OpenBSD can do this sort of ambitious global change, it does.

    This goes further than just the ability to make global changes, because in theory you can patch in global changes on top of a bunch of separate upstream projects. Because OpenBSD is in control of its entire base system, it's not forced to try to reconcile different development priorities or integrate clashing changes. OpenBSD can decide (and has) that only certain sorts of changes will be accepted into its system at all, no matter what people want. If there are features or entire programs that don't fit into what OpenBSD will accept, they just lose out.

    FreeBSD Quarterly Status Report 2019Q4

    Here is the last quarterly status report for 2019. As you might remember from last report, we changed our timeline: now we collect reports the last month of each quarter and we edit and publish the full document the next month. Thus, we cover here the period October 2019 - December 2019.

    If you thought that the FreeBSD community was less active in the Christmas' quarter you will be glad to be proven wrong: a quick glance at the summary will be sufficient to see that much work has been done in the last months.

    Have a nice read!

    News Roundup

    OPNsense 19.7.9 released

    As 20.1 nears we will be making adjustments to the scope of the release with an announcement following shortly.

    For now, this update brings you a GeoIP database configuration page for aliases which is now required due to upstream database policy changes and a number of prominent third-party software updates we are happy to see included.

    Archives are important to retain and pass on knowledge

    Archives are important. When they are public and available for searching, it retains and passes on knowledge. It saves vast amounts of time.

    HardenedBSD Tor Onion Service v3 Nodes

    I've been working today on deploying Tor Onion Service v3 nodes across our build infrastructure. I'm happy to announce that the public portion of this is now completed. Below you will find various onion service hostnames and their match to our infrastructure.

    • hardenedbsd.org: lkiw4tmbudbr43hbyhm636sarn73vuow77czzohdbqdpjuq3vdzvenyd.onion
    • ci-01.nyi.hardenedbsd.org: qspcqclhifj3tcpojsbwoxgwanlo2wakti2ia4wozxjcldkxmw2yj3yd.onion
    • ci-03.md.hardenedbsd.org: eqvnohly4tjrkpwatdhgptftabpesofirnhz5kq7jzn4zd6ernpvnpqd.onion
    • ci-04.md.hardenedbsd.org: rfqabq2w65nhdkukeqwf27r7h5xfh53h3uns6n74feeyl7s5fbjxczqd.onion
    • git-01.md.hardenedbsd.org: dacxzjk3kq5mmepbdd3ai2ifynlzxsnpl2cnkfhridqfywihrfftapid.onion

    Beastie Bits

    • The Missing Semester of Your CS Education (MIT Course)
    • An old Unix Ad
    • OpenBSD syscall call-from verification
    • OpenBSD/arm64 on Pinebook
    • Reminder: First Southern Ontario BSD user group meeting, February 11th (this coming Tuesday!) 18:30 at Boston Pizza on Upper James st, Hamilton.
    • NYCBUG: March meeting will feature Dr. Paul Vixie and his new talk “Operating Systems as Dumb Pipes”
    • 8th Meetup of the Stockholm BUG: March 3 at 18:00
    • Polish BSD User Group meets on Feb 11, 2020 at 18:15

    Feedback/Questions

    • Sean - ZFS and Creation Dates
    • Christopher - Help on ZFS Disaster Recovery
    • Mike - Encrypted ZFS Send
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    335: FreeBSD Down Under Jan 30, 2020

    Hyperbola Developer interview, why you should migrate from Linux to BSD, FreeBSD is an amazing OS, improving the ptrace(2) API in LLVM 10, First FreeBSD conference in Australia, and a guide to containers on FreeNAS.

    Headlines

    FreeBSD is an amazing operating System

    Update 2020-01-21: Since I wrote this article it got posted on Hacker News, Reddit and Lobster, and a few people have emailed me with comments. I have updated the article with comments where I have found it needed. As an important side note I would like to point out that I am not a FreeBSD developer, there may be things going on in the FreeBSD world that I know absolutely nothing about. I am also not glued to the FreeBSD developer mailing lists. I am not a FreeBSD "fanboy". I have been using GNU/Linux a ton more for the past two decades than FreeBSD, mainly due to hardware incompatibility (lacking or buggy drivers), and I love both Debian GNU/Linux and Arch Linux just as much as FreeBSD. However, I am concerned about the development of GNU/Linux as of late. Also this article is not about me trying to make anyone switch from something else to FreeBSD. It's about why I like FreeBSD and that I recommend you try it out if you're into messing with operating systems.

    I think the year was late 1999 or mid 2000 when I one day was browsing computer books at my favorite bookshop and I discovered the book The Complete FreeBSD third edition from 1999 by Greg Lehey. With the book came 4 CD Roms with FreeBSD 3.3.

    I had already familiarized myself with GNU/Linux in 1998, and I was in the process of migrating every server and desktop operating system away from Microsoft Windows, both at home and at my company, to GNU/Linux, initially Red Hat Linux and then later Debian GNU/Linux, which eventually became my favorite GNU/Linux distribution for many years.

    When I first saw The Complete FreeBSD book by Greg Lehey I remember noticing the text on the front page that said, "The Free Version of Berkeley UNIX" and "Rock Solid Stability", and I was immediately intrigued! What was that all about? A free UNIX operating system! And rock solid stability? That sounded amazing.

    Hyperbola Dev Interview

    In late December 2019, Hyperbola announced that they would be making major changes to their project. They have decided to drop the Linux kernel in favor of forking the OpenBSD kernel. This announcement only came months after Project Trident announced that they were going in the opposite direction (from BSD to Linux).

    Hyperbola also plans to replace all software that is not GPL v3 compliant with new versions that are.

    To get more insight into the future of their new project, I interviewed Andre, co-founder of Hyperbola.

    News Roundup

    Improving the ptrace(2) API and preparing for LLVM-10.0

    This month I have improved the NetBSD ptrace(2) API, removing one legacy interface with a few flaws and replacing it with two new calls with new features, and removing technical debt.

    As LLVM 10.0 is branching now soon (Jan 15th 2020), I worked on proper support of the LLVM features for NetBSD 9.0 (today RC1) and NetBSD HEAD (future 10.0).

    The first FreeBSD conference in Australia

    FreeBSD has existed as an operating system, project, and foundation for more than twenty years, and its earlier incantations have exited for far longer. The old guard have been developing code, porting software, and writing documentation for longer than I’ve existed. I’ve been using it for more than a decade for personal projects, and professionally for half that time.

    While there are many prominent Australian FreeBSD contributors, sysadmins, and users, we’ve always had to venture overseas for conferences. We’re always told Australians are among the most ardent travellers, but I always wondered if we could do a domestic event as well.

    And on Tuesday, we did! Deb Goodkin and the FreeBSD Foundation graciously organised and chaired a dedicated FreeBSD miniconf at the long-running linux.conf.au event held each year in a different city in Australia and New Zealand.

    A practical guide to containers on FreeNAS for a depraved psychopath

    This is a simple write-up to setup Docker on FreeNAS 11 or FreeBSD 11.

    But muh jails?

    You know that jails are dope and you know that jails are dope, yet no one else knows it. So here we are stuck with docker. Two years ago I would be the last person to recommend using docker, but a whole lot of things has changes past years…

    So jails are dead then?

    No, jails are still dope, but jails lack tools to manage them. Yes, there are a few tools, but they meant for hard-core FreeBSD users who used to suffering. Docker allows you to run applications without deep knowledge of application you’re running. It will also allow you to run applications that are not ported to FreeBSD.

    Why you should migrate everything from Linux to BSD

    As an operating system GNU/Linux has become a real mess because of the fragmented nature of the project, the bloatware in the kernel, and because of the jerking around by commercial interests.

    • Response Should you migrate from Linux to BSD? It depends.

    Beastie Bits

    • Using the OpenBSD ports tree with dedicated users
    • broot on FreeBSD
    • A Trip down Memory Lane
    • Running syslog-ng in BastilleBSD
    • NASA : Using Software Packages in pkgsrc

    Feedback/Questions

    • All of our questions this week were pretty technical in nature so I'm going to save those for the next episode so Allan can weigh in on them, since if we cover them now we're basically going to be deferring to Allan anyway.
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    334: Distrowatch Running FreeBSD Jan 23, 2020

    Upgrading FreeBSD from 11.3 to 12.1, Distrowatch switching to FreeBSD, Torvalds says don’t run ZFS, iked(8) removed automatic IPv6 blocking, working towards LLDB on i386, and memory-hard Argon2 hashing scheme in NetBSD.

    Headlines

    Upgrading FreeBSD from 11.3 to 12.1

    Now here’s something more like what I was originally expecting the content on this blog to look like. I’m in the process of moving all of our FreeBSD servers (about 30 in total) from 11.3 to 12.1. We have our own local build of the OS, and until “packaged base” gets to a state where it’s reliably usable, we’re stuck doing upgrades the old-fashioned way. I created a set of notes for myself while cranking through these upgrades and I wanted to share them since they are not really work-specific and this process isn’t very well documented for people who haven’t been doing this sort of upgrade process for 25 years.

    Our source and object trees are read-only exported from the build server over NFS, which causes things to be slow. /etc/make.conf and /etc/src.conf are symbolic links on all of our servers to the master copies in /usr/src so that make installworld can find the configuration parameters the system was built with.

    Switching Distrowatch over to BSD

    This may be a little off-topic for this board (forgive me if it is, please). However, I wanted to say that I'm one of the people who works on DistroWatch (distrowatch.com) and this past week we had to deal with a server facing hardware failure. We had a discussion about whether to continue running Debian or switch to something else.

    The primary "something else" option turned out to be FreeBSD and it is what we eventually went with. It took a while to convert everything over from working with Debian GNU/Linux to FreeBSD 12 (some script incompatibilities, different paths, some changes to web server configuration, networking IPv6 troubles). But in the end we ended up with a good, FreeBSD-based experience.

    Since the transition was successful, though certainly not seamless, I thought people might want to do a Q&A on the migration process. Especially for those thinking of making the same switch.

    News Roundup

    iked(8) automatic IPv6 blocking removed

    iked(8) no longer automatically blocks unencrypted outbound IPv6 packets. This feature was intended to avoid accidental leakage, but in practice was found to mostly be a cause of misconfiguration.

    If you previously used iked(8)'s -6 flag to disable this feature, it is no longer needed and should be removed from /etc/rc.conf.local if used.

    Linus says dont run ZFS

    “Don’t use ZFS. It’s that simple. It was always more of a buzzword than anything else, I feel, and the licensing issues just make it a non-starter for me.”

    This is what Linus Torvalds said in a mailing list to once again express his disliking for ZFS filesystem specially over its licensing.

    To avoid unnecessary confusion, this is more intended for Linux distributions, kernel developers and maintainers rather than individual Linux users.

    GSoC 2019 Final Report: Incorporating the memory-hard Argon2 hashing scheme into NetBSD

    We successfully incorporated the Argon2 reference implementation into NetBSD/amd64 for our 2019 Google Summer of Coding project. We introduced our project here and provided some hints on how to select parameters here. For our final report, we will provide an overview of what changes were made to complete the project.

    The Argon2 reference implementation, available here, is available under both the Creative Commons CC0 1.0 and the Apache Public License 2.0. To import the reference implementation into src/external, we chose to use the Apache 2.0 license for this project.

    Working towards LLDB on i386 NetBSD

    Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.

    In February 2019, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues, fixing watchpoint and threading support.

    Throughout December I've continued working on our build bot maintenance, in particular enabling compiler-rt tests. I've revived and finished my old patch for extended register state (XState) in core dumps. I've started working on bringing proper i386 support to LLDB.

    Beastie Bits

    • An open source Civilization V
    • BSD Groups in Italy
    • Why is Wednesday, November 17, 1858 the base time for OpenVMS?
    • Benchmarking shell pipelines and the Unix “tools” philosophy
    • LPI and BSD working together

    Feedback/Questions

    • Pat - March Meeting
    • Madhukar - Overheating Laptop
    • Warren - R vs S
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    333: Unix Keyboard Joy Jan 16, 2020

    Your Impact on FreeBSD in 2019, Wireguard on OpenBSD Router, Amazon now has FreeBSD/ARM 12, pkgsrc-2019Q4, The Joys of UNIX Keyboards, OpenBSD on Digital Ocean, and more.

    Headlines

    Your Impact on FreeBSD in 2019

    It’s hard to believe that 2019 is nearly over. It has been an amazing year for supporting the FreeBSD Project and community! Why do I say that? Because as I reflect over the past 12 months, I realize how many events we’ve attended all over the world, and how many lives we’ve touched in so many ways. From advocating for FreeBSD to implementing FreeBSD features, my team has been there to help make FreeBSD the best open source project and operating system out there.

    In 2019, we focused on supporting a few key areas where the Project needed the most help. The first area was software development. Whether it was contracting FreeBSD developers to work on projects like wifi support, to providing internal staff to quickly implement hardware workarounds, we’ve stepped in to help keep FreeBSD innovative, secure, and reliable. Software development includes supporting the tools and infrastructure that make the development process go smoothly, and we’re on it with team members heading up the Continuous Integration efforts, and actively involved in the clusteradmin and security teams.

    Our advocacy efforts focused on recruiting new users and contributors to the Project. We attended and participated in 38 conferences and events in 21 countries. From giving FreeBSD presentations and workshops to staffing tables, we were able to have 1:1 conversations with thousands of attendees.

    Our travels also provided opportunities to talk directly with FreeBSD commercial and individual users, contributors, and future FreeBSD user/contributors. We’ve seen an increase in use and interest in FreeBSD from all of these organizations and individuals. These meetings give us a chance to learn more about what organizations need and what they and other individuals are working on. The information helps inform the work we should fund.

    Wireguard on OpenBSD Router

    wireguard (wg) is a modern vpn protocol, using the latest class of encryption algorithms while at the same time promising speed and a small code base.

    modern crypto and lean code are also tenants of openbsd, thus it was a no brainer to migrate my router from openvpn over to wireguard.

    my setup : a collection of devices, both wired and wireless, that are nat’d through my router (openbsd 6.6) out via my vpn provider azire* and out to the internet using wg-quick to start wg.

    running : doubtless this could be improved on, but currently i start wg manually when my router boots. this, and the nat'ing on the vpn interface mean its impossible for clients to connect to the internet without the vpn being up. as my router is on a ups and only reboots when a kernel patch requires it, it’s a compromise i can live with. run wg-quick (please replace vpn with whatever you named your wg .conf file.) and reload pf rules.

    News Roundup

    Amazon now has FreeBSD/ARM 12

    AWS, the cloud division of Amazon, announced in December the next generation of its ARM processors, the Graviton2. This is a custom chip design with a 7nm architecture. It is based on 64-bit ARM Neoverse cores.

    Compared to first-generation Graviton processors (A1), today’s new chips should deliver up to 7x the performance of A1 instances in some cases. Floating point performance is now twice as fast. There are additional memory channels and cache speed memory access should be much faster.

    The company is working on three types of Graviton2 EC2 instances that should be available soon. Instances with a “g” suffix are powered by Graviton2 chips. If they have a “d” suffix, it also means that they have NVMe local storage.

    • General-purpose instances (M6g and M6gd)

    • Compute-optimized instances (C6g and C6gd)

    • Memory-optimized instances (R6g and R6gd)

    You can choose instances with up to 64 vCPUs, 512 GiB of memory and 25 Gbps networking.

    And you can see that ARM-powered servers are not just a fad. AWS already promises a 40% better price/performance ratio with ARM-based instances when you compare them with x86-based instances.

    AWS has been working with operating system vendors and independent software vendors to help them release software that runs on ARM. ARM-based EC2 instances support Amazon Linux 2, Ubuntu, Red Hat, SUSE, Fedora, Debian and FreeBSD. It also works with multiple container services (Docker, Amazon ECS, and Amazon Elastic Kubernetes Service).

    • Coverage of AWS Announcement

    Announcing the pkgsrc-2019Q4 release

    The pkgsrc developers are proud to announce the 65th quarterly release of pkgsrc, the cross-platform packaging system. pkgsrc is available with more than 20,000 packages, running on 23 separate platforms; more information on pkgsrc itself is available at https://www.pkgsrc.org/

    In total, 190 packages were added, 96 packages were removed, and 1,868 package updates (to 1388 unique packages) were processed since the pkgsrc-2019Q3 release. As usual, a large number of updates and additions were processed for packages for go (14), guile (11), perl (170), php (10), python (426), and ruby (110). This continues pkgsrc's tradition of adding useful packages, updating many packages to more current versions, and pruning unmaintained packages that are believed to have essentially no users.

    The Joys of UNIX Keyboards

    I fell in love with a dead keyboard layout.

    A decade or so ago while helping a friends father clean out an old building, we came across an ancient Sun Microsystems server. We found it curious. Everything about it was different from what we were used to. The command line was black on white, the connectors strange and foreign, and the keyboard layout was bizarre.

    We never did much with it; turning it on made all the lights in his home dim, and our joint knowledge of UNIX was nonexistent. It sat in his bedroom for years supporting his television at the foot of his bed.

    I never forgot that keyboard though. The thought that there was this alternative layout out there seemed intriguing to me.

    OpenBSD on Digital Ocean

    Last night I had a need to put together a new OpenBSD machine. Since I already use DigitalOcean for one of my public DNS servers I wanted to use them for this need but sadly like all too many of the cloud providers they don't support OpenBSD. Now they do support FreeBSD and I found a couple writeups that show how to use FreeBSD as a shim to install OpenBSD.

    They are both sort of old at this point and with OpenBSD 6.6 out I ran into a bit of a snag. The default these days is to use a GPT partition table to enable EFI booting. This is generally pretty sane but it looks to me like the FreeBSD droplet doesn't support this. After the installer rebooted the VM failed to boot, being unable to find the bootloader.

    Thankfully DigitalOcean has a recovery ISO that you can boot by simply switching to it and powering off and then on your Droplet.

    Beastie Bits

    • FreeBSD defaults to LLVM on PPC
    • Theo De Raadt Interview between Ottawa 2019 Hackathon and BSDCAN 2019
    • Bastille Poll about what people would like to see in 2020
    • Notes on the classic book : The Design of the UNIX Operating System
    • Multics History
    • First meeting of the Hamilton BSD user group, February 11, 2020 18:30 - 21:00, Boston Pizza on Upper James St

    Feedback/Questions

    • Bill - 1.1 CDROM
    • Greg - More 50 Year anniversary information
    • Dave - Question time for Allan
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    332: The BSD Hyperbole Jan 09, 2020

    Announcing HyperbolaBSD, IPFW In-Kernel NAT setup on FreeBSD, Wayland and WebRTC enabled for NetBSD 9/Linux, LLDB Threading support ready for mainline, OpenSSH U2F/FIDO support in base, Dragonfly drm/i915: Update, and more.

    Headlines

    HyperbolaBSD Announcement

    Due to the Linux kernel rapidly proceeding down an unstable path, we are planning on implementing a completely new OS derived from several BSD implementations.

    This was not an easy decision to make, but we wish to use our time and resources to create a viable alternative to the current operating system trends which are actively seeking to undermine user choice and freedom.

    This will not be a "distro", but a hard fork of the OpenBSD kernel and userspace including new code written under GPLv3 and LGPLv3 to replace GPL-incompatible parts and non-free ones.

    • Reasons for this include:
      • Linux kernel forcing adaption of DRM, including HDCP.
      • Linux kernel proposed usage of Rust (which contains freedom flaws and a centralized code repository that is more prone to cyber attack and generally requires internet access to use.)
      • Linux kernel being written without security and in mind. (KSPP is basically a dead project and Grsec is no longer free software)
      • Many GNU userspace and core utils are all forcing adaption of features without build time options to disable them. E.g. (PulseAudio / SystemD / Rust / Java as forced dependencies)
      • As such, we will continue to support the Milky Way branch until 2022 when our legacy Linux-libre kernel reaches End of Life.

    Future versions of Hyperbola will be using HyperbolaBSD which will have the new kernel, userspace and not be ABI compatible with previous versions.

    HyperbolaBSD is intended to be modular and minimalist so other projects will be able to re-use the code under free license.

    • Forum Post

    A simple IPFW In-Kernel NAT setup on FreeBSD

    After graduating college, I am moving from Brooklyn, NY to Redmond, WA (guess where I got a job). I always wanted to re-do my OPNsense firewall (currently a HP T730) with stock FreeBSD and IPFW’s in-kernel NAT.

    Why IPFW? Benchmarks have shown IPFW to be faster which is especially good for my Tor relay, and because I can! However, one downside of IPFW is less documentation vs PF, even less without natd (which we’re not using), and this took me time to figure this out.

    But since my T730 is already packed, I am testing this on a old PC with two NICs, and my laptop [1] as a client with an USB-to-Ethernet adapter.

    News Roundup

    HEADS UP: Wayland and WebRTC enabled for NetBSD 9/Linux

    This is just a heads up that the Wayland option is now turned on by

    default for NetBSD 9 and Linux in cases where it peacefully coexists
    with X11.

    • Right now, this effects the following packages:
      • graphics/MesaLib
      • devel/SDL2
      • www/webkit-gtk
      • x11/gtk3

    The WebRTC option has also been enabled by default on NetBSD 9 for two Firefox versions: www/firefox, www/firefox68

    Please keep me informed of any fallout. Hopefully, there will be none.

    If you want to try out Wayland-related things on NetBSD 9, wm/velox/MESSAGE may be interesting for you.

    LLDB Threading support now ready for mainline

    Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.

    In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.

    So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.

    OpenSSH U2F/FIDO support in base

    Hardware backed keys can be generated using "ssh-keygen -t ecdsa-sk" (or "ed25519-sk" if your token supports it). Many tokens require to be touched/tapped to confirm this step.

    You'll get a public/private keypair back as usual, except in this case, the private key file does not contain a highly-sensitive private key but instead holds a "key handle" that is used by the security key to derive the real private key at signing time.

    So, stealing a copy of the private key file without also stealing your security key (or access to it) should not give the attacker anything.

    drm/i915: Update to Linux 4.8.17

    • drm/i915: Update to Linux 4.8.17
      • Broxton, Valleyview and Cherryview support improvements
      • Broadwell and Gen9/Skylake support improvements
      • Broadwell brightness fixes from OpenBSD
      • Atomic modesetting improvements
      • Various bug fixes and performance enhancements

    Beastie Bits

    • Visual Studio Code port for FreeBSD
    • OpenBSD syscall call-from verification
    • Peertube on OpenBSD
    • Fuzzing Filesystems on NetBSD via AFL+KCOV by Maciej Grochowski
    • Twitter Bot for Prop65
    • Interactive vim tutorial
    • First BSD user group meeting in Hamilton, February 11, 2020 18:30 - 21:00, Boston Pizza on Upper James St ***

    Feedback/Questions

    • Samir - cgit
    • Russell - R
    • Wolfgang - Question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    331: Why Computers Suck Jan 02, 2020

    How learning OpenBSD makes computers suck a little less, How Unix works, FreeBSD 12.1 Runs Well on Ryzen Threadripper 3970X, BSDCan CFP, HardenedBSD Infrastructure Goals, and more.

    Headlines

    Why computers suck and how learning from OpenBSD can make them marginally less horrible

    How much better could things actually be if we abandoned the enterprise development model?

    Next I will compare this enterprise development approach with non-enterprise development - projects such as OpenBSD, which do not hesitate to introduce ABI breaking changes to improve the codebase.

    One of the most commonly referred to pillars of the project's philosophy has long been its emphasis on clean functional code. Any code which makes it into OpenBSD is subject to ongoing aggressive audits for deprecated, or otherwise unmaintained code in order to reduce cruft and attack surface. Additionally the project creator, Theo de Raadt, and his team of core developers engage in ongoing development for proactive mitigations for various attack classes many of which are directly adopted by various multi-platform userland applications as well as the operating systems themselves (Windows, Linux, and the other BSDs). Frequently it is the case that introducing new features (not just deprecating old ones) introduces new incompatibilities against previously functional binaries compiled for OpenBSD.

    To prevent the sort of kernel memory bloat that has plagued so many other operating systems for years, the project enforces a hard ceiling on the number of lines of code that can ever be in ring 0 at a given time. Current estimates guess the number of bugs per line of code in the Linux kernel are around 1 bug per every 10,000 lines of code. Think of this in the context of the scope creep seen in the Linux kernel (which if I recall correctly is currently at around 100,000,000 lines of code), as well as the Windows NT kernel (500,000,000 lines of code) and you quickly begin to understand how adding more and more functionality into the most privileged components of the operating system without first removing old components begins to add up in terms of the drastic difference seen between these systems in the number of zero day exploits caught in the wild respectively.

    How Unix Works: Become a Better Software Engineer

    Unix is beautiful. Allow me to paint some happy little trees for you. I’m not going to explain a bunch of commands – that’s boring, and there’s a million tutorials on the web doing that already. I’m going to leave you with the ability to reason about the system.

    Every fancy thing you want done is one google search away.

    But understanding why the solution does what you want is not the same.

    That’s what gives you real power, the power to not be afraid.

    And since it rhymes, it must be true.

    News Roundup

    FreeBSD 12.1 Runs Refreshingly Well With AMD Ryzen Threadripper 3970X

    For those of you interested in AMD's new Ryzen Threadripper 3960X/3970X processors with TRX40 motherboards for running FreeBSD, the experience in our initial testing has been surprisingly pleasant. In fact, it works out-of-the-box which one could argue is better than the current Linux support that needs the MCE workaround for booting. Here are some benchmarks of FreeBSD 12.1 on the Threadripper 3970X compared to Linux and Windows for this new HEDT platform.

    It was refreshing to see FreeBSD 12.1 booting and running just fine with the Ryzen Threadripper 3970X 32-core/64-thread processor from the ASUS ROG ZENITH II EXTREME motherboard and all core functionality working including the PCIe 4.0 NVMe SSD storage, onboard networking, etc. The system was running with 4 x 16GB DDR4-3600 memory, 1TB Corsair Force MP600 NVMe SSD, and Radeon RX 580 graphics. It was refreshing to see FreeBSD 12.1 running well with this high-end AMD Threadripper system considering Linux even needed a boot workaround.

    While the FreeBSD 12.1 experience was trouble-free with the ASUS TRX40 motherboard (ROG Zenith II Extreme) and AMD Ryzen Threadripper 3970X, DragonFlyBSD unfortunately was not. Both DragonFlyBSD 5.6.2 stable and the DragonFlyBSD daily development snapshot from last week were yielding a panic on boot. So with that, DragonFlyBSD wasn't tested for this Threadripper 3970X comparison but just FreeBSD 12.1.

    FreeBSD 12.1 on the Threadripper 3970X was benchmarked both with its default LLVM Clang 8.0.1 compiler and again with GCC 9.2 from ports for ruling out compiler differences. The FreeBSD 12.1 performance was compared to last week's Windows 10 vs. Linux benchmarks with the same system.

    BSDCan 2020 CFP

    BSDCan 2020 will be held 5-6 (Fri-Sat) June, 2020 in Ottawa, at the University of Ottawa. It will be preceded by two days of tutorials on 3-4 June (Wed-Thu).

    NOTE the change of month in 2020 back to June Also: do not miss out on the Goat BOF on Tuesday 2 June.

    We are now accepting proposals for talks. The talks should be designed with a very strong technical content bias. Proposals of a business development or marketing nature are not appropriate for this venue.

    • See http://www.bsdcan.org/2020/

    If you are doing something interesting with a BSD operating system, please submit a proposal. Whether you are developing a very complex system using BSD as the foundation, or helping others and have a story to tell about how BSD played a role, we want to hear about your experience. People using BSD as a platform for research are also encouraged to submit a proposal. Possible topics include:

    • How we manage a giant installation with respect to handling spam.
    • and/or sysadmin.
    • and/or networking.
    • Cool new stuff in BSD
    • Tell us about your project which runs on BSD
    • other topics (see next paragraph)

    From the BSDCan website, the Archives section will allow you to review the wide variety of past BSDCan presentations as further examples.

    Both users and developers are encouraged to share their experiences.

    HardenedBSD Infrastructure Goals

    2019 has been an extremely productive year with regards to HardenedBSD's infrastructure. Several opportunities aligned themselves in such a way as to open a door for a near-complete rebuild with a vast expansion.

    The last few months especially have seen a major expansion of our infrastructure. We obtained a number of to-be-retired Dell R410 servers. The crash of our nightly build server provided the opportunity to deploy these R410 servers, doubling our build capacity.

    My available time to spend on HardenedBSD has decreased compared to this time last year. As part of rebuilding our infrastructure, I wanted to enable the community to be able to contribute. I'm structuring the work such that help is just a pull request away. Those in the HardenedBSD community who want to contribute to the infrastructure work can simply open a pull request. I'll review the code, and deploy it after a successful review. Users/contributors don't need access to our servers in order to improve them.

    My primary goal for the rest of 2019 and into 2020 is to become fully self-hosted, with the sole exception of email. I want to transition the source-of-truth git repos to our own infrastructure. We will still provide a read-only mirror on GitHub.

    As I develop this infrastructure, I'm doing so with human rights in mind. HardenedBSD is in a very unique position. In 2020, I plan to provide production Tor Onion Services for the various bits of our infrastructure. HardenedBSD will provide access to its various internal services to its developers and contributors. The entire development lifecycle, going from dev to prod, will be able to happen over Tor.

    Transparency will be key moving forward. Logs for the auto-sync script are now published directly to GitHub. Build logs will be, soon, too. Logs of all automated processes, and the code for those processes, will be tracked publicly via git. This will be especially crucial for development over Tor.

    Integrating Tor into our infrastructure so deeply increases risk and maintenance burden. However, I believe that through added transparency, we will be able to mitigate risk. Periodic audits will need to be performed and published.

    I hope to migrate HardenedBSD's site away from Drupal to a static site generator. We don't really need the dynamic capabilities Drupal gives us. The many security issues Drupal and PHP both bring also leave much to be desired.

    So, that's about it. I spent the last few months of 2019 laying the foundation for a successful 2020. I'm excited to see how the project grows.

    Beastie Bits

    • FuryBSD - KDE plasma flavor now available
    • DragonFly - git: virtio - Fix LUN scan issue w/ Google Cloud
    • LPI is looking for BSD Specialist learning material writers
    • ZFS sync/async + ZIL/SLOG, explained
    • BSD-Licensed Combinatorics library/utility
    • SSL client vs server certificates and bacula-fd
    • MaxxDesktop planning to come to FreeBSD Project Page

    Feedback/Questions

    • Tom - ZFS Mirror with different speeds
    • Jeff - Knowledge is power
    • Johnny - Episode 324 response to Jacob
    • Pat - NYC*BUG meeting Jan Meeting Location
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    330: Happy Holidays, All(an) Dec 26, 2019

    Authentication Vulnerabilities in OpenBSD, NetBSD 9.0 RC1 is available, Running FreeNAS on a DigitalOcean droplet, NomadBSD 1.3 is here, at e2k19 nobody can hear you scream, and more.

    Headlines

    Authentication vulnerabilities in OpenBSD

    • We discovered an authentication-bypass vulnerability in OpenBSD's authentication system: this vulnerability is remotely exploitable in smtpd, ldapd, and radiusd, but its real-world impact should be studied on a case-by-case basis. For example, sshd is not exploitable thanks to its defense-in-depth mechanisms.
    • From the manual page of login.conf:

    OpenBSD uses BSD Authentication, which is made up of a variety of authentication styles. The authentication styles currently provided are:
    passwd Request a password and check it against the password in the master.passwd file. See login_passwd(8).
    skey Send a challenge and request a response, checking it with S/Key (tm) authentication. See login_skey(8).
    yubikey Authenticate using a Yubico YubiKey token. See login_yubikey(8).
    For any given style, the program /usr/libexec/auth/login_style is used to
    perform the authentication. The synopsis of this program is:
    /usr/libexec/auth/login_style [-v name=value] [-s service] username class

    • This is the first piece of the puzzle: if an attacker specifies a username of the form "-option", they can influence the behavior of the authentication program in unexpected ways.
     login_passwd [-s service] [-v wheel=yes|no] [-v lastchance=yes|no] user [class] The service argument specifies which protocol to use with the invoking program.  The allowed protocols are login, challenge, and response.  (The challenge protocol is silently ignored but will report success as passwd-style authentication is not challenge-response based).
    
    • This is the second piece of the puzzle: if an attacker specifies the username "-schallenge" (or "-schallenge:passwd" to force a passwd-style authentication), then the authentication is automatically successful and therefore bypassed.
    • Case study: smtpd
    • Case study: ldapd
    • Case study: radiusd
    • Case study: sshd
    • Acknowledgments: We thank Theo de Raadt and the OpenBSD developers for their incredibly quick response: they published patches for these vulnerabilities less than 40 hours after our initial contact. We also thank MITRE's CVE Assignment Team.

    First release candidate for NetBSD 9.0 available!

    • Since the start of the release process four months ago a lot of improvements went into the branch - more than 500 pullups were processed!
    • This includes usbnet (a common framework for usb ethernet drivers), aarch64 stability enhancements and lots of new hardware support, installer/sysinst fixes and changes to the NVMM (hardware virtualization) interface.
    • We hope this will lead to the best NetBSD release ever (only to be topped by NetBSD 10 next year).
    • Here are a few highlights of the new release:

      Support for Arm AArch64 (64-bit Armv8-A) machines, including "Arm ServerReady"
      compliant machines (SBBR+SBSA)
      Enhanced hardware support for Armv7-A
      Updated GPU drivers (e.g. support for Intel Kabylake)
      Enhanced virtualization support
      Support for hardware-accelerated virtualization (NVMM)
      Support for Performance Monitoring Counters
      Support for Kernel ASLR
      Support several kernel sanitizers (KLEAK, KASAN, KUBSAN)
      Support for userland sanitizers
      Audit of the network stack
      Many improvements in NPF
      Updated ZFS
      Reworked error handling and NCQ support in the SATA subsystem
      Support a common framework for USB Ethernet drivers (usbnet)

    • More information on the RC can be found on the NetBSD 9 release page

    News Roundup

    Running FreeNAS on a Digitalocean droplet

    • ZFS is awesome. FreeBSD even more so. FreeNAS is the battle-tested, enterprise-ready-yet-home-user-friendly software defined storage solution which is cooler then deep space, based on FreeBSD and makes heavy use of ZFS. This is what I (and soooooo many others) use for just about any storage-related task. I can go on and on and on about what makes it great, but if you're here, reading this, you probably know all that already and we can skip ahead.
    • I've needed an offsite FreeNAS setup to replicate things to, to run some things, to do some stuff, basically, my privately-owned, tightly-controlled NAS appliance in the cloud, one I control from top to bottom and with support for whatever crazy thing I'm trying to do. Since I'm using DigitalOcean as my main VPS provider, it seemed logical to run FreeNAS there, however, you can't. While DO supports many many distos and pre-setup applications (e.g OpenVPN), FreeNAS isn't a supported feature, at least not in the traditional way :)
    • Before we begin, here's the gist of what we're going to do:

    Base of a FreeBSD droplet, we'll re-image our boot block device with FreeNAS iso. We'll then install FreeNAS on the second block device. Once done we're going to do the ol' switcheroo: we're going to re-image our original boot block device using the now FreeNAS-installed second block device.

    • Part 1: re-image our boot block device to boot FreeNAS install media.
    • Part 2: Install FreeNAS on the second block-device
    • Part 3: Re-image the boot block device using the FreeNAS-installed block device

    NomadBSD 1.3 is now available

    • From the release notes:

    The base system has been changed to FreeBSD 12.1-RELEASE-p1
    Due to a deadlock problem, FreeBSD's unionfs has been replaced by unionfs-fuse
    The GPT layout has been changed to MBR. This prevents problems with Lenovo
    systems that refuse to boot from GPT if "lenovofix" is not set, and systems that
    hang on boot if "lenovofix" is set.
    Support for ZFS installations has been added to the NomadBSD installer.
    The rc-script for setting up the network interfaces has been fixed and improved.
    Support for setting the country code for the wlan device has been added.
    Auto configuration for running in VirtualBox has been added.
    A check for the default display has been added to the graphics configuration scripts. This fixes problems where users with Optimus have their NVIDIA card disabled, and use the integrated graphics chip instead.
    NVIDIA driver version 440 has been added.
    nomadbsd-dmconfig, a Qt tool for selecting the display manager theme, setting the
    default user and autologin has been added.
    nomadbsd-adduser, a Qt tool for added preconfigured user accounts to the system has been added.
    Martin Orszulik added Czech translations to the setup and installation wizard.
    The NomadBSD logo, designed by Ian Grindley, has been changed.
    Support for localized error messages has been added.
    Support for localizing the password prompts has been added.
    Some templates for starting other DEs have been added to ~/.xinitrc.
    The interfaces of nomadbsd-setup-gui and nomadbsd-install-gui have been improved.
    A script that helps users to configure a multihead systems has been added.
    The Xorg driver for newer Intel GPUs has been changed from "intel" to "modesetting".
    /proc has been added to /etc/fstab
    A D-Bus session issue has been fixed which prevented thunar from accessing samba shares.
    DSBBg which allows users to change and manage wallpapers has been added.
    The latest version of update_obmenu now supports auto-updating the Openbox menu. Manually updating the Openbox menu after packet (de)installation is therefore no longer needed.

    Support for multiple keyboard layouts has been added.
    www/palemoon has been removed.
    mail/thunderbird has been removed.
    audio/audacity has been added.
    deskutils/orage has been added.
    the password manager fpm2 has been replaced by KeePassXC
    mail/sylpheed has been replaced by mail/claws-mail
    multimedia/simplescreenrecorder has been added.
    DSBMC has been changed to DSBMC-Qt
    Many small improvements and bug fixes.

    At e2k19 nobody can hear you scream

    • After 2 years it was once again time to pack skis and snowshoes, put a satellite dish onto a sledge and hike through the snowy rockies to the Elk Lakes hut.
    • I did not really have much of a plan what I wanted to work on but there were a few things I wanted to look into. One of them was rpki-client and the fact that it was so incredibly slow. Since Bob beck@ was around I started to ask him innocent X509 questions ... as if there are innocent X509 questions! Mainly about the abuse of the X509_STORE in rpki-client. Pretty soon it was clear that rpki-client did it all wrong and most of the X509 verification had to be rewritten. Instead of only storing the root certificates in the store and passing the intermediate certs as a chain to the verification function rpki-client threw everything into it. The X509_STORE is just not built for such an abuse and so it was no wonder that this was slow.
    • Lucky me I pulled benno@ with me into this dark hole of libcrypto code. He managed to build up an initial diff to pass the chains as a STACK_OF(X509) and together we managed to get it working. A big thanks goes to ingo@ who documented most of the functions we had to use. Have a look at STACK_OF(3) and sk_pop_free(3) to understand why benno@ and I slowly turned crazy.
    • Our next challenge was to only load the necessary certificate revocation list into the X509_STORE_CTX. While doing those changes it became obvious that some of the data structures needed better lookup functions. Looking up certificates was done using a linear lookup and so we replaced the internal certificate and CRL tables with RB trees for fast lookups. deraadt@ also joined the rpki-client commit fest and changed the output code to use rename(2) so that files are replaced in an atomic operation. Thanks to this rpki-client can now be safely run from cron (there is an example in the default crontab).
    • I did not plan to spend most of my week hacking on rpki-client but in the end I'm happy that I did and the result is fairly impressive. Working with libcrypto code and especially X509 was less than pleasant. Our screams of agony died away in the snowy rocky mountains and made Bob deep dive into UVM with a smile since he knew that benno@ and I had it worse.
    • In case you wonder thanks to all changes at e2k19 rpki-client improved from over 20min run time to validate all VRPS to roughly 1min to do the same job. A factor 20 improvement!
    • Thanks to Theo, Bob and Howie to make this possible. To all the cooks for the great food and to Xplornet for providing us with Internet at the hut.

    Beastie Bits

    • FOSDEM 2020 BSD Devroom schedule
    • Easy Minecraft Server on FreeBSD Howto
    • stats(3) framework in the TCP stack
    • 4017 days of uptime
    • sysget - A front-end for every package manager
    • PlayOnBSD’s Cross-BSD Shopping Guide

    Feedback/Questions

    • Pat asks about the proper disk drive type for ZFS
    • Brad asks about a ZFS rosetta stone
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    Special Guest: Mariusz Zaborski.


    329: Lucas’ Arts Dec 19, 2019

    In this episode, we interview Michael W. Lucas about his latest book projects, including the upcoming SNMP Mastery book.

    Interview - Michael Lucas

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    Special Guest: Michael W Lucas.


    328: EPYC Netflix Stack Dec 12, 2019

    LLDB Threading support now ready, Multiple IPSec VPN tunnels with FreeBSD, Netflix Optimized FreeBSD's Network Stack More Than Doubled AMD EPYC Performance, happy eyeballs with unwind(8), AWS got FreeBSD ARM 12, OpenSSH U2F/FIDO support, and more.

    Headlines

    LLDB Threading support now ready for mainline

    Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.

    In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.

    So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.

    Multiple IPSec VPN tunnels with FreeBSD

    The FreeBSD handbook describes an IPSec VPN tunnel between 2 FreeBSD hosts (see https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html)

    But it is also possible to have multiple, 2 or more, IPSec VPN tunnels created and running on a FreeBSD host. How to implement and configure this is described below.

    The requirements is to have 3 locations (A, B and C) connected with IPSec VPN tunnels using FreeBSD (11.3-RELEASE).

    Each location has 1 IPSec VPN host running FreeBSD (VPN host A, B and C).

    VPN host A has 2 IPSec VPN tunnels: 1 to location B (VPN host B) and 1 to location C (VPN host C).

    News Roundup

    Netflix Optimized FreeBSD's Network Stack More Than Doubled AMD EPYC Performance

    Drew Gallatin of Netflix presented at the recent EuroBSDcon 2019 conference in Norway on the company's network stack optimizations to FreeBSD. Netflix was working on being able to deliver 200Gb/s network performance for video streaming out of Intel Xeon and AMD EPYC servers, to which they are now at 190Gb/s+ and in the process that doubled the potential of EPYC Naples/Rome servers and also very hefty upgrades too for Intel.

    Netflix has long been known to be using FreeBSD in their data centers particularly where network performance is concerned. But in wanting to deliver 200Gb/s throughput from individual servers led them to making NUMA optimizations to the FreeBSD network stack. Allocating NUMA local memory for kernel TLS crypto buffers and for backing files sent via sentfile were among their optimizations. Changes to network connection handling and dealing with incoming connections to Nginx were also made.

    For those just wanting the end result, Netflix's NUMA optimizations to FreeBSD resulted in their Intel Xeon servers going from 105Gb/s to 191Gb/s while the NUMA fabric utilization dropped from 40% to 13%.

    unwind(8); "happy eyeballs"

    In case you are wondering why happy eyeballs: It's a variation on this:
    https://en.wikipedia.org/wiki/Happy_Eyeballs

    unwind has a concept of a best nameserver type. It considers a configured DoT nameserver to be better than doing it's own recursive resolving. Recursive resolving is considered to be better than asking the dhcp provided nameservers.

    This diff sorts the nameserver types by quality, as above (validation, resolving, dead...), and as a tie breaker it adds the median of the round trip time of previous queries into the mix.

    One other interesting thing about this is that it gets us past captive portals without a check URL, that's why this diff is so huge, it rips out all the captive portal stuff (please apply with patch -E):
    17 files changed, 385 insertions(+), 1683 deletions(-)

    Please test this. I'm particularly interested in reports from people who move between networks and need to get past captive portals.

    Amazon now has FreeBSD ARM 12

    Product Overview

    FreeBSD is an operating system used to power servers, desktops, and embedded systems. Derived from BSD, the version of UNIX developed at the University of California, Berkeley, FreeBSD has been continually developed by a large community for more than 30 years.

    FreeBSD's networking, security, storage, and monitoring features, including the pf firewall, the Capsicum and CloudABI capability frameworks, the ZFS filesystem, and the DTrace dynamic tracing framework, make FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage systems.

    OpenSSH U2F/FIDO support in base

    I just committed all the dependencies for OpenSSH security key (U2F) support to base and tweaked OpenSSH to use them directly. This means there will be no additional configuration hoops to jump through to use U2F/FIDO2 security keys.

    Hardware backed keys can be generated using "ssh-keygen -t ecdsa-sk" (or "ed25519-sk" if your token supports it). Many tokens require to be touched/tapped to confirm this step.

    You'll get a public/private keypair back as usual, except in this case, the private key file does not contain a highly-sensitive private key but instead holds a "key handle" that is used by the security key to derive the real private key at signing time.

    So, stealing a copy of the private key file without also stealing your security key (or access to it) should not give the attacker anything.

    Once you have generated a key, you can use it normally - i.e. add it to an agent, copy it to your destination's authorized_keys files (assuming they are running -current too), etc. At authentication time, you will be prompted to tap your security key to confirm the signature operation - this makes theft-of-access attacks against security keys more difficult too.

    Please test this thoroughly - it's a big change that we want to have stable before the next release.

    Beastie Bits

    • DragonFly - git: virtio - Fix LUN scan issue w/ Google Cloud
    • Really fast Markov chains in ~20 lines of sh, grep, cut and awk
    • FreeBSD Journal Sept/Oct 2019
    • Michael Dexter is raising money for Bhyve development
    • syscall call-from verification
    • FreeBSD Forums Howto Section

    Feedback/Questions

    • Jeroen - Feedback
    • Savo - pfsense ports
    • Tin - I want to learn C
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    327: ZFS Rename Repo Dec 05, 2019

    We read FreeBSD’s third quarterly status report, OpenBSD on Sparc64, ZoL repo move to OpenZFS, GEOM NOP, keeping NetBSD up-to-date, and more.

    Headlines

    FreeBSD third quarterly status report for 2019

    This quarter the reports team has been more active than usual thanks to a better organization: calls for reports and reminders have been sent regularly, reports have been reviewed and merged quickly (I would like to thank debdrup@ in particular for his reviewing work).

    Efficiency could still be improved with the help of our community. In particular, the quarterly team has found that many reports have arrived in the last days before the deadline or even after. I would like to invite the community to follow the guidelines below that can help us sending out the reports sooner.

    Starting from next quarter, all quarterly status reports will be prepared the last month of the quarter itself, instead of the first month after the quarter's end. This means that deadlines for submitting reports will be the 1st of January, April, July and October.

    Next quarter will then be a short one, covering the months of November and December only and the report will probably be out in mid January.

    OpenBSD on Sparc64

    OpenBSD, huh? Yes, I usually write about FreeBSD and that’s in fact what I tried installing on the machine first. But I ran into problems with it very early on (never even reached single user mode) and put it aside for later. Since I powered up the SunFire again last month, I needed an OS now and chose OpenBSD for the simple reason that I have it available.

    First I wanted to call this article simply “OpenBSD on SPARC” – but that would have been misleading since OpenBSD used to support 32-bit SPARC processors, too. The platform was just put to rest after the 5.9 release.

    Version 6.0 was the last release of OpenBSD that came on CD-ROM. When I bought it, I thought that I’d never use the SPARC CD. But here was the chance! While it is an obsolete release, it comes with the cryptographic signatures to verify the next release. So the plan is to start at 6.0 as I can trust the original CDs and then update to the latest release. This will also be an opportunity to recap on some of the things that changed over the various versions.

    News Roundup

    ZoL repo move to OpenZFS

    Because it will contain the ZFS source code for both Linux and FreeBSD, we will rename the "ZFSonLinux" code repository to "OpenZFS". Specifically, the repo at http://github.com/ZFSonLinux/zfs will be moved to the OpenZFS organization, at http://github.com/OpenZFS/zfs.

    The next major release of ZFS for Linux and FreeBSD will be "OpenZFS 2.0", and is expected to ship in 2020.

    Mcclure111 Sun Thread

    A long time ago— like 15 years ago— I worked at Sun Microsystems. The company was nearly dead at the time (it died a couple years later) because they didn't make anything that anyone wanted to buy anymore. So they had a lot of strange ideas about how they'd make their comeback.

    GEOM NOP

    Sometimes while testing file systems or applications you want to simulate some errors on the disk level. The first time I heard about this need was from Baptiste Daroussin during his presentation at AsiaBSDCon 2016. He mentioned how they had built a test lab with it. The same need was recently discussed during the PGCon 2019, to test a PostgreSQL instance. If you are FreeBSD user, I have great news for you: there is a GEOM provider which allows you to simulate a failing device.

    GNOP allows us to configure transparent providers from existing ones. The first interesting option of it is that we can slice the device into smaller pieces, thanks to the ‘offset option’ and ‘stripsesize’. This allows us to observe how the data on the disk is changing. Let’s assume that we want to observe the changes in the GPT table when the GPT flags are added or removed (for example the bootme flags which are described here). We can use dd every time and analyze it using absolute values from the disks.

    Keeping NetBSD up-to-date with pkg_comp 2.0

    This is a tutorial to guide you through the shiny new pkg_comp 2.0 on NetBSD.

    Goals: to use pkg_comp 2.0 to build a binary repository of all the packages you are interested in; to keep the repository fresh on a daily basis; and to use that repository with pkgin to maintain your NetBSD system up-to-date and secure.

    This tutorial is specifically targeted at NetBSD but should work on other platforms with some small changes. Expect, at the very least, a macOS-specific tutorial as soon as I create a pkg_comp standalone installer for that platform.

    Beastie Bits

    • DragonFly - Radeon Improvements
    • NomadBSD review
    • Spongebob OpenBSD Security Comic
    • Forth : The Early Years
    • LCM+L PDP-7 booting and running UNIX Version 0

    Feedback/Questions

    • Chris - Ctrl-T
      • Improved Ctrl+t that shows kernel backtrace
    • Brian - Migrating NexentaStore to FreeBSD/FreeNAS
    • Avery - How to get involved
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    326: Certified BSD Nov 28, 2019

    LPI releases BSD Certification, openzfs trip report, Using FreeBSD with ports, LLDB threading support ready, Linux versus Open Source Unix, and more.

    Headlines

    Linux Professional Institute Releases BSD Specialist Certification - re BSD Certification Group

    Linux Professional Institute extends its Open Technology certification track with the BSD Specialist Certification. Starting October 30, 2019, BSD Specialist exams will be globally available. The certification was developed in collaboration with the BSD Certification Group which merged with Linux Professional Institute in 2018.

    G. Matthew Rice, the Executive Director of Linux Professional Institute says that "the release of the BSD Specialist certification marks a major milestone for Linux Professional Institute. With this new credential, we are reaffirming our belief in the value of, and support for, all open source technologies. As much as possible, future credentials and educational programs will include coverage of BSD.”

    OpenZFS Trip Report

    The seventh annual OpenZFS Developer Summit took place on November 4th and 5th in San Francisco and brought together a healthy mix of familiar faces and new community participants. Several folks from iXsystems took part in the talks, hacking, and socializing at this amazing annual event. The messages of the event can be summed up as Unification, Refinement, and Ecosystem Tooling.

    News Roundup

    Using FreeBSD with Ports (2/2): Tool-assisted updating

    • Part 1 here: https://eerielinux.wordpress.com/2019/08/18/using-freebsd-with-ports-1-2-classic-way-with-tools/

    In the previous post I explained why sometimes building your software from ports may make sense on FreeBSD. I also introduced the reader to the old-fashioned way of using tools to make working with ports a bit more convenient.

    In this follow-up post we’re going to take a closer look at portmaster and see how it especially makes updating from ports much, much easier. For people coming here without having read the previous article: What I describe here is not what every FreeBSD admin today should consider good practice (any more)! It can still be useful in special cases, but my main intention is to discuss this for building up the foundation for what you actually should do today.

    LLDB Threading support now ready for mainline

    Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.

    In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.

    So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.

    Linux VS open source UNIX

    Beastie Bits

    • Support for Realtek RTL8125 2.5Gb Ethernet controller
    • Computer Files Are Going Extinct
    • FreeBSD kernel hacking
    • Modern BSD Computing for Fun on a VAX! Trying to use a VAX in today's world by Jeff Armstrong
    • MidnightBSD 1.2 Released

    Feedback/Questions

    • Paulo - Zfs snapshots
    • Phillip - GCP
    • A Listener - Old episodes?
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    325: Cracking Rainbows Nov 21, 2019

    FreeBSD 12.1 is here, A history of Unix before Berkeley, FreeBSD development setup, HardenedBSD 2019 Status Report, DNSSEC, compiling RainbowCrack on OpenBSD, and more.

    Headlines

    FreeBSD 12.1

    • Some of the highlights:

      • BearSSL has been imported to the base system.
      • The clang, llvm, lld, lldb, compiler-rt utilities and libc++ have been updated to version 8.0.1.
      • OpenSSL has been updated to version 1.1.1d.
      • Several userland utility updates.
    • For a complete list of new features and known problems, please see the online release notes and errata list, available at: https://www.FreeBSD.org/releases/12.1R/relnotes.html

    A History of UNIX before Berkeley: UNIX Evolution: 1975-1984.

    Nobody needs to be told that UNIX is popular today. In this article we will show you a little of where it was yesterday and over the past decade. And, without meaning in the least to minimise the incredible contributions of Ken Thompson and Dennis Ritchie, we will bring to light many of the others who worked on early versions, and try to show where some of the key ideas came from, and how they got into the UNIX of today.

    Our title says we are talking about UNIX evolution. Evolution means different things to different people. We use the term loosely, to describe the change over time among the many different UNIX variants in use both inside and outside Bell Labs. Ideas, code, and useful programs seem to have made their way back and forth - like mutant genes - among all the many UNIXes living in the phone company over the decade in question.

    Part One looks at some of the major components of the current UNIX system - the text formatting tools, the compilers and program development tools, and so on. Most of the work described in Part One took place at Research'', a part of Bell Laboratories (now AT&T Bell Laboratories, then as nowthe Labs''), and the ancestral home of UNIX. In planned (but not written) later parts, we would have looked at some of the myriad versions of UNIX - there are far more than one might suspect. This includes a look at Columbus and USG and at Berkeley Unix. You'll begin to get a glimpse inside the history of the major streams of development of the system during that time.

    News Roundup

    My FreeBSD Development Setup

    I do my FreeBSD development using git, tmux, vim and cscope.

    I keep a FreeBSD fork on my github, I have forked https://github.com/freebsd/freebsd to https://github.com/adventureloop/freebsd

    OPNsense 19.7.6 released

    As we are experiencing the Suricata community first hand in Amsterdam we thought to release this version a bit earlier than planned. Included is the latest Suricata 5.0.0 release in the development version. That means later this November we will releasing version 5 to the production version as we finish up tweaking the integration and maybe pick up 5.0.1 as it becomes available.

    LDAP TLS connectivity is now integrated into the system trust store, which ensures that all required root and intermediate certificates will be seen by the connection setup when they have been added to the authorities section. The same is true for trusting self-signed certificates. On top of this, IPsec now supports public key authentication as contributed by Pascal Mathis.

    HardenedBSD November 2019 Status Report.

    We at HardenedBSD have a lot of news to share. On 05 Nov 2019, Oliver Pinter resigned amicably from the project. All of us at HardenedBSD owe Oliver our gratitude and appreciation. This humble project, named by Oliver, was born out of his thesis work and the collaboration with Shawn Webb. Oliver created the HardenedBSD repo on GitHub in April 2013. The HardenedBSD Foundation was formed five years later to carry on this great work.

    DNSSEC enabled in default unbound(8) configuration.

    DNSSEC validation has been enabled in the default unbound.conf(5) in -current. The relevant commits were from Job Snijders (job@)

    How to Install Shopware with NGINX and Let's Encrypt on FreeBSD 12

    Shopware is the next generation of open source e-commerce software. Based on bleeding edge technologies like Symfony 3, Doctrine2 and Zend Framework Shopware comes as the perfect platform for your next e-commerce project. This tutorial will walk you through the Shopware Community Edition (CE) installation on FreeBSD 12 system by using NGINX as a web server.

    • Requirements

    Make sure your system meets the following minimum requirements:

    • Linux-based operating system with NGINX or Apache 2.x (with mod_rewrite) web server installed.
    • PHP 5.6.4 or higher with ctype, gd, curl, dom, hash, iconv, zip, json, mbstring, openssl, session, simplexml, xml, zlib, fileinfo, and pdo/mysql extensions. PHP 7.1 or above is strongly recommended.
    • MySQL 5.5.0 or higher.
    • Possibility to set up cron jobs.
    • Minimum 4 GB available hard disk space.
    • IonCube Loader version 5.0.0 or higher (optional).

    How to Compile RainbowCrack on OpenBSD

    Project RainbowCrack was originally Zhu Shuanglei's implementation, it's not clear to me if the project is still just his or if it's even been maintained for a while. His page seems to have been last updated in August 2007.

    The Project RainbowCrack web page now has just binaries for Windows XP and Linux, both 32-bit and 64-bit versions.

    Earlier versions were available as source code. The version 1.2 source code does not compile on OpenBSD, and in my experience it doesn't compile on Linux, either. It seems to date from 2004 at the earliest, and I think it makes some version-2.4 assumptions about Linux kernel headers.

    • You might also look at ophcrack, a more modern tool, although it seems to be focused on cracking Windows XP/Vista/7/8/10 password hashes

    Feedback/Questions

    • Reese - Amature radio info
    • Chris - VPN
    • Malcolm - NAT
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    324: Emergency Space Mode Nov 14, 2019

    Migrating drives and zpool between hosts, OpenBSD in 2019, Dragonfly’s new zlib and dhcpcd, Batch renaming images and resolution with awk, a rant on the X11 ICCCM selection system, hammer 2 emergency space mode, and more.

    Headlines

    Migrating drives and the zpool from one host to another.

    Today is the day.

    Today I move a zpool from an R710 into an R720. The goal: all services on that zpool start running on the new host.

    Fortunately, that zpool is dedicated to jails, more or less. I have done some planning about this, including moving a poudriere on the R710 into a jail.

    Now it is almost noon on Saturday, I am sitting in the basement (just outside the server room), and I’m typing this up.

    • In this post:

      • FreeBSD 12.0
      • Dell R710 (r710-01)
      • Dell R720 (r720-01)
      • drive caddies from eBay and now I know the difference between SATA and SATAu
    • PLEASE READ THIS first: Migrating ZFS Storage Pools

    OpenBSD in 2019

    I’ve used OpenBSD on and off since 2.1. More back then than in the last 10 years or so though, so I thought I’d try it again.

    What triggered this was me finding a silly bug in GNU cpio that has existed with a “FIXME” comment since at least 1994. I checked OpenBSD to see if it had a related bug, but as expected no it was just fine.

    I don’t quite remember why I stopped using OpenBSD for servers, but I do remember filesystem corruption on “unexpected power disconnections” (even with softdep turned on), which I’ve never really seen on Linux.

    That and that fewer things “just worked” than with Linux, which matters more when I installed more random things than I do now. I’ve become a lot more minimalist. Probably due to less spare time. Life is better when you don’t run things like PHP (not that OpenBSD doesn’t support PHP, just an example) or your own email server with various antispam tooling, and other things.

    This is all experience from running OpenBSD on a server. On my next laptop I intend to try running OpenBSD on the dektop, and will see if that more ad-hoc environment works well. E.g. will gnuradio work? Lack of other-OS VM support may be a problem.

    • Verdict

    Ouch, that’s a long list of bad stuff. Still, I like it. I’ll continue to run it, and will make sure my stuff continues working on OpenBSD.

    And maybe in a year I’ll have a review of OpenBSD on a laptop.

    News Roundup

    New zlib, new dhcpcd

    zlib and dhcpcd are both updated in DragonFly… but my quick perusal of the commits makes it sound like bugfix only; no usage changes needed.

    • DHCPCD Commit: http://lists.dragonflybsd.org/pipermail/commits/2019-October/719768.html
    • ZLIB Commit: http://lists.dragonflybsd.org/pipermail/commits/2019-October/719772.html

    Batch renaming images, including image resolution, with awk

    The most recent item on my list of “Geeky things I did that made me feel pretty awesome” is an hour’s adventure that culminated in this code:

    $ file IMG* | awk 'BEGIN{a=0} {print substr($1, 1, length($1)-5),a++"_"substr($8,1, length($8)-1)}' | while read fn fr; do echo $(rename -v "s/$fn/img_$fr/g" *); done
    IMG_20170808_172653_425.jpg renamed as img_0_4032x3024.jpg
    IMG_20170808_173020_267.jpg renamed as img_1_3024x3506.jpg
    IMG_20170808_173130_616.jpg renamed as img_2_3024x3779.jpg
    IMG_20170808_173221_425.jpg renamed as img_3_3024x3780.jpg
    IMG_20170808_173417_059.jpg renamed as img_4_2956x2980.jpg
    IMG_20170808_173450_971.jpg renamed as img_5_3024x3024.jpg
    IMG_20170808_173536_034.jpg renamed as img_6_4032x3024.jpg
    IMG_20170808_173602_732.jpg renamed as img_7_1617x1617.jpg
    IMG_20170808_173645_339.jpg renamed as img_8_3024x3780.jpg
    IMG_20170909_170146_585.jpg renamed as img_9_3036x3036.jpg
    IMG_20170911_211522_543.jpg renamed as img_10_3036x3036.jpg
    IMG_20170913_071608_288.jpg renamed as img_11_2760x2760.jpg
    IMG_20170913_073205_522.jpg renamed as img_12_2738x2738.jpg
    // ... etc etc
    

    The last item on the aforementioned list is “TODO: come up with a shorter title for this list.”

    I hate the X11 ICCCM selection system, and you should too - A Rant

    d00d, that document is devilspawn. I've recently spent my nights in pain
    implementing the selection mechanism. WHY OH WHY OH WHY? why me? why did I choose to do this? and what sick evil twisted mind wrote this damn spec? I don't know why I'm working with it, I just wanted to make a useful program.

    I didn't know what I was getting myself in to. Nobody knows until they try it. And once you start, you're unable to stop. You can't stop, if you stop then you haven't completed it to spec. You can't fail on this, it's just a few pages of text, how can that be so hard? So what if they use Atoms for everything. So what if there's no explicit correlation between the target type of a SelectionNotify event and the type of the property it indicates?

    So what if the distinction is ambiguous? So what if the document is littered with such atrocities? It's not the spec's fault, the spec is authoritative. It's obviously YOUR (the implementor's) fault for misunderstanding it. If you didn't misunderstand it, you wouldn't be here complaining about it would you?

    HAMMER2 emergency space mode

    As anyone who has been running HAMMER1 or HAMMER2 has noticed, snapshots and copy on write and infinite history can eat a lot of disk space, even if the actual file volume isn’t changing much. There’s now an ‘emergency mode‘ for HAMMER2, where disk operations can happen even if there isn’t space for the normal history activity. It’s dangerous, in that the normal protections against data loss if power is cut go away, and snapshots created while in this mode will be mangled. So definitely don’t leave it on!

    Beastie Bits

    • The BastilleBSD community has started work on over 100 automation templates
    • PAM perturbed
    • OpenBSD T-Shirts now available
    • FastoCloud (Opensource Media Service) now available on FreeBSD
    • Unix: A History and a Memoir by Brian Kernighan now available
    • OpenBSD Moonlight game streaming client from a Windows + Nvidia PC ***

    Feedback/Questions

    • Tim - Release Notes for Lumina 1.5
      • Answer Here
    • Brad - vBSDcon Trip Report
    • Jacob - Using terminfo on FreeBSD
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    323: OSI Burrito Guy Nov 07, 2019

    The earliest Unix code, how to replace fail2ban with blacklistd, OpenBSD crossed 400k commits, how to install Bolt CMS on FreeBSD, optimized hammer2, appeasing the OSI 7-layer burrito guys, and more.

    Headlines

    The Earliest Unix Code: An Anniversary Source Code Release

    What is it that runs the servers that hold our online world, be it the web or the cloud? What enables the mobile apps that are at the center of increasingly on-demand lives in the developed world and of mobile banking and messaging in the developing world? The answer is the operating system Unix and its many descendants: Linux, Android, BSD Unix, MacOS, iOS—the list goes on and on. Want to glimpse the Unix in your Mac? Open a Terminal window and enter “man roff” to view the Unix manual entry for an early text formatting program that lives within your operating system.

    2019 marks the 50th anniversary of the start of Unix. In the summer of 1969, that same summer that saw humankind’s first steps on the surface of the Moon, computer scientists at the Bell Telephone Laboratories—most centrally Ken Thompson and Dennis Ritchie—began the construction of a new operating system, using a then-aging DEC PDP-7 computer at the labs.

    This man sent the first online message 50 years ago

    • As many of you have heard in the past, the first online message ever sent between two computers was "lo", just over 50 years ago, on Oct. 29, 1969.

    It was supposed to say "log," but the computer sending the message — based at UCLA — crashed before the letter "g" was typed. A computer at Stanford 560 kilometres away was supposed to fill in the remaining characters "in," as in "log in."

    • The CBC Radio show, “The Current” has a half-hour interview with the man who sent that message, Leonard Kleinrock, distinguished professor of computer science at UCLA

    "The idea of the network was you could sit at one computer, log on through the network to a remote computer and use its services there,"

    50 years later, the internet has become so ubiquitous that it has almost been rendered invisible. There's hardly an aspect in our daily lives that hasn't been touched and transformed by it.

    Q: Take us back to that day 50 years ago. Did you have the sense that this was going to be something you'd be talking about a half a century later?

    A: Well, yes and no. Four months before that message was sent, there was a press release that came out of UCLA in which it quotes me as describing what my vision for this network would become. Basically what it said is that this network would be always on, always available. Anybody with any device could get on at anytime from any location, and it would be invisible.

    Well, what I missed ... was that this is going to become a social network. People talking to people. Not computers talking to computers, but [the] human element.

    Q: Can you briefly explain what you were working on in that lab? Why were you trying to get computers to actually talk to one another?

    A: As an MIT graduate student, years before, I recognized I was surrounded by computers and I realized there was no effective [or efficient] way for them to communicate. I did my dissertation, my research, on establishing a mathematical theory of how these networks would work. But there was no such network existing. AT&T said it won't work and, even if it does, we want nothing to do with it.

    So I had to wait around for years until the Advanced Research Projects Agency within the Department of Defence decided they needed a network to connect together the computer scientists they were supervising and supporting.

    Q: For all the promise of the internet, it has also developed some dark sides that I'm guessing pioneers like yourselves never anticipated.

    A: We did not. I knew everybody on the internet at that time, and they were all well-behaved and they all believed in an open, shared free network. So we did not put in any security controls.

    When the first spam email occurred, we began to see the dark side emerge as this network reached nefarious people sitting in basements with a high-speed connection, reaching out to millions of people instantaneously, at no cost in time or money, anonymously until all sorts of unpleasant events occurred, which we called the dark side.

    But in those early days, I considered the network to be going through its teenage years. Hacking to spam, annoying kinds of effects. I thought that one day this network would mature and grow up. Well, in fact, it took a turn for the worse when nation states, organized crime and extremists came in and began to abuse the network in severe ways.

    Q: Is there any part of you that regrets giving birth to this?

    A: Absolutely not. The greater good is much more important.

    News Roundup

    How to use blacklistd(8) with NPF as a fail2ban replacement

    blacklistd(8) provides an API that can be used by network daemons to communicate with a packet filter via a daemon to enforce opening and closing ports dynamically based on policy.

    The interface to the packet filter is in /libexec/blacklistd-helper (this is currently designed for npf) and the configuration file (inspired from inetd.conf) is in etc/blacklistd.conf

    Now, blacklistd(8) will require bpfjit(4) (Just-In-Time compiler for Berkeley Packet Filter) in order to properly work, in addition to, naturally, npf(7) as frontend and syslogd(8), as a backend to print diagnostic messages. Also remember npf shall rely on the npflog* virtual network interface to provide logging for tcpdump() to use.

    Unfortunately (dont' ask me why ??) in 8.1 all the required kernel components are still not compiled by default in the GENERIC kernel (though they are in HEAD), and are rather provided as modules. Enabling NPF and blacklistd services would normally result in them being automatically loaded as root, but predictably on securelevel=1 this is not going to happen.

    • FreeBSD’s handbook chapter on blacklistd

    OpenBSD crossed 400,000 commits

    Sometime in the last week OpenBSD crossed 400,000 commits (*) upon all our repositories since starting at 1995/10/18 08:37:01 Canada/Mountain. That's a lot of commits by a lot of amazing people.

    (*) by one measure. Since the repository is so large and old, there are a variety of quirks including ChangeLog missing entries and branches not convertible to other repo forms, so measuring is hard. If you think you've got a great way of measuring, don't be so sure of yourself -- you may have overcounted or undercounted.

    • Subject to the notes Theo made about under and over counting, FreeBSD should hit 1 million commits (base + ports + docs) some time in 2020
    • NetBSD + pkgsrc are approaching 600,000, but of course pkgsrc covers other operating systems too

    How to Install Bolt CMS with Nginx and Let's Encrypt on FreeBSD 12

    Bolt is a sophisticated, lightweight and simple CMS built with PHP. It is released under the open-source MIT-license and source code is hosted as a public repository on Github. A bolt is a tool for Content Management, which strives to be as simple and straightforward as possible. It is quick to set up, easy to configure, uses elegant templates. Bolt is created using modern open-source libraries and is best suited to build sites in HTML5 with modern markup. In this tutorial, we will go through the Bolt CMS installation on FreeBSD 12 system by using Nginx as a web server, MySQL as a database server, and optionally you can secure the transport layer by using acme.sh client and Let's Encrypt certificate authority to add SSL support.

    • Requirements
    • The system requirements for Bolt are modest, and it should run on any fairly modern web server:
      • PHP version 5.5.9 or higher with the following common PHP extensions: pdo, mysqlnd, pgsql, openssl, curl, gd, intl, json, mbstring, opcache, posix, xml, fileinfo, exif, zip.
      • Access to SQLite (which comes bundled with PHP), or MySQL or PostgreSQL.
      • Apache with mod_rewrite enabled (.htaccess files) or Nginx (virtual host configuration covered below).
      • A minimum of 32MB of memory allocated to PHP.

    hammer2 - Optimize hammer2 support threads and dispatch

    Refactor the XOP groups in order to be able to queue strategy calls, whenever possible, to the same CPU as the issuer. This optimizes several cases and reduces unnecessary IPI traffic between cores. The next best thing to do would be to not queue certain XOPs to an H2 support thread at all, but I would like to keep the threads intact for later clustering work.
    The best scaling case for this is when one has a large number of user threads doing I/O. One instance of a single-threaded program on an otherwise idle machine might see a slightly reduction in performance but at the same time we completely avoid unnecessarily spamming all cores in the system on the behalf of a single program, so overhead is also significantly lower.

    This will tend to increase the number of H2 support threads since we need a certain degree of multiplication for domain separation.

    This should significantly increase I/O performance for multi-threaded workloads.

    You know, we might as well just run every network service over HTTPS/2 and build another six layers on top of that to appease the OSI 7-layer burrito guys

    I've seen the writing on the wall, and while for now you can configure Firefox not to use DoH, I'm not confident enough to think it will remain that way. To that end, I've finally set up my own DoH server for use at Chez Boca. It only involved setting up my own CA to generate the appropriate certificates, install my CA certificate into Firefox, configure Apache to run over HTTP/2 (THANK YOU SO VERY XXXXX­XX MUCH GOOGLE FOR SHOVING THIS HTTP/2 XXXXX­XXX DOWN OUR THROATS!—no, I'm not bitter) and write a 150 line script that just queries my own local DNS, because, you know, it's more XXXXX­XX secure or some XXXXX­XXX reason like that.

    Sigh.

    Beastie Bits

    • An Oral History of Unix
    • NUMA Siloing in the FreeBSD Network Stack [pdf]
    • EuroBSDCon 2019 videos available
    • Barbie knows best
    • For the #OpenBSD #e2k19 attendees. I did a pre visit today.
    • Drawer Find
    • Slides - Removing ROP Gadgets from OpenBSD - AsiaBSDCon 2019

    Feedback/Questions

    • Bostjan - Open source doesn't mean secure
    • Malcolm - Allan is Correct.
    • Michael - FreeNAS inside a Jail

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

    Your browser does not support the HTML5 video tag.

    322: Happy Birthday, Unix Oct 31, 2019

    Unix is 50, Hunting down Ken's PDP-7, OpenBSD and OPNSense have new releases, Clarification on what GhostBSD is, sshuttle - VPN over SSH, and more.

    Headlines

    Unix is 50

    In the summer of 1969 computer scientists Ken Thompson and Dennis Ritchie created the first implementation of Unix with the goal of designing an elegant and economical operating system for a little-used PDP-7 minicomputer at Bell Labs. That modest project, however, would have a far-reaching legacy. Unix made large-scale networking of diverse computing systems — and the Internet — practical. The Unix team went on to develop the C language, which brought an unprecedented combination of efficiency and expressiveness to programming. Both made computing more "portable". Today, Linux, the most popular descendent of Unix, powers the vast majority of servers, and elements of Unix and Linux are found in most mobile devices. Meanwhile C++ remains one of the most widely used programming languages today. Unix may be a half-century old but its influence is only growing.

    Hunting down Ken's PDP-7: video footage found

    In my prior blog post, I traced Ken's scrounged PDP-7 to SN 34. In this post I'll show that we have actual video footage of that PDP-7 due to an old film from Bell Labs. this gives us almost a minute of footage of the PDP-7 Ken later used to create Unix.

    News Roundup

    OpenBSD 6.6 Released

    • Announce: https://marc.info/?l=openbsd-tech&m=157132024225971&w=2
    • Upgrade Guide: https://openbsd.org/faq/upgrade66.html
    • Changelog: https://openbsd.org/plus66.html

    OPNsense 19.7.5 released

    Hello friends and followers, Lots of plugin and ports updates this time with a few minor improvements in all core areas. Behind the scenes we are starting to migrate the base system to version

    12.1 which is supposed to hit the next 20.1 release. Stay tuned for more infos in the next month or so.

    Here are the full patch notes:

    • system: show all swap partitions in system information widget
    • system: flatten services_get() in preparation for removal
    • system: pin Syslog-ng version to specific package name
    • system: fix LDAP/StartTLS with user import page
    • system: fix a PHP warning on authentication server page
    • system: replace most subprocess.call use
    • interfaces: fix devd handling of carp devices (contributed by stumbaumr)
    • firewall: improve firewall rules inline toggles
    • firewall: only allow TCP flags on TCP protocol
    • firewall: simplify help text for direction setting
    • firewall: make protocol log summary case insensitive
    • reporting: ignore malformed flow records
    • captive portal: fix type mismatch for timeout read
    • dhcp: add note for static lease limitation with lease registration (contributed by Northguy)
    • ipsec: add margintime and rekeyfuzz options
    • ipsec: clear $dpdline correctly if not set
    • ui: fix tokenizer reorder on multiple saves
    • plugins: os-acme-client 1.26[1]
    • plugins: os-bind will reload bind on record change (contributed by blablup)
    • plugins: os-etpro-telemetry minor subprocess.call replacement
    • plugins: os-freeradius 1.9.4[2]
    • plugins: os-frr 1.12[3]
    • plugins: os-haproxy 2.19[4]
    • plugins: os-mailtrail 1.2[5]
    • plugins: os-postfix 1.11[6]
    • plugins: os-rspamd 1.8[7]
    • plugins: os-sunnyvalley LibreSSL support (contributed by Sunny Valley Networks)
    • plugins: os-telegraf 1.7.6[8]
    • plugins: os-theme-cicada 1.21 (contributed by Team Rebellion)
    • plugins: os-theme-tukan 1.21 (contributed by Team Rebellion)
    • plugins: os-tinc minor subprocess.call replacement
    • plugins: os-tor 1.8 adds dormant mode disable option (contributed by Fabian Franz)
    • plugins: os-virtualbox 1.0 (contributed by andrewhotlab)

    Dealing with the misunderstandings of what is GhostBSD

    Since the release of 19.09, I have seen a lot of misunderstandings on what is GhostBSD and the future of GhostBSD. GhostBSD is based on TrueOS with FreeBSD 12 STABLE with our twist to it. We are still continuing to use TrueOS for OpenRC, and the new package's system for the base system that is built from ports. GhostBSD is becoming a slow-moving rolling release base on the latest TrueOS with FreeBSD 12 STABLE. When FreeBSD 13 STABLE gets released, GhostBSD will be upgraded to TrueOS with FreeBSD 13 STABLE.

    Our official desktop is MATE, which means that the leading developer of GhostBSD does not officially support XFCE. Community releases are maintained by the community and for the community. GhostBSD project will provide help to build and to host the community release. If anyone wants to have a particular desktop supported, it is up to the community. Sure I will help where I can, answer questions and guide new community members that contribute to community release.

    There is some effort going on for Plasma5 desktop. If anyone is interested in helping with XFCE and Plasma5 or in creating another community release, you are well come to contribute. Also, Contribution to the GhostBSD base system, to ports and new ports, and in house software are welcome. We are mostly active on Telegram https://t.me/ghostbsd, but you can also reach us on the forum.

    SHUTTLE – VPN over SSH | VPN Alternative

    Looking for a lightweight VPN client, but are not ready to spend a monthly recurring amount on a VPN? VPNs can be expensive depending upon the quality of service and amount of privacy you want. A good VPN plan can easily set you back by 10$ a month and even that doesn’t guarantee your privacy. There is no way to be sure whether the VPN is storing your confidential information and traffic logs or not. sshuttle is the answer to your problem it provides VPN over ssh and in this article we’re going to explore this cheap yet powerful alternative to the expensive VPNs. By using open source tools you can control your own privacy.

    • VPN over SSH – sshuttle

    sshuttle is an awesome program that allows you to create a VPN connection from your local machine to any remote server that you have ssh access on. The tunnel established over the ssh connection can then be used to route all your traffic from client machine through the remote machine including all the dns traffic. In the bare bones sshuttle is just a proxy server which runs on the client machine and forwards all the traffic to a ssh tunnel. Since its open source it holds quite a lot of major advantages over traditional VPN.

    OpenSSH 8.1 Released

    • Security

      • ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): an exploitable integer overflow bug was found in the private key parsing code for the XMSS key type. This key type is still experimental and support for it is not compiled by default. No user-facing autoconf option exists in portable OpenSSH to enable it. This bug was found by Adam Zabrocki and reported via SecuriTeam's SSD program.
      • ssh(1), sshd(8), ssh-agent(1): add protection for private keys at rest in RAM against speculation and memory side-channel attacks like Spectre, Meltdown and Rambleed. This release encrypts private keys when they are not in use with a symmetric key that is derived from a relatively large "prekey" consisting of random data (currently 16KB).
    • This release includes a number of changes that may affect existing configurations:

      • ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. Certificates signed by RSA keys will therefore be incompatible with OpenSSH versions prior to 7.2 unless the default is overridden (using "ssh-keygen -t ssh-rsa -s ...").
    • New Features

      • ssh(1): Allow %n to be expanded in ProxyCommand strings
      • ssh(1), sshd(8): Allow prepending a list of algorithms to the default set by starting the list with the '' character, E.g. "HostKeyAlgorithms ssh-ed25519"
      • ssh-keygen(1): add an experimental lightweight signature and verification ability. Signatures may be made using regular ssh keys held on disk or stored in a ssh-agent and verified against an authorized_keys-like list of allowed keys. Signatures embed a namespace that prevents confusion and attacks between different usage domains (e.g. files vs email).
      • ssh-keygen(1): print key comment when extracting public key from a private key.
      • ssh-keygen(1): accept the verbose flag when searching for host keys in known hosts (i.e. "ssh-keygen -vF host") to print the matching host's random-art signature too.
      • All: support PKCS8 as an optional format for storage of private keys to disk. The OpenSSH native key format remains the default, but PKCS8 is a superior format to PEM if interoperability with non-OpenSSH software is required, as it may use a less insecure key derivation function than PEM's.

    Beastie Bits

    • Say goodbye to the 32 CPU limit in NetBSD/aarch64
    • vBSDcon 2019 videos
    • Browse the web in the terminal - W3M
    • NetBSD 9 and GSoC
    • BSDCan 2019 Videos
    • NYC*BUG Install Fest: Nov 6th 18:45 @ Suspenders
    • FreeBSD Miniconf at linux.conf.au 2020 Call for Sessions Now Open
    • FOSDEM 2020 - BSD Devroom Call for Participation
    • University of Cambridge looking for Research Assistants/Associates

    Feedback/Questions

    • Trenton - Beeping Thinkpad
    • Alex - Per user ZFS Datasets
      • Allan’s old patch from 2015
    • Javier - FBSD 12.0 + ZFS + encryption
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    321: The Robot OS Oct 23, 2019

    An interview with Trenton Schulz about his early days with FreeBSD, Robot OS, Qt, and more.

    Interview - Trenton Schulz - freenas@norwegianrockcat.com

    Robot OS on FreeBSD

    • BR: Welcome to the show. Can you tell us a little bit about yourself and how you got started with BSD?
    • AJ: You were working for Trolltech (creators of Qt). Was FreeBSD used there and how?
    • BR: Can you tell us more about the work you are doing with Robot OS on FreeBSD?
    • AJ: Was EuroBSDcon your first BSD conference? How did you like it?
    • BR: Do you have some tips or advice on how to get started with the BSDs?
    • AJ: Is there anything else you’d like to tell us before we let you go?

    Beastie Bits

    • FreeBSD Miniconf at linux.conf.au 2020 Call for Sessions Now Open
    • Portland BSD Pizza Night: Oct 24th, 19:00 @ Rudy’s Gourmet Pizza
    • NYC*BUG Install Fest: Nov 6th 18:45 @ Suspenders
    • FOSDEM 2020 - BSD Devroom Call for Participation
    • University of Cambridge looking for Research Assistants/Associates
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    Special Guest: Trenton Shulz.


    320: Codebase: Neck Deep Oct 16, 2019

    Headlines

    FreeBSD and custom firmware on the Google Pixelbook

    • FreeBSD and custom firmware on the Google Pixelbook

    Back in 2015, I jumped on the ThinkPad bandwagon by getting an X240 to run FreeBSD on. Unlike most people in the ThinkPad crowd, I actually liked the clickpad and didn\u2019t use the trackpoint much. But this summer I\u2019ve decided that it was time for something newer. I wanted something..

    • lighter and thinner (ha, turns out this is actually important, I got tired of carrying a T H I C C laptop - Apple was right all along);
    • with a 3:2 display (why is Lenovo making these Serious Work\u2122 laptops 16:9 in the first place?? 16:9 is awful in below-13-inch sizes especially);
    • with a HiDPI display (and ideally with a good size for exact 2x scaling instead of fractional);
    • with USB-C ports;
    • without a dGPU, especially without an NVIDIA GPU;
    • assembled with screws and not glue (I don\u2019t necessarily need expansion and stuff in a laptop all that much, but being able to replace the battery without dealing with a glued chassis is good);
    • supported by FreeBSD of course (\u201csome development required\u201d is okay but I\u2019m not going to write big drivers);
    • how about something with open source firmware, that would be fun.

    I was considering a ThinkPad X1 Carbon from an old generation - the one from the same year as the X230 is corebootable, so that\u2019s fun. But going back in processor generations just doesn\u2019t feel great. I want something more efficient, not less!

    And then I discovered the Pixelbook. Other than the big huge large bezels around the screen, I liked everything about it. Thin aluminum design, a 3:2 HiDPI screen, rubber palm rests (why isn\u2019t every laptop ever doing that?!), the \u201cconvertibleness\u201d (flip the screen around to turn it into.. something rather big for a tablet, but it is useful actually), a Wacom touchscreen that supports a pen, mostly reasonable hardware (Intel Wi-Fi), and that famous coreboot support (Chromebooks\u2019 stock firmware is coreboot + depthcharge).

    So here it is, my new laptop, a Google Pixelbook.

    • Conclusion

    Pixelbook, FreeBSD, coreboot, EDK2 good.

    Seriously, I have no big words to say, other than just recommending this laptop to FOSS enthusiasts :)

    Porting NetBSD to the AMD x86-64: a case study in OS portability

    • Abstract

    NetBSD is known as a very portable operating system, currently running on 44 different architectures (12 different types of CPU). This paper takes a look at what has been done to make it portable, and how this has decreased the amount of effort needed to port NetBSD to a new architecture. The new AMD x86-64 architecture, of which the specifications were published at the end of 2000, with hardware to follow in 2002, is used as an example.

    • Portability

    Supporting multiple platforms was a primary goal of the NetBSD project from the start. As NetBSD was ported to more and more platforms, the NetBSD kernel code was adapted to become more portable along the way.

    • General

    Generally, code is shared between ports as much as possible. In NetBSD, it should always be considered if the code can be assumed to be useful on other architectures, present or future. If so, it is machine-independent and put it in an appropriate place in the source tree. When writing code that is intended to be machine-independent, and it contains conditional preprocessor statements depending on the architecture, then the code is likely wrong, or an extra abstraction layer is needed to get rid of these statements.

    • Types

    Assumptions about the size of any type are not made. Assumptions made about type sizes on 32-bit platforms were a large problem when 64-bit platforms came around. Most of the problems of this kind had to be dealt with when NetBSD was ported to the DEC Alpha in 1994. A variation on this problem had to be dealt with with the UltraSPARC (sparc64) port in 1998, which is 64-bit, but big endian (vs. the little-endianness of the Alpha). When interacting with datastructures of a fixed size, such as on-disk metadata for filesystems, or datastructures directly interpreted by device hardware, explicitly sized types are used, such as uint32_t, int8_t, etc.

    • Conclusions and future work

    The port of NetBSD to AMD's x86-64 architecture was done in six weeks, which confirms NetBSD's reputation as being a very portable operating system. One week was spent setting up the cross-toolchain and reading the x86-64 specifications, three weeks were spent writing the kernel code, one week was spent writing the userspace code, and one week testing and debugging it all. No problems were observed in any of the machine-independent parts of the kernel during test runs; all (simulated) device drivers, file systems, etc, worked without modification.

    News Roundup

    ZFS performance really does degrade as you approach quota limits

    Every so often (currently monthly), there is an "OpenZFS leadership meeting". What this really means is 'lead developers from the various ZFS implementations get together to talk about things'. Announcements and meeting notes from these meetings get sent out to various mailing lists, including the ZFS on Linux ones.

    • In the September meeting notes, I read a very interesting (to me) agenda item:
      • Relax quota semantics for improved performance (Allan Jude)
      • Problem: As you approach quotas, ZFS performance degrades.
      • Proposal: Can we have a property like quota-policy=strict or loose, where we can optionally allow ZFS to run over the quota as long as performance is not decreased.

    This is very interesting to me because of two reasons. First, in the past we have definitely seen significant problems on our OmniOS machines, both when an entire pool hits a quota limit and when a single filesystem hits a refquota limit. It's nice to know that this wasn't just our imagination and that there is a real issue here. Even better, it might someday be improved (and perhaps in a way that we can use at least some of the time).

    Second, any number of people here run very close to and sometimes at the quota limits of both filesystems and pools, fundamentally because people aren't willing to buy more space. We have in the past assumed that this was relatively harmless and would only make people run out of space. If this is a known issue that causes serious performance degradation, well, I don't know if there's anything we can do, but at least we're going to have to think about it and maybe push harder at people. The first step will have to be learning the details of what's going on at the ZFS level to cause the slowdown. (It's apparently similar to what happens when the pool is almost full, but I don't know the specifics of that either.)

    With that said, we don't seem to have seen clear adverse effects on our Linux fileservers, and they've definitely run into quota limits (repeatedly). One possible reason for this is that having lots of RAM and SSDs makes the effects mostly go away. Another possible reason is that we haven't been looking closely enough to see that we're experiencing global slowdowns that correlate to filesystems hitting quota limits. We've had issues before with somewhat subtle slowdowns that we didn't understand (cf), so I can't discount that we're having it happen again.

    Fixing up KA9Q-unix, or "neck deep in 30 year old codebases.."

    I'll preface this by saying - yes, I'm still neck deep in FreeBSD's wifi stack and 802.11ac support, but it turns out it's slow work to fix 15 year old locking related issues that worked fine on 11abg cards, kinda worked ok on 11n cards, and are terrible for these 11ac cards. I'll .. get there.

    Anyhoo, I've finally been mucking around with AX.25 packet radio. I've been wanting to do this since I was a teenager and found out about its existence, but back in high school and .. well, until a few years ago really .. I didn't have my amateur radio licence. But, now I do, and I've done a bunch of other stuff with a bunch of other radios. The main stumbling block? All my devices are either Apple products or run FreeBSD - and none of them have useful AX.25 stacks. The main stacks of choice these days run on Linux, Windows or are a full hardware TNC.

    So yes, I was avoiding hacking on AX.25 stuff because there wasn't a BSD compatible AX.25 stack. I'm 40 now, leave me be.

    But! A few weeks ago I found that someone was still running a packet BBS out of San Francisco. And amazingly, his local node ran on FreeBSD! It turns out Jeremy (KK6JJJ) ported both an old copy of KA9Q and N0ARY-BBS to run on FreeBSD! Cool!

    I grabbed my 2m radio (which is already cabled up for digital modes), compiled up his KA9Q port, figured out how to get it to speak to Direwolf, and .. ok. Well, it worked. Kinda.

    HAMMER2 and fsck for review

    HAMMER2 is Copy on Write, meaning changes are made to copies of existing data. This means operations are generally atomic and can survive a power outage, etc. (You should read up on it!) However, there\u2019s now a fsck command, useful if you want a report of data validity rather than any manual repair process.

    [The return of startx(1) for non-root users with some caveats

    Mark Kettenis (kettenis@) has recently committed changes which restore a certain amount of startx(1)/xinit(1) functionality for non-root users. The commit messages explain the situation:

    CVSROOT:    /cvs
    Module name:    src
    Changes by:    kettenis@cvs.openbsd.org    2019/09/15 06:25:41
    
    Modified files:
        etc/etc.amd64  : fbtab 
        etc/etc.arm64  : fbtab 
        etc/etc.hppa   : fbtab 
        etc/etc.i386   : fbtab 
        etc/etc.loongson: fbtab 
        etc/etc.luna88k: fbtab 
        etc/etc.macppc : fbtab 
        etc/etc.octeon : fbtab 
        etc/etc.sgi    : fbtab 
        etc/etc.sparc64: fbtab 
    
    Log message:
    Add ttyC4 to lost of devices to change when logging in on ttyC0 (and in some cases also the serial console) such that X can use it as its VT when running without root privileges.
    
    ok jsg@, matthieu@
    CVSROOT:    /cvs
    Module name:    xenocara
    Changes by:    kettenis@cvs.openbsd.org    2019/09/15 06:31:08
    
    Modified files:
        xserver/hw/xfree86/common: xf86AutoConfig.c 
    
    Log message:
    Add modesetting driver as a fall-back when appropriate such that we can use it when running without root privileges which prevents us from scanning the PCI bus.
    
    This makes startx(1)/xinit(1) work again on modern systems with inteldrm(4), radeondrm(4) and amdgpu(4).  In some cases this will result in using a different driver than with xenodm(4) which may expose issues (e.g. when we prefer the intel Xorg driver) or loss of acceleration (e.g. older cards supported by radeondrm(4)).
    
    ok jsg@, matthieu@
    

    Beastie Bits

    • ASCII table and history. Or, why does Ctrl+i insert a Tab in my terminal?
    • Sourcehut makes BSD software better
    • Chaosnet for Unx
    • The Vim-Inspired Editor with a Linguistic Twist
    • bhyvearm64: CPU and Memory Virtualization on Armv8.0-A
    • DefCon25 - Are all BSD created Equally - A Survey of BSD Kernel vulnerabilities

    Feedback/Questions

    • Tim - GSoC project ideas for pf rule syntax translation
    • Brad - Steam on FreeBSD
    • Ruslan - FreeBSD Quarterly Status Report - Q2 2019
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    319: Lack Rack, Jack Oct 09, 2019

    Causing ZFS corruption for fun, NetBSD Assembly Programming Tutorial, The IKEA Lack Rack for Servers, a new OmniOS Community Edition LTS has been published, List Block Devices on FreeBSD lsblk(8) Style, Project Trident 19.10 available, and more.

    Headlines

    Causing ZFS corruption for fun and profit

    Datto backs up data, a lot of it. At the time of writing Datto has over 500 PB of data stored on ZFS. This count includes both backup appliances that are sent to customer sites, as well as cloud storage servers that are used for secondary and tertiary backup of those appliances. At this scale drive swaps are a daily occurrence, and data corruption is inevitable. How we handle this corruption when it happens determines whether we truly lose data, or successfully restore from secondary backup. In this post we'll be showing you how at Datto we intentionally cause corruption in our testing environments, to ensure we're building software that can properly handle these scenarios.

    • Causing Corruption

    Since this is a mirror setup, a naive solution to cause corruption would be to randomly dd the same sectors of both /dev/sdb and /dev/sdc. This works, but is equally likely to just overwrite random unused space, or take down the zpool entirely. What we really want is to corrupt a specific snapshot, or even a specific file in that snapshot, to simulate a more realistic minor corruption event. Luckily we have a tool called zdb that lets us view some low level information about datasets.

    • Conclusion

    At the 500 PB scale, it's not a matter of if data corruption will happen but when. Intentionally causing corruption is one of the strategies we use to ensure we're building software that can handle these rare (but inevitable) events.

    To others out there using ZFS: I'm curious to hear how you've solved this problem. We did quite a bit of experimentation with zinject before going with this more brute force method. So I'd be especially interested if you've had luck simply simulating corruption with zinject.

    NetBSD Assembly Programming Tutorial

    A sparc64 version is also being prepared and will be added when done

    This post describes how to write a simple hello world program in pure assembly on NetBSD/amd64. We will not use (nor link against) libc, nor use gcc to compile it. I will be using GNU as (gas), and therefore the AT&T syntax instead of Intel.

    • Why assembly?

    Why not? Because it's fun to program in assembly directly. Contrary to a popular belief assembly programs aren't always faster than what optimizing compilers produce. Nevertheless it's good to be able to read assembly, especially when debugging C programs

    • Due to the nature of the guide, visit the site for the complete breakdown

    News Roundup

    The IKEA Lack Rack for Servers

    • The LackRack

    First occurrence on eth0:2010 Winterlan, the LackRack is the ultimate, low-cost, high shininess solution for your modular datacenter-in-the-living-room. Featuring the LACK (side table) from Ikea, the LackRack is an easy-to-implement, exact-fit datacenter building block. It's a little known fact that we have seen Google engineers tinker with Lack tables since way back in 2009.

    The LackRack will certainly make its appearance again this summer at eth0:2010 Summer.

    • Summary

    When temporarily not in use, multiple LackRacks can be stacked in a space-efficient way without disassembly, unlike competing 19" server racks.

    The LackRack was first seen on eth0:2010 Winterlan in the no-shoe Lounge area. Its low-cost and perfect fit are great for mounting up to 8 U of 19" hardware, such as switches (see below), or perhaps other 19" gear. It's very easy to assemble, and thanks to the design, they are stable enough to hold (for example) 19" switches and you can put your bottle of Club-Mate on top! Multi-shiny LackRack can also be painted to your specific preferences and the airflow is unprecedented!

    • Howto

    You can find a howto on buying a LackRack on this page. This includes the proof that a 19" switch can indeed be placed in the LackRack in its natural habitat!

    OmniOS Community Edition r151030 LTS - Published at May 6, 2019

    The OmniOS Community Edition Association is proud to announce the general availability of OmniOS - r151030.

    OmniOS is published according to a 6-month release cycle, r151030 LTS takes over from r151028, published in November 2018; and since it is a LTS release it also takes over from r151022. The r151030 LTS release will be supported for 3 Years. It is the first LTS release published by the OmniOS CE Association since taking over the reins from OmniTI in 2017. The next LTS release is scheduled for May 2021. The old stable r151026 release is now end-of-life. See the release schedule for further details.

    This is only a small selection of the new features, and bug fixes in the new release; review the release notes for full details.

    If you upgrade from r22 and want to see all new features added since then, make sure to also read the release notes for r24, r26 and r28.

    • For full relase notes including upgrade instructions;
    • release notes
    • upgrade instructions

    List Block Devices on FreeBSD lsblk(8) Style

    When I have to work on Linux systems I usually miss many nice FreeBSD tools such as these for example to name the few: sockstat, gstat, top -b -o res, top -m io -o total, usbconfig, rcorder, beadm/bectl, idprio/rtprio,… but sometimes – which rarely happens – Linux has some very useful tool that is not available on FreeBSD. An example of such tool is lsblk(8) that does one thing and does it quite well – lists block devices and their contents. It has some problems like listing a disk that is entirely used under ZFS pool on which lsblk(8) displays two partitions instead of information about ZFS just being there – but we all know how much in some circles the CDDL licensed ZFS is unloved in that GPL world.

    Example lsblk(8) output from Linux system:

    $ lsblk
    NAME                         MAJ:MIN RM   SIZE RO TYPE   MOUNTPOINT
    sr0                           11:0    1  1024M  0 rom
    sda                            8:0    0 931.5G  0 disk
    |-sda1                         8:1    0   500M  0 part   /boot
    `-sda2                         8:2    0   931G  0 part
      |-vg_local-lv_root (dm-0)  253:0    0    50G  0 lvm    /
      |-vg_local-lv_swap (dm-1)  253:1    0  17.7G  0 lvm    [SWAP]
      `-vg_local-lv_home (dm-2)  253:2    0   1.8T  0 lvm    /home
    sdc                            8:32   0 232.9G  0 disk
    `-sdc1                         8:33   0 232.9G  0 part
      `-md1                        9:1    0 232.9G  0 raid10 /data
    sdd                            8:48   0 232.9G  0 disk
    `-sdd1                         8:49   0 232.9G  0 part
      `-md1                        9:1    0 232.9G  0 raid10 /data
    

    What FreeBSD offers in this department? The camcontrol(8) and geom(8) commands are available. You can also use gpart(8) command to list partitions. Below you will find output of these commands from my single disk laptop. Please note that because of WordPress limitations I need to change all > < characters to ] [ ones in the commands outputs.

    • See the article for the rest of the guide

    Project Trident 19.10 Now Available

    This is a general package update to the CURRENT release repository based upon TrueOS 19.10

    • PACKAGE CHANGES FROM 19.08
      • New Packages: 601
      • Deleted Packages: 165
      • Updated Packages: 3341

    Beastie Bits

    • NetBSD building tools
    • Sponsorships open for SNMP Mastery
    • pkgsrc-2019Q3 release announcement (2019-10-03)
    • pfetch - A simple system information tool written in POSIX sh
    • Taking NetBSD kernel bug roast to the next level: Kernel Fuzzers (quick A.D. 2019 overview)
    • Cracking Ken Thomson’s password

    Feedback/Questions

    • Evilham - Couple Questions
    • Rob - APU2 alternatives and GPT partition types
    • Tom - FreeBSD journal article by A. Fengler
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    318: The TrueNAS Library Oct 02, 2019

    DragonFlyBSD vs. FreeBSD vs. Linux benchmark on Ryzen 7, JFK Presidential Library chooses TrueNAS for digital archives, FreeBSD 12.1-beta is available, cool but obscure X11 tools, vBSDcon trip report, Project Trident 12-U7 is available, a couple new Unix artifacts, and more.

    Headlines

    DragonFlyBSD 5.6 vs. FreeBSD 12 vs. Linux - Ryzen 7 3700X

    For those wondering how well FreeBSD and DragonFlyBSD are handling AMD's new Ryzen 3000 series desktop processors, here are some benchmarks on a Ryzen 7 3700X with MSI MEG X570 GODLIKE where both of these popular BSD operating systems were working out-of-the-box. For some fun mid-week benchmarking, here are those results of FreeBSD 12.0 and DragonFlyBSD 5.6.2 up against openSUSE Tumbleweed and Ubuntu 19.04.

    Back in July I looked at FreeBSD 12 on the Ryzen 9 3900X but at that time at least DragonFlyBSD had troubles booting on that system. When trying out the Ryzen 7 3700X + MSI GODLIKE X570 motherboard on the latest BIOS, everything "just worked" without any compatibility issues for either of these BSDs.

    We've been eager to see how well DragonFlyBSD is performing on these new AMD Zen 2 CPUs with DragonFlyBSD lead developer Matthew Dillon having publicly expressed being impressed by the new AMD Ryzen 3000 series CPUs.

    For comparison to those BSDs, Ubuntu 19.04 and openSUSE Tumbleweed were tested on the same hardware in their out-of-the-box configurations. While Clear Linux is normally the fastest, on this system Clear's power management defaults had caused issues in being unable to detect the Samsung 970 EVO Plus NVMe SSD used for testing and so we left it out this round.

    All of the hardware was the same throughout testing as were the BIOS settings and running the Ryzen 7 3700X at stock speeds. (Any differences in the reported hardware for the system table just come down to differences in what is exposed by each OS for reporting.) All of the BSD/Linux benchmarks on this eight core / sixteen thread processor were run via the Phoronix Test Suite. In the case of FreeBSD 12.0, we benchmarked both with its default LLVM Clang 6.0 compiler as well as with GCC 9.1 so that it would match the GCC compiler being the default on the other operating systems under test.

    JFK Presidential Library Chooses iXsystems TrueNAS to Preserve Precious Digital Archives

    iXsystems is honored to have the TrueNAS® M-Series unified storage selected to store, serve, and protect the entire digital archive for the John F. Kennedy Library Foundation. This is in support of the collection at the John F. Kennedy Presidential Library and Museum (JFK Library). Over the next several years, the Foundation hopes to grow the digital collection from hundreds of terabytes today to cover much more of the Archives at the Kennedy Library. Overall there is a total of 25 million documents, audio recordings, photos, and videos once the project is complete.

    Having first deployed the TrueNAS M50-HA earlier in 2019, the JFK Library has now completed the migration of its existing digital collection and is now in the process of digitizing much of the rest of its vast collection.

    Not only is the catalog of material vast, it is also diverse, with files being copied to the storage system from a variety of sources in numerous file types. To achieve this ambitious goal, the library required a high-end NAS system capable of sharing with a variety of systems throughout the digitization process. The digital archive will be served from the TrueNAS M50 and made available to both in-person and online visitors.

    With precious material and information comes robust demands. The highly-available TrueNAS M-Series has multiple layers of protection to help keep data safe, including data scrubs, checksums, unlimited snapshots, replication, and more. TrueNAS is also inherently scalable with data shares only limited by the number of drives connected to the pool. Perfect for archival storage, the deployed TrueNAS M50 will grow with the library’s content, easily expanding its storage capacity over time as needed. Supporting a variety of protocols, multi-petabyte scalability in a single share, and anytime, uninterrupted capacity expansion, the TrueNAS M-Series ticked all the right boxes.

    • Youtube Video

    News Roundup

    FreeBSD 12.1-beta available

    FreeBSD 12.0 is already approaching one year old while FreeBSD 12.1 is now on the way as the next installment with various bug/security fixes and other alterations to this BSD operating system.

    FreeBSD 12.1 has many security/bug fixes throughout, no longer enables "-Werror" by default as a compiler flag (Update: This change is just for the GCC 4.2 compiler), has imported BearSSL into the FreeBSD base system as a lightweight TLS/SSL implementation, bzip2recover has been added, and a variety of mostly lower-level changes. More details can be found via the in-progress release notes.

    For those with time to test this weekend, FreeBSD 12.1 Beta 1 is available for all prominent architectures.

    The FreeBSD release team is planning for at least another beta or two and around three release candidates. If all goes well, FreeBSD 12.1 will be out in early November.

    • Announcement Link

    Cool, but obscure X11 tools. More suggestions in the source link

    • ASClock
    • Free42
    • FSV2
    • GLXGears
    • GMixer
    • GVIM
    • Micropolis
    • Sunclock
    • Ted
    • TiEmu
    • X026
    • X48
    • XAbacus
    • XAntfarm
    • XArchiver
    • XASCII
    • XBiff
    • XBill
    • XBoard
    • XCalc
    • XCalendar
    • XCHM
    • XChomp
    • XClipboard
    • XClock
    • XClock/Cat Clock
    • XColorSel
    • XConsole
    • XDiary
    • XEarth
    • XEdit
    • Xev
    • XEyes
    • XFontSel
    • XGalaga
    • XInvaders 3D
    • XKill
    • XLennart
    • XLoad
    • XLock
    • XLogo
    • XMahjongg
    • XMan
    • XMessage
    • XmGrace
    • XMixer
    • XmMix
    • XMore
    • XMosaic
    • XMOTD
    • XMountains
    • XNeko
    • XOdometer
    • XOSView
    • Xplore
    • XPostIt
    • XRoach
    • XScreenSaver
    • XSnow
    • XSpread
    • XTerm
    • XTide
    • Xv
    • Xvkbd
    • XWPE
    • XZoom

    vBSDCon 2019 trip report from iXSystems

    The fourth biennial vBSDCon was held in Reston, VA on September 5th through 7th and attracted attendees and presenters from not only the Washington, DC area, but also Canada, Germany, Kenya, and beyond. While MeetBSD caters to Silicon Valley BSD enthusiasts on even years, vBSDcon caters to East Coast and DC area enthusiasts on odd years. Verisign was again the key sponsor of vBSDcon 2019 but this year made a conscious effort to entrust the organization of the event to a team of community members led by Dan Langille, who you probably know as the lead BSDCan organizer. The result of this shift was a low key but professional event that fostered great conversation and brainstorming at every turn.

    Project Trident 12-U7 now available

    • Package Summary
      • New Packages: 130
      • Deleted Packages: 72
      • Updated Packages: 865
    • Stable ISO - https://pkg.project-trident.org/iso/stable/Trident-x64-TOS-12-U7-20190920.iso

    A Couple new Unix Artifacts

    I fear we're drifting a bit here and the S/N ratio is dropping a bit w.r.t the actual history of Unix. Please no more on the relative merits of version control systems or alternative text processing systems.

    So I'll try to distract you by saying this. I'm sitting on two artifacts that have recently been given to me:

    • by two large organisations
    • of great significance to Unix history
    • who want me to keep "mum" about them
    • as they are going to make announcements about them soon*

    and I am going slowly crazy as I wait for them to be offically released. Now you have a new topic to talk about :-)

    Cheers, Warren

    * for some definition of "soon"

    Beastie Bits

    • NetBSD machines at Open Source Conference 2019 Hiroshima
    • Hyperbola a GNU/Linux OS is using OpenBSD's Xenocara
    • Talos is looking for a FreeBSD Engineer
    • GitHub - dylanaraps/pure-sh-bible: A collection of pure POSIX sh alternatives to external processes.
    • dsynth: you’re building it
    • Percy Ludgate, the missing link between Babbage’s machine and everything else

    Feedback/Questions

    • Bruce - Down the expect rabbithole
    • Bruce - Expect (update)
    • David - Netgraph answer
    • Mason - Beeps?
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    317: Bots Building Jails Sep 25, 2019

    Setting up buildbot in FreeBSD jails, Set up a mail server with OpenSMTPD, Dovecot and Rspamd, OpenBSD amateur packet radio with HamBSD, DragonFlyBSD's HAMMER2 gets fsck, return of startx for users.

    Headlines

    EuroBSDcon 2019 Recap

    We’re back from EuroBSDcon in Lillehammer, Norway. It was a great conference with 212 people attending. 2 days of tutorials, parallel to the FreeBSD Devsummit, followed by two days of talks. Some speakers uploaded their slides to papers.freebsd.org already with more to come.

    The social event was also interesting. We visited an open air museum with building preserved from different time periods. In the older section they had a collection of farm buildings, a church originally built in the 1200s and relocated to the museum, and a school house. In the more modern area, they had houses from 1915, and each decade from 1930 to 1990, plus a “house of the future” as imagined in 2001. Many had open doors to allow you to tour the inside, and some were even “inhabited”. The latter fact gave a much more interactive experience and we could learn additional things about the history of that particular house. The town at the end included a general store, a post office, and more. Then, we all had a nice dinner together in the museum’s restaurant.

    • The opening keynote by Patricia Aas was very good. Her talk on embedded ethics, from her perspective as someone trying to defend the sanctity of Norwegian elections, and a former developer for the Opera web browser, provided a great deal of insight into the issues. Her points about how the tech community has unleashed a very complex digital work upon people with barely any technical literacy were well taken. Her stories of trying to explain the problems with involving computers in the election process to journalists and politicians struck a chord with many of us, who have had to deal with legislation written by those who do not truly understand the issues with technology.

    Setting up buildbot in FreeBSD jails

    In this article, I would like to present a tutorial to set up buildbot, a continuous integration (CI) software (like Jenkins, drone, etc.), making use of FreeBSD’s containerization mechanism "jails". We will cover terminology, rationale for using both buildbot and jails together, and installation steps. At the end, you will have a working buildbot instance using its sample build configuration, ready to play around with your own CI plans (or even CD, it’s very flexible!). Some hints for production-grade installations are given, but the tutorial steps are meant for a test environment (namely a virtual machine). Buildbot’s configuration and detailed concepts are not in scope here.

    Setting up a mail server with OpenSMTPD, Dovecot and Rspamd

    • Self-hosting and encouraging smaller providers is for the greater good

    First of all, I was not clear enough about the political consequences of centralizing mail services at Big Mailer Corps.

    It doesn’t make sense for Random Joe, sharing kitten pictures with his family and friends, to build a personal mail infrastructure when multiple Big Mailer Corps offer “for free” an amazing quality of service. They provide him with an e-mail address that is immediately available and which will generally work reliably. It really doesn’t make sense for Random Joe not to go there, and particularly if even techies go there without hesitation, proving it is a sound choice.

    There is nothing wrong with Random Joes using a service that works.

    What is terribly wrong though is the centralization of a communication protocol in the hands of a few commercial companies, EVERY SINGLE ONE OF THEM coming from the same country (currently led by a lunatic who abuses power and probably suffers from NPD), EVERY SINGLE ONE OF THEM having been in the news and/or in a court for random/assorted “unpleasant” behaviors (privacy abuses, eavesdropping, monopoly abuse, sexual or professional harassment, you just name it…), and EVERY SINGLE ONE OF THEM growing user bases that far exceeds the total population of multiple countries combined.

    News Roundup

    The HamBSD project aims to bring amateur packet radio to OpenBSD

    The HamBSD project aims to bring amateur packet radio to OpenBSD, including support for TCP/IP over AX.25 and APRS tracking/digipeating in the base system.

    HamBSD will not provide a full AX.25 stack but instead only implement support for UI frames. There will be a focus on simplicity, security and readable code.

    The amateur radio community needs a reliable platform for packet radio for use in both leisure and emergency scenarios. It should be expected that the system is stable and resilient (but as yet it is neither).

    DragonFlyBSD's HAMMER2 Gets Basic FSCK Support

    HAMMER2 is Copy on Write, meaning changes are made to copies of existing data. This means operations are generally atomic and can survive a power outage, etc. (You should read up on it!) However, there’s now a fsck command, useful if you want a report of data validity rather than any manual repair process.

    • commit

    Add initial fsck support for HAMMER2, although CoW fs doesn't require fsck as a concept. Currently no repairing (no write), just verifying.

    Keep this as a separate command for now.
    https://i.redd.it/vkdss0mtdpo31.jpg

    The return of startx for users

    Add modesetting driver as a fall-back when appropriate such that we can use it when running without root privileges which prevents us from scanning the PCI bus.

    This makes startx(1)/xinit(1) work again on modern systems with inteldrm(4), radeondrm(4) and amdgpu(4). In some cases this will result in using a different driver than with xenodm(4) which may expose issues (e.g. when we prefer the intel Xorg driver) or loss of acceleration (e.g. older cards supported by radeondrm(4)).

    Beastie Bits

    • Ori Bernstein will be giving the October talk at NYCBUG
    • BSD Pizza Night: 2019/09/26, 7–9PM, Portland, Oregon, USA
    • Nick Wolff : Home Lab Show & Tell
    • Installing the Lumina Desktop in DragonflyBSD
    • dhcpcd 8.0.6 added

    Feedback/Questions

    • Bruce - FOSDEM videos
    • Lars - Super Cluster of BSD on Rock64Pr
    • Madhukar - Question
    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    316: git commit FreeBSD Sep 18, 2019

    NetBSD LLVM sanitizers and GDB regression test suite, Ada—The Language of Cost Savings, Homura - a Windows Games Launcher for FreeBSD, FreeBSD core team appoints a WG to explore transition to Git, OpenBSD 6.6 Beta tagged, Project Trident 12-U5 update now available, and more.

    Headlines

    LLVM santizers and GDB regression test suite.

    As NetBSD-9 is branched, I have been asked to finish the LLVM sanitizer integration. This work is now accomplished and with MKLLVM=yes build option (by default off), the distribution will be populated with LLVM files for ASan, TSan, MSan, UBSan, libFuzzer, SafeStack and XRay.

    I have also transplanted basesystem GDB patched to my GDB repository and managed to run the GDB regression test-suite.

    • NetBSD distribution changes

    I have enhanced and imported my local MKSANITIZER code that makes whole distribution sanitization possible. Few real bugs were fixed and a number of patches were newly written to reflect the current NetBSD sources state. I have also merged another chunk of the fruits of the GSoC-2018 project with fuzzing the userland (by plusun@).

    • The following changes were committed to the sources:
      • ab7de18d0283 Cherry-pick upstream compiler-rt patches for LLVM sanitizers
      • 966c62a34e30 Add LLVM sanitizers in the MKLLVM=yes build
      • 8367b667adb9 telnetd: Stop defining the same variables concurrently in bss and data
      • fe72740f64bf fsck: Stop defining the same variable concurrently in bss and data
      • 40e89e890d66 Fix build of t_ubsan/t_ubsanxx under MKSANITIZER
      • b71326fd7b67 Avoid symbol clashes in tests/usr.bin/id under MKSANITIZER
      • c581f2e39fa5 Avoid symbol clashes in fs/nfs/nfsservice under MKSANITIZER
      • 030a4686a3c6 Avoid symbol clashes in bin/df under MKSANITIZER
      • fd9679f6e8b1 Avoid symbol clashes in usr.sbin/ypserv/ypserv under MKSANITIZER
      • 5df2d7939ce3 Stop defining _rpcsvcdirty in bss and data
      • 5fafbe8b8f64 Add missing extern declaration of ib_mach_emips in installboot
      • d134584be69a Add SANITIZER_RENAME_CLASSES in bsd.prog.mk
      • 2d00d9b08eae Adapt tests/kernel/t_subr_prf for MKSANITIZER
      • ce54363fe452 Ship with sanitizer/lsan_interface.h for GCC 7
      • 7bd5ee95e9a0 Ship with sanitizer/lsan_interface.h for LLVM 7
      • d8671fba7a78 Set NODEBUG for LLVM sanitizers
      • 242cd44890a2 Add PAXCTL_FLAG rules for MKSANITIZER
      • 5e80ab99d9ce Avoid symbol clashes in test/rump/modautoload/t_modautoload with sanitizers
      • e7ce7ecd9c2a sysctl: Add indirection of symbols to remove clash with sanitizers
      • 231aea846aba traceroute: Add indirection of symbol to remove clash with sanitizers
      • 8d85053f487c sockstat: Add indirection of symbols to remove clash with sanitizers
      • 81b333ab151a netstat: Add indirection of symbols to remove clash with sanitizers
      • a472baefefe8 Correct the memset(3)'s third argument in i386 biosdisk.c
      • 7e4e92115bc3 Add ATF c and c++ tests for TSan, MSan, libFuzzer
      • 921ddc9bc97c Set NOSANITIZER in i386 ramdisk image
      • 64361771c78d Enhance MKSANITIZER support
      • 3b5608f80a2b Define target_not_supported_body() in TSan, MSan and libFuzzer tests
      • c27f4619d513 Avoids signedness bit shift in db_get_value()
      • 680c5b3cc24f Fix LLVM sanitizer build by GCC (HAVE_LLVM=no)
      • 4ecfbbba2f2a Rework the LLVM compiler_rt build rules
      • 748813da5547 Correct the build rules of LLVM sanitizers
      • 20e223156dee Enhance the support of LLVM sanitizers
      • 0bb38eb2f20d Register syms.extra in LLVM sanitizer .syms files
      • Almost all of the mentioned commits were backported to NetBSD-9 and will land 9.0.

    Homura - a Windows Games Launcher for FreeBSD

    Inspired by lutris (a Linux gaming platform), we would like to provide a game launcher to play windows games on FreeBSD.

    • Makes it easier to run games on FreeBSD, by providing the tweaks and dependencies for you
    • Dependencies
      • curl
      • bash
      • p7zip
      • zenity
      • webfonts
      • alsa-utils (Optional)
      • winetricks
      • vulkan-tools
      • mesa-demos
      • i386-wine-devel on amd64 or wine-devel on i386

    News Roundup

    Ada—The Language of Cost Savings?

    Many myths surround the Ada programming language, but it continues to be used and evolve at the same time. And while the increased adoption of Ada and SPARK, its provable subset, is slow, it’s noticeable. Ada already addresses more of the features found in found in heavily used embedded languages like C+ and C#. It also tackles problems addressed by upcoming languages like Rust.

    Chris concludes, “Development technologies have a profound impact on one of the largest and most variable costs associated with embedded-system engineering—labor. At a time when on-time system deployment can not only impact customer satisfaction, but access to services revenue streams, engineering team efficiency is at a premium. Our research showed that programming language choices can have significant influence in this area, leading to shorter projects, better schedules and, ultimately, lower development costs. While a variety of factors can influence and dictate language choice, our research showed that Ada’s evolution has made it an increasingly compelling option for engineering organizations, providing both technically and financially sound solution.”

    In general, Ada already makes embedded “programming in the large” much easier by handling issues that aren’t even addressed in other languages. Though these features are often provided by third-party software, it results in inconsistent practices among developers. Ada also supports the gamut of embedded platforms from systems like Arm’s Cortex-M through supercomputers. Learning Ada isn’t as hard as one might think and the benefits can be significant.

    FreeBSD core team appoints a WG to explore transitioning from Subversion to Git.

    • The FreeBSD Core Team is the governing body of FreeBSD.

    Core approved source commit bits for Doug Moore (dougm), Chuck Silvers (chs), Brandon Bergren (bdragon), and a vendor commit bit for Scott Phillips (scottph).

    The annual developer survey closed on 2019-04-02. Of the 397 developers, 243 took the survey with an average completion time of 12 minutes. The public survey closed on 2019-05-13. It was taken by 3637 users and had a 79% completion rate. A presentation of the survey results took place at BSDCan 2019.

    The core team voted to appoint a working group to explore transitioning our source code 'source of truth' from Subversion to Git. Core asked Ed Maste to chair the group as Ed has been researching this topic for some time. For example, Ed gave a MeetBSD 2018 talk on the topic.

    There is a variety of viewpoints within core regarding where and how to host a Git repository, however core feels that Git is the prudent path forward.

    OpenBSD 6.6 Beta tagged

    CVSROOT:    /cvs
    Module name:    src
    Changes by:    deraadt@cvs.openbsd.org    2019/08/09 21:56:02
    
    Modified files:
        etc/root : root.mail
        share/mk : sys.mk
        sys/arch/macppc/stand/tbxidata: bsd.tbxi
        sys/conf : newvers.sh
        sys/sys : param.h
        usr.bin/signify: signify.1
    
    Log message:
    move to 6.6-beta
    

    Preliminary release notes

    Improved hardware support, including:

    • clang(1) is now provided on powerpc.
    • IEEE 802.11 wireless stack improvements:
    • Generic network stack improvements:
    • Installer improvements:
    • Security improvements:
    • + Routing daemons and other userland network improvements
    • + The ntpd(8) daemon now gets and sets the clock in a secure way when booting even when a battery-backed clock is absent.
    • + bgdp(8) improvements
    • + Assorted improvements:
    • + The filesystem buffer cache now more aggressively uses memory outside the DMA region, to improve cache performance on amd64 machines.
    • The BER API previously internal to ldap(1), ldapd(8), ypldap(8), and snmpd(8) has been moved into libutil. See ber_read_elements(3).
    • Support for specifying boot device in vm.conf(5).
    • OpenSMTPD 6.6.0
    • LibreSSL 3.0.X
    • API and Documentation Enhancements
    • Completed the port of RSA_METHOD accessors from the OpenSSL 1.1 API.
    • Documented undescribed options and removed unfunctional options description in openssl(1) manual.
    • OpenSSH 8.0

    Project Trident 12-U5 update now available

    This is the fifth general package update to the STABLE release repository based upon TrueOS 12-Stable.

    • Package changes from Stable 12-U4
    • Package Summary

      • New Packages: 20
      • Deleted Packages: 24
      • Updated Packages: 279
    • New Packages (20)

      • artemis (biology/artemis) : 17.0.1.11
      • catesc (games/catesc) : 0.6
      • dmlc-core (devel/dmlc-core) : 0.3.105
      • go-wtf (sysutils/go-wtf) : 0.20.0_1
      • instead (games/instead) : 3.3.0_1
      • lidarr (net-p2p/lidarr) : 0.6.2.883
      • minerbold (games/minerbold) : 1.4
      • onnx (math/onnx) : 1.5.0
      • openzwave-devel (comms/openzwave-devel) : 1.6.897
      • polkit-qt-1 (sysutils/polkit-qt) : 0.113.0_8
      • py36-traitsui (graphics/py-traitsui) : 6.1.2
      • rubygem-aws-sigv2 (devel/rubygem-aws-sigv2) : 1.0.1
      • rubygem-default_value_for32 (devel/rubygem-default_value_for32) : 3.2.0
      • rubygem-ffi110 (devel/rubygem-ffi110) : 1.10.0
      • rubygem-zeitwerk (devel/rubygem-zeitwerk) : 2.1.9
      • sems (net/sems) : 1.7.0.g20190822
      • skypat (devel/skypat) : 3.1.1
      • tvm (math/tvm) : 0.4.1440
      • vavoom (games/vavoom) : 1.33_15
      • vavoom-extras (games/vavoom-extras) : 1.30_4
    • Deleted Packages (24)

      • geeqie (graphics/geeqie) : Unknown reason
      • iriverter (multimedia/iriverter) : Unknown reason
      • kde5 (x11/kde5) : Unknown reason
      • kicad-doc (cad/kicad-doc) : Unknown reason
      • os-nozfs-buildworld (os/buildworld) : Unknown reason
      • os-nozfs-userland (os/userland) : Unknown reason
      • os-nozfs-userland-base (os/userland-base) : Unknown reason
      • os-nozfs-userland-base-bootstrap (os/userland-base-bootstrap) : Unknown reason
      • os-nozfs-userland-bin (os/userland-bin) : Unknown reason
      • os-nozfs-userland-boot (os/userland-boot) : Unknown reason
      • os-nozfs-userland-conf (os/userland-conf) : Unknown reason
      • os-nozfs-userland-debug (os/userland-debug) : Unknown reason
      • os-nozfs-userland-devtools (os/userland-devtools) : Unknown reason
      • os-nozfs-userland-docs (os/userland-docs) : Unknown reason
      • os-nozfs-userland-lib (os/userland-lib) : Unknown reason
      • os-nozfs-userland-lib32 (os/userland-lib32) : Unknown reason
      • os-nozfs-userland-lib32-development (os/userland-lib32-development) : Unknown reason
      • os-nozfs-userland-rescue (os/userland-rescue) : Unknown reason
      • os-nozfs-userland-sbin (os/userland-sbin) : Unknown reason
      • os-nozfs-userland-tests (os/userland-tests) : Unknown reason
      • photoprint (print/photoprint) : Unknown reason
      • plasma5-plasma (x11/plasma5-plasma) : Unknown reason
      • polkit-qt5 (sysutils/polkit-qt) : Unknown reason
      • secpanel (security/secpanel) : Unknown reason

    Beastie Bits

    • DragonFlyBSD - msdosfs updates
    • Stand out as a speaker
    • Not a review of the 7th Gen X1 Carbon
    • FreeBSD Meets Linux At The Open Source Summit
    • QEMU VM Escape
    • Porting wine to amd64 on NetBSD, third evaluation report.
    • OpenBSD disabled DoH by default in Firefox

    Feedback/Questions

    • Reinis - GELI with UEFI
    • Mason - Beeping

    [CHVT feedback]
    DJ - Feedback
    Ben - chvt
    Harri - Marc's chvt question

    • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
    Your browser does not support the HTML5 video tag.

    315: Recapping vBSDcon 2019 Sep 11, 2019

    vBSDcon 2019 recap, Unix at 50, OpenBSD on fan-less Tuxedo InfinityBook, humungus - an hg server, how to configure a network dump in FreeBSD, and more.

    Headlines

    vBSDcon Recap

    Allan and Benedict attended vBSDcon 2019, which ended last week.

    It was held again at the Hyatt Regency Reston and the main conference was organized by Dan Langille of BSDCan fame.The two day conference was preceded by a one day FreeBSD hackathon, where FreeBSD developers had the chance to work on patches and PRs. In the evening, a reception was held to welcome attendees and give them a chance to chat and get to know each other over food and drinks.

    The first day of the conference was opened with a Keynote by Paul Vixie about DNS over HTTPS (DoH). He explained how we got to the current state and what challenges (technical and social) this entails.

    • If you missed this talk and are dying to see it, it will also be presented at EuroBSDCon next week

    John Baldwin followed up by giving an overview of the work on “In-Kernel TLS Framing and Encryption for FreeBSD” abstract and the recent commit we covered in episode 313.

    Meanwhile, Brian Callahan was giving a separate session in another room about “Learning to (Open)BSD through its porting system: an attendee-driven educational session” where people had the chance to learn about how to create ports for the BSDs.

    David Fullard’s talk about “Transitioning from FreeNAS to FreeBSD” was his first talk at a BSD conference and described how he built his own home NAS setup trying to replicate FreeNAS’ functionality on FreeBSD, and why he transitioned from using an appliance to using vanilla FreeBSD.

    Shawn Webb followed with his overview talk about the “State of the Hardened Union”.

    Benedict’s talk about “Replacing an Oracle Server with FreeBSD, OpenZFS, and PostgreSQL” was well received as people are interested in how we liberated ourselves from the clutches of Oracle without compromising functionality.

    Entertaining and educational at the same time, Michael W. Lucas talk about “Twenty Years in Jail: FreeBSD Jails, Then and Now” closed the first day. Lucas also had a table in the hallway with his various tech and non-tech books for sale.

    People formed small groups and went into town for dinner. Some returned later that night to some work in the hacker lounge or talk amongst fellow BSD enthusiasts.

    Colin Percival was the keynote speaker for the second day and had an in-depth look at “23 years of software side channel attacks”.

    Allan reprised his “ELI5: ZFS Caching” talk explaining how the ZFS adaptive replacement cache (ARC) work and how it can be tuned for various workloads.

    “By the numbers: ZFS Performance Results from Six Operating Systems and Their Derivatives” by Michael Dexter followed with his approach to benchmarking OpenZFS on various platforms.

    Conor Beh was also a new speaker to vBSDcon. His talk was about “FreeBSD at Work: Building Network and Storage Infrastructure with pfSense and FreeNAS”.

    Two OpenBSD talks closed the talk session: Kurt Mosiejczuk with “Care and Feeding of OpenBSD Porters” and Aaron Poffenberger with “Road Warrior Disaster Recovery: Secure, Synchronized, and Backed-up”.

    A dinner and reception was enjoyed by the attendees and gave more time to discuss the talks given and other things until late at night.

    We want to thank the vBSDcon organizers and especially Dan Langille for running such a great conference. We are grateful to Verisign as the main sponsor and The FreeBSD Foundation for sponsoring the tote bags. Thanks to all the speakers and attendees!

    humungus - an hg server

    • Features
      • View changes, files, changesets, etc. Some syntax highlighting.
      • Read only.
      • Serves multiple repositories.
      • Allows cloning via the obvious URL. Supports go get.
      • Serves files for downloads.
      • Online documentation via mandoc.
      • Terminal based admin interface.

    News Roundup

    OpenBSD on fan-less Tuxedo InfinityBook 14″ v2.

    The InfinityBook 14” v2 is a fanless 14” notebook. It is an excellent choice for running OpenBSD - but order it with the supported wireless card (see below.).

    I’ve set it up in a dual-boot configuration so that I can switch between Linux and OpenBSD - mainly to spot differences in the drivers. TUXEDO allows a variety of configurations through their webshop.

    The dual boot setup with grub2 and EFI boot will be covered in a separate blogpost. My tests were done with OpenBSD-current - which is as of writing flagged as 6.6-beta.

    • See Article for breakdown of CPU, Wireless, Video, Webcam, Audio, ACPI, Battery, Touchpad, and MicroSD Card Reader

    Unix at 50: How the OS that powered smartphones started from failure

    Maybe its pervasiveness has long obscured its origins. But Unix, the operating system that in one derivative or another powers nearly all smartphones sold worldwide, was born 50 years ago from the failure of an ambitious project that involved titans like Bell Labs, GE, and MIT. Largely the brainchild of a few programmers at Bell Labs, the unlikely story of Unix begins with a meeting on the top floor of an otherwise unremarkable annex at the sprawling Bell Labs complex in Murray Hill, New Jersey.

    It was a bright, cold Monday, the last day of March 1969, and the computer sciences department was hosting distinguished guests: Bill Baker, a Bell Labs vice president, and Ed David, the director of research. Baker was about to pull the plug on Multics (a condensed form of MULTiplexed Information and Computing Service), a software project that the computer sciences department had been working on for four years. Multics was two years overdue, way over budget, and functional only in the loosest possible understanding of the term.

    Trying to put the best spin possible on what was clearly an abject failure, Baker gave a speech in which he claimed that Bell Labs had accomplished everything it was trying to accomplish in Multics and that they no longer needed to work on the project. As Berk Tague, a staffer present at the meeting, later told Princeton University, “Like Vietnam, he declared victory and got out of Multics.”

    Within the department, this announcement was hardly unexpected. The programmers were acutely aware of the various issues with both the scope of the project and the computer they had been asked to build it for.

    Still, it was something to work on, and as long as Bell Labs was working on Multics, they would also have a $7 million mainframe computer to play around with in their spare time. Dennis Ritchie, one of the programmers working on Multics, later said they all felt some stake in the success of the project, even though they knew the odds of that success were exceedingly remote.

    Cancellation of Multics meant the end of the only project that the programmers in the Computer science department had to work on—and it also meant the loss of the only computer in the Computer science department. After the GE 645 mainframe was taken apart and hauled off, the computer science department’s resources were reduced to little more than office supplies and a few terminals.

    • Some of Allan’s favourite excerpts:

    In the early '60s, Bill Ninke, a researcher in acoustics, had demonstrated a rudimentary graphical user interface with a DEC PDP-7 minicomputer. Acoustics still had that computer, but they weren’t using it and had stuck it somewhere out of the way up on the sixth floor.

    And so Thompson, an indefatigable explorer of the labs’ nooks and crannies, finally found that PDP-7 shortly after Davis and Baker cancelled Multics.

    With the rest of the team’s help, Thompson bundled up the various pieces of the PDP-7—a machine about the size of a refrigerator, not counting the terminal—moved it into a closet assigned to the acoustics department, and got it up and running. One way or another, they convinced acoustics to provide space for the computer and also to pay for the not infrequent repairs to it out of that department’s budget.

    McIlroy’s programmers suddenly had a computer, kind of. So during the summer of 1969, Thompson, Ritchie, and Canaday hashed out the basics of a file manager that would run on the PDP-7. This was no simple task. Batch computing—running programs one after the other—rarely required that a computer be able to permanently store information, and many mainframes did not have any permanent storage device (whether a tape or a hard disk) attached to them. But the time-sharing environment that these programmers had fallen in love with required attached storage. And with multiple users connected to the same computer at the same time, the file manager had to be written well enough to keep one user’s files from being written over another user’s. When a file was read, the output from that file had to be sent to the user that was opening it.

    It was a challenge that McIlroy’s team was willing to accept. They had seen the future of computing and wanted to explore it. They knew that Multics was a dead-end, but they had discovered the possibilities opened up by shared development, shared access, and real-time computing. Twenty years later, Ritchie characterized it for Princeton as such: “What we wanted to preserve was not just a good environment in which to do programming, but a system around which a fellowship could form.”

    Eventually when they had the file management system more or less fleshed out conceptually, it came time to actually write the code. The trio—all of whom had terrible handwriting—decided to use the Labs’ dictating service. One of them called up a lab extension and dictated the entire code base into a tape recorder. And thus, some unidentified clerical worker or workers soon had the unenviable task of trying to convert that into a typewritten document.

    Of course, it was done imperfectly. Among various errors, “inode” came back as “eye node,” but the output was still viewed as a decided improvement over their assorted scribbles.

    In August 1969, Thompson’s wife and son went on a three-week vacation to see her family out in Berkeley, and Thompson decided to spend that time writing an assembler, a file editor, and a kernel to manage the PDP-7 processor. This would turn the group’s file manager into a full-fledged operating system. He generously allocated hi