digitalcourage.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Diese Instanz wird betrieben von Digitalcourage e.V. für die Allgemeinheit. Damit wir das nachhaltig tun können, erheben wir einen jährlichen Vorausbeitrag von 1€/Monat per SEPA-Lastschrifteinzug.

Server stats:

816
active users

#runbsd

15 posts15 participants0 posts today
Daniel Wayne Armstrong<p>New post!</p><p>The NetBSD Guide has an extensive chapter on installing NetBSD that covers a wide range of scenarios. Its an invaluable resource maintained by volunteer contributors.</p><p>After performing a few installs, these are my personal notes of steps taken and choices made. My short and sweet version. 🙂 </p><p><a href="https://www.dwarmstrong.org/netbsd-install/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="">dwarmstrong.org/netbsd-install/</span><span class="invisible"></span></a></p><p><a href="https://fosstodon.org/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://fosstodon.org/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a></p>
Stefano Marinelli<p>At EuroBSDCon 2025 in Zagreb: "Liberating the social web using *BSD" by Jeroen - <span class="h-card" translate="no"><a href="https://exquisite.social/@h3artbl33d" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>h3artbl33d</span></a></span> - and Stefano Marinelli, see <a href="https://events.eurobsdcon.org/2025/talk/PJJLFV/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">events.eurobsdcon.org/2025/tal</span><span class="invisible">k/PJJLFV/</span></a></p><p>Schedule at <a href="https://events.eurobsdcon.org/2025/schedule/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">events.eurobsdcon.org/2025/sch</span><span class="invisible">edule/</span></a></p><p>To register <a href="https://2025.eurobsdcon.org/registration.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">2025.eurobsdcon.org/registrati</span><span class="invisible">on.html</span></a></p><p><a href="https://mastodon.bsd.cafe/tags/EuroBSDCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EuroBSDCon</span></a> <a href="https://mastodon.bsd.cafe/tags/EBC25" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EBC25</span></a> <a href="https://mastodon.bsd.cafe/tags/BSDCafe" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BSDCafe</span></a> <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Networking</span></a> <a href="https://mastodon.bsd.cafe/tags/BSDCafe" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BSDCafe</span></a> <a href="https://mastodon.bsd.cafe/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/Mastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Mastodon</span></a> <a href="https://mastodon.bsd.cafe/tags/Fediverse" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Fediverse</span></a> <a href="https://mastodon.bsd.cafe/tags/OwnYourData" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OwnYourData</span></a> <a href="https://mastodon.bsd.cafe/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Security</span></a> <a href="https://mastodon.bsd.cafe/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Networking</span></a> <a href="https://mastodon.bsd.cafe/tags/Community" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Community</span></a></p>
BSDTV<p>A new BSDCan video has been posted:</p><p>Sandbox Your Program Using FreeBSD's Capsicum By Jake Freeland</p><p><a href="https://youtu.be/Ne4l5U_ETAw" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">youtu.be/Ne4l5U_ETAw</span><span class="invisible"></span></a></p><p>With security vulnerabilities rapidly rising each year, program security is more important than ever. One solution to keeping your program from being the victim of the next big CVE is FreeBSD's Capsicum.</p><p>Originally developed at the University of Cambridge Computer Laboratory, Capsicum is a lightweight capability and sandbox framework built into the FreeBSD base system. It is designed around the principle of least privilege - where programs only have access to resources that are required for operation.</p><p>This talk will follow my blog post, which outlines the process of Capsicumization, or sandboxing your program using Capsicum. I will cover capability violation detection, restructuring existing programs for Capsicum, and filesystem/networking access inside of the capability sandbox.</p><p>Recent Capsicumization efforts in the FreeBSD base system and the future of Capsicum will also be discussed.</p><p>:flan_cool:<br><a href="https://bsd.network/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runbsd</span></a> <a href="https://bsd.network/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>freebsd</span></a> <a href="https://bsd.network/tags/sandbox" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>sandbox</span></a></p>
R.L. Dane :Debian: :OpenBSD: 🍵 :MiraLovesYou:<p><span class="h-card"><a href="https://social.coop/@samd" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>samd</span></a></span></p><p>Oof. Honestly, in my experience (which is admittedly very, very brief), S3 suspend isn't one of <a href="https://polymaths.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a>'s strong points. Follow the handbook, as it's pretty great, but allow for much longer resume times than you're used to, up to 30 seconds.</p><p>Excited about your endeavour, though, please let me know how it goes. Ask <a href="https://polymaths.social/tags/fedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fedi</span></a> (<code>#AskFedi</code>) if you run into any problems, and if you aren't able to find help here, I'm sure <span class="h-card"><a href="https://snac.smithies.me.uk/justine" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>justine</span></a></span> / <span class="h-card"><a href="https://mastodon.bsd.cafe/@justine" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>justine</span></a></span> would know where to ask. She's one of the awesome <a href="https://polymaths.social/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> daily-drivers on here, and I love to see <a href="https://polymaths.social/tags/bsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BSD</span></a> folks properly [<a href="https://en.wikipedia.org/wiki/Eating_your_own_dog_food" rel="nofollow noopener" target="_blank">"dog-fooding"</a>] it on the desktop.</p><p><a href="https://polymaths.social/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a></p><p>cc: <span class="h-card"><a href="https://polymaths.social/@amin" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>amin</span></a></span></p>
Daniel Wayne Armstrong<p>In anticipation of installing NetBSD on a remote VPS next week, I've installed NetBSD today on a local device to poke around a bit!</p><p><a href="https://fosstodon.org/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://fosstodon.org/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a></p>
BSDTV<p>New <span class="h-card"><a href="https://bsd.network/@bsdcan" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>bsdcan</span></a></span> Video Posted:</p><p>The state of 3d-printing from OpenBSD by Andrew Hewus Fresh<br><span class="h-card"><a href="https://bsd.network/@AFresh1" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>AFresh1</span></a></span> </p><p><a href="https://youtu.be/q8K9VH76c8o" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">youtu.be/q8K9VH76c8o</span><span class="invisible"></span></a></p><p>It's possible to do some 3d printing related things on an OpenBSD machine, but there are a bunch of popular tools that aren't available in the ports tree. We will talk about some of the different classes of software and what things are popular and whether they are currently available on OpenBSD and what the blockers are from getting those into the ports tree.</p><p><a href="https://bsd.network/tags/3dprinting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>3dprinting</span></a> <a href="https://bsd.network/tags/openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>openbsd</span></a> <a href="https://bsd.network/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runbsd</span></a></p>
Børge<p>I recently installed NetBSD for the first time, on a remote VPS. All was fine, I installed pkgin, got some packages installed, installed openssh-portable, got my firewall rules set and so on. Having used FreeBSD and OpenBSD before it was a little different, but not too different.</p><p>Then one day, or rather late at night I found I needed to install some X11 sets and fired up sysinst. It being late, I did not read everything very carefully, but quickly found "re-install sets", "custom installtion", and then the X11 sets at the bottom of the menu. I selected them and started the installation.</p><p>It took a little longer than expected, and I noticed it was reinstalling base for some reason. No worries I thought, I hadn't touched that in the few days the system had been running, so it shouldn't be a problem.</p><p>Then when everything was finished, I noticed things were not working as expected. I think I managed to kill the sshd listening daemon and couldn't start it again. Then I noticed /etc/rc.conf was blank, so I had no network configuration, no sshd startup, no nothing. It seems /etc had also been replaced with defaults.</p><p>So by my lonesome, I had quite quickly managed to make quite a mess of things. Fortunately I did not reboot as was my first intuition when I found things weren't working. Sshd from packages required another script which had been replaced, the original sshd I had set to listen on another port which wasn't allowed through current firewall rules and so on.</p><p>Sorry for the boring ending, but it was all fully recoverable from my one ssh connection that fortunately didn't drop. Got network configured again, got firewall set up and started, got correct sshd started and so on. Then reboot, and all was good. Thanks to good documentation and easy configuration.</p><p>And that is why I <a href="https://mastodon.bsd.cafe/tags/RUNBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RUNBSD</span></a> <br>Even being completely new to <a href="https://mastodon.bsd.cafe/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> it was easy to recover.</p><p>I've re-tried sysinst after the fact, and now see base, /etc and so on will be re-installed by default if you don't uncheck them, so now I know.</p>
EuroBSDCon<p>The European *BSD 😈⛳🐡 event of 2025 is getting noticed!</p><p><a href="https://www.netokracija.com/event/eurobsdcon-2025" rel="nofollow noopener" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">netokracija.com/event/eurobsdc</span><span class="invisible">on-2025</span></a></p><p>Ako znaš čitati hrvatski, dobar si.<br>If you can't, you probably need to translate the article. :flan_cheer:​:flan_laugh:​</p><p>Grab your tickets 🎟️ at <a href="https://tickets.eurobsdcon.org" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">tickets.eurobsdcon.org</span><span class="invisible"></span></a></p><p>For everything else, peek at <a href="https://2025.eurobsdcon.org/" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">2025.eurobsdcon.org/</span><span class="invisible"></span></a><br>More information is added all the time.</p><p>EuroBSDCon 2025 in Zagreb, Croatia 🇭🇷<br>September 25-28, 2025</p><p><a href="https://bsd.network/tags/RUNBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RUNBSD</span></a> <a href="https://bsd.network/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://bsd.network/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://bsd.network/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSD</span></a> <a href="https://bsd.network/tags/EuroBSDCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EuroBSDCon</span></a> <a href="https://bsd.network/tags/EuroBSDCon2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>EuroBSDCon2025</span></a> <a href="https://bsd.network/tags/BSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BSD</span></a> <a href="https://bsd.network/tags/Conference" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Conference</span></a> <a href="https://bsd.network/tags/Register" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Register</span></a></p>
BSDTV<p>New <span class="h-card"><a href="https://bsd.network/@bsdcan" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>bsdcan</span></a></span> Video Posted:</p><p>ABI stability in FreeBSD By ShengYi Hung</p><p><a href="https://youtu.be/vzU6vKd1OFM" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">youtu.be/vzU6vKd1OFM</span><span class="invisible"></span></a></p><p>The FreeBSD project doesn't guarantee the ABI stability in major version. However, for the minor version, we also not fully guarantee. This cause maintaining a out-of-tree module (at least for Kernel module like VirtualBox) a big problem because module compiles from 14.0 may not able to use at 14.1. This also cause some problem when distributing modules with freshpkg in our base because our pkg system only support build for all major version.</p><p>A wiki page distribute the workflow of CTF diff and script:</p><p><a href="https://wiki.freebsd.org/ShengYiHong/ABIStability?highlight=%28ABI%29" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="ellipsis">wiki.freebsd.org/ShengYiHong/A</span><span class="invisible">BIStability?highlight=%28ABI%29</span></a></p><p>The outline of my slides will be as following:</p><p> What is ABI and why we needs to stablize ABI?</p><p> How to maintain ABI stability (a tool to check and ABI tag in binary)?</p><p> ABI information (CTF and dwarf) in elf and why we use CTF?</p><p> New tools CTFDiff: Why implement new CTFDiff and don't use the illumos one? (we port libctf and other command line tools like ctfdump to FreeBSD from illumos)</p><p> CTFDiff script: scripts download tarball from web (kernel tarball) so that we can compare abi between local compile one and web.</p><p> Short demo (maybe) for ctfdiff ?</p><p> Current status of CTFDiff (needs reviewers, licenses issue (CDDL))</p><p> Future works: regulize a stable function/obj ABI/API in kernel.</p><p><a href="https://bsd.network/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runbsd</span></a> <a href="https://bsd.network/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bsdcan</span></a></p>
Daniel Wayne Armstrong<p>I have an idea for a new project blog, and discovering useful information about how to set one up with a cheap VPS running NetBSD courtesy of this post from <span class="h-card" translate="no"><a href="https://mastodon.bsd.cafe/@stefano" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>stefano</span></a></span> ...</p><p><a href="https://it-notes.dragas.net/2025/04/22/make-your-own-internet-presence-with-netbsd-and-a-1-euro-vps-part-1-your-blog/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">it-notes.dragas.net/2025/04/22</span><span class="invisible">/make-your-own-internet-presence-with-netbsd-and-a-1-euro-vps-part-1-your-blog/</span></a></p><p><a href="https://fosstodon.org/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://fosstodon.org/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a> <a href="https://fosstodon.org/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHosting</span></a> <a href="https://fosstodon.org/tags/VPS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>VPS</span></a></p>
ottO<p>So a question about the <a href="https://hachyderm.io/tags/freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>freebsd</span></a> 15 <a href="https://hachyderm.io/tags/kde" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>kde</span></a> install... if i upgrade to 15 and *don't* have kde, can I just it to quickstart kde after i upgrade? Can it be run _whenever_?<br><a href="https://hachyderm.io/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runbsd</span></a></p>
Stefano Marinelli<p>By the way, I'm having fun looking at some uptime data. Here's some: </p><p>%up 99.996 | since Wed Nov 22 10:51:03 2023<br>%up 99.998 | since Fri Jul 29 09:35:57 2022<br>%up 99.999 | since Wed Apr 6 14:48:49 2022<br>%up 99.931 | since Thu Sep 7 08:48:55 2023<br>%up 99.989 | since Sun Mar 20 18:06:40 2022<br>%up 99.994 | since Thu Dec 9 17:10:22 2021</p><p>In other words, they were only offline for updates that needed a reboot. </p><p>These are all leased production servers located in Europe, running FreeBSD with jails and VMs. </p><p>No need for Kubernetes or the cloud to get great uptime!</p><p><a href="https://mastodon.bsd.cafe/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/OwnYourData" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OwnYourData</span></a></p>
jhx<p><span class="h-card" translate="no"><a href="https://fosstodon.org/@BastilleBSD" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BastilleBSD</span></a></span> <br>Thank you <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> devs/contributors/admins/everyone-involved! :freebsd: </p><p><a href="https://mastodon.bsd.cafe/tags/RUNBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RUNBSD</span></a> :freebsd_logo:</p>
BastilleBSD :freebsd:<p>Today we want to thank the <a href="https://fosstodon.org/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> core team for all their hard work and contributions. :freebsd:</p><p>Our favorite OS wouldn't be what it is today without their work.</p><p>Thank you!</p><p><a href="https://fosstodon.org/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://fosstodon.org/tags/runBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runBSD</span></a></p>
Børge<p>So this is where my peeps at!</p><p>Hello everyone, my name is Børge and I am happy to get back into the BSD world, though only for personal projects for now.</p><p>I was a sysadmin for a small telco a while ago and we used Solaris/SPARC and FreeBSD/i386 for our servers, while I tried my hand at OpenBSD for my personal server. The network was all Cisco at the beginning, with some Juniper equipment for peering at the end but I did not get any experience with those unfortunately. I do have a certificate in SS7 somewhere, the signaling protocol telcos use for voice calls, but have forgotten pretty much all of it.</p><p>These days work is "cloud everything", which all seems to be based on Linux-something.</p><p>Reminiscing of "the good, old days" I wondered if I could run a BSD server anywhere to tap into my sysadmin background a little, or if I would have to use some Linux distribution.</p><p>Searching for BSD hosting providers, I am very happy I discovered <a href="https://mastodon.bsd.cafe/tags/OpenBSDAms" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSDAms</span></a> which I use for OpenBSD hosting (obviously).</p><p>Then I came across <a href="https://mastodon.bsd.cafe/tags/BoxyBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BoxyBSD</span></a> where I was lucky enough to get a FreeBSD instance.</p><p>Last but not least I came across a cheap VPS provider where I could run NetBSD. I don't mention the provider because I'm not sure I can recommend them yet.</p><p>I've been on Mastodon a little while, mostly reading as there is so much of interest to find here, though also because I'm quite shy, but hope to maybe post something about what I do now and then.</p><p>I really like all the *BSDs, they just do things in a way that seems sensible to me, so being here feels a lot like coming home.</p><p>So that's me a little about me. <a href="https://mastodon.bsd.cafe/tags/introduction" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>introduction</span></a> </p><p>How are you?</p><p><a href="https://mastodon.bsd.cafe/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/RUNBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RUNBSD</span></a></p>
gyptazy<p>Okay, I did something... time to provide BSD boxes at <span class="h-card" translate="no"><a href="https://mastodon.bsd.cafe/@BoxyBSD" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>BoxyBSD</span></a></span> a bit closer to our buddies in Asia! <a href="https://mastodon.gyptazy.com/tags/RUNBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RUNBSD</span></a></p><p><a href="https://mastodon.gyptazy.com/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FreeBSD</span></a> <a href="https://mastodon.gyptazy.com/tags/NetBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NetBSD</span></a> <a href="https://mastodon.gyptazy.com/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSD</span></a> <a href="https://mastodon.gyptazy.com/tags/DrangonflyBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DrangonflyBSD</span></a> <a href="https://mastodon.gyptazy.com/tags/MidnightBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MidnightBSD</span></a> <a href="https://mastodon.gyptazy.com/tags/illumos" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>illumos</span></a> <a href="https://mastodon.gyptazy.com/tags/opensolaris" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>opensolaris</span></a></p>
BSDTV<p>New <span class="h-card"><a href="https://bsd.network/@bsdcan" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>bsdcan</span></a></span> video posted:<br><br>Controlled credentials transitions without privileges: mac_do(4), mdo(1) and setcred(2) by Olivier Certner</p><p><a href="https://youtu.be/Wl2hewfxcKM" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">youtu.be/Wl2hewfxcKM</span><span class="invisible"></span></a></p><p>In this talk, we will present a project that aims at allowing controlled process credentials transitions without using setuid executables but instead leveraging FreeBSD's MAC framework.</p><p>Traditional credentials-changing programs, such as sudo(8), have a non-negligible attack surface as they often include a lot of infrequently used features and mechanisms that can be dangerous from a security standpoint (e.g., loadable modules). As these programs have to run as 'root', compromising them can have catastrophic consequences.</p><p>The mac_do(4) kernel module has been introduced to allow unprivileged processes to change credentials, provided the requested changes are explicitly allowed by rules set by an administrator. It has recently undergone major changes. First, thanks to a redesign of rules, it is now possible to specify full sets of user and group IDs that must be present or absent in the final credentials for a transition to be accepted. Second, each jail can be configured with a different set of rules, allowing different transitions to be allowed as needed, or to inherit from the parent jail.</p><p>We will describe how mac_do(4)'s credentials rules work, what the role of the mdo(1) companion program is, and what you can do with them in practice.</p><p>We will also touch on some aspects of the implementation, notably why we needed to introduce the new setcred(2) system call, which allows to change all process credentials in a single call, and possibly those that are related to the use of some FreeBSD's kernel sub-systems (notably, sysctl, jails and OSD).</p><p>While the current implementation is of production quality and immediately useful, there are lots of possible ways to extend it to cover more scenarios and to progress towards our ideal of having all credentials-changing programs work without the setuid bit. We will present them in the hope to get feedbacks.</p><p><a href="https://bsd.network/tags/runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>runbsd</span></a> <a href="https://bsd.network/tags/bsdcan" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>bsdcan</span></a></p>
Justine SmithiesI have another one of these Dell Optiplex 3080 with i5-10505 and 8Gb ram plus 256Gb nvme drive. If I added 2 x pci-e x1 2.5Gb cards is it overkill for a PPPoE FTTP 1Gb / 100Mb router / firewall ?<br><br>I'd be adding stuff like collectd for monitoring using my home assistant too plus other stuff as I learn.<br><br><a href="https://dl.dell.com/topicspdf/optiplex-3080-desktop_owners-manual6_en-us.pdf" rel="nofollow noopener" target="_blank">https://dl.dell.com/topicspdf/optiplex-3080-desktop_owners-manual6_en-us.pdf</a><br><br><a href="https://snac.smithies.me.uk?t=ooenbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#OoenBSD</a> <a href="https://snac.smithies.me.uk?t=runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#RunBSD</a><br>
Stefano Marinelli<p>A Self-hosted, BSD-native Gemini Protocol Server Stack - by <span class="h-card" translate="no"><a href="https://exquisite.social/@rqm" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>rqm@exquisite.social</span></a></span> - <span class="h-card" translate="no"><a href="https://journal.bsd.cafe/author/rqm/" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>rqm@journal.bsd.cafe</span></a></span> </p><p>For those who are adventurous enough to explore the non-http corners of the Internet, the Gemini protocol is a delightful experience to use. It has been around a number of years, making the biggest bang around the time when discontent with the web’s general demise started to reach current heights (so maybe around 2022).</p><p><a href="https://journal.bsd.cafe/2025/07/22/a-self-hosted-bsd-native-gemini-protocol-server-stack/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">journal.bsd.cafe/2025/07/22/a-</span><span class="invisible">self-hosted-bsd-native-gemini-protocol-server-stack/</span></a></p><p><a href="https://mastodon.bsd.cafe/tags/Gemini" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Gemini</span></a> <a href="https://mastodon.bsd.cafe/tags/OpenBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/RunBSD" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RunBSD</span></a> <a href="https://mastodon.bsd.cafe/tags/BSDCafeJournal" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BSDCafeJournal</span></a></p>
Justine SmithiesI already have my home lab served by an intel n100 fanless PC running <a href="https://snac.smithies.me.uk?t=opnsense" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpnSense</a> aka <a href="https://snac.smithies.me.uk?t=freebsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreeBSD</a> and it's great by the way. But my stupid head likes rabbit holes and keeps thinking about making an <a href="https://snac.smithies.me.uk?t=openbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenBSD</a> powered router , Firewall so everything is done from the command line. I'd need to setup everything even the PPPoE for my Andrews &amp; Arnold FTTP connection. This would need some research and note taking I feel. Good God head as if I've not enough to think about already! 😜<br><a href="https://snac.smithies.me.uk?t=runbsd" class="mention hashtag" rel="nofollow noopener" target="_blank">#RunBSD</a><br>