Search

Items tagged with: FreeBSD






Hey #freebsd #sysadmins friends, has anyone tried Go-Anubis as an anti-bot? Or what solution do you use with a proxy ?
reskeet appreciated :)


Looking at the *at family of functions and I just realized that I viewed them as part of the capsicum security framework and not as part of allowing a threaded program to access relative paths from each thread's own working directory.

This explains why absolute paths are allowed and ignores the directory fd.

FreeBSD's openat man page explains this.

#FreeBSD


Running 14.3-STABLE right now. Intel iwlwifi driver with an Intel AX210 card giving me full 250/40 Mbps (the maximum of my DSL line) via WiFi :)

Random connection issues, that I had with -RELEASE are solved in the current -STABLE 🙂

5Ghz, 802.11ac with 80Mhz wide channel...

We're making fast progress with FreeBSD on the modern desktop 🙂

#freebsd #iwlwifi #wifi #networking


Anybody looking for #FreeBSD #ZFS job in Europe or Armenia? Take a look at lists.freebsd.org/archives/fre…. As I worked on that position until this August, I can only recommend it. The only reason I left is because of a full time open source position. Whoever fills in the position, I can promise you, you'll see wonders and make wonderful friends for life! 😃 I still chat with my old team members, and with some of them on a regular basis. In any case, good luck!


Been following the BSD conferences for a while and have not yet had the chance to attend one. But what i have noticed from all the videos and photo's published on social media is that it seems to be a male ( I'm going to include NB folk here too ) dominated event ? Maybe I'm wrong and it's just how the media published distorts the reality ? Apologies if I have offended anyone it certainly isn't my intention.

#EBC25 #RunBSD #FreeBSD #EuroBSDcon #EuroBSDCon2025 #OpenBSD #NetBSD


Anyone know how to determine wear on an NVMe drive on #FreeBSD?

Suggestin smartctl is not helpful here. It just doesn't do it.

I looked at nvmecontrol and could not find help there either.


I want to try #FreeBSD 15.0-Alpha2 but I'm on 14.3-Release. Is there a way to easily upgrade but be able to roll back if I need to? I could take a snapshot of the ZFS root then run the installer off a usb stick?


I found this screenshot again and I still think it's brilliant. The best OS overview I've ever read.
#Linux #FreeBSD


Anyone running #FreeBSD on one of Oracle's free tier?

I tried once, gave up. I don't recall the block.


The September 9th, 2025 Jail/Zones Production User Call is up:

youtu.be/Td4b4tnFB8k

We discussed Eurobhyvecon, Jail Descriptors, Capsicum vs. Pledge, the WITHOUT_JAIL build option, the Yggdrasil overlay network IPv6 routing scheme, podman, PkgBase, Netgraph vs. bridge vs. aliased networking performance, rctl and cpu set, the Nitro init system and process supervisor, and much more!

"Don't forget to slam those Like and Subscribe buttons."

#FreeBSD #illumos


#FreeBSD folks: Is it's possible to run wine's pkg32.sh in a jail? Surely it's possible to run WINE in a jail, right?


#illumos #omnios is absolutely incredible. The system is very well designed IMO, I had already experienced the more cohesively designed #BSD but here it feels a bit *more* (although quite similar in some aspects to #freebsd of course).

Linux feels like a duct-taped amalgamation of random ideas, don't get me wrong I love Linux and all it represents, but it's a system that has been grown in any direction.

With Illumos instead it feels like you have orthogonal powerful building blocks you can compose into something greater than the sum of its parts. #zfs #dtrace #zones #crossbow it all works beautifully, both on their own and together.

After seeing how virtualized networking can be done in solaris, the docker networking stack feels so sad in comparison.

So far I'm very impressed.


In #FreeBSD you can modularize your config with separate files in /etc/rc.conf.d/ except... for networking? The ifconfig / dhclient settings don't work unless they're in the regular /etc/rc.conf

I need to file a bug about this I guess


First steps in the BSD world!

1) OpenBSD on VPS (Amsterdam)
2) FreeBSD on Raspberry Pi 4 (home)

I'm running a Wireguard connection between the two.

Next step is setting up relayd on the VPS to point at services on the Raspberry Pi server.

#OpenBSD #FreeBSD #selfhosted



Anyone using net-mgmt/net-snmp on #FreeBSD with AES-256-C support? Or indeed, anything more than plain AES?

How can I confirm support is compiled in?

I ask because I can use these on snmpwalk

-x AES
-x AES128

but not

-x AES193
-x AES256
-x AES256C

They give an error such as:

Invalid privacy protocol specified after -3x flag: AES193

I ask because some newer gear uses AES-256 by default.


This is a vuxml node from #FreeBSD security/vuxml port.

<vuln vid="44101b31-8ffd-11e7-b5af-a4badb2f4699">
<cancelled/>
</vuln>

I'm trying to detect cancelled vid.

I'm using perl's XML::DOM::PARSER

I tried:

my $cancelled = $node->getAttributeNode('cancelled');

and

my $cancelled = $node->setNodeValue('cancelled');

But that comes back as: Use of uninitialized value $cancelled

I don't know what functions to call to detect a cancelled node.


#FreeBSD recommendations for #monitoring #alerting #observability sought. I have a much loved collectd + riemann that needs an upgrade.

Target is about 10 servers and 200 jails.

No apache2 /php, nagios or clones thereof please. I don’t have these in my stack today, and my expertise in managing them is about 20 years out of date. I prefer to avoid JVM stuff but I’m not violently against it.

Doesn’t have to be in ports yet ( like sensu.io/ server) if it’s in a friendly language.


Does anyone have a simple solution to running a #FreeBSD service in an OCI container? The OCI model assumes that there is an entry-point binary is a program that runs until it's exited, and it kills the process by sending it a signal. I guess I could write a small shell script that does 'service start' and sits in an infinite sleep loop, and does 'service stop' and exits when it receives SIGINT?


set up my first physical #freebsd server recently, for now doing nothing useful except tmux+weechat in a jail with a separate ssh port. it's a very typical experience so far: everything is "simpler", in both a nice way, but also in a "bastille will happily write incorrect limit config to file because you're supposed to know this" kind of way. it's "stable", but it also feels more common to try things out from documentation that simply do not work anymore due to abandoned packages. oh well.


in theory, code review is a great idea because it means at least two people have seen code before it lands, which prevents silly errors and mistake that anyone can make.

in practice, code review in #FreeBSD means that you can't commit anything until your code has been reviewed by someone who works for Klara, Netgate, or Netflix.

because code review is unrewarding and time consuming, only people who are paid to do it will do it, which means all code is gated through a corporate representitive.

this is not really an ideal situation.




🎥 Looking to self-host your own video conferencing platform?

Check out our latest blog on how to install and configure Galene, a lightweight video meeting server that runs seamlessly on FreeBSD.

This step-by-step guide walks you through:

Setting up a FreeBSD 14.3 environment
Configuring Galene for your use case
Tips for using ZFS to enhance performance and reliability

📖 Read the full guide:

freebsdfoundation.org/blog/how…

#FreeBSD #OpenSource #VideoConferencing #Galene


new FreeBSD bridge(4) review: “bridge: add defvlanfilter and defuntagged options" reviews.freebsd.org/D51176

this lets you do:

$ ifconfig bridge0 defvlanfilter defuntagged 1

... which causes all newly-added member interfaces to have VLAN filtering enabled and be in VLAN 1 (only).

then your VM/jail management tools (vm-bhyve, …) can continue using 'ifconfig addm' to add bridge members and don't need to know about VLAN configuration.

fun fact: this is how most people expect bridge(4) to work already, but it is not how bridge works already! in reality, all bridge members have access to all VLANs by default, and before VLAN filtering there was no way to restrict this at all.

i wonder how many systems accidentally allow jails/VMs to access their host management VLAN because of this?

for that reason (among others) i'd like to make this the default configuration of bridge(4) in a future version... 15.0 may be too early, though. but we should document this better.

#freebsd



You can add a remote disk to a #ZFS mirror using ggatec(8) on #freebsd and the the ZFS pool happily resilvers to the remote disk connected via #geomgate.



Linux is 2nd class citizen in ZFS world. No ZFS Boot Environments - no GRUB for modern ZFS pools - no distro with installer support for ZFS on root and BE setup.

Why then #FreeBSD would downgrade to Linux level on ANY level?

Its insane for me.

Details:
github.com/freebsd/freebsd-src…


32 years ago today, #FreeBSD was announced for the first time. I haven't tried this OS yet but I can assure you that I will because I want Quark, my OpenSource reverse proxy, to be supported on other Unix systems than Linux.

For this special occasion, I drew this little picture on #Krita 🙂

#FreeBSDday #Unix #Server


#FreeBSD provides the Ports Collection, a convenient way to install applications. Some ports allow users to configure options before building and installing. By default, this configuration is done through an interactive menu in the terminal.

To improve readability and #Accessibility especially for users with low vision or color blindness, it's important to offer simple and customizable color options. These features have recently been implemented and documented in the preview version of the FreeBSD Accessibility Handbook:
freebsd-accessibility-9d667f.g…

The next step is to extend these features to all terminal-based graphical components.

I'd love to hear from you:
Do you use any accessibility features in the terminal?
Which color-related assistive technologies make the biggest difference in your daily workflow?

Together, we can make FreeBSD more accessible for everyone. #ThePowerForEveryone #FreeBSD #Accessibility #OpenSource #LowVision #ColorBlindness #AssistiveTechnology #AccessibilityMatters