Skip to main content.

Episode 087: On the List

2015-04-29

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent

This episode was brought to you by

iXsystems - Enterprise Servers and Storage for Open SourceDigitalOcean - Simple Cloud Hosting, Built for DevelopersTarsnap - Online Backups for the Truly Paranoid


Headlines

New PAE support in OpenBSD

  • OpenBSD has just added Physical Address Extention support to the i386 architecture, but it's probably not what you'd think of when you hear the term
  • In most operating systems, PAE's main advantage is to partially circumvent the 4GB memory limit on 32 bit platforms - this version isn't for that
  • Instead, this change specifically allows the system to use the No-eXecute Bit of the processor for the userland, further hardening the in-place memory protections
  • Other operating systems enable the CPU feature without doing anything to the page table entries, so they do get the available memory expansion, but don't get the potential security benefit
  • As we discussed in a previous episode, the AMD64 platform already saw some major W^X kernel and userland improvements - the i386 kernel reworking will begin shortly
  • Not all CPUs support this feature, but, if yours supports NX, this will improve upon the previous version of W^X that was already there
  • The AMD64 improvements will be in 5.7, due out in just a couple days as of when we're recording this, but the i386 improvements will likely be in 5.8

Booting Windows in bhyve

  • Work on FreeBSD's bhyve continues, and a big addition is on the way
  • Thus far, bhyve has only been able to boot operating systems with a serial console - no VGA, no graphics, no Windows
  • This is finally changing, and a teasing screenshot of Windows Server was recently posted on Twitter
  • Graphics emulation is still in the works; this image was taken by booting headless and using RDP
  • A lot of the needed code is being committed to -CURRENT now, but the UEFI portion of it requires a bit more development (and the aim for that is around the time of BSDCan)
  • Not a lot of details on the matter currently, but we'll be sure to bring you more info as it comes out
  • Are you more interested in bhyve or Xen on FreeBSD? Email us your thoughts

MidnightBSD 0.6 released

  • MidnightBSD is a smaller project we've not covered a lot on the show before
  • It's an operating system that was forked from FreeBSD back in the 6.1 days, and their focus seems to be on ease-of-use
  • They also have their own, smaller version of FreeBSD ports, called "mports"
  • If you're already using it, this new version is mainly a security and bugfix release
  • It syncs up with the most recent FreeBSD security patches and gets a lot of their ports closer to the latest versions
  • You can check their site for more information about the project
  • We're trying to get the lead developer to come on for an interview, but haven't heard anything back yet

OpenBSD rewrites the file utility

  • We're all probably familiar with the traditional file command - it's been around since the 1970s
  • For anyone who doesn't know, it's used to determine what type of file something actually is
  • This tool doesn't see a lot of development these days, and it's had its share of security issues as well
  • Some of those security issues remain unfixed in various BSDs even today, despite being publicly known for a while
  • It's not uncommon for people to run file on random things they download from the internet, maybe even as root, and some of the previous bugs have allowed file to overwrite other files or execute code as the user running it
  • When you think about it, file was technically designed to be used on untrusted files
  • OpenBSD developer Nicholas Marriott, who also happens to be the author of tmux, decided it was time to do a complete rewrite - this time with modern coding practices and the usual OpenBSD scrutiny
  • This new version will, by default, run as an unprivileged user with no shell, and in a systrace sandbox, strictly limiting what system calls can be made
  • With these two things combined, it should drastically reduce the damage a malicious file could potentially do
  • Ian Darwin, the original author of the utility, saw the commit and replied, in what may be a moment in BSD history to remember
  • It'll be interesting to see if the other BSDs, OS X, Linux or other UNIXes consider adopting this implementation in the future - someone's already thrown together an unofficial portable version
  • Coincidentally, the lead developer and current maintainer of file just happens to be our guest today‚Ķ

Interview - Christos Zoulas - christos@netbsd.org

blacklistd and NetBSD advocacy


News Roundup

GSoC-accepted BSD projects

  • The Google Summer of Code people have published a list of all the projects that got accepted this year, and both FreeBSD and OpenBSD are on that list
  • FreeBSD's list includes: NE2000 device model in userspace for bhyve, updating Ficl in the bootloader, type-aware kernel virtual memory access for utilities, JIT compilation for firewalls, test cluster automation, Linux packages for pkgng, an mtree parsing and manipulation library, porting bhyve to ARM-based platforms, CD-ROM emulation in CTL, libc security extensions, gptzfsboot support for dynamically discovering BEs during startup, CubieBoard support, a bhyve version of the netmap virtual passthrough for VMs, PXE support for FreeBSD guests in bhyve and finally.. memory compression and deduplication
  • OpenBSD's list includes: asynchronous USB transfer submission from userland, ARM SD/MMC & controller driver in libsa, improving USB userland tools and ioctl, automating module porting, implementing a KMS driver to the kernel and, wait for it... porting HAMMER FS to OpenBSD
  • We'll be sure to keep you up to date on developments from both projects
  • Hopefully the other BSDs will make the cut too next year

FreeBSD on the Gumstix Duovero

  • If you're not familiar with the Gumstix Duovero, it's an dual core ARM-based computer-on-module
  • They actually look more like a stick of RAM than a mini-computer
  • This article shows you how to build a FreeBSD -CURRENT image to run on them, using crochet-freebsd
  • If anyone has any interesting devices like this that they use BSD on, write up something about it and send it to us

EU study recommends OpenBSD

  • A recent study by the European Parliament was published, explaining that more funding should go into critical open source projects and tools
  • This is especially important, in all countries, after the mass surveillance documents came out
  • "[...] the use of open source computer operating systems and applications reduces the risk of privacy intrusion by mass surveillance. Open source software is not error free, or less prone to errors than proprietary software, the experts write. But proprietary software does not allow constant inspection and scrutiny by a large community of experts."
  • The report goes on to mention users becoming more and more security and privacy-aware, installing additional software to help protect themselves and their traffic from being spied on
  • Alongside Qubes, a Linux distro focused on containment and isolation, OpenBSD got a special mention: "Proactive security and cryptography are two of the features highlighted in the product together with portability, standardisation and correctness. Its built-in cryptography and packet filter make OpenBSD suitable for use in the security industry, for example on firewalls, intrusion-detection systems and VPN gateways"
  • Reddit, Undeadly and Hacker News also had some discussion, particularly about corporations giving back to the BSDs that they make use of in their infrastructure - something we've discussed with Voxer and M:Tier before

FreeBSD workflow with Git

  • If you're interested in contributing to FreeBSD, but aren't a big fan of SVN, they have a Github mirror too
  • This mailing list post talks about interacting between the official source repository and the Git mirror
  • This makes it easy to get pull requests merged into the official tree, and encourages more developers to get involved

Feedback/Questions


  • Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv - don't be shy, we're here to help with any questions you have
  • We're always looking for interviews, so feel free to suggest someone you'd like for us to talk to (or volunteer yourself if you're doing something cool)

Latest News

New announcement

2017-05-25

We understand that Michael Dexter, Brad Davis, and George Rosamond think there should be more real news....

Two Year Anniversary

2015-08-08

We're quickly approaching our two-year anniversary, which will be on episode 105. To celebrate, we've created a unique t-shirt design, available for purchase until the end of August. Shirts will be shipped out around September 1st. Most of the proceeds will support the show, and specifically allow us to buy...

New discussion segment

2015-01-17

We're thinking about adding a new segment to the show where we discuss a topic that the listeners suggest. It's meant to be informative like a tutorial, but more of a "free discussion" format. If you have any subjects you want us to explore, or even just a good name...

How did you get into BSD?

2014-11-26

We've got a fun idea for the holidays this year: just like we ask during the interviews, we want to hear how all the viewers and listeners first got into BSD. Email us your story, either written or a video version, and we'll read and play some of them for...


Episode 243: Understanding The Scheduler

2018-04-25

This episode was brought to you by Headlines OpenBSD 6.3 released Punctual as ever, OpenBSD 6.3 has been releases with the following features/changes: > Improved HW support, including: > SMP support on OpenBSD/arm64 platforms > vmm/vmd improvements: > IEEE 802.11 wireless stack improvements > Generic network stack improvements > Installer improvements > Routing daemons and other userland network improvements > Security...

Episode 242: Linux Takes The Fastpath

2018-04-18

Direct Download:MP3 AudioVideo This episode was brought to you by Headlines TrueOS STABLE 18.03 Release The TrueOS team is pleased to announce the availability of a new STABLE release of the TrueOS project (version 18.03). This is a special release due to the security issues impacting the computing world since the beginning...

Episode 241: Bowling in the LimeLight

2018-04-11

Direct Download:MP3 AudioVideo This episode was brought to you by Headlines [Other big ZFS improvements you might have missed] 9075 Improve ZFS pool import/load process and corrupted pool recovery > One of the first tasks during the pool load process is to parse a config provided from userland that describes what devices the pool is...

Episode 240: TCP Blackbox Recording

2018-04-04

Direct Download:VideoMP3 Audio This episode was brought to you by Headlines [A number of Upstream ZFS features landed in FreeBSD this week] 9188 increase size of dbuf cache to reduce indirect block decompression With compressed ARC (6950) we use up to 25% of our CPU to decompress indirect blocks, under a workload of...