NOTES

This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

Headlines

Using Git offline

Make your own E-Mail server - FreeBSD, OpenSMTPD, Rspamd and Dovecot included - Part 1

News Roundup

quiz: a tool for rapid OpenZFS development

Configuring openzfs for nvme databases

Mirroring OmniOS: The Complete Guide; Part One

Installing OpenBSD 7.4 on a VisionFive 2 rev 1.2a

Terminal Latency

Tarsnap

This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

• Join us and other BSD Fans in our BSD Now Telegram channel

NOTES
This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

Headlines

FreeBSD Status Report Second Quarter 2023

Our 2023 Recommended Summer Reads 2023

News Roundup

How to install Kanboard on OpenBSD

A bit of Unix history on 'su -'

Some hints for splitting commits

Live from OpenBSD in Amsterdam

In memoriam

In Memoriam: Hans Petter William Sirevåg Selasky

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Agbo - Using BSD for a business

• Chris - Desktop BSD systems

• Dane - Use another OS

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

NOTES

This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

Headlines

4 Months of BSD

Self Hosted Calendar and address Book

News Roundup

Ban scanners IPs from OpenSMTP logs

Self-hosted git page with stagit (featuring ed, the standard editor)

Bastille template example

Nginx: How to Restrict Access by Geographical Location on FreeBSD

Beastie Bits

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Chris - ARM
• Matthew - Groups

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

NOTES
This episode of BSDNow is brought to you by Tarsnap

Headlines

NetBSD 9.2 Released

DragonFly 6.0 is out!

• Release Notes *** ### EuroBSDCon 2021 will be online *** ## News Roundup ### Home Network Monitoring using Prometheus > This blog post describes my setup for monitoring various devices on my home network suh as servers, laptops/desktops, networking gear etc. The setup and configuration is squarely geared towards small/medium sized network monitoring. A similar setup might work for large networks, but you will need to plan your compute/storage/bandwidth capacities accordingly. I’m running all the monitoring software on FreeBSD, but you can run it on your choice of OS. Just make sure to install the packages using your OS’s package manager. *** ### Preventing FreeBSD to kill PostgreSQL (aka OOM Killer prevention) > There are a lot of interesting articles on how to prevent the Out of Memory Killer (OOM killer in short) on Linux to ruin your day, or better your night. One particularly well done explanation about how the OOM Killer works, and how to help PostgreSQL to survive, is, in my humble opinion, the one from Percona Blog. *** ### Customizing Emacs for Git Commit Messages >I do a lot of commits to the FreeBSD project and elsewhere. It would be nice if I could setup emacs in a custom way for each commit message that I'm editing. > Fortunately, GNU Emacs provides a nice way to do just that. While I likely could do some of these things with git commit hooks, I find this to be a little nicer. *** ### Deleting old FreeBSD boot environments > I like boot environments (BE) on FreeBSD. They were especially handy when building the AWS host for FreshPorts, since I had no serial console. I would create a BE saving the current status, then make some changes. I’d mark the current BE as boot once, so I could boot back in the known good BE. Worst case, I could mount the storage onto a rescue EC2 instance and adjust the bootfs value of the zpool. ***

Always be quitting

A good philosophy to live by at work is to “always be quitting”. No, don’t be constantly thinking of leaving your job. But act as if you might leave on short notice. Counterintuitively, this will make you a better engineer and open up growth opportunities.

---

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Christopher - zfs question
• Chris - two questions
• Vas - zpools and moving to FreeBSD 13

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

NOTES
This episode of BSDNow is brought to you by Tarsnap

Headlines

FuryBSD 2020-Q3 The world’s first OpenZFS based live image

FuryBSD is a tool to test drive stock FreeBSD desktop images in read write mode to see if it will work for you before installing. In order to provide the most reliable experience possible while preserving the integrity of the system the LiveCD now leverages ZFS, compression, replication, a memory file system, and reroot (pivot root).

---

FreeBSD Subversion to Git Migration: Pt 1 Why?

FreeBSD moving to Git: Why? With luck, I'll be writing a few blogs on FreeBSD's move to git later this year. Today, we'll start with "why"?
Video from Warner Losh

---

News Roundup

FreeBSD Instant-workstation 2020

A little over a year ago I published an instant-workstation script for FreeBSD. The idea is to have an installed FreeBSD system, then run a shell script that uses only base-system utilities and installs and configures a workstation setup for you.

---

nut – testing the shutdown mechanism

Following on from my recent nut setup, this is the second in a series of three posts.
The next post will deal with adjusting startup and shutdown times to be sure everything proceeds as required.

---

login_ldap added to OpenBSD -current

With this commit, Martijn van Duren (martijn@) added login_ldap(8) to -current

• https://marc.info/?l=openbsd-cvs&m=159992319027593&w=2 ***

Beastie Bits

• NetBSD current now has GCC 9.3.0 for x86/ARM
• MidnightBSD 1.2.8
• MidnightBSD 2.0-Current
• Retro UNIX 8086 v1 operating system has been developed by Erdogan Tan as a special purposed derivation of original UNIX v1 ***

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Rick - rcorder
• Dan - machiatto bin

• Luis - old episodes

  ---

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

  ---

NOTES
This episode of BSDNow is brought to you by Tarsnap

Headlines

yubikey-agent on FreeBSD

Some time ago Filippo Valsorda wrote yubikey-agent, seamless SSH agent for YubiKeys. I really like YubiKeys and worked on the FreeBSD support for U2F in Chromium and pyu2f, getting yubikey-agent ported looked like an interesting project. It took some hacking to make it work but overall it wasn’t hard. Following is the roadmap on how to get it set up on FreeBSD. The actual details depend on your system (as you will see)

---

Manage Kubernetes clusters from OpenBSD

This should work with OpenBSD 6.7. I write this while the source tree is locked for release, so even if I use -current this is as close as -current gets to -release
Update 2020-06-05: we now have a port for kubectl. So, at least in -current things get a bit easier.

---

News Roundup

History of FreeBSD Part 1: Unix and BSD

FreeBSD, a free and open-source Unix-like operating system has been around since 1993. However, its origins are directly linked to that of BSD, and further back, those of Unix. During this History of FreeBSD series, we will talk about how Unix came to be, and how Berkeley’s Unix developed at Bell Labs.

---

Running Jitsi-Meet in a FreeBSD Jail

Due to the situation with COVID-19 that also lead to people being confined to their homes in South Africa as well, we decided to provide a (freely usable of course) Jitsi Meet instance to the community being hosted in South Africa on our FreeBSD environment.
That way, communities in South Africa and beyond have a free alternative to the commercial conferencing solutions with sometimes dubious security and privacy histories and at the same time improved user experience due to the lower latency of local hosting.

• Grafana for Jitsi-Meet ***

Command Line Bug Hunting in FreeBSD

FreeBSD uses bugzilla for tracking bugs, taking feature requests, regressions and issues in the Operating System. The web interface for bugzilla is okay, but if you want to do a lot of batch operations it is slow to deal with. We are planning to run a bugsquash on July 11th and that really needs some tooling to help any hackers that show up process the giant bug list we have.

---

Beastie Bits

• Game of Github
• + Wireguard official merged into OpenBSD ***

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Florian : Lua for $HOME
• Kevin : FreeBSD Source Question

• Tom : HomeLabs

  ---

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv

  ---

Headlines

LLVM santizers and GDB regression test suite.

As NetBSD-9 is branched, I have been asked to finish the LLVM sanitizer integration. This work is now accomplished and with MKLLVM=yes build option (by default off), the distribution will be populated with LLVM files for ASan, TSan, MSan, UBSan, libFuzzer, SafeStack and XRay.

I have also transplanted basesystem GDB patched to my GDB repository and managed to run the GDB regression test-suite.

• NetBSD distribution changes

I have enhanced and imported my local MKSANITIZER code that makes whole distribution sanitization possible. Few real bugs were fixed and a number of patches were newly written to reflect the current NetBSD sources state. I have also merged another chunk of the fruits of the GSoC-2018 project with fuzzing the userland (by plusun@).

• The following changes were committed to the sources:
  • ab7de18d0283 Cherry-pick upstream compiler-rt patches for LLVM sanitizers
  • 966c62a34e30 Add LLVM sanitizers in the MKLLVM=yes build
  • 8367b667adb9 telnetd: Stop defining the same variables concurrently in bss and data
  • fe72740f64bf fsck: Stop defining the same variable concurrently in bss and data
  • 40e89e890d66 Fix build of t_ubsan/t_ubsanxx under MKSANITIZER
  • b71326fd7b67 Avoid symbol clashes in tests/usr.bin/id under MKSANITIZER
  • c581f2e39fa5 Avoid symbol clashes in fs/nfs/nfsservice under MKSANITIZER
  • 030a4686a3c6 Avoid symbol clashes in bin/df under MKSANITIZER
  • fd9679f6e8b1 Avoid symbol clashes in usr.sbin/ypserv/ypserv under MKSANITIZER
  • 5df2d7939ce3 Stop defining _rpcsvcdirty in bss and data
  • 5fafbe8b8f64 Add missing extern declaration of ib_mach_emips in installboot
  • d134584be69a Add SANITIZER_RENAME_CLASSES in bsd.prog.mk
  • 2d00d9b08eae Adapt tests/kernel/t_subr_prf for MKSANITIZER
  • ce54363fe452 Ship with sanitizer/lsan_interface.h for GCC 7
  • 7bd5ee95e9a0 Ship with sanitizer/lsan_interface.h for LLVM 7
  • d8671fba7a78 Set NODEBUG for LLVM sanitizers
  • 242cd44890a2 Add PAXCTL_FLAG rules for MKSANITIZER
  • 5e80ab99d9ce Avoid symbol clashes in test/rump/modautoload/t_modautoload with sanitizers
  • e7ce7ecd9c2a sysctl: Add indirection of symbols to remove clash with sanitizers
  • 231aea846aba traceroute: Add indirection of symbol to remove clash with sanitizers
  • 8d85053f487c sockstat: Add indirection of symbols to remove clash with sanitizers
  • 81b333ab151a netstat: Add indirection of symbols to remove clash with sanitizers
  • a472baefefe8 Correct the memset(3)'s third argument in i386 biosdisk.c
  • 7e4e92115bc3 Add ATF c and c++ tests for TSan, MSan, libFuzzer
  • 921ddc9bc97c Set NOSANITIZER in i386 ramdisk image
  • 64361771c78d Enhance MKSANITIZER support
  • 3b5608f80a2b Define target_not_supported_body() in TSan, MSan and libFuzzer tests
  • c27f4619d513 Avoids signedness bit shift in db_get_value()
  • 680c5b3cc24f Fix LLVM sanitizer build by GCC (HAVE_LLVM=no)
  • 4ecfbbba2f2a Rework the LLVM compiler_rt build rules
  • 748813da5547 Correct the build rules of LLVM sanitizers
  • 20e223156dee Enhance the support of LLVM sanitizers
  • 0bb38eb2f20d Register syms.extra in LLVM sanitizer .syms files
  • Almost all of the mentioned commits were backported to NetBSD-9 and will land 9.0.

Homura - a Windows Games Launcher for FreeBSD

Inspired by lutris (a Linux gaming platform), we would like to provide a game launcher to play windows games on FreeBSD.

• Makes it easier to run games on FreeBSD, by providing the tweaks and dependencies for you
• Dependencies
  • curl
  • bash
  • p7zip
  • zenity
  • webfonts
  • alsa-utils (Optional)
  • winetricks
  • vulkan-tools
  • mesa-demos
  • i386-wine-devel on amd64 or wine-devel on i386

News Roundup

Ada—The Language of Cost Savings?

Many myths surround the Ada programming language, but it continues to be used and evolve at the same time. And while the increased adoption of Ada and SPARK, its provable subset, is slow, it’s noticeable. Ada already addresses more of the features found in found in heavily used embedded languages like C+ and C#. It also tackles problems addressed by upcoming languages like Rust.

Chris concludes, “Development technologies have a profound impact on one of the largest and most variable costs associated with embedded-system engineering—labor. At a time when on-time system deployment can not only impact customer satisfaction, but access to services revenue streams, engineering team efficiency is at a premium. Our research showed that programming language choices can have significant influence in this area, leading to shorter projects, better schedules and, ultimately, lower development costs. While a variety of factors can influence and dictate language choice, our research showed that Ada’s evolution has made it an increasingly compelling option for engineering organizations, providing both technically and financially sound solution.”

In general, Ada already makes embedded “programming in the large” much easier by handling issues that aren’t even addressed in other languages. Though these features are often provided by third-party software, it results in inconsistent practices among developers. Ada also supports the gamut of embedded platforms from systems like Arm’s Cortex-M through supercomputers. Learning Ada isn’t as hard as one might think and the benefits can be significant.

FreeBSD core team appoints a WG to explore transitioning from Subversion to Git.

• The FreeBSD Core Team is the governing body of FreeBSD.

Core approved source commit bits for Doug Moore (dougm), Chuck Silvers (chs), Brandon Bergren (bdragon), and a vendor commit bit for Scott Phillips (scottph).

The annual developer survey closed on 2019-04-02. Of the 397 developers, 243 took the survey with an average completion time of 12 minutes. The public survey closed on 2019-05-13. It was taken by 3637 users and had a 79% completion rate. A presentation of the survey results took place at BSDCan 2019.

The core team voted to appoint a working group to explore transitioning our source code 'source of truth' from Subversion to Git. Core asked Ed Maste to chair the group as Ed has been researching this topic for some time. For example, Ed gave a MeetBSD 2018 talk on the topic.

There is a variety of viewpoints within core regarding where and how to host a Git repository, however core feels that Git is the prudent path forward.

OpenBSD 6.6 Beta tagged

CVSROOT:    /cvs
Module name:    src
Changes by:    deraadt@cvs.openbsd.org    2019/08/09 21:56:02

Modified files:
    etc/root : root.mail
    share/mk : sys.mk
    sys/arch/macppc/stand/tbxidata: bsd.tbxi
    sys/conf : newvers.sh
    sys/sys : param.h
    usr.bin/signify: signify.1

Log message:
move to 6.6-beta

Preliminary release notes

Improved hardware support, including:

• clang(1) is now provided on powerpc.
• IEEE 802.11 wireless stack improvements:
• Generic network stack improvements:
• Installer improvements:
• Security improvements:
• + Routing daemons and other userland network improvements
• + The ntpd(8) daemon now gets and sets the clock in a secure way when booting even when a battery-backed clock is absent.
• + bgdp(8) improvements
• + Assorted improvements:
• + The filesystem buffer cache now more aggressively uses memory outside the DMA region, to improve cache performance on amd64 machines.
• The BER API previously internal to ldap(1), ldapd(8), ypldap(8), and snmpd(8) has been moved into libutil. See ber_read_elements(3).
• Support for specifying boot device in vm.conf(5).
• OpenSMTPD 6.6.0
• LibreSSL 3.0.X
• API and Documentation Enhancements
• Completed the port of RSA_METHOD accessors from the OpenSSL 1.1 API.
• Documented undescribed options and removed unfunctional options description in openssl(1) manual.
• OpenSSH 8.0

Project Trident 12-U5 update now available

This is the fifth general package update to the STABLE release repository based upon TrueOS 12-Stable.

• Package changes from Stable 12-U4

• Package Summary

  • New Packages: 20
  • Deleted Packages: 24
  • Updated Packages: 279

• New Packages (20)

  • artemis (biology/artemis) : 17.0.1.11
  • catesc (games/catesc) : 0.6
  • dmlc-core (devel/dmlc-core) : 0.3.105
  • go-wtf (sysutils/go-wtf) : 0.20.0_1
  • instead (games/instead) : 3.3.0_1
  • lidarr (net-p2p/lidarr) : 0.6.2.883
  • minerbold (games/minerbold) : 1.4
  • onnx (math/onnx) : 1.5.0
  • openzwave-devel (comms/openzwave-devel) : 1.6.897
  • polkit-qt-1 (sysutils/polkit-qt) : 0.113.0_8
  • py36-traitsui (graphics/py-traitsui) : 6.1.2
  • rubygem-aws-sigv2 (devel/rubygem-aws-sigv2) : 1.0.1
  • rubygem-default_value_for32 (devel/rubygem-default_value_for32) : 3.2.0
  • rubygem-ffi110 (devel/rubygem-ffi110) : 1.10.0
  • rubygem-zeitwerk (devel/rubygem-zeitwerk) : 2.1.9
  • sems (net/sems) : 1.7.0.g20190822
  • skypat (devel/skypat) : 3.1.1
  • tvm (math/tvm) : 0.4.1440
  • vavoom (games/vavoom) : 1.33_15
  • vavoom-extras (games/vavoom-extras) : 1.30_4

• Deleted Packages (24)

  • geeqie (graphics/geeqie) : Unknown reason
  • iriverter (multimedia/iriverter) : Unknown reason
  • kde5 (x11/kde5) : Unknown reason
  • kicad-doc (cad/kicad-doc) : Unknown reason
  • os-nozfs-buildworld (os/buildworld) : Unknown reason
  • os-nozfs-userland (os/userland) : Unknown reason
  • os-nozfs-userland-base (os/userland-base) : Unknown reason
  • os-nozfs-userland-base-bootstrap (os/userland-base-bootstrap) : Unknown reason
  • os-nozfs-userland-bin (os/userland-bin) : Unknown reason
  • os-nozfs-userland-boot (os/userland-boot) : Unknown reason
  • os-nozfs-userland-conf (os/userland-conf) : Unknown reason
  • os-nozfs-userland-debug (os/userland-debug) : Unknown reason
  • os-nozfs-userland-devtools (os/userland-devtools) : Unknown reason
  • os-nozfs-userland-docs (os/userland-docs) : Unknown reason
  • os-nozfs-userland-lib (os/userland-lib) : Unknown reason
  • os-nozfs-userland-lib32 (os/userland-lib32) : Unknown reason
  • os-nozfs-userland-lib32-development (os/userland-lib32-development) : Unknown reason
  • os-nozfs-userland-rescue (os/userland-rescue) : Unknown reason
  • os-nozfs-userland-sbin (os/userland-sbin) : Unknown reason
  • os-nozfs-userland-tests (os/userland-tests) : Unknown reason
  • photoprint (print/photoprint) : Unknown reason
  • plasma5-plasma (x11/plasma5-plasma) : Unknown reason
  • polkit-qt5 (sysutils/polkit-qt) : Unknown reason
  • secpanel (security/secpanel) : Unknown reason

Beastie Bits

• DragonFlyBSD - msdosfs updates
• Stand out as a speaker
• Not a review of the 7th Gen X1 Carbon
• FreeBSD Meets Linux At The Open Source Summit
• QEMU VM Escape
• Porting wine to amd64 on NetBSD, third evaluation report.
• OpenBSD disabled DoH by default in Firefox

Feedback/Questions

• Reinis - GELI with UEFI
• Mason - Beeping

[CHVT feedback]
DJ - Feedback
Ben - chvt
Harri - Marc's chvt question

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv