NOTES
This episode of BSDNow is brought to you by Tarsnap and the BSDNow Patreon

Headlines

The Birth of Unix

Help requested for three big items for Lumina

News Roundup

FreeBSD 13 on Thinkpad T460s

HardenedBSD January 2022 Status Report

OPNsense 22.1 "Observant Owl" released

Beastie Bits

• The early days of Unix at Bell Labs - Brian Kernighan (LCA 2022 Online)
• BastilleBSD User Survey Smallest desktop of the day with BSD: Raspberry Pi 400
• Reminder BSDCan 2022 - online only
• Joshua Stein Video: Q&A
• DNSSEC Mastery, second edition, creeping out *** ###Tarsnap
• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Alec - Playstation FreeBSD-Linux question
• Nelson - Interesting Interview
• Oscar - Omni OS

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

NOTES
This episode of BSDNow is brought to you by Tarsnap

Headlines

RISC-V: The New Architecture on the Block

• If you want more RISC-V, check out JT's interview with Mark Himelstein the CTO of RISC-V International *** ### OpenBSD on the Vortex86DX CPU *** ## News Roundup aka there’s been lots of releases recently so lets go through them: ### Lumina 1.6.1 ### opnsense 21.7.3 ### LibreSSL patches ### OpenBGPD 7.2 ### Midnight BSD 2.1.0 ### GhostBSD 21.09 ISO ### helloSystemv0.6

Tarsnap

• This weeks episode of BSDNow was sponsored by our friends at Tarsnap, the only secure online backup you can trust your data to. Even paranoids need backups.

Feedback/Questions

• Brandon - FreeBSD question
• Bruce - Fixing a weird Apache Bug
• Dan - zfs question

• Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv ***

This episode was brought to you by

Headlines

Portscout ported to OpenBSD

• Portscout is a popular utility used in the FreeBSD ports infrastructure
• It lets port maintainers know when there's a new version of the upstream software available by automatically checking the distfile mirror
• Now OpenBSD porters can enjoy the same convenience, as it's been ported over
• You can view the status online to see how it works and who maintains what
• The developer who ported it is working to get all the current features working on OpenBSD, and added a few new features as well
• He decided to fork and rename it a few days later ***

Sysadmins and systemd refugees flocking to BSD

• With all the drama in Linux land about the rapid changes to their init system, a lot of people are looking at BSD alternatives
• This "you got your Windows in my Linux" article (and accompanying comments) give a nice glimpse into the minds of some of those switchers
• Both server administrators and regular everyday users are switching away from Linux, as more and more distros give them no choice but to use systemd
• Fortunately, the BSD communities are usually very welcoming of switchers - it's pretty nice on this side! ***

OpenBSD's versioning schemes

• Ted Unangst explains the various versioning systems within OpenBSD, from the base to libraries to other included software
• In contrast to FreeBSD's release cycle, OpenBSD isn't as concerned with breaking backwards compatibility (but only if it's needed to make progress)
• This allows them to innovate and introduce new features a lot more easily, and get those features in a stable release that everyone uses
• He also details the difference between branches, their errata system and lack of "patch levels" for security
• Some other things in OpenBSD don't have version numbers at all, like tmux
• "Every release adds some new features, fixes some old bugs, probably adds a new bug or two, and, if I have anything to say about it, removes some old features." ***

VAXstation 4000 Model 90 booting NetBSD

• We found a video of NetBSD booting on a 22 year old VAX workstation, circa 1992
• This system has a monstrous 71 MHz CPU and 128MB of ECC RAM
• It continues in part two, where we learn that it would've cost around $25,000 when it was released!
• The uploader talks about his experiences getting NetBSD on it, what does and doesn't work, etc
• It's interesting to see that such old hardware isn't necessarily obsolete just because newer things have come out since then (but maybe don't try to build world on it...) ***

Interview - Ken Moore - ken@pcbsd.org

The Lumina desktop environment

Special segment

Lumina walkthrough

News Roundup

Suricata for IDS on pfSense

• While most people are familiar with Snort as an intrusion detection system, Suricata is another choice
• This guide goes through the steps of installing and configuring it on a public-facing pfSense box
• Part two details some of the configuration steps
• One other cool thing about Suricata - it's compatible with Snort rules, so you can use the same updates
• There's also another recent post about snort as well, if that's more your style
• If you run pfSense (or any BSD) as an edge router for a lot of users, this might be worth looking into ***

OpenBSD's systemd API emulation project

• This story was pretty popular in the mainstream news this week
• For the Google Summer of Code, a student is writing emulation wrappers for some of systemd's functions
• There was consideration from some Linux users to port over the finished emulation back to Linux, so they wouldn't have to run the full systemd
• One particularly interesting Slashdot comment snippet: "We are currently migrating a large number (much larger than planned after initial results) of systems from RHEL to BSD - a decision taken due to general unhappiness with RHEL6, but SystemD pushed us towards BSD rather than another Linux distro - and in some cases are seeing throughput gains of greater than 10% on what should be equivalent Linux and BSD server builds. The re-learning curve wasn't as steep as we expected, general system stability seems to be better too, and BSD's security reputation goes without saying."
• It will NOT be in the base system - only in ports, and only installed as a dependency for things like newer GNOME that require such APIs
• In the long run, BSD will still be safe from systemd's reign of terror, but will hopefully still be compatible with some third party packages like GNOME that insist on using it ***

GhostBSD 4 previewed

• The GhostBSD project is moving along, slowly getting closer to the 4 release
• This article shows some of the progress made, and includes lots of screenshots and interesting graphical frontends
• If you're not too familiar with GhostBSD, we interviewed the lead developer a little while back ***

NetBSD on the Banana Pi

• The Banana Pi is a tasty alternative to the Raspberry Pi, with similar hardware specs
• In this blog post, a NetBSD developer details his experiences in getting NetBSD to run on it
• After studying how the prebuilt Linux image booted, he made some notes and started hacking
• Ethernet, one of the few things not working, is being looked into and he's hoping to get it fully supported for the upcoming NetBSD 7.0
• They're only about $65 as of the time we're recording this, so it might be a fun project to try ***

Feedback/Questions

• Antonio writes in
• Garegin writes in
• Erno writes in
• Brandon writes in ***

This episode was brought to you by

Headlines

FreeBSD foundation's new IPSEC project

• The FreeBSD foundation, along with Netgate, is sponsoring some new work on the IPSEC code
• With bandwidth in the 10-40 gigabit per second range, the IPSEC stack needs to be brought up to modern standards in terms of encryption and performance
• This new work will add AES-CTR and AES-GCM modes to FreeBSD's implementation, borrowing some code from OpenBSD
• The updated stack will also support AES-NI for hardware-based encryption speed ups
• It's expected to be completed by the end of September, and will also be in pfSense 2.2 ***

NetBSD at Shimane Open Source Conference 2014

• The Japanese NetBSD users group held a NetBSD booth at the Open Source Conference 2014 in Shimane on August 23
• One of the developers has gathered a bunch of pictures from the event and wrote a fairly lengthy summary
• They had NetBSD running on all sorts of devices, from Raspberry Pis to Sun Java Stations
• Some visitors said that NetBSD had the most chaotic booth at the conference ***

pfSense 2.1.5 released

• A new version of the pfSense 2.1 branch is out
• Mostly a security-focused release, including three web UI fixes and the most recent OpenSSL fix (which FreeBSD has still not patched in -RELEASE after nearly a month)
• It also includes many other bug fixes, check the blog post for the full list ***

Systems, Science and FreeBSD

• Our friend George Neville-Neil gave a presentation at Microsoft Research
• It's mainly about using FreeBSD as a platform for research, inside and outside of universities
• The talk describes the OS and its features, ports, developer community, documentation, who uses BSD and much more ***

Interview - Reyk Floeter - reyk@openbsd.org / @reykfloeter

OpenBSD's HTTP daemon

Tutorial

A crash course on HAMMER FS

News Roundup

OpenBSD's rcctl tool usage

• OpenBSD recently got a new tool for managing /etc/rc.conf.local in -current
• Similar to FreeBSD's "sysrc" tool, it eliminates the need to manually edit rc.conf.local to enable or disable services
• This blog post - from a BSD Now viewer - shows the typical usage of the new tool to alter the startup services
• It won't make it to 5.6, but will be in 5.7 (next May) ***

pfSense mini-roundup

• We found five interesting pfSense articles throughout the week and wanted to quickly mention them
• The first item in our pfSense mini-roundup details how you can stream Netflix to in non-US countries using a "smart" DNS service
• The second post talks about setting ip IPv6, in particular if Comcast is your ISP
• The third one features pfSense on Softpedia, a more mainstream tech site
• The fourth post describes how to filter HTTPS traffic with Squid and pfSense
• The last article describes setting up a VPN using the "tinc" daemon and pfSense
• It seems to be lesser known, compared to things like OpenVPN or SSH tunnels, so it's interesting to read about
• This pfSense HQ website seems to have lots of other cool pfSense items, check it out ***

OpenBSD's new buffer cache

• OpenBSD has traditionally used the tried-and-true LRU algorithm for buffer cache, but it has a few problems
• Ted Unangst has just switched to a new algorithm in -current, partially based on 2Q, and details some of his work
• Initial tests show positive results in terms of cache responsiveness
• Check the post for all the fine details ***

BSDTalk episode 244

• Another new BSDTalk is up and, this time around, Will Backman interviews Ken Moore, the developer of the new BSD desktop environment
• They discuss the history of development, differences between it and other DEs, lots of topics
• If you're more of a visual person, fear not, because...
• We'll have Ken on next week, including a full "virtual walkthrough" of Lumina and its applications ***

Feedback/Questions

• Ghislain writes in
• Raynold writes in
• Van writes in
• Sean writes in
• Stefan writes in ***