Posts in category OpenBSD
In Other BSDs for 2017/07/22
It’s accidental how-to week!
OpenSMTPD under OpenBSD with SSL/VirtualUsers/Dovecot (via) and
OpenSMTPD and Dovecot under OpenBSD with MySQL support and SPAMD. (via)
Introducing anvil – Tools for distributing ssl certificates, plus examples of usage on FreeBSD.
OpenBSD on the Huawei MateBook X.
Add vmctl send and vmctl receive.
openbsd [...]
Add vmctl send and vmctl receive
As we see from the commit message, new developer Pratik Vyas (pd@) adds the ability to do paused VM migrations for VMM.
Mike Larkin also writes on Twitter:
#OpenBSD vmctl(8) : vmctl send myvm | ssh mlarkin@somewhere.com vmctl receive Yes, it's that easy.
Ed: this is *paused* migrations, not live migrations.
In Other BSDs for 2017/07/15
Backlog: cleared.
Elvish: friendly and expressive shell for Linux, macOS and BSDs. Linked just because they bothered to mention BSD. (via)
acme.sh: getting free SSL certificates – installation configuration on FreeBSD.
Writing a NetBSD kernel module. (via)
ZFS Is the Best Filesystem (For Now…) (via)
Building an IPsec Gateway With OpenBSD [...]
OpenBSD and the modern laptop
Over at his blog, Undeadly co-editor Peter Hansteen describes the experience of installing OpenBSD-current on a new laptop.
The article, OpenBSD and the modern laptop, goes into some detail on the install procedure, and hits only minor snags even when using modern and recent additions such as UEFI boot.
The conclusion is that OpenBSD i [...]
In Other BSDs for 2017/07/08
This one wrote itself almost in one night from articles I had stored up.
Latest blog post – UEFI multi-boot setup with Linux and most of the BSDs! (via)
State of graphics support across BSDs
Daemons and friendly Ninjas. (via)
FreeBSD 11.1-RC1 out.
Kernel relinking status from Theo de Raadt.
On the Insecurity (Read more...)
Request for testing: https://beta.und...
TL;DR - A modernised version of Undeadly is available for testing at <https://beta.undeadly.org/>.
Broken features of the current site have been fixed, removed, or replaced.
The new software supports - and, where appropriate, requires - HTTPS. Testing, contributions, and constructive feedback would be appreciated.
An effort to mo [...]
Ted Unangst on notable recent changes...
The flak reports by Ted Unangst (tedu@) continue with part 624.
Update - part 625
Kernel relinking status from Theo de ...
As you may have heard (and as was mentioned in an earlier article), on recent OpenBSD snapshots we have KARL, which means that the kernel is relinked so each boot comes with a new kernel where all .o files are linked in random order and with random offsets. Theo de Raadt summarized the status in a message to the (Read more...)
In Other BSDs for 2017/07/01
I am entertained by how Github seems to randomly burp up historical software artifacts on a semi-regular basis. (see link below)
Historical: My first OpenBSD Hackathon. (via)
Using Let’s Encrypt within FreeBSD.org – lessons learned and advice. (via)
Which is the most laptop friendly BSD to learn with?
Nextcloud via httpd on Op [...]
On the Insecurity of TIOCSTI
Theo de Raadt (deraadt@) provided some history on the insecurity of TIOCSTI [simulate typed input on terminal], with a proposal to disable it on OpenBSD:
[...] there\'s always been the risk
that a program manages to retain tty association beyond it\'s intended
lifetime, and then it can perform injections with TIOCSTI.
So I\'ve always w [...]
BSDCan 2017 – Trip report doubl...
The OpenBSD presence at the just concluded BSDCan was quite strong, and here is the first trip report, from Phillipp Buehler:
Prologue
Most overheard in Tokyo was "see you in Ottawaaaaah", so with additional "personal item" being Groff I returned home to plan the trip to BSDCan.
Dan was very helpful with getting al [...]
d2k17 hackathon report: Martin Pieuch...
Our next report from the d2k17 hackathon comes from Martin Pieuchot, who writes:
Hackathons are generally good to start or finish something, at Starnberg
I managed to do both.
I came to unlock the forwarding path and thanks to the multiple reviews
from bluhm@, sashan@ and claudio@ it happened! It started as a boring
hackathon b [...]
d2k17 Hackathon Report: Alexander Blu...
Alexander Bluhm (bluhm@) wrote in with a hackathon report:
As usual hackathons are a great time to get things commited. All
the other developers are around, you can discuss ideas and get code
reviewed quickly.
To move towards network input without big kernel lock, I have looked
at the protocol functions and refactored them. Especial [...]
In Other BSDs for 2017/06/25
Back to overflow, which sort of makes my life easier.
BCHS: BSD, C, httpd, SQLite. Linked before, so comments on source links are where to look if you are already familiar with BHCS.
Possible stack vulnerabilities in BSD-land.
How to disable cores in OpenBSD?
Nextcloud via httpd on OpenBSD. (via)
MP-safe Networking in NetBSD. (Read more.. [...]
OpenBSD now has Trapsleds to make lif...
You heard it here (or on tech@) first: Trapsleds are in, and it makes OpenBSD even safer. Work done by Todd Mortimer and submitted to tech@ in the Trapsleds thread was later committed by Theo de Raadt.
Todd\'s message to tech says,
I have attached a patch that converts NOP padding from the assembler
into INT3 padding on amd64. The [...]
In Other BSDs for 2017/06/17
All found-this-week links, now.
KARL – kernel address randomized link. (via)
g4u (Ghost for Unix) 2.6, a venerable imaging tool, released.
Native Command Queuing – merging and testing. (NetBSD)
New TrueNAS x10, a BSD-based storage product.
secmodel sandbox : An application sandbox for NetBSD (draft). (via)
FreeBSD 11.1-BETA is out.
Fr [...]
KARL – kernel address randomize...
In a
message to the tech@ mailing list,
Theo de Raadt (deraadt@) has announced a new randomization feature for
kernel protection:
Over the last three weeks I\'ve been working on a new randomization
feature which will protect the kernel.
[...]
Recently I moved all our kernels to a new mapping model, with patrick
and visa taking ca [...]
In Other BSDs for 2017/06/10
I think I’ve finally caught up on my BSD link backlog.
d2k17 Hackathon Report: Ken Westerback on XS_NO_CCB removal and dhclient link detection.
d2k17 Hackathon Report: Stefan Sperling on USB audio, WiFi Progress.
NCIS: FreeBSD.
UbuntuBSD is now DEAD!
FreeBSD Core Team member: “[installer] might be the only part of OpenBSD that is [...]
OpenBSD Daily, code review, and you
OpenBSD developer Adam Wolk (awolk@) talks about a community effort to read at least one C source file from OpenBSD every day at https://blog.tintagel.pl/2017/06/09/openbsd-daily.html.
I made a new years resolution to read at least one C source file from OpenBSD daily. The goal was to both get better at C and to contribute more to the b [...]
Running OpenBSD on Azure
A new Microsoft Azure blog entry, Running OpenBSD on Azure, describes OpenBSD support:
Today we are happy to share you that Azure supports OpenBSD 6.1 with the collaboration effort from Esdenera and Microsoft. Meanwhile Esdenera brings their firewall product based on OpenBSD on board Azure Marketplace now.
[Esdenera is Reyk (reyk@) Fl& [...]
