Just how inadvisable is it to run -current snapshots on #openbsd?
OpenBSD Desktop
The time of the #OpenBSD #Desktop is now and doesn't matter when you read this, must be #minimalist
An excellent solution from @solene 👇 to protect #Wireguard tunnels on #OpenBSD from #TunnelVision attacks.
Have a closer look at the example about rdomain 0 and rdomain 1
https://dataswamp.org/~solene/2021-10-09-openbsd-wireguard-exit.html
A new attack was published, named TunnelVision, explaining how to snoop all the unencrypted VPN traffic through a local system.
In summary, the attack make the local DHCP server auto configuring workstations network to send a gateway address that is similar to the one used by the VPN but with a higher priority, so the operating system will send its VPN traffic to that address instead of the VPN server.
This attack is not discrete, it could be easily spotted in the network settings.
#Android seems unaffected.
#QubesOS is immune as long as you do not establish a VPN in the qube connected to the real world network (by defaut it's either sys-net or sys-firewall).
#OpenBSD is certainly affected as DHCP option 121 allowing that trick is implemented into dhcpleased (the dhcp client).
However, using a different rdomain for the VPN should prevent any kind of snooping. I wrote a guide explaining how to use WireGuard tunnels on different rdomains https://dataswamp.org/~solene/2021-10-09-openbsd-wireguard-exit.html
Linux users using WireGuard can configure namespaces as a protection: (thanks @zgou for the link)
=> https://www.wireguard.com/netns/
Tor users do not have to worry, this does not affect Tor at all (it works at a different layer in the network). However, in case you use Tor over VPN, this could potentially leak the fact that you use Tor, but Tor data is still encrypted.
For an #introduction
I'm Laurent, a computer science student on the second year of my bachelor's degree. I come from Quebec City.
I like to program in #Qt with C++ and #Lisp. I'm passionate about operating systems, my favourite being #FreeBSD. I also use #OpenBSD and my #Linux distribution of choice is #OpenSUSE.
Other than tech I like coffee, beer, books, series and music. I listen mainly to post-punk and jazz. I'm currently reading l'Île Mystérieuse by Jules Verne (almost done with it). I like Nietzsche, Sartre, Camus, Dostoyevsky, Balzac and Aragon.
I like philosophy and politics. I'm a syndicalist and a nihilist (although somewhat optimistic). I think that collectivism is beautiful, but in the world we live in it can only bring pain because bad actors often win. My philosophy is to live my own life and try not to look too far at the bad that happens, because it's overwhelming and it always exists. There will always be bad things happening and focusing on these things makes you miserable. But that doesn't mean you shouldn't fight to prevent bad from happening for someone you hold dearly.
I live in Quebec City and I like my city. It's not too big, not too small, although it's very car centered and I don't like cars. I like my university, l'Université Laval. After my bachelor's, I want a master's degree and if I'm lucky enough I want to go for a doctorate's.
Software is my biggest passion, I prefer it open source. I think permissive licenses are fine and I understand GNU's philosophy but I wouldn't apply it to my software. I don't like holding a gun to someone's head for them to give back, I think most people are good enough to do it themselves.
Well this dragged on. My alts are @clf@mas.to and @xi, I will be using them all but bsd.cafe is my new home. I prefer my community to be BSD oriented but I don't really like glitch soc. It holds the mastodon version back for a few features that no one is using.
Pleased to meet you all!
@solene @RussSharek I'm happy to hear that the situation is better than I recalled, so thanks for the clarification!
I will also add, for @ruhrscholz's benefit (if not aware), that the recent performance improvements in #openbsd amd64/7.4 & 7.5 due to addition of multi-process & multi-threading support have been quite significant and welcome. That said, I believe guest VMs still only get one CPU. (Correct me if I'm wrong.)
openbsd-check-outdated: a shell script for #OpenBSD to display the updated state of locally installed packages compared to the Repology database - Tool by Solène Rapenne @solene https://git.sr.ht/~solene/openbsd-check-outdated
@ruhrscholz #OpenBSD's vmm(4)/vmd(8) doesn't support virtual frame buffers (VFB) at this time, only serial console access. I _highly_ doubt one could get Windows to boot in such a way. Even most Linux distributions don't boot. I've run Ubuntu (have to tweak the installer to enable serial console on boot) and others tend to use Alpine Linux IIRC.
So this is the year of the #OpenBSD #Desktop and must be #minimalist 
! 🐡
https://x61.ar/log/2024/05/06052024135732-openbsd_desktop.html
So this is the year of the #OpenBSD #Desktop and must be #minimalist ! 🐡
https://x61.ar/log/2024/05/06052024135732-openbsd_desktop.html
#gameoftrees 0.99 should show up in #OpenBSD 7.5 -stable packages within a few days. This version update adds client-side HTTPS support when cloning/fetching, and fixes several issues in the gotd server.
In general, don't forget to occasionally run pkg_add -u even on OpenBSD -release and -stable systems!
Many changes to openbsd-check-outdated with 1.2.0 release
- cache reduced from 24 to 20h
- q flag to only output packages whose status changed since last time, useful for cron jobs
- lines with a status change are displayed in bold (except when -q to not screw email/logs display)
Anyone knows if it's possible to add my own package repository with binary packages to #openbsd ? Not sure where to look.
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟱/𝟬𝟲 (Valuable News - 2024/05/06) available.
https://vermaden.wordpress.com/2024/05/06/valuable-news-2024-05-06/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟱/𝟬𝟲 (Valuable News - 2024/05/06) available.
https://vermaden.wordpress.com/2024/05/06/valuable-news-2024-05-06/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
In case you missed it, I'd suggest to read this excellent article by @mms : Why I run a BSD on a PC
https://michal.sapka.me/bsd/why-bsd/
#RunBSD #FreeBSD #OpenBSD #NetBSD #DragonFlyBSD #NomadBSD #GhostBSD #helloSystem
@markd @unix_discussions I don't know. Let's see if we can get someone from #OpenBSD, #NetBSD, and #DragonflyBSD to explain the status of their #Wayland support.
@unix_discussions Perhaps I missed it on my first reading, but I'm very curious as to the long-term plans of all the BSDs wrt X and Wayland (or perhaps some third option?).
My sense, tho I'm not close to such things, is that Wayland will eventually oust X from the Linux world leaving X as a largely orphaned graphics system only used, but barely maintained, by #BSD.
I need a decent VPS host that specialises in #BSD, specifically
#OpenBSD based hosting. One that has a good track record for reliability, also good customer support, and general security practises.
I can google this, but I have a lot of BSD people following me, so I'm asking this here, because my followers will know better.
I'm moving all my self-hosted servers over to OpenBSD but some of it is intentionally outsourced, for a few reasons. If people can reply with suggestions that'd be super.
@mms
If you just want to track what's committed into *BSD and do not want to be bothered by discussions/flames, FreshBSD could be your friend.
boosted
@solene @sizeofvoid I was wondering about getting Plasma 6 to work on there now that Wayland is getting #OpenBSD support.
Kinda 2011-2012 vibes for me (from the #FreeBSD land).
Just sharing my thoughts - not an #OpenBSD (or @solene) 'shame' attempt.
At 2010/11 mine 'FreeBSD Binary Upgrade' article was published in the BSD Magazine.
Later in 2011/09 I wrote 'HOWTO: Keeping FreeBSD Base System and Packages Up to Date' here:
- https://daemonforums.org/showthread.php?t=6296
... which later translated into 'Keeping Base System & Packages Up to Date' on 2012/01 in BSD Magazine.
Then some time later PKGNG came as 'pkg(8)' and everything changed for the better.
I hope one day OpenBSD will make similar leap'
Kinda 2011-2012 vibes for me (from the #FreeBSD land).
Just sharing my thoughts - not an #OpenBSD (or @solene) 'shame' attempt.
At 2010/11 mine 'FreeBSD Binary Upgrade' article was published in the BSD Magazine.
Later in 2011/09 I wrote 'HOWTO: Keeping FreeBSD Base System and Packages Up to Date' here:
- https://daemonforums.org/showthread.php?t=6296
... which later translated into 'Keeping Base System & Packages Up to Date' on 2012/01 in BSD Magazine.
Then some time later PKGNG came as 'pkg(8)' and everything changed for the better.
I hope one day OpenBSD will make similar leap'
@thomholwerda Unfortunately, I haven't tried #Xfce under #OpenBSD, so I'm not sure how the sound applet works with sndio. That said, a reboot is rarely required for audio issues, so a `rcctl restart sndiod` might be all that's necessary and/or a logout/login cycle to restart Xfce.
If you want sndiod(8) to automatically switch to the USB audio device, the FAQ's media section covers how to do so by setting sndiod flags using rcctl(8):
KDE Plasma 6 on #OpenBSD
https://www.youtube.com/watch?v=GnOxNs0BGtM
Continuous effort of @sizeofvoid 
Based on https://bsd.network/@solene/112383880706512101, it's now easier than ever to find #OpenBSD ports that you use, but are out of date in OpenBSD's ports tree.
Is the cultural norm that we should contact the official maintainer and get approval before emailing the patch to openbsd-ports? Or just send it to the mailing list with CC? Something in between?
Let's assume the patch is a very simple version bump as in https://marc.info/?l=openbsd-ports&m=171256291310026 and that we've tested it ourselves to our satisfaction.
If I broke anybody’s igc(4) on #OpenBSD please tell me asap. I finally committed TSO capabilities to #igc today.
https://github.com/openbsd/src/commit/2011187a052fd12d770845f84390408929b7ba9c
I'm proud and happy to announce the first release of my project openbsd-check-outdated
It is a shell script scanning your installed packages and check on repology if a newer version exists.
https://git.sr.ht/~solene/openbsd-check-outdated
You need a checkout of the ports tree, jq and curl to make it work.
I wrote it because I prefer to update packages I actually use than random packages I don't care about.
Is there a game like Dwarf Fortress, which is playable on #OpenBSD?
#BSDCan 20th anniversary edition is May 29th through June 1st, 2024!
Come join us in #Ottawa for two days of tutorials and two days of talks - registration is open https://www.bsdcan.org/2024/registration.php schedule https://indico.bsdcan.org/event/1/timetable/?#all.detailed #openbsd #freebsd #netbsd
Distribution of the most used operating systems on #BoxyBSD. Most users tend to use #FreeBSD for their free VM. #OpenBSD and #OpenIndiana (still in beta) share the second place, followed by #NetBSD.
Just got #OpenBSD running on my Radxa Zero 3W #arm64 #sbc .
DMESG: https://marc.info/?l=openbsd-bugs&m=171479651109832&w=2
@unix_discussions Nice summary. Do you have also a list of command differences?
For example #freebsd uses pkg, #openbsd uses pkg_add and the .conf files locations differs also.
Vous aimez #OpenBSD et vous êtes francophone ?
Après l'arrêt de la communauté obsd4a, nous n'avions plus de lieu pour discuter de notre système favoris dans la langue de Molière.
Je vous annonce le lancement d'un forum francophone afin de nous réunir à nouveau.
Merci l'ami @prx pour l'hébergement et pour toujours se laisser embarquer dans mes idées folles
boosted
OK, before I search my old server in the basement, order RAM and SSDs and start pulling out my hair while testing, I'll #askfedi first:
How well does #openbsd as vm in #proxmox ?
I'm thinking of migrating my #nextcloud server to vm as I think the current hardware is dying.
I did some reading online but maybe someone here has first hand experience?
OpenSMTPD table protocol changes, now with the backstory https://www.undeadly.org/cgi?action=article;sid=20240503110540 #openbsd #opensmtpd #smtp #email #tables #protocol
Is there an #OpenBSD audio volume control program with a terminal UI?
EuroBSDCon 2024 registration is now open!
Important dates:
2024-05-02: Registration opens https://tickets.eurobsdcon.org
2024-06-15: Proposal submission deadline https://events.eurobsdcon.org/
2024-07-15: Schedule published
2024-09-19—22: EuroBSDCon 2024 in Dublin
See you in #Dublin for the #european #bsd event of the year!
Version 7.4.2024.01.15-p1 of #FreeBSD #relayd has just been released and is available in the FreeBSD Ports tree:
https://cgit.freebsd.org/ports/commit/?id=a66b8f6102fe56d83583db9f4041f3e7fa6c1ba9
One of the interesting changes is fix for a crash that can be triggered by a config reload. The commit message contains a nice write-up:
We are working on getting the fix upstreamed to #OpenBSD. Here's the bug report if you want to take a look:
boosted
Are you ready for the European *BSD event of the year 2024? 😈⛳🐡
You can now already register for the event at https://tickets.eurobsdcon.org
Register early and often! 
While you are add it you can still drop your abstract like it's 🔥!
https://events.eurobsdcon.org/
The schedule will be published on 🗓️ 2024-07-15!
For all other information you can check https://2024.eurobsdcon.org/
EuroBSDCon 2024 in Dublin, Ireland 🇮🇪
September 19-22, 2024
#RUNBSD #FreeBSD #NetBSD #OpenBSD #EuroBSDCon #EuroBSDCon2024
I converted my little #termbar for #OpenBSD into a C (sorry about my code) version. Almost the same version, still a WIP but usable so far.
https://github.com/gonzalo-/termbarc
I converted my little #termbar for #OpenBSD into a C (sorry about my code) version. Almost the same version, still a WIP but usable so far.
https://github.com/gonzalo-/termbarc
I usually use #Chromium for work, but I've noticed that it's been a pain to load pages since Chromium 124. I found out that it's #Google's "TLS 1.3 hybridized Kyber support" causing the issue since it's enabled by default. I had to go into chrome://flags and disable it, and now everything's working as expected.
I had to test with #Firefox initially to make sure it wasn't my #OpenBSD machine with the issue since the infrastructure change. Good ol' Firefox let me know that wasn't the case; It was Chromium all along.
New #bsd article:
"There’s a multitude of Operating Systems to choose from. You may have been using something like Windows or MacOS and be perfectly happy with it. You can step up and use Linux, Haiku or even Amiga OS. So, why do I think a BSD system may be a great choice?"
@vidak oh yeah so my #openbsd #floppy floppy75 is secretly just aspirational as well. I wonder what #lisp could go on it. It's not my specialty x_x. What's picolisp or something? https://software-lab.de/down.html
**BSD Mail Project Update!**
Hello everyone! I wanted to share some exciting updates about the development of BSD Mail, our privacy-focused email service designed with robustness, security, and transparency in mind. Here’s a deep dive into the technical choices I've made, focusing on my use of open source solutions and open protocols:
🌍 **Servers & Location**
- We're running on two physical servers:
- One hosted by OVH in France
- Another by Hetzner in Germany
- Both servers operate on FreeBSD with NVMe drives in a ZFS mirror configuration for speed and data integrity.
🔒 **Virtualization & Security**
- We utilize jails on both servers to ensure isolated environments for different services, managed via BastilleBSD. On one server, jails are set up directly on the hardware, whereas the other server employs nested jails.
- Each server hosts a bhyve VM running OpenBSD with OpenSMTPD for handling SMTP duties securely.
🔗 **Networking**
- A Wireguard setup connects the two servers, facilitating routing capabilities so that jails and VMs can communicate seamlessly, supporting both IPv4 and IPv6.
📧 **Email Services**
- **Dovecot** is configured for maildir replication across the servers using Dovecot sync, ensuring email availability and redundancy.
- **Rspamd** instances are tied to local KeyDB jails, set up in master-master replication for consistent and reliable spam detection and greylisting.
- **ClamAV** runs in corresponding jails for virus scanning, maintaining a high level of security.
- **SOGo** provides a web interface for email management, connected to MySQL databases in master-master replication to handle sessions and authentication smoothly.
💾 **Data Management**
- Email data is stored on separate, encrypted ZFS datasets to secure emails at rest.
- MySQL databases are used for storing credentials and managing sessions for SOGo, also in a master-master replication setup. Importantly, all passwords are securely hashed using bcrypt, ensuring they are salted and safe.
🔎 **Monitoring & Reliability**
- Our DNS is managed through BunnyNet, which continuously monitors our server status. Should one server—or a specific service—become unavailable, DNS configurations are dynamically adjusted to avoid directing users to the affected IP until full service is restored.
🌐 **Commitment to Open Source and Open Protocols**
- Every component of BSD Mail is built exclusively using open source software and open protocols. This commitment is crucial for ensuring data freedom and the reliability of the solutions we use.
This setup not only emphasizes our commitment to privacy and security but also our dedication to maintaining an open and transparent platform.
We're excited to bring you a service where your privacy, data integrity, and freedom are prioritized. Stay tuned for more updates!
#BSDMail #OpenSource #Privacy #FreeBSD #OpenBSD #EmailHosting #Email
If you enjoy the Network Shell, Tom Smyth's "Managing OpenBSD Networks with NSH" tutorial at #BSDCan in #Ottawa on May 29th, 2024 https://indico.bsdcan.org/event/1/timetable/#20240529.detailed may be just the thing #openbsd #freebsd #networking
Battle testing PHP fopen, SQLite, PostgreSQL and MariaDB on #FFS2, #UFS, #ext4, #XFS and #ZFS, published: 20240122 modified: 20240123,
<could not find a name>
https://unixdigest.com/articles/battle-testing-php-fopen-sqlite-postgresql-and-mariadb-on-ffs-ufs-ext-xfs-and-zfs.html
@solene #OpenBSD 7.4 FFS2 fared better than #FreeBSD 14 UFS with #SoftUpdates (in the #powerCutTests).
Does TLS sound like an ominous hiss to you? @mwl's #bsdcan TLS Tutorial on May 30th 2024 in #ottawa will enlighten you to core #internet #security tech and hint strongly at what could come back to bite you. https://indico.bsdcan.org/event/1/timetable/#20240530.detailed #tls #ssl #security #openbsd #freebsd #netbsd #networking
Just about a month from now, #BSDCan starts in #Ottawa. Go to https://www.bsdcan.org/2024/ and look around, then go to https://indico.bsdcan.org/event/1/registrations/ (via https://www.bsdcan.org/2024/registration.php if you like) to register! #bsd #netbsd #openbsd #freebsd #freesoftware #opensource #development
For my “why you should use bsd desktop” article (wip) I’d like to link to people’s technical reasons. I’ve already got a great one from @vermaden (the “quare one”) but I’d love to have also something from open, net and dragon.
Have you written something like this by any chance? The more detailed walkthrough the tech stack of flavor of your choosing and the more examples of your usage the better!
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟰/𝟮𝟵 (Valuable News - 2024/04/29) available.
https://vermaden.wordpress.com/2024/04/29/valuable-news-2024-04-29/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟰/𝟮𝟵 (Valuable News - 2024/04/29) available.
https://vermaden.wordpress.com/2024/04/29/valuable-news-2024-04-29/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Durr. I wrongly thought that staff users had the same resource limits as build in #openbsd . quintin-- was right I just had to increase resource limits to build #veilid . (And comment out the error message using an out of scope macro in openbsd.rs). So now I am happily in the cli (actually a #tui) but invalid contact method for bootstrap ;_;
Anyway now that I've successfully built #debug what should I try next ? @LambdaCalculus @TheGibson Sharpsign tagging-too-important-people @Wrewdison
When you need to solve keyboard problems on #Linux that you don't have on an #OpenBSD laptop... 😩
https://www.reddit.com/r/MechanicalKeyboards/comments/tgjvp2/comment/iv1g2fg/
Wayland 1.23 Alpha Released With OpenBSD Support & New APIs
I will do a stream "How to create an OpenBSD port" based on my own project rigg at 23:00 UTC (in about 3 hours).
Stream:
https://twitch.tv/thfrw
VOD of my port creation is up on YouTube:
My #OpenBSD 7.5 shirt arrived today.
Passphrase timeout for disk decryption at boot added (potential battery lifesaver) https://www.undeadly.org/cgi?action=article;sid=20240426083308 #openbsd #fde #encryption #passphrase #efi #boot #timeout #batterysaver
Coming up: I will do a stream of how to update a port on #OpenBSD (likely beginner-level difficulty) tonight at UTC midnight (25-Apr, 00:00).
I'm estimating this will be less than 20 minutes long. Will upload it to YouTube afterwards.
Oooh! 
I forgot to post this yesterday. My #OpenBSD 7.4 shirt finally arrived last night! 
Just in time for the weekend! 
Ever have your laptop unhibernate in your bag? E.g: lid accidentally open, or hit the power button (e.g: side-mounted button), and drain your battery?
#OpenBSD -current has cool new bootloader feature, configurable in boot.conf(5), "machine idle [secs]", which will poweroff your machine when idling at the bootloader.
Note: This is only supported on EFI machines, and when using disk encryption.
kn@ modified src/sys/*: Add boot.conf(8) 'mach idle [secs]' to halt at idle passphrase prompts
Enable users to power down their machines if there was no input after N seconds during disk descryption.
Motivation is to save battery and prevent pocket heaters when notebooks unhibernate (e.g. lid accidentally opened) and sit at "Passphrase: ".
Only available on efi(4) systems as the timeout is saved as EFI variable; mostly because that's trivial to do, but also because we lack a better mechanism to configure that and persist such data without the root disk.
Discussed with many, starting at h2k23
OK Tests gnezdo
We had nice talks about improving #BoxyBSD, getting new users attracted into #BSD based systems like #FreeBSD, #OpenBSD, #NetBSD but also covering the lacks of it. Outcome was, that a one already worked on that which might result in a new community project (which may also result into a new service). I don’t want to teaser too much, the related persons will provide more details and insights. It was a great first meeting, looking forward into the next upcoming ones!
More details and participating informations at: https://wiki.bsd.cafe/docs:weekly-bsdpub
For my #ThrowbackThursday, here's a snapshot of my desk from 2013. Although my workspace was pretty cluttered then and still is, despite being in a different house now. Under the table, there was a tower PCs, running #FreeBSD. The laptop that was on was using #MacOS, while the mini ITX desktop was powered by #NetBSD with #Xen, hosting various services in some domUs. My smartphone at the time was a QWERTY-equipped Samsung #Android, which I had chosen in the hopes of finding a keyboard experience similar to the superb one offered by #BlackBerry. Additionally, there was another laptop beneath the phones operating on #OpenBSD. The Dockstar, running NetBSD, served as my file server; it even had remote access, albeit with a modest broadband speed of just 1.5 Mbit/sec.
Ah, the good old days. 🙂
Just wrapped up the first virtual meeting of 'BSD Pub,' hosted by @gyptazy
Had a delightful and friendly conversation with wonderful folks, and some really interesting ideas emerged for the future. Thanks to everyone and... looking forward to the next meeting!
Details will be posted on the corresponding page: https://wiki.bsd.cafe/docs:weekly-bsdpub
#BSDPub #BSD #BSDCafe #OpenSource #Community #FreeBSD #OpenBSD #NetBSD #DragonFlyBSD #RunBSD
A recent kerfuffle over a issues in a popular firewall out there makes me think it's time to point to an article I wrote about my favorite -
"A Few of My Favorite Things About The OpenBSD Packet Filter Tools" https://nxdomain.no/~peter/better_off_with_pf.html (or with nicer formatting but trackers https://bsdly.blogspot.com/2022/09/a-few-of-my-favorite-things-about.html) #firewalls #pf #openbsd
Exquisite currently has 25 members, whom collectively have Tooted 6967 posts. To protect our community, we currently have 1408 domain blocks in place, aside from the entire IP space from big tech instances in our firewall. We keep 30 days of backups, in a different datacenter. Our database size is 5,02GB and we use 5 Sidekiq processes (25 threads each, totalling up to 125 threads).
Our stack runs on #OpenBSD (-current), with PostgreSQL 16 behind pgbouncer. We are currently using Ruby 3.2 and we are on the latest commit of glitch-soc (113c931).
We have two admins, whom have a pretty laid back job, as our community really is exquisite 
. We have handled a total of 20 reports since december 2022.
A huge thank you to our members. Serving you has been a pleasure 
Interesting, on #OpenBSD, git depends on got
got provides git-receive-pack and git-upload-pack
https://github.com/openbsd/ports/commit/84549790d4f21d21894459096d91fe3405020d5f
if I understand the commit message, it's useful when both git and got are used on the same repository?
@jloc0 really nice!!! I should install again #openbsd :)
but now I'm about to test #openzfs with #slackware current first in a #vm, I liked to test and test it, documenting a little them go to full install in my laptop.
@BoxyBSD@bsd.cafe #hosting #opensource #BSD #freevm #education
Friendship ended with Firefox, Ungoogled Chromium is my new friend
#OpenBSD
Weekly BSD Pub
*BSD friends, just remember that on Thursday there'll be the first Weekly BSD Pub virtual meeting, organized by @gyptazy
More information here: https://wiki.bsd.cafe/docs:weekly-bsdpub
Version control system #gameoftrees 0.98 has been released and should soon show up in #OpenBSD -current packages. An update for the -portable version will follow as well.
🔔 The Git repository server gotd can now send notifications via email and http/json when changes are made to a repository.
🕸️ The got clone and got fetch commands now accept HTTP and HTTPS repository URLs.
The commit graph implementation can now sort commits topologically. This in turn makes it possible to avoid spurious merge conflicts when branches are rebased across merge commits.
🏎️ Listing all the tags is now much faster on repositories which contain too many tags (such as the FreeBSD Git repository -- Before: 4 minutes 24 seconds; After: 1.25 seconds).
🔢 The got stage and got unstage commands are now more consistent with all other commands by requiring the -R option before operating on directories recursively.
🩹 The got patch command will no longer fail if an empty file exists at a location where a patch wants to add a new file.
With contributions from @op, @tobhe, @xha and Kyle Ackerman this time around, thanks! 🍰
pfctl(8) and systat(8) to display fragment reassembly statistics https://www.undeadly.org/cgi?action=article;sid=20240423052538 #openbsd #networking #tcpip #fragments #reassembly #pfctl #systat
7.5 release packages are now ready for #OpenBSD/armv7 (32-bit arm)
naddy@ modified www/75.html: 8144 arm packages
I just asked Llama3 Instruct (7B Q8): "Tell me all you know about ZFS on OpenBSD"
Llama3 replied: "A great topic!
ZFS is a combined file system and logical volume manager designed by Sun Microsystems, now owned by Oracle. It's known for its advanced features, high performance, and reliability. On OpenBSD, ZFS is available as part of the base system since version 5.4 (released in 2011). Here are some key aspects of using ZFS on OpenBSD:
**Installation**
To install ZFS on OpenBSD, you'll need to specify `zfs` as your file system during installation. This will create a ZFS pool with a single vdev (virtual device) containing the root file system.
**ZFS Pool**
A ZFS pool is the top-level container for all ZFS storage. It can contain one or more virtual devices (vdevs), which are used to store data and metadata. On OpenBSD, you'll typically create a single pool with a single vdev containing the root file system.
**VDEVs**
Vdevs are the building blocks of a ZFS pool. They're composed of one or more disk devices, and can be configured in various ways (e.g., RAID-Z, mirror, single-disk). OpenBSD supports the following vdev types:
* `raidz`: A type of RAID-5, providing redundancy with data striping.
* `mirror`: A simple mirroring configuration for each block.
* `single`: A single disk vdev, used for a standalone pool or for testing.
**ZFS Features**
Some notable ZFS features available on OpenBSD:
* **Snapshots**: Instantaneous copies of your file system at a specific point in time. You can take snapshots, clone them, and even revert to previous states if needed.
* **Send/Receive**: Allows you to send and receive entire ZFS pools or datasets between systems.
* **Checksums**: Data integrity checks are performed on all data written to disk.
* **Compressed**: Compression is supported for both data and metadata, reducing storage requirements.
* **Quotas**: Limits can be set for individual datasets to prevent excessive usage.
**OpenBSD-specific ZFS settings**
Some OpenBSD-specific configuration options:
* `zfs_load`: Controls whether the ZFS module is loaded at boot time. Set it to `YES` in `/etc/sysctl.conf` to enable ZFS support.
* `zfs_root`: Specifies the root file system dataset name. Typically set to `tank/root`.
* `zfs_pool`: Sets the default pool name (e.g., `tank`).
**ZFS CLI**
The OpenBSD ZFS command-line interface (CLI) is similar to other Unix-like systems:
```bash
# zpool list # List all pools and their status
# zfs list # List all datasets in a pool
# zfs snapshot # Create a new snapshot of a dataset
# zfs clone # Clone a snapshot or dataset
# zfs send # Send a dataset or snapshot to another system
```
**Tips and Considerations**
* Be cautious when using ZFS, as some operations (e.g., `zpool destroy`) can be destructive.
* Regularly check your pool's health with `zpool status` and ensure you have enough disk space.
* Use `zfs snapshots` to create regular backups of your file systems.
This is just a brief overview of using ZFS on OpenBSD. If you have specific questions or concerns, feel free to ask!"
We're safe. And I should ask Theo why he's always lied and never announced ZFS support on OpenBSD. 😆
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟰/𝟮𝟮 (Valuable News - 2024/04/22) available.
https://vermaden.wordpress.com/2024/04/22/valuable-news-2024-04-22/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟰/𝟬𝟰/𝟮𝟮 (Valuable News - 2024/04/22) available.
https://vermaden.wordpress.com/2024/04/22/valuable-news-2024-04-22/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Woot! My #OpenBSD 7.4 shirt should be arriving next week!
Now, to save up for a 7.5 shirt in the coming months. 
Another text for today - " Why you shouldn't run a BSD on a PC"
"Changing GNU/Linux distribution can be done on a whim, as underneath all of that you’ve got the same basic operating systems. With BSDs it’s not the same. One should try to understand the downsides, as not to waste the next 20 years exploring an OS that simply is not a good fit."
https://michal.sapka.me/bsd/why-not-bsd/
(I thought I will write the pro-BSD text first, but the hell with calendars)
I spent some time testing BSD Mail today.
I tried to crash the whole system, to see how stable Dovecot's replica is (spoiler: it's definitely reliable). I've made up my mind that passwords will be encrypted via bcrypt, ensuring modern, reliable, and secure cryptography.
From now on, it's possible to change your password through SOGo, which will update the DB where Dovecot and opensmtpd fetch their data from.
Let's move forward!
#BSDMail #Dovecot #OpenSMTPD #OpenBSD #FreeBSD #SOGo #Security #IT
Remember to send your #BSD probes to
http://bsd-hardware.info/