BSD Cafe Billboard

I converted another host to pkgbase with `pkgbasify`. Worked great! Even updated the jail base:./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASEBastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.#FreeBSD #BastilleBSD #pkgbase

42 days till the European *BSD event of 2026! ️ at https://tickets.eurobsdcon.org/eurobsdcon/brussels/️ at https://events.eurobsdcon.org/2026/schedule/For everything else, peek at https://2026.eurobsdcon.org/Lets eat 🧇 in Brussels!EuroBSDCon 2026 in Brussels, Belgium September 09-13, 2026#RUNBSD #FreeBSD #NetBSD #OpenBSD #EuroBSDCon #EuroBSDCon2026 #BSD #Conference #Register

@BastilleBSD Looks really good! Nice job!

@ricardo The whole fingerprint benefit is you don’t have to worry about the IP address or the network of the client, only the IP packet structure. That helps filtering real users requests from RP tunneled requests. Whatever connection is used, going through a RP-enabled app will always add overhead and change packet metrics compared to the legit client using that connection (Tor being an exception apparently, as packets fingerprints from a Tor exit node will match RP packets fingerprints).The real trick unfortunately is to be able to do the analysis in real time as the packet comes in and take a block/pass decision immediately. So it’s best suited for firewall appliance, WAF, or integrated inside the server (HAproxy, or a patched Nginx for example, support JA4+).Also, it has to be correlated with other data. A comprehensive example can be found here: https://webdecoy.com/blog/ja4-fingerprinting-ai-scrapers-practical-guide/The more I read about it, the less I expect being able to use it in a home-made protection system, but the more I want to dig in at work as our big firewalls apparently do support JA4+.@feld @dch @lw @stefano

My little side project, inspired by the community, a decade in the making covered in the latest FreeBSD Status Report https://www.freebsd.org/status/report-2026-04-2026-06/#_native_s_m_a_r_t_data_retrieval_in_freebsdGo poke it with a sharp stick and send me your hate mail #FreeBSD

In this Q2 2026 FreeBSD Journal article, Alice Sowerby looks at the growing role of Software Bills of Materials (SBOMs), why they matter for software security, and what FreeBSD is doing in this area.You’ll learn:• How SBOMs help provide greater visibility into software components and dependencies• How the Cyber Resilience Act (CRA) is changing expectations around software security• What FreeBSD is doing to support SBOMsRead more:https://freebsdfoundation.org/our-work/journal/browser-based-edition/improving-software-quality/come-friendly-sboms/#FreeBSD #SBOM #SoftwareSecurity

@stefano @teapot_ben Is the trick here to not have Bastille start at boot so you can unlock the datasets, mount them, then "service bastille onestart"?

ishmael@bastillebsd ~ $ man bastille-jpcNAME bastille jcp – Copy file(s)/directorie(s) from jail to jail(s).SYNOPSIS bastille jcp [-q] SOURCE_JAIL JAIL_PATH DESTINATION_JAIL JAIL_PATHDESCRIPTIONThe bastille jcp sub-command will copy files and directories from a single jail to any targeted jail(s). -q, --quiet Suppress output.EXAMPLESCopy /etc/resolv.conf from myjail to yourjail:bastille jcp myjail /etc/resolv.conf yourjail /etc#BastilleBSD #FreeBSD

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟳/𝟮𝟳 (Valuable News - 2026/07/27) available. https://vermaden.wordpress.com/2026/07/27/valuable-news-2026-07-27/Past releases: https://vermaden.wordpress.com/news/#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

At EuroBSDcon 2026:Linux emulation on NetBSD: How broken is it? https://events.eurobsdcon.org/2026/talk/WXCFYU/Talk by Stephen Borrill2026-09-12 13:00:00To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/About EuroBSDcon 2026: https://2026.eurobsdcon.org@eurobsdcon #eurobsdcon #freebsd #netbsd #openbsd #conference #brussels #bruxelles #freesoftware #libresoftware

At EuroBSDcon 2026:GEFS: The File Shredder of the Future. https://events.eurobsdcon.org/2026/talk/NVMSCJ/Talk by Ori Bernstein2026-09-13 11:30:00To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/About EuroBSDcon 2026: https://2026.eurobsdcon.org@eurobsdcon #eurobsdcon #freebsd #netbsd #openbsd #conference #brussels #bruxelles #freesoftware #libresoftware

At EuroBSDcon 2026:How Fast Can We Patch? https://events.eurobsdcon.org/2026/talk/LSR7EX/Talk by Dave Cottlehuber (dch)2026-09-13 14:15:00To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/About EuroBSDcon 2026: https://2026.eurobsdcon.org@eurobsdcon #eurobsdcon #freebsd #netbsd #openbsd #conference #brussels #bruxelles #freesoftware #libresoftware

At EuroBSDcon 2026:The night 142 of my servers went up in the clouds. Physically. https://events.eurobsdcon.org/2026/talk/KAEQA8/Talk by Stefano Marinelli2026-09-12 11:15:00To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/About EuroBSDcon 2026: https://2026.eurobsdcon.org@eurobsdcon #eurobsdcon #freebsd #netbsd #openbsd #conference #brussels #bruxelles #freesoftware #libresoftware

At EuroBSDcon 2026:What has (can) the EU Cyber Resilience Act done (do) for you? https://events.eurobsdcon.org/2026/talk/9NVQAD/Talk by Peter N. M. Hansteen2026-09-12 10:30:00To register: https://tickets.eurobsdcon.org/eurobsdcon/brussels/About EuroBSDcon 2026: https://2026.eurobsdcon.org@eurobsdcon #eurobsdcon #freebsd #netbsd #openbsd #conference #brussels #bruxelles #freesoftware #libresoftware

chvt(or whatever is analogous in bsdland) works as intended?

An example root@freebsd-15-amd64-qemu:~ # pkg upgrade -Fqy root@freebsd-15-amd64-qemu:~ # pkg upgrade -U New version of pkg detected; it needs to be installed first. Checking integrity... done (0 conflicting) The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pkg: 2.7.5 -> 2.8.0_1 [FreeBSD-ports] Number of packages to be upgraded: 1 The process will require 25 MiB more space. Proceed with this action? [y/N]: y [1/1] Upgrading pkg from 2.7.5 to 2.8.0_1... [1/1] Extracting pkg-2.8.0_1: 100% pkg: need to re-create repo FreeBSD-ports to upgrade schema version pkg: Repository FreeBSD-ports cannot be opened. 'pkg update' required pkg: need to re-create repo FreeBSD-ports-kmods to upgrade schema version pkg: Repository FreeBSD-ports-kmods cannot be opened. 'pkg update' required Checking for upgrades (0 candidates): 100% Processing candidates (0 candidates): 100% Checking integrity... done (0 conflicting) Your packages are up to date. root@freebsd-15-amd64-qemu:~ # pkg update Updating FreeBSD-ports repository catalogue... pkg: need to re-create repo FreeBSD-ports to upgrade schema version Fetching meta.conf: 100% 168 B 0.2 kB/s 00:01 Fetching data: 100% 12 MiB 907.0 kB/s 00:14 Processing entries: 100% FreeBSD-ports repository update completed. 38008 packages processed. Fetching files: 100% 41 MiB 1.3 MB/s 00:33 Processing file entries: 100% Updating FreeBSD-ports-kmods repository catalogue... pkg: need to re-create repo FreeBSD-ports-kmods to upgrade schema version Fetching meta.conf: 100% 179 B 0.2 kB/s 00:01 Fetching data: 100% 35 KiB 36.0 kB/s 00:01 Processing entries: 100% FreeBSD-ports-kmods repository update completed. 240 packages processed. All repositories are up to date. root@freebsd-15-amd64-qemu:~ # pkg upgrade -Fqy root@freebsd-15-amd64-qemu:~ # pkg upgrade -U Checking for upgrades (124 candidates): 100% Processing candidates (124 candidates): 100% Checking integrity... done (0 conflicting) The following 123 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: boost-libs: 1.89.0_2 -> 1.89.0_3 [FreeBSD-ports] … xwud: 1.0.7 -> 1.0.8 [FreeBSD-ports] Installed packages to be REINSTALLED: xorg-docs-1.7.3,1 [FreeBSD-ports] (ABI changed: 'FreeBSD:15:amd64' -> 'FreeBSD:15:*') Number of packages to be upgraded: 122 Number of packages to be reinstalled: 1 The operation will free 5 MiB. Proceed with this action? [y/N]: y [ 1/123] Upgrading boost-libs from 1.89.0_2 to 1.89.0_3... [ 1/123] Extracting boost-libs-1.89.0_3: 100% … [123/123] Upgrading xwud from 1.0.7 to 1.0.8... [123/123] Extracting xwud-1.0.8: 100% ==> Running trigger: desktop-file-utils.ucl Building cache database of MIME types ==> Running trigger: gtk-update-icon-cache.ucl Generating GTK icon cache for /usr/local/share/icons/oxygen Generating GTK icon cache for /usr/local/share/icons/breeze-dark Generating GTK icon cache for /usr/local/share/icons/breeze Generating GTK icon cache for /usr/local/share/icons/hicolor ==> Running trigger: gdk-pixbuf-query-loaders.ucl Generating gdk-pixbuf modules cache ==> Running trigger: shared-mime-info.ucl Building the Shared MIME-Info database cache ==> Running trigger: glib-schemas.ucl Compiling glib schemas Warning: Schema “org.gnome.crypto.cache” has path “/desktop/gnome/crypto/cache/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.crypto.pgp” has path “/desktop/gnome/crypto/pgp/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.locale” has path “/system/locale/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.proxy” has path “/system/proxy/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.proxy.http” has path “/system/proxy/http/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.proxy.https” has path “/system/proxy/https/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.proxy.ftp” has path “/system/proxy/ftp/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. Warning: Schema “org.gnome.system.proxy.socks” has path “/system/proxy/socks/”. Paths starting with “/apps/”, “/desktop/” or “/system/” are deprecated. root@freebsd-15-amd64-qemu:~ # history 7 363 19:03 exit 364 7:17 pkg upgrade -Fqy 365 7:22 pkg upgrade -U 366 7:23 pkg update 367 7:27 pkg upgrade -Fqy 368 7:27 pkg upgrade -U 369 7:31 history 7 root@freebsd-15-amd64-qemu:~ # exit logout blah@freebsd-15-amd64-qemu:~ % freebsd-version -kru ; uname -mvKU 15.1-RELEASE-p1 15.1-RELEASE-p1 15.1-RELEASE-p1 FreeBSD 15.1-RELEASE-p1 releng/15.1-n283582-0f691888dc56 GENERIC amd64 1501000 1501000 blah@freebsd-15-amd64-qemu:~ % pkg repos -el | sort -f ; sleep 5 ; pkg repos -e | grep -B 1 -e url FreeBSD-ports FreeBSD-ports-kmods FreeBSD-ports: { url : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/latest", -- FreeBSD-ports-kmods: { url : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_latest_1", blah@freebsd-15-amd64-qemu:~ % date Sun Jul 26 07:32:34 BST 2026 blah@freebsd-15-amd64-qemu:~ % Note: … [1/1] Extracting pkg-2.8.0_1: 100% pkg: need to re-create repo FreeBSD-ports to upgrade schema version pkg: Repository FreeBSD-ports cannot be opened. 'pkg update' required pkg: need to re-create repo FreeBSD-ports-kmods to upgrade schema version pkg: Repository FreeBSD-ports-kmods cannot be opened. 'pkg update' required Checking for upgrades (0 candidates): 100% Processing candidates (0 candidates): 100% Checking integrity... done (0 conflicting) Your packages are up to date. …

redbsd@redbsd:~ $ pkg leaf 7-zip-26.02 ImageMagick7-7.1.2.25_1 aircrack-ng-1.5.2_4 apache-ant-1.10.15_2 apache24-2.4.68 automake-1.18.1 bind-tools-9.20.24_1 ca_root_nss-3.125 cherrytree-1.7.0 cmake-3.31.12 crunch-3.6_1 doas-6.4 dotnet-9.0.14 dotnet8-8.0.27 engrampa-1.28.2_1 firefox-esr-153.0,2 freerdp3-3.30.0 gcc-14_5 gdb-15.1_5 geany-2.1 git-2.54.0 go-1.25_20,2 gradle-9.6.1 hashcat-7.1.2_11,1 hs-pandoc-3.10 htop-3.5.1 john-1.9.0.j.1_1 kismet-2016.07.r1_2,1 kubectl-1.36.1_2 libtool-2.5.4_1 lighttpd-1.4.84_1 linux-rl9-libxkbcommon-1.0.3_2 linux-rl9-xcb-util-0.4.0_2 llvm-19_1,1 lsof-4.99.5,8 mariadb1011-client-10.11.18 maven-3.8.9_3 mercurial-7.1.2 nano-9.0 nginx-1.30.4,3 ninja-1.13.2,4 nmap-7.99_1 node-24.18.0_3 noto-basic-2.0_4 npm-11.18.0 open-vm-tools-13.1.0,2 openjdk17-17.0.18+8.1 openjdk21-21.0.10+7.1_1 openssl-3.0.21,1 papirus-icon-theme-20250501 pavucontrol-6.1 php83-curl-8.3.32_1 php83-mbstring-8.3.32_1 php83-mysqli-8.3.32_1 php83-pdo_sqlite-8.3.32_1 php83-zip-8.3.32_1 pixiewps-1.4.1 podman-5.8.4_1 postgresql16-client-16.14 proxychains-ng-4.17 py312-certbot-4.2.0,1 py312-podman-compose-1.5.0 py312-pwntools-4.15.0_1 py312-virtualenv-21.2.3 python3-3_4 radare2-6.1.4 reaver-1.6.6_1 redis-8.8.0 ripgrep-15.1.0_6 ristretto-0.14.0 rizin-0.9.1 rsync-3.4.4_1 ruby-3.4.9_2,1 rust-1.96.1 screen-5.0.1_6 sddm-0.21.0.36_3 socat-1.8.1.3 sqlitebrowser-3.13.1 subversion-1.14.5_1 sudo-1.9.17p2_2 tcpdump-4.99.6 thunar-archive-plugin-0.6.0 tmux-3.7b tree-2.3.2 trivy-0.72.0_1 vim-9.2.0738 virtualbox-ose-additions-72-7.2.14.1500068 vscode-1.127.0_1 wget-1.25.0 whois-5.5.7_1 xf86-video-vmware-13.4.0 xfce-4.20_2 xfce4-screenshooter-plugin-1.11.3 xmlstarlet-1.6.1_5 xorg-7.7_3 yq-4.1.1 zig-0.16.0 zip-3.0_5 zsh-5.9.1 redbsd@redbsd:~ $

@pertho <https://www.reddit.com/r/freebsd/comments/1v6851g/comment/ozolivn/> – current versions, and: "Whilst the portscout page … does not show 11.14, I should assume that he'll be aware."

Jails, Not Containers: FreeBSD Isolation Done Right – Umair Khurshid | Klara Systems <https://klarasystems.com/articles/jails-not-containers-freebsd-isolation-done-right/> Containers play a major role in modern infrastructure, but they are not the right answer for every workload. This article explores how FreeBSD jails provide purpose-built isolation, predictable security boundaries, and deep ZFS integration—making them ideal infrastructure-grade services where stability is essential. … Via <https://billboard.bsd.cafe/post/857> | <https://www.reddit.com/r/freebsd/comments/1v5nkno/jails_not_containers_freebsd_isolation_done_right/>#FreeBSD #jails #Linux #containers

Digging a bit deeper, I noticed this in 'freebsd-update.sh':--- # Return 0 if the system is managed using pkgbase, 1 otherwise.check_pkgbase(){ # Packaged base requires that pkg is bootstrapped. if ! pkg -N -r ${BASEDIR} >/dev/null 2>/dev/null; then return 1 fi # uname(1) is used by pkg to determine ABI, so it should exist. # If it comes from a package then this system uses packaged base. if ! pkg -r ${BASEDIR} which /usr/bin/uname >/dev/null; then return 1 fi return 0--- So, pkg bootstrapped and 'uname' from package. https://github.com/freebsd/freebsd-src/blob/main/usr.sbin/freebsd-update/freebsd-update.sh