Skip to content

World

Topics from outside of this forum. Views and opinions represented here may not reflect those of this forum and its members.

A world of content at your fingertips…

Think of this as your global discovery feed. It brings together interesting discussions from across the web and other communities, all in one place.

While you can browse what's trending now, the best way to use this feed is to make it your own. By creating an account, you can follow specific creators and topics to filter out the noise and see only what matters to you.

Ready to dive in? Create an account to start following others, get notified when people reply to you, and save your favorite finds.

Register Login
  • grahamperrinG

    https://klarasystems.com/articles/native-inotify-in-freebsd/ – Mark Johnston

    A seemingly simple file monitoring problem exposed deep limitations in FreeBSD’s traditional EVFILT_VNODE approach. This article explores how race conditions, scalability issues, and Linux compatibility challenges ultimately led to the development of a native inotify implementation for FreeBSD 15. …

    @klarainc@bird.makeup (automated)


  • naltunN

    tl;dr I used wg(4), pf(4), and relayd(8), all OpenBSD native tools, to encrypt all inbound connections from a gateway VPS to my local home server. This also hides my local IP information and I managed it all without much hassle and pain.

    I recently stood up a VPS running OpenBSD 7.9 on Vultr. The VPS is hosted in Chicago, Illinois, USA. I then took OpenBSD's native WireGuard driver, wg(4), to establish an encrypted tunnel to my local home lab server. Using relayd(8), OpenBSD's native reverse proxy, I can now forward virtual host connections to my home lab server, which has httpd(8) as a web server frontend. I used pf.conf(5) to configure OpenBSD's native fireweall, pf(4), which was incredibly easy.

    The result is a secure gateway that routes all traffic via WireGuard to my local server, obfuscating its location and other IP information. This was done by simply configuring handful of system daemons. I've done some OpenBSD network configuration before, but this was the most work I've done. The best part, it wasn't that difficult, and all manual pages provided sufficient details to work with them.

    Once I get my site set up I'll write up the experience and step-by-step instructions and share the page here.

    New OpenBSD milestone unlocked; no intent to stop anytime soon

    Happy hacking, hackers!


  • grahamperrinG

    https://www.theregister.com/os-platforms/2026/06/18/freebsd-151-lands-but-desktop-dabblers-still-have-to-draw-their-own-gui/5257681

    @lproven@social.vivaldi.net

    Better laptop sleep and Wi-Fi support make the beastie more portable-friendly, but getting beyond the shell remains a DIY job

    Tested with a Core i5-based ThinkPad X220.

    Surprisingly:

    … The handy optional desktop-installer script is still available, but as far as we can tell, it hasn't been updated for version 15.1 yet. In our testing, it couldn't correctly install a working desktop, and whatever desktop we tried, it failed without giving any visible error. …

    Worked around, through manual installation of software, but I'm surprised that it happened.

    Cross-post: r/freebsd


    @grahamperrin Thanks! I read both the comment and the reply. It looks like, conceptually, we came up with the same solution. The main question is what data he used to generate the JSON file and under what license that data is distributed.
  • CiotBSDC

    26/07/12

    Leanpub Book LAUNCH 🚀 Three Essays on NetBSD by Chris Pinnock

    This book collects three essays I wrote in 2022 about the NetBSD operating system.


  • CiotBSDC

    06/28

    Linux 7.3 To Introduce DRM "Color Format" Property With AMD GPU Driver Support

    While the Linux 7.2 kernel merge window is only ending later today to cap off the feature work on this next version of the Linux kernel, already for the Linux 7.3 kernel cycle later in the year there is one notable feature on the way: the DRM color format property is being introduced and being first supported by the AMDGPU kernel graphics driver.



    26/07/10 ⇒ Linux 7.3 Enabling Second Graphics Pipe For Modern AMD APUs AMD on Thursday sent out another round of AMDGPU kernel graphics driver and AMDKFD kernel compute driver updates to DRM-Next of new feature material ahead of the Linux 7.3 merge window. https://www.phoronix.com/news/Linux-7.3-Second-Pipe-GFX11-APU 26/07/12 ⇒ Reworked System Call Entry Handling Slated For Linux 7.3 Stemming from looking at a proposed Linux kernel patch to alter the Linux kernel's system call number handling, veteran Linux kernel developer Thomas Gleixner went down a rabbit hole of the kernel's system call entry handling to make a number of clean-ups and improvements to the code. That rework to the system call entry handling is now expected to land for the Linux 7.3 kernel cycle. https://www.phoronix.com/news/Rework-Sysclal-Entry-Linux-7.3
  • CiotBSDC

    Code That Built the Internet: The Impact of BSD, Part 1

    Like the Spanish Inquisition, nobody expected the internet. Its earliest appearance (as ARPANET) took place in the same year—1969—as the comedy troupe behind the Spanish Inquisition quip, Monty Python. But during its first decade, the internet was treated as a convenience for file-sharing and a couple other applications; few observers anticipated how it would alter modern life until decades later. The major institution that brought computers into the internet age was the University of California at Berkeley, which created a version of Unix that they called the Berkeley Software Distribution and is now known as BSD.


    Code That Built the Internet: The Impact of BSD, Part 2 - Linux Professional Institute (LPI)
  • CiotBSDC

    Cinnamon will fully support both X11 and Wayland sessions starting with Mint's next release


    Wayland No Longer Considered Experimental For Linux Mint's Next Cinnamon Release

    The Linux Mint distribution has published their June development summary that most notably includes work on Cinnamon's Wayland support where it's now ready to graduate.


  • CiotBSDC

    26/07/04

    How to fix Homebox 0.26.2 not starting on FreeBSD

    After upgrading my Homebox jail yesterday from 0.25.2 to 0.26.2, the homebox service would not start anymore. Taking a look into /var/log/homebox.log, I got presented with the following error message:


  • CiotBSDC

    26/07/03

    A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System

    The paper presents a longitudinal measurement study on the adoption of the pledge and unveil system calls in OpenBSD. These system calls are used to sandbox programs and libraries. Given a dataset covering 19 releases, many programs and libraries were modified to use the system calls already before their introductions in official releases.


  • grahamperrinG

    https://www.reddit.com/r/zfs/comments/1uo72bi/bzfs1230_is_out/

    bzfs is a CLI for reliable ZFS snapshot replication using zfs send/receive and SSH. It is meant for the boring-but-important corner of infrastructure where "probably replicated" is not the vibe.

    The main bit in this release: bzfs can now drive recursive resumable ZFS stream packages …


  • grahamperrinG

    A major upgrade example: 14.4-RELEASE to 15.1-RELEASE

    All commands should be run as root.

    1. pkg update
    2. pkg upgrade -Uy -r FreeBSD pkg
    3. freebsd-update fetch
    4. freebsd-update install
    5. freebsd-update upgrade -r 15.1-RELEASE
    6. freebsd-version -kru ; uname -mvKU
    7. freebsd-update install
    8. do not reboot the operating system – ignore the on-screen advice from freebsd-update
    9. freebsd-version -kru ; uname -KU
    10. /bin/sh
    11. export abi=FreeBSD:15:$(uname -p)
    12. export osversion=1501000
    13. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes update
    14. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -Fqy
    15. ignore all on-screen recommendations to force a bootstrap of pkg
    16. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -Fqy
    17. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -U -r FreeBSD-kmods
    18. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -U -g 'virtualbox-ose-additions*'
    19. exit
    20. upgrade the boot loader
    21. disable loading of kernel modules for NVIDIA GPUs – you can use sysrc(8)
    22. shutdown -r +10min "restarting with the upgraded kernel and boot loader"
    23. after this restart, if software such as Discover invites you to upgrade software, ignore the invitation
    24. freebsd-version -kru
    25. freebsd-update install
    26. be patient
    27. freebsd-version -kru
    28. if /usr/local/etc/pkg/repos/FreeBSD.conf includes FreeBSD and FreeBSD-kmods, change the names to FreeBSD-ports and FreeBSD-ports-kmods
    29. pkg bootstrap -fy
    30. pkg upgrade -fFqy -r FreeBSD-ports -r FreeBSD-ports-kmods
    31. pkg upgrade -fFqy -r FreeBSD-ports -r FreeBSD-ports-kmods
    32. pkg upgrade -fU -r FreeBSD-ports -r FreeBSD-ports-kmods
    33. if reinstalling all third-party software is not possible, install misc/compat14x
    34. if the previous run of freebsd-update install asked you to rerun the command, do so
    35. shutdown -r +10min "restarting with the upgraded userland"

    Upgrading with Distribution Sets … Also, there's nothing about FreeBSD-ports-kmods.
  • CiotBSDC

    07/01

    ⇒ Running Garage in a FreeBSD Jail

    My work at $DAYJOB that involves a lot of work with data pipeline these days. Particularly the design of new and better ones, which help us serve users with better data (more advanced processing, better cartographic decisions, etc.).


  • naltunN

    Found this great article (by Solene, no less!) on setting up a Roundcube mail server on OpenBSD.

    Just what I was looking for! The link: https://dataswamp.org/~solene/2024-07-24-openbsd-email-server-setup.html

    Happy hacking!


    @naltun said: tyvm ??? Hummm, maybe: "Thank you very much", isn'it?!
  • grahamperrinG

    https://akrites.org/linux-foundation-and-industry-leaders-launch-akrites-to-defend-critical-open-source-software-against-ai-enabled-cyber-threats/

    Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone and Zscaler join coordinated effort to find, fix and responsibly disclose vulnerabilities in open source software the world runs on

    Summary

    • The Linux Foundation, joined by leading organizations, today announced Akrites, a coordinated effort to remediate and disclose vulnerabilities in critical open source software.
    • Akrites establishes a shared Security Incident Response Team (SIRT) and a single, standardized Coordinated Vulnerability Disclosure (CVD) process, built on confidentiality-first principles and industry-standard tooling.
    • Founding members commit engineering talent, security expertise and funding to harden the shared open source software that banks, hospitals, power grids, telecoms, governments, and AI labs depend on.
    • Organizations that contribute engineering resources or funding to the security of critical open source are invited to participate and can learn more at https://akrites.org.

    Thanks, I deleted my duplicate!
  • V

    Hi! So I have a small VPS with OpenBSD on it and I anticipate that disk space will not be enough, so my question is, if I know that I will never compile the whole system from source, can I just repurpose the space allocated to /usr/obj and /usr/src and mount those partitions where they're needed? Or is this a really really bad idea? It would free up about 10GB (out of 40GB total).


  • grahamperrinG

    https://www.phoronix.com/news/Linux-Sched-Ext-Restructured

    Quoting Torvalds:

     create mode 100644 kernel/sched/ext_arena.c
     create mode 100644 kernel/sched/ext_arena.h
     create mode 100644 kernel/sched/ext_cid.c
     create mode 100644 kernel/sched/ext_cid.h
     create mode 100644 kernel/sched/ext_types.h
    

    Please don't do this disgusting thing.

    There's a reason we have subdirectories: it's to group files together and separate them out

    Using name prefixing instead of directories is disgusting and wrong. If you have this many random sched-ext files, it damn well should be cleaned up and not be this kind of mess.

    I've pulled this, but under protest. Proper hierarchical filesystems have been available since 1965.

    It's blunt, but it did begin with the word "Please".

    His use of the word "disgusting" is, ahem, slightly at odds with this recent observation:

    … Já o Linus sempre foi mais polido, político e mais comercial.

    Translated by Reddit:

    … Linus, on the other hand, was always more polished, political, and more business-minded.

    3d148552-b678-44be-9be8-bdf6f9fb2a68-image.jpeg

    Image source and context:


    Linus? Polished? Business like? I mean, he isn't Theo, but he has..... a way with people.
  • grahamperrinG
    grahamperrin@mowa219-gjp4 ~> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:05:12 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:14:38 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    [385847:385871:0626/191439.649684:ERROR:simple_file_enumerator.cc(58)] Could not get file info for /home/grahamperrin/.cache/qutebrowser/webengine/Cache/Cache_Data/todelete_3610484eb923023d_0_1
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:15:05 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:15:17 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> 
    

    Much the same for the page for nano:

    grahamperrin@mowa219-gjp4 ~> qutebrowser https://www.freshports.org/editors/nano/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:24:56 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> 
    

    I toyed with qutebrowser only because https://www.freshports.org/lang/python311/ is currently quirky in one of my very heavily-extended Firefox profiles (not reproducible in a different profile, not reproducible in Tor Browser):

    34db1064-90e8-4284-b5e6-39bea28aee1e-image.jpeg

    The effect is not long-lasting, normal appearance resumes after a few seconds.


    I sought advice in Matrix, then ran a command: ubuntu-bug qutebrowser End result: Bug #2158488 “qutebrowser crashes when starting” : Bugs : qutebrowser package : Ubuntu
  • grahamperrinG

    Four hours ago:

    … critical services used by the human #FreeBSD community are either down, or so degraded they are mostly unusable, by AI scrapers. …

    Does anyone know which services are, or were, down?

    https://bsd.network/@dch/116816905361984918


  • winterschon@mastodon.bsd.cafeW

    Today felt pretty decent, or at least comparatively, and maybe only for ~22% of the hours of consciousness...

    ~0530 -> 22:42 ... just need to save this one file to the NFS share... and...

    Seems today is a "No NFS for assholes" day, very astute.

    So no NFS for me; still an asshole, sure sure (only sometimes), but no NFS? So unfair. LDAP/FreeIPA why are you the way that you are? 😕

    Maybe if I threaten the LDAP VM with its existential annihilation, and replace it with a RADIUS + TACACS + NIS (the OG right there, nothing better than a Trainwreck deep into the warm, loving arms, the secure embrace, the Inner Self unleashed - unbounded - staring directly into the eyes of `Network Information Service +` ... NIS+ YES!

    @tribblix @ptribble

    I read that NIS+ was removed from Solaris 11.x (hopefully this is incorrect), in which case... what are your thoughts on the subject? There's no Windows, no SMB, it's just Solaris, Tribblix, OmniOS, Gentoo, {Rocky 9/10, OEL 9/10}, and of course... FreeBSD, also one or two little nodes w/ NetBSD and a Xen box too... lots of boxes.

    So.. NIC+ on Tribblix getting some traction if I decide to reprovision this new workstation w/ the latest instead of Sol 11.4... the video card situation is either a P2200 or A4000, and while those work on Solaris I've not been able to find the right combination of drivers to get these two working with Tribblix. Are those going to work or maybe a RTX 2080?


    NIS+ got removed from Solaris back at the end of 2009. So it got removed from OpenSolaris and thus illumos, as that was before the fork. This was announced long before. As a heavy NIS+ user at the time, we were somewhat dismayed to read the announcement. Sun said it would be no problem, LDAP was a superior replacement. We actually tried LDAP, and to call it an unmitigated disaster would be far too generous. Apart from the excessive hardware requirements, endless bugs, woeful performance, and lack of basic functionality, there was an almost total lack of administrative tooling. My understanding is that NIS itself is also slated for the chop in Solaris 11 at some point. In theory, you could reinstate NIS+ in illumos - we have the whole commit history so reverting 6874309 wouldn't be so bad. Whether you could get it to work properly is another matter.