Skip to content

World

Topics from outside of this forum. Views and opinions represented here may not reflect those of this forum and its members.

A world of content at your fingertips…

Think of this as your global discovery feed. It brings together interesting discussions from across the web and other communities, all in one place.

While you can browse what's trending now, the best way to use this feed is to make it your own. By creating an account, you can follow specific creators and topics to filter out the noise and see only what matters to you.

Ready to dive in? Create an account to start following others, get notified when people reply to you, and save your favorite finds.

Register Login
  • CiotBSDC

    26/07/03

    ⇒ A Measurement Study on the Adoption of Pledges and Unveils in the OpenBSD Operating System

    The paper presents a longitudinal measurement study on the adoption of the pledge and unveil system calls in OpenBSD. These system calls are used to sandbox programs and libraries. Given a dataset covering 19 releases, many programs and libraries were modified to use the system calls already before their introductions in official releases.


  • grahamperrinG

    https://www.reddit.com/r/zfs/comments/1uo72bi/bzfs1230_is_out/

    … bzfs is a CLI for reliable ZFS snapshot replication using zfs send/receive and SSH. It is meant for the boring-but-important corner of infrastructure where "probably replicated" is not the vibe.

    The main bit in this release: bzfs can now drive recursive resumable ZFS stream packages …


  • grahamperrinG

    A major upgrade example: 14.4-RELEASE to 15.1-RELEASE

    All commands should be run as root.

    1. pkg update
    2. pkg upgrade -Uy -r FreeBSD pkg
    3. freebsd-update fetch
    4. freebsd-update install
    5. freebsd-update upgrade -r 15.1-RELEASE
    6. freebsd-version -kru ; uname -mvKU
    7. freebsd-update install
    8. do not reboot the operating system – ignore the on-screen advice from freebsd-update
    9. freebsd-version -kru ; uname -KU
    10. /bin/sh
    11. export abi=FreeBSD:15:$(uname -p)
    12. export osversion=1501000
    13. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes update
    14. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -Fqy
    15. ignore all on-screen recommendations to force a bootstrap of pkg
    16. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -Fqy
    17. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -U -r FreeBSD-kmods
    18. pkg-static -o ABI=$abi -o OSVERSION=$osversion -o IGNORE_OSVERSION=yes upgrade -U -g 'virtualbox-ose-additions*'
    19. exit
    20. upgrade the boot loader
    21. disable loading of kernel modules for NVIDIA GPUs – you can use sysrc(8)
    22. shutdown -r +10min "restarting with the upgraded kernel and boot loader"
    23. after this restart, if software such as Discover invites you to upgrade software, ignore the invitation
    24. freebsd-version -kru
    25. freebsd-update install
    26. be patient
    27. freebsd-version -kru
    28. if /usr/local/etc/pkg/repos/FreeBSD.conf includes FreeBSD and FreeBSD-kmods, change the names to FreeBSD-ports and FreeBSD-ports-kmods
    29. pkg bootstrap -fy
    30. pkg upgrade -fFqy -r FreeBSD-ports -r FreeBSD-ports-kmods
    31. pkg upgrade -fFqy -r FreeBSD-ports -r FreeBSD-ports-kmods
    32. pkg upgrade -fU -r FreeBSD-ports -r FreeBSD-ports-kmods
    33. if reinstalling all third-party software is not possible, install misc/compat14x
    34. if the previous run of freebsd-update install asked you to rerun the command, do so
    35. shutdown -r +10min "restarting with the upgraded userland"

    Upgrading with Distribution Sets … Also, there's nothing about FreeBSD-ports-kmods.
  • naltunN

    Found this great article (by Solene, no less!) on setting up a Roundcube mail server on OpenBSD.

    Just what I was looking for! The link: https://dataswamp.org/~solene/2024-07-24-openbsd-email-server-setup.html

    Happy hacking!


    @naltun said: tyvm ??? Hummm, maybe: "Thank you very much", isn'it?!
  • grahamperrinG

    https://akrites.org/linux-foundation-and-industry-leaders-launch-akrites-to-defend-critical-open-source-software-against-ai-enabled-cyber-threats/

    Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone and Zscaler join coordinated effort to find, fix and responsibly disclose vulnerabilities in open source software the world runs on

    Summary

    • The Linux Foundation, joined by leading organizations, today announced Akrites, a coordinated effort to remediate and disclose vulnerabilities in critical open source software.
    • Akrites establishes a shared Security Incident Response Team (SIRT) and a single, standardized Coordinated Vulnerability Disclosure (CVD) process, built on confidentiality-first principles and industry-standard tooling.
    • Founding members commit engineering talent, security expertise and funding to harden the shared open source software that banks, hospitals, power grids, telecoms, governments, and AI labs depend on.
    • Organizations that contribute engineering resources or funding to the security of critical open source are invited to participate and can learn more at https://akrites.org.

    Thanks, I deleted my duplicate!
  • V

    Hi! So I have a small VPS with OpenBSD on it and I anticipate that disk space will not be enough, so my question is, if I know that I will never compile the whole system from source, can I just repurpose the space allocated to /usr/obj and /usr/src and mount those partitions where they're needed? Or is this a really really bad idea? It would free up about 10GB (out of 40GB total).


  • grahamperrinG

    https://www.phoronix.com/news/Linux-Sched-Ext-Restructured

    Quoting Torvalds:

     create mode 100644 kernel/sched/ext_arena.c
     create mode 100644 kernel/sched/ext_arena.h
     create mode 100644 kernel/sched/ext_cid.c
     create mode 100644 kernel/sched/ext_cid.h
     create mode 100644 kernel/sched/ext_types.h
    

    Please don't do this disgusting thing.

    There's a reason we have subdirectories: it's to group files together and separate them out

    Using name prefixing instead of directories is disgusting and wrong. If you have this many random sched-ext files, it damn well should be cleaned up and not be this kind of mess.

    I've pulled this, but under protest. Proper hierarchical filesystems have been available since 1965.

    It's blunt, but it did begin with the word "Please".

    His use of the word "disgusting" is, ahem, slightly at odds with this recent observation:

    … Já o Linus sempre foi mais polido, político e mais comercial.

    Translated by Reddit:

    … Linus, on the other hand, was always more polished, political, and more business-minded.

    3d148552-b678-44be-9be8-bdf6f9fb2a68-image.jpeg

    Image source and context:


    Linus? Polished? Business like? I mean, he isn't Theo, but he has..... a way with people.
  • grahamperrinG
    grahamperrin@mowa219-gjp4 ~> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:05:12 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:14:38 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    [385847:385871:0626/191439.649684:ERROR:simple_file_enumerator.cc(58)] Could not get file info for /home/grahamperrin/.cache/qutebrowser/webengine/Cache/Cache_Data/todelete_3610484eb923023d_0_1
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:15:05 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> qutebrowser https://www.freshports.org/lang/python311/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:15:17 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> 
    

    Much the same for the page for nano:

    grahamperrin@mowa219-gjp4 ~> qutebrowser https://www.freshports.org/editors/nano/
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    19:24:56 WARNING: GBM is not supported with the current configuration. Fallback to Vulkan rendering in Chromium.
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    MESA-INTEL: warning: Haswell Vulkan support is incomplete
    fish: Job 1, 'qutebrowser https://www.freshpo…' terminated by signal SIGSEGV (Address boundary error)
    grahamperrin@mowa219-gjp4 ~ [SIGSEGV]> 
    

    I toyed with qutebrowser only because https://www.freshports.org/lang/python311/ is currently quirky in one of my very heavily-extended Firefox profiles (not reproducible in a different profile, not reproducible in Tor Browser):

    34db1064-90e8-4284-b5e6-39bea28aee1e-image.jpeg

    The effect is not long-lasting, normal appearance resumes after a few seconds.


    I sought advice in Matrix, then ran a command: ubuntu-bug qutebrowser End result: Bug #2158488 “qutebrowser crashes when starting” : Bugs : qutebrowser package : Ubuntu
  • grahamperrinG

    Four hours ago:

    … critical services used by the human #FreeBSD community are either down, or so degraded they are mostly unusable, by AI scrapers. …

    Does anyone know which services are, or were, down?

    https://bsd.network/@dch/116816905361984918


  • winterschon@mastodon.bsd.cafeW

    Today felt pretty decent, or at least comparatively, and maybe only for ~22% of the hours of consciousness...

    ~0530 -> 22:42 ... just need to save this one file to the NFS share... and...

    Seems today is a "No NFS for assholes" day, very astute.

    So no NFS for me; still an asshole, sure sure (only sometimes), but no NFS? So unfair. LDAP/FreeIPA why are you the way that you are? 😕

    Maybe if I threaten the LDAP VM with its existential annihilation, and replace it with a RADIUS + TACACS + NIS (the OG right there, nothing better than a Trainwreck deep into the warm, loving arms, the secure embrace, the Inner Self unleashed - unbounded - staring directly into the eyes of `Network Information Service +` ... NIS+ YES!

    @tribblix @ptribble

    I read that NIS+ was removed from Solaris 11.x (hopefully this is incorrect), in which case... what are your thoughts on the subject? There's no Windows, no SMB, it's just Solaris, Tribblix, OmniOS, Gentoo, {Rocky 9/10, OEL 9/10}, and of course... FreeBSD, also one or two little nodes w/ NetBSD and a Xen box too... lots of boxes.

    So.. NIC+ on Tribblix getting some traction if I decide to reprovision this new workstation w/ the latest instead of Sol 11.4... the video card situation is either a P2200 or A4000, and while those work on Solaris I've not been able to find the right combination of drivers to get these two working with Tribblix. Are those going to work or maybe a RTX 2080?


    NIS+ got removed from Solaris back at the end of 2009. So it got removed from OpenSolaris and thus illumos, as that was before the fork. This was announced long before. As a heavy NIS+ user at the time, we were somewhat dismayed to read the announcement. Sun said it would be no problem, LDAP was a superior replacement. We actually tried LDAP, and to call it an unmitigated disaster would be far too generous. Apart from the excessive hardware requirements, endless bugs, woeful performance, and lack of basic functionality, there was an almost total lack of administrative tooling. My understanding is that NIS itself is also slated for the chop in Solaris 11 at some point. In theory, you could reinstate NIS+ in illumos - we have the whole commit history so reverting 6874309 wouldn't be so bad. Whether you could get it to work properly is another matter.
  • grahamperrinG

    The redditor wrote: … Thank you, Richard Stallman and Linus Torvalds, for this freedom and cooperation. … grahamperrin said: some suspicion that AI was involved Twisting the original statement, I asked Reddit (in a private browsing window): Do Richard Stallman and Linus Torvalds cooperate with each other? Sourced from thirteen subreddits, Reddit's AI-generated answers began: Richard Stallman and Linus Torvalds do not actively cooperate; their relationship is often characterized by ideological differences rather than direct collaboration. While both are foundational figures in free and open-source software, their distinct philosophies and approaches have led to a separation in their work. …
  • grahamperrinG

    @CiotBSD said:

    Hum, I love Nvidia… hum, That's why I prefer to use an AMD GPU!
    Hummm, nvidia: NO; it's NO way!
    That said, I prefer to use an AMD GPU!

    😛 😉 😄

    I never had a problem, at upgrade time, with my NVIDIA GPU.

    Maybe because I used FreeBSD-CURRENT.


    Good for you! I've lost count of the number of problems with Nvidia on Linux, whereas AMD's support is simply excellent—or is becoming so… If the situation is better with FreeBSD, so much the better. On OpenBSD, it's better to have an AMD than an Nvidia!
  • grahamperrinG

    Copied from his profile in Mastodon,

    @TomAoki@bsd.cafe does not work (does not autocomplete).

    At https://billboard.bsd.cafe/post/759, for example, the mention failed.


    If I paste just the user part of his ID, it works: @tomaoki
  • CiotBSDC

    IT Meme!

    (Plz, only meme, not discuss)


    fc7adadc-be0f-458a-8480-8e7b82f8ad87-image.jpeg

    0266db1d-c2aa-46fd-9098-ec1dbf043bf6-image.jpeg

    62df6610-46b3-4f40-8a28-8a72514ee994-image.jpeg


    [image: 1782175305024-76e6fcd1-27f9-4871-b6a4-9e6afb51c7e0-image.jpeg] https://anonsys.net/display/bf69967c-166a-39c2-0b07-20f210082765#gallery-209712756 @scriptkiddie@anonsys.net
  • CiotBSDC

    ⇒ Gmail Detect Error 550-5.7.1 (gsmtp)

    Help, about Gmail (gsmtp) service! Your email support and response are unbearable… You're not playing the rules, even though DKIM, DMARC, SPF, and PTR records are all correct!


    (06/22) ⇒ (Linux) Elite Dangerous: complementary tools Installation and configuration of additional tools to play Elite Dangerous (Steam) on Linux http://doc.huc.fr.eu.org/en/post/linux-elite-dangerous/
  • D

    I hope that this might help someone, tired of having to run it as a container.

    https://dkade.com/posts/homeassistant_freebsd_jail/


    @grahamperrin said: I assumed, wrongly, Certainly: wrongly and I'd even go so far as to say: nothing to do with!
  • CiotBSDC

    This is my FreeBSD music collection. It consists of songs inspired by FreeBSD releases, experiments, and desktop and server experiences that have become part of everyday life. It was built using Suno AI and then tweaked and polished each one.


  • grahamperrinG

    A single-disk pool on an old mobile hard disk drive on USB.

    Permanent errors, scrubbed away in less than one second:

    root@mowa219-gjp4 ~# zpool status -v Transcend
      pool: Transcend
     state: ONLINE
    status: One or more devices has experienced an error resulting in data
            corruption.  Applications may be affected.
    action: Restore the file in question if possible.  Otherwise restore the
            entire pool from backup.
       see: https://openzfs.github.io/openzfs-docs/msg/ZFS-8000-8A
      scan: resilvered 1.05M in 00:00:01 with 0 errors on Tue Jun 16 03:08:55 2026
    config:
    
            NAME                                         STATE     READ WRITE CKSUM
            Transcend                                    ONLINE       0     0     0
              ata-ST1000LM024_HN-M101MBB_S2S6J9FD203745  ONLINE       0     0     0
    
    errors: Permanent errors have been detected in the following files:
    
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/2026-05-03T16-06-33-559788000Z.nvram
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/2025-12-07T23-22-45-302819000Z.nvram
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/FreeBSD 13, 14, 15, 16.vbox-prev
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/2026-05-12T11-15-03-204545000Z.nvram
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Logs
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/{63bd4254-f125-4be2-a30f-701ea74498e4}.vdi
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/2026-06-16T01-16-17-580025000Z.nvram
            /media/t1000/VirtualBox/BSD/FreeBSD/FreeBSD 13, 14, 15, 16/Snapshots/2026-06-16T01-58-16-593213000Z.nvram
    root@mowa219-gjp4 ~# zpool scrub -e Transcend
    root@mowa219-gjp4 ~# zpool status -v Transcend
      pool: Transcend
     state: ONLINE
     scrub: scrubbed 16 error blocks in 0 days 00:00:00 on Tue Jun 16 03:10:28 2026
      scan: resilvered 1.05M in 00:00:01 with 0 errors on Tue Jun 16 03:08:55 2026
    config:
    
            NAME                                         STATE     READ WRITE CKSUM
            Transcend                                    ONLINE       0     0     0
              ata-ST1000LM024_HN-M101MBB_S2S6J9FD203745  ONLINE       0     0     0
    
    errors: No known data errors
    root@mowa219-gjp4 ~# lsb_release -a
    No LSB modules are available.
    Distributor ID: Ubuntu
    Description:    Ubuntu 26.04 LTS
    Release:        26.04
    Codename:       resolute
    root@mowa219-gjp4 ~# zfs version
    zfs-2.4.1-1ubuntu5
    zfs-kmod-2.4.1-1ubuntu5
    root@mowa219-gjp4 ~# zpool list -v
    NAME                                                  SIZE  ALLOC   FREE  CKPOINT  EXPANDSZ   FRAG    CAP  DEDUP    HEALTH  ALTROOT
    Transcend                                             928G   658G   270G        -         -    46%    70%  1.00x    ONLINE  -
      ata-ST1000LM024_HN-M101MBB_S2S6J9FD203745           932G   658G   270G        -         -    46%  70.9%      -    ONLINE        -
    bpool                                                1.88G   385M  1.50G        -         -     9%    20%  1.00x    ONLINE  -
      ata-Samsung_SSD_870_QVO_1TB_S5RRNF0TB68850Y-part2     2G   385M  1.50G        -         -     9%  20.1%      -    ONLINE        -
    rpool                                                 920G   680G   240G        -         -    58%    73%  1.00x    ONLINE  -
      wwn-0x5002538f42b2daed-part4                        920G   680G   240G        -         -    58%  73.9%      -    ONLINE        -
    root@mowa219-gjp4 ~#
    

    Kubuntu 26.04.


    hardware corruption?! Sometimes, errors occur when the USB connection is physically disturbed. Other times, there's no obvious explanation. I might be hands-off, with my cat nowhere near, at the time.
  • CiotBSDC

    Port knocking is mostly a bad idea. But people keep wanting to do it, for some false sense of security. If you don't consider it a security control but a way to keep garbage out of your logs, it might be valid. In my case I'm using an old USG Pro 4 running OpenBSD as my firewall and I'd prefer to avoid writing stuff to the logs, as I'd prefer the flash not to wear out sooner than needed, definitely not thanks to background radiation on the internet.