This time on the show, we'll be showing you how to do a fully-encrypted installation of FreeBSD and OpenBSD. We also have an interview with Damien Miller - one of the lead developers of OpenSSH - about some recent crypto changes in the project. If you're into data security, today's the show for you. The latest news and all your burning questions answered, right here on BSD Now - the place to B.. SD.
This episode was brought to you by
Headlines
Secure communications with OpenBSD and OpenVPN
Starting off today's theme of encryption...A new blog series about combining OpenBSD and OpenVPN to secure your internet trafficPart 1 covers installing OpenBSD with full disk encryption (which we'll be doing later on in the show)Part 2 covers the initial setup of OpenVPN certificates and keysParts 3 and 4 are the OpenVPN server and client configurationPart 5 is some updates and closing remarks***
FreeBSD Foundation Newsletter
The December 2013 semi-annual newsletter was sent out from the foundationIn the newsletter you will find the president's letter, articles on the current development projects they sponsor and reports from all the conferences and summits they sponsoredThe president's letter alone is worth the read, really amazingReally long, with lots of details and stories from the conferences and projects***
Use of NetBSD with Marvell Kirkwood Processors
Article that gives a brief history of NetBSD and how to use it on an IP-Plug computerThe IP-Plug is a "multi-functional mini-server was developed by Promwad engineers by the order of AK-Systems. It is designed for solving a wide range of tasks in IP networks and can perform the functions of a computer or a server. The IP-Plug is powered from a 220V network and has low power consumption, as well as a small size (which can be compared to the size of a mobile phone charger)."Really cool little NetBSD ARM project with lots of graphs, pictures and details***
Experimenting with zero-copy network IO
Long blog post from Adrian Chadd about zero-copy network IO on FreeBSDDiscusses the different OS' implementations and optionsHe's able to get 35 gbit/sec out of 70,000 active TCP sockets, but isn't stopping thereTons of details, check the full post***
Interview - Damien Miller -
[email protected] / @damienmiller
Cryptography in OpenBSD and OpenSSH
Tutorial
Full disk encryption in FreeBSD & OpenBSD
News Roundup
OpenZFS office hours
Our buddy George Wilson sat down to take some ZFS questions from the communityYou can see more info about it here***
License summaries in pkgng
A discussion between Justin Sherill and some NYCBUG guys about license frameworks in pkgngSimilar to pkgsrc's "ACCEPTABLE_LICENSES" setting, pkgng could let the user decide which software licenses he wants to allowMaybe we could get a "pkg licenses" command to display the license of all installed packagesOk bapt, do it***
The FreeBSD challenge continues
Checking in with our buddy from the Linux foundation...The switching from Linux to FreeBSD blog series continues for his month-long trialFollow up from last week: "As a matter of fact, I did check out PC-BSD, and wanted the challenge. Call me addicted to pain and suffering, but the pride and accomplishment you feel from diving into FreeBSD is quite rewarding."Since we last mentioned it, he's decided to go from a VM to real hardware, got all of his common software installed, experimented with the Linux emulation, set up virtualbox, learned about slices/partitions/disk management, found BSD alternatives to his regularly-used commands and lots more***
Ports gets a stable branch
For the first time ever, FreeBSD's ports tree will have a maintained "stable" branchThis is similar to how pkgsrc does things, with a rolling release for updated software and stable branch for only security and big fixesAll commits to this branch require approval of portmgr, looks like it'll start in 2014Q1***
Feedback/Questions
John writes inSpencer writes inCampbell writes inSha'ul writes inClint writes in***