This week on the show, we sat down with John-Mark Gurney to talk about modernizing FreeBSD's IPSEC stack. We'll learn what he's adding, what needed to be fixed and how we'll benefit from the changes. As always, answers to your emails and all of this week's news, on BSD Now - the place to B.. SD.
This episode was brought to you by
Headlines
BSD panel at Phoenix LUG
The Phoenix, Arizona Linux users group had a special panel so they could learn a bit more about BSDIt had one FreeBSD user and one OpenBSD user, and they answered questions from the organizer and the people in the audienceThey covered a variety of topics, including filesystems, firewalls, different development models, licenses and philosophyIt was a good "real world" example of things potential switchers are curious to know aboutThey closed by concluding that more diversity is always better, and even if you've got a lot of Linux boxes, putting a few BSD ones in the mix is a good idea***
Book of PF signed copy auction
Peter Hansteen (who we've had on the show) is auctioning off the first signed copy of the new Book of PFAll the profits from the sale will go to the OpenBSD FoundationThe updated edition of the book includes all the latest pf syntax changes, but also provides examples for FreeBSD and NetBSD's versions (which still use ALTQ, among other differences)If you're interested in firewalls, security or even just advanced networking, this book is a great one to have on your shelf - and the money will also go to a good causeMichael Lucas has challenged Peter to raise more for the foundation than his last book selling - let's see who winsPause the episode, go bid on it and then come back!***
FreeBSD Foundation goes to EuroBSDCon
Some people from the FreeBSD Foundation went to EuroBSDCon this year, and come back with a nice trip reportThey also sponsored four other developers to goThe foundation was there "to find out what people are working on, what kind of help they could use from the Foundation, feedback on what we can be doing to support the FreeBSD Project and community, and what features/functions people want supported in FreeBSD"They also have a second report from Kamil CzekirdaA total of $2000 was raised at the conference***
OpenBSD 5.6 released
Note: we're doing this story a couple days early - it's actually being released on November 1st (this Saturday), but we have next week off and didn't want to let this one slip through the cracks - it may be out by the time you're watching thisContinuing their always-on-time six month release cycle, the OpenBSD team has released version 5.6It includes support for new hardware, lots of driver updates, network stack improvements (SMP, in particular) and new security features5.6 is the first formal release with LibreSSL, their fork of OpenSSL, and lots of ports have been fixed to work with itYou can now hibernate your laptop when using a fully-encrypted filesystem (see our tutorial for that)ALTQ, Kerberos, Lynx, Bluetooth, TCP Wrappers and Apache were all removedThis will serve as a "transitional" release for a lot of services: moving from Sendmail to OpenSMTPD, from nginx to httpd and from BIND to UnboundSendmail, nginx and BIND will be gone in the next release, so either migrate to the new stuff between now and then or switch to the ports versionsAs always, 5.6 comes with its own song and artwork - the theme this time was obviously LibreSSLBe sure to check the full changelog (it's huge) and pick up a CD or tshirt to support their effortsIf you don't already have the public key releases are signed with, getting a physical CD is a good "out of bounds" way to obtain it safelyHere are some cool images of the setAfter you do your installation or upgrade, don't forget to head over to the errata page and apply any patches listed there***
Interview - John-Mark Gurney -
[email protected] / @encthenet
Updating FreeBSD's IPSEC stack
News Roundup
Clang in DragonFly BSD
As we all know, FreeBSD got rid of GCC in 10.0, and now uses Clang almost exclusively on i386/amd64Some DragonFly developers are considering migrating over as well, and one of them is doing some work to make the OS more Clang-friendlyWe'd love to see more BSDs switch to Clang/LLVM eventually, it's a lot more modern than the old GCC most are using***
reallocarray(): integer overflow detection for free
One of the less obvious features in OpenBSD 5.6 is a new libc function: "reallocarray()"It's a replacement function for realloc(3) that provides integer overflow detection at basically no extra costTheo and a few other developers have already started a mass audit of the entire source tree, replacing many instances with this new featureOpenBSD's explicit_bzero was recently imported into FreeBSD, maybe someone could also port over this too***
Switching from Linux blog
A listener of the show has started a new blog series, detailing his experiences in switching over to BSD from LinuxAfter over ten years of using Linux, he decided to give BSD a try after listening to our show (which is awesome)So far, he's put up a few posts about his initial thoughts, some documentation he's going through and his experiments so farIt'll be an ongoing series, so we may check back in with him again later on***
Owncloud in a FreeNAS jail
One of the most common emails we get is about running Owncloud in FreeNASNow, finally, someone made a video on how to do just that, and it's even jailedA member of the FreeNAS community has uploaded a video on how to set it up, with lighttpd as the webserver backendIf you're looking for an easy way to back up and sync your files, this might be worth a watch***
Feedback/Questions
Ernõ writes inDavid writes inKamil writes inTorsten writes inDominik writes in***
Mailing List Gold
That's not our IPIs this thing on?***
View all episodes
