BSD Now

By JT PenningtonNews Education How To Tech News

BSD Now episodes

October 25, 2013 A Brief Introduction | BSD Now 8
We chat with Antti Kantee from the NetBSD project about a crazy little thing called rump kernels. We'll also be showing you all the different cool things you can do with BSD and the Tor network, as well as discussing all the latest news. So sit back and enjoy BSD Now - the place to B.. SD.
1 hr 22 min
October 23, 20138: A Brief Introduction
This week, we chat with Antti Kantee from the NetBSD project about a crazy little thing called rump kernels. We'll also be showing you all the different cool things you can do with BSD and the Tor network, as well as discussing all the latest news. So sit back and enjoy BSD Now - the place to B.. SD.
Headlines
FreeBSD July-September 2013 Status Report
Quarterly FreeBSD status report is out with A LOT of updates, we'll cover a few of them
Highlights include AES-NI Improvements for GELI, Capsicum development, Continuation of the Newcons Project, Download Manager Service for the Ports Collection, status updates from all the various FreeBSD teams, FreeBSD on EC2 news, updates to the CSPRNG, much more
We've covered some of these things already, but there's lots to read in the announcement
See full page for details on everything
***
Dragonfly SMP contention update
Lots of work going in to reducing SMP contention in the next Dragonfly release
Anything which forks and/or execs a lot will now run as close to optimally as it is possible to run on a multi-core box
The lead developer was using poudriere and noticed the performance difference, says this is "a fairly major milestone for the project"
Lots of technical details in the mailing list post, check it out
***
FreeBSD gets "first boot" rc.d scripts
Colin Percival added support for scripts that run on the first boot
Might be desirable for embedded systems to automatically download and apply patches
Similarly, it can be used to invoke freebsd-update to patch your system on the first bootup
Could also be used to download and run a script or install ports or packages
Already MFCed to 10-STABLE and 9-STABLE and added to ports
Lots of possibilities
***
NetBSD gets lua scripting in the kernel
NetBSD gained support for the Lua scripting language in the kernel
A luactl command was added to easily manipulate it
It will be interesting to see what can come out of this
Speaking of NetBSD kernels, that leads us into our interview!
***
Interview - Antti Kantee - [email protected] / @anttikantee
The anykernel and rump kernels
rump kernels in userspace, rump kernels + applications on Xen, fs-utils, rump kernel compiled to javascript
Tutorial
Running a Tor relay, bridge, exit or hidden service
News Roundup
Second PCBSD feature digest is out
Weekly PCBSD digest is out to tell you about new features
Mentions switching over all bug reports to trac.pcbsd.org
Life Preserver has finished development and is now being tested
PCBSD 10.0 ISOs coming soon
***
OpenBSD imports VXLAN interface
VXLAN is a virtual extensible local area network tunnel interface
UDP-based tunneling protocol for overlaying virtualized layer 2 networks over layer 3 networks
***
OpenZFS Office Hours
The question and answer session with Matt has been uploaded
Covers lots of topics ranging from cross-compatibility to performance improvements and trivia
We'll be trying to get Matt on for an interview sometime, already contacted him
***
BSDMag's October issue is out
Free monthly BSD magazine releases another issue
Topics include FreeBSD moving to SVN, a BSD programming intro, new PCBSD utilities, migrating from Linux to BSD and OpenBSD LTS updates (which we already covered!)
***
Feedback/Questions
Ben writes in
Brian writes in
Toby writes in
Noah writes in
***
1 hr 22 min
October 18, 2013 Go Directly to Jail(8) | BSD Now 7
On this week’s show, you’ll be getting the full jail treatment. We’ll show you how to create and deploy BSD jails, as well as chatting with Poul-Henning Kamp – the guy who actually invented them! There’s lots of interesting news items to cover as well.
So stay tuned to BSD Now – the place to B.. SD.
1 hr 17 min
October 16, 20137: Go Directly to Jail(8)
On this week's show, you'll be getting the full jail treatment. We'll show you how to create and deploy BSD jails, as well as chatting with Poul-Henning Kamp - the guy who actually invented them! There's lots of interesting news items to cover as well, so stay tuned to BSD Now - the place to B.. SD.
Headlines
FreeBSD turns it up to 11
The -CURRENT branch is now known as 11
10 has been branched to -STABLE
10-BETA1 ISOs are available now
Will be the next -RELEASE, probably next year
***
Stopping the SSH bruteforce with BSD and pf
The Hail Mary Cloud is an SSH bruteforce botnet that takes a different approach
While most botnets pound port 22 rapidly, THMB does it very slowly and passively
This makes prevention based on rate limiting more involved and complex
Nice long blog post about some potential solutions and what we've learned
***
ZFS and GELI in bsdinstall coming soon
The man with the beard strikes again, new patch allows for ZFS-on-root installs
Supports GELI for disk encryption
Might be the push we need to make Michael W Lucas update his FreeBSD book
***
AsiaBSDCon 2014 announced
Will be held in Tokyo, 13-16 March, 2014
The conference is for anyone developing, deploying and using systems based on FreeBSD, NetBSD, OpenBSD, DragonFlyBSD, Darwin and Mac OS X
Call for papers can be found here
***
Interview - Poul-Henning Kamp - [email protected] / @bsdphk
FreeBSD beginnings, md5crypt, jails, varnish and his... telescope project?
Tutorial
Everything you need to know about Jails
News Roundup
New pf queue system
Henning Brauer committed the new kernel-side bandwidth shaping subsystem
Uses the HFSC algorithm behind the scenes
ALTQ to be retired "in a release or two" - everyone should migrate soon
***
Dragonfly imports FreeBSD KMS driver
Hot on the trails of OpenBSD and later FreeBSD, Dragonfly gets AMD KMS
Ported over from the FreeBSD port
***
Get paid to hack OpenSSH
Google has announced they will pay up to $3113.70 for security patches to OpenSSH
Patches can fix security or improve security
If you come up with something, send it to the OpenSSH guys
***
Feedback/Questions
Darren writes in
Kjell-Aleksander writes in
Ryan writes in
Alexander writes in
***
1 hr 17 min
October 09, 20136: Doing It de Raadt Way
On this week's episode we'll show you how to securely run graphical applications in a jail, we sit down and chat with OpenBSD founder Theo de Raadt and, as always, get you caught up on all the latest news. All that and more, this week on BSD Now - the place to B.. SD.
Headlines
HAMMER2 GSOC improvements merged
A student from the Google Summer of Code's patches were committed to upstream Dragonfly
It focuses mainly on compression and updating the I/O infrastructure to work with compression
The ability to boot from HAMMER2 volumes was also added
Check the show notes for a full list of additions and improvements
We'll have someone on the show to talk about HAMMER FS in the future
***
OSNews starts a "BSD family" segment
An OSNews reader decided to share some info about the BSDs
He's writing a three-part series covering FreeBSD, OpenBSD and NetBSD
Pretty good info for Linux switchers
***
pkgsrc-2013Q3 branch announcement
pkgsrc is similar to the ports concept, but for 21 different OSes
The pkgsrc developers make a new release every three months.
13184 total packages for AMD64
If there's any interest, we'll try to get a pkgsrc tutorial written in the future
***
PCBSD 9.2 released
Shortly after the official FreeBSD 9.2 release, PCBSD follows up
Highlights include bootable ZFS boot environments, a rewritten life-preserver utility for backups, improved pkgng support, updated appcafe, major improvements to warden, a GUI pkgng management system, filesystem-based encryption for home directories and much more
***
Interview - Theo de Raadt - [email protected]
The OpenBSD project
Tutorial
Jailed VNC sessions
News Roundup
Curve25519 patch for OpenSSH
Because of recent NSA news, someone implemented an alternative key exchange mechanism
It uses Curve25519 instead of the traditional Diffie-Hellman
Comes from the developer of libssh and is already implemented there
***
FreeBSD 10-ALPHA5 is out
Includes the big removal of BIND
More GNU stuff removed
Bhyve and XEN improvements
Some LLVM fixes
***
M:Tier offering "Long Time Support" for OpenBSD ports
Starting with 5.4, M:Tier will be offering a subscription for LTS support, in addition to their free 6 month version
OpenBSD releases are only supported for 1 year normally (5.2 becomes unsupported when 5.4 comes out, etc.)
This model makes it easier to keep your ports patched for security in a corporate environment
***
Ohio Linuxfest talks uploaded
The OLF 2013 talks have been uploaded
Includes Kirk Mckusick's keynote about building an open source community and Ken Moore's talk about lots of new PCBSD stuff
***
Theo's absence and other updates
In an uncharacteristic manner, Theo started a thread on misc@ instead of finishing it
For the last year, he's not been as involved in OpenBSD development
He's been busy with setting up an Internet Exchange in Calgary
Also mentions some troubles with an imposter Twitter account
***
Feedback/Questions
Kenneth writes in
Jason writes in
Alex writes in
Henson writes in
***
52 min
October 02, 20135: Stacks of Cache
After returning from a successful EuroBSDCon in Malta, we're back to get you caught up on all the latest news! We've got stories, interviews and a special treat for OpenBSD fans later in the show. All that and more on this week's BSD Now, the place to B.. SD.
Headlines
FreeBSD 9.2 released
FreeBSD 9.2-RELEASE is finally out
Highlights include ZFS TRIM and LZ4 support, virtio drivers, dtrace and OpenSSH updates as well as lots of driver improvements
Will be supported until 2014-09-30
Get out there and freebsd-update or buildworld!
***
Four new NetBSD releases
NetBSD 5.2 and 5.1 branches get security and bugfix updates
The 6.1 and 6.0 branches were updated soon after, also with security updates and bug fixes
Check the show notes for the full changelog
***
BIND being replaced by unbound in FreeBSD
Most FreeBSD users are familiar with BIND from the security notifications
It has has many vulnerabilities over the years, and we’ll finally be rid of it
Being replaced with unbound and ldns, everyone rejoices
As of September 24th, BIND is no longer built by default
As of September 30th, BIND was completely removed
Includes an easy to use script for local DNS
OpenBSD also has unbound in base, but it's not built by default yet
***
DragonflyBSD future plans
An announcement was posted that details some possible plans for Dragonfly
dports (their version of FreeBSD ports) will be switching to GCC 4.7
i915 support is probably going to be in version 3.6
Work is being done on HAMMER 2, but it won't make it to 3.6
3.6 is also likely going to ditch pkgsrc as the default in favor of dports, due to a hugely positive reaction from the community
***
FreeBSD ports get Stack Protector support
Some portsnap users noticed a massive sweep of every port being updated
Shortly after, stack protector support was announced by Bryan Drewery
Only works on i386 and AMD64 on FreeBSD 10 and AMD64 on 9
Hopefully will become the default, but needs to go through some testing and exp-runs
***
EuroBSDCon 2013 wrap-up chat
BSD Now is back from EuroBSDCon with lots of stories
We picked up an OpenBSD 5.4 CD set at EuroBSDCon, before the official release
We'll give a little showcase of what's inside, they put a lot of effort into it
Comes with the OS, source code, stickers, music, cool other stuff
Consider supporting the OpenBSD project
***
Interview - Marshall Kirk McKusick - [email protected]
Various topics
Tutorial
Faster recompiles with ccache and tmpfs
News Roundup
List of vBSDCon speakers posted
Registration will be open until October 23rd
Presentations covering FreeBSD, OpenBSD, FreeNAS and others
***
Xen PVHVM added to GENERIC
It's now possible to run FreeBSD 10 under Xen with the GENERIC kernel
freebsd-update will work now
With FreeBSD 10 ALPHA 4 just being released, should be interesting
We should call the new kernel "XENERIC"
***
Dragonfly AMD KMS port
A Dragonfly user has started porting the new FreeBSD AMD KMS driver
Still a work in progress, asking for help from the community
***
NetBSD gets an nVidia driver
NetBSD gets a preliminary nVidia driver
So far only supports the GeForce 2MX, so not a lot of use just yet
No acceleration yet, but it's a start
***
FreeBSD cracks the top 10 on DistroWatch
Over the last year FreeBSD has steadily moved up the rankings from #18 to #10
Increasing from an average of 570 to 779 hits per day
Surpassed CentOS, Puppy Linux and Slackware
***
Feedback/Questions
Charlie writes in
Kjell-Aleksander writes in
Stefen writes in
Sichendra writes in
***
1 hr 4 min
September 26, 2013 Teskeing the Possibilities | BSD Now 4
We talk to Devin Teske about his work with bsdinstall, bsdconfig and all the other interesting things he’s been up to lately.
This week we’re at EuroBSDCon, so we’ve just got an interview for you today. BSD Now will be back next week with a normal episode and lots of stories from the conference. We’ll also try to get some more interviews there.
37 min
September 25, 2013 4: Teskeing the Possibilities
This week we’re at EuroBSDCon, so we’ve just got an interview for you today. BSD Now will be back next week with a normal episode and lots of stories from the conference. We’ll also try to get some more interviews there. For today, though, we talk to Devin Teske about his work with bsdinstall, bsdconfig and all the other interesting things he’s been up to lately.
Interview - Devin Teske - [email protected] / @devinteske
bsdconfig, bsdinstall, sysrc and fdpv
37 min
September 20, 2013 MX with TTX | BSD Now 3
A tutorial on pkgng, we talk with the developers of OpenSMTPD about running a mail server OpenBSD-style, answer YOUR questions and, of course, discuss all the latest news.
All that and more on BSD Now! The place to B… SD.
1 hr 2 min
September 18, 20133: MX with TTX
We follow up last week's poudriere tutorial with a segment about using pkgng, we talk with the developers of OpenSMTPD about running a mail server OpenBSD-style, answer YOUR questions and, of course, discuss all the latest news. All that and more on BSD Now! The place to B... SD.
Headlines
pfSense 2.1-RELEASE is out
Now based on FreeBSD 8.3
Lots of IPv6 features added
Security updates, bug fixes, driver updates
PBI package support
Way too many updates to list, see the full list
***
New kernel based iSCSI stack comes to FreeBSD
Brief explanation of iSCSI
This work replaces the older userland iscsi target daemon and improves the in-kernel iscsi initiator
Target layer consists of:
ctld(8), a userspace daemon responsible for handling configuration, listening for incoming connections, etc, then handing off connections to the kernel after the iSCSI Login phase
iSCSI frontend to CAM Target Layer, which handles Full Feature phase.
The work is being sponsored by FreeBSD Foundation
Commit here
***
MTier creates openup utility for OpenBSD
MTier provides a number of things for the OpenBSD community
For example, regularly updated (for security) stable packages from their custom repo
openup is a utility to easily check for security updates in both base and packages
It uses the regular pkg tools, nothing custom-made
Can be run from cron, but only emails the admin instead of automatically updating
***
OpenSSH in FreeBSD -CURRENT supports DNSSEC
OpenSSH in base is now compiled with DNSSEC support
In this case the default setting for ‘VerifyHostKeyDNS' is yes
OpenSSH will silently trust DNSSEC-signed SSHFP records
It is the secteam's opinion that this is better than teaching users to blindly hit “yes” each time they encounter a new key
***
Interview - Gilles Chehade & Eric Faurot - [email protected] / @poolpOrg & [email protected] / @opensmtpd
OpenSMTPD
Tutorial
Binary packages with pkgng
News Roundup
New progress with Newcons
Newcons is a replacement console driver for FreeBSD
Supports unicode, better graphics modes and bigger fonts
Progress is being made, but it's not finished yet
***
relayd gets PFS support
relayd is a load balancer for OpenBSD which does protocol layers 3, 4, and 7
Currently being ported to FreeBSD. There is a WIP port
Works by negotiating ECDHE (Elliptic curve Diffie-Hellman) between the remote site and relayd to enable TLS/SSL Perfect Forward Secrecy, even when the client does not support it
***
OpenZFS Launches
Slides from LinuxCon
Will feature ‘Office Hours' (Ask an Expert)
Goal is to reduce the differences between various open source implementations of ZFS, both user facing and pure lines of code
***
FreeBSD 10-CURRENT becomes 10.0-ALPHA
Glen Barber tagged the -CURRENT branch as 10.0-ALPHA
In preparation for 10.0-RELEASE, ALPHA2 as of 9/16
Everyone was rushing to get their big commits in before 10-STABLE, which will be branched soon
10 is gonna be HUGE
***
September issue of BSD Mag
BSD Mag is a monthly online magazine about the BSDs
This month's issue has some content written by Kris
Topics include MidnightBSD live cds, server maintenance, turning a Mac Mini into a wireless access point with OpenBSD, server monitoring, FreeBSD programming, PEFS encryption and a brief introduction to ZFS
***
The FreeBSD IRC channel is official
For many years, the FreeBSD freenode channel has been “unofficial” with a double-hash prefix
Finally it has freenode's blessing and looks like a normal channel!
The old one will forward to the new one, so your IRC clients don't need updating
***
OpenSSH 6.3 released
After a big delay, Damien Miller announced the release of 6.3
Mostly a bugfix release, with a few new features
Of note, SFTP now supports resuming failed downloads via -a
***
Feedback/Questions
[James writes in](http://slexy.org/view/s2wBbbSWGz]
[Elias writes in](http://slexy.org/view/s2LMDF3PYx]
[Gabor writes in](http://slexy.org/view/s2aCodo65X]
Possibly the coolest feedback we've gotten thus far: Baptiste Daroussin, leader of the FreeBSD ports management team and author of poudriere and pkgng, has put up the BSD Now poudriere tutorial on the official documentation!
***
1 hr 2 min

About BSD Now

From the publisher's feed

Created by three guys who love BSD, we cover the latest news and have an extensive series of tutorials, as well as interviews with various people from all areas of the BSD community. It also serves as…