portmgr – Jupiter Broadcasting

Network Iodometry | BSD Now 46

chris — Thu, 17 Jul 2014 11:26:02 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We’re back and this week we’ll be showing you how to tunnel out of a restrictive network using only DNS queries.

We also sat down with Bryan Drewery, from the FreeBSD portmgr team, to talk all about their building cluster and some recent changes.

All the latest news and answers to your emails, on BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

RSS Feeds:

Become a supporter on Patreon:

– Show Notes: –

Headlines

EuroBSDCon 2014 registration open

September is getting closer, and that means it’s time for EuroBSDCon – held in Bulgaria this year
Registration is finally open to the public, with prices for businesses ($287), individuals ($217) and students ($82) for the main conference until August 18th
Tutorials, sessions, dev summits and everything else all have their own pricing as well
Registering between August 18th – September 12th will cost more for everything
You can register online here and check hotels in the area
The FreeBSD foundation is also accepting applications for travel grants

OpenBSD SMP PF update

A couple weeks ago we talked about how DragonflyBSD updated their PF to be multithreaded
With them joining the SMP ranks along with FreeBSD, a lot of users have been asking about when OpenBSD is going to make the jump
In a recent mailing list thread, Henning Brauer addresses some of the concerns
The short version is that too many things in OpenBSD are currently single-threaded for it to matter – just reworking PF by itself would be useless
He also says PF on OpenBSD is over four times faster than FreeBSD’s old version, presumably due to those extra years of development it’s gone through
There’s also been even more recent concern about the uncertain future of FreeBSD’s PF, being mostly unmaintained since their SMP patches
We reached out to four developers (over week ago) about coming on the show to talk about OpenBSD network performance and SMP, but they all ignored us

Introduction to NetBSD pkgsrc

An article from one of our listeners about how to create a new pkgsrc port or fix one that you need
The post starts off with how to get the pkgsrc tree, shows how to get the developer tools and finally goes through the Makefile format
It also lists all the different bmake targets and their functions in relation to the porting process
Finally, the post details the whole process of creating a new port

FreeBSD 9.3-RELEASE

After three RCs, FreeBSD 9.3 was scheduled to be finalized and announced today but actually came out yesterday
The full list of changes is available, but it’s mostly a smaller maintenance release
Lots of driver updates, ZFS issues fixed, hardware RNGs are entirely disabled by default, netmap framework updates, read-only ext4 support was added, the vt driver was merged from -CURRENT, new hardware support (including radeon KMS), various userland tools got new features, OpenSSL and OpenSSH were updated… and much more
If you haven’t jumped to the 10.x branch yet (and there are a lot of people who haven’t!) this is a worthwhile upgrade – 9.2-RELEASE will reach EOL soon
Good news, this will be the first release with PGP-signed checksums on the FTP mirrors – a very welcome change
9.2’s EOL was extended until December of this year
With that out of the way, the 10.1-RELEASE schedule was posted

Interview – Bryan Drewery – bdrewery@freebsd.org / @bdrewery

The FreeBSD package building cluster, pkgng, ports, various topics

Tutorial

News Roundup

SSH two-factor authentication on FreeBSD

We’ve previously mentioned stories on how to do two-factor authentication with a Yubikey or via a third party website
This blog post tells you how to do exactly that, but with your Google account and the pam_google_authenticator port
Using this setup, every user that logs in with a password will have an extra requirement before they can gain access – but users with public keys can login normally
It’s a really, really simple process once you have the port installed – full details on the page

Ditch tape backup in favor of FreeNAS

The author of this post shares some of his horrible experiences with tape backups for a client
Having constant, daily errors and failed backups, he needed to find another solution
With 1TB of backups, tapes just weren’t a good option anymore – so he switched to FreeNAS (after also ruling out a pre-built NAS)
The rest of the article details his experiences with it and tells about his setup

NetBSD vs FreeBSD, desktop experiences

A NetBSD and pkgsrc developer details his experiences running NetBSD on a workstation at his job
Becoming more and more disappointed with graphics performance, he finally decides to give FreeBSD 10 a try – especially since it has a native nVidia driver
“Running on VAX, PlayStation 2 and Amiga is fun, but I’ll tell you a little secret: nobody cares anymore about VAX, PlayStation 2 and Amiga.”
He’s become pretty satisfied with FreeBSD, a modern choice for a 2014 desktop system

PCBSD not-so-weekly digest

Speaking of choices for a desktop system, it’s the return of the PCBSD digest!
Warden and PBI_add have gotten some interesting new features
You can now create jails “on the fly” when adding a new PBI to your application library
Bulk jail creation is also possible now, and it’s really easy
New Jenkins integration, with public access to Poudriere logs as well (https://builds.pcbsd.org)
PkgNG 1.3.0.rc2 testing for EDGE users

Feedback/Questions

All the tutorials are posted in their entirety at bsdnow.tv
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
We love hearing from listeners – tell us what you think of the show or what you’d like to see!
If you want to come on for an interview or have a tutorial you’d like to see, let us know
Congrats to the new FreeBSD core team members
The first (and second.. and third..) portable release of LibreSSL is available on the OpenBSD FTP sites, with a brief announcement email
Test it on your platform of choice, including building ports against it, and report your findings to either the LibreSSL team or the port maintainers so we can increase compatibility
Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post Network Iodometry | BSD Now 46 first appeared on Jupiter Broadcasting.

Port Authority | BSD Now 26

chris — Thu, 27 Feb 2014 21:34:25 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

On today\’s show we have an interview with Joe Marcus Clark, one of the original portmgr members in FreeBSD, and one of the key GNOME porters. Keeping along with that topic, we have a FreeBSD ports tutorial for you as well. The latest news and answers to your BSD questions, right here on BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

Tailoring OpenBSD for an old, strange computer

The author of this article had an OmniBook 800CT, which comes with a pop-out mouse, black and white display, 32MB of RAM and a 133MHz CPU
Obviously he had to install some kind of BSD on it!
This post goes through all his efforts of trimming down OpenBSD to work on such a limited device
He goes through the trial and error of \”compile, break it, rebuild, try again\”
After cutting a lot out from the kernel, saving a precious megabyte here and there, he eventually gets it working

pkgsrcCon and BSDCan

pkgsrccon is \”a technical conference for people working on the NetBSD Packages Collection, focusing on existing technologies, research projects, and works-in-progress in pkgsrc infrastructure\”
This year it will be on June 21st and 22nd
The schedule is still being worked out, so if you want to give a talk, submit it
BSDCan\’s schedule was also announced
We\’ll be having presentations about ARM on NetBSD and FreeBSD, PF on OpenBSD, Capsicum and casperd, ASLR in FreeBSD, more about migrating from Linux to BSD, FreeNAS stuff and much more
Kris\’ presentation was accepted!
Tons of topics, look forward to the recorded versions of all of them hopefully!

Two factor auth with pushover

A new write-up from our friend Ted Unangst
Pushover is \”a web hook to smartphone push notification gateway\” – you sent a POST to a web server and it sends a code to your phone
His post goes through the steps of editing your login.conf and setting it all up to work
Now you can get a two factor authenticated login for ssh!

The status of GNOME 3 on BSD

It\’s no secret that the GNOME team is a Linux-obsessed bunch, almost to the point of being hostile towards other operating systems
OpenBSD keeps their GNOME 3 ports up to date very well, and Antoine Jacoutot writes about his work on that and how easy it is to use
This post goes through the process of how simple it is to get GNOME 3 set up on OpenBSD and even includes a screencast
A few recent posts from some GNOME developers show that they\’re finally working with the BSD guys to improve portability
The FreeBSD and OpenBSD teams are working together to bring the latest GNOME to all of us – it\’s a beautiful thing
This goes right along with our interview today!

This episode was brought to you by

Interview – Joe Marcus Clark – marcus@freebsd.org

The life and daily activities of portmgr, GNOME 3, Tinderbox, portlint, various topics

Tutorial

The FreeBSD Ports Collection

News Roundup

DragonflyBSD 3.8 goals and 3.6.1 release

The Dragonfly team is thinking about what should be in version 3.8
On their bug tracker, it lists some of the things they\’d like to get done before then
In the meantime, 3.6.1 was released with lots of bugfixes

NYCBSDCon 2014 wrap-up piece

We\’ve got a nice wrap-up titled \”NYCBSDCon 2014 Heats Up a Cold Winter Weekend\”
The author also interviews GNN about the conference
There\’s even a little \”beginner introduction\” to BSD segment
Includes a mention of the recently-launched journal and lots of pictures from the event

FreeBSD and Linux, a comparative analysis

GNN in yet another story – he gave a presentation at the NYLUG about the differences between FreeBSD and Linux
He mentions the history of BSD, the patch set and 386BSD, the lawsuit, philosophy and license differences, a complete system vs \”distros,\” development models, BSD-only features and technologies, how to become a committer, overall comparisons, different hats and roles, the different bsds and their goals and actual code differences
Serves as a good introduction you can show your Linux friends

PCBSD CFT and weekly digest

Upgrade tools have gotten a major rewrite
You have to help test it, there is no choice! Read more here
How dare Kris be \”unimpressed with\” freebsd-update and pkgng!?
Various updates and fixes

Feedback/Questions

Jeffrey writes in: https://slexy.org/view/s213KxUdVj
Shane writes in: https://slexy.org/view/s20lwkjLVK
Ferdinand writes in: https://slexy.org/view/s21DqJs77g
Curtis writes in: https://slexy.org/view/s20eXKEqJc
Clint writes in: https://slexy.org/view/s21XMVFuVu
Peter writes in: https://slexy.org/view/s20Xk05MHe

All the tutorials are posted in their entirety at bsdnow.tv
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Our email backlog is totally caught up now, so email us all your questions!
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)

The post Port Authority | BSD Now 26 first appeared on Jupiter Broadcasting.

Eclipsing Binaries | BSD Now 18

chris — Tue, 31 Dec 2013 21:36:57 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

Put away the Christmas trees and update your ports trees! We\’re back with the first show of 2014, and we\’ve got some catching up to do. This time on the show, we have an interview with Baptiste Daroussin about the future of FreeBSD binary packages. Following that, we\’ll be highlighting a cool script to do binary upgrades on OpenBSD. Lots of holiday news and listener feedback, on BSD Now – the place to B.. SD.

Thanks to:

iXsystems: This is what 80 cores and 1TB of RAM looks like!

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

Faces of FreeBSD continues

Our first one details Shteryana Shopova, the local organizer for EuroBSDCon 2014 in Sophia
Gives some information about how she got into BSD
\”I installed FreeBSD on my laptop, alongside the Windows and Slackware Linux I was running on it at the time. Several months later I realized that apart from FreeBSD, I hadn\’t booted the other two operating systems in months. So I wiped them out.\”
She wrote bsnmpd and extended it with the help of a grant from the FreeBSD Foundation
We\’ve also got one for Kevin Martin
Started off with a pinball website, ended up learning about FreeBSD from an ISP and starting his own hosting company
\”FreeBSD has been an asset to our operations, and while we have branched out a bit, we still primarily use FreeBSD and promote it whenever possible. FreeBSD is a terrific technology with a terrific community.\”

OpenPF?

A blog post over at the Dragonfly digest
What if we had some cross platform development of OpenBSD\’s firewall?
Similar to portable OpenSSH or OpenZFS, there could be a centrally-developed version with compatibility glue
Right now FreeBSD 9\’s pf is old, FreeBSD 10\’s pf is old (but has the best performance of any implementation due to custom patches), NetBSD\’s pf is old (but they\’re working on a fork) and Dragonfly\’s pf is old
Further complicated by the fact that PF itself doesn’t have a version number, since it was designed to just be ‘the pf that came with OpenBSD 5.4’
Not likely to happen any time soon, but it\’s good food for thought

Year of BSD on the server

A good blog post about switching servers from Linux to BSD
2014 is going to be the year of a lot of switching, due to FreeBSD 10\’s amazing new features
This author was particularly taken with pkgng and the more coherent layout of BSD systems
Similarly, there was also a recent reddit thread, \”Why did you choose BSD over Linux?\”
Both are excellent reads for Linux users that are thinking about making the switch, send \’em to your friends

Getting to know your portmgr

This time in the series they interview Bryan Drewery, a fairly new addition to the team
He started maintaining portupgrade and portmaster, and eventually ended up on the ports management team
Believe it or not, his wife actually had a lot to do with him getting into FreeBSD full-time
Lots of fun trivia and background about him
Speaking of portmgr, our interview for today is…

This episode was brought to you by

Interview – Baptiste Daroussin – bapt@freebsd.org

The future of FreeBSD\’s binary packages, ports\’ features, various topics

Tutorial

Binary upgrades in OpenBSD

Using a third party script, binary upgrades in OpenBSD are easy
It automates a lot of the manual work and saves time – great for large deployments

News Roundup

pfSense december hang out

Interview/presentation from pfSense developer Chris Buechler with an accompanying blog post
\”This is the first in what will be a monthly recurring series. Each month, we’ll have a how to tutorial on a specific topic or area of the system, and updates on development and other happenings with the project. We have several topics in mind, but also welcome community suggestions on topics\”
Speaking of pfSense, they recently opened an online store
We\’re planning on having a pfSense episode next month!

BSDMag December issue is out

The free monthly BSD magazine gets a new release for December
Topics include CARP on FreeBSD, more BSD programming, \”unix basics for security professionals,\” some kernel introductions, using OpenBSD as a transparent proxy with relayd, GhostBSD overview and some stuff about SSH

OpenBSD gets tmpfs

In addition to the recently-added FUSE support, OpenBSD now has tmpfs
To get more testing, it was enabled by default in -current
Should make its way into 5.5 if everything goes according to plan
Enables lots of new possibilities, like our ccache and tmpfs guide

PCBSD weekly digests

Catching up with all the work going on in PCBSD land..
10.0-RC2 is now available
The big pkgng 1.2 problems seem to have been worked out

Feedback/Questions

Remy writes in: https://slexy.org/view/s2UrUzlnf6
Jason writes in: https://slexy.org/view/s2iqnywwKX
Rob writes in: https://slexy.org/view/s2IUcPySbh
John writes in: https://slexy.org/view/s21aYlbXz2
Stuart writes in: https://slexy.org/view/s21vrYSqU8

All the tutorials are posted in their entirety at bsdnow.tv
The jail tutorial and disk encryption tutorial have gotten some improvements and updates
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)
Happy new year everybody!

The post Eclipsing Binaries | BSD Now 18 first appeared on Jupiter Broadcasting.

Kickin’ NAS | BSD Now 15

chris — Thu, 12 Dec 2013 22:07:53 +0000

To view this video please enable JavaScript, and consider upgrading to a web browser that supports HTML5 video

We\’ll be looking at the new version of FreeNAS, a BSD-based network attached storage solution, as well as talking to Josh Paetzel – one of the key developers of FreeNAS. Actually, he\’s on the FreeBSD release engineering team too, and does quite a lot for the project. We\’ve got answers to viewer-submitted questions and plenty of news to cover, so get ready for some BSD Now – the place to B.. SD.

Thanks to:

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

More faces of FreeBSD

Another installment of the FoF series
This time they talk with Reid Linnemann who works at Spectra Logic
Gives a history of all the different jobs he\’s done, all the programming languages he knows
Mentions how he first learned about FreeBSD, actually pretty similar to Kris\’ story
\”I used the system to build and install ports, and explored, getting actively involved in the mailing lists and forums, studying, passing on my own limited knowledge to those who could benefit from it. I pursued my career in the open source software world, learning the differences in BSD and GNU licensing and the fragmented nature of Linux distributions, realizing the FreeBSD community was more mature and well distributed about industry, education, and research. Everything steered me towards working with and on FreeBSD.\”
Now works on FreeBSD as his day job
The second one covers Brooks Davis
FreeBSD committer since 2001 and core team member from 2006 through 2012
He\’s helped drive our transition from a GNU toolchain to a more modern LLVM-based toolchain
\”One of the reasons I like FreeBSD is the community involved in the process of building a principled, technically-advanced operating system platform. Not only do we produce a great product, but we have fun doing it.\”
Lots more in the show notes

We cannot trust Intel and Via’s chip-based crypto

We woke up to see FreeBSD on the front page of The Register, Ars Technica and Hacker News for their strong stance on security and respecting privacy – good to see big news outlets giving credit where it\’s due
At the EuroBSDCon dev summit, there was some discussion about removing support for hardware-based random number generators.
FreeBSD\’s /dev/random got some updates and, for 10.0, will no longer allow the use of Intel or VIA\’s hardware RNGs as the sole point of entropy
\”It will still be possible to access hardware random number generators, that is, RDRAND, Padlock etc., directly by inline assembly or by using OpenSSL from userland, if required, but we cannot trust them any more\”
Hopefully others will follow FreeBSD\’s example very soon

OpenSMTPD 5.4.1 released

The OpenBSD developers came out with major a new version
Improved config syntax (please check your smtpd.conf before upgrading)
Adds support for TLS Perfect Forward Secrecy and custom CA certificate
MTA, Queue and SMTP server improvements
SNI support confirmed for the next version
Check the show notes for the full list of changes, pretty huge release
Watch Episode 3 for an interview we did with the developers

More getting to know your portmgr

The portmgr secretary, Thomas Abthorpe, interviews… himself!
Joined as -secretary in March 2010, upgraded to full member in March 2011
His inspiration for using BSD is \”I wanted to run a webserver, and I wanted something free. I was going to use something linux, then met up with a former prof from university, and shared my story with him. He told me FreeBSD was the way to go.\”
Mentions how he loves that anyone can contribute and watch it \”go live\”
The second one covers Baptiste Daroussin
The reason for his nick, bapt, is \”Baptiste is too long to type\”
There\’s even a video of bapt joining the team!

Interview – Josh Paetzel – josh@ixsystems.com / @freenasteam

FreeNAS 9.2.0

Tutorial

[FreeNAS walkthrough]

News Roundup

Introducing configinit

CloudInit is \”a system originally written for Ubuntu which performs configuration of a system at boot-time based on user-data provided via EC2\”
Wasn\’t ideal for FreeBSD since it requires python and is designed around the concept of configuring a system by running commands (rather than editing configuration files)
Colin Percival came up with configinit, a FreeBSD alternative
Alongside his new \”firstboot-pkgs\” port, it can spin up a webserver in 120 seconds from \”launch\” of the EC2 instance
Check the show notes for full blog post

OpenSSH support for Ed25519 and bcrypt keys

New Ed25519 key support (hostkeys and user identities) using the public domain ed25519 reference code
SSH private keys were encrypted with a symmetric key that\’s just an MD5 of their password
Now they\’ll be using bcrypt by default
We\’ll get more into this in next week\’s interview

The FreeBSD challenge

A member of the Linux foundation blogs about using FreeBSD
Goes through all the beginner steps, has to \”unlearn\” some of his Linux ways
Only a few posts as of this time, but it\’s a continuing series that may be helpful for switchers
Maybe some day he\’ll be on the FreeBSD foundation instead!

PCBSD weekly digest

GNOME3, cinnamon and mate desktops are in the installer
Compat layer updated to CentOS 6, enables newest Skype
Looking for people to test printers and hplip
Continuing work on grub, but the ability to switch between bootloaders is back

Feedback/Questions

Bostjan writes in: https://slexy.org/view/s20k2gumbP
Jason writes in: https://slexy.org/view/s2PM8tfKfe
John writes in: https://slexy.org/view/s2KgXIKqrJ
Kjell-Aleksander writes in: https://slexy.org/view/s20DLk8bac
Alexy writes in: https://slexy.org/view/s2nmmJHvgR

All the tutorials are posted in their entirety at bsdnow.tv
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)

The post Kickin' NAS | BSD Now 15 first appeared on Jupiter Broadcasting.

Bridging the Gap | BSD Now 13

chris — Fri, 29 Nov 2013 10:02:22 +0000

We sit down for an interview with Jordan Hubbard, one of the founders of the FreeBSD project – and the one who invented ports! Later in the show, we\’ll be showing you some new updates to the OpenBSD router tutorial from a couple weeks ago. We\’ve also got news, your questions and even our first viewer-submitted video, right here on BSD Now.. the place to B.. SD.

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

Getting to know your portmgr

In this interview they talk to one of the \”Annoying Reminder Guys\” – Erwin Lansing, the second longest serving member of FreeBSD\’s portmgr (also vice-president of the FreeBSD Foundation)
He actually maintains the .dk ccTLD
Describes FreeBSD as \”the best well-hidden success story in operating systems, by now in the hands of more people than one can count and used by even more people, and not one of them knows it! It’s not only the best operating system currently around, but also the most supportive and inspiring community.\”
In the next one they speak with Martin Wilke (miwi@) which is strange since he\’s \”on hiatus\” + hasn\’t done anything in a long time
The usual, \”what inspires you about FreeBSD\” \”how did you get into it\” etc.

vBSDCon wrap-up compilation

Lots of write-ups about vBSDCon gathered in one place
Some from OpenBSD guys
Some from FreeBSD guys
Some from RootBSD
Some from iXsystems
Some from Verisign
And of course our own wrap-up chat in BSD Now Episode 009

Faces of FreeBSD

This week they talk to Gábor Páli from Hungary
Talks about his past as a game programmer and how it got involved with FreeBSD
\”I met János Háber, who admired the technical merits of FreeBSD and recommended it over the popular GNU/Linux distributions. I downloaded FreeBSD 4.3-RELEASE, found it reliable, consistent, easy to install, update and use.\”
He\’s been contributing since 2008 and does lots of work with Haskell in ports
He also organizes EuroBSDCon and is secretary of the FreeBSD Core Team

Dragonfly 3.6 released

dports now default instead of pkgsrc
Big SMP scaling improvements
Experimental i915 and KMS support
See our interview with Justin Sherrill if you want to hear (a lot) more about it – nearly an hour long
Matt Dillion’s comments

ZFS TRIM bug on FreeBSD -CURRENT r258632

Do not upgrade to or past 258632, there is a ZFS TRIM bug that could result in data loss
If you have already upgraded, disable TRIM with vfs.zfs.trim.enabled=0 immediately
Roll back to a previous kernel, and then scrub your pool
A fix is expected shortly

Interview – Jordan Hubbard – jkh@freebsd.org / @omgjkh

FreeBSD\’s founding and future

Tutorial

Building an OpenBSD router, part 2

Note: there was a mistake in the video version of the tutorial, please consult the written version for the proper instructions.
A few weeks back we showed you how to build a high performance BSD router
Lots of work has been done to clean up and reorganize it, it\’s cut up into sections now, also has a new section about power saving
It\’s been updated for \”switchless\” operation, using a virtual ethernet interface and some bridging magic (special thanks to Ryan for helping me test that)
This updated guide will show you how to do an all-in-one router to replace your consumer one without any additional hardware
We\’ll also showcase some extras – the email alerts, errata checking script and SSH/Tor tunnels
The errata script now auto-detects if you\’re running -release, -stable or -current and acts accordingly; can automatically patch your source code and alert you

News Roundup

pfSense 2.1 on AWS EC2

We now have pfSense 2.1 available on Amazon’s Elastic Compute Cloud (EC2)
In keeping with the community spirit, they’re also offering a free \”public\” AMI
Check the FAQ and User Guide on their site for additional details
Interesting possibilities with pfSense in the cloud

Puffy on the desktop

Distrowatch, a primarily Linux-focused site, features an OpenBSD 5.4 review
They talk about using it on the desktop, how to set it up
Very long write-up, curious Linux users should give it a read
Ends with \”Most people will still see OpenBSD as an operating system for servers and firewalls, but OpenBSD can also be used in desktop environments if the user doesn\’t mind a little manual work. The payoff is a very light, responsive system that is unlikely to ever misbehave\”

Two-factor authentication with SSH

Blog post about using a yubikey with SSH public keys
Uses a combination of a OTP, BSDAuth and OpenBSD\’s login.conf, but it can be used with PAM on other systems as well
Allows for two-factor authentication (a la gmail) in case your private key is compromised
Anyone interested in an extra-hardened SSH server should give it a read

PCBSD weekly digest

10.0 has approximately 400 PBIs for public consumption
They will be merging the GNOME3, MATE and Cinnamon desktops into the 10.0 ports tree – please help test them, this is pretty big news in and of itself!
PCDM is coming along nicely, more bugs are getting fixed
Added ZFS dataset options to PCBSD’s new text installer front-end

Feedback/Questions

Ben writes in: https://slexy.org/view/s2ag1fA7Ug
Florian writes in: https://slexy.org/view/s2TSIvZzVO
Zach writes in: https://slexy.org/view/s20Po4soFF
Addison writes in: https://slexy.org/view/s20ntzqi9c
Adam writes in: https://slexy.org/view/s2EYJjVKBk
Adam\’s BSD Router Project tutorial can be downloaded here.

Lots of links in today\’s show notes, check them out. All the tutorials are posted in their entirety at bsdnow.tv
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
If you have stories about how you or your company uses BSD, interesting things you\’ve done, crazy network stories or cool projects, send them to us!
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)
Reminder: the FreeBSD foundation\’s year-end donation is going on, please help out if you can. Happy Thanksgiving!

The post Bridging the Gap | BSD Now 13 first appeared on Jupiter Broadcasting.

The Gateway Drug | BSD Now 11

chris — Fri, 15 Nov 2013 10:35:21 +0000

We sit down to chat with Justin Sherrill of the DragonflyBSD project about their new 3.6 release. Later on, we\’ll be showing you a huge tutorial that\’s been baking for over a month – how to build an OpenBSD router that\’ll destroy any consumer router on the market! There\’s lots of news to get caught up on as well, so sit back and enjoy some BSD Now – the place to B.. SD.

Direct Download:

RSS Feeds:

– Show Notes: –

Headlines

OpenSSH 6.4 released

Security fixes in OpenSSH don\’t happen very often
6.4 fixes a memory corruption problem, no new features
If exploited, this vulnerability might permit code execution with the privileges of the authenticated user and may therefore allow bypassing restricted shell/command configurations.
Disabling AES-GCM in the server configuration is a workaround
Only affects 6.2 and 6.3 if compiled against a newer OpenSSL (so FreeBSD 9\’s base OpenSSL is unaffected, for example)
Full details here

Getting to know your portmgr-lurkers

Next entry in portmgr interview series
This time they chat with Mathieu Arnold, one of the portmgr-lurkers we mentioned previously
Lots of questions ranging from why he uses BSD to what he had for breakfast
Another one was since released, with Antoine Brodin aka antoine@

FUSE in OpenBSD

As we glossed over last week, FUSE was recently added to OpenBSD
Now the guys from the OpenBSD Journal have tracked down more information
This version is released under an ISC license
Should be in OpenBSD 5.5, released a little less than 6 months from now
Will finally enable things like SSHFS to work in OpenBSD

Automated submission of kernel panic reports

New tool from Colin Percival
Saves information about kernel panics and emails it to FreeBSD
Lets you review before sending so you can edit out any private info
Automatically encrypted before being sent
FreeBSD never kernel panics so this won\’t get much use

Interview – Justin Sherrill – justin@shiningsilence.com / @dragonflybsd

DragonflyBSD 3.6 and the Dragonfly Digest

Tutorial

Building an OpenBSD Router

Replace your crappy consumer router with a custom-built one
Uses the pf firewall and other built-in OpenBSD utilities
Very secure, built entirely on top of open source software
Puts YOU in control of your network

News Roundup

BSD router project 1.5 released

Nice timing for our router tutorial; TBRP is a FreeBSD distribution for installing on a router
It\’s an alternative to pfSense, but not nearly as well known or popular
New version is based on 9.2-RELEASE, includes lots of general updates and bugfixes
Fits on a 256MB Compact Flash/USB drive

Curve25519 now default key exchange

We mentioned in an earlier episode about a patch for curve25519
Now it\’s become the default for key exchange
Will probably make its way into OpenSSH 6.5, would\’ve been in 6.4 if we didn\’t have that security vulnerability
It\’s interesting to see all these big changes in cryptography in OpenBSD lately

FreeBSD kernel selection in boot menu

Adds a kernel selection menu to the beastie menu
List of kernels is taken from \’kernels\’ in loader.conf as a space or comma separated list of names to display (up to 9)
From our good buddy Devin Teske

PCBSD weekly digest

PCDM has officially replaced GDM as the default login manager
New ISO build scripts (we got a sneak preview last week)
Lots of bug fixes
Second set of 10-STABLE ISOs available with new artwork and much more

Theo de Raadt speaking at MUUG

Theo will be speaking at Manitoba UNIX User Group in Winnipeg
On Friday, Nov 15, 2013 at 5:30PM (see show notes for the address)
If you\’re watching the show live you have time to make plans, if you\’re watching the downloaded version it might be happening right now!
No agenda, but expect some OpenBSD discussion
We\’ll let you know if there is a recorded version.

Feedback/Questions

Dave writes in: https://slexy.org/view/s21YXhiLRB
James writes in: https://slexy.org/view/s215EjcgdM
Allen writes in (lol): https://slexy.org/view/s21mCP2ecL
Chess writes in: https://slexy.org/view/s207ePFrna
Frank writes in: https://slexy.org/view/s20iVFXJve

The very extensive written version of today\’s tutorial, with lots of extras we didn\’t mention, is posted on bsdnow.tv, as always – give it a read! There are sections about setting up the router to tunnel all (or specific parts of) your traffic through a VPN or Tor, how to make the router automatically check for updates and email them to you, and much more.
Send questions, comments, show ideas/topics, etc to feedback@bsdnow.tv
We don’t check YouTube comments, JB comments, Reddit, etc. If you want us to see it, send it via email (the preferred way) or Twitter (also acceptable)
Watch live Wednesdays at 2:00PM Eastern (19:00 UTC)

The post The Gateway Drug | BSD Now 11 first appeared on Jupiter Broadcasting.