Show Notes: linuxactionnews.com/216

The post Linux Action News 216 first appeared on Jupiter Broadcasting.

Show Notes/Links: https://www.bsdnow.tv/325

The post Cracking Rainbows | BSD Now 325 first appeared on Jupiter Broadcasting.

Coming up this week, we’ll be chatting with Shawn Webb about his recent work with ASLR and PIE in FreeBSD.

After that, we’ll be showing you how you can create a reverse SSH tunnel to a system behind a firewall… how sneaky. Answers to your emails plus the latest news, on BSD Now, the place to B.. SD.

Thanks to:

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

FreeBSD foundation August update

• The foundation has published a new PDF detailing some of their recent activities
• It includes project development updates, the 10.1-RELEASE schedule and some of its new features
• There is also a short interview with Dru Lavigne in the “voices from the community” section
• If you’re into hardware, there’s another section about some new FreeBSD server equipment
• In closing, there’s an update on funding too

NSD for an authoritative nameserver

• With BIND having been removed from FreeBSD 10.0, you might be looking to replace your old DNS setup
• This article shows how to use NSD for an authoritative DNS nameserver
• It’s also got a link to a similar article on Unbound, the new favorite recursive and caching resolver (they work great together)
• All the instructions are presented very neatly, with all the little details included
• Less BIND means less vulnerabilities, everybody’s happy

BIND and Nginx removed from OpenBSD

• While we’re on the topic of DNS servers, BIND was finally removed from OpenBSD as well
• The base system contains both NSD and Unbound, so users can transition over between 5.6 (November of this year) and 5.7 (May of next year)
• They’ve also removed nginx from the base system, in favor of the new custom HTTP daemon
• BIND and Nginx are still available in ports if you don’t want to switch
• We’re hoping to have Reyk Floeter on the show next week to talk about it, but scheduling might not work out, so it may be a little later on
• With Apache gone in the upcoming 5.6, It’s also likely that sendmail will be removed before 5.7 – hooray for modern alternatives

NetBSD demo videos

• A Japanese NetBSD developer has been uploading lots of interesting videos
• Unsurprisingly, they’re all featuring NetBSD running on exotic and weird hardware
• Most of them are demoing sound or running a modern Twitter client on an ancient computer
• They’re from the same guy that did the conference wrap-up we mentioned recently

Interview – Shawn Webb – shawn.webb@hardenedbsd.org / @lattera

Address space layout randomization in FreeBSD

Tutorial

Reverse SSH tunneling

News Roundup

Puppet master-agent installation on FreeBSD

• If you’ve got a lot of BSD boxes under your control, or if you’re just lazy, you’ve probably looked into Puppet before
• The author claims a lack of BSD-specific Puppet documentation, so he decided to write up some notes of his own
• He goes through some advantages of using this type of tool for deployments, even when you don’t have a huge number of systems
• The rest of the post explains how to set up both the master and the agent configurations

Misc. pfSense items

• We found a few miscellaneous pfSense articles this past week
• The first one is about the hunt for the “ultimate” free open source firewall, where pfSense is obviously a strong contender
• The second one shows how to log NAT firewall states
• In the third, you can see how to automatically back up your configuration files
• The fourth item shows how to set up PXE booting with pfSense, similar to one of our tutorials

Time Machine backups on ZFS

• If you’ve got a Mac you need to keep backed up, a FreeBSD server with ZFS can take the place of an expensive “time capsule”
• This post walks you through setting up netatalk and mDNS for a very versatile Time Machine backup system
• With a single command on the OS X side, you can write to and read from the BSD box just like a regular external drive
• Surprisingly simple to do, recommended for anyone with Macs on their network

Lumina desktop preview

• Lumina, the BSD-exclusive desktop environment, seems to be coming along nicely
• The main developer has posted an update on the PCBSD blog with some screenshots
• Lots of new features have been added, many of which are documented in the post
• There just might be a BSD Now episode about Lumina coming up.. (cough cough)

Feedback/Questions

• Gary writes in
• Cedric writes in
• Caldwell writes in
• Cary writes in

• All the tutorials are posted in their entirety at bsdnow.tv
• The stunnel tutorial – that’s right, our very first one – got some updates and fixes
• Send all your BSD-related questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv
• We’d really love to feature more articles from the viewers – be it about one of the main BSDs or something like pfSense/FreeNAS – send us anything cool you write (or find)
• Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)
• Next week is something special… we’ll just leave it at that

The post Reverse Takeover | BSD Now 52 first appeared on Jupiter Broadcasting.

After returning from a successful EuroBSDCon in Malta, we\’re back to get you caught up on all the latest news! We\’ve got stories, interviews and a special treat for OpenBSD fans later in the show. All that and more on this week\’s BSD Now, the place to B.. SD.

Direct Download:

Video | HD Video | MP3 Audio | OGG Audio | Torrent | YouTube

RSS Feeds:

MP3 Feed | OGG Feed | iTunes Feed | Video Feed | HD Vid Feed | HD Torrent Feed

– Show Notes: –

Headlines

FreeBSD 9.2 released

• FreeBSD 9.2-RELEASE is finally out
• Highlights include ZFS TRIM and LZ4 support, virtio drivers, dtrace and OpenSSH updates as well as lots of driver improvements
• Will be supported until 2014-09-30
• Get out there and freebsd-update or buildworld!

Four new NetBSD releases

• NetBSD 5.2 and 5.1 branches get security and bugfix updates
• The 6.1 and 6.0 branches were updated soon after, also with security updates and bug fixes
• Check the show notes for the full changelog

BIND being replaced by unbound in FreeBSD

• Most FreeBSD users are familiar with BIND from the security notifications
• It has has many vulnerabilities over the years, and we’ll finally be rid of it
• Being replaced with unbound and ldns, everyone rejoices
• As of September 24th, BIND is no longer built by default
• As of September 30th, BIND was completely removed
• Includes an easy to use script for local DNS
• OpenBSD also has unbound in base, but it\’s not built by default yet

DragonflyBSD future plans

• An announcement was posted that details some possible plans for Dragonfly
• dports (their version of FreeBSD ports) will be switching to GCC 4.7
• i915 support is probably going to be in version 3.6
• Work is being done on HAMMER 2, but it won\’t make it to 3.6
• 3.6 is also likely going to ditch pkgsrc as the default in favor of dports, due to a hugely positive reaction from the community

FreeBSD ports get Stack Protector support

• Some portsnap users noticed a massive sweep of every port being updated
• Shortly after, stack protector support was announced by Bryan Drewery
• Only works on i386 and AMD64 on FreeBSD 10 and AMD64 on 9
• Hopefully will become the default, but needs to go through some testing and exp-runs

EuroBSDCon 2013 wrap-up chat

• BSD Now is back from EuroBSDCon with lots of stories
• We picked up an OpenBSD 5.4 CD set at EuroBSDCon, before the official release
• We\’ll give a little showcase of what\’s inside, they put a lot of effort into it
• Comes with the OS, source code, stickers, music, cool other stuff
• Consider supporting the OpenBSD project

Interview

Kirk McKusick

Tutorial

Faster recompiles with ccache and RAM disks

• Rebuilding ports can be sped up with ccache
• RAM disk eliminates disk I/O bottlenecks
• poudriere uses both of these to speed up binary package builds

News Roundup

List of vBSDCon speakers posted

• Registration will be open until October 23rd
• Presentations covering FreeBSD, OpenBSD, FreeNAS and others

Xen PVHVM added to GENERIC

• It\’s now possible to run FreeBSD 10 under Xen with the GENERIC kernel
• freebsd-update will work now
• With FreeBSD 10 ALPHA 4 just being released, should be interesting
• We should call the new kernel \”XENERIC\”

Dragonfly AMD KMS port

• A Dragonfly user has started porting the new FreeBSD AMD KMS driver
• Still a work in progress, asking for help from the community

NetBSD gets an nVidia driver

• NetBSD gets a preliminary nVidia driver
• So far only supports the GeForce 2MX, so not a lot of use just yet
• No acceleration yet, but it\’s a start

FreeBSD cracks the top 10 on DistroWatch

• Over the last year FreeBSD has steadily moved up the rankings from #18 to #10
• Increasing from an average of 570 to 779 hits per day
• Surpassed CentOS, Puppy Linux and Slackware

Feedback/Questions

• Charlie writes in with a lot of questions: https://slexy.org/view/s21jRKf7lp
• Kjell-Aleksander writes in: https://slexy.org/view/s2M0OKmxMK
• Stefen writes in: https://slexy.org/view/s2YlVuhhUa
• Sichendra writes in: https://slexy.org/view/s2P7KtE5x2

• All the tutorials are posted in their entirety at bsdnow.tv
• Send questions, comments, show ideas/topics, etc to feedback@bsdnow.tv
• We don’t check YouTube comments, JB comments, Reddit, etc. If you want us to see it, send it via email (the preferred way) or Twitter (also acceptable)
• Watch live Wednesdays at 2:00PM Eastern (18:00 UTC)

The post Stacks of Cache | BSD Now 5 first appeared on Jupiter Broadcasting.