DiscoverBSD - The BSD community linklog

FreeBSD 14.4 on Raspberry Pi Zero 2W

2026-04-10T13:03:28Z

This article details the installation and configuration of FreeBSD 14.4 on a Raspberry Pi Zero 2 W, including hardware setup with a WaveShare ETH/USB HUB HAT and PoE power. The process involves downloading the FreeBSD RPI image, writing it to an SD card, and booting the system, which automatically resizes storage on first launch. While the onboard wireless card (BCM43438) is unsupported, Ethernet connectivity is achieved via the USB HAT, and basic configurations like timezone, NTP synchronization, and static IP assignment are covered. The system demonstrates stability with CPU frequency scaling between 600 MHz and 1 GHz, and the author plans to use it as a DNS resolver and DHCP server. Documentation links and troubleshooting steps are provided for reference.

OpenSSH 10.3/10.3p1 released with security fixes and new features

2026-04-10T13:02:52Z

OpenSSH 10.3 and 10.3p1 were released on April 2, 2026, introducing security fixes, feature improvements, and bug corrections. Key security updates include fixes for shell metacharacter validation in usernames, certificate principal matching, and scp handling of setuid/setgid bits. The release also removes compatibility for implementations lacking rekeying support and tightens handling of empty certificate principals. New features include support for IANA-assigned SSH agent forwarding codepoints, improved multiplexing commands, and floating-point time precision for PerSourcePenalties. Additionally, the release enhances FIDO/webauthn support, adds ED25519 PKCS8 key writing, and improves performance for the sntrup761 key agreement algorithm. A future deprecation of SHA1 SSHFP records was also announced due to security weaknesses.

BSD performance and compatibility on PINE64 ROCKPro64

2026-04-10T05:42:11Z

A detailed evaluation of the PINE64 ROCKPro64 single-board computer running NetBSD, OpenBSD, and FreeBSD highlights its capabilities for lightweight NAS and general-purpose use. The article emphasizes the importance of updating U-Boot to version 2022.01 for improved hardware support, including PCI-e expansion cards and NVMe/SATA storage, which were poorly recognized under the default 2017.09 firmware. Performance metrics show idle power consumption around 3.2–3.5W across all three OSes, with temperatures hovering near 46–48°C, while CPU load tests (via ubench) push power usage to 6.7–7.5W and temperatures to 70–78°C. NetBSD and OpenBSD fully utilize the Cortex-A72’s 1.8GHz max frequency, whereas FreeBSD caps at 1.4GHz, possibly due to configuration limits. All systems support dynamic CPU frequency scaling (via estd, apmd, or powerd) and recognize USB storage, though the USB-C port remains non-functional. The ROCKPro64’s 4GB RAM model proves viable for ZFS-based NAS setups, with each BSD variant offering stable performance, leaving the choice to administrative preference or specific features like FreeBSD’s pkg ecosystem or OpenBSD’s conservative thermal throttling.

Valuable News – 2026/04/06

2026-04-10T05:41:22Z

The Valuable News weekly roundup curates notable updates, articles, and resources primarily focused on UNIX, BSD, and Linux systems. This edition highlights Sylve 0.2.1’s release and its inclusion in FreeBSD ports, a humorous April Fools' prank by GhostBSD introducing an AI assistant named Casper, and advancements like FreeBSD’s planned adoption of newer Linux graphics drivers. It also covers security topics such as SSH certificates for improved authentication and a FreeBSD kernel remote code execution vulnerability (CVE-2026-4747) demonstrated by an AI. Additional content includes NetBSD’s Cells for kernel-enforced isolation, OpenBSD 7.8 on Raspberry Pi Zero 2W, and community discussions on tools like less(1) and pkg(8).

NetBSD 11.0 RC3 released for final testing

2026-04-08T09:41:06Z

The NetBSD project has announced the third and likely final release candidate for NetBSD 11.0, marking nearly a year since the netbsd-11 branch was created. This version addresses several issues from the first candidate, including performance improvements for the ftp client during large file downloads, updates to tmux, reliability fixes for blocklistd, and corrections in the Mesa library. The release provides both CD-sized and full-featured DVD ISO images, with the latter recommended for most users unless constrained by media size limits. Installation files are available via the project's CDN for standard architectures, while ARM-based systems can use builds from the dedicated ARM images page. Users encountering issues are encouraged to report them through the project's mailing lists or bug-tracking system.

BSD Now 657

2026-04-05T15:48:49Z

This episode of BSD Now explores the risks of technology dependence and advocates for open-source storage solutions to reduce vendor lock-in. It highlights FreeBSD 15’s Linux compatibility layer (Linuxator) now supporting CUDA, enabling GPU-accelerated workloads, and details a tool for bidirectional migration between OPNsense and pfSense firewall configurations. Additional topics include hierarchical jails on FreeBSD 15, a SYN attack analysis with follow-up, and Netbase—a port of NetBSD utilities to other Unix-like systems. The episode also notes OpenBSD’s transition to 7.9-beta and the addition of delayed hibernation for amd64 laptops.

OpenBSD Errata: April 4, 2026 (iked)

2026-04-04T15:51:56Z

OpenBSD has issued errata patches for the iked daemon affecting versions 7.7 and 7.8 of the operating system. The updates address vulnerabilities or bugs in the IKEv2 key exchange protocol implementation, which is used for IPsec VPN connections. Binary patches are available for amd64, arm64, and i386 architectures through the syspatch utility, while source code fixes can be obtained from the official errata pages for each version.

BSD Cafe launches hybrid forum and Fediverse platform called Billboard

2026-04-02T15:15:11Z

The BSD Cafe Journal has introduced Billboard, a platform combining traditional forum features with Fediverse integration. Designed as a hybrid space, it functions as a classic discussion forum with persistent threads while also supporting ActivityPub federation, enabling cross-platform interactions without algorithmic curation. The project is built on NodeBB and aims to serve as a social hub for BSD and open-source communities, allowing users to engage in long-form discussions while participating in the broader decentralized social web. The platform is accessible at billboard.bsd.cafe, with early feedback highlighting requests for dedicated testing areas and integration with existing community spaces.

OpenBSD 7.8 installation guide for ODROID HC4

2026-03-31T16:55:02Z

This article details the process of installing OpenBSD 7.8 on an ODROID HC4 arm64 board, replacing an earlier unsuccessful attempt with version 7.2 due to multi-disk issues. The guide covers removing the default Petitboot bootloader, compiling a custom u-boot from source, and preparing the OpenBSD installer with HDMI output support. Installation requires an SD card as the USB and SATA ports are non-functional during setup, with the final system booting from a SATA SSD. The article also notes improved multi-disk support in OpenBSD 7.8, power consumption metrics (5W–6.8W), and performance comparisons to an APU4D4 board, highlighting the HC4's efficiency and capability.

Building a welcoming BSD community with the BSD Cafe

2026-03-31T16:54:22Z

The BSD Cafe is a virtual space inspired by traditional Italian bars, designed to foster a positive and inclusive community around BSD systems and open-source technology. Founded by Stefano Marinelli, it aims to create a serene environment where users—referred to as "bar friends"—can engage in constructive discussions, share knowledge, and collaborate without the toxicity often found on commercial social platforms. The project emphasizes self-hosting, transparency, and ideological autonomy, running services like Mastodon, Matrix, and Lemmy on BSD-based infrastructure while avoiding proprietary or cloud-dependent solutions. Marinelli highlights the challenges of moderation and maintaining a balanced atmosphere, prioritizing open dialogue over censorship while addressing concerns about "toxic positivity." The BSD Cafe's success reflects the strength of its community, offering a refuge for technology enthusiasts seeking meaningful interactions.

IP Technics switches office lab from Proxmox to FreeBSD and Sylve

2026-03-31T05:27:46Z

A tech firm transitioned its office lab from Proxmox to FreeBSD with Sylve to streamline workflow efficiency and reduce infrastructure management overhead. The shift was driven by the need for a lighter, more native stack that aligned better with repetitive tasks like VM provisioning, storage adjustments, and hardware passthrough testing. FreeBSD’s built-in tools—such as ZFS, bhyve, and jails—provided a simpler, more integrated environment, while Sylve’s minimal management layer avoided unnecessary complexity. Practical benefits included faster image downloads via torrent, on-the-fly VM disk conversions, and an improved web terminal experience. The team emphasized that the change reflected a preference for infrastructure that required less cognitive effort rather than pursuing more ambitious solutions.

Valuable News – 2026/03/30

2026-03-30T08:20:24Z

The Valuable News weekly roundup curates notable updates, articles, and tools primarily related to UNIX/BSD/Linux ecosystems. This edition highlights FreeBSD advancements like dual FIB policy routing and native OCI containers, alongside broader topics such as the ZXC compression algorithm, Wine 11's performance gains for Windows games, and the revival of XMMS with GTK4/PipeWire. Hardware discussions include the 3Dfx Voodoo FPGA revival, Samsung's discontinuation of SATA SSDs, and AMD's Ryzen 9 9950X3D2 processor. The roundup also covers AI industry critiques, Firefox 149's new features, and a multi-stage ZFS/Proxmox backup strategy.

HardenedBSD March 2026 progress update

2026-03-30T08:19:17Z

Key developments include progress on porting Reticulum's BackboneInterface to HardenedBSD and resolving build issues for 15-STABLE and 16-CURRENT branches, though pkgbase installer support remains unresolved. Updates were made to tools like sourcezap and portzap, along with fixes for snowflake-tor and an upgrade to pkg 2.6.2_1. The report also notes preparations for the next quarterly release and minor security adjustments, such as disabling retpolines for the bootloader.

Claude Code transforms FreeBSD self-hosting workflows

2026-03-30T08:16:29Z

The article explores how Claude Code, an AI-powered CLI assistant, streamlines complex FreeBSD self-hosting tasks by automating configurations, compiling custom packages, and hardening security. The author details real-world use cases, including deploying Authelia 2FA in minutes, translating Docker-based software into native FreeBSD builds, and optimizing Nginx security headers without manual trial-and-error. While the tool significantly reduces setup time and debugging effort, the author notes occasional over-eagerness in changes and a persistent update issue on FreeBSD that requires community attention. The piece also reflects on how AI assistance shifts the self-hosting experience from hands-on troubleshooting to higher-level system oversight, though some of the traditional "challenge-based" satisfaction is lost. FreeBSD compatibility and context-aware suggestions are highlighted as key strengths.

BSD Now 656 explores OpenZFS storage design and retro computing

2026-03-30T07:56:31Z

This episode of BSD Now covers strategies for designing OpenZFS storage with a focus on independence, failure domains, and migration paths, including a detailed guide on pool architecture. It also discusses the decline of Telnet and conflicting reports about its obsolescence, alongside updates like the PiDP-11/70 build workshop and OpenBSD’s porting efforts on SGI hardware. Additional topics include terminal color palette generation, FreeBSD snapshot strategy changes, and a major update to OpenBSD’s DRM code. The episode wraps with community news such as BSDCan registration and an oral history of Unix.

Running a Plan 9 network on OpenBSD

2026-03-30T07:54:05Z

This guide explains how to set up a Plan 9 distributed system on OpenBSD or other Unix-like systems using emulated components. Plan 9's architecture separates authentication, file storage, computation, and user terminals into distinct networked services, but this approach simplifies deployment by running all services on a single machine. The file server (u9fs) uses the host's filesystem, the authentication server (authsrv9) relies on Unix permissions, and the diskless CPU server runs in QEMU, booting from a floppy image. Terminal access is provided via drawterm, a Unix-based Plan 9 terminal emulator. The guide covers IP configuration, user setup, service integration via inetd, and basic terminal usage, offering a practical way to experiment with Plan 9’s network-centric design without dedicated hardware. Appendices detail floppy image creation, system updates, and additional configurations like timezone settings.

FreeBSD Security Advisory FreeBSD-SA-26:09.pf

2026-03-28T09:23:54Z

FreeBSD Security Advisory FreeBSD-SA-26:09.pf addresses a vulnerability in the pf packet filter where rules using address range syntax (e.g., x.x.x.x - y.y.y.y) are incorrectly hashed and silently dropped as duplicates. Only the first rule with the same hash is loaded, potentially causing unexpected blocking or filtering behavior. The issue affects FreeBSD 14.x and 15.0, with patches released for stable and release branches as of March 25–26, 2026. Workarounds include rewriting rules with tables or labels, while solutions involve upgrading via pkg, freebsd-update, or applying source patches. The flaw is tracked as CVE-2026-4748.

FreeBSD Security Advisory FreeBSD-SA-26:08.rpcsec_gss

2026-03-28T09:23:32Z

A critical vulnerability in FreeBSD's RPCSECGSS implementation allows remote code execution in the kernel due to insufficient stack buffer validation during packet signature checks. The flaw, identified as CVE-2026-4747, affects all supported FreeBSD versions and does not require prior authentication, enabling unauthenticated attackers to exploit it via maliciously crafted packets sent to the kernel's NFS server when the kgssapi.ko module is loaded. Userspace applications linked with librpcgsssec and running an RPC server are also vulnerable, though no such applications exist in FreeBSD's base system. Patches were released on March 26, 2026, for all affected branches, including stable/15, releng/15.0, and older releases down to 13.5, with no workaround available beyond unloading the vulnerable module. Updates can be applied via pkg, freebsd-update, or manual source patches.

FreeBSD Security Advisory FreeBSD-SA-26:06.tcp

2026-03-28T09:22:44Z

A critical vulnerability in FreeBSD's TCP stack (CVE-2026-4247) allows remote attackers to trigger an mbuf memory leak by sending crafted packets that exploit the challenge ACK rate-limiting mechanism. The flaw affects FreeBSD 14.x and 15.0, where mbufs are leaked when challenge ACKs exceed the default rate limit of 5 packets per second. Attackers on-path or with established connections can reliably exploit this, while off-path exploitation is possible but harder due to sequence number guessing requirements. The issue stems from improper mbuf handling in tcp_respond() when challenge ACKs are suppressed. Workarounds include disabling rate limiting via net.inet.tcp.ack_war_timewindow=0, though this increases CPU overhead, while permanent fixes require upgrading to patched versions released on March 26, 2026.

FreeBSD and OpenZFS for storage independence

2026-03-28T09:22:20Z

Technical independence in storage architecture emphasizes control over data, hardware, and software to avoid vendor lock-in and maintain long-term flexibility. FreeBSD provides a stable, open-source operating system foundation that supports hardware portability across diverse manufacturers and CPU architectures, ensuring compatibility and observability. OpenZFS enhances this independence with its portable, endian-neutral on-disk format, allowing seamless data migration across operating systems and hardware without replatforming. Together, they enable transparent, hardware-agnostic storage solutions that prioritize data integrity, scalability, and long-term adaptability. The community-driven development behind these platforms further ensures resilience, broad compatibility, and continuous evolution independent of single-vendor constraints.

Five-Year OpenZFS Storage Design Guide

2026-03-27T11:28:45Z

This article explores strategic OpenZFS storage design for five-year horizons, focusing on media refresh cycles, pool expansion, and hardware independence. It compares mirror and RAIDZ configurations, explaining their trade-offs in capacity efficiency, performance, and resilver behavior over time. The guide emphasizes designing pools with consistent VDEV geometry to enable predictable growth and refresh operations without disruptive migrations. Key practices include symmetric expansion, intentional rebalancing via ZFS send/receive, and maintaining hardware independence through commodity controllers. The approach ensures storage infrastructure can evolve seamlessly while preserving data integrity and minimizing operational risk.

OpenBSD's Motorola 88000 port documented in new multi-part series

2026-03-27T11:24:56Z

Miod Vallat has begun publishing a detailed account of porting OpenBSD to Motorola's 88000 RISC architecture as part of his OpenBSD Stories collection. The first two chapters cover the architecture's obscure history and the initial challenges of reviving support for a long-abandoned platform. The series is planned to span nine chapters, offering technical insights into the porting process and the unique hurdles posed by the 88k hardware. This follows Vallat's previous work documenting OpenBSD's adaptation to other niche architectures, including SGI systems. The project reflects ongoing efforts within the OpenBSD community to preserve and extend support for legacy hardware.

FreeBSD audio diagnostics and optimization

2026-03-25T09:45:09Z

A comprehensive guide to audio diagnostics and optimization in FreeBSD, especially for USB DAC devices and music interfaces operating in bitperfect mode and real-time. Solid documentation of practical solutions for sound system analysis and calibration.

Valuable News – 2026/03/23 UNIX/BSD/Linux and tech roundup

2026-03-24T15:25:16Z

The Valuable News weekly series curates notable updates, articles, and resources primarily focused on UNIX, BSD, and Linux systems, along with broader tech-related content. This edition highlights FreeBSD advancements, including Git weekly updates, security reports on login tracking, and tutorials like setting up a NAS on Raspberry Pi or using Docker containers on FreeBSD. OpenBSD developments feature PF queue performance breaking 4 Gbps and pledge(2) enhancements in the 7.9-beta release. Hardware discussions cover AMD’s Ryzen AI systems, NVIDIA’s new CPU ventures, and high-performance NVMe SSDs. Additional topics span AI integration on FreeBSD via Linux emulator, critiques of Wayland’s impact on Linux desktops, and retrospectives on tech pioneers like Tony Hoare. The roundup also includes multimedia content such as BSD Now podcasts, OpenBSD installation guides, and critiques of modern tech trends like "enshittifAIcation".

OpenBSD's init system explored

2026-03-24T15:24:23Z

The OpenBSD init system is highlighted as a traditional and straightforward approach to system initialization, contrasting with more complex modern alternatives like systemd. It operates by executing a shell script during boot, allowing users to directly implement custom commands and configurations. This simplicity makes it an appealing option for those seeking transparency and control over their system's startup process. The discussion also touches on broader concerns about systemd, including recent controversies such as the adoption of "slopcoding" practices and the integration of age verification mechanisms. These developments have prompted some users to reconsider alternatives like OpenBSD or systemd-free Linux distributions such as Void, aiming to maintain greater autonomy over their systems.

OpenBSD Errata: March 21, 2026 (expat sack)

2026-03-23T11:53:03Z

OpenBSD 7.7 and 7.8 have received security updates addressing vulnerabilities in the expat XML parsing library and a TCP selective acknowledgment (SACK) issue in the kernel. Binary patches are available for amd64, arm64, and i386 architectures through the syspatch utility, while source code fixes can be obtained from the official errata pages for each release. The updates were announced on March 20, 2026, with details provided by the OpenBSD project. No additional mitigation steps or workarounds were specified in the advisory.

OpenBSD 7.9-beta tightens pledge(2) file access rules

2026-03-23T11:52:42Z

OpenBSD 7.9-beta introduces stricter enforcement of the pledge(2) system call, removing previous exceptions that allowed certain files or devices to be opened without the "rpath" or "wpath" promises. The change affects programs relying on implicit access to paths like /dev/null, /etc/resolv.conf, and timezone databases, which now require explicit pledge() or unveil(2) permissions. Port maintainers are advised to test software on snapshots and update code to either open files before calling pledge(), add necessary promises, or configure unveil() for specific paths. The update particularly impacts Go-based software, which often implements its own libc-like functionality, and common use cases such as DNS resolution or null device access.

OpenBSD PF removes 4 Gbps queue limit

2026-03-23T11:51:51Z

OpenBSD’s PF packet filter has resolved a long-standing 32-bit limitation in its HFSC traffic-shaping queues, which previously capped bandwidth at ~4.29 Gbps due to integer overflow. The constraint became problematic as 10G, 25G, and 100G network interfaces grew common, causing incorrect scheduling when values exceeded the limit. A new patch expands the kernel’s HFSC scheduler to use 64-bit integers, eliminating the bottleneck and enabling correct configuration of queues up to 999 Gbps, far exceeding current hardware capabilities. Existing configurations under 4 Gbps remain unaffected, while the update also fixes a display bug in pftop(1) that misreported higher bandwidth values.

BSD Now 655: No Reboot Required

2026-03-23T11:51:27Z

This episode covers the implementation of jails in NetBSD, offering lightweight virtualization similar to FreeBSD's feature. It also explores ARC and L2ARC memory caching optimizations for Proxmox environments using ZFS, along with a detailed breakdown of OpenBSD's bsd.rd ramdisk structure. Additional topics include running Docker containers on FreeBSD, configuring Apple Time Machine backups within a FreeBSD jail, and a user's perspective on switching from Linux to FreeBSD after decades.

OpenBSD Errata: March 19, 2026 (calendar)

2026-03-20T08:13:38Z

OpenBSD has issued errata patches for the calendar utility affecting versions 7.7 and 7.8, addressing unspecified issues in the software. Binary updates are available for amd64, arm64, and i386 architectures through the syspatch utility, allowing users to apply fixes without manual compilation. Source code patches are also provided on the official OpenBSD errata pages for both releases. The announcement follows standard OpenBSD procedures for distributing security and reliability updates outside regular release cycles. No additional details about the vulnerabilities or their severity were included in the advisory.

FreeBSD Raspberry Pi NAS setup guide

2026-03-20T08:13:05Z

This guide demonstrates how to build a network-attached storage (NAS) system using FreeBSD 15.0 on a Raspberry Pi 4, leveraging ZFS for storage management and Samba for file sharing. The process involves downloading a pre-built FreeBSD image for the Pi, configuring necessary hardware like Ethernet and HDMI, and modifying the boot configuration for display compatibility. The tutorial covers creating a mirrored ZFS storage pool with external USB drives, installing and configuring Samba for cross-platform file sharing, and enabling network discovery via Avahi. While the setup is not recommended for production environments, it serves as an accessible introduction to FreeBSD's storage capabilities and basic NAS implementation, with the added benefit of easy pool import/export functionality for portable storage needs.

Jailrun — cross-platform orchestration for FreeBSD jails

2026-03-19T13:03:49Z

Jailrun is an orchestration layer for FreeBSD jails. Define your stack in declarative UCL, run jrun up, and get jails wired together with port forwarding, process supervision, provisioning via Ansible, and instant clones via ZFS snapshots. Every component is transparent and accessible — nothing is hidden behind abstractions.

Running Generative AI with Linuxulator and eGPU on FreeBSD

2026-03-19T09:44:59Z

This guide details how to run generative AI workloads on FreeBSD using Linux binary compatibility (Linuxulator) and an external NVIDIA GPU (eGPU). The author initially faced dependency and Python compilation issues when attempting native FreeBSD execution, leading them to leverage FreeBSD's Linux emulator to run AI tools like Real-ESRGAN (for image upscaling) and Fooocus (for image generation). The process involves configuring FreeBSD's NVIDIA drivers, setting up a Rocky Linux 9 environment within /compat/linux, compiling Python 3.10 from source, and deploying a custom UVM workaround to enable GPU access. Performance and power consumption were comparable to native Linux setups, though the author acknowledges the complexity of maintaining version alignment between FreeBSD and Linux layers. The guide serves as a proof-of-concept for running AI tools on BSD systems while highlighting the trade-offs of relying on Linux emulation.

Valuable News – 2026/03/16

2026-03-19T09:44:34Z

The Valuable News weekly series curates a summary of news, articles, and resources primarily related to UNIX, BSD, and Linux systems. This edition highlights key developments such as the release of FreeBSD 14.4, which introduces improved security, storage, and cloud support, alongside reviews and user experiences. It also covers OpenBSD's transition to 7.9-beta, NetBSD security testing on ARM hardware, and updates to tools like Arkime 6 for network analysis.

FreeBSD's enduring appeal through a sysadmin's 20-year journey

2026-03-19T09:41:24Z

A long-time sysadmin recounts discovering FreeBSD in 2002 after years with Linux, highlighting its superior documentation, stability, and performance on limited hardware. The FreeBSD Handbook became a foundational resource, emphasizing a philosophy of understanding before action, while features like jails, ZFS integration, and predictable upgrades reinforced its reliability for production environments. The author contrasts FreeBSD's measured evolution with Linux's rapid changes, praising its consistency across decades, including unchanged tool behavior and backward compatibility. Beyond technical strengths, the piece underscores the BSD community's passion, collaboration, and resistance to commercialization, citing interactions with developers and the FreeBSD Foundation's user-focused approach. The reflection concludes by framing FreeBSD as a tool built for longevity, where "The Power to Serve" manifests in both code and community ethos.

Podman on FreeBSD enables home-lab containerization

2026-03-15T12:01:39Z

Podman is now functional on FreeBSD, allowing users to run containerized applications like Immich without requiring Linux-based virtualization workarounds. The daemonless.io project provides pre-built Podman-compatible images for FreeBSD, simplifying deployment with minimal configuration. While the solution works well for personal use—such as hosting photo management tools with NFS-mounted storage—it lacks the isolation and security maturity of FreeBSD Jails, making it unsuitable for production environments. Minor issues, like PostgreSQL dump bugs in older conmon versions, are documented and largely resolved, though the ecosystem remains early-stage. The approach reduces resource overhead compared to virtual machines but spreads storage mounts across the ZFS filesystem.

OpenBSD/amd64 introduces delayed hibernation

2026-03-14T18:22:26Z

OpenBSD/amd64 laptops now support delayed hibernation via the new machdep.hibernatedelay sysctl, allowing users to configure a time delay before the system automatically transitions from suspend to hibernation. This feature, implemented by Mark Kettenis, helps balance battery conservation with quick resume times by hibernating only after a user-defined period. If the laptop is reopened before the delay expires, it resumes from suspend; otherwise, it wakes from hibernation, preventing battery drain during prolonged inactivity. The change is available in -current snapshots and is expected in the next OpenBSD release. Similar functionality exists in other operating systems like Windows, macOS, and Linux.

OpenBSD Errata: March 15, 2026 (recvfd)

2026-03-14T15:20:50Z

OpenBSD released errata patches addressing a vulnerability in the pledge system call related to recvfd for versions 7.7 and 7.8. The issue affects the handling of file descriptor reception, which could potentially bypass intended security restrictions. Binary updates are available for amd64, arm64, and i386 architectures via the syspatch utility.

Is OpenBSD exotic

2026-03-13T21:02:16Z

An interview with Vyacheslav Voroncov, an active OpenBSD community member, explores the operating system's unique characteristics and its position in the broader BSD ecosystem. Unlike GNU/Linux, OpenBSD emphasizes a tightly integrated "base system" designed for everyday use, prioritizing security, minimalism, and developer alignment through "dogfooding." The discussion highlights OpenBSD's intuitive structure, secure defaults, and smaller attack surface compared to mainstream alternatives, while acknowledging challenges like hardware support and software portability. The article also examines the influence of small, focused communities in driving innovation, citing examples like OpenSSH and tmux, and addresses collaboration among BSD projects and niche OS communities like ReactOS. Voroncov shares insights on OpenBSD's strengths in specific use cases, such as servers and firewalls, and outlines future goals for community growth and infrastructure development.

FreeBSD risks losing relevance by ignoring AI tooling like Claude Code

2026-03-13T21:01:23Z

Anthropic’s shift from an npm-based installer to a native installer for Claude Code has left FreeBSD users with a deprecation warning, signaling potential abandonment of the platform. The author argues that historical precedents—like Unix outlasting MULTICS or Windows surpassing the Macintosh—show that dismissing "impure" or scrappier technologies often backfires, as user adoption tends to favor accessibility over purity. For FreeBSD, this means risking irrelevance if it fails to support modern AI tools that developers, including newcomers, increasingly rely on for tasks like debugging, porting software, or learning the system. While acknowledging ethical and sustainability concerns around AI, the post emphasizes its practical value in extending users' capabilities, citing personal successes like porting NEXTSPACE to FreeBSD. The call to action urges FreeBSD’s community to advocate for platform support, warning that refusal to engage with AI tools could alienate future generations of users and developers.

OpenBSD Errata March 2026: FreeType fixes and missing calendar binary

2026-03-12T10:36:07Z

OpenBSD released errata patches for the FreeType library addressing vulnerabilities in versions 7.7 and 7.8, while also correcting a prior oversight where the calendar binary was omitted from a system patch. Binary updates are available for amd64, arm64, and i386 architectures through the syspatch utility, with corresponding source patches listed on the official errata pages. The fixes follow OpenBSD’s routine security maintenance process, ensuring timely mitigation of identified issues. Users of affected versions are encouraged to apply updates to maintain system integrity and security.

OpenBSD updates drm(4) subsystem to Linux 6.1.18 level

2026-03-10T16:51:12Z

A significant update to OpenBSD-current's drm(4) (Direct Rendering Manager) subsystem aligns its codebase with Linux 6.1.18, as committed by Jonathan Gray. This extensive change arrives late in the development cycle, signaling its inclusion in the upcoming OpenBSD 7.9 release. The update was sponsored by the OpenBSD Foundation, highlighting its role in funding critical development work. The commit underscores ongoing efforts to modernize graphics support while maintaining OpenBSD’s security and stability focus. The timing suggests broader hardware compatibility and performance improvements for the next major release.

FreeBSD 14.4-RELEASE updates and security advisories

2026-03-10T16:50:29Z

FreeBSD 14.4-RELEASE introduces security patches, userland improvements, and hardware support updates as part of the 14-STABLE branch. Key security advisories address vulnerabilities in OpenSSL, libarchive, xz, and jail escape risks, alongside fixes for network stack issues like SOREUSEPORTLB and unbound cache poisoning. Userland changes include updates to utilities like diff(1), jail(8), and bsdinstall(8), with new features such as stable MAC addresses for epair(4) and encrypted swap file support. The release also enhances cloud support via nuageinit(7) improvements, adds 9P filesystem support for bhyve(8), and updates drivers for Intel Ethernet, NVMe, and wireless chips. Documentation has been expanded with new manuals for DTrace providers, Ethernet switch controllers, and clarified behavior in tools like ipfw(8) and mtree(8).

Valuable News – 2026/03/09

2026-03-10T16:49:38Z

The Valuable News weekly roundup curates notable updates and articles primarily focused on UNIX, BSD, and Linux systems, filtering key developments from the overwhelming flow of online information. This edition highlights a range of topics, including the release of nanobrew, a fast macOS package manager, and updates like FreeBSD Git Weeklyand NetBSD 11.0 RC2.

NetBSD 11.0 RC2 released for testing

2026-03-08T14:36:42Z

The NetBSD project has announced the second release candidate for NetBSD 11.0, urging community testing before the final release. This version addresses issues from the first candidate, including improvements to the ftp client for large file downloads, updates to tmux, reliability fixes for blocklistd, and corrections in the Mesa library. The release branch, nearly a year old, now offers split ISO images—smaller CD/R-sized versions and full-featured DVD variants—with users encouraged to select the latter unless constrained by media size. Installation notes and download links are provided for multiple architectures, including ARM devices via dedicated bootable images. Feedback on issues can be submitted through mailing lists or the project’s problem report system.

BSD Now 653: Filesystem comparisons and BSD advancements

2026-03-08T14:35:47Z

This episode of BSD Now explores a technical comparison between ZFS and BTRFS, examining their architectural differences, feature sets, and stability considerations. It also covers unconventional implementations like running RHEL and Slackware on ZFS-root setups, including encrypted configurations, while highlighting OpenIndiana’s efforts to modernize Solaris’ IPS package management system using Rust. Additional topics include FreeBSD’s jail memory metrics for resource monitoring, a WireGuard VPN setup guide for OpenBSD, and a discussion on Tcl as an underrated yet highly productive programming language.

Designing OpenZFS Storage for Independence

2026-03-08T14:35:07Z

This article explores strategies for achieving storage independence using OpenZFS by addressing four key facets: lifecycle control, component choice, interoperability, and exit strategy. It emphasizes the importance of open-source software for operational autonomy, allowing organizations to avoid vendor lock-in and maintain sovereignty over their data. The article discusses OpenZFS's flexibility across CPU architectures, operating systems, and storage hardware, including HDDs, SSDs, and NVMe devices, while highlighting its compatibility with protocols like SMB, NFS, and iSCSI. It also covers pool architecture design, failure domain planning, and migration paths to ensure seamless transitions between systems. The focus is on creating resilient, portable storage solutions that prioritize long-term independence and minimize risks associated with hardware or software changes.

DIY Home Network Setup with OpenBSD, OpenWrt, and Pi-hole

2026-03-08T14:34:34Z

This guide details a custom home network configuration using OpenBSD as a router, OpenWrt as a wireless access point, and Pi-hole for network-wide ad blocking. The OpenBSD router handles firewall rules via pf.conf, DHCP assignments, and DNS resolution through Unbound, with detailed configurations provided for each service. The OpenWrt device operates in AP-only mode, managing WiFi while delegating DHCP and DNS to the OpenBSD router. Pi-hole integrates as a dedicated ad-blocking DNS server, forwarding queries to Quad9 as a fallback. The setup emphasizes security with default-deny firewall rules, anti-spoofing measures, and DNS hardening, while maintaining simplicity with clear instructions for each component. Costs are minimized using affordable hardware like a Raspberry Pi Zero and a repurposed D-Link router.

HardenedBSD February 2026 development update

2026-03-08T14:33:52Z

The February 2026 HardenedBSD status report highlights ongoing efforts to resolve a persistent kernel crash in the 15-STABLE branch, with progress narrowing the issue to a specific commit window. Development also includes research into mesh networking projects like Meshtastic and Reticulum, aiming to create a censorship-resistant network proof-of-concept within six months. Key updates include kernel hardening contributions, ports maintenance like the addition of hardenedbsd/ctrl, and plans to migrate repositories from GitLab to Radicle. The report also mentions community engagement through a local Hackers N' Hops demonstration and upcoming priorities like reviving the hbsdfw firewall build system.

Sprinkling a little Cinnamon on GhostBSD

2026-03-08T14:33:23Z

The default desktops in GhostBSD are very nice, be they Mate or XFCE - but what of the others? In this video they have a look at Cinnamon and see whether it is any good.