顯示具有 freebsd 標籤的文章。 顯示所有文章
顯示具有 freebsd 標籤的文章。 顯示所有文章

2018年10月10日 星期三

Dual boot OpenBSD with DragonFly BSD

---------- Forwarded message ---------
From: Heppler, J. Scott
Date: Tue, Oct 9, 2018 at 12:05 AM

This theoretically is doable but will be a challenge.  Your options will
also swing on whether the laptop you purchase will boot an old MBR
scheme or is restricted to GPT/UEFI.  DragonflyBSD has instructions on
multibooting an older MBR.

https://www.dragonflybsd.org/docs/handbook/Booting/

If you need GPT/UEFI, then you choosing a bootloader that is capable of
GPT/UEFI dual booting.  According to OpenBSD FAQ,  Grub2 or reFIND
will work. 

https://www.openbsd.org/faq/faq4.html#Multibooting
--
J. Scott Heppler

2018年7月23日 星期一

bsdmag: Virtualization on ARMv8-A

The Latest Issue: bhyvearm64: Virtualization on ARMv8-A

Dear Readers,
Summer is here! A season which appeals to affection and sentiments, and of course, vacation time isn’t complete without a touch of laziness. As Ella sang: ‘Summertime, and the livin' is easy’, it’s indeed a good time. I hope you will work on unfinished projects, explore the latest technologies, and encounter numerous exciting tasks. Here, we concertedly continue to publish great lectures for you and take pride in them as well. Therefore, as you’ll be enjoying a sunset view on your porch, have a quick read at our BSD Magazine issue to crown the special day.
Now, let’s have a glimpse of what our experts prepared for you.
In Brief
Ewa & The BSD Team
This column presents the latest coverage of breaking news, events, product releases, and trending topics from the BSD sector.
Illumos Containers Using OmniOSce
Carlos Neira
Containers have been around almost two decades, starting with FreeBSD jails implementation around 2000. Thereafter, Sun Microsystems took a step further and implemented Solaris Zones around 2004, which was based on FreeBSD’s jails. Both containerization technologies allow you to partition your machine further and give you more mileage for your money as it is lighter than hardware virtualization. This means performance is better as applications run on bare metal. Enhanced security, such that if a zone or jail is compromised, the attacker is confined to that virtual host. We will learn about Solaris Zones using an Illumos derivative called OmniOSce, and instructions that could be applied to other Illumos based distributions.
bhyvearm64: Virtualization on ARMv8-A
Alexandru Elisei
Virtualization is the process of creating a virtual machine that acts like the real hardware for the guest operating system. Efficient virtualization requires hardware features that reduce the overhead usually associated with using virtual machines. Looking to enter the server market, ARM has developed the ARMv8-A architecture which offers such features. We have ported the FreeBSD bhyve hypervisor port to this architecture and we have called the port bhyvearm64.
iSCSI On FreeBSD
Abdorrahman Homaei
iSCSI is a protocol that gives you the ability to share storage over a network at block level. It’s like connecting new storage to your computer and can format it as you wish. In iSCSI terminology, the computer that shares the storage is known as the target, and the clients which access the iSCSI storage are called initiators. FreeBSD originally supports kernel-based iSCSI target and initiator. Many people are not sure about choosing between DAS (Block-Level directly), NAS (File-Level over the network) and SAN (Block-Level over the network). Don’t settle for storage based on the amount of space only, rather, the answers to these important questions should act as a guiding principle. What is your storage expansion policy? What is your backup policy?
HTTP/2 and PHP with Apache on FreeBSD: Not as Simple as it Seems
Bob Cromwell
In an earlier article, I showed you how to run FreeBSD on Google Compute Engine, running an Apache web server with PHP. Now, let's see how to improve its performance with the latest version of HTTP. HTTP/2 has significant advantages over earlier versions, however, it and PHP don't work together "out of the box" on FreeBSD, and what appears to be the appropriate fix breaks an otherwise functioning web server. Follow my investigation of the mystery, and at the end, I'll have assembled a working configuration for you.
Self Exposure: Redundant Firewalls with OpenBSD, CARP and pfsync
Daniele Mazzocchio
Firewalls are among the most critical components in network infrastructure, since their failure may cause entire groups of machines to go offline. The damage may range from the public (web, mail, DNS, etc.) servers to become unreachable from the outside world up to being unable to surf this website!
Expert Speak by E.G. Nadhan: Just Takes 5 Seconds to Grow Your Team Culture
E.G. Nathan
How many times have you been in a situation where you are about to sharply critique a co-worker, a colleague, or an acquaintance for something they did not do right? Well, as it turns out, Gallup’s workplace research suggests praise should outweigh criticism by a 5-to-1 margin. Five praises for one criticism (if at all there is one).
Interview with Joel Knight
Ewa & The BSD Team
Joel Knight is an original contributing author to the OpenBSD PF User’s Guide (www.openbsd.org/faq/pf) and the original author of some of the native OpenBSD SNMP MIBs (packetmischief.ca/openbsd-snmp-mibs, cvsweb.openbsd.org/cgi-bin/cvsweb/src/share/snmp/). He’s contributed some minor patches to the OpenBSD pf(4) subsystem and network stack over the years.
Online shopping and electronic transactions are revolutionizing the way business is being carried out, both for individuals and corporate entities. Are we entering a golden age of choice, or should the Latin phrase Caveat Emptor be embedded on every “accept” button for Internet sales?
Rob Somerville
I’ve just been ripped off of £153.25 for a Samsung Galaxy J5 mobile phone, or to be more accurate, Amazon has, along with approximately 1,000 other customers who have paid exorbitant amounts of money to a clearly fraudulent storefront that has exploited a subtle flaw in the E-commerce model that Amazon, eBay, and PayPal operate.
If any questions arise in your mind during or after reading the articles, please feel free to contact me via email: ewa@bsdmag.org. We hope you enjoy reading this issue and develop new skills with our magazine.
Thank you,
Ewa & The BSD team
REF: https://bsdmag.org/download/bhyvearm64-virtualization-on-armv8-a/

2018年6月6日 星期三

New BSD Issue is Out! LLVM and Sanitizers in BSD!

Table of Contents
In Brief
Ewa & The BSD Team
This column presents the latest coverage of breaking news, events, product releases, and trending topics from the BSD sector.
Practical ZFS On FreeBSD
Abdorrahman Homaei
ZFS is an advanced file system that was originally developed by Sun. It combines the roles of volume manager and file system to realize unique advantages. ZFS is aware of the underlying structure of the disks. It can detect low-level interrupt and provide RAID mechanism. ZFS is also capable of sharing its volume separately. ZFS’s awareness of the physical layout of the disks lets you grow your storage without any hassle. Additionally, it has different properties that can be applied to each file system, giving many advantages of creating a number of different file systems and datasets rather than a single monolithic file system.
LLVM and Sanitizers in BSD
David Carlier
LLVM and clang frontend is available on various BSD as the main compiler for FreeBSD x86, ppc, and arm since the 10.x ( was fully optional in the previous 9.x branch), OpenBSD x86 and arm since 6.2, NetBSD x86, arm, ppc, and sparc64. LLVM provides the frontends and various tools, and there are different types of sanitizers to help with debugging applications.
C Programming, UNIX and Main Data Structures
Rafael Santiago de Souza Netto
Nowadays, UNIX stands more as a model for an operating system to follow than as an operating system implementation. In the beginning, UNIX as a software was originally written at Bell Labs by two famous developers, Kenneth Thompson and Dennis Ritchie.
Monitoring OpenBSD using CollectD, InfluxDB, and Grafana
Joel Carnat
www.tumfatig.net
In a “get pretty graphs” mood, I’m looking at what can be done regarding OpenBSD monitoring using the CollectD collector and Grafana dashboard renderer. OpenBSD 6.2-current provides InfluxDB and Grafana packages, a great stack for pretty reportings.
Expert Speak by E.G. Nadhan
From Unconscious Bias to Unbiased Consciousness
E.G. Nadhan
A member of the audience attending a panel session on Unconscious Bias accidentally referred to the topic as Unbiased Consciousness. Perhaps, it was no accident and was a sublime message instead about the world to come – a world where we are consciously unbiased rather than being unconsciously biased. However, this utopian world can become real only if proactive actions are taken to combat such mindsets that may not be in our control.
With Facebook attempting to slam the privacy stable door well after the horse has bolted, the corporate giant has suspended over 200 applications which snarfed large amounts of profile data. What does the future hold for this global platform?
Rob Somerville
I have a certain degree of sympathy for Mark Zuckerberg after being hauled before Congress in light of the Cambridge Analytica fiasco. Inevitably, any cutting-edge technology will eventually feel the hot breath of the establishment breathing down on it, be it via indirect legislation or as in the case of Mark Zuckerberg, in a personal appearance before “the powers that be” to give account.
REF: https://bsdmag.org/download/debugging-applications/

2018年4月14日 星期六

Caddy Web Server On FreeBSD

Caddy Web Server On FreeBSD

Dear Readers,
I hope this finds you well and in a happy mood since the start of Spring. Today, I am pleased to announce the release of the BSD Magazine issue. I hope it will bring lots of joy, happiness, and fulfilment to you. This is also a special time for those who are waiting for Easter celebration like me. I am optimistic that the holiday period brings hope and faith to sustain us in the coming days. Thus, take delight during this period. If any question arises in your mind during or after reading the articles, please feel free to contact me. We hope you enjoy reading this issue and develop your new skills with our magazine!
Thank you and Happy Easter,
Ewa & the BSD team
INSIDE
In Brief
Ewa & The BSD Team
How to Manage Multiple Perl 6 Installations with Rakudobrew
Luca Ferrari
Quickstart with Kubernetes and GKE (Part 1/2)
Leonardo Neves
Kubernetes..! Era of Innovation
Moustafa Nabil El-Zeny
Open vSwitch Overview
Albert Hui
How to Add a New System Tunable to FreeBSD
Carlos Neira
Caddy Web Server On FreeBSD
Abdorrahman Homaei
OpenBSD and The State of Gaming
David Carlier
Presentation
How to Assist the Business World with OTRS?
María Polett Ramos
Column
With the latest chemical attack in the UK that has critically injured two individuals and seriously injured a serving police officer, what are the geopolitical, media, and technical implications of this latest outrage?
Rob Somerville
REF: www.bsdmag.org

2018年4月2日 星期一

XG-7100 pfSense® Security Gateway

xg-7100.jpg
If you've pre-ordered an XG-7100 pfSense® Security Gateway Appliance, you're no doubt anxious for its delivery. We've encountered a supply chain issue with system boards, but that is now resolved. Back order shipments are expected to start in about two weeks.
Initial throughput testing looks very compelling. Test data will be published on the Netgate blog soon.
REF: https://www.netgate.com/solutions/pfsense/xg-7100-1u.html

2017年11月30日 星期四

SG-3100 pfSense® Security Gateway Appliance

Netgate SG-1000
The SG-3100 pfSense Security Gateway Appliance can be configured as a firewall, LAN or WAN router, VPN appliance, DHCP Server, DNS Server, and IDS/IPS with optional packages to deliver a high performance, high throughput front-line security appliance at an excellent price in a compact footprint. With preloaded pfSense software, the SG-3100 is a fast networking security solution unencumbered by traditional annual contracts, licensing fees, or artificial limitations. Flexibility is built in to the SG-3100 with upgrade options such as a m.2 SATA SSD, LTE cellular, or mPCIe Wi-Fi.
REF: https://store.netgate.com/SG-3100.aspx

2017年6月9日 星期五

FreeBSD with pf and nginx

# portsnap fetch extract
# cd /usr/ports/ports-mgmt/pkg && make reinstall clean
 Installing pkg-1.10.1...
===> SECURITY REPORT:
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/lib/libpkg.so.4.0.0

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type 'make deinstall'
      to deinstall the port if this is a concern.

      For more information, and contact details about the security
      status of this software, see the following webpage:
http://wiki.freebsd.org/pkgng
===>  Cleaning for pkg-1.10.1
# pkg install nginx
# vi /etc/pf.conf
public_int = "xn0"                      # public interface
tcp_svcs = "{ 22 80 443 }"              # tcp service ports
icmp_types = "{ echoreq, unreach }"     # icmp types

## ignore loopback interface
set skip on lo

## restrict incoming traffic / unrestrict outgoing traffic
block in all
pass out all

## allow tcp ports specified by $tcp_svcs
pass in quick on $public_int proto tcp from any to any port $tcp_svcs

## allow icmp request types specified by $icmp_types
pass in inet proto icmp all icmp-type $icmp_types
# vi /etc/rc.conf
pf_enable="YES"
pf_rules="/etc/pf.conf"
nginx_enable="YES"
# vi /usr/local/etc/nginx/nginx.conf
# service nginx start

2016年2月19日 星期五

BSD on AWS

想在AWS用BSD的話,目前只有FreeBSD的AMI在Market place可供選擇,是由FreeBSD的團隊提供的。除非是要跑BSD kernel獨有的pf之類的功能,不然userland的東西,大可用Ubuntu或CentOS的AMI來跑。但若要移入現有BSD的ftp-proxy服務的話,還是得用FreeBSD啟用pf anchor的方式來實現。
  • 在 /etc/rc.conf 新增 pf_enable=YES。
  • vi /etc/pf.conf。至少新增一行pass。預設是keep state的。
  • reboot. pf should be enabled.