Today it's backup time :neobot_hyper:

My old setup was all kinds of messy in regard to backups. Some BorgBackup here, some nothing elsewhere.

Plan is to once again simplify things. A backup is of no use to me, if it's hard to use. All of my servers that hold important data run on ZFS, so I'll finally make use of ZFS snaphots and send/recv to have easy and consistent backups.

For that I'll be copying the setup of @stefano, as is documented here: it-notes.dragas.net/2022/05/30

That means zfs_autobackup, running on a backup server. Most likely I'll set it up to pull backups from the other systems.
I have not yet decided on whether to use some sort of ZFS encryption here, tbd.

I'll use an OVH KS-Store server for this purpose. 4x4TB of HDD storage, which I'll turn into a pool with 12TB of usable storage.
I already installed FreeBSD on it and started locking it down from most public access.

@jamesvasile @libreleah I hope whoever told you not to daily drive OpenBSD on a laptop is not still giving out advice, because that's absolutely garbage advice.

OpenBSD is really, really good on Thinkpads, older Intel Macbooks (pre T2 era), and pretty much any standard Intel or AMD PC. Their fork of Xorg (Xenocara) is in the base installation and out of the box the only thing you have to do to get an X desktop is answer "yes" to the question in installation asking if you want one, or if you answered "no" during installation you can (as root) "rcctl enable xenodm" and reboot.

OpenBSD is really good on the desktop because its developers run it as their workstations, i.e. they "dogfood" the OS so that they are able to see what is needed for all use cases and improve the OS accordingly.

If you'd like to follow a guide to setting up an Xfce desktop on OpenBSD, I wrote one a while back: kaidenshi.com/posts/openbsd-as

...and there are other guides out there as well.

given my origin story building firewalls and complex networks with Linux the sheer amount of immediately useful shit in the OpenBSD base install is absolute catnip to me. Things that I've historically spent days beating with a hammer just work right out of the box, the man pages are fucking amazing etc.

For the times I used Linux to replace Windows Servers (Windows 2003-2012 SBS rubbish) with Samba/dhcpd/sendmail/dovecot I wouldve given my left nut for FreeBSD+OpenZFS. It out of the box just immediately solves so many gotchas and hairy shit you have to roll your own solution around and that always felt a little underdone.

I'm hoping one day to get the opportunity to dig further into FreeBSD (pfil, netgraph/vpp) to see if i can build some truly beastly routers.

Oh and Sylve kicks all kinds of ass and is making a better and better case for finally putting a bullet in VSphere/ESXi.

Things are looking good and my hats off to all the people doing absolutely brilliant work.

Running Podman on FreeBSD? It’s a totally different beast than Linux. :freebsd:

I just published a follow-up to my previous Podman deep dive, going into the FreeBSD operational model for OCI containers. No systemd, no Quadlets, and no rootless mode, but you get native ZFS storage drivers, rc.d service integration, and the Linuxulator.

We also cover the big question: why Podman complements Jails instead of replacing them.

Read it here: blog.hofstede.it/podman-on-fre

#FreeBSD #Podman #Linuxulator #ZFS #Homelab

Tonight, 22:45 UTC, I'm talking at NYCBUG. "What's Changed Since I Came This Way: A Talk that was supposed to be about #OpenZFS" #sysadmin #freebsd

In meatspace in New York City, and streamed online. nycbug.org/

For 1 April 2026: "Networking for System Administrators: The Defenestrated Edition"

I threw out the Windows.

Well, blacked it out.

mwl.io/ks

The “BOY HOWDY!” heard around the room:

A 16.0-CURRENT boot environment on a 15.0-RELEASE made with OccamBSD imagine.sh and propagate.sh, which use makefs(8) and mkimg(1) internally, and packaged base…

We can have nice things!

I’m sure there are remaining rough edges but IT CAN BE DONE.

You’re welcome.

The last day to back @RobCornell's deliciously messed-up novel and get not one, not two, but THREE books!

Seriously, this the most fubar book I've read since PKD's VALIS, yet positive and hopeful.

kickstarter.com/projects/robco

RE: mastodon.social/@Althaser/1156

call for testing

Sylve - FreeBSD management plane

At <reddit.com/r/freebsd/comments/>, @hayzam wrote:

"We just pushed a big update to Sylve and are doing our first call for testing.

Sylve is an open-source control panel for FreeBSD virtualization and storage, designed to manage bhyve VMs, FreeBSD jails, and ZFS from a modern web UI. Development is currently funded by the FreeBSD Foundation. …"

Docs: sylve.io/

@FreeBSDFoundation

#FreeBSD #sylve #OpenZFS #ZFS #bhyve #CFT

Is Kdenlive the best tool for editing/splicing multiple video clips together?

...or is there a better open source tool for nonlinear video editing? I am not a professional video editor, so simplicity rather than features is more important for me at this time. I can run it on FreeBSD, Linux, or MS Windows, and it isn't worth spending $$ on this for me.

I recorded an esports match via OBS (.mp4) for one of my kids in college, but MS Windows crashed 4 times while recording, so I need to crop and splice the videos together and remove the unnecessary stuff from multiple recordings - nothing fancy - just clipping and splicing.

Usually I just save and share the file without editing - the few people who watch it will skip around to the parts they want to watch. Last time I had two recordings and just merged them (ffmpeg), but this time it is more annoying with several files and a lot of crashes, so I don't just want to merge them without clipping out the junk.

Thanks!

I'll remember this quote from @pluralistic tonight:

"Shopping your way out of a monopoly is like recycling your way out of a wildfire."

#CdnPoli #enshittification

Since online review sites are full of biased and inauthentic reviews, are there any personal recommendations for a point of sale + online payment processing and reservation system for a new, tiny nonprofit in the US? About 20 or so local artists will be part of 501(c)(3), which will have scheduled classes, recurring membership fees (for access to studio resources), and retail sales of local artist work (need to track per-artist inventory / commission). Initially they are looking at Square Plus because some of them are already familiar with the hardware, and it seems to meet all the requirements, but a post on payroll processors by @coreysnipes reminded me to look at alternatives. Basic CRM/marketing (probably just bulk email to existing customers about upcoming events) would be needed, but can be separate. The price point of $300 POS hardware and $50/month + <=3% credit card fees looks like an amount that could be budgeted. They are making a Wordpress website, so it could either be integrated with that or just link to another site. Thanks!

@hayzam Not sure if you are active on here, but I think that it is your blog post that came up on the Bhyve user call today - hayzam.com/blog/02-linuxulator
I looked at the VS Code extensions for Remote SSH, and there are multiple extensions that include "Remote SSH" in their names. Could you identify which specific one that you've used? This sounds like it would be really useful for me as well.
Thanks!

#FreeBSD’s entry-level ee(1) text editor recently gained full #Unicode support 🎉
Huge thanks to @_bapt_
- much appreciated!

One more step toward making FreeBSD even more welcoming… #GenZ, we’re ready for you :freebsd:

Big update pushed for #BSSG - my Bash-based static site generator

This is a major pre-release update, not the official release yet, and I would really love some testing and feedback before cutting it.

Highlights:
* New build mode: BUILD_MODE="ram" / --build-mode ram
* This is a memory-first build mode designed to drastically reduce disk I/O during the build.
* On real projects, this results in a ~2× speedup, and in some cases well over 3× faster builds, depending on:

* site size
* number of generators involved
* storage speed
* parallelism available

In RAM mode you also get a stage timing summary, so you can see exactly where build time is spent. This makes performance tuning much more transparent and data-driven.

Under the hood:
The core build system was heavily refactored:
* Clear separation between orchestration, generators, and indexing
* Cleaner and more predictable generation flow for posts, pages, tags, authors, archives, and feeds
* Asset and theme handling moved into a dedicated build module
* Static file copying and theme CSS processing are no longer scattered around the codebase

Performance and robustness:
* Smarter rebuild and caching logic
* Improved parallel execution paths
* Uses parallel when available
* Shell-based worker fallback when it isn’t
* Parallel behavior is now more robust and easier to reason about

Stability and polish:
* Fixed an edge case with locale-specific timing parsing
* Configuration and documentation updated to match new options and tuning knobs
* Overall codebase is simpler, clearer, and easier to extend

Before tagging the official release, I need help testing this.

* Please test from the main branch or commit and report issues *

Links:
Repo: brew.bsd.cafe/stefano/BSSG

Huge thanks to everyone who tests, reports issues, or pokes at it.

This release comes from a lot of refactoring and profiling, and fresh eyes really help

#IT #SSG #Bash #OwnYourData

I bought a copy of "The Book of PF" from @pitrh

It's the best and most comprehensive resource about the marvelous PF firewall that I've ever seen, and I've been using PF since the early days.

Amazing work!

It's available here on No Starch Press: nostarch.com/book-of-pf-4th-ed

I also recently wrote a practical guide on PF (blog.hofstede.it/pf-firewall-o) for anyone who wants to get started :-)

#freebsd #pf #networking #firewall #books

@collective_truth @jwildeboer

I've been running mailservers for myself and for others (ISP, corporate) for about 30 years. The current best "learn-and-do" guide is @mwl 's Run Your Own Mailserver, available from tiltedwindmillpress.com

Daughter: Did you know there's only 12 seconds in a year?
Dad: Trust me there's more than that.
Daughter: If I can prove it to you can we go to Mcdonalds?
Dad: Ok.
Daughter: January 2nd, February 2nd, March 2nd....
Dad: (At the McDonald's drive through) One happy meal please.

Show older
BSD Network

bsd.network is a *BSD-adjacent Mastodon Instance. We have a code of conduct.