Today it's backup time
My old setup was all kinds of messy in regard to backups. Some BorgBackup here, some nothing elsewhere.
Plan is to once again simplify things. A backup is of no use to me, if it's hard to use. All of my servers that hold important data run on ZFS, so I'll finally make use of ZFS snaphots and send/recv to have easy and consistent backups.
For that I'll be copying the setup of @stefano, as is documented here: https://it-notes.dragas.net/2022/05/30/how-we-are-migrating-many-of-our-servers-from-linux-to-freebsd-part-2/
That means zfs_autobackup, running on a backup server. Most likely I'll set it up to pull backups from the other systems.
I have not yet decided on whether to use some sort of ZFS encryption here, tbd.
I'll use an OVH KS-Store server for this purpose. 4x4TB of HDD storage, which I'll turn into a pool with 12TB of usable storage.
I already installed FreeBSD on it and started locking it down from most public access.
@jamesvasile @libreleah I hope whoever told you not to daily drive OpenBSD on a laptop is not still giving out advice, because that's absolutely garbage advice.
OpenBSD is really, really good on Thinkpads, older Intel Macbooks (pre T2 era), and pretty much any standard Intel or AMD PC. Their fork of Xorg (Xenocara) is in the base installation and out of the box the only thing you have to do to get an X desktop is answer "yes" to the question in installation asking if you want one, or if you answered "no" during installation you can (as root) "rcctl enable xenodm" and reboot.
OpenBSD is really good on the desktop because its developers run it as their workstations, i.e. they "dogfood" the OS so that they are able to see what is needed for all use cases and improve the OS accordingly.
If you'd like to follow a guide to setting up an Xfce desktop on OpenBSD, I wrote one a while back: https://www.kaidenshi.com/posts/openbsd-as-a-daily-driver/
...and there are other guides out there as well.
given my origin story building firewalls and complex networks with Linux the sheer amount of immediately useful shit in the OpenBSD base install is absolute catnip to me. Things that I've historically spent days beating with a hammer just work right out of the box, the man pages are fucking amazing etc.
For the times I used Linux to replace Windows Servers (Windows 2003-2012 SBS rubbish) with Samba/dhcpd/sendmail/dovecot I wouldve given my left nut for FreeBSD+OpenZFS. It out of the box just immediately solves so many gotchas and hairy shit you have to roll your own solution around and that always felt a little underdone.
I'm hoping one day to get the opportunity to dig further into FreeBSD (pfil, netgraph/vpp) to see if i can build some truly beastly routers.
Oh and Sylve kicks all kinds of ass and is making a better and better case for finally putting a bullet in VSphere/ESXi.
Things are looking good and my hats off to all the people doing absolutely brilliant work.
Running Podman on FreeBSD? It’s a totally different beast than Linux.
I just published a follow-up to my previous Podman deep dive, going into the FreeBSD operational model for OCI containers. No systemd, no Quadlets, and no rootless mode, but you get native ZFS storage drivers, rc.d service integration, and the Linuxulator.
We also cover the big question: why Podman complements Jails instead of replacing them.
Tonight, 22:45 UTC, I'm talking at NYCBUG. "What's Changed Since I Came This Way: A Talk that was supposed to be about #OpenZFS" #sysadmin #freebsd
In meatspace in New York City, and streamed online. https://www.nycbug.org/
For 1 April 2026: "Networking for System Administrators: The Defenestrated Edition"
I threw out the Windows.
Well, blacked it out.
https://mwl.io/ks
You really want to watch the video in this article, especially if you are a fan of @pluralistic
The “BOY HOWDY!” heard around the room:
A #FreeBSD 16.0-CURRENT boot environment on a 15.0-RELEASE made with OccamBSD imagine.sh and propagate.sh, which use makefs(8) and mkimg(1) internally, and packaged base…
We can have nice things!
I’m sure there are remaining rough edges but IT CAN BE DONE.
You’re welcome.
The last day to back @RobCornell's deliciously messed-up novel and get not one, not two, but THREE books!
Seriously, this the most fubar book I've read since PKD's VALIS, yet positive and hopeful.
call for testing
Sylve - FreeBSD management plane
At <https://www.reddit.com/r/freebsd/comments/1rpzri3/call_for_testing_sylve_freebsd_management_plane/>, @hayzam wrote:
"We just pushed a big update to Sylve and are doing our first call for testing.
Sylve is an open-source control panel for FreeBSD virtualization and storage, designed to manage bhyve VMs, FreeBSD jails, and ZFS from a modern web UI. Development is currently funded by the FreeBSD Foundation. …"
Docs: https://sylve.io/
Is Kdenlive the best tool for editing/splicing multiple video clips together?
...or is there a better open source tool for nonlinear video editing? I am not a professional video editor, so simplicity rather than features is more important for me at this time. I can run it on FreeBSD, Linux, or MS Windows, and it isn't worth spending $$ on this for me.
I recorded an esports match via OBS (.mp4) for one of my kids in college, but MS Windows crashed 4 times while recording, so I need to crop and splice the videos together and remove the unnecessary stuff from multiple recordings - nothing fancy - just clipping and splicing.
Usually I just save and share the file without editing - the few people who watch it will skip around to the parts they want to watch. Last time I had two recordings and just merged them (ffmpeg), but this time it is more annoying with several files and a lot of crashes, so I don't just want to merge them without clipping out the junk.
Thanks!
I'll remember this quote from @pluralistic tonight:
"Shopping your way out of a monopoly is like recycling your way out of a wildfire."
Since online review sites are full of biased and inauthentic reviews, are there any personal recommendations for a point of sale + online payment processing and reservation system for a new, tiny nonprofit in the US? About 20 or so local artists will be part of 501(c)(3), which will have scheduled classes, recurring membership fees (for access to studio resources), and retail sales of local artist work (need to track per-artist inventory / commission). Initially they are looking at Square Plus because some of them are already familiar with the hardware, and it seems to meet all the requirements, but a post on payroll processors by @coreysnipes reminded me to look at alternatives. Basic CRM/marketing (probably just bulk email to existing customers about upcoming events) would be needed, but can be separate. The price point of $300 POS hardware and $50/month + <=3% credit card fees looks like an amount that could be budgeted. They are making a Wordpress website, so it could either be integrated with that or just link to another site. Thanks!
@hayzam Not sure if you are active on here, but I think that it is your blog post that came up on the Bhyve user call today - https://hayzam.com/blog/02-linuxulator-is-awesome/
I looked at the VS Code extensions for Remote SSH, and there are multiple extensions that include "Remote SSH" in their names. Could you identify which specific one that you've used? This sounds like it would be really useful for me as well.
Thanks!
Nextcloud migration: Linux to FreeBSD (Bastille jail build log)
Big update pushed for #BSSG - my Bash-based static site generator
This is a major pre-release update, not the official release yet, and I would really love some testing and feedback before cutting it.
Highlights:
* New build mode: BUILD_MODE="ram" / --build-mode ram
* This is a memory-first build mode designed to drastically reduce disk I/O during the build.
* On real projects, this results in a ~2× speedup, and in some cases well over 3× faster builds, depending on:
* site size
* number of generators involved
* storage speed
* parallelism available
In RAM mode you also get a stage timing summary, so you can see exactly where build time is spent. This makes performance tuning much more transparent and data-driven.
Under the hood:
The core build system was heavily refactored:
* Clear separation between orchestration, generators, and indexing
* Cleaner and more predictable generation flow for posts, pages, tags, authors, archives, and feeds
* Asset and theme handling moved into a dedicated build module
* Static file copying and theme CSS processing are no longer scattered around the codebase
Performance and robustness:
* Smarter rebuild and caching logic
* Improved parallel execution paths
* Uses parallel when available
* Shell-based worker fallback when it isn’t
* Parallel behavior is now more robust and easier to reason about
Stability and polish:
* Fixed an edge case with locale-specific timing parsing
* Configuration and documentation updated to match new options and tuning knobs
* Overall codebase is simpler, clearer, and easier to extend
Before tagging the official release, I need help testing this.
* Please test from the main branch or commit and report issues *
Links:
Repo: https://brew.bsd.cafe/stefano/BSSG
Huge thanks to everyone who tests, reports issues, or pokes at it.
This release comes from a lot of refactoring and profiling, and fresh eyes really help
I bought a copy of "The Book of PF" from @pitrh
It's the best and most comprehensive resource about the marvelous PF firewall that I've ever seen, and I've been using PF since the early days.
Amazing work!
It's available here on No Starch Press: https://nostarch.com/book-of-pf-4th-edition
I also recently wrote a practical guide on PF (https://blog.hofstede.it/pf-firewall-on-freebsd-a-practical-guide/) for anyone who wants to get started :-)
I've been running mailservers for myself and for others (ISP, corporate) for about 30 years. The current best "learn-and-do" guide is @mwl 's Run Your Own Mailserver, available from https://www.tiltedwindmillpress.com
Back on social media after making progress on work projects. Yay!