BSD News 25/05/15

Last week in BSD

Releases: PC-BSD
News: FreeBSD, OpenBSD, ArchBSD, PacBSD, Hammer, BSDnow, pkgsrcCon, HardenedBSD, Wallapper

Releases

PC-BSD 10.1.2 Released

• New PersonaCrypt Utility
  • Allows moving all of users $HOME directory to an encrypted USB Drive. This drive can be connected at login, and used across different systems
  • Stealth Mode — Allows login to a blank $HOME directory, which is encrypted with a one-time GELI key. This $HOME directory is then discarded at logout, or rendered unreadable after a reboot
• Tor mode — Switch firewall to running transparent proxy, blocking all traffic except what is routed through Tor.
• Migrated to IPFW firewall for enabling VIMAGE in 10.2
• Added sound configuration via the first boot utility
• Support for encrypted iSCSI backups via Life-Preserver, including support for bare-metal restores via installer media
• New HTML handbook, updated via normal package updates
• Media Center support allowing direct login to Kodi and PlexHomeTheater for the 10ft user experience
• Switch to new AppCafe interface, with remote support via web-browser
• Improvements to Online Updater, along with GRUB nested menus for Boot-Environments
• Migrate all ports to using LibreSSL instead of OpenSSL
• Switch from NTPD to OpenNTPD
• Lumina desktop 0.8.4
• Chromium 42.0.2311.135
• Firefox 38.0
• NVIDIA Driver 346.47
• Pkg 1.5.2

 

HotFix release to 10.1.2 – Now available 

A minor hotfix update to the 10.1.2 ISO’s has been released today. This includes fixes to advanced installation using raidz, cache and log devices, as well as a fix to the text-installer when booted in UEFI mode. Users who have already installed 10.1.2 will not need to download, and can instead online-update to install any fixes.
Download Now

Other news

Heads Up: spamd(8) PF Rule Change

With a recent commit, Reyk Flöter (reyk@) flipped the switch on spamd(8)'s pf interfacement:

hange spamd to use divert-to instead of rdr-to.

divert-to has many advantages over rdr-to for proxies.  For example,
it is much easier to use, requires less code, does not depend on
/dev/pf, works in-band without the asynchronous lookup (DIOCNATLOOK
ioctl), saves us from additional port allocations by the rdr/NAT code,
and even avoids potential collisions and race conditions that could
theoretically happen with the lookup.

Heads up: users will have to update their spamd PF rules from rdr-to
to divert-to.  spamd now also listens to 127.0.0.1 instead of "any"
(0.0.0.0) by default which should be fine with most setups but has to
be considered for some special configurations.

Those of you running spamd setups looking to upgrade need to double-check your pf configurations to make sure they still work the way you expect.

ArchBSD changes to PacBSD 

Over the next few days we will be migrating to a new name for the project. Due to potential trademark issues with using ArchBSD and our current logo. We have decided to rename the project.
The new name can currently be used to browser the website, but our current certificates only work with ArchBSD.net, so there will be warnings when browsing with https. We will have to wait a few days before our new certificate will be generated to work with *.pacbsd.org.
The Organization on git has been updated and can be found: PacBSD
After the migration to our new name PacBSD we will be switching to a new website and new logo.

ZFS Armistice | BSD Now 90   

This time on the show, we'll be chatting with Jed Reynolds about ZFS. He's been using it extensively on a certain other OS, and we can both learn a bit about the other side's implementation. Answers to your questions and all this week's news, coming up on BSD Now - the place to B.. SD. 

Announcing pkgsrcCon 2015 in Berlin   

The 10th pkgsrcCon is happening on the weekend of July 4th and 5th 2015 in Berlin. Developers, contributors, and users are all welcome to attend.
More details can be found on the pkgsrcCon 2015 website.

Everyone is welcome to make a presentation. So please do! If you already have title or topic please send an email to wiedi@frubar.net.

Code stuff

Automatic encryption of swap
Hammer abort-cleanup added 
In Other BSDs for 2015/05/23 

Interesting articles

freebsd-wifi-build, or "wait, you can run freebsd on atheros MIPS access points? where do I get that?" 
A scanning tip 
Lumina Desktop Status Update/FAQ

Wallpaper of the week

Not really. http://fapp.to/hardenedbsd-mate-desktop/

SHARE

JH

software developer - guitar player - poetry lover