Showing posts with label ruBSD. Show all posts
Showing posts with label ruBSD. Show all posts

BSD News 21/01/14

Last week in BSD
Releases: m0n0wall, pfSense
Other news: BSDnow, portmgr@, OpenBSD, ruBSD, DragonFly BSD, PC-BSD

Follow us at Twitter at @janhovancik. Read interview with new writer.

Releases

m0n0wall 1.8.1 released 

Change log highlights (see the SVN change log for the full details):
  • add scheduler ("Croen") service with many different job types (enable/disable interface or shaper rule, Wake on LAN, reboot, reconnect WAN, execute command etc.)
  • improved IPv6 support, including IPsec, DHCPv6-PD, RDNSS and DNSSL, and NDP info on the ARP diagnostic page
  • major overhaul of wireless LAN support. On some cards, it is now also possible to create multiple APs at the same time. To reflect this change, the wireless settings have moved to the Interfaces: assign page, where WLAN subinterfaces can be created much like for VLANs.
  • DNS forwarder: add option to log DNS queries, add aliases (CNAMEs) and MXs
  • Add AES-256, SHA-256/384/512 and additional DH group options to IPsec
  • Make rule moving and deletion on shaper rules page work like for firewall rules.
  • Initial support for USB modems
  • enable CPU hardware crypto support
  • automatically reassign available physical network interfaces if none of the assigned interfaces in the configuration can be found on the system (i.e. for a new installation, or when moving an existing config to new hardware)
  • the "embedded" image is gone; generic-pc-serial should now be used for PC Engines and Soekris boards
  • console speed for serial images is fixed to 9600 baud (no longer tries to use BIOS preset value)
  • introduction of an automated build system that allows one to build m0n0wall from scratch with almost no manual intervention on a standard FreeBSD 8.4 system
  • countless bug fixes and improvements in UI and system configuration code
Refer to the installation instructions for information on how to install these files on the various platforms.


For those who are inclined to try such things, 2.1.1-PRERELEASE snapshots are up for testing at http://snapshots.pfsense.org/

Update URLs for use in firmware update settings:
http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/amd64/pfSense_RELENG_2_1/.updaters/
http://snapshots.pfsense.org/FreeBSD_RELENG_8_3/i386/pfSense_RELENG_2_1/.updaters/

The current set of builds have the new Intel drivers for em/igb/ixgb/ixgbe (Thanks Ermal!) and should support i210 and i354 and others, and should hopefully fix issues that have been observed with ixgb/ixgbe drivers.

Give them a spin, especially if you have hardware that could benefit from the new drivers.

A list of changes between 2.1 and 2.1.1 may be found here:
https://doc.pfsense.org/index.php/2.1.1_New_Features_and_Changes


Other news

Bhyve Mind | BSD Now 20 


download (size: 502 MB )
It’s our big 20th episode! We’re going to sit down for a chat with Neel Natu and Peter Grehan, the developers of bhyve. Not familiar with bhyve? Our tutorial will show you all you need to know about this awesome new virtualization technology. Answers to your questions and all the latest news, here on BSD Now – the place to B.. SD.



pfSense talk at “Tokyo FreeBSD Benkyokai” February 17 

Isaac (.ike) Levy, Senior Unix System Administrator at National Hockey League (http://www.linkedin.com/in/dotike) will be presenting “pfSense Practical Experiences: from home routers, to High-Availability Datacenter Deployments” at the Tokyo FreeBSD Benkyokai (FreeBSD Study Session) Group on February 17, 2014.
http://atnd.org/events/47084
Ike states that his main objective in Tokyo is to get some real help with the Japanese translation of pfSense.
Ike recently committed “Phase 1″ (machine translation) of this effort, which you can view at GitHub.

Joe Marcus Clarke has stepped down 


Joe Marcus Clarke, aka marcus@, has stepped down from his duties on the FreeBSD Ports Management Team.
Joe was our longest serving member of the team. Among his many accomplishments was being the repocopy source of authority, instrumental in championing tinderbox development and maintaining portlint.
On behalf of the Ports Management team, we would like to thank Joe for his many years of service and dedication.
Thomas
on behalf of portmgr@

ruBSD: interviews with Theo and Henning

Last December Russian tech giant Yandex organised first ruBSD event in Moscow. OpenBSD developers Theo de Raadt, Henning Brauer and Mike Belopuhov gave three talks on different topics. There were interviews with Theo and Henning recorded as well. Theo spoke about current adoption of mitigation techniques in other OSes and state of OpenBSD project. Henning gave a history overview of PF.
All talks and interviews available online and for download.
Theo de Raadt: Exploit Mitigation Techniques: an Update After 10 Years (slides, video and interview)
Henning Brauer: OpenBSD's pf: Design, Implementation and Future (slides, video and interview)
Mike Belopuhov: OpenBSD: Where is crypto headed? (slides and video)

32-bit DragonFly 3.7 and dports 

There are no binary packages built for dports, on DragonFly 3.7, for 32-bit machines, at this time.  Pierre Abbat found this out.  You can build from source, of course, or just use 3.6 packages.  Don’t forget -DBATCH to avoid getting asked for build options when building from source.


Code stuff
DragonFly BSD - Other network improvements 
DragonFly BSD - Trackpad support summary 
DragonFly BSD - Testing USB4BSD 
DragonFly BSD - ACPI updates and power states 
FreeBSD security advisories
PC-BSD Weekly Feature Digest 
In Other BSDs for 2014/01/18


Interesting articles
Hal, dbus, and VMWare tip. Also pkg locking 
BlueVM KVM and NetBSD I. 
Unix: Writing more efficient shell scripts

BSD News 23/12/13

Last week in BSD
Releases: FreeNAS
Other News: ssh, OpenBSD, FreeBSD Foundation, EuroBSDCon, JabirOS, OpenBSD, ruBSD, BSDTalk, NetBSD, DragonFly BSD
 

Releases

FreeNAS 9.2.0

Jordan Hubbard has announced the release of FreeNAS 9.2.0, a FreeBSD-based operating system that enables the users to build networked storage: "After one early beta and two release candidates, it gives us great pleasure to announce the full and final release of FreeNAS 9.2.0. As implied from the series of pre-releases, this release has benefitted substantially from a great deal of public testing as well as several months of 'living on' testing we ourselves have done on a wide variety of hardware. This is, without a doubt, the best release of FreeNAS yet. Since 9.1.1 was released, we have fixed 268 bugs in the bug tracker, as well as countless others that were found and fixed independently of the bug tracking system. We have also made a number of enhancements to the UI and generally done our best to bring more polish to the FreeNAS system, both in usability and performance." Continue to the release announcement to find out more. Download (SHA256) from here: FreeNAS-9.2.0-RELEASE-x64.iso (163MB).

Other news

USENIX LISA 2013 Managing Access Using SSH Keys   

Tatu Ylönen invented the Secure Shell (SSH) protocol in 1995 and even the history of OpenSSH mentions how OpenSSH is a derivative of the original free ssh 1.2.12 he released. He is also the founder and CEO of SSH Communications Security which sells a commercial version of ssh. A few more details can be found on the USENIX LISA 2013 page for "Managing Access Using SSH Keys" but the audio and video files are linked below.
SSH user keys are ubiquitously used for accessing information systems by automated processes and system administrators. Many large organizations have hundreds of thousands of keys granting access, with many keys providing privileged access without auditing or controls. The talk educates the audience about risks arising from unmanaged access using SSH keys; discusses what is required by compliance mandates; outlines how to establish effective operational processes for provisioning, terminating, and monitoring SSH user key based access; and outlines how to understand and remediate SSH user keys in an existing environment.
Editor's note: This talk is, in no small part, a push for a commercial product; the issues raised in regards to lax management of SSH keys, however, are valid enough to warrant careful consideration of one's own key regime.
Available audio and video formats: Video MP4 | Video WEBM | Audio MP3 | Audio OGG

FreeBSD Foundation Announces Capsicum Integration Project Completion

The FreeBSD Foundation is pleased to announce the successful completion of work on the improvement and integration of the Capsicum framework and the Casper services daemon. The Google Open Source Programs Office and the FreeBSD Foundation jointly sponsored Paweł Jakub Dawidek for this project.

Capsicum is a lightweight OS capability and sandbox framework developed at the University of Cambridge Computer Laboratory. Capsicum extends the POSIX API, providing several new OS primitives to support object-capability security on UNIX-like operating systems. Capsicum is now a standard part of FreeBSD, and ports to other operating systems are in progress.

EuroBSDcon 2013 Developer Summit Special Status Report 

This special status report contains a summary of the discussions from the various working groups at the EuroBSDcon 2013  Developer Summit. From the table of contents: Desktop Developer Summit Track DNS Documentation Embedded Platforms Networking Ports and Packages Security Toolchain and Build Systems USB Vendor Discussions Virtualization ZFS   EuroBSDcon 2013 Developer Summit Special Status […]

After a huge delay!   

Greetings. Jabir Project team is sorry because of delay in releasing new version.After this delay, we decided to wait for FreeBSD 10.0 then we’ll start our project again. Regards. Muhammadreza Haghiri

Cryptocrystalline | BSD Now 16

download (size: 309 MB )
We’ll be showing you how to do a fully-encrypted installation of FreeBSD and OpenBSD. We also have an interview with Damien Miller – one of the lead developers of OpenSSH – about some recent crypto changes in the project. If you’re into data security, today’s the show for you. The latest news and all your burning questions answered, right here on BSD Now – the place to B.. SD. 
 
OpenBSD ruBSD Talks Online   

ruBSD 2013 talks online:
Fresh from a successful tour of the motherland, our fearless OpenBSD devs have placed their

BSDTalk 236: NYCBSDCon and 8 years too   


BSDTalk, which is hitting its 8th year, has 20 minutes of conversation with Ike Levy and Brian Callahan about NYCBSDCon.  (which is coming up on February 8th; will you sponsor?)

PulseAudio Gains Greater FreeBSD Compatibility

As some other interesting open-source audio news this week besides PulseAudio now supporting the systemd journal is that Lennart Poettering's sound server is continuing to be better supported on FreeBSD.

The necessary changes have been made to the mainline PulseAudio sound server code-base that provide greater FreeBSD operating system compatibility. Only a few dozen lines of code were changed in this latest commit for handling of code that was Linux specific.

It's not too much of a big deal though given that there's already been some level of FreeBSD, OpenBSD, and NetBSD support by this LGPLv2.1 sound server. PulseAudio is also compatible with Solaris and Windows operating systems.

The commit improving the PulseAudio FreeBSD support can be found by this Git commit.


Code stuff

OpenBSD: tmpfs Enabled in -current  
New Security Advisory: NetBSD-SA2013-012 Router Advertisement and 013 ELF interpreter local Denial of Service 
PC-BSD Weekly Feature Digest 12/20/13 
In Other BSDs for 2013/12/21 


Interesting articles

Survey of rump kernel network interfaces 
Interview with Amitai Schlair member of The NetBSD Foundation’s Board of Directors 
You need to construct additional pylons. Building wine for #FreeBSD 
My DragonFly 3.6 upgrade adventure 
Faces of FreeBSD – Kevin Martin 
http://www.youtube.com/watch?v=czV1049YGGA