What are /r/freebsd's favorite Products & Services?

From 3.5 billion Reddit comments

> Seriously. What's up with that woman?

It's profitable.

This is no different than the mentality that led people to mega churches. People want to hear what they like, hear bad things about people they don't and throw money at the person standing on stage.

Now that the younger generation is moving to athiesm it's not like those types of people will go away, they'll just change their platform.

Witch hunts are nothing new, they just come up with new names for witches.

I use FreeBSD for software development all day long, but about half the time FreeBSD is not providing the display that I sit in front of. Rather, I ssh (or mosh) into a big server with all my tools and datasets on it and do my hacking there. Work often has me doing development for both Unix (FreeBSD, Linux, and HP-UX) and Windows. Windows doesn't remote well, and it doesn't virtualize well without VMware, so I have a Mac as a way of picking my battles when I have to deal with both Unix and Windows.

FreeBSD's biggest strengths are realized on servers. The things you can do (without downtime!) to storage with GEOM, ZFS, and HAST blow away everything else on offer. The core system is conceptually small enough that you can hold it in your head (unlike some of the enterprise-oriented Linux distributions), and that's a big win in being able to intuitively debug a system that's not working well.

Lumina is a pretty good desktop environment whose developers targeted FreeBSD first. GNOME and KDE run on FreeBSD about as well as they do on Linux. Drivers for your graphics card might be a sticking point, but it's worth a try.

Your school's recommendation for Windows probably comes from a combination of lessening the breadth of problems IT has to support and software that's likely to be used in your course of study (MATLAB, Mathematica, AutoCAD, Cadence, etc.). If you're going to be stuck with software that only runs on Windows or OS X, you're going to have to decide that pain-point for yourself. I kept a Windows laptop and Unix desktop at university for that reason. Dual-booting is an option, if your laptop has generous storage.

Outside of specialized software, you absolutely can run a FreeBSD laptop and do all your coursework on it. LaTeX and groff work even better than they did when I used them at school, but now you can run LibreOffice, too. :)

I got one FreeBSD droplet too. I didn't read any docs and got stuck so here's a super short quickstart for FreeBSD users:

1. Create a droplet through the web interface, select FreeBSD (10.1 only available). You'll need an ssh key, paste the public key into the web interface (password based auth not an option when creating droplets).

2. This is the important bit, the 'root' account doesn't work for ssh, you have to 'ssh freebsd@<your-ip-address>'. Use the '-i' flag to pass in the private ssh key if it's not picked up automatically. The default prompt is '>' - don't be alarmed.

3. So, you're not root, and cant 'su' because you don't know the root password. Don't fret, just use 'sudo <whatever>' and it works. I used that to 'sudo passwd root' and then 'su'.

Other notes about DO:

• Only 1 IPv4 per droplet (consider creating multiple small droplets instead)

• Need to turn off machine to take snapshots

• Private networking not available in all areas (not sure why)

• The web ui is pretty slick - probably one of the best. And yes, it is only about 55 seconds to create one droplet.

Ok, that should be it - cheers!

Oh, and if you want $10 in credit you can use my referral (https://www.digitalocean.com/?refcode=971f767ea10b) and both of us profit :D

As icantthinkofone said, the average FreeBSD user would be fucking pissed if they installed a port/package that installed a bunch of other shit that isn't required. The fact apt-get installs mysql is perhaps more annoying. What if you wanted a specific version, or if you wanted to use PostgreSQL. If you install something that requires a dependency like mod_php5 and apache isn't installed it will be done so automatically and it'll modify httpd.conf for you.

As for ports, they're the same thing as packages. The packages are literally just pre-compiled versions of the port. Using a package means you don't have to wait for it to compile, but it will be built with the default options of the port. If you want to configure any build time options(make config) you need to use the port, same with specifying what compiler and compiler flags(/etc/make.conf if you wanna make it global). As for /usr/local, FreeBSD does not mix the base system with 3rd party software, ever. See the handbook section or the heir(7) man page.

The FreeBSD team has a large cluster of machines dedicated to building packages full time, so that you don't have to build from ports. The old build cluster was called Pointyhat, not sure what it is now since the switch to pkgng.

If you want faster port turnaround, you should be operating your own poudriere or tinderbox installation. Simple as that. Constantly building binaries that work on 99% of systems is resource expensive, and resources are scarce.

Otherwise, port build is dependent on time and resources being available to build the port in question. It's entirely automated. Just because there's yet another OpenSSL security fuckup does not mean it gets moved to the head of the line. Just that it will get rebuilt when resources available. There's nearly 24,000 packages and some of them either have licensing restrictions or would take literal hours to build no matter how much hardware you threw at it.

And FYI, the binary packages use system openssl by default. Not security/openssl. Coverage would be via freebsd-update not pkg update.

I switched away (after almost 20 years) because Apple stopped taking professional software developers seriously.

My 2011 Macbook Pro had a gigantic matte screen, socketed memory, swappable storage, a comfortable keyboard, an ExpressCard slot, and an all-day battery. The OS was thoroughly usable as a Unix-like development environment.

First the matte screens went away. Then they got smaller. Then the storage and memory became permanently soldered-in. In the interest of making a notebook thin enough to slide under an office door, battery life and keyboard comfort suffered. Build quality went to hell, even as they made their hardware harder to repair.

Then they issued the ultimate insult to those of us who use vi: they took away the escape key.

At some point, you just have to accept you're not wanted anymore. Unix hackers helped saved Apple's ass at the turn of the century ("You mean I can run Unix software and Microsoft Office side-by-side? I'm totally pushing for this to be our standard platform!"), but we're no-longer necessary. macOS is a content-consumption platform anymore; just look at the features they tout in Big Sur. Remember when OS X used to be about being "The world's most advanced operating system" and strong enough to run the world's most demanding creative applications?

Turns out that skimming 30% of everyone else's work is a lot easier than all that.

> the AWS EC2 images are funded by a single developer who receives money only via patreon

Most of my funding comes from my day job at Tarsnap. They've been very generous in allowing me to spend time working on FreeBSD in ways which are at times only marginally relevant to how Tarsnap uses EC2. (In case the joke isn't obvious: I'm the founder of Tarsnap.)

I'm sure the Foundation would be happy to provide me with funding, but there's two issues there:

1. The Foundation generally works on a "project funding" model, which isn't a great fit for this sort of ongoing "deal with stuff as it arises" work.

2. Via Tarsnap, I'm actually one of the Foundation's major donors, so it would be a bit weird to have them paying me...

That said, the Foundation is funding work which is helping here -- a lot of the work going into getting the ARM instances working well is being done by Andrew under Foundation sponsorship.

Why would you rely on 2 broken technologies for 2FA?

1. Text messages/phone system
2. Outbound connection to a third party

Good, offline solution (not tailored for BSD, but the gist of it is there): https://www.digitalocean.com/community/tutorials/how-to-set-up-multi-factor-authentication-for-ssh-on-ubuntu-16-04

I hope you realize that it's 100% untrue, like most other replies. Look here for actual data. Note that pretty much everything listed as < 1% of the total is a false positive; when OpenHub can't identify the language of a file by its name, it tries to guess, and it's not very good at it.

http://distrowatch.com/weekly.php?issue=20131125#feature is the only comparison i could find

"A little while ago I reviewed PC-BSD 9.2 and enjoyed my time with that project. The PC-BSD operating system has a nice installer, worked fairly well for me and came with a lot of great administrative features. So many and so powerful were PC-BSD's features, I was willing to overlook some sluggishness in its performance and some of the complexity it presented. GhostBSD, while it uses the same FreeBSD 9.2 base, offers the user a very different flavour of BSD. GhostBSD has a simplified installer, a very responsive desktop, one unified approach to package management and a more streamlined approach. In my mind PC-BSD is ideal for developer workstations, corporate environments and power users.

GhostBSD is a product for the home user who wants to put their installation disc in the drive, confirm their system will boot it and then simply start using their computer. GhostBSD offers an easy installation, enough software for most people to get started and a fairly straight forward package manager to supply additional functionality. The MATE desktop is fast, the configuration tools simple and the provided applications useful. This novice-friendly approach means GhostBSD skips out on some of the powerful tools offered by its PC-BSD cousin, but it also means GhostBSD may be more appealing to a beginner or the causal home crowd."

Xorg isn't a desktop, think of it as like graphics drivers. You'll need to install a nice desktop manager to get a nice desktop. You may also need to edit your xinitrc or install something like slim and configure it for a login window.

Try install the xfce4 port or package, that's probably a good starting point for a useful and nice desktop.

Alternately, installing kde4 is going to be more batteries included.

Also, check out the handbook:

http://www.freebsd.org/doc/handbook/x11-wm.html

Hi there,

I don't think there exists such a thing as a "control panel" for FreeBSD, so instead I'd suggest you arm yourself with patience and use the FreeBSD handbook. It's a really good manual that will cover pretty much anything you'll want to do with your BSD box in the first three months of use. If you have a hard time using the command line at all (go to dir, edit file, etc) then I'd suggest looking up a CLI tutorial.

I'm sorry if this isn't the help you're looking for but in my opinion it's the best you're gonna get.

Here's what I would do in your situation:

Put the standalone SSD devices on 6Gb+ AHCI motherboard connectors. These will do quite nicely. Motherboard AHCI slots are pretty well connected.

I'd grab a LSI SAS 9207-8i (about $100 on Amazon) and 2 x SFF-8087-SATA fanout cables (about $10 on amazon). It uses the mps driver in the base system. This combination is very, very solid and reliable. I use it myself for a media server.

You can add a second 9207-8i if you need more ports. I've found the AHCI pci cards work well too but watch the PCIe connectivity.

This device: https://smile.amazon.com/dp/B00AZ9T3OU cost $15.

ahci0: <ASMedia ASM1061 AHCI SATA controller> ... ahci0: AHCI v1.20 with 2 6Gbps ports, Port Multiplier supported

Keep in mind the PCIe lane bandwidth: 1 x PCIe lane is: PCIe 1.x: 250MByte/sec, 2.x: 500MByte/sec, 3.x 985MByte/sec.

That 2 port AHCI card I linked above is 1 lane PCIe2.0. If you put 2 x SSDs on it that could do 600MB/sec each, the most it can shuffle through the motherboard connection is 500MB/sec. The LSI card is 8 lane PCIe 3.0 so that choke-point isn't there.

I'd add a second 9207-8i if I wanted to do any non-trivial amount of IO on more than 8 ports.

Also, don't set your expectations too high for L2ARC. My personal observations lead me to believe that the overheads of running it don't really pay off until you start having a L2ARC device with a good 5x to 10x performance advantage over the backend devices. YMMV of course, but I've never not been disappointed with L2ARC setups.

Personally, I over-spec system ram in preference to L2ARC.

okay so pf is a match-last system, which means your stuff could be getting caught up in a rule later on in your pf.conf that does not have a logging option so you want

block in log quick proto tcp from any to any port { 25, 110, 465, 587, 995 }

note the addition of the quick keyword, you also want to add in port 587 which is a mail submission port

secondly pf doesn't immediately flush everything to /var/log/pflog

you say you've got nothing in the log file, so I don't know if you mean nothing at all or nothing relevant so I'd check to see if you've got logging turned on

/etc/rc.conf pflog_enable="YES" pflog_logfile="/var/log/pflog" pflog_flags=""

If you want realtime access to the log you need to use the pflog0 interface via tcpdump -n -e -ttt -i pflog0 and the logged data via tcpdump -n -e -ttt -r /var/log/pflog

http://www.openbsd.org/faq/pf/logging.html goes into detail as to how to filter the log

He still very much holds that opinion by all accounts and evidence. It took Wind River saying "this is going in, deal with it" to get kdb in. And it's still not a functional debugger, or even safe to have available on demand.

+1 for rEFInd

Never was able to get freebsd running on my test laptop, but I dual boot macOS and linux on my macbook and windows and a few different linuxes on my test box all using rEFInd. Looks good (with the right theme) and works good.

"A sticky command appeared in Version 32V AT&T UNIX." http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/sticky.8?query=sticky&amp;sec=8

You need to go back to 1979 and get yourself a VAX to answer that... :-) My guess is, that keeping something in SWAP,MEMORY back then would easyly exhaust it, so only admins were allowed to set the bit, so normal users won't hog precious bytes.

> The package system is not like apt. Most of the packages are through "ports" ... compile and install the packages

Most users should probably be fine with the official package repositories and pkgng. pkg install foo, pkg upgrade, pkg autoremove, pkg search and so on - very apt-like.

Last sentence: "Selecting [ Install ] here will enter the installer."

Just hit Return/Enter on your keyboard. Spacebar selects/unselects options, keyboard arrows move you around. http://www.freebsd.org/doc/handbook/using-bsdinstall.html is the installer tutorial.

> Example: curl 7.35 (I believe) was just released. Debian will probably have this in January of next year.

http://curl.haxx.se/ >The most recent stable version of curl is version 7.36.0, released on 26th of March 2014.

# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux unstable (sid) Release: unstable Codename: sid

# curl -V curl 7.36.0 (x86_64-pc-linux-gnu) libcurl/7.36.0 OpenSSL/1.0.1g zlib/1.2.8 libidn/1.28 libssh2/1.4.3 librtmp/2.3

You are too prejudiced about Debian :)

It actually isn't windows only, they even have a terminal program for *nix: https://www.chiark.greenend.org.uk/~sgtatham/putty/faq.html#faq-ports

I understand your perspective, as it was Windows only for quite a while.

> When running a test on a single core FreeBSD guest, the system freezes until traffic is stopped. It only happens to FreeBSD when the guest has only one core. https://asciinema.org/a/205477

Is this a known regression/bug with FreeBSD 11?

BHYVE isn't a hypervisor?

http://bhyve.org/

It's no different than KVM; A kernel module that converts the host OS into a type1 hypervisor. (Although one could argue they are still type 2.)

I will agree FN is not a proper choice though.

Google's search results are weighted by your search history. The best way to get consistent search results is use a search engine that doesn't track you (i.e. DuckDuckGo, Startpage) or search in private/incognito mode.

FWIW, here are the results I got:

• duckduckgo - github project 1st, freebsd lists 2nd
• startpage - freenas forums, github project 2nd, freebsd lists 3rd
• google in private browsing mode - freenas forums 1st, github project 2nd, godoc for github project 3rd, freebsd lists 4th

I imagine search engines take geographic location into account as well (from IP address block), so searching from a European IP address should give different results as searching from a US IP address.

I don't know much about backblaze but tarsnap was written by the former FreeBSD security officer. It is completely secure, so much so if you lose your key you are SOL. You may have to install cygwin on Windows to get it uploaded, and use the features like --checkpoint-bytes.

tarsnap

> hardening options on the install screen

That's just sysctls that enable some specific simple things sort of related to security.

HardenedBSD meanwhile is compiled with all the cool compiler security features (CFI, SafeStack), implements ASLR and W^X and more…

OpenBSD is nice when you only care about security, but it doesn't have ZFS/jails/DTrace/etc. — it feels somewhat "empty" without these features :)

Edimax EW-7811. ~7000 Amazon reviews, so you at least know it's reliable hardware-wise.

The manpage for urtwn(4) explicitly lists support for it. I've used mine in a Raspberry Pi under both FreeBSD and Linux with zero issues.

>Neither Xen nor ESXi have anything to do with Linux. In fact, claiming that ESXi has any linux code in it constitutes libel as vmware would be violating the GPL by not distributing the source to their hypervisor.

I think I'll take Hellwigs word for it.

Vote here against ThinkPads, from a long-time fanboy of same.

It's anecdotal evidence, sure, but I've had nothing but pain with recent ThinkPads. An L530 and an E550 I've owned have both cracked around the trackpad. The E550 has scuffing on the screen from the keyboard (!) and has flexed sufficiently that the DVD doesn't eject properly. My brother has had an E550 screen fail on him, and a friend had his E550 mainboard fail - all conveniently just outside warranty.

In addition, Lenovo is highly reluctant to honour warranties on screens and cases that are literally falling apart.

Contrast this with my old L520, the last of the series with the old-style IBM ThinkPad keyboards. That thing is still fully functional after years. It even survived being in a shoulder bag during a motorcycle crash with merely damage to one hinge. Built like a tank, utterly reliable, and fast too.

I plan to:

a) replace my E550 with a several-years-old refurbished X220, and

b) never purchase another ThinkPad (or any other Lenovo product) again

Also, bear in mind that Lenovo was caught intentionally shipping malware on some of their products, too. They're not what you'd call a reputable company.

Careful with what you call remote. Open resolvers on internet are used for DDoS attacks: make sure you keep that in mind.

Unbound is quite easy to setup, and you could probably use the opportunity to add DNS ad-blocking (à la https://pi-hole.net or https://try.popho.be/byeads.html)

That is not accurate. httpd handles dynamic content, like websites that use PHP . In fact, DistroWatch published a review yesterday that shows OpenBSD running httpd and serving PHP-generated content. http://distrowatch.com/weekly.php?issue=20151207#openbsd

To be fair, FreeBSD isn't the only OS that doesn't come with a GUI. See Arch Linux for example–even though it is a command line install, it's quite popular. And then Gentoo let's you compile much of your system from source code. Of course neither of those are beginner *nixes, but FreeBSD isn't either. XD

Polybar does not ship with example config.

If you look at upstream polybar repo at https://github.com/polybar/polybar, there is no default/example config (at least I couldn't find one).

https://github.com/baskerville/bspwm if you look at bspwm upstream repo, there is default/example config, and so it is in freebsd package

FreeBSD usually ships packages/ports as close as possible to upstream. And so, if there is no example config in upstream, there will not be one in freebsd package, unless someone(port maintainer) go out of their way to provide one.

More than just FreeBSD with a preconfigured GUI (akin to GhostBSD or the retired TrueOS), NomadBSD is the FreeBSD equivalent of a Linux live disk (i.e. Debian/Ubuntu live disk installers, TAILS, Puppy Linux, etc) but with persistent storage (also achievable with many Linux live disk distros).

You can image NomadBSD to a USB device, and effectively take it to whatever computer you want to boot from (that allows USB booting), and run it on said hardware. Portability is an asset, while USB performance would be a compromise from internally-booting SSD/NVMe devices.

Good point. I use salt to write out my pf rules, so my usage is different. Also look at creating a table and then just adding and removing addresses from it at certain times. http://www.openbsd.org/faq/pf/tables.html . the rule doesn't change but the addresses do.

-CURRENT is the development branch and isn't intended for casual users, or anything but developers and testers really. To quote the handbook:

> FreeBSD-CURRENT is the “bleeding edge” of FreeBSD development and FreeBSD-CURRENT users are expected to have a high degree of technical skill. Less technical users who wish to track a development branch should track FreeBSD-STABLE instead.

-CURRENT is randomly broken(won't build), has experimental code which main not exist in future -RELEASE builds, and has all sorts of fun errata.

i doubt 8.x has the new (borked imho) installer. This would be the original installer and hence maybe why it's not updated. Correct me if i'm wrong.

e: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/install-start.html

No worries, both Vmware workstation, VPC, and VirtualBox default the network adapter to NAT I'd assume for security purposes. I will say the other question you could have found much quicker just by looking at the handbook, I've spent plenty of time helping on work on it so please use it :)

No release announcement yet, but you can download the iso or update using the update utility in the same way as with 8.1. Here the 8.1 release announcement with the upgrade commands

> The Cygwin distribution contains thousands of packages from the Open Source world including most GNU tools, many BSD tools, an X server and a full set of X applications.

That said, it does use a GNU userland for the most part.

There are packages for a scant few BSD tools:

• bsdcat

• bsdcpio

• bsdiff

• bsdtar

I am not sure if webmin is in the ports collection, but it might be what you are looking for. I would suggest using freenas as an opportunity to learn to make the changes you want from the command line if you want to do some good solid learning.

http://www.webmin.com/

If you're looking for a new tool to play with that does the same in a different and better way (I think) you should check out CrowdSec. It's a modern, distributed version of f2b on steroids (to say it shortly). Like f2b it's free and open source but generates and shares threat intelligence among its users anonymously. On top of that it's capable of taking much more advanced decisions - like detecting and blocking DDoS attacks, credential card stuffing on top of eveything you would expect f2b to do. Data sources can be literally anything. Right now it supports files, syslogd, journald or aws cloudtrail. It can protect nginx, cloudflare and much more. Also there's a free to use graphical web console for stats (if you don't want to use prometheus observability yourself).

Disclaimer: I am head of community at CrowdSec and a happy user myself. If this condensed and simple version of what CrowdSec can do has inspired you to know more I did a talk at ShellCon a few weeks ago that takes a deep dive into the architecture and the possibilities that I can recommend. Right now the FreeBSD version is being worked on and upgraded to the latest version. If you try it out please provide me feedback; we haven't had that much feedback (if anything) from FreeBSD users yet :-). And after that we will make packages for pfSense and OPNsense - and probably OpenBSD.

If you have any questions or comments please let me know and I'll be happy to help!

> want a simple mortal user executable

I recently began using sysutils/angrysearch

DoTheEvo/ANGRYsearch: Linux file search, instant results as you type

Not necessarily for proprietary software …

> On linux there's snaps and flatpaks, …

… and AppImage | Linux apps that run anywhere

Work in progress:

• AppImage for BSD · Issue #98 · AppImage/AppImageKit

A couple other options (I've used hugo, my coworker likes Ghost):

• hugo (written in Go, pretty easy to use)
• Ghost (written in node.js, fairly easy to use, new release coming soon, haven't tried with FreeBSD)

> Discord (A lot of my friends use it as their 'go to' chat app now)

This works perfectly well in FreeBSD.(I use it.)

> Netflix (Not checked if that works)

No, it won't. It requires proprietary DRM to work. If want to trust the security of your OS, you really should not be using a system it works on.

> ExpressVPN - Though I can just use OpenVPN so not so much as a big deal.

If you have the choice to use OpenVPN with their service, why would you use their one drek instead of it?

> Android Studio

Honestly this seems like the only item that may be relevant.

It really does not do a good job of listing the requirements though. Looks like it likely would though as it is java.

Honestly this is something I would just keep VirtualBox around for.

I won't speak for /u/rhavenn, but for me it's very simple. You give it a list of ports you want it to maintain, tell it which options to use when building, and from then on you just say, "update ports tree, rebuild ports," and it does just that. You can maintain several different versions of the ports tree itself, different FreeBSD versions or architectures to compile for, etc.

Here's a good guide on setting it up:

https://www.digitalocean.com/community/tutorials/how-to-set-up-a-poudriere-build-system-to-create-packages-for-your-freebsd-servers

VirtualBox. Available on all Platforms, stable, and supports pretty much every OS you'd wanna try, and best of all: Open Source (except for the Expansion Pack needed for fast USB or PXE boot).

Glad it worked for you. Given the sacredness of VT1, I'd be tempted to put it on another VT, then use code to switch the VT like described at this link to have it switch to that terminal at the end of startup/boot. I'd just hate for you to lose some VT1 functionality (or have it cluttered) on account of it being where other things end up getting dumped.

It supports different cpu architectures, e.g. ARM and X86. However, it does not support different scheduling. In fact, the different approach towards CPU locking is one of the main reasons that leading to Dragonfly BSD.

The source code is orthodox, comparing to the Linux kernel source code. It is because there are always people trying and researching different things within the Linux kernel space.

It is relatively easier to read the FreeBSD source code along with this book if you want to learn OS architecture.

Unfortunately, many software projects these days target Docker as their only supported platform. Maybe you are an old wheel and think, I'll just install it "by hand" since I have the instructions in the docker file, right? Then you'll often discover that it requires old versions of dependencies that are long gone from ports, or supporting software that has never been ported.

Install Huginn by hand on FreeBSD and let me know how it goes for you.

You might counter that that sounds like shit software that probably has a lot of security issues hidden in the black-box image that no one is looking at, and a lot of lazy programing that will surely manifest as bigger problems down the road. You might say that slouching into a platform mono-culture is deeply and dangerously unhealthy, and ripe for shocks and plagues.

Probably all true, but now you are running linux too because the app you need today isn't installable on FreeBSD.

This might be a good place to start.

Why wouldn't these be compatible?

It's Amazon -- basically no risk. Buy them, try them, return if need be.

/u/lenzo1337 is suggesting buying a card like this:

https://www.amazon.com/Inateck-Extension-Bandwidth-External-RedComets/dp/B096ZK6C37/ref=sr_1_3?crid=1G8YRX422OREC&amp;keywords=usb+3.2+pcie&amp;qid=1646785104&amp;s=electronics&amp;sprefix=usb+3.2+pcie%2Celectronics%2C201&amp;sr=1-3

Which supports the higher USB 3.2 standard for more bandwidth.

> "Golang" is less ambigious.

It's also wrong. E.g. we've been talking about D, not Dlang. If you want to be less ambiguous, you could say the Go Programming Language, or more helpfully, Go (with a link).

You will get more overhead, since:

• everything that has to be displayed is now transmitted over TCP
• it's also encrypted in transit, which makes little sense, since that traffic never leaves host

I think when you do X11 forwarding, you cannot use graphics hardware acceleration. Consider comparing CPU usage before and after, when watching video.

Also, you may want to check this out: https://www.qubes-os.org/

https://www.amazon.de/FebSmart-PCI-Express-Erweiterungskarte-Anschl%C3%BCsse-superschnell-2-Port/dp/B07MZ4HJW6

It says in German: FreeBSD 12.1 erkennt die Karte problemlos angeschlossene USB devices laufen! (FreeBSD 12.1 recognizes the card without any problems connected USB devices are running!)

Why not set up a git repo, and edit locally, then push to the server, when you have the changes you want? It works over SSH. That's how I do all my development (though I'm setting up a FBSD VM environment to be my dev system). But it works well, with the added functionality of having a git repo to easily make changes and track them. link for how to use git to deploy

I use vim all over the place. It beats the pants off of most other editors once you get used to it.

Other than that, use filezilla and connect over ssh/sftp? I can't remember if root is able to login over ssh on FreeBSD, but is is generally a BAD IDEA.

EDIT: Also install sudo, and don't use root unless you are doing lots of admin-level work (installing your web stack, etc)

Aah, I see. I thought these were log files for sarg's activies, not reports; I'm not really familiar with sarg. newsyslog is the wrong approach here.

sarg has a configuration item to tell it how many reports to keep - it'll automatically delete reports older than this value - by default, it's set to zero, which means it never deletes any reports, and fills your report directory as you've seen.

modify sarg.conf to change lastlog to 90, and it should do exactly what you want, automatically. You might need to run sarg again to get it to process what reports need to be deleted and to delete them so.

See this question and answer on serverfault.com: http://serverfault.com/questions/318225/sarg-reports-for-squid-filling-up-the-disk-how-to-purge-them

I've a Bv2 (512Mb) but I'm planning to do it on a B+ that'll be shipped next week so I'll be in the same position as you. Which images did you tried ?

Edit : I did use that one but it's indeed branded "B" and not B+ :

Edit 2 : Also This thread

> Docker is good for prototypes of software, but is not production ready. For production I would choose K8s or OpenShift. Docker is not ready for production use by its design.

I believe I expressed it clearly about Docker & development, but if not - I'm stating about anyone encouraged to run production on pure Docker. While honestly, for small projects [which can fit in small VPS] it works fine. I personally run some low-risk stuff in docker and feel no shame for that.

> Then in case of catastrophic failure it's developer responsible for fixing it, so it requires sysadmin basic knowledge from developers, and right?

Here is "DevOps" or "Full Stack Developer" badges come in place - knows-enough-of-ops-to-do-simple-server-stuff :) I see a lot of analogy with cars - fixing flat tire is expected to be done by user, fixing engine - expected to be NOT done by user.

And honestly, what do you expect/describe as "catastrophic failure" in the world where

> Trend Number 1 - Nearly 90 percent of Kubernetes users leverage cloud-managed services ( https://www.datadoghq.com/container-report/#1 )

?

https://rclone.org works great for syncing to a huge list of cloud storage providers. I use it to keep systems in sync with a Backblaze B2 account with ZFS native encryption on the hosts and online encryption enabled for the B2 data buckets.

Here i have tweaked it a bit :)

https://codeberg.org/Alexander88207/FreeBSD-Ports/src/branch/main/drafts/minecraft16

I can not add this to the Homura library because Homura is for Windows games only.

If you want, this is the repo, I want to make it a port "games/minecraft16", but:

1.I don't know how to sumbit ports

2.Ports' Makefiles are "weird" - no build scripts, just properties and ".include <bsd.port.mk>"

Two main software I currently can't get: Brackets and Google Chrome (which I'd need to watch Netflix). However, I do feel like it's pretty easy to get most Linux code to compile on BSD (I had to add in a few #includes and #DEFINEs to the one I did, but otherwise it worked well) so I guess it's just that I'm used to having the programs that run on Linux and get upset when it doesn't on BSD -- like this pretty graphical logout for Openbox

That is correct. In my experience it isn't quite as robust as Gentoo's ports system, but it is very similar - Gentoo's was actually inspired by FreeBSD.

Most users will recommend using either poudriere or synth to build your packages. Poudriere has its own command for configuring ports, while with synth you do make config-recursive in the directory for the port. I believe the manpages for ports and build give a lot of information too.

I use poudriere because I like how it uses jails to build and makes things easier for memaking a repository for multiple machines. Synth has the added benefit of an option to download precompiled packages for ports using default options and depending only on ports using default options - saves a lot of time on compiling compilers.

It's hard to compare any BSD to a Linux distribution, because you would have to uninstall layer upon layer of superfluous packages to get down to a base system comparable to the BSD base system.

I once did the whole LFS on http://www.linuxfromscratch.org/ and ended up with something resembling FreeBSD. Now I just install FreeBSD.

Your question makes no sense. Xterm supports 256 colors by default:

pkg info xterm

xterm-318 Name : xterm Version : 318 Installed on : Sat Aug 8 15:00:01 BRT 2015 Origin : x11/xterm Architecture : freebsd:10:x86:64 Prefix : /usr/local Categories : x11 Licenses : Maintainer : WWW : http://invisible-island.net/xterm/ Comment : Terminal emulator for the X Window System Options : 256COLOR : on DABBREV : off DECTERM : off GNOME : off LOGGING : off LUIT : on NEXTAW : off PCRE : off SIXEL : off WCHAR : on XAW3D : off XAW3DXFT : off

And by working Wayland on FreeBSD, I meant a standalone display server running on Kernel Mode Setting, not dependent on X server or something, as mentioned below in the description from the homepage.

> The compositor can be a standalone display server running on Linux kernel modesetting and evdev input devices, an X application, or a wayland client itself. The clients can be traditional applications, X servers (rootless or fullscreen) or other display servers.

Are you running at high interrupt load due to network interfaces? I have seen this on some low-powered systems. If so one approach is to compile a kernel with device polling enabled. Once that's running you can tune it or turn it on/off on a per-device basis.

watchdogd depends on what hardware you have, what version of FreeNAS(FreeBSD) you're using, kernel options, which you didn't list. I've never used it myself, but a quick googling brings up this.

Heh, this was in my reddit feed just above your post: https://www.ventoy.net/en/index.html, maybe that solves the problem?

I only see a linux version, but you could install ventoy itself from a VM, according to the website it supports FreeBSD image files as "guests"

Etcher - https://www.balena.io/etcher

Helps to write a bootable image to a USB stick. You can better handle boot params et al if you known the checksum of the downloaded image is correct and the image is properly written to USB device.

You could also try using Rufus to create the bootable USB stick.

Rufus has the option of choosing MBR or GPT (for use with BIOS or UEIF machines), which might be part of the issue. It works for me, whether I'm creating a bootable FreeBSD USB stick or flashing FreeBSD to an SD card for use with an RPI.

This is a blast from the past for me. Airsonic has docs on how to install it on FreeNAS and FreeBSD here which are based on what I wrote for Libresonic before it was forked.

Interesting you went the route to make an independent run script etc versus using Tomcat, one less big monolith to install! In my defence I think Tomcat was the standard way to run Libresonic on other platforms too when I wrote the docs.

Question, does the FreeBSD ffmpeg package compile in LAME by default now? One of the biggest annoyances I had back in the day was having to compile ffmpeg from ports to get mp3 encoding support, which is still lingering in the docs.

To be fair, BOINC does run natively. Problem is most projects don't publish binaries for freeBSD, so it uses the emulation layer to run the project executables.

There are a few projects which have freeBSD binaries (https://boinc.berkeley.edu/projects.php), but really performance is just as good with emulated Linux binaries. The only problem is it's currently limited to 32bit, as many projects crash with the 64bit versions.

Sorry, didn't notice the pm.

RPI and Beagle images are both on the first site.

ftp://ftp.freebsd.org/pub/FreeBSD/snapshots/arm/armv6/ISO-IMAGES/10.0/

http://www.raspberrypi.org/archives/3094

I noticed bhyve.org now redirects to their handbook page rather then to the archived site

This also seemed to happen after the whole CoC Fiasco --- After a few mainters/devs leaving I was assuming that it was thrown under the bus.

Prefer bhyve.org going to their home page rather then handbook.

Hey dude.. Just a friendly nudge :)

Also curious about your wifi speeds. I'm reading that a lot of fbsd drivers don't support the full hw options. For instance, people are saying they're getting 3mb/s on fbsd versus 30mb/s on Linux. You have any input there?

I just tested Fast.com on my x1 running Ubuntu and it was 79mb (about what my connection speed is throttled at). I wonder if I'll take a major hit.

The CanvasBlocker Firefox Addon is Open Source: https://github.com/kkapsner/CanvasBlocker and it has 16 contributors, any one of which would have already complained about its spyware code if it had any by now.

It has a lot of settings, so it isn’t totally lacking.

And it never broke on me, only for you just now.

So yeah, it fits your criteria for an user agent spoofer.

(Downside is, it only works for Firefox, not for other programs, so you can’t user agent spoof your whole system using just this.)

Instead of bringing down Apache, have you considered using the 'webroot method'?

• https://certbot.eff.org/docs/using.html#webroot

At $WORK I'm using acmetool under Debian, but the principle is the same. The package has the following Apache config snippet:

Alias "/.well-known/acme-challenge/" "/var/run/acme/acme-challenge/" <Directory "/var/run/acme/acme-challenge"> AllowOverride None Options None Require all granted </Directory>

This was Apache can keep running without interruption.

Webroot is automated, but there is a manual mode which involves DNS TXT records to assert your control of the domain. The table on this page has a nice summary:

https://certbot.eff.org/docs/using.html#getting-certificates-and-choosing-plugins

> you can match outgoing based on uid

Interesting, does that mean one could build rules roughly like app-based firewall, like Little Snitch?

Just as an update, that did actually work. I'm not sure why it worked when the mono6.8 package didn't, but I'll take it.

The important point is in a comment near the end, though that user made a mistake it seems. I also got the same architecture error when trying to add the package:

Installing mono-6.8.0.105... [jackett.local] pkg: wrong architecture: FreeBSD:11:amd64 instead of FreeBSD:12:amd64 Failed to install the following 1 package(s): mono-6.8.0.105.txz

They then added the following attempt to work around that error:

env ABI=FreeBSD:11:amd64 pkg add mono-6.4.0.198.txz

But they then used a different version of mono than the initial one. I'm not sure if that's the cause of their particular error, but when I ran the same command using the mono-6.8.0.105.txz package, it worked for me without any issues and I was able to get Jackett up and running.

Thanks!

To get the services to run that depend on mono I had to install a precompiled version of mono-6.8.0.105.txz. I think I found it from this thread https://github.com/Jackett/Jackett/issues/4986 Hope that helps

I'd use something like https://clonezilla.org/ - less screwing around.

Outside of that you can look at https://forums.freebsd.org/threads/cloning-or-duplicating-a-running-system-using-dump-restore.11680/#post-339439

Are you wanting to take your current disk and the new disk to make a RAID level 1?

FYI Pelles C is a great, bloat free C11/C99 optimized compiler for Windows supporting x86, x64, OpenMP. It comes with complete toolchain, latest SDK headers plus a full blown IDE.

Love FreeBSD though... :)

Installing is as simple as running a few commands in the terminal. I'm not sure how making an official port would help the situation but I might consider it after I manage to get enigma working without needing to delete FreeBSD's make executable / replacing it with gmake. That would ruin a lot of people's systems if the rely on the original make executable that gmake is not acceptable for, so backing it up is advised. https://enigma-dev.org/docs/Wiki/Install:FreeBSD

You should be able to reverse proxy the inbound connections without terminating the SSL, in which case you only need the cert on the end server. This makes it look like it should be possible in nginx.

email: host it yourself, or use 1 of a bajillion email hosting solutions out there, fastmail, migadu, kolabnow, etc

Some of them also host contacts, calendars, etc.

Photos and files, something like nextcloud or freenas.

personally:

contacts/calendar: https://radicale.org/ (on OpenBSD) email: https://www.migadu.com/en/index.html photos: local files on ZFS, no special app, no cloud. files: local files on ZFS, no special app, no cloud.

https://www.amazon.com/Implementation-Freebsd-Operating-IMPLEMENTATION-Hardcover/dp/B00QPRHNDY/ref=sr\_1\_4?crid=2J6BGF3MM73RK&amp;dchild=1&amp;keywords=design+and+implementation+of+the+freebsd+operating+system&amp;qid=1630720004&amp;sprefix=desig...

According to it seems like this error is thrown when connecting to a server near is limit. They suggest trying to use the paid plans.

Also make sure that IPv6 is enabled in your system, it needs to be enabled, as ProtonVPN redirects this kind of traffic into the tunnel, and without it being enabled it give errors during the setup of the tunnel

As others have mentioned, man pages, the Handbook and also the FreeBSD FAQ are good starting points. I'd also recommend Absolute FreeBSD: https://www.amazon.com/Absolute-FreeBSD-3rd-Complete-Guide/dp/1593278926

As an experienced Linux user many things will seem familiar, so I guess you could read that book only topically

Not sure there will be drivers for these:

• Intel Dual Band Wireless-AC 9560and
• Intel Dual Band Wi-Fi 6 AX201vPro
• Realtek 802.11ac

If that would be the case you may use surely working (I got it) small USB chip like this one:

https://www.amazon.com/Plugable-Wireless-802-11n-Network-RTL8188EUS/dp/B00H28H8DU

What I am doing right now is reading this book alongside with the source code of 11.4.

On and off I build the kernel and try to understand it’s output and the overall make infrastructure.

Absolute FreeBSD

The FreeBSD Handbook

Oh, I bought awk &amp; sed and it was a good starter. Obviously the man page is a great resource.

sed (streaming ed) is based on ed. Michael W Lucas has written a book on ed that I can recommend. https://www.amazon.com/Ed-Mastery-Standard-Unix-Editor-ebook/dp/B07BVBSDNZ?SubscriptionId=AKIAILSHYYTFIVPWUY6Q

&#x200B;

This is the one I use. It's an Edimax dongle ($10).

You're out of luck as far as newer wireless devices go however, incl. ones with antennas. I tried a bunch of them with no success.

Looking online I found the following:

• OS X 10.7 (Lion): OpenSSH_5.6p1
• OS X 10.8 (Mountain Lion): OpenSSH_5.9p1
• OS X 10.9 (Mavericks): OpenSSH_6.2p2
• OS X 10.10 (Yosemite): OpenSSH_6.2p2
• OX X 10.11 (El Capitan): OpenSSH_6.9p1

And I remember now that I didn't upgrade their OS I only installed some security updates. Those security updates must have included some patches for that ancient version of ssh and either they compiled the modified version with support for only those host keys listed, or they replaced the ssh_config file with one that only had those in it. So that explains why. Not that it matters to anyone else but I still like to provide a proper conclusion to things.

While I'm at it I can also say, even though it is of interest to no-one, that I was actually going to upgrade their macOS version to the latest one but that before doing so I was going to install an SSD in place of the HDD they have since I was going to do that as well so I decided there was no point in upgrading macOS before that. Unfortunately however I could not find the mounting brackets that was needed to fit an SSD in their Mac Pro tower. And I still haven't. I asked at multiple places and none of them, not even the Mac store, had such brackets. ~~So I guess I'm going to have to get an adapter like the one shown in this video instead maybe https://www.youtube.com/watch?v=HvGlYIjbB9c, because while I might be able to find the brackets online I am not convinced that they will be for the right model (and I didn't make note of the cabinet version, rookie mistake) and don't want to order one that doesn't fit online.~~

Edit: Actually https://www.amazon.co.uk/OWC-2-5-Inch-Drive-Mount-Apple/dp/B009P4NEKA/ looks fine.

Edit 2: And of course none of the sellers deliver to my country... but there is hope that I might find one that does for something similar to that I guess.