OpenBSD

FOSDEM 2020 videos.

Video recordings from FOSDEM 2020 are now available. The OpenBSD presentations were:

• Giovanni Bechis (giovanni@) - OpenSMTPD over the clouds, the story of an HA setup.
• Florian Obser (florian@) - unwind(8), A privilege-separated, validating DNS recursive nameserver for every laptop.

https://undeadly.org/cgi?action=article;sid=20200211080946

#fosdem #video

syspatch module is available in Ansible 2.9+.

https://docs.ansible.com/ansible/latest/modules/syspatch_module.html

#ansible #syspatch

Sandbox X11 applications on OpenBSD.

https://github.com/morgant/Xsunaba

#x11 #desktop

Docker on OpenBSD 6.1.

All thanks to VMM/VMD, Alpine Linux, and the latest OpenBSD improvements

https://medium.com/@dave_voutila/docker-on-openbsd-6-1-current-c620513b8110

#docker #vmm #vmd

Monitoring OpenBSD using CollectD, InfluxDB and Grafana.

In a “get pretty graphs” mood, I’m looking at what can be done regarding OpenBSD monitoring using the CollectD collector and Grafana dashboard renderer. OpenBSD 6.2-current provides InfluxDB and Grafana packages. A great stack for pretty reportings.

https://www.tumfatig.net/20180220/monitoring-openbsd-using-collectd-influxdb-grafana/

#collectd #influxdb #grafana

OpenBSD on the Huawei MateBook X.

https://jcs.org/2017/07/14/matebook

#desktop #hardware

LPE and RCE in OpenSMTPD (CVE-2020-7247).

We discovered a vulnerability in OpenSMTPD, OpenBSD's mail server. This vulnerability is exploitable since May 2018 (commit a8e222352f, "switch smtpd to new grammar") and allows an attacker to execute arbitrary shell commands, as root.

https://www.openwall.com/lists/oss-security/2020/01/28/3

#opensmtpd #mail

OpenBSD supremacy, Laslo Hunhold.

A look at recent developments in OpenBSD and a discussion about how to include these advances in suckless tools.

https://suckless.org/conferences/2019/

#dev #video

#art (c)

OpenBSD: High-Availability Firewalling.

https://stuarthowlette.me.uk/posts/openbsd-firewall-ha/

#firewall #pf #carp

cloud-agent for OpenBSD.

This is a simple OpenBSD-specific agent that aims to handle provisioning and cloud initialization on public clouds such as Microsoft Azure and Amazon AWS. For OpenBSD on Azure, it is a minimal alternative to the WALinuxAgent.

https://github.com/reyk/cloud-agent

#cloud #github

WP2Static and OpenBSD.

Want to setup a WP2Static-friendly, minimal webserver vs using an off the shelf image? We detail the steps for setting up an optimized environment in OpenBSD, our preferred, secure by default, lightweight and easy to maintain operating system.

https://wp2static.com/developers/webserver-setup/

#wordpress #wp2static

Automating OpenBSD Installs.

https://xenotrope.blogspot.com/2018/04/ansible-week-bonus-automating-openbsd.html

#autoinstall

Creating Onion Services on OpenBSD.

https://cloudyday.tech.blog/2020/01/05/creating-onion-services-on-openbsd/

#tor

Suggestion: Replace Perl with Lua in the OpenBSD Base System.

Hmmm... 🤔 http://openbsd-archive.7691.n7.nabble.com/Suggestion-Replace-Perl-with-Lua-in-the-OpenBSD-Base-System-tt380393.html

#system #misc

Is OpenBSD secure? https://isopenbsdsecu.re/

This Metasploit module exploits a vulnerability in the OpenBSD ld.so dynamic loader (CVE-2019-19726). The _dl_getenv() function fails to reset the LD_LIBRARY_PATH environment variable when set with approximately ARG_MAX colons. This can be abused to load libutil.so from an untrusted path, using LD_LIBRARY_PATH in combination with the chpass set-uid executable, resulting in privileged code execution. This module has been tested successfully on OpenBSD 6.1 (amd64) and OpenBSD 6.6 (amd64).

https://packetstormsecurity.com/files/155764

#security