OpenBSD

Feedback from and for subscribers. 🤓

> I'd like to share that for almost 3 years I've been running Telegram channels with CVS commit messages: https://t.me/OpenBSD_CVS (along with
@OpenBSD_src, @OpenBSD_ports, @OpenBSD_xenocara and @OpenBSD_www).

> Commit messages are received directly from source-changes@ and ports-changes@, parsed and immediately sent to the Telegram API.

#feedback #community #cvs

EuroBSDCon 2022 art. (c) #art

Wireguard all the things.

The good thing about wireguard besides its security is that it keeps things very simple plus OpenBSD simplicity makes the whole environment easy to setup even with crossing platform, such us iOS, Android, Windows, Linux and so on. For this setup you need only "libqrencode" and "wireguard-tools" to create qr codes to import the vpn configuration on your devices, so for this we do...

https://x61.sh/log/2022/01/20220104T122904-wireguard.html

#network #vpn #wireguard

Excision Mail.

Fullstack, security focused mailserver based on OpenSMTPD for OpenBSD.

https://excision.bsd.ac/

#opensmtpd #mail

Mail Server Hosting on OpenBSD.

Mail server is an everyday requirement for everyone. Why trust and rely on 3rd party mail servers? There are many reasons to host your mail server today, in just one sitting! The following section mentions the significant benefits of hosting a mail server...

https://serhanekici.com/005-mailserver-openbsd.html

#opensmtpd #mail

Blockor.

Protect BSD Unix computer servers from brute-force attacks. It works on top of the OpenBSD Packet Filter(PF) firewall.

https://github.com/muktadiur/blockor

#security #firewall #pf

GoT all the things.

I was basically using cvs for a long time for OpenBSD and some Github for open source projects, until this thread on ports made me decide to just move all my repos to GoT, which I had the privilege to see an early version long time ago in a hackthon...

https://x61.sh/log/2022/01/20220127T190458-got.html

#got #git #feedback

OpenBSD on the PinePhone

Installing OpenBSD on the Pinephone might seem straightforward, as the hardware is essentially just an arm-based SBC with a built in screen and modem. The Allwinner A64 SoC is supported by the OpenBSD kernel, so we can at least expect it to boot. However, no specific support for the Pinephone hardware is included in the most recent OpenBSD release, making it unlikely that we'll get much beyond output via the serial terminal. Furthermore, unlike many SBCs, the Pinephone doesn't have an on-board ethernet connection. This will make the installation slightly more complicated, as we can't install the base packages from a local network server. Nevertheless, if OpenBSD is ever going to run in a usable fashion on the Pinephone we need to start somewhere...

https://www.exoticsilicon.com/crystal/pinephone_openbsd

#system #install #pinephone

Using KeePassXC with SSH-Agent on OpenBSD

I’m using KeePassXC to manage my secrets. But when I log into my OpenBSD laptop, I’m still asked to enter my SSH passphrase to fill-in ssh-agent(1). Somehow, it’s great ; maybe other system don’t even propose that feature out of the box. But what if KeePassXC could know about my passphrase(s) and interact with ssh-agent(1). Well, it can...

https://www.tumfatig.net/2022/using-keepassxc-with-ssh-agent-on-openbsd/

#keepassxc #ssh

sysclean.

sysclean is a perl(1) script designed to help remove obsolete files between OpenBSD upgrades. Sysclean compares a reference root directory against the currently installed files, taking files from both the base system and packages into account. Sysclean does not remove any files on the system. It only reports obsolete filenames or packages using out-of-date libraries.

https://github.com/semarie/sysclean

#system #update

TLS Acceleration with relayd.

relayd can provide secure TLS acceleration...

https://wiki.ircnow.org/index.php?n=Relayd.Acceleration

#relayd #tls #ssl

OpenSMTPD on the Local Network.

One of the many great things about OpenBSD is that it comes with OpenSMTPD by default, allowing my servers to communicate with themselves and each other via the SMTP protocol. This is used to send insecurity reports, failed cron jobs, et cetera to various users on the system. However, I don’t want to have to check each machine’s mail spool to see if there are any messages I need to act upon. I’d much rather have a central mail server to collect all these messages so that I have a single place to check...

https://josephchoe.com/2021/12/24/opensmtpd

#opensmtpd #mail

OpenBSD Webzine #6.

https://webzine.puffy.cafe/issue-6.html

#news #webzine

OpenBSD BASED Challenge - Day 1, Day 2, Day 3...

#system

Episode 435. Year End Interview.

In this last episode of 2021, we interview Solene from OpenBSD. She’s blogging about her experiences with OpenBSD on dataswamp.org, the webzine she created, how she got involved and other topics. Enjoy and best wishes for 2022!

https://www.bsdnow.tv/435

#podcast

🎄 Happy New Year!

https://linkmeup.ru/podcasts/1990/ - Russian podcast, today about OpenBSD.

#system #video

Introduction to OpenBSD sound system.

#sound #desktop

Instructions and files to set up a functional OpenBSD server.

A collection of scripts to ease bootstrapping of a new OpenBSD server. Includes nginx with SSL, mail with DKIM, WireGuard and IKEv2 VPN setup. Stack:

- Shell: zsh, oh-my-zsh, tmux
- SSH
- Web server – nginx with automatic http to https redirect and A+ SSL
- Mail server – OpenSMTPD, Dovecot, Rspamd, Redis, RainLoop (+PHP, optional)
- Brute force protection: PF
- VPN: OpenIKED, WireGuard, Unbound, PF

https://github.com/d32f123/openbsd-server-setup

#server