OpenBSD

Protect the ESXi virtual machines with OpenBSD

I own a server at Online.net which now runs VMware ESXi free edition. The thing is VMs have to access the Wild Wild Web and provide public services while still being protected. So let’s configure OpenBSD to do so.

https://www.tumfatig.net/20191031/protect-the-esxi-virtual-machines-with-openbsd/

#security

The OpenBSD Hypervisor in the wild, a short story.

OpenBSD Amsterdam started in the summer of 2018 after a poll on Twitter as an idea to start testing with vmm(4)/vmd(8). Mostly to see how far we could take it and more importantly to give back to the project. Little did we know where it would take us.

During this talk I will outline how it all started, how it’s build, how we operate the platform and what speedbumps we encountered.

https://www.youtube.com/watch?v=9TuWCR9X-wY

#video #vmd

Blocking Ads using unbound(8) on OpenBSD.

Here’s how to add an extra layer of privacy using OpenBSD and its unbound(8) DNS resolver.

https://www.tumfatig.net/20190405/blocking-ads-using-unbound8-on-openbsd/

#unbound

Humble Book Bundle: Linux & BSD Bookshelf by No Starch Press.

https://www.humblebundle.com/books/linux-bsd-bookshelf-2019-books

#book

CVE-2019-8460.

Reuven Plevinsky and Tal Vainshtein of Check Point Software Technologies Ltd. discovered that OpenBSD kernel (all versions, including 6.5) can be forced to create long chains of TCP SACK holes that cause very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8460

#security #cve

10 projects to start contributing to OpenBSD.

You're already reading tech@ and source-changes@ and still don't know where to invest your energy? You have been applying diff from developers since some times and would like to try something new? Or maybe you're looking for a subject for this semester's project?

http://www.grenadille.net/post/2019/10/21/10-projects-to-start-contributing-to-OpenBSD

#contribute #develop

OpenBSD and you.

How to have fun with the world’s most important free software project: https://home.nuug.no/~peter/openbsd_and_you/#1

Setup environment in OpenBSD using Ansible playbook (2018).

This repository contains an Ansible playbook and set of roles for configuring an OpenBSD installation on a ThinkPad X1 Carbon laptop: https://github.com/ligurio/openbsd-cookbooks

#ansible

btw, communities added to channel description:

@openbsd_en
@openbsd_ru

#community

Channel photo updated

OpenBSD 6.6 release page. https://www.openbsd.org/66.html

Debian on OpenBSD vmd (without qemu or another debian system).

http://www.netzbasis.de/openbsd/vmd-debian/index.html

#vmd

Running Arch Linux using OpenBSD vmd(8).

https://www.tumfatig.net/20190705/running-arch-linux-using-openbsd-vmd8/

#vmd

OpenBSD : Virtualisation de Debian Buster.

🇫🇷https://blog.stephane-huc.net/systeme/openbsd/vm-debian-buster

#vmd

Philipp Buehler: Vagrant for OpenBSD make installations by the busloads easy. BSDCan 2018.

https://www.youtube.com/watch?v=qaJPZzxrUtI

#video #vargant #bsdcan

Signal on OpenBSD.

Run signal-cli app on your OpenBSD installation. https://h3artbl33d.nl/communication/2019/05/20/signal-openbsd/

#signal

Everyone thinks the best way to help with OpenBSD ports, is to find something you use that hasn't been ported and create a port of it. This talk will discuss this and other misconceptions, how best to actually help OpenBSD porters with their work, and tips for how to get one's work noticed on the OpenBSD ports lists. The talk will contain examples of good submissions and counterexamples likely to get ignored (these will be made up, I will not be singling out people).

https://www.youtube.com/watch?v=eyK_LloYZu4

#ports #video

Sometime in the last week OpenBSD crossed 400,000 commits (*) upon all our repositories since starting at 1995/10/18 08:37:01 Canada/Mountain. That's a lot of commits by a lot of amazing people.

https://marc.info/?l=openbsd-tech&m=157059352620659&w=2

PHP Signify.

Native, verification-only PHP implementation of OpenBSD Signify verification. https://github.com/drupal/php-signify

#php #drupal

OpenBSD mailing lists with OpenSMTPD.

This post is about how to make maling lists in OpenBSD (whose current version is 6.5). With OpenSMTPD (and Dovecot, optionally), this method is perhaps the simplest...

https://dev.to/nabbisen/openbsd-mailing-lists-with-opensmtpd-163j

#opensmtpd