Every potential audio release of a Jupiter Broadcasting production will get published here. Each show also has their own feed.
The podcast All Jupiter Broadcasting Shows is created by Jupiter Broadcasting. The podcast and the artwork on this page are embedded on this page using the public podcast feed (RSS).
It's the fifth annual Unplugged Tuxies; our community votes on the best projects, distros, and desktops of 2024. Join us for the final Tuxies, and the second annual Boosties!
Sponsored By:
Links:
We’re taking a victory lap down memory lane. From spooky-accurate predictions to "did we really say that?" moments, this one’s for the history books.
Sponsored By:
Links:
Plus the trouble with Co-Pilot, and a lot more.
A special guest joins us for the news, then we dive headfirst into our RT Linux kernel adventures—where speed seduced, but stability ghosted us.
Sponsored By:
Links:
Brent joins to share part two of his NAS build adventure, and things take a tiny turn. Plus, picking the right encrypted chat app and Chris stacks a few Jellyfin wins.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Sam's Checkmate: How Open Source AI and Silicon Valley Kingmakers dethroned the OpenAI emperor! Plus, Tesla's API Apocalypse has arrived.
Links:
USB thumb drives are old and busted. No hard drive? No problem. Need a quick system rescue or work in another distro for the day? Easy.
Sponsored By:
Links:
GitHub has done the research, brought the receipts, and knows just what to do to get more developers into the flow state. Is it legit or hype? We’ll dig in. Plus, making the case that Rails is better low code than low code, and we help someone go from Pizza to Rust.
Sponsored By:
Links:
Stack 30% off ontop of one-month free!
The KDE and GNOME projects are working on official Linux distributions, but do we need more distros? We dig into their special sauce.
Plus: Wes' top DNS server pick, and it's not one we've heard before.
Sponsored By:
Links:
We geek out over Brian Moses's 2025 DIY NAS build guide, contemplate future builds with the new Raspberry Pi Compute 5 module, and fully embrace our digital hoarding nature with a new app.
Special Guest: Brian Moses.
Sponsored By:
Links:
A survey found that nearly 10% of developers are ghosts doing nothing - our thoughts on that, AI Big Brother as a service comes to the workplace, OpenAI's NYT standoff, and Google's growing problem.
Sponsored By:
Links:
Two years ago, we took a small step toward digital privacy. Today, we're rethinking everything about our online lives, and we'll give you the tools to do the same.
Sponsored By:
Links:
We react to Microsoft's new vision for the desktop PC, discuss the realities of working with large dependency chains in your projects, and discuss Google selling off Chrome. Then, we read some spicy tech CEO emails!
Sponsored By:
Links:
The Linux 6.12 kernel isn't just another update — it's a game-changer that deserves our full attention, from performance improvements to fascinating new features.
Sponsored By:
Links:
Breaking free from Google's grip: Our surprising journey and the tools that made it possible. Plus, Brent's NAS feature stirring up debate, s clever tool for distributed video encoding, and more.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Python's eating the world - and AI's helping it digest. A cheeky look at why this programming language is suddenly everywhere and the bizarre tale of how AI infiltrated the last place you'd expect.
Sponsored By:
Links:
We go back in time to revisit our favorite classic SUSE release and then fix Brent's broken box the hard way.
Sponsored By:
Links:
Malicious NPM packages are sneaking into codebases while FFmpeg devs prove old-school assembly skills can still smoke the competition. Plus, a rare bee species takes on Zuck's AI dreams.
Sponsored By:
Links:
Fedora 41 is here! We break down the best new features, then branch out for a three-way spin showdown. Which flavor will come out on top?
Sponsored By:
Links:
From Nextcloud Breakup to Blissful Reunion: Chris's journey back to a smarter setup. Plus, Jellyfin's game-changing features and a beloved self-hosted app get the upgrade we've all been waiting for.
Sponsored By:
Links:
Mike reports in from the COSMIC frontier! Plus: Microsoft's juicy Google drama, GPU eye candy that'll make your wallet nervous, and the tea on why OpenAI's AGI Czar went full scorched-earth on his exit.
Sponsored By:
Links:
We're hot-swapping our rigs to Fedora 41; then Graham Christensen gives us the inside scoop on a new Nix distribution, and Determinate Systems' big week!
Sponsored By:
Links:
Wes got Mom a new Linux laptop, and he lets her pick the distro. Plus, we take a look at the new Ubuntu 24.10, and why we think this release might be a good sign for the future.
Sponsored By:
Links:
"The" self-hosted app to archive your favorite YouTube channels and easily integrate into Jellyfin/Plex. Plus, our favorite WordPress alternatives and an update on No Google October.
Sponsored By:
Links:
We get frustrated with Nintendo. Then, dig into the 30-year-old backdoor that was recently exploited and the hard lesson we should learn from it. Then, we'll break down some "hot tips" that promise to make you the next DevRel star.
Sponsored By:
Links:
After building nodes, climbing roofs, swapping antennas, and even some war driving, it's time for our Meshtastic deep dive!
Sponsored By:
Links:
Our reaction to Google's major legal blow, forcing them to open the Play Store wide, our thoughts on the world's lovefest with AI-generated podcasts, and the next tool Microsoft is porting over from Linux.
Sponsored By:
Links:
Wes gives his shell superpowers to solve a tricky problem. Then, we share an update on our favorite Google Photos alternative, including breaking changes and a great new way to run it.
Sponsored By:
Links:
Ditching Google Search for an entire month! We reveal the tool that's helping us break free. Plus, a special guest shares his home lab to data center journey. And, Chris raves about the ultimate Jellyfin client (and confesses to an accidental network camera purchase).
Sponsored By:
Links:
Our thoughts on big tech firing up old nuclear reactors to satisfy the AI growth plans, Sam's big week, and debate if Meta just had their iPhone moment.
Sponsored By:
Links:
We explain the one-packet attack on CUPS and discuss its real-world implications. Plus, a Meshtastic update and more.
Sponsored By:
Links:
A quick update from Chris on where the show is at this week, and what to watch out for next week!
Sponsored By:
Links:
What if we had to abandon ship and stop using Desktop Linux? We've come up with a master plan, and put it to the test.
Sponsored By:
Links:
Alex has been playing around at the speed of light while solving Proxmox problems, and Chris has solved a Jellyfin issue. Plus, our thoughts on the new Plex features.
Sponsored By:
Links:
The insidious undercurrents threatening to crush open-source AI projects, plus our thoughts on Microsoft's "big changes" to Windows post-CrowdStrike.
Sponsored By:
Links:
The things we like in the new Nextcloud release, and we attempt to upgrade our production server live—from a big blue bus.
Sponsored By:
Links:
Our thoughts on the iPhone 16, and then Mike surfs the WSL wave.
Sponsored By:
Links:
Rumors indicate that the image generation functionality, like Genmoji and Image Playgrounds, will roll out in December.
Secret moments from the show you've never heard before. We kick off with some hardware hurdles, then dive into the news and share a few surprising stories.
Sponsored By:
Links:
We celebrate five years of the show, chat about self-hosted Lightning, and why Alex loves his NanoKVM. Plus, it is a self-hosted replacement for Amazon Wishlists and more.
Sponsored By:
Links:
How Mike plans to win the Clone Wars with Dokku, we review some shocking developer data and say goodbye to another project DMCA'd by Apple.
Sponsored By:
Links:
Rust meets Linux in a clash of coding cultures. Why some developers are resisting, and where things go from here.
Sponsored By:
Links:
We reflect on the rise of DevOps and the frustrating dynamics that led to it. Plus, tech's latest bright idea: Roombas with attitude.
Sponsored By:
Links:
Sixty vulnerabilities and exposures disclosed in one week sounds like a lot. We'll explain why it's just business as usual.
Sponsored By:
Links:
Prusa's Mk4S 3D printer seems to have hit the mark. Alex gets a tour of an awesome new maker space, we take a look at AdventureLog, and much more.
Special Guest: Josh.
Sponsored By:
Links:
6PM EST (meetup is in PDT).
Open Source Security Engineering & Modification Group
The walled garden wrecking ball is fueling up - where we think it strikes first. Plus, what was really behind the recent GitHub outage.
Sponsored By:
Links:
We reveal how we turned our humble LAN into a public server farm, all while keeping our IP address under wraps and our ISP blissfully unaware.
Sponsored By:
Links:
Apple goes into full crackdown mode and begins to squeeze even more out of developers and creators. Plus, why tiny models are suddenly the rage.
Sponsored By:
Links:
Brent's computer pulls an all-nighter at the worst possible moment, and the hits keep coming for open-source Android distributions and our new 2FA tool.
Sponsored By:
Links:
The battle for code forges is heating up. We chat about HexOS' big promises and get excited about Meshtastic.
Sponsored By:
Links:
We take a look at SeaweedFS, roast Apple Intelligence, and reveal the vendor that caught Intel's mess before it shipped.
Sponsored By:
Links:
The COSMIC desktop is just around the corner. We get the inside scoop from System76 and go hands-on with an early press build.
Sponsored By:
Links:
Why is Google feeling lucky, and the Intel situation slips into pure lunacy. Plus, thoughts on the C# Type Union proposal.
Sponsored By:
Links:
Think Silverblue, but with cloud-native tooling used to build it. From Aurora to Bazzite, our impressions of the ambitious Universal Blue project.
Sponsored By:
Links:
ESPHome dev dishes on device updates, Immich license drama heats up, Alex's DIY server fix, and Chris reports on mobile tech trip test.
Special Guest: Keith Burzinski.
Sponsored By:
Links:
Our thoughts on the CrowdStrike outage and why Intel is in the hot seat with developers.
Sponsored By:
Links:
I believe that AI will develop in a similar way.
Wes' self-decrypting bcachefs disk and a GrapheneOS twist that'll make you ditch your iPhone.
Sponsored By:
Links:
Are small business owners just the worst? The rant that hits close to home. And how AI is looking more like a unicorn, not a horse, but big tech keeps trying to put a saddle on it.
Sponsored By:
Links:
Sponsored By:
Links:
Texas LinuxFest day two live from the floor. It's a busy one, and we have some great guests sit down and chat. Then we send out Brent to walk the show expo hall.
Links:
Live from the floor of Texas LinuxFest. We capture the structured chaos 1 from Austin Texas.
Links:
Our Nostr workshop. We’ll help you get your Nostr identity and answer any questions.
Plus, where we see this protocol going and features coming.
We're finding new use cases for it every week. It's based on simple and flexible event objects (passed around as plain JSON).
A public key identifies every user. Every post is signed. Every client validates these signatures.
And, of course - it's open source.
One of the more compelling usecases emerging is decentralized realtime chat.
Because everything is passed around as plain JSON, the ability to build cross-app and platform apps is built in.
Create one identity and use it across all the apps and sites. Taking your identity with you is as simple as bringing your key.
Fountain.fm is building a new live experience, with an embeddable webchat built around Nostr. The chat can be pulled into any app or website. And it will be easy to build tooling around.
Links:
Chris gets serious about tracking maintenance and alerts, why Alex is impressed by the RISC-V-powered NanoKVM, how we might end up using Docmost, and a follow-up review of LubeLogger.
Sponsored By:
Links:
Apple finally stands down in its battle with Epic, and Google gets caught with its hand in the full access to everything jar.
Sponsored By:
Links:
We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.
Sponsored By:
Links:
Why you shouldn't use AI to write your tests, and the crazy deals new AI companies are getting themselves into to access hardware.
Sponsored By:
Links:
Why we think Plasma 6.1 is the desktop for people who like to mess with computers.
Sponsored By:
Links:
Chris reviews the Aqara G4 Video Doorbell, Brent frees his Garmin from the cloud, and we discuss getting iMessages on Android.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Big Tech vs. Big Brother, how Ashley Madison predicted the rise of AI bots and the messy world of "open source" AI.
Sponsored By:
Links:
Online identity is a ticking time bomb. Are trustworthy, open-source solutions ready to disarm it? Or will we be stuck with lackluster, proprietary systems?
Sponsored By:
Links:
A couple of our long-standing forecasts are coming true. We unpack the recent developments. Plus, our thoughts on OpenAI going commercial and more.
Sponsored By:
Links:
Your Linux box is a-changin'. systemd has a huge new release; we'll get into the most impressive features, including the new sudo replacement. Plus, our thoughts on the new Linux Arm laptops that are just around the corner.
Sponsored By:
Links:
Alex's mini-PC surprise, why we're trying Tube Archivist, Alex's Nextcloud update, and how Chris stacks automations with Bitfocus Companion.
Sponsored By:
Links:
Our thoughts and reactions to Apple's WWDC '24, and more importantly what was missed.
Sponsored By:
Links:
We try Omakub, a new opinionated Ubuntu desktop for power users and macOS expats.
Sponsored By:
Links:
The story of how Mike got in a fight with a supercomputer and, like Captain Kirk, came out on top.
Sponsored By:
Links:
The facepalm moments that make us question our sanity—and swear off sudo for a week.
Sponsored By:
Links:
The "you'll own nothing" trend got worse this week, our thoughts about the Raspberry Pi IPO, poor Nextcloud performance, and Alex's new high-fiber obsession.
Sponsored By:
Links:
OpenAI has a new security team led by Sam Altman, and the Biden Administration has a new AI security board led by Sam Altman. We also discuss C# 13 and .Net 9, popping bubbles, and more.
Sponsored By:
Links:
And the $1.2 billion iShares ESG MSCI USA Leaders ETF (SUSL) has suffered $2.3 billion worth of outflows.
We're following one simple rule to build a Linux desktop so stable it could outlive us.
Sponsored By:
Links:
Big Tech's latest AI flex? More like a desperate grab for attention. Google, OpenAI, and Microsoft are hyping up underwhelming updates while Sam Altman spills the tea on their shady motives.
Sponsored By:
Links:
After months of debate, the Nix community might be coming to a resolution. We'll examine what happened, what's changing.
Sponsored By:
Links:
Alex benchmarks Intel CPUs (and an Arc GPU) to find the ideal balance of age, power, and speed for your home media server. Plus, our thoughts on Immich going full-time.
Sponsored By:
Links:
OpenAI has pulled a fast one, and everyone is eating it up.
Sponsored By:
Links:
Three revelations from Red Hat Summit. Our on-the-ground report will separate fact from hype.
Sponsored By:
Links:
Altman's on a spending spree for AGI – why the huge price tag? Mike's back from NYC with juicy API gossip, and we break down the incentives pumping up a giant AI bubble.
Sponsored By:
Links:
A few of our go-to tools for one-liner web servers, sharing media directly from folders, and a much needed live Arch server update, and more!
Sponsored By:
Links:
How Chris created live TV streaming from his local media collection, Alex breaks down the new Open Home Foundation and what it means for self-hosters. Brent's been trying out an open-source AirDrop replacement for all systems, and much more!
Special Guest: Brent Gervais.
Sponsored By:
Links:
How one clever developer has launched his own Appstore on iOS, our thoughts on how this was pulled off, and making a transition into development work late in life.
Sponsored By:
Links:
The first LinuxFest is back and better than ever. We share stories and friends from one of the best Linux gatherings of the year: LinuxFest Northwest.
Sponsored By:
Links:
Llama 3 and Phi-3-mini are up and running on phones, Raspberry Pis, and we give them a go. Plus Google kills the vibe, and Meta opens up Horizon OS.
Sponsored By:
Links:
We're back from Austin, with interviews and stories to share. Plus, it's Gentoo week and we take our first look at Fedora 40.
Sponsored By:
Links:
Special guest Casey Liss from the Accidental Tech Podcast joins the show to discuss his homelab, how he uses HomeBridge, and his delightfully complex garage door sensor system.
Then Alex and Casey do their "best" to convince Chris the Apple Vision Pro is an excellent remote admin tool.
Special Guest: Casey Liss.
Sponsored By:
Links:
We delve into the top 3 open-source revenue streams, expose the pitfalls, and discuss what could be done quickly to improve the situation.
Sponsored By:
Links:
Why does Meta give away Llma for free? What's in it for them?
Plus, our thoughts on the data showing the trades are starting to see a boom, and new coding jobs are declining.
Sponsored By:
Links:
We're building a completely hidden Linux OS inside an existing system—with no trace left behind.
Sponsored By:
Links:
Alex goes head-to-head with budget VPS providers, which gets us into a classic debate.
Plus we sit down with Adam Morales from Unraid to get the inside scoop on recent changes and exciting upcoming features.
Sponsored By:
Links:
Microsoft wins the foot-in-mouth award this week, and Google gets the Rust religion - but Mike is skeptical.
Sponsored By:
Links:
We're breaking down the attack: how it works, how it was hidden, and why time was running out for the attacker.
Sponsored By:
Links:
Mike makes the case for just going vanilla, a look at Google Carbon, and then we address the expensive elephant in the room.
Sponsored By:
Links:
Ø£c«·cÎc©Y^c ØV
We test the Linux-first, all-AMD Sirius 16 laptop, discuss the new Hyprland release, and share a few stories from our recent trip.
Sponsored By:
Links:
The antitrust gloves are off as Apple’s legal brawl with Uncle Sam kicks into high gear. We dig through the documents and are surprised by a few things that seem off.
Sponsored By:
Links:
Alex rolls back a major server upgrade, and we have fun playing with local large language models.
Special Guest: Wes Payne.
Sponsored By:
Links:
We're on the ground live at NixCon and SCaLE. We catch up with old friends, and discover how Nix is devouring the Linux world one function at a time.
Sponsored By:
Links:
NVIDIA locks CUDA down further, and we ponder what it might take to break their stranglehold on the market, Zuck's brilliant move that put an egg on his face, and we take a minute to appreciate new developments with Java.
Sponsored By:
Links:
We each bring surprise topics, a mix of hardware and software, as we prepare to hit the road for NixCon and SCaLE.
Sponsored By:
Links:
Alex's new Epyc server build, and Jon Seager from Canonical joins us to chat about Nix in the homelab, packaging Scrutiny, and how Nix fits with existing infrastructure management tools.
Special Guest: Jon Seager .
Sponsored By:
Links:
Apple is pissed, and we'll dig into why. Plus, there are some big hints at Apple's AI plans; Meta's had a rough morning, and Sergey Brin popped back up at Google and proceeded to blow it immediately.
Sponsored By:
Links:
Plasma 6 is out, and we've been giving it a go. What's new, our thoughts, and the lessons other desktops should learn.
Sponsored By:
Links:
Why we're awe-struck by Google, and NVIDIA's CEO says no one needs to learn how to code anymore.
Sponsored By:
Links:
Corporate AI is a hot mess, but open-source alternatives can be open-ended chaos. We’ll test some of the best ways to get local AI tools under your control.
Sponsored By:
Links:
We chat about VMware's rug pull with Bret, aka Raid Owl, and then get into Unraid's big changes and more.
Special Guest: Raid Owl.
Sponsored By:
Links:
We embrace the dad bod lifestyle and find out if Apple's Vision Pro demo sold Mike, and Chris is picking up on what the Zuck is putting down.
Sponsored By:
Links:
Chris spends the week in a VR desktop, revealing the glitches, gains, and VR's open-source future.
Sponsored By:
Links:
Why we think Nvidia has become one of the most valuable companies in the world, Sam's new "mind boggling" idea, and more.
Sponsored By:
Links:
Because people use them to pretend like they're working.
Deploying Nextcloud the Nix way promises a paradise of reproducibility and simplicity. But is it just a painful trek through configuration hell? We built the dream Nextcloud using Nix and faced reality.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
Alex has been deep-diving into container networking, and Chris is trying to steelman Plex's new rental service.
Plus, why are we building our containers with Tailscale networking now, and the latest from the Home Assistant project?
Sponsored By:
Links:
Chris tries out Spatial Computing using a $3,200 trick, and Mike has a Rails treat you won't want to miss.
Sponsored By:
Links:
Some uncomfortable truths about using Linux, and then we introduce a new segment: Will it Nix?
Sponsored By:
Links:
If you're going to come at the king, you better not miss; now it's Apple's turn to make everyone feel pain.
And our spicy take on why AI saftey is really about stopping a movment.
Sponsored By:
Links:
Data-hoard with purpose and manage your audiobooks and podcasts with one application, plus the lone Linux box that remains on Mars.
Sponsored By:
Links:
Brian Moses joins us and shares his most recent NAS build and love for 3D printers. Then Alex gets into the hardware he's deploying around the house, and why we don't see eye-to-eye on ZigBee.
Special Guest: Brian Moses.
Sponsored By:
Links:
We knew they'd be petulant, but even our expectations were higher than this. We dig into how Apple dunked on devs after last week's show, yet another Microsoft hack, and more.
Sponsored By:
Links:
Trying NixOS can be fraught with complexity, half-completed guides, and boring videos. Even if you never plan to switch to NixOS, we invite you to come along for a hype-free ride that digs into one of the most rapidly developing areas of Linux.
Sponsored By:
Links:
They are building AI into toilets now; CES was a clown show. But we put our business hats on and find the bright side.
Plus, Epic's major loss to Apple that just rolled in, and where we think the next fight will be, and how developers can get ahead of it.
Sponsored By:
Links:
This means the anti-anti-steering injunction that Epic won under California Unfair Competition Law enters into force. Apple wanted to prevent or delay that.
🧵1/4
Kent Overstreet, the creator of bcachefs, helps us understand where his new filesystem fits, what it's like to upstream a new filesystem, and how they've solved the RAID write hole.
Special Guest: Kent Overstreet.
Sponsored By:
Links:
telnet http://pebkac.lol
We kick off the new year with new apps in our home lab you’ll want to try and a new way to do networking.
Sponsored By:
Links:
A prominent developer has brought the anti-trust heat against Apple to the public, kicking off a chain reaction that could have gone very wrong for Apple. Plus, why the Apple Vision Pro is destined for the Friend Zone.
Sponsored By:
Links:
The company is asking developers not to refer to visionOS apps using terms such as AR (augmented reality), VR (virtual reality), XR (extended reality), or MR (mixed reality). Instead, Apple says that visionOS apps are “spatial computing apps.”
A bonus stream and our first official LIT Coder stream! Chris discusses CES 2024 day two and its focus on artificial intelligence.
Then, explore AI regulations with Carolyn Posner from the Consumer Technology Association.
Additionally, we delve into the potential approval of Bitcoin ETFs and the fading of diversity, equity, and inclusion policies in big businesses.
Note: Description and Chapters genreated by AI, Boost in and tell me how it did!
Chris hangs with the live stream while we wait for the Coder that never starts. We cover new transparent OLED TVs, the trend of canceling streaming services, a government spending deal, affordable televisions, Nvidia's Super Series, Apple's AI strategy, drug use in Silicon Valley, Bitcoin ETFs, the Y2K issue, and the importance of safety in updating chips and programs. Stay tuned for more.
Note: Description and Chapters have been AI-generated. How'd it do?
This challenge gets ugly as we slowly realize we've just become zombie slayers.
We load Linux on three barely alive systems, and it takes a turn we didn't expect.
Sponsored By:
Links:
Its goal is to ensure Linux Mint can continue to deliver the same user experience if Ubuntu was ever to disappear. It allows us to assess how much we depend on Ubuntu and how much work would be involved in such an event. LMDE is also one of our development targets, as such it guarantees the software we develop is compatible outside of Ubuntu.
Mike shares his adventures and process of coming from mobile app projects to working with Unreal Engine, and why he realized a laptop just wasn't going to cut it.
Sponsored By:
Links:
We make our big Linux predictions for 2024, but first, we score how we did for 2023.
Special Guest: Michael Tunnell.
Sponsored By:
Links:
We look back at what has changed, what's failed us, and what's sticking around in our homelabs.
Special Guest: Brent Gervais.
Sponsored By:
Links:
We reflect on how our work has changed over the last year and get some sage advice from buff Uncle Jeff.
Sponsored By:
Links:
It’s the fourth annual Unplugged Tuxies; our community votes on the best projects, distros, and desktops of 2023.
Sponsored By:
Links:
The clever way one developer hacked an online game, why we're not buying the latest round of cyber war fear, and we finally have our Babylon 5 vs Star Trek debate.
Sponsored By:
Links:
The stories that kept us talking all year, and are only getting hotter!
Plus the big flops we're still sore about.
Sponsored By:
Links:
Alex shares a new build integrating WLED, and Chirs reviews hardware that can get you started with WLED in 45 seconds.
Then, one last big update on the Year of Voice and our thoughts on self-hosting push notifications.
Sponsored By:
Links:
A special edition of Office Hours explains why some Podcasters are seeing a 20% drop in downloads. Plus, Moritz from Alby joins us for a chat.
Special Guest: Moritz Kaminski.
Sponsored By:
Links:
The fantastic opportunity Google is letting slip through its hands, and why Apple might win the consumer LLM race.
Sponsored By:
Links:
We test two popular methods to run local language models on your Linux box. Then, we push the limits to see which language models will toe the line and which won't.
Sponsored By:
Links:
After years of resistance, Mike finally surrenders to Xcode. And the secret Apple envy leaked to the public this week.
Sponsored By:
Links:
This week, our embarrassment is your entertainment. Then, we check the age and health of all our disks with one app.
Sponsored By:
Links:
We break down the state of the pfSense changes and the red flags we see. Plus, we're joined by Wolfgang from Wolfgang's channel to dig into his homelab and much more.
Special Guest: Wolfgang.
Sponsored By:
Links:
The messy details and tidy excuses we noticed in all this OpenAI upset, and some fundamental problems that have been plaguing desktop Linux for years.
Sponsored By:
Links:
PipeWire hits 1.0, and Wim Taymans joins us to reflect on the smooth success of PipeWire. Plus the details on the first NixCon North America, and more.
Special Guests: Wim Taymans and Zach Mitchell.
Sponsored By:
Links:
OpenAI's weekend coup, plus our thoughts on Microsoft's gambit and their looming risk.
Sponsored By:
Links:
Can we save an old Arch install? We'll attempt a live rescue, then get into our tips for keeping your old Linux install running great.
Sponsored By:
Links:
That man behind the Google Photos killer joins us to chat about the latest release of Immich. Plus, Alex's first impressions of 45Homelab's HL15.
Special Guests: Alex Tran and Brent Gervais.
Sponsored By:
Links:
Yet another thing Microsoft was early to, and still somehow missed the boat.
Plus, building a PC is rare; it's a solved problem. If AI tools excel as expected, will coding face a similar fate?
Sponsored By:
Links:
The problem with GNOME's great news, plus our first look at Plasma 6. Then, the surprising place NixOS is getting adopted.
Sponsored By:
Links:
A special guest joins us, and we each give Fedora 39 a try. What’s new, what we liked, and what didn’t make the cut!
Special Guest: Drew DeVore.
Sponsored By:
Links:
New AI "regulation" from on high this week, a few signs you might be pissing in your own pond, and the game dev team that's been together for 40 years.
Sponsored By:
Links:
How we almost lost valuable data this week, and a Chat with Doug and Mitch about their new home lab server.
Sponsored By:
Links:
We've all made mistakes and tried to play dumb, but this week history is being made.
Sponsored By:
Links:
We did Proxmox dirty last week, so we try to explain our thinking. But first, a few things have gone down that you should know about.
Sponsored By:
Links:
Rumors of internal panic at Apple, and concerns about the future of RISC-V. Plus, the software update of the century.
Sponsored By:
Links:
We try and pull off one too many projects, but you can't argue with the results. We report on our week of rebuilds and rescues and having a blast at LinuxFest Northwest.
Special Guest: Frank Karlitschek.
Sponsored By:
Links:
Home Assistant's founder, Paulus Schoutsen, shares details about the Year of Voice, recent legal actions from Mazda, and the results of a recent third-party audit.
Plus, our recommended Nextcloud setup, converting dumb devices into smart ones with ESPHome, and more.
Special Guests: Brent Gervais, Listener Jeff, and Paulus Schoutsen.
Sponsored By:
Links:
We're about to see a wave of big tech AI features "inspired" by third-party developers at a scale that makes the Sherlocking on Apple's platform seem like chump change. Plus, how Dropbox turned around their dev retention rates, and more.
Sponsored By:
Links:
Has Canonical finally nailed snaps? Why it looks like Ubuntu has turned a new corner; our thoughts on the latest release. Plus, a special guest and more.
Sponsored By:
Links:
Mike checks in from the grind and shares some challenges in recent cross-platform testing; then, we get into the avalanche of negative AI press coverage this week and the one massive story they're not touching.
Sponsored By:
Links:
We ran Windows for the week with three seemingly simple objectives. How we did, our take on what's gotten a lot better about Windows, and what still needs some work.
Sponsored By:
Links:
With a dose of pragmatism and optimism, we chat about making the best out of old hardware and where we draw the line and buy new.
Plus, getting practical about your home media setup, bringing Spook into Home Assistant, and more.
Special Guest: Brent Gervais.
Sponsored By:
Links:
How does your first major programming language/technology still shape your work and career? Then grab some popcorn and let's watch the next epic tech titan battle unfold.
Sponsored By:
Links:
Wes visits the office to chat about some new podcast tech inbound, Google killing their Podcast app, and Chris' story from his morning with Podfans.
Special Guest: Alecks Gates.
Sponsored By:
Links:
Why the Raspberry Pi 5 doesn't meet our expectations, and the x86 boxes you should consider instead.
Sponsored By:
Links:
Our unique take on the Unity outrage, thoughts on RustRover, and Mike shares a very annoying mistake.
Sponsored By:
Links:
A troublesome rollout of new policy changes had left developers frustrated and angry
Even if you don't game, the data is in, and the impact of the Steam Deck on Linux is massive. We'll go into details and then share our long-term review of the Deck.
Special Guests: Alex Kretzschmar and Listener Jeff.
Sponsored By:
Links:
Our thoughts on two recent Plex crackdowns, why the Apple TV just got a lot better, how home Assistant could improve 10 years in, and much more.
Sponsored By:
Links:
The painful side of making video games, Grinder's big problems, and Google's sneakiest trojan horse.
Sponsored By:
Links:
Today's theme is data sovereignty, and we'll check in with two crucial projects that are giving you more options.
Special Guest: Noah Chelliah.
Sponsored By:
Links:
/sync
.We're testing a new Podcasting 2.0 feature and need your ears!
Sponsored By:
Links:
Did Apple's event live up to our expectations? And our thoughts on what new goodies for developers might be in the new hardware and software.
Sponsored By:
Links:
Brent's new Framework laptop has been torn apart and put back together again. We'll find out if it's up to his standards. Plus, we're kicking off a new build.
Sponsored By:
Links:
Alex sits down with the lead developer of mergerfs to get an update on the project, Chris has a button-pushing breakthrough and more.
Special Guest: Antonio Musumeci.
Sponsored By:
Links:
Azure suffers a big outage, and Microsoft blames faulty automation; why we think there might be early signs of weak demand for Apple's Vision Pro and more.
Sponsored By:
Links:
While chaos is brewing in SUSE and Red Hat land, Canonical stays the course and doubles down on the Linux desktop. Plus, our thoughts on the kernel team GPL-blocking NVIDIA.
Sponsored By:
Links:
U.S. officials are warning open-source software could be a cyber security threat. Their solution? Money. But do we want them picking the winners and losers of open source?
Plus, Mike's thoughts after using Cursor AI and a Cornell study take generated code to the shed.
Sponsored By:
Links:
We daily drive Asahi Linux on a MacBook, chat about how the team beat Apple to a major GPU milestone, and an easy way to self-host open-source ChatGPT alternatives.
Special Guest: Neal Gompa.
Sponsored By:
Links:
Behind-the-scenes details of a new show in the works, our thoughts on a new genre of Podcasts bursting onto the scene, and we make JB history live on the show.
Sponsored By:
Links:
Alex does a significant overhaul of his website and shares new insights. Chris finally archives complete local voice control of his network, we complain about the state of domain name sellers, and more.
Sponsored By:
Links:
Mike hits the limits of ChatGPT's knowledge, a chat about editors and what we'd do for a living if it had to be outside of tech.
Sponsored By:
Links:
Can we build an indestructible server that stands up to the test of giving out root login to the Internet?
Sponsored By:
Links:
Chris and Brent are running with scissors and breaking things again. From the website to YouTube, how we broke just about everything this week.
Sponsored By:
Java developers are getting the Oracle shakedown, openAI is running out of money, and more.
Sponsored By:
Links:
This may make Gary Gensler a witness.
Which means SBF's lawyers would be able to cross-examine Gensler under oath at trial.
We're trying out Rhino Linux—a unique take on rolling Ubuntu with AUR-like powers and other surprises.
Sponsored By:
Links:
A few tools to build your own Way Back Machine, we check in with the "Year of Voice" and more.
Sponsored By:
Links:
Did we get this one wrong? It seems consumer AI is eating the lunch of some web's biggest names.
Sponsored By:
Links:
Why Linux reigns for privacy; our recommendations for secure tools from chat to DNS.
Sponsored By:
Links:
A quick Pocket Office from "the field" on the new tech inbound to Office Hours and a big update on our bounty for episode 34!
Sponsored By:
Links:
Microsoft's dirty old API games, the new, even more restrictive rules Apple developers will now have to follow, and why Google's "Web Integrity API" seems gross.
Sponsored By:
Links:
Two important news stories, plus our thoughts on GNOME’s new windowing proposal and the Framework 16.
Sponsored By:
Links:
Alex shares a suite of self-hosted apps that replace Reddit. Chris is struggling with Jellyfin, and we discuss where NixOS is killing it and where we think it falls down.
Sponsored By:
Links:
Elon Musk trying to build the "everything app" is ridiculous, and the quiet little promise openAI just made with the White House.
Sponsored By:
Links:
Do they build them better in Germany? We try out the next-generation InfinityBook Pro 14 and dig into TUXEDO OS.
Sponsored By:
Links:
Why independent media is getting just as bad as mainstream media, and Brent's escape from a wildfire.
Plus, an update on our new bounty release format!
Sponsored By:
Links:
Shopify has a mind-blowingly obvious solution to too many meetings, a recent failure Chris is struggling with, and more.
Sponsored By:
Links:
Have Oracle and SUSE lost their minds? Plus, we dig into Fedora's proposal to add telemetry collection to Workstation.
Sponsored By:
Links:
The advantages of Federating a local and remote Nextcloud, Chris replaces Google Home Hub's photo powers and the new docker-compose feature that will change Alex's entire setup.
Special Guest: Brent Gervais.
Sponsored By:
Links:
openAI's window to build their moat is closing, but they have a powerful friend stepping up to help seal the deal. Plus, our reaction to Oracle's very spicy response to Red Hat.
Sponsored By:
Links:
Can Ubuntu make a great immutable desktop? We're trying the brand-new "Everything is a Snap" Ubuntu Core Desktop.
Sponsored By:
Links:
We've got a radically new format idea for Office Hours and want to tell you all about it.
Sponsored By:
Links:
Recent advances in embedded Linux, Canonical takes full control of LXD, ZFS gets a handy Btrfs feature, and updates on the show's production.
Sponsored By:
Links:
Mike updates us on his development adventures in Unreal 5, signs the Vision Pro might be a flop, and answer questions about abandoning Red Hat's platform.
Sponsored By:
Links:
Just about every take on the Red Hat news seems to have missed the mark.
Special Guest: Carl George.
Sponsored By:
Links:
We cover our must-have self-hosted apps, reflect on the state of Self-Hosting now, and discuss what's new in Proxmox 8.
Sponsored By:
Links:
Why everyone is excited about the next Linux kernel, Valve's big hire, and Red Hat's clone war.
Sponsored By:
Links:
Why everyone is excited about the next Linux kernel, Valve's big hire, and Red Hat's clone war.
Sponsored By:
Links:
We got our eyes on the Vision Pro SDK and share our new insights. And why the claims of stalled Mastodon adoption might ring a bit true.
Sponsored By:
Links:
“I think the way to radically improve the App Store is have Phil be an Apple fellow and get his hands off the App Store,” says Shoemaker. “That’s what they really need to do. Eddy’s more progressive, Joz is more progressive, and we know Matt is as well. Phil just needs to get his meaty paws off the App Store.”
I would like to see Mastodon thrive. But the platform’s ideological zealotry is obviously holding it back and seemingly isn’t going to change.
Chris tears into two old PCs, and builds a surprisingly powerful multi-monitor Wayland workstation.
Plus, Wes has a new device, and Brent wants answers.
Sponsored By:
Links:
We share some recent adventures, and the tale of how water got dumped into Chris' new home server.
Note: this episode was recorded on the 15th of June.
Sponsored By:
Links:
We open the robe and spend a little time chatting about the software development business.
Sponsored By:
Links:
Is Ham Radio a natural hobby for Linux users? An old friend joins us to explain where the two overlap.
Special Guest: Noah Chelliah.
Sponsored By:
Links:
We dive into Lemmy, a self-hosted Reddit alternative. Plus, a couple of easy-to-deploy tools that make life better.
Sponsored By:
Links:
Lemmy is similar to sites like Reddit, Lobste.rs, or Hacker News: you subscribe to forums you're interested in, post links and discussions, then vote, and comment on them. Behind the scenes, it is very different; anyone can easily run a server, and all these servers are federated (think email), and connected to the same universe, called the Fediverse.
What we really like in Debian 12, the big players backing RISC-V, and the improvements in NextCloud Hub 5.
Note: Linux Action News will be off next week.
Sponsored By:
Links:
We chew on the ridiculous situation Reddit has created for itself and the weak position of app developers.
Sponsored By:
Links:
Before this, Huffman had no public interactions with the community or website for 10 months.
We get the inside scoop on SouthEast LinuxFest, and share a few stories from the early days of the Linux community.
Special Guest: Noah Chelliah.
Sponsored By:
Links:
Ubuntu gets serious about the immutable desktop, red flags from Red Hat, and the little tricks Apple used to patch Wine.
Sponsored By:
Links:
We argue over what sucked the most at WWDC this year and then surprise each other with two things that thrill us.
Sponsored By:
Links:
We attempt to swap Linux distributions live on our production server, to prove that new tooling makes the Linux distro model obsolete.
Sponsored By:
Links:
We chat with 45Drives about their ambitions to build a home-lab server that bridges the gap between enterprise-level servers and consumer-grade NAS products. And more.
Sponsored By:
Links:
How the recent XFS bug was squashed, insights into why Microsoft built their own Linux from scratch, and recent attacks on Archive.org.
Sponsored By:
Links:
We chew on the best bits from this year's Microsoft Build and the bright red flag coming from the Rust community.
Sponsored By:
Links:
We take a "Rust-only tools" challenge for a week and admit what worked, and what sucked. Plus, a surprise guest.
Sponsored By:
Links:
We travel 10 years into the future and report back on how podcasts and Jupiter Broadcasting are doing after all those years.
Sponsored By:
Links:
Microsoft's new Linux server distro, Red Hat Summit 2023 highlights, big changes at CodeWeavers, and Podman catches up to Docker Desktop.
Sponsored By:
Links:
OpenAI's CEO Sam Altman has gone straight for the open-source kill move.
Sponsored By:
Links:
An image was released on twitter stating there was an explosion near the Pentagon 🤦♂️
News spread quickly and over $500 million was sold off from the S&P 500 in minutes
This is just the beginning 🫣
How we found peace with the Linux community’s perpetual debates; and our tricks for finding the signal from the noise.
Sponsored By:
Links:
Alex tempts Chris with his Obsidian ways, our thoughts on Drobo going bankrupt, and Photoprism adding paid tiers. Plus, the slick suite of tools you'll want to run on your LAN.
Sponsored By:
Links:
Bcachefs hits a major milestone, how the Red Hat cuts impact Fedora, Plasma 6 plans, and the software update bricking EV batteries.
Sponsored By:
Links:
We laugh at Google's scramble, check in on the Twitter collapse, and how one developer's little mistake screwed millions.
Sponsored By:
Links:
This will enable the work @BrianRoemmele is currently popularizing to come to Apple’s entire ecosystem.
Strap in.
🚀🚀🚀
The push for free software takes years, maybe even generations. Brent gets the inside story from the Free Software Foundation Europe.
Special Guest: Matthias Kirschner.
Sponsored By:
Links:
We look back at some classic JB shows and chat about why they ended.
Sponsored By:
Links:
Plus we answer some basic fundamental differences between Windows and Linux.
We get you up to speed on two serious flaws, Linux's recent gaming loss, Ubuntu doubling down on RISC-V, and news from the Open Source Summit North America.
Sponsored By:
Links:
A scathing takedown of Serverless... By Amazon? We react to this strange revelation and more.
Sponsored By:
Links:
The first new desktop environment in a while that has caught our attention, and it promises to unlock the full power of cutting-edge Linux.
Why we think every desktop will copy ideas from Hyprland soon.
Sponsored By:
Links:
Why Chris needs ANOTHER Home Assistant instance and a major breakthrough for self-hosters.
Special Guest: Brent Gervais.
Sponsored By:
Links:
The results from the recent HDR Hackfest, Mozilla's new acquisition, and the concerning crack down on free software encryption.
Sponsored By:
Links:
Why open source might be the real AI winner long-term, and Mike gets the ultimate "I told you so."
Sponsored By:
Links:
Two listeners race to set up a web server on Suicide Linux. One slip-up and it's all gone. Who will survive?
Sponsored By:
Links:
Have you noticed there is a podcast for everything? That's all about to change. Our thoughts on why the podcast market is going bust this year.
Special Guest: Michael Tunnell.
Sponsored By:
Links:
What we know about the Red Hat layoffs, highlights of Linux 6.3, and Canonical's bold claim in Ubuntu 23.04.
Sponsored By:
Links:
We have a laugh at Elon's alt account, why the knives are out for GitHub Co-pilot, and our thoughts on Apple's "major victory" this week.
Sponsored By:
Links:
A classic location, with a covered deck on the water with a snack shack, and easy parking.
Why Fedora 38 might Sway you to try it; and how it runs on the MacBook M1 Max.
Sponsored By:
Links:
We debate if users learned their lesson from the Docker Hub drama, and the silent self-hosting winner going from strength to strength. Proxmox gets some big updates.
Plus, our thoughts on the state of self-hostable AI tools.
Sponsored By:
Links:
What we like about Fedora 38, why the Rust foundation is in hot water, and more.
Sponsored By:
Links:
Elon launches another AI company, leaks suggest Apple might enable sideloading, and why we should let Chaos-GPT run free.
Sponsored By:
Links:
We surprise each other with three secret topics, with one big catch.
Sponsored By:
Links:
A change is in the air.
Sponsored By:
Links:
We were joined by special guest and podcasting veteran Chris Fisher, who hosts some of the most listener supported shows on Fountain.
A classic gadget gets a Linux-powered new lease on life, the next project getting Rusty, great news for Btrfs users, and more.
Sponsored By:
Links:
Forces beyond Apple's control just reined in their rise, and we ponder the coming sunset.
Plus, the tool we found uses ChatGPT to help you debug errors.
Sponsored By:
Links:
We try out the most secure messaging app in the world, and Wes’ new note system that's so great you’ll want to abandon your current one.
Sponsored By:
Links:
Chris integrates full home power monitoring into Home Assistant, while Alex tames the AI and rushes to replace Dark Sky.
Special Guest: Brent Gervais.
Sponsored By:
Links:
A fresh take on open-source funding, Fedora’s plan for better encryption out of the box, and our impressions of the latest Ubuntu Beta.
Sponsored By:
Links:
Our thoughts on the recent AI hysteria and why it betrays the massive egos involved, our issues with the RESTRICT Act, and we do some Monday morning code review.
Sponsored By:
Links:
Why using the iPhone makes it harder to run Linux; Chris follows up on his four-month-long challenge to ditch iOS for GrapheneOS.
Plus, Brent's extended stay in Berlin has led to some developments you won't want to miss.
Sponsored By:
Links:
Brent shares some rip-roaring tales from Berlin, and we introduce the new contributor who can publish to production.
Sponsored By:
Links:
What we're liking about GNOME 44, how Microsoft's Linux distro is trying to attract more users, and we bust a CentOS myth.
Sponsored By:
Links:
Mike's spent 90+ days with GitHub Co-Pilot, and shares the surprising conclusion.
Sponsored By:
Links:
Brent dives deep into Nextcloud's new release from inside their offices, and takes an unexpected dip in the local lake with a listener.
Sponsored By:
Links:
Alex goes all in on Rootless Podman, Chris is saving his Nextcloud install from disaster, and a special guest joins us.
Special Guest: Alex Ellis.
Sponsored By:
Links:
Nextcloud moves to the front of the pack with their new release, a moment to appreciate curl, and Amazon goes all in with Fedora.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Microsoft's moonshot is turning into a crapshoot.
Sponsored By:
Links:
The story of an open-source hero who became a villain.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
Disaster strikes the studio, and Chris jumps into action while Brent battles the packet wars of 1996.
Sponsored By:
Links:
We're told companies are abandoning the cloud to save money. But is the trend our friend?
Sponsored By:
Links:
Docker's open-source crackdown, the Wayland regression solved this week, and why ipmitool's repo has been locked.
Sponsored By:
Links:
Our spicy take on the Silicon Valley Bank bailout, how it will impact everyday developers, and how badly this screws over small businesses.
Sponsored By:
Links:
Robert McQueen shares the inside scoop on Flathub’s ambitious plans to create a universal app store for all distros—and we ask the hard questions.
Special Guest: Robert McQueen.
Sponsored By:
Links:
Find out why Alex ripped out everything installed last episode and is starting fresh with new gear, wires, and a new goal.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Nextcloud's big new customer, some last-minute surprises in GNOME 44, and Flathub's ambitious plans for 2023.
Sponsored By:
Links:
We're celebrating 500 episodes with the biggest announcement yet.
Sponsored By:
Links:
Mike's got a new rig, and Ford wants to recall yours automatically! Plus, we get a bit spicy about money.
Sponsored By:
Links:
The crew takes on a new challenge this week. How hard could it be? Very. Plus, the major open source issue we've zeroed in on.
Sponsored By:
Links:
This venue has great beer and food, indoor and outdoor seating.
FFmpeg gets new superpowers, Plasma’s switch to Qt6 gets official; what you need to know. Plus we round up the top features coming to Linux 6.3.
Sponsored By:
Links:
Ubuntu makes its anti-Flatpak stance official, while KDE and GNOME team up to turn Flathub into a universal Linux app store.
Plus, we try the Intel Arc GPU. Could this new hardware make Linux bulletproof?
Sponsored By:
Links:
Alex has been swapping hardware and standing-up services. It's a network rebuild episode and more!
Sponsored By:
Links:
It's been one week, and Microsoft's new bot's already gone full Tay.
Plus one of the worst examples of under-funded open source yet.
Sponsored By:
Links:
Our favorite features in Linux 6.2, the Hollywood tool getting open-sourced, and a systemd update you need to know about.
Sponsored By:
Links:
Sometimes running the latest and greatest means you have to pave your own path. This week two examples from living on the edge.
Sponsored By:
Links:
We throw Office Hours into the middle of our biggest beta test yet!
Sponsored By:
Links:
Some Git flaws you need to know about, we reflect on 10 years of Steam on Linux, and then dive into the much anticipated Plasma 5.27.
Sponsored By:
Links:
The pitchforks are out for Google's CEO, and hoopla is leaking! Plus, our thoughts on baking telemetry into Go, the big Web3 crackdown, and more.
Sponsored By:
Links:
How Chris wasted three months tracking down a Wi-Fi problem, plus we debate if immutable distros need to be simplified.
Sponsored By:
Links:
Alex has major Proxmox problems. What happened, and the fix for now. Plus, the real downside to Wifi cameras and the batch of network gear on the way.
Sponsored By:
Links:
We round up some news from FOSDEM 2023, update a 21-year-old project, and the Fedora fix that's been a few releases in the making.
Sponsored By:
Links:
We get spicy about the state of hybrid app development and then dig into the App store gatekeeper busting by the White House.
Sponsored By:
Links:
Chris attempts to get Fedora 37 on his M1 Max MacBook Pro, while Wes and Brent try the "every distro at once" desktop.
Sponsored By:
Links:
We blow the lid off a secret project and get LIT.
Sponsored By:
Links:
A lot happened in the free desktop world this week, we cover the impressive releases, changes, and surprises.
Sponsored By:
Links:
The shiny userbase flocking to WebAssembly, our thoughts on the "openAI scam", and why they just keep cramming stuff into Docker containers.
Sponsored By:
Links:
Are the free software alternatives good enough? The conclusion to our 60-day challenge to drop Google, Apple, and the iPhone.
Sponsored By:
Links:
Join us for the surprising conclusion to our month-long challenge.
Special Guests: Brent Gervais and Catherine Kretzschmar.
Sponsored By:
Links:
An Ubuntu expiration date approaches, openSUSE has a new handy solution, and the container security issue that remains unfixed.
Sponsored By:
Links:
How the world without "big tech" might look like, the EU promises to go after Elon and a much-needed head adjustment.
Sponsored By:
Links:
Today we are finally taking on a project months in the making, and we're switching to an entirely new generation of Linux tech in the process.
Sponsored By:
Links:
If you've noticed something a little off about your favorite podcasts, we might know why.
Plus some big Podcasting 2.0 endorsements and adoption.
Sponsored By:
Links:
A high-profile Linux kernel network flaw, we put JFS on a death watch, and break down the controversial Firefox update this week.
Sponsored By:
Links:
Microsoft gives Google an OpenAI gut punch, why Apple's new hardware fails to impress, and our reaction to the undignified death of Twitter's third-party client API.
Sponsored By:
Links:
Chris' sticky upgrade situation, and we chat with the developer behind an impressive mesh VPN with new tricks.
Special Guest: Ryan Huber.
Sponsored By:
Links:
Alex dives deep to find out if Kubernetes is overkill for the home and finds solutions to simplify things. And Chris has a new firmware that turns his favorite network cameras up to 11.
Plus an update on Jellyfin January.
Sponsored By:
Links:
OpenZFS has performance gains inbound, the end of a Linux era, and the achievement unlocked by the open-source NVIDIA driver.
Sponsored By:
Links:
After sacrificing our pound of flesh for episode 500, we get into some spicy Big Tech dynamics and the performance mess of WebAssembly runtimes.
Sponsored By:
Links:
Join us on a journey to true software freedom. We embark on our 30-day challenge and discover a whole new philosophy that will change the way you think about technology.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
We're kicking off some new projects, catching up with old friends, and react to a new podcast app that automatically skips ads.
Special Guests: Alex Rodriguez and Stefan Schulte-Ortbeck.
Sponsored By:
Links:
Android is getting RISC-Y, the handy new Google tool going open source, the next nail in the coffin for ZFS on Ubuntu, and why you were right about smart speakers all along.
Sponsored By:
Links:
We share our spicy C++ take, major Apple frustrations, and 2023 spoilers.
Sponsored By:
Links:
We assemble to predict what will happen in 2023 and score how our 2022 predictions turned out.
Sponsored By:
Links:
We kick off our Jellyfin January challenge and invite you to join us. Plus, Chris has some new hardware and our thoughts on the trouble at the Matrix foundation.
Special Guest: Brent Gervais.
Sponsored By:
Links:
There are some stories so big they need a little more air time.
Sponsored By:
Links:
Our take on why several tech companies just teamed up to take on Google Maps, and then we react to the global analyst who says we won't have any new iPhones until 2028. We don't talk about Elon; if we did, it would be chaptered. But we defiantly did not.
Sponsored By:
Links:
Overture aims to incorporate map data from multiple sources including Overture Members, civic organizations, and open data sources.
It's the third annual Unplugged Tuxies; our community votes on the best projects, distros, desktops, and services of 2022.
Sponsored By:
Links:
We have some big plans for 2023, and we share the next steps to fully host our podcast infrastructure.
Sponsored By:
Links:
Mike and Chris spend a little time chatting about one of their loves in life, great games. It's a test pilot episode for a possible new show, and we'd like your feedback. Consider it a holiday treat for the Coder fans out there.
Sponsored By:
Links:
Why we won't see a new Raspberry Pi until 2025, the first steps to Plasma 6 are being taken, and PipeWire gets a major Bluetooth upgrade.
Sponsored By:
Links:
Mike's skeptical of the rumors Apple is preparing to allow third-party app stores, and in a total flip of roles, Chris comes to the defense of Microsoft.
Sponsored By:
Links:
Brent's been hiding your emails; we confront him and expose what he's been keeping from the show.
Sponsored By:
Links:
What disgusted Alex about Disqus, and how he replaced it with a Self-Hosted solution, a hot HDHomeRun tip, and an update on Chris' hunt for the perfect notes app.
Sponsored By:
Links:
Why the next kernel will be "the merge window from hell," a holiday gift for Wayland users, and how the open source community could do more to take on YouTube.
Sponsored By:
Links:
We debate a few more drunk or 4D chess moves, the mad lad taking on Apple, and why Dart 3 has people talking. Plus, what a recent criticism of Scrum got wrong.
Sponsored By:
Links:
We complete a year-long journey and discover some unspoken truths about a great Linux distro. Plus one small, and one major update on our GrapheneOS adventure.
Sponsored By:
Links:
We challenged ChatGPT to create a Linux news podcast outline and then put it to the test.
Plus, a live Ask us Anything and we answer some tough questions.
Sponsored By:
Links:
The Linux kernel has some exciting updates this week, including a significant Asahi milestone and some good news for Android. Then we take openSUSE's new web-based installer for a spin.
Sponsored By:
Links:
Amazon used the stage of AWS re:Invent to toss shade on .Net and reveal its broader ambitions.
Plus, why Pydantic is giving Mike a headache.
Sponsored By:
Links:
After nearly half a year of woe, Brent is ready to give Linux the go. Join us as we compare and contrast two Linux distros and end up with one going on Brent's machine.
Plus, follow-up on Chris' GrapheneOS adventures and more.
Sponsored By:
Links:
Wendell from Level One Techs joins us to catch up on low-power hardware, his home automation setup, and thoughts on so much more.
Special Guest: Wendell Wilson.
Sponsored By:
Links:
Old school Ubuntu has a new cool, Google calls out Google, and some IoT news you can use.
Sponsored By:
Links:
We reflect on the recent musings of Python's creator, from the functional to the philosophical.
Sponsored By:
Links:
Chris ditches the iPhone and switches to GrapheneOS, a security and privacy-focused project that lets you take control back from Google.
Sponsored By:
Links:
The worst part about being a Podcaster; our pitch to eliminate nearly all holidays and some hard questions.
Sponsored By:
Links:
The contested subsystem coming soon, a sobering assessment of wireless support in Linux, and a triumph for free software.
Sponsored By:
Links:
We will discuss the practical implementations of AI embedded in future products, then take a look at FTX's books and have a few highlights to share.
Plus, we lay out the PMC warfare theory, which might explain what bloated tech companies have coming.
Sponsored By:
Links:
We dig into Shufflecake, a tool that lets Linux users hide data with plausible deniability, then let our live stream SSH into our server and see if they can discover our secret data.
Plus, we follow up on Brent's never-ending desktop distro search and Chris' new Linux rig.
Sponsored By:
Links:
We're chatting about workstation builds for a home NAS with Joe Ressington this week. Chris chews on the news of the Evernote buyout and his challenges with Zigbee.
Special Guest: Joe Resington.
Sponsored By:
Links:
Before optimizing your channels, it’s best to reduce the amount of traffic on the 2.4 GHz band. There are a few different ways of doing that. But it all boils down to removing as many devices from the 2.4 GHz Wi-Fi band as possible. As Zigbee devices can only use the 2.4 GHz band, there isn’t much you can do with them except minimizing the number of commands sent using Zigbee Groups.
We tried Fedora 37 on the Pi 4, the Google surprise this week, and our thoughts on the WSL 1.0 release.
Sponsored By:
Links:
We tried Fedora 37 on the Pi 4, the Google surprise this week, and our thoughts on the WSL 1.0 release.
Sponsored By:
Links:
Microsoft lets its geek flag fly, our observations on .NET 7, and the recent upset caused by the Troll Wizard, but we can't understand who will pay the toll.
Sponsored By:
Links:
Why this latest release of Fedora misses the mark, and Ubuntu's quiet backing away from ZFS.
Sponsored By:
Links:
Why LBRY was never going to win, and how they have just screwed all crypto. And a new feature in the works for our listeners by our listeners.
Sponsored By:
Links:
Microsoft's new goodies for Linux users, the Ubuntu Summit wraps up, and our takeaways from the recent fireside chat with Linus Torvalds.
Sponsored By:
Links:
Mike just came up for air after a Swift deep dive, and he has a fresh new take. Plus, the wheels of history are spinning faster; we take a snapshot in time and then round it all out with spicy Apple bacon.
Sponsored By:
Links:
We surprise each other with three different topics, and Chris has a big update on the ODROID H3+.
Sponsored By:
Links:
Sometimes your best upgrades are unplanned; Chris just got his Home Assistant Yellow fully deployed.
Sponsored By:
Links:
What you need to know about that new OpenSSL vulnerability, the big bcachefs update we've been waiting for, and why the community is creating a Gitea fork.
Sponsored By:
Links:
We slip into full boss mode after digging into some long-term tech trends impacting developers.
Sponsored By:
Links:
Are the long-timers holding Linux back? Lennart Poettering argues we are and proposes a new Microsoft-blessed way to secure Linux.
Plus, our thoughts on the slow decline of mailing lists in open-source development.
Special Guest: Neal Gompa.
Sponsored By:
Links:
We recap a busy night after a studio power outage, then dig into what makes an open-source project worth contributing to. Why do some fail while others grow and prosper?
Plus, our thoughts on Pocket Casts going open source and the media winter we're preparing for.
Special Guest: Alex Rodriguez.
Sponsored By:
Links:
The focus of the new Ubuntu release, Gitea's surprising announcement, and Linux prepares to drop another architecture.
Sponsored By:
Links:
One of the most challenging aspects of being an independent developer, and our thoughts on Microsoft's recent bad news.
Sponsored By:
Links:
The Internet is going crazy with AI-generated media. What's the open-source story, and is Linux being left out?
Plus, we try out the new Ubuntu release on the ODROID H3+.
Sponsored By:
Links:
Alex gives Roon Labs whole home audio a try but discovers a critical design flaw while Chris checks out his new ODROID-H3+ and plans his next epic build.
Sponsored By:
Links:
What makes Google's new OS so secure, a critical WiFi vulnerability in the Kernel, and why Linus is tapping the hype breaks for Linux 6.1.
Sponsored By:
Links:
We debate if GitHub's Copilot enables automated code laundering after a developer makes a startling discovery. Then we dispense some seriously old-school wisdom.
Sponsored By:
Links:
Nobody is entitled to support from volunteer FOSS projects, but they absolutely do deserve not to have the issues they took time to file actively thrown away. If you haven't fixed the bug, it stays open.
Linus Tech Tips blows it again, and we clean up. Plus, we push System76's updated Thelio Workstation to the breaking point.
Sponsored By:
Links:
It was one technical disaster after another, we recap the series of technical challenges that killed all future shows from the road.
Sponsored By:
Links:
Plasma 5.26's standout features, Canonical flips the script on Red Hat, and why Android is leaking traffic outside VPNs.
Sponsored By:
Links:
Elon Musk's leaked messages reveal how tech CEOs think and talk about their employees, and we dig in.
Sponsored By:
Links:
What the heck is going on? Fedora is dropping features, GNOME is getting Iced, and the mistake we'll never make again. We've got a lot to sort out.
Sponsored By:
Links:
Additionally, it also affects any user who uses open-source graphics drivers, even if they run iGPUs on Intel chips.
Chris Raspberry Pi server is dead, and Alex has a few ideas for his next build.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Our thoughts on IBM slicing up more of Red Hat, what stands out in Nextcloud Hub 3, and a few essential fixes finally landing in the Linux kernel.
Sponsored By:
Links:
Why we think Google will ultimately lose the next big tech battle.
Sponsored By:
Links:
We go hands-on at NASA's JPL and learn why Linux is the best OS for Earth and Mars.
Special Guest: Tim Canham.
Sponsored By:
Links:
We get you caught up on one heck of a trip.
Sponsored By:
Links:
The controversial change for the GNU Toolchain, critical vulnerabilities in popular Matrix clients, and the significant milestone for the Ingenuity LinuxCopter this week.
Sponsored By:
Links:
Mike has spent just over a month living in Linux full-time, and Chris wants to check in and see how he’s doing. Plus we both have the new Thelio from System76 in-house, and our takeaways might surprise you.
Sponsored By:
Links:
We finally give Brent his new laptop and get his reaction. Plus our best pick for replacing stock Android with something private.
Sponsored By:
Links:
Alex is replacing his Chromecast and Google Nest Mini with an open-source solution, and why we’re all getting a little hyped about Matter.
Special Guest: Brent Gervais.
Sponsored By:
Links:
GNOME 43 highlights, Canonical's new hardware partner, and why we're disappointed in the Framework Chromebook.
Sponsored By:
Links:
Mike's first look at a built from scratch yet to be released IDE. And we cook up a little Adobe-flavored bacon.
Sponsored By:
Links:
We've gone deep to find our perfect Google Photos replacement. This week we'll share our setup that we think works great, is easy to use, and is fully backed up.
Sponsored By:
Links:
Brent recounts a harrowing near miss on his road trip to the studio, and a surprise outage leaves Chris scrambling after launching the website.
Sponsored By:
Links:
The Linux Foundation takes a victory lap, Google kills another community-loved project, and key moments from the Linux Plumbers Conference.
Sponsored By:
Links:
To our surprise, Apple gave developers a treat this week and continues to search for the ultimate productivity hack.
Sponsored By:
Links:
Brent has been on a bug-finding marathon. We review what he's discovered and share some hard-learned lessons.
Sponsored By:
Links:
We've made some changes since the last episode, and share why we have doubled down on Self-Hosting as much as possible.
Plus, Chris tries out Immich, a high-performance Google Photos alternative.
Sponsored By:
Links:
Linux goes underwater, Microsoft kills the Teams' Linux app, and the nasty GRUB bug some of us could not avoid.
Sponsored By:
Links:
We look back at how tools, processes, and developer trends have changed over nearly ten years of the show.
Sponsored By:
Links:
Can Linux do better? Apple is scrambling to build always-on malware protection into the next macOS as its market share grows. A precautionary tale for Linux users.
Plus we take a look at Ubuntu Unity as it becomes an official flavor.
Sponsored By:
Links:
Debian’s firmware future is up for debate, Pine64 teases a RISC-V SBC, and some of your favorite tools just got new tricks.
Sponsored By:
Links:
We're pushing our new website to production live on the show today. We have no idea how things will turn out - but we're taking you along for the ride either way!
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
Why Metal might be one of the biggest strategy taxes of the Apple platforms. Plus a thought-provoking appeal to Dark Matter Developers.
Sponsored By:
Links:
We've reached the end of the road in our immutable Linux series, and an old friend stops by to give us the inside scoop on Endless OS.
Plus, we announce who will be joining us at JPL in September.
Special Guest: Cassidy James Blaede.
Sponsored By:
Links:
We learned some really hard lessons this week, and reflect. Then Chris finds the perfect temperature sensor, and Alex finds a beautiful media discovery app.
Sponsored By:
Links:
Details on two new efforts in the Linux kernel, the Pi-like RISC-V board that just hit its funding goal, and a significant milestone for Asahi GPU driver development.
Sponsored By:
Links:
We're spooked to learn how one man's life has been turned upside down just because he used Google Photos.
Plus Mike's thoughts on .Net 7's trajectory and a little hope for Ionic.
Sponsored By:
Links:
Instead his child’s genitals were transmitted to a team of people and he lost years of data.
It’s fine to argue this is an extreme and regrettable edge case we can design out of the system. To say it’s defensible? That’s dangerous.
The five most common problems when trying out an immutable Linux distro like NixOS. Plus, why one Linux dev says just target WINE.
Sponsored By:
Links:
We've built up some incredible backend infrastructure for our new website. We run through the big improvements, and where we still need some help.
Sponsored By:
Links:
A Linux jailbreak that's a win for Right to Repair, our favorite things in Android 13, and the major features that just missed the Linux 6.0 window.
Sponsored By:
Links:
New leaks reveal how hollow Apple's claims of fighting for user privacy are. We discuss their scheme to monetize the downturn.
Plus, why we've never seen an App blow it as severely as Telegram is right now, and Electron's Flash moment.
Sponsored By:
Links:
Our garage Linux server has died, and this time we’re looking at data loss. We attempt to revive our zombie box and reflect on what went wrong.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
What is it like to live with another man's automations? Brent spills all.
Plus, Chris tries out a few more Shelly devices and reports back.
Special Guest: Brent Gervais.
Sponsored By:
Links:
GitHub steps in it this week, Microsoft's Linux distribution now runs on bare metal, FFmpeg gets IPFS support, and the odd thing going on with the kernel.
Sponsored By:
Links:
Why we think Malcolm Gladwell is wrong about remote work, and the complicated answer to a simple question.
Sponsored By:
Links:
We present a buffet of budget Linux boxes. From $40 to $400 you'll be surprised by what we found. Then we attempt to find the perfect distro for them.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
Why we hate crypto more than you, plus a frank conversation about boosts in our shows, some big lessons learned from our new website project, and the things we'd never do again.
Sponsored By:
Links:
The real story behind the "Massive GitHub Malware attack," significant updates for the Steam Deck, and the inside scoop on Lenovo's big Linux ambitions.
Sponsored By:
Links:
We debate the lies our tool makers tell us, if Clojure has a Rails-sized hole, and the secrets of a successful software engineer.
Sponsored By:
Links:
Is the Linux desktop hard to love? A long-time user experience developer argues it is, and we respond to his criticisms.
Sponsored By:
Links:
Alex runs us through his new and improved off-site backup setup, and Chris is trying out some Shelly devices.
Sponsored By:
Links:
Red Hat hints at its future direction, why realtime might finally come to Linux after all these years, and our reaction to Google's ambitious new programing language.
Sponsored By:
Links:
We're looking at the big picture and, surprisingly, seeing a lot of possibilities.
Sponsored By:
Links:
Apple is joining other tech big-hitters that have frozen hiring across parts of their organization in response to a cooling global economy.
A fundamental change is coming to desktop Linux, and Silverblue might be our hint at where things are going.
Sponsored By:
Links:
We're learning on the job this week as the deadline for our new website is just around the corner. Plus, a dirty little secret that explains why most tech press coverage sucks.
Special Guest: Stefan Schulte-Ortbeck.
Sponsored By:
Links:
Microsoft makes a hard about-face, a significant fix for Ubuntu 22.04 is in the works, and the recent breakthrough by the Asahi Linux project.
Sponsored By:
Links:
Mike's ready to make a case for Declarative UI, and Chris pulls back the curtain to reveal a spicy take.
Sponsored By:
Links:
We try and bust a common Linux distro myth. Then what surprised Chris about his new Steam Deck.
Sponsored By:
Links:
Our thoughts on the new Works with Home Assistant program, some changes to Alex's off-site backup server, and a million bits of great feedback.
Sponsored By:
Links:
Why Google says we should all go rolling, Red Hat's got a new boss, Microsoft gets called out, and why it might be the year of Linux hardware.
Sponsored By:
Links:
Why we feel recent attacks by the Software Freedom Conservancy against Microsoft are costing the SFC serious credibility.
Sponsored By:
Links:
We were fixing servers all night, but at least we have a great story. A special guest joins us to help make a big show announcement.
Special Guest: Tim Canham.
Sponsored By:
Links:
Brent sits down with Tim Canham, Senior Software Engineer at NASA's Jet Propulsion Laboratory. We explore topics including the hardware and software powering NASA’s Ingenuity Mars Helicopter; JPL's switch from Solaris to Linux; the open source projects, tools, and philosophy at JPL, ...and more.
Special Guest: Tim Canham.
Sponsored By:
Links:
The community is quick at work; we share major updates on our new website project, and chat with the "Offical" Podcasting 2.0 consultant to find out what he's developing next for podcast listeners.
Special Guest: Alecks Gates.
Sponsored By:
Links:
Share a single episode, or a list of all episodes.
Also: change the styles of your player with a customization script.
The new movement to leave GitHub, an Ubuntu bug biting 22.04 users, the hardware platform Fedora might start taking seriously, and a major desktop dev departs Red Hat.
Sponsored By:
Links:
Mike's Linux Toolchain for 2022, and his first week with CoPilot. Then we chat about the series of choices that led us to go independent so many years ago.
Sponsored By:
Links:
The one shared secret behind some of the world's most powerful open-source projects.
Brent's Node:
03cf7e9b79a3230749db642ad690889065ec35b9ded184266d4fce424ab75470fc
Sponsored By:
Links:
Our guest this week has more Raspberry Pis than anyone we've ever met. We get insights into all the projects he used them for, what's worked great, and what's not worked at all.
Special Guest: Jscar_Hawk.
Sponsored By:
Links:
August 5th at 6pm GMT
Fedora gets serious about its server editions, our thoughts on Valve's increased Steam Deck production, and the surprising results of booting Linux on the Apple M2 SoC.
Sponsored By:
Links:
Mike just signed up for a year of GitHub Copilot and Chris tries to understand why. Then we catch each other up on some recent surprises.
Sponsored By:
Links:
We're going back in time to witness the early days of a critical tool to build Linux, then jump forward 15 years and join our buddy Brent on his journey to learn that very tooling.
Sponsored By:
Links:
Some highlights from Linus' recent fireside chat, Qt gets a new leader and a Linux botnet we should probably take seriously.
Links:
Mike's hitting the road to solve his old man's PC woes; Chris channels his early inner 80s and some Google AI conspiracy bacon.
Sponsored By:
Links:
Despite their more limited resources, he adds, small businesses can be more flexible and responsive to shifts in markets and in demand than their larger counterparts.
One of the pioneers of the web, VNC, Webcams, and more joins us; plus we'll update you on a few projects we love.
Special Guest: Quentin Stafford-Fraser.
Sponsored By:
Links:
Brent sits down with Dr Quentin Stafford-Fraser, computer scientist, serial-entrepreneur, inventor (perhaps) of the webcam, Augmented Reality Ph.D. who ran the very first web server at the University of Cambridge, among much more. We explore topics including computer science as an art-form, the origins of the Raspberry Pi and T9 predictive text, philosophies around innovation and invention, challenging the patent system, and more.
Special Guest: Quentin Stafford-Fraser.
Links:
A special episode today as TechnoTim joins Alex to discuss everything Kubernetes and HomeLab. The #100DaysOfHomeLab initiative from Tim is just getting started, find out what it’s all about in today's episode.
Special Guest: Techno Tim.
Sponsored By:
Links:
We get the details behind Thunderbird acquiring K-9 Mail, share the best new features of Plasma 5.25, check-in on Ubuntu's RISC-V development status, and discuss Photoshop coming to Linux via the web.
Sponsored By:
Links:
You can't judge a book by its cover, and this week we surprised each other when we dug into the HP Dev One. Plus some insights on remote virtual dev desktops and the gotcha's from WWDC we missed.
Sponsored By:
Links:
From skeptic to buyer, why the HP Dev One is the best Linux laptop yet. This is the one review you don't want to miss.
Sponsored By:
Links:
Outdoor networking adventures, new decentralized tools we're building, and a great chat with one of the co-founders of Podverse - an impressive open-source Podcasting 2.0 app.
Plus, a surprise live unboxing of HP's Dev One Linux laptop.
Sponsored By:
Links:
SUSE Enterprise is already switching to the new NVIDIA open kernel driver, a Matrix-powered Walkie-Talkie, and the details on Apple's Rosetta for Linux.
Sponsored By:
Links:
We jump aboard Hair Force One and are a bit let down. We get into why. Plus Mike's first impressions of the HP Dev One laptop.
Sponsored By:
Links:
Three tails of tech tribulations, and how Brent saved his openSUSE Tumbleweed box from the brink.
Sponsored By:
Links:
A quick-fire round of projects this week, your feedback, and a discussion about the future of Self-Hosting.
Sponsored By:
Links:
Our thoughts on NixOS' new GUI installer, winning hearts and minds one firmware update at a time, the performance bug that hit Linux 5.18, and preparation begins for the open-source NVIDIA driver.
Sponsored By:
Links:
What's old is new again, but we're not buying it this time. It's developer conference season, and we're hunting vaporware.
Sponsored By:
Links:
A new Linux update allows Intel to control features in your CPU using hardware-level DRM.
Sponsored By:
Links:
We have a laugh at Spotify, then check out a minimum viable project for the new Jupiter Broadcasting website.
Special Guest: Stefan Schulte-Ortbeck.
Sponsored By:
Links:
The controversial Intel code now shipping in Linux, why F-Droid is getting more attractive for developers, and the rumor that could change the industry.
Sponsored By:
Links:
Soon there will be no shame in that snake game, the big trend that is not our friend, and Microsoft reinvents the widget.
Sponsored By:
Soon there will be no shame in that snake game, the big trend that is not our friend, and Microsoft reinvents the widget.
Sponsored By:
Links:
We take a sneak peek at some future tech coming to Linux, and share details on HP's new laptop that runs POP!
Sponsored By:
Links:
Alex has found the perfect tool to bring your recipe management into the future. Plus, a convenient trick for scripts with passwords, dying hard drives, and the killer new Proxmox feature.
Sponsored By:
Links:
Why Google's new open-source security effort might fall a bit short, the Arch snag this week, a big win for Right to Repair, and why you might soon have a new favorite filesystem.
Sponsored By:
Links:
Why Mike feels like Heroku is in a failed state, what drove us crazy about Google I/O this year, how Chris botched something super important, and some serious Python love sprinkled throughout.
Sponsored By:
Links:
NVIDIA is open-sourcing their GPU drivers, but there are a few things you need to know. Plus, we get some exclusive insights into Tailscale from one of its co-founders.
Special Guests: Avery Pennarun and Christian F.K. Schaller.
Sponsored By:
Links:
By which they mean, they moved most of it to firmware and made the open source driver call into it. There are almost 900 functions implemented in the 34MB firmware, give or take, from what I can see.
Broadcom vibes...
(If you see the elf sections, there’s ones for Turing, Ampere DC, Ampere customer and Gnext)
We've made some essential decisions for our big projects, what really has us excited about Podcasting 2.0, and the real problem with Boosts.
Plus Chris figured out one of Brent's secret flaws!
Special Guest: Brent Gervais.
Sponsored By:
Links:
NVIDIA has announced its plans for an open-source GPU driver. Christian Schaller, the Director for Desktop, Graphics, Infotainment and more at Red Hat, gives us the inside scoop on this historic announcement.
Special Guest: Christian F.K. Schaller.
Sponsored By:
Links:
After solving a moral dilemma in our particular kind of way, Mike dishes on some ambitious plans that might kick off a new era of development for him.
Sponsored By:
Links:
The RSS 2.0 spec was last updated in 2009 and there had been little to no activity to update RSS since then.
Each of us brings a secret topic to the show, and we discover a common theme about using the wrong tool for the right job.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
Alex replaces another Google service; we point the community spotlight at FuzzyMistborn plus your feedback!
Special Guests: Brent Gervais and FuzzyMistborn.
Sponsored By:
Links:
New firmware superpowers are coming to a future Linux kernel, why Google is working on encrypted hibernation support, and a sneak peek at SteamOS 3.
Sponsored By:
Links:
Mike shares a tale involving a comedy of errors, and we ponder a new reusable culture around tech.
Sponsored By:
Links:
If we could change just one mistake in our Linux journey, what would it be?
Open a channel to our Lightning Node: 037d284d2d7e6cec7623adbe600450a73b42fb90800989f05a862464b05408df39
Sponsored By:
Links:
PopOS! 22.04 has a surprise you might not have noticed, we get the details on Ubuntu’s new Real-Time kernel, and the clever idea from the Framework laptop team.
Sponsored By:
Links:
It's a summer of projects, we get into our plans to totally rebuild our website, some new Podcasting 2.0 features and, Brent takes his first bite of the Raspberry Pi.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Mike battles the onslaught of yet another bout with the plague. At the same time, we react live to Elon buying Twitter, Gitlab kicking off some free accounts, and we discover Google and Apple are working together again to pull the rug on app developers.
Sponsored By:
Links:
We've hit a bump in the road with the NixOS challenge, and share what it might not be great at. Plus, what we didn't cover in our Ubuntu 22.04 review.
The one where we don't talk about Ubuntu 22.04 at all.
Open a channel to our Lightning Node: 037d284d2d7e6cec7623adbe600450a73b42fb90800989f05a862464b05408df39
Special Guests: Alex Kretzschmar and Martin Wimpress.
Sponsored By:
Links:
Alex shares some handy tools, and some old friends join us for a special edition of the show.
Special Guests: Brent Gervais and chzbacon.
Sponsored By:
Links:
Our take on why Fedora's Legacy BIOS plans have stirred up such a strong debate, how NVIDIA's Linux strategy seems to be changing, and a surprising kernel patch from Sony.
Sponsored By:
Links:
We kick off a new show and chat about the rapid centralization facing the podcast industry. Then we share some secret future Jupiter Broadcasting plans, answer your questions, and more.
It's Office Hours with Chris! Join us for a beta run of a new series officially kicking off next Tuesday.
Special Guest: Brent Gervais.
Sponsored By:
Links:
We get a bit gleeful over some choice tech monopoly hypocrisy and then spicy with our 18-month outlook.
Sponsored By:
Links:
Has Fedora pulled ahead of Ubuntu? We take a look at the new Fedora 36 and Ubuntu 22.04 releases.
Special Guest: Alex Kretzschmar.
Sponsored By:
Links:
What is the enthusiast trap, and why does it seem to ensnarl every successful open source project? Also, some excellent listener power user tips for NextCloud.
Links:
SUSE has a skunkworks distro in development, the transition Debian is struggling with, and some long-awaited improvements to Raspberry Pi OS.
Sponsored By:
Links:
We revel in the hypocrisy of big tech, share a few stories, and catch up with an old friend.
Sponsored By:
Links:
We just wrapped up our East Coast meetup and have a bunch of great stories to share. Plus some Nix ups and downs, and more.
Sponsored By:
Links:
We chat about Wyze's recent real bad, no-good security news, why Plex Discover has potential but hasn't impressed us yet, and a brief tour of Alex's home network setup.
Special Guest: Wes Payne.
Sponsored By:
Links:
Docker surprises everyone, new Fedora tools in the works, and an old debate with a fresh take.
Sponsored By:
Links:
We crack open the time capsule and see how our spicy takes hold up.
Sponsored By:
Links:
Chris's thoughts on Linux's NVIDIA conundrum, Elon's takeover of Twitter, MailChimp's insider hack, and the Google Drones taking off in Texas.
Links:
How we nearly crashed our Matrix server; what we did wrong and how we're fixing it.
Plus an update on elementary OS, GNOME's next chapter, and we kick off the NixOS Challenge.
Special Guest: Danielle Foré.
Sponsored By:
Links:
The Unplugged team holds a live event with a special guest, your questions, and we give away a lot of Bitcoin sats!
Sponsored By:
Links:
A new rolling remix of Ubuntu is grabbing attention, AMD has big Linux plans, and why Linux 5.18 looks like another barn burner release.
Sponsored By:
Links:
We just watched Revolution OS before the show, so we reflect on the audacity of their vision and the new revolution we see brewing.
Sponsored By:
Links:
We explore what makes NixOS so powerful, and why it might be the future of all Linux distributions.
Plus we announce a community-wide NixOS challenge for the month of April.
Sponsored By:
Links:
Why Chris is moving away from using Containers, Alex's new project, and some great follow-up.
Sponsored By:
Links:
If you do, they drop down to HDD performance. Thread.
A significant follow-up to one of the biggest Linux stories, the Pandora's box the MIT Technology Review claims open-source devs just opened, and Linux on the M1 finally ships.
Sponsored By:
Links:
This confirms my personal experience that Apple's APFS code is just buggy... it seems a lot of people have latent filesystem corruption :(
Apple enters full panic mode over sideloading, and our plan to push back against industry-wide consolidation kicks off.
Sponsored By:
Links:
Why GNOME 42 is the release we’ve all been waiting for.
Plus, we attempt to install Linux on an M1 MacBook live on the show.
Sponsored By:
Links:
Steam comes to ChromeOS, our thoughts on Arch turning 20, and our first look at GNOME 42.
Sponsored By:
Links:
Our take on big tech's return to office, AT&T's RCS boondoggle, and the concerning territory tech is racing towards.
Sponsored By:
Links:
How each of us asks for features and help from free software projects, and one of our most prescient soapboxes in a while.
Sponsored By:
Links:
We look back at our favorite moments from the last ten years of the Raspberry Pi, why you might want to start considering one, and where we want to see the platform evolve.
Sponsored By:
Links:
Is anyone else re-thinking their home servers given the current cost situation?
Why Dirty Pipe is a dirty dog, the explosive adoption of Linux at AMD, and an important update on elementary OS.
Sponsored By:
Links:
We revisit one of the core theses of the show and expand on it in a new way, leading us to ponder just what a wild ride the next eight years are going to be.
Sponsored By:
Links:
We surprise each other with three different topics, hidden away by encryption in our show notes - we literally have no idea what we're talking about this week.
Sponsored By:
Links:
Why it might be time to lower your RISC-V expectations, Intel's moves to close up CPU firmware, and a quick state of the Deck.
Sponsored By:
Links:
Mike and Chris eat some crow as they change their tune on a recent spicy take.
Plus, new details about Microsoft's acquisition of Activision Blizzard are just too juicy to ignore.
Sponsored By:
Links:
We look at two new options that enable ANYONE to run a personal server at home or a small business.
Sponsored By:
Links:
Alex gives the new TrueNAS SCALE a go and hits a snag.
Plus the future Home Assistant update that has Chris so concerned he might stop updating forever.
Sponsored By:
Links:
The Linux secret behind the new TrueNAS release, Intel acquires a major Kernel contributor and our thoughts on Podman 4.0.
Plus why the Simula One VR Linux computer could be worth a serious look.
Sponsored By:
Links:
Mike has some huge news and busted wifi, Chris spent a weekend in the Metaverse, and why Microsoft has us both upset.
Sponsored By:
Links:
We put the sports car of Linux laptops to the test. Is it the multi-tasking machine it claims to be?
And an essential update on the show.
Sponsored By:
Links:
Canonical has a big week, why bcachefs looks like it's taking another step forward, and ChromeOS Flex for PCs is released.
Sponsored By:
Links:
After reminiscing about .Net's 20th birthday, Mike and Chris air IBM's hypocritically dirty laundry and marvel at Microsoft's 3D chess moves.
Sponsored By:
Links:
Linux is the master of small computers, and this week it’s going to the next level. We chat with the creator of the $15 Linux box and share some significant updates for the Raspberry Pi.
Special Guest: Brian Benchoff.
Sponsored By:
Links:
Sometimes we get a bit carried away; we dial it back and share some self-hosting long-timer insights.
Plus the networked way to Retro game, and more.
Sponsored By:
Links:
A last-minute kernel patch for the Steam Deck, why Intel is supporting RISC-V development, and we go hands-on with Plasma 5.24.
Sponsored By:
Links:
Mike makes a shocking admission, and Chris wishes he had a time machine.
Sponsored By:
Links:
There's just something off about Ubuntu these days, this week we put it all together.
Sponsored By:
Links:
System76 reveals a new tool to make Pop's desktop faster than the rest, and we break down that recent Btrfs defrag infinite loop bug.
Plus, a batch of essential project updates.
Sponsored By:
Links:
Microsoft's cold war with Apple is revealed in court filings this week, and Google thinks they've got the next hit on their hands, which sounds a lot like the old hit.
Sponsored By:
Links:
Brent's in the hot seat and plays to win 1000 Satoshis, while Wes adds a little color commentary.
Sponsored By:
We all take it for granted, but it is one of the best things about Linux. We share the history of the live CD, how it all got started, and the times it saved our bacon.
Sponsored By:
Links:
Alex has a new high-quality self-hosted music setup, and Chris solves complicated Internet problems.
Sponsored By:
Links:
The big disruption that looks like a bust, a security issue you need to pay attention to, and some great news for the Steam Deck.
Sponsored By:
Links:
The audience hits us in the face with some hard truths, and then we dig into Microsoft's fox-like moves to snatch up Activision Blizzard on "the cheap."
Sponsored By:
Links:
SUSE had an awkward week; we breakdown the very mixed launch of SUSE Liberty Linux.
Plus, we've cracked what's driving Linux Distribution adoption these days.
Sponsored By:
Links:
We explain SUSE Liberty Linux and contemplate why the community seems to be selecting distributions with newer kernels.
Sponsored By:
Links:
Emboldened by his success, Mike takes a victory lap. Little does he know it's all virtual.
Sponsored By:
Links:
Developers will still need to pay Apple a fee even if they use Stripe,etc. Google reduced their fee by 4% meaning there’s zero benefit.
This is a diabolical way to meet the letter but not the spirit of laws. World class legal judo.
We react to Microsoft gobbling up yet another game studio, chat about Crypto.com's recent $15M hack, the massive failure YouTube just admitted, and a few personal crew stories.
Sponsored By:
Links:
We make some last-minute changes to our server setup and catch up on a bunch of thought-provoking feedback.
Special Guests: Martin Wimpress and Neal Gompa.
Sponsored By:
Links:
Alex got some new devices for Christmas, and we set off to figure out how to integrate them into his network.
And Brent's tale of giving the gift of Jellyfin.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Our road trip machine is loaded up from solar to networking, the tech that made working, living, and recording from the road possible for 44 days and over 2,200 miles.
Sponsored By:
Links:
Fedora and Red Hat users are getting a web-based installer, and a new legal situation for Bitcoin smells like retro SCO FUD.
Sponsored By:
Links:
Was he justified? Our thoughts on the dev who corrupted libraries in NPM for millions of users with his political statement about free software.
Plus how Google blew a once-in-a-lifetime opportunity to control mobile messaging.
Sponsored By:
Links:
During our summer road trip to Denver we had the microphone's recording and captured some great moments.
Don't miss this exclusive look behind the wheels!
Sponsored By:
A new initiative uses open source to keep podcasting decentralized and add new features.
We chatted with Dave Jones behind the Podcast Index.
Special Guest: Dave Jones.
Sponsored By:
Links:
GnuPG has some great news, Libadwaita 1.0 has arrived and we share our thoughts, plus a big batch of updates from the Matrix project.
Sponsored By:
Links:
Mike has a significant moment of clarity and sets out on a new path for 2022. Meanwhile, Chris is just happy to be out of the woods.
Sponsored By:
Links:
It's a casual community hangout, and we spin the Wheel of Topics. From what Linux does worst, our thoughts on EndlessOS, Ubuntu Web Remix, QubesOS, Brent's adventures with JellyFin, and why Linux will ultimately dominate all operating systems in 20 years.
Sponsored By:
Our new server setup is bonkers, but we love it.
Sponsored By:
Links:
Some old friends of JB join Alex to discuss 3D printing.
Special Guests: chzbacon and Drew DeVore.
Sponsored By:
Links:
Mike finds a new normal and doubles down on what works. Chris meanwhile is stranded in the woods and is having a bit of a panic.
Sponsored By:
Links:
We do our best to predict what will happen in 2022, and own up to what we thought might happen in 2021.
Special Guests: Alan Pope, Drew DeVore, and Joe Ressington.
Sponsored By:
Links:
We kick off our annual predictions episode with what we got right and wrong this year and then attempt to predict what will happen in 2022.
Sponsored By:
Links:
We're both impressed by Rails 7 and how an old foe got us down again.
Sponsored By:
Links:
It's the second annual Unplugged Tuxies; our community votes on the best projects, distros, desktops, and services of 2021.
Sponsored By:
Big internal process improvements have resulted in a major new version of elementary OS hot on the heals of the previous release. Find out why 6.1 is a lot more than just a number.
Special Guest: Danielle Foré .
Links:
The nasty Log4Shell vulnerability isn't solved yet, this week saw a new round of attacks and patches.
Plus how the work to port Linux to the Apple M1 resulted in fixing a bug that impacted all Linux distros.
Sponsored By:
Links:
And people said they wouldn't help. This is intended for us.
Recent AWS outages sent Alex on a hunt to find more self-hosted alternatives, and Chris digs into the latest Home Assistant release.
Plus a frenzy of your excellent feedback and questions.
Sponsored By:
Links:
The broader software problem the Log4Shell vulnerability reveals, and the story of how Chris lit his Coder robe on fire... While wearing it.
Sponsored By:
Links:
We each try out the new Pop_OS! and Carl Richell from System76 joins us to get into the details.
Plus why we feel Pop might be the new Ubuntu.
Special Guest: Carl Richell.
Sponsored By:
Links:
The Log4Shell vulnerability is making waves this week; we'll explain why and break down how it works.
Plus, some good news for the Desktop and systemd-homed gets one step closer.
Sponsored By:
Links:
We peak in on one of the nastiest corporate moves in a while, and Chris has a big confession.
Sponsored By:
Links:
This was not the year of the Linux Desktop. We’ve been slacking on the mailbag, so we go on a feedback frenzy and answer some hard questions about desktop Linux.
Special Guests: Carl George and Martin Wimpress.
Sponsored By:
Links:
Taken from Monday's Coder live stream, Chris reacts to discovering that the city of Miami has its own crypto coin. As the conversation goes on it turns into a broader discussion about how cryptocurrency gets a bad reputation, and why that reputation is completely divorced from the reality of the technology.
Links:
Industry-changing open-source project releases, and why the new CentOS Stream 9 might be more noteworthy than you realize.
Special Guest: Carl George.
Sponsored By:
Links:
We try out a couple of very popular Docker GUI's and report back, and discuss our biggest Self-Hosted regrets.
Sponsored By:
Links:
Listen. No KVM is perfect BUT our customers tell us -- The Level1Techs KVMs are pretty darn good.
Mike visits Pallet Town and comes back with some SQLAlchemy performance wisdom to share. Meanwhile, struggling with a lack of performance, Chris has kicked the tires of his new M1 Max MacBook Pro and is ready to share his counter-narrative take on the new hardware.
Sponsored By:
Links:
The Director of EndlessOS joins us to respond to recent Flatpak criticism.
We take the opportunity to expand on the overall effort to solve Linux fragmentation.
Special Guests: Martin Wimpress, Neal Gompa, and Will Thompson.
Sponsored By:
Links:
Fedora's massive endorsement this week that went unnoticed, why RISC-V mobile devices might be getting near, and the significant change coming to a critical open-source tool.
Sponsored By:
Links:
Are Linux devs getting upset with the Python community? We weigh in on a nuanced issue. Plus the mass-mod resignation over at Rust, and Mike's thoughts on setting up a dev environment on Windows 11.
Sponsored By:
Links:
We revisit some old assumptions about the open-source Plex-alternative, Jellyfin. We each try it out, and along the way, gain a few insights about open source.
Sponsored By:
Links:
Just how severe is this DNS cache poisoning attack revealed this week? We'll break it down and explain why Linux is affected. Plus, the feature now removed from APT, more performance patches in the Kernel, and a big batch of project updates.
Sponsored By:
Links:
This week we unlock the Pitential of the Compute Module 4 and turn it into a dual gigabit router and Jellyfin server.
How far can we push it?
Plus, Alex shares his thoughts on the state of mobile operating systems and the challenges they are imposing on DIYers.
Sponsored By:
Links:
We get some spicy emails, dig into why Mike just picked up another Linux laptop, and then share our real thoughts on Web3.
Plus, how we met, and why the future is probably not so bright for Apple users long-term.
Sponsored By:
Links:
Can we live with openSUSE Tumbleweed?
We try three different builds and prepare ourselves for our journey into SUSE land. Our setups, what we liked, and what we still need to figure out.
Links:
A desktop from Linux past has a surprising update this week, AlmaLinux pulls ahead of the pack, and Canonical ships software for the Apple M1.
Plus, the new tech in SteamOS 3 that might make it a great desktop OS.
Sponsored By:
Links:
I made NVMe work today and decided it's time to properly install a distro ;)
Microsoft has a bunch of new goodies for developers, but Mike is becoming more and more concerned about an insidious new feature.
Sponsored By:
Links:
Is the true path to mastering Linux fully embracing the command line? Why it's time to change our mindset about the terminal.
Special Guests: Martin Wimpress and Neal Gompa.
Sponsored By:
Links:
This is about a third of the team. While we’ve adapted to remote work well, I miss full-company events and hope we can get back to those soon.
Significant changes at GitHub, Ubuntu starts work on a new desktop tool, why WirePlumber is a big deal, and we bust some Red Hat FUD.
Sponsored By:
Links:
Working: SMP, IRQs, IPIs, framebuffer console, DART, USB, USB-PD, I²C, GPIO. Next I'm looking at PCIe (WiFi & SD card reader).
Troubleshooting goes very wrong for Alex, and he puts his backups to the ultimate test.
Plus, monitoring your freezer in Home Assistant, building a self-hosted Notion alternative, and more.
Sponsored By:
Links:
After a little async Ruby chat and developer morality struggle, Chris explains how macOS Monterey has lapped Linux with a critical workstation feature.
Sponsored By:
Links:
We check-in with Fedora Project lead Matthew Miller on the state of the project, then conduct our exit interview with Fedora 34, and review Fedora 35.
What's new, what's changed, and what's broken. It's a Fedora special.
Special Guests: Matthew Miller and Neal Gompa.
Sponsored By:
Links:
New Raspberry Pi hardware has a few surprises, the most impressive things in Linux 5.15, and our reaction to classic functionality under consideration for removal from Fedora.
Sponsored By:
Links:
Chatting about the week's .NET news leads us into a blue-tinted tale of woe. When Microsoft taketh, they also giveth. But is it enough?
Plus, which MacBooks we did or did not buy.
Sponsored By:
Links:
We attempt a live production over Starlink, and dig into the secrets of this giant Linux network in space.
Sponsored By:
Links:
Major performance milestones are being hit with new code inbound for Linux, Plasma and GNOME desktops are set to run Wayland on NVIDIA's binary driver, and why the SFC's new GPL fight could have implications for you.
Sponsored By:
Links:
Local self-hosted video capture with AI object detection just got easy. Morgan joins us to detail his Frigate setup and its optional tight integration with Home Assistant.
Plus, our new favorite up time monitoring tool and an easy way to add Tailscale and other apps to OPNsense with community plugins.
Special Guest: Morgan Peterman.
Sponsored By:
Links:
Why mastering your development environment can be a tricky feat, and a server outage brought to you by the late 1990s.
Sponsored By:
Links:
We try out POP!_OS on the Raspberry Pi 4, and chat with its creator Jeremy Soller from System76.
Plus our thoughts on the perfect Linux laptop right now, and the clever initiative Valve just launched for the Deck.
Special Guests: Jack Aboutboul, Jeremy Soller, and Neal Gompa.
Sponsored By:
Links:
We cover what's special about Plasma's 25th-anniversary edition, chat with CloudLinux's CEO, and detail why Apple supporting Blender is good for all of us.
Plus, why we're worried Ubuntu is losing its charm for developers.
Sponsored By:
Links:
Mike just launched the secret project he's been working on for months and shares all the details.
And Chris has a surprise for the end of the show.
Sponsored By:
Links:
Wimpy stops by with a new tool that will change your virtualization game, and we share our thoughts on Ubuntu 21.10 and take the flavor challenge.
Special Guest: Martin Wimpress.
Sponsored By:
Links:
Apple M1 Linux development reaches a key milestone and boots a useable desktop; Ubuntu reveals a new product, and the secret SUSE project that leaked this week.
Plus, the essential RISC-V code landing in the Linux kernel.
Sponsored By:
Links:
A lot is changing in Home Assistant land, and it's almost all for the better; we break down the essential items. Chris gets wired about energy monitoring and shares his journey to get miss-formated power stats working in Home Assistant's new Energy dashboard.
Plus, off-line YouTube backup, backing up iCloud photos, Tailscale feedback, and more.
Sponsored By:
Links:
It's the worst time ever to upgrade or buy a new PC, so we cover our favorite tips for getting the most out of your current hardware. Then we pit a 2014 desktop against a 2021 laptop and find out if our old clunker can beat the Thinkpad.
Special Guests: Alan Pope, Christian F.K. Schaller, Jack Aboutboul, and Martin Wimpress.
Sponsored By:
Links:
It's final push time on a big project for Mike, but Chris is the one who is exhausted. Still we've got some new insights into testing and thoughts on an emerging category of developer.
Plus, why the hermit developer is alive and well, some important feedback, and a Python tip.
Sponsored By:
Links:
Our virtual LUG of experts had a lot to say about the Linus Tech Tips Switch to Linux challenge. We recap what is going on, how it could go wrong, and what we hope happens.
This release is an excerpt from our LINUX Unplugged live stream on Tuesday, October 5th, 2021.
Special Guests: Alan Pope, Martin Wimpress, and Neal Gompa.
Links:
Why Linus believes keeping Linux fun is critical, the massive investment Fedora is about to make in video, and why we suspect Cloudflare's R2 service will make Amazon squirm.
Plus a low key update to the Raspberry Pi 4, and the changes in the new Docker Compose 2.0.
Sponsored By:
Links:
Mike's falling in love with FastAPI and gives us a hint at the next project he's building.
Plus, our thoughts on employee machine monitoring and building a transition plan when you are ready to quit your job.
Sponsored By:
Links:
Activist employees told the publication that Cook answered only two of a number of questions they wanted to ask. The report fails to detail what those two questions were, but notes the Apple chief did comment on pay equity, at least in part.
Sometimes things go wrong; this week, we admit we've got a problem.
Plus new details about the Steam Deck everyone has missed, and an old friend stops by the show with an update.
Special Guest: Danielle Foré.
Sponsored By:
Links:
Canonical gives Linux admins a lucky break, the details on Android's slow shift to an upstream Kernel, a breakthrough for Linux gaming, and our take on GNOME 41.
Plus how AlmaLinux just rounded out their offering.
Sponsored By:
Links:
Alex is abroad and uses the opportunity to build out not one but two ultimate self-hosted off-site servers. We share the hardware, software, and networking details.
Plus, how Chris built a Nest-type thermostat using parts he already had.
Sponsored By:
Links:
We’ve really had a week, one of those makes ya feel old kinda weeks.
Sponsored By:
Links:
A serious problem is brewing in Desktop Linux that hasn't impacted end users yet, but will soon. We break down why distribution makers are getting upset and explain what's next.
Plus, an update on Matrix and the recent upgrades we made to our server.
Special Guests: Brent Gervais and Joshua Strobl.
Sponsored By:
Links:
Desktop Linux graphics are about to get a significant investment, Mozilla and Canonical work together on a Firefox Snap, and some key new insights into the Linux port to Apple’s M1.
Sponsored By:
Links:
The more you read into it, the worse it gets.
At least we have new devices to keep us happy.
Sponsored By:
Links:
Why it might be time to re-think who is and who is not a Linux user, plus we do a reality check on the state of Linux phones.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Linus Torvalds attempts to get kernel developers to clean up their code, the performance regression that almost shipped, and the major production struggle Red Hat acknowledged this week.
Plus, we try out Microsoft’s Linux distro, and some thoughts on our editorial style.
Sponsored By:
Links:
We chat with Matt from Adventurous Way about the home automations that have improved his quality of life, the clever way he manages their off-grid rig, and the new smart home project he's just kicking off.
Special Guest: Matt from Adventurous Way.
Sponsored By:
Links:
We are coming in hot, literally. It's a day of spicy takes.
Sponsored By:
Links:
We try out what might be the most fun Linux distribution around. It started as a laugh, but now we’re in love.
Plus, the reunion road trip hits a bump, some community news, feedback, picks, and more.
Special Guest: Brent Gervais.
Sponsored By:
Links:
SUSE's new era kicks off this week, CentOS users get some relief, and how Docker managed to piss off their users.
Plus RISC-V gets a surprising benefactor, and the kernel feature we never thought would get merged that was just approved by Linus.
Sponsored By:
Links:
Recent reports would have you believe Apple has made significant concessions to developers. Don't be fooled! We read between the lines and break down what is and what is not changing.
Plus, some thoughts on environmental PCs and the question we hate the most.
Sponsored By:
Links:
A surprise server outage at the studio requires we jump into action with a few last-minute solutions and deploy one of our favorite open-source tools.
Plus some community news, handy picks, emails, and more. It's a special edition of the Unplugged show.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Why the Linux kernel received so much mainstream attention this week, some of our favorite open-source projects get great updates, and why we're concerned about Linux Foundation members transferring innovation from Linux to closed source software at an industrial scale.
Sponsored By:
Links:
We report back on our DeGoogle challenge and read your top Google Alternative apps and services.
Plus, a new way to locally capture network cameras, our reaction to Kobol pulling the plug, and more.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Things are worse than we ever thought, but that doesn't prevent us from taking a victory lap.
Plus, Chris levels up his Mac skillz and gets his MacBook Pro under control.
Sponsored By:
Links:
We share some stories from our Denver meetup, the strange reason we found ourselves at a golf course, and some news you should know.
Special Guest: Brent Gervais.
Sponsored By:
Links:
What’s coming next for the Linux desktop, and some exclusive news from System76.
Plus, we try out Element’s new voice messages and share our thoughts.
Sponsored By:
Links:
Chris makes a big mistake on the road, and Mike drops some reality-based sage wisdom.
But it's really all just a ruse to get you to email the show.
Sponsored By:
Links:
Live from Denver, we chat with old friends and new. We get the inside scope on what has been going on at System76, and what's coming up next.
Plus we catch up with a few members of our crew, and find out what Linux tech they're loving these days.
Special Guests: Aaron Honeycutt, Alex Kretzschmar, Brent Gervais, Carl Richell, Cassidy James Blaede, chzbacon, and Ian Santopietro.
Sponsored By:
Links:
What's new in Debian 11, and an example of the Linux Foundation funneling free software to their corporate friends.
Plus, why Western Digital might be to thank you for your next ultimate Linux workstation.
Sponsored By:
Links:
We discuss the ramifications of Apple's local photo scanning announcement on your privacy, why everything seems to be a subscription these days, and a new challenge for the show.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Is there a secret motive behind Apple's announced plans to scan iMessage and iCloud Photo Library content?
Plus how using a common SDK just cost Zoom $85M.
Sponsored By:
Links:
They turned a trillion dollars of devices into iNarcs—without asking.
Big things are happening in the world of WireGuard, Jim Salter joins to catch us up.
Plus we chat with Daniel Foré and Cassidy James Blaede about the just released elementary OS 6.
Special Guests: Brent Gervais, Cassidy James Blaede, Daniel Fore, and Jim Salter.
Sponsored By:
Links:
Since the announcement of the Steam Deck, things around Linux have started changing, including some big items this week.
Plus how PipeWire will improve day-to-day desktop life, Google's push for more kernel investments, and a lot more.
Sponsored By:
Links:
Big promises are being made in Ruby land, Tech Crunch says Open Source is dead, and we have thoughts to share about both!
We also discuss Google's Time Crystals. They have the power to fundamentally change our lives, but what the heck are they?
Sponsored By:
Links:
Yabba Dabba Distro! Run every major distribution on one native host. How we hijacked a Fedora install and turned it into the ultimate meta Linux box.
Plus Valve and AMD team up to improve Linux performance and the duct-tape solution holding our server together.
Special Guests: Brent Gervais and paradigm.
Sponsored By:
Links:
Microsoft's next kernel patch fixes a long-standing Linux issue, we'll share the details. Plus ChromeOS's next power user feature you haven't heard of, and Valve's broader plans that came into focus this week.
Sponsored By:
Links:
We discuss Chris's latest wall-mounted tablet solution for Home Assistant and several scripts to pimp your Plex setup.
Join us for a very special birthday episode as we celebrate our 50th.
Sponsored By:
Links:
Mike shares his adventures coding while riding Amtrak, Chris is trying to get DOS running while he still can, and many of you wrote in sharing your concern for GNOME.
Sponsored By:
Links:
We try to pull off a show while recovering from an epic server crash. Then we build the ultimate remote Linux desktop—in the cloud!
Sponsored By:
Links:
We share the facts about a recent systemd vulnerability, the new details we've learned this week about the Steam Deck, and then dig into the reviews of the Framework Laptop.
Plus, how hard is it to port Linux software to Fucshia? We get the answer from Google's Adam Barth.
Sponsored By:
Links:
Has Microsoft figured out a way to invalidate the GPL? We're skeptical.
Plus, the Gnome project says the traditional desktop is dead, and extensions are niche. Do we agree?
Sponsored By:
Links:
Could the Steam Deck mean fewer native Linux games? We chat with prolific game developer Ethan Lee and get his perspective on the negative impacts of the Deck.
Plus, our thoughts on how Valve might successfully ship Arch to consumers, a batch of feedback, and more.
Special Guest: Ethan Lee.
Sponsored By:
Links:
Steam Deck looks impressive; we cover the details you care about and one aspect that concerns us.
Plus, how Microsoft just gave a boost to the Linux Desktop and more.
Sponsored By:
Links:
Updates gone wrong, surprise hardware failures, and flooding out all our electronics in a single go. We've got a lot to catch you up on.
Sponsored By:
Links:
It seems AI isn't replacing developers just yet, and why we think you shouldn’t get too comfortable.
Plus the almost impossible story of how Mike defeated another laptop.
Sponsored By:
Links:
Have you noticed the Linux news has gotten a little weird? Michael Tunnell joins us to break down the changes we've observed over the last year.
Plus, we set up private and secure location tracking and tell you how and why.
Special Guest: Michael Tunnell.
Sponsored By:
Links:
Open Source's best hope for alternatives to Microsoft and Google gets a significant update this week, and we cover a plethora of new goodies coming to a Linux near you soon.
Plus, our take on the Audacity fork drama and the milestone reached this week that none of us have been looking forward to.
Sponsored By:
Links:
Has Google already started its decline? Our surprising take.
Plus the trouble with Co-Pilot, and a lot more.
Sponsored By:
Links:
Linux server admins don't know where to turn next; how the cult of personality might be shaping Linux's most important market.
Special Guest: Jack Aboutboul.
Sponsored By:
Links:
We try out Pop!_OS 21.04 and share our thoughts on the COSMIC desktop and our reaction to Audacity’s new troubling privacy policy.
Plus the good, the bad, and the impressive in the new Linux 5.13 release.
Sponsored By:
Links:
Tuya shocks us by announcing native Home Assistant support, we have an update on a smart doorbell Ring alternative, and we tell all about how PiKVM just levelled up in awesome.
Special Guest: Morgan Peterman.
Sponsored By:
Links:
Mike's got some strong feels about his new system, and Chris spent a week with Windows 11. And that's not even scratching the surface. It's a wild one, with some hard truths, so buckle up.
Sponsored By:
Links:
Is Fuchsia a risk to Linux? We try out a cutting-edge Fuchsia desktop and determine if it is a long-term threat to Linux.
Plus, have we all been missing the best new Linux distribution? We give this fresh distro a spin and report.
Sponsored By:
Links:
The news this week that pushes Linux ahead in the enterprise, the challenges Windows 11 might bring, and we go hands-on with the new Debian-based TrueNAS SCALE.
Plus, our thoughts on WD Live users getting their data wiped and Rocky Linux's gold master.
Sponsored By:
Links:
Big Tech's punishment train has been en route for years, but now that it's almost arrived, are we getting onboard?
Plus Mike's recent tech woes and Chris' special surprise waiting for him in the studio.
Sponsored By:
Links:
Is it possible to have Arch’s best feature on other Linux distros? We attempt it and report our findings. Plus our reaction to NVIDIA’s beta Wayland support–is this the milestone we’ve been waiting for?
Sponsored By:
Links:
Linux's résumé got a nice boost this week; why Google is paying for more kernel development, and how CloudLinux might be pulling ahead of the CentOS pack.
Plus, our thoughts on Steam possibly coming to ChromeOS and the game-changing feature coming to ZFS.
Sponsored By:
Links:
We take a look at a self-hosted TeamViewer alternative, give you our take on some Home Assistant drama and discuss the effects of a new crypto coin on hard drive prices.
Sponsored By:
Links:
We get a bit skeptical about Stripe Identity, how it works, and precisely why we don't like some of their privacy trade-offs.
Plus, a tool we're calling "game-changing" that probably makes anyone a master developer.
Sponsored By:
Links:
We revisit the seminal distros that shaped Linux’s past. Find out if these classics still hold up.
Plus the outrageous bounty on a beloved Linux desktop app.
Special Guest: Gary Kramlich.
Sponsored By:
Links:
The premier Linux desktops get some futuristic new features, and we break down the seven-year-old vulnerability in your Linux box revealed this week.
Plus the critical kernel feature that lacks funding, and our take of helloSystem, a FreeBSD-based macOS alternative.
Sponsored By:
Links:
Our takes on the important bits from Apple's WWDC 2021 keynote and State of the Union.
None of the fluff, just the stuff the mattered.
Sponsored By:
Links:
We discuss old and new ways to manage, organize, index, and search your photo collection. It's our favorite Google Photo's alternatives.
Plus Chris' hands-on review of System76's customizable Launch keyboard.
Special Guests: Alex Kretzschmar and Brent Gervais.
Sponsored By:
Links:
An old Linux distro gets a new trick, and all Linux users get a few excellent quality of life updates.
Plus, the new initiative that has Apple, Google, and Microsoft all working together.
Sponsored By:
Links:
We'll share how we deployed a painless, Self-Hosted Pastebin replacement, and what we like the most about it.
Plus Chris enters the "No Change Zone" with a Project Off-Grid Update.
Sponsored By:
Links:
Mike's unique take on the bold promises made at MS Build this year, and the one item he REALLY wants announced at WWDC next week.
Plus a batch of your emails, a little proxy war, and more!
Sponsored By:
Links:
We’re joined by a special guest who’s built his very own Linux battle bus. We get the technical details on how Linux is at the core of this open road machine.
Special Guest: Aaron Bockelie.
Sponsored By:
Links:
Our reaction to the new Freenode developments, and Audacity's latest shock to the community.
Plus Pwned Passwords goes open source, the public release of Fuchsia, and Valve's rumored Linux handheld.
Sponsored By:
Links:
We both fall for a new fancy keyboard; then we get philosophical about free software's never-ending quest to conquer mobile.
Sponsored By:
Links:
From our origins with Linux to preparing your home LAN for a solar storm, it’s an Ask us Anything special edition!
Sponsored By:
Links:
Our take on the Freenode exodus, Linux Apps going public in ChromeOS, and Red Hat's desktop hiring spree.
Plus the new Firefox security features in beta, great news for F-Droid, and Apple transfers CUPS to a new home.
Sponsored By:
Links:
Join us for a chat with Paulus, the founder of Home Assistant, as we look to the project's future, hardware devices, new standards, and more.
Special Guest: Paulus Schoutsen.
Sponsored By:
Links:
After Chris gets a reality check from Mike, the guys answer some emails and admit a cold hard truth.
Plus our reaction to the creation of a Linux Subsystem for Mac.
Sponsored By:
Links:
Tim Canham, Mars Helicopter Operations Lead at NASA’s JPL joins us again to share technical details you've never heard about the Ingenuity Linux Copter on Mars. And the challenges they had to work around to achieve their five successful flights.
Special Guest: Tim Canham.
Sponsored By:
Links:
Our reaction to System76's Launch keyboard, Google's new Fuchsia contributor that's a big name, and the repairable Linux Laptop with a few new tricks.
Sponsored By:
Links:
"It was a completely innocent mistake that ended up doing the announcing for us... in the worst way imaginable."
Chris struggles with his nature, while Mike shares some sage developer advice that everyone should hear before using a platform like AWS.
Then we react, strongly, to Docker charging to skip updates.
Sponsored By:
Links:
“30% was, as Epic’s integrate documents will show, industry standard."
We’re taking a look at an underdog distro. We may have found a diamond in the rough with a few tricks up its filesystem.
Plus our review of the ODROID-Go Super an Ubuntu-powered handheld, and our tools for laptop battery health.
Sponsored By:
Links:
We start you off with the headlines that matter this week, then share our thoughts on Audacity's new owners proposing user tracking.
Sponsored By:
Links:
--enable-features=UseOzonePlatform --ozone-platform=wayland
.Plex announces some big plans that make us a little nervous, Alex solves Chris's tablet performance woes, and we chat about Prometheus.
Plus, our thoughts on Duplicati alternatives and more.
Sponsored By:
Links:
From adventures in learning, a recipe for great collaborations, to creativity and problem-solving in tech. It's a deep dive chat with Wes Payne.
Other topics include:
Note: Brent's chat with Wes originally aired as part of an excellent series of Brunchs.
Sponsored By:
Links:
It's episode III, Return of the Email. Everyone says never host your own email, so we're doin it.
We just have one last job to complete.
Sponsored By:
Links:
A spicy mix of distro news, including Rocky Linux's first milestone release, and our follow-up on the University of Minnesota’s kernel ban.
Plus a major step in Apple M1 GPU support.
Sponsored By:
Links:
Mike has a few stories to share, but more importantly a very hard lesson he's going to make sure you damn sure you learn.
And Chris has a breakthrough after spending the weekend with WSL's GUI Linux apps.
Sponsored By:
Links:
The new release of Fedora has more under the hood than you might know. It's a technology-packed release, and nearly all of it is coming to a distro near you.
Plus the questions we think the University of Minnesota kernel ban raises, and more.
Sponsored By:
Links:
The University of Minnesota has been banned from the Linux kernel.
We'll share the history, the context, and where things stand now around the controversial research that led to the ban.
Plus Ubuntu 21.04 is out, and we try WSL's new GUI Linux app support.
Sponsored By:
Links:
Alex has a new trick for local and remote backups, and shares his thoughts on Synology's DS series NAS.
Plus Chris' master plan to save everyone's batteries.
Sponsored By:
Links:
Our thoughts on the hardware Apple announced this week, and if any of it is suitable for professional workloads.
Plus your feedback, a few random stories, and more.
Sponsored By:
Links:
You should never host your own email, so we’ve gone and done just that. What we learned trying to build an email server in 2021.
Plus our take on Ubuntu 21.04, become a master of your schedule with our pick, and a Garage Sale update.
Sponsored By:
Links:
The major shift in the Linux landscape this week that was hardly noticed, and our thoughts on COSMIC from System76.
Plus Google adds its weight behind Rust in the Linux Kernel, and the new security features landing in WSL2.
Sponsored By:
Links:
We visit an alternate reality where Epic wins in their fight against Apple, COBOL reigns supreme, and the halls of great Jedi Temple are lined with Object-C developers.
Sponsored By:
Links:
Do as we say, not as we do. This week we're setting off to host our own email. We'll cover the basics, what's we're using, and why.
Plus an update on Jupiter Broadcasting going independent, community news, and more.
Special Guest: Martin Wimpress.
Sponsored By:
Links:
Don't buy that M1-powered Apple machine just yet, solving Wayland-driven fragmentation, and why Firefox is about to get an upgrade on Linux.
Plus the imminent problem KDE solved this week, and more.
Sponsored By:
Links:
A record is broken, a life goal is achieved, and why we are going long on Linksys.
Special Guest: Jake Howard 🍊.
Sponsored By:
Links:
After a decade long fight, no one feels like a winner.
Plus, the tail of an embarrassing switch gone wrong, and our thoughts on Oracle vs. Google finally coming to an end.
Sponsored By:
Links:
Old friends and new join us on a quest to celebrate four hundred episodes.
Special Guests: Alex Kretzschmar, Corry Clinton, Drew DeVore, and Graham Morrison.
Sponsored By:
Links:
The first CentOS clone is out, but it's the second part of their announcement that might be the most important.
Plus our reaction to SCO reigniting their decades-long fight with IBM and Red Hat, and the big news in GTK-land you might have missed.
Sponsored By:
Links:
Ruby has gone off the rails this week, and Wes is here to explain what’s happened.
Plus emails into the show send Chris into a full Linux panic.
Sponsored By:
Links:
Lutris developer Mathieu Comandon joins us to share his perspective on the uncomfortable issues facing Linux desktop developers.
Plus the tech behind Shells.com, community news, feedback, and more.
Special Guests: Mathieu Comandon and Zlatan Todorić.
Sponsored By:
Links:
GNOME 40 is out and we chat with the project’s Executive Director about the technical and visual improvements in the new release.
Plus the facts around RMS’s return to the FSF board, and our analysis of the situation.
Special Guest: Neil McGovern.
Sponsored By:
Links:
Special guest Jeff Geerling tells us how he got 16 drives connected to one Pi.
Plus his thoughts on automation, self-hosting, and more.
Special Guest: Jeff Geerling.
Sponsored By:
Links:
Some sage developer wisdom is overshadowed by Mike's mad stonk game, while Chris worries Apple's secret M1 tricks charming Linux users.
Sponsored By:
Links:
We share our favorite networking trick of all time, and then chat with the blokes behind a new WireGuard-powered service.
Plus our reaction to RMS's return to the FSF, some big project updates, picks, and more!
Special Guests: Dalton Durst and Daniel Fore.
Sponsored By:
Links:
Mobile Linux OSes are looking better than ever this week, a new effort to keep legacy applications running on Linux, and the signals indicating a Fuchsia release is nigh.
Plus a PSA for GNOME users, and a recently improved tool for the Raspberry Pi.
Special Guest: Dalton Durst.
Sponsored By:
Links:
Mike goes straight for the attack and hits Chris where it hurts, then it's problem-solving time.
Sponsored By:
Links:
We break down the next-level features coming to a Linux near you in just a few weeks.
Sponsored By:
Links:
The A-Team assembled to make open source more trustworthy, why we might be about to find out how much SUSE is worth, and some essential project updates.
Sponsored By:
Links:
We react to Home Assistant password shaming us and then reflect on the OVH fire while attempting to solve a "growing" cloud problem.
Sponsored By:
Links:
Mike reveals his secret project to Chris, who has several probing questions.
Sponsored By:
Links:
Tim Canham, the Mars Helicopter Operations Lead, shares Linux’s origins at JPL and how it ended up running on multiple boxes on Mars.
Plus the challenges Linux still faces before its ready for mission-critical space exploration.
Special Guest: Tim Canham.
Sponsored By:
Links:
Canonical reveals long-term Ubuntu plans that you might have missed, and the "double ungood" warning from Linus this week.
Sponsored By:
Links:
After we pine about the way things used to be, Mike shares why he is developing a fondness for C++.
Sponsored By:
Links:
It's our worst idea yet. We share the password to our brand-new server and see who can own the box first. Whoever wins gets a special prize.
Plus how Archive.org uses Linux, and more.
Special Guests: Brent Gervais, Carl George, and Neal Gompa.
Sponsored By:
Links:
Red Hat is still in damage control mode, a new hacker laptop called Framework makes bold promises, and what Google is spending money on in the Linux kernel.
Plus why we've recently switched back to Firefox, and more.
Sponsored By:
Links:
Our favorite LastPass alternative, why more boxes might be better than one, and we confess to an undying love.
Sponsored By:
Links:
We open the robe and share some vintage career origin stories.
And we save Mike's soul by answering a few emails.
Sponsored By:
Links:
After all these years, what's made us stick with Linux?
Plus the commitment just made by the GNOME team, and some new tools that are changing our game.
Special Guest: Drew DeVore.
Sponsored By:
Links:
We share some exclusive details about the Linux-powered gear that just landed on Mars, and the open-source frameworks that make it possible.
Plus a major new feature coming to a Linux distro near you.
Sponsored By:
Links:
Mike crosses over to report back from the other side, and Chris is along for the ride.
Sponsored By:
Links:
Something special has been achieved this week, a new benchmark in the desktop experience. We dig in.
And why everyone will be looking for an open-source LastPass alternative.
Special Guests: Brent Gervais, Neal Gompa, and Philip Muller.
Sponsored By:
Links:
Microsoft and Ubuntu's relationship is under a new spotlight this week.
Plus our rundown of the feature-packed 5.11 release, a Fuchsia surprise, exciting hardware news, and more.
Sponsored By:
Links:
Alex shocks Chris with his latest project, then lays down some quick-fire picks.
Plus what's wrong with OPNsense's Wireguard setup?
Sponsored By:
Links:
After reflecting on more than 8 years of the show, we get into solving problems and taking names.
Plus a couple of special announcements, and some Hoopla we've just got to talk about.
Sponsored By:
Links:
Plus we chat about the issues new developers face entering a market dominated by App stores.
Then – How platform vendors are feeling the need to reclaim greater control from developers.
Which distro is best for friends and family? We have a unique take on this common question.
Plus new insights into the future of CentOS, and Chris falls in love with a 14-inch screamer.
Special Guest: Carl George.
Sponsored By:
Links:
The story behind a Microsoft repo shipping in Raspberry Pi OS, Canonical updates a special version of Ubuntu, and a couple of milestones the Linux world hit this week.
Sponsored By:
Links:
Microsoft is working on a bot that can deepfake you real good, and we have thoughts.
Plus some insights into testing, and a special friend returns to the show.
Sponsored By:
Links:
We try out GNOME 40 and its new workspace layout. Who we think this works well for, and who might want to avoid it.
Plus Wimpy, Ubuntu's Desktop lead, chats with us about his future after Canonical.
Special Guests: Carl George and Martin Wimpress.
Sponsored By:
Links:
Google removes Matrix chat-client Element from the Play store, sudo has a major flaw with a long-tail, and Rocky Linux gets a boost.
Sponsored By:
Links:
We discuss recent Home Assistant security news, and how we think the project could improve.
Plus a bunch of follow up, emails, and more!
Note: This episode was recorded before the recent second Home Assistant vulnerability
Sponsored By:
Links:
The guys can't help but laugh when they hear the test tests one well-known online giant is testing. You might say they get a bit testy.
Sponsored By:
Links:
Successful open-source projects all seem to struggle with one major gorilla. Who it is, and what their options are now.
Special Guests: Drew DeVore and Jonathan Corbet.
Sponsored By:
Links:
Why we don't think Red Hat's expanded developer program is enough, our reaction to Ubuntu sticking with an older Gnome release, and a tiny delightful surprise.
Sponsored By:
Links:
Is performance the ultimate requirement? What amount of compromise are we comfortable with?
Sponsored By:
Links:
We showcase a tool that will change your Linux game.
Plus our thoughts on the recent Btrfs FUD, a bunch of feedback, and a handy pick.
Sponsored By:
Links:
Impressive updates for some beloved open source projects, and AlmaLinux—a leading CentOS alternative—is born.
Plus Google's surprise for Chromium users, and we go hands-on with Podman's docker-compose support.
Sponsored By:
Links:
Our favorite Google Docs killer with markdown support has a big update. We explain how we host it and why we love it.
Plus Chris reviews the Home Assistant Blue.
Sponsored By:
Links:
Mike and Chris discuss the recent JetBrains FUD and ponder the impact of recent AWS policy enforcement.
Plus a bunch of cool setups sent in by our audience.
Sponsored By:
Links:
Wendell joins the show to cover the state of graphics on Linux, and what Intel has in store for the future.
Plus why we're excited about PeerTube again, some feedback, and more.
Special Guest: Wendell Wilson.
Sponsored By:
Links:
We explain the recent Qt upset, and then go hands-on with the new PeerTube release.
Plus Wendell from Level1Techs joins us to discuss his thoughts on porting Linux to the Apple M1.
Special Guest: Wendell Wilson.
Sponsored By:
Links:
Their lives change forever when they meet a handsome, tormented, laptop.
Sponsored By:
Links:
We have some strong opinions about the state of openSUSE Tumbleweed. We've secretly been running it for the past week, and share our experience.
Plus Microsoft's path to dominating the Linux desktop becomes clear.
Sponsored By:
Links:
A lot of open source development was packed into 2020, we recap some of the standout moments you should know about.
Sponsored By:
Links:
Alex reveals the culmination of five years of work into the Perfect Media Server.
And we respond to a ton of feedback.
Sponsored By:
Links:
Services and subscriptions get a bad wrap, so we flip the script and talk about the ones we're grateful to pay for.
Sponsored By:
Links:
Friends join us for a special edition of the show to review last year's predictions, and forecast the future.
Special Guests: Alan Pope, Alex Kretzschmar, Brent Gervais, Drew DeVore, Joe Ressington, and Neal Gompa.
Sponsored By:
Links:
Our annual predictions episode kicks off with a review of what we got right and wrong for 2020, and then we speculate wildly about what could happen in 2021.
Sponsored By:
Links:
Mike details his favorite python tools and his tricks for performance concerns.
Plus a bunch of workspace improvment ideas, feedback, and more.
Sponsored By:
Links:
We reveal the winners of the 2020 Tuxies.
We've tallied the audince votes for the best open source projects, desktops, distros, editors, games, and much much more.
Special Guests: Drew DeVore and Nate Graham.
Sponsored By:
Links:
Another Google project meets an untimely demise, but we find the silver lining.
Plus new Matrix goodies, why AWS is investing in Blender, and more.
Sponsored By:
Links:
Chris discovers a networking miracle, Alex has been playing with electrics, and we review the Wyze Cam 3.
Sponsored By:
Links:
Mike recalls how he accidentally converted his development shop into a Python house, and Chris experiments with his Minimum Viable Robe.
Sponsored By:
Links:
It's light as a feather, fast as hell, and everything is upstream. The ThinkPad X1 Carbon ships with Fedora, and this week we put it to the test.
Plus community news, feedback, and a great pick.
Sponsored By:
Links:
We explain the major changes to CentOS this week and break down the top four criticisms.
Plus Google makes their Fuchsia intentions a bit more clear, and why Linux 5.10 is a BIG deal.
Sponsored By:
Links:
Time to talk business, and Chris reveals his biggest mistake since going independent.
Sponsored By:
Links:
Red Hat just made big changes to how CentOS works, we breakdown the good, and the bad.
Plus how you can DIY a cheap IP KVM using a Raspberry Pi.
Special Guests: Alex Kretzschmar and Hector Martin.
Sponsored By:
Links:
Desktop Linux users saw a lot of new features land this week, and SUSE might just have a new cloud-winning strategy.
Plus Michael Larabel from Phoronix joins us to discuss the state of Linux hardware support in 2020.
Special Guest: Michael Larabel.
Sponsored By:
Links:
Alex puts the fantastic-looking, ARM-powered NAS known as the Helios64 to the test.
Plus feedback, and more.
Sponsored By:
Links:
After we geek out about keyboards, we answer some feedback and take a dip in the Rust lust.
Sponsored By:
Links:
A problem that just kept getting worse and worse. What it was, and why it led us to "check in" on EndeavourOS.
Plus some important community news, handy picks, feedback, and more!
Sponsored By:
Links:
What caused the recent major AWS outage, the breaking changes that just arrived upstream, and a new mail client for Linux.
Plus our reaction to Microsoft's Android subsystem that's in the works.
Links:
Mike buys a laptop live on air while Chris worries about the turkey.
Links:
We have the coolest new retro tool of the year, that will turn you into a Linux powered spy.
Plus the changes coming to Fedora, and what GNOME is focusing on next year.
Sponsored By:
Links:
The details behind youtube-dl's return to GitHub, our thoughts on the rumored SUSE IPO, and our concerns with Servo's new home.
Links:
With rage in our hearts, we proclaim a Self-Hosted Google Photos replacement, and the only way to self-host your email.
Plus our tips to manage and stream audiobooks.
Sponsored By:
Links:
The guys deploy their sage wisdom to answer your age-old questions and solve why the latest macOS is less appealing than ever to developers.
Plus our thoughts on youtube-dl's return to GitHub.
Sponsored By:
Links:
We review the Dell Precision 5750, a born and bred MacBook killer that runs Linux.
Plus a nasty reminder of how closely Apple monitors its users, and their fatal flaw that we think is outrageous.
Links:
The Ubuntu bug you need to patch, PayPal's Bitcoin support goes live, and a breaking change inbound to systemd.
Plus the Linux tech Greg KH is most excited about, and more.
Links:
Our first reactions to Apple's ARM event, how these new systems will impact developers, and if we're buying one.
Sponsored By:
Links:
We round up our favorite tweaks to the desktop, and apps that make it great.
Plus some highlights from Arch Conf, and our reaction to Mint finally fixing their Chromium problem.
Special Guest: Drew DeVore.
Sponsored By:
Links:
We review the Raspberry Pi 400. Then discover new features coming to Linux powered Dells.
Plus an important Let's Encrypt update, and the next billion-dollar tech coming to Linux.
Links:
We have a philosophical debate on cloud vs local and Alex experiences full-blown Americana this Halloween.
Plus how Chris built the most reliable and high-performance mobile internet setup possible in his RV.
Sponsored By:
Links:
Chris attempts a Lizard intervention and gets sucked into Mike's Green tinted data center paradise.
Plus our thoughts on the Raspberry Pi 400, and Apple's secret weapon.
Sponsored By:
Links:
Apple Silicon Macs Expected to Debut.
Why we think the new Raspberry Pi 400 is just the beginning.
And we chat with the CTO of the Uno Platform, a new way to bring native apps to Linux.
Chapters:
00:00:00 Pre-show
00:01:01 Intro
00:02:23 Meet the Raspberry Pi 400
00:11:21 Manjaro Update
00:16:59 State of Linux Gaming
00:23:11 GNOME 40
00:27:36 Building Native Apps on Linux
00:48:16 Housekeeping
00:50:05 Feedback
00:58:47 Pick
01:04:23 Post-show
Special Guest: Jérôme Laban.
Sponsored By:
Links:
A RISC-V development PC is in the works, we have the details and try to set expectations.
Plus what's new in Fedora 33, and an important youtube-dl update.
Sponsored By:
Links:
Microsoft is making aggressive moves to court more and more developers. We put on our analyst hats and lay out the hard cold truth.
Plus our trouble with Gnomes, your feedback, and martinis on the moon.
Sponsored By:
Links:
Fedora 33 is a bold release, and we’ve put it through the wringer. We tell you what’s great, and what you should know before diving in.
Plus our thoughts on the bigger problem exposed by the youtube-dl takedown.
Chapters:
00:00:00 Pre-show
00:03:12 Intro
00:04:40 New LTS Kernel
00:07:16 Pop!OS 20.10
00:08:47 The youtube-dl Problem
00:29:00 Why 1Password Matters
00:34:52 Housekeeping
00:37:09 Fedora 33 Review
00:56:44 Feedback
01:05:04 Picks
01:08:21 Post-show
Special Guests: Brent Gervais and Neal Gompa.
Sponsored By:
Links:
Ubuntu 20.10 is out, with official Raspberry Pi 4 desktop support. We try it out and report back. And our thoughts on the youtube-dl takedown.
Plus Edge is out for Linux, and PayPal gets bitcoin fever.
Sponsored By:
Links:
Chris gets left out in the cold after a Home Assistant glitch, and Alex puts a big batch of USB hard drives to the test
Plus a great pick for you pack rats, feedback, and more.
Sponsored By:
Links:
It's confession hour on the podcast, and your hosts surprise each other with several twists and turns.
Sponsored By:
Links:
We put the new Ubuntu 20.10 to the test, and chat with System76's Mechanical Engineer to get the secrets of the new Thelio Mega.
Plus some important community news, feedback, picks, and more.
Chapters:
0:00 Pre-show
1:37 Intro
2:55 Edge for Linux
7:29 Thelio Mega
16:00 NVIDIA's 5.9 Problem
21:02 PinePhone Manjaro Community Edition
25:44 Housekeeping
30:17 Ubuntu 20.10: Groovy Gorilla
49:33 Feedback
54:11 Picks
57:37 Post-show
Special Guests: Lindsey Cross and Philip Muller.
Sponsored By:
Links:
The new Plasma release makes a compelling argument for the workstation, why LibreOffice and OpenOffice can't seem to get along and a recently found bug in Linux that goes back to Kernel 2.6.
Plus, our thoughts on Apple's seeming abandoning of CUPS, the latest and greatest open source podcast player, and an important show update.
Sponsored By:
Links:
We're reminded that you can't judge a distro by its screenshots. We use Pop!_OS for a few weeks and share our embarrassing discovery.
Plus our thoughts on the new Plasma release, a super handy pick, and more.
Chapters:
0:00 Pre-Show
0:44 Intro
0:50 SPONSOR: A Cloud Guru
2:39 Plasma 5.20
7:50 Kernel 5.9
8:05 VMware Flirts with Arm
15:28 SPONSOR: Linode
18:54 Big News for Nebula
22:10 Code-Shaming the Kernel
27:40 Housekeeping
29:31 Pop!OS Exit Interview
31:44 Pop!OS Full-Time Staff
34:49 Pop!OS: The Last Ten Percent
37:46 Pop!OS: A Very Unique Distribution
43:13 Pop!OS: Driving Hardware Sales
47:40 Pop!OS: Strengthening the System76 Brand
49:51 Manjaro Arm 20.10 Released
50:48 SPONSOR: A Cloud Guru
51:48 Feedback: TLP Magic
53:23 Feedback: Chromebooks and Education
56:16 Pick: Autotier
59:09 Pick: Antennapod 2.0.1
1:00:30 SPONSOR: Core Contributors
1:01:10 Outro
1:03:18 Post-Show
Special Guest: Neal Gompa.
Sponsored By:
Links:
We have a different take on the Oracle v. Google case that may usher in an API copyright doom! Or so they say...
Plus we answer great feedback and chew on the future of Windows 10.
Sponsored By:
Links:
NextCloud makes some significant changes, and we share our reaction; IBM is planning to split into two, but we have some questions, and Firefox may soon display sponsored "top sites."
Plus Nvidia's Jetson Nano release and the freaky future of low-level AI, and our thoughts on Coninbase's recent news.
Sponsored By:
Links:
We speak to Kevin and Patricia from Traefik, discuss Alex's recent ZFS snafu and we wonder if the new Chromecasts can match up to the Nvidia Shield.
Sponsored By:
Links:
Our secrets for a low-cost bulletproof Nextcloud server that we figured out the hard way. We take you into the "server garage" and share our lessons learned.
Special Guests: Brent Gervais and Drew DeVore.
Sponsored By:
Links:
We examine the deeper problems in Open Source development the recent Hacktoberfest drama has exposed.
Plus some great feedback, failures to launch, and more.
Sponsored By:
Links:
Quite a bit from Google this week, with new products and notable changes coming for developers and users.
Plus our take on DuckDuckGo's new fight.
Links:
We provoked quite a response and cover the feedback that puts us in our place. Then we dive into the wild era of text editor of yore and solve an age-old question.
Sponsored By:
Links:
We embrace new tools to upgrade your backup game, securely move files around the network, and debunk the idea that Windows will ever be based on Linux.
Chapters:
0:00 Pre-Show
0:29 Intro
0:46 SPONSOR: A Cloud Guru
2:31 LVFS Hits 20 Million Downloads
4:10 Dell Precision 5750 Review Unit Coming Soon
6:27 LVFS Continued
7:29 Xen Hypervisor is Porting to Raspberry Pi 4
12:09 New Dell XPS 13 Developer Editions
14:56 Lenovo Expands its Linux-Loaded Selection
16:48 SPONSOR: Linode
19:31 WSL to Support GUI Apps
24:09 Will Microsoft Switch to Linux?
33:18 Fedora 33 Beta is Live
35:13 Housekeeping
36:13 Exploring Send and Receive
38:06 Send and Receive: Backups
39:37 Send and Receive: Setting Up the Volumes
41:00 Send and Receive: Rsync Comparison
43:40 Send and Receive: Data Retention Tests
48:10 Send and Receive: Comparing Performance
50:09 Send and Receive: Right Tool for the Job
55:29 Send and Receive: Rivaling NTFS and APFS
57:39 Feedback: Todo Apps
1:01:33 SPONSOR: Unplugged Core Contributors
1:02:30 Outro
1:04:17 Post-Show
Special Guests: Brent Gervais, Drew DeVore, and Neal Gompa.
Links:
Lenovo expands its Linux lineup in a big way, with 30 Ubuntu systems. And why Microsoft Edge on Linux might be more significant than you think.
Plus, the latest Mozilla project being spun-out, and how Timescale might have a solution for a self-sustaining open-source business in the cloud era.
Sponsored By:
Links:
We get fancy with Traefik labels, and gush over some new Home Assistant features while saving our data from inevitable future failure.
Sponsored By:
Links:
It's a celebration! 🎉
We get nerdy about Blueprints, and then wary about the future of software distribution.
Pour a glass of milk and prepare for some hot takes!
Sponsored By:
Links:
What would it really take to get you to switch Linux distributions? We debate the practical reasons more and more people are sticking with the big three.
Plus Carl from System76 stops by to surprise us with some firmware news.
Chapters:
0:00 Pre-Show
2:22 Intro
2:36 SPONSOR: A Cloud Guru
4:24 USB Booting the Pi 4
10:10 System76 Open Firmware Update
23:14 SPONSOR: Linode
25:28 OpenPOWER Summit 2020
29:23 EndeavourOS ARM
30:14 Housekeeping
30:53 SPONSOR: Unplugged Core Contributors
32:59 It's Really Just a Three Distro World
46:37 Feedback: systemd Skepticism
50:50 Feedback: EmacsConf2020
51:40 Picks
52:12 Pick: Cloud Hypervisor
53:51 Pick: SongRec
54:45 Pick: tmpmail
55:55 Pick: MyPaas
57:16 Outro
59:11 Post-Show
Special Guests: Brent Gervais, Carl Richell, and Neal Gompa.
Links:
We try out the new GNOME "Orbis" release and chat about Microsoft's new Linux kernel patches that make it clear Windows 10 is on the path to a hybrid Windows/Linux system.
Plus, the major re-architecture work underway for Chrome OS with significant ramifications for Desktop Linux.
Sponsored By:
Links:
Is it a Post-Open Source world now that the mega-clouds are here? We share our thoughts on this renewed idea.
Plus, our reactions to Nvidia buying Arm, your feedback, and much more.
Sponsored By:
Links:
I mean it’s been happening for a while, but seeing Mozilla sinking like this is just driving the point home for me.
FOSS is dead
Friends join us to discuss Cabin, a proposal that encourages more Linux apps and fewer distros.
Plus, we debate the value that the Ubuntu community brings to Canonical, and share a pick for audiobook fans.
Chapters:
0:00 Pre-Show
0:48 Intro
0:54 SPONSOR: A Cloud Guru
1:00:25 Outro
1:01:38 Post-Show
2:25 Future of Ubuntu Community
6:51 Ubuntu Community: Popey Responds
9:31 Ubuntu Community: Stuart Langridge Responds
16:26 Ubuntu Community: Mark Shuttleworth Responds
17:30 BTRFS Workflow Developments
19:09 Linux Kernel 5.9 Performance Regression
24:48 SPONSOR: Linode
27:34 Cabin
29:48 Cabin: More Apps, Fewer Distros
33:41 Cabin: Building Small Apps
36:40 Cabin: What is a Cabin App?
44:34 SPONSOR: A Cloud Guru
45:20 Feedback: Fedora 33 Bug-A-Thon
47:53 Goin' Indy Update
49:40 Submit Your Linux Prepper Ideas
50:11 Feedback: Dev IDEs
54:15 Feedback: Nextcloud
58:20 Picks: Cozy
Special Guests: Alan Pope, Drew DeVore, and Stuart Langridge.
Sponsored By:
Links:
Our hands-on review of Android 11, and our thoughts on the possible consequences of Nvidia buying Arm Holdings for $40bn.
Plus why our long-term view for Mozilla took a turn for the worse this week, and two recent enterprise wins for Desktop Linux.
Sponsored By:
Links:
Some big news for Jupiter Broadcasting and a picture perfect app-pick with Lychee. Chris politely suggests Alex reconsider his Syncthing doubts.
Plus some power monitoring updates, and more from the community.
Sponsored By:
Links:
A special friend of the show joins us to discuss C++ in 2020 and the growing adoption of Rust.
Plus feedback, a Python surprise and a little small business corner.
Sponsored By:
Links:
Plus, the new PinePhone options coming soon, our thoughts on recent Mozilla news, lessons from the GNOME Patent Troll, and AWS Bottlerocket.
We get an update from PipeWire developer Wim Taymans on the status of Linux's new audio and video subsystem.
Plus Alexi Pol joins us for two big updates from the KDE community.
Chapters:
0:00 Pre-Show
1:30 Intro
1:49 SPONSOR: A Cloud Guru
2:56 Linux Action News Returns!
4:17 Ubuntu 20.10 Embraces Active Directory
12:58 Pipewire Progress with Wim Tayman
7:26 DebConf 2020
23:26 SPONSOR: Linode
25:28 Akademy 2020
33:41 Housekeeping
36:19 SPONSOR: Unplugged Core Contributors
38:08 Jono Bacon's Book Club
39:05 Feedback: Apline Server Challenge
40:15 Feedback: Remote Office
44:05 Picks: SC-IM
45:11 Picks: Present
47:30 Outro
48:49 Post-Show
Special Guests: Aleix Pol, Brent Gervais, Drew DeVore, Neal Gompa, and Wim Taymans.
Links:
The first Thinkpads loaded with Fedora go live, but there is a lot more to the story.
Plus, the new PinePhone options coming soon, our thoughts on recent Mozilla news, lessons from the GNOME Patent Troll, and AWS Bottlerocket.
Sponsored By:
Links:
GitHub just made a major behind-the-scenes upgrade, and we chew on some of the impressive details.
Plus, our thoughts on Epic vs. Apple, the larger story around device ownership, and a fun anecdote from running a small business.
Sponsored By:
Links:
The Raspberry Pi might be getting a small software fix that makes a big performance improvement.
Plus, we attempt to combine two internet connections with Linux live from the woods!
Chapters:
0:00 Pre-Show
1:07 Intro
1:55 SPONSOR: A Cloud Guru
2:35 Lenovo Linux Laptops
11:21 Raspberry Pi Storage Speedup
13:31 SPONSOR: Linode
17:45 Linux Unplugged Core Contributors
18:58 Fedora 33 Bug-a-Thon
20:55 Using Two Internet Connections in Linux
25:11 Policy Routing
28:32 Net-ISP-Balance
31:46 Diving into Policy Routing
33:42 Speedify
39:35 Feedback
40:32 Pick: tunshell
43:16 Outro
45:46 Post-Show
Special Guests: Alan Pope, Brent Gervais, Drew DeVore, and Neal Gompa.
Links:
Mike and Wes join us to discuss the recent Docker news, freeing your Robovac from the cloud, and why Alex really loves Terraform.
Special Guests: Michael Dominick and Wes Payne.
Links:
It's a new day for Jupiter Broadcasting and the show, we share our big news.
Plus our plan to help make a difference in free software, and we reunite with some old friends.
Chapters:
0:00 Pre-Show
0:42 Intro
1:08 SPONSOR: A Cloud Guru
2:59 Arch Update
4:13 Big News for Jupiter Broadcasting
6:58 Coder Radio Returns
8:08 Linux Action News Returns
9:45 The Future of Jupiter Broadcasting
10:23 Unplugged Core Contributors
15:01 Arch Update Part 2
16:49 Housekeeping
18:20 Arch Update Part 3
19:05 Bug Squashers Assemble
24:11 Fedora 33 Test Week
28:27 Fedora IoT
33:51 Pick: FetchCord
34:50 Wimpy's Discord Plea
37:14 Arch Update Part 4
38:16 Pick: Chowdown
40:59 Catching Up with Mike
52:21 Catching Up with Joe
54:30 Catching Up with Wimpy
1:01:19 Outro
1:03:34 Post-Show
Special Guests: Alan Pope, Alex Kretzschmar, Drew DeVore, Joe Ressington, Martin Wimpress, and Neal Gompa.
Sponsored By:
Links:
Great news! Dan, popey, and Joe have started a new show and it's called The New Show. Check it out at thenew.show
They answer your questions about Linux, tech, and life itself. It's a completely new show.
We reboot the show to capture Mike's love of coupons and update you on what we have been up to recently since the show's fake demise.
Sponsored By:
Links:
We round up the best podcast clients for your Linux desktop, mobile, and the web.
Plus we announce the official Jupiter Broadcasting Matrix server, share some great picks, and a thought-provoking email.
Chapters:
0:00 Pre-Show
0:35 Intro
2:03 Debian Requests Artwork
3:04 Google Kernel Code Dump
8:07 The Future of Rust
14:15 Manjaro Forum Meltdown
20:11 Matrix Server Migration
27:38 Housekeeping
28:44 Podcatcher Play-Off
29:08 Podcatcher Play-Off: Honorable Mentions
31:33 Podcatcher Play-Off: Winds
33:36 Podcatcher Play-Off: Cpod
35:33 Podcatcher Play-Off: Airsonic
38:16 Podcatcher Play-Off: Shellcaster
40:15 Podcatcher Play-Off: Castero
40:42 Podcatcher Play-Off: Castget
42:27 Podcatcher Play-Off: Pocketcasts
44:22 Podcatcher Play-Off: Antennapod
45:09 Podcatcher Play-Off: Overcast
47:22 Feedback: Mac Pro as a Daily Driver
48:38 Feedback: Internet Apocalypse
57:22 Pick: Quad SATA Kit for Raspberry Pi
1:00:01 Pick: Outrun
1:02:50 Outro
1:04:30 Post-Show
Special Guests: Brent Gervais, Drew DeVore, Neal Gompa, and Philip Muller.
Links:
Jonathan Panozzo, aka Johnp join us to talk all things Unraid. He hints at future subscription plans, details performance features coming soon, shares the story of how Docker came to Unraid, and much more.
Special Guest: Jonathan Panozzo.
Links:
We refurbish a special machine from the Jupiter Broadcasting Hardware Archive and try out Matrix, the one chat platform to rule them all.
Plus Dan and Cassidy from elementary OS join us to discuss version 6.0.
Chapters:
0:00 Pre-Show
0:45 Intro
2:25 KDE Neon 20.04
4:17 Mozilla Resturcturing
8:21 elementary OS 6
18:29 Housekeeping
20:00 Matrix
22:33 Silver Salvage
29:43 Matrix Server Punishment Test
33:04 Clients Galore
35:06 Secure By Default
43:56 Outro
45:08 Post-Show
Special Guests: Alex Kretzschmar, Cassidy James Blaede, Daniel Fore, Drew DeVore, and Neal Gompa.
Links:
We explain why BootHole is getting so much attention and break down the key issues. Then we review our favorite Linux-compatible headsets.
Plus community news, feedback, and more.
Special Guests: Drew DeVore and Neal Gompa.
Links:
Chris figures out how hot is too hot, Alex performs an extreme remote firewall install, and we share some of our favorite SSH tricks.
Links:
The past, present and future of Linux on Arm. The major challenges still facing full Linux support, and why ServerReady might be a solution to unify Arm systems.
Plus we chat with the Manjaro team about recent changes.
Chapters:
0:00 Pre-Show
0:58 Intro
2:01 Terminal 2.0 in ChromeOS
4:41 Manjaro's Process Problems
13:49 Manjaro Sneak Peaks
15:41 Weekend Manjaro Journey
21:02 Housekeeping
22:09 ARM on Linux
24:01 The History of ARM
28:16 Single Board Computing Revolution
31:47 ARM Reaching into the Present
33:17 The Future of ARM
36:42 Not Everyone Loves ARM
43:01 Wants and What Ifs
48:30 App Pick: tuptime
49:48 App Pick: s-tui
50:21 Outro
51:36 Post-Show
Special Guests: Brent Gervais, Dalton Durst, Drew DeVore, Jeremy Soller, Marius Gripsgard, Neal Gompa, and Philip Muller.
Links:
Brent sits down with Carl Richell, Founder and CEO of System76. We explore the people, passion, and culture behind the scenes, learn of young Carl, the early years of building a Linux-focused hardware business, how today System76 fuels a tiny piece of SpaceX, and more.
Carl's Community Ask: Be Bold.
Special Guest: Carl Richell.
Links:
Fedora makes a bold move and Microsoft seems to be working on their ideal "Cloud PC", we ponder what Linux has to offer.
Plus an easy way to remotely watch movies with others, and a bunch of your feedback.
Special Guests: Brent Gervais, Drew DeVore, and Neal Gompa.
Links:
We've spent thousands of dollars, and over a decade refining the perfect home media setup. We get nostalgic and share what worked, and what REALLY didn't.
Links:
Our team has been using Nextcloud to replace Dropbox for over a year, we report back on what has worked great, and what's not so great.
Plus why Linus Torvalds has become the master of saying no.
Special Guest: Drew DeVore.
Links:
Fedora's getting to work and reconsidering some long held-assumptions.
Plus the best tool for getting things done on Linux, we take a look at openSUSE Leap 15.2, and breathe new life into an old Pebble.
Special Guests: Alex Kretzschmar, Brent Gervais, Drew DeVore, Jeff Fortin Tam, and Neal Gompa.
Links:
Chris is slow cooking some servers, Alex has self-hosted AI with a nasty gotcha and a damp basement.
Links:
We're joined by two guests who share their insights into building modern Linux hardware products.
Plus we try out Mint 20, cover some big Gnome fixes, and a very handy open source noise suppression pick!
Special Guests: Alfred Neumayer, Brent Gervais, Drew DeVore, and Jeremy Soller.
Links:
Why we think Apple just handed market share to Desktop Linux, and why you can kiss running Linux on the Mac goodbye forever.
Special Guests: Drew DeVore and Neal Gompa.
Links:
Brent sits down with Philip Müller, Co-Founder and Lead Developer of Manjaro, and CEO at Manjaro GmbH & Co. KG. We explore the formation and evolution of Manjaro as a Linux distribution, the development of past and recent hardware partnerships, cross-distribution collaborations, and what's inspiring Philip in the next 5 years.
Special Guest: Philip Müller.
Links:
Serverbuilds.net’s founder JDM joins us to discuss the perfect sever for low or high-end needs, and Alex stages a Pi intervention.
Special Guest: JDMWAAAT.
Links:
It's time to challenge some long-held assumptions.
Today's Btrfs is not yesterday's hot mess, but a modern battle-tested filesystem, and we'll prove it.
Plus our thoughts on Github dropping the term "master", and the changes Linux should make NOW to compete with commercial desktops.
Special Guests: Brent Gervais, Drew DeVore, and Neal Gompa.
Links:
The lightweight distro that stole our hearts, the four of us each try out a different contender and come away with what we think will be the leanest and meanest distribution for your PC.
Special Guests: Drew DeVore and Jill Bryant Ryniker.
Links:
You're not a true self-hoster until you've lost your entire configuration at least once. Alex does a deep dive into cloud backup, plus we need your help to find the right Wifi solution for a listener.
Links:
From the low-end to the high-end we try out both ends of the Linux hardware spectrum. Wes reviews the latest XPS 13, and Chris shares his thoughts on the Pinebook Pro.
Plus a really cool new feature in Linux 5.7, and we get some answers to the recent GNOME patent settlement from the source.
Special Guests: Dan Johansen and Drew DeVore.
Links:
It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS.
Plus our favorite features from Fedora 32, and why Wes loves DNF.
Links:
Chris' tale of woe after a recent data loss, and Wes' adventure after he finds a rouge device on his network.
Special Guest: Drew DeVore.
Links:
Brent sits down with Kyle Rankin, Chief Security Officer and Vice President at Purism and former Tech Editor and columnist at Linux Journal. We explore his 10+ years with Linux Journal, as well as Purism's culture, ideals, product design and engineering philosophies, and more.
Special Guest: Kyle Rankin.
Links:
We react to recently proposed Home Assistant changes, Alex attempts an extreme remote install, and we take a look at HomelabOS.
Plus why Chris contiunes to collect Raspberry Pi's at an alarming rate.
Links:
Windows is getting more competitive by adopting core Linux features, so we cover the latest Linux-inspired additions to Windows. Then review the new release of Pi-hole, sort through recent PINE64 updates, and read your feedback.
Special Guests: Alex Kretzschmar, Drew DeVore, Neal Gompa, and Philip Muller.
Links:
Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC.
Links:
We're blown away by the Enlightenment desktop, and its little known features, and we share a quick way for you to try it out yourself.
Plus our experience with Pop!OS 20.04, Telegram's recent embarrassment, and some feedback.
Special Guests: Brent Gervais, Drew DeVore, and Jill Bryant Ryniker.
Links:
Encrypted Crash Dumps in FreeBSD, Time on Unix, Improve ZVOL sync write performance with a taskq, central log host with syslog-ng, NetBSD Entropy overhaul, Setting Up NetBSD Kernel Dev Environment, and more.
Some time ago, I was describing how to configure networking crash dumps. In that post, I mentioned that there is also the possibility to encrypt crash dumps. Today we will look into this functionality. Initially, it was implemented during Google Summer of Code 2013 by my friend Konrad Witaszczyk, who made it available in FreeBSD 12. If you can understand Polish, you can also look into his presentation on BSD-PL on which he gave a comprehensive review of all kernel crash dumps features.
The main issue with crash dumps is that they may include sensitive information available in memory during a crash. They will contain all the data from the kernel and the userland, like passwords, private keys, etc. While dumping them, they are written to unencrypted storage, so if somebody took out the hard drive, they could access sensitive data. If you are sending a crash dump through the network, it may be captured by third parties. Locally the data are written directly to a dump device, skipping the GEOM subsystem. The purpose of that is to allow a kernel to write a crash dump even in case a panic occurs in the GEOM subsystem. It means that a crash dump cannot be automatically encrypted with GELI.
Time, a word that is entangled in everything in our lives, something we’re intimately familiar with. Keeping track of it is important for many activities we do.
Over millennia we’ve developed different ways to calculate it. Most prominently, we’ve relied on the position the sun appears to be at in the sky, what is called apparent solar time.
We’ve decided to split it as seasons pass, counting one full cycle of the 4 seasons as a year, a full rotation around the sun. We’ve also divided the passing of light to the lack thereof as days, a rotation of the earth on itself. Moving on to more precise clock divisions such as seconds, minutes, and hours, units that meant different things at different points in history. Ultimately, as travel got faster, the different ways of counting time that evolved in multiple places had to converge. People had to agree on what it all meant.
See the article for more
syslog-ng is the Swiss army knife of log management. You can collect logs from any source, process them in real time and deliver them to wide range of destinations. It allows you to flexibly collect, parse, classify, rewrite and correlate logs from across your infrastructure. This is why syslog-ng is the perfect solution for the central log host of my (mainly) FreeBSD based infrastructure.
This week I committed an overhaul of the kernel entropy system. Please let me know if you observe any snags! For the technical background, see the thread on tech-kern a few months ago: https://mail-index.NetBSD.org/tech-kern/2019/12/21/msg025876.html.
I used T_PAGEFLT’s blog post as a reference for setting my NetBSD kernel development environment since his website is down I’m putting down the steps here so it would be helpful for starters.
We were almost outsmarted by a not so smart doorbell, Jellyfin makes Alex's prediction dreams come true and Chris tries QOwnNotes again.
Special Guest: Morgan Peterman.
Manjaro has a new hardware partner so Phillip joins to share the details, and we have the Lemur Pro in house for a battery endurance test like no other.
Plus an Arch server update, and Chris orders the new Raspberry Pi High Quality Camera.
Special Guests: Brent Gervais, Drew DeVore, Jeremy Soller, and Philip Muller.
Links:
We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience.
Plus Cloudflare steps up its campaign to secure BGP, and why you might want to trade in cron for systemd timers.
Links:
FuryBSD 2020Q2 Images Available, Technical reasons to choose FreeBSD over GNU/Linux, Ars technica reviews GhostBSD, “TLS Mastery” sponsorships open, BSD community show their various collections, a tale of OpenBSD secure memory allocator internals, learn to stop worrying and love SSDs, and more.
The Q2 2020 images are not a visible leap forward but a functional leap forward. Most effort was spent creating a better out of box experience for automatic Ethernet configuration, working WiFi, webcam, and improved hypervisor support.
Since I wrote my article "Why you should migrate everything from Linux to BSD" I have been wanting to write something about the technical reasons to choose FreeBSD over GNU/Linux and while I cannot possibly cover every single reason, I can write about some of the things that I consider worth noting.
When I began work on the FreeBSD 12.1-RELEASE review last week, it didn't take long to figure out that the desktop portion wasn't going very smoothly.
I think it's important for BSD-curious users to know of easier, gentler alternatives, so I did a little looking around and settled on GhostBSD for a follow-up review.
GhostBSD is based on TrueOS, which itself derives from FreeBSD Stable. It was originally a Canadian distro, but—like most successful distributions—it has transcended its country of origin and can now be considered worldwide. Significant GhostBSD development takes place now in Canada, Italy, Germany, and the United States.
My next book will be TLS Mastery, all about Transport Layer Encryption, Let’s Encrypt, OCSP, and so on.
This should be a shorter book, more like my DNSSEC or Tarsnap titles, or the first edition of Sudo Mastery. I would like a break from writing doorstops like the SNMP and jails books.
JT's post: https://twitter.com/q5sys/status/1251194823589138432
Others jumped in with their collections:
Do you have a nice collection, take a picture and send it in!
Hi there,
It's been a very long time I haven't written anything after my last OpenBSD blogs, that is,
OpenBSD Kernel Internals — Creation of process from user-space to kernel space.
OpenBSD: Introduction to
execpromises
in the pledge(2)pledge(2): OpenBSD's defensive approach to OS Security
So, again I started reading OpenBSD source codes with debugger after reducing my sleep timings and managing to get some time after professional life. This time I have picked one of my favourite item from my wishlist to learn and share, that is, OpenBSD malloc(3), secure allocator
my home FreeNAS runs two pools for data. One RAIDZ2 with four spinning disk drives and one mirror with two SSDs. Toying with InfluxDB and Grafana in the last couple of days I found that I seem to have a constant write load of 1 Megabyte (!) per second on the SSDs. What the ...?
So I run three VMs on the SSDs in total. One with Windows 10, two with Ubuntu running Confluence, A wiki essentially, with files for attachments and MySQL as the backend database. Clearly the writes had to stop when the wikis were not used at all, just sitting idle, right?
Well even with a full query log and quite some experience in the operation of web applications I could not figure out what Confluence is doing (productively, no doubt) but trust me, it writes a couple of hundred kbytes to the database each second just sitting idle.
I've wanted to write about my infrastructure for a while, but I kept thinking, "I'll wait until after I've done $next_thing_on_my_todo." Of course this cycle never ends, so I decided to write about its state at the end of 2019. Maybe I'll write an update on it in a couple of moons; who knows?
Fedora Project Leader Matthew Miller joins us to discuss Lenovo shipping ThinkPads loaded with Fedora, and our review of the new 32 release.
Plus Ubuntu's Director of Desktop Martin Wimpress covers the details everyone missed in 20.04.
Special Guests: Martin Wimpress, Matthew Miller, and Neal Gompa.
Links:
" rel="nofollow">Fedora 32 Cleared For Release Next Week
" rel="nofollow">Enable Earlyoom
" rel="nofollow">DNF Better Counting
" rel="nofollow">Enable FSTrim Timer
" rel="nofollow">Systemd 245 Released - First Version Including Systemd-Homed
" rel="nofollow">GCC’s New Static Analysis Capabilities Are Getting Into Shape For GCC 10 - Phoronix
" rel="nofollow">Retire Python 2
Ell sits down with Danny Akacki to talk about infosec, his experience on the Blue Team, how PancakesCon got started, and more.
Special Guest: Danny Akacki.
Links:
Rethinking OpenBSD security, FreeBSD 2020 Q1 status report, the notion of progress and user interfaces, Comments about Thomas E. Dickey on NetBSD curses, making Unix a little more Plan9-like, Not-actually Linux distro review: FreeBSD, and more.
OpenBSD aims to be a secure operating system. In the past few months there were quite a few security errata, however. That’s not too unusual, but some of the recent ones were a bit special. One might even say bad. The OpenBSD approach to security has a few aspects, two of which might be avoiding errors and minimizing the risk of mistakes. Other people have other ideas about how to build secure systems. I think it’s worth examining whether the OpenBSD approach works, or if this is evidence that it’s doomed to failure.
I picked a few errata, not all of them, that were interesting and happened to suit my narrative.
Welcome, to the quarterly reports, of the future! Well, at least the first quarterly report from 2020. The new timeline, mentioned in the last few reports, still holds, which brings us to this report, which covers the period of January 2020 - March 2020.
One trait of modern Western culture is the notion of progress. A view claiming, at large, everything is getting better and better.
How should we think about progress? Both in general and regarding technology?
I was recently pointed at a web page on Thomas E. Dickeys site talking about NetBSD curses. It seems initially that the page was intended to be a pointer to some differences between ncurses and NetBSD curses and does appear to start off in this vein but it seems that the author has lost the plot as the document evolved and the tail end of it seems to be devolving into some sort of slanging match. I don't want to go through Mr. Dickey's document point by point, that would be tedious but I would like to pick out some of the things that I believe to be the most egregious. Please note that even though I am a NetBSD developer, the opinions below are my own and not the NetBSD projects.
I’m not really interested in defending anything. I tried out plan9port and liked it, but I have to live in Unix land. Here’s how I set that up.
A Warning
The suckless community, and some of the plan9 communities, are dominated by jackasses. I hope that’s strong enough wording to impress the severity. Don’t go into IRC for help. Stay off the suckless email list. The software is great, the people who write it are well-spoken and well-reasoned, but for some reason the fandom is horrible to everyone.
This month's Linux distro review isn't of a Linux distribution at all—instead, we're taking a look at FreeBSD, the original gangster of free Unix-like operating systems.
The first FreeBSD release was in 1993, but the operating system's roots go further back—considerably further back. FreeBSD started out in 1992 as a patch-release of Bill and Lynne Jolitz's 386BSD—but 386BSD itself came from the original Berkeley Software Distribution (BSD). BSD itself goes back to 1977—for reference, Linus Torvalds was only seven years old then.
Before we get started, I'd like to acknowledge something up front—our distro reviews include the desktop experience, and that is very much not FreeBSD's strength. FreeBSD is far, far better suited to running as a headless server than as a desktop! We're going to get a full desktop running on it anyway, because according to Lee Hutchinson, I hate myself—and also because we can't imagine readers wouldn't care about it.
FreeBSD does not provide a good desktop experience, to say the least. But if you're hankering for a BSD-based desktop, don't worry—we're already planning a followup review of GhostBSD, a desktop-focused BSD distribution.
Jordyn - ZFS Pool Problem
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to [email protected]
Knowing which hardware to buy or which apps to run on that shiny new hardware can be hard. Chris and Alex discuss networking gear and where to find some of the best getting started documentation on the net.
Plex have been busy and launched two new apps, we cover that and more in this episode of Self-Hosted.
Links:
The latest Ubuntu LTS is here, but does it live up to the hype? And how practical are the new ZFS features? We dig into the performance, security, and stability of Focal Fossa.
Plus our thoughts on the new KWin fork, if Bleachbit is safe, and a quick Fedora update.
Special Guests: Brent Gervais and Drew DeVore.
Links:
Brent sits down with Sri Ramkrishna, seasoned GNOME community member, founder of Linux App Summit, and Principle Ecosystems Engineer at ITRenew. We discuss his experiences in the GNOME community since 1998, the value of building relationships across communities, the increasing importance of non-technical roles in open source projects, and more.
Special Guest: Sri Ramkrishna.
Links:
Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop.
Plus Intel's surprisingly overclockable laptop CPU, why you shouldn't freak out about 5G, and the incredible creativity of the Demoscene.
Links:
Tales from a core file, Lenovo X260 BIOS Update with OpenBSD, the problem of Unix iowait and multi-CPU machines, Hugo workflow using FreeBSD Jails, Caddy, Restic; extending NetBSD-7 branch support, a tale of two hypervisor bugs, and more.
On the side, I’ve been wrapping up some improvements to the classic Unix stdio libraries in illumos. stdio contains the classic functions like fopen(), printf(), and the security nightmare gets(). While working on support for fmemopen() and friends I got to reacquaint myself with some of the joys of the stdio ABI and its history from 7th Edition Unix. With that in mind, let’s dive into this, history, and some mistakes not to repeat. While this is written from the perspective of the C programming language, aspects of it apply to many other languages.
My X260 only runs OpenBSD and has no CD driver. But I still need to upgrade its BIOS from time to time. And this is possible using the ISO BIOS image.
First off all, you need to download the “BIOS Update (Bootable CD)” from the Lenovo Support Website.
Various Unixes have had a 'iowait' statistic for a long time now (although I can't find a source for where it originated; it's not in 4.x BSD, so it may have come through System V and sar). The traditional and standard definition of iowait is that it's the amount of time the system was idle but had at least one process waiting on disk IO. Rather than count this time as 'idle' (as you would if you had a three-way division of CPU time between user, system, and idle), some Unixes evolved to count this as a new category, 'iowait'.
After hosting with Netlify for a few years, I decided to head back to self hosting. Theres a few reasons for that but the main reasoning was that I had more control over how things worked.
In this post, i’ll show you my workflow for deploying my Hugo generated site (www.jaredwolff.com). Instead of using what most people would go for, i’ll be doing all of this using a FreeBSD Jails based server. Plus i’ll show you some tricks i’ve learned over the years on bulk image resizing and more.
Let’s get to it.
Typically, some time after releasing a new NetBSD major version (such as NetBSD 9.0), we will announce the end-of-life of the N-2 branch, in this case NetBSD-7.
We've decided to hold off on doing that to ensure our users don't feel rushed to perform a major version update on any remote machines, possibly needing to reach the machine if anything goes wrong.
Security fixes will still be made to the NetBSD-7 branch.
We hope you're all safe. Stay home.
VM escape has become a popular topic of discussion over the last few years. A good amount of research on this topic has been published for various hypervisors like VMware, QEMU, VirtualBox, Xen and Hyper-V. Bhyve is a hypervisor for FreeBSD supporting hardware-assisted virtualization. This paper details the exploitation of two bugs in bhyve - FreeBSD-SA-16:32.bhyve (VGA emulation heap overflow) and CVE-2018-17160 (Firmware Configuration device bss buffer overflow) and some generic techniques which could be used for exploiting other bhyve bugs. Further, the paper also discusses sandbox escapes using PCI device passthrough, and Control-Flow Integrity bypasses in HardenedBSD 12-CURRENT
We build the server you never should, a tricked out Arm box, and push it to the limit with a telnet torture test.
Plus what we're playing recently, community news, a handy self-hosted music pick, and more.
Special Guests: Alan Pope and Brent Gervais.
Links:
Heather, of SciByte fame, joins Chris and Wes to celebrate the incredible accomplishments and amazing resiliency of the Voyager probes.
Special Guest: Heather.
Links:
Choose Linux enters indefinite hiatus.
In what turns out to be our final publication, we say goodbye.
NetBSD 8.2 is available, NextCloud on OpenBSD, X11 screen locking, NetBSD and RISC OS running parallel, community feedback about switching to BSD, and more.
The third release in the NetBSD-8 is now available.
This release includes all the security fixes in NetBSD-8 up until this point, and other fixes deemed important for stability.
NextCloud and OpenBSD are complementary to one another. NextCloud is an awesome, secure and private alternative for proprietary platforms, whereas OpenBSD forms the most secure and solid foundation to serve it on. Setting it up in the best way isn’t hard, especially using this step by step tutorial.
Back when this tutorial was initially written, things were different. The OpenBSD port relied on PHP 5.6 and there were no package updates. But the port improved (hats off, Gonzalo!) and package updates were introduced to the -stable branch (hats off, Solene!).
A rewrite of this tutorial was long overdue. Right now, it is written for 6.6 -stable and will be updated once 6.7 is released. If you have any questions or desire some help, feel free to reach out.
For years I’ve been using XScreenSaver as a default, but I recently learned about xsecurelock and re-evaluated my screen-saving requirements
I have been experimenting with running two systems at the same time on the RK3399 SoC.
It all begun when I figured out how to switch to the A72 cpu for RISC OS. When the switch was done, the A53 cpu just continued to execute code.
OK I thought why not give it something to do!
My first step was to run some small programs.
It worked!
- Thanks to Tom Jones for the pointer to this article
We share some WiFi tips and essential network ideas.
And discuss one of our most significant compromises in the show so far.
Links:
Today we make nice with a killer, an early out-of-memory daemon, and one of the new features in Fedora 32. We put EarlyOOM to the test in a real-world workload and are shocked by the results.
Plus we debate if OpenWrt is still the best router solution, and chew on Microsoft's new SELinux competitor.
Special Guests: Alex Kretzschmar and Neal Gompa.
Links:
Pagure, the free software GitLab alternative no one is talking about.
Neal Gompa joins us to discuss what makes it unique, which projects are using it, and the significant adoption in progress.
Special Guest: Neal Gompa.
Links:
WireGuard officially lands in Linux. We cover a bunch of new features in Linux 5.6 and discuss the recent challenges facing LineageOS.
Plus the PinePhone UBports edition goes up for pre-order, and our reaction to Huawei joining the Open Invention Network.
Links:
Brent sits down with Daniel Foré, founder of elementary OS and co-host of User Error. We explore his early years in design and software, formative aspects of Ubuntu and Gentoo, the philosophies and history of elementary OS, and more.
Special Guest: Daniel Fore.
Links:
We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording.
Plus we celebrate WireGuard's inclusion in the Linux 5.6 kernel, and fight some exFAT FUD.
Links:
Shell text processing, data rebalancing on ZFS mirrors, Add Security Headers with OpenBSD relayd, ZFS filesystem hierarchy in ZFS pools, speeding up ZSH, How Unix pipes work, grow ZFS pools over time, the real reason ifconfig on Linux is deprecated, clear your terminal in style, and more.
This article is part of a self-published book project by Balthazar Rouberol and Etienne Brodu, ex-roommates, friends and colleagues, aiming at empowering the up and coming generation of developers. We currently are hard at work on it!
One of the things that makes the shell an invaluable tool is the amount of available text processing commands, and the ability to easily pipe them into each other to build complex text processing workflows. These commands can make it trivial to perform text and data analysis, convert data between different formats, filter lines, etc.
When working with text data, the philosophy is to break any complex problem you have into a set of smaller ones, and to solve each of them with a specialized tool.
One of the questions that comes up time and time again about ZFS is “how can I migrate my data to a pool on a few of my disks, then add the rest of the disks afterward?”
If you just want to get the data moved and don’t care about balance, you can just copy the data over, then add the new disks and be done with it. But, it won’t be distributed evenly over the vdevs in your pool.
Don’t fret, though, it’s actually pretty easy to rebalance mirrors. In the following example, we’ll assume you’ve got four disks in a RAID array on an old machine, and two disks available to copy the data to in the short term.
I am a huge fan of OpenBSD’s built-in httpd server as it is simple, secure, and quite performant. With the modern push of the large search providers pushing secure websites, it is now important to add security headers to your website or risk having the search results for your website downgraded. Fortunately, it is very easy to do this when you combine httpd with relayd. While relayd is principally designed for layer 3 redirections and layer 7 relays, it just so happens that it makes a handy tool for adding the recommended security headers. My website automatically redirects users from http to https and this gets achieved using a simple redirection in /etc/httpd.conf So if you have a configuration similar to mine, then you will still want to have httpd listen on the egress interface on port 80. The key thing to change here is to have httpd listen on 127.0.0.1 on port 443.
Our long standing practice here, predating even the first generation of our ZFS fileservers, is that we have two main sorts of filesystems, home directories (homedir filesystems) and what we call 'work directory' (workdir) filesystems. Homedir filesystems are called /h/NNN (for some NNN) and workdir filesystems are called /w/NNN; the NNN is unique across all of the different sorts of filesystems. Users are encouraged to put as much stuff as possible in workdirs and can have as many of them as they want, which mattered a lot more in the days when we used Solaris DiskSuite and had fixed-sized filesystems.
https://web.archive.org/web/20200315184849/https://blog.jonlu.ca/posts/speeding-up-zsh
I was opening multiple shells for an unrelated project today and noticed how abysmal my shell load speed was. After the initial load it was relatively fast, but the actual shell start up was noticeably slow. I timed it with time and these were the results.
In the future I hope to actually recompile zsh with additional profiling techniques and debug information - keeping an internal timer and having a flag output current time for each command in a tree fashion would make building heat maps really easy.
Pipes are cool! We saw how handy they are in a previous blog post. Let’s look at a typical way to use the pipe operator. We have some output, and we want to look at the first lines of the output. Let’s download The Brothers Karamazov by Fyodor Dostoevsky, a fairly long novel.
In my entry on why ZFS isn't good at growing and reshaping pools, I mentioned that we go to quite some lengths in our ZFS environment to be able to incrementally expand our pools. Today I want to put together all of the pieces of that in one place to discuss what those lengths are.
Our big constraint is that not only do we need to add space to pools over time, but we have a fairly large number of pools and which pools will have space added to them is unpredictable. We need a solution to pool expansion that leaves us with as much flexibility as possible for as long as possible. This pretty much requires being able to expand pools in relatively small increments of space.
In my third installment of FreeBSD vs Linux, I will discuss underlying reasons for why Linux moved away from ifconfig(8) to ip(8).
In the past, when people said, “Linux is a kernel, not an operating system”, I knew that was true but I always thought it was a rather pedantic criticism. Of course no one runs just the Linux kernel, you run a distribution of Linux. But after reviewing userland code, I understand the significant drawbacks to developing “just a kernel” in isolation from the rest of the system.
if you’re someone like me who habitually clears their terminal, sometimes you want a little excitement in your life. Here is a way to do just that.
This post revolves around the idea of giving a command a percent chance of running. While the topic at hand is not serious, this simple technique has potential in your scripts.
Ell tells us about her first ever experience with Windows 10 and how it compares with Linux. Plus Drew has been using a Wayland-based i3-like tiling window manager called Sway.
Links:
We discover a few simple Raspberry Pi tricks that unlock incredible performance and make us re-think the capabilities of Arm systems.
Plus we celebrate Wireguard finally landing in Linux, catch up on feedback, and check out the new Manjaro laptop.
Special Guests: Brent Gervais and Philip Muller.
Links:
Joe, Alan, and Dan speculate about what the world will be like after the situation with Coronavirus is under control and life returns to something resembling normality.
Special Guests: Alan Pope and Daniel Fore.
Mozilla puts your money where your mouse is and partners with Scroll to launch Firefox for a Better Web. We'll explain the details, and why it might just have a shot.
Plus we try out Plasma Bigscreen, cover Telegram's really bad news, and much more.
Links:
Brent sits down with Aleix Pol, president of KDE e.V., KDE software developer, co-founder of Linux App Summit and Barcelona Free Software. We discuss his longstanding collaborations within the KDE community, developer sponsorships in open source business models, and more.
Special Guest: Aleix Pol.
Links:
The details that make a great distro, things that make us wince, smug people online, great photos, imposter syndrome, and more.
00:00:27 Do you ever get imposter syndrome?
00:08:16 What's your unusual "fingernails on chalkboard" equivalent?
00:12:26 What gives a Linux distro that feeling of polish?
00:23:16 What's your favorite photograph?
00:28:12 How do you feel when someone chimes in online with "well, actually…"?
Fighting the Coronavirus with FreeBSD, Wireguard VPN Howto in OPNsense, NomadBSD 1.3.1 available, fresh GhostBSD 20.02, New FuryBSD XFCE and KDE images, pf-badhost 0.3 released, and more.
Here is a quick HOWTO for those who want to provide some FreeBSD based compute resources to help finding vaccines.
UPDATE 2020-03-22: 0mp@ made a port out of this, it is in “biology/linux-foldingathome”.
Per default it will now pick up some SARS-CoV‑2 (COVID-19) related folding tasks. There are some more config options (e.g. how much of the system resources are used). Please refer to the official Folding@Home site for more information about that. Be also aware that there is a big rise in compute resources donated to Folding@Home, so the pool of available work units may be empty from time to time, but they are working on adding more work units. Be patient.
WireGuard is a modern designed VPN that uses the latest cryptography for stronger security, is very lightweight, and is relatively easy to set up (mostly). I say ‘mostly’ because I found setting up WireGuard in OPNsense to be more difficult than I anticipated. The basic setup of the WireGuard VPN itself was as easy as the authors claim on their website, but I came across a few gotcha's. The gotcha's occur with functionality that is beyond the scope of the WireGuard protocol so I cannot fault them for that. My greatest struggle was configuring WireGuard to function similarly to my OpenVPN server. I want the ability to connect remotely to my home network from my iPhone or iPad, tunnel all traffic through the VPN, have access to certain devices and services on my network, and have the VPN devices use my home's Internet connection.
WireGuard behaves more like a SSH server than a typical VPN server. With WireGuard, devices which have shared their cryptographic keys with each other are able to connect via an encrypted tunnel (like a SSH server configured to use keys instead of passwords). The devices that are connecting to one another are referred to as “peer” devices. When the peer device is an OPNsense router with WireGuard installed, for instance, it can be configured to allow access to various resources on your network. It becomes a tunnel into your network similar to OpenVPN (with the appropriate firewall rules enabled). I will refer to the WireGuard installation on OPNsense as the server rather than a “peer” to make it more clear which device I am configuring unless I am describing the user interface because that is the terminology used interchangeably by WireGuard.
The documentation I found on WireGuard in OPNsense is straightforward and relatively easy to understand, but I had to wrestle with it for a little while to gain a better understanding on how it should be configured. I believe it was partially due to differing end goals – I was trying to achieve something a little different than the authors of other wiki/blog/forum posts. Piecing together various sources of information, I finally ended up with a configuration that met the goals stated above.
NomadBSD 1.3.1 has recently been made available. NomadBSD is a lightweight and portable FreeBSD distribution, designed to run on live on a USB flash drive, allowing you to plug, test, and play on different hardware. They have also started a forum as of yesterday, where you can ask questions and mingle with the NomadBSD community. Notable changes in 1.3.1 are base system upgraded to FreeBSD 12.1-p2. automatic network interface setup improved, image size increased to over 4GB, Thunderbird, Zeroconf, and some more listed below.
Eric Turgeon, main developer of GhostBSD, has announced version 20.02 of the FreeBSD based operating system. Notable changes are ZFS partition into the custom partition editor installer, allowing you to install alongside with Windows, Linux, or macOS. Other changes are force upgrade all packages on system upgrade, improved update station, and powerd by default for laptop battery performance.
This new release is now based on FreeBSD 12.1 with the latest FreeBSD quarterly packages. This brings XFCE up to 4.14, and KDE up to 5.17. In addition to updates this new ISO mostly addresses community bugs, community enhancement requests, and community pull requests. Due to the overwhelming amount of reports with GitHub hosting all new releases are now being pushed to SourceForge only for the time being. Previous releases will still be kept for archive purposes.
pf-badhost is a simple, easy to use badhost blocker that uses the power of the pf firewall to block many of the internet's biggest irritants. Annoyances such as SSH and SMTP bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing and/or compromised webhosts.
We have a neat self-hosted home inventory management system for preppers of any type, plus Chris' simple Home Assistant trick and Alex's valiant battle with the WebSockets daemon of the reverse proxies.
Also - we answer listener questions, and share updates.
Links:
We debate the dangers and advantages of one-click deployments. Then Dan from elementary OS shares an AppCenter for Everyone update.
Plus a big batch of feedback that kicks off some wide-ranging discussions.
Special Guests: Daniel Fore and Neal Gompa.
Links:
Why Debian is facing one of its most critical moments yet, Microsoft and GitHub buy npm, and our thoughts on Linux Mint Debian Edition 4 "Debbie."
Plus, why "Works with Chromebook" might be great for Linux, and using your GPU to fight the Coronavirus.
Links:
Brent sits down with Stuart Langridge, co-host of Bad Voltage, for an exploration of open source's "final mile", the text and language interface as a UX opportunity, terminals vs. search engines, Darwinian processes and crab-bucketism in software development, and more.
Special Guest: Stuart Langridge.
Links:
We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root.
Plus Let's Encrypt's certificate validation mix-up, Intel's questionable new power supply design, and more.
Links:
OpenBSD Full disk encryption with coreboot and tianocore, FreeBSD 12.0 EOL, ZFS DVA layout, OpenBSD’s Go situation, AD updates requires changes in TrueNAS and FreeNAS, full name of FreeBSD’s root account, and more.
It has been a while since I have posted here so I wanted to share something that was surprisingly difficult for me to figure out. I have a Thinkpad T440p that I have flashed with Coreboot 4.11 with some special patches that allow the newer machine to work. When I got the laptop, the default BIOS was UEFI and I installed two operating systems.
Windows 10 with bitlocker full disk encryption on the “normal” drive (I replaced the spinning 2.5″ disk with an SSD)
Ubuntu 19.10 on the m.2 SATA drive that I installed using LUKS full disk encryption
I purchased one of those carriers for the optical bay that allows you to install a third SSD and so I did that with the intent of putting OpenBSD on it. Since my other two operating systems were running full disk encryption, I wanted to do the same on OpenBSD.
Dear FreeBSD community,
As of February 29, 2020, FreeBSD 12.0 will reach end-of-life and will no longer be supported by the FreeBSD Security Team. Users of FreeBSD 12.0 are strongly encouraged to upgrade to a newer release as soon as possible.
One piece of ZFS terminology is DVA and DVAs, which is short for Data Virtual Address. For ZFS, a DVA is the equivalent of a block number in other filesystems; it tells ZFS where to find whatever data we're talking about. The short summary of what fields DVAs have and what they mean is that DVAs tell us how to find blocks by giving us their vdev (by number) and their byte offset into that particular vdev (and then their size). A typical DVA might say that you find what it's talking about on vdev 0 at byte offset 0x53a40ed000. There are some consequences of this that I hadn't really thought about until the other day.
Right away we can see why ZFS has a problem removing a vdev; the vdev's number is burned into every DVA that refers to data on it. If there's no vdev 0 in the pool, ZFS has no idea where to even start looking for data because all addressing is relative to the vdev. ZFS pool shrinking gets around this by adding a translation layer that says where to find the portions of vdev 0 that you care about after it's been removed.
Microsoft is changing the security defaults for Active Directory to eliminate some security vulnerabilities in its protocols. Unfortunately, these new security defaults may disrupt existing FreeNAS/TrueNAS deployments once Windows systems are updated. The Windows updates may appear sometime in March 2020; no official date has been announced as of yet.
FreeNAS and TrueNAS users that utilize Active Directory should update to version 11.3 (or 11.2-U8) to avoid potential disruption of their networks when updating to the latest versions of Windows software after March 1, 2020. Version 11.3 has been released and version 11.2-U8 will be available in early March.
NetBSD now has a users(7) and groups(7) manual. Looking into what entries existed in the passwd and group files I wondered about root’s full name who we now know as Charlie Root in the BSDs....
Over in the fediverse, Pete Zaitcev had a reaction to my entry on OpenBSD versus Prometheus for us:
I don't think the situation is usually that bad. Our situation with Prometheus is basically a worst case scenario for Go on OpenBSD, and most people will have much better results, especially if you stick to supported OpenBSD versions.
If you stick to supported OpenBSD versions, upgrading your machines as older OpenBSD releases fall out of support (as the OpenBSD people want you to do), you should not have any problems with your own Go programs. The latest Go release will support the currently supported OpenBSD versions (as long as OpenBSD remains a supported platform for Go), and the Go 1.0 compatibility guarantee means that you can always rebuild your current Go programs with newer versions of Go. You might have problems with compiled binaries that you don't want to rebuild, but my understanding is that this is the case for OpenBSD in general; it doesn't guarantee a stable ABI even for C programs (cf). If you use OpenBSD, you have to be prepared to rebuild your code after OpenBSD upgrades regardless of what language it's written in.
We try out Solus and are all impressed by this independent distro. Then Ell and Drew sing the praises of Visual Studio Code - a text editor that's packed full of features.
Links:
It was the first of its kind, and the first forced to go virtual. We get the behind the scenes story of WSL Conf from the organizers.
Plus our impressions of the latest GNOME release, community news, app picks, and more.
Special Guests: Hayden Barnes, Neal Gompa, and Sohini Bianka Roy.
Links:
We share what goes into making LINUX Unplugged special, and have a laugh at some of our bad ideas from show past.
Links:
Solid releases from GNOME and Firefox, bad news for custom Android ROM users, and a new container distro from Amazon.
Plus Mozilla and KaiOS team up to bring the modern web to feature phones, and the surprising way Microsoft is shipping a Linux kernel.
Links:
Brent sits down with Elizabeth K. Joseph, Developer Advocate at IBM Z, former Ubuntu Community Council member, and contributor to Ubuntu, Debian, Xubuntu, and others. We discuss her new passion for mainframes, her early contributions to open source projects, the niche opportunities in Z DevOps on mainframes, and more.
Special Guest: Elizabeth K. Joseph.
Links:
Apps that make us feel old, emotional songs, using actual paper, evolution of language, IRC channels we never look at, and more.
00:00:35 Do any songs trigger you to cry?
00:05:40 How many communication channels is it possible to keep up with?
00:11:25 Do you own a 2d printer? What was the last thing you printed out?
00:17:22 In an ever-shrinking world, should we drop tradition and use the easiest and most logical spellings and pronunciations?
00:25:52 Which hugely popular apps or websites do you just not get?
FreeBSD on Power, DragonflyBSD 5.8 is here, Unifying FreeNAS/TrueNAS, OpenBSD vs. Prometheus and Go, gcc 4.2.1 removed from FreeBSD base, and more.
The power and promise of all open source software is freedom. Another way to express freedom is choice — choice of platforms, deployment models, stacks, configurations, etc.
The FreeBSD Foundation is dedicated to supporting and promoting the FreeBSD Project and community worldwide. But, what does this mean, exactly, you may wonder. The truth is it means many different things, but in all cases the Foundation acts to expand freedom and choice so that FreeBSD users have the power to serve their varied compute needs.
This blog tells the story of one specific way the Foundation helps a member of the community provide greater hardware choice for all FreeBSD users.
DragonFly version 5.8 brings a new dsynth utility for building your own binary dports packages, plus significant support work to speed up that build - up to and including the entire collection. Additional progress has been made on GPU and signal support.
The details of all commits between the 5.6 and 5.8 branches are available in the associated commit messages for 5.8.0rc1 and 5.8.0. Also see /usr/src/UPDATING for specific file changes in PAM.
FreeNAS and TrueNAS have been separate-but-related members of the #1 Open Source storage software family since 2012. FreeNAS is the free Open Source version with an expert community and has led the pursuit of innovations like Plugins and VMs. TrueNAS is the enterprise version for organizations of all sizes that need additional uptime and performance, as well as the enterprise-grade support necessary for critical data and applications.
From the beginning at iXsystems, we’ve developed, tested, documented, and released both as separate products, even though the vast majority of code is shared. This was a deliberate technical decision in the beginning but over time became less of a necessity and more of “just how we’ve always done it”. Furthermore, to change it was going to require a serious overhaul to how we build and package both products, among other things, so we continued to kick the can down the road. As we made systematic improvements to development and QA efficiency over the past few years, the redundant release process became almost impossible to ignore as our next major efficiency roadblock to overcome. So, we’ve finally rolled up our sleeves.
With the recent 11.3 release, TrueNAS gained parity with FreeNAS on features like VMs and Plugins, further homogenizing the code. Today, we announce the next phase of evolution for FreeNAS and TrueNAS.
We have a decent number of OpenBSD machines that do important things (and that have sometimes experienced problems like running out of disk space), and we have a Prometheus based metrics and monitoring system. The Prometheus host agent has enough support for OpenBSD to be able to report on critical metrics, including things like local disk space. Despite all of this, after some investigation I've determined that it's not really sensible to even try to deploy the host agent on our OpenBSD machines. This is due to a combination of factors that have at their root OpenBSD's lack of ABI stability
As described in Warner's email message[1] to the FreeBSD-arch mailing list we have reached GCC 4.2.1's retirement date. At this time all supported architectures either use in-tree Clang, or rely on external toolchain (i.e., a contemporary GCC version from ports).
GCC 4.2.1 was released July 18, 2007 and was imported into FreeBSD later that year, in r171825. GCC has served us well, but version 4.2.1 is obsolete and not used by default on any architecture in FreeBSD. It does not support modern C and does not support arm64 or RISC-V.
Wendell Wilson is back, and he and Chris are struggling with their automation setups. Also, we chat about ideal home server hardware for a server or a pfSense box.
Plus Wendell's home-rolled presence detection rig, some 3D printing chat, and more.
Special Guest: Wendell Wilson.
Links:
We load up Windows 10 with WSL2, the new Terminal, and give it a go to see what it does better than Linux. Then we dive into the deep end and attend the first-ever WSLConf.
Plus the big new feature coming to Ubuntu, why Chris is going to Denver, and more.
Special Guests: Alan Pope, Brent Gervais, and Martin Wimpress.
Links:
Ell and Wes sit down with Wirefall, founder of the Dallas Hackers Association, to talk about the struggles and rewards of community building, why moving with the times is key, and how to foster an inclusive community meetup that still feels like a family gathering.
Special Guest: Wirefall.
Links:
Let's Encrypt is forced to revoke customer certificates, the big change coming to FreeNAS, and the trick to running Android on an iPhone.
Plus our concerns about Debian's future, and the unfixable Intel flaw announced this week.
Links:
Brent sits down with Nuritzi Sanchez, Senior Open Source Program Manager at GitLab, former GNOME Foundation President and Chairperson of the Board of Directors, and Founding Member of Endless, Inc. We explore her current experiences at GitLab, her deep involvement in the growth of GNOME's community, the evolution of the Linux App Summit, her involvement with Endless, and why she is so drawn to the human aspects of technology.
Special Guest: Nuritzi Sanchez.
Links:
Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won.
Plus Mozilla's rollout of DNS over HTTPS has begun, a big milestone for Let's Encrypt, and more.
Links:
Why ZFS is doing filesystem checksumming right, better TMPFS throughput performance on DragonFlyBSD, reshaping pools with ZFS, PKGSRC on Manjaro aarch64 Pinebook-pro, central log host with syslog-ng on FreeBSD, and more.
One of the best aspects of ZFS is its reliability. This can be accomplished using a few features like copy-on-write approach and checksumming. Today we will look at how ZFS does checksumming and why it does it the proper way. Most of the file systems don’t provide any integrity checking and fail in several scenarios:
Checksumming may help us detect errors in a few of those situations.
It's been a while since last having any new magical optimizations to talk about by DragonFlyBSD lead developer Matthew Dillon, but on Wednesday he landed some significant temporary file-system "TMPFS" optimizations for better throughput including with swap.
Of several interesting commits merged tonight, the improved write clustering is a big one. In particular, "Reduces low-memory tmpfs paging I/O overheads by 4x and generally increases paging throughput to SSD-based swap by 2x-4x. Tmpfs is now able to issue a lot more 64KB I/Os when under memory pressure."
There's also a new tunable in the VM space as well as part of his commits on Wednesday night. This follows a lot of recent work on dsynth, improved page-out daemon pipelining, and other routine work.
This work is building up towards the eventual DragonFlyBSD 5.8 while those wanting to try the latest improvements right away can find their daily snapshots.
recently read Mark McBride's Five Years of Btrfs (via), which has a significant discussion of why McBride chose Btrfs over ZFS that boils down to ZFS not being very good at evolving your pool structure. You might doubt this judgment from a Btrfs user, so let me say as both a fan of ZFS and a long term user of it that this is unfortunately quite true; ZFS is not a good choice if you want to modify your pool disk layout significantly over time. ZFS works best if the only change in your pools that you do is replacing drives with bigger drives. In our ZFS environment we go to quite some lengths to be able to expand pools incrementally over time, and while this works it both leaves us with unbalanced pools and means that we're basically forced to use mirroring instead of RAIDZ.
(An unbalanced pool is one where some vdevs and disks have much more data than others. This is less of an issue for us now that we're using SSDs instead of HDs.)
I wanted to see how pkgsrc works on aarch64 Linux Manjaro since it is a very mature framework that is very portable and supported by many architectures – pkgsrc (package source) is a package management system for Unix-like operating systems. It was forked from the FreeBSD ports collection in 1997 as the primary package management system for NetBSD.
One might question why use pkgsrc on Arch based Manjaro, since the pacman package repository is very good on its own. I see alternative pkgsrc as a good automated build framework that offers a way to produce independent build environment /usr/pkg that does not interfere with the current Linux distribution in any way (all libraries are statically built)
I have used the latest Manjaro for Pinebookpro and standard recommended tools as mentioned here https://wiki.netbsd.org/pkgsrc/how_to_use_pkgsrc_on_linux/
syslog-ng is the Swiss army knife of log management. You can collect logs from any source, process them in real time and deliver them to wide range of destinations. It allows you to flexibly collect, parse, classify, rewrite and correlate logs from across your infrastructure. This is why syslog-ng is the perfect solution for the central log host of my (mainly) FreeBSD based infrastructure.
This blog post continues where the blog post A central log host with syslog-ng on FreeBSD left off. Open source solutions to check syslog log messages exist, such as Logcheck or Logwatch. Although these are not too difficult to implement and maintain, I still found these to much. So I went for my own home grown solution to check the syslog messages of the SoCruel.NU central log host.
We revisit some of the projects we have covered in previous episodes to see what we've stuck with and what we haven't.
Qubes OS and Tails, a handy Android app, building websites, easy Arch, the cloud, hardware hacking, and more.
Links:
We try the Mac desktop for 30 days, find out what we think it does best, and where Linux will always have it beat.
This episode kicks off the start of a bigger conversation series.
Plus community news, very handy picks, and more.
Special Guests: Alan Pope, Maria Komarova, and Michael Aaron Murphy .
Links:
Ell sits down with Bryson Bort to discuss pentesting with Scythe, Red Team vs Blue Team operations, and the benefits that a Purple Team might have on the industry.
Special Guest: Bryson Bort.
Links:
Bruce Schneier puts his name behind Solid, Firefox starts to roll out DNS over HTTPS as default, and Microsoft's Linux first device ships to customers.
Plus a birthday gift to Raspberry Pi users, Collabora comes to mobile, and more.
Links:
Brent sits down with Brandon Bruce, Director of Customer Support at Linux Academy. We explore the world of support, how his former role as professional chef informs his "Kitchen Brigade" approach to building a support team, analytics data's ability to reveal surprising user experience patterns, and more.
Special Guest: Brandon Bruce.
Links:
Whether open source needs to be a complete experience, a deep need for conflict, preferred social media, and our favorite emoji.
00:00:30 Why do you prefer Twitter over Facebook?
00:07:57 Can Linux on the desktop ever succeed without a full ecosystem?
00:18:32 Hoodies: zip or no zip?
00:22:26 Do people really want all the drama to calm down?
00:29:40 What's your most commonly used emoji?
Meet FuryBSD, NetBSD 9.0 has been released, OpenBSD Foundation 2019 campaign wrapup, a retrospective on OmniOS ZFS-based NFS fileservers, NetBSD Fundraising 2020 goal, OpenSSH 8.2 released, and more.## Headlines
At its heart, FuryBSD is a very simple beast. According to the site, “FuryBSD is a back to basics lightweight desktop distribution based on stock FreeBSD.” It is basically FreeBSD with a desktop environment pre-configured and several apps preinstalled. The goal is to quickly get a FreeBSD-based system running on your computer.
You might be thinking that this sounds a lot like a couple of other BSDs that are available, such as NomadBSD and GhostBSD. The major difference between those BSDs and FuryBSD is that FuryBSD is much closer to stock FreeBSD. For example, FuryBSD uses the FreeBSD installer, while others have created their own installers and utilities.
As it states on the site, “Although FuryBSD may resemble past graphical BSD projects like PC-BSD and TrueOS, FuryBSD is created by a different team and takes a different approach focusing on tight integration with FreeBSD. This keeps overhead low and maintains compatibility with upstream.” The lead dev also told me that “One key focus for FuryBSD is for it to be a small live media with a few assistive tools to test drivers for hardware.”
Currently, you can go to the FuryBSD homepage and download either an XFCE or KDE LiveCD. A GNOME version is in the works.
The NetBSD Project is pleased to announce NetBSD 9.0, the seventeenth major release of the NetBSD operating system.
This release brings significant improvements in terms of hardware support, quality assurance, security, along with new features and hundreds of bug fixes. Here are some highlights of this new release.
Our target for 2019 was CDN$300K. Our community's continued generosity combined with our corporate donors exceeded that nicely. In addition we received the largest single donation in our history, CDN$380K from Smartisan. The return of Google was another welcome event. Altogether 2019 was our most successful campaign to date, yielding CDN$692K in total.
We thank all our donors, Iridium (Smartisan), Platinum (Yandex, Google), Gold (Microsoft, Facebook) Silver (2Keys) and Bronze (genua, Thinkst Canary). But especially our community of smaller donors whose contributions are the bedrock of our support. Thank you all!
Our OmniOS fileservers have now been out of service for about six months, which makes it somewhat past time for a retrospective on them. Our OmniOS fileservers followed on our Solaris fileservers, which I wrote a two part retrospective on (part 1, part 2), and have now been replaced by our Linux fileservers. To be honest, I have been sitting on my hands about writing this retrospective because we have mixed feelings about our OmniOS fileservers.
I will put the summary up front. OmniOS worked reasonably well for us over its lifespan here and looking back I think it was almost certainly the right choice for us at the time we made that choice (which was 2013 and 2014). However it was not without issues that marred our experience with it in practice, although not enough to make me regret that we ran it (and ran it for as long as we did). Part of our issues are likely due to a design mistake in making our fileservers too big, although this design mistake was probably magnified when we were unable to use Intel 10G-T networking in OmniOS.
On the one hand, our OmniOS fileservers worked, almost always reliably. Like our Solaris fileservers before them, they ran quietly for years without needing much attention, delivering NFS fileservice to our Ubuntu servers; specifically, we ran them for about five years (2014 through 2019, although we started migrating away at the end of 2018). Over this time we had only minor hardware issues and not all that many disk failures, and we suffered no data loss (with ZFS checksums likely saving us several times, and certainly providing good reassurances). Our overall environment was easy to manage and was pretty much problem free in the face of things like failed disks. I'm pretty sure that our users saw a NFS environment that was solid, reliable, and performed well pretty much all of the time, which is the important thing. So OmniOS basically delivered the fileserver environment we wanted.
Is it really more than 10 years since we last had an official fundraising drive?
Looking at old TNF financial reports I noticed that we have been doing quite well financially over the last years, with a steady stream of small and medium donations, and most of the time only moderate expenditures. The last fundraising drive back in 2009 was a giant success, and we have lived off it until now.
OpenSSH 8.2 was released on 2020-02-14. It is available from the mirrors listed at https://www.openssh.com/.
OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support.
Once again, we would like to thank the OpenSSH community for their continued support of the project, especially those who contributed code or patches, reported bugs, tested snapshots or donated to the project. More information on donations may be found at:
Self-Hosted IRC solutions are better than ever. Alan Pope joins us to make a case for the classic way to communicate online and tells us about a modern client for the web, mobile, and desktop you run on your server.
Plus, follow up on the new Self-Hosted wiki, and more.
Special Guest: Alan Pope.
Links:
A radical new way to do SSH authentication, special guest Jeremy Stott joins us to discuss Zero Trust SSH.
Plus community news, a concerning issue for makers, an Arch server follow up, and more.
Special Guests: Alex Kretzschmar, Brent Gervais, Martin Wimpress, and Neal Gompa.
Links:
Wes and Ell sit down with James Smith to have an honest conversation about what skills are needed to start a career and be successful in Tech and Information Security.
Special Guest: James Smith.
Links:
Microsoft Defender for Linux is in preview, Mozilla's VPN has a secret advantage, and why the community is calling out NPM Inc.
Plus a new report about open source security, and more.
Links:
We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC.
Plus Jim's journeys with Clear Linux, and why Ubuntu 18.04.4 is a maintenance release worth talking about.
Links:
Brent sits down with Heather Ellsworth, Software Engineer on Canonical's Ubuntu Desktop Team, a GNOME Foundation Member, and former Purism Librem 5 Documentation Engineer. We discuss her deep history in experimental high energy physics at CERN, the similarities and synergies between the sciences and software engineering, her love of documentation, her newly established maintainership of LibreOffice, and how empathy factors into good bug reporting.
Special Guest: Heather Ellsworth.
Links:
Distrowatch reviews FuryBSD, LLDB on i386 for NetBSD, wpa_supplicant as lower-class citizen, KDE on FreeBSD updates, Travel Grant for BSDCan open, ZFS dataset for testing iocage within a jail, and more.
FuryBSD is the most recent addition to the DistroWatch database and provides a live desktop operating system based on FreeBSD. FuryBSD is not entirely different in its goals from NomadBSD, which we discussed recently. I wanted to take this FreeBSD-based project for a test drive and see how it compares to NomadBSD and other desktop-oriented projects in the FreeBSD family.
FuryBSD supplies hybrid ISO/USB images which can be used to run a live desktop. There are two desktop editions currently, both for 64-bit (x86_64) machines: Xfce and KDE Plasma. The Xfce edition is 1.4GB in size and is the flavour I downloaded. The KDE Plasma edition is about 3.0GB in size.
My fresh install of FuryBSD booted to a graphical login screen. From there I could sign into my account, which brings up the Xfce desktop. The installed version of Xfce is the same as the live version, with a few minor changes. Most of the desktop icons have been removed with just the file manager launchers remaining. The Getting Started and System Information icons have been removed. Otherwise the experience is virtually identical to the live media.
FuryBSD uses a theme that is mostly grey and white with creamy yellow folder icons. The application menu launchers tend to have neutral icons, neither particularly bright and detailed or minimal.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February 2019, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues, fixing watchpoint and threading support.
The original NetBSD port of LLDB was focused on amd64 only. In January, I have extended it to support i386 executables. This includes both 32-bit builds of LLDB (running natively on i386 kernel or via compat32) and debugging 32-bit programs from 64-bit LLDB.
wpa_supplicant is definitely a lower-class citizen, sorry.
I increasingly wonder why this stuff matters; transit costs are so much lower than the period when eduroam was setup, and their reliance on 802.11x is super weird in a world where, for the most part
+ entire cities have open wifi in their downtown core
+ edu vs edu+transit split horizon problems have to be solved anyways
+ many universities have parallel open wifi
+ rate limiting / fare-share approaches for the open-net, on unmetered
+ flat-rate solves the problem
+ LTE hotspot off a phone isn't a rip off anymore
+ other open networks existessentially no one else feels compelled to do use 802.11x for a so called "semi-open access network", so I think they've lost the plot on friction vs benefit.
(we've held hackathons at EDU campus that are locked down like that, and in every case we've said no way, gotten a wire with open net, and built our own wifi. we will not subject our developers to that extra complexity).
Some bits and bobs from the KDE FreeBSD team in february 2020. We met at the FreeBSD devsummit before FOSDEM, along with other FreeBSD people. Plans were made, schemes were forged, and Groff the Goat was introduced to some new people.
Hi everyone,
The Travel Grant Application for BSDCan 2020 is now open. The Foundation can help you attend BSDCan through our travel grant program. Travel grants are available to FreeBSD developers and advocates who need assistance with travel expenses for attending conferences related to FreeBSD development. BSDCan 2020 applications are due April 9, 2020. Find out more and apply at: https://www.freebsdfoundation.org/what-we-do/grants/travel-grants/
Did you know the Foundation also provides grants for technical events not specifically focused on BSD? If you feel that your attendance at one of these events will benefit the FreeBSD Project and Community and you need assistance getting there, please fill out the general travel grant application. Your application must be received 7 weeks prior to the event. The general application can be found here: https://goo.gl/forms/QzsOMR8Jra0vqFYH2
I’m going to do jails within a jail. I already do that with poudriere in a jail but here I want to test an older version of iocage before upgrading my current jail hosts to a newer version.
This post includes my errors and mistakes. Perhaps you should proceed carefully and read it all first.
A confusing experience in Distrohoppers which raises deeper questions about the value and viability of smaller distros.
We question the very nature of Linux development, and debate if a new approach is needed.
Plus an easy way to snapshot any workstation, some great feedback, and an extra nerdy command-line pick.
Special Guests: Brent Gervais and Drew DeVore.
Links:
Joe talks about the basics of podcasting including recording spaces, types of microphones, post-production techniques, editing, and more.
Links:
The week was packed with major project releases, we go through each of them and tell you what stands out.
Plus an update from Essential, and NetBSD's first big ask in ten years.
Links:
Brent sits down with Broadus Palmer, Google Cloud Training Architect at Linux Academy and Cloud Career Coach at Level Up with Broadus. We explore his history as a musician and banker, sneaker bots, the value of mentorship, what gets people hired in tech, leveling up as a lifestyle, and more.
Special Guest: Broadus Palmer.
Links:
Open source at work, learning languages, naming cars, and innovations that haven't appropriately delivered.
Plus permission vs apologies, who has the most shoes, and more.
00:01:33 Does your car have a name?
00:06:56 How do I convince my employer to adopt open source software?
00:14:00 Is it better to ask permission or beg forgiveness?
00:18:40 How many pairs of shoes do you own?
00:25:00 If you were to learn a foreign language, which one would it be and why?
00:28:52 What innovation should have changed the world, but didn't?
Happinesses and stresses of full-time FOSS work, building a FreeBSD fileserver, Kubernetes on FreeBSD bhyve, NetBSD 9 RC1 available, OPNSense 20.1 is here, HardenedBSD’s idealistic future, and more.
In the past few days, several free software maintainers have come out to discuss the stresses of their work. Though the timing was suggestive, my article last week on the philosophy of project governance was, at best, only tangentially related to this topic - I had been working on that article for a while. I do have some thoughts that I’d like to share about what kind of stresses I’ve dealt with as a FOSS maintainer, and how I’ve managed (or often mismanaged) it.
February will mark one year that I’ve been working on self-directed free software projects full-time. I was planning on writing an optimistic retrospective article around this time, but given the current mood of the ecosystem I think it would be better to be realistic. In this stage of my career, I now feel at once happier, busier, more fulfilled, more engaged, more stressed, and more depressed than I have at any other point in my life.
The good parts are numerous. I’m able to work on my life’s passions, and my projects are in the best shape they’ve ever been thanks to the attention I’m able to pour into them. I’ve also been able to do more thoughtful, careful work; with the extra time I’ve been able to make my software more robust and reliable than it’s ever been. The variety of projects I can invest my time into has also increased substantially, with what was once relegated to minor curiosities now receiving a similar amount of attention as my larger projects were receiving in my spare time before. I can work from anywhere in the world, at any time, not worrying about when to take time off and when to put my head down and crank out a lot of code.
The frustrations are numerous, as well. I often feel like I’ve bit off more than I can chew. This has been the default state of affairs for me for a long time; I’m often neglecting half of my projects in order to obtain progress by leaps and bounds in just a few. Working on FOSS full-time has cast this model’s disadvantages into greater relief, as I focus on a greater breadth of projects and spend more time on them.
Recently at my job, I was faced with a task to develop a file server explicitly suited for the requirements of the company. Needless to say, any configuration of a kind depends on what the infrastructure needs. So, drawing from my personal experience and numerous materials on the web, I came up with the combination FreeBSD+SAMBA+AD as the most appropriate. It appears to be a perfect choice for this environment, and harmonic addition to the existing network configuration since FreeBSD + SAMBA + AD enables admins with the broad range of possibilities for access control. However, as nothing is perfect, this configuration isn’t the best choice if your priority is data protection because it won’t be able to reach the necessary levels of reliability and fault tolerance without outside improvements.
Now, since we’ve established that, let’s move on to the next point. This article’s describing the process of building a test environment while concentrating primarily on the details of the configuration. As the author, though, I must say I’m in no way suggesting that this is the only way! The following configuration will be presented in its initial stage, with the minimum requirements necessary to get the job done, and its purpose in one specific situation only. Here, look at this as a useful strategy to solve similar tasks. Well, let’s get started!
February 11th was the first meeting of this new user group, founded by John Young and myself
11 people attended, and a lot of good discussions were had
One of the attendees already owns a domain that fits well for the group, so we will be getting that setup over the next few weeks, as well as the twitter account, and other organization stuff.
Special thanks to the illumos users who drove in from Buffalo to attend, although they may have actually had a shorter drive than a few of the other attendees.
The next meeting is scheduled again for the 2nd Tuesday of the month, March 10th.
We are still discussing if we should meet at a restaurant again, or try to get a space at the local college or innovation hub where we can have a projector etc.
There are quite a few solutions for container orchestration, but the most popular (or the most famous and highly advertised, is probably, a Kubernetes) Since I plan to conduct many experiments with installing and configuring k8s, I need a laboratory in which I can quickly and easily deploy a cluster in any quantities for myself. In my work and everyday life I use two OS very tightly - Linux and FreeBSD OS. Kubernetes and docker are Linux-centric projects, and at first glance, you should not expect any useful participation and help from FreeBSD here. As the saying goes, an elephant can be made out of a fly, but it will no longer fly. However, two tempting things come to mind - this is very good integration and work in the FreeBSD ZFS file system, from which it would be nice to use the snapshot mechanism, COW and reliability. And the second is the bhyve hypervisor, because we still need the docker and k8s loader in the form of the Linux kernel. Thus, we need to connect a certain number of actions in various ways, most of which are related to starting and pre-configuring virtual machines. This is typical of both a Linux-based server and FreeBSD. What exactly will work under the hood to run virtual machines does not play a big role. And if so - let's take a FreeBSD here!
We hope this will lead to the best NetBSD release ever (only to be topped by NetBSD 10 next year).
Here are a few highlights of the new release:
You can download binaries of NetBSD 9.0_RC1 from our Fastly-provided CDN: https://cdn.netbsd.org/pub/NetBSD/NetBSD-9.0_RC1/
For over 5 years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.
20.1, nicknamed "Keen Kingfisher", is a subtle improvement on sustainable firewall experience. This release adds VXLAN and additional loopback device support, IPsec public key authentication and elliptic curve TLS certificate creation amongst others. Third party software has been updated to their latest versions. The logging frontend was rewritten for MVC with seamless API support. On the far side the documentation increased in quality as well as quantity and now presents itself in a familiar menu layout.
Over the past month, we purchased and deployed the new 13-CURRENT/amd64 package building server. We published our first 13-CURRENT/amd64 production package build using that server. We then rebuilt the old package building server to act as the 12-STABLE/amd64 package building server. This post signifies a very important milestone: we have now fully recovered from last year's death of our infrastructure. Our 12-STABLE/amd64 repo, previously out-of-date by many months, is now fully up-to-date!
HardenedBSD is in a very unique position to provide innovative solutions to at-risk and underprivileged populations. As such, we are making human rights endeavors a defining area of focus. Our infrastructure will integrate various privacy and anonymity enhancing technologies and techniques to protect lives. Our operating system's security posture will increase, especially with our focus on exploit mitigations.
Navigating the intersection between human rights and information security directly impacts lives. HardenedBSD's 2020 mission and focus is to deliver an entire hardened ecosystem that is unfriendly towards those who would oppress or censor their people. This includes a subtle shift in priorities to match this new mission and focus. While we implement exploit mitigations and further harden the ecosystem, we will seek out opportunities to contribute a tangible and unique impact on human rights issues. Providing Tor Onion Services for our core infrastructure is the first step in likely many to come towards securely helping those in need.
We try out the top self-hosted Wikis and tell you which we like best, and Chris has a major project off-grid update.
Plus Alex tells us about his robot vacuum that runs Ubuntu.
Links:
The difficult and fascinating conversations from FOSDEM 2020. Plus how elementary OS does coopertition right.
And a bunch of community news, app picks, and much more.
Special Guests: Brent Gervais, Cassidy James Blaede, Daniel Fore, and Dusty Mabe.
Links:
Ell, Drew, Hart, and Seth talk about what Kubernetes is, how to get started with it, why and when you should use it, and more.
Special Guests: Hart Hoover and Seth McCombs.
Links:
Why we're disappointed in the CoreOS Container Linux transition, Mycroft goes troll hunting and the complicated story brewing at the GNU Project.
Plus, a few community fundraisers.
Links:
Christophe joins Ell to discuss how to get started learning AWS and which materials you will need for that nerve-wracking interview.
Special Guest: Christophe Limpalair.
Links:
We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP.
Plus the latest Intel speculative execution vulnerability, and Microsoft's troubled history with certificate renewal.
Links:
Linux couldn’t duplicate OpenBSD, FreeBSD Q4 status report, OPNsense 19.7.9 released, archives retain and pass on knowledge, HardenedBSD Tor Onion Service v3 Nodes, and more.
OpenBSD has a well deserved reputation for putting security and a clean system (for code, documentation, and so on) first, and everything else second. OpenBSD is of course based on BSD (it's right there in the name) and descends from FreeBSD NetBSD (you can read the history here). But one of the questions you could ask about it is whether it had to be that way, and in particular if you could build something like OpenBSD on top of Linux. I believe that the answer is no.
Linux and the *BSDs have a significantly different model of what they are. BSDs have a 'base system' that provides an integrated and fully operational core Unix, covering the kernel, C library and compiler, and the normal Unix user level programs, all maintained and distributed by the particular BSD. Linux is not a single unit this way, and instead all of the component parts are maintained separately and assembled in various ways by various Linux distributions. Both approaches have their advantages, but one big one for the BSD approach is that it enables global changes.
Making global changes is an important part of what makes OpenBSD's approach to improving security, code maintenance, and so on work. Because it directly maintains everything as a unit, OpenBSD is in a position to introduce new C library or kernel APIs (or change them) and then immediately update all sorts of things in user level programs to use the new API. This takes a certain amount of work, of course, but it's possible to do it at all. And because OpenBSD can do this sort of ambitious global change, it does.
This goes further than just the ability to make global changes, because in theory you can patch in global changes on top of a bunch of separate upstream projects. Because OpenBSD is in control of its entire base system, it's not forced to try to reconcile different development priorities or integrate clashing changes. OpenBSD can decide (and has) that only certain sorts of changes will be accepted into its system at all, no matter what people want. If there are features or entire programs that don't fit into what OpenBSD will accept, they just lose out.
Here is the last quarterly status report for 2019. As you might remember from last report, we changed our timeline: now we collect reports the last month of each quarter and we edit and publish the full document the next month. Thus, we cover here the period October 2019 - December 2019.
If you thought that the FreeBSD community was less active in the Christmas' quarter you will be glad to be proven wrong: a quick glance at the summary will be sufficient to see that much work has been done in the last months.
Have a nice read!
As 20.1 nears we will be making adjustments to the scope of the release with an announcement following shortly.
For now, this update brings you a GeoIP database configuration page for aliases which is now required due to upstream database policy changes and a number of prominent third-party software updates we are happy to see included.
Archives are important. When they are public and available for searching, it retains and passes on knowledge. It saves vast amounts of time.
I've been working today on deploying Tor Onion Service v3 nodes across our build infrastructure. I'm happy to announce that the public portion of this is now completed. Below you will find various onion service hostnames and their match to our infrastructure.
Valentine's Day is nearly here so it's time to talk about why we love Linux and open source. Nothing is perfect though, so we also touch on a few areas that we feel could be improved.
We get into the Linux Mint mindset after years away and share our take on Cinnamon's many improvements.
Plus news that'll have knock-on effects for the rest of the year, and more.
Special Guest: Brent Gervais.
Links:
Wes and Ell sit down with Duncan McAlynn to discuss what mistakes we might all be making that could be putting our privacy and security at risk.
Special Guest: Duncan McAlynn.
Links:
The upcoming Linux kernels are packed full of goodies, Qt changes its licensing terms, and Thunderbird gets a new home.
Plus our thoughts on IBM's CEO stepping down, and Google's new open-source security key project.
Links:
Brent sits down with Peter Adams, professional photographer and former founder and CTO of several internet-technology startups in New York and Silicon Valley. In this Part 2 we explore open source and photography through workflows, lighting controls, and camera OSs, artificial intelligence and the future of photography, and more.
Special Guest: Peter Adams.
Links:
Whether we'd use Windows if it was FOSS, pointless tech, bathing habits, useless jobs, annoying popey with dream stories, and more.
00:00:45 What desirable tech does everyone else want, but you don't see the point of?
00:06:17 What’s the most useless job that you’d still be willing to do?
00:10:34 If Windows was released as open source, would you start using it?
00:18:34 Bath or shower?
00:24:58 Is there any software which is feature complete that you use on a regular basis?
00:31:54 When describing a dream, how many sentences are too many?
Hyperbola Developer interview, why you should migrate from Linux to BSD, FreeBSD is an amazing OS, improving the ptrace(2) API in LLVM 10, First FreeBSD conference in Australia, and a guide to containers on FreeNAS.
Update 2020-01-21: Since I wrote this article it got posted on Hacker News, Reddit and Lobster, and a few people have emailed me with comments. I have updated the article with comments where I have found it needed. As an important side note I would like to point out that I am not a FreeBSD developer, there may be things going on in the FreeBSD world that I know absolutely nothing about. I am also not glued to the FreeBSD developer mailing lists. I am not a FreeBSD "fanboy". I have been using GNU/Linux a ton more for the past two decades than FreeBSD, mainly due to hardware incompatibility (lacking or buggy drivers), and I love both Debian GNU/Linux and Arch Linux just as much as FreeBSD. However, I am concerned about the development of GNU/Linux as of late. Also this article is not about me trying to make anyone switch from something else to FreeBSD. It's about why I like FreeBSD and that I recommend you try it out if you're into messing with operating systems.
I think the year was late 1999 or mid 2000 when I one day was browsing computer books at my favorite bookshop and I discovered the book The Complete FreeBSD third edition from 1999 by Greg Lehey. With the book came 4 CD Roms with FreeBSD 3.3.
I had already familiarized myself with GNU/Linux in 1998, and I was in the process of migrating every server and desktop operating system away from Microsoft Windows, both at home and at my company, to GNU/Linux, initially Red Hat Linux and then later Debian GNU/Linux, which eventually became my favorite GNU/Linux distribution for many years.
When I first saw The Complete FreeBSD book by Greg Lehey I remember noticing the text on the front page that said, "The Free Version of Berkeley UNIX" and "Rock Solid Stability", and I was immediately intrigued! What was that all about? A free UNIX operating system! And rock solid stability? That sounded amazing.
In late December 2019, Hyperbola announced that they would be making major changes to their project. They have decided to drop the Linux kernel in favor of forking the OpenBSD kernel. This announcement only came months after Project Trident announced that they were going in the opposite direction (from BSD to Linux).
Hyperbola also plans to replace all software that is not GPL v3 compliant with new versions that are.
To get more insight into the future of their new project, I interviewed Andre, co-founder of Hyperbola.
This month I have improved the NetBSD ptrace(2) API, removing one legacy interface with a few flaws and replacing it with two new calls with new features, and removing technical debt.
As LLVM 10.0 is branching now soon (Jan 15th 2020), I worked on proper support of the LLVM features for NetBSD 9.0 (today RC1) and NetBSD HEAD (future 10.0).
FreeBSD has existed as an operating system, project, and foundation for more than twenty years, and its earlier incantations have exited for far longer. The old guard have been developing code, porting software, and writing documentation for longer than I’ve existed. I’ve been using it for more than a decade for personal projects, and professionally for half that time.
While there are many prominent Australian FreeBSD contributors, sysadmins, and users, we’ve always had to venture overseas for conferences. We’re always told Australians are among the most ardent travellers, but I always wondered if we could do a domestic event as well.
And on Tuesday, we did! Deb Goodkin and the FreeBSD Foundation graciously organised and chaired a dedicated FreeBSD miniconf at the long-running linux.conf.au event held each year in a different city in Australia and New Zealand.
This is a simple write-up to setup Docker on FreeNAS 11 or FreeBSD 11.
But muh jails?
You know that jails are dope and you know that jails are dope, yet no one else knows it. So here we are stuck with docker. Two years ago I would be the last person to recommend using docker, but a whole lot of things has changes past years…
So jails are dead then?
No, jails are still dope, but jails lack tools to manage them. Yes, there are a few tools, but they meant for hard-core FreeBSD users who used to suffering. Docker allows you to run applications without deep knowledge of application you’re running. It will also allow you to run applications that are not ported to FreeBSD.
As an operating system GNU/Linux has become a real mess because of the fragmented nature of the project, the bloatware in the kernel, and because of the jerking around by commercial interests.
We each like different blogging platforms, and share why. Then our tips for keeping your server secure.
Plus a great way to score cheap drives, a Project Off-Grid update, making your household light switches smart, and Alex's review of the HDHomeRun.
Links:
How did we get from shareware to free software? We jump in the Linux powered time machine and revisit software past.
Plus a new Plasma focused laptop, and two powerful command-line picks.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Peter Adams, professional photographer and former founder and CTO of several internet-technology startups in New York and Silicon Valley. We explore his photography project "Faces of Open Source", his history in the dot-com bubble era, how he came to love open source, and more.
Brunch with Brent: Peter Adams Part 2 comes out this Friday.
Special Guest: Peter Adams.
Links:
The real reason Rocket League is dropping support for Linux, Wine has a massive release, and the potential for Canonical's new Android in the cloud service.
Plus, our take on the FSF's Upcycle Windows 7 campaign, and the clever Chrome OS strategy upgrade for education in 2020.
Links:
Drew and Graham discuss the basics of modular synthesis, and how VCV Rack makes the Eurorack system freely available to anyone with a computer.
Special Guest: Graham Morrison.
Links:
We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family.
Plus a look back at Apollo-era audio that's still relevant today with the surprising story of the Quindar tones.
Links:
Upgrading FreeBSD from 11.3 to 12.1, Distrowatch switching to FreeBSD, Torvalds says don’t run ZFS, iked(8) removed automatic IPv6 blocking, working towards LLDB on i386, and memory-hard Argon2 hashing scheme in NetBSD.
Now here’s something more like what I was originally expecting the content on this blog to look like. I’m in the process of moving all of our FreeBSD servers (about 30 in total) from 11.3 to 12.1. We have our own local build of the OS, and until “packaged base” gets to a state where it’s reliably usable, we’re stuck doing upgrades the old-fashioned way. I created a set of notes for myself while cranking through these upgrades and I wanted to share them since they are not really work-specific and this process isn’t very well documented for people who haven’t been doing this sort of upgrade process for 25 years.
Our source and object trees are read-only exported from the build server over NFS, which causes things to be slow. /etc/make.conf and /etc/src.conf are symbolic links on all of our servers to the master copies in /usr/src so that make installworld can find the configuration parameters the system was built with.
This may be a little off-topic for this board (forgive me if it is, please). However, I wanted to say that I'm one of the people who works on DistroWatch (distrowatch.com) and this past week we had to deal with a server facing hardware failure. We had a discussion about whether to continue running Debian or switch to something else.
The primary "something else" option turned out to be FreeBSD and it is what we eventually went with. It took a while to convert everything over from working with Debian GNU/Linux to FreeBSD 12 (some script incompatibilities, different paths, some changes to web server configuration, networking IPv6 troubles). But in the end we ended up with a good, FreeBSD-based experience.
Since the transition was successful, though certainly not seamless, I thought people might want to do a Q&A on the migration process. Especially for those thinking of making the same switch.
iked(8) no longer automatically blocks unencrypted outbound IPv6 packets. This feature was intended to avoid accidental leakage, but in practice was found to mostly be a cause of misconfiguration.
If you previously used iked(8)'s -6 flag to disable this feature, it is no longer needed and should be removed from /etc/rc.conf.local if used.
“Don’t use ZFS. It’s that simple. It was always more of a buzzword than anything else, I feel, and the licensing issues just make it a non-starter for me.”
This is what Linus Torvalds said in a mailing list to once again express his disliking for ZFS filesystem specially over its licensing.
To avoid unnecessary confusion, this is more intended for Linux distributions, kernel developers and maintainers rather than individual Linux users.
We successfully incorporated the Argon2 reference implementation into NetBSD/amd64 for our 2019 Google Summer of Coding project. We introduced our project here and provided some hints on how to select parameters here. For our final report, we will provide an overview of what changes were made to complete the project.
The Argon2 reference implementation, available here, is available under both the Creative Commons CC0 1.0 and the Apache Public License 2.0. To import the reference implementation into src/external, we chose to use the Apache 2.0 license for this project.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February 2019, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues, fixing watchpoint and threading support.
Throughout December I've continued working on our build bot maintenance, in particular enabling compiler-rt tests. I've revived and finished my old patch for extended register state (XState) in core dumps. I've started working on bringing proper i386 support to LLDB.
Distrohoppers serves up something very different in the form of desktop BSD, and we reveal how important freedom is to us all.
Links:
We make an appeal to keep Linux powerful and avoid the Macification of the desktop, and review the latest developer-focused XPS 13.
Plus some community news that's getting missed, picks, and more.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Jim Salter, co-host of Jupiter Broadcasting's TechSNAP and technology reporter at Ars Technica. We explore his relationship with computers via the US Navy, when code has it's place in either proprietary or open source licensing, the value in being a social gadfly, and Jim's motivations behind his writing and who he is hoping to reach and inspire.
Special Guest: Jim Salter.
Links:
Nextcloud's new release is so big it gets a rebrand, why Mozilla had a round of lay-offs, and the real possibility of Steam coming to Chrome OS.
Plus, the sad loss of a community member, and more.
Links:
Ell and Wes are joined by Infrastructure Engineer Seth McCombs for a chat about how he got started in tech, the hard transition from legacy data centers to the cloud, and why being honest about both success and failure can lead to a better open source community.
Special Guest: Seth McCombs.
Links:
Context switching, improving Linux conferences, a positive approach to life, what makes us cringe, and more.
#ErrorAsk: What's the dumbest idea for an app that you can come up with?
00:03:24 Have you ever met your own doppelganger?
00:06:55 Can you just jump right in to each type of task, or do you have a ritual before?
00:13:12 What’s missing from Linux and open source conferences?
00:23:53 Should you “yes, and” life?
00:33:37 What makes you cringe?
Links:
Your Impact on FreeBSD in 2019, Wireguard on OpenBSD Router, Amazon now has FreeBSD/ARM 12, pkgsrc-2019Q4, The Joys of UNIX Keyboards, OpenBSD on Digital Ocean, and more.
It’s hard to believe that 2019 is nearly over. It has been an amazing year for supporting the FreeBSD Project and community! Why do I say that? Because as I reflect over the past 12 months, I realize how many events we’ve attended all over the world, and how many lives we’ve touched in so many ways. From advocating for FreeBSD to implementing FreeBSD features, my team has been there to help make FreeBSD the best open source project and operating system out there.
In 2019, we focused on supporting a few key areas where the Project needed the most help. The first area was software development. Whether it was contracting FreeBSD developers to work on projects like wifi support, to providing internal staff to quickly implement hardware workarounds, we’ve stepped in to help keep FreeBSD innovative, secure, and reliable. Software development includes supporting the tools and infrastructure that make the development process go smoothly, and we’re on it with team members heading up the Continuous Integration efforts, and actively involved in the clusteradmin and security teams.
Our advocacy efforts focused on recruiting new users and contributors to the Project. We attended and participated in 38 conferences and events in 21 countries. From giving FreeBSD presentations and workshops to staffing tables, we were able to have 1:1 conversations with thousands of attendees.
Our travels also provided opportunities to talk directly with FreeBSD commercial and individual users, contributors, and future FreeBSD user/contributors. We’ve seen an increase in use and interest in FreeBSD from all of these organizations and individuals. These meetings give us a chance to learn more about what organizations need and what they and other individuals are working on. The information helps inform the work we should fund.
wireguard (wg) is a modern vpn protocol, using the latest class of encryption algorithms while at the same time promising speed and a small code base.
modern crypto and lean code are also tenants of openbsd, thus it was a no brainer to migrate my router from openvpn over to wireguard.
my setup : a collection of devices, both wired and wireless, that are nat’d through my router (openbsd 6.6) out via my vpn provider azire* and out to the internet using wg-quick to start wg.
running : doubtless this could be improved on, but currently i start wg manually when my router boots. this, and the nat'ing on the vpn interface mean its impossible for clients to connect to the internet without the vpn being up. as my router is on a ups and only reboots when a kernel patch requires it, it’s a compromise i can live with. run wg-quick (please replace vpn with whatever you named your wg .conf file.) and reload pf rules.
AWS, the cloud division of Amazon, announced in December the next generation of its ARM processors, the Graviton2. This is a custom chip design with a 7nm architecture. It is based on 64-bit ARM Neoverse cores.
Compared to first-generation Graviton processors (A1), today’s new chips should deliver up to 7x the performance of A1 instances in some cases. Floating point performance is now twice as fast. There are additional memory channels and cache speed memory access should be much faster.
The company is working on three types of Graviton2 EC2 instances that should be available soon. Instances with a “g” suffix are powered by Graviton2 chips. If they have a “d” suffix, it also means that they have NVMe local storage.
General-purpose instances (M6g and M6gd)
Compute-optimized instances (C6g and C6gd)
Memory-optimized instances (R6g and R6gd)
You can choose instances with up to 64 vCPUs, 512 GiB of memory and 25 Gbps networking.
And you can see that ARM-powered servers are not just a fad. AWS already promises a 40% better price/performance ratio with ARM-based instances when you compare them with x86-based instances.
AWS has been working with operating system vendors and independent software vendors to help them release software that runs on ARM. ARM-based EC2 instances support Amazon Linux 2, Ubuntu, Red Hat, SUSE, Fedora, Debian and FreeBSD. It also works with multiple container services (Docker, Amazon ECS, and Amazon Elastic Kubernetes Service).
The pkgsrc developers are proud to announce the 65th quarterly release of pkgsrc, the cross-platform packaging system. pkgsrc is available with more than 20,000 packages, running on 23 separate platforms; more information on pkgsrc itself is available at https://www.pkgsrc.org/
In total, 190 packages were added, 96 packages were removed, and 1,868 package updates (to 1388 unique packages) were processed since the pkgsrc-2019Q3 release. As usual, a large number of updates and additions were processed for packages for go (14), guile (11), perl (170), php (10), python (426), and ruby (110). This continues pkgsrc's tradition of adding useful packages, updating many packages to more current versions, and pruning unmaintained packages that are believed to have essentially no users.
I fell in love with a dead keyboard layout.
A decade or so ago while helping a friends father clean out an old building, we came across an ancient Sun Microsystems server. We found it curious. Everything about it was different from what we were used to. The command line was black on white, the connectors strange and foreign, and the keyboard layout was bizarre.
We never did much with it; turning it on made all the lights in his home dim, and our joint knowledge of UNIX was nonexistent. It sat in his bedroom for years supporting his television at the foot of his bed.
I never forgot that keyboard though. The thought that there was this alternative layout out there seemed intriguing to me.
Last night I had a need to put together a new OpenBSD machine. Since I already use DigitalOcean for one of my public DNS servers I wanted to use them for this need but sadly like all too many of the cloud providers they don't support OpenBSD. Now they do support FreeBSD and I found a couple writeups that show how to use FreeBSD as a shim to install OpenBSD.
They are both sort of old at this point and with OpenBSD 6.6 out I ran into a bit of a snag. The default these days is to use a GPT partition table to enable EFI booting. This is generally pretty sane but it looks to me like the FreeBSD droplet doesn't support this. After the installer rebooted the VM failed to boot, being unable to find the bootloader.
Thankfully DigitalOcean has a recovery ISO that you can boot by simply switching to it and powering off and then on your Droplet.
Wyze and Xiaomi suffer major cloud hosted blunders, so Alex tells us about his new fully offline camera security system, tied into Shinobi.
Plus Chris gets ready for Project Off-Grid's solar upgrade, our new favorite self-hosted SpeedTest app, and a Ring alternative.
Links:
Linus Torvalds says don't use ZFS, but we think he got a few of the facts wrong. Jim Salter joins us to help us explain what Linus got right, and what he got wrong.
Plus some really handy Linux picks, some community news, and a live broadcast from Seattle's Snowpocalypse!
Special Guest: Jim Salter.
Links:
Brent sits down with Chase Nunes, co-host of Unfilter, Jupiter Broadcasting's former weekly media watchdog. We discuss his beginnings in podcasting and how Unfilter came to be, his contributions to LinuxFest Northwest, his love for Linux in the media broadcasting industry, and his recent 15-month life-changing personal transformation journey.
Chase is a Broadcast Engineer for KOMO-TV 4 ABC in Seattle, and founder of gaming & pinball eSports platform GeekGamer.TV.
Special Guest: Chase Nunes.
Links:
Are we overloaded with open source licenses? We consider a simpler future. Results from the Debian init vote are in, and why Amazon's new open source project might be worth checking out.
Plus, our reaction to Google's search ballot scheme launch.
Links:
Join Alex and Brent for a chat about upgrading your home network with an eye towards stability, simplicity, and hosting things yourself.
Links:
Compiling the Linux kernel with Clang has never been easier, so we explore this alternative compiler and what it brings to the ecosystem.
Plus Debian's continued init system debate, and our frustrations over 5G reporting.
Links:
Announcing HyperbolaBSD, IPFW In-Kernel NAT setup on FreeBSD, Wayland and WebRTC enabled for NetBSD 9/Linux, LLDB Threading support ready for mainline, OpenSSH U2F/FIDO support in base, Dragonfly drm/i915: Update, and more.
Due to the Linux kernel rapidly proceeding down an unstable path, we are planning on implementing a completely new OS derived from several BSD implementations.
This was not an easy decision to make, but we wish to use our time and resources to create a viable alternative to the current operating system trends which are actively seeking to undermine user choice and freedom.
This will not be a "distro", but a hard fork of the OpenBSD kernel and userspace including new code written under GPLv3 and LGPLv3 to replace GPL-incompatible parts and non-free ones.
Future versions of Hyperbola will be using HyperbolaBSD which will have the new kernel, userspace and not be ABI compatible with previous versions.
HyperbolaBSD is intended to be modular and minimalist so other projects will be able to re-use the code under free license.
After graduating college, I am moving from Brooklyn, NY to Redmond, WA (guess where I got a job). I always wanted to re-do my OPNsense firewall (currently a HP T730) with stock FreeBSD and IPFW’s in-kernel NAT.
Why IPFW? Benchmarks have shown IPFW to be faster which is especially good for my Tor relay, and because I can! However, one downside of IPFW is less documentation vs PF, even less without natd (which we’re not using), and this took me time to figure this out.
But since my T730 is already packed, I am testing this on a old PC with two NICs, and my laptop [1] as a client with an USB-to-Ethernet adapter.
This is just a heads up that the Wayland option is now turned on by
default for NetBSD 9 and Linux in cases where it peacefully coexists
with X11.
The WebRTC option has also been enabled by default on NetBSD 9 for two Firefox versions: www/firefox, www/firefox68
Please keep me informed of any fallout. Hopefully, there will be none.
If you want to try out Wayland-related things on NetBSD 9, wm/velox/MESSAGE may be interesting for you.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.
So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.
Hardware backed keys can be generated using "ssh-keygen -t ecdsa-sk" (or "ed25519-sk" if your token supports it). Many tokens require to be touched/tapped to confirm this step.
You'll get a public/private keypair back as usual, except in this case, the private key file does not contain a highly-sensitive private key but instead holds a "key handle" that is used by the security key to derive the real private key at signing time.
So, stealing a copy of the private key file without also stealing your security key (or access to it) should not give the attacker anything.
Trying to explain what Linux and open source are can be tricky. We discuss our various approaches, and how they differ depending on the experience of who we are explaining them to.
Find out what's happening in 2020 before it happens. Our crew returns from the future with predictions so perfect you could bet some Dogecoin on it.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Joe Ressington, Jupiter Broadcasting Podcast Content Director, Late Night Linux host, and musician, for an exploration of his journey in podcasting, a behind-the-scenes of User Error and Linux Action News, how music led to Linux, the origins of Brunch with Brent's theme music, and more.
Special Guest: Joe Ressington.
Links:
It's our annual predictions episode. We review how we did in 2019, and then set out to predict what we think will happen in 2020.
Whether the Web is yesterday’s news, a possible new approach to law and order, resolving conflicts, and some surprisingly useful life hacks.
00:00:37 Is the Web irrelevant now
00:09:12 Should we apply a git-style approach to improve laws?
00:16:52 Is it wrong to take the blame when it's not your fault?
00:29:26 What's your best life hack?
How learning OpenBSD makes computers suck a little less, How Unix works, FreeBSD 12.1 Runs Well on Ryzen Threadripper 3970X, BSDCan CFP, HardenedBSD Infrastructure Goals, and more.
How much better could things actually be if we abandoned the enterprise development model?
Next I will compare this enterprise development approach with non-enterprise development - projects such as OpenBSD, which do not hesitate to introduce ABI breaking changes to improve the codebase.
One of the most commonly referred to pillars of the project's philosophy has long been its emphasis on clean functional code. Any code which makes it into OpenBSD is subject to ongoing aggressive audits for deprecated, or otherwise unmaintained code in order to reduce cruft and attack surface. Additionally the project creator, Theo de Raadt, and his team of core developers engage in ongoing development for proactive mitigations for various attack classes many of which are directly adopted by various multi-platform userland applications as well as the operating systems themselves (Windows, Linux, and the other BSDs). Frequently it is the case that introducing new features (not just deprecating old ones) introduces new incompatibilities against previously functional binaries compiled for OpenBSD.
To prevent the sort of kernel memory bloat that has plagued so many other operating systems for years, the project enforces a hard ceiling on the number of lines of code that can ever be in ring 0 at a given time. Current estimates guess the number of bugs per line of code in the Linux kernel are around 1 bug per every 10,000 lines of code. Think of this in the context of the scope creep seen in the Linux kernel (which if I recall correctly is currently at around 100,000,000 lines of code), as well as the Windows NT kernel (500,000,000 lines of code) and you quickly begin to understand how adding more and more functionality into the most privileged components of the operating system without first removing old components begins to add up in terms of the drastic difference seen between these systems in the number of zero day exploits caught in the wild respectively.
Unix is beautiful. Allow me to paint some happy little trees for you. I’m not going to explain a bunch of commands – that’s boring, and there’s a million tutorials on the web doing that already. I’m going to leave you with the ability to reason about the system.
Every fancy thing you want done is one google search away.
But understanding why the solution does what you want is not the same.
That’s what gives you real power, the power to not be afraid.
And since it rhymes, it must be true.
For those of you interested in AMD's new Ryzen Threadripper 3960X/3970X processors with TRX40 motherboards for running FreeBSD, the experience in our initial testing has been surprisingly pleasant. In fact, it works out-of-the-box which one could argue is better than the current Linux support that needs the MCE workaround for booting. Here are some benchmarks of FreeBSD 12.1 on the Threadripper 3970X compared to Linux and Windows for this new HEDT platform.
It was refreshing to see FreeBSD 12.1 booting and running just fine with the Ryzen Threadripper 3970X 32-core/64-thread processor from the ASUS ROG ZENITH II EXTREME motherboard and all core functionality working including the PCIe 4.0 NVMe SSD storage, onboard networking, etc. The system was running with 4 x 16GB DDR4-3600 memory, 1TB Corsair Force MP600 NVMe SSD, and Radeon RX 580 graphics. It was refreshing to see FreeBSD 12.1 running well with this high-end AMD Threadripper system considering Linux even needed a boot workaround.
While the FreeBSD 12.1 experience was trouble-free with the ASUS TRX40 motherboard (ROG Zenith II Extreme) and AMD Ryzen Threadripper 3970X, DragonFlyBSD unfortunately was not. Both DragonFlyBSD 5.6.2 stable and the DragonFlyBSD daily development snapshot from last week were yielding a panic on boot. So with that, DragonFlyBSD wasn't tested for this Threadripper 3970X comparison but just FreeBSD 12.1.
FreeBSD 12.1 on the Threadripper 3970X was benchmarked both with its default LLVM Clang 8.0.1 compiler and again with GCC 9.2 from ports for ruling out compiler differences. The FreeBSD 12.1 performance was compared to last week's Windows 10 vs. Linux benchmarks with the same system.
BSDCan 2020 will be held 5-6 (Fri-Sat) June, 2020 in Ottawa, at the University of Ottawa. It will be preceded by two days of tutorials on 3-4 June (Wed-Thu).
NOTE the change of month in 2020 back to June Also: do not miss out on the Goat BOF on Tuesday 2 June.
We are now accepting proposals for talks. The talks should be designed with a very strong technical content bias. Proposals of a business development or marketing nature are not appropriate for this venue.
If you are doing something interesting with a BSD operating system, please submit a proposal. Whether you are developing a very complex system using BSD as the foundation, or helping others and have a story to tell about how BSD played a role, we want to hear about your experience. People using BSD as a platform for research are also encouraged to submit a proposal. Possible topics include:
From the BSDCan website, the Archives section will allow you to review the wide variety of past BSDCan presentations as further examples.
Both users and developers are encouraged to share their experiences.
2019 has been an extremely productive year with regards to HardenedBSD's infrastructure. Several opportunities aligned themselves in such a way as to open a door for a near-complete rebuild with a vast expansion.
The last few months especially have seen a major expansion of our infrastructure. We obtained a number of to-be-retired Dell R410 servers. The crash of our nightly build server provided the opportunity to deploy these R410 servers, doubling our build capacity.
My available time to spend on HardenedBSD has decreased compared to this time last year. As part of rebuilding our infrastructure, I wanted to enable the community to be able to contribute. I'm structuring the work such that help is just a pull request away. Those in the HardenedBSD community who want to contribute to the infrastructure work can simply open a pull request. I'll review the code, and deploy it after a successful review. Users/contributors don't need access to our servers in order to improve them.
My primary goal for the rest of 2019 and into 2020 is to become fully self-hosted, with the sole exception of email. I want to transition the source-of-truth git repos to our own infrastructure. We will still provide a read-only mirror on GitHub.
As I develop this infrastructure, I'm doing so with human rights in mind. HardenedBSD is in a very unique position. In 2020, I plan to provide production Tor Onion Services for the various bits of our infrastructure. HardenedBSD will provide access to its various internal services to its developers and contributors. The entire development lifecycle, going from dev to prod, will be able to happen over Tor.
Transparency will be key moving forward. Logs for the auto-sync script are now published directly to GitHub. Build logs will be, soon, too. Logs of all automated processes, and the code for those processes, will be tracked publicly via git. This will be especially crucial for development over Tor.
Integrating Tor into our infrastructure so deeply increases risk and maintenance burden. However, I believe that through added transparency, we will be able to mitigate risk. Periodic audits will need to be performed and published.
I hope to migrate HardenedBSD's site away from Drupal to a static site generator. We don't really need the dynamic capabilities Drupal gives us. The many security issues Drupal and PHP both bring also leave much to be desired.
So, that's about it. I spent the last few months of 2019 laying the foundation for a successful 2020. I'm excited to see how the project grows.
Master of details, open source advocate and YouTuber, Quindor from Intermittent.Tech joins us for a chat about tuya-convert to avoid planned hardware obsolescence, his new 100TB server build, highly available home setups, and his DIY LED project.
Special Guest: Andries Faassen.
Links:
We review our predictions and own up to what we got wrong, and what we got right in 2019.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Jackie DeVore, co-host of horror podcast Sirens of Scream and multi-disciplinary artist. Our in-person chat explores the origins of her podcasting, creativity as a lifestyle, women in tech, art, and gaming, and her co-founding and recent launch of Hell Bunny Independents Club, a women's inclusive and supportive digital safe space.
Special Guest: Jackie DeVore.
Links:
We review the major moments of the year's news, and discuss how they impacted our world.
Links:
From classifying cats to colorizing old photos we share our top tips and tools for starting your machine learning journey. Plus, learn why Nebula is our favorite new VPN technology, and how it can help simplify and secure your network.
Links:
Authentication Vulnerabilities in OpenBSD, NetBSD 9.0 RC1 is available, Running FreeNAS on a DigitalOcean droplet, NomadBSD 1.3 is here, at e2k19 nobody can hear you scream, and more.
From the manual page of login.conf:
OpenBSD uses BSD Authentication, which is made up of a variety of authentication styles. The authentication styles currently provided are:
> passwd Request a password and check it against the password in the master.passwd file. See login_passwd(8).
> skey Send a challenge and request a response, checking it with S/Key (tm) authentication. See login_skey(8).
> yubikey Authenticate using a Yubico YubiKey token. See login_yubikey(8).
> For any given style, the program /usr/libexec/auth/login_style is used to
> perform the authentication. The synopsis of this program is:
> /usr/libexec/auth/login_style [-v name=value] [-s service] username class
This is the first piece of the puzzle: if an attacker specifies a username of the form "-option", they can influence the behavior of the authentication program in unexpected ways.
login_passwd [-s service] [-v wheel=yes|no] [-v lastchance=yes|no] user [class] The service argument specifies which protocol to use with the invoking program. The allowed protocols are login, challenge, and response. (The challenge protocol is silently ignored but will report success as passwd-style authentication is not challenge-response based).
This is the second piece of the puzzle: if an attacker specifies the username "-schallenge" (or "-schallenge:passwd" to force a passwd-style authentication), then the authentication is automatically successful and therefore bypassed.
Case study: smtpd
Case study: ldapd
Case study: radiusd
Case study: sshd
Acknowledgments: We thank Theo de Raadt and the OpenBSD developers for their incredibly quick response: they published patches for these vulnerabilities less than 40 hours after our initial contact. We also thank MITRE's CVE Assignment Team.
Support for multiple keyboard layouts has been added.
www/palemoon has been removed.
mail/thunderbird has been removed.
audio/audacity has been added.
deskutils/orage has been added.
the password manager fpm2 has been replaced by KeePassXC
mail/sylpheed has been replaced by mail/claws-mail
multimedia/simplescreenrecorder has been added.
DSBMC has been changed to DSBMC-Qt
Many small improvements and bug fixes.
Special Guest: Mariusz Zaborski.
Ultimate privacy in Distrohoppers, and the best ways to run other operating systems within your current Linux distro.
Links:
Open source won the last decade, but what if it hadn’t? We look back at some major milestones and reflect on a world where they never existed.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Catherine Kretzschmar, professional music teacher, coding bootcamp enlistee, and humanist celebrant, for an in-person connective chat on the relationship between music and coding, the quality-of-life implications of ever-evolving home automation, an intro to humanist celebrancy, and more.
Catherine is a good friend of the Jupiter Broadcasting family and wife of Alex Kretzschmar, co-host of Self-Hosted.
Special Guest: Catherine Kretzcschmar.
Links:
Canonical releases a "mini-cloud" on your workstation, the KDE ecosystem has some big news, and the smart home might have just become more open.
Plus Firefox's new DoH partner, and signs of life from the Atari VCS.
Links:
Brent sits down with Jason Spisak, professional voice actor, actor, producer, and co-founder of multiple Linux-related projects including Lycoris, Symphony OS, and Symple PC. In Part 2 we explore Jason's various voice acting roles, his approach to embodying roles like The Joker, the setup in his Linux-only audio recording studios, the power in collaborative innovation, examining yourself through meditation, and more.
Special Guest: Jason Spisak.
Links:
The future of Internet video, the best way to develop open source software, skills vs talents, and our favourite types of animal companions.
00:00:24 What is likely to knock YouTube off its iron throne?
00:09:12 Is it really Open Source software if it’s not developed collaboratively?
00:20:54 What's the one thing you wish you could do well but are terrible at?
00:33:18 Dogs or cats?
In this episode, we interview Michael W. Lucas about his latest book projects, including the upcoming SNMP Mastery book.
Special Guest: Michael W Lucas.
Sometimes one project can lead to a hundred more. We celebrate Home Assistant's new release, the inclusion of the WLED integration and fall down the DIY project rabbit hole.
Plus some clever power solutions, cheap LED light strips, and a test drive of Project Off-Grid.
We recorded our first ever live stream to accompany this where we flash an ESP8266 board in seconds using WLED and esptool. This can be found on YouTube.
Links:
Big things are coming to Microsoft's WSL so we get the inside scoop on what's just around the corner.
Plus a few new GNOME features, some Arch server follow up, and more!
Special Guests: Alex Kretzschmar, Brent Gervais, and Hayden Barnes.
Links:
Brent sits down with Jason Spisak, professional voice actor, actor, producer, and co-founder of multiple Linux-related projects including Lycoris, Symphony OS, and Symple PC. In Part 1 we chat about everything from Jason's deep motivations behind his Linux projects, to patents vs. open source, digital independence and the nature of human endeavor. A few additional voices join us throughout for good measure...
Brunch with Brent: Jason Spisak Part 2 comes our way this Friday.
Special Guest: Jason Spisak.
Links:
The first desktop Office 365 app arrives, Ubuntu commits to current and future Raspberry Pi boards, and why the near-term future of Linux gaming looks a bit rocky.
Plus, our concerns with Google's clever long-term Fuchsia strategy.
Links:
Brian Beck joins Ell and Wes to chat about what's going on at 10BitWorks, 3D printing and the need to tinker, and how to find a makerspace near you.
Special Guest: Brian Beck.
Sponsored By:
Links:
As the rollout of 5G finally arrives, we take some time to explain the fundamentals of the next generation of wireless technology.
Plus the surprising performance of eero's mesh Wi-Fi, some great news for WireGuard, and an update on the Librem 5.
Sponsored By:
Links:
LLDB Threading support now ready, Multiple IPSec VPN tunnels with FreeBSD, Netflix Optimized FreeBSD's Network Stack More Than Doubled AMD EPYC Performance, happy eyeballs with unwind(8), AWS got FreeBSD ARM 12, OpenSSH U2F/FIDO support, and more.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.
So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.
The FreeBSD handbook describes an IPSec VPN tunnel between 2 FreeBSD hosts (see https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html)
But it is also possible to have multiple, 2 or more, IPSec VPN tunnels created and running on a FreeBSD host. How to implement and configure this is described below.
The requirements is to have 3 locations (A, B and C) connected with IPSec VPN tunnels using FreeBSD (11.3-RELEASE).
Each location has 1 IPSec VPN host running FreeBSD (VPN host A, B and C).
VPN host A has 2 IPSec VPN tunnels: 1 to location B (VPN host B) and 1 to location C (VPN host C).
Drew Gallatin of Netflix presented at the recent EuroBSDcon 2019 conference in Norway on the company's network stack optimizations to FreeBSD. Netflix was working on being able to deliver 200Gb/s network performance for video streaming out of Intel Xeon and AMD EPYC servers, to which they are now at 190Gb/s+ and in the process that doubled the potential of EPYC Naples/Rome servers and also very hefty upgrades too for Intel.
Netflix has long been known to be using FreeBSD in their data centers particularly where network performance is concerned. But in wanting to deliver 200Gb/s throughput from individual servers led them to making NUMA optimizations to the FreeBSD network stack. Allocating NUMA local memory for kernel TLS crypto buffers and for backing files sent via sentfile were among their optimizations. Changes to network connection handling and dealing with incoming connections to Nginx were also made.
For those just wanting the end result, Netflix's NUMA optimizations to FreeBSD resulted in their Intel Xeon servers going from 105Gb/s to 191Gb/s while the NUMA fabric utilization dropped from 40% to 13%.
In case you are wondering why happy eyeballs: It's a variation on this:
https://en.wikipedia.org/wiki/Happy_Eyeballsunwind has a concept of a best nameserver type. It considers a configured DoT nameserver to be better than doing it's own recursive resolving. Recursive resolving is considered to be better than asking the dhcp provided nameservers.
This diff sorts the nameserver types by quality, as above (validation, resolving, dead...), and as a tie breaker it adds the median of the round trip time of previous queries into the mix.
One other interesting thing about this is that it gets us past captive portals without a check URL, that's why this diff is so huge, it rips out all the captive portal stuff (please apply with patch -E):
17 files changed, 385 insertions(+), 1683 deletions(-)Please test this. I'm particularly interested in reports from people who move between networks and need to get past captive portals.
Product Overview
FreeBSD is an operating system used to power servers, desktops, and embedded systems. Derived from BSD, the version of UNIX developed at the University of California, Berkeley, FreeBSD has been continually developed by a large community for more than 30 years.
FreeBSD's networking, security, storage, and monitoring features, including the pf firewall, the Capsicum and CloudABI capability frameworks, the ZFS filesystem, and the DTrace dynamic tracing framework, make FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage systems.
I just committed all the dependencies for OpenSSH security key (U2F) support to base and tweaked OpenSSH to use them directly. This means there will be no additional configuration hoops to jump through to use U2F/FIDO2 security keys.
Hardware backed keys can be generated using "ssh-keygen -t ecdsa-sk" (or "ed25519-sk" if your token supports it). Many tokens require to be touched/tapped to confirm this step.
You'll get a public/private keypair back as usual, except in this case, the private key file does not contain a highly-sensitive private key but instead holds a "key handle" that is used by the security key to derive the real private key at signing time.
So, stealing a copy of the private key file without also stealing your security key (or access to it) should not give the attacker anything.
Once you have generated a key, you can use it normally - i.e. add it to an agent, copy it to your destination's authorized_keys files (assuming they are running -current too), etc. At authentication time, you will be prompted to tap your security key to confirm the signature operation - this makes theft-of-access attacks against security keys more difficult too.
Please test this thoroughly - it's a big change that we want to have stable before the next release.
Sponsored By:
All three of us have different levels of experience with Linux but there are tons of things that we wish we'd learned earlier in our journey.
From gatekeeping to community culture, command line tricks to backups, and more.
Sponsored By:
Links:
We're myth-busting this week as we take a perfectly functioning production server and switch it to Arch. Is this rolling distro too dangerous to run in production, or can the right approach unlock the perfect server? We try it so you don't have to.
Plus some big community news, feedback, and more.
Special Guest: Brent Gervais.
Sponsored By:
Links:
Brent sits down with Alan Pope (popey), who shares his knack for fuzzy-testing, the beginnings of Ubuntu Podcast, insights into Ubuntu Touch and Unity, the joys and perils of being "Internet Famous", and how to contribute meaningfully to your favorite Linux distributions.
popey is a Developer Advocate at Canonical working on Snapcraft & Ubuntu, co-host of User Error and Ubuntu Podcast.
Special Guest: Alan Pope.
Sponsored By:
Links:
Ubuntu Pro is a click away, and their kernel goes rolling on AWS. We process the range of announcements, while Mozilla cranks up the security and impresses us with DeepSpeech.
Plus why Ubuntu is taking the Windows Subsystem for Linux so seriously.
Sponsored By:
Links:
Ell and Wes sit down with Karthik Gaekwad to sort through the buzzword bingo and explain what DevSecOps is, what it isn’t, and why security should be part of the full lifecycle of your apps.
Special Guest: Karthik Gaekwad.
Sponsored By:
Links:
Talking to ourselves, delicious family meals, and the complexities of modern work.
Plus inexpensive acquisitions, the price we put on security, and popey refusing to answer the simplest of questions.
00:00:47 Is turkey dinner really worth the effort?
00:06:54 What's the best bargain you've ever acquired?
00:12:18 If you were given $1,000 for every person you shared your master password with, how many people would you share it with?
00:18:49 Have you ever had an imaginary friend?
00:22:55 Is the gig economy good or bad?
00:29:46 Beer/cider: warm or flat?
Sponsored By:
Links:
Home Assistant has changed our families' lives for the better. We share tips for getting started, implementing automation, devices we use, and our favorite integrations.
Plus Alex's thoughts on automating his new LG TV and be sure to check the links!
Sponsored By:
Links:
All data is fully encrypted between your device and your Home Assistant instance. No snooping
We read FreeBSD’s third quarterly status report, OpenBSD on Sparc64, ZoL repo move to OpenZFS, GEOM NOP, keeping NetBSD up-to-date, and more.
This quarter the reports team has been more active than usual thanks to a better organization: calls for reports and reminders have been sent regularly, reports have been reviewed and merged quickly (I would like to thank debdrup@ in particular for his reviewing work).
Efficiency could still be improved with the help of our community. In particular, the quarterly team has found that many reports have arrived in the last days before the deadline or even after. I would like to invite the community to follow the guidelines below that can help us sending out the reports sooner.
Starting from next quarter, all quarterly status reports will be prepared the last month of the quarter itself, instead of the first month after the quarter's end. This means that deadlines for submitting reports will be the 1st of January, April, July and October.
Next quarter will then be a short one, covering the months of November and December only and the report will probably be out in mid January.
OpenBSD, huh? Yes, I usually write about FreeBSD and that’s in fact what I tried installing on the machine first. But I ran into problems with it very early on (never even reached single user mode) and put it aside for later. Since I powered up the SunFire again last month, I needed an OS now and chose OpenBSD for the simple reason that I have it available.
First I wanted to call this article simply “OpenBSD on SPARC” – but that would have been misleading since OpenBSD used to support 32-bit SPARC processors, too. The platform was just put to rest after the 5.9 release.
Version 6.0 was the last release of OpenBSD that came on CD-ROM. When I bought it, I thought that I’d never use the SPARC CD. But here was the chance! While it is an obsolete release, it comes with the cryptographic signatures to verify the next release. So the plan is to start at 6.0 as I can trust the original CDs and then update to the latest release. This will also be an opportunity to recap on some of the things that changed over the various versions.
Because it will contain the ZFS source code for both Linux and FreeBSD, we will rename the "ZFSonLinux" code repository to "OpenZFS". Specifically, the repo at http://github.com/ZFSonLinux/zfs will be moved to the OpenZFS organization, at http://github.com/OpenZFS/zfs.
The next major release of ZFS for Linux and FreeBSD will be "OpenZFS 2.0", and is expected to ship in 2020.
A long time ago— like 15 years ago— I worked at Sun Microsystems. The company was nearly dead at the time (it died a couple years later) because they didn't make anything that anyone wanted to buy anymore. So they had a lot of strange ideas about how they'd make their comeback.
Sometimes while testing file systems or applications you want to simulate some errors on the disk level. The first time I heard about this need was from Baptiste Daroussin during his presentation at AsiaBSDCon 2016. He mentioned how they had built a test lab with it. The same need was recently discussed during the PGCon 2019, to test a PostgreSQL instance. If you are FreeBSD user, I have great news for you: there is a GEOM provider which allows you to simulate a failing device.
GNOP allows us to configure transparent providers from existing ones. The first interesting option of it is that we can slice the device into smaller pieces, thanks to the ‘offset option’ and ‘stripsesize’. This allows us to observe how the data on the disk is changing. Let’s assume that we want to observe the changes in the GPT table when the GPT flags are added or removed (for example the bootme flags which are described here). We can use dd every time and analyze it using absolute values from the disks.
This is a tutorial to guide you through the shiny new pkg_comp 2.0 on NetBSD.
Goals: to use pkg_comp 2.0 to build a binary repository of all the packages you are interested in; to keep the repository fresh on a daily basis; and to use that repository with pkgin to maintain your NetBSD system up-to-date and secure.
This tutorial is specifically targeted at NetBSD but should work on other platforms with some small changes. Expect, at the very least, a macOS-specific tutorial as soon as I create a pkg_comp standalone installer for that platform.
Give the gift of remote support with our neat SSH trick. Also, Cassidy from elementary OS joins us to discuss what's great about their new release.
Plus we'll share some gadget gift ideas, and what we're building for the holidays.
Special Guests: Alex Kretzschmar and Cassidy James Blaede.
Sponsored By:
Links:
Brent sits down with Rocco of Big Daddy Linux for a conversation about the origins of Linux Spotlight, some shared behind-the-scenes podcasting perspectives, and just how great we feel about our Linux community.
Special Guest: Rocco (BigDaddyLinux).
Sponsored By:
Links:
We share Mozilla's concerns over Contract for the Web, and try out Kali Linux's new tricks.
Also, our thoughts on the new Alexa Voice service coming to low-end IoT devices, and much more.
Sponsored By:
Links:
We explore the rapid adoption of machine learning, its impact on computer architecture, and how to avoid AI snake oil.
Plus so-so SSD security, and a new wireless protocol that works best where the Wi-Fi sucks.
Sponsored By:
Links:
LPI releases BSD Certification, openzfs trip report, Using FreeBSD with ports, LLDB threading support ready, Linux versus Open Source Unix, and more.
Linux Professional Institute extends its Open Technology certification track with the BSD Specialist Certification. Starting October 30, 2019, BSD Specialist exams will be globally available. The certification was developed in collaboration with the BSD Certification Group which merged with Linux Professional Institute in 2018.
G. Matthew Rice, the Executive Director of Linux Professional Institute says that "the release of the BSD Specialist certification marks a major milestone for Linux Professional Institute. With this new credential, we are reaffirming our belief in the value of, and support for, all open source technologies. As much as possible, future credentials and educational programs will include coverage of BSD.”
The seventh annual OpenZFS Developer Summit took place on November 4th and 5th in San Francisco and brought together a healthy mix of familiar faces and new community participants. Several folks from iXsystems took part in the talks, hacking, and socializing at this amazing annual event. The messages of the event can be summed up as Unification, Refinement, and Ecosystem Tooling.
In the previous post I explained why sometimes building your software from ports may make sense on FreeBSD. I also introduced the reader to the old-fashioned way of using tools to make working with ports a bit more convenient.
In this follow-up post we’re going to take a closer look at portmaster and see how it especially makes updating from ports much, much easier. For people coming here without having read the previous article: What I describe here is not what every FreeBSD admin today should consider good practice (any more)! It can still be useful in special cases, but my main intention is to discuss this for building up the foundation for what you actually should do today.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support, extending NetBSD's ptrace interface to cover more register types and fix compat32 issues and fixing watchpoint support. Then, I've started working on improving thread support which is taking longer than expected. You can read more about that in my September 2019 report.
So far the number of issues uncovered while enabling proper threading support has stopped me from merging the work-in-progress patches. However, I've finally reached the point where I believe that the current work can be merged and the remaining problems can be resolved afterwards. More on that and other LLVM-related events happening during the last month in this report.
Sponsored By:
A chance to learn some Linux fundamentals in Distrohoppers, and the numerous ways we can all contribute to Linux and open source.
Sponsored By:
Links:
Build one flat network across cloud providers, personal networks, with even thousands of nodes. We feature two amazing open source solutions, and the creators behind them.
Plus community news, first impressons of Google Stadia, listener feedback, and some great picks.
Special Guests: Alex Kretzschmar, Guus Sliepen, and Ryan Huber.
Sponsored By:
Links:
Brent sits down with Jacob Roecker, long-time Jupiter Broadcasting community member and Bronze Star Medal decorated United States Army veteran. Jacob shares his journey from deployments in Iraq and Afghanistan through to dealing with PTSD, and how Jupiter Broadcasting and it's community was integral throughout.
Special Guest: Jacob Roecker.
Sponsored By:
Links:
Google, Mozilla, and GitLab make serious upgrades to their bug bounty programs, insights into Debian's renewed systemd debate, and how Microsoft and IBM are working together to fight patent trolls.
Plus our thoughts on LVFS for Chromebooks, and the recent Monero hack.
Sponsored By:
Links:
Chz sits down with Alan Pope (Popey) to discuss his thoughts about Thinkpads, and why they might be the perfect Linux laptop.
Find out what those model numbers really mean, plus our tips for picking which one is right for you.
Special Guest: Alan Pope.
Sponsored By:
Links:
Disposing of hard drives, what a TV really is, and the veganism of software.
Plus the serious business of coffee, why modern music sucks, and making Popey feel bad.
00:00:48 With better technology, why don’t we necessarily see better art?
00:09:03 Is Linux (or FOSS) the vegan option within software?
00:13:43 Do you own a TV?
00:20:24 How do you prepare your coffee?
00:25:05 How do you forgive yourself?
00:32:19 How do you dispose of your old hard drives for security purposes?
Sponsored By:
Links:
FreeBSD 12.1 is here, A history of Unix before Berkeley, FreeBSD development setup, HardenedBSD 2019 Status Report, DNSSEC, compiling RainbowCrack on OpenBSD, and more.
Some of the highlights:
For a complete list of new features and known problems, please see the online release notes and errata list, available at: https://www.FreeBSD.org/releases/12.1R/relnotes.html
Nobody needs to be told that UNIX is popular today. In this article we will show you a little of where it was yesterday and over the past decade. And, without meaning in the least to minimise the incredible contributions of Ken Thompson and Dennis Ritchie, we will bring to light many of the others who worked on early versions, and try to show where some of the key ideas came from, and how they got into the UNIX of today.
Our title says we are talking about UNIX evolution. Evolution means different things to different people. We use the term loosely, to describe the change over time among the many different UNIX variants in use both inside and outside Bell Labs. Ideas, code, and useful programs seem to have made their way back and forth - like mutant genes - among all the many UNIXes living in the phone company over the decade in question.
Part One looks at some of the major components of the current UNIX system - the text formatting tools, the compilers and program development tools, and so on. Most of the work described in Part One took place at
Research'', a part of Bell Laboratories (now AT&T Bell Laboratories, then as now
the Labs''), and the ancestral home of UNIX. In planned (but not written) later parts, we would have looked at some of the myriad versions of UNIX - there are far more than one might suspect. This includes a look at Columbus and USG and at Berkeley Unix. You'll begin to get a glimpse inside the history of the major streams of development of the system during that time.
I do my FreeBSD development using git, tmux, vim and cscope.
I keep a FreeBSD fork on my github, I have forked https://github.com/freebsd/freebsd to https://github.com/adventureloop/freebsd
As we are experiencing the Suricata community first hand in Amsterdam we thought to release this version a bit earlier than planned. Included is the latest Suricata 5.0.0 release in the development version. That means later this November we will releasing version 5 to the production version as we finish up tweaking the integration and maybe pick up 5.0.1 as it becomes available.
LDAP TLS connectivity is now integrated into the system trust store, which ensures that all required root and intermediate certificates will be seen by the connection setup when they have been added to the authorities section. The same is true for trusting self-signed certificates. On top of this, IPsec now supports public key authentication as contributed by Pascal Mathis.
We at HardenedBSD have a lot of news to share. On 05 Nov 2019, Oliver Pinter resigned amicably from the project. All of us at HardenedBSD owe Oliver our gratitude and appreciation. This humble project, named by Oliver, was born out of his thesis work and the collaboration with Shawn Webb. Oliver created the HardenedBSD repo on GitHub in April 2013. The HardenedBSD Foundation was formed five years later to carry on this great work.
DNSSEC validation has been enabled in the default unbound.conf(5) in -current. The relevant commits were from Job Snijders (job@)
Shopware is the next generation of open source e-commerce software. Based on bleeding edge technologies like Symfony 3, Doctrine2 and Zend Framework Shopware comes as the perfect platform for your next e-commerce project. This tutorial will walk you through the Shopware Community Edition (CE) installation on FreeBSD 12 system by using NGINX as a web server.
Make sure your system meets the following minimum requirements:
- Linux-based operating system with NGINX or Apache 2.x (with mod_rewrite) web server installed.
- PHP 5.6.4 or higher with ctype, gd, curl, dom, hash, iconv, zip, json, mbstring, openssl, session, simplexml, xml, zlib, fileinfo, and pdo/mysql extensions. PHP 7.1 or above is strongly recommended.
- MySQL 5.5.0 or higher.
- Possibility to set up cron jobs.
- Minimum 4 GB available hard disk space.
- IonCube Loader version 5.0.0 or higher (optional).
Project RainbowCrack was originally Zhu Shuanglei's implementation, it's not clear to me if the project is still just his or if it's even been maintained for a while. His page seems to have been last updated in August 2007.
The Project RainbowCrack web page now has just binaries for Windows XP and Linux, both 32-bit and 64-bit versions.
Earlier versions were available as source code. The version 1.2 source code does not compile on OpenBSD, and in my experience it doesn't compile on Linux, either. It seems to date from 2004 at the earliest, and I think it makes some version-2.4 assumptions about Linux kernel headers.
Chris follows up on his Shinobi troubles and extols the virtues of $25 Wyze Cams to Alex, who has some exciting house news to share.
Links:
The Pinebook Pro gets put through the travel test, while we get an update on Pine64 projects straight from the source.
Plus a few surpises from the System76 Super Fan event.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Brent sits down with Emma Marshall, Customer Happiness Manager at System76 for a fun chat touching on her love of pinball and puppies, spreading happiness, women in tech, and more.
Note: This episode was recorded before the Superfans 3 event, which occurred between November 15-17, 2019.
Special Guest: Emma Marshall.
Links:
Docker's surprising news, new nasty Intel vulnerabilities, and why Brave 1.0 changes the game.
Plus, our thoughts on the PinePhone BraveHeart limited edition, and Stadia's potentially rocky launch.
Links:
Ell and Wes sit down with Megan Roddie from Mental Health Hackers about neurodiversity in tech and the importance of peer support.
Special Guest: Megan Roddie.
Links:
Ubiquiti's troublesome new telemetry, Jim's take on the modern Microsoft, and why Project Silica just might be the future of long term storage.
Links:
Migrating drives and zpool between hosts, OpenBSD in 2019, Dragonfly’s new zlib and dhcpcd, Batch renaming images and resolution with awk, a rant on the X11 ICCCM selection system, hammer 2 emergency space mode, and more.
Today is the day.
Today I move a zpool from an R710 into an R720. The goal: all services on that zpool start running on the new host.
Fortunately, that zpool is dedicated to jails, more or less. I have done some planning about this, including moving a poudriere on the R710 into a jail.
Now it is almost noon on Saturday, I am sitting in the basement (just outside the server room), and I’m typing this up.
In this post:
I’ve used OpenBSD on and off since 2.1. More back then than in the last 10 years or so though, so I thought I’d try it again.
What triggered this was me finding a silly bug in GNU cpio that has existed with a “FIXME” comment since at least 1994. I checked OpenBSD to see if it had a related bug, but as expected no it was just fine.
I don’t quite remember why I stopped using OpenBSD for servers, but I do remember filesystem corruption on “unexpected power disconnections” (even with softdep turned on), which I’ve never really seen on Linux.
That and that fewer things “just worked” than with Linux, which matters more when I installed more random things than I do now. I’ve become a lot more minimalist. Probably due to less spare time. Life is better when you don’t run things like PHP (not that OpenBSD doesn’t support PHP, just an example) or your own email server with various antispam tooling, and other things.
This is all experience from running OpenBSD on a server. On my next laptop I intend to try running OpenBSD on the dektop, and will see if that more ad-hoc environment works well. E.g. will gnuradio work? Lack of other-OS VM support may be a problem.
Ouch, that’s a long list of bad stuff. Still, I like it. I’ll continue to run it, and will make sure my stuff continues working on OpenBSD.
And maybe in a year I’ll have a review of OpenBSD on a laptop.
zlib and dhcpcd are both updated in DragonFly… but my quick perusal of the commits makes it sound like bugfix only; no usage changes needed.
The most recent item on my list of “Geeky things I did that made me feel pretty awesome” is an hour’s adventure that culminated in this code:
$ file IMG* | awk 'BEGIN{a=0} {print substr($1, 1, length($1)-5),a++"_"substr($8,1, length($8)-1)}' | while read fn fr; do echo $(rename -v "s/$fn/img_$fr/g" *); done
IMG_20170808_172653_425.jpg renamed as img_0_4032x3024.jpg
IMG_20170808_173020_267.jpg renamed as img_1_3024x3506.jpg
IMG_20170808_173130_616.jpg renamed as img_2_3024x3779.jpg
IMG_20170808_173221_425.jpg renamed as img_3_3024x3780.jpg
IMG_20170808_173417_059.jpg renamed as img_4_2956x2980.jpg
IMG_20170808_173450_971.jpg renamed as img_5_3024x3024.jpg
IMG_20170808_173536_034.jpg renamed as img_6_4032x3024.jpg
IMG_20170808_173602_732.jpg renamed as img_7_1617x1617.jpg
IMG_20170808_173645_339.jpg renamed as img_8_3024x3780.jpg
IMG_20170909_170146_585.jpg renamed as img_9_3036x3036.jpg
IMG_20170911_211522_543.jpg renamed as img_10_3036x3036.jpg
IMG_20170913_071608_288.jpg renamed as img_11_2760x2760.jpg
IMG_20170913_073205_522.jpg renamed as img_12_2738x2738.jpg
// ... etc etc
The last item on the aforementioned list is “TODO: come up with a shorter title for this list.”
d00d, that document is devilspawn. I've recently spent my nights in pain
implementing the selection mechanism. WHY OH WHY OH WHY? why me? why did I choose to do this? and what sick evil twisted mind wrote this damn spec? I don't know why I'm working with it, I just wanted to make a useful program.I didn't know what I was getting myself in to. Nobody knows until they try it. And once you start, you're unable to stop. You can't stop, if you stop then you haven't completed it to spec. You can't fail on this, it's just a few pages of text, how can that be so hard? So what if they use Atoms for everything. So what if there's no explicit correlation between the target type of a SelectionNotify event and the type of the property it indicates?
So what if the distinction is ambiguous? So what if the document is littered with such atrocities? It's not the spec's fault, the spec is authoritative. It's obviously YOUR (the implementor's) fault for misunderstanding it. If you didn't misunderstand it, you wouldn't be here complaining about it would you?
As anyone who has been running HAMMER1 or HAMMER2 has noticed, snapshots and copy on write and infinite history can eat a lot of disk space, even if the actual file volume isn’t changing much. There’s now an ‘emergency mode‘ for HAMMER2, where disk operations can happen even if there isn’t space for the normal history activity. It’s dangerous, in that the normal protections against data loss if power is cut go away, and snapshots created while in this mode will be mangled. So definitely don’t leave it on!
We talk about the best ways to get involved in open source communities, finding like-minded people, conference strategies, community hubs, and what happened to all the LUGs.
Get to know our Linux Users Group a little better and learn why they love their Linux distros of choice, and the one thing they'd change to make them perfect.
Special Guests: Alex Kretzschmar, Brent Gervais, and Neal Gompa.
Links:
Brent sits down with Jill Bryant Ryniker, long time linux aficionado, for a connective conversation exploring her deep involvement in linux and open source, from community to professional animation and more.
Jill wears many complimentary hats, a few of which include: co-host of Linux Weekly Daily Wednesday, regular community guest on Linux Unplugged, LinuxChix LA co-organizer, professional animator and teacher, ...and more! Grab a seat and join us..
Special Guest: Jill Bryant Ryniker.
Links:
Google steps up support for older Chromebooks, Microsoft Edge is coming to Linux, and the App Defense Alliance teams up to fight Android malware.
Plus Google Cardboard goes open source, and a neat machine-learning tool to pull songs apart.
Special Guest: Wes Payne.
Links:
Paying attention to all the Linux users we never hear from, being less clever than we thought, and our biggest fears.
Plus alternatives to copy paste, and whether Popey loves pink.
00:00:44 Would the Web/Internet be better or worse if the concept of copy and paste had never been invented?
00:07:29 What are you afraid of?
00:13:51 Is it time to stop ignoring the vast silent majority of Linux users?
00:27:37 What's your favourite colour and why?
00:34:54 Have you ever had a genius idea that turned out to be spectacularly unoriginal?
Getting your storage setup just right often takes making painful mistakes first. We share ours, our current storage setups, when ZFS is not the tool for the job, and what you should consider when protecting your data.
Plus, we share a few recent project mishaps.
Links:
The earliest Unix code, how to replace fail2ban with blacklistd, OpenBSD crossed 400k commits, how to install Bolt CMS on FreeBSD, optimized hammer2, appeasing the OSI 7-layer burrito guys, and more.
What is it that runs the servers that hold our online world, be it the web or the cloud? What enables the mobile apps that are at the center of increasingly on-demand lives in the developed world and of mobile banking and messaging in the developing world? The answer is the operating system Unix and its many descendants: Linux, Android, BSD Unix, MacOS, iOS—the list goes on and on. Want to glimpse the Unix in your Mac? Open a Terminal window and enter “man roff” to view the Unix manual entry for an early text formatting program that lives within your operating system.
2019 marks the 50th anniversary of the start of Unix. In the summer of 1969, that same summer that saw humankind’s first steps on the surface of the Moon, computer scientists at the Bell Telephone Laboratories—most centrally Ken Thompson and Dennis Ritchie—began the construction of a new operating system, using a then-aging DEC PDP-7 computer at the labs.
It was supposed to say "log," but the computer sending the message — based at UCLA — crashed before the letter "g" was typed. A computer at Stanford 560 kilometres away was supposed to fill in the remaining characters "in," as in "log in."
"The idea of the network was you could sit at one computer, log on through the network to a remote computer and use its services there,"
50 years later, the internet has become so ubiquitous that it has almost been rendered invisible. There's hardly an aspect in our daily lives that hasn't been touched and transformed by it.
Q: Take us back to that day 50 years ago. Did you have the sense that this was going to be something you'd be talking about a half a century later?
A: Well, yes and no. Four months before that message was sent, there was a press release that came out of UCLA in which it quotes me as describing what my vision for this network would become. Basically what it said is that this network would be always on, always available. Anybody with any device could get on at anytime from any location, and it would be invisible.
Well, what I missed ... was that this is going to become a social network. People talking to people. Not computers talking to computers, but [the] human element.
Q: Can you briefly explain what you were working on in that lab? Why were you trying to get computers to actually talk to one another?
A: As an MIT graduate student, years before, I recognized I was surrounded by computers and I realized there was no effective [or efficient] way for them to communicate. I did my dissertation, my research, on establishing a mathematical theory of how these networks would work. But there was no such network existing. AT&T said it won't work and, even if it does, we want nothing to do with it.
So I had to wait around for years until the Advanced Research Projects Agency within the Department of Defence decided they needed a network to connect together the computer scientists they were supervising and supporting.
Q: For all the promise of the internet, it has also developed some dark sides that I'm guessing pioneers like yourselves never anticipated.
A: We did not. I knew everybody on the internet at that time, and they were all well-behaved and they all believed in an open, shared free network. So we did not put in any security controls.
When the first spam email occurred, we began to see the dark side emerge as this network reached nefarious people sitting in basements with a high-speed connection, reaching out to millions of people instantaneously, at no cost in time or money, anonymously until all sorts of unpleasant events occurred, which we called the dark side.
But in those early days, I considered the network to be going through its teenage years. Hacking to spam, annoying kinds of effects. I thought that one day this network would mature and grow up. Well, in fact, it took a turn for the worse when nation states, organized crime and extremists came in and began to abuse the network in severe ways.
Q: Is there any part of you that regrets giving birth to this?
A: Absolutely not. The greater good is much more important.
blacklistd(8) provides an API that can be used by network daemons to communicate with a packet filter via a daemon to enforce opening and closing ports dynamically based on policy.
The interface to the packet filter is in /libexec/blacklistd-helper (this is currently designed for npf) and the configuration file (inspired from inetd.conf) is in etc/blacklistd.conf
Now, blacklistd(8) will require bpfjit(4) (Just-In-Time compiler for Berkeley Packet Filter) in order to properly work, in addition to, naturally, npf(7) as frontend and syslogd(8), as a backend to print diagnostic messages. Also remember npf shall rely on the npflog* virtual network interface to provide logging for tcpdump() to use.
Unfortunately (dont' ask me why ??) in 8.1 all the required kernel components are still not compiled by default in the GENERIC kernel (though they are in HEAD), and are rather provided as modules. Enabling NPF and blacklistd services would normally result in them being automatically loaded as root, but predictably on securelevel=1 this is not going to happen.
Sometime in the last week OpenBSD crossed 400,000 commits (*) upon all our repositories since starting at 1995/10/18 08:37:01 Canada/Mountain. That's a lot of commits by a lot of amazing people.
(*) by one measure. Since the repository is so large and old, there are a variety of quirks including ChangeLog missing entries and branches not convertible to other repo forms, so measuring is hard. If you think you've got a great way of measuring, don't be so sure of yourself -- you may have overcounted or undercounted.
Bolt is a sophisticated, lightweight and simple CMS built with PHP. It is released under the open-source MIT-license and source code is hosted as a public repository on Github. A bolt is a tool for Content Management, which strives to be as simple and straightforward as possible. It is quick to set up, easy to configure, uses elegant templates. Bolt is created using modern open-source libraries and is best suited to build sites in HTML5 with modern markup. In this tutorial, we will go through the Bolt CMS installation on FreeBSD 12 system by using Nginx as a web server, MySQL as a database server, and optionally you can secure the transport layer by using acme.sh client and Let's Encrypt certificate authority to add SSL support.
Refactor the XOP groups in order to be able to queue strategy calls, whenever possible, to the same CPU as the issuer. This optimizes several cases and reduces unnecessary IPI traffic between cores. The next best thing to do would be to not queue certain XOPs to an H2 support thread at all, but I would like to keep the threads intact for later clustering work.
The best scaling case for this is when one has a large number of user threads doing I/O. One instance of a single-threaded program on an otherwise idle machine might see a slightly reduction in performance but at the same time we completely avoid unnecessarily spamming all cores in the system on the behalf of a single program, so overhead is also significantly lower.This will tend to increase the number of H2 support threads since we need a certain degree of multiplication for domain separation.
This should significantly increase I/O performance for multi-threaded workloads.
I've seen the writing on the wall, and while for now you can configure Firefox not to use DoH, I'm not confident enough to think it will remain that way. To that end, I've finally set up my own DoH server for use at Chez Boca. It only involved setting up my own CA to generate the appropriate certificates, install my CA certificate into Firefox, configure Apache to run over HTTP/2 (THANK YOU SO VERY XXXXXXX MUCH GOOGLE FOR SHOVING THIS HTTP/2 XXXXXXXX DOWN OUR THROATS!—no, I'm not bitter) and write a 150 line script that just queries my own local DNS, because, you know, it's more XXXXXXX secure or some XXXXXXXX reason like that.
Sigh.
Michael - FreeNAS inside a Jail
Send questions, comments, show ideas/topics, or stories you want mentioned on the show to [email protected]
Dell expands their linux hardware lineup, why elementary OS's Flatpak support sets the bar, and we chat with Christian Schaller of Red Hat about Fedora 31 and what's around the corner.
Plus an update on Ubuntu on the Raspberry Pi 4 and a pick that's just for Wes.
Special Guests: Alex Kretzschmar, Brent Gervais, Cassidy James Blaede, Christian F.K. Schaller, Daniel Fore, and Martin Wimpress.
Links:
Ell and Wes sit down to talk with Kyle Hubert and Lou Stella about real world threat hunting.
Special Guests: Kyle Hubert and Lou Stella.
Links:
Brent sits down with Martin Wimpress, co-founder and project lead for Ubuntu MATE https://ubuntu-mate.org/, Director of Ubuntu Desktop at Canonical, and co-host of Ubuntu Podcast https://ubuntupodcast.org/.
We dive into why innovative, creative people are attracted to open source, his journey through Linux and podcasting, his feelings on his new position in the Desktop Team at Canonical, and much more.
Special Guest: Martin Wimpress.
Links:
Fedora arrives from the future, the big players line up behind KernelCI, and researchers claim significant vulnerabilities in Horde.
Plus, Google's new dashboard for WordPress and ProtonMail's apps go open source.
Links:
Fedora Server brings the latest in cutting-edge open source server software to systems administrators in an easy-to-deploy fashion.
We share our simple approach to disk benchmarking and explain why you should always test your pain points.
Plus the basics of solid state disks and how to evaluate which model is right for you.
Links:
Alex, Drew from ChooseLinux, and Brent (of the Brunch fame) sit down with Antonio Musumeci, the developer of mergerfs during the JB sprint. It is a union filesystem geared towards simplifying storage and management of files across numerous commodity storage devices, it is similar to mhddfs, unionfs, and aufs.
mergerfs makes JBOD (Just a Bunch Of Drives) appear like an ‘array’ of drives. mergerfs transparently translates read/write commands to the underlying drives from a single mount point, such as /mnt/storage. Point all your applications at /mnt/storage and forget about how the underlying storage is architected, mergerfs handles the rest transparently. Multiple mismatched size drives? No problem.
Special Guest: Antonio Musumeci.
Links:
Drew and Jackie DeVore talk about talk about their Halloween obsession, and give out a few recommendations for tech-related movies, shows, and podcasts to enjoy.
Special Guest: Jackie DeVore.
Links:
Unix is 50, Hunting down Ken's PDP-7, OpenBSD and OPNSense have new releases, Clarification on what GhostBSD is, sshuttle - VPN over SSH, and more.
In the summer of 1969 computer scientists Ken Thompson and Dennis Ritchie created the first implementation of Unix with the goal of designing an elegant and economical operating system for a little-used PDP-7 minicomputer at Bell Labs. That modest project, however, would have a far-reaching legacy. Unix made large-scale networking of diverse computing systems — and the Internet — practical. The Unix team went on to develop the C language, which brought an unprecedented combination of efficiency and expressiveness to programming. Both made computing more "portable". Today, Linux, the most popular descendent of Unix, powers the vast majority of servers, and elements of Unix and Linux are found in most mobile devices. Meanwhile C++ remains one of the most widely used programming languages today. Unix may be a half-century old but its influence is only growing.
In my prior blog post, I traced Ken's scrounged PDP-7 to SN 34. In this post I'll show that we have actual video footage of that PDP-7 due to an old film from Bell Labs. this gives us almost a minute of footage of the PDP-7 Ken later used to create Unix.
Hello friends and followers, Lots of plugin and ports updates this time with a few minor improvements in all core areas. Behind the scenes we are starting to migrate the base system to version
12.1 which is supposed to hit the next 20.1 release. Stay tuned for more infos in the next month or so.
Here are the full patch notes:
Since the release of 19.09, I have seen a lot of misunderstandings on what is GhostBSD and the future of GhostBSD. GhostBSD is based on TrueOS with FreeBSD 12 STABLE with our twist to it. We are still continuing to use TrueOS for OpenRC, and the new package's system for the base system that is built from ports. GhostBSD is becoming a slow-moving rolling release base on the latest TrueOS with FreeBSD 12 STABLE. When FreeBSD 13 STABLE gets released, GhostBSD will be upgraded to TrueOS with FreeBSD 13 STABLE.
Our official desktop is MATE, which means that the leading developer of GhostBSD does not officially support XFCE. Community releases are maintained by the community and for the community. GhostBSD project will provide help to build and to host the community release. If anyone wants to have a particular desktop supported, it is up to the community. Sure I will help where I can, answer questions and guide new community members that contribute to community release.
There is some effort going on for Plasma5 desktop. If anyone is interested in helping with XFCE and Plasma5 or in creating another community release, you are well come to contribute. Also, Contribution to the GhostBSD base system, to ports and new ports, and in house software are welcome. We are mostly active on Telegram https://t.me/ghostbsd, but you can also reach us on the forum.
Looking for a lightweight VPN client, but are not ready to spend a monthly recurring amount on a VPN? VPNs can be expensive depending upon the quality of service and amount of privacy you want. A good VPN plan can easily set you back by 10$ a month and even that doesn’t guarantee your privacy. There is no way to be sure whether the VPN is storing your confidential information and traffic logs or not. sshuttle is the answer to your problem it provides VPN over ssh and in this article we’re going to explore this cheap yet powerful alternative to the expensive VPNs. By using open source tools you can control your own privacy.
sshuttle is an awesome program that allows you to create a VPN connection from your local machine to any remote server that you have ssh access on. The tunnel established over the ssh connection can then be used to route all your traffic from client machine through the remote machine including all the dns traffic. In the bare bones sshuttle is just a proxy server which runs on the client machine and forwards all the traffic to a ssh tunnel. Since its open source it holds quite a lot of major advantages over traditional VPN.
Security
This release includes a number of changes that may affect existing configurations:
New Features
There are numerous ways to install software on a modern Linux system and we each have a different approach.
Plus a lean and focused KDE experience in DistroHoppers.
Links:
Fedora 31 strikes the right balance, we get the latest on the Librem 5 situation, and an easy graphics boost for laptops.
Plus the best way to share your terminal yet, and more.
Special Guests: Alex Kretzschmar, Brent Gervais, and Drew DeVore.
Links:
Joe hosts the panel at OggCamp 2019 with guests Dr Laura Cowen, Josh Lowe, Caroline Keep, and Dan Lynch.
Special Guests: Caroline Keep, Dan Lynch, Dr Laura Cowen, and Josh Lowe.
Links:
GNOME decides to fight, Ubuntu's desktop director steps down, GitLab backs off its telemetry plans, and we've got the data on Google's Project Treble.
Plus, the latest Firefox has a new dashboard, and it looks like Disney+ won't work on Linux.
Links:
Ell and Wes talk to Lou Stella, Security Analyst at Rackspace, about transitioning to the cyber security industry.
Special Guest: Lou Stella.
Links:
Tech mistakes, communicating with spouses, and why you shouldn't let popey drive you anywhere.
Plus patching humans as if they were code, back to basics web browsing, cold drinks, and conkers.
00:00:31 Is there anything you close your eyes while doing that other people might think is odd?
00:04:32 What's your biggest or most significant tech blunder?
00:11:09 What's your favorite thing about your least favorite season, and your least favorite thing about your favorite season?
00:16:55 If humans were code and you could patch a bug/feature/issue which exists in most humans, what would it be, and what would you "fix"?
00:23:29 If your preferred search engine offered a function to exclude all websites utilizing anything other than HTML and CSS - would you use it?
00:27:16 Somewhere there’s a sliding scale in your mind of when a partner deserves to be in on a choice. Where does that begin and why?
Plex Co-Founder and CTO Elan Feingold shares why he started Plex, its future direction, his home setup, his love for electric cars and the beach.
Also Alex convinces Chris to give Ghost (the blogging platform) a try.
Special Guest: Elan Feingold.
Links:
An interview with Trenton Schulz about his early days with FreeBSD, Robot OS, Qt, and more.
Robot OS on FreeBSD
Is the ZFS tax too high? We pit ZFS on root against ext4 in our laptop pressure cooker and see how they perform when RAM gets tight.
Plus we take a look at Pop!_OS 19.10, complete our Ubuntu 19.10 review, cover community news, and lots more.
Special Guest: Alex Kretzschmar.
Links:
We're back from Texas Cyber Summit with stories of new friends, great food, and our experiences from the event.
Links:
A new Ubuntu has promise, Linux on Dex is dead, and our strong reaction to Google pulling two open-source apps from the Play Store.
Plus a big boost for ARM on Linux, and our thoughts on recent Red Hat news.
Links:
We dive into Ubuntu 19.10's experimental ZFS installer and share our tips for making the most of ZFS on root.
Plus why you may want to skip Nest Wifi, and our latest explorations of long range wireless protocols.
/*
Title: Episode 320: Codebase: neck deep
Description: FreeBSD on the Google Pixelbook, Porting NetBSD to the AMD x86-64, ZFS performance really does degrade as you approach quota limits, Fixing up KA9Q-unix, HAMMER2 and fsck for review, the return of startx(1) for non-root users, and more.
Tags: freebsd, openbsd, netbsd, dragonflybsd, trueos, trident, hardenedbsd, tutorial, howto, guide, bsd, interview, google pixelbook, pixelbook, case study, portability, porting, zfs, zfs performance, performance, quota, quota limits, zfs quota, ka9q, unix, hammer2, fsck, startx
Date: 2019-10-16
*/
Back in 2015, I jumped on the ThinkPad bandwagon by getting an X240 to run FreeBSD on. Unlike most people in the ThinkPad crowd, I actually liked the clickpad and didn\u2019t use the trackpoint much. But this summer I\u2019ve decided that it was time for something newer. I wanted something..
I was considering a ThinkPad X1 Carbon from an old generation - the one from the same year as the X230 is corebootable, so that\u2019s fun. But going back in processor generations just doesn\u2019t feel great. I want something more efficient, not less!
And then I discovered the Pixelbook. Other than the big huge large bezels around the screen, I liked everything about it. Thin aluminum design, a 3:2 HiDPI screen, rubber palm rests (why isn\u2019t every laptop ever doing that?!), the \u201cconvertibleness\u201d (flip the screen around to turn it into.. something rather big for a tablet, but it is useful actually), a Wacom touchscreen that supports a pen, mostly reasonable hardware (Intel Wi-Fi), and that famous coreboot support (Chromebooks\u2019 stock firmware is coreboot + depthcharge).
So here it is, my new laptop, a Google Pixelbook.
Pixelbook, FreeBSD, coreboot, EDK2 good.
Seriously, I have no big words to say, other than just recommending this laptop to FOSS enthusiasts :)
NetBSD is known as a very portable operating system, currently running on 44 different architectures (12 different types of CPU). This paper takes a look at what has been done to make it portable, and how this has decreased the amount of effort needed to port NetBSD to a new architecture. The new AMD x86-64 architecture, of which the specifications were published at the end of 2000, with hardware to follow in 2002, is used as an example.
Supporting multiple platforms was a primary goal of the NetBSD project from the start. As NetBSD was ported to more and more platforms, the NetBSD kernel code was adapted to become more portable along the way.
Generally, code is shared between ports as much as possible. In NetBSD, it should always be considered if the code can be assumed to be useful on other architectures, present or future. If so, it is machine-independent and put it in an appropriate place in the source tree. When writing code that is intended to be machine-independent, and it contains conditional preprocessor statements depending on the architecture, then the code is likely wrong, or an extra abstraction layer is needed to get rid of these statements.
Assumptions about the size of any type are not made. Assumptions made about type sizes on 32-bit platforms were a large problem when 64-bit platforms came around. Most of the problems of this kind had to be dealt with when NetBSD was ported to the DEC Alpha in 1994. A variation on this problem had to be dealt with with the UltraSPARC (sparc64) port in 1998, which is 64-bit, but big endian (vs. the little-endianness of the Alpha). When interacting with datastructures of a fixed size, such as on-disk metadata for filesystems, or datastructures directly interpreted by device hardware, explicitly sized types are used, such as uint32_t, int8_t, etc.
The port of NetBSD to AMD's x86-64 architecture was done in six weeks, which confirms NetBSD's reputation as being a very portable operating system. One week was spent setting up the cross-toolchain and reading the x86-64 specifications, three weeks were spent writing the kernel code, one week was spent writing the userspace code, and one week testing and debugging it all. No problems were observed in any of the machine-independent parts of the kernel during test runs; all (simulated) device drivers, file systems, etc, worked without modification.
Every so often (currently monthly), there is an "OpenZFS leadership meeting". What this really means is 'lead developers from the various ZFS implementations get together to talk about things'. Announcements and meeting notes from these meetings get sent out to various mailing lists, including the ZFS on Linux ones.
This is very interesting to me because of two reasons. First, in the past we have definitely seen significant problems on our OmniOS machines, both when an entire pool hits a quota limit and when a single filesystem hits a refquota limit. It's nice to know that this wasn't just our imagination and that there is a real issue here. Even better, it might someday be improved (and perhaps in a way that we can use at least some of the time).
Second, any number of people here run very close to and sometimes at the quota limits of both filesystems and pools, fundamentally because people aren't willing to buy more space. We have in the past assumed that this was relatively harmless and would only make people run out of space. If this is a known issue that causes serious performance degradation, well, I don't know if there's anything we can do, but at least we're going to have to think about it and maybe push harder at people. The first step will have to be learning the details of what's going on at the ZFS level to cause the slowdown. (It's apparently similar to what happens when the pool is almost full, but I don't know the specifics of that either.)
With that said, we don't seem to have seen clear adverse effects on our Linux fileservers, and they've definitely run into quota limits (repeatedly). One possible reason for this is that having lots of RAM and SSDs makes the effects mostly go away. Another possible reason is that we haven't been looking closely enough to see that we're experiencing global slowdowns that correlate to filesystems hitting quota limits. We've had issues before with somewhat subtle slowdowns that we didn't understand (cf), so I can't discount that we're having it happen again.
I'll preface this by saying - yes, I'm still neck deep in FreeBSD's wifi stack and 802.11ac support, but it turns out it's slow work to fix 15 year old locking related issues that worked fine on 11abg cards, kinda worked ok on 11n cards, and are terrible for these 11ac cards. I'll .. get there.
Anyhoo, I've finally been mucking around with AX.25 packet radio. I've been wanting to do this since I was a teenager and found out about its existence, but back in high school and .. well, until a few years ago really .. I didn't have my amateur radio licence. But, now I do, and I've done a bunch of other stuff with a bunch of other radios. The main stumbling block? All my devices are either Apple products or run FreeBSD - and none of them have useful AX.25 stacks. The main stacks of choice these days run on Linux, Windows or are a full hardware TNC.
So yes, I was avoiding hacking on AX.25 stuff because there wasn't a BSD compatible AX.25 stack. I'm 40 now, leave me be.
But! A few weeks ago I found that someone was still running a packet BBS out of San Francisco. And amazingly, his local node ran on FreeBSD! It turns out Jeremy (KK6JJJ) ported both an old copy of KA9Q and N0ARY-BBS to run on FreeBSD! Cool!
I grabbed my 2m radio (which is already cabled up for digital modes), compiled up his KA9Q port, figured out how to get it to speak to Direwolf, and .. ok. Well, it worked. Kinda.
HAMMER2 is Copy on Write, meaning changes are made to copies of existing data. This means operations are generally atomic and can survive a power outage, etc. (You should read up on it!) However, there\u2019s now a fsck command, useful if you want a report of data validity rather than any manual repair process.
Mark Kettenis (kettenis@) has recently committed changes which restore a certain amount of startx(1)/xinit(1) functionality for non-root users. The commit messages explain the situation:
CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/09/15 06:25:41
Modified files:
etc/etc.amd64 : fbtab
etc/etc.arm64 : fbtab
etc/etc.hppa : fbtab
etc/etc.i386 : fbtab
etc/etc.loongson: fbtab
etc/etc.luna88k: fbtab
etc/etc.macppc : fbtab
etc/etc.octeon : fbtab
etc/etc.sgi : fbtab
etc/etc.sparc64: fbtab
Log message:
Add ttyC4 to lost of devices to change when logging in on ttyC0 (and in some cases also the serial console) such that X can use it as its VT when running without root privileges.
ok jsg@, matthieu@
CVSROOT: /cvs
Module name: xenocara
Changes by: [email protected] 2019/09/15 06:31:08
Modified files:
xserver/hw/xfree86/common: xf86AutoConfig.c
Log message:
Add modesetting driver as a fall-back when appropriate such that we can use it when running without root privileges which prevents us from scanning the PCI bus.
This makes startx(1)/xinit(1) work again on modern systems with inteldrm(4), radeondrm(4) and amdgpu(4). In some cases this will result in using a different driver than with xenodm(4) which may expose issues (e.g. when we prefer the intel Xorg driver) or loss of acceleration (e.g. older cards supported by radeondrm(4)).
ok jsg@, matthieu@
Containers changed the way the IT world deploys software. We give you our take on technologies such as docker (including docker-compose), Kubernetes and highlight a few of our favorite containers.
Links:
We risk it all and try ZFS on root with Ubuntu 19.10, and share our first impressions and what improvements we can't live without.
Plus, exciting news for both Plasma and GNOME, coreboot laptops from System76, and too many picks.
Special Guests: Brent Gervais, Drew DeVore, and Martin Wimpress.
Links:
Brent sits down for an in-person chat with Allan Jude for a retrospective storytelling of his beginnings in BSD, his long history with podcasting, BSDNow and Jupiter Broadcasting, a beginner's guide to the benefits of FreeBSD, with technical nuggets and nostalgic bits throughout.
Allan Jude wears many hats including FreeBSD developer and member of the FreeBSD Core team, ZFS expert, co-founder and VP Engineering at Klara Inc., co-founder and VP Operations at ScaleEngine Inc., host of BSDNow, former host of TechSNAP among many others.
Links:
Richard Stallman's GNU leadership is challenged by an influential group of maintainers, SUSE drops OpenStack "for the customer," and Google claims Stadia will be faster than a gaming PC.
Plus OpenLibra aims to save us from Facebook but already has a miss, lousy news for Telegram, and enormous changes for AMP.
Links:
Our first computers, the future of food, and ethical sources of funds.
Plus the spooky reason that Popey unfollowed Joe.
00:00:24 What was the first computer you ever used?
00:11:13 Do you believe in ghosts?
00:15:28 Would you eat "clean meat"?
00:23:18 Ignore, mute, or block?
00:27:45 Should we refuse to take money from anyone we may object to?
How far can you get with a Raspberry Pi 4? We go all in and find out.
Plus our favorite travel router with WireGuard built in, and Chris kicks off Project Off-Grid. Meanwhile, Alex adopts proprietary software.
Links:
Causing ZFS corruption for fun, NetBSD Assembly Programming Tutorial, The IKEA Lack Rack for Servers, a new OmniOS Community Edition LTS has been published, List Block Devices on FreeBSD lsblk(8) Style, Project Trident 19.10 available, and more.
Datto backs up data, a lot of it. At the time of writing Datto has over 500 PB of data stored on ZFS. This count includes both backup appliances that are sent to customer sites, as well as cloud storage servers that are used for secondary and tertiary backup of those appliances. At this scale drive swaps are a daily occurrence, and data corruption is inevitable. How we handle this corruption when it happens determines whether we truly lose data, or successfully restore from secondary backup. In this post we'll be showing you how at Datto we intentionally cause corruption in our testing environments, to ensure we're building software that can properly handle these scenarios.
Since this is a mirror setup, a naive solution to cause corruption would be to randomly dd the same sectors of both /dev/sdb and /dev/sdc. This works, but is equally likely to just overwrite random unused space, or take down the zpool entirely. What we really want is to corrupt a specific snapshot, or even a specific file in that snapshot, to simulate a more realistic minor corruption event. Luckily we have a tool called zdb that lets us view some low level information about datasets.
At the 500 PB scale, it's not a matter of if data corruption will happen but when. Intentionally causing corruption is one of the strategies we use to ensure we're building software that can handle these rare (but inevitable) events.
To others out there using ZFS: I'm curious to hear how you've solved this problem. We did quite a bit of experimentation with zinject before going with this more brute force method. So I'd be especially interested if you've had luck simply simulating corruption with zinject.
A sparc64 version is also being prepared and will be added when done
This post describes how to write a simple hello world program in pure assembly on NetBSD/amd64. We will not use (nor link against) libc, nor use gcc to compile it. I will be using GNU as (gas), and therefore the AT&T syntax instead of Intel.
Why not? Because it's fun to program in assembly directly. Contrary to a popular belief assembly programs aren't always faster than what optimizing compilers produce. Nevertheless it's good to be able to read assembly, especially when debugging C programs
First occurrence on eth0:2010 Winterlan, the LackRack is the ultimate, low-cost, high shininess solution for your modular datacenter-in-the-living-room. Featuring the LACK (side table) from Ikea, the LackRack is an easy-to-implement, exact-fit datacenter building block. It's a little known fact that we have seen Google engineers tinker with Lack tables since way back in 2009.
The LackRack will certainly make its appearance again this summer at eth0:2010 Summer.
When temporarily not in use, multiple LackRacks can be stacked in a space-efficient way without disassembly, unlike competing 19" server racks.
The LackRack was first seen on eth0:2010 Winterlan in the no-shoe Lounge area. Its low-cost and perfect fit are great for mounting up to 8 U of 19" hardware, such as switches (see below), or perhaps other 19" gear. It's very easy to assemble, and thanks to the design, they are stable enough to hold (for example) 19" switches and you can put your bottle of Club-Mate on top! Multi-shiny LackRack can also be painted to your specific preferences and the airflow is unprecedented!
You can find a howto on buying a LackRack on this page. This includes the proof that a 19" switch can indeed be placed in the LackRack in its natural habitat!
The OmniOS Community Edition Association is proud to announce the general availability of OmniOS - r151030.
OmniOS is published according to a 6-month release cycle, r151030 LTS takes over from r151028, published in November 2018; and since it is a LTS release it also takes over from r151022. The r151030 LTS release will be supported for 3 Years. It is the first LTS release published by the OmniOS CE Association since taking over the reins from OmniTI in 2017. The next LTS release is scheduled for May 2021. The old stable r151026 release is now end-of-life. See the release schedule for further details.
This is only a small selection of the new features, and bug fixes in the new release; review the release notes for full details.
If you upgrade from r22 and want to see all new features added since then, make sure to also read the release notes for r24, r26 and r28.
When I have to work on Linux systems I usually miss many nice FreeBSD tools such as these for example to name the few: sockstat, gstat, top -b -o res, top -m io -o total, usbconfig, rcorder, beadm/bectl, idprio/rtprio,… but sometimes – which rarely happens – Linux has some very useful tool that is not available on FreeBSD. An example of such tool is lsblk(8) that does one thing and does it quite well – lists block devices and their contents. It has some problems like listing a disk that is entirely used under ZFS pool on which lsblk(8) displays two partitions instead of information about ZFS just being there – but we all know how much in some circles the CDDL licensed ZFS is unloved in that GPL world.
Example lsblk(8) output from Linux system:
$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sr0 11:0 1 1024M 0 rom
sda 8:0 0 931.5G 0 disk
|-sda1 8:1 0 500M 0 part /boot
`-sda2 8:2 0 931G 0 part
|-vg_local-lv_root (dm-0) 253:0 0 50G 0 lvm /
|-vg_local-lv_swap (dm-1) 253:1 0 17.7G 0 lvm [SWAP]
`-vg_local-lv_home (dm-2) 253:2 0 1.8T 0 lvm /home
sdc 8:32 0 232.9G 0 disk
`-sdc1 8:33 0 232.9G 0 part
`-md1 9:1 0 232.9G 0 raid10 /data
sdd 8:48 0 232.9G 0 disk
`-sdd1 8:49 0 232.9G 0 part
`-md1 9:1 0 232.9G 0 raid10 /data
What FreeBSD offers in this department? The camcontrol(8) and geom(8) commands are available. You can also use gpart(8) command to list partitions. Below you will find output of these commands from my single disk laptop. Please note that because of WordPress limitations I need to change all > < characters to ] [ ones in the commands outputs.
This is a general package update to the CURRENT release repository based upon TrueOS 19.10
Brent sits down with Angela Fisher, Executive Producer at Linux Academy, Jupiter Broadcasting co-founder, co-host of many JB productions including The FauxShow, and Tech Talk Today, among others. We touch on a variety of topics including the early beginnings of Jupiter Broadcasting, the origins of Brunch with Brent, aswell as many that are closer to her heart - from painting to parenting.
"You can pick your friends. You can pick your nose. But you can't pick your friends' nose." - A Wise Painted Rock
Links:
We reveal our secrets for bridging networks with WireGuard and Linux-powered networking.
Plus the future of OpenPGP in Thunderbird, a disappointing update for the Atari VCS, and a shiny new Spotify client for your terminal.
Special Guest: Martin Wimpress.
Links:
Ell and Wes talk to Chris Cox, the executive director of Operation Safe Escape about battling stalking and technology-based abuse.
Special Guest: Chris Cox.
Links:
Microsoft's CEO says Windows doesn't matter anymore, but do we buy it? Nextcloud 17 goes enterprise-grade and the Internet’s horrifying new method for installing Google apps on Huawei phones.
Plus, Google finds an Android zero-day in the wild, and the Document Collective's new approach to earn revenue for LibreOffice.
Links:
We peer into the future with a quick look at quantum supremacy, debate the latest DNS over HTTPS drama, and jump through the hoops of HTTP/3.
Plus when to use WARP, the secrets of Startpage, and the latest Ryzen release.
Links:
Chris, Alex, and Wes talk about reverse proxies, internal routing, and some popular methods to make it all work.
Links:
We have three different approaches to using the cloud, so we discuss various ways to expand your Linux knowledge beyond the desktop.
Plus Distrohoppers delivers a mobile-like experience that splits opinion.
Links:
DragonFlyBSD vs. FreeBSD vs. Linux benchmark on Ryzen 7, JFK Presidential Library chooses TrueNAS for digital archives, FreeBSD 12.1-beta is available, cool but obscure X11 tools, vBSDcon trip report, Project Trident 12-U7 is available, a couple new Unix artifacts, and more.
For those wondering how well FreeBSD and DragonFlyBSD are handling AMD's new Ryzen 3000 series desktop processors, here are some benchmarks on a Ryzen 7 3700X with MSI MEG X570 GODLIKE where both of these popular BSD operating systems were working out-of-the-box. For some fun mid-week benchmarking, here are those results of FreeBSD 12.0 and DragonFlyBSD 5.6.2 up against openSUSE Tumbleweed and Ubuntu 19.04.
Back in July I looked at FreeBSD 12 on the Ryzen 9 3900X but at that time at least DragonFlyBSD had troubles booting on that system. When trying out the Ryzen 7 3700X + MSI GODLIKE X570 motherboard on the latest BIOS, everything "just worked" without any compatibility issues for either of these BSDs.
We've been eager to see how well DragonFlyBSD is performing on these new AMD Zen 2 CPUs with DragonFlyBSD lead developer Matthew Dillon having publicly expressed being impressed by the new AMD Ryzen 3000 series CPUs.
For comparison to those BSDs, Ubuntu 19.04 and openSUSE Tumbleweed were tested on the same hardware in their out-of-the-box configurations. While Clear Linux is normally the fastest, on this system Clear's power management defaults had caused issues in being unable to detect the Samsung 970 EVO Plus NVMe SSD used for testing and so we left it out this round.
All of the hardware was the same throughout testing as were the BIOS settings and running the Ryzen 7 3700X at stock speeds. (Any differences in the reported hardware for the system table just come down to differences in what is exposed by each OS for reporting.) All of the BSD/Linux benchmarks on this eight core / sixteen thread processor were run via the Phoronix Test Suite. In the case of FreeBSD 12.0, we benchmarked both with its default LLVM Clang 6.0 compiler as well as with GCC 9.1 so that it would match the GCC compiler being the default on the other operating systems under test.
iXsystems is honored to have the TrueNAS® M-Series unified storage selected to store, serve, and protect the entire digital archive for the John F. Kennedy Library Foundation. This is in support of the collection at the John F. Kennedy Presidential Library and Museum (JFK Library). Over the next several years, the Foundation hopes to grow the digital collection from hundreds of terabytes today to cover much more of the Archives at the Kennedy Library. Overall there is a total of 25 million documents, audio recordings, photos, and videos once the project is complete.
Having first deployed the TrueNAS M50-HA earlier in 2019, the JFK Library has now completed the migration of its existing digital collection and is now in the process of digitizing much of the rest of its vast collection.
Not only is the catalog of material vast, it is also diverse, with files being copied to the storage system from a variety of sources in numerous file types. To achieve this ambitious goal, the library required a high-end NAS system capable of sharing with a variety of systems throughout the digitization process. The digital archive will be served from the TrueNAS M50 and made available to both in-person and online visitors.
With precious material and information comes robust demands. The highly-available TrueNAS M-Series has multiple layers of protection to help keep data safe, including data scrubs, checksums, unlimited snapshots, replication, and more. TrueNAS is also inherently scalable with data shares only limited by the number of drives connected to the pool. Perfect for archival storage, the deployed TrueNAS M50 will grow with the library’s content, easily expanding its storage capacity over time as needed. Supporting a variety of protocols, multi-petabyte scalability in a single share, and anytime, uninterrupted capacity expansion, the TrueNAS M-Series ticked all the right boxes.
FreeBSD 12.0 is already approaching one year old while FreeBSD 12.1 is now on the way as the next installment with various bug/security fixes and other alterations to this BSD operating system.
FreeBSD 12.1 has many security/bug fixes throughout, no longer enables "-Werror" by default as a compiler flag (Update: This change is just for the GCC 4.2 compiler), has imported BearSSL into the FreeBSD base system as a lightweight TLS/SSL implementation, bzip2recover has been added, and a variety of mostly lower-level changes. More details can be found via the in-progress release notes.
For those with time to test this weekend, FreeBSD 12.1 Beta 1 is available for all prominent architectures.
The FreeBSD release team is planning for at least another beta or two and around three release candidates. If all goes well, FreeBSD 12.1 will be out in early November.
The fourth biennial vBSDCon was held in Reston, VA on September 5th through 7th and attracted attendees and presenters from not only the Washington, DC area, but also Canada, Germany, Kenya, and beyond. While MeetBSD caters to Silicon Valley BSD enthusiasts on even years, vBSDcon caters to East Coast and DC area enthusiasts on odd years. Verisign was again the key sponsor of vBSDcon 2019 but this year made a conscious effort to entrust the organization of the event to a team of community members led by Dan Langille, who you probably know as the lead BSDCan organizer. The result of this shift was a low key but professional event that fostered great conversation and brainstorming at every turn.
I fear we're drifting a bit here and the S/N ratio is dropping a bit w.r.t the actual history of Unix. Please no more on the relative merits of version control systems or alternative text processing systems.
So I'll try to distract you by saying this. I'm sitting on two artifacts that have recently been given to me:
and I am going slowly crazy as I wait for them to be offically released. Now you have a new topic to talk about :-)
Cheers, Warren
* for some definition of "soon"
What makes a fresh install of Linux perfect? We ask our panel and share a few tools, tips, and habits that make our Linux installs perfect.
Plus the big little updates coming to Ubuntu MATE, some Pi pontification, and some significant changes for Wireguard.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
CentOS Stream and 8 have quite a bit for us to talk about, Docker's struggles go public, and the GNOME Foundation is facing a patent fight.
Plus the best bit of Android 10 Go, Microsoft gives serious thought to bringing Edge to Linux, and Stallman's role at GNU comes into question.
Links:
Brent joins Christophe Limpalair, VP of Growth at Linux Academy and founder of Scale Your Code, for a get-to-know-you conversation that spans from taming your lizard brain through to mastering the miscellaneous, with a generous ask of the community.
Special Guest: Christophe Limpalair.
Being a good FOSS citizen, forcing popey to answer stupid questions, and personal freedom vs societal harm.
Plus paying for podcasts, and how many domains we all own.
00:00:34 What do you owe to upstream?
00:11:14 Should all drugs be legal?
00:20:57 Would you ever subscribe to a paywalled podcast?
00:25:24 How many domain names do you own?
00:30:42 What are your favourite and least favourite memes?
We visit Wendell Wilson of Level1Techs and get a tour of his self-hosted setup, what he does and does not trust in the cloud, and we reminisce about the early days of computing and the internet.
Plus we discuss craftsmanship in the Linux Kernel, and address the fundamental question of "why self-host."
Links:
Setting up buildbot in FreeBSD jails, Set up a mail server with OpenSMTPD, Dovecot and Rspamd, OpenBSD amateur packet radio with HamBSD, DragonFlyBSD's HAMMER2 gets fsck, return of startx for users.
We’re back from EuroBSDcon in Lillehammer, Norway. It was a great conference with 212 people attending. 2 days of tutorials, parallel to the FreeBSD Devsummit, followed by two days of talks. Some speakers uploaded their slides to papers.freebsd.org already with more to come.
The social event was also interesting. We visited an open air museum with building preserved from different time periods. In the older section they had a collection of farm buildings, a church originally built in the 1200s and relocated to the museum, and a school house. In the more modern area, they had houses from 1915, and each decade from 1930 to 1990, plus a “house of the future” as imagined in 2001. Many had open doors to allow you to tour the inside, and some were even “inhabited”. The latter fact gave a much more interactive experience and we could learn additional things about the history of that particular house. The town at the end included a general store, a post office, and more. Then, we all had a nice dinner together in the museum’s restaurant.
In this article, I would like to present a tutorial to set up buildbot, a continuous integration (CI) software (like Jenkins, drone, etc.), making use of FreeBSD’s containerization mechanism "jails". We will cover terminology, rationale for using both buildbot and jails together, and installation steps. At the end, you will have a working buildbot instance using its sample build configuration, ready to play around with your own CI plans (or even CD, it’s very flexible!). Some hints for production-grade installations are given, but the tutorial steps are meant for a test environment (namely a virtual machine). Buildbot’s configuration and detailed concepts are not in scope here.
First of all, I was not clear enough about the political consequences of centralizing mail services at Big Mailer Corps.
It doesn’t make sense for Random Joe, sharing kitten pictures with his family and friends, to build a personal mail infrastructure when multiple Big Mailer Corps offer “for free” an amazing quality of service. They provide him with an e-mail address that is immediately available and which will generally work reliably. It really doesn’t make sense for Random Joe not to go there, and particularly if even techies go there without hesitation, proving it is a sound choice.
There is nothing wrong with Random Joes using a service that works.
What is terribly wrong though is the centralization of a communication protocol in the hands of a few commercial companies, EVERY SINGLE ONE OF THEM coming from the same country (currently led by a lunatic who abuses power and probably suffers from NPD), EVERY SINGLE ONE OF THEM having been in the news and/or in a court for random/assorted “unpleasant” behaviors (privacy abuses, eavesdropping, monopoly abuse, sexual or professional harassment, you just name it…), and EVERY SINGLE ONE OF THEM growing user bases that far exceeds the total population of multiple countries combined.
The HamBSD project aims to bring amateur packet radio to OpenBSD, including support for TCP/IP over AX.25 and APRS tracking/digipeating in the base system.
HamBSD will not provide a full AX.25 stack but instead only implement support for UI frames. There will be a focus on simplicity, security and readable code.
The amateur radio community needs a reliable platform for packet radio for use in both leisure and emergency scenarios. It should be expected that the system is stable and resilient (but as yet it is neither).
HAMMER2 is Copy on Write, meaning changes are made to copies of existing data. This means operations are generally atomic and can survive a power outage, etc. (You should read up on it!) However, there’s now a fsck command, useful if you want a report of data validity rather than any manual repair process.
Add initial fsck support for HAMMER2, although CoW fs doesn't require fsck as a concept. Currently no repairing (no write), just verifying.
Keep this as a separate command for now.
https://i.redd.it/vkdss0mtdpo31.jpg
Add modesetting driver as a fall-back when appropriate such that we can use it when running without root privileges which prevents us from scanning the PCI bus.
This makes startx(1)/xinit(1) work again on modern systems with inteldrm(4), radeondrm(4) and amdgpu(4). In some cases this will result in using a different driver than with xenodm(4) which may expose issues (e.g. when we prefer the intel Xorg driver) or loss of acceleration (e.g. older cards supported by radeondrm(4)).
Alex and Chris are hard at work on the next Self-Hosted episode, here's a behind the scenes real moment from their recent production meeting.
Links:
CentOS goes rolling and announces version 8. Find out why we're excited to take a dip in this stream.
Plus we review what might just be your next Linux laptop, and explain why systemd is coming for your /home.
Special Guest: Neal Gompa.
Links:
Ell, Wes, and The Blind Hacker discuss Texas Cyber Summit, Ell's birthday dinner, and the "Bee New" conference track.
Special Guest: The Blind Hacker.
Links:
Richard Stallman resigns, we share our thoughts and discuss the future for RMS and the FSF.
Plus what systemd-homed is, why Debian is reconsidering init diversity, and some good news for CentOS.
Links:
Brent is joined by Ell Marquez, Community Architect for Jupiter Broadcasting and co-host of Choose Linux for a chat about her experiences in community, the importance of inclusivity, how to cultivate great mentorships, redefining failure and more. Join us!
Links:
It's TechSNAP story time as we head out into the field with Jim and put Sure-Fi technology to the test.
Plus an update on Wifi 6, an enlightening Chromebook bug, and some not-quite-quantum key distribution.
Links:
There's lots to consider when setting someone up with Linux for the first time. User needs and expectations, distro choice, hardware, and so much more.
We discuss our experiences, and ask some fundamental questions.
NetBSD LLVM sanitizers and GDB regression test suite, Ada—The Language of Cost Savings, Homura - a Windows Games Launcher for FreeBSD, FreeBSD core team appoints a WG to explore transition to Git, OpenBSD 6.6 Beta tagged, Project Trident 12-U5 update now available, and more.
As NetBSD-9 is branched, I have been asked to finish the LLVM sanitizer integration. This work is now accomplished and with MKLLVM=yes build option (by default off), the distribution will be populated with LLVM files for ASan, TSan, MSan, UBSan, libFuzzer, SafeStack and XRay.
I have also transplanted basesystem GDB patched to my GDB repository and managed to run the GDB regression test-suite.
I have enhanced and imported my local MKSANITIZER code that makes whole distribution sanitization possible. Few real bugs were fixed and a number of patches were newly written to reflect the current NetBSD sources state. I have also merged another chunk of the fruits of the GSoC-2018 project with fuzzing the userland (by plusun@).
Inspired by lutris (a Linux gaming platform), we would like to provide a game launcher to play windows games on FreeBSD.
Many myths surround the Ada programming language, but it continues to be used and evolve at the same time. And while the increased adoption of Ada and SPARK, its provable subset, is slow, it’s noticeable. Ada already addresses more of the features found in found in heavily used embedded languages like C+ and C#. It also tackles problems addressed by upcoming languages like Rust.
Chris concludes, “Development technologies have a profound impact on one of the largest and most variable costs associated with embedded-system engineering—labor. At a time when on-time system deployment can not only impact customer satisfaction, but access to services revenue streams, engineering team efficiency is at a premium. Our research showed that programming language choices can have significant influence in this area, leading to shorter projects, better schedules and, ultimately, lower development costs. While a variety of factors can influence and dictate language choice, our research showed that Ada’s evolution has made it an increasingly compelling option for engineering organizations, providing both technically and financially sound solution.”
In general, Ada already makes embedded “programming in the large” much easier by handling issues that aren’t even addressed in other languages. Though these features are often provided by third-party software, it results in inconsistent practices among developers. Ada also supports the gamut of embedded platforms from systems like Arm’s Cortex-M through supercomputers. Learning Ada isn’t as hard as one might think and the benefits can be significant.
Core approved source commit bits for Doug Moore (dougm), Chuck Silvers (chs), Brandon Bergren (bdragon), and a vendor commit bit for Scott Phillips (scottph).
The annual developer survey closed on 2019-04-02. Of the 397 developers, 243 took the survey with an average completion time of 12 minutes. The public survey closed on 2019-05-13. It was taken by 3637 users and had a 79% completion rate. A presentation of the survey results took place at BSDCan 2019.
The core team voted to appoint a working group to explore transitioning our source code 'source of truth' from Subversion to Git. Core asked Ed Maste to chair the group as Ed has been researching this topic for some time. For example, Ed gave a MeetBSD 2018 talk on the topic.
There is a variety of viewpoints within core regarding where and how to host a Git repository, however core feels that Git is the prudent path forward.
CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/08/09 21:56:02
Modified files:
etc/root : root.mail
share/mk : sys.mk
sys/arch/macppc/stand/tbxidata: bsd.tbxi
sys/conf : newvers.sh
sys/sys : param.h
usr.bin/signify: signify.1
Log message:
move to 6.6-beta
Improved hardware support, including:
This is the fifth general package update to the STABLE release repository based upon TrueOS 12-Stable.
Package Summary
New Packages (20)
Deleted Packages (24)
[CHVT feedback]
DJ - Feedback
Ben - chvt
Harri - Marc's chvt question
Richard Stallman has resigned as president and director of the Free Software Foundation, and that's just one of the major shifts this week.
Also what makes Manjaro unique? We chat with one of the founders and find out why it's much more than a desktop environment.
Special Guests: Alex Kretzschmar, Bernhard Landauer, Brent Gervais, and Neal Gompa.
Links:
Chris and Wes talk with DM from the PowerShell On Linux community about PowerShell's strengths and its place in the Linux ecosystem.
Special Guest: DM.
Links:
We say goodbye to the show by taking a look back at a few of our favorite moments and reflect on how much has changed in the past seven years.
Links:
Speed is the big story around GNOME 3.34, two new major Firefox security features start to roll out, and we explain the CentOS 8 delay.
Plus our thoughts on the PineTime, and more.
Links:
Chris and Chz catch up on what's been going on and then share the story behind our new daily Linux podcast and the breakthrough it took to make it possible.
Links:
It's another #AskError episode. The finances of social situations and FOSS projects, automated vehicles, and ways to cheer up.
Plus bad language, and being late.
Check out Linux Headlines and Self Hosted
00:01:22 How do you deal with splitting up money with friends after a group trip/bbq/dinner?
00:06:20 What’s the best way to organise the finances for a FOSS project?
00:14:49 Do you swear in front of your family and, if not, why not?
00:22:22 Would you ride in an automated car that has no human input or override?
00:26:03 What do you do to feel better when you feel upset?
00:29:16 Would you rather always be 10 minutes late or always be 20 minutes early?
You've been wanting to host a Nextcloud instance (or anything else) for your family for a while now. Where on Earth do you start? We share some hard learned lessons about self-hosting, discuss the most important things to consider when building a home server, and Chris gives Alex a hard time about Arch as a Server OS.
Links:
Alpine is a bit too minimalistic for my tastes and I've run into some compatibility issues with it (even when using it just as a Docker host).
At this point I'm planning on staying with a Linux OS and with Docker as the way I run my actual services, just not sure of what I want to actually use next.
vBSDcon 2019 recap, Unix at 50, OpenBSD on fan-less Tuxedo InfinityBook, humungus - an hg server, how to configure a network dump in FreeBSD, and more.
Allan and Benedict attended vBSDcon 2019, which ended last week.
It was held again at the Hyatt Regency Reston and the main conference was organized by Dan Langille of BSDCan fame.The two day conference was preceded by a one day FreeBSD hackathon, where FreeBSD developers had the chance to work on patches and PRs. In the evening, a reception was held to welcome attendees and give them a chance to chat and get to know each other over food and drinks.
The first day of the conference was opened with a Keynote by Paul Vixie about DNS over HTTPS (DoH). He explained how we got to the current state and what challenges (technical and social) this entails.
John Baldwin followed up by giving an overview of the work on “In-Kernel TLS Framing and Encryption for FreeBSD” abstract and the recent commit we covered in episode 313.
Meanwhile, Brian Callahan was giving a separate session in another room about “Learning to (Open)BSD through its porting system: an attendee-driven educational session” where people had the chance to learn about how to create ports for the BSDs.
David Fullard’s talk about “Transitioning from FreeNAS to FreeBSD” was his first talk at a BSD conference and described how he built his own home NAS setup trying to replicate FreeNAS’ functionality on FreeBSD, and why he transitioned from using an appliance to using vanilla FreeBSD.
Shawn Webb followed with his overview talk about the “State of the Hardened Union”.
Benedict’s talk about “Replacing an Oracle Server with FreeBSD, OpenZFS, and PostgreSQL” was well received as people are interested in how we liberated ourselves from the clutches of Oracle without compromising functionality.
Entertaining and educational at the same time, Michael W. Lucas talk about “Twenty Years in Jail: FreeBSD Jails, Then and Now” closed the first day. Lucas also had a table in the hallway with his various tech and non-tech books for sale.
People formed small groups and went into town for dinner. Some returned later that night to some work in the hacker lounge or talk amongst fellow BSD enthusiasts.
Colin Percival was the keynote speaker for the second day and had an in-depth look at “23 years of software side channel attacks”.
Allan reprised his “ELI5: ZFS Caching” talk explaining how the ZFS adaptive replacement cache (ARC) work and how it can be tuned for various workloads.
“By the numbers: ZFS Performance Results from Six Operating Systems and Their Derivatives” by Michael Dexter followed with his approach to benchmarking OpenZFS on various platforms.
Conor Beh was also a new speaker to vBSDcon. His talk was about “FreeBSD at Work: Building Network and Storage Infrastructure with pfSense and FreeNAS”.
Two OpenBSD talks closed the talk session: Kurt Mosiejczuk with “Care and Feeding of OpenBSD Porters” and Aaron Poffenberger with “Road Warrior Disaster Recovery: Secure, Synchronized, and Backed-up”.
A dinner and reception was enjoyed by the attendees and gave more time to discuss the talks given and other things until late at night.
We want to thank the vBSDcon organizers and especially Dan Langille for running such a great conference. We are grateful to Verisign as the main sponsor and The FreeBSD Foundation for sponsoring the tote bags. Thanks to all the speakers and attendees!
The InfinityBook 14” v2 is a fanless 14” notebook. It is an excellent choice for running OpenBSD - but order it with the supported wireless card (see below.).
I’ve set it up in a dual-boot configuration so that I can switch between Linux and OpenBSD - mainly to spot differences in the drivers. TUXEDO allows a variety of configurations through their webshop.
The dual boot setup with grub2 and EFI boot will be covered in a separate blogpost. My tests were done with OpenBSD-current - which is as of writing flagged as 6.6-beta.
Maybe its pervasiveness has long obscured its origins. But Unix, the operating system that in one derivative or another powers nearly all smartphones sold worldwide, was born 50 years ago from the failure of an ambitious project that involved titans like Bell Labs, GE, and MIT. Largely the brainchild of a few programmers at Bell Labs, the unlikely story of Unix begins with a meeting on the top floor of an otherwise unremarkable annex at the sprawling Bell Labs complex in Murray Hill, New Jersey.
It was a bright, cold Monday, the last day of March 1969, and the computer sciences department was hosting distinguished guests: Bill Baker, a Bell Labs vice president, and Ed David, the director of research. Baker was about to pull the plug on Multics (a condensed form of MULTiplexed Information and Computing Service), a software project that the computer sciences department had been working on for four years. Multics was two years overdue, way over budget, and functional only in the loosest possible understanding of the term.
Trying to put the best spin possible on what was clearly an abject failure, Baker gave a speech in which he claimed that Bell Labs had accomplished everything it was trying to accomplish in Multics and that they no longer needed to work on the project. As Berk Tague, a staffer present at the meeting, later told Princeton University, “Like Vietnam, he declared victory and got out of Multics.”
Within the department, this announcement was hardly unexpected. The programmers were acutely aware of the various issues with both the scope of the project and the computer they had been asked to build it for.
Still, it was something to work on, and as long as Bell Labs was working on Multics, they would also have a $7 million mainframe computer to play around with in their spare time. Dennis Ritchie, one of the programmers working on Multics, later said they all felt some stake in the success of the project, even though they knew the odds of that success were exceedingly remote.
Cancellation of Multics meant the end of the only project that the programmers in the Computer science department had to work on—and it also meant the loss of the only computer in the Computer science department. After the GE 645 mainframe was taken apart and hauled off, the computer science department’s resources were reduced to little more than office supplies and a few terminals.
In the early '60s, Bill Ninke, a researcher in acoustics, had demonstrated a rudimentary graphical user interface with a DEC PDP-7 minicomputer. Acoustics still had that computer, but they weren’t using it and had stuck it somewhere out of the way up on the sixth floor.
And so Thompson, an indefatigable explorer of the labs’ nooks and crannies, finally found that PDP-7 shortly after Davis and Baker cancelled Multics.
With the rest of the team’s help, Thompson bundled up the various pieces of the PDP-7—a machine about the size of a refrigerator, not counting the terminal—moved it into a closet assigned to the acoustics department, and got it up and running. One way or another, they convinced acoustics to provide space for the computer and also to pay for the not infrequent repairs to it out of that department’s budget.
McIlroy’s programmers suddenly had a computer, kind of. So during the summer of 1969, Thompson, Ritchie, and Canaday hashed out the basics of a file manager that would run on the PDP-7. This was no simple task. Batch computing—running programs one after the other—rarely required that a computer be able to permanently store information, and many mainframes did not have any permanent storage device (whether a tape or a hard disk) attached to them. But the time-sharing environment that these programmers had fallen in love with required attached storage. And with multiple users connected to the same computer at the same time, the file manager had to be written well enough to keep one user’s files from being written over another user’s. When a file was read, the output from that file had to be sent to the user that was opening it.
It was a challenge that McIlroy’s team was willing to accept. They had seen the future of computing and wanted to explore it. They knew that Multics was a dead-end, but they had discovered the possibilities opened up by shared development, shared access, and real-time computing. Twenty years later, Ritchie characterized it for Princeton as such: “What we wanted to preserve was not just a good environment in which to do programming, but a system around which a fellowship could form.”
Eventually when they had the file management system more or less fleshed out conceptually, it came time to actually write the code. The trio—all of whom had terrible handwriting—decided to use the Labs’ dictating service. One of them called up a lab extension and dictated the entire code base into a tape recorder. And thus, some unidentified clerical worker or workers soon had the unenviable task of trying to convert that into a typewritten document.
Of course, it was done imperfectly. Among various errors, “inode” came back as “eye node,” but the output was still viewed as a decided improvement over their assorted scribbles.
In August 1969, Thompson’s wife and son went on a three-week vacation to see her family out in Berkeley, and Thompson decided to spend that time writing an assembler, a file editor, and a kernel to manage the PDP-7 processor. This would turn the group’s file manager into a full-fledged operating system. He generously allocated himself one week for each task.
Thompson finished his tasks more or less on schedule. And by September, the computer science department at Bell Labs had an operating system running on a PDP-7—and it wasn’t Multics.
By the summer of 1970, the team had attached a tape drive to the PDP-7, and their blossoming OS also had a growing selection of tools for programmers (several of which persist down to this day). But despite the successes, Thompson, Canaday, and Ritchie were still being rebuffed by labs management in their efforts to get a brand-new computer.
It wasn’t until late 1971 that the computer science department got a truly modern computer. The Unix team had developed several tools designed to automatically format text files for printing over the past year or so. They had done so to simplify the production of documentation for their pet project, but their tools had escaped and were being used by several researchers elsewhere on the top floor. At the same time, the legal department was prepared to spend a fortune on a mainframe program called “AstroText.” Catching wind of this, the Unix crew realized that they could, with only a little effort, upgrade the tools they had written for their own use into something that the legal department could use to prepare patent applications.
The computer science department pitched lab management on the purchase of a DEC PDP-11 for document production purposes, and Max Mathews offered to pay for the machine out of the acoustics department budget. Finally, management gave in and purchased a computer for the Unix team to play with. Eventually, word leaked out about this operating system, and businesses and institutions with PDP-11s began contacting Bell Labs about their new operating system. The Labs made it available for free—requesting only the cost of postage and media from anyone who wanted a copy.
The rest has quite literally made tech history.
A network dump might be very useful for collecting kernel crash dumps from embedded machines and machines with a larger amount of RAM then available swap partition size. Besides net dumps we can also try to compress the core dump. However, often this may still not be enough swap to keep whole core dump. In such situation using network dump is a convenient and reliable way for collecting kernel dump.
So, first, let’s talk a little bit about history. The first implementation of the network dumps was implemented around 2000 for the FreeBSD 4.x as a kernel module. The code was implemented in 2010 with the intention of being part of FreeBSD 9.0. However, the code never landed in FreeBSD. Finally, in 2018 with the commit r333283 by Mark Johnston the netdump client code landed in the FreeBSD. Subsequently, many other commitments were then implemented to add support for the different drivers (for example r333289). The first official release of FreeBSD, which support netdump is FreeBSD 12.0.
Now, let’s get back to the main topic. How to configure the network dump? Two machines are needed. One machine is to collect core dump, let’s call it server. We will use the second one to send us the core dump - the client.
Brent joins Wes Payne, well-known Jupiter Broadcasting co-host of Linux Unplugged, Coder Radio, and TechSNAP, for a deep-dive conversation that touches a wide swath of life as a Wes, with topics including:
Links:
It’s official, Manjaro is a legitimate business; so what happens next? We chat with Phil from the project about the huge news.
Plus we share some big news of our own, and the strange feels we get from Chrome OS.
Special Guests: Brent Gervais, Ell Marquez, and Philip Muller.
Links:
As Python 2's demise draws near we reflect on Python's popularity, the growing adoption of static typing, and why the Python 3 transition took so long.
Plus Apple's audacious app store tactics, Google's troubles with Typescript, and more!
Links:
Android 10 has a lot we like while the PinePhone is real and closer than we thought.
Plus Red Hat's new desktop strategy, and what we think Mozilla is getting right.
Links:
We take a look at a few recent zero-day vulnerabilities for iOS and Android and find targeted attacks, bad assumptions, and changing markets.
Plus what to expect from USB4 and an upcoming Linux scheduler speed-up for AMD's Epyc CPUs.
Links:
We react to the "ship date" of the Librem 5, and look back at when it was first announced.
Then our take on what steps Purism could take to turn this situation into a net positive.
Links:
Getting into hardware hacking with Arduino, and analysing sleep data from CPAP machines.
Plus a glimpse into the past in Distrohoppers.
Links:
Unix virtual memory when you have no swap space, Dsynth details on Dragonfly, Instant Workstation on FreeBSD, new servers new tech, Experimenting with streaming setups on NetBSD, NetBSD’s progress towards Steam support thanks to GSoC, and more.
Recently, Artem S. Tashkinov wrote on the Linux kernel mailing list about a Linux problem under memory pressure (via, and threaded here). The specific reproduction instructions involved having low RAM, turning off swap space, and then putting the system under load, and when that happened (emphasis mine):
Once you hit a situation when opening a new tab requires more RAM than is currently available, the system will stall hard. You will barely be able to move the mouse pointer. Your disk LED will be flashing incessantly (I'm not entirely sure why). [...]
I'm afraid I have bad news for the people snickering at Linux here; if you're running without swap space, you can probably get any Unix to behave this way under memory pressure. If you can't on your particular Unix, I'd actually say that your Unix is probably not letting you get full use out of your RAM.
To simplify a bit, we can divide pages of user memory up into anonymous pages and file-backed pages. File-backed pages are what they sound like; they come from some specific file on the filesystem that they can be written out to (if they're dirty) or read back in from. Anonymous pages are not backed by a file, so the only place they can be written out to and read back in from is swap space. Anonymous pages mostly come from dynamic memory allocations and from modifying the program's global variables and data; file backed pages come mostly from mapping files into memory with mmap() and also, crucially, from the code and read-only data of the program.
First, history: DragonFly has had binaries of dports available for download for quite some time. These were originally built using poudriere, and then using the synth tool put together by John Marino. Synth worked both to build all software in dports, and as a way to test DragonFly’s SMP capability under extreme load.
Matthew Dillon is working on a new version, called dsynth. It is available now but not yet part of the build. He’s been working quickly on it and there’s plenty more commits than what I have linked here. It’s already led to finding more high-load fixes.
DSynth is basically synth written in C, from scratch. It is designed to give us a bulk builder in base and be friendly to porting and jails down the line (for now its uses chroot's).
The original synth was written by John R. Marino and its basic flow was used in writing this program, but as it was written in ada no code was directly copied.
The intent is to make dsynth compatible with synth's configuration files and directory structure.
This is a work in progress and not yet ready for prime-time. Pushing so we can get some more eyeballs. Most of the directives do not yet work (everything, and build works, and 'cleanup' can be used to clean up any dangling mounts).
Some considerable time ago I wrote up instructions on how to set up a FreeBSD machine with the latest KDE Plasma Desktop. Those instructions, while fairly short (set up X, install the KDE meta-port, .. and that’s it) are a bit fiddly.
So – prompted slightly by a Twitter exchange recently – I’ve started a mini-sub-project to script the installation of a desktop environment and the bits needed to support it. To give it at least a modicum of UI, dialog(1) is used to ask for an environment to install and a display manager.
The tricky bits – pointed out to me after I started – are hardware support, although a best-effort is better than having nothing, I think.
In any case, in a VBox host it’s now down to running a single script and picking Plasma and SDDM to get a usable system for me. Other combinations have not been tested, nor has system-hardware-setup. I’ll probably maintain it for a while and if I have time and energy it’ll be tried with nVidia (those work quite well on FreeBSD) and AMD (not so much, in my experience) graphics cards when I shuffle some machines around.
Following up on an earlier post, the new servers for DragonFly are in place. The old 40-core machine used for bulk build, monster, is being retired. The power efficiency of the new machines is startling. Incidentally, this is where donations go – infrastructure.
We have three new servers in the colo now that will be taking most/all bulk package building duties from monster and the two blades (muscles and pkgbox64) that previously did the work. Monster will be retired. The new servers are a dual-socket Xeon (sting) and two 3900X based systems (thor and loki) which all together burn only around half the wattage that monster burned (500W vs 1000W) and 3 times the performance. That's at least a 6:1 improvement in performance efficiency.
With SSD prices down significantly the new machines have all-SSDs. These new machines allow us to build dports binary packages for release, master, and staged at the same time and reduces the full-on bulk build times for getting all three done down from 2 weeks to 2 days. It will allow us to more promptly synchronize updates to ports with dports and get binary packages up sooner.
Monster, our venerable 48-core quad-socket opteron is being retired. This was a wonderful dev machine for working on DragonFly's SMP algorithms over the last 6+ years precisely because its inter-core and inter-socket latencies were quite high. If a SMP algorithm wasn't spot-on, you could feel it. Over the years DragonFly's performance on monster in doing things like bulk builds increased radically as the SMP algorithms got better and the cores became more and more localized. This kept monster relevant far longer than I thought it would be.
But we are at a point now where improvements in efficiency are just too good to ignore. Monster's quad-socket opteron (4 x 12 core 6168's) pulls 1000W under full load while a single Ryzen 3900X (12 core / 24 thread) in a server configuration pulls only 150W, and is slightly faster on the same workload to boot.
I would like to thank everyone's generous donations over the last few years! We burned a few thousand on the new machines (as well as the major SSD upgrades we did to the blades) and made very good use of the money, particularly this year as prices for all major components (RAM, SSDs, CPUs, Mobos, etc) have dropped significantly.
Ever since OBS was successfully ported to NetBSD, I’ve been trying it out, seeing what works and what doesn’t. I’ve only just gotten started, and there’ll definitely be a lot of tweaking going forward.
Capturing a specific application’s windows seems to work okay. Capturing an entire display works, too. I actually haven’t tried streaming to Twitch or YouTube yet, but in a previous experiment a few weeks ago, I was able to run a FFmpeg command line and that could stream to Twitch mostly OK.
My laptop combined with my external monitor allows me to have a dual-monitor setup wherein the smaller laptop screen can be my “broadcasting station” while the bigger screen is where all the action takes place. I can make OBS visible on all Xfce workspaces, but keep it tucked away on that display only. Altogether, the setup should let me use the big screen for the fun stuff but I can still monitor everything in the small screen.
Ultimately the goal is to get Valve's Steam client running on NetBSD using their Linux compatibility layer while the focus the past few months with Google Summer of Code 2019 were supporting the necessary DRM ioctls for allowing Linux software running on NetBSD to be able to tap accelerated graphics support.
Student developer Surya P spent the summer working on compat_netbsd32 DRM interfaces to allow Direct Rendering Manager using applications running under their Linux compatibility layer.
These interfaces have been tested and working as well as updating the "suse131" packages in NetBSD to make use of those interfaces. So the necessary interfaces are now in place for Linux software running on NetBSD to be able to use accelerated graphics though Steam itself isn't yet running on NetBSD with this layer.
Those curious about this DRM ioctl GSoC project can learn more from the NetBSD blog. NetBSD has also been seeing work this summer on Wayland support and better Wine support to ultimately make this BSD a better desktop operating system and potentially a comparable gaming platform to Linux.
Brent sits down with Drew DeVore, Jupiter Broadcasting's latest addition to the Audio Editing Engineer team and cohost of Choose Linux. We chat shoes, his love for linux, adventures in audio, and why JB feels like home.
Links:
We take a trip to visit Level1Tech's Wendell Wilson and come back with some of his performance tips for a smoother Linux desktop.
Plus the story behind exFAT coming to Linux, and the big desktop performance improvements landing next week.
Special Guests: Alex Kretzschmar, Brent Gervais, Cassidy James Blaede, Drew DeVore, and Ell Marquez.
Links:
We debate the best way to package scripting language apps then explore interactive development and the importance of a good shell.
Plus npm bans terminal ads, what comes after Rust, and why Mike hates macros.
Links:
Microsoft continues to prove how much it loves Linux while Google tries to eat their lunch, mixed news from Mozilla, and good stuff from GNOME.
Plus Telegram's cryptocurrency is definitely happening. Honest.
Special Guest: Wes Payne.
Links:
What should have been an innocent question about bunk beds turned into the longest ever User Error out take.
Here is the unedited version of a segment on User Error 73. There is some bad language.
Plus bad habits, frugality, and breaking the law.
Check out Jupiter Extras
00:00:52 Top bunk or bottom bunk?
00:02:59 How would the distro landscape change if Ubuntu didn't allow other distros to use their infrastructure/repos?
00:14:31 Are there any things that you are irrationality frugal/tight/stingy with?
00:18:01 What's the best thing to happen in IT since you started using computers?
00:24:28 What's your worst habit?
00:27:35 If you knew could definitely get away with one crime, what would it be?
Brent joins Alex and Chris to discuss the origins of Jupiter Broadcasting new selfhosted.show. It's a casual chat about a project in the making for two years, hit play and the drinks are on us.
Links:
OpenBSD on 7th gen Thinkpad X1 Carbon, how to install FreeBSD on a MacBook, Kernel portion of in-kernel TLS (KTLS), Boot Environments on DragonflyBSD, Project Trident Updates, vBSDcon schedule, and more.
Another year, another ThinkPad X1 Carbon, this time with a Dolby Atmos sound system and a smaller battery.
The seventh generation X1 Carbon isn't much different than the fifth and sixth generations. I opted for the non-vPro Core i5-8265U, 16Gb of RAM, a 512Gb NVMe SSD, and a matte non-touch WQHD display at ~300 nits. A brighter 500-nit 4k display is available, though early reports indicated it severely impacts battery life.
Gone are the microSD card slot on the back and 1mm of overall thickness (from 15.95mm to 14.95mm), but also 6Whr of battery (down to 51Whr) and a little bit of travel in the keyboard and TrackPoint buttons. I still very much like the feel of both of them, so kudos to Lenovo for not going too far down the Apple route of sacrificing performance and usability just for a thinner profile.
On my fifth generation X1 Carbon, I used a vinyl plotter to cut out stickers to cover the webcam, "X1 Carbon" branding from the bottom of the display, the power button LED, and the "ThinkPad" branding from the lower part of the keyboard deck.
FreeBSD with some additional setup can be installed on a MacBook 1,1 or 2,1. This article covers how to do so with FreeBSD 10-12.
FreeBSD can be installed as the only OS on your MacBook if desired. What you should have is:
Burn the ISO file to the blank CD or DVD. Once done, make sure it's in your MacBook and then power off the MacBook. Turn it on, and hold down the c key until the FreeBSD disc boots.
One of the projects I have been working on for the past several months in conjunction with several other folks is upstreaming work from Netflix to handle some aspects of Transport Layer Security (TLS) in the kernel. In particular, this lets a web server use sendfile() to send static content on HTTPS connections. There is a lot more detail in the review itself, so I will spare pasting a big wall of text here. However, I have posted the patch to add the kernel-side of KTLS for review at the URL below. KTLS also requires other patches to OpenSSL and nginx, but this review is only for the kernel bits. Patches and reviews for the other bits will follow later.
This is a tool inspired by the beadm utility for FreeBSD/Illumos systems that creates and manages ZFS boot environments. This utility in contrast is written from the ground up in C, this should provide better performance, integration, and extensibility than the POSIX sh and awk script it was inspired by. During the time this project has been worked on, beadm has been superseded by bectl on FreeBSD. After hammering out some of the outstanding internal logic issues, I might look at providing a similar interface to the command as bectl.
This is a general package update to the CURRENT release repository based upon TrueOS 19.08.
Legacy boot ISO functional again
This update includes the FreeBSD fixes for the “vesa” graphics driver for legacy-boot systems. The system can once again be installed on legacy-boot systems.
PACKAGE CHANGES FROM 19.07-U1
This is the third general package update to the STABLE release repository based upon TrueOS 12-Stable.
Safely host your own password database using totally open source software. We cover BitWarden, our top choice to solve this problem.
Plus we announce a new show we're super proud of, and chat with Dan Lynch from OggCamp.
Special Guests: Alan Pope, Alex Kretzschmar, Brent Gervais, Dan Lynch, and Ell Marquez.
Links:
Brent welcomes Alex into the podcast family and discusses his long journey from Apple to Red Hat, and London to Raleigh. Plus some tidbits about the new show he's co-hosting on Jupiter Broadcasting and spending time with the crew.
A new show all about taking control of your data, hosting it your self, and taking advantage of the cloud when it's a good fit.
Join Alex and Chris on their journey through hosting all the things, building systems that last, and leverage the cloud smarter than the average bear.
Links:
We're back and going crazy about Crystal, a statically typed language that's as fast as C and as slick as ruby.
Plus an update on Rails 6, Intel's growing adoption of Rust, and the challenge of making breaking changes.
Links:
interface
in Python: they are called abstract base classes. Check out the standard library module, abc for that and collections.abc some useful predefined container interfaces.
More tools to keep your Linux box and cloud servers secure this week, OpenPOWER responds to Risc-V competition, and we ponder the year-long open-source supply chain attacks.
Plus our reaction to Android dropping dessert names, the Confidential Computing consortium, and more.
Links:
A revealing conversation with Jupiter Broadcasting's designer Mr. Chz Bacon. We discuss his Linux roots, design philosophies, community involvement, and a lot more.
It's CPU release season and we get excited about AMD's new line of server chips. Plus our take on AMD's approach to memory encryption, and our struggle to make sense of Intel's Comet Lake line.
Also, a few Windows worms you should know about, the end of the road for EV certs, and an embarrassing new Bluetooth attack.
Links:
What is the enthusiast trap, and why does it seem to ensnare every successful open source project? Also, some excellent listener power user tips for NextCloud.
Links:
We check out a great tool for learning web development basics, and Distrohoppers brings us mixed experiences.
Plus which of the 10 commandments for Linux users we agree with.
Links:
Today, Linux and open source rules the world, and the UNIX philosophy is widely considered compulsory. Organizations are striving to build small, focused applications that work collaboratively in a cloud and microservices environment. We rely on the network, as well as HTTP (text) APIs for storing and referencing data. Moreover, nearly all configuration is stored and communicated using text (e.g. YAML, JSON or XML). And while the UNIX philosophy has changed dramatically over the past 5 decades, it hasn’t strayed too far from Ken Thompson’s original definition in 1973:
Valuable research is often hindered or outright prevented by the inability to install software. This need not be the case.
Since I began supporting research computing in 1999, I’ve frequently seen researchers struggle for days or weeks trying to install a single open source application. In most cases, they ultimately failed.
In many cases, they could have easily installed the software in seconds with one simple command, using a package manager such as Debian packages, FreeBSD ports, MacPorts, or Pkgsrc, just to name a few.
Developer websites often contain poorly written instructions for doing “caveman installs”; manually downloading, unpacking, patching, and building the software. The same laborious process must often be followed for other software packages on which it depends, which can sometimes number in the dozens. Many researchers are simply unaware that there are easier ways to install the software they need. Caveman installs are a colossal waste of man-hours. If 1000 people around the globe spend an average of 20 hours each trying to install the same program that could have been installed with a package manager (this is not uncommon), then 20,000 man-hours have been lost that could have gone toward science. How many important discoveries are delayed by this?
The elite research institutions have ample funding and dozens of IT staff dedicated to research computing. They can churn out publications even if their operation is inefficient. Most institutions, however, have few or no IT staff dedicated to research, and cannot afford to squander precious man-hours on temporary, one-off software installs. The wise approach for those of us in that situation is to collaborate on making software deployment easier for everyone. If we do so, then even the smallest research groups can leverage that work to be more productive and make more frequent contributions to science.
Fortunately, the vast majority of open source software installs can be made trivial for anyone to do for themselves. Modern package managers perform all the same steps as a caveman install, but automatically. Package managers also install dependencies for us automatically.
For two years I've been driving myself crazy trying to figure out the source of a driver problem on OpenBSD: interrupts never arrived for certain touchpad devices. A couple weeks ago, I put out a public plea asking for help in case any non-OpenBSD developers recognized the problem, but while debugging an unrelated issue over the weekend, I finally solved it.
It's been a long journey and it's a technical tale, but here it is.
Presently, Wine on amd64 is in test phase. It seems to work fine with caveats like LD_LIBRARY_PATH which has to be set as 32-bit Xorg libs don't have ${PREFIX}/emul/netbsd32/lib in its rpath section. The latter is due to us extracting 32-bit libs from tarballs in lieu of building 32-bit Xorg on amd64. As previously stated, pkgsrc doesn't search for pkgconfig files in ${PREFIX}/emul/netbsd32/lib which might have inadvertent effects that I am unaware of as of now. I shall be working on these issues during the final coding period. I would like to thank @leot, @maya and @christos for saving me from shooting myself in the foot many a time. I, admittedly, have had times when multiple approaches, which all seemed right at that time, perplexed me. I believe those are times when having a mentor counts, and I have been lucky enough to have really good ones. Once again, thanks to Google for this wonderful opportunity.
As a part of Google Summer of Code’19, I am working on improving the support for Syzkaller kernel fuzzer. Syzkaller is an unsupervised coverage-guided kernel fuzzer, that supports a variety of operating systems including NetBSD. This report details the work done during the second coding period.
You can also take a look at the first report to learn more about the initial support that we added. : https://blog.netbsd.org/tnf/entry/enhancing_syzkaller_support_for_netbsd
"So I said I won’t be talking about the BSDs, but I feel like I should at the very least give you a general overview of the RK3399 *BSD functionality. I’ll make it quick. I’ve spoken to *BSD devs whom worked on the RockPro64 and from what I’ve gathered (despite the different *BSDs having varying degree of support for the RK3399 SOC) many of the core features are already supported, which bodes well for *BSD on the Pro. That said, some of the things you’d require on a functional laptop – such as the LCD (using eDP) for instance – will not work on the Pinebook Pro using *BSD as of today. So clearly a degree of work is yet needed for a BSD to run on the device. However, keep in mind that *BSD developers will be receiving their units soon and by the time you receive yours some basic functionality may be available."
Killing processes in a Unix-like system can be trickier than expected. Last week I was debugging an odd issue related to job stopping on Semaphore. More specifically, an issue related to the killing of a running process in a job. Here are the highlights of what I learned:
Unix-like operating systems have sophisticated process relationships. Parent-child, process groups, sessions, and session leaders. However, the details are not uniform across operating systems like Linux and macOS. POSIX compliant operating systems support sending signals to process groups with a negative PID number.
Sending signals to all processes in a session is not trivial with syscalls.
Child processes started with exec inherit their parent signal configuration. If the parent process is ignoring the SIGHUP signal, for example, this configuration is propagated to the children.
The answer to the “What happens with orphaned process groups” question is not trivial.
I love fast software. That is, software speedy both in function and interface. Software with minimal to no lag between wanting to activate or manipulate something and the thing happening. Lightness.
Software that’s speedy usually means it’s focused. Like a good tool, it often means that it’s simple, but that’s not necessarily true. Speed in software is probably the most valuable, least valued asset. To me, speedy software is the difference between an application smoothly integrating into your life, and one called upon with great reluctance. Fastness in software is like great margins in a book — makes you smile without necessarily knowing why.
But why is slow bad? Fast software is not always good software, but slow software is rarely able to rise to greatness. Fast software gives the user a chance to “meld” with its toolset. That is, not break flow. When the nerds upon Nerd Hill fight to the death over Vi and Emacs, it’s partly because they have such a strong affinity for the flow of the application and its meldiness. They have invested. The Tool Is Good, so they feel. Not breaking flow is an axiom of great tools.
A typewriter is an excellent tool because, even though it’s slow in a relative sense, every aspect of the machine itself operates as quickly as the user can move. It is focused. There are no delays when making a new line or slamming a key into the paper. Yes, you have to put a new sheet of paper into the machine at the end of a page, but that action becomes part of the flow of using the machine, and the accumulation of paper a visual indication of work completed. It is not wasted work. There are no fundamental mechanical delays in using the machine. The best software inches ever closer to the physical directness of something like a typewriter. (The machine may break down, of course, ribbons need to be changed — but this is maintenance and separate from the use of the tool. I’d be delighted to “maintain” Photoshop if it would lighten it up.)
A quick update on the new XPS 13 details and Dell's Linux hardware plan for 2019.
Dell's got a new Developer Edition
Links:
We spend our weekend with Wayland, discover new apps to try, tricks to share, and dig into the state of the project.
Plus System76's new software release, and Fedora's big decision.
Special Guests: Brent Gervais and Drew DeVore.
Links:
Nothing is worse than your past self. So we play old clips of LINUX Unplugged and react.
It’s a Coder Radio special all about abstraction. What it is, why we need it, and what to do when it leaks.
Plus your feedback, Mike’s next language challenge, and a functional ruby pick.
Links:
It's the final Friday, and the crew shares some great stories from a recent team summer camp.
Plus some super-secret projects in the works, and another famous flash mob.
Special Guests: Brent Gervais and Hadea Fisher.
Links:
We go hands-on with the big Xfce release that took four years and five months to develop. Kubernetes gets an audit that might just set a precedent, and Google has a new feature for AMP that has us all worked up.
Links:
The whole Choose Linux crew talk about Ell's recent trip to Black Hat, B-sides, DEF CON, and more at Hacker Summer Camp.
Links:
Dealing with users who hate change, dumb phones, and different approaches to social media consumption.
Plus infidelity, the state of the world, and consequences of small decisions.
00:00:16 #AskError: Do you read everything or follow all the people?
00:04:53 Changing software and user backlash
00:10:12 #AskError: Hypothetically speaking, do you think it was easier to be unfaithful in a relationship 20 years ago or now?
00:18:07 Dumb phone trope
00:24:54 #AskError: Do you have a 'Sliding Doors' moment in your past?
00:30:31 Will polarised politics last forever?
NetBSD 9.0 release process has started, xargs, a tale of two spellcheckers, Adapting TriforceAFL for NetBSD, Exploiting a no-name freebsd kernel vulnerability, and more.
If you have been following source-changes, you may have noticed the creation of the netbsd-9 branch! It has some really exciting items that we worked on:
- New AArch64 architecture support:
- Symmetric and asymmetrical multiprocessing support (aka big.LITTLE)
- Support for running 32-bit binaries
- UEFI and ACPI support
- Support for SBSA/SBBR (server-class) hardware.
- The FDT-ization of many ARM boards:
- the 32-bit GENERIC kernel lists 129 different DTS configurations
- the 64-bit GENERIC64 kernel lists 74 different DTS configurations
- All supported by a single kernel, without requiring per-board configuration.
- Graphics driver update, matching Linux 4.4, adding support for up to Kaby Lake based Intel graphics devices.
- ZFS has been updated to a modern version and seen many bugfixes.
- New hardware-accelerated virtualization via NVMM.
- NPF performance improvements and bug fixes. A new lookup algorithm, thmap, is now the default.
- NVMe performance improvements
- Optional kernel ASLR support, and partial kernel ASLR for the default configuration.
- Kernel sanitizers:
- KLEAK, detecting memory leaks
- KASAN, detecting memory overruns
- KUBSAN, detecting undefined behaviour
- These have been used together with continuous fuzzing via the syzkaller project to find many bugs that were fixed.
- The removal of outdated networking components such as ISDN and all of its drivers
- The installer is now capable of performing GPT UEFI installations.
- Dramatically improved support for userland sanitizers, as well as the option to build all of NetBSD's userland using them for bug-finding.
- Update to graphics userland: Mesa was updated to 18.3.4, and llvmpipe is now available for several architectures, providing 3D graphics even in the absence of a supported GPU.
We try to test NetBSD as best as we can, but your testing can help NetBSD 9.0 a great release. Please test it and let us know of any bugs you find.
- Binaries are available at https://nycdn.netbsd.org/pub/NetBSD-daily/netbsd-9/latest/
xargs is probably one of the more difficult to understand of the unix command arsenal and of course that just means it’s one of the most useful too.
I discovered a handy trick that I thought was worth a share. Please note there are probably other (better) ways to do this but I did my stackoverflow research and found nothing better.
xargs — at least how I’ve most utilized it — is handy for taking some number of lines as input and doing some work per line. It’s hard to be more specific than that as it does so much else.
It literally took me an hour of piecing together random man pages + tips from 11 year olds on stack overflow, but eventually I produced this gem:
This is an example of how to find files matching a certain pattern and rename each of them. It sounds so trivial (and it is) but it demonstrates some cool tricks in an easy concept.
This is a transcript of the talk I gave at pkgsrcCon 2019 in Cambridge, UK. It is about spellcheckers, but there are much more general software engineering lessons that we can learn from this case study.
The reason I got into this subject at all was my paternal leave last year, when I finally had some more time to spend working on pkgsrc. It was a tiny item in the enormous TODO file at the top of the source tree (“update enchant to version 2.2”) that made me go into this rabbit hole.
I have been working on adapting TriforceAFL for NetBSD kernel syscall fuzzing. This blog post summarizes the work done until the second evaluation.
For work done during the first coding period, check out this post.
Benedict’s Gear:
GlocalMe G3 Mobile Travel HotSpot and Powerbank
Mogics Power Bagel
Charby Sense Power Cable
Allan’s Gear:
Huawei E5770s-320 4G LTE 150 Mbps Mobile WiFi Pro
AOW Global Data SIM Card for On-Demand 4G LTE Mobile Data in Over 90 Countries
All my devices charge from USB-C, so that is great
More USB thumb drives than strictly necessary
My Lenovo X270 laptop running FreeBSD 13-current
My 2016 Macbook Pro (a prize from the raffle at vBSDCon 2017) that I use for email and video conferencing to preserve battery on my FreeBSD machine for work
It's huge, and it's getting bigger every month. How do you test the Linux Kernel? Major Hayden from Red Hat joins us to discuss their efforts to automate Kernel bug hunting.
Plus our honest conversation about which Linux works best for us.
Special Guests: Alan Pope, Alex Kretzschmar, Brent Gervais, Drew DeVore, Ell Marquez, Major Hayden, and Neal Gompa.
Links:
Things get heated when it’s time for Wes to check-in on Mike’s functional favorite, F#, and share his journey exploring modern .NET on Linux.
Plus your feedback, combining ruby and rust, and the latest scandal with JEDI.
Links:
Ubuntu integrates ZFS even further, NVIDIA starts publishing GPU documentation, and Harmony OS makes its debut.
Plus why you might actually want to use the new Dex, significant performance gains for a beloved project, and more.
Links:
We examine why it's so difficult to protect your privacy online and discuss browser fingerprinting, when to use a VPN, and the limits of private browsing.
Plus Apple's blaring bluetooth beacons and Facebook's worrying plans for WhatsApp.
Distrohoppers delivers a distro that divides us, and we check out the video streaming and recording software OBS Studio.
Plus a handy audio recorder that's as simple as it gets.
Links:
The complete keynote from Texas LinuxFest that inspired us to try harder. Thomas Cameron presents a keynote that everyone needs to hear. It's time to end the distro wars, invite everyone to the dance, and build the future.
Cloud dude, Linux advocate, Open Source evangelist and current Amazonian, Thomas Cameron's keynote is a must listen.
OPNsense 19.7.1 is out, ZFS on Linux still has annoying issues with ARC size, Hammer2 is now default, NetBSD audio – an application perspective, new FreeNAS Mini, and more.
We do not wish to keep you from enjoying your summer time, but this
is a recommended security update enriched with reliability fixes for the
new 19.7 series. Of special note are performance improvements as well
as a fix for a longstanding NAT before IPsec limitation.Full patch notes:
Stay safe and hydrated, Your OPNsense team
One of the frustrating things about operating ZFS on Linux is that the ARC size is critical but ZFS's auto-tuning of it is opaque and apparently prone to malfunctions, where your ARC will mysteriously shrink drastically and then stick there.
Linux's regular filesystem disk cache is very predictable; if you do disk IO, the cache will relentlessly grow to use all of your free memory. This sometimes disconcerts people when free reports that there's very little memory actually free, but at least you're getting value from your RAM. This is so reliable and regular that we generally don't think about 'is my system going to use all of my RAM as a disk cache', because the answer is always 'yes'. (The general filesystem cache is also called the page cache.)
This is unfortunately not the case with the ZFS ARC in ZFS on Linux (and it wasn't necessarily the case even on Solaris). ZFS has both a current size and a 'target size' for the ARC (called 'c' in ZFS statistics). When your system boots this target size starts out as the maximum allowed size for the ARC, but various events afterward can cause it to be reduced (which obviously limits the size of your ARC, since that's its purpose). In practice, this reduction in the target size is both pretty sticky and rather mysterious (as ZFS on Linux doesn't currently expose enough statistics to tell why your ARC target size shrunk in any particular case).
The net effect is that the ZFS ARC is not infrequently quite shy and hesitant about using memory, in stark contrast to Linux's normal filesystem cache. The default maximum ARC size starts out as only half of your RAM (unlike the regular filesystem cache, which will use all of it), and then it shrinks from there, sometimes very significantly, and once shrunk it only recovers slowly (if at all).
commit a49112761c919d42d405ec10252eb0553662c824
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date: Mon Jun 10 17:53:46 2019 -0700
installer - Default to HAMMER2
* Change the installer default from HAMMER1 to HAMMER2.
* Adjust the nrelease build to print the location of the image files
when it finishes.
Summary of changes:
nrelease/Makefile | 2 +-
usr.sbin/installer/dfuibe_installer/flow.c | 20 ++++++++++----------
2 files changed, 11 insertions(+), 11 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/a49112761c919d42d405ec10252eb0553662c824
NetBSD audio – an application perspective ... or, "doing it natively, because we can"
audio options for NetBSD in pkgsrc
Many many abstraction layers available:
Advantages of using NetBSD audio directly
[nia note: SDL2 seems very sensitive to the blk_ms sysctl being high or low, with other implementations there seems to be a less noticable difference. I don't know why.]
Two new FreeNAS Mini systems join the very popular FreeNAS Mini and Mini XL:
FreeNAS Mini XL+: This powerful 10 Bay platform (8x 3.5” and 1x 2.5” hot-swap, 1x 2.5” internal) includes the latest, compact server technology and provides dual 10GbE ports, 8 CPU cores and 32 GB RAM for high performance workgroups. The Mini XL+ scales beyond 100TB and is ideal for very demanding applications, including hosting virtual machines and multimedia editing. Starting at $1499, the Mini XL+ configured with cache SSD and 80 TB capacity is $4299, and consumes about 100 Watts.
FreeNAS Mini E: This cost-effective 4 Bay platform provides the resources required for SOHO use with quad GbE ports and 8 GB of RAM. The Mini E is ideal for file sharing, streaming and transcoding video at 1080p. Starting at $749, the Mini E configured with 8 TB capacity is $999, and consumes about 36 Watts.
We put the Raspberry Pi 4 to the desktop test, and try it as our daily driver.
Plus some neat and powerful uses for recent Pis, and our thoughts on Manjaro's change of heart.
Special Guests: Alan Pope, Alex Kretzschmar, and Brent Gervais.
Links:
Chris finally gets excited about Docker just as Wes tells him it’s time to learn something new.
Plus the state of browser extension development, the value of non-technical advice, and your feedback.
Links:
alias docker=podman
.We share stories from a time when computer storage was very precious, and the types of storage were still battling it out for the standard.
Plus our proposals to do away with time zones, and a special guest helps give away some games.
Special Guests: Brent Gervais and Jackie DeVore.
Links:
Manjaro's news starts us off and leads us into a bigger philosophical question about open source development.
Plus Gnome and KDE come together at the Linux App Summit, Mozilla's update on DNS-over-HTTPS, and the case for the VR desktop.
Links:
It's another #AskError special! Sleep tech, missing apps on Linux, a deep question, and much more.
00:00:36 What sleep tech do you use?
00:07:59 What’s the first thing you’d do if you won the lottery?
00:13:30 What one application is completely missing on Linux?
00:17:15 Do you ever use default folders like documents, pictures, music etc?
00:25:47 What’s in your conference bag?
00:29:38 What is love?
DragonFlyBSD Project Update - colo upgrade, future trends, resuming ZFS send, realtime bandwidth terminal graph visualization, fixing telnet fixes, a chapter from the FBI’s history with OpenBSD and an OpenSSH vuln, and more.
For the last week I've been testing out a replacement for Monster, our 48-core opteron server. The project will be removing Monster from the colo in a week or two and replacing it with three machines which together will use half the power that Monster did alone.
The goal is to clear out a little power budget in the colo and to really beef-up our package-building capabilities to reduce the turn-around time needed to test ports syncs and updates to the binary package system.
Currently we use two blades to do most of the building, plus monster sometimes. The blades take almost a week (120 hours+) to do a full synth run and monster takes around 27.5 hours. But we need to do three bulk builds more or less at the same time... one for the release branch, one for the development branch, and one for staging updates. It just takes too long and its been gnawing at me for a little while.
Well, Zen 2 to the rescue! These new CPUs can take ECC, there's actually an IPMI mobo available, and they are fast as hell and cheap for what we get.
The new machines will be two 3900X based servers, plus a dual-xeon system that I already had at home. The 3900X's can each do a full synth run in 24.5 hours and the Xeon can do it in around 31 hours. Monster will be retired. And the crazy thing about this? Monster burns 1000W going full bore. Each of the 3900X servers burns 160W and the Xeon burns 200W. In otherwords, we are replacing 1000W with only 520W and getting roughly 6x the performance efficiency in the upgrade. This tell you just how much more power-efficient machines have become in the last 9 years or so. > This upgrade will allow us to do full builds for both release and dev in roughly one day instead of seven days, and do it without interfering with staging work that might be happening at the same time.
Future trends - DragonFlyBSD has reached a bit of a cross-roads. With most of the SMP work now essentially complete across the entire system the main project focus is now on supplying reliable binary ports for release and developer branches, DRM (GPU) support and other UI elements to keep DragonFlyBSD relevant on workstations, and continuing Filesystem work on HAMMER2 to get multi-device and clustering going.
One of the amazing functionalities of ZFS is the possibility of sending a whole dataset from one place to another. This mechanism is amazing to create backups of your ZFS based machines. Although, there were some issues with this functionality for a long time when a user sent a big chunk of data. What if you would do that over the network and your connection has disappeared? What if your machine was rebooted as you are sending a snapshot?
For a very long time, you didn't have any options - you had to send a snapshot from the beginning. Now, this limitation was already bad enough. However, another downside of this approach was that all the data which you already send was thrown away. Therefore, ZFS had to go over all this data and remove them from the dataset. Imagine the terabytes of data which you sent via the network was thrown away because as you were sending the last few bytes, the network went off.
In this short post, I don't want to go over the whole ZFS snapshot infrastructure (if you think that such a post would be useful, please leave a comment). Now, to get back to the point, this infrastructure is used to clone the datasets. Some time ago a new feature called “Resuming ZFS send” was introduced. That means that if there was some problem with transmitting the dataset from one point to another you could resume it or throw them away. But the point is, that yes, you finally have a choice.
If for some reasons you want to visualize your bandwidth traffic on an interface (in or out) in a terminal with a nice graph, here is a small script to do so, involving ttyplot, a nice software making graphics in a terminal.
The following will works on OpenBSD. You can install ttyplot by pkg_add ttyplot as root, ttyplot package appeared since OpenBSD 6.5.
There’s a FreeBSD commit to telnet. fix a couple of snprintf() buffer overflows. It’s received a bit of attention for various reasons, telnet in 2019?, etc. I thought I’d take a look. Here’s a few random observations.
The first line is indented with spaces while the others use tabs.
The correct type for string length is size_t not unsigned int.
sizeof(char) is always one. There’s no need to multiply by it.
If you do need to multiply by a size, this is an unsafe pattern. Use calloc or something similar. (OpenBSD provides reallocarray to avoid zeroing cost of calloc.)
Return value of malloc doesn’t need to be cast. In fact, should not be, lest you disguise a warning.
Return value of malloc is not checked for NULL.
No reason to cast cp to char * when passing to snprintf. It already is that type. And if it weren’t, what are you doing?
The whole operation could be simplified by using asprintf.
Although unlikely (probably impossible here, but more generally), adding the two source lengths together can overflow, resulting in truncation with an unchecked snprintf call. asprintf avoids this failure case.
Earlier this year I FOIAed the FBI for details on allegations of backdoor installed in the IPSEC stack in 2010, originally discussed by OpenBSD devs (https://marc.info/?l=openbsd-tech&m=129236621626462 …) Today, I got an interesting but unexpected responsive record:
Manjaro takes significant steps to stand out, and the shared problem major distributions are trying to solve, and why it will shape the future of Linux.
Plus macOS apps on Linux, and our first impressions of the Raspberry Pi 4.
Special Guests: Alex Kretzschmar, Drew DeVore, Martin Wimpress, Neal Gompa, and Philip Muller.
Links:
alias docker=podman
.Mike and Wes debate the merits, and aesthetics, of Clojure in this week's rowdy language check-in.
Plus why everyone's talking about the sensitivty conjecture, speedy TLS with rust, and more!
Links:
We share family tech support stories and reminisce about the good old days of being the "go-to" tech support member.
Plus how we TV these days, streaming subscription fatigue, and Ell's search for missing persons.
Links:
Fedora CoreOS introduced its future looks bright, VLC's president debunks security claims, Mozilla debuts an open-source router firmware and the Android flaw that might be our favorite in years.
Plus how Sailfish OS 3.1 is stepping things up, the first 16-core RISC-V chip is revealed, and more.
Links:
We take a look at the amazing abilities of the Apollo Guidance Computer and Jim breaks down everything you need to know about the ZFS ARC.
Plus an update on ZoL SIMD acceleration, your feedback, and an interesting new neuromorphic system from Intel.
Links:
We take a look at the continuation of Antergos called Endeavour OS and are pretty impressed, and Distrohoppers delivers an interesting distro that's obsessed with cats.
Plus the only way to watch YouTube videos on Android.
Links:
Replacing a (silently) failing disk in a ZFS pool, OPNsense 19.7 RC1 released, implementing DRM ioctl support for NetBSD, High quality/low latency VOIP server with umurmur/Mumble on OpenBSD, the PDP-7 where Unix began, LLDB watchpoints, and more.
Maybe I can’t read, but I have the feeling that official documentations explain every single corner case for a given tool, except the one you will actually need. My today’s struggle: replacing a disk within a FreeBSD ZFS pool.
What? there’s a shitton of docs on this topic! Are you stupid?
I don’t know, maybe. Yet none covered the process in a simple, straight and complete manner.
Hi there,
For four and a half years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.
We thank all of you for helping test, shape and contribute to the project! We know it would not be the same without you.
Download links, an installation guide[1] and the checksums for the images can be found below as well.
Ioctls are input/output control system calls and DRM stands for direct rendering manager The DRM layer provides several services to graphics drivers, many of them driven by the application interfaces it provides through libdrm, the library that wraps most of the DRM ioctls. These include vblank event handling, memory management, output management, framebuffer management, command submission & fencing, suspend/resume support, and DMA services.
NetBSD was able to make native DRM ioctl calls with hardware rendering once xorg and proper mesa packages where installed. We used the glxinfo and glxgears applications to test this out.
Discord users keep telling about their so called discord server, which is not dedicated to them at all. And Discord has a very bad quality and a lot of voice distorsion.
Why not run your very own mumble server with high voice quality and low latency and privacy respect? This is very easy to setup on OpenBSD!
Mumble is an open source voip client, it has a client named Mumble (available on various operating system) and at least Android, the server part is murmur but there is a lightweight server named umurmur. People authentication is done through certificate generated locally and automatically accepted on a server, and the certificate get associated with a nickname. Nobody can pick the same nickname as another person if it’s not the same certificate.
From time to time, I like to review my knowledge in a certain area, even when I feel like I know a lot about it already. I go back to the basics and read tutorials, manuals, books or watch interesting videos.
I’ve been using macOS for a couple of years now, previously being a linux user for some (relatively short) time. Both these operating systems have a common ancestor — Unix. While I’m definitely not an expert, I feel quite comfortable using linux & macOS — I understand the concepts behind the system architecture, know a lot of command line tools & navigate through the shell without a hassle. So-called unix philosophy is also close to my heart. I always feel like there’s more I could squeeze out of it.
Recently, I found that book titled “Unix for dummies, 5th edition” which was published back in… 2004. Feels literally like AGES in the computer-related world. However, it was a great shot — the book starts with the basics, providing some brief history of Unix and how it came to life. It talks a lot about the structure of the system and where certain pieces fit (eg. “standard” set of tools), and how to understand permissions and work with files & directories. There’s even a whole chapter about shell-based text editors like Vi and Emacs! Despite the fact that I am familiar with most of these, I could still find some interesting pieces & tools that I either knew existed (but never had a chance to use), or even haven’t ever heard of. And almost all of these are still valid in the modern “incarnations” of Unix’s descendants: Linux and macOS.
The book also talks about networking, surfing the web & working with email. It’s cute to see pictures of those old browsers rendering “ancient” Internet websites, but hey — this is how it looked like no more than fifteen years ago!
I can really recommend this book to anyone working on modern macOS or Linux — you will certainly find some interesting pieces. Especially if you like to go back to the roots from time to time as I do!
In preparation for a talk on Seventh Edition Unix this fall, I stumbled upon a service list from DEC for all known PDP-7 machines. From that list, and other sources, I believe that PDP-7 serial number 34 was the original Unix machine.
V0 Unix could run on only one of the PDP-7s. Of the 99 PDP-7s produced, only two had disks. Serial number 14 had an RA01 listed, presumably a disk, though of a different type. In addition to the PDP-7 being obsolete in 1970, no other PDP-7 could run Unix, limiting its appeal outside of Bell Labs. By porting Unix to the PDP-11 in 1970, the group ensured Unix would live on into the future. The PDP-9 and PDP-15 were both upgrades of the PDP-7, so to be fair, PDP-7 Unix did have a natural upgrade path (the PDP-11 out sold the 18 bit systems though ~600,000 to ~1000). Ken Thompson reports in a private email that there were 2 PDP-9s and 1 PDP-15 at Bell Labs that could run a version of the PDP-7 Unix, though those machines were viewed as born obsolete.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support and lately extending NetBSD's ptrace interface to cover more register types and fix compat32 issues. You can read more about that in my May 2019 report.
In June, I have finally finished the remaining ptrace() work for xstate and got it merged both on NetBSD and LLDB end (meaning it's going to make it into NetBSD 9). I have also worked on debug register support in LLDB, effectively fixing watchpoint support. Once again I had to fight some upstream regressions.
Keynote presenter from Texas LinuxFest and established industry expert Thomas Cameron joins us to discuss the end of the distro wars, the future of Linux jobs, his personal take on IBM's acquisition of Red Hat, some really great Linux job tips, and much more.
Plus we catch up on some community news from old friends, complain about a few Linux bugs, and share a "magical" app pick.
Special Guests: Alex Kretzschmar, Brent Gervais, Martin Wimpress, and Thomas Cameron.
Links:
Mike rekindles his youthful love affair with Emacs and we debate what makes a "10x engineer".
Plus the latest Play store revolt and some of your feedback.
Links:
Wes takes a quick look at a container escape proof-of-concept and reviews Docker security best practices.
Links:
We're pleasantly surprised by a new Linux distro, EvilGnome malware spies on Gnome Shell users, and more good news for MacBook Linux users.
Plus why RetroArch coming to Steam is a bit controversial, ubuntu-wsl is a cold drink for Windows users, and gpodder needs a new maintainer.
Links:
Whether Linux is inherently secure, the next phase of online interaction, and wasting our free time.
Plus where to focus your contributions, and a tricky hypothetical question.
00:00:53 Without security through obscurity, would Linux make for a more secure desktop than Windows etc?
00:08:19 #AskError: Would you rather be old and rich or young and poor?
00:18:37 What will the next form of social interaction online look like?
00:27:18 #AskError: If you had to choose between contributing to an Ubuntu flavour or the desktop environment it uses, which do you contribute to?
00:31:17 Do you need to structure your free time in order not to waste it?
FreeBSD 11.3 has been released, OpenBSD workstation, write your own fuzzer for the NetBSD kernel, Exploiting FreeBSD-SA-19:02.fd, streaming to twitch using OpenBSD, 3 different ways of dumping hex contents of a file, and more.
The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 11.3-RELEASE. This is the fourth release of the stable/11 branch.
Why OpenBSD? Simply because it is the best tool for the job for me for my new-to-me Lenovo Thinkpad T420. Additionally, I do care about security and non-bloat in my personal operating systems (business needs can have different priorities, to be clear).
I will try to detail what my reasons are for going with OpenBSD (instead of GNU/Linux, NetBSD, or FreeBSD of which I’m comfortable using without issue), challenges and frustrations I’ve encountered, and what my opinions are along the way.
Disclaimer: in this post, I’m speaking about what is my opinion, and I’m not trying to convince you to use OpenBSD or anything else. I don’t truly care, but wanted to share in case it could be useful to you. I do hope you give OpenBSD a shot as your workstation, especially if it has been a while.
I’m not new to OpenBSD, to be clear. I’ve been using it off and on for over 20 years. The biggest time in my life was the early 2000s (I was even the Python port maintainer for a bit), where I not only used it for my workstation, but also for production servers and network devices.
I just haven’t used it as a workstation (outside of a virtual machine) in over 10 years, but have used it for servers. Workstation needs, especially for a primary workstation, are greatly different and the small things end up mattering most.
The easy way to describe fuzzing is to compare it to the process of unit testing a program, but with different input. This input can be random, or it can be generated in some way that makes it unexpected form standard execution perspective.
The simplest 'fuzzer' can be written in few lines of bash, by getting N bytes from /dev/rand, and putting them to the program as a parameter.
What can be done to make fuzzing more effective? If we think about fuzzing as a process, where we place data into the input of the program (which is a black box), and we can only interact via input, not much more can be done.
However, programs usually process different inputs at different speeds, which can give us some insight into the program's behavior. During fuzzing, we are trying to crash the program, thus we need additional probes to observe the program's behaviour.
Additional knowledge about program state can be exploited as a feedback loop for generating new input vectors. Knowledge about the program itself and the structure of input data can also be considered. As an example, if the input data is in the form of HTML, changing characters inside the body will probably cause less problems for the parser than experimenting with headers and HTML tags.
For open source programs, we can read the source code to know what input takes which execution path. Nonetheless, this might be very time consuming, and it would be much more helpful if this can be automated. As it turns out, this process can be improved by tracing coverage of the execution
You can submit your proposal at https://easychair.org/conferences/?conf=vbsdcon2019
The talks will have a very strong technical content bias. Proposals of a business development or marketing nature are not appropriate for this venue.
If you are doing something interesting with a BSD operating system, please submit a proposal. Whether you are developing a very complex system using BSD as the foundation, or helping others and have a story to tell about how BSD played a role, we want to hear about your experience. People using BSD as a platform for research are also encouraged to submit a proposal.
Possible topics include: How we manage a giant installation with respect to handling spam, snd/or sysadmin, and/or networking, Cool new stuff in BSD, Tell us about your project which runs on BSD.
Both users and developers are encouraged to share their experiences.
In February 2019 the FreeBSD project issued an advisory about a possible vulnerability in the handling of file descriptors. UNIX-like systems such as FreeBSD allow to send file descriptors to other processes via UNIX-domain sockets. This can for example be used to pass file access privileges to the receiving process.
Inside the kernel, file descriptors are used to indirectly reference a C struct which stores the relevant information about the file object. This could for instance include a reference to a vnode which describes the file for the file system, the file type, or the access privileges.
What really happens if a UNIX-domain socket is used to send a file descriptor to another process is that for the receiving process, inside the kernel a reference to this struct is created. As the new file descriptor is a reference to the same file object, all information is inherited. For instance, this can allow to give another process write access to a file on the drive even if the process owner is normally not able to open the file writable.
The advisory describes that FreeBSD 12.0 introduced a bug in this mechanism. As the file descriptor information is sent via a socket, the sender and the receiver have to allocate buffers for the procedure. If the receiving buffer is not large enough, the FreeBSD kernel attempts to close the received file descriptors to prevent a leak of these to the sender. However, while the responsible function closes the file descriptor, it fails to release the reference from the file descriptor to the file object. This could cause the reference counter to wrap.
The advisory further states that the impact of this bug is possibly a local privilege escalation to gain root privileges or a jail escape. However, no proof-of-concept was provided by the advisory authors.
The privilege escalation is now a piece of cake thanks to a technique used by kingcope, who published a FreeBSD root exploit in 2005, which writes to the file /etc/libmap.conf. This configuration file can be used to hook the loading of dynamic libraries if a program is started. The exploit therefore creates a dynamic library, which copies /bin/sh to another file and sets the suid-bit for the copy. The hooked library is libutil, which is for instance called by su. Therefore, a call to su by the user will afterwards result in a suid copy of /bin/sh.
If you ever wanted to make a twitch stream from your OpenBSD system, this is now possible, thanks to OpenBSD developer thfr@ who made a wrapper named fauxstream using ffmpeg with relevant parameters.
The setup is quite easy, it only requires a few steps and searching on Twitch website two informations, hopefully, to ease the process, I found the links for you.
You will need to make an account on twitch, get your api key (a long string of characters) which should stay secret because it allow anyone having it to stream on your account.
What’s surprised us, what we got wrong, right, and what the biggest game changers have been in 2019 so far.
Special Guests: Alex Kretzschmar and Jim Salter.
Links:
It’s a Coder Radio special as Mike and Wes dive into functional programming in the real world and share their tips for applying FP techniques in any language.
Links:
Joined by a new friend we share the stories of our first vehicles and the crazy things we did to them, and watch out Florida man, Oregon man is coming for you!
Special Guest: Mike McClaren.
Links:
Another project breach raises significant questions, Fedora considers dropping Snaps in Gnome Software, and has the ISPA let Mozilla off the hook?
Plus Microsoft makes it into linux-distros, the Raspberry Pi 4 charger issue, and more.
Links:
Am5x86 based retro UNIX build log, setting up services in a FreeNAS Jail, first taste of DragonflyBSD, streaming Netflix on NetBSD, NetBSD on the last G4 Mac mini, Hammer vs Hammer2, and more.
I have recently acquired an Am5x86 computer, in a surprisingly good condition. This is an ongoing project, check this page often for updates!
I began by connecting a front panel. The panel came from a different chassis and is slightly too wide, so I had to attach it with a couple of zip-ties. However, that makes it stick out from the PC front at an angle, allowing easy access when the computer sits at the floor - and thats where it is most of the time. It's not that bad, to be honest, and its way easier to access than it would be, if mounted vertically
There is a mains switch on the front panel because the computer uses an older style power supply. Those power supplies instead of relying on a PSON signal, like modern ATX supplies, run a 4 wire cable to a mains switch. The cable carries live and neutral both ways, and the switch keys in or out the power. The system powers on as soon as the switch is enabled.
Originally there was no graphics card in it. Since a PC will not boot with out a GPU, I had to find one. The mainboard only has PCI and ISA slots, and all the GPUs I had were AGP. Fortunately, I bought a PCI GPU hoping it would solve my issue...
However the GPU turned out to be faulty. It took me some time to repair it. I had to repair a broken trace leading to one of the EEPROM pins, and replace a contact in the EEPROM's socket. Then I replaced all the electrolytic capacitors on it, and that fixed it for good.
Having used up only one of the three PCI slots, I populated the remaining pair with two ethernet cards. I still have a bunch of ISA slots available, but I have nothing to install there. Yet.
This piece demonstrates the setup of a server service in a FreeNAS jail and how to share files with a jail using Apache 2.4 as an example. Jails are powerful, self-contained FreeBSD environments with separate network settings, package management, and access to thousands of FreeBSD application packages. Popular packages such as Apache, NGINX, LigHTTPD, MySQL, and PHP can be found and installed with the pkg search and pkg install commands.
This example shows creating a jail, installing an Apache web server, and setting up a simple web page.
NOTE: Do not directly attach FreeNAS to an external network (WAN). Use port forwarding, proper firewalls and DDoS protections when using FreeNAS for external web sites. This example demonstrates expanding the functionality of FreeNAS in an isolated LAN environment.
Last week, I needed to pick a BSD Operating System which supports NUMA to do some testing, so I decided to give Dragonfly BSD a shot. Dragonfly BSDonly can run on X86_64 architecture, which reminds me of Arch Linux, and after some tweaking, I feel Dragonfly BSD may be a “developer-friendly” Operating System, at least for me.
I mainly use Dragonfly BSD as a server, so I don’t care whether GUI is fancy or not. But I have high requirements of developer tools, i.e., compiler and debugger. The default compiler of Dragonfly BSD is gcc 8.3, and I can also install clang 8.0.0 from package. This means I can test state-of-the-art features of compilers, and it is really important for me. gdb‘s version is 7.6.1, a little lag behind, but still OK.
Furthermore, the upgradation of Dragonfly BSD is pretty simple and straightforward. I followed document to upgrade my Operating System to 5.6.0 this morning, just copied and pasted, no single error, booted successfully.
Here's a step-by-step guide that allows streaming Netflix media on NetBSD using a intel-haxm accelerated QEMU vm.
Heads-up! Sound doesn't work, but everything else is fine. Please read the rest of this thread for a solution to this!!
I’m about halfway through the new edition of Sudo Mastery. Assuming nothing terrible happens, should have a complete first draft in four to six weeks. Enough stuff has changed in sudo that I need to carefully double-check every single feature. (I’m also horrified by the painfully obsolete versions of sudo shipped in the latest versions of CentOS and Debian, but people running those operating systems are already accustomed to their creaky obsolescence.)
But the reason for this blog post? I have Eddie Sharam’s glorious cover art. My Patronizers saw it last month, so now the rest of you get a turn.
I'm a big fan of NetBSD. I've run it since 2000 on a Mac IIci (of course it's still running it) and I ran it for several years on a Power Mac 7300 with a G3 card which was the second incarnation of the Floodgap gopher server. Today I also still run it on a MIPS-based Cobalt RaQ 2 and an HP Jornada 690. I think NetBSD is a better match for smaller or underpowered systems than current-day Linux, and is fairly easy to harden and keep secure even though none of these systems are exposed to the outside world.
Recently I had a need to set up a bridge system that would be fast enough to connect two networks and I happened to have two of the "secret" last-of-the-line 1.5GHz G4 Mac minis sitting on the shelf doing nothing. Yes, they're probably outclassed by later Raspberry Pi models, but I don't have to buy anything and I like putting old hardware to good use.
With the newly released DragonFlyBSD 5.6 there are improvements to its original HAMMER2 file-system to the extent that it's now selected by its installer as the default file-system choice for new installations. Curious how the performance now compares between HAMMER and HAMMER2, here are some initial benchmarks on an NVMe solid-state drive using DragonFlyBSD 5.6.0.
With a 120GB Toshiba NVMe SSD on an Intel Core i7 8700K system, I ran some benchmarks of DragonFlyBSD 5.6.0 freshly installed with HAMMER2 and then again when returning to the original HAMMER file-system that remains available via its installer. No other changes were made to the setup during testing.
And then for the more synthetic workloads it was just a mix. But overall HAMMER2 was performing well during the initial testing and great to see it continuing to offer noticeable leads in real-world workloads compared to the aging HAMMER file-system. HAMMER2 also offers better clustering, online deduplication, snapshots, compression, encryption, and many other modern file-system features.
Distrohoppers throws up a fascinating distro where every application runs in its own VM. Plus Drew and Joe disagree on the best media solution.
Jim shares his Nagios tips and Wes chimes in with some modern tools as we chat monitoring in the wake of some high-profile outages.
Plus we turn our eye to hardware and get excited about the latest Ryzen line from AMD.
Open Source has taken over the world, as IBM's purchase of Red Hat closes. We reflect on this historic moment.
Plus Mozilla's been labeled an Internet Villian, we deep dive into the tech behind all the controversy and how you can self-host secure DNS.
Special Guests: Alex Kretzschmar, Brent Gervais, and Drew DeVore.
Links:
Wes turns back the clock and explores the message passing mania of writing Objective-C without a Mac, and we wax-poetic about programming language history.
Plus Mike gets real about the Windows Subsystem for Linux, and our take on the new MacBook keyboard leak.
Links:
For a long time, GCC was the only compiler that worked with GNUstep. Unfortunately, the GCC team has not invested much effort in Objective-C in the last few years and it currently lags behind Apple's version by a significant amount.
Everyone is back from Texas with a great story to share, and Chris comes within 3 seconds of a life-ending moment.
Plus Chz goes up against Brent in our most surprising giveaway game yet.
Links:
We try out Debian 10 Buster and cover what's new. There is a fresh Linux distro for Chromebooks that is very appealing, and the ISPA calls Mozilla a villain.
Plus why Fucshia OS might be the most significant future threat to Linux.
Links:
In order to make up for the shortcomings of Linux, Android has a thick middle layer and is constantly making compromises.
How many users distros actually have, automating our homes, and the importance of common views and interests with our partners.
Plus Popey discovers a new way to annoy Joe, and sharing passwords with loved ones.
00:00:29 Distro User Numbers
00:13:17 #AskError: do you get annoyed by people who use "last seen recently"?
00:19:20 Home Automation
00:29:16 #AskError: do you share any accounts or passwords with your partner?
00:34:45 The importance of having things in common with your life partner
Website protection with OPNsense, FreeBSD Support Pull Request for ZFS-on-Linux, How much has Unix changed, Porting Wine to amd64 on NetBSD, FreeBSD Enterprise 1 PB Storage, the death watch for X11 has started, and more.
The OPNsense security platform can help you to protect your network and your webservers with the nginx plugin addition.
In old days, install an open source firewall was a very trick task, but today it can be done with few clicks (or key strokes). In this article I'll not describe the detailed OPNsense installation process, but you can watch this video that was extracted from my OPNsense course available in Udemy. The video is in portuguese language, but with the translation CC Youtube feature you may be able to follow it without problems (if you don't are a portuguese speaker ofcourse) :-)
- See the article for the rest of the writeup
UNIX-like systems have dominated computing for decades, and with the rise of the internet and mobile devices their reach has become even larger. True, most systems now use more modern OSs like Linux, but how much has the UNIX-like landscape changed since the early days?
So, my question was this: how close is a modern *NIX userland to some of the earliest UNIX releases? To do this I'm going to compare a few key points of a modern Linux system with the earliest UNIX documentation I can get my hands on. The doc I am going to be covering(https://www.tuhs.org/Archive/Distributions/Research/Dennis_v1/UNIX_ProgrammersManual_Nov71.pdf) is from November 1971, predating v1 of the system.
I think the best place to start this comparison is to look at one of the highest-profile parts of the OS, that being the file system. Under the hood modern EXT file systems are completely different from the early UNIX file systems. However, they are still presented in basically the same way, as a heirerarchicat structure of directories with device files. So paths still look identical, and navigating the file system still functions the same. Often used commands likels
,cp
,mv
,du
, anddf
function the same. So aremount
andumount
. But, there are some key differences. For instance,cd
didn't exist, yet insteadchdir
filled its place. Also,chmod
is somewhat different. Instead of the usual 3-digit octal codes for permissions, this older version only uses 2 digits. Really, that difference is due to the underlying file system using a different permission set than modern systems. For the most part, all the file handling is actually pretty close to a Linux system from 2019.
I have been working on porting Wine to amd64 on NetBSD as a GSoC 2019 project. Wine is a compatibility layer which allows running Microsoft Windows applications on POSIX-complaint operating systems. This report provides an overview of the progress of the project during the first coding period.
Initially, when I started working on getting Wine-4.4 to build and run on NetBSD i386 the primary issue that I faced was Wine displaying black windows instead of UI, and this applied to any graphical program I tried running with Wine.
I suspected it , as it is related to graphics, to be an issue with the graphics driver or Xorg. Subsequently, I tried building modular Xorg, and I tried running Wine on it only to realize that Xorg being modular didn't affect it in the least. After having tried a couple of configurations, I realized that trying to hazard out every other probability is going to take an awful lot of time that I didn't have. This motivated me to bisect the repo using git, and find the first version of Wine which failed on NetBSD.
- See the article for the rest of the writeup
Today FreeBSD operating system turns 26 years old. 19 June is an International FreeBSD Day. This is why I got something special today :). How about using FreeBSD as an Enterprise Storage solution on real hardware? This where FreeBSD shines with all its storage features ZFS included.
Today I will show you how I have built so called Enterprise Storage based on FreeBSD system along with more then 1 PB (Petabyte) of raw capacity.
This project is different. How much storage space can you squeeze from a single 4U system? It turns out a lot! Definitely more then 1 PB (1024 TB) of raw storage space.
Once we are done with this we expect X.org to go into hard maintenance mode fairly quickly. The reality is that X.org is basically maintained by us and thus once we stop paying attention to it there is unlikely to be any major new releases coming out and there might even be some bitrot setting in over time. We will keep an eye on it as we will want to ensure X.org stays supportable until the end of the RHEL8 lifecycle at a minimum, but let this be a friendly notice for everyone who rely the work we do maintaining the Linux graphics stack, get onto Wayland, that is where the future is.
I have no idea how true this is about X.org X server maintenance, either now or in the future, but I definitely think it's a sign that developers have started saying this. If Gnome developers feel that X.org is going to be in hard maintenance mode almost immediately, they're probably pretty likely to also put the Gnome code that deals with X into hard maintenance mode. And public Gnome statements about this (and public action or lack of it) provide implicit support for KDE and any other desktop to move in this direction if they want to (and probably create some pressure to do so). I've known that Wayland was the future for some time, but I would still like it to not arrive any time soon.
Our crew walks you through their PCI Passthrough setups that let them run Windows, macOS, and distro-hop all from one Linux machine.
Forget multiple partitions, dual booting, and Hackintoshes; you can do it all with Linux and KVM.
Near-native VM performance doesn't have to be painful. You only need a few prerequisites and a little help.
Special Guest: Alex Kretzschmar.
Links:
Mike and Wes burrow into the concurrent world of Go and debate where it makes sense and where it may not.
Plus gradual typing for Ruby, a new solution for Python packaging, and the real story behind Jony Ive's exit.
Links:
We've got the new Raspberry Pi 4 and share our thoughts, why Microsoft applied to join the linux-distros mailing list, and Ubuntu's 32-bit future is clarified.
Plus Mozilla's big plans Firefox on Android, and the future of Steam on Linux.
Links:
DragonflyBSD 5.6 is out, OpenBSD Vulkan Support, bad utmp implementations in glibc and FreeBSD, OpenSSH protects itself against Side Channel attacks, ZFS vs OpenZFS, and more.
Big-ticket items
Improved VM
DRM
HAMMER2
Somewhat surprisingly, OpenBSD has added the Vulkan library and ICD loader support as their newest port.
This new graphics/vulkan-loader port provides the generic Vulkan library and ICD support that is the common code for Vulkan implementations on the system. This doesn't enable any Vulkan hardware drivers or provide something new not available elsewhere, but is rare seeing Vulkan work among the BSDs. There is also in ports the related components like the SPIR-V headers and tools, glsllang, and the Vulkan tools and validation layers.
This is of limited usefulness, at least for the time being considering OpenBSD like the other BSDs lag behind in their DRM kernel driver support that is ported over from the mainline Linux kernel tree but generally years behind the kernel upstream. Particularly with Vulkan, newer kernel releases are needed for some Vulkan features as well as achieving decent performance. The Vulkan drivers of relevance are the open-source Intel ANV Vulkan driver and Radeon RADV drivers, both of which are in Mesa though we haven't seen any testing results to know how well they would work if at all currently on OpenBSD, but they're at least in Mesa and obviously open-source.
- A note: The BSDs are no longer that far behind.
- FreeBSD 12.0 uses DRM from Linux 4.16 (April 2018), and the drm-devel port is based on Linux 5.0 (March 2019)
- OpenBSD -current as of April 2019 uses DRM from Linux 4.19.34 ***
I recently released another version – 0.5.0 – of Dinit, the service manager / init system. There were a number of minor improvements, including to the build system (just running “make” or “gmake” should be enough on any of the systems which have a pre-defined configuration, no need to edit mconfig by hand), but the main features of the release were S6-compatible readiness notification, and support for updating the utmp database.
In other words, utmp is a record of who is currently logged in to the system (another file, “wtmp”, records all logins and logouts, as well as, potentially, certain system events such as reboots and time updates). This is a hint at the main motivation for having utmp support in Dinit – I wanted the “who” command to correctly report current logins (and I wanted boot time to be correctly recorded in the wtmp file).
I wondered: If the files consist of fixed-sized records, and are readable by regular users, how is consistency maintained? That is – how can a process ensure that, when it updates the database, it doesn’t conflict with another process also attempting to update the database at the same time? Similarly, how can a process reading an entry from the database be sure that it receives a consistent, full record and not a record which has been partially updated? (after all, POSIX allows that a write(2) call can return without having written all the requested bytes, and I’m not aware of Linux or any of the *BSDs documenting that this cannot happen for regular files). Clearly, some kind of locking is needed; a process that wants to write to or read from the database locks it first, performs its operation, and then unlocks the database. Once again, this happens under the hood, in the implementation of the getutent/pututline functions or their equivalents.
Then I wondered: if a user process is able to lock the utmp file, and this prevents updates, what’s to stop a user process from manually acquiring and then holding such a lock for a long – even practically infinite – duration? This would prevent the database from being updated, and would perhaps even prevent logins/logouts from completing. Unfortunately, the answer is – nothing; and yes, it is possible on different systems to prevent the database from being correctly updated or even to prevent all other users – including root – from logging in to the system.
- A good find
- On FreeBSD, even though write(2) can be asynchronous, once the write syscall returns, the data is in the buffer cache (or ARC), and any future read(2) will see that new data even if it has not yet been written to disk. ***
Last week, Damien Miller, a Google security researcher, and one of the popular OpenSSH and OpenBSD developers announced an update to the existing OpenSSH code that can help protect against the side-channel attacks that leak sensitive data from computer’s memory. This protection, Miller says, will protect the private keys residing in the RAM against Spectre, Meltdown, Rowhammer, and the latest RAMBleed attack.
SSH private keys can be used by malicious threat actors to connect to remote servers without the need of a password. According to CSO, “The approach used by OpenSSH could be copied by other software projects to protect their own keys and secrets in memory”.
However, if the attacker is successful in extracting the data from a computer or server’s RAM, they will only obtain an encrypted version of an SSH private key, rather than the cleartext version.
In an email to OpenBSD, Miller writes, “this change encrypts private keys when they are not in use with a symmetric key that is derived from a relatively large ‘prekey’ consisting of random data (currently 16KB).”
You’ve probably heard us say a mix of “ZFS” and “OpenZFS” and an explanation is long-overdue.
From its inception, “ZFS” has referred to the “Zettabyte File System” developed at Sun Microsystems and published under the CDDL Open Source license in 2005 as part of the OpenSolaris operating system. ZFS was revolutionary for completely decoupling the file system from specialized storage hardware and even a specific computer platform. The portable nature and advanced features of ZFS led FreeBSD, Linux, and even Apple developers to start porting ZFS to their operating systems and by 2008, FreeBSD shipped with ZFS in the 7.0 release. For the first time, ZFS empowered users of any budget with enterprise-class scalability and data integrity and management features like checksumming, compression and snapshotting, and those features remain unrivaled at any price to this day. On any ZFS platform, administrators use the zpool and zfs utilities to configure and manage their storage devices and file systems respectively. Both commands employ a user-friendly syntax such as‘zfs create mypool/mydataset’ and I welcome you to watch the appropriately-titled webinar “Why we love ZFS & you should too” or try a completely-graphical ZFS experience with FreeNAS.
Oracle has steadily continued to develop its own proprietary branch of ZFS and Matt Ahrens points out that over 50% of the original OpenSolaris ZFS code has been replaced in OpenZFS with community contributions. This means that there are, sadly, two politically and technologically-incompatible branches of “ZFS” but fortunately, OpenZFS is orders of magnitude more popular thanks to its open nature. The two projects should be referred to as “Oracle ZFS” and “OpenZFS” to distinguish them as development efforts, but the user still types the ‘zfs’ command, which on FreeBSD relies on the ‘zfs.ko’ kernel module. My impression is that the terms of the CDDL license under which the OpenZFS branch of ZFS is published protects its users from any patent and trademark risks. Hopefully, this all helps you distinguish the OpenZFS project from the ZFS technology.
- There was further discussion of how the ZFSOnLinux repo will become the OpenZFS repo in the future once it also contains the bits to build on FreeBSD as well during the June 25th ZFS Leadership Meeting. The videos for all of the meetings are available here ***
Two new hosts join Joe to talk about a nice i3 implementation and an amazing arcade game written in Bash.
Plus a new segment called Distrohoppers, and a useful hidden feature of GNOME.
Links:
Go full self-hosted with our team’s tips, and we share our setups from simple to complex.
Plus what really happens on a 64-bit Linux box when you run 32-bit software, some very handy picks, our reaction to the new Raspberry Pi 4 and more.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
We take on the issues of burnout, work communication culture, and keeping everything in balance.
Plus Wes asks 'Why Not Kotlin' and breaks down where it fits in his toolbox.
Links:
We share the stories of our very first computers, and reminisce about the bad old days of the PC.
Plus we solve another world problem, explain Amazon Flex, and our cheap home studio build.
Links:
Ubuntu sets the Internet on fire, new Linux and FreeBSD vulnerabilities raise concern, while Mattermost raises $50M to compete with Slack.
Plus we react to Facebook's Libra confirmation and the end of Google tablets.
Links:
A new vulnerability may be the next 'Ping of Death'; we explore the details of SACK Panic and break down what you need to know.
Plus Firefox zero days targeting Coinbase, the latest update on Rowhammer, and a few more reasons it's a great time to be a ZFS user.
Links:
Two #AskError specials in a row! Advice for our younger selves, leaving communities, our listening habits, and hoarding.
Plus the most serious question that’s ever been asked on the show, and more.
00:00:42 What's the one bit of Linux advice you'd give yourself if you could go back to the start of your journey?
00:04:17 What would make you delete your Twitter account?
00:11:29 When do you think you’ll buy your first electric car?
00:19:06 Have you ever been banned from a community?
00:25:39 What kind of printer cartridges do you buy?
00:30:27 How many podcasts do you listen to?
00:33:42 What do you hoard, but probably shouldn't?
blacklistd(8) provides an API that can be used by network daemons to communicate with a packet filter via a daemon to enforce opening and closing ports dynamically based on policy.
The interface to the packet filter is in /libexec/blacklistd-helper (this is currently designed for npf) and the configuration file (inspired from inetd.conf) is in etc/blacklistd.conf
Now, blacklistd(8) will require bpfjit(4) (Just-In-Time compiler for Berkeley Packet Filter) in order to properly work, in addition to, naturally, npf(7) as frontend and syslogd(8), as a backend to print diagnostic messages. Also remember npf shall rely on the npflog* virtual network interface to provide logging for tcpdump() to use.
Unfortunately (dont' ask me why :P) in 8.1 all the required kernel components are still not compiled by default in the GENERIC kernel (though they are in HEAD), and are rather provided as modules. Enabling NPF and blacklistd services would normally result in them being automatically loaded as root, but predictably on securelevel=1 this is not going to happen
A couple months ago I noticed that the monitor on my workstation never power off anymore. Screensaver would go on, but DPMs (to do the poweroff) never kicked in.
I grovels the output of various tools that display DPMS settings, which as usual in Xorg were useless. Everybody said DPMS is on with a timeout. I even wrote my own C program to use every available Xlib API call and even the xscreensaver library calls. (should make it available) No go, everybody says that DPMs is on, enabled and set on a timeout. Didn’t matter whether I let xscreeensaver do the job or just the X11 server.
After a while I noticed that DPMS actually worked between starting my X11 server and starting all my clients. I have a minimal .xinitrc and start the actual session from a script, that is how I could notice. If I used a regular desktop login I wouldn’t have noticed. A server state bug was much more likely than a client bug.
- See the article for the rest...
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages.
In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support and lately extending NetBSD's ptrace interface to cover more register types. You can read more about that in my Apr 2019 report.
In May, I was primarily continuing the work on new ptrace interface. Besides that, I've found and fixed a bug in ptrace() compat32 code, pushed LLVM buildbot to ‘green’ status and found some upstream LLVM regressions. More below.
If you have a traditional window manager like fvwm, one of the things it can do is iconify X windows so that they turn into icons on the root window (which would often be called the 'desktop'). Even modern desktop environments that don't iconify programs to the root window (or their desktop) may have per-program icons for running programs in their dock or taskbar. If your window manager or desktop environment can do this, you might reasonably wonder where those icons come from by default.
Although I don't know how it was done in the early days of X, the modern standard for this is part of the Extended Window Manager Hints. In EWMH, applications give the window manager a number of possible icons, generally in different sizes, as ARGB bitmaps (instead of, say, SVG format). The window manager or desktop environment can then pick whichever icon size it likes best, taking into account things like the display resolution and so on, and display it however it wants to (in its original size or scaled up or down).
How this is communicated in specific is through the only good interprocess communication method that X supplies, namely X properties. In the specific case of icons, the _NET_WM_ICON property is what is used, and xprop can display the size information and an ASCII art summary of what each icon looks like. It's also possible to use some additional magic to read out the raw data from _NET_WM_ICON in a useful format; see, for example, this Stackoverflow question and its answers.
We attempt something you never should, we live flip our FreeNAS ZFS install to a Fedora server.
Plus a REALLY weird PC, and our command line picks.
Special Guests: Alan Pope, Brent Gervais, Martin Wimpress, and Neal Gompa.
Links:
It's a Coder three-way as Chris checks-in with an eGPU update, and Mike shares his adventures with ReasonML.
Plus the state of linux application packaging, and Chris' ultimate mobile workflow.
Links:
Most data structures in most languages are about "this and that". A variant allows us to express "this or that".
Chris gets lost with the animals, while Ang plays with fire and we solve the Deepfake problem.
Plus Wes and Ang battle it out for a million dollars.
Special Guest: Hadea Fisher.
Links:
Elders in the community show us how to properly build services, Huawei is reportedly working on a Sailfish OS fork and Apple joins the Cloud Native club.
Plus Facebook wants you to use their cryptocurrency, and CERN launches "The Microsoft Alternatives project".
Links:
Zorin OS is described as “a powerful desktop you already know how to use.” It’s elegant, beginner-friendly and looks beautiful, too. Should we be paying more attention to it?
Then in another first, Jason installs his first alternative mobile OS, and Joe gives advice on getting the most out of LineageOS.
Unfortunately we end the episode by saying goodbye to Jason as he moves on to pursue several independent projects, but the show will go on with the same spirit of discovery and newness!
Links:
DragonFlyBSD lead developer Matthew Dillon has been working on a big VM rework in the name of performance and other kernel improvements recently. Here is a look at how those DragonFlyBSD 5.5-DEVELOPMENT improvements are paying off compared to DragonFlyBSD 5.4 as well as FreeBSD 12 and five Linux distribution releases. With Dillon using an AMD Ryzen Threadripper system, we used that too for this round of BSD vs. Linux performance benchmarks.
The work by Dillon on the VM overhaul and other changes (including more HAMMER2 file-system work) will ultimately culminate with the DragonFlyBSD 5.6 release (well, unless he opts for DragonFlyBSD 6.0 or so). These are benchmarks of the latest DragonFlyBSD 5.5-DEVELOPMENT daily ISO as of this week benchmarked across DragonFlyBSD 5.4.3 stable, FreeBSD 12.0, Ubuntu 19.04, Red Hat Enterprise Linux 8.0, Debian 9.9, Debian Buster, and CentOS 7 1810 as a wide variety of reference points both from newer and older Linux distributions. (As for no Clear Linux reference point for a speedy reference point, it currently has a regression with AMD + Samsung NVMe SSD support on some hardware, including this box, prohibiting the drive from coming up due to a presumed power management issue that is still being resolved.)
With Matthew Dillon doing much of his development on an AMD Ryzen Threadripper system after he last year proclaimed the greatness of these AMD HEDT CPUs, for this round of testing I also used a Ryzen Threadripper 2990WX with 32 cores / 64 threads. Tests of other AMD/Intel hardware with DragonFlyBSD will come as the next stable release is near and all of the kernel work has settled down. For now it's mostly entertaining our own curiosity how well these DragonFlyBSD optimizations are paying off and how it's increasing the competition against FreeBSD 12 and Linux distributions.
Maybe you have been reading recently about the release of OpenBSD 6.5 and wonder, "What are the differences between Linux and OpenBSD?"
I've also been there at some point in the past and these are my conclusions.
They also apply, to some extent, to other BSDs. However, an important disclaimer applies to this article.
This list is aimed at people who are used to Linux and are curious about OpenBSD. It is written to highlight the most important changes from their perspective, not the absolute most important changes from a technical standpoint.
Please bear with me.
We are very happy to announce The NetBSD Foundation Google Summer of Code 2019 projects:
The communiting bonding period - where students get in touch with mentors and community - started yesterday. The coding period will start from May 27 until August 19.
Please welcome all our students and a big good luck to students and mentors! A big thank to Google and The NetBSD Foundation organization mentors and administrators! Looking forward to a great Google Summer of Code!
The opening keynote at EuroBSDCon 2016 predicted the future 10 years of BSDs. Amongst all the funny previsions, gnn@FreeBSD said that by 2026 OpenBSD will have its first implementation of SMP. Almost 3 years after this talk, that sounds like a plausible forecast... Why? Where are we? What can we do? Let's dive into the issue!
Most of OpenBSD's kernel still runs under a single lock, ze KERNEL_LOCK(). That includes most of the syscalls, most of the interrupt handlers and most of the fault handlers. Most of them, not all of them. Meaning we have collected & fixed bugs while setting up infrastructures and examples. Now this lock remains the principal responsible for the spin % you can observe in top(1) and systat(1).
I believe that we opted for a difficult hike when we decided to start removing this lock from the bottom. As a result many SCSI & Network interrupt handlers as well as all Audio & USB ones can be executed without big lock. On the other hand very few syscalls are already or almost ready to be unlocked, as we incorrectly say. This explains why basic primitives like tsleep(9), csignal() and selwakeup() are only receiving attention now that the top of the Network Stack is running (mostly) without big lock.
In the past years, most of our efforts have been invested into the Network Stack. As I already mentioned it should be ready to be parallelized. However think we should now concentrate on removing the KERNEL_LOCK(), even if the code paths aren't performance critical.
This release finally addresses some of the problems that prevent simple running of several games.
This happens for example when an old FNA.dll library comes with the games that doesn't match the API of our native libraries like SDL2, OpenAL, or MojoShader anymore. Some of those cases can be fixed by simply dropping in a newer FNA.dll. fnaify now asks if FNA 17.12 should be automatically added if a known incompatible FNA version is found. You simply answer yes or no.Another blocker happens when the game expects to check the SteamAPI - either from a running Steam process, or a bundled steam_api library. OpenBSD 6.5-current now has steamworks-nosteam in ports, a stub library for Steamworks.NET that prevents games from crashing simply because an API function isn't found. The repo is here. fnaify now finds this library in /usr/local/share/steamstubs and uses it instead of the bundled (full) Steamworks.NET.dll.
This may help with any games that use this layer to interact with the SteamAPI, mostly those that can only be obtained via Steam.
The order of the arguments in the create, start, and stop commands of vmctl(8) has been changed to match a commonly expected style. Manual usage or scripting with vmctl must be adjusted to use the new syntax.
For example, the old syntax looked like this:
# vmctl create disk.qcow2 -s 50G
The new syntax specifies the command options before the argument:
# vmctl create -s 50G disk.qcow2
Right now I am a bit unhappy at Fedora for a specific packaging situation, so let me tell you a little story of what I, as a system administrator, would really like distributions to not do.
For reasons beyond the scope of this blog entry, I run a Prometheus and Grafana setup on both my home and office Fedora Linux machines (among other things, it gives me a place to test out various things involving them). When I set this up, I used the official upstream versions of both, because I needed to match what we are running (or would soon be).
Recently, Fedora decided to package Grafana themselves (as a RPM), and they called this RPM package 'grafana'. Since the two different packages are different versions of the same thing as far as package management tools are concerned, Fedora basically took over the 'grafana' package name from Grafana. This caused my systems to offer to upgrade me from the Grafana.com 'grafana-6.1.5-1' package to the Fedora 'grafana-6.1.6-1.fc29' one, which I actually did after taking reasonable steps to make sure that the Fedora version of 6.1.6 was compatible with the file layouts and so on from the Grafana version of 6.1.5.
Why is this a problem? It's simple. If you're going to take over a package name from the upstream, you should keep up with the upstream releases. If you take over a package name and don't keep up to date or keep up to date only sporadically, you cause all sorts of heartburn for system administrators who use the package. The least annoying future of this situation is that Fedora has abandoned Grafana at 6.1.6 and I am going to 'upgrade' it with the upstream 6.2.1, which will hopefully be a transparent replacement and not blow up in my face. The most annoying future is that Fedora and Grafana keep ping-ponging versions back and forth, which will make 'dnf upgrade' into a minefield (because it will frequently try to give me a 'grafana' upgrade that I don't want and that would be dangerous to accept). And of course this situation turns Fedora version upgrades into their own minefield, since now I risk an upgrade to Fedora 30 actually reverting the 'grafana' package version on me.
Is Resilient Linux truly an indestructible distro? Or is this our toughest distro challenge yet?
Plus why openSUSE is looking at a renaming, and if we’d pay for Firefox Premium.
Special Guest: Brent Gervais.
Links:
We explore the risky world of exposed RDP, from the brute force GoldBrute botnet to the dangerously worm-able BlueKeep vulnerability.
Plus the importance of automatic updates, and Jim's new backup box.
Apple is shaking up the foundations of UI development with SwiftUI and raising developer eyebrows with a new default shell on MacOS.
Plus feedback with a FOSS dilemma and an update on our 7 languages challenge.
Links:
The funniest 17 seconds from Texas Linux Fest and we learn some remarkable things about our crew’s past.
Special Guest: Brent Gervais.
Links:
Mozilla's master strategy becomes clear, CockroachDB surrenders to the software as a service reality, while Microsoft and Oracle link up.
Plus Google argues that keeping Huawei on their Android is better for all, and Chris gets sucked into Stadia.
Links:
It's another #AskError special. Meditation and mindfulness, friends making obvious mistakes, and AppImage popularity.
Plus cashless society, and hoarding phone apps.
00:01:14 How do you manage apps on your smartphone?
00:04:51 Why isn’t AppImage part of the larger universal packaging discussion?
00:14:43 How would you feel if cash went away?
00:19:39 Thoughts on meditation and mindfulness?
00:28:43 What do you do when you see someone you know making an obvious mistake?
GPU passthrough on bhyve, confusion with used/free disk space on ZFS, OmniOS Community Edition, pfSense 2.4.4 Release p3, NetBSD 8.1 RC1, FreeNAS as your Server OS, and more.
Normally we cover news focused on KVM and sometimes Xen, but something very special has happened with their younger cousin in the BSD world, Bhyve. For those that don’t know, Bhyve (pronounced bee-hive) is the native hypervisor in FreeBSD. It has many powerful features, but one that’s been a pain point for some years now is VGA passthrough. Consumer GPUs have not been useable until very recently despite limited success with enterprise cards. However, Twitter user Michael Yuji found a workaround that enables passing through a consumer card to any *nix system configured to use X11:
All you have to do is add a line pointing the X server to the Bus ID of the passed card and the VM will boot, with acceleration and everything. He theorizes that this may not be possible on windows because of the way it looks for display devices, but it’s a solid start. As soon as development surrounding VGA passthrough matures on Bhyve, it will become a very attractive alternative to more common tools like Hyper-V and Qemu, because it makes many powerful features available in the host system like jails, boot environments, BSD networking, and tight ZFS integration. For example, you could potentially run your Router, NAS, preferred workstation OS and any number of other things in one box, and only have to spin up a single VM because of the flexibility afforded by jails over Linux-based containers. The user who found this workaround also announced they’d be writing it up at some point, so stay tuned for details on the process. It’s been slow going on Bhyve passthrough development for a while, but this new revelation is encouraging. We’ll be closely monitoring the situation and report on any other happenings.
I use ZFS extensively. ZFS is my favorite file system. I write articles and give lectures about it. I work with it every day. In traditional file systems we use df(1) to determine free space on partitions. We can also use du(1) to count the size of the files in the directory. But it’s different on ZFS and this is the most confusing thing EVER. I always forget which tool reports what disk space usage! Every time somebody asks me, I need to google it. For this reason I decided to document it here - for myself - because if I can’t remember it at least I will not need to google it, as it will be on my blog, but maybe you will also benefit from this blog post if you have the same problem or you are starting your journey with ZFS.
The understanding of how ZFS is uses space and how to determine which value means what is a crucial thing. I hope thanks to this article I will finally remember it!
The OmniOS Community Edition Association is proud to announce the general availability of OmniOS - r151030. OmniOS is published according to a 6-month release cycle, r151030 LTS takes over from r151028, published in November 2018; and since it is a LTS release it also takes over from r151022. The r151030 LTS release will be supported for 3 Years. It is the first LTS release published by the OmniOS CE Association since taking over the reins from OmniTI in 2017. The next LTS release is scheduled for May 2021. The old stable r151026 release is now end-of-life. See the release schedule for further details. This is only a small selection of the new features, and bug fixes in the new release; review the release notes for full details. If you upgrade from r22 and want to see all new features added since then, make sure to also read the release notes for r24, r26 and r28. The OmniOS team and the illumos community have been very active in creating new features and improving existing ones over the last 6 months.
We are pleased to announce the release of pfSense® software version 2.4.4-p3, now available for new installations and upgrades! pfSense software version 2.4.4-p3 is a maintenance release, bringing a number of security enhancements as well as a handful of fixes for issues present in the 2.4.4-p2 release. pfSense 2.4.4-RELEASE-p3 updates and installation images are available now! To see a complete list of changes and find more detail, see the Release Notes. We had hoped to bring you this release a few days earlier, but given the announcement last Tuesday of the Intel Microarchitectural Data Sampling (MDS) issue, we did not have sufficient time to fully incorporate those corrections and properly test for release on Thursday. We felt that it was worth delaying for a few days, rather than making multiple releases within a week.
Due to the significant nature of the changes in 2.4.4 and later, warnings and error messages, particularly from PHP and package updates, are likely to occur during the upgrade process. In nearly all cases these errors are a harmless side effect of the changes between FreeBSD 11.1 and 11.2 and between PHP 5.6 and PHP 7.2. Always take a backup of the firewall configuration prior to any major change to the firewall, such as an upgrade. Do not update packages before upgrading pfSense! Either remove all packages or do not update packages before running the upgrade. The upgrade will take several minutes to complete. The exact time varies based on download speed, hardware speed, and other factors such installed packages. Be patient during the upgrade and allow the firewall enough time to complete the entire process. After the update packages finish downloading it could take 10-20 minutes or more until the upgrade process ends. The firewall may reboot several times during the upgrade process. Monitor the upgrade from the firewall console for the most accurate view.
The NetBSD Project is pleased to announce NetBSD 8.1, the first update of the NetBSD 8 release branch. It represents a selected subset of fixes deemed important for security or stability reasons, as well as new features and enhancements.
Some highlights of the 8.1 release are:
What if you could have a server OS that had built in RAID, NAS and SAN functionality, and could manage packages, containers and VMs in a GUI? What if that server OS was also free to download and install? Wouldn’t that be kind of awesome? Wouldn’t that be FreeNAS? FreeNAS is the world’s number one, open source storage OS, but it also comes equipped with all the jails, plugins, and VMs you need to run additional server-level services for things like email and web site hosting. File, Block, and even Object storage is all built-in and can be enabled with a few clicks. The ZFS file system scales to more drives than you could ever buy, with no limits for dataset sizes, snapshots, and restores. FreeNAS is also 100% FreeBSD. This is the OS used in the Netflix CDN, your PS4, and the basis for iOS. Set up a jail and get started downloading packages like Apache or NGINX for web hosting or Postfix for email service. Just released, our new TrueCommand management platform also streamlines alerts and enables multi-system monitoring.
Adopting a distro like it’s a religion is stupid. That’s one of many hard lessons we take away from Texas Linux Fest this week; we’ll share some of the best.
Plus some old friends visit the show, reading eBooks on Linux, and a new Ryzen handheld.
Special Guests: Alan Pope, Alex Kretzschmar, Brent Gervais, and Martin Wimpress.
Links:
"The current situation with dozens of distributions, each with different rules, each with different versions of different libraries, some with certain libraries missing, each with different packaging tools and packaging formats ... that basically tells app developers "go away, focus on platforms that care about applications."
We react to Apple's big news at WWDC, check in with Mike's explorations of Elixir, and talk some TypeScript.
Plus Mike's battles with fan noise, and why he's doubling down on the eGPU lifestyle.
Links:
Frankenstein Linux malware and a Docker bug that's blown out of proportion get our attention this week.
As well as the new GParted release, the Unity Editor for Linux and the Browser vendors struggle with the W3C's latest twist.
Links:
He didn't stop at Xfce. Jason became that Arch Linux guy. Is it as challenging to install as we’ve been told? We discuss the hard way, and then the easier way.
Then we take the mighty Oryx Pro laptop from System76 for a first impressions test drive!
Links:
FreeBSD 11.3-beta 1 is out, BSDCan 2019 recap, OpenIndiana 2019.04 is out, Overview of ZFS Pools in FreeNAS, why open source firmware is important for security, a new Opnsense release, wireguard on OpenBSD, and more.
We have released a new OpenIndiana Hipster snapshot 2019.04. The noticeable changes:
Firefox was updated to 60.6.3 ESR
Virtualbox packages were added (including guest additions)
Mate was updated to 1.22
IPS has received updates from OmniOS CE and Oracle IPS repos, including automatic boot environment naming
Some OI-specific applications have been ported from Python 2.7/GTK 2 to Python 3.5/GTK 3
Quick Demo Video: https://www.youtube.com/watch?v=tQ0-fo3XNrg
FreeNAS uses the OpenZFS (ZFS) file system, which handles both disk and volume management. ZFS offers RAID options mirror, stripe, and its own parity distribution called RAIDZ that functions like RAID5 on hardware RAID. The file system is extremely flexible and secure, with various drive combinations, checksums, snapshots, and replication all possible. For a deeper dive on ZFS technology, read the ZFS Primer section of the FreeNAS documentation.
SUGGEST LAYOUT attempts to balance usable capacity and redundancy by automatically choosing an ideal vdev layout for the number of available disks.
The goal of the root of trust should be to verify that the software installed in every component of the hardware is the software that was intended. This way you can know without a doubt and verify if hardware has been hacked. Since we have very little to no visibility into the code running in a lot of places in our hardware it is hard to do this. How do we really know that the firmware in a component is not vulnerable or that is doesn’t have any backdoors? Well we can’t. Not unless it was all open source. Every cloud and vendor seems to have their own way of doing a root of trust. Microsoft has Cerberus, Google has Titan, and Amazon has Nitro. These seem to assume an explicit amount of trust in the proprietary code (the code we cannot see). This leaves me with not a great feeling. Wouldn’t it be better to be able to use all open source code? Then we could verify without a doubt that the code you can read and build yourself is the same code running on hardware for all the various places we have firmware. We could then verify that a machine was in a correct state without a doubt of it being vulnerable or with a backdoor. It makes me wonder what the smaller cloud providers like DigitalOcean or Packet have for a root of trust. Often times we only hear of these projects from the big three or five.
This update addresses several privilege escalation issues in the access control implementation and new memory disclosure issues in Intel CPUs. We would like to thank Arnaud Cordier and Bill Marquette for the top-notch reports and coordination.
Here are the full patch notes:
system: address CVE-2019-11816 privilege escalation bugs[1] (reported by Arnaud Cordier)
system: /etc/hosts generation without interfacehasgateway()
system: show correct timestamp in config restore save message (contributed by nhirokinet)
system: list the commands for the pluginctl utility when n+ argument is given
system: introduce and use userIsAdmin() helper function instead of checking for 'page-all' privilege directly
system: use absolute path in widget ACLs (reported by Netgate)
system: RRD-related cleanups for less code exposure
interfaces: add EN DUID Generation using OPNsense PEN (contributed by Team Rebellion)
interfaces: replace legacygetallinterface_addresses() usage
firewall: fix port validation in aliases with leading / trailing spaces
firewall: fix outbound NAT translation display in overview page
firewall: prevent CARP outgoing packets from using the configured gateway
firewall: use CARP net.inet.carp.demotion to control current demotion in status page
firewall: stop live log poller on error result
dhcpd: change rule priority to 1 to avoid bogon clash
dnsmasq: only admins may edit custom options field
firmware: use insecure mode for base and kernel sets when package fingerprints are disabled
firmware: add optional device support for base and kernel sets
firmware: add Hostcentral mirror (HTTP, Melbourne, Australia)
ipsec: always reset rightallowany to default when writing configuration
lang: say "hola" to Spanish as the newest available GUI language
lang: updates for Chinese, Czech, Japanese, German, French, Russian and Portuguese
network time: only admins may edit custom options field
openvpn: call openvpnrefreshcrls() indirectly via plugin_configure() for less code exposure
openvpn: only admins may edit custom options field to prevent privilege escalation (reported by Bill Marquette)
openvpn: remove custom options field from wizard
unbound: only admins may edit custom options field
wizard: translate typehint as well
plugins: os-freeradius 1.9.3 fixes string interpolation in LDAP filters (contributed by theq86)
plugins: os-nginx 1.12[2]
plugins: os-theme-cicada 1.17 (contributed by Team Rebellion)
plugins: os-theme-tukan 1.17 (contributed by Team Rebellion)
src: timezone database information update[3]
src: install(1) broken with partially matching relative paths[4]
src: microarchitectural Data Sampling (MDS) mitigation[5]
ports: carootnss 3.44
ports: php 7.2.18[6]
ports: sqlite 3.28.0[7]
ports: strongswan custom XAuth generic patch removed
Earlier this week I imported a port for WireGuard into the OpenBSD ports tree. At the moment we have the userland daemon and the tools available. The in-kernel implementation is only available for Linux. At the time of writing there are packages available for -current. Jason A. Donenfeld (WireGuard author) has worked to support OpenBSD in WireGuard and as such his post on ports@ last year got me interested in WireGuard, since then others have toyed with WireGuard on OpenBSD before and as such I've used Ted's article as a reference. Note however that some of the options mentioned there are no longer valid. Also, I'll be using two OpenBSD peers here. The setup will be as follows: two OpenBSD peers, of which we'll dub wg1 the server and wg2 the client. The WireGuard service on wg1 is listening on 100.64.4.3:51820.
WireGuard (cl)aims to be easier to setup and faster than OpenVPN and while I haven't been able to verify the latter, the first is certainly true...once you've figured it out. Most documentation out there is for Linux so I had to figure out the wireguardgo service and the tun parameters. But all in all, sure, it's easier. Especially the client configuration on iOS which I didn't cover here because it's essentially pkgadd libqrencode ; cat client.conf | qrencode -t ansiutf8, scan the code with the WireGuard app and you're good to go. What is particularly neat is that WireGuard on iOS supports Always-on.
We visit Intel to figure out what Clear Linux is all about and explain a few tricks that make it unique.
Plus Wes and Ell are back from KubeCon in Barcelona and return with some great news for open source.
Special Guests: Alex Kretzschmar and Brent Gervais.
Links:
Chris and Brent are back from their buddies trip to Portland and share a few stories, but the big surprise comes when Chris’ wife joins to share big life-changing news.
Special Guests: Brent Gervais and Hadea Fisher.
Links:
Wes is back and Mike's got a few surprises in store, including a new view on Electron, a hot take on titles, and a programming challenge for the both of them.
Plus when it's okay to lie to the compiler, what GitHub's Sponsors program means for open source, and your feedback.
Links:
Firefox has a new speed trick, openSUSE Leap has a time-traveling kernel while the project plans for the future, and we react to Antergros coming to an end.
Plus the ghost of Firefox OS lives on in the well-financed KaiOS, GitHub launches sponsors, and obvious uses for the new Google Glass 2.
Links:
We turn our eye to web server best practices, from the basics of CDNs to the importance of choosing the right multi-processing module.
Plus the right way to setup PHP, the trouble with benchmarking, and when to choose NGiNX.
Links:
Linux desktop standards, how the Web has changed over the years, and the ethics of space exploration.
Plus what to do if you see a crime, and the things we hate the most.
00:00:12 Free Desktop
00:12:43 #AskError: if you witness a petty crime, should you intervene?
00:17:55 Old vs new Web
00:28:41 #AskError: what are your pet hates?
00:37:47 Should humans spend billions on space exploration while so many people live in poverty?
Running AIX on QEMU on Linux on Windows, your NAS fleet with TrueCommand, Unleashed 1.3 is available, LLDB: CPU register inspection support extension, V7 Unix programs often not written as expected, and more.
YES it’s real! I’m using the Linux subsystem on Windows, as it’s easier to build this Qemu tree from source. I’m using Debian, but these steps will work on other systems that use Debian as a base. first thing first, you need to get your system with the needed pre-requisites to compile Great with those in place, now clone Artyom Tarasenko’s source repository Since the frame buffer apparently isn’t quite working just yet, I configure for something more like a text mode build. Now for me, GCC 7 didn’t build the source cleanly. I had to make a change to the file config-host.mak and remove all references to -Werror. Also I removed the sound hooks, as we won’t need them. Now you can build Qemu. Okay, all being well you now have a Qemu. Now following the steps from Artyom Tarasenko’s blog post, we can get started on the install!
Hundreds of thousands of FreeNAS and TrueNAS systems are deployed around the world, with many sites having dozens of systems. Managing multiple systems individually can be time-consuming. iXsystems has responded to the challenge by creating a “single pane of glass” application to simplify the scaling of data, drive management, and administration of iXsystems NAS platforms. We are proud to introduce TrueCommand. TrueCommand is a ZFS-aware management application that manages TrueNAS and FreeNAS systems. The public Beta of TrueCommand is available for download now. TrueCommand can be used with small iXsystems NAS fleets for free. Licenses can be purchased for large-scale deployments and enterprise support. TrueCommand expands on the ease of use and power of TrueNAS and FreeNAS systems with multi-system management and reporting.
This is the fourth release of Unleashed - an operating system fork of illumos. For more information about Unleashed itself and the download links, see our website. As one might expect, this release removes a few things. The most notable being the removal of ksh93 along with all its libs. As far as libc interfaces are concerned, a number of non-standard functions were removed. In general, they have been replaced by the standards-compliant versions. (getgrentr, fgetgrentr, getgrgidr, getgrnamr, ttynamer, getloginr, shmdt, sigwait, gethostname, putmsg, putpmsg, and getaddrinfo) Additionally, wordexp and wordfree have been removed from libc. Even though they are technically required by POSIX, software doesn't seem to use them. Because of the fragile implementation (shelling out), we took the OpenBSD approach and just removed them. The default compilation environment now includes XOPENSOURCE=700 and EXTENSIONS. Additionally, all applications now use 64-bit file offsets, making use of LARGEFILESOURCE, LARGEFILE64SOURCE, and FILEOFFSET_BITS unnecessary. Last but not least, nightly.sh is no more. In short, to build one simply runs 'make'. (See README for detailed build instructions.)
Why did we decide to fork illumos? After all, there are already many illumos distributions available to choose from. We felt we could do better than any of them by taking a more aggressive stance toward compatibility and reducing cruft from code and community interactions alike.
Upstream describes LLDB as a next generation, high-performance debugger. It is built on top of LLVM/Clang toolchain, and features great integration with it. At the moment, it primarily supports debugging C, C++ and ObjC code, and there is interest in extending it to more languages. In February, I have started working on LLDB, as contracted by the NetBSD Foundation. So far I've been working on reenabling continuous integration, squashing bugs, improving NetBSD core file support and updating NetBSD distribution to LLVM 8 (which is still stalled by unresolved regressions in inline assembly syntax). You can read more about that in my Mar 2019 report. In April, my main focus was on fixing and enhancing the support for reading and writing CPU registers. In this report, I'd like to shortly summarize what I have done, what I have learned in the process and what I still need to do.
My work continues with the two milestones from last month, plus a third that's closely related: Add support for FPU registers support for NetBSD/i386 and NetBSD/amd64. Support XSAVE, XSAVEOPT, ... registers in core(5) files on NetBSD/amd64. Add support for Debug Registers support for NetBSD/i386 and NetBSD/amd64. The most important point right now is deciding on the format for passing the remaining registers, and implementing the missing ptrace interface kernel-side. The support for core files should follow using the same format then. Userland-side, I will work on adding matching ATF tests for ptrace features and implement LLDB side of support for the new ptrace interface and core file notes. Afterwards, I will start working on improving support for the same things on 32-bit (i386) executables.
Yesterday I wrote that V7 ed read its terminal input in cooked mode a line at a time, which was an efficient, low-CPU design that was important on V7's small and low-power hardware. Then in comments, frankg pointed out that I was wrong about part of that, namely about how ed read its input.
Reading this section of the source code for ed taught me that it has an interesting, undocumented, and entirely characteristic little behavior. Officially, ed commands that have you enter new text have that new text terminate by a . on a line by itself:
In other words, it turns a single line with '.' into an EOF. The consequence of this is that if you type a real EOF at the start of a line, you get the same result, thus saving you one character (you use Control-D instead of '.' plus newline). This is very V7 Unix behavior, including the lack of documentation.
This is also a natural behavior in one sense. A proper program has to react to EOF here in some way, and it might as well do so by ending the input mode. It's also natural to go on to try reading from the terminal again for subsequent commands; if this was a real and persistent EOF, for example because the pty closed, you'll just get EOF again and eventually quit. V7 ed is slightly unusual here in that it deliberately converts '.' by itself to EOF, instead of signaling this in a different way, but in a way that's also the simplest approach; if you have to have some signal for each case and you're going to treat them the same, you might as well have the same signal for both cases.
Modern versions of ed appear to faithfully reimplement this convenient behavior, although they don't appear to document it. I haven't checked OpenBSD, but both FreeBSD ed and GNU ed work like this in a quick test. I haven't checked their source code to see if they implement it the same way.
Can the Free Desktop avoid being left behind in the going dark revolution? Cassidy from elementary OS joins us to discuss their proposal.
Plus we complete our Red Hat arc by giving Silverblue the full workstation shakedown, Drew shares his complete review, and we discuss the loss of Antergros.
Special Guests: Alex Kretzschmar, Cassidy James Blaede, and Drew DeVore.
Links:
A strong argument against Python’s batteries included model exposes some bigger problems the community is struggling with. We chat about all of it.
Plus lessons learned six years after a project, a new tool, and some feedback.
Links:
Chris tries to convince Brent to take a buddies trip, we try to get the audience a discount chicken deal, and Ell’s trying to get out of a locked server room.
Plus we dig into the WhatsApp spyware, prove that robots will replace podcasters, and call a higher power for some help because no problem is too small, too big, or too weird.
Special Guest: Brent Gervais.
Links:
ZombieLoad's impact on Linux, AMP to start hiding Google from the URL, and the huge Linux switch underway.
Plus the impact of Google suspending business with Huawei, the recent ChromeOS feature silently dropped, and more.
Links:
Practically overnight, Intel’s Clear Linux OS has turned into a distribution worth paying attention to. But is it ready for regular desktop Linux users?
Plus, Jason goes down yet another awesome rabbit hole with a new project on GitHub aimed at giving back to the Linux and open source community.
Links:
36 year old UFS bug fixed, a BSD for the road, automatic upgrades with OpenBSD, DTrace ext2fs support in FreeBSD, Dedicated SSH tunnel user, upgrading VMM VMs to OpenBSD 6.5, and more.
This update eliminates a kernel stack disclosure bug in UFS/FFS directory entries that is caused by uninitialized directory entry padding written to the disk.
- When the directory entry is written to disk, it is written as a full 32bit entry, and the unused bytes were not initialized, so could possibly contain sensitive data from the kernel stack It can be viewed by any user with read access to that directory. Up to 3 bytes of kernel stack are disclosed per file entry, depending on the the amount of padding the kernel needs to pad out the entry to a 32 bit boundary. The offset in the kernel stack that is disclosed is a function of the filename size. Furthermore, if the user can create files in a directory, this 3 byte window can be expanded 3 bytes at a time to a 254 byte window with 75% of the data in that window exposed. The additional exposure is done by removing the entry, creating a new entry with a 4-byte longer name, extracting 3 more bytes by reading the directory, and repeating until a 252 byte name is created. This exploit works in part because the area of the kernel stack that is being disclosed is in an area that typically doesn't change that often (perhaps a few times a second on a lightly loaded system), and these file creates and unlinks themselves don't overwrite the area of kernel stack being disclosed. It appears that this bug originated with the creation of the Fast File System in 4.1b-BSD (Circa 1982, more than 36 years ago!), and is likely present in every Unix or Unix-like system that uses UFS/FFS. Amazingly, nobody noticed until now. This update also adds the -z flag to fsck_ffs to have it scrub the leaked information in the name padding of existing directories. It only needs to be run once on each UFS/FFS filesystem after a patched kernel is installed and running. Submitted by: David G. Lawrence [email protected]
- So a patched kernel will no longer leak this data, and running the
fsck_ffs -z
command will erase any leaked data that may exist on your system- OpenBSD commit with additional detail on mitigations The impact on OpenBSD is very limited: 1 - such stack bytes can be found in raw-device reads, from group operator. If you can read the raw disks you can undertake other more powerful actions. 2 - read(2) upon directory fd was disabled July 1997 because I didn't like how grep * would display garbage and mess up the tty, and applying vis(3) for just directory reads seemed silly. read(2) was changed to return 0 (EOF). Sep 2016 this was further changed to EISDIR, so you still cannot see the bad bytes. 3 - In 2013 when guenther adapted the getdents(2) directory-reading system call to 64-bit ino_t, the userland data format changed to 8-byte-alignment, making it incompatible with the 4-byte-alignment UFS on-disk format. As a result of code refactoring the bad bytes were not copied to userland. Bad bytes will remain in old directories on old filesystems, but nothing makes those bytes user visible. There will be no errata or syspatch issued. I urge other systems which do expose the information to userland to issue errata quickly, since this is a 254 byte infoleak of the stack which is great for ROP-chain building to attack some other bug. Especially if the kernel has no layout/link-order randomization ...
As regular It’s FOSS readers should know, I like diving into the world of BSDs. Recently, I came across an interesting BSD that is designed to live on a thumb drive. Let’s take a look at NomadBSD. NomadBSD is different than most available BSDs. NomadBSD is a live system based on FreeBSD. It comes with automatic hardware detection and an initial config tool. NomadBSD is designed to “be used as a desktop system that works out of the box, but can also be used for data recovery, for educational purposes, or to test FreeBSD’s hardware compatibility.” This German BSD comes with an OpenBox-based desktop with the Plank application dock. NomadBSD makes use of the DSB project. DSB stands for “Desktop Suite (for) (Free)BSD” and consists of a collection of programs designed to create a simple and working environment without needing a ton of dependencies to use one tool. DSB is created by Marcel Kaiser one of the lead devs of NomadBSD. Just like the original BSD projects, you can contact the NomadBSD developers via a mailing list.
NomadBSD recently released version 1.2 on April 21, 2019. This means that NomadBSD is now based on FreeBSD 12.0-p3. TRIM is now enabled by default. One of the biggest changes is that the initial command-line setup was replaced with a Qt graphical interface. They also added a Qt5 tool to install NomadBSD to your hard drive. A number of fixes were included to improve graphics support. They also added support for creating 32-bit images.
I first discovered NomadBSD back in January when they released 1.2-RC1. At the time, I had been unable to install Project Trident on my laptop and was very frustrated with BSDs. I downloaded NomadBSD and tried it out. I initially ran into issues reaching the desktop, but RC2 fixed that issue. However, I was unable to get on the internet, even though I had an Ethernet cable plugged in. Luckily, I found the wifi manager in the menu and was able to connect to my wifi. Overall, my experience with NomadBSD was pleasant. Once I figured out a few things, I was good to go. I hope that NomadBSD is the first of a new generation of BSDs that focus on mobility and ease of use. BSD has conquered the server world, it’s about time they figured out how to be more user-friendly.
upgrade](https://www.tumfatig.net/20190426/openbsd-automatic-upgrade/)
OpenBSD 6.5 advertises for an installer improvement: rdsetroot(8) (a build-time tool) is now available for general use. Used in combination with autoinstall.8, it is now really easy to do automatic upgrades of your OpenBSD instances. I first manually upgraded my OpenBSD sandbox to 6.5. Once that was done, I could use the stock rdsetroot(8) tool. The plan is quite simple: write an unattended installation response file, insert it to a bsd.rd 6.5 installation image and reboot my other OpenBSD instances using that image.
There must be a way to run onetime commands (in the manner of fw_update) to automatically run sysmerge and packages upgrades. As for now, I’d rather do it manually. This worked like a charm on two Synology KVM instances using a single sd0 disk, on my Thinkpad X260 using Encrypted root with Keydisk and on a Vultr instance using Encrypted root with passphrase. And BTW, the upgrade on the X260 used the (iwn0) wireless connection. I just read that florian@ has released the sysupgrade(8) utility which should be released with OpenBSD 6.6. That will make upgrades even easier! Until then, happy upgrading.
Which logs were replaced by dtrace-probes:
The only debug macro, which was leaved is EXT2FSPRINTEXTENTS.
It is impossible to replace it by dtrace-probes, because the additional logic is required to walk thru file extents.
The user still be able to see mount errors in the dmesg in case of:
I use ssh tunneling A LOT, for everything. Yesterday, I removed the public access of my IMAP server, it’s now only available through ssh tunneling to access the daemon listening on localhost. I have plenty of daemons listening only on localhost that I can only reach through a ssh tunnel. If you don’t want to bother with ssh and redirect ports you need, you can also make a VPN (using ssh, openvpn, iked, tinc…) between your system and your server. I tend to avoid setting up VPN for the current use case as it requires more work and more maintenance than running ssh server and a ssh client. The last change, for my IMAP server, added an issue. I want my phone to access the IMAP server but I don’t want to connect to my main account from my phone for security reasons. So, I need a dedicated user that will only be allowed to forward ports. This is done very easily on OpenBSD. The steps are: 1. generate ssh keys for the new user 2. add an user with no password 3. allow public key for port forwarding Obviously, you must allow users (or only this one) to make port forwarding in your sshd_config.
We're running dedicated vmm(4)/vmd(8) servers to host opinionated VMs. OpenBSD 6.5 is released! There are two ways you can upgrade your VM. Either do a manual upgrade or leverage autoinstall(8). You can take care of it via the console with vmctl(8).
To get connected to the console you need to have access to the host your VM is running on. The same username and public SSH key, as provided for the VM, are used to create a local user on the host. When this is done you can use vmctl(8) to manage your VM. The options you have are:
```$ vmctl start id [-c]```
$ vmctl stop id [-fw]```
```-w Wait until the VM has been terminated.```
-c Automatically connect to the VM console.```
We scale the Red Hat Summit and come back with a few stories to share.
Plus some big community news, finding threats on the command line, and our reaction to Microsoft shipping the Linux kernel in Windows.
Special Guests: Alex Kretzschmar, Brent Gervais, Cassidy James Blaede, Ell Marquez, and Neal Gompa.
Links:
Microsoft catches Mike’s eye with WSL 2, Google gets everyone's attention with their new push for Kotlin, and we get a full eGPU report.
Links:
Back from Boston and we have a few stories to share, the best 39 seconds from Red Hat Summit, and the protest we found our selves in the middle of.
Plus we get to know the new guy a little better, the Pixel 3a is announced and we weigh the tradeoffs, and we replay Chris having a panic attack on air.
Links:
RHEL 8 is released, we report from the ground of the big announcement, Microsoft announces WSL 2 with a real Linux kernel at the core, and details on their new open source terminal.
Plus Alpine Linux Docker images shipped for 3 years with root accounts unlocked, and Google's new attempt to send updates directly to your phone.
Links:
We’re back from LinuxFest Northwest with an update on all things WireGuard, some VLAN myth busting, and the trade-offs of highly available systems.
Links:
What it takes to make a proper distro, how we send emails, and the constant quest for knowledge.
Plus D&D, and April Fools annoyances.
00:01:00 Email etiquette
00:10:17 #AskError: Thoughts on Dungeons and Dragons?
00:14:00 What does it take to be a proper Linux distro?
00:26:33 #AskError: Do April Fool’s Day tech “jokes” annoy you?
00:32:16 Always learning new things
FreeBSD ZFS vs. ZoL performance, Dragonfly 5.4.2 has been release, containing web services with iocell, Solaris 11.4 SRU8, Problem with SSH Agent forwarding, OpenBSD 6.4 to 6.5 upgrade guide, and more.
With iX Systems having released new images of FreeBSD reworked with their ZFS On Linux code that is in development to ultimately replace their existing FreeBSD ZFS support derived from the code originally found in the Illumos source tree, here are some fresh benchmarks looking at the FreeBSD 12 performance of ZFS vs. ZoL vs. UFS and compared to Ubuntu Linux on the same system with EXT4 and ZFS. Using an Intel Xeon E3-1275 v6 with ASUS P10S-M WS motherboard, 2 x 8GB DDR4-2400 ECC UDIMMs, and Samsung 970 EVO Plus 500GB NVMe solid-state drive was used for all of this round of testing. Just a single modern NVMe SSD was used for this round of ZFS testing while as the FreeBSD ZoL code matures I'll test on multiple systems using a more diverse range of storage devices. FreeBSD 12 ZoL was tested using the iX Systems image and then fresh installs done of FreeBSD 12.0-RELEASE when defaulting to the existing ZFS root file-system support and again when using the aging UFS file-system. Ubuntu 18.04.2 LTS with the Linux 4.18 kernel was used when testing its default EXT4 file-system and then again when using the Ubuntu-ZFS ZoL support. Via the Phoronix Test Suite various BSD/Linux I/O benchmarks were carried out. Overall, the FreeBSD ZFS On Linux port is looking good so far and we are looking forward to it hopefully maturing in time for FreeBSD 13.0. Nice job to iX Systems and all of those involved, especially the ZFS On Linux project. Those wanting to help in testing can try the FreeBSD ZoL spins. Stay tuned for more benchmarks and on more diverse hardware as time allows and the FreeBSD ZoL support further matures, but so far at least the performance numbers are in good shape.
```The normal ISO and IMG files are available for download and install, plus an uncompressed ISO image for those installing remotely. I uploaded them to mirror-master.dragonflybsd.org last night so they should be at your local mirror or will be soon. This version includes Matt's fix for the HAMMER2 corruption bug he identified recently.```
If you have an existing 5.4 system and are running a generic kernel, the normal upgrade process will work.```
```> cd /usr/src ```
git pull ```
```And then rebuild: (in /usr/src ) ```
```
```> make buildkernel ```
make installkernel ```
```> make upgrade ```
```
``` ```
(reboot) ```
```> make initrd ```
```
``` ```
pkg update
> pkg upgrade```
I'm a huge fan of the FreeBSD jails feature. It is a great system for splitting services into logical units with all the performance of the bare metal system. In fact, this very site runs in its own jail! If this is starting to sound like LXC or Docker, it might surprise you to learn that OS-level virtualization has existed for quite some time. Kudos to the Linux folks for finally getting around to it. 😛 If you're interested in the history behind Jails, there is an excellent talk from Papers We Love on the subject: https://www.youtube.com/watch?v=hgN8pCMLI2U
There are plenty of options when it comes to setting up the jail system. Ezjail and Iocage seem popular, or you could do things manually. Iocage was recently rewritten in python, but was originally a set of shell scripts. That version has since been forked under the name Iocell, and I think it's pretty neat, so this tutorial will be using Iocell.
Once you have installed iocell and configured your ZFS pool, you'll need to run a few commands before creating your first jail. First, tell iocell which ZFS pool to use by issuing iocell activate $POOLNAME. Iocell will create a few datasets.
As you can imagine, your jails are contained within the /iocell/jails dataset. The /iocell/releases dataset is used for storing the next command we need to run, iocell fetch. Iocell will ask you which release you'd like to pull down. Since we're running 11.0 on the host, pick 11.0-RELEASE. Iocell will download the necessary txz files and unpack them in /iocell/releases.
Today we are releasing the SRU 8 for Oracle Solaris 11.4. It is available via 'pkg update' from the support repository or by downloading the SRU from My Oracle Support Doc ID 2433412.1.
- This SRU introduces the following enhancements:
- Integration of 28060039 introduced an issue where any firmware update/query commands will log eereports and repeated execution of such commands led to faulty/degraded NIC. The issue has been addressed in this SRU.
- UCB (libucb, librpcsoc, libdbm, libtermcap, and libcurses) libraries have been reinstated for Oracle Solaris 11.4
- Re-introduction of the service fc-fabric.
- ibus has been updated to 1.5.19
After hacking the matrix.org website today, the attacker opened a series of GitHub issues mentioning the flaws he discovered. In one of those issues, he mentions that “complete compromise could have been avoided if developers were prohibited from using [SSH agent forwarding].” Here’s what man ssh_config has to say about ForwardAgent: "Agent forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the agent’s Unix-domain socket) can access the local agent through the forwarded connection. An attacker cannot obtain key material from the agent, however they can perform operations on the keys that enable them to authenticate using the identities loaded into the agent."" Simply put: if your jump box is compromised and you use SSH agent forwarding to connect to another machine through it, then you risk also compromising the target machine! Instead, you should use either ProxyCommand or ProxyJump (added in OpenSSH 7.3). That way, ssh will forward the TCP connection to the target host via the jump box and the actual connection will be made on your workstation. If someone on the jump box tries to MITM your connection, then you will be warned by ssh.
Start by performing the pre-upgrade steps. Next, boot from the install kernel, bsd.rd: use bootable install media, or place the 6.5 version of bsd.rd in the root of your filesystem and instruct the boot loader to boot this kernel. Once this kernel is booted, choose the (U)pgrade option and follow the prompts. Apply the configuration changes and remove the old files. Finish up by upgrading the packages: pkg_add -u. Alternatively, you can use the manual upgrade process. You may wish to check the errata page or upgrade to the stable branch to get any post-release fixes.
.NET 5 has been announced and brings a new unified future to the platform. We dig in to Microsoft's plans and speculate about what they might mean for F#.
Plus the value of manual testing, Visual Studio Code Remote, and Conway's Game of Life in Rust.
Links:
Is Fedora 30 the peak release of this distribution? We put it through the ultimate test, live on the air, and put everything on the line.
Plus Red Hat’s new logo, Dell’s new Linux workstations, and meet a new member of our crew.
Special Guests: Alex Kretzschmar, Brent Gervais, and Neal Gompa.
Links:
Sometimes the road home is a little bumpy, and sometimes you just want them to cook the bloody eggs.
Fedora 30 is out, we share our thoughts. Purism's new Librem One service is launched, we're rather skeptical and the reason might surprise you.
Plus the massive Firefox blunder, Canonical's new service, and a report from DockerCon.
Links:
OpenBSD 6.5 has been released, mount ZFS datasets anywhere, help test upcoming NetBSD 9 branch, LibreSSL 2.9.1 is available, Bail Bond Denied Edition of FreeBSD Mastery: Jails, and one reason ed(1) was a good editor back in the days in this week’s episode.
ZFS is very flexible about mountpoints, and there are many features available to provide great flexibility. When you create zpool maintank, the default mountpoint is /maintank. You might be happy with that, but you don’t have to be content. You can do magical things.
Folks, once again we are quite late for branching the next NetBSD release (NetBSD 9). Initially planned to happen early in February 2019, we are now approaching May and it is unlikely that the branch will happen before that. On the positive side, lots of good things landed in -current in between, like new Mesa, new jemalloc, lots of ZFS improvements - and some of those would be hard to pull up to the branch later. On the bad side we saw lots of churn in -current recently, and there is quite some fallout where we not even have a good overview right now. And this is where you can help:
- please test -current, on all the various machines you have
- especially interesting would be test results from uncommon architectures or strange combinations (like the sparc userland on sparc64 kernel issue I ran in yesterday) Please test, report success, and file PRs for failures! We will likely announce the real branch date on quite short notice, the likely next candidates would be mid may or end of may. We may need to do extra steps after the branch (like switch some architectures back to old jemalloc on the branch). However, the less difference between -current and the branch, the easier will the release cycle go. Our goal is to have an unprecedented short release cycle this time. But.. we always say that upfront.
We have released LibreSSL 2.9.1, which will be arriving in the LibreSSL directory of your local OpenBSD mirror soon. This is the first stable release from the 2.9 series, which is also included with OpenBSD 6.5
It includes the following changes and improvements from LibreSSL 2.8.x:
API and Documentation Enhancements
Compatibility Changes
Testing and Proactive Security
Internal Improvements
Portable Improvements
Bug Fixes
The LibreSSL project continues improvement of the codebase to reflect modern, safe programming practices. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.
I had a brilliant, hideous idea: to produce a charity edition of FreeBSD Mastery: Jails featuring the cover art I would use if I was imprisoned and did not have access to a real cover artist. (Never mind that I wouldn’t be permitted to release books while in jail: we creative sorts scoff at mere legal and cultural details.) I originally wanted to produce my own take on the book’s cover art. My first attempt failed spectacularly. I downgraded my expectations and tried again. And again. And again. I’m pleased to reveal the final cover for FreeBSD Mastery: Jails–Bail Bond Edition! This cover represents the very pinnacle of my artistic talents, and is the result of literally hours of effort. But, as this book is available only to the winner of charity fund-raisers, purchase of this tome represents moral supremacy. I recommend flaunting it to your family, coworkers, and all those of lesser character. Get your copy by winning the BSDCan 2019 charity auction… or any other other auction-type event I deem worthwhile. As far as my moral fiber goes: I have learned that art is hard, and that artists are not paid enough. And if I am ever imprisoned, I do hope that you’ll contribute to my bail fund. Otherwise, you’ll get more covers like this one.
It is common to describe ed(1) as being line oriented, as opposed to screen oriented editors like vi. This is completely accurate but it is perhaps not a complete enough description for today, because ed is line oriented in a way that is now uncommon. After all, you could say that your shell is line oriented too, and very few people use shells that work and feel the same way ed does. The surface difference between most people's shells and ed is that most people's shells have some version of cursor based interactive editing. The deeper difference is that this requires the shell to run in character by character TTY input mode, also called raw mode. By contrast, ed runs in what Unix usually calls cooked mode, where it reads whole lines from the kernel and the kernel handles things like backspace. All of ed's commands are designed so that they work in this line focused way (including being terminated by the end of the line), and as a whole ed's interface makes this whole line input approach natural. In fact I think ed makes it so natural that it's hard to think of things as being any other way. Ed was designed for line at a time input, not just to not be screen oriented. This input mode difference is not very important today, but in the days of V7 and serial terminals it made a real difference. In cooked mode, V7 ran very little code when you entered each character; almost everything was deferred until it could be processed in bulk by the kernel, and then handed to ed all in a single line which ed could also process all at once. A version of ed that tried to work in raw mode would have been much more resource intensive, even if it still operated on single lines at a time.
The party before the party, its Friday! A full crew from all over the world joins us in studio to share stories, meet new friends, and give each other a hard time.
Mike and Wes dive into Bosque, Microsoft’s new research language, and debate if it represents the future of programming languages, or if we should all just be using F#.
Plus some Qt license clarity, a handy new Rust feature, and your feedback.
Links:
We take Ubuntu MATE 18.04 for a test drive on the Raspberry Pi 3. How does it compare to Raspbian? After that, a fascinating discussion about the Linux community.
What are the high points and low points? What’s that magic ingredient that makes it feel so different from other tech communities?
Fresh back from LinuxFest Northwest we share a few of our favorite stories and memories.
Plus our concerns with Pursim's new subscription services, Fedora 30 is released, and we spin up the Distro Hoppers.
Special Guests: Alex Kretzschmar, Brent Gervais, and Ell Marquez.
Links:
Docker Hub gets hacked, Nextcloud 16 has a new feature to prevent hacks, and France's 'Secure" Telegram replacement gets hacked within an hour.
Plus who is spending $30m a month on AWS? Docker on ARM, and some LinuxFest Northwest thoughts.
Links:
Why Linux doesn't just work on all hardware, criticism of your field, and the ethics of acquiring old software.
Plus venturing outside, and how we install unusual applications.
00:00:37 Why is hardware support so terrible?
00:12:21 #AskError: How much time do you spend outside?
00:16:08 If you're wedded to a concept or axiom for your job, is there any way you can be objective about criticism of your field?
00:26:13 #AskError: If an application you want is not available in your distro’s repo, which community package would you choose and why?
00:31:54 Is it ok to pirate abandonware?
We continue our take on ZFS as Jim and Wes dive in to snapshots, replication, and the magic on copy on write.
Plus some handy tools to manage your snapshots, rsync war stories, and more!
Links:
Introducing funlinkat(), an OpenBSD Router with AT&T U-Verse, using NetBSD on a raspberry pi, ZFS encryption is still under development, Rump kernel servers and clients tutorial, Snort on OpenBSD 6.4, and more.
One of the first syscalls which was created in Unix-like systems is unlink. In FreeBSD this syscall is number 10 (source) and in Linux, the number is dependent on the architecture but for most of them is also the tenth syscall (source). This indicated that this is one of the primary syscalls. The unlink syscall is very simple and we provide one single path to the file that we want to remove. The “removing file” process itself is very interesting so let’s spend a moment to understand the it. First, by removing the file we are removing a link from the directory to it. In Unix-like systems we can have many links to a single file (hard links). When we remove all links to the file, the file system will mark the blocks used by the file as free (a different file system will behave differently but let’s not jump into a second digression). This is why the process is called unlinking and not “removing file”. While we unlink the file two or three things will happen:
- We will remove an entry in the directory with the filename.
- We will decrease a file reference count (in inode).
- If links go to zero - the file will be removed from the disk (again this doesn't mean that the blocks from the disk will be filled with zeros, though this may happen depending on the file system and configuration. However, in most cases this means that the file system will mark those blocks to as free and use them to write new data later This mostly means that “removing file” from a directory is an operation on the directory and not on the file (inode) itself. Another interesting subject is what happens if our system will perform only first or second step from the list. This depends on the file system and this is also something we will leave for another time. The problem with the unlink and even unlinkat function is that we don’t have any guarantee of which file we really are unlinking.
- When you delete a file using its name, you have no guarantee that someone has not already deleted the file, or renamed it, and created a new file with the name you are about to delete. We have some stats about the file that we want to unlink. We performed some tests. In the same time another process removed our file and recreated it. When we finally try to remove our file it is no longer the same file. It’s a classic race condition.
- Many programs will perform checks before trying to remove a file, to make sure it is the correct file, that you have the correct permissions etc. However this exposes the ‘Time-of-Check / Time-of-Use’ class of bugs. I check if the file I am about to remove is the one I created yesterday, it is, so I call unlink() on it. However, between when I checked the date on the file, and when I call unlink, I, some program I am running, might have updated the file. Or a malicious user might have put some other file at that name, so I would be the one who deleted it. In Unix-like operating systems we can get a handle for our file called file - a descriptor. File descriptors guarantee us that all the operations that we will be performing on it are done on the same file (inode). Even if someone was to unlink a number of directories entries, the operating system will not free the structures behind the file descriptor, and we can detect the file that was removed by someone and recreated (or just unlinked). So, for example, we have an alternative functions fstat which allows us to get file status of the given descriptor We already know that the file may have many links on the disk which point to the single inode. What happens when we open the file? Simplifying: kernel creates a memory representation of the inode (the inode itself is stored on the disk) called vnode. This single representation is used by all processes to refer the inode to the disk. If in a process we open the same file (inode) using different names (for example through hard links) all those files will be linked to the single vnode. That means that the pathname is not stored in the kernel. This is basically the reason why we don’t have a funlink function so that instead of the path we are providing just the file descriptor to the file. If we performed the fdunlink syscall, the kernel wouldn’t know which directory entry you would like to remove. Another problem is more architectural: as we discussed earlier unlinking is really an operation on the directory not on the file (inode) itself, so using funlink(fd) may create some confusion because we are not removing the inode corresponding to the file descriptor, we are performing action on the directory which points to the file. After some discussion we decided that the only sensible option for FreeBSD would be to create a funlinkat() function. This syscall would only performs additional sanitary checks if we are removing a directory entry which corresponds to the inode stored which refers to the file descriptor. int funlinkat(int dfd, const char *path, int fd, int flags); The API above will check if the path opened relative to the dfd points to the same vnode. Thanks to that we removed a race condition because all those sanitary checks are performed in the kernel mode while the file system is locked and there is no possibility to change it. The fd parameter may be set to the FD_NONE value which will mean that the sanitary check should not be performed and funlinkat will behave just like unlinkat. As you can notice I often refer to the unlink syscall but at the end the APIs looks like unlinkat syscall. It is true that the unlink syscall is very old and kind of deprecated. That said I referred to unlink because it’s just simpler. These days unlink simply uses the same code as unlinkat.
I upgraded to AT&T's U-verse Gigabit internet service in 2017 and it came with an Arris BGW-210 as the WiFi AP and router. The BGW-210 is not a terrible device, but I already had my own Airport Extreme APs wired throughout my house and an OpenBSD router configured with various things, so I had no use for this device. It's also a potentially-insecure device that I can't upgrade or fully disable remote control over. Fully removing the BGW-210 is not possible as we'll see later, but it is possible to remove it from the routing path. This is how I did it with OpenBSD.
Do you have an old Raspberry Pi lying around gathering dust, maybe after a recent Pi upgrade? Are you curious about BSD Unix? If you answered "yes" to both of these questions, you'll be pleased to know that the first is the solution to the second, because you can run NetBSD, as far back as the very first release, on a Raspberry Pi. BSD is the Berkley Software Distribution of Unix. In fact, it's the only open source Unix with direct lineage back to the original source code written by Dennis Ritchie and Ken Thompson at Bell Labs. Other modern versions are either proprietary (such as AIX and Solaris) or clever re-implementations (such as Minix and GNU/Linux). If you're used to Linux, you'll feel mostly right at home with BSD, but there are plenty of new commands and conventions to discover. If you're still relatively new to open source, trying BSD is a good way to experience a traditional Unix. Admittedly, NetBSD isn't an operating system that's perfectly suited for the Pi. It's a minimal install compared to many Linux distributions designed specifically for the Pi, and not all components of recent Pi models are functional under NetBSD yet. However, it's arguably an ideal OS for the older Pi models, since it's lightweight and lovingly maintained. And if nothing else, it's a lot of fun for any die-hard Unix geek to experience another side of the POSIX world.
One of the big upcoming features that a bunch of people are looking forward to in ZFS is natively encrypted filesystems. This is already in the main development tree of ZFS On Linux, will likely propagate to FreeBSD (since FreeBSD ZFS will be based on ZoL), and will make it to Illumos if the Illumos people want to pull it in. People are looking forward to native encryption so much, in fact, that some of them have started using it in ZFS On Linux already, using either the development tip or one of the 0.8.0 release candidate pre-releases (ZoL is up to 0.8.0-rc3 as of now). People either doing this or planning to do this show up on the ZoL mailing list every so often.
The rump anykernel architecture allows to run highly componentized kernel code configurations in userspace processes. Coupled with the rump sysproxy facility it is possible to run loosely distributed client-server "mini-operating systems". Since there is minimum configuration and the bootstrap time is measured in milliseconds, these environments are very cheap to set up, use, and tear down on-demand. This document acts as a tutorial on how to configure and use unmodified NetBSD kernel drivers as userspace services with utilities available from the NetBSD base system. As part of this, it presents various use cases. One uses the kernel cryptographic disk driver (cgd) to encrypt a partition. Another one demonstrates how to operate an FFS server for editing the contents of a file system even though your user account does not have privileges to use the host's mount() system call. Additionally, using a userspace TCP/IP server with an unmodified web browser is detailed.
As you may recall from previous posts, I am running an OpenBSD server on an APU2 air-cooled 3 Intel NIC box as my router/firewall for my secure home network. Given that all of my Internet traffic flows through this box, I thought it would be a cool idea to run an Intrusion Detection System (IDS) on it. Snort is the big hog of the open source world so I took a peek in the packages directory on one of the mirrors and lo and behold we have the latest & greatest version of Snort available! Thanks devs!!! I did some quick Googling and didn’t find much “modern” howto help out there so, after some trial and error, I have it up and running. I thought I’d give back in a small way and share a quickie howto for other Googlers out there who are looking for guidance. Here’s hoping that my title is good enough “SEO” to get you here!
We celebrate the life of Erlang author Dr Joe Armstrong by remembering his many contributions to computer science and unique approach to lifelong learning.
Plus some code to read, your feedback, and more!
Links:
This week we discover the good word of Xfce and admit Joe was right all along. And share our tips for making Xfce more modern.
Plus a new Debian leader, the end of Scientific Linux, and behind the scenes of Librem 5 apps.
Special Guests: Alex Kretzschmar, Brent Gervais, and Ell Marquez.
Links:
Ubuntu 19.04 is released we share our take, OpenSSH has an important release, and Mozilla brings Python to the browser.
Also WebThings is launched and we think it might have a shot.
Links:
A bunch of the crew get together and share a few stories, recap the week, and play a little music.
This is a beta test of a community live event we are doing on Fridays at 2pm Pacific: http://jblive.tv
A PI-powered Plan 9 cluster, an SSH tarpit, rdist for when Ansible is too much, falling in love with OpenBSD again, how I created my first FreeBSD port, the Tilde Institute of OpenBSD education and more.
Plan 9 from Bell Labs comes from the same stable as the UNIX operating system, which of course Linux was designed after, and Apple’s OS X runs on top of a certified UNIX operating system. Just like UNIX, Plan 9 was developed as a research O/S — a vehicle for trying out new concepts — with it building on key UNIX principles and taking the idea of devices are just files even further. In this post, we take a quick look at the Plan 9 O/S and some of the notable features, before moving on to the construction of a self-contained 4-node Raspberry Pi cluster that will provide a compact platform for experimentation.
I’m a big fan of tarpits: a network service that intentionally inserts delays in its protocol, slowing down clients by forcing them to wait. This arrests the speed at which a bad actor can attack or probe the host system, and it ties up some of the attacker’s resources that might otherwise be spent attacking another host. When done well, a tarpit imposes more cost on the attacker than the defender. The Internet is a very hostile place, and anyone who’s ever stood up an Internet-facing IPv4 host has witnessed the immediate and continuous attacks against their server. I’ve maintained such a server for nearly six years now, and more than 99% of my incoming traffic has ill intent. One part of my defenses has been tarpits in various forms.
The post written about rdist(1) on johan.huldtgren.com sparked us to write one as well. It's a great, underappreciated, tool. And we wanted to show how we wrapped doas(1) around it. There are two services in our infrastructure for which we were looking to keep the configuration in sync and to reload the process when the configuration had indeed changed. There is a pair of nsd(8)/unbound(8) hosts and a pair of hosts running relayd(8)/httpd(8) with carp(4) between them. We didn't have a requirement to go full configuration management with tools like Ansible or Salt Stack. And there wasn't any interest in building additional logic on top of rsync or repositories. > Enter rdist(1), rdist is a program to maintain identical copies of files over multiple hosts. It preserves the owner, group, mode, and mtime of files if possible and can update programs that are executing.
I was checking the other day and was appalled at how long it has been since I posted here. I had been working a job during 2018 that had me traveling 3,600 miles by air every week so that is at least a viable excuse. So what is my latest project? I wanted to get something better than the clunky old T500 “freedom laptop” that I could use as my daily driver. Some background here. My first paid gig as a programmer was on SunOS 4 (predecessor to Solaris) and Ultrix (on a DEC MicroVAX). I went from there to a Commodore Amiga (preemptive multitasking in 1985!). I went from there to OS/2 (I know, patron saint of lost causes) and then finally decided to “sell out” and move to Windows as the path of least resistance in the mid 90’s. My wife bought me an iPod literally just as they started working with computers other than Macs and I watched with fascination as Apple made the big gamble and moved away from PowerPC chips to Intel. That was the beginning of the Apple Fan Boi years for me. My gateway drug was a G4 MacMini and I managed somehow to get in on the pre-production, developer build of an Intel-based Mac. I was quite happy on the platform until about three years ago.
I created my first FreeBSD port recently. I found that FreeBSD didn't have a port for GoCD, which is a continuous integration and continuous deployment (CI/CD) system. This was a great opportunity to learn how to build a FreeBSD port while also contributing back to the community
Welcome to tilde.institute! This is an OpenBSD machine whose purpose is to provide a space in the tildeverse for experimentation with and education of the OpenBSD operating system. A variety of editors, shells, and compilers are installed to allow for development in a native OpenBSD environment. OpenBSD's httpd(8) is configured with slowcgi(8) as the fastcgi provider and sqlite3 available. This allows users to experiment with web development using compiled CGI in C, aka the BCHS Stack. In addition to php7.0 and mysql (mariadb) by request, this provides an environment where the development of complex web apps is possible.
Jason leaves the warm embrace of GNOME and finally tries Xfce for 24 hours. What happened took him by surprise!
Then we dive into some hardware talk about the latest All-In-One Linux PC from Entroware, which packs in a lot of quality for the price. But are there any downsides?
Links:
Mike's back with thoughts on his recent adventures with the Windows Subsystem for Linux and what it might mean for the future of Linux development.
Plus the hurdles of working with an eGPU, why you should learn languages you might not use, and a neat pick for playing with HTTP.
Links:
Ubuntu's new release is here, and this one might be one of the most important in a while. But is it worth upgrading from an LTS? We review and debate just that.
Plus some great picks, community news, and more.
Special Guests: Alan Pope, Brent Gervais, Ell Marquez, and Martin Wimpress.
Links:
Plus when not to use ZFS, the surprising way your disks are lying to you, and more!
Plus we discuss Ubuntu dropping Unity for Gnome, Lightworks’ latest release & more!
Google's important news this week, why Linux is fueling PowerShell Growth, and the Matrix breach that might be worse than it sounds.
Plus more good work by Mozilla, and the Chinese crackdown on Bitcoin mining.
Links:
Where bad feeling and rivalry in the FOSS world actually originates, what we should be teaching our kids, and the violence that underlies everything around us.
Plus Joe is a lazy swine, and dodgy VPN providers.
00:00:33 FOSS Rivalry
00:10:27 #AskError: How often do you clean your tech and with what tools?
00:13:11 Teaching kids to code
00:24:09 #AskError: Are all VPN providers as shady as they seem?
00:32:43 All property is theft
Jim and Wes sit down to bust some ZFS myths and share their tips and tricks for getting the most out of the ultimate filesystem.
Plus when not to use ZFS, the surprising way your disks are lying to you, and more!
Links:
This week we have a special episode with a Michael W. Lucas interview about his latest jail book that’s been released. We’re talking all things jails, writing, book sponsoring, the upcoming BSDCan 2019 conference, and more.
###Interview - Michael W. Lucas - [email protected] / @mwlauthor
FreeBSD Mastery: Jails
The way we’ve been thinking about Desktop Linux is all wrong. We start by defining Desktop Linux, and where it might be going in the future.
Plus we throw a studio party for our new look, and the text editor that’s taking the crew by storm.
Special Guests: Alan Pope, Ell Marquez, and Martin Wimpress.
Links:
Mike’s away so Chris joins Wes to discuss running your workstation from RAM, the disappointing realities of self driving cars, and handling the ups and downs of critical feedback.
Chef goes 100% open source, and this recipe has an old twist, the VMware lawsuit is abandoned.
A new way to run Android apps on Linux using Wayland, Sailfish and Mer merge, and more.
Links:
The LInux Gaming Report rolls forward as Jason throws Manjaro 18 on the test bench and walks away shocked.
Then we offer some best practices and tips for, well, choosing Linux! How to pick the right hardware for your needs, where to discover your perfect distribution, and how to best enjoy your new journey.
Links:
FreeBSD Q4 2018 status report, the GhostBSD alternative, the coolest 90s laptop, OpenSSH 8.0 with quantum computing resistant keys exchange, project trident: 18.12-U8 is here, and more.
##Headlines
###AsiaBSDcon 2019 recap
Adventure in DRMland - Or how to write a FreeBSD ARM64 DRM driver by Emmanuel
Vadot
powerpc64 architecture support in FreeBSD ports by Piotr Kubaj
Managing System Images with ZFS by Allan Jude
FreeBSD - Improving block I/O compatibility in bhyve by Sergiu Weisz
Security Fantasies and Realities for the BSDs by George V.
Neville-Neil
ZRouter: Remote update of firmware by Hiroki Mori
Improving security of the FreeBSD boot process by Marcin Wojtas
Adventures in DRMland by Emmanuel Vadot
Intel HAXM by Kamil Rytarowski
BSD Solutions in Australian NGOs
Container Migration on FreeBSD by Yuhei Takagawa
Security Fantasies and Realities for the BSDs by George Neville-Neil
ZRouter: Remote update of firmware by Hiroki Mori
Improving security of the FreeBSD boot process by Marcin Wojtas
###FreeBSD Quarterly Status Report - Fourth Quarter 2018
Since we are still on this island among many in this vast ocean of the Internet, we write this message in a bottle to inform you of the work we have finished and what lies ahead of us. These deeds that we have wrought with our minds and hands, they are for all to partake of - in the hopes that anyone of their free will, will join us in making improvements. In todays message the following by no means complete or ordered set of improvements and additions will be covered:
i386 PAE Pagetables for up to 24GB memory support, Continuous Integration efforts, driver updates to ENA and graphics, ARM enhancements such as RochChip, Marvell 8K, and Broadcom support as well as more DTS files, more Capsicum possibilities, as well as pfsync improvements, and many more things that you can read about for yourselves.
Additionally, we bring news from some islands further down stream, namely the nosh project, HardenedBSD, ClonOS, and the Polish BSD User-Group.
We would, selfishly, encourage those of you who give us the good word to please send in your submissions sooner than just before the deadline, and also encourage anyone willing to share the good word to please read the section on which submissions we’re also interested in having.
###GhostBSD: A Solid Linux-Like Open Source Alternative
The subject of this week’s Linux Picks and Pans is a representative of a less well-known computing platform that coexists with Linux as an open source operating system. If you thought that the Linux kernel was the only open source engine for a free OS, think again. BSD (Berkeley Software Distribution) shares many of the same features that make Linux OSes viable alternatives to proprietary computing platforms.
GhostBSD is a user-friendly Linux-like desktop operating system based on TrueOS. TrueOS is, in turn, based on FreeBSD’s development branch. TrueOS’ goal is to combine the stability and security of FreeBSD with a preinstalled GNOME, MATE, Xfce, LXDE or Openbox graphical user interface.
I stumbled on TrueOS while checking out new desktop environments and features in recent new releases of a few obscure Linux distros. Along the way, I discovered that today’s BSD computing family is not the closed source Unix platform the “BSD” name might suggest.
In last week’s Redcore Linux review, I mentioned that the Lumina desktop environment was under development for an upcoming Redcore Linux release. Lumina is being developed primarily for BSD OSes. That led me to circle back to a review I wrote two years ago on Lumina being developed for Linux.
GhostBSD is a pleasant discovery. It has nothing to do with being spooky, either. That goes for both the distro and the open source computing family it exposes.
Keep reading to find out what piqued my excitement about Linux-like GhostBSD.
##News Roundup
###SPARCbook 3000ST - The coolest 90s laptop
A few weeks back I managed to pick up an incredibly rare laptop in immaculate condition for $50 on Kijiji: a Tadpole Technologies SPARCbook 3000ST from 1997 (it also came with two other working Pentium laptops from the 1990s).
Sun computers were an expensive desire for many computer geeks in the 1990s, and running UNIX on a SPARC-based laptop was, well, just as cool as it gets. SPARC was an open hardware platform that anyone could make, and Tadpole licensed the Solaris UNIX operating system from Sun for their SPARCbooks. Tadpole essentially made high-end UNIX/VAX workstations on costly, unusual platforms (PowerPC, DEC Alpha, SPARC) but only their SPARCbooks were popular in the high-end UNIX market of the 1990s.
###OpenSSH 8.0 Releasing With Quantum Computing Resistant Keys
OpenSSH 7.9 came out with a host of bug fixes last year with few new features, as is to be expected in minor releases. However, recently, Damien Miller has announced that OpenSSH 8.0 is nearly ready to be released. Currently, it’s undergoing testing to ensure compatibility across supported systems.
Better Security
Copying filenames with scp will be more secure in OpenSSH 8.0 due to the fact that copying filenames from a remote to local directory will prompt scp to check if the files sent from the server match your request. Otherwise, an attack server would theoretically be able to intercept the request by serving malicious files in place of the ones originally requested. Knowing this, you’re probably better off never using scp anyway. OpenSSH advises against it:
“The scp protocol is outdated, inflexible and not readily fixed. We recommend the use of more modern protocols like sftp and rsync for file transfer instead.”
ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for “yes”. This allows the user to paste a fingerprint obtained out of band at the prompt and have the client do the comparison for you.
###Project Trident : 18.12-U8 Available
Thank you all for your patience! Project Trident has finally finished some significant infrastructure updates over the last 2 weeks, and we are pleased to announce that package update 8 for 18.12-RELEASE is now available.
To switch to the new update, you will need to open the “Configuration” tab in the update manager and switch to the new “Trident-release” package repository. You can also perform this transition via the command line by running: sudo sysup --change-train Trident-release
##Beastie Bits
##Feedback/Questions
Is there really any advantage to building your software vs installing the package? We discuss when and why you might want to consider building it yourself.
Plus some useful things Mozilla is working on and Cassidy joins us to tell us about elementary OS' big choice.
Special Guests: Brent Gervais, Cassidy James Blaede, and Martin Wimpress.
Links:
Mike explores the state of Xamarin.Android development on Linux, and we talk frameworks versus libraries and what Rails got right.
Plus adventures with rust on MacOS, your feedback, and more!
Links:
Mozilla’s new Android app, Google wants you to adopt AMP for Email, and our reaction to LVFS joining the Linux Foundation.
Plus Debian's generous gift, Red Hat crosses the $3B mark, and the Open Source Awards are nigh!
Links:
What attracted us to Linux in the first place, planning for when tech goes away, and why we aren't surrounded by alien life.
Plus a difficult culinary choice for Dan, and what we'd use instead of Linux.
00:00:33 How do you balance embracing new tech with planning for its obsolescence?
00:09:01 #AskError: Is there any food you won't eat? Even in an emergency?
00:15:56 Why did you start using Linux?
00:26:40 #AskError: If you started working at a company and could only choose Mac or Windows, which would be the less painful choice?
00:31:13 What's your take on the Fermi Paradox?
We break down the ASUS Live Update backdoor and explore why these kinds of supply chain attacks are on the rise.
Plus an update from the linux vendor firmware service, your feedback, and more!
Links:
Storage changing software, what makes Unix special, what you need may be “pipeline +Unix commands”, running a bakery on Emacs and PostgreSQL, the ultimate guide to memorable tech talks, light-weight contexts, and more.
##Headlines
###Tracking a storage issue led to software change
Early last year we completed a massive migration that moved our customers’ hosting data off of a legacy datacenter (that we called FR-SD2) onto several new datacenters (that we call FR-SD3, FR-SD5, and FR-SD6) with much more modern, up-to-date infrastructure.
This migration required several changes in both the software and hardware we use, including switching the operating system on our storage units to FreeBSD.
Currently, we use the NFS protocol to provide storage and export the filesystems on Simple Hosting, our web hosting service, and the FreeBSD kernel includes an NFS server for just this purpose.
While migrating virtual disks of Simple Hosting instances from FR-SD2, we noticed high CPU load spikes on the new storage units.
Ever since Unix burst onto the scene within the early '70s, observers within the pc world have been fast to put in writing it off as a unusual working system designed by and for knowledgeable programmers. Regardless of their proclamations, Unix refuses to die. Means again in 1985, Stewart Cheifet puzzled if Unix would turn out to be the usual working system of the longer term on the PBS present “The Laptop Chronicles,” though MS-DOS was effectively in its heyday. In 2018, it is clear that Unix actually is the usual working system, not on desktop PCs, however on smartphones and tablets.
It is also the usual system for net servers. The actual fact is, hundreds of thousands of individuals all over the world have interacted with Linux and Unix programs daily, most of whom have by no means written a line of code of their lives.
So what makes Unix so beloved by programmers and different techie sorts? Let’s check out a few of issues this working system has going for it. (For some background on Unix, try The Historical past of Unix: From Bell Labs to the iPhone.)
##News Roundup
###What you need may be “pipeline +Unix commands” only
I came across Taco Bell Programming recently, and think this article is worthy to read for every software engineer. The post mentions a scenario which you may consider to use Hadoop to solve but actually xargs may be a simpler and better choice. This reminds me a similar experience: last year a client wanted me to process a data file which has 5 million records. After some investigations, no novel technologies, a concise awk script (less than 10 lines) worked like a charm! What surprised me more is that awk is just a single-thread program, no nifty concurrency involved.
The IT field never lacks “new” technologies: cloud computing, big data, high concurrency, etc. However, the thinkings behind these “fancy” words may date back to the era when Unix arose. Unix command line tools are invaluable treasure. In many cases, picking the right components and using pipeline to glue them can satisfy your requirement perfectly. So spending some time in reviewing Unixcommand line manual instead of chasing state-of-the-art techniques exhaustedly, you may gain more.
BTW, if your data set can be disposed by an awk script, it should not be called “big data”.
###Running a bakery on Emacs and PostgreSQL
Just over a year ago now, I finally opened the bakery I’d been dreaming of for years. It’s been a big change in my life, from spending all my time sat in front of a computer, to spending most of it making actual stuff. And stuff that makes people happy, at that. It’s been a huge change, but I can’t think of a single job change that’s ever made me as happy as this one.
One of the big changes that came with going pro was that suddenly I was having to work out how much stuff I needed to mix to fill the orders I needed. On the face of it, this is really simple, just work out how much dough you need, then work out what quantities to mix to make that much dough. Easy. You can do it with a pencil and paper. Or, in traditional bakers’ fashion, by scrawling with your finger on a floured work bench.
And that’s how I coped for a few weeks early on. But I kept making mistakes, which makes for an inconsistent product (bread is very forgiving, you have to work quite hard to make something that isn’t bread, but consistency matters). I needed to automate.
###The Ultimate Guide To Memorable Tech Talks
Imagine this. You’re a woman in a male-dominated field. English is not your first language. Even though you’re confident in your engineering work, the thought of public speaking and being recorded for the world to see absolutely terrifies you.
That was me, five years ago. Since then, I’ve moved into a successful career in Developer Advocacy and spoken at dozens of technical events in the U.S. and worldwide.
I think everyone has the ability to deliver stellar conference talks, which is why I took the time to write this post.
###Light-weight Contexts: An OS Abstraction for Safety and Performance (2016)
Abstract: “We introduce a new OS abstraction—light-weight con-texts (lwCs)—that provides independent units of protection, privilege, and execution state within a process. A process may include several lwCs, each with possibly different views of memory, file descriptors, and access capabilities. lwCs can be used to efficiently implement roll-back (process can return to a prior recorded state),isolated address spaces (lwCs within the process may have different views of memory, e.g., isolating sensitive data from network-facing components or isolating different user sessions), and privilege separation (in-process reference monitors can arbitrate and control access).
lwCs can be implemented efficiently: the overhead of a lwC is proportional to the amount of memory exclusive to the lwC; switching lwCs is quicker than switching kernel threads within the same process. We describe the lwC abstraction and API, and an implementation of lwCs within the FreeBSD 11.0 kernel. Finally, we present an evaluation of common usage patterns, including fast roll-back, session isolation, sensitive data isolation, and in-process reference monitoring, using Apache, nginx, PHP,and OpenSSL.”
##Beastie Bits
##Feedback/Questions
Charles - Volunteer work
Jake - Bhyve Front Ends
We’ve hit that point where we are running low on your questions, so if you have any questions rolling around in your head that you’ve not thought of to ask yet… send them in!
We debate Rust’s role as a replacement for C, and share our take on the future of gaming with Google's Stadia.
Plus Objective-C's return to grace, Mike’s big bet on .NET, and more!
Links:
Why we sometimes go too far with our Linux advocacy, and a few humble strategies to switch people to Linux.
Plus an update to the most important text editor in the world, the new distro causing controversy, and what is a tainted kernel.
Special Guests: Brent Gervais, Ell Marquez, and Neal Gompa.
Links:
Is Linux gaming really being saved by Google's Stadia platform? We discuss the details and possibilities.
Plus good news for KDE Connect users, Intel begins work on next-generation open source video drivers, and much more.
Links:
FreeBSD on Cavium ThunderX, looking at NetBSD as an OpenBSD user, taking time-stamped notes in vim, OpenBSD 6.5 has been tagged, FreeBSD and NetBSD in GSoC 2019, SecBSD: an UNIX-like OS for Hackers, and more.
##Headlines
###ARM’d and dangerous: FreeBSD on Cavium ThunderX (aarch64)
While I don’t remember for how many years I’ve had an interest in CPU architectures that could be an alternative to AMD64, I know pretty well when I started proposing to test 64-bit ARM at work. It was shortly after the disaster named Spectre / Meltdown that I first dug out server-class ARM hardware and asked whether we should get one such server and run some tests with it.
While the answer wasn’t a clear “no” it also wasn’t exactly “yes”. I tried again a few times over the course of 2018 and each time I presented some more points why I thought it might be a good thing to test this. But still I wasn’t able to get a positive answer. Finally in January 2019 year I got a definitive answer – and it was “yes, go ahead”! The fact that Amazon had just presented their Graviton ARM Processor may have helped the decision.
###Looking at NetBSD from an OpenBSD user perspective
I use to use NetBSD quite a lot. From 2.0 to 6.99. But for some reasons, I stopped using it about 2012, in favor of OpenBSD. Reading on the new 8 release, I wanted to see if all the things I didn’t like on NetBSD were gone. Here is a personal Pros / Cons list. No Troll, hopefully. Just trying to be objective.
So that was it. I didn’t spend more than 30 minutes of it. But I didn’t want to spend more time on it. I did stop using NetBSD because of the need to compile each and every packages ; it was in the early days of pkgin. I also didn’t like the way system maintenance was to be done. OpenBSD’s 6-months release seemed far more easy to manage. I still think NetBSD is a great OS. But I believe you have to spent more time on it than you would have to do with OpenBSD.
That said, I’ll keep using my Puffy OS.
##News Roundup
###Using Vim to take time-stamped notes
I frequently find myself needing to take time-stamped notes. Specifically, I’ll be in a call, meeting, or interview and need to take notes that show how long it’s been since the meeting started.
My first thought was that there’s be a plugin to add time stamps, but a quick search didn’t turn anything up. However, I little digging did turn up the fact that vim has the built-in ability to tell time.
This means that writing a bit of vimscript to insert a time stamp is pretty easy. After a bit of fiddling, I came up with something that serves my needs, and I decided it might be useful enough to others to be worth sharing.
###OpenBSD 6.5-beta has been tagged
It’s that time of year again; Theo (deraadt@) has just tagged 6.5-beta. A good reminder for us all run an extra test install and see if your favorite port still works as you expect.
CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2019/02/26 15:24:41
Modified files:
etc/root : root.mail
share/mk : sys.mk
sys/conf : newvers.sh
sys/sys : ktrace.h param.h
usr.bin/signify: signify.1
sys/arch/macppc/stand/tbxidata: bsd.tbxi
Log message:
crank to 6.5-beta
###The NetBSD Foundation participating in Google Summer of Code 2019
For the 4th year in a row and for the 13th time The NetBSD Foundation will participate in Google Summer of Code 2019!
If you are a student and would like to learn more about Google Summer of Code please go to the Google Summer of Code homepage.
You can find a list of projects in Google Summer of Code project proposals in the wiki.
Do not hesitate to get in touch with us via #netbsd-code IRC channel on Freenode and via NetBSD mailing lists!
###SecBSD: an UNIX-like OS for Hackers
SecBSD is an UNIX-like operating system focused on computer security based on OpenBSD. Designed for security testing, hacking and vulnerability assessment, it uses full disk encryption and ProtonVPN + OpenVPN by default.
A security BSD enviroment for security researchers, penetration testers, bug hunters and cybersecurity experts. Developed by Dark Intelligence Team for private use and will be public release coming soon.
##Beastie Bits
##Feedback/Questions
Jason goes deeper down the rabbit hole by exploring the state of Steam gaming on 9 different Linux distributions. Find out how Fedora compares to Pop!_OS.
Plus, first impressions of Purism’s brand new Librem 15 v4 laptop.
Links:
Developers at Netflix are creating the next set of super powers for Linux, we'll get the details straight from the source.
Plus some good Debian news, our tips for better battery life, and we play a little Hot SUSE Potato.
Special Guests: Brent Gervais and Ell Marquez.
Links:
In 2019, there's finally a decent answer to that on Linux: bpftrace, based on eBPF technology.
We join the fight between Apple and Spotify, and debate the meaning of 'fair play' in the App Store and the browser wars.
Plus some thoughts on the lessons learned from the 737 MAX, an Elastic Beanstalk PSA, and more!
Links:
We try out the latest GNOME 3.32 release, and why it might be the best release ever. New leader candidates for Debian emerge, we experience foundation inception, and NGINX is getting acquired.
Plus Android Q gets an official Desktop Mode, the story behind the new Open Distro for Elasticsearch, and more!
Links:
Machine learning promises to change many industries, but with these changes come dangerous new risks. Join Jim and Wes as they explore some of the surprising ways bias can creep in and the serious consequences of ignoring these problems.
Links:
Maybe it's finally time to cut Microsoft some slack, the pace of technological change, and what a couple of common terms actually mean.
Plus Joe fails to convince the others about his favourite movie, and one of the deepest questions that you can ask.
00:00:12 Is it time to give Microsoft the benefit of the doubt on their Linux love?
00:08:34 #AskError: If you could only watch one film for the rest of your life, what would it be?
00:12:38 Is technological change really accelerating?
00:24:27 #AskError: What's the difference between UX and UI and why do you get so annoyed when people confuse them or lump them together?
00:28:07 Why don't you believe in God or follow a religion?
A kernel of failure, IPv6 fragmentation vulnerability in OpenBSD’s pf, a guide to the terminal, using a Yubikey for SSH public key authentication, FreeBSD desktop series, and more.
##Headlines
Today in Tedium: In the early 1990s, we had no idea where the computer industry was going, what the next generation would look like, or even what the driving factor would be. All the developers back then knew is that the operating systems available in server rooms or on desktop computers simply weren’t good enough, and that the next generation needed to be better—a lot better. This was easier said than done, but this problem for some reason seemed to rack the brains of one company more than any other: IBM. Throughout the decade, the company was associated with more overwrought thinking about operating systems than any other, with little to show for it in the end. The problem? It might have gotten caught up in kernel madness. Today’s Tedium explains IBM’s odd operating system fixation, and the belly flops it created.
###CVE-2019-5597IPv6 fragmentation vulnerability in OpenBSD Packet Filter
Packet Filter is OpenBSD’s service for filtering network traffic and performing Network Address Translation. Packet Filter is also capable of normalizing and conditioning TCP/IP traffic, as well as providing bandwidth control and packet prioritization.
Packet Filter has been a part of the GENERIC kernel since OpenBSD 5.0.Because other BSD variants import part of OpenBSD code, Packet Filter is also shipped with at least the following distributions that are affected in a lesser extent: FreeBSD, pfSense, OPNSense, Solaris.
Note that other distributions may also contain Packet Filter but due to the imported version they might not be vulnerable. This advisory covers the latest OpenBSD’s Packet Filter. For specific details about other distributions, please refer to the advisory of the affected product.
##News Roundup
###How I’m still not using GUIs in 2019: A guide to the terminal
TL;DR: Here are my dotfiles. Use them and have fun.
GUIs are bloatware. I’ve said it before. However, rather than just complaining about IDEs I’d like to provide an understandable guide to a much better alternative: the terminal.
IDE stands for Integrated Development Environment. This might be an accurate term, but when it comes to a real integrated development environment, the terminal is a lot better.
In this post, I’ll walk you through everything you need to start making your terminal a complete development environment: how to edit text efficiently, configure its appearance, run and combine a myriad of programs, and dynamically create, resize and close tabs and windows.
Whenever in doubt, read the manual.
###Using a Yubikey as smartcard for SSH public key authentication
SSH is an awesome tool. Logging into other machines securely is so pervasive to us sysadmins nowadays that few of us think about what’s going on underneath. Even more so once you start using the more advanced features such as the ssh-agent, agent-forwarding and ProxyJump. When doing so, care must be taken in order to not compromise one’s logins or ssh keys.
You might have heard of Yubikeys.
These are USB authentication devices that support several different modes: they can be used for OTP (One Time Password) authentication, they can store OpenPGP keys, be a 2-factor authentication token and they can act as a SmartCard.
In OpenBSD, you can use them for Login (with login_yubikey(8)) with OTP since 2012, and there are many descriptions available(1) how to set this up.
###The 18 Part FreeBSD Desktop Series by Vermaden
##Beastie Bits
##Feedback/Questions
A new voice joins the show, and we share stories from our recent adventures at SCaLE 17x.
Plus we look at the Debian project's recent struggles, NGINX's sale, and Mozilla's new service.
Special Guests: Alex Kretzschmar, Brent Gervais, and Ell Marquez.
Links:
To celebrate #Web30, for the next 30 hours we're asking everyone to contribute to a crowdsourced timeline of web milestones.
The following sections each deal with what I consider a major pain point, in no particular order. Some of them influence each other—for example, if changes worked better, we could have a chance at transitioning packages to be more easily machine readable.
Can you give some insight about how you usually handle this. I'd rather not have to nuke-and-pave the OS over and over to insure a stable system.
Mike has salvaged a success story from the dumpster fire of the Google+ shutdown, and Wes shares his grief about brittle and repetitive unit tests.
Plus Mike reviews the System76 Darter Pro, our tool of the week, and some fantastic audience feedback.
Links:
Free Software does what commercial can't this week, getting a Debian desktop on more Android devices gets closer, and PureOS promises Convergence but is there more beneath the surface?
Plus Microsoft open sources Windows Calculator, and a quick recap of SCaLE 17x.
Links:
The distro challenges roll on with Fedora Workstation. Jason shares his thoughts on getting it up and running, feeling at home with vanilla Gnome, and why Fedora may be perfect place for his Magic the Gathering addiction.
Plus, the Raspberry Pi journey continues with NextCloudPi. Is creating a DropBox substitute really this easy?
Links:
This is an official open source community project that aims at making it easier for everyone to have control over their own data.
Software will never fix Spectre-type bugs, a proof that sed is Turing complete, managed jails using Bastille, new version of netdata, using grep with /dev/null, using GMail with mutt, and more.
##Headlines
###Google: Software is never going to be able to fix Spectre-type bugs
Researchers from Google investigating the scope and impact of the Spectre attack have published a paper asserting that Spectre-like vulnerabilities are likely to be a continued feature of processors and, further, that software-based techniques for protecting against them will impose a high performance cost. And whatever the cost, the researchers continue, the software will be inadequate—some Spectre flaws don’t appear to have any effective software-based defense. As such, Spectre is going to be a continued feature of the computing landscape, with no straightforward resolution.
The discovery and development of the Meltdown and Spectre attacks was undoubtedly the big security story of 2018. First revealed last January, new variants and related discoveries were made throughout the rest of the year. Both attacks rely on discrepancies between the theoretical architectural behavior of a processor—the documented behavior that programmers depend on and write their programs against—and the real behavior of implementations.
Specifically, modern processors all perform speculative execution; they make assumptions about, for example, a value being read from memory or whether an if condition is true or false, and they allow their execution to run ahead based on these assumptions. If the assumptions are correct, the speculated results are kept; if it isn’t, the speculated results are discarded and the processor redoes the calculation. Speculative execution is not an architectural feature of the processor; it’s a feature of implementations, and so it’s supposed to be entirely invisible to running programs. When the processor discards the bad speculation, it should be as if the speculation never even happened.
###A proof that Unix utility sed is Turing complete
Many people are surprised when they hear that sed is Turing complete. How come a text filtering program is Turing complete, they wonder. Turns out sed is a tiny assembly language that has a comparison operation, a branching operation and a temporary buffer. These operations make sed Turing complete.
I first learned about this from Christophe Blaess. His proof is by construction – he wrote a Turing machine in sed (download turing.sed). As any programming language that can implement a Turing machine is Turing complete we must conclude that sed is also Turing complete.
Christophe offers his own introduction to Turing machines and a description of how his sed implementation works in his article Implementation of a Turing Machine as a sed Script.
Christophe isn’t the first person to realize that sed is almost a general purpose programming language. People have written tetris, sokoban and many other programs in sed. Take a look at these:
##News Roundup
###Bastille helps you quickly create and manage FreeBSD Jails.
Bastille helps you quickly create and manage FreeBSD Jails.
Jails are extremely lightweight containers that provide a full-featured UNIX-like operating system inside. These containers can be used for software development, rapid testing, and secure production Internet services.
Bastille provides an interface to create, manage and destroy these secure virtualized environments.
Netdata is distributed, real-time, performance and health monitoring for systems and applications. It is a highly optimized monitoring agent you install on all your systems and containers.
Netdata provides unparalleled insights, in real-time, of everything happening on the systems it runs (including web servers, databases, applications), using highly interactive web dashboards. It can run autonomously, without any third party components, or it can be integrated to existing monitoring tool chains (Prometheus, Graphite, OpenTSDB, Kafka, Grafana, etc).
Netdata is fast and efficient, designed to permanently run on all systems (physical & virtual servers, containers, IoT devices), without disrupting their core function.
###Using grep with /dev/null, an old Unix trick
Every so often I will find myself writing a grep invocation like this:
find .... -exec grep <something> /dev/null '{}' '+'
The peculiar presence of /dev/null here is an old Unix trick that is designed to force grep to always print out file names, even if your find only matches one file, by always insuring that grep has at least two files as arguments. You can wind up wanting to do the same thing with a direct use of grep if you’re not certain how many files your wildcard may match.
I recently switched to using mutt for email and while setting up mutt to use imap is pretty straightforward, this tutorial will also document some advanced concepts such as encrypting your account password and sending emails from a different From address.
This tutorial assumes that you have some familiarity with using mutt and have installed it with sidebar support (sudo apt-get install mutt-patched for the ubuntu folks) and are comfortable with editing your muttrc.
If you would just like to skip to the end, my mutt configuration file can be found here.
##Beastie Bits
##Feedback/Questions
We reveal all and look at the mess that is our home directories. How we keep them clean, back them up, and organize our most important files.
Plus Gnome lands a long awaited feature, Firefox gets a bit more clever, and the big money being made on Open Source.
Special Guests: Alan Pope, Anthony James, Brent Gervais, Daniel Fore, Dustin Krysak, and Martin Wimpress.
Links:
Mike breaks down what it takes to build a proper iOS build server, and leaves the familiar shallows of Debian for the open waters of openSUSE.
Plus Wes’ reluctant ruby adventures and our pick to ease your javascript packaging woes.
Special Guest: Wes Payne.
Links:
We sift Mobile World Congress to find just the best and most relevant stories, and discuss the Thunderclap vulnerability.
Plus we say goodbye to Koroa, find a reason to checkout GRUB nightlies, and how Android aims to kill passwords for good.
Links:
How to deal with Internet drama in the Linux world, the rise of live streaming, and disturbing people with messages and calls.
Plus preparing for end times, and the best moment of Joe's life.
00:00:25 #AskError: What's your biggest claim to fame?
00:03:47 Internet drama and Linux
00:15:31 #AskError: If you send someone a message and it disturbs them, whose fault is it?
00:22:46 On demand vs live streaming
00:32:25 #AskError: Should you prepare for the apocalypse?
We reveal the shady password practices that are all too common at many utility providers, and hash out why salts are essential to proper password storage.
Plus the benefits of passphrases, and what you can do to keep your local providers on the up and up.
Links:
Design and Implementation of NetBSD’s rc.d system, first impressions of Project Trident 18.12, PXE booting a FreeBSD disk image, middle mouse button pasting, NetBSD gains hardware accelerated virtualization, and more.
##Headlines
###The Design and Implementation of the NetBSD rc.d system
In this paper I cover the design and implementation of the rc.d system start-up mechanism in NetBSD 1.5, which replaced the monolithic /etc/rc start-up file inherited from 4.4BSD. Topics covered include a history of various UNIX start-up mechanisms (including NetBSD prior to 1.5), design considerations that evolved over six years of discussions, implementation details, an examination of the human issues that occurred during the design and implementation, as well as future directions for the system.
NetBSD recently converted from the traditional 4.4BSD monolithic /etc/rc start-up script to an /etc/rc.d mechanism, where there is a separate script to manage each service or daemon, and these scripts are executed in a specific order at system boot.
This paper covers the motivation, design and implementation of the rc.d system; from the history of what NetBSD had before to the system that NetBSD 1.5 shipped with in December 2000, as well as future directions.
The changes were contentious and generated some of the liveliest discussions about any feature change ever made in NetBSD. Parts of those discussions will be covered to provide insight into some of the design and implementation decisions.
There is great diversity in the system start-up mechanisms used by various UNIX variants. A few of the more pertinent schemes are detailed below. As NetBSD is derived from 4.4BSD, it follows that a description of the latter’s method is relevant. Solaris’ start-up method is also detailed, as it is the most common System V UNIX variant.
###First impressions of Project Trident 18.12
Project Trident (hereafter referred to as Trident) is a desktop operating system based on TrueOS. Trident takes the rolling base platform of TrueOS, which is in turn based on FreeBSD’s development branch, and combines it with the Lumina desktop environment.
+Installing
The debut release of Trident is available as a 4.1GB download that can be burned to a disc or transferred to a USB thumb drive. Booting from the Trident media brings up a graphical interface and automatically launches the project’s system installer. Down the left side of the display there are buttons we can click to show hardware information and configuration options. These buttons let us know if our wireless card and video card are compatible with Trident and give us a chance to change our preferred language and keyboard layout. At the bottom of the screen we find buttons that will open a terminal or shutdown the computer.
Trident boots to a graphical login screen where we can sign into the Lumina desktop or a minimal Fluxbox session. Lumina, by default, uses Fluxbox as its window manager. The Lumina desktop places its panel along the bottom of the screen and an application menu sits in the bottom-left corner. On the desktop we find icons for opening the software manager, launching the Falkon web browser, running the VLC media player, opening the Control Panel and adjusting the Lumina theme.
The application menu has an unusual and compact layout. The menu shows just a search box and buttons for browsing applications, opening a file manager, accessing desktop settings and signing out. To see what applications are available we can click the Browse Applications entry, which opens a window in the menu where we can scroll through installed programs. This is a bit awkward since the display window is small and only shows a few items at a time.
Early on I found it is possible to swap out the default “Start menu” with an alternative “Application menu” through the Panels configuration tool. This alternative menu offers a classic tree-style application menu. I found the latter menu easier to navigate as it expands to show all the applications in a selected category.
I have a lot of mixed feelings and impressions when it comes to Trident. On the one hand, the operating system has some great technology under the hook. It has cutting edge packages from the FreeBSD ecosystem, we have easy access to ZFS, boot environments, and lots of open source packages. Hardware support, at least on my physical workstation, was solid and the Lumina desktop is flexible.
##News Roundup
###PXE booting of a FreeBSD disk image
I had to set up a regression and network performance lab. This lab will be managed by a Jenkins, but the first step is to understand how to boot a FreeBSD disk by PXE. This article explains a simple way of doing it.
For information, all these steps were done using 2 PC Engines APU2 (upgraded with latest BIOS for iPXE support), so it’s a headless (serial port only, this can be IPMI SoL with different hardware) .
Before explaining all steps and command line, here is the full big picture of the final process.
###Why I like middle mouse button paste in xterm so much
In my entry about how touchpads are not mice, I mused that one of the things I should do on my laptop was insure that I had a keyboard binding for paste, since middle mouse button is one of the harder multi-finger gestures to land on a touchpad. Kurt Mosiejczuk recently left a comment there where they said:
Shift-Insert is a keyboard equivalent for paste that is in default xterm (at least OpenBSD xterm, and putty on Windows too). I use that most of the time now as it seems less… trigger-happy than right click paste.
This sparked some thoughts, because I can’t imagine giving up middle mouse paste if I have a real choice. I had earlier seen shift-insert mentioned in other commentary on my entry and so have tried a bit to use it on my laptop, and it hasn’t really felt great even there; on my desktops, it’s even less appealing (I tried shift-insert out there to confirm that it did work in my set of wacky X resources).
In thinking about why this is, I came to the obvious realization about why all of this is so. I like middle mouse button paste in normal usage because it’s so convenient, because almost all of the time my hand is already on the mouse. And the reason my hand is already on the mouse is because I’ve just used the mouse to shift focus to the window I want to paste into. Even on my laptop, my right hand is usually away from the keyboard as I move the mouse pointer on the touchpad, making shift-Insert at least somewhat awkward.
###NetBSD Gains Hardware Accelerated Virtualization
NVMM provides hardware-accelerated virtualization support for NetBSD. It is made of an ~MI frontend, to which MD backends can be plugged. A virtualization API is shipped via libnvmm, that allows to easily create and manage virtual machines via NVMM. Two additional components are shipped as demonstrators, toyvirt and smallkern: the former is a toy virtualizer, that executes in a VM the 64bit ELF binary given as argument, the latter is an example of such binary.
##Beastie Bits
##Feedback/Questions
We head to the Raspberry Pi corner and pick the very best open source home automation system.
Plus some great news for Gnome users, OBS studio has a new funding model, and a nostalgic chat with our study buddy Kenny.
Special Guests: Alex Kretzschmar, Brent Gervais, and Martin Wimpress.
Links:
Nothing exciting to report just yet, build system is configured and the root file system is being generated. Next up is adding the kernel and boot loader.
The three of us debate when to go full serverless, and if ditching servers is worth the cost.
Plus the battle against the Cult of Swift gains new allies.
Special Guest: Wes Payne.
Links:
I’ve spent zero time doing that.
Linus pops another hype bubble, we go hands on with the new OnionShare, and some insights into Redis labs changing its license... Again.
And why KDE joining the Matrix, along with others might be establishing a new open source standard.
Links:
Adding glue to a desktop environment, flashing the BIOS on a PC Engine, revive a Cisco IDS into a capable OpenBSD computer, An OpenBSD WindowMaker desktop, RealTime data compression, the love for pipes, and more.
##Headlines
###Adding Glue To a Desktop Environment
In this article we will put some light on a lot of tools used in the world of Unix desktop environment customization, particularly regarding wmctrl, wmutils, xev, xtruss, xwininfo, xprop, xdotools, xdo, sxhkd, xbindkeys, speckeysd, xchainkeys, alttab, triggerhappy, gTile, gidmgr, keynav, and more. If those don’t make sense then this article will help. Let’s hope this can open your mind to new possibilities.
With that in mind we can wonder if what’s actually needed from a window manager, presentation and operation, can be split up and complemented with other tools. We can also start thinking laterally, the communication and interaction between the different components of the environment. We have the freedom to do so because the X protocol is transparent and components usually implement many standards for interfacing between windows. It’s like gluing parts together to create a desktop environment.
###Flashing the BIOS on the PC Engines APU4c4
I absolutely love the PC Engines APU devices. I use them for testing HardenedBSD experimental features in more constrained 64-bit environments and firewalls. Their USB and mSATA ports have a few quirks, and I bumped up against a major quirk that required flashing a different BIOS as a workaround. This article details the hacky way in which I went about doing that.
What prompted this article is that something in either the CAM or GEOM layer in FreeBSD 11.2 caused the mSATA to hang, preventing file writes. OPNsense 18.7 uses FreeBSD 11.1 whereas the recently-released OPNsense 19.1 uses HardenedBSD 11.2 (based on FreeBSD 11.2). I reached out to PC Engines directly, and they let me know that the issue is a known BIOS issue. Flashing the “legacy” BIOS series would provide me with a working system.
It also just so happens that a new “legacy” BIOS version was just released which turns on ECC mode for the RAM. So, I get a working OPNsense install AND ECC RAM! I’ll have one bird for dinner, the other for dessert.
Though I’m using an APU4, these instructions should work for the other APU devices. The BIOS ROM download URLs should be changed to reflect the device you’re targeting along with the BIOS version you wish to deploy.
SPECIAL NOTE: There be dragons! I’m primarily writing this article to document the procedure for my own purposes. My memory tends to be pretty faulty these days. So, if something goes wrong, please do not hold me responsible. You’re the one at the keyboard. ;)
VERY SPECIAL NOTE: We’ll use the mSATA drive for swap space, just in case. Should the swap space be used, it will destroy whatever is on the disk.
##News Roundup
###Revive a Cisco IDS into a capable OpenBSD computer!
Even though Cisco equipment is very capable, it tends to become End-of-Life before you can say “planned obsolescence”. Websites become bigger, bandwidths increase, and as a side effect of those “improvements”, routers, firewalls, and in this case, intrusion prevention systems get old quicker and quicker.
Apparently, this was also the case for the Cisco IDS-4215 Intrusion Detection Sensor that I was given a few months ago.
I’m not too proud to admit that at first, I didn’t care about the machine itself, but rather about the add-on PCI network card with 4 Fast Ethernet interfaces. The sensor has obviously seen better days, as it had a broken front panel and needed some cleaning, but upon a closer inspection under the hood (which is held closed by the 4 screws on top), this IDS consists of an embedded Celeron PC with two onboard Ethernet cards, a 2.5″ IDE hard disk, a CF card, and 2 PCI expansion slots (more on them later). Oh, and don’t forget the nasty server-grade fan, which pushed very little air for the noise it was making.
###An OpenBSD desktop using WindowMaker
Since I started using *N?X, I’ve regularly used WindowMaker. I’ve always liked the look and feel, the dock system and the dockapps. It may look a bit oldish nowadays. And that’s enough to try to change this. So here it is, a 2019 flavored WindowMaker Desktop, running on OpenBSD 6.4/amd64.
This configuration uses the Nord color-scheme, the Adapta-Nokto-Eta GTK theme and the Moblin Unofficial Icons icon set. I did remove applications icons. I just don’t need them on the bottom of the screen as I heavily use “F11” to pop-up the windows list. To be able to do that and keep the dockapps, I tweaked my ~/GNUstep/Defaults/WMWindowAttributes and created a ~/GNUstep/Library/WindowMaker/Themes/Nord.themed/style.
And here it is, the NeXT OpenBSD Desktop!
In a previous episode, we’ve seen that it is possible to create opaque types. However, creation and destruction of such type must be delegated to some dedicated functions, which themselves rely on dynamic allocation mechanisms.
Sometimes, it can be convenient to bypass the heap, and all its malloc() / free() shenanigans. Pushing a structure onto the stack, or within thread-local storage, are natural capabilities offered by a normal struct. It can be desirable at times.
The previously described opaque type is so secret that it has no size, hence is not suitable for such scenario.
Fortunately, static opaque types are possible.
The main idea is to create a “shell type”, with a known size and an alignment, able to host the target (private) structure.
For safer maintenance, the shell type and the target structure must be kept in sync, by using typically a static assert. It will ensure that the shell type is always large enough to host the target structure. This check is important to automatically detect future evolution of the target structure.
My top used shell command is |. This is called a pipe.
In brief, the | allows for the output of one program (on the left) to become the input of another program (on the right). It is a way of connecting two commands together.
According to doc.cat-v.org/unix/pipes/, the origin of pipes came long before Unix. Pipes can be traced back to this note from Doug McIlroy in 1964
##Beastie Bits
##BUG Calendar
##Feedback/Questions
Jason finally discovers the bottomless well of potential that is the Raspberry Pi, and talks about his first experience with Raspbian. Then Joe and Jason take a nostalgic deep dive into retro gaming on both the Raspberry Pi and the Pinebook.
Plus some final thoughts on openSUSE Tumbleweed and Leap.
Links:
Will there ever be another "big" Linux distro, or has that time passed?
Plus two popular Linux desktop apps see a big upgrade, and Wes explains to Chris why he should care a lot more about cgroups.
Special Guests: Brent Gervais and Neal Gompa.
Links:
The guys discuss the real last bastion of scratch your own itch, and debate the merits of recent C# functional programing fads that are transforming the language.
Plus Mike’s swimming in hardware, and a new movement sweeping the web that starts right here.
Special Guest: Wes Payne.
Links:
Google scrambles to repurpose Android Things, Microsoft wants to protect your Linux install really bad, and the first bank backed Crypto-coin makes a splash.
Plus Void Linux issues a warning, running Linux on ARM laptops built for Windows, and more.
Links:
Is the great hope for open hardware actually going to materialize or is RISC-V just hype? Are some conspiracy theories worth more than just passing disdain?
Plus hoarding all your own tracking data, and some great #AskError questions.
00:00:18 #AskError: What's the best decade for music?
00:04:13 RISC-V
00:12:43 Collecting our own data
00:24:02 #AskError: Pain for principles - where's your threshold?
00:30:24 Conspiracy theories
Join Jim and Wes as they battle bufferbloat, latency spikes, and network hogs with some of their favorite tools for traffic shaping, firewalling, and QoS.
Plus the importance of sane defaults and why netdata belongs on every system.
Links:
Strategic thinking to keep FreeBSD relevant, reflecting on the soul of a new machine, 10GbE Benchmarks On Nine Linux Distros and FreeBSD, NetBSD integrating LLVM sanitizers in base, FreeNAS 11.2 distrowatch review, and more.
##Headlines
###Strategic thinking, or what I think what we need to do to keep FreeBSD relevant
Since I participate in the FreeBSD project there are from time to time some voices which say FreeBSD is dead, Linux is the way to go. Most of the time those voices are trolls, or people which do not really know what FreeBSD has to offer. Sometimes those voices wear blinders, they only see their own little world (were Linux just works fine) and do not see the big picture (like e.g. competition stimulates business, …) or even dare to look what FreeBSD has to offer.
Sometimes those voices raise a valid concern, and it is up to the FreeBSD project to filter out what would be beneficial. Recently there were some mails on the FreeBSD lists in the sense of “What about going into direction X?”. Some people just had the opinion that we should stay where we are. In my opinion this is similarly bad to blindly saying FreeBSD is dead and following the masses. It would mean stagnation. We should not hold people back in exploring new / different directions. Someone wants to write a kernel module in (a subset of) C++ or in Rust… well, go ahead, give it a try, we can put it into the Ports Collection and let people get experience with it.
This discussion on the mailinglists also triggered some kind of “where do we see us in the next years” / strategic thinking reflection. What I present here, is my very own opinion about things we in the FreeBSD project should look at, to stay relevant in the long term. To be able to put that into scope, I need to clarify what “relevant” means in this case.
FreeBSD is currently used by companies like Netflix, NetApp, Cisco, Juniper, and many others as a base for products or services. It is also used by end‐users as a work‐horse (e.g. mailservers, webservers, …). Staying relevant means in this context, to provide something which the user base is interested in to use and which makes it more easy / fast for the user base to deliver whatever they want or need to deliver than with another kind of system. And this in terms of time to market of a solution (time to deliver a service like a web‐/mail‐/whatever‐server or product), and in terms of performance (which not only means speed, but also security and reliability and …) of the solution.
I have categorized the list of items I think are important into (new) code/features, docs, polishing and project infrastructure. Links in the following usually point to documentation/HOWTOs/experiences for/with FreeBSD, and not to the canonical entry points of the projects or technologies. In a few cases the links point to an explanation in the wikipedia or to the website of the topic in question.
###Reflecting on The Soul of a New Machine
Long ago as an undergraduate, I found myself back home on a break from school, bored and with eyes wandering idly across a family bookshelf. At school, I had started to find a calling in computing systems, and now in the den, an old book suddenly caught my eye: Tracy Kidder’s The Soul of a New Machine. Taking it off the shelf, the book grabbed me from its first descriptions of Tom West, captivating me with the epic tale of the development of the Eagle at Data General. I — like so many before and after me — found the book to be life changing: by telling the stories of the people behind the machine, the book showed the creative passion among engineers that might otherwise appear anodyne, inspiring me to chart a course that might one day allow me to make a similar mark.
Since reading it over two decades ago, I have recommended The Soul of a Machine at essentially every opportunity, believing that it is a part of computing’s literary foundation — that it should be considered our Odyssey. Recently, I suggested it as beach reading to Jess Frazelle, and apparently with perfect timing: when I saw the book at the top of her vacation pile, I knew a fuse had been lit. I was delighted (though not at all surprised) to see Jess livetweet her admiration of the book, starting with the compelling prose, the lucid technical explanations and the visceral anecdotes — but then moving on to the deeper technical inspiration she found in the book. And as she reached the book’s crescendo, Jess felt its full power, causing her to reflect on the nature of engineering motivation.
Excited to see the effect of the book on Jess, I experienced a kind of reflected recommendation: I was inspired to (re-)read my own recommendation! Shortly after I started reading, I began to realize that (contrary to what I had been telling myself over the years!) I had not re-read the book in full since that first reading so many years ago. Rather, over the years I had merely revisited those sections that I remembered fondly. On the one hand, these sections are singular: the saga of engineers debugging a nasty I-cache data corruption issue; the young engineer who implements the simulator in an impossibly short amount of time because no one wanted to tell him that he was being impossibly ambitious; the engineer who, frustrated with a nanosecond-scale timing problem in the ALU that he designed, moved to a commune in Vermont, claiming a desire to deal with “no unit of time shorter than a season”. But by limiting myself to these passages, I was succumbing to the selection bias of my much younger self; re-reading the book now from start to finish has given new parts depth and meaning. Aspects that were more abstract to me as an undergraduate — from the organizational rivalries and absurdities of the industry to the complexities of West’s character and the tribulations of the team down the stretch — are now deeply evocative of concrete episodes of my own career.
##News Roundup
###Out-Of-The-Box 10GbE Network Benchmarks On Nine Linux Distributions Plus FreeBSD 12
Last week I started running some fresh 10GbE Linux networking performance benchmarks across a few different Linux distributions. That testing has now been extended to cover nine Linux distributions plus FreeBSD 12.0 to compare the out-of-the-box networking performance.
Tested this round alongside FreeBSD 12.0 was Antergos 19.1, CentOS 7, Clear Linux, Debian 9.6, Fedora Server 29, openSUSE Leap 15.0, openSUSE Tumbleweed, Ubuntu 18.04.1 LTS, and Ubuntu 18.10.
All of the tests were done with a Tyan S7106 1U server featuring two Intel Xeon Gold 6138 CPUs, 96GB of DDR4 system memory, and Samsung 970 EVO SSD. For the 10GbE connectivity on this server was an add-in HP NC523SFP PCIe adapter providing two 10Gb SPF+ ports using a QLogic 8214 controller.
Originally the plan as well was to include Windows Server 2016/2019. Unfortunately the QLogic driver download site was malfunctioning since Cavium’s acquisition of the company and the other Windows Server 2016 driver options not panning out and there not being a Windows Server 2019 option. So sadly that Windows testing was thwarted so I since started testing over with a Mellanox Connectx-2 10GbE NIC, which is well supported on Windows Server and so that testing is ongoing for the next article of Windows vs. Linux 10 Gigabit network performance plus some “tuned” Linux networking results too.
###Integration of the LLVM sanitizers with the NetBSD base system
Over the past month I’ve merged the LLVM compiler-rt sanitizers (LLVM svn r350590) with the base system. I’ve also managed to get a functional set of Makefile rules to build all of them, namely:
ASan, UBSan, TSan, MSan, libFuzzer, SafeStack, XRay.
In all supported variations and modes that are supported by the original LLVM compiler-rt package.
###Distrowatch FreeNAS 11.2 review
The project’s latest release is FreeNAS 11.2 and, at first, I nearly overlooked the new version because it appeared to be a minor point release. However, a lot of work went into the new version and 11.2 offers a lot of changes when compared next to 11.1, “including a major revamp of the web interface, support for self-encrypting drives, and new, backwards-compatible REST and WebSocket APIs. This update also introduces iocage for improved plugins and jails management and simplified plugin development.”
##Beastie Bits
##Feedback/Questions
The hype around a new security flaw hits new levels. Fedora has a bunch of news, and we discover what's new in the latest Plasma release.
Plus we fall down the openSUSE rabbit hole when Ell updates us on her desktop challenge.
Special Guests: Alan Pope, Brent Gervais, Daniel Fore, Ell Marquez, Martin Wimpress, and Neal Gompa.
Links:
The gangs all together and cover your poignant feedback right out of the gate. Then we jump into the psychological trap of freelancing, and imagine a world where app stores are a true level playing field.
Plus some really fun picks, a bit of hoopla, and more.
Special Guest: Wes Payne.
Links:
A week of nasty security flaws, and a lack of patches... For some of us. Raspberry Pi opens a physical store, our thoughts on the new LibreOffice interface, and the new round of nasty flaws hitting all versions of Android.
Plus new disk encryption coming to Linux, Intel releases their open source encoder for future video on the web, and more.
Links:
We recap FOSDEM 2019, FreeBSD Foundation January update, OPNsense 19.1 released, the hardware-assisted virtualization challenge, ZFS and GPL terror, ClonOS 19.01-RELEASE, and more.
##Headlines
###FreeBSD Foundation Update, January 2019
Dear FreeBSD Community Member,
Happy New Year! It’s always exciting starting the new year with ambitious plans to support FreeBSD in new and existing areas. We achieved our fundraising goal for 2018, so we plan on funding a lot of work this year! Though it’s the new year, this newsletter highlights some of the work we accomplished in December. We also put together a list of technologies and features we are considering supporting, and are looking for feedback on what users want to help inform our 2019 development plans. Our advocacy and education efforts are in full swing as we prepare for upcoming conferences including FOSDEM, SANOG33, and SCaLE.
Finally, we created a year-end video to talk about the work we did in 2018. That in itself was an endeavor, so please take a few minutes to watch it! We’re working on improving the methods we use to inform the community on the work we are doing to support the Project, and are always open to feedback. Now, sit back, grab a refreshing beverage, and enjoy our newsletter!
Happy reading!!
Deb
For more than four years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.
The 19.1 release, nicknamed “Inspiring Iguana”, consists of a total of 620 individual changes since 18.7 came out 6 months ago, spread out over 12 intermediate releases including the recent release candidates. That is the average of 2 stable releases per month, security updates and important bug fixes included! If we had to pick a few highlights it would be: The firewall alias API is finally in place. The migration to HardenedBSD 11.2 has been completed. 2FA now works with a remote LDAP / local TOTP combination. And the OpenVPN client export was rewritten for full API support as well.
These are the most prominent changes since version 18.7:
fully functional firewall alias API
PIE firewall shaper support
firewall NAT rule logging support
2FA via LDAP-TOTP combination
WPAD / PAC and parent proxy support in the web proxy
P12 certificate export with custom passwords
Dpinger is now the default gateway monitor
ET Pro Telemetry edition plugin[2]
extended IPv6 DUID support
Dnsmasq DNSSEC support
OpenVPN client export API
Realtek NIC driver version 1.95
HardenedBSD 11.2, LibreSSL 2.7
Unbound 1.8, Suricata 4.1
Phalcon 3.4, Perl 5.28
firmware health check extended to cover all OS files, HTTPS mirror default
updates are browser cache-safe regarding CSS and JavaScript assets
collapsible side bar menu in the default theme
language updates for Chinese, Czech, French, German, Japanese, Portuguese and Russian
API backup export, Bind, Hardware widget, Nginx, Ntopng, VnStat and Dnscrypt-proxy plugins
Here are the full changes against version 19.1-RC2:
ipsec: add firewall interface as soon as phase 1 is enabled
ipsec: phase 1 selection GUI JavaScript compatibility fix
monit: widget improvements and bug fix (contributed by Frank Brendel)
ui: fix regression in single host or network subnet select in static pages
plugins: os-frr 1.7 updates OSFP outbound rules (contributed by Fabian Franz)
plugins: os-telegraf 1.7.4 fixes packet filter input
plugins: os-theme-rebellion 1.8.2 adds image colour invert
plugins: os-vnstat 1.1[3]
plugins: os-zabbix-agent now uses Zabbix version 4.0
src: revert mmc_calculate_clock() as HS200/HS400 support breaks legacy support
src: update sqlite3-3.20.0 to sqlite3-3.26.0[4]
src: import tzdata 2018h, 2018i[5]
src: avoid unsynchronized updates to kn_status[6]
ports: ca_root_nss 3.42
ports: dhcp6c 20190128 prevent rawops double-free (contributed by Team Rebellion)
ports: sudo patch to fix listpw=never[7]
##News Roundup
###The hardware-assisted virtualization challenge
Over two years ago, I made a pledge to use NetBSD as my sole OS and only operating system, and to resist booting into any other OS until I had implemented hardware-accelerated virtualization in the NetBSD kernel (the equivalent of Linux’ KVM, or Hyper-V).
Today, I am here to report: Mission Accomplished!
It’s been a long road, but we now have hardware-accelerated virtualization in the kernel! And while I had only initially planned to get Oracle VirtualBox working, I have with the help of the Intel HAXM engine (the same backend used for virtualization in Android Studio) and a qemu frontend, successfully managed to boot a range of mainstream operating systems.
###ZFS and GPL terror: How much freedom is there in Linux?
ZFS is todays most advanced filesystem. It originated on the Solaris operating system and thanks to Sun’s decision to open it up, we have it available on quite a number of Unix-like operating systems. That’s just great! Great for everyone.
For everyone? Nope. There are people out there who don’t like ZFS. Which is totally fine, they don’t need to use it after all. But worse: There are people who actively hate ZFS and think that others should not use it. Ok, it’s nothing new that some random guys on the net are acting like assholes, trying to tell you what you must not do, right? Whoever has been online for more than a couple of days probably already got used to it. Unfortunately its still worse: One such spoilsport is Greg Kroah-Hartman, Linux guru and informal second-in-command after Linus Torvalds.
There have been some attempts to defend the stance of this kernel developer. One was to point at the fact that the “ZFS on Linux” (ZoL) port uses two kernel functions, __kernel_fpu_begin() and __kernel_fpu_end(), which have been deprecated for a very long time and that it makes sense to finally get rid of them since nothing in-kernel uses it anymore. Nobody is going to argue against that. The problem becomes clear by looking at the bigger picture, though:
The need for functions doing just what the old ones did has of course not vanished. The functions have been replaced with other ones. And those ones are deliberately made GPL-only. Yes, that’s right: There’s no technical reason whatsoever! It’s purely ideology – and it’s a terrible one.
ClonOS is a turnkey Open Source platform based on FreeBSD and the CBSD framework. ClonOS offers a complete web UI for easily controlling, deploying and managing FreeBSD jails containers and Bhyve/Xen hyperviser virtual environments.
ClonOS is currently the only platform available which allow both Xen and Bhyve hypervisor to coexist on the same host. Being a FreeBSD base platform, ClonOS ability to create and manage jails allows you to run FreeBSD applications without losing performance.
Features:
easy management via web UI interface
live Bhyve migration [coming soon, roadmap]
Bhyve management (create, delete VM)
Xen management (create, delete VM) [coming soon, roadmap]
connection to the “physical” guest console via VNC from the browser or directly
Real time system monitoring
access to load statistics through SQLite3 and beanstalkd
support for ZFS features (cloning, snapshots)
import/export of virtual environments
public repository with virtual machine templates
puppet-based helpers for configuring popular services
ClonOS is a free open-source FreeBSD-based platform for virtual environments creation and management. In the core:
FreeBSD OS as hoster platform
bhyve(8) as hypervisor engine
Xen as hypervisor engine
vale(4) as Virtual Ethernet Switch
jail(8) as container engine
CBSD Project as management tools
Puppet as configuration management
##Beastie Bits
##Feedback/Questions
Episode 2 is all about opposites, such as the major differences between benchmarking graphics cards like Radeon VII on Linux and Windows. Then we dive into the Phoronix Test Suite, a robust tool that isn't just for tech reviewers. Find out why you should be using it too.
Plus, the distro challenges roll on as Jason decides to do a complete 180, jumping from elementary OS to openSUSE Tumbleweed.
Links:
Why FOSDEM might be the quintessential community event, and our thoughts after playing with Pi-Hole.
Plus community news for everyone’s favorite video player, GNOME Shell gets a major speed boost, and why cryptocurrency might truly be dead.
Special Guests: Alan Pope, Brent Gervais, Daniel Fore, and Martin Wimpress.
Links:
Mike breaks down the drama around nullable reference types in C# 8.0, and we debate what it means for the future of the language.
Plus a fresh reminder of Apple's absolute App Store authority, and the state of Mike's relationship with the rust compiler.
Special Guest: Wes Payne.
Links:
Firefox is standing out, Pine64 has a lot more cheap Linux hardware coming, and the good and the bad with the new Kodi Release.
Plus HP Joins LVFS, why you shouldn't expect a Raspberry Pi 4 in 2019, and more.
Links:
New JB team member Ell joins us to discuss e-waste, the motivations for our distro choices, and letting children out of your sight.
Plus some solid #AskError questions about food and aliases.
Also check out Joe's new show Choose Linux.
00:00:26 Intro
00:01:26 Computer sustainability
00:13:17 #AskError: What one meal could you live on for the rest of your life?
00:17:06 Distro choice
00:25:09 #AskError: What is your favorite bash alias? If you aren't heavy alias users - why?
00:29:30 Independent children
Special Guest: Ell Marquez.
Jim and Wes are joined by OpenZFS developer Richard Yao to explain why the recent drama over Linux kernel 5.0 is no big deal, and how his fix for the underlying issue might actually make things faster.
Plus the nitty-gritty details of vectorized optimizations and kernel preemption, and our thoughts on the future of the relationship between ZFS and Linux.
Special Guest: Richard Yao.
Links:
Honestly, I am beginning to think that my attempt to compromise with mainline gave the wrong impression. I am simply tired of this behavior by them and felt like reaching out to put an end to it. In a few weeks, we will likely be running on Linux 5.0 as if those symbols had never been removed because we will almost certainly have our own substitutes for them. Having to bloat our code because mainline won’t give us access to trivial functionality is annoying, but it is not the end of the world.
We’re at FOSDEM 2019 this week having fun. We’d never leave you in a lurch, so we have recorded an interview with Niclas Zeising of the FreeBSD graphics team for you. Enjoy.
##Interview - Niclas Zeising - [email protected] / @niclaszeising
Interview topic: FreeBSD Graphics Stack
##Feedback/Questions
We're playing Robin Hood with the content, and a new member of our team joins to tell you all about it.
Plus some hard details on the Librem 5, we visit the Canonical Corner, and a big batch of great Linux picks.
Special Guests: Brent Gervais, Ell Marquez, and Martin Wimpress.
Links:
Apple wades into controversy after filing some Swift-related patents and we explore WebAssembly and its implications for the open web.
Plus the latest on Mike's road to Rust, some great feedback, and more!
Special Guest: Wes Payne.
Links:
Debian has a big fix, Chromium might block ads, Valve makes another big investment in Linux, and Google gets serious about bringing Fuchsia to market.
Plus we announce a new Linux podcast, and run down the many ways to run Ubuntu on Windows.
Links:
Project Trident 18.12 released, Spotifyd on NetBSD, OPNsense 18.7.10 is available, Ultra EPYC AMD Powered Sun Ultra 24 Workstation, OpenRsync, LLD porting to NetBSD, and more.
##Headlines
###AsiaBSDCon 2019 Call for Papers
###Project Trident 18.12 Released
###Building Spotifyd on NetBSD
These are the steps I went through to build and run Spotifyd (this commit at the time of writing) on NetBSD AMD64. It’s a Spotify Connect client so it means I still need to control Spotify from another device (typically my phone), but the audio is played through my desktop… which is where my speakers and headphones are plugged in - it means I don’t have to unplug stuff and re-plug into my phone, work laptop, etc. This is 100% a “good enough for now solution” for me; I have had a quick play with the Go based microcontroller from spotcontrol and that allows a completely NetBSD only experience (although it is just an example application so doesn’t provide many features - great as a basis to build on though).
##News Roundup
2019 means 19.1 is almost here. In the meantime accept this small
incremental update with goodies such as Suricata 4.1, custom passwords
for P12 certificate export as well as fresh fixes in the FreeBSD base.
A lot of cleanups went into this update to make sure there will be a
smooth transition to 19.1-RC for you early birds. We expect RC1 in 1-2
weeks and the final 19.1 on January 29.
###Introducing the Ultra EPYC AMD Powered Sun Ultra 24 Workstation
A few weeks ago, I got an itch to build a workstation with AMD EPYC. There are a few constraints. First, I needed a higher-clock part. Second, I knew the whole build would be focused more on being an ultra high-end workstation rather than simply utilizing gaming components. With that, I decided it was time to hit on a bit of nostalgia for our readers. Mainly, I wanted to do an homage to Sun Microsystems. Sun made the server gear that the industry ran on for years, and as a fun fact, if you go behind the 1 Hacker Way sign at Facebook’s campus, they left the Sun Microsystems logo. Seeing that made me wonder if we could do an ultimate AMD EPYC build in a Sun Microsystems workstation.
###OpenRsync
This is a clean-room implementation of rsync with a BSD (ISC) license. It is designed to be compatible with a modern rsync (3.1.3 is used for testing). It currently compiles and runs only on OpenBSD.
This project is still very new and very fast-moving.
It’s not ready for wide-spread testing. Or even narrow-spread beyond getting all of the bits to work. It’s not ready for strong attention. Or really any attention but by careful programming.
Many have asked about portability. We’re just not there yet, folks. But don’t worry, the system is easily portable. The hard part for porters is matching OpenBSD’s pledge and unveil.
###The first report on LLD porting
LLD is the link editor (linker) component of Clang toolchain. Its main advantage over GNU ld is much lower memory footprint, and linking speed. It is of specific interest to me since currently 8 GiB of memory are insufficient to link LLVM statically (which is the upstream default).
The first goal of LLD porting is to ensure that LLD can produce working NetBSD executables, and be used to build LLVM itself. Then, it is desirable to look into trying to build additional NetBSD components, and eventually into replacing /usr/bin/ld entirely with lld.
In this report, I would like to shortly summarize the issues I have found so far trying to use LLD on NetBSD.
It’s the second week of 2019 already, which means I’m curious what Nate is going to do with his series This week in usability … reset the numbering from week 1? That series is a great read, to keep up with all the little things that change in KDE source each week — aside from the release notes.
For the big ticket items of KDE on FreeBSD, you should read this blog instead.
##Beastie Bits
##Feedback/Questions
We kick off a brand new show with a discussion about Jason's elementary OS community challenge. Then we get into the pros and cons of setting up your own NAS with OpenMediaVault.
Plus, find out more about your hosts and what we have in store for future episodes.
Links:
Mike and Wes are back to debate the state of developer tools and ask where Jenkins fits in 2019.
Plus some some anger at Apple, and Mike reveals the latest language that's caught his eye.
Special Guest: Wes Payne.
Links:
An embarrassing vulnerability has been found in the apt package manager, we’ll break it all down. Plus Alessandro Castellani tells us about his plans to build a professional design tool for Linux.
We also have a batch of big community news, and the case for the cloud killing Open Source.
Special Guests: Alessandro Castellani and Brent Gervais.
Links:
We welcome Jim to the show, and he and Wes dive deep into all things Let’s Encrypt.
The history, the clients, and the from-the-field details you'll want to know.
Links:
Another troubling week for MongoDB, ZFS On Linux lands a kernel workaround, and 600 days of postmarketOS.
Plus our thoughts on the new Project Trident release, and Mozilla ending their Test Pilot program.
Links:
Wes and Jim have some great new SNAP in the works, in the meantime Chris stops by to keep you updated and share his favorite "hacker" story of the week.
Is the decision to listen to this really up to you, or is it predetermined by chemistry and physics? Can mobile Linux ever succeed beyond a small niche?
Plus hoarding physical media, terrible books, and extreme weather.
00:00:35 #AskError: What's the worst book you've ever read?
00:04:45 Physical media vs streaming
00:11:29 Can mobile Linux ever succeed?
00:27:02 #AskError: If you could get rid of summer and winter and just have a single meh season, would you do it?
00:32:25 Is free will an illusion?
SCP client vulnerabilities, BSDs vs Linux benchmarks on a Tyan EPYC Server, fame for the Unix inventors, Die IPv4, GhostBSD 18.12 released, Unix in pictures, and more.
ZFS on Linux is becoming the official upstream project of all major ZFS implementations, even the BSDs. But recent kernel changes prevent ZFS from even building on Linux. Neal Gompa joins us to discuss why it all matters.
Plus some surprising community news, and a few great picks!
Special Guests: Dalton Durst and Neal Gompa.
Links:
Wes joins Mike for a special Coder. They share thoughts on the costs and benefits of Optionals in Swift, uncover Mike's secret love affair with F#, and debate the true value of serverless.
Special Guest: Wes Payne.
Links:
Choose your own Linux is coming to Chrome OS, GitHub private repos go free, LVFS gets another win, and Amazon released their MongoDB competitor DocumentDB.
Plus Homebrew comes to Linux, the recent Ethereum Classic attack, and more.
Links:
A EULA in FOSS clothing, NetBSD with more LLVM support, Thoughts on FreeBSD 12.0, FreeBSD Performance against Windows and Linux on Xeon, Microsoft shipping NetBSD, and more.
Wes is joined by a special guest to take a look back on the growth and development of Azure in 2018 and discuss some of its unique strengths.
Special Guest: Chad M. Crowell.
Links:
Joe joins Wes to discuss the state of Adobe's Creative Cloud on Linux and why the Fish shell might be your favorite new tool.
Plus community news, a reality check on Linux gaming, and some shiny new hardware.
Special Guests: Jason Evangelho and Peter Ammon.
Links:
In the end they accounted for <0.1% of sales but >20% of auto reported crashes and support tickets
Mike’s just had the talk, and now it's time to make some changes. Including admitting he was wrong about Swift.
Plus we read some feedback, answer some questions, and destroy another computer.
Links:
Raspberry Pi joins the RISC-V Foundation, MIPS is going open source, and Mozilla is experimenting with more ads in Firefox.
Plus the BSDs rebase their ZFS on the Linux implementation, the EU has bug bounties, and Thunderbird gets set to fly!
Links:
Android vs iOS, turning users into contributors, and good vs bad in the world.
00:00:29 #AskError: What Linux-related opinion makes you completely disregard anything that person says?
00:03:10 iOS vs Android
00:15:35 How do we turn more users into contributors?
00:30:45 Is there more good or bad in the world?
The future of ZFS in FreeBSD, we pick highlights from the FreeBSD quarterly status report, flying with the raven, modern KDE on FreeBSD, many ways to launch FreeBSD in EC2, GOG installers on NetBSD, and more.
In a special new year’s episode we take a moment to reflect on the show’s past, its future, and say goodbye to an old friend.
Links:
We start off the new year with our hopes and dreams for Linux and open source in 2019 and beyond.
Plus Clear Linux aims to build the ultimate Linux desktop based on Xfce, and it looks like GNOME is closing the performance gap.
Special Guests: Alan Pope and Brent Gervais.
Links:
Don’t call them resolutions, lets just call them reasonable goals. Mike and Chris share their plans for 2019’s ground work, and why every single thing is fair game.
We take a look back at our 2018 Linux predictions, and make some bold new ones for the year ahead.
Plus there’s no avoiding how far off we were when it came to Bitcoin last year, but that didn’t stop us having a go again this year!
The guys drink some Liquid Christmas Tree and reflect on the major trends of 2018, and the stuff they are preemptively freaking out about for 2019.
We sat down at BSDCan 2018 to interview Kirk McKusick about various topics ranging about the early years of Berkeley Unix, his continuing work on UFS, the governance of FreeBSD, and more.
We get serious and bring in a special referee to help us lock in our Linux predictions for 2019.
Special Guest: Alan Pope.
Links:
The Open Source midlife crisis, Donald Knuth The Yoda of Silicon Valley, Certbot For OpenBSD's httpd, how to upgrade FreeBSD from 11 to 12, level up your nmap game, NetBSD desktop, and more.
It’s been a huge year for Linux and FOSS news, and we take a look at some of the major stories that shaped the industry over the last 12 months.
Acquisitions, solid releases, a revolution for gaming, politics in the kernel community, Chrome OS coming of age, and more.
Links:
Whether new users have to suffer the pain of the command line, lying about Santa, and the best tech news of 2018.
Plus we learn whether Dan is a hipster, and more.
00:00:40 #AskError: What will self-driving cars be called?
00:02:02 Lying to children about Santa
00:09:19 Do new users still need to learn how to use the command line?
00:19:36 #AskError: How much do you spend getting your hair cut and how often?
00:23:57 The best tech news stories of the year
We’re just back from touring System76’s new factory, and getting the inside scoop on how they build their Thelio desktop. This is our story about walking in as skeptics, and walking out as believers.
Plus some surprising community news, a few great picks, and more!
Links:
Chris is back from his trip to Denver to tour System76’s factory, and what he discovered while he was there was the last thing he was expecting.
Links:
Intel developers are working to open source the FSP, Fuchsia SDK and device repos show up in Android AOSP, and our BSD buddies have some big news.
Plus the pending removal of the x32 sub-architecture from Linux, why Uber is joining up with the Linux Foundation, and more.
Links:
FreeBSD 12.0 is finally here, partly-cloudy IPsec VPN, KLEAK with NetBSD, How to create synth repos, GhostBSD author interview, and more.
A security vulnerability in Kubernetes causes a big stir, but we’ll break it all down and explain what went wrong.
Plus the biggest stories out of Kubecon, and serverless gets serious.
Links:
We have a WireGuard success story to share, and it's probably not what you're expecting.
Plus we check in on Ubuntu 19.04, start the search for an Emby replacement, and how to use Reddit on the commandline.
Special Guest: Alex Kretzschmar.
Links:
Estimates can be a very tricky thing to get right, but they are vitally important. Peter Kretzman joins us to make it all a bit easier and clearer.
Plus Chris thinks he knows why Microsoft is willing to kill off their Edge browser engine and switch it out for Chromium. But can he convince Mike?
Special Guest: Peter Kretzman.
Links:
Microsoft is moving to Chromium, and Mozilla isn't too thrilled about it.
Plus the Kernel team's clever Spectre slowdown fix, Emby goes proprietary, Steam Link lives on, and more.
Links:
Mike and Chris don’t claim to have a time machine, but they still have a major problem to solve.
Links:
DragonflyBSD 5.4 has been released, down the Gopher hole with OpenBSD, OpenBSD in stereo with VFIO, BSD/OS the best candidate for legally tested open source Unix, OpenBGPD adds diversity to the routing server landscape, and more.
It's another #AskError special! Getting normals to do backups, should we stop making distros, ridiculous pipe dreams, and more.
00:01:08 How do we get normal people to use proper passwords and backups?
00:13:19 What's the most popular movie you've never seen?
00:16:54 Is it time to stop making new Linux distros?
00:31:40 What's the most ridiculous pipe dream you've ever had?
Come and hang out with us on the forum.
We chat with a developer who's gotten Linux running on iOS devices, do a deep dive into Clear Linux, and discuss Xubuntu ending 32bit support.
Plus why Android in the cloud, and a bunch of community news.
Special Guests: Alan Pope, Martin Wimpress, and Theodore Dubois.
Links:
Clear Linux doubles down on the desktop, Fedora 31 is likely canceled or delayed, and why Firecracker is being called the new "Docker killer".
Plus AMP's new governance model kicks in, and the Necuno Mobile Plasma tease.
Links:
We break down Firecracker Amazon’s new open source kvm powered, virtual machine monitor, and explore what makes it different from the options on the market now.
Plus some good news for OpenBGP and the wider internet community, and a handy tool for inspecting docker images.
Links:
Assembly language on OpenBSD, using bhyve for FreeBSD development, FreeBSD Gaming, FreeBSD for Thanksgiving, no space left on Dragonfly’s hammer2, and more.
Fedora might take a year off, to focus on it self. Project Lead and Council Chair Matthew Miller joins us to explain this major proposal.
Plus Wimpy shares his open source Drobo alternative, and our final Dropbox XFS hack.
Special Guests: Brent Gervais, Martin Wimpress, and Matthew Miller.
Links:
iPad Pro is a great machine for people that don’t want to get too much work done.
But ultimately this week’s episode is about the guys catching up after a long couple weeks apart.
Links:
The Fuchsia bomb ticks closer, Valve's Steam Link end of life shocks us, and Amazon's new, rather obvious feature.
Plus the surprise use for Red Hat Enterprise, and an update on the Linux powered Atari VCS.
Links:
There's something almost intangible about the way Linux presents itself and Popey tries to explain it, the balance between living for the moment and planning for the future, and doing it wrong with social media.
Plus moving country, and stupid folding phones.
Thoughts on NetBSD 8.0, Monitoring love for a GigaBit OpenBSD firewall, cat’s source history, X.org root permission bug, thoughts on OpenBSD as a desktop, and NomadBSD review.
WireGuard has a lot of buzz around it and for many good reasons. We’ll explain what WireGuard is specifically, what it can do, and maybe more importantly, what it can’t.
Special Guest: Jim Salter.
Links:
Android and Ubuntu are working exceptionally hard to create longer support cycles. We’ll highlight the work that makes this possible, and what’s motivating these two different projects to strive for Very Long Term Support.
Plus Chris reviews how his new Thunderbolt 3 GPU docking station works under Linux, and why he’ll never be undocking again.
Special Guests: Alan Pope, Brent Gervais, and Martin Wimpress.
Links:
Mark Shuttleworth announced 10 years support of Ubuntu 18.04, but there's a catch. Why we're buying the new Raspberry Pi, and we have a laugh at folding Android screens.
Plus the new Red Hat Enterprise beta has modularity, why Canonical might be ready for investors, and the bad week for cryptocurrencies.
Links:
Byproducts of reading OpenBSD’s netcat code, learnings from porting your own projects to FreeBSD, OpenBSD’s unveil(), NetBSD’s Virtual Machine Monitor, what 'dependency' means in Unix init systems, jailing bhyve, and more.
Wes is joined by special guest Jim Salter to discuss Google's recent BGP outage and the future of HTTP.
Plus the latest router botnet, why you should never go full UPnP, and the benefits of building your own home router.
Special Guest: Jim Salter.
Links:
Christian F.K. Schaller from Red Hat joins us to discuss seamless Linux upgrades, replacing PulseAudio, some of the recent desktop Projects Red Hat’s been working on... And the value they get from them.
Plus a big batch of important community news, Wimpy’s Thunderbolt Dock experiments, and way to run pacman on any Linux distribution.
Special Guests: Alan Pope, Christian F.K. Schaller, and Martin Wimpress.
Links:
Ubuntu on select Samsung devices goes into beta, we cover the technicalities of Linux on the new Macs, one of our favorite desktop projects gets a big update, and the Librem 5 slips.
Plus it's the end of the line for the Nexus devices, and more!
Links:
What's the best strategy when it comes to desktop Linux applications? We look at both ends of the spectrum, and wonder how much big tech companies should dictate who has access to their platforms.
Plus some solid #AskError questions, having kids, and our new forum at community.error.show.
MidnightBSD 1.0 released, MeetBSD review, EuroBSDcon trip reports, DNS over TLS in FreeBSD 12, Upgrading OpenBSD with Ansible, how to use smartd to run tests on your drives automatically, and more.
We answer how Chris and Mike started in independent contracting, and the lessons changes they’d make with some perspective of time.
Plus System76’s new Thelio hardware looks great, but would the Mac Mini be the wiser purchase? The guys debate. And a tool of the week, some news, and more!
Links:
Celebrating 100 | Ask Noah Show 100
For 100 episodes The Ask Noah Show has delivered quality content every single week without exception. This week we celebrate this important milestone live from the Tamarack Tap Room in Woodbury MN. Brandon Johnson joins us live and as always we take your questions!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
ArcoLinux with Erik Dubois | Ask Noah Show 99
In this episode we make a bombshell announcement regarding the future of Ask Noah! Later in the hour Erik Dubois from ArcoLinux joins us to talk about a rolling distro built for those who want to learn Linux!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Our friends from Destination Linux join us and together we form the “Linux Chumps”! Can we be stumped? We think not, but your calls try anyway! Your emails, your calls, your questions are the priority. Join Michael, Zeb, Ryan and Noah as we take on you the listener in this special edition!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Have the revolutionaries won the war against proprietary software? That’s the argument being made. And we argue, what else did you expect?
Plus some performance improvements inbound to Linux, and the perfectly proportioned open source project we’ve recently discovered.
Special Guests: Alan Pope and Brent Gervais.
Links:
Microsoft Joins OIN with Patrick McBride | Ask Noah Show 97
The Open Invention Network is a shared defensive patent pool with the mission to protect Linux. On October 10th Microsoft joined the OIN so we invited Patrick McBride the Senior Director of Patents to join us and explain the implications both to Red Hat as well as the larger Linux community.
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
The new Fedora has a neat trick, The Register's KDE klickbait, and GhostBSD impresses.
Plus Sailfish's release strategy gets refined, System76 announces their Thelio Linux hardware, and more.
SQLite with Richard Hipp | Ask Noah Show 96
If you have a device with an operating system chances are it uses SQLite. Richard Hipp is our guest this hour and he joins us to talk about their controversial CoC. As an alternative to the Contributor Covenant the Rule of St. Benedict was chosen for it’s long and proven track record. Red Hat has officially dropped support for the KDE Desktop and we give you our take on that decision but as always your phone calls go to the front of the line!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Community Night! | Ask Noah Show 95
Community hour is where we take some time to focus on you the listener! You set the topics, you ask the questions! In this episode we chat about self hosting. We talk email, to nextcloud, to file sync. Friend of the show Brandon explains why Ansible is the solution you want to manage multiple servers!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
OpenBSD 6.4 released, GhostBSD RC2 released, MeetBSD - the ultimate hallway track, DragonflyBSD desktop on a Thinkpad, Porting keybase to NetBSD, OpenSSH 7.9, and draft-ietf-6man-ipv6only-flag in FreeBSD.
We react to the news that IBM is buying Red Hat, cover some feedback that sets us straight, and are pleasantly surprised by Qt Design Studio.
Links:
We speculate about a future where IBM owns Red Hat, and review the latest Fedora 29 release that promises a new game changing feature.
Plus Chris returns from MeetBSD with his review, and we get the inside scope on System76’s Thelio hardware.
IBM Buys Red Hat | Ask Noah Show 94
In the largest software company acquisition in history, tech giant IBM has purchased Red Hat for 34 billion dollars. The open source community was shocked and devastated at first but is it too soon to judge? What has IBM really purchased a product or a culture? We explain why this could be the best thing ever to happen to Linux and FOSS!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Linus is back in charge with the whole world watching, IBM is buying Red Hat, and Pine64 says they’re working on a Plasma phone.
Plus Firefox has a new sales pitch for you, and how HTC's blockchain future is already fizzling out.
Fred Gleason has worked for years to develop a open source Linux based broadcasting appliance. Rivendell can be used for the acquisition, management, scheduling and playout of audio content. It has all of the features one would expect in a modern, fully-fledged automation system, including support for both PCM and MPEG audio encoding, full voicetracking and log customization as well as support for a wide variety of third party software and hardware. Fred joins us this hour to tell us the story of how Rivendell can make anyone a headache free broadcaster.
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Join us in our dedicated chatroom #AskNoahShow on Freenode!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Linus has taken a break while he worked on his tooling to be more socially acceptable. That time is over and Greg KH has officially handed the kernel back to him. We discuss the implication of his return and what it might mean for Linux. A Google contract has been leaked that shows Google is requiring it’s hardware partners to maintain security patches and updates for at least 2 years. All that and more in this special edition of The Ask Noah Show!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
It’s a special all #AskError episode! A hypothetical Linux world, the future of welfare, tech disruption, and terrible email addresses.
Plus Distrowatch rankings, and a crucial seasonal question.
We explain what eBPF is, how it works, and its proud BSD production legacy.
eBPF is a technology that you’re going to be hearing more and more about. It powers low-overhead custom analysis tools, handles network security in a containerized world, and powers tools you use every day.
FreeBSD Foundation September Update, tiny C lib for programming Unix daemons, EuroBSDcon trip reports, GhostBSD tested on real hardware, and a BSD auth module for duress.
Business Backup Tips | Ask Noah Show 91
If you have data, that data should be backed up. If you own a business or manage the IT infrastructure for a business than your backup strategy needs to be reliable, straightforward, and functional. Have you ever wondered what happens to the backup should you be hit by a bus? We tackle that question, dive into some SQLite CoC drama, and chat with Simon Quigley about the latest Qt release.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
The lead developer of PipeWire Wim Taymans joins us to discuss Linux’s multimedia past, and its exciting future. They promise to greatly improve handling of audio and video under Linux.
Plus we review the professional grade Precision 5530, tour our new studio in a box, and release one of our first production tools as free software!
What’s the future of .NET? With .NET Core growing and the future of the orginal .NET seems uncertain. Chris and Mike suspect there is clear possibility.
Plus a few more thoughts on Unit Testing, embedded productivity companion devices, and the hoopla of the week.
The Cosmic Cuttlefish is out, and we share our quick take. Juno finally lands and this one sets the bar, MongoDB gets hip to the license changes, and watch out Linux... Here come the pros!
Plus we go over the newly publish Ubuntu statistics, and Google's new Android licensing scheme in Europe.
6 metrics for zpool performance, 2FA with ssh on OpenBSD, ZFS maintaining file type information in dirs, everything old is new again, netcat demystified, and more.
Elementary OS’ latest and greatest released today, and we talk with Dan and Cassidy from the project about their biggest release yet.
Then community news, a preview of upcoming Ubuntu 18.10, and we announce our own free software project. Plus a chat with Dalton about the new Ubuntu Touch release and we find a real Photoshop replacement for Linux.
Building a WISP and CCTV | Ask Noah Show 90
It's family friendly, we promise! You know that Linux succeededs where others fail, but did you know that cam girls are turning to Linux for it's reliability, stability, and functionality? We cover this amusing reddit thread, give you an update on the car dealership camera install. We touch a little on visualization, and as always - take your calls at the front of the line!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Azure Sphere dev kits are shipping and we take a look at the practicalities of getting setup to start developing.
We clear some recent Java FUD, read some feedback, and share a few stories.
Another fork is brewing, Microsoft hands over their patents of mass destruction leaving us with a few questions, and the best features of the new Plasma release.
Plus Google's new Linux hardware, Flatpak's have met their critic, and more.
It seems to be all about Plasma these days so we want to know if the hype is justified. We have a couple of great #AskError questions, and wonder whether we are heading for a tech dystopia.
Plus the heaviest of all subjects rears its head again this week.
We bring in Amy Marrich to break down the building blocks of OpenStack. There are nearly an overwhelming number of ways to manage your infrastructure, and we learn about one of the original tools.
Plus a few warm up stories, a war story, and more.
We have a long interview with fiction and non-fiction author Michael W. Lucas for you this week as well as questions from the audience.
Red Hat developer Andy Grover joins us to discuss Stratis Storage, an alternative to ZFS on Linux and its recent milestone.
Also Google subtracts Plus, some KDE and GNOME news, and a bit of forgotten Linux history.
Supermicro suffered a huge security breach that gave the Chinese government access to servers manufactured with Supermicro boards. This revelation has caused companies like Apple and Amazon to distance themselves from the popular server manufacture. Unifi has announced that their new "Unifi Protect" will only be available on their hardware and not user built boxes. We dive into all of this plus an update from Simon Quigley on Lubuntu 18.10!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Mike makes his case for realism when it comes to automated testing and a readjustment of expectations in the wider community.
Plus the guys define what makes a “Dark Matter Developer,” gauk at the possibility of this young hip upstart’s automated build pipeline, and share memories of large scale QA testing teams.
Red Hat's Stratis project reaches a major milestone, Microsoft's Linux powered dev boards go up for sale, and Fedora's hunt for buggy hibernation under Linux has begun.
Plus Android App mirroring, how the islands of the clouds are getting bridged, and Chris channel’s his inner Shuttleworth.
We bring on our Google Cloud expert and explore the fundamentals, demystify some of the magic, and ask what makes Google Cloud different.
Plus how Google hopes Roughtime will solve one of the web’s biggest problems, some great emails, and more!
Running OpenBSD/NetBSD on FreeBSD using grub2-bhyve, vermaden’s FreeBSD story, thoughts on OpenBSD on the desktop, history of file type info in Unix dirs, Multiboot a Pinebook KDE neon image, and more.
What if desktop computing went a very different direction in the late 90s? Deeply multithreaded from the start, fast, intuitive, and extremely stable. This is the world of Haiku, and we go for a visit.
Plus the latest community news, true flicker freedom comes to Fedora, and our favorite tools for easy virtual machines on our laptops.
Kubernetes & Containers | Ask Noah Show 88
Have you ever wanted to know what containers and Kubernetes are all about? This week we try something new – Steve Ovens from Red Hat has produced a segment on containers for us. We talk about the latest release of Zabbix, and Noah gives the details of a client who wants Altispeed to build a mini WISP in their city. It’s a packed show!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Mike is the extreme laptop killer with a tale you’ll have to hear to believe. With only a few short hours left on a deadline, it was 24 hours of chaos.
Plus we take a quick look at Mac in the Cloud, Microsoft’s new Azure service, a travel hack, and more.
Google's Project Zero criticizes Linux distros, Firefox can now tell you when you get pwned, and the growing elephant in the room about Azure.
Plus a new release of our favorite non-distro, GPL revoking debunking, and Android turns 10.
Chris joins us to talk about his recent brush with death, we wonder how Linux on Windows is affecting bare metal adoption, we wish phones weren’t so big and stupid, and a great #AskError.
Kubernetes expert Will Boyd joins us to explain the top 3 things to know about Kubernetes, when it’s the right tool for the job, and building highly available production grade clusters.
Plus the privacy improvements that could be coming to HTTPS, and a new SSH auditing tool hits the open source scene.
We report from our experiences at EuroBSDcon, disenchant software, LLVM 7.0.0 has been released, Thinkpad BIOS update options, HardenedBSD Foundation announced, and ZFS send vs. rsync.
We chat with Nate Graham who’s pushing to make Plasma the best desktop on the planet. We discuss his contributions to this effort, and others.
Plus we get the scope on a new Juno feature from the source, and the creator of WSLinux a distro built specifically for Windows 10’s Windows Subsystem for Linux joins us.
Also some community news, some old friends stop by, and more!
This is How You Should Store Your Data | Ask Noah Show 87
In this episode your calls drove the show and that's the show we set out to do! We talk storage, LVM, hard disk configuration, SteamOS, troubleshoot an OBS box, and still find time break the news about the new and best way to listen to The Ask Noah Show live!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
After catching up the guys dig into the “why” Jupiter Broadcasting sold to Linux Academy, the big shift Chris is seeing, and why the timing was critical.
Plus we respond to some emails, chat about GitHub’s future plans to sell talent, and Mike’s big announcement: Gryphon.
Linus is taking a break from maintaining the kernel, AMP might be set free, and Firefox goes VR.
It’s also been a big week for Linux on Windows with Flatpaks and a new distro running on WSL, and a flawless Ubuntu VM experience.
Jon the Nice Guy joins Wes to discuss all things IPFS. We'll explore what it does, how it works, and why it might be the best hope for a decentralized internet.
Plus, Magecart strikes again, Alpine has package problems, and why you shouldn't trust Western Digital's MyCloud.
FreeBSD and DragonflyBSD benchmarks on AMD’s Threadripper, NetBSD 7.2 has been released, optimized out DTrace kernel symbols, stuck UEFI bootloaders, why ed is not a good editor today, tell your BSD story, and more.
Linus takes a break and the Linux kernel adops a new Code of Conduct. We work through these major watershed moments, and discuss what it means for the community.
Plus our review of our brand new ThinkPad T480’s running Linux, the bug you need to know about, and why this might be one of the greatest Linux laptops of all time.
Linus Takes a Break | Ask Noah Show 86
Linus Torvalds has decided he needs a break so he can understand people and their emotions better. The kernel has finally adopted a code of conduct based on the contributor covenant. No one knows more about codes of conduct than Paul M. Jones. Paul joins us in the second half of the program to help us explore the situation and give us some insight into what we can expect for the future of Linux.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Fedora want help testing their innovations, Mozilla continue to focus on mobile, Chrome OS gets a major new feature, and Microsoft almost stepped in it bigtime.
Plus new releases from nano and Nextcloud, huge news for Jupiter Broadcasting, and more.
User Error is back with a new set of hosts! We answer some #AskError questions and talk about whether the Linux desktop will ever make money.
Plus we wonder if dockless bike sharing is a good idea and whether travel really is as great as everyone seems to think.
TechSNAP progenitor and special guest Allan Jude joins us to talk mobile security, hand out some SSH tips and tricks, and discuss why security shaming works so well.
Plus, how Mozilla is protecting their GitHub repos, a check-in on Equifax, and some great picks.
Mitigating Spectre/Meltdown on HP Proliant servers, omniOS installation setup, debugging a memory corruption issue on OpenBSD, CfT for OpenZFS native encryption, Asigra TrueNAS backup appliance shown at VMworld, NetBSD 6 EoL, and more.
We announce our big news, Jupiter Broadcasting is joining Linux Academy and what we have planned for the future is huge!
Plus a new NextCloud lands, concerns are brewing for the Solus project, and a report from the recent Libre Application Summit.
Does This Make FOSS Better or Worse | Ask Noah Show 85
Does the "Commons Clause" help the commons? The Commons Clause was announced recently along with several projects moving portions of their code base under it. It's an additional restriction intended to be applied to existing open source licenses with the effect of preventing the work from being sold. We play devils advocate and tell you why this might not be such a bad thing. As always your calls go to the front of the line, and we give you the details on how you can win free stuff in the Telegram group!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Great new releases for GNOME and Tor, delays for the Librem 5, and Linus proves to be extremely important.
Plus some innovative tech gets an open source implementation, and NSA encryption removed from the kernel within weeks of inclusion.
Wes joins Mike to discuss why .NET still makes sense, the latest antics from Fortnite, a brave new hope for JVM concurrency, and the mind-expanding benefits of trying a Lisp.
We’re joined by a special guest to discuss the failures of campaign security, the disastrous consequences of a mismanaged firewall, and the suspicious case of Speck.
Plus the latest vulnerabilities in Wireshark and OpenSSH, the new forensic hotness from Netflix, and some great introductions to cryptography.
OpenBSD on Microsoft Surface Go, FreeBSD Foundation August Update, What’s taking so long with Project Trident, pkgsrc config file versioning, and MacOS remnants in ZFS code.
Intel has disappointed the kernel community with its latest security disclosures but there's still hope for a better future. That's more than can be said for the state of privacy on Android, so we discuss some alternatives.
Plus the latest community updates, a new timeline for the Librem 5, tempting new Chromebooks, and some top picks.
Google is launching it’s own hardware security key for two-factor authentication but there’s a few major problems. From pricing, to security concerns, we break the entire situation down for you. New audio production software is released for Linux, and we talk with a caller about BluRays on Linux and ripping them.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
This week saw a huge release for UBports, proof that LMDE is still alive, and Mozilla earning a lot of respect.
Plus mixed news for Google, and a surprising blockchain fact.
Mike and Chris have a strong reaction to beer from Utah, and then get into the weeds around Mike’s new gear, the situation with Qt, and a few new tools they’ve recently found.
Insight into TrueOS and Trident, stop evildoers with pf-badhost, Flashback to FreeBSDcon ‘99, OpenBSD’s measures against TLBleed, play Morrowind on OpenBSD in 5 steps, DragonflyBSD developers shocked at Threadripper performance, and more.
To make DNS more secure we must move it to the cloud...at least that’s what Mozilla and Google suggest. We breakdown DNS-over-HTTPS, why it requires a “cloud” component, and the advantages it has over traditional DNS.
Plus new active attacks against Apache Struts and a Windows 10 zero-day exposed on Twitter.
After digging into some feedback, we react to the big upset in the world of React Native.
Plus some recent hoopla, a new way to get started contributing to open source, and more!
Steam Play rocks the Linux world as it promises new levels of compatibility with AAA Windows games. But the story of how Valve is doing it might be just as fascinating.
Plus community news, our thoughts on building a market for Linux apps, the latest from UBPorts, and more good news from LVFS!
How to Get Hired at Red Hat | Ask Noah Show 83
Steve Ovens from Red Hat joins us to answer the question many of you have asked - how do you get hired by a company like Red Hat? Steve takes us through his exciting rise to working for the largest open source company in the US. Steam has dropped a bomb shell that has left Windows users dropping their gaming computers like yesterday's laundry and as always your phone calls go to the front of the line!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Some massive free software milestones this week, Intel's Microcode benchmark snafu, and Windows games for Steam on Linux confirmed, so we give it a test.
Plus Venezuela ties its currency to a cryptocoin, and our reaction to Windows 95 getting stuffed inside an Electron app.
Trip reports from the Essen Hackathon and BSDCam, CfT: ZFS native encryption and UFS trim consolidation, ZFS performance benchmarks on a FreeBSD server, how to port your OS to EC2, Vint Cerf about traceability, Remote Access console to an RPi3 running FreeBSD, and more.
Docker controversy is brewing but it's probably not what you think. We get a round of community updates directly from the source and why Debian and Intel are playing the game of he said, she said.
Should We Care About Libre? | Ask Noah Show 82
We talk about Linux and Open Source, but is it far enough? Do we need to go all the way and push for everyone to use Libre freedom respecting software? We invite Kenny Schmidt, a 17 year old who is starting out with Linux and ask that question. We talk about a $100 device that will monitor your Internet, the EFFs stance to protect the individual’s ability to call out security problems as they find them.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
It seems Valve is working to make Windows games work on Linux, and LVFS turns its focus to NVMe drives.
Plus KDE 3 lives on, Endless ships on Asus, and major distros patch against Foreshadow.
Microsoft’s making radical changes to Windows 10, and a new type of speculative execution attack on Intel’s processors is targeting cloud providers.
The strange birth and long life of Unix, FreeBSD jail with a single public IP, EuroBSDcon 2018 talks and schedule, OpenBSD on G4 iBook, PAM template user, ZFS file server, and reflections on one year of OpenBSD use.
A quick note from Chris on some changes, Jupiter Broadcasting's focus going forward, and... Well that's about it.
The FreeBSD community shares the hard lessons learned from systemd, we play some great clips from a recent event.
Plus our work-arounds for Dropbox dropping support for anything but vanilla Ext4, the return of an old friend, and a ton of community news and updates.
This week firefox made waves by encrypting DNS entries making DNS more secure for everyone. We talk about IP cameras, gaming on Linux, and Steve Ovens from RedHat joins us. It's a packed episode you can't afford to miss!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Mike's adventures with Qt land him on Windows 10 this week battling DLL hell. He shares the latest developments in his attempt to build his next app with Qt.
Plus some feedback, thoughts on AMP, and why dynamic linking keeps Mike up at night.
We cover the noteworthy features of Android Pie, Lenovo joins The Linux Vendor Firmware Service, and Dropbox is ending support for non-Ext4 filesystems.
Plus big news for Flatpaks, the blockchain goes to work, and Open Source goes all Hollywood.
Take down a Linux or FreeBSD box with just 2kpps of traffic, own Homebrew in 30 minutes, and infiltrate an entire network via the Inkjet printers.
It’s a busy TechSNAP week.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
live [at] asknoahshow.com
-- Twitter --
In the last weekly episode of Unfilter, we look at the four major fronts facing Donald Trump, discuss the state of intellectualism, and share our thoughts on the week's news.
Plus a packed Overtime, tons of your notes, and more!
FreeBSD Foundation July Newsletter, a bunch of BSDCan trip reports, HardenedBSD Foundation status, FreeBSD and OSPFd, ZFS disk structure overview, and more Spectre mitigations in OpenBSD.
GNOME is discussing big changes, Elementary OS has big news, and a big bug has been found in Linux.
Plus an update on our PeerTube efforts, our take Android P, and Lenovo’s big commitment to ThinkPad’s running Linux.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Mike shares more first impressions of Qt, the surprising places we’ve found QML in the wild, and why or why not to use Qt.
Plus we answer some questions, share some travel hacks, and discuss the top programming languages of 2018, as declared so by the IEEE.
GNOME and elementary OS receive a large somewhat mysterious donation. Wireguard is coming to a Kernel near you, and Mozilla wants to talk about the Dweb.
Plus OpenWrt is alive and well, and Samsung has a new trick.
Reddit’s Two Factor procedures fail, while Google’s prevents years of attacks. We’ll look at the different approaches, and discuss the fundamental weakness of Reddit’s approach.
Plus a Spectre attack over the network, BGP issues take out Telegram, and more!
Mike’s ordered a surprise new rig, Chris is getting particular, and do a first impressions of Qt Creator.
Plus why we all need to pull back on the AI hype a bit, and more!
NetBSD 8.0 available, FreeBSD on Scaleway’s ARM64 VPS, encrypted backups with OpenBSD, Dragonfly server storage upgrade, zpool checkpoints, g2k18 hackathon reports, and more.
Did Trump know about the Russian meeting with his son? His old fixer seems to think so. And the reaction from the White House has been manic.
Plus a very important update about the show in the Patreon segment.
Some new tools will give you better insights into your system under extreme load, and we flash back to the days of AOL and discuss the new way social hackers are spreading malware.
Plus the death of a TLD, the return of SamSam, and more!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
We get an update from Dell’s Barton George on their Linux initiative Sputnik, cover some important community news, and the uncomfortable questions raised by Krita’s new financial boost.
And some simple tips to improve your security at the edge.
After we happily avoid the recent MacBook scandals we deep dive into hardware for a bit...and then pull it out with a overview of Microsoft Async/await pattern.
Slackware's founder runs into challenges, YouTube makes changes that slow down Firefox, while Firefox is cutting back on some features, and another German region dumps FOSS.
Plus some hard data on why it's time to drop 32-bit Linux, and Lubuntu's got a new direction.
Google and Amazon recently shutdown Domain Fronting. Their abrupt change has created a building backlash.
We’ll explain what Domain Fronting is, how activists can use it to avoid censorship, and why large organizations are compelled to disable it.
Plus how road navigation systems can be spoofed with $223 in hardware, and another bad Bluetooth bug.
Michael Cohen’s secret stash of tapes leaks to the media, and everyone is hearing something different. We’ll play the clips.
Plus the FISA sauce is weak, and the GCHQ is getting away with it all!
Another potential desktop Linux app is scared away by an aggressive free software community, and we struggle to find the balance between our moral ideals, and getting work done.
Plus some community news, old friends return, and much more.
FreeBSD ULE vs. Linux CFS, OpenBSD on Tuxedo InfinityBook, how zfs diff reports filenames efficiently, why choose FreeBSD over Linux, PS4 double free exploit, OpenBSD’s wifi autojoin, and FreeBSD jails the hard way.
The year of the Linux desktop has become a cliché. In 2018 has a Forbes writer finally found a distro that has one click installs for every app he used to use on Windows? Microsoft ports PowerShell to a Linux snap, and of course your calls go to the front of the line!
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Linux gains a world class media editor, Atari is making Chris nervous, and the Librem 5 hits some rocky waters.
Plus the EU fines Google over how they leverage Android, some follow up, and more.
Google's Cloud Platform suffers an outage, and iPhones in India get owned after a very specific attack.
Plus how a malware author built a massive 18,000 strong Botnet in one day, and Cisco finds more "undocumented" root passwords.
The world melts down after Trump meets with Putin, but we’ll focus on the substance of the meeting and the possibly positive developments… And of course a bit of the reaction!
Plus highlights from Peter Strzok’s testimony, your everyday cyber attacks, and much more!
What ZFS blockpointers are, zero-day rewards offered, KDE on FreeBSD status, new FreeBSD core team, NetBSD WiFi refresh, poor man’s CI, and the power of Ctrl+T.
Atari has released details about its upcoming Linux powered console, some of us are sold… And some of us are rather skeptical.
Plus how SSH got its port, Mir goes to the farm, and what happens when Linus retires?
Chris Moore, and JT Pennington join the Ask Noah Show this week to answer the question what does BSD offer to attract Linux users over to their ball park. We discuss the Lumina desktop as well as Project Trident. Your calls as always go to the front of the line. Learn how a law office can convert their practice to Linux with our PDF software recommendation.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
We ruminate on Python’s founder stepping down, and ponder if it was inevitable.
Plus the topic of hardware and software workflows is back in the news, and Instapaper goes independent. So why does that feel like a bad thing?
Arch finds itself in the barrel, Ubuntu goes on a diet, and Python's leader for life has had enough, and steps down.
Plus Debian joins KDE's council of wizards.
Good progress is being made on post-quantum resilient computing. We’ll explain how they’re achieving it, the risks facing traditional cryptography.
Plus how bad defaults led to the theft of military Drone docs, new attacks against LTE networks, more!
Control flow integrity with HardenedBSD, fixing bufferbloat with OpenBSD’s pf, Bareos Backup Server on FreeBSD, MeetBSD CfP, crypto simplified interface, twitter gems, interesting BSD commits, and more.
The Uno platform recently got our attention, and Jérôme from the project joins us to explain a few things, and have a frank discussion about what they've gotten right, that others have missed.
Plus your emails, a bit of hoopla, and more!
Trump’s gut punching at the NATO summit, North Korea is throwing around the “gangster” label, and Paul Manafort is really screwed while Cohen plays ball.
The crew is back together for another roadshow edition.
We reflect on recent FOSS security screw ups and ponder a solution powered by community.
Plus get you caught up on community news, Firefox changes, and poke the new minimal Ubuntu.
Many have tried and failed to manufacture a laptop that stops Apple's Macbook Pro in it's tracks! Has Dell finally done it with their Precision 5510? Can you get a $2200 laptop for under $1000 brand new from Dell? We'll show you how it's done and how it stacks up to Apple in this week's episode. We talk to Brandon who wants to know how to scale his small business and of course your calls as always go to the front of the line.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
SUSE is acquired and GNOME is hiring, and it might just be the summer of forks.
Plus how about a new package manager for your distro?
Mike discovers a new open source project that promises a free UWP Bridge for iOS, Android and WebAssembly. We kick the tires and share our first thoughts.
Plus a nasty software failure is striking down new iMac Pro's, and the 7 most cited reasons engineers quit.
Fanless server setup with FreeBSD, NetBSD on pinebooks, another BSDCan trip report, transparent network audio, MirBSD's Korn Shell on Plan9, static site generators on OpenBSD, and more.
Allan Jude and Wes sit-down for a special live edition of the TechSNAP program.
Joined by Jed and Jeff they have a wide ranging organic conversation.
Pressure is building to wrap the Russia investigation, and we play the clips that demonstrate the US war machine is just starting to ramp up.
A major Internet monopoly might just be on the edge of cracking thanks to free software, a bit of initiative, and a lot of gumption. We'll follow up on a major experiment we kicked off last week.
Plus SUSE is sold again, Linux on the Nintendo Switch just got way better, Mint has a new release, we look at elementary OS Juno's first beta, and we cover a ton of community news.
This week on the Ask Noah Show we tackle the difficult discussion - is it okay for companies to collect data and when should you be worried about companies having too much data? We interview Brian Martell who uses the finance aspect to get people on Linux. As always your questions go to the front of the line!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Allan Jude joins us for a FreeBSD birthday special edition of Tech Talk. We also discuss the privacy win for US mobiles, some history and future hopes for Intel's dedicated GPU Larrabee, and that time Allan's town lost power.
Tech companies are taking over cities, and becoming more powerful than some nations. Is their a moral stand developers inside these huge corporations should be taking? Or is the shift to a chicken farmer economy truly best for all?
It's a very introspective edition of the Coder Radio show.
Gentoo's GitHub is compromised, and Google's writing big checks to the Linux Foundation to distract you from the Fuchsia elephant in the room.
Plus we try out AWS' new Linux WorkSpace, RISC-V's Linux first commitment looks a lot stronger this week, and why we think STARTTLS initiative is a great first step.
FreeBSD 11.2 has been released, setting up an MTA behind Tor, running pfsense on DigitalOcean, one year of C, using OpenBGPD to announce VM networks, the power to serve, and a BSDCan trip report.
The show is back after a couple weeks hiatus and there is much to cover, from separating families to the North Korea summit.
Plus the building Trade Wars, the recent IG report about the Russia and Clinton investigations, and the unbelievable news that broke just before the show.
Big changes are coming to Fedora with the merger of CoreOS. We chat with a couple project members to get the inside scope about what the future of Fedora looks like.
Plus the big feature of the new GitLab release, how Pocket might be Firefox's secret sauce, and why Chris is really excited by PeerTube.
What You Need to Know about WPA3 | Ask Noah Show 73
There's new security out for WiFi. Noah takes you through exactly what you need to know to stay up to date. What does WPA3 offer over WPA2? How do you take advantage of it? We talk about everything from WiFi to Colo in this weeks episode!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Mike's got a dream, and it's a dream where Microsoft saves us from Electron. Now historically speaking, he's been wrong every single time. But this week we'll make the case why we all need to collective pull for his vision.
Projects once thought dead are now full of life, with new major releases and we kick the tires.
Plus new commits suggest Fuchsia will support Linux apps, Fedora CoreOS is announced, and we look over the first public Ubuntu desktop metrics.
DragonflyBSD’s hammer1 encrypted master/slave setup, second part of our BSDCan recap, NomadBSD 1.1-RC1 available, OpenBSD adds an LDAP client to base, FreeBSD gets pNFS support, Intel FPU Speculation Vulnerability confirmed, and what some Unix command names mean.
Free Software projects concerned about Article 13 are claiming it could destroy free software as we know it. We debate this controversial copyright law about to be voted on in the EU.
Plus a big batch of community news, some exciting hardware updates, and a bit of retro gaming.
Plus Chris shares what got done at Linux Academy, and more!
Ever wanted your own phone system? Maybe you want an intercom system for you house? How about the ability to use use an internet connected ham radio? We're talking Audio over IP this hour! We show you how simple it is to get AOIP setup and all the things you never knew you could do with it. The first 3 minutes have some poor audio but we work the issues out live and bring you a quality product so please hang in there!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Plasma Desktop has a new release so we cover the new features and some bugs, Mycroft has an "opportunity" for you, and trouble at CopperheadOS.
Plus Debian's call for help, and more.
We chat with GitLab’s CEO and co-founder Sid Sijbrandij, about the GitLab model, the changes they’ve made since Microsoft purchased GitHub, his thoughts on that acquisition, and his compelling case for 100% remote work.
Netflix has learned the hard way how to utilize all the logs, we cover their lessons in their journey to build a fully observable system.
Plus the Lazy State FPU bug that cropped up this week, backdoored Docker images, your questions, and more!
TrueOS becoming a downstream fork with Trident, our BSDCan 2018 recap, HardenedBSD Foundation founding efforts, VPN with OpenIKED on OpenBSD, FreeBSD on a System76 Galago Pro, and hardware accelerated crypto on Octeons.
There is trouble at CopperheadOS, Plasma has a shiny new release, and we share the story of how Linux has powered the curiosity rover for 17 years.
Plus our stories from a weekend of Linux parties, Texas LinuxFest, SouthEast LinuxFest, and FOSS Talk Live.
A hostile takeover has just happened to the Copperhead OS Project. Lead developer Daniel Micay has been fired by Copperhead CEO James Donaldson. Micay claims Donaldson is up to no good, and Donaldson says it's Micay who doesn't have the company's best interest in mind. Who's to blame? Was the government part of this? What has been publicly released? Will the CopperheadOS project survive? We break that down for you plus your calls in this week's episode.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Free and open source developers are still freaking out about Microsoft buying GitHub, ReactOS reaches a major milestone, TrueOS appears to be forking, and changes are coming to the core of Plasma desktop team.
Plus we try out the new Devuan release, and more.
Do you run a small business? Do you work for a small business? Join us this hour as we talk to Keith Perry from DAO Technologies. Keith has been running a small business for a long time and implementing open source where possible. We get Keith's insight as well as bring in Chris DeLuca to tell us when it's okay to tell a client "No!"
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
When You're Ready to Scale So is Linux | Ask Noah Show 69
This week on the Ask Noah Show we take you live to the SELF floor! We take a look at a broadcasting company that was founded and runs entirely on Linux. That company? Jupiter Broadcasting. We tell you what you can expect from Southeast Linux Fest and how you can participate from anywhere in the world.
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Microsoft puts a data center under the ocean, and they might be onto something. The Zip Slip vulnerability sneaks into your software, and VPNFilter turns out to be more complicated than first known.
Plus the mass exploit of Drupalgeddon2 continues, we break down why, a batch of questions, and more.
OpenZFS and DTrace updates in NetBSD, NetBSD network security stack audit, Performance of MySQL on ZFS, OpenSMTP results from p2k18, legacy Windows backup to FreeNAS, ZFS block size importance, and NetBSD as router on a stick.
Trump kicks off a Pardon Party, and the reason seems obvious… We just both completely disagree with each other. We share our theories on the pardon parade, the storm approaching Fusion GPS, and much more!
Microsoft has purchased GitHub, sending shock-waves through the free software community. We discuss the bidding war that took place, and it leaves us questioning what the future of Electron might be.
Plus we’ve found a great batch of Linux apps you're going to want to try, NextCloud turns two, big changes to the KWin project, and the details on Samsung’s Chromebook Plus landing Linux app support.
This week on the show we give you the quick and dirty on Microsoft buying GitHub. We speak to Jason Plumb from GitLab and he gives us a brief overview of the services GitLab offers and how they've worked to create a product that blows GitHub out of the water. Plus a brief overview on what you can expect from Southeast Linuxfest this year!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Microsoft is buying GitHub, Apple just kicked off WWDC 2018, and we've got a packed show!
Ubuntu-based Atari VCS crowd-funding is going very well, Endless employees are hit with layoffs, and why GNOME might be too fat for Pi.
Plus the group trying to force Samsung to update its phone loses, and Essential says they are definitely, totally, not shutting down.
We explain how the much hyped VPNFilter malware actually works, and its rather surprising sophistication.
Plus a clear break down of the recent Kubernetes news, how a 40 year old tel-co protocol is being abused today, and a Git vulnerability you should know about.
We try to get to the root of what Russia actually hacked, cover the whiplash from the North Korea news since last week, and serve up some cold cyber analysis.
After we make ourselves at Gnome, we look at some future open source goodies coming your way, look at how Canonical’s upstream pitch, and get excited about the next great Linux filesystem hope.
Plus Chris’ first wreck on the road to Texas, Thunderbolt networking, and our results from the best Linux laptop for 2018.
DragonflyBSD release 5.2.1 is here, BPF kernel exploit writeup, Remote Debugging the running OpenBSD kernel, interview with Patrick Mooney, FreeBSD buildbot setup in a jail, dumping your USB, and 5 years of gaming on FreeBSD.
The New Way to Rag Chew | Ask Noah Show 67
We talk quite a bit about owning your communication and how you can do that with Ham Radio. What if you love your Linux and want to continue to use your computer to communicate? This week we dive into an all new way to use ham radio, all on Linux, all with open source software. We take a call from a a caller who wants to automate his door lock, a caller who wants to replace quicken and Noah dives into why it’s important to have a central home automation system.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
After a bit of CoffeeScript reminiscing we get down to data and design.And discuss why the bot market has collapsed, and how Google is running the table in AI.
Plus a few classic Coder moments, feedback, and more.
openSUSE Leap 15 is released, along a new LXQt, the Essential Phone getting canceled, and why older Chrombooks might be receiving the big Linux apps update.
Plus we’ll explain what portable systemd services are, and the Android phones that recently shipped with Malware.
FreeBSD internship learnings, exciting developments coming to FreeBSD, running FreeNAS on DigitalOcean, Network Manager control for OpenBSD, OpenZFS User Conference Videos are here and batch editing files with ed.
It's Google's turn to receive the Facebook treatment. In a series of rapid fire leaks, lawsuits, and PR blunders we re-cap Google's awful bad week.
Plus MoviePass's desperate grab for data seems to be going bust, and IBM warns of cracking encryption with their Quantum Computer.
Then we wrap it up with our Kickstarter of the week, that wants to build open source VR for exploring Mars.
Trump chips away at the shared illusion of our “cherished” Institutions, and the secret spy inside the Trump campaign is revealed, and the history of this individual tells all.
Plus the latest in Cyber, the High-Note, and more. It’s our first roadshow edition of Unfilter!
We’ll explain how Speculative Store Bypass works, and the new mitigation techniques that are inbound.
Plus this week’s security news has a bit of a theme, and we share some great war stories sent into the show.
What is the best laptop for Linux in 2018? How about the best Evernote killer, and production setup? We cover the best of the best this week.
Plus Gnome’s performance hackfest, Mycroft goes Blockchain, and what’s behind Tesla’s big GPL dump.
We Found Another Spectre, Meltdown Flaw | Ask Noah Show 66
This week on the show give you the latest on the new Intel flaw. We take an interesting question from a caller who asks Noah, can a router be virtualized? Plus we give you the run down on our Small Business Theme Hour coming up in early June.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
The future is JavaScript and Mike’s seen the way. Plus we answer a listener's questions about career changes, discuss the week’s hoopla, and share a cautionary tale.
Asteroid OS reaches 1.0, and Joe gives it a go. GNOME developers consider removing the ability to launch binaries, but punt for now. And the lessons learned from malware in the Snap Store.
Plus the reality of EFail, Steam Link on Android, and another shoe drops for Ubuntu’s 32bit support.
Nearly all mobile carriers are caught selling your location, and the story gets twisted. The senate votes to overturn the net neutrality repeal but there's a long way to go. OnePlus 6's specs are out, and how some guy heated his bath water with Bitcoin mining.
Plus the big Nest outage, and the SOUDCAM. You're going to want this Kickstarter of the week.
How Intel docs were misinterpreted by almost any OS, a look at the mininet SDN emulator, do’s and don’ts for FreeBSD, OpenBSD community going gold, ed mastery is a must read, and the distributed object store minio on FreeBSD.
Palestinians grab the attention of the world once again, and no one is coming out a winner. A new insight into why the Trump White House leaks so much, a mole in the Trump campaign, and some extreme cyber.
The EFail hype train has hit hypersonic speed, we’ll tap the breaks and explain who disclosed it, what it is, what it’s not, our recommendations, and early reactions.
Plus things to consider when deciding on-premises vs a cloud deployment, and the all business gadget from 1971 that kicked off the consumer electronics revolution.
The Linux community is eating its own this week, as attention seeking plucky YouTuber’s trade on free software’s good name for clicks. We learn the real story behind some of the Internet’s recent free software freak-out.
Plus a fantastic batch of community news and updates, some cool tools, and we discuss if it’s time to give up the Qt or GTK purist lifestyle.
Ask Noah Show 65 | Can This Be Virtualized?
This week on the show we talk about everything from DMX lighting on Linux to USB-C. We take an interesting question from a listener who has a massive virtual desktop infrastructure project and he asks Noah if Linux can handle this project or if he should stick with Windows
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
A critical PGP and S/MIME bug is in the wild, EasyMesh promises standards Wifi Mesh networks, Zuck's in the sites, and Bittorrent Inc gets a rename.
Plus the return of a classic!
We get fired up about cloud lock-in, and attempt to find some common ground.
But the overall framework for today's conversation is the important bits for developers from this years Microsoft Build and Google I/O events.
It's confirmed Linux apps are coming to Chrome OS. Google is finally putting pressure on OEM's to ship security patches, and we try Android of Things.
Plus we get some clarity on CoreOS and Red Hat, and their strategy for cloud domination in the future.
The world is freaking out about Google Duplex, new features coming to Google Photos we like and Android P promises to improve your "well being".
Plus Apple deals a blow to GrayKey, our Kickstarter of the week, and sending ultra sonic commands to Alexa.
Our FreeNAS build is complete and Allan’s back to cover the final details. Plus the new GPU attack against Android phones, and a perfect example of poor IoT security.
Allan’s recap of the ZFS User conference, first impressions of OmniOS by a BSD user, Nextcloud 13 setup on FreeBSD, OpenBSD on a fanless desktop computer, an intro to HardenedBSD, and DragonFlyBSD getting some SMP improvements.
Trump announces the United States withdraw from the “Iran Nuke Deal”. We’ll explain the historical context, the ramifications from the pullout, and where this all leads.
Plus Trump’s lawyer gets tapped, Bolton goes berserk, and the CIA has a new face.
Chris ends a multi-year experiment with Fedora on the server, and shares his surprising results. Chrome OS is officially getting full-fledged Linux apps, and we ponder if this is truly a win for Linux.
Last week we broke the news to you that rumer has it Google is making Linux apps for the desktop a reality on Chromebooks. This week Keith Myers joins us and tells us what the experience on a Google Pixelbook is like. He explains what it took to get native Linux apps on his Chromebook and give us an update from Google IO and what you can expect on your Chromebook. This is a loaded hour with a lot of calls and very good questions!
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
The fight for Net Neutrality is back on, we round up the news from Build 2018, and get impressed by Tesla's barnacle purge.
Plus we have a question for you, and more!
Focusing on a niche can catastrophically backfire when the market shifts, and Mike goes into full reviewer mode this week.
Plus fresh out of Build the guys share the initial impressions of Microsoft’s big event, discuss their growing fear of Amazon, and resources for learning .Net Core.
Fedora fights for the user, Ubuntu Flavors draw the line, and why we're worried small distributions are starting to collapse.
Pocket Casts gets acquired, and we worry about "big podcasting" pushing for more data collection, Cambridge Analytical is filing for bankruptcy, and Amazon is playing hardball.
Plus a brilliant Kickstarter of the week, some picks of the week, and more.
Mike and Chris have a workflow hangover, hit rock bottom, and bounce back with a new understanding.
Plus the creeping revelation that our future is embed.
Arcan and OpenBSD, running OpenBSD 6.3 on RPI 3, why C is not a low-level language, HardenedBSD switching back to OpenSSL, how the Internet was almost broken, EuroBSDcon CfP is out, and the BSDCan 2018 schedule is available.
We catch up with Allan Jude and he shares stories of hunting network bottlenecks, memories of old firewalls, and some classic ZFS updates.
Plus the vulnerabilities found in Volkswagen cars, and the lengths a security research went to create the ultimate honeypot laptop.
Ubuntu and Fedora have new releases, and our early impressions are great. We’ll share the features that we think make these distros some of the best Linux desktop releases ever.
Plus some important community news, some Darktable tips for beginners, and some select clips from this year’s LinuxFest Northwest.
Ask Noah Show 63 | The Next Chromebooks
Google has everyone wondering, is what they're doing going to finally lead to the year of the Linux Desktop? Are we okay with Google being in charge with Linux on the desktop? 18.04 is out and we talk about our initial impressions. Simon Quigley the release manager for Lubuntu joins us this hour to break some exclusive Lubuntu news! As always your calls go to the front of the line.
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Phone Systems for Ask Noah provided by Voxtelesys
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Ask Noah Show 62 | Live From LFNW 2018
Yet again Jupiter Broadcasting broadcasts entirely on Linux! We bring you live coverage from the floor of Linuxfest Northwest. The broadcast is done on Linux, the interviews are done on Linux, we talk about Linux.
For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard!
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Windows 10 users are getting a big update, but we're a little unimpressed, the tragic story of Eric Lundgren, someone is trying to extort GrayShift, and scientist have buckets with living pig brains.
Also - how GEDmatch was helpful in busting the Golden State Killer.
Plus the new horrible truth we just learned about online dating... All live from LinuxFest Northwest with special guests!
The death of desktop apps has reached the next stage, but the long transition to WebAssembly is going to hurt, and why the crushing demand for good enough will force us all to live a life of "Progressive Webbie Things".
Ubuntu 18.04 is out and we round up the new features, the flavors, and our first takes. The Librem 5 learns a new trick, and Linux apps on Chrome OS looks like a much bigger deal than first suspected.
Plus what's great about GIMP's biggest release in six years, and more.
The memo’s are out, the interviews are in, and we've read the book. It’s our take on former FBI Director James Comey’s moral crusade.
Plus latest news the masters, some special guests, and a packed overtime!
We get the inside scope from the Ubuntu flavors prepping for the 18.04 release, and then we finally make good on a long running threat.
Plus the quiet shuttering of the Windows division inside Microsoft, and how they could help save Linux from Apple.
OpenBSD 6.3 and DragonflyBSD 5.2 are released, bug fix for disappearing files in OpenZFS on Linux (and only Linux), understanding the FreeBSD CPU scheduler, NetBSD on RPI3, thoughts on being a committer for 20 years, and 5 reasons to use FreeBSD in 2018.
Hardware flaws that can’t be solved, human errors at the physical layer, and spoofing cellular networks with a $5 dongle.
Ask Noah Show 60 | This Guy Hates Encryption
James Comey says American's don't need encryption the government can't override. In an age of terrorism should a segment of the population be allowed to exist beyond the reach of law? We get Chris Fisher's take on this as well as your calls on this weeks episode!
James Comey, Encryption, FBI, Cloud Security, VPN, NSA, CIA, altispeed, ask questions, best desktop os, best distro, best server os, call in show, getting started, linux, linux, linux questions, noah chelliah, podcast, privacy, production, questions, security, server distro, starting distro, talk radio, voxtelesys
For links to the articles and material referenced in this week's episode check out this week's page from o our podcast dashboard!
This Episode's Podcast Dashboard
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Google suffers from the Telegram ban, Valve is back in the business of making games, and Amazon has a top secret robot.
Plus the puzzle that was hidden in Windows years ago, and a new project that aims to be a Wikipedia for Terms of Service agreements.
Trisquel has a new release, and Chris tries out the new ReactOS. Plus our thoughts on Microsoft announcing their own Linux, the German government switching to NextCloud, and the fix is in for Gnome Shell's infamous "Memory leak".
Ask Noah Show 60 | Microsoft Linux
It's hard to believe but Microsoft is shipping the Linux kernel. We give you the details of how and why this week on the show.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Telegram’s battle of the ban continues, and AWS and Google Cloud become targets. Reddit is growing like crazy, which worries us a bit, and Microsoft loses their multi-year legal fight with the US Government.
And why autonomous boats might be here much sooner than self-driving cars.
TrueOS Stable 18.03 released, a look at F-stack, the secret to an open source business model, intro to jails and jail networking, FreeBSD Foundation March update, and the ipsec Errata.
In defiance of logic and International Law the US and its gang of moral crusaders have broken the law to teach Assad a lesson about breaking the law.
It’s a special edition of Unfilter about the current state of the war in Syria.
We cover all the bases this week in our TechSNAP introduction to server monitoring.
Why you should monitor, what you should monitor, the basics of Nagios, the biggest drawbacks of Nagios, its alternatives, and our lessons learned from the trenches.
Azure Sphere is Microsoft making silicon as a service, with Linux at its core. We’ve chatted with the folks behind Azure Sphere and breakdown this huge announcement.
Plus a bunch of community news, a string of app picks, and maybe even a concerned rant.
This week Noah goes on location to the University of North Dakota as a guest speaker for the communications department. He gives students his crash course on how to get a podcast up and running leveraging Linux and Open Source.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Tesla blames robots for their recent setbacks, Russia starts to block Telegram, Pandora discovers Podcasts, and a new design is coming to Gmail.
Plus the fascinating audio isolation AI Google's developed, and leaked memos!
We revisit IBM’s total dominance over the PC industry in the early 80s, how they got there, and how we can apply the IBM model to current events.
Plus a batch of your feedback, and a defeated discussion about the state of all desktop operating systems and hardware kicked off by Apple’s taking our beer away.
ZFS' first data loss bug comers to Linux, GameMode could have some serious potential, and Mozilla thinks the Internet is in bad shape.
Plus new research shows Android OEMs are lying about their patch levels, Lineage goes hard on "Play certification" and we have thoughts on all of it.
Getting started or getting ahead in IT is a moving target, so we’ve crowd sourced some of the best tips and advice to help.
Plus a tricky use of zero-width characters to catch a leaker, a breakdown of the new BranchScope attack, and a full post-mortem of the recent Travis CI outage.
Second round of ZFS improvements in FreeBSD, Postgres finds that non-FreeBSD/non-Illumos systems are corrupting data, interview with Kevin Bowling, BSDCan list of talks, and cryptographic right answers.
War in Syria seems just hours away, with Trump calling out Putin and Assad, the warships moving into position, and the hawks circling.
Plus the fallout from Trump’s lawyer getting raided by the FBI, Zuckerberg going to Washington and we share the highlights, an overtime packed with follow up stories, and much more!
We have some Plasma problems this week, but we’re sticking with it and still putting it into production in our most ambitious event yet.
But we start with a bunch of important community news, including what looks like ZFS on Linux’s first major bug, the future of Elementary OS apps, and a proposal to revamp Ubuntu’s betas.
This week on the Ask Noah Show we ask the question you've been asking us all week - Has Apple given up on desktop and laptop users? Plus, Brad joins us to ask Noah about how to get a small business of the ground, and how Altispeed has grown to what it is today.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
What we can learn from Mike’s first business failing in 2014? Mike shares some necessary balance to today’s celebrity CEO “stories”. And we discuss how having naive expectations, avoiding conflict, and a lack of focus can sneak up on you and hurt your business.
Also some tips on how to change your expectations, embrace conflict, and maybe even be a bit ruthless.
The Linux kernel gets a spring cleaning, things are going well for RISC-V, and Linux-Libre is clearly prioritizing freedom over security with their recent update.
Steam Machines were pronounced dead and then alive this week, we'll try and clear things up, and Mozilla has a new project.
It’s a TechSNAP introduction to Terraform, a tool for building, changing, and versioning infrastructure safely and efficiently.
Plus a recent spat of data leaks suggest a common theme, Microsoft’s self inflicted Total Meltdown flaw, and playing around with DNS Rebinding attacks for fun.
Under Armour Inc (UAA.N) (UA.N) said on Thursday that data from some 150 million MyFitnessPal diet and fitness app accounts was compromised in February, in one of the biggest hacks in history, sending shares of the athletic apparel maker down 3 percent in after-hours trade.
The data available in plain text from Panera’s site appeared to include records for any customer who has signed up for an account to order food online via panerabread.com.
tl;dr: In August 2017, I reported a vulnerability to Panera Bread that allowed the full name, home address, email address, food/dietary preferences, username, phone number, birthday and last four digits of a saved credit card to be accessed in bulk for any user that had ever signed up for an account. This includes my own personal data! Despite an explicit acknowledgement of the issue and a promise to fix it, Panera Bread sat on the vulnerability and, as far as I can tell, did nothing about it for eight months. When Brian Krebs publicly broke the news, other news outlets emphasized the usual “We take your security very seriously, security is a top priority for us” prepared statement from Panera Bread. Worse still, the vulnerability was not fixed at all — which means the company either misrepresented its actual security posture to the media to save face or was not competent enough to determine this fact for themselves. This post establishes a canonical timeline so subsequent reporting doesn’t get confused.
Meet the Windows 7 Meltdown patch from January. It stopped Meltdown but opened up a vulnerability way worse ... It allowed any process to read the complete memory contents at gigabytes per second, oh - it was possible to write to arbitrary memory as well.
HashiCorp Terraform enables you to safely and predictably create, change, and improve infrastructure. It is an open source tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Compared to the JSON or YAML files used by CloudFormation, Terraform HCL is both a more powerful and a more readable language. Here is a small example of a snippet that defines a subnet for the application servers. As you can see, the Terraform code is a quarter of the size, more readable, and easier to understand.
Russia has launched a diplomatic counter-offensive, demanding that its scientists be involved in investigating the reported poisoning of former spies, Trump plans to send the Coast Guard to the border, and that’s just the highlights.
We also talk about PBS’s “exclusive” look at the US’s “Cyber Defense”, discuss the latest in the Muller investigation, and end it all on a great high-note.
New ZFS features landing in FreeBSD, MAP_STACK for OpenBSD, how to write safer C code with Clang’s address sanitizer, Michael W. Lucas on sponsor gifts, TCP blackbox recorder, and Dell disk system hacking.
It's been one year of non-stop unapologetic Linux content! We meet up with fans in Minneapolis for a live show and tell you about our exciting plans as we kick of year 2 of the Ask Noah Show.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
Richard Stallman has some practical steps society could take to roll back the rampant and expanding invasion of our privacy. But his suggestions leave us asking some larger questions.
Plus the latest on the march to Juno, some fun app picks, a quick look at Qubes OS 4.0, community news, and more.
In a move that's not exactly surprising, Valve has quietly removed the Steam Machine section from Steam.
For reasons unknown, Apple is looking to hire Linux kernel developers in both Texas and California.
Snapd 2.32.2 is now available to download and should be coming soon to the stable software repositories of your favorite, Snappy-enabled GNU/Linux distribution. What's exciting about this release is that it enables Snappy the use Nvidia's most recent proprietary graphics drivers in Snap apps on Ubuntu 18.04 LTS (Bionic Beaver) and similar operating systems.
A small utility to convert Unix lsof output to a graph showing FIFO and UNIX interprocess communication.
TING
The architectures which will become deprecated are Blackfin, CRIS, FRV, M32R, Metag, MN10300, Score and Tile. Although not being deprecated, the Unicore32 and Hexagon architectures are also at risk but their maintainers are working on improving the situation so their support can be continued.
You get more features, and you get more features, and you get more features!
DigitalOcean
Version 4.0 includes several fundamental improvements to the security and functionality of Qubes OS:
scrypt
for stronger key
derivation and enforced encryptionOragono is a modern, experimental IRC server written in Go. It's designed to be simple to setup and use, and it includes features such as UTF-8 nicks / channel names, client accounts with SASL, and other assorted IRCv3 support.
Linux Academy
Linux Academy | Linux and AWS Online Training
The surveillance imposed on us today far exceeds that of the Soviet Union. For freedom and democracy’s sake, we need to eliminate most of it. There are so many ways to use data to hurt people that the only safe database is the one that was never collected. Thus, instead of the EU’s approach of mainly regulating how personal data may be used (in its General Data Protection Regulation or GDPR), I propose a law to stop systems from collecting personal data.
What is focus for the software industry? And is focus always a good thing, or can it lead to tunnel vision? Plus we spend a bit more time saluting Sun Microsystems for their contribution to our industry.
Plus some feedback, a bit of weekly Hoopla, and more!
The two sides of the pond meet this week when Joe Ressington joins Chris and Noah to discuss why Chris only has 26 years left to live, some hard questions about gun ownership, and Cloudflare launching a new DNS service…
But something doesn’t smell right.. Maybe it’s the important animal flatulence facts, and why we think the Kodi project might be facing a crisis.
ChromeOS comes to tablets, and we ponder why... Google removes Kodi from autocomplete results in an apparent bow to pressure, Firefox combats Facebook tracking, and Oracle vs Google is back for their biggest fight yet.
OpenBSD firewalling Windows 10, NetBSD’s return to ptrace, TCP Alternative Backoff, the BSD Poetic license, and AsiaBSDcon 2018 videos available.
Sun Microsystems was fertile ground for what might be the largest developer upset in ten years. We look back at some of the real innovations Sun brought us, discuss the latest developments in Oracle's suit against Google, and the massive shift Microsoft announced today.
This is one of those episodes we’ll be referencing back to for quite a while.
Google’s use of Java wasn’t ‘fair use,’ appeals court rules
"Techlash" is having an impact. With growing awareness of threats to privacy, access and innovation, as well as increasing suspicion of super-conglomerates in the areas of search, content, e-commerce and social media, we're finally seeing pervasive pessimism yield some change. But there's still a long way to go.
Snapchat is building a way for people to use their Snapchat account to connect with third-party apps. The idea, in theory, would let Snapchat users grant outside companies access to their Snapchat data to help personalize other services.
Microsoft is carving up Myerson's Windows and Devices Group (WDG), moving some pieces of it into one of two new engineering units announced this morning.
Embarrassing flaws get exposed when the logs get reviewed, Atlanta city government gets shut down by Ransomware, and the cleverest little Android malware you’ll ever meet.
Plus we go from a hacked client to a Zero-day discovery, answer some questions, ask a few, and more!
It may not be noticeable at first (apart from the highlighting I’ve added of course), but the text “frogger13” is the password I used on a newly created APFS formatted FileVault Encrypted USB drive with the volume name “SEKRET”. (The new class images have a WarGames theme, hence the shout-outs to classic video games!)
Giovanni Collazo said a quick query on the Shodan search engine returned almost 2,300 Internet-exposed servers running etcd, a type of database that computing clusters and other types of networks use to store and distribute passwords and configuration settings needed by various servers and applications. etcd comes with a programming interface that responds to simple queries that by default return administrative login credentials without first requiring authentication. The passwords, encryption keys, and other forms of credentials are used to access MySQL and PostgreSQL databases, content management systems, and other types of production servers.
FBI called in as some city services are interrupted, employees told to turn off PCs.
The malware was sneaked onto the Google Play store disguised as seven different apps -- six QR readers and one 'smart compass' -- and bypassed security checks by hiding its true intent with a combination of clever coding and delaying its initial burst of malicious activity.
We will discover in this article how a recent incident response to a customer was handled and how we discovered an otherwise publicly unknown vulnerability that was never reported by the manufacturer which left thousands of users unprotected from this security flaw.
Fox pundit, world renowned war-hawk, and now Trump’s National Security Advisor. We take a look at John Bolton, and the bomb first ask questions second kind of policy he advocates.
Plus Stormy Daniels goes on 60 Minutes, we’ve got the highlights, some discussion, and questions about the bigger picture.
Then it’s a celebrity high-note, and a packed Overtime.
A new version of Slax is out this week, and they might just be onto something really unique. We take this Debian powered, Fluxbox running, net bootin distro for a test drive.
Plus Google moves to block GApps on “uncertified devices”, Red Hat turns 25, a new Wayland contender, a few app picks, and much more.
Tech literally has a body count! As we tell you what happened and how we dive into the potentially deadly implications of automation. Have you ever wanted to manage digital signage, using linux, and on a budget? We have the solution for you. Your calls go to the front of the line as always! We wrap by spilling our plans for next week's meetup for our 1 year anniversary.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
The push for encryption backdoors is back on, why Valve has 1,700 CPU's working non-stop, and the big Netflix move Apple is about to pull.
Then we'll cover a study that shows just one percent of Reddit users causes 75 percent of the drama, follow up on some topics, and discuss our thoughts for Season 2.
We set off to SCaLE this year with a goal in mind, but quickly realized the trip and this season of Tech Talk Today, we're going to be about something entirely different.
webOS is back, and the Linux Foundation has a Hypervisor for your car. Plus some of GNOME's performance issues, Firefox changes, and the hidden files in Bitcoin's blockchain.
Facebook gets punched in the face all week long, Amazon has drones that can smell fear, Telegram is ordered to hand over the keys, and some crazy folk want to make ketchup slices.
Plus the huge space station thats falling to earth, we talk a little GDPR, and own up to the big mistake Chris made.
Looking at Lumina Desktop 2.0, 2 months of KPTI development in SmartOS, OpenBSD email service, an interview with Ryan Zezeski, NomadBSD released & John Carmack's programming retreat with OpenBSD.
We cut through the noise and explain in clear terms what’s really been discovered. The botched disclosure of flaws in AMD products has overshadowed the technical details of the vulnerabilities, and we aim to fix that..
Plus another DNS Rebinding attack is in the wild and stealing Ethereum, Microsoft opens up a new bug bounty program, Expedia gets hacked, and we perform a TechSNAP checkup.
The twisted way that data about you and your family is used to manipulate the way you feel about hot button topics gets exposed when a Cambridge Analytica whistleblower reveals all.
Plus Trump’s had a busy week, the high-note is quick, and the Overtime is packed!
This week on the show we bring you the industry experts to teach you more than you ever wanted to know about Chef. Learn how to automate your entire system. Plus uber's self driving car kills someone & we give you our take, all that and more in this weeks episode.
Find all the resources for this show on the Ask Noah Dashboard
Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show!
Contact Noah
asknoah [at] jupiterbroadcasting.com
-- Twitter --
We’re playing just one interview from SCaLE this year, tons of community news, and two handy app picks.
Plus webOS returns, some fundamental Linux plumping upgrades, and Private Internet Access goes Open Source.
LG in cooperation with South Korea's NIPA government agency are working on making webOS suitable as a more open platform with open connectivity. They are still looking to commercialize it as an open-source platform, LG announced this morning.
GNOME 3.28 is the latest version of GNOME 3, and is the result of 6 months’ hard work by the GNOME community. It contains major new features, as well as many smaller improvements and bug fixes. In total, the release incorporates 25832 changes, made by approximately 838 contributors.
TING
The GStreamer team is proud to announce a new major feature release of your favourite cross-platform multimedia framework!
Performance enhancements to the Firefox Home page mean it should now load quicker than before. The speed up comes by leveraging cache files.
Off-Main-Thread Painting - https://t.co/3MllKmqOaO
— Adam Brodziak (@AdamBrodziak) March 19, 2018
On Linux it has to be enabled manually: set “layers.omtp.enabled” to true.
Today marks the start of an exciting shift over here at Private Internet Access. As long-time supporters of the Free and Open Source Software community, we have started the process of open sourcing our software, and over the next six months we will be releasing the source code for all our client-side applications, as well as libraries and extensions.
DigitalOcean
OpenSnitch is a GNU/Linux port of the Little Snitch application firewall.
An open source Spotify client running as a UNIX daemon. Spotifyd streams music just like the official client, but is more lightweight, and supports more platforms. Spotifyd also supports the Spotify Connect protocol, which makes it show up as a device that can be controlled from the official clients.
Spotifyd requires a Spotify Premium account.
Linux Academy
Linux Academy | Linux and AWS Online Training
VP, Product & Technical Community at @datadoghq, recovering SysAdmin, SCALE Conference Chair, and other FL/OSS fun.
Cambridge Analytica's use of Facebook data was a 'grossly unethical experiment' coming to light thanks to a whistleblower. We'll play his story, and discuss what they did with the data.
Plus Google, Target, and Walmart's unholy alliance to battle Amazon and Twitter's Cryptocoin crackdown.
More weekend fun pic.twitter.com/IOUXAwRJBx
— Michael Dominick (@dominucco) March 18, 2018
GameOn is built-on top of AWS and designed to work cross platform; as long as the system your game is running on can make API calls — be it mobile, console, or a computer — it should all work just fine.
Coder Shirt/Hoodie: https://t.co/igeyKHGlpd
— Coder Radio (@CoderRadioShow) March 19, 2018
Coder Coasters: https://t.co/8o6Y6sy2C3
Coder Poster: https://t.co/7L19aSs07Y pic.twitter.com/vqz9quEhG4
En liten tjänst av I'm With Friends. Finns även på engelska.