129 lines
10 KiB
HTML
129 lines
10 KiB
HTML
<header>
|
|
<h2 id="title"><a href="https://webzine.puffy.cafe"><span id="open">Open</span><span id="bsd">BSD</span> Webzine</a></h2>
|
|
<div id="banner">
|
|
<p>ISSUE #__ISSUE__</p>
|
|
<p><time datetime="__DATETIME__">__HUMAN_DATE__</time></p>
|
|
</div>
|
|
</header>
|
|
<main>
|
|
<article id="headlines">
|
|
<h2>TL;DR</h2>
|
|
<ul>
|
|
<li>support for xonly code</li>
|
|
<li>new security innovation pinsyscall(2)</li>
|
|
<li>sshd dynamic relinking</li>
|
|
<li>full disk encryption handled by the installer</li>
|
|
<li>OpenBSD 7.3 will be out soon</li>
|
|
</ul>
|
|
</article>
|
|
|
|
<article id="artwork">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Artworks of the moment</h2>
|
|
<figure>
|
|
<a href="images/artwork-issue13.png">
|
|
<picture>
|
|
<img src="images/artwork-issue13.png"
|
|
alt="A floating Puffy holding a paper in hand is asked by a girl «A new issue?! Will you read it to me?»." />
|
|
</picture>
|
|
</a>
|
|
<figcaption>A floating Puffy holding a paper in hand is asked by a girl «A new issue?! Will you read it to me?».</figcaption>
|
|
</figure>
|
|
</article>
|
|
|
|
<article id="current">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Recent -current changes</h2>
|
|
<ul>
|
|
<li><a href="https://undeadly.org/cgi?action=article;sid=20230130061324" class="permalink">Execute-only status report</a> (also called xonly)</li>
|
|
<li>Explanations about the <a href="https://lwn.net/Articles/915640/" class="permalink">new system call mimmutable()</a></li>
|
|
<li>In order to tighten the pledge done in ssh, the escape command line has been disabled by default in this <a href="https://marc.info/?l=openbsd-cvs&m=166959904705078&w=2" class="permalink">commit</a></li>
|
|
<li><a href="https://marc.info/?l=openbsd-announce&m=166992877809710&w=2" class="permalink">OpenIKED 7.2</a> has been released</li>
|
|
<li>Interfaces can be <a href="https://undeadly.org/cgi?action=article;sid=20221206062638" class="permalink">configured by MAC address</a> using hostname.MAC instead of hostname.if</li>
|
|
<li>The installer now supports <a href="https://marc.info/?l=openbsd-cvs&m=167821018806244&w=2" class="permalink">encrypted disk options</a></li>
|
|
</ul>
|
|
|
|
<h2>Interesting new packages</h2>
|
|
<ul>
|
|
<li>The <a href="https://marc.info/?l=openbsd-ports-cvs&m=167657394218844&w=2" class="permalink">Nix</a> package manager (it doesn't do much at the moment)</li>
|
|
<li><a href="https://git.sdf.org/bch/xmem" class="permalink">xmem</a>, graphical application that displays memory and swap usage.</li>
|
|
<li><a href="https://git.sr.ht/~fkooman/vpn-user-portal" class="permalink">eduvpn</a>, user and admin portal for Let's Connect! and eduVPN</li>
|
|
<li><a href="https://fennel-lang.org/" class="permalink">fennel</a>, Lisp dialect that runs on Lua</li>
|
|
<li><a href="https://github.com/skeeto/endlessh" class="permalink">endlessh</a>, SSH tarpit that slowly sends an endless banner</li>
|
|
<li><a href="https://github.com/younix/lchat" class="permalink">lchat</a>, line oriented chat frontend for ii</li>
|
|
<li><a href="https://www.nerdfonts.com/" class="permalink">nerds-fonts</a>, Iconic font aggregator, collection, and patcher</li>
|
|
<li><a href="https://lab.abiscuola.org/rssgoemail/" class="permalink">rssgoemail</a>, send RSS/Atom/Gemini feeds to email</li>
|
|
<li><a href="https://labplot.kde.org/" class="permalink">LabPlot</a>, data visualization and analysis software</li>
|
|
<li><a href="https://ntfy.sh/" class="permalink">ntfy</a>, send push notifications to your phone or desktop</li>
|
|
<li><a href="https://calligra.org/plan/" class="permalink">calligraplan</a>, KDE Calligra project management application</li>
|
|
<li><a href="https://github.com/phillbush/xnotify" class="permalink">xnotify</a>, display notifications read from standard input</li>
|
|
<li><a href="https://pkg.go.dev/golang.org/x/tools/gopls" class="permalink">gopls</a>, official Go LSP</li>
|
|
<li><a href="https://github.com/rustic-rs/rustic" class="permalink">rustic</a>, fast, encrypted, deduplicated backups (not production ready)</li>
|
|
<li><a href="https://tratt.net/laurie/src/try_repeat/" class="permalink">try_repeat</a>, run a command 'n' times exiting early if it fails</li>
|
|
<li><a href="https://github.com/temisu/ancient" class="permalink">ancient</a>, decompression routines for ancient formats</li>
|
|
<li><a href="https://openports.pl/path/security/keycloak" class="permalink">keycloak</a>, Identity and Access Management solution</li>
|
|
</ul>
|
|
</article>
|
|
|
|
<article id="tips">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Shell tips</h2>
|
|
<p>I suppose most of OpenBSD users know about the command
|
|
<code>top</code>, but do you know about <code>systat</code>? This
|
|
command gives a lot of information about the system, and is a
|
|
terminal user interface (TUI) that allows changing views for different
|
|
information. Running it as root will give you more information you may not
|
|
have as a simple user, like PF queueing or PF realtime statistics. It's
|
|
a must-have for any OpenBSD administrator that would like to know more
|
|
about the current system status.</p>
|
|
</article>
|
|
|
|
<article id="links">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Going further</h2>
|
|
<ul>
|
|
<li>Undeadly is publishing an RSS feed of syspatches <a href="https://undeadly.org/errata/errata.rss" class="permalink">at this address</a></li>
|
|
<li>Buy a branded deck of <a href="https://openbsd.amsterdam/cards.html" class="permalink">UNIX pipe game</a> by openbsd.amsterdam</li>
|
|
<li>Fuzzing OpenBSD ping(8), and <a href="https://tlakh.xyz/fuzzing-ping.html" class="permalink">solve a 24 years old bug</a></li>
|
|
<li>A guide <a href="https://astro-gr.org/openbsd-full-encryption-with-dual-boot/" class="permalink">explaining a dual boot setup</a> with full disk encryption</li>
|
|
<li>Testing Rust and Modula-2 in GCC, <a href="https://briancallahan.net/blog/20221219.html" class="permalink">do they work on OpenBSD?</a></li>
|
|
<li><a href="https://www.sizeofvoid.org/posts/2022-26-12-openbsd-kde-status-report-2022/" class="permalink">KDE status report</a></li>
|
|
<li>A guide explaining how to <a href="https://xn--gckvb8fzb.com/run-your-own-lastpass-on-hardened-openbsd/" class="permalink">setup your own lastpass on OpenBSD</a></li>
|
|
<li>Trusting SSH server using DNS: <a href="https://sha256.net/VerifyHostKeyDNS.html" class="permalink">VerifyHostKeyDNS … or how I enroll new hosts into my infrastructure.</a></li>
|
|
<li>A practical guide of <a href="https://rob-turner.net/post/vx-lan/" class="permalink">VXLAN over Wireguard</a></li>
|
|
<li>How to make <a href="https://research.exoticsilicon.com/articles/console_screendumps" class="permalink">console screendump</a>, this includes a long and detailled explanation</li>
|
|
<li><a href="https://sha256.net/llgal.html" class="permalink">Static photo albums with llgal</a> on OpenBSD</li>
|
|
<li>A deep study of the <a href="https://research.exoticsilicon.com/articles/eject_command_hacking" class="permalink">eject command</a></li>
|
|
<li>A guide explaining <a href="https://x61.sh/log/2023/02/20230217T112354-nextcloud_openbsd.html" class="permalink">how to install and configure nextcloud</a> on OpenBSD</li>
|
|
<li><a href="https://sha256.net/privsep.html" class="permalink">Privilege drop, privilege separation, and restricted-service operating mode in OpenBSD</a></li>
|
|
<li>Some history lesson about the project, <a href="https://undeadly.org/cgi?action=article;sid=20230226065006" class="permalink">OpenBSD in Canada</a></li>
|
|
<li>Some people do <a href="https://www.h-i-r.net/2023/02/running-kubernetes-cluster-with-openbsd.html" class="permalink">run Kubernetes cluster</a> on OpenBSD</li>
|
|
<li>Some ChatGPT poetry about OpenBSD <a href="https://nxdomain.no/~peter/chatgpt_poem_about_openbsd.txt" class="permalink">here</a> and <a href="https://nxdomain.no/~peter/chatgpt_on_ipv6_and_openbsd_poetry.html" class="permalink">there</a></li>
|
|
<li>The <a href="https://sha256.net/dynamic_host_configuration_please.html" class="permalink">dynamic host configuration</a> on OpenBSD explained (a MUST to read)</li>
|
|
<li>The famous guide <a href="https://si3t.ch/ah/en/" class="permalink">Host a server with OpenBSD</a> (very good reading if you are new to OpenBSD)</li>
|
|
<li>Explainations about <a href="https://palant.info/2023/03/08/converting-incoming-emails-on-the-fly-with-opensmtpd-filters/" class="permalink">OpenSMTPD filters on the fly</a></li>
|
|
<li>Some guide covering <a href="https://marcocetica.com/posts/wireguard_openbsd/" class="permalink">Wireguard and Unbound on OpenBSD</a></li>
|
|
<li><a href="https://mizik.eu/blog/is-openbsd-for-you/" class="permalink">Is OpenBSD for you?</a> A list of facts that may help you decide if OpenBSD is for you, or not.</li>
|
|
<li>A guide explaining <a href="https://www.tumfatig.net/2023/self-hosted-email-services-on-openbsd/" class="permalink">self-hosting emails</a> on OpenBSD</li>
|
|
</ul>
|
|
</article>
|
|
|
|
<article id="redaction">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Note from the editorial team</h2>
|
|
<p>
|
|
</p>
|
|
<h3>Note from Solene</h3>
|
|
<p>Still late as usual, I would like to elaborate more on this.
|
|
First, I never really figured a way to know when it's time to release an issue: I prefer waiting for a lot of material to put in, to make a beffy issue rather than scheduled issues without much content.
|
|
Second, writing the issue alone is taking time, usually a couple of hours to put everything together and proofread, and the way the webzine is done isn't helping much. The other Webzine I started for NixOS is much easier to maintain, but also lacks some soul as it's mostly generated from a template fed of links and titles, it suits NixOS style but not OpenBSD in my opinion.
|
|
Now I started a <a href="https://www.patreon.com/user?u=23274526" class="permalink">patreon</a>, I'll maintain the webzine more seriously.</p>
|
|
<p>In addition, I would like to congratulate the OpenBSD community for being so vibrant, with a deep culture of self-hosting and diversity. While writing this issue, I noticed most new ports were not GitHub projects, and that most links were about self-hosting services. Hurray! You are an awesome community to interact with.</p>
|
|
</article>
|
|
|
|
<article id="authors">
|
|
<div class="puffies" aria-hidden="true">🐡🐡🐡</div>
|
|
<h2>Authors</h2>
|
|
<p>Solène Rapenne. Artwork by Prahou. Many thanks to everyone involved and supportive of the idea</p>
|
|
</article>
|