If you feel like your #FreeBSD server is way to chatting box when nothing special happened recently to the server, have a look at this Introduction to FreeBSD’s Periodic System.

After writing

daily_show_success="NO"
weekly_show_success="NO"
monthly_show_success="NO"
security_show_success="NO"

into /etc/periodic.conf, it almost feels like FishLinux!

Minutes since a ZFS local snapshot saved a lot of time by avoiding a recover from backup: 0

#RunBSD #ZFS #OpenZFS #FreeBSD #IT #SysAdmin

bhyve inside a jail sounds like a stunt. It isn’t.

FreeBSD has supported it since 12.0, and it turns the hypervisor into one more manageable jail: delegated ZFS, VNET, vm-bhyve, devfs rules and all.

Here is my complete production setup, including the security caveats

https://blog.hofstede.it/bhyve-inside-a-jail-the-freebsd-feature-nobody-uses/

#FreeBSD #bhyve #Jails #Virtualization #DevOps #Unix

Of course I'm not doing what I'm supposed to be doing 😆
Thus the FreeBSD base install of yesterday has been blogged out 🥳
#freebsd #archlabs
https://thesaigoneer.bearblog.dev/freebsd-base-install-revisited/

Picking FreeBSD and Emacs has been great for my mental health, without exaggeration.

Fad chasing? FOMO? Cool tech?

I get to watch so much of it rise then fade away again, while continuing to use comfortable and powerful tools that I've shaped for my own use for over a decade (coming up on two decades for Emacs).

It's like being an elf in human society 😉

#freebsd #emacs

According to this list of FreeBSD Dev Summits I notice that "MeetBSD" events were held for like a decade and then stopped in 2018.

https://wiki.freebsd.org/DevSummit

Coincidentally, in 2018 I attended MeetBSD and spending a few days with those developers inspired me to publish Bastille. I have not been able to attend any BSD events since.

It looks like the only remaining US-based FreeBSD event this year is the Vendor Summit in November, which I'm considering.

#FreeBSD #Summit #BastilleBSD

Learn more about our companion project: Rocinante

> Rocinante is lightweight configuration management for FreeBSD hosts. From the team that brought you BastilleBSD.

https://bastillebsd.org/projects/rocinante/

#FreeBSD #BastilleBSD

The latest round of #FreeBSD patching allowed me to update sysutils/mkjail - it is now fully pkgbase aware (in the 62-pkgbase branch).

Next stage: make a FreeBSD package with this new code.

Not sure if that will be a new package or a flavor.

re: https://github.com/mkjail/mkjail/issues/62

freebsd-update fetch install

#FreeBSD #PatchDay

When you're ready to level up your FreeBSD and Bastille skills, let me help.

I've updated and improved my training program for the second half of 2026.

Join our next cohort starting in September!

My training covers FreeBSD from installation to hardened system including: ZFS, Jails, IP4/IP6 networking, dtrace, best practices, system upgrades, and more.

https://bastillebsd.org/services/training/

Visit the website or email freebsd@techliterate.co for course details.

#FreeBSD #SysAdmin #BastilleBSD #Training

Me: Why is this page taking so long to load?

Oh!

[12:14 dvl-nginx01 dvl ~/www] % w
12:14PM up 20 days, 21:10, 1 user, load averages: 168.40, 150.46, 97.41
USER TTY FROM LOGIN@ IDLE WHAT
dvl pts/0 pro07.startpoint.vpn.unixathome.org 11:26AM - w

That's the poudriere build, running in another jail.

#FreeBSD

FreeBSD Foundation Lunch & Learn: Transitioning the FreeBSD Vulnerability Database from VuXML to OSV

Join Tuukka Pasanen for our next Lunch & Learn as he explores the work underway to transition the FreeBSD Vulnerability Database from VuXML to OSV, a widely used vulnerability format that officially supports FreeBSD in its schema.

📅 Wednesday, September 2 | 11:00 AM CDT / 16:00 UTC
Speaker: Tuukka Pasanen | FreeBSD Foundation Lunch & Learn

YouTube Live Link:
https://www.youtube.com/live/is5SnmHuTu0?si=SsDKy5jPxqZcB_8G

#FreeBSD

:Authenticity incoming:

One thing that isn't always obvious about open source projects is how they keep going year after year.

I've worn a lot of hats in the eight years maintaining this project. In today's economy, I'm back to my roots teaching what I know best: tech.

I'll keep these posts to a minimum here, but for those interested in learning more tech regularly, you can follow my personal account here:

@chris

#BastilleBSD #FreeBSD #Python #InfoSec #Learning #training #cybersecurity

Alt...

[5] Draw Me A Pixel > @drawmeapixel.com This isn't going to end well WE ARE — HERE ae % ( § & \ — Lin Li SEs SOMETHING w E $9 T= HAPPENING IN NES ofl] THE WEB S = Be LEFT-PAD \! 0 oT \GROWDSTRIKE JY %® il (BJ PIN — TO] T\ aA 1) RUST DEVS VS wl) a Hg Ey : DOING THEIR Sm) 8 \ oul me, \ © DOING 2 -. \ 0 aws OPENSOURCE as TT I< oeveLopess 7 Fr —— i — -. DEVELOPERS WRITING DYNAMIC ARRAYS wm } (10) Nov 20, 2025, 4:38 PM Everybody can reply 2 reposts 19 likes 2 S02 O19 na

BastilleBSD now has a community on Reddit.

If you're a Reddit user feel free to join and share Bastille related posts, questions, tips, tricks, etc.

https://www.reddit.com/r/BastilleBSD/

#BastilleBSD #FreeBSD #Reddit

Manpage Monday: bastille create

One command creates and starts a jail:

A thick jail with a static MAC and start priority 10
> bastille create -TM -p 10 myjail 15.1-RELEASE 10.23.23.1

A VNET jail with boot off and a custom gateway
> bastille create -V --no-boot -g 10.1.1.1 web 15.1-RELEASE 10.1.1.4/24 vtnet0

Thick, thin, clone, empty, VNET, even Linux. All securely isolated in a FreeBSD jail.

See `man bastille-create` for more details.

#BastilleBSD #FreeBSD #VNET #ManpageMonday

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟴/𝟮𝟰 (Valuable News - 2026/08/24) available.

https://vermaden.wordpress.com/2026/08/24/valuable-news-2026-08-24/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

We are counting down to the European *BSD event of the year! 😈⛳🐡

Big thank you to our partner sponsors:
- Skylime - https://www.skylime.net/
- Netzkommune - https://www.netzkommune.de/
- OpenBSD Amsterdam - https://openbsd.amsterdam/
- LAYLO - https://laylo.io/
- The Lightbird - https://thelightbird.com/

If you haven't secured your spot yet, now's the time!
https://tickets.eurobsdcon.org/

📅 You can check out the program at https://events.eurobsdcon.org/2026/schedule/

EuroBSDCon 2026 in Brussels, Belgium 🇧🇪
September 09-13, 2026

#EuroBSDCon #EuroBSDCon2026 #BSD #RUNBSD #FreeBSD #NetBSD #OpenBSD

Has anyone tried the new FreeBSD Desktop Installer? I've tried to get it to work multiple times but it just doesn't, for me, at least. After completing the install of Xfce, there's no display manager (I've tried both options) and there's no desktop. When I watch a video from the FreeBSD Foundation on the installer, it seems to work flawlessly for them. I think this is supposed to be built-in to 15.2 when released. Maybe I'll have better luck then?

#freebsd

I had been wanting to look into #wine gaming on #FreeBSD again. I had spotted a blog post: https://www.freebsdsoftware.org/blog/freebsd-gaming-2026.html

It seems inaccurate. For example, some of it suggests you install 'dxvk' with pkg install. Also references a "mesa-vulkan-intel" package.

Neither of those packages even exist!

Is https://www.freebsdsoftware.org some kind of AI slop factory of blog posts or something? The text looks very "AI" generated. Some truthful some utterly false.

*SIGH* This is the internet in 2026.

One good thing I noticed though: The latest wine-devel package: 11.5,1 does WOW64 support so no more of that pkg32.sh install --old nonsense to do.

Have yet to test anything but will do in the future.

Every single one of these is an AI bot.

Amazon, openAI, Claude, Peplexity.

Also, every single one of these requests is malicious, attempting to steal credentials, keys or configs.

Looks like it's time to make the firewall filters smarter.

#AI #malware #bot #FreeBSD #nginx

Alt...

8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /logs/error.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /sftp-config.json HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai. com/gptbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /appsettings.Development.json HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/a mazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /actuator/mappings HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai .com/gptbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /config/credentials.yml.enc HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.streamlit/secrets.toml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/a mazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.ssh/id_rsa HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthrop ic.com)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /appspec.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://opena i.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /api/v1/status/config HTTP/2.0" 404 42 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /vault.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.c om/bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /secrets.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /api/v1/status/flags HTTP/2.0" 404 42 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.sentryclirc HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /error.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /_ignition/health-check HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +ht tps://openai.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /gradle.properties HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https:// openai.com/bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /buildspec.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/default/view?panel=request HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexi tybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /info.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptb ot) " 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /elmah.axd HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai. com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /log/production.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazon bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/default/view?panel=log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /server-info HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.ssh/id_ed25519 HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /actuator/httptrace HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@ anthropic.com)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /elmah HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/ bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/pprof/ HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /app.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /server-status HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /__clockwork HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://opena i.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:52 -0600] "GET /storage/logs/lumen.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://o penai.com/gptbot)"

Happy Friday #FreeBSD

Why does one of my host want to drop FreeBSD-clibs-lib32 ?

https://forums.freebsd.org/threads/why-is-freebsd-clibs-lib32-subject-to-autoremove-on-this-host.103638/

#FreeBSD

You know the feeling when you know you've asked this question before and you've searched for the answer, but cannot find it?

That's me, right now.

I recall someone pointing to a #FreeBSD man page which explained these packages such as this:

FreeBSD-kerberos-lib-backup-libkrb5profile.so.122-20260717171225 ? orphaned: base/FreeBSD-kerberos-lib-backup-libkrb5profile.so.122

I seem to recall that during the upgrade process, certain base packages are retained, just in case.

Call for FreeBSD Talk Proposals – SCaLE 24x (Southern California Linux Expo)

SCaLE is back for 2027, and the Call for Presentations is now open!

If you've been working on something exciting in the FreeBSD world, this is a great opportunity to share your project, research, or real-world experience with one of the largest open-source communities in North America.

📅 Conference: April 1–4, 2027
🗓️ Proposal Deadline: November 1, 2026

Submit your proposal:
https://www.socallinuxexpo.org/scale/24x/cfp

#FreeBSD

Learn more about our security-and-automation focused FreeBSD distribution: BastilleBSD

A FreeBSD 15.1-RELEASE distribution with Bastille and Rocinante pre-installed, hardened defaults, and containers ready on first boot.

https://bastillebsd.org/projects/bastillebsd/

#BastilleBSD #FreeBSD

Does anyone have any recommendations for a good #wiki software to host in a #FreeBSD jail?

There was an article floating around 3-4 months ago about installing one in a FreeBSD jail but Mastodon is so horrendously bad at search, I can't find it.

Bonus if it doesn't use PHP and is lightweight!

Thanks muchly!!

This just in...

Want to silence a VID or CVE from pkg-audit on #FreeBSD?

"It basically adds a periodic job that runs prior to 405/410.pkg-audit,
which downloads the vulnerability database if needed and removes entries
as configured. No component/code of pkg is modified."

https://www.freshports.org/security/periodic-filter-vuxml

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟴/𝟭𝟳 (Valuable News - 2026/08/17) available.

https://vermaden.wordpress.com/2026/08/17/valuable-news-2026-08-17/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

You have a dual-stack #FreeBSD server. You already have IPv4 working fine on it. The jails are the classic/original NAT type (not VNET, no bridges or any of that stuff)

You want to add IPv6 to the jails. Your hosting provider gives you a /64.

What kind of IPs do you use on the jails?

Manpage Monday: bastille bootstrap

Every jail starts with a release. Bootstrap fetches and verifies one for you.

Grab 15.1-RELEASE
> bastille bootstrap -u 15.1-RELEASE

Prefer pkgbase? (FreeBSD 15+)
> bastille bootstrap -p 15.1-RELEASE

You can even bootstrap the official template collection:
> bastille bootstrap https://github.com/BastilleBSD/templates

See `man bastille-bootstrap` for more details.

#Bastille #FreeBSD #ManpageMonday