If you feel like your #FreeBSD server is way to chatting box when nothing special happened recently to the server, have a look at this Introduction to FreeBSD’s Periodic System.

After writing

daily_show_success="NO"
weekly_show_success="NO"
monthly_show_success="NO"
security_show_success="NO"

into /etc/periodic.conf, it almost feels like FishLinux!

Minutes since a ZFS local snapshot saved a lot of time by avoiding a recover from backup: 0

#RunBSD #ZFS #OpenZFS #FreeBSD #IT #SysAdmin

bhyve inside a jail sounds like a stunt. It isn’t.

FreeBSD has supported it since 12.0, and it turns the hypervisor into one more manageable jail: delegated ZFS, VNET, vm-bhyve, devfs rules and all.

Here is my complete production setup, including the security caveats

https://blog.hofstede.it/bhyve-inside-a-jail-the-freebsd-feature-nobody-uses/

#FreeBSD #bhyve #Jails #Virtualization #DevOps #Unix

Picking FreeBSD and Emacs has been great for my mental health, without exaggeration.

Fad chasing? FOMO? Cool tech?

I get to watch so much of it rise then fade away again, while continuing to use comfortable and powerful tools that I've shaped for my own use for over a decade (coming up on two decades for Emacs).

It's like being an elf in human society 😉

#freebsd #emacs

According to this list of FreeBSD Dev Summits I notice that "MeetBSD" events were held for like a decade and then stopped in 2018.

https://wiki.freebsd.org/DevSummit

Coincidentally, in 2018 I attended MeetBSD and spending a few days with those developers inspired me to publish Bastille. I have not been able to attend any BSD events since.

It looks like the only remaining US-based FreeBSD event this year is the Vendor Summit in November, which I'm considering.

#FreeBSD #Summit #BastilleBSD

Learn more about our companion project: Rocinante

> Rocinante is lightweight configuration management for FreeBSD hosts. From the team that brought you BastilleBSD.

https://bastillebsd.org/projects/rocinante/

#FreeBSD #BastilleBSD

The latest round of #FreeBSD patching allowed me to update sysutils/mkjail - it is now fully pkgbase aware (in the 62-pkgbase branch).

Next stage: make a FreeBSD package with this new code.

Not sure if that will be a new package or a flavor.

re: https://github.com/mkjail/mkjail/issues/62

freebsd-update fetch install

#FreeBSD #PatchDay

When you're ready to level up your FreeBSD and Bastille skills, let me help.

I've updated and improved my training program for the second half of 2026.

Join our next cohort starting in September!

My training covers FreeBSD from installation to hardened system including: ZFS, Jails, IP4/IP6 networking, dtrace, best practices, system upgrades, and more.

https://bastillebsd.org/services/training/

Visit the website or email freebsd@techliterate.co for course details.

#FreeBSD #SysAdmin #BastilleBSD #Training

Me: Why is this page taking so long to load?

Oh!

[12:14 dvl-nginx01 dvl ~/www] % w
12:14PM up 20 days, 21:10, 1 user, load averages: 168.40, 150.46, 97.41
USER TTY FROM LOGIN@ IDLE WHAT
dvl pts/0 pro07.startpoint.vpn.unixathome.org 11:26AM - w

That's the poudriere build, running in another jail.

#FreeBSD

FreeBSD Foundation Lunch & Learn: Transitioning the FreeBSD Vulnerability Database from VuXML to OSV

Join Tuukka Pasanen for our next Lunch & Learn as he explores the work underway to transition the FreeBSD Vulnerability Database from VuXML to OSV, a widely used vulnerability format that officially supports FreeBSD in its schema.

📅 Wednesday, September 2 | 11:00 AM CDT / 16:00 UTC
Speaker: Tuukka Pasanen | FreeBSD Foundation Lunch & Learn

YouTube Live Link:
https://www.youtube.com/live/is5SnmHuTu0?si=SsDKy5jPxqZcB_8G

#FreeBSD

:Authenticity incoming:

One thing that isn't always obvious about open source projects is how they keep going year after year.

I've worn a lot of hats in the eight years maintaining this project. In today's economy, I'm back to my roots teaching what I know best: tech.

I'll keep these posts to a minimum here, but for those interested in learning more tech regularly, you can follow my personal account here:

@chris

#BastilleBSD #FreeBSD #Python #InfoSec #Learning #training #cybersecurity

Alt...

[5] Draw Me A Pixel > @drawmeapixel.com This isn't going to end well WE ARE — HERE ae % ( § & \ — Lin Li SEs SOMETHING w E $9 T= HAPPENING IN NES ofl] THE WEB S = Be LEFT-PAD \! 0 oT \GROWDSTRIKE JY %® il (BJ PIN — TO] T\ aA 1) RUST DEVS VS wl) a Hg Ey : DOING THEIR Sm) 8 \ oul me, \ © DOING 2 -. \ 0 aws OPENSOURCE as TT I< oeveLopess 7 Fr —— i — -. DEVELOPERS WRITING DYNAMIC ARRAYS wm } (10) Nov 20, 2025, 4:38 PM Everybody can reply 2 reposts 19 likes 2 S02 O19 na

BastilleBSD now has a community on Reddit.

If you're a Reddit user feel free to join and share Bastille related posts, questions, tips, tricks, etc.

https://www.reddit.com/r/BastilleBSD/

#BastilleBSD #FreeBSD #Reddit

Manpage Monday: bastille create

One command creates and starts a jail:

A thick jail with a static MAC and start priority 10
> bastille create -TM -p 10 myjail 15.1-RELEASE 10.23.23.1

A VNET jail with boot off and a custom gateway
> bastille create -V --no-boot -g 10.1.1.1 web 15.1-RELEASE 10.1.1.4/24 vtnet0

Thick, thin, clone, empty, VNET, even Linux. All securely isolated in a FreeBSD jail.

See `man bastille-create` for more details.

#BastilleBSD #FreeBSD #VNET #ManpageMonday

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟴/𝟮𝟰 (Valuable News - 2026/08/24) available.

https://vermaden.wordpress.com/2026/08/24/valuable-news-2026-08-24/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

Has anyone tried the new FreeBSD Desktop Installer? I've tried to get it to work multiple times but it just doesn't, for me, at least. After completing the install of Xfce, there's no display manager (I've tried both options) and there's no desktop. When I watch a video from the FreeBSD Foundation on the installer, it seems to work flawlessly for them. I think this is supposed to be built-in to 15.2 when released. Maybe I'll have better luck then?

#freebsd

🚧 Achtung, Wartungsarbeiten 🚧

Heute Abend, ab ca 21:00 Uhr, werden wir mit einem größeren #Update für #FreeBSD und #Mastodon beginnen.

Die Downtime wird leider etwas länger sein. Habt etwas Geduld bitte.

🚧 Wartungsarbeiten beendet 🚧

#FreeBSD 14.4 und das #Mastodon Update auf Version 4.5.16 wurde eingespielt.
Das ist nun auch die Grundlage für Version 4.6/4.7. Das kommt als nächstes. Bald.

Admin müde. Admin schlafen zZZ

And another #FreeBSD host installed successfully. 😁 After I retired the Proxmox VE host at my parent's house, all services ran on the FreeBSD NAS, but now the secondary DNS jails run on their own thin client once more.
VNET with bridging didn't work, so I used Netgraph instead.

The realtek re0 driver received all of the ethernet frames addressed to the VNET jails, but the bridge0 interface (I tried the new VLAN aware bridging) didn't receive them from their parent interface.

Luckily, I can just create VLAN interfaces on re0 and use Netgraph together with Bastille to create netgrap bridges and netgraph eiface interfaces, which do not require driver support, as they directly hook into the network card's send/receive buffer.

Alt...

Screenshot of my secondary FreeBSD host for my parents network, running on a HP t620 thin client with 8 GiB of DDR3 and a 16 GB M.2 SATA SSD.

🚧 Achtung, Wartungsarbeiten 🚧

Heute Abend, ab ca 21:00 Uhr, werden wir mit einem größeren #Update für #FreeBSD und #Mastodon beginnen.

Die Downtime wird leider etwas länger sein. Habt etwas Geduld bitte.

I had been wanting to look into #wine gaming on #FreeBSD again. I had spotted a blog post: https://www.freebsdsoftware.org/blog/freebsd-gaming-2026.html

It seems inaccurate. For example, some of it suggests you install 'dxvk' with pkg install. Also references a "mesa-vulkan-intel" package.

Neither of those packages even exist!

Is https://www.freebsdsoftware.org some kind of AI slop factory of blog posts or something? The text looks very "AI" generated. Some truthful some utterly false.

*SIGH* This is the internet in 2026.

One good thing I noticed though: The latest wine-devel package: 11.5,1 does WOW64 support so no more of that pkg32.sh install --old nonsense to do.

Have yet to test anything but will do in the future.

Every single one of these is an AI bot.

Amazon, openAI, Claude, Peplexity.

Also, every single one of these requests is malicious, attempting to steal credentials, keys or configs.

Looks like it's time to make the firewall filters smarter.

#AI #malware #bot #FreeBSD #nginx

Alt...

8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /logs/error.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /sftp-config.json HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai. com/gptbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /appsettings.Development.json HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/a mazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /actuator/mappings HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai .com/gptbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /config/credentials.yml.enc HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.streamlit/secrets.toml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/a mazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.ssh/id_rsa HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthrop ic.com)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /appspec.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://opena i.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /api/v1/status/config HTTP/2.0" 404 42 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /vault.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.c om/bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /secrets.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /api/v1/status/flags HTTP/2.0" 404 42 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.sentryclirc HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /error.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /_ignition/health-check HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +ht tps://openai.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /gradle.properties HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https:// openai.com/bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /buildspec.yml HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/default/view?panel=request HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexi tybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /info.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptb ot) " 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /elmah.axd HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai. com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /log/production.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazon bot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/default/view?panel=log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /server-info HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /.ssh/id_ed25519 HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /actuator/httptrace HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@ anthropic.com)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /elmah HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/ bot" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /debug/pprof/ HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /app.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /server-status HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 8.228.1.53 - - [21/Aug/2026:10:53:33 -0600] "GET /__clockwork HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://opena i.com/bot" 8.228.1.53 - - [21/Aug/2026:10:53:52 -0600] "GET /storage/logs/lumen.log HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://o penai.com/gptbot)"

Happy Friday #FreeBSD

Why does one of my host want to drop FreeBSD-clibs-lib32 ?

https://forums.freebsd.org/threads/why-is-freebsd-clibs-lib32-subject-to-autoremove-on-this-host.103638/

#FreeBSD

You know the feeling when you know you've asked this question before and you've searched for the answer, but cannot find it?

That's me, right now.

I recall someone pointing to a #FreeBSD man page which explained these packages such as this:

FreeBSD-kerberos-lib-backup-libkrb5profile.so.122-20260717171225 ? orphaned: base/FreeBSD-kerberos-lib-backup-libkrb5profile.so.122

I seem to recall that during the upgrade process, certain base packages are retained, just in case.

Tried two games with the Linux port under Ghostbsd.

- Gladius: relics of war, caused a crash of the entire session and I got kicked to the login manager...
Great.

https://store.steampowered.com/app/489630/Warhammer_40000_Gladius__Relics_of_War/

#bsd #freebsd #ghostbsd #pcgaming

- Legend of Keepers: career of a dungeon master, is deceptively plain 2d game that doesn't sounds intensive to give problems, but it is an Unity game.
And it runs really poorly, you have like 1-2 FPS at best under compatibility layer.
Same as Stellaris, the sound is fine, and also the underlying engine runs without breaking; are the graphic libraries that are too slow to make it unusable.

https://store.steampowered.com/app/978520/Legend_of_Keepers_Career_of_a_Dungeon_Manager/

#bsd #freebsd #ghostbsd #pcgaming

These tests however shows a "reassuring" thing.
The real weakness in the compatibility layer seems lie mostly in the graphic libraries. I had met two cases where the program crashes, one is Gladius and the other I'm going to write about another time, and for Gladius I think could be tracked again in the graphic part.

I think, if FreeBSD will get some improvements with the graphic support, would be fine to run also games without rely on the Wine versions.

#bsd #freebsd #ghostbsd #pcgaming

Eh, I do not expect FreeBSD to get the best gaming platform ever, but the overall experience isn't so disastrous as some comments around would make think, and has edge to be used for a desktop over linux if you are comfortable with the shell, and this is the big factor.
There are need a lot of progresses to let some games running fine enough to get playable, but it works and I could hope in future improvements.
I didn't tried yet Wine for time issues.

#bsd #freebsd #ghostbsd #pcgaming

Under Freebsd you haven't to deal with some shortcomings of various linux distros where if you haven't stuff in your repository, you have to rely on extra solutions that adds their layer on complexity, aka Flatpak, Snap, extra repos, expecially if you use a Debian.
Fedora based have less troubles but you have to deal with Red Hat, that alone is a minus for me... :P
On Arch/Gentoo you have stuff updated but you have to work on them more than set up Freebsd...

#bsd #freebsd #ghostbsd #pcgaming

If your hardware is supported, I find the BSDs a better sweet spot for desktop use, without need the extra layers, repos, utility that fills Linux.
The ports are usually well updated and are part of Freebsd itself, both if you run the binary or compile them.
Compiling if needed is a lot painless in comparison of what you have on some linux distros.
At difference of linux distros, the BSD systems split the base system from applications...

#bsd #freebsd #ghostbsd #pcgaming

Call for FreeBSD Talk Proposals – SCaLE 24x (Southern California Linux Expo)

SCaLE is back for 2027, and the Call for Presentations is now open!

If you've been working on something exciting in the FreeBSD world, this is a great opportunity to share your project, research, or real-world experience with one of the largest open-source communities in North America.

📅 Conference: April 1–4, 2027
🗓️ Proposal Deadline: November 1, 2026

Submit your proposal:
https://www.socallinuxexpo.org/scale/24x/cfp

#FreeBSD

Learn more about our security-and-automation focused FreeBSD distribution: BastilleBSD

A FreeBSD 15.1-RELEASE distribution with Bastille and Rocinante pre-installed, hardened defaults, and containers ready on first boot.

https://bastillebsd.org/projects/bastillebsd/

#BastilleBSD #FreeBSD

Does anyone have any recommendations for a good #wiki software to host in a #FreeBSD jail?

There was an article floating around 3-4 months ago about installing one in a FreeBSD jail but Mastodon is so horrendously bad at search, I can't find it.

Bonus if it doesn't use PHP and is lightweight!

Thanks muchly!!

⚡️ The Data Copy That Lies — Vivian Voss

｢ Every discussion of ZFS eventually produces somebody saying it needs a gigabyte of RAM per terabyte of storage. This is the most durable piece of misinformation in the field, and it comes from a real recommendation that has been detached from its context ｣

https://vivianvoss.net/blog/copy-that-lies

#zfs #freebsd

This just in...

Want to silence a VID or CVE from pkg-audit on #FreeBSD?

"It basically adds a periodic job that runs prior to 405/410.pkg-audit,
which downloads the vulnerability database if needed and removes entries
as configured. No component/code of pkg is modified."

https://www.freshports.org/security/periodic-filter-vuxml

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟴/𝟭𝟳 (Valuable News - 2026/08/17) available.

https://vermaden.wordpress.com/2026/08/17/valuable-news-2026-08-17/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

You have a dual-stack #FreeBSD server. You already have IPv4 working fine on it. The jails are the classic/original NAT type (not VNET, no bridges or any of that stuff)

You want to add IPv6 to the jails. Your hosting provider gives you a /64.

What kind of IPs do you use on the jails?