I've asked Claude for some starting points for ports which obtain `PORTVERSION` from outside their `Makefile` - specifically `Mk/bsd.default-versions.mk` in this case. There are others, but this is where I started.

The current code, untested and unreviewed, sits here:

https://github.com/FreshPorts/DefaultVersions

The first issue is at:

https://github.com/FreshPorts/DefaultVersions/issues

Pull requests most welcome. Let's see if we can complete this as a group. I don't want to do it myself.

#FreeBSD #FreshPorts

Reminder that you can now find Bastille on Reddit.

https://reddit.com/r/BastilleBSD

#bastilleBSD #FreeBSD #Reddit

Alt...

BastilleBSD just hit 50 weekly visitors. Things are getting cozy here. Share this with the community to celebrate your milestone!

TIL about FreeCORE:
https://freecore.org/

It's a fork of TrueNAS, keeping FreeBSD OS.

#bsd #runbsd #FreeBSD #FreeCORE

This week we celebrate the core team and the contributors that have shaped Bastille into the project we know today.

https://bastillebsd.org/about/team/

Thanks to everyone following and thanks to everyone that has contributed.

#BastilleBSD #FreeBSD

I've now updated 4 hosts using the latest #mkjail

I'll merge these changes to main and update the #FreeBSD port soon.

Anyone running #FreeBSD and #unbound (DNS resolver) and finding unbound doesn't actually start after a reboot?

The init script has:

# PROVIDE: unbound
# REQUIRE: FILESYSTEMS defaultroute netwait resolv
# BEFORE: NETWORKING
# KEYWORD: shutdown

However, unbound needs to listen on an interface or IP. Why have the script run before networking and yet "require" defaultroute? This makes no sense.

This morning a new non-production release of mkjail-0.2.0 was created. It is not available in the #FreeBSD ports tree.

Here's my first attempt:

[11:49 tallboy dvl ~] % sudo mkjail update -a
Updating all jails...

Updating ns1 jail...

freebsd-update is incompatible with the use of packaged base. Please see
https://wiki.freebsd.org/PkgBase for more information.
[11:49 tallboy dvl ~] % sudo mkjail update -a -b
Updating all jails...

Updating ns1 jail...

and the next attempt, by specifying `-b`

[11:49 tallboy dvl ~] % sudo mkjail update -a -b
Updating all jails...

Updating ns1 jail...

Updating FreeBSD-base repository catalogue...
FreeBSD-base repository is up to date.
FreeBSD-base is up to date.
Updating FreeBSD-base repository catalogue...
FreeBSD-base repository is up to date.
FreeBSD-base is up to date.
Checking for upgrades (11 candidates): 100%
...

On the next host, I'll set PKGBASE in mjkail.conf

One of today’s tasks: migrating an old Ubuntu server hosting around 15 WordPress sites to a FreeBSD server, with Caddy acting as a reverse proxy in its own jail, one jail per WordPress instance, and a shared database in yet another jail.

Yesterday I configured Caddy to reverse proxy all the domains while still pointing to the old server. That allowed the customer to update the DNS records in advance, while I could migrate each site one by one and simply switch the upstream in Caddy as soon as it was ready.

Zero downtime. Just a reload.

I asked only for one thing: freeze everything this morning, so a colleague asked the customer not to make any changes to the websites after 7 today.

Ack.

So I go to clone one of the sites… and notice the customer published a totally deferrable post at 9.

Which, of course, means I now get to resync everything.

Ah, the joys of working "behind the scenes". 😆

#IT #SysAdmin #Ubuntu #FreeBSD #RunBSD #ITLife

Join Tuukka Pasanen today for our next Lunch & Learn as he explores the work underway to transition the FreeBSD Vulnerability Database from VuXML to OSV, a widely used vulnerability format that officially supports FreeBSD in its schema.

📅 Wednesday, September 2 | 11:00 AM CDT / 16:00 UTC
Speaker: Tuukka Pasanen | FreeBSD Foundation Lunch & Learn

YouTube Live Link:
https://buff.ly/m5XZp1S

#FreeBSD

Join Klara's Allan Jude and FreeBSD Security Officer Gordon Tetlow for a technical webinar on securing production FreeBSD systems. Klara Inc

In this session, you'll learn about FreeBSD's security features, best practices for securing production environments, how the FreeBSD Security Team responds to vulnerabilities and publishes security advisories, and common operational mistakes that can increase risk.

📅 September 2, 2026
🕚 11:00 AM EDT

Register here: https://klarasystems.com/webinars/freebsd-security-production-vulnerability-response-best-practices/

#FreeBSD

Monthly reminder to periodically check your bastille.conf for updates or new entries from the sample config:

cd /usr/local/etc/bastille
diff -u bastille.conf bastille.conf.sample

We try to keep config updates to a minimum, but sometimes they are required.

#BastilleBSD #FreeBSD

Current status: Getting help from Claude (via Anthropic free open source credits) to investigate #FreeBSD ports which get their PORTVERSION not from the Makefile.

Some ports obtain their version from Mk/*

Some light background reading for you: https://github.com/FreshPorts/freshports/issues/659

Quick question BSD friends: would FreeBSD run on Orange Pi 4 Pro ?

#bsd #freebsd #OrangePI

Hey #IPv6 folks: If I do NOT have a /64 assigned to me and only have a single IPv6 assigned, am I better off adding fd00::/7 addresses to the jails and then NAT'ing to them like I do with the IPv4 addresses?

I don't think I have any other kind of choice here.

#FreeBSD #networking

BSDnas

https://github.com/bsdnas

― a community fork of TrueNAS CORE, kept on a FreeBSD that still gets security fixes.

https://www.reddit.com/r/freebsd/comments/1vy8ahl/bsdnas/

#AI #FreeBSD #TrueNAS

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟴/𝟯𝟭 (Valuable News - 2026/08/31) available.

https://vermaden.wordpress.com/2026/08/31/valuable-news-2026-08-31/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

We are counting down to the European *BSD event of the year! 😈⛳🐡

Big thank you to our silver sponsor: FreeBSD Foundation
https://www.freebsdfoundation.org/

If you haven't secured your spot yet, now's the time!
https://tickets.eurobsdcon.org/

📅 You can check out the program at https://events.eurobsdcon.org/2026/schedule/

EuroBSDCon 2026 in Brussels, Belgium 🇧🇪
September 09-13, 2026

#EuroBSDCon #EuroBSDCon2026 #BSD #RUNBSD #FreeBSD #NetBSD #OpenBSD

Manpage Monday: bastille console

Need a shell inside a jail? Step right in.

Console into myjail
> bastille console myjail

Enter as a specific user
> bastille console myjail bob

Jail stopped? -a starts it first, then drops you in:
> bastille console -a myjail bob

See `man bastille-console` for more details.

#BastilleBSD #FreeBSD #ManpageMonday

https://git.smithies.me.uk/freebsd-thinkpad-p14s-amd-dotfiles/tree/.kshrc

Using #PostgreSQL? pgbot looks interesting.

https://github.com/pgrundev/pgbot

It was just added to the #FreeBSD ports tree.

https://www.freshports.org/databases/pgbot/

At 10:15 I added a gently condescending toast for IPv4-only visitors. It called ipify, which felt inappropriate for someone running an ASN.

By 13:27 I had built a Rust/Axum IP service, put it behind Caddy, added MaxMind, three DNS names, trusted-proxy handling, an rc.d service, and a dedicated dual-stack FreeBSD VNET jail.

The toast looks exactly the same.

https://blog.hofstede.it/i-wanted-an-ipv4-toast-and-accidentally-built-an-ip-service/

#FreeBSD #IPv6 #Rust #SelfHosting

It started as a gag: a tiny popup telling IPv4 visitors that their provider hasn't yet discovered 1998.

To do that honestly I needed something to echo the client address.

Using ipify felt wrong when you run your own AS. So now it's a service. 🙃

curl https://ip.hofstede.it
curl https://v6.ip.hofstede.it/json
curl https://v4.ip.hofstede.it/asn

One Rust binary, server-rendered, zero JavaScript.

https://ip.hofstede.it

#IPv6 #Rust #FreeBSD #SelfHosting #AS201379 /cc @namedbird

Added 𝗨𝗣𝗗𝗔𝗧𝗘 𝟭 - 𝗟𝗲𝗻𝗼𝘃𝗼 𝗫𝗖𝗹𝗮𝗿𝗶𝘁𝘆 𝗢𝗻𝗲 [UPDATE 1 - Lenovo XClarity One] to the article.

https://vermaden.wordpress.com/2026/08/28/lenovo-xclarity-administrator-in-freebsd-bhyve-vm#UPDATE1

#verblog #freebsd #bhyve #linux @lenovo #one

#WeekendLife as the family is away I am going out for pizza, followed by tiramisu and either a grappa or a limoncello to help me make it home safely. Then I intend to binge-watch 4 weeks of Silo and Sugar on Apple TV, and a couple of episodes of The Order (bad) and The Last Airbender (good) that I've been watching with the kids, that I missed out on.

Then I am going to hack all Saturday and Sunday for funsies on some #FreeBSD stuff, hopefully without any interruption apart from going to a local Asian restaurant for dinner.

In FreeBSD I've been working on mostly ports:

- adding arm64 support to tailwindcss4
- investigating https://nodejs.org/api/single-executable-applications.html so that we can package nodejs apps as a "single" archive binary rather than 200k+ individual files. This has turned out to be a very enlightening and horrifying rabbit hole that I am not yet out ot
- porting lua-http and its dependencies
- which requires lua-cqueues which breaks libuv in weird ways that causes kresd (Knot3 DNS Resolver) to break
- fixing simplomon to run on FreeBSD CURRENT
- tweak some podman tooling for fun
- finally update part 2 of my Containers contribution to the HandBook
- do some releng testing of the upcoming 14.5 release to make sure all the 🦆🦆🦆 are in a row
- try to clean up my flua contribs for FreeBSD src for review before EuroBSDcon

[thank-you for your attention to this matter]

The EU Cyber Resilience Act is bringing new requirements for software, and open source developers, organizations, and businesses need to be ready.

On September 10 at #EuroBSDCon2026, join Alice Sowerby, Peter Hansteen, and Pierre Pronchery for the full-day tutorial, “The Night Before CRAmas – Why EU Regulations Are a Gift to Open Source.”

📅 September 10, 2026
📍 EuroBSDCon 2026 | Brussels, Belgium

Learn more and register:
https://events.eurobsdcon.org/2026/talk/RER8UZ/

#FreeBSD #OpenSource

To come so far with hyprland on FreeBSD (it's working!) and then that Danish fuck spoils any party 😡 Really in doubt whether I should publish at all. Which means I probably won't.
I'm all for devs being paid, even by big business, but active association with a white supremacist is a new level of 💩. Btw, neovim has been called out also. I'll be reviving my River and Mango FreeBSD repo's in the meantime.
#hyprland #freebsd

Happy Friday #FreeBSD

@dvl I found your blog post <https://dan.langille.org/2026/08/21/freebsd-backup-libraries-such-as-base-freebsd-kerberos-lib-backup-libkrb5profile-so/> via <https://billboard.bsd.cafe/post/961> thanks to @ciotbsd.

I know that you sometimes use pkgbasify. <https://billboard.bsd.cafe/post/808> reminds me that you have run pkgbasify in jails.

<https://github.com/FreeBSDFoundation/pkgbasify#behavior> is probably not intended to be comprehensive. FYI:

Set BACKUP_LIBRARIES just before install · FreeBSDFoundation/pkgbasify@433686b

<https://github.com/FreeBSDFoundation/pkgbasify/commit/433686b4e6665e048d6250392aec7676fb1dd791> (2025-03-09)

#FreeBSD #pkg #pkgbasify

New 𝗟𝗲𝗻𝗼𝘃𝗼 𝗫𝗖𝗹𝗮𝗿𝗶𝘁𝘆 𝗔𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿 𝗶𝗻 𝗙𝗿𝗲𝗲𝗕𝗦𝗗 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 [Lenovo XClarity Administrator in FreeBSD Bhyve VM] article.

https://vermaden.wordpress.com/2026/08/28/lenovo-xclarity-administrator-in-freebsd-bhyve-vm/

#verblog #freebsd #bhyve #linux @lenovo

@dvl oh, that's cool.

<https://www.freshports.org/sysutils/mkjail/>

Flashback to 2021:

"I spent a long time shying away from the concept of jails, mkjail helped to simplify things for me. Thanks …"

<https://www.reddit.com/r/freebsd/comments/rdwcmu/comment/ho85dvy/>

#FreeBSD #jails #mkjail