Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

The primary architecture on which I run #FreeBSD is:

Uncategorized
12 10 62

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • 0 Votes
    2 Posts
    0 Views
    once this is done, i'd like to improve how we do package staging. currently we have to run stageworld every time we build packages, and stageworld is equivalent to installworld, so it's quite slow and makes the rebuild/update/test cycle for packages take longer than it should.instead, we should not install anything during stageworld, and just add a path= attribute to the METALOG pointing at the built object in objdir. then pkg-create(8) can use that to pick the files from objdir to build the package. that means you'd only have to re-run stageworld if something about the metadata changed or files were added or removed.so then you could rebuild and reinstall cron using something like:% make -C usr.sbin/cron all% make -C packages/cron all installpackage#freebsd
  • 0 Votes
    7 Posts
    24 Views
    @iodomi It definitely supports all of that. ZFS is available out of the box, can handle whatever raid setup you like.You can either run your services with the out of the box packages, or with a little extra footwork, setup what FreeBSD calls jails to setup containers for them to keep them isolated from one another.
  • 0 Votes
    1 Posts
    12 Views
    New blog post: GeoIP-Aware Firewalling with PF on FreeBSDRunning a mail server means constant brute-force attempts. My solution: geographic filtering. SMTP stays open for global mail delivery, but client ports (IMAP, Submission, webmail) are restricted to Central European IP ranges only.Result: ~90% reduction in attack logs, cleaner signal-to-noise ratio, smaller attack surface.Using MaxMind GeoLite2 + PF tables with ~273k CIDR blocks.https://blog.hofstede.it/geoip-aware-firewalling-with-pf-on-freebsd/#FreeBSD #InfoSec #SysAdmin #pf #DevOps
  • FreeBSD shorts:

    Uncategorized freebsd sysadmin devops jails
    2
    1
    0 Votes
    2 Posts
    6 Views
    Little bonus:Want to see ONLY Jail processes, sorted by CPU%?This command filters out the host system (JID 0) and sorts the rest by Jail ID and CPU usage:ps -ax -o jid,jail,pid,user,%cpu,%mem,command | awk 'NR==1 {print; next} $1!=0 {print | "sort -k1n -k5rn"}'#freebsd #sysadmin #devops #jails #commandline