Piero Bosio Social Web Site Personale

When your jails are on a private network how do you reach them from the outside? Redirect the port from the host:bastille rdr TARGET tcp 443 443bastille rdr TARGET tcp 2200 22List them with bastille rdr TARGET list, clear with ... clear.VNET jails don't need and don't use this.#TeachingTuesday #BastilleBSD #FreeBSD

Manpage Monday: bastille pkgManage packages inside your jails without ever consoling in.Install nginx in myjail> bastille pkg myjail install nginxUse the host's pkg binary instead of the jail's> bastille pkg -H myjail install nginxWorks with any pkg args: update, upgrade, search, audit, info, etc#BastilleBSD #FreeBSD #ManpageMonday

Just a shout out to #bastilleBSD I"m setting up a new #FreeBSD server and popping all the services into jails. Bastille makes everything so easy. Big thanks to the devs!

ishmael@bastillebsd ~ $ man bastille-setupNAME bastille setup – Auto-configure network, firewall, storage and more...SYNOPSIS bastille setup [-a] [bridge|linux|loopback|netgraph|firewall|shared|storage|vnet]DESCRIPTIONThe bastille setup sub-command will attempt to configure different options for your environment.#ManpageMonday #BastilleBSD #FreeBSD

https://github.com/cloudfence/wazuhvirtualagents#BastilleBSD #FreeBSD #wazuh

Happy Sysadmin Appreciation DayTo all the sysadmins quietly keeping the lights on, we salute you.#Sysadmin #FreeBSD #Linux #OpenBSD #BastilleBSD

I converted another host to pkgbase with `pkgbasify`. Worked great! Even updated the jail base:./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASEBastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.#FreeBSD #BastilleBSD #pkgbase

@BastilleBSDGood job!I found a typo:

ishmael@bastillebsd ~ $ man bastille-jpcNAME bastille jcp – Copy file(s)/directorie(s) from jail to jail(s).SYNOPSIS bastille jcp [-q] SOURCE_JAIL JAIL_PATH DESTINATION_JAIL JAIL_PATHDESCRIPTIONThe bastille jcp sub-command will copy files and directories from a single jail to any targeted jail(s). -q, --quiet Suppress output.EXAMPLESCopy /etc/resolv.conf from myjail to yourjail:bastille jcp myjail /etc/resolv.conf yourjail /etc#BastilleBSD #FreeBSD

@BastilleBSD why can't you expand the acronyms (*)? - EMEA Europe, Middle East and Africa- APAC Asia-PacificPlus Europe, Middle East and Africa, Asia and Pacific are each one huge areas. Those acronyms are just corporate slang of USA-centric companies.*: it must yet be acknowledged that it would have ended with a 7 choices poll that is quite more than the 4 alternatives limit imposed by Mastodon.

RE: https://mastodon.social/@h4ckernews/116614446311174258Migrated from Ubuntu to Caddy inside Bastille on FreeBSD.#FreeBSD #BastilleBSD

Today the FreeBSD project published a number of security advisories and updates.These include updates for components like: ptrace, file, fusefs, bsdinstall, libcasper, cap_net, and secretd.Be sure to update your systems using `freebsd-update`, `freebsd-rustdate` (a bit faster) or `pkg update` if you're on pkgbase.Also patch your jails using `bastille update 15.0-RELEASE`#FreeBSD #BastilleBSD #CVE

Working on a BastilleBSD website refresh this week. The website has been in it's (mostly) current form for probably six years. A lot has changed since then!I'll announce here when the new site is ready to view!#FreeBSD #BastilleBSD

SYNOPSISbastille template [-ax] TARGET|convert TEMPLATEDESCRIPTIONThe bastille template sub-command will apply the specified TEMPLATE to TARGET. -a, --auto : Auto mode. Start/stop jail(s) if required. -x, --debug : Enable debug mode.EXAMPLES Apply www/nginx to myjail: bastille template myjail www/nginx#ManpageMonday #BastilleBSD #FreeBSD

SYNOPSISbastille tags [-x] TARGET add|delete tag1,tag2bastille tags [-x] TARGET list [tag]DESCRIPTIONThe bastille tags sub-command add, remove and list tags for jails.EXAMPLESAdd 'prod' tag to myjail and yourjail:# bastille tags 'myjail yourjail' add prodShow jails with the tag 'web':# bastille tags ALL list web#ManpageMonday #BastilleBSD #FreeBSD