How the OpenBSD -stable packages are built

In this long blog post, I will write about the technical details of the OpenBSD stable packages building infrastructure. I have setup the infrastructure with the help of Theo De Raadt who provided me the hardware in summer 2019, since then, OpenBSD users can upgrade their packages using pkg_add -u for critical updates that has been backported by the contributors. Many thanks to them, without their work there would be no packages to build. Thanks to pea@ who is my backup for operating this infrastructure in case something happens to me...

https://dataswamp.org/~solene/2020-10-29-official-openbsd-stable-architecture.html

#package

How to build an amazing router and firewall with OpenBSD.

Part 1: Introduction.
Part 2: The network and DHCP.
Part 3: PF - The firewall.

#pf #firewall #network

OpenBSD rc.d(8). BSDCan 2016.

#rcd #system

edgewalker.

An opinionated DIY VPN setup script based on OpenBSD, OpenIKEd, Wireguard and Let's Encrypt.

https://github.com/fazalmajid/edgewalker

#vpn #wireguard #network

How to deploy Vger gemini server on OpenBSD

In this article I will explain how to install and configure Vger, a server for the Gemini protocol. Short introduction about Gemini: it’s a very recent protocol that is being simplistic and limited. Keys features are: pages are written in markdown like, mandatory TLS, no header, UTF–8 encoding only.

https://dataswamp.org/~solene/2020-11-30-gemini-vger-server.html

#vger #gemini

A mesh VPN using OpenBSD and WireGuard

I own a few VPS (hello Vultr, hello OpenBSD.amsterdam) that tend to be connected through filtered public services and/or SSH tunnels. And that’s neither efficient nor easy to manage. Here comes the wg(4) era where all those peers will communicate with a bit more privacy and ease of management.

https://www.tumfatig.net/20201202/a-mesh-vpn-using-openbsd-and-wireguard/

#wireguard #vpn #network

Wireguard Puffy to OPNsense.

WG Tunnel between OpenBSD and OPNsense. How to Setup an WG Tunnel between OpenBSD and OPNSense ? That’s quite simple…

https://puffy.nolink.ch/posts/wireguard_opnsense/

#wireguard #vpn #opnsense

Block abusive IP addresses with Pf-badhost in OpenBSD.

Pf-badhost is a very practical, robust, stable and lightweight security script for network servers. It prevents potentially-bad IP addresses that could possibly attack your servers (and waste your bandwidth and fill your logfiles), by blocking all those IPs contacting your server, and therefore it makes your server network/resources lighter and the logs of important services running on your server become simpler, more readable and efficient...

https://ozgur.kazancci.com/block-abusive-ip-addresses-with-pf-badhost-in-openbsd-a-must-have-security-tool/

https://www.geoghegan.ca/pfbadhost.html

#pf #firewall #feedback

🎄 Happy New Year! 🐡

Self-host a password manager on OpenBSD

https://www.tumfatig.net/20210105/self-host-a-password-manager-on-openbsd/

#security #password

Secure WireGuard VPN server setup on OpenBSD (and configure Windows 10 clients to connect through it).

https://ozgur.kazancci.com/secure-fast-vpn-server-wireguard-setup-on-openbsd-and-configure-windows-10-clients-to-connect-through-it/

#wireguard #network

List of some Shell goodies for OpenBSD

I'm sharing here some practices I'm following and some small tips/tools which facilitate my usage of OpenBSD in my day to day. Some a really specific to my usage, others could be re-used.

https://www.vincentdelft.be/post/post_20210102

#shell #cli

Syncthing server setup on OpenBSD.

I go over how to setup a Syncthing server on OpenBSD. Syncthing is not necessarily a backup server specifically as it is a peer-to-peer file synchronization program, but it does a great job of fulfilling that function in an easy way. These steps should apply to OpenBSD 6.7 or greater.

https://daulton.ca/2020/09/openbsd-syncthing-server/

#syncthing

And a lot of articles also: https://daulton.ca/tags/openbsd/ 👍🏻

Just another router guide.

https://hakk.gg/openbsd-router-guide

#network

Hexo on OpenBSD.

Hexo can be used for blogging op OpenBSD. Hexo converts your markdown files into a html blog, similar to mkdocs, hugo, pelican and others...

https://bsdnerds.org/hexo-on-openbsd/

#hexo

How to Compile OpenVAS on OpenBSD.

The Open Vulnerability Assessment System (OpenVAS) security tool is great! It's a free fork of the Nessus project. It is a network security scanner with a graphical front end, and it applies many thousands of vulnerability tests to machines across a network...

https://cromwell-intl.com/open-source/compiling-openvas-on-openbsd.html

#openvas #security

How to Compile OpenCV on OpenBSD.

The OpenCV (Open Computer Vision) package is great! It lets you very quickly develop code for dealing with arbitrary image file formats...

https://cromwell-intl.com/open-source/compiling-opencv-on-openbsd.html

#opencv #graphics

Block spammers/abusive IPs with Pf-badhost in OpenBSD. A 'must have' security tool!

Pf-badhost is a very practical, robust, stable and lightweight security script for network servers.

https://www.undeadly.org/cgi?action=article;sid=20210119113425

#network #security

LWJGL 3 for Minecraft on OpenBSD.

This repository is an attempt to make Minecraft >= 1.13 work on OpenBSD. As of this moment, Minecraft 1.16.5 has been tested to work on my T450s OpenBSD 6.8 -stable.

https://github.com/octeep/lwjgl3

#desktop #games

Calibrate your touch-screen on OpenBSD

I didn’t expected it but my refurbished T460s came with a touch-screen. It is recognized by default on OpenBSD and not well calibrated as-is. But that’s really simple to solve.

https://www.tumfatig.net/20210122/calibrate-your-touch-screen-on-openbsd/

#desktop #system