PF Firewall on OpenBSD.

PFFW is a pf firewall running on OpenBSD. PFFW is expected to be used on production systems. The PFFW project provides a Web User Interface (WUI) for monitoring and configuration.

https://github.com/sonertari/PFFW

#pf #pffw

Gaming on OpenBSD

While no one would expect this, there are huge efforts from a small team to bring more games into OpenBSD.

https://dataswamp.org/~solene/2020-06-05-openbsd-gaming.html

#games #desktop

Install OpenBSD 6.7-current on a PineBook Pro 64

The following article describes how I installed OpenBSD 6.7-current on my PineBook Pro 64 (PBP). Please note that there is no warranty for anything I describe in the article.

https://xosc.org/pinebookpro.html

#hardware #install #pinebook

Cross Cloud VPN: Site-to-Site IKEv2 based on OpenBSD

This is a guide on how to securely connect two public clouds,AWS and Azure. The solution entails the use of an IPsec IKEv2 VPN running on OpenBSD.

https://github.com/dcasati/cross-cloud-vpn

#vpn #network

obsdpkgup

Very simple (and *fast*) tool to check for OpenBSD package updates

https://github.com/neutralinsomniac/obsdpkgup

#pkg

OpenBSD guest with bhyve - OmniOS.

Today I will be creating a OpenBSD guest via bhyve on OmniOS. I will also be adding a Pass Through Ethernet Controller so I can have a multi-homed guest that will serve as a firewall/router.

This post will cover setting up bhyve on OmniOS, so it will also be a good introduction to bhyve. As well, I look into OpenBSD’s uEFI boot loader so if you have had trouble with this, then you are in the right place.

https://www.pbdigital.org/omniosce/bhyve/openbsd/2020/06/08/bhyve-zones-omnios.html

#virt #omnios #uefi

cwdof

cwdof is a simple utility to get the curent working directory of a given process in OpenBSD.

https://github.com/phillbush/cwdof

#cwdof #process

WireGuard has been merged into the OpenBSD kernel, with integration into userland as well.

https://lists.zx2c4.com/pipermail/wireguard/2020-June/005588.html

#wireguard

Prometheus - Auto-deploying Consul and Exporters using Saltstack Part 3: OpenBSD.

This is the third part in my ongoing series on using SaltStack to deploy Consul and Prometheus Exporters, enabling Prometheus to discover machines and services to monitor.

https://yetiops.net/posts/prometheus-consul-saltstack-part-3-openbsd/

#monitoring #consul

Installing OpenBSD on a PC Engines APU2.

https://blog.lambda.cx/posts/installing-openbsd-on-pcengines/

#hardware #install

OpenBSD on the A20-OLinuXino-LIME2

This guide will explain how to get OpenBSD to run on the A20-OLinuXino-LIME2 Rev. K single-board computer by Olimex. We will go through modifying and compiling U-Boot to make the LAN port work, as well as following OpenBSD's -current branch to get all the security fixes.

https://earthroot.city/openbsd-on-olinuxino-lime2/

#hardware #install

OpenBSD 6.7 on PC Engines APU4D4

I just got myself a PC Engines APU4D4. I miss an OpenBSD box providing home services. It’s quite simple to install and run OpenBSD on this machine. And you can even update the BIOS from OpenBSD.

https://www.tumfatig.net/20200530/openbsd-6-7-on-pc-engines-apu4d4/

#hardware #install

Timecounters available to userland in -current

In this commit, Paul Irofti (pirofti@) added support for reading timecounters in userland without making a syscall...

https://undeadly.org/cgi?action=article;sid=20200708055508

#timecounters

Setting up a DHCP server on OpenBSD 6.7

https://blog.lambda.cx/posts/openbsd-dhcp-server/

#network #dhcp

Auto-install OpenBSD on QEMU

I happen to develop a pet project of mine on a Linux desktop, while actually targeting an OpenBSD server. Thus I searched for a scriptable way to install OpenBSD on the QEMU virtual machine manager, such that I could automate a local integration test against OpenBSD running on Linux.

https://www.skreutz.com/posts/autoinstall-openbsd-on-qemu/

#qemu #virt

HackTheBox released OpenKeyS - an OpenBSD machine. https://forum.hackthebox.eu/discussion/3629/official-openkeys-discussion

#security #ctf

Zabbix server setup on OpenBSD

I go over how to setup a Zabbix monitoring and alerting server on OpenBSD. OpenBSD is very stable and secure so its a great platform for a platform like Zabbix. For this configuration we use OpenBSD’s httpd, PHP 7.3, and PostgreSQL.

https://daulton.ca/2020/03/openbsd-zabbix-server/

#zabbix #monitoring