Is OpenBSD for you?

This blog post is a step by step wizard for those who think about using OpenBSD as a primary OS and daily driver, but don't know if it meets the requirements. I am trying to focus on desktop/laptop use in this case...

https://mizik.eu/blog/is-openbsd-for-you/index.html

#system #hardware #install

OpenBSD Webzine issue 13.

https://webzine.puffy.cafe/issue-13.html

#news #webzine

Launch OpenBSD vmd Guests on Demand from SSH.

I’d been kicking around the idea of using an ssh ProxyCommand to launch transient EC2 instances connected to long-lived EBS volumes so I figured – why not implement this for vmd hosts? I could forward Linux X11 apps to my desktop & be able to use Signal...

https://jonwillia.ms/2023/03/20/vmctl-ssh

#vmd #virtualization #openssh

Synthetic Memory Protections.

Theo de Raadt (derradt@) was scheduled to present at CanSecWest. That's now happened, and slides of Theo's presentation, Synthetic Memory Protections, can be found in the usual place. Video is available on the bird site.

#security #video

OpenBSD 7.3 released.

https://www.openbsd.org/73.html

#release #system

#art (c)

AWS Gazo bot.

Scripts to create, customize and upload AWS images to the cloud. This is a work in progress, I'm trying to create OpenBSD images from Linux, specially using arm64 and riscv64 for AWS since OpenBSD has no vmm support for arm64 nor riscv64 yet...

https://github.com/csaltos/aws-gazo-bot

Based on the scripts created by Antoine Jacoutot at https://github.com/ajacoutot/aws-openbsd

#aws #cloud #install

viogpu(4), a VirtIO GPU driver, added to -current.

Joshua Stein (jcs@) has committed viogpu(4), which provides support for the virtio(4) GPU interface (provided by QEMU and other virtual machines) to create a wscons(4) console...

https://www.undeadly.org/cgi?action=article;sid=20230421124221

#viogpu #virtio

cron(8) now supports random ranges with steps.

Thanks to the following commit by Todd Miller, cron now supports random values in a range with a step value (i.e. "<lo>~<hi>/<step>" in crontab entries)...

https://undeadly.org/cgi?action=article;sid=20230507122935

#cron

dhcpd.leases dashboard

A simple dashboard for the dhcpd.leases file of the OpenBSD dhcpd server that is very easy to deploy and use...

https://github.com/facelessfish/dhcpd-leasesd

#dhcp #dhcpd #network

#art (c)

sec(4) for Route Based IPSec VPNs

A new tool for creating flexible, route based site to site virtual private networks (site-to-site VPNs) is entering its call for testing phase on OpenBSD-current...

https://undeadly.org/cgi?action=article;sid=20230704094238

#network #vpn #sec

🐡 OpenBSD 7.4 released! #release

OpenBSD Webzine issues 14, 15, 16.

- https://webzine.puffy.cafe/issue-14.html
- https://webzine.puffy.cafe/issue-15.html
- https://webzine.puffy.cafe/issue-16-special-octopenbsd-2023.html

#webzine #news

Install OpenBSD 7.3 on Proxmox (BIOS/UEFI and Cloud-init).

I thought it was an opportunity to take stock of the different methods of installing OpenBSD on our favorite hypervisor. We will consider different scenarios depending on the types of BIOS available under Proxmox (OVMF, SEABIOS); different OpenBSD installation images; and, finally, we'll talk about the thorny subject of OpenBSD's compatibility with Cloud-init...

https://forum.proxmox.com/threads/install-openbsd-7-3-on-proxmox-bios-uefi-and-cloud-init.133063/

#virtualization #proxmox #install

Collection of videos recorded at EuroBSDcon 2023 in Coimbra Portugal.

- How OpenBSD’s malloc helps the developer
- Practical Use of OpenBSD Routing Domains with Redundant Firewalls
- OpenBSD Ports and Packages: making things faster and easier
- A Haskell Binding for OpenBSD Pledge
- Using OpenBSD relayd(8) as an Application Layer Gateway
- OpenBSD Attack Mitigations
- The OpenBSD Installer

EuroBSDcon playlist - https://www.youtube.com/playlist?list=PLskKNopggjc7s6nAMxKF0tAO77ZIowZdx

#video #eurobsdcon

Creating an OpenBSD Wireguard VPN Gateway.

A couple of years ago I published a blog post about creating an OpenBSD VPN gateway using OpenVPN. I've recently switched from an OpenVPN-based VPN provider to one that uses Wireguard. As a result I've had to redo my VPN gateway...

https://blog.lambda.cx/posts/openbsd-wireguard-vpn-gateway/

#wireguard #network #vpn

OpenBSD workstation hardening.

I wanted to share a list of hardening you can do on your OpenBSD workstation, and explaining the threat model of each change...

https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-workstation.html

#security #system