eupolicy.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
This Mastodon server is a friendly and respectful discussion space for people working in areas related to EU policy. When you request to create an account, please tell us something about you.

Server stats:

206
active users

#openbsd

23 posts22 participants0 posts today

I've got a ThinkPad X1 Carbon 5th, currently running OpenSUSE Tumbleweed. I want to try *BSD on this laptop.

Network controller is reported as "Intel Corporation Wireless 8265 / 8275 (rev 88)" under Linux.

FreeBSD installs OK, but wireless speed is not impressive, and my USB-C dock doesn't seem to be recognized.

I can live with using a wifi-dongle when out and about, but missing dock connectivity is not something I look forward to. I don't care about the built-in camera.

Is there anything else I should worry about? Sound, Bluetooth, sleep mode, battery life?

Replied to Tim Panton

@steely_glint As a router, as you saying #openbsd does not have the speed performance for firewall that you require? I'm checking that I understand you correctly. If #BSD does not work for you and you need to buy commercial, ok, I'm only asking. I'm setting up my first OpenBSD 2.5Gb router with an access point to replace store bought router

First steps in the BSD world!

1) OpenBSD on VPS (Amsterdam)
2) FreeBSD on Raspberry Pi 4 (home)

I'm running a Wireguard connection between the two.

Next step is setting up relayd on the VPS to point at services on the Raspberry Pi server.

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off? nxdomain.no/~peter/eighteen_ye (tracked bsdly.blogspot.com/2025/08/eig)

Friends, it finally happened. On August 7th, 2025, the number of spamtraps intended to woo the unwary spammer rolled past the number of inhabitants in my home country of Norway.

It's time for a retrospective.

nxdomain.noEighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

It looks like it is goodbye to #openBSD as my router.
I've had an openBSD running as firewall or router since about 2002 but finally got to the point that it isn't worth the performance hit.

Specifically there doesn't seem to be a sensibly priced quiet box that will run openBSD+pf+pppoe at 1Gb/s so I think it is probably time to look at commercial alternatives like FritzBox! and Ubiquity.

I tried FreeBSD - which has similar problems.

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off? nxdomain.no/~peter/eighteen_ye (tracked bsdly.blogspot.com/2025/08/eig)

With the imaginary friends, also known as spamtraps, now more numerous than the inhabitants of their virtual landlord's home country, a greytrapping retrospective is in order.

nxdomain.noEighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

Finland tends to be a bit different. This includes @UpCloud. If you slap #OpenBSD on a VM: IPv4 and IPv6 are two different NICs. Works great if you are aware of this - if they ever get a wiki I pinky swear I'll write it down on some relevant page.

Adding a poll because it is all the rage in Helsinki.

#OpenBSD

#techpost

One of my problems with using relayd for tls is that I lose the origin IP in my httpd logs.

(background:)
I am adding IPs to my PF blocklist because I don't like my server getting spidered/crawled.
Specifically repeatedly hitting dynamic links that are not valid.

So I find the bad hit in my httpd log, and then use the time stamp to find
the origin IP in the relayd log.

I can probably add more info to either the httpd log or the relayd log
to mitigate this. Or I can script some tools to help me.

I was meaning to script some log stuff anyways just to get an idea
of how often it happens. Also writing helper code to look for
stuff in log files is fun for me. I was thinking for ease I would wait
until they "roll" and access the .gz versions. Then I don't have to
do "last line accessed" kind of record keeping. But I am more thinking
I WILL access the live logs, because doing that "last line accessed"
record keeping is also a fun exercise.

Hey #FreeBSD admins with #OpenBSD as second language, what would be the equivalent to ˋacme-client` on FreeBSD?

Like in single command you run every night that checks if your Let’s encrypt certificates are up to date and, if not, just request another one. Nothing more, no integration with other software configuration.

I have looked in the handbook but there doesn’t seem to be a stock option. Also, I used pkg search but can’t make up my mind from the tenth of results :-/

If I were to host on #OpenBSD my reverse proxy, static site, git server running cgit, Syncthing, Radicale, snac instance. Would you put them all on the same machine or would you advise to split them up ? Not saying I'm going to but research is ongoing to see what I can host on one machine compared to my current one machine running #FreeBSD with several jails for each service.

Sorry if none of this makes any sense but that's just how I roll. 😂

I am not skilled in various network technologies for configuring a server, can someone suggest something to try learning that comes part of the #openbsd base installation to expand my skill set?

I've considered setting up a CVS mirror, trying to figure out a multimedia server to play from or a NAS, or buy a domain and see if I can host a static website. I'm open to suggesting something more basic as a beginning point