#bastillebsd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.
-
Our new experimental OCI support continues with compatibility with podman-compose.yml.
The new `bastille up` sub-command will attempt to deploy OCI images from a podman-compose.yml file in the current working directory.
-
Check out the updated Getting Started page on the Bastille blog!
It's been revisited for FreeBSD 15.x and simplified to leverage `bastille setup`.
Get started with Bastille in five minutes!
-
Did you know you can make one jail depend on one or more other jails using the `bastille config` command?
> bastille config webserver set depend 'proxy database'
With this set, the jail startup order will not start the webserver until both the proxy and database jails are running.
-
ishmael@bastillebsd ~ $ man bastille-setup
NAME
bastille setup – Auto-configure network, firewall, storage and more...SYNOPSIS
bastille setup [-a] [bridge|linux|loopback|netgraph|firewall|shared|storage|vnet]DESCRIPTION
The bastille setup sub-command will attempt to configure different options for your environment. -
With Apple phasing out AFP in macOS 27 and Time Capsules officially reaching end-of-life, it's time to move network backups to proper SMB.
If you run a FreeBSD server, you can build a fast, rock-solid, and secure Time Machine target powered by ZFS and Samba - neatly isolated inside a FreeBSD jail using Bastille.
https://it-notes.dragas.net/2026/01/28/time-machine-freebsd-jail/
Keep your macOS backups running smoothly via SMBv3 (with full vfs_fruit support) and full dataset quota control on ZFS!
#FreeBSD #macOS #TimeMachine #ZFS #BastilleBSD #Samba #SysAdmin #Backup #OwnYourData #SelfHosted #BSD #RunBSD #OwnYourData
-
We're experimenting with OCI support in Bastille.
Initial testing has successfully created jails using both FreeBSD and Linux container images (requires buildah and jq packages).
If you're interested in this, please check out this PR. Testing is much appreciated.
-
The redesigned Bastille website now includes a Press page with links to Bastille related content, tutorials and examples.
Do you have a Bastille blog post you'd like to share with the world? Submit it here for inclusion.
-
@jan The new anchor improves filtering due to the order and placement of the anchor.
Without the new anchor, redirected traffic is defined as "rdr pass", meaning it redirects AND passes traffic *before* any deny rules are applied.
Adding the new anchor doesn't pass the traffic until *after* any deny rules are applied.
-
Happy Sysadmin Appreciation Day
To all the sysadmins quietly keeping the lights on, we salute you.
-
RE: https://mastodon.bsd.cafe/@grahamperrin/117010090548286954
I use checkrestart after every PKG upgrade.
bastille pkg ALL upgrade
bastille cmd ALL checkrestartIt's nice to surgically restart just the updated processes vs "restart the jail, just to be safe".
-
I converted another host to pkgbase with `pkgbasify`. Worked great!
Even updated the jail base:
./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASE
Bastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.
-
The Bastille website has finally been refreshed!
After far too long and far too few updates, the entire website has been redesigned.
Take a look. Let us know what you think.
-
ishmael@bastillebsd ~ $ man bastille-jcp
NAME
bastille jcp – Copy file(s)/directorie(s) from jail to jail(s).SYNOPSIS
bastille jcp [-q] SOURCE_JAIL JAIL_PATH DESTINATION_JAIL JAIL_PATHDESCRIPTION
The bastille jcp sub-command will copy files and directories from a single jail to any targeted jail(s).-q, --quiet
Suppress output.EXAMPLES
Copy /etc/resolv.conf from myjail to yourjail:
bastille jcp myjail /etc/resolv.conf yourjail /etc -
Set detailed resource usage caps for jails.
EXAMPLE:
bastille limits TARGET add cpu 0,1
bastille limits TARGET add memory 1GSee `man bastille-limits`.
See `man rctl`.Supported resource limitations:
cputime, datasize, stacksize, coredumpsize, memoryuse, memorylocked, maxproc, openfiles, vmemoryuse, pseudoterminals, swapuse, nthr, msgqqueued, msgqsize, nmsgq, nsem, nsemop, nshm, shmsize, wallclock, pcpu, readbps, writebps, readiops, writeiops -
Mini-guide: Deploying a simple nginx proxy jail with custom file overlay:
PKG nginx
CP usr /
SERVICE nginx enable
SERVICE nginx startPlace overlay files at template root:
- `usr/local/etc/nginx/…`
- `usr/local/www/domain.tld/html`
- `usr/local/etc/ssl/…
…Simple. Reproducible. Automated.
-
@waffles That's a weird one.
Seems like a pkg issue not a Bastille issue. Glad your quick little fix worked.
Anyone else run into this?
-
:freebsd: Run a security audit across all jails with one command:
bastille pkg ALL audit -F
Keep your jails secure 📦
-
We've celebrated Bastille Day with a new software release for the past seven years!
Viva la Revolution
-
It's been one year since we last asked:
FreeBSD :freebsd: and Bastille users on the Fediverse: (boost it for visibility)
Which region do you call home?
-
Happy #BastilleDay
Bastille Day is the anniversary of the Storming of the Bastille on 14 July 1789.
-
Happy Bastille Day!
-
IMPORTANT NOTE ABOUT TODAY'S RELEASE!
This version makes a minor but significant change in the way it handles port redirection (RDR) to jails. If you're using RDR to any jails, you'll need to add one line to one file.
Update your `/etc/pf.conf` by adding:
`anchor bastille/*`
at the beginning of the filtering section.See https://bastille.readthedocs.io/en/latest/chapters/networking.html#etc-pf-conf for an example.
This provides improved filtering for incoming traffic before it hits the jail.
Also noted in pkg-message.
-
-
Do you know what day it is?
It's Bastille Day!
You know what that means. Time for a release party!
-