#bastillebsd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.
-
Reminder that you can now find Bastille on Reddit.
-
This week we celebrate the core team and the contributors that have shaped Bastille into the project we know today.
https://bastillebsd.org/about/team/
Thanks to everyone following and thanks to everyone that has contributed.
-
I recently learned that bastille is in the midst of adding OCI support which is something I look forward to.
My earlier browsing of daemonless.io suggested learning yet more tooling in order to use containers. not anymore (for anyone willing to run a checkout)
After toying with the examples I was able to get the lldap container running. Way cool!
Per a commit made last week (236f45c). There were some changes that require tweaking the example bastille-compose.yml (renamed from podman-compose.yml).
Here is an example that worked for me:
--
services:
lldap:
image: "ghcr.io/daemonless/lldap:latest"
name: lldap
network:
- mode: nat
- interface: bastille0
- ip: 10.1.1.2
environment:
- PUID=1000
- PGID=1000
- TZ=UTCThis is exciting news (to me)!
-
Monthly reminder to periodically check your bastille.conf for updates or new entries from the sample config:
cd /usr/local/etc/bastille
diff -u bastille.conf bastille.conf.sampleWe try to keep config updates to a minimum, but sometimes they are required.
-
Installing software in ten jails means downloading it ten times. You don't have to do that.
Jails that share the host's ABI and repo can share one pkg cache:
bastille mount TARGET /var/cache/pkg /var/cache/pkg nullfs rw 0 0
The first request pays the download fee. Every request after installs straight from cache. bastille mount even writes it to the jail's fstab, so it survives restarts.
For more tips like this, follow my Tech Literate account at @chris .
-
Manpage Monday: bastille console
Need a shell inside a jail? Step right in.
Console into myjail
> bastille console myjailEnter as a specific user
> bastille console myjail bobJail stopped? -a starts it first, then drops you in:
> bastille console -a myjail bobSee `man bastille-console` for more details.
-
According to this list of FreeBSD Dev Summits I notice that "MeetBSD" events were held for like a decade and then stopped in 2018.
https://wiki.freebsd.org/DevSummit
Coincidentally, in 2018 I attended MeetBSD and spending a few days with those developers inspired me to publish Bastille. I have not been able to attend any BSD events since.
It looks like the only remaining US-based FreeBSD event this year is the Vendor Summit in November, which I'm considering.
-
Learn more about our companion project: Rocinante
> Rocinante is lightweight configuration management for FreeBSD hosts. From the team that brought you BastilleBSD.
-
When you're ready to level up your FreeBSD and Bastille skills, let me help.
I've updated and improved my training program for the second half of 2026.
Join our next cohort starting in September!
My training covers FreeBSD from installation to hardened system including: ZFS, Jails, IP4/IP6 networking, dtrace, best practices, system upgrades, and more.
https://bastillebsd.org/services/training/
Visit the website or email [email protected] for course details.
-
:Authenticity incoming:
One thing that isn't always obvious about open source projects is how they keep going year after year.
I've worn a lot of hats in the eight years maintaining this project. In today's economy, I'm back to my roots teaching what I know best: tech.
I'll keep these posts to a minimum here, but for those interested in learning more tech regularly, you can follow my personal account here:
#BastilleBSD #FreeBSD #Python #InfoSec #Learning #training #cybersecurity
-
BastilleBSD now has a community on Reddit.
If you're a Reddit user feel free to join and share Bastille related posts, questions, tips, tricks, etc.
-
Manpage Monday: bastille create
One command creates and starts a jail:
A thick jail with a static MAC and start priority 10
> bastille create -TM -p 10 myjail 15.1-RELEASE 10.23.23.1A VNET jail with boot off and a custom gateway
> bastille create -V --no-boot -g 10.1.1.1 web 15.1-RELEASE 10.1.1.4/24 vtnet0Thick, thin, clone, empty, VNET, even Linux. All securely isolated in a FreeBSD jail.
See `man bastille-create` for more details.
-
Learn more about our security-and-automation focused FreeBSD distribution: BastilleBSD
A FreeBSD 15.1-RELEASE distribution with Bastille and Rocinante pre-installed, hardened defaults, and containers ready on first boot.
-
Our new experimental OCI support continues with compatibility with podman-compose.yml.
The new `bastille up` sub-command will attempt to deploy OCI images from a podman-compose.yml file in the current working directory.
-
Check out the updated Getting Started page on the Bastille blog!
It's been revisited for FreeBSD 15.x and simplified to leverage `bastille setup`.
Get started with Bastille in five minutes!
-
Did you know you can make one jail depend on one or more other jails using the `bastille config` command?
> bastille config webserver set depend 'proxy database'
With this set, the jail startup order will not start the webserver until both the proxy and database jails are running.
-
ishmael@bastillebsd ~ $ man bastille-setup
NAME
bastille setup – Auto-configure network, firewall, storage and more...SYNOPSIS
bastille setup [-a] [bridge|linux|loopback|netgraph|firewall|shared|storage|vnet]DESCRIPTION
The bastille setup sub-command will attempt to configure different options for your environment. -
With Apple phasing out AFP in macOS 27 and Time Capsules officially reaching end-of-life, it's time to move network backups to proper SMB.
If you run a FreeBSD server, you can build a fast, rock-solid, and secure Time Machine target powered by ZFS and Samba - neatly isolated inside a FreeBSD jail using Bastille.
https://it-notes.dragas.net/2026/01/28/time-machine-freebsd-jail/
Keep your macOS backups running smoothly via SMBv3 (with full vfs_fruit support) and full dataset quota control on ZFS!
#FreeBSD #macOS #TimeMachine #ZFS #BastilleBSD #Samba #SysAdmin #Backup #OwnYourData #SelfHosted #BSD #RunBSD #OwnYourData
-
We're experimenting with OCI support in Bastille.
Initial testing has successfully created jails using both FreeBSD and Linux container images (requires buildah and jq packages).
If you're interested in this, please check out this PR. Testing is much appreciated.
-
The redesigned Bastille website now includes a Press page with links to Bastille related content, tutorials and examples.
Do you have a Bastille blog post you'd like to share with the world? Submit it here for inclusion.
-
@jan The new anchor improves filtering due to the order and placement of the anchor.
Without the new anchor, redirected traffic is defined as "rdr pass", meaning it redirects AND passes traffic *before* any deny rules are applied.
Adding the new anchor doesn't pass the traffic until *after* any deny rules are applied.
-
Happy Sysadmin Appreciation Day
To all the sysadmins quietly keeping the lights on, we salute you.
-
RE: https://mastodon.bsd.cafe/@grahamperrin/117010090548286954
I use checkrestart after every PKG upgrade.
bastille pkg ALL upgrade
bastille cmd ALL checkrestartIt's nice to surgically restart just the updated processes vs "restart the jail, just to be safe".
-
I converted another host to pkgbase with `pkgbasify`. Worked great!
Even updated the jail base:
./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASE
Bastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.
-
The Bastille website has finally been refreshed!
After far too long and far too few updates, the entire website has been redesigned.
Take a look. Let us know what you think.