home.social

#bastillebsd — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.

  1. Reminder that you can now find Bastille on Reddit.

    r/BastilleBSD

  2. This week we celebrate the core team and the contributors that have shaped Bastille into the project we know today.

    bastillebsd.org/about/team/

    Thanks to everyone following and thanks to everyone that has contributed.

  3. I recently learned that bastille is in the midst of adding OCI support which is something I look forward to.

    My earlier browsing of daemonless.io suggested learning yet more tooling in order to use containers. not anymore (for anyone willing to run a checkout)

    After toying with the examples I was able to get the lldap container running. Way cool!

    Per a commit made last week (236f45c). There were some changes that require tweaking the example bastille-compose.yml (renamed from podman-compose.yml).

    Here is an example that worked for me:

    --
    services:
    lldap:
    image: "ghcr.io/daemonless/lldap:latest"
    name: lldap
    network:
    - mode: nat
    - interface: bastille0
    - ip: 10.1.1.2
    environment:
    - PUID=1000
    - PGID=1000
    - TZ=UTC

    This is exciting news (to me)!

    #FreeBSD #bastilleBSD

  4. Monthly reminder to periodically check your bastille.conf for updates or new entries from the sample config:

    cd /usr/local/etc/bastille
    diff -u bastille.conf bastille.conf.sample

    We try to keep config updates to a minimum, but sometimes they are required.

  5. Installing software in ten jails means downloading it ten times. You don't have to do that.

    Jails that share the host's ABI and repo can share one pkg cache:

    bastille mount TARGET /var/cache/pkg /var/cache/pkg nullfs rw 0 0

    The first request pays the download fee. Every request after installs straight from cache. bastille mount even writes it to the jail's fstab, so it survives restarts.

    For more tips like this, follow my Tech Literate account at @chris .

  6. Manpage Monday: bastille console

    Need a shell inside a jail? Step right in.

    Console into myjail
    > bastille console myjail

    Enter as a specific user
    > bastille console myjail bob

    Jail stopped? -a starts it first, then drops you in:
    > bastille console -a myjail bob

    See `man bastille-console` for more details.