#bastillebsd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.
-
I converted another host to pkgbase with `pkgbasify`. Worked great!
Even updated the jail base:
./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASE
Bastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.
-
I converted another host to pkgbase with `pkgbasify`. Worked great!
Even updated the jail base:
./pkgbasify --rootdir /usr/local/bastille/releases/15.1-RELEASE
Bastille even detects that the jail base has been updated, and the next `bastille update 15.1-RELEASE` automatically uses pkg.
-
The Bastille website has finally been refreshed!
After far too long and far too few updates, the entire website has been redesigned.
Take a look. Let us know what you think.
-
The Bastille website has finally been refreshed!
After far too long and far too few updates, the entire website has been redesigned.
Take a look. Let us know what you think.
-
ishmael@bastillebsd ~ $ man bastille-jcp
NAME
bastille jcp – Copy file(s)/directorie(s) from jail to jail(s).SYNOPSIS
bastille jcp [-q] SOURCE_JAIL JAIL_PATH DESTINATION_JAIL JAIL_PATHDESCRIPTION
The bastille jcp sub-command will copy files and directories from a single jail to any targeted jail(s).-q, --quiet
Suppress output.EXAMPLES
Copy /etc/resolv.conf from myjail to yourjail:
bastille jcp myjail /etc/resolv.conf yourjail /etc -
ishmael@bastillebsd ~ $ man bastille-jcp
NAME
bastille jcp – Copy file(s)/directorie(s) from jail to jail(s).SYNOPSIS
bastille jcp [-q] SOURCE_JAIL JAIL_PATH DESTINATION_JAIL JAIL_PATHDESCRIPTION
The bastille jcp sub-command will copy files and directories from a single jail to any targeted jail(s).-q, --quiet
Suppress output.EXAMPLES
Copy /etc/resolv.conf from myjail to yourjail:
bastille jcp myjail /etc/resolv.conf yourjail /etc -
Set detailed resource usage caps for jails.
EXAMPLE:
bastille limits TARGET add cpu 0,1
bastille limits TARGET add memory 1GSee `man bastille-limits`.
See `man rctl`.Supported resource limitations:
cputime, datasize, stacksize, coredumpsize, memoryuse, memorylocked, maxproc, openfiles, vmemoryuse, pseudoterminals, swapuse, nthr, msgqqueued, msgqsize, nmsgq, nsem, nsemop, nshm, shmsize, wallclock, pcpu, readbps, writebps, readiops, writeiops -
Set detailed resource usage caps for jails.
EXAMPLE:
bastille limits TARGET add cpu 0,1
bastille limits TARGET add memory 1GSee `man bastille-limits`.
See `man rctl`.Supported resource limitations:
cputime, datasize, stacksize, coredumpsize, memoryuse, memorylocked, maxproc, openfiles, vmemoryuse, pseudoterminals, swapuse, nthr, msgqqueued, msgqsize, nmsgq, nsem, nsemop, nshm, shmsize, wallclock, pcpu, readbps, writebps, readiops, writeiops -
Mini-guide: Deploying a simple nginx proxy jail with custom file overlay:
PKG nginx
CP usr /
SERVICE nginx enable
SERVICE nginx startPlace overlay files at template root:
- `usr/local/etc/nginx/…`
- `usr/local/www/domain.tld/html`
- `usr/local/etc/ssl/…
…Simple. Reproducible. Automated.
-
Mini-guide: Deploying a simple nginx proxy jail with custom file overlay:
PKG nginx
CP usr /
SERVICE nginx enable
SERVICE nginx startPlace overlay files at template root:
- `usr/local/etc/nginx/…`
- `usr/local/www/domain.tld/html`
- `usr/local/etc/ssl/…
…Simple. Reproducible. Automated.
-
@waffles That's a weird one.
Seems like a pkg issue not a Bastille issue. Glad your quick little fix worked.
Anyone else run into this?
-
@waffles That's a weird one.
Seems like a pkg issue not a Bastille issue. Glad your quick little fix worked.
Anyone else run into this?
-
:freebsd: Run a security audit across all jails with one command:
bastille pkg ALL audit -F
Keep your jails secure 📦
-
:freebsd: Run a security audit across all jails with one command:
bastille pkg ALL audit -F
Keep your jails secure 📦
-
We've celebrated Bastille Day with a new software release for the past seven years!
Viva la Revolution
-
We've celebrated Bastille Day with a new software release for the past seven years!
Viva la Revolution
-
It's been one year since we last asked:
FreeBSD :freebsd: and Bastille users on the Fediverse: (boost it for visibility)
Which region do you call home?
-
It's been one year since we last asked:
FreeBSD :freebsd: and Bastille users on the Fediverse: (boost it for visibility)
Which region do you call home?
-
Happy #BastilleDay
Bastille Day is the anniversary of the Storming of the Bastille on 14 July 1789.
-
Happy #BastilleDay
Bastille Day is the anniversary of the Storming of the Bastille on 14 July 1789.
-
Happy Bastille Day!
-
IMPORTANT NOTE ABOUT TODAY'S RELEASE!
This version makes a minor but significant change in the way it handles port redirection (RDR) to jails. If you're using RDR to any jails, you'll need to add one line to one file.
Update your `/etc/pf.conf` by adding:
`anchor bastille/*`
at the beginning of the filtering section.See https://bastille.readthedocs.io/en/latest/chapters/networking.html#etc-pf-conf for an example.
This provides improved filtering for incoming traffic before it hits the jail.
Also noted in pkg-message.
-
IMPORTANT NOTE ABOUT TODAY'S RELEASE!
This version makes a minor but significant change in the way it handles port redirection (RDR) to jails. If you're using RDR to any jails, you'll need to add one line to one file.
Update your `/etc/pf.conf` by adding:
`anchor bastille/*`
at the beginning of the filtering section.See https://bastille.readthedocs.io/en/latest/chapters/networking.html#etc-pf-conf for an example.
This provides improved filtering for incoming traffic before it hits the jail.
Also noted in pkg-message.
-
-
-
Do you know what day it is?
It's Bastille Day!
You know what that means. Time for a release party!
-
Do you know what day it is?
It's Bastille Day!
You know what that means. Time for a release party!
-
-
-
NAME: bastille cmd -- Execute command(s) inside jail(s).
SYNOPSIS: bastille [-ax] TARGET COMMAND
DESCRIPTION: The bastille sub-command will run the specified COMMAND inside TARGET.
-a, --auto Auto mode. Start/stop jail(s) if required.
-x, --debug Enable debug mode.EXAMPLES: Display listening sockets within a jail:
> bastille cmd TARGET sockstat -4EXAMPLES: Display processes that need restart:
> bastille cmd TARGET checkrestart -
NAME: bastille cmd -- Execute command(s) inside jail(s).
SYNOPSIS: bastille [-ax] TARGET COMMAND
DESCRIPTION: The bastille sub-command will run the specified COMMAND inside TARGET.
-a, --auto Auto mode. Start/stop jail(s) if required.
-x, --debug Enable debug mode.EXAMPLES: Display listening sockets within a jail:
> bastille cmd TARGET sockstat -4EXAMPLES: Display processes that need restart:
> bastille cmd TARGET checkrestart -
New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.
A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.
The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.
https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/
-
New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.
A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.
The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.
https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/
-
Happy Independence Day
-
Happy Independence Day
-
@putney [EDIT] I was too enthousiast and after more tests on my jails, the issue is still there. All apologies 🙏🏻
The solution posted on FreeBSD forums is still the one that works now.
I will open a PR on Bugzilla FreeBSD, and I will post this link here.
:freebsd_logo: :runbsdBg:
#FreeBSD #BastilleBSD -
When's the last time you ran 'pkg clean' on your host or your jails? Quick way to free up disk space.
bastille pkg ALL clean
> pkg clean is used to cleanup the local cache of packages downloaded from remote repositories. It removes packages that have been superseded by newer versions, and any packages that are no longer provided.
-
When's the last time you ran 'pkg clean' on your host or your jails? Quick way to free up disk space.
bastille pkg ALL clean
> pkg clean is used to cleanup the local cache of packages downloaded from remote repositories. It removes packages that have been superseded by newer versions, and any packages that are no longer provided.
-
Quick note to say thanks to all of our community. We wouldn’t be here without you.
Thank you for all of your past, present and continued support!
-
Quick note to say thanks to all of our community. We wouldn’t be here without you.
Thank you for all of your past, present and continued support!
-
Looking for an opportunity to contribute to open source?
We’re looking for a volunteer to help us build a new modern website to showcase our software (the BastilleBSD distro, Bastille jail manager and Rocinante config management).
The current site needs a little love and we could use a refresh.
Anyone interested in helping please reply here or email webmaster at BastilleBSD dot org.
-
Looking for an opportunity to contribute to open source?
We’re looking for a volunteer to help us build a new modern website to showcase our software (the BastilleBSD distro, Bastille jail manager and Rocinante config management).
The current site needs a little love and we could use a refresh.
Anyone interested in helping please reply here or email webmaster at BastilleBSD dot org.
-
Building a new image tonight to prepare for a weekend project:
BastilleBSD-15.1-RELEASE-arm64-RPI.img.xz
I'll publish this image alongside the amd64 images after its validated.
Happy Hacking!
-
Building a new image tonight to prepare for a weekend project:
BastilleBSD-15.1-RELEASE-arm64-RPI.img.xz
I'll publish this image alongside the amd64 images after its validated.
Happy Hacking!
-
Did a little bit of experimentation today and was reminded that jail names are case-sensitive.
TEST, test, TeST, tEst, etc can all be unique jails on a system.
Naming jails like this will inevitably lead to confusion, but it works.
The more you know. ™️
-
Did a little bit of experimentation today and was reminded that jail names are case-sensitive.
TEST, test, TeST, tEst, etc can all be unique jails on a system.
Naming jails like this will inevitably lead to confusion, but it works.
The more you know. ™️
-
Do we have any FreeBSD / Bastille fans in the Bay Area?
I recently relocated to the Bay and curious if we’ve got any community out here.
-
Do we have any FreeBSD / Bastille fans in the Bay Area?
I recently relocated to the Bay and curious if we’ve got any community out here.
-
dari sekitar 9 jail #freebsd yang ane miliki, 8 diantaranya sudah upgrade ke 15.1-RELEASE.
dari 8 yang sudah diupgrade ke 15.1-RELEASE ada 1 yang sampai sekarang masih nongol dengan tanda 15.0-RELEASE meski ane sudah sukses upgrade.
untuk yg 1 itu ane juga sudah update etcupdate tapi masih saja di #BastilleBSD nampil kalo release-nya masih 15.0. Jail ga penting sih ini cuma buat nyobain webdav-nya #rclone
-
Had a little trouble with one of the download mirrors today. Thanks for your patience.
I setup a hetzner EU mirror here:
https://download-eu.bastillebsd.org/releases/
Happy downloading!
-
Can anyone provide me with a good argument why any of these options shouldn't be enabled out of the box like this?
Until someone can, they'll be enabled by default in BastilleBSD images.
Check out a copy of BastilleBSD-15.1-RELEASE here: