home.social

#busybox — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #busybox, aggregated by home.social.

fetched live
  1. @mro @lualang #openwrt uses either uHTTPd or #busybox httpd as a web server and supports #CGI for scripts in the directory /www/cgi-bin .

  2. @mro @lualang #openwrt uses either uHTTPd or #busybox httpd as a web server and supports #CGI for scripts in the directory /www/cgi-bin .

  3. PSA: In #debian unstable, "copy_exec /bin/lsblk" stopped working when used in an initramfs-tools hook. Why? The #busybox 1.38.0 upload enabled the lsblk applet and (to my surprise) the "copy_exec" function will not overwrite the destination file if it already exists. Since busybox lsblk does not support any command line flags, my initramfs scripts which expected lsblk from util-linux failed in funny and non-obvious ways. Time to make these scripts more robust. :)

  4. PSA: In #debian unstable, "copy_exec /bin/lsblk" stopped working when used in an initramfs-tools hook. Why? The #busybox 1.38.0 upload enabled the lsblk applet and (to my surprise) the "copy_exec" function will not overwrite the destination file if it already exists. Since busybox lsblk does not support any command line flags, my initramfs scripts which expected lsblk from util-linux failed in funny and non-obvious ways. Time to make these scripts more robust. :)

  5. Just finished a PoC if i could bootstrap pkgsrc on my self-assembled minimal docker container.

    Ingredients: skarnet-musl-toolchain. busybox-static, toybox-static, gawk, gsed, gtar, gmake, libz, libexpat, libxcrypt, libbsd, libmd, musl-{bsdcompat,fts,obstack,rpmatch}, and finally pkgsrc from netbsd.

    after a few ins and outs, and learning the ropes, bootstrapping worked flawlessly.

    shout out for the developers for their good work!

    #docker #toybox #busybox #LFS #LFN #pkgsrc #linux #musl

  6. Just finished a PoC if i could bootstrap pkgsrc on my self-assembled minimal docker container.

    Ingredients: skarnet-musl-toolchain. busybox-static, toybox-static, gawk, gsed, gtar, gmake, libz, libexpat, libxcrypt, libbsd, libmd, musl-{bsdcompat,fts,obstack,rpmatch}, and finally pkgsrc from netbsd.

    after a few ins and outs, and learning the ropes, bootstrapping worked flawlessly.

    shout out for the developers for their good work!

    #docker #toybox #busybox #LFS #LFN #pkgsrc #linux #musl

  7. Ten years ago, I built a #WebSocket server using nothing but #UNIX shell and #BusyBox tools. 🛠️

    Looking back at `websocket.sh` today, it's just a fun, interesting project that shows how far you can stretch basic tools.

    Read the original post: meefik.dev/2016/08/04/websocke

    #Linux #Bash #Coding #Throwback

  8. Ten years ago, I built a #WebSocket server using nothing but #UNIX shell and #BusyBox tools. 🛠️

    Looking back at `websocket.sh` today, it's just a fun, interesting project that shows how far you can stretch basic tools.

    Read the original post: meefik.dev/2016/08/04/websocke

    #Linux #Bash #Coding #Throwback

  9. Following on from my #kindle hacking - I haven't yet got a custom kernel booting but I did use the bootargs to drop into a simple #busybox shell which meant I could root the device by changing the password:

    1. Connected up serial lines (1.8v)
    2. Drop into u-boot
    3. `setenv bootargs setenv bootargs root=/dev/mmcblk0p1 earlyprintk console=ttymxc0,115200 init=/bin/sh`
    4. `boot`
    5. Once it drops into the busybox shell do `mount -o remount, rw /` to remount the as rw
    6. `passwd`
    7. Set a new password
    8. `reboot now` and this time let it fully boot up
    9. Login in via serial using `root` and your password

  10. Following on from my hacking - I haven't yet got a custom kernel booting but I did use the bootargs to drop into a simple shell which meant I could root the device by changing the password:

    1. Connected up serial lines (1.8v)
    2. Drop into u-boot
    3. `setenv bootargs setenv bootargs root=/dev/mmcblk0p1 earlyprintk console=ttymxc0,115200 init=/bin/sh`
    4. `boot`
    5. Once it drops into the busybox shell do `mount -o remount, rw /` to remount the as rw
    6. `passwd`
    7. Set a new password
    8. `reboot now` and this time let it fully boot up
    9. Login in via serial using `root` and your password

  11. @jpmens

    In the spirit of there always being 1 more #vi clone than one thinks, notice that @lpar 's list is lacking Ali Gholami Rudi's #neatvi which is packaged in #pkgsrc and about a decade old now.

    pkgsrc.se/editors/neatvi

    And even then the rule still applies. There's 1 more clone: Sterling Huxley's and Brent Roman's #viless, a quarter of a century old and what #BusyBox supplies.

    github.com/brentr/viless

    #NetBSD #OmniOS

  12. @jpmens

    In the spirit of there always being 1 more #vi clone than one thinks, notice that @lpar 's list is lacking Ali Gholami Rudi's #neatvi which is packaged in #pkgsrc and about a decade old now.

    pkgsrc.se/editors/neatvi

    And even then the rule still applies. There's 1 more clone: Sterling Huxley's and Brent Roman's #viless, a quarter of a century old and what #BusyBox supplies.

    github.com/brentr/viless

    #NetBSD #OmniOS

  13. Randomly wondering: Does anyone know what's going on with #Busybox? The last release is a year and half old, there has been development in Git, including bugfixes (including ones that may be relevant for security, like 3fb6b31c716669e12f75a2accd31bb7685b1a1cb), but there's no sign of a new release. The mailing list is mostly people complaining gitweb doesn't work, and a fix for httpd I sent early this month didn't get any response… ​:neocat_think:​

  14. Randomly wondering: Does anyone know what's going on with #Busybox? The last release is a year and half old, there has been development in Git, including bugfixes (including ones that may be relevant for security, like 3fb6b31c716669e12f75a2accd31bb7685b1a1cb), but there's no sign of a new release. The mailing list is mostly people complaining gitweb doesn't work, and a fix for httpd I sent early this month didn't get any response… ​:neocat_think:​

  15. Naty S @eclecticpassions ·

    After discovering from @jbaty, I went ahead to give (lightweight TW fork) a spin as a personal bin. I really like how it’s just a HTML file at 58kb!

    Using , it failed due to Android Storage Access Framework (#SAF) limitations. I ended using the amazing once again to run , automate the whole process of opening, serving & saving back to my…

    Full note: burgeonlab.com/notes/2026/0325
    Syndicated by

  16. After discovering #TiddlyWiki from @jbaty, I went ahead to give #FeatherWiki (lightweight TW fork) a spin as a personal #braindump bin. I really like how it’s just a HTML file at 58kb!

    Using #Android, it failed due to Android Storage Access Framework (#SAF) limitations. I ended using the amazing #Termux once again to run #Busybox #httpd, automate the whole process of opening, serving & saving back to my…

    Full note: burgeonlab.com/notes/2026/0325
    Syndicated by #Indiekit

    #syncthing #bash #wiki #FOSS

  17. Varastossa makaa pari hyvin vanhaa QNAP’n NAS palvelinta ja siellä olisi terakaupalla hyvää tilaa esim. perheen kuville, puhelinten varmuuskopioiden ja kuvagallerialle. En vaan ole varma saako niistä enää mitään käyttöön, kun QNAPin tuki NASin Busybox distrolle taitaa olla loppunut vuosia sitten.

    #qnap #nas #backup #homeautomation #busybox #linux

  18. Varastossa makaa pari hyvin vanhaa QNAP’n NAS palvelinta ja siellä olisi terakaupalla hyvää tilaa esim. perheen kuville, puhelinten varmuuskopioiden ja kuvagallerialle. En vaan ole varma saako niistä enää mitään käyttöön, kun QNAPin tuki NASin Busybox distrolle taitaa olla loppunut vuosia sitten.

    #qnap #nas #backup #homeautomation #busybox #linux

  19. ⚠️ Unlike typical exploits, no buffer overflow or memory corruption needed - just one manipulated environment variable grants root access

    🛡️ Not all Telnet implementations affected - only #GNU inet utils; proprietary versions like #Cisco and #BusyBox are safe

    📊 #GreyNoise threat intelligence reports multiple exploit attempts per hour already detected in the wild

    🔄 Telnet's unencrypted nature makes attacks visible to defenders monitoring plaintext traffic for "-f root" patterns

  20. ⚠️ Unlike typical exploits, no buffer overflow or memory corruption needed - just one manipulated environment variable grants root access

    🛡️ Not all Telnet implementations affected - only #GNU inet utils; proprietary versions like #Cisco and #BusyBox are safe

    📊 #GreyNoise threat intelligence reports multiple exploit attempts per hour already detected in the wild

    🔄 Telnet's unencrypted nature makes attacks visible to defenders monitoring plaintext traffic for "-f root" patterns

  21. @jas

    My first suspect for a #login not supporting -- would be something with a 1980s history pre-dating standard #getopt, such as Solaris, which is ironic given that #inetutils has its only -- present in conditionally compiled code targetting Solaris.

    #FreeBSD, #NetBSD, and #OpenBSD login all use getopt(), pervasive in these worlds for decades, as do the util-linux login (used by Debian et al.), and the #Illumos and #BusyBox logins.

    #suckless login supports -- via ARGBEGIN.

    @ska @cazabon

  22. @jas

    My first suspect for a #login not supporting -- would be something with a 1980s history pre-dating standard #getopt, such as Solaris, which is ironic given that #inetutils has its only -- present in conditionally compiled code targetting Solaris.

    #FreeBSD, #NetBSD, and #OpenBSD login all use getopt(), pervasive in these worlds for decades, as do the util-linux login (used by Debian et al.), and the #Illumos and #BusyBox logins.

    #suckless login supports -- via ARGBEGIN.

    @ska @cazabon

  23. anyone know of a repo with a shairport-sync pkg that defaults to airplay 1?

    there're currently 3 variants all built on airplay 2

    shairport-sync-mbedtls is supposed to be airport one according to ted's makefile but reporting on my system as airport2

    #openwrt #shairport #wirelessAudio #busybox #linux

  24. anyone know of a repo with a shairport-sync pkg that defaults to airplay 1?

    there're currently 3 variants all built on airplay 2

    shairport-sync-mbedtls is supposed to be airport one according to ted's makefile but reporting on my system as airport2

    #openwrt #shairport #wirelessAudio #busybox #linux

  25. at some point I'm gonna need to get somebody experienced with scripting in BusyBox's version of ash to review my code and tell me where I've come up with terrible ways of doing things for which there is a much cleaner way...

    #BusyBox #ash

  26. at some point I'm gonna need to get somebody experienced with scripting in BusyBox's version of ash to review my code and tell me where I've come up with terrible ways of doing things for which there is a much cleaner way...

    #BusyBox #ash

  27. #UNIX #oneliner #shellscript:

    clear && echo "" && date | tr -d "\n" && uptime && echo ""

    Output:

    Sat Dec 20 12:18:53 GMT Standard Time 2025 12:18:53 up 5 days, 16:03, load average: 0.00, 0.00, 0.00

    NB This #commandline #wizardry is a #busybox script running on #Windows11. Enjoy #DOScember.

  28. So yeah, I'm now using

    #busybox mount

    instead of plain mount for my #overlayfs shenanigans.

  29. So yeah, I'm now using

    #busybox mount

    instead of plain mount for my #overlayfs shenanigans.

  30. Собираем Linux, который весит меньше, чем мем с котиком, ну или почти…

    Мне всегда было интересно, насколько минимальным может быть Linux. Три года назад я уже публиковал статью , но понимание темы меняется. Сейчас хочу освежить знания и поделиться ими. В отличие от предыдущей статьи, в этой я рассматриваю Linux с более свежим ядром с минимальной конфигурацией на основе tinyconfig, оформленный в виде одного файла и загружаемый при помощи UEFI. Зачем вообще нужно создавать такие сборки Linux? Установил готовый дистрибутив или загрузился в Live — работай и изучай. Но такой подход не даёт настоящей уверенности в знаниях. Представьте: водитель и шофёр. Водитель просто ездит. Шофёр знает устройство автомобиля и может его починить. Современные автомобили сложны — починить всё самому уже нельзя. Но вы можете открыть капот, измерить уровень масла, заменить колесо в случае прокола, установить винт для буксировочного троса и т. д. Так же и с Linux: коммерческий дистрибутив вы вряд ли соберёте, но на одну ступеньку вверх по лестнице профессионализма подниметесь. На мой взгляд, описание создания минимального Linux не должно быть большим, поэтому я старался его сделать минимально возможным, вложив максимум смысла. Как минимальный Linux служит для понимания более сложных вещей, так и моя статья даёт базу для дальнейшего более глубокого изучения. В комментариях к моей предыдущей статье я видел замечания, что можно использовать buildroot или книгу Linux From Scratch . Скажу только, что я преследую другие цели: собрать минимальный Linux без использования специализированных программ и сделать это как можно проще. Всем, кого заинтересовало, добро пожаловать под кат.

    habr.com/ru/companies/ruvds/ar

    #linux #дистрибутив #минимальный_Linux #сборка_ядра #uefi #busybox #linux_from_scratch #initramfs #qemu #ruvds_статьи

  31. Is it just me, or is busybox.net down? #linux #busybox #kernel

    It looks like archive.org haven't cached it since October!

  32. Is it just me, or is busybox.net down? #linux #busybox #kernel

    It looks like archive.org haven't cached it since October!

  33. I have an inordinate fondness for a particular roll&write game that I purchased during lockdown. It works in a sort of "bingo mode" where one person throws three dice, and each player decides how to allocate each one for their particular sheet. It's a remarkable system, and I've finally managed to introduce some friends to it.

    So I've been implementing it in #awk, such that the map and all of the details are populated via patterns that look like ASCII drawings of the game board, and then the rolls and the actions are different patterns that follow. So you have a sort of template header for the game, and then player moves beneath.

    I really like this sort of log-structured DSL for stuff like this, and I'm specifically keeping it to #BusyBox AWK so that I know it's mostly POSIX. I even put my GAWK book back on the shelf and pulled down the new edition of Aho et. al. for this project.

    I have to get to work tomorrow, but tonight I'm just delighted to tinker with it all!

  34. I have an inordinate fondness for a particular roll&write game that I purchased during lockdown. It works in a sort of "bingo mode" where one person throws three dice, and each player decides how to allocate each one for their particular sheet. It's a remarkable system, and I've finally managed to introduce some friends to it.

    So I've been implementing it in #awk, such that the map and all of the details are populated via patterns that look like ASCII drawings of the game board, and then the rolls and the actions are different patterns that follow. So you have a sort of template header for the game, and then player moves beneath.

    I really like this sort of log-structured DSL for stuff like this, and I'm specifically keeping it to #BusyBox AWK so that I know it's mostly POSIX. I even put my GAWK book back on the shelf and pulled down the new edition of Aho et. al. for this project.

    I have to get to work tomorrow, but tonight I'm just delighted to tinker with it all!

  35. As usual with a score 10 #CVE I am reasonably skeptical about #CVE_2025_12220 for #busybox - especially since there isn't any useful description at all.

    nvd.nist.gov/vuln/detail/CVE-2

    Edit: what a nothing burger. A CVE for 19 year old software....

  36. As usual with a score 10 #CVE I am reasonably skeptical about #CVE_2025_12220 for #busybox - especially since there isn't any useful description at all.

    nvd.nist.gov/vuln/detail/CVE-2

    Edit: what a nothing burger. A CVE for 19 year old software....

  37. Got Alpine BusyBox/Linux working. It's very fast on my poor hardware. Sway and Waybar are using almost completely default settings.

    #Chrultrabook #AlpineLinux #BusyBox #Linux #Sway #Chromebook #screenshot

  38. @hello

    I have done this via floppy.

    Not kidding. I built a tiny Linux OS on floppy that has a writeable filesystem. It still has 4K of freespace.

    It's role was Grub booting and recovery.

    #uClibc #Minix #BusyBox

  39. Nutzt hier wer #BusyBox? Eine Lücke in tar kann genutzt werden um Geräte zum Absturz zu bringen oder sich root-rechte zu verschaffen. BusyBox findet sich auf vielen Embedded-Geräten wie Routern (z.B. #OpenWRT), #SmartTV, Streaming-Sticks oder Containersystemen (z.B. #alpine

    IMO aber eher theoretisch, da man dafür augenscheinlich erst mal (unpriviligiert) an das System rankommen muss.

    mastodon.social/@campuscodi/11

  40. It's more than useful. It's correct. (-:

    There's a behavioural contract for process 1 on #Linux, and shells do not fulfil it. They don't handle things that process 1 has to handle, and they conversely do things that process 1 should never do.

    Ironically, sh as process 1 is nowhere near a truly minimal approach. With two significant exceptions, one of which was a BSD project that failed, there is no proper process 1 program that does parsing in process 1, for starters.

    #BusyBox

  41. @blinry @b0rk

    You really should tell the #BusyBox people about that C bug in the feature autodetection.

    I recently had to update a whole lot of K&R code (written a decade after C89) for similar reasons. I even had a similar autodetection break.

    C99 has and C23 is even more going to hit a lot of old codebases where people wrote things K&R style, sadly in the cases of many of them well after #StandardC came into existence.