Matthew Dillion mentioned his changed tutorial on secure web browsing on DragonFly, though I imagine it applies to other systems too. The trick is to use an isolated user account for running a web browser, and he includes the various steps to do so smoothly in the tutorial web page.
For anyone with a newer CPU – Broadwell, Skylake, etc. – there was a memory leak in the video driver. It would take several weeks of continuous operation to have an effect, but in any case, it’s fixed. This only affected DragonFly 4.7 users with the appropriate CPUS and the Intel video driver.
If you were running DragonFly 4.7, for a short period you may have had trouble with shutting down, because of an ACPI bug. It’s fixed now. It’s actually been fixed for two weeks, but I’m going back and clearing things I hadn’t had a chance to post, since we are in the Christmas-New Years lull time.
Merry almost Christmas!
- OpenSSH 7.4 released. (via)
- Configuring the FreeBSD automounter. I think this applies to DragonFly too. Thanks, Michael Wilson.
- AsiaBSDCon 2017 paper proposals are I assume due by end of year, just like last year, though the 2017 AsiaBSDCon site does not appear to be up as I type this.
- BSD Magazine has lessons 4 and 5 of FreeBSD and Chef up now.
- Security and BSD tools (via)
- Version SAT. Talks about package management in general – and what do you know, pkg seems to be the most advanced tool in this case. (via)
- Bringing the scheduler saga to the finishing line
- openbsd changes of note 4
- OpenBSD laptops
- Replacing Cisco ASA with PFSense. I did it, I ain’t sad.
- Using ZFS to Fight Data Rot by Kevin McAleer
Don’t get too excited yet – clang import hasn’t happened. However, I want to draw attention to Rimvydas Jasinskas’ changes to alternate compiler handling, which would be for importing clang. His commit message goes into some of the rather thorny problems of transitioning between compilers and releases.
There’s been some updates to the AHCI driver. Matthew Dillon outlined the changes, with the biggest one being support for FIS Based Switching. FBS is the ability to send simultaneous streams of data to and from multiple drives on a port multiplier. Support for it is rare and quirky, but it should significantly improve throughput on a compatible port multipler. Read his writeup for details, including on how to back up your kernel.
You know about swapcache(8), the DragonFly-specific trick of caching disk data on an small SSD, meaning you get mostly the speed benefits of an SSD while still using a cheaper, slower drive? Whether you did or didn’t, Matthew Dillon’s updated the documentation for it to account for recent hardware changes.
I mention this because people don’t realize there’s a console screensaver: ‘vidcontrol -t XX’ will blank the console after XX seconds of inactivity. This way you aren’t lighting up your server closet with a terminal screen, forever.
This is a minor thing, but I bet someone will find it useful: Chromium in dports has been patched to remove the forced dependency on dbus, which will be useful to anyone using DragonFly and a ‘lighter’ window manager. You still need to specify this preference in your make.conf to have it happen.
If you are moving to the newest 1.8 version of Go, the language, you need to be on at least the last release of DragonFly 4.4, or 4.6. You’ve probably upgraded by now anyway, or at least I hope you have.
The 2.25 version was and still is installed by default. If you want to try out 2.27 instead, WORLD_BINUTILSVER=binutils227 is what you need. I didn’t test that, of course. The binutils changelog will tell you what’s different in 2.27.
UEFI, which I casually sum up as the replacement for BIOS, has been seeing some support in DragonFly, but not within the installer. Matthew Dillon and Sascha Wildner has ported over FreeBSD’s EFI ABI support, which I think means support for various EFI applications and features. I haven’t booted a machine using UEFI in any significant way, so I don’t have a good explanation – but I am sure this is useful for people with new hardware.
Update: some explanation plus a note that it’s experimental and you could brick your machine.
Imre Vadasz is working on full-offload scan support for wlan, imported from FreeBSD. That doesn’t change much from a user point of view, other that (I assume) reducing load and power usage a tiny amount. I’m reinforcing something most people don’t think about: there’s tiny computers inside your computer with their own firmware and processors, that you don’t directly control.