DragonFly’s root account defaults to tcsh, and that now defaults to autorehash being set on. Useful to remember if you reflexively type ‘rehash’ like I do, and also useful if you come from a shell where ‘rehash’ isn’t needed.
I’ve been linking to other parts of this, but now it’s on one page: “Zenripper“, talking about how to overclock/underclock a Threadripper system on DragonFly.
It turns out Threadripper (well, a Ryzen CPU) delivers good performance at relatively low power usage. As I sit in a room made too warm by a single desktop machine running, this lower wattage sounds pretty good to me.
If you haven’t done it before, you can use ‘make rescue’ to build a tiny base system on DragonFly, for use when /usr goes missing, for when your disk is encrypted, and other rather catastrophic problems. It should be in sync with the rest of the system, which is why ‘make rescue’ can be part of a buildworld process. I’m mentioning this because currently, ‘make upgrade’ should be done first.
I’ve been remiss in noting new DragonFly mirrors, so here’s the most recent: 4 new locations in Ecuador.
History for a theme, I guess? It’s a random week.
- 80s video game commercials, a hour of video. (via)
- Don’t do this either.
- When generating a random password, the result must still be a valid string.
- Hackaday Prize, now open.
- New apps for MS/DOS.
- Omnicalculator, every type of online calculator you can think of. (via)
- Browsh, a text-based web browser. Uses FireFox under the hood, so all you need to transmit locally is text. (via)
- WordTsar, a modern Wordstar clone. (via).
- How to handle emoji (in code). (via)
- Related: There’s more to HTML escaping than &, <, >, and “ (via)
- A few things I know about LISP Machines. (via)
- Digital life simplification. Not saying all these things are good ideas; some are relative luxuries. (via)
Your Cyriak video of the month: Indigestion.
A tip for anyone using public keys in SSH: you can start up your xorg session using ssh-agent and then have all subsequent connections be authorized by the agent, saving you some hassle of password typing, etc. Put this in your ~/.xinitrc :
eval `/usr/bin/ssh-agent -c` (insert line to start up your window manager here) /bin/kill $SSH_AGENT_PID
(Yoinked from Matthew Dillon on IRC) Realistically, you should also lock your terminal or otherwise prevent physical access to any workstation where you do this, since it means immediate SSH access to other systems using your identity, for anyone touching that keyboard.
If you’re using Windows, there’s always Pageant.
There was an optional ‘make initrd’ step in the DragonFly build process, where you can create a small binary to use for mounting encrypted root drives.
Aaron LI has removed mkinitrd in favor of ‘make initrd’, which builds a separate binary to use in exactly those situations. See the commit message for more detail. It incidentally creates a ‘/rescue’ directory and works as a rescue ramdisk, similar to other BSDs, if you should ever need it. (See updated MOTD for details)
One of these links will be very useful to someone.
- Join us, building a full OpenBSD mailserver. (via)
- Valuable News 2018/05/25.
- May 2018 Status Report: Cross-DSO CFI in HardenedBSD. (via)
- BSDJobs.com. (via)
- Research Positions – Aberdeen Scotland.
- NetBSD: a new version of the CDDL dtrace and ZFS code. (via)
- OpenBSD Kernel Internals — Creation of process from user-space to kernel space. (via)
- iXsystems Newsletter: The April 2018 Edition.
- OPNsense 18.1.9 released.
- OpenBSD’s httpd gets URL rewrite Not the final patch. (via)
- BSD: Networking Included. Some extremely useful tips in here for network troubleshooting. (via)
- Boot All the Things! (via)
A recent and new CPU bug, CVE-2018-8897, is fixed in DragonFly. THis applies to both Intel and AMD processors. I’m happy to see that the CERT page lists equal notification timing for a whole lot of operating systems, rather than the few that heard about Spectre/Meltdown early.
Following that topic, Matthew Dillon has “fleshed out” Spectre mitigations, and his commit message details the current state. The sysctl ‘machdep.spectre_mitigation’ will tell you what’s set at any given point.
MAP_STACKStack Register Checking Committed to -current.
- Nextcloud 13 on FreeBSD. (via)
- Run OpenBSD on your web server. (via)
- Introduction to HardenedBSD World. (via)
- MirBSD Korn Shell on Jehanne. (via)
- Distributed Object Storage with Minio on FreeBSD. (via)
- Open vSwitch Overview.
- How to do math on the Linux command line. Or BSD.
- IKEV2 EAP User name/Password client on *BSD.
- Taylor Campbell, new to netbsd-core.
- [on sale] Bioware, FTL, System Shock, and more. (OpenBSD Gaming, though it may extend to other BSDs.)
- BSD Magazine wants article feedback.
- OpenBSD router/firewall?
Accidental theme this week: Social media is a dead end.
- ViperCard – An open source re-creation and re-imagination of HyperCard. I… could have sworn I already linked to this but I can’t find it. (via)
- gokrazy – Go userland. Every language eventually reinvents the wheel this way. (via)
- The Game of Everything, Part 4: Civilization and Geography. First 3 parts linked last week.
- It’s Time for a RSS Revival. (via)
- Growth At Any Cost. Facebook is designed to take your data and give it to others. It will never not do that. Don’t participate.
- Cracks in the Wall. Blogging is better than social media, but of course I would say that. (via)
- And here’s some more reinforcement of that idea. (via)
- A 1970s disk drive that wouldn’t seek: getting our Xerox Alto running again. I like the platter shots.
- An oral history of the L0pht. Part 1, with subsequent parts linked. (via)
- The definitive resource for imagemagick scripts. I have needed this many times. (via)
- AlterEgo: A Personalized Wearable Silent Speech Interface. Neat but creepy creepy creepy from the illustations. (via)
- dotdrop, dotfile management. (via)
- Prince of Persia from Apple ][ to BBC Master. (via)
Your unrelated food link for the week: King Arthur test kitchen disasters. Summarized annually on April Fools Day, every year.
BSDNow 239 does not have an interview, but it does talk about using OpenBSD to prevent unwanted traffic out to the internet, plus a ‘poetic license’.
Aaron LI wrote a tool to update a running DragonFly system from an existing image – release or snapshot. I haven’t tried it yet, but it’s very promising. It’s up on Github so if this gets you excited, you know what to do.
Rimvydas Jasinskas created a loader.conf(5) hint that keeps various nata(4) devices from attaching during boot. This is super useful if it’s a device that screws up your boot process. and I think it’s also great if you get irritated having something in your dmesg every time about the device you never use, like a CDROM.