BSDNow.TV Episode 51: Engineering Nginx

In this BSD Now episode, hosts Allan Jude and Kris Moore show us how to set up a secure, SSL-only webserver. In addition, they interview Eric Le Blan regarding FreeBSD’s role, as well as community participation, in the commercial server space.

Check out the official page here: http://www.bsdnow.tv/episodes/2014_08_20-engineering_nginx

 

BSDNow.TV Episode 50: VPN, My Dear Watson

In this BSD Now episode, hosts Kris Moore and Allan Jude show us how to protect our internet traffic with a BSD-based VPN. In addition, they have an interview with Robert Watson, of the FreeBSD core team, regarding security research, exploit mitigation, etc. Click play below to tune in:

Check out the official page here: http://www.bsdnow.tv/episodes/2014_08_13-vpn_my_dear_watson

FreeBSD Journal July/August Issue now available

The 4th and July/August edition of the FreeBSD Journal is now available through Amazon, iTunes, and the Google store. In this issue, there are sections about FreeBSD and virtualization, Amazon’s EC2, bhyve, Xen, the USE Method, etc.

Check out the official post here: http://freebsdfoundation.blogspot.com/2014/08/julyaugust-issue-of-freebsd-journal-now.html

More information on how to subscribe here: https://www.freebsdfoundation.org/journal

Simple ZFS Backup Script

This article by Daemon Security shows us how to create a simple ZFS backup script in FreeBSD.

ZFS is a powerful filesystem that helps to maintain integrity by avoiding data corruption. A useful feature of ZFS is its ability to clone filesystems. Creating snapshots allows for filesystems to be cloned and restored if anything happens to the original data. Going beyond this is the ability to maintain incremental changes between snapshots. There are a number of scripts available that setup a similar backup system, but the idea here is to maintain a current dataset, with the ability to restore from two previous backups.

The first step is to setup a backup system, or backup drive to use for the ZFS snapshots. In this setup, there is a separate remote FreeBSD system where the snapshots will be stored. This remote system has an encrypted ZFS filesystem (AES XTS with geli on boot), which provides a secure backup of the data. The root account on the local system is setup with an SSH key and this is deployed to the remote system:

Check out the official post for step-by-step instructions: http://www.daemon-security.com/2014/08/zfsbackup-0805.html

iXsystems Hosting MeetBSD California 2014, Western Digital San Jose

MEETBSD2014iXsystems will be hosting this year’s MeetBSD California, at Western Digital located in San Jose. This “unConference” will take place on November 1-2, 2014.

MeetBSD California is the premier BSD conference in the San Francisco Bay Area. Since its inception in 2008, MeetBSD California has been held every two years in Silicon Valley, bringing together BSD community members from all over the region and around the world.

Previous settings for MeetBSD California have included the Google and Yahoo! campuses and the Hacker Dojo in Mountain View. This year’s venue, the Western Digital campus in San Jose, will remind attendees that the hardware BSD runs on is just as important as the applications it can run.

Matt Rutledge, Senior Vice President and General Manager of Storage Technologies for WD, said “Open Source technology continues to be key to the future of scalable, maintainable computer systems, and groups like those that develop the BSD operating systems are a key part of that ecosystem. We’re thrilled to welcome the BSD community to WD for MeetBSD 2014, and look forward to the open, collaborative innovation they represent.”

Check out MeetBSD.com for more information on how to register.

Official announcement: http://www.prweb.com/releases/2014/08/prweb12077427.htm

FreeBSD ZFS snapshots with zfstools

In this blog by Michael W Lucas, he shows us how to use ZFS snapshots with zfstools on FreeBSD.

In my recent survey of ZFS snapshot automation tools, I short-listed zfstools and zfsnap. I’ll try both, but first we’ll cover FreeBSD ZFS snapshots with zfstools. Zfstools includes a script for creating snapshots, another for removing old snapshots, and one for snapshotting MySQL databases. The configuration uses only ZFS attributes and command line arguments via cron.

Check out the full blog with instructions here: http://blather.michaelwlucas.com/archives/2140

pkg 1.3.0 is released

portmgrThe FreeBSD Ports Management Team have released pkg 1.3.0 after 9 months of hard work. The following lists some of the major changes:

- New solver, now pkg has a real SAT solver able to automatically handle conflicts and dynamically discover them. (yes pkg set -o is deprecated now)
- pkg install now able to install local files as well and resolve their
dependencies from the remote repositories
- Lots of parts of the code has been sandboxed
- Lots of rework to improve portability
- Package installation process has been reworked to be safer and handle properly the schg flags
- Important modification of the locking system for finer grain locks
- Massive usage of libucl
- Simplification of the API
- Lots of improvements on the UI to provide a better user experience.
- Lots of improvements in multi repository mode
- pkg audit code has been moved into the library
- pkg -o A=B that will overwrite configuration file from cli
- The ui now support long options
- The unicity of a package is not anymore origin
- Tons of bug fixes
- Tons of behaviours fixes
- Way more!

Check out the official announcement here: https://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-July/000084.html