SecBSD

Open source volunteer project to develop security focused UNIX-like operating system based upon OpenBSD for security researchers, pentesters, bug hunters, cybersecurity folks, hacktivists and paranoid dudes. Inside, the development process follows the same philosophy as OpenBSD, we believes in strong security, privacy and cryptography by default.

https://www.secbsd.org/

#system

📺 The OpenBSD hypervisor in the wild, a short story, but getting longer. (Dutch)

In the Summer of 2018 —after a poll on Twitter— OpenBSD Amsterdam started testing with vmm(4)/vmd(8). Mostly to see how far we could take it; more importantly to give back to the project. Little did we know where it would take us. During this talk, Mischa will outline how it all started, how it’s built, how we operate the platform, what speedbumps we encountered and where we are now.

#video #vmm #vmd

Benchmarks: FreeBSD 13 vs. NetBSD 9.2 vs. OpenBSD 7 vs. DragonFlyBSD 6 vs. Linux.

Here is a look at how DragonFlyBSD 6.0.1, FreeBSD 13.0, NetBSD 9.2, and OpenBSD 7.0 are competing against various Linux distributions like CentOS, Clear Linux, and Ubuntu.

#bench #bsd #linux

What are the VPN available on OpenBSD.

I wanted to write this text for some time, a list of VPN with encryption that can be used on OpenBSD. I really don't plan to write about all of them but I thought it was important to show the choices available when you want to create a VPN between two peers/sites.

https://dataswamp.org/~solene/2021-12-11-openbsd-vpn.html

#vpn #network

Instructions and files to set up a functional OpenBSD server.

A collection of scripts to ease bootstrapping of a new OpenBSD server. Includes nginx with SSL, mail with DKIM, WireGuard and IKEv2 VPN setup. Stack:

- Shell: zsh, oh-my-zsh, tmux
- SSH
- Web server – nginx with automatic http to https redirect and A+ SSL
- Mail server – OpenSMTPD, Dovecot, Rspamd, Redis, RainLoop (+PHP, optional)
- Brute force protection: PF
- VPN: OpenIKED, WireGuard, Unbound, PF

https://github.com/d32f123/openbsd-server-setup

#server

Introduction to OpenBSD sound system.

#sound #desktop

https://linkmeup.ru/podcasts/1990/ - Russian podcast, today about OpenBSD.

#system #video

🎄 Happy New Year!

Episode 435. Year End Interview.

In this last episode of 2021, we interview Solene from OpenBSD. She’s blogging about her experiences with OpenBSD on dataswamp.org, the webzine she created, how she got involved and other topics. Enjoy and best wishes for 2022!

https://www.bsdnow.tv/435

#podcast

OpenBSD BASED Challenge - Day 1, Day 2, Day 3...

#system

OpenBSD Webzine #6.

https://webzine.puffy.cafe/issue-6.html

#news #webzine

OpenSMTPD on the Local Network.

One of the many great things about OpenBSD is that it comes with OpenSMTPD by default, allowing my servers to communicate with themselves and each other via the SMTP protocol. This is used to send insecurity reports, failed cron jobs, et cetera to various users on the system. However, I don’t want to have to check each machine’s mail spool to see if there are any messages I need to act upon. I’d much rather have a central mail server to collect all these messages so that I have a single place to check...

https://josephchoe.com/2021/12/24/opensmtpd

#opensmtpd #mail

TLS Acceleration with relayd.

relayd can provide secure TLS acceleration...

https://wiki.ircnow.org/index.php?n=Relayd.Acceleration

#relayd #tls #ssl

sysclean.

sysclean is a perl(1) script designed to help remove obsolete files between OpenBSD upgrades. Sysclean compares a reference root directory against the currently installed files, taking files from both the base system and packages into account. Sysclean does not remove any files on the system. It only reports obsolete filenames or packages using out-of-date libraries.

https://github.com/semarie/sysclean

#system #update

Using KeePassXC with SSH-Agent on OpenBSD

I’m using KeePassXC to manage my secrets. But when I log into my OpenBSD laptop, I’m still asked to enter my SSH passphrase to fill-in ssh-agent(1). Somehow, it’s great ; maybe other system don’t even propose that feature out of the box. But what if KeePassXC could know about my passphrase(s) and interact with ssh-agent(1). Well, it can...

https://www.tumfatig.net/2022/using-keepassxc-with-ssh-agent-on-openbsd/

#keepassxc #ssh

OpenBSD on the PinePhone

Installing OpenBSD on the Pinephone might seem straightforward, as the hardware is essentially just an arm-based SBC with a built in screen and modem. The Allwinner A64 SoC is supported by the OpenBSD kernel, so we can at least expect it to boot. However, no specific support for the Pinephone hardware is included in the most recent OpenBSD release, making it unlikely that we'll get much beyond output via the serial terminal. Furthermore, unlike many SBCs, the Pinephone doesn't have an on-board ethernet connection. This will make the installation slightly more complicated, as we can't install the base packages from a local network server. Nevertheless, if OpenBSD is ever going to run in a usable fashion on the Pinephone we need to start somewhere...

https://www.exoticsilicon.com/crystal/pinephone_openbsd

#system #install #pinephone

GoT all the things.

I was basically using cvs for a long time for OpenBSD and some Github for open source projects, until this thread on ports made me decide to just move all my repos to GoT, which I had the privilege to see an early version long time ago in a hackthon...

https://x61.sh/log/2022/01/20220127T190458-got.html

#got #git #feedback

Blockor.

Protect BSD Unix computer servers from brute-force attacks. It works on top of the OpenBSD Packet Filter(PF) firewall.

https://github.com/muktadiur/blockor

#security #firewall #pf

Mail Server Hosting on OpenBSD.

Mail server is an everyday requirement for everyone. Why trust and rely on 3rd party mail servers? There are many reasons to host your mail server today, in just one sitting! The following section mentions the significant benefits of hosting a mail server...

https://serhanekici.com/005-mailserver-openbsd.html

#opensmtpd #mail