#freebsd

gehrke_test@libranet.de

Flash APU 1D4 / Coreboot

Heute hab' ich Blut und Wasser geschwitzt - umso süßer ist der Erfolg!

Nach einem Hardwareschaden auf der #SSD meiner #APU1D4 hatte ich neue SSDs beschafft: 'msata 16g' - 4 StΓΌck, weil ich auch mehrere dieser Boards besitze.
Vom Hersteller verbaut und spezifiziert war 'msata 16d', aber die waren nicht mehr zu bekommen.

Naja, war ja klar - keine davon wurde von der #Hardware erkannt, egal ob unter #GNU/Linux oder #FreeBSD.

Nach viel Recherche und wochenlangem Zaudern war ich heute mutig/verzweifelt genug, das #Coreboot #BIOS zu flashen. Vielen Dank ΓΌberigens an #VoyageLinux fΓΌr die Starthilfe.

NatΓΌrlich habe ich mir ins HΓΆschen gemacht, dass ich Depp das Board kaputt flashe, besonders wegen einer Meldung zu angeblich falschen Chip. Aber ein beherztes '--force' brachte den Erfolg. Zuerst das Flashen selber und dann nach dem Neustart, dass die Disk nun erkannt wird. πŸš€

Nun kann ich die Hardware weiter nutzen und der Weg ist frei zu einer stressfreihen Migration meiner #Firewall zwischen den Feiertagen.

#PC-Engines #pfSense #flashrom

Komandozeilen-Output

2 msata SSDs: 16d + 16g

lapinbilly@diaspora.lapinbilly.eu

Un paquet de mises Γ  jour pour FreeBSD sont en attente sur le serveur popeye.
Je vais lancer la procΓ©dure dans la soirΓ©e, les services suivant vont Γͺtre indisponible un petit moment.


A set of FreeBSD patches are pending on the popeye server.

I will proceed to server and jails upgrade later in the evening.

The following services will be unavailable for a while:

#podmin #freebsd #matrix #security

diane_a@diasp.org

"When you install a Linux system its just a bunch of RPM or DEB packages. For example of you install CentOS 7.8 Minimal variant you end up with several hundred RPM packages installed. After a week or month many of these packages will get updates sometimes making this CentOS system unusable or even unbootable (recent GRUB Boothole problem for example). On the contrary FreeBSD comes with a Base System concept. This means that when you install FreeBSD you install a minimal system as a whole. No packages or subsystems to be separately updated. Just whole Base System. That means that /boot /bin /sbin /usr /etc /lib /libexec /rescue directories are untouchable by any packages. When you decide to install packages (or build them using FreeBSD Ports) they will all fall into the /usr/local prefix. That means /usr/local/etc for configuration. The /usr/local/bin and /usr/local/sbin directories for binaries. The /usr/local/lib and /usr/local/libexec for libraries and so on. The FreeBSD Base System kernel modules are kept in the same dir along with the kernel in the /boot/kernel directory. To make things tidy all kernel modules that are provided by packages go into the /boot/modules dir. Everything has its place and its separated."

All this quickly became lost when #systemD from #Redhat aggressively took over...

https://vermaden.wordpress.com/2020/09/07/quare-freebsd/

#FreeBSD #Linux #systemD

diane_a@diasp.org

So...I'm thinking of setting up another server on the internet again. I wonder how safe it can be...

Decades ago I used to have a public facing headless server on the internet, with a minimal configuration many today would consider an embedded computer. It was Gentoo stripped down to the very basics of whatever I needed, no more, no initrd, systemd, etc. The kernel compile had everything stripped down, no multicasting or unused TCP features. I would often watch every packet across the ether and the silly portscans and fishing http gets. Of course, no java* or systemd, as they are huge bloat magnets for collecting packages riddled with CVE issues. I never had a security issue after years of solid uptime. What killed it was an extended power outage depleting the UPS after a week and the hard drive refused to spin back up...

I might go with something different this time, like #FreeBSD, or something like #busybox

Something safe enough to run a NAS with... yes, on the same box facing the internet, so vetted security will be a pretty big thing. Auditing it should be a lot of fun. What could possibly go wrong...