OpenBSD workstation hardening.

I wanted to share a list of hardening you can do on your OpenBSD workstation, and explaining the threat model of each change...

https://dataswamp.org/~solene/2023-12-31-hardened-openbsd-workstation.html

#security #system

OpenBSD KDE Plasma Desktop.

The KDE Plasma 5.27 is available on OpenBSD -current and will be part of the next release 7.5...

https://rsadowski.de/posts/2024-01-09-openbsd-kde/

#kde #desktop

Use OpenBSD in web browser.

I have created a service that allows you to use OpenBSD (and other operating systems) in a web browser. The URL to the service is instantworkstation.com. Hope it may be useful to you...

https://www.reddit.com/r/openbsd/comments/1ad1puz/use_openbsd_in_web_browser/

#browser #system

OpenBSD system-call pinning

... In December, De Raadt sent a patch to the OpenBSD mailing list expanding OpenBSD's restrictions on the locations from which a process can make system calls...

https://lwn.net/SubscriberLink/959562/0578b8e463f790c1/

#pinsyscalls #syscall

OpenBSD wallpapers.

This repository is a collection of cool and fresh wallpapers designed specifically for OpenBSD enthusiasts...

https://github.com/raffaelschneider/openbsd-wallpapers

P. S. Some of them are really amazing

Some OpenBSD features that aren't widely known.

In this blog post, you will learn about some OpenBSD features that can be useful, but not widespread. They often have a niche usage, but it's important to know they exist to prevent you from reinventing the wheel...

https://dataswamp.org/~solene/2024-02-20-rarely-known-openbsd-features.html

#system #security

Tech Independence

Tech independence is not depending on any particular company or software. The only tools you need are the common open source basics built into any Linux or BSD operating system — free public-domain tools that are not owned by anyone, and can run on any computer.

Learn a few of these basic tools, and you can run your own private server on any computer forever, for the rest of your life. Host your own website and email. Keep your own contacts and calendars synced with your phone. Back up and sync your photos, movies, and music to your own private storage. No more subscriptions needed.

You can ignore all the companies offering “solutions”, even if they are free, because they take away self-reliance. The point is to know how to do it yourself, not to have somebody do it for you. It’s worth a little up-front work, like learning how to drive.

Below are simple step-by-step instructions that work. Instead of drowning you in options, it uses an operating system called OpenBSD...

https://sive.rs/ti

#services #system

KISS high-availability with OpenBSD.

My HA solution for Web and Gemini is based on DNS (OpenBSD's nsd) and a simple shell script (OpenBSD's ksh and some little sed and awk and grep). All software used here is part of the OpenBSD base system and no external package needs to be installed - OpenBSD is a complete operating system...

https://foo.zone/gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.html

#web #nsd #ksh

OpenBSD 7.5 released! #release

20 years since "and we're just starting": undeadly.org turns 20.

It's been 20 years since the first undeadly.org post appeared...

https://www.undeadly.org/cgi?action=article;sid=20240409044953

#undeadly

OpenBSD Workstation for the People.

This is an attempt at building an OpenBSD desktop than could be used by newcomers or by people that don’t care about tinkering with computers and just want a working daily driver for general tasks...

https://www.tumfatig.net/2024/openbsd-workstation-for-the-people/

#desktop #system

BSDCan 2024:

- Implementing Routing Domains on an OpenBSD workstation for use with WireGuard By: Josh Grosse;
- Summa Tetraodontidae: Thomas Aquinas Explores OpenBSD's Medieval Orderliness By: Corey Stephan;
- Supporting Business IT and network needs with OpenBSD and NSH By: Tom Smyth;
- Why rewrite fw_update(8)? By: Andrew Hewus Fresh;

All videos - The BSDCan 2024 Playlist is now complete.

#video #conf

OpenBSD Webzine ISSUE #17.

The webzine is almost 10 months late, I got unable to handle the webzine for a while and so I started to accumulate a huge backlog. As time passed, it became more and more daunting to deal with all the content. In order to get out of this situation, here is a special webzine edition with all the links gathered since then, separated in three categories of "difficulty": simple / medium / advanced. It is only an attempt to separate complicated topics from content everyone would enjoy, do not hesitate to take a peek on the three levels :)

https://webzine.puffy.cafe/issue-17.html

#webzine

httpd rocks.

Setup an HTTPS-enabled web server with httpd on OpenBSD. Includes A+ security report configuration with haproxy...

https://httpd.rocks/

#web #httpd #haproxy