weirdr.net is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
Thanks everyone for the constructive discussion and participation in the naming poll over the past days. It was really helpful.
The former "Jails for NetBSD" project will move forward under the name "Cells for NetBSD".
New project page:
https://netbsd-cells.petermann-digital.de
Next steps will focus on stabilizing the current prototype, testing it with real-world workloads, and exploring further ideas around a NetBSD-native container technology.
boostedJust stumbled on http://bsdsec.net and damn, it’s perfect.All the security advisories & errata from #OpenBSD, #FreeBSD, #NetBSD, #MidnightBSD and the rest… all in one dead-simple page.
👉https://bsdsec.net
boostedThis afternoon's fun: pwning NetBSD-aarch64 (ARM)
(venv-pwn) qnetbsd$ python3 -c 'from pwn import * ; p = b"A" * 16 + p64(0x2001009f4); sys.stdout.buffer.write(p)' | ./win2
What is your name? Hello AAAAAAAAAAAAAAAA�
Goodbye, winner.
(venv-pwn) qnetbsd$ uname -a
NetBSD qnetbsd 11.0_RC2 NetBSD 11.0_RC2 (GENERIC64) #0: Wed Mar 4 21:02:00 UTC 2026 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/evbarm/compile/GENERIC64 evbarm
#pwn #netbsd #binaryexploitation #arm #aarch64 #pwntools #gdb #ctf
boostedHere’re some pictures from #NetBSD at SCALE
There’s a lot of interest in NetBSD :)
First is a Raspberry Pi 400 with ctwm running as a stratum 2 NTP server. Our neighbors just happen to be the Network Time Foundation.
boostedTestdriving NetBSD-11.0RC2 on ARM hardware (in VM!)
boostedI’ve been following the discussions about the name of my NetBSD project ("Jails for NetBSD") across a few platforms over the past days and really appreciate the thoughtful feedback.
The short version: the current prototype is probably closer to a cell or a cage than a strict jail, so the name might indeed not be perfect. The project originally started as an experiment inspired by FreeBSD jails, but while exploring NetBSD internals it evolved into something slightly different: controlled process isolation built around the secmodel framework, a different approach for the tool chain and configuration, and without resource limits and network virtualization.
Because of that, I’m open to renaming the project at this stage.
I’ve attached a small poll with a few candidate names — please vote if you like.
And if the right name isn’t listed yet, feel free to drop suggestions in the comments 🙂
Project site: https://netbsd-jails.petermann-digital.de/
#netbsd #jails #freebsd #openbsd
| Jails (current name): | 11 |
| Cells: | 14 |
| Realms: | 5 |
| Domains (clash with Xen): | 0 |
| Enclaves: | 4 |
| Cages: | 9 |
boostedverifying users of our text based operating system are over 18 by asking them questions about saddam hussein and invader zim #netbsd
boostedI started working on my implementation of #audio and #music production software (aka DAW) called Maolan. It supports #FreeBSD and #Linux, with experimental support for #Mac and #Windows. I am currently working on support for #NetBSD and #OpenBSD. When I get it to work on all the mentioned OSes at least in virtual machine, #Solaris is next. Once the core architecture is in place, contributions will be more than welcome. Stay tuned.
boosted@sylvie wow, this looks great! Guess I'm not the only one who thinks this is a good idea :)
#ALpineLinux and #NetBSD are the only OSes that keep my very old machines (turning 20 years old this year!) still running.
Enjoy!
boosted#CaliforniaLaw is written by people who are either very ignorant or very incompetent.
https://leginfo.legislature.ca.gov/faces/billStatusClient.xhtml?bill_id=202520260AB1043
They have assumed that all operating systems are like Microsoft Windows 11, Android, or iOS; and have written legislation for operating systems where people download glorified WWW client 'apps', from 'stores', which use 'accounts' that they have with vendors or Microsoft/Google/Apple.
But the legislation *as worded* *also* covers everything from #Debian and #Ubuntu through #Arch Linux and #MobaXTerm to #FreeBSD and #NetBSD and #OpenBSD; where users anonymously use package managers or ports systems to install applications, written by developers, on operating systems, from 'publicly available internet website' repositories.
There is no age field in the GECOS data in master.passwd(5) of course, and the reality is that no BSD or Linux-based operating system has this concept of apps/stores/accounts.
#MidnightBSD #FreeSoftware #Unix #California #USLaw #AgeVerification #GDPR
The #eurobsdcon 2026 Call for Papers is open!
https://2026.eurobsdcon.org/cfp/
Submit by June 20th, come to Brussels September 9-13 and mingle with #BSD people!
We also offer pre-submission guidance/mentoring, see within.
Wonder what BSD and the conferences are about? See https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html
@EuroBSDCon #freebsd #netbsd #openbsd #freesoftware #libresoftware #brussels #bruxelles
The #eurobsdcon call for papers is on!
https://2026.eurobsdcon.org/cfp/
We offer pre-submission mentoring, see within!
@EuroBSDCon #freebsd #netbsd #openbsd #freesoftware #libresoftware #brussels #bruxelles
Since the last article, the secmodel_jail / jailctl / jailmgr stack has moved closer to a coherent whole. The original guardrails remain unchanged: no modifications to existing kernel paths, no UVM hooks, no NPF integration, no hidden coupling. The scope stays explicit and the risk bounded.
Progress has focused on operations. Logging, lightweight supervision, and basic metrics are in place, shifting the question from "can this work?" to "can this be run?". Networking remains intentionally simple and host-based; for hard isolation, Xen is still the right boundary. Jails provide an operational frame inside the host, not a replacement for virtualization.
Resource budgeting is being prototyped again via the secmodel evaluation interface, touching allocation paths and scheduler run queues in a minimally invasive way, but it needs careful review.
There is now also a small landing page to make the ideas visible, including an experimental amd64 ISO based on NetBSD 10.1 for testing. If it sparks upstream interest or discussion around lightweight, explicit isolation on NetBSD, that is already a win.
The NetBSD Foundation will participate to Google Summer of Code 2026!
Google Summer of Code is a great opportunity to contribute to NetBSD and/or pkgsrc!
To learn more please give a look to NetBSD Blog post: https://blog.NetBSD.org/tnf/entry/gsoc2026_tnf
boostedI think 2026 is the right time to bring back BSDmag
https://archive.org/details/BSD_Magazine_11_2014/page/16/mode/1up
#DragonflyBSD #FreeBSD #OpenBSD #NetBSD #MidnightBSD #RunBSD
boostedHappy to see NetBSD is in Google‘s Summer of Code again for 2o26:
https://summerofcode.withgoogle.com/programs/2026/organizations/the-netbsd-foundation
My old friend, a Raspberry Pi A+, has been running my home heating system for months, just like it did back in 2014.
It has not missed a single moment.
It has sailed through every so called cloud outage.
It kept working flawlessly even when the Internet connection was down, because it simply does not need it.
This is the kind of technology I love.
Of course, it runs NetBSD!
rpicaldaia# uptime
6:23PM up 78 days, 20:16, 4 users, load averages: 0.33, 0.17, 0.13
rpicaldaia# uname -a
NetBSD rpicaldaia 10.1 NetBSD 10.1 (RPI) #0: Mon Dec 16 13:08:11 UTC 2024 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/evbarm/compile/RPI evbarm
boostedMid February #NetBSD #pkgsrc package counts for 2025Q4:
10.0: earmv4 12805 (didn’t have it listed before) 10.0: m68k 9622 (+1394) 10.0: powerpc 20711 (+2833) 10.0: sparc64 16866 (+1635) 10.0: vax 7495 (+748)
11.0: aarch64eb 24042 (+4001) 11.0: earmv4 4362 (+612) 11.0: m68k 8132 (+1271) 11.0: mips64eb 3852 (+363) 11.0: mipsel 440 (+449 - needs a new power supply) 11.0: powerpc 4552 (unchanged - needs space and power) 11.0: riscv64 18616 (+3233) 11.0: sh3el 7809 (+2239) 11.0: vax 5245 (+1879)
@kaveman Thank you so much for mentioning my little experiment with bringing Jails to NetBSD here - I really appreciate it.
In the meantime I’ve brought it to a somewhat usable state (at least in its core) and experimented with some interesting - though highly experimental - integration paths with UVM and NPF.
I’m currently thinking about what the best next step would be. One idea is a stripped-down version that complements the kernel code - essentially just secmodel_jail+kauth+jailctl+jailmgr, but without UVM and without NPF integration - possibly as a pkgsrc package?
The current experimental state is described here:
https://www.petermann-digital.de/blog/netbsd-secmodel_jail-update/
(Sorry - at the moment it’s available in German only.)
While writing my article, it became clear to me how much responsibility — and especially experience — is required to touch areas like UVM or NPF inside NetBSD.
I’ve learned a lot over the past weeks. But I’m also honest enough to say: I don’t yet have the depth of experience needed to modify those subsystems responsibly.
So I made a conscious decision.
I’ve created a new experimental branch for secmodel_jail / jailctl / jailmgr that is strictly additive:
- No changes to existing kernel code paths
- No UVM hooks
- No NPF integration
- No hidden coupling between subsystems
It adds new code only.
The reason is simple: even without deep UVM or NPF integration, the security model already delivers significant practical value for me. And in this reduced, explicit form, the attack surface is clear and the audit scope sharply defined.
This feels like the right first alpha candidate: understandable, bounded, and reversible.
https://github.com/MatthiasPetermann/netbsd-src/tree/feature/jails-v1-ga
boostedWell, learn something new every day :)
I just tried this on #NetBSD and it worked as described. Since #slackware now has nvi, it will be interesting for people there too.
I just wrapped up an interesting call that was originally scheduled for last week but rescheduled for today. The client is looking for a unique setup, and thanks to having an early re-read of the fantastic The Book of PF - 4th Edition, I was able to propose some configurations that had completely slipped my mind. The client is extremely curious, and this will likely lead to a new OpenBSD deployment in an interesting environment.
At the same time, I received an email from a professor at an Italian university whom I had encouraged to extend his lectures to include BSDs. I piqued his curiosity as well and proposed a session specifically on firewalls, focusing on OpenBSD and pf. He will be reading The Book of PF soon and will likely add it to his students' recommended reading list. I'll probably present them, too.
In short - one book, a thousand new possibilities. Infinite thanks to @pitrh for the massive and wonderful work behind it.
https://nostarch.com/book-of-pf-4th-edition
#OpenBSD #FreeBSD #NetBSD #RunBSD #PF #Firewalling #IT #SysAdmin
Tracked down the #NetBSD 11 WiFi problems I was having on i386! IT WAS EERO'S FAULT.
Eero has some wonky behaviour when it runs in WPA3/WPA2 mixed mode, sometimes it seems to return NULL packets during auth.
NetBSD11 has wpa_supplicant upgraded to 2.11, which blocks this kind of behaviour.
The fix turned out to be really simple: force wpa_supplicant to only use WPA2 and also specify "ieee80211w=0" in the network config.
I've got a working install; AND #Lagrange also built perfectly this time. I am really quite happy.
I will be even happier when I finally replace these stupid AP's, I have grown to detest them.
Make Your Own CDN with NetBSD
NetBSD is a lightweight, stable, and secure operating system that supports a wide range of hardware, making it an excellent choice for a caching reverse proxy.
https://it-notes.dragas.net/2024/09/03/make-your-own-cdn-netbsd/
Celebrating #WorldRadioDay with the most portable OS on the planet. 🌍
Whether it's the embedded controller inside a vintage radio or the legendary NetBSD Toaster 🍞, the ham/ 📻category in #pkgsrc has you covered.
Why just make toast when you can transmit packets over the airwaves at the same time?
#NetBSD #SDR #PacketRadio #HamRadio #VintageComputing #Linux #unix
Make your own Read-Only Device with NetBSD
One detail that is often overlooked when dealing with embedded (or remote) devices is a key point of vulnerability: the file system.
https://it-notes.dragas.net/2024/09/10/make-your-own-readonly-device-with-netbsd/