← Feed

Posts

• View post

  Updated: "No Proxmox Backup Client for RHEL? Hold My Container Runtime" The client borrowed from ayufan's old v3.4 server image has a proper replacement: ghcr.io/chofstede/pbs-client Just proxmox-backup-client, x86_64 + aarch64, from Proxmox's official repo, rebuilt weekly. On RHEL 10 aarch64: 28.8 GiB in ~3 min. https://blog.hofstede.it/pbs-client-rhel-container/ https://github.com/chofstede/pbs-client #Proxmox #ProxmoxBackupServer #Podman #RHEL #ARM64 #Co...

• View post

  Unaufgeregte und sachliche Berichtserstattung in der deutschen Boulevardpresse 🤡 :facepalm: #bild #php #php2shell #boulevard #wirwerdenallesterben

• View post

  Maintenance done on burningboard.net 🔧 - Full patch run: host and all jails now on FreeBSD 15.1-RELEASE-p6 - Package repos switched from quarterly to latest - eMudhra CA situation mitigated: base already dropped the emSign roots, but ca_root_nss still shipped them and certctl pulled them right back in. Both are now explicitly marked untrusted on the host and in every jail. - Systems rebooted, everything back up Bonus: said goodbye to Python 3.11 🐍👋 Thanks for your patience! #FreeBSD #TLS #e...

• View post

  php2shell was fixed in the FreeBSD ports tree within a day, but the arm64 packages weren't built yet. My jail host runs on arm64. So I built PHP 8.5.12 myself, without Poudriere: a throwaway Bastille jail, a 2026Q4 ports checkout, binary dependencies from pkg, and a small local pkg repository for the affected jails. Also in there: the mistake that almost cost me all 32 packages. https://blog.hofstede.it/php2shell-on-arm64-building-fixed-php-packages-without-poudriere/ #FreeBSD #PHP #...

• View post

  Maintenance report for burningboard.net 🛠️ 🧵 1/3 Highlight of the day: all internal traffic now runs over #IPv6 only! 🎉 Our instance runs on #FreeBSD in separate jails: nginx, Puma/streaming, Sidekiq and the database. Every jail has had IPv6 from day one, but some of the services still talked to each other over private IPv4. Not anymore: • nginx -> Puma & streaming • Rails, Sidekiq & streaming -> PostgreSQL & Valkey • Prometheus exporters, Loki, OpenSea...

• View post

  @tux @Mathias @AlienJay https://www.heise.de/hintergrund/Altersverifikation-im-Fediverse-Wie-der-KIDS-Act-Mastodon-herausfordert-11474098.html

• View post

  My old ThinkPad T480 is back in daily use, running FreeBSD 15.1. :freebsd: Xfce, 5 GHz Wi-Fi, hardware video decoding in Firefox and Chromium (checked in the decoder, not just a capabilities page), a webcam that survived a 45-minute Zoom call, a Bluetooth speaker via virtual_oss, and SSH and Git signing from a smart card. It's boring now. That's the point. https://blog.hofstede.it/the-t480-is-back-my-freebsd-151-laptop-from-boot-to-browser/ #FreeBSD #ThinkPad #T480 #BSD #Xfce

• View post

  Your playbook failed. Management wants a root cause. You have 30 seconds. Introducing larvitz.bofh, an Ansible collection that returns Bastard Operator From Hell excuses: "Root cause: The mainframe tripped over an unhandled SIGSEGV in the automated espresso machine." Seedable, so each host keeps its story straight. Bonus category: Deutsche Bahn. https://codeberg.org/Larvitz/ansible-bofh #Ansible #BOFH #SysAdmin #DevOps #Codeberg #Humor #Linux

• View post

  @sinchens_@mastodon.social Bei der DKV fällt er einem exakt 3x in den Satz und dann gibt er auf und man kommt ins Callcenter (vermutliche ein accessibility fallback, falls jemand offensichtlich nicht mit dem Interface klar kommt) .. 😇

• View post

  Schwarz-Rot nennt es „Beitragssatzstabilität”. Übersetzt heißt das: - Pflegende Angehörige: bis zu 30 % weniger Rentenansprüche - Pflegegrade werden absichtlich schwerer zu bekommen - höhere Pflegebeiträge für Kinderlose - Medikamenten-Zuzahlung +50 % - beitragsfreie Mitversicherung für Ehepartner:innen fällt weg - Zahnersatz-Zuschuss gekürzt Die Lasten tragen Kranke, Pflegende, Geringverdiener:innen. Eine echte #Bürgerversicherung, die Beamte und Selbstständige einbezieht? Tabu. Das is...

• View post

  https://netzluege.netlify.app #humor #networking #ipv6 #verschwörung #netzwerk

• View post

  New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas. The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15.1-RELEASE. https://github.com/chofstede/ansible-become-mdo Feedback welcome, especially from anyone already using mac_do in production. #FreeBSD #Ansible #RunBSD #DevOps #Automation

• View post

  Still one of the best explanations about SELinux, that I know: https://github.com/mairin/selinux-coloring-book/blob/master/PDF/en/selinux-coloring-book_A4-Stapled.pdf #linux #selinux #learning

• View post

  A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS. With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that cost me twenty minutes: https://blog.hofstede.it/three-test-jails-on-a-512-mb-free-tier-vps/ #FreeBSD #Ansible #pkgbase #SysAdmin #Devops

• View post

  Ansible is easy to install. A sane, reproducible development environment takes more thought. My downstream-first setup uses RHEL 10.2, Podman, VS Code Dev Containers, and Red Hat-packaged Ansible Development Tools, while keeping the boundaries between upstream projects, downstream products, development containers, and production Execution Environments explicit. https://blog.hofstede.it/sane-development-environments-for-ansible-automation-code/ #Ansible #RHEL #Podman #devop #linux

• View post

  AS201379, part 5: joined EVIX (an IXP whose fabric is VXLAN tunnels, so no port and no new machine), got IPv4 onto an IPv6-only network, and cleaned up four routers' worth of config drift. Fourteen BGP sessions, all FreeBSD, all still fitting on one Grafana screen. https://blog.hofstede.it/running-your-own-as-an-ixp-over-vxlan-ipv4-on-the-overlay-and-a-config-spring-clean/ #FreeBSD #BGP #IPv6 #Networking

• View post

  I really don’t need any more peers for my AS201379! (Okay, maybe a few more...) Started back in December 2025, and now this "little" infrastructure is running: 14 individual eBGP sessions 3 Internet Exchanges Multiple transit providers 110+ direct peers All 100% IPv6 (2a06:9801:1c::/48) because legacy IP belongs in the last century. Powered entirely by FreeBSD :freebsd: 4 routers on 15.1-RELEASE running FRR and PF. #BGP #IPv6 #FreeBSD #Routing #Networking #sysadmin

• View post

  From the engine room: Today, I updated our entire Mastodon infrastructure for burningboard.net to FreeBSD 15.1-RELEASE-p1 :freebsd: and applied all quarterly package updates. This included the Mastodon App-Server, the opensearch cluster and the Grafana monitoring stack. Also applied the Mastodon 4.6.4 update and did some cleanup (postgresql repack, removal of orphaned media files, search index rebuild, etc). All looking perfectly stable and healthy: https://status.burningboard.net :-) #masto...

• View post

  @slowclap@social.smplfi.com "Huge" .. It's roughly of 200GB of ripped DVDs 😂

• View post

  I was ill last week and discovered something uncomfortable: a huge Jellyfin library isn't entertainment, it's homework. Every time I opened it, it asked "what do you want?" and I just scrolled. So I built a TV station instead. ErsatzTV turns a media library into real linear channels with schedules and logos. It ships for Linux, Windows and macOS. My server runs FreeBSD. Turns out the entire porting effort was one conditional. The code asked "is this Linux?" when it...

• View post

  My digital sovereignty stack in 2026: Laptop OS: Linux (Fedora 44) :fedora: Server OS: FreeBSD 15.1 :freebsd: Phone: Android 17 :android: E-Mail: Self hosted dovecot/opensmtpd server File storage/sync: Nextcloud (Selfhosted) Contacts/Calendar: DAVx5 (Nextcloud backend) Camera Roll/Photos: Immich (selfhosted) Document storage: Paperless NGX (selfhosted) Bookmark storage: Kollect (my own self-developed and self-hosted app) Browser: Vivaldi (Linux, Android) :vivaldi: Mail-Client: Thunderbird...

• View post

  Had some unused keyboard body laying arround here for a while. A Keychron K8 pro, that I used in the past. Did build a fresh keyboard out of it today: - Body: Keychrom K8 Pro ANSI - Switches: Akko Rosewood (Linear, lubed) - Keycaps: Cheap double-shot PBT set "Botanical" For a budget build, it's super comfortable to type on and the plastic body of the K8-Pro with the Rosewood switches gives it a nice deep "thocky" sound profile while overall being rather quiet. Definit...

• View post

  I wanted to build Kollect for Android without filling Fedora 44 with Java, Gradle, Android SDKs, emulators, and assorted development debris. So I put the entire mobile toolchain in an Ubuntu Distrobox. It builds APKs, deploys them via wireless ADB, and even runs the Android emulator. The app also enriches links locally using Gemini Nano through AICore on my Pixel 10 Pro. Private, fast, and effectively free. https://blog.hofstede.it/android-development-on-fedora-44-without-installing-an-androi...

• View post

  I've been using my iFixit precision bit kit for years to crack open phones, laptops, and random electronics that had no business being that hard to open. Today, completely out of nowhere, it finally clicked. The kits come in sets of 16, 32, or 64 bits. Not 15. Not 20. Not some "nice round number for humans." 16, 32, 64. As in literal computer bits. Well played, iFixit. Well played. 😅 #NerdHumor #iFixit #RightToRepair #TechJokes #ITookTooLongToGetThis

• View post

  Finally got around to helping a friend with a phone repair today: shattered back glass + new battery on an iPhone 15 Pro. Waterproofing + glue everywhere made getting inside an absolute nightmare. Removing the shattered back glass was the worst part. Tiny shards everywhere, so much tedious, careful work. 😩 Job's done, phone's fixed, but that was NOT a fun repair. Seriously though, why do manufacturers keep using brittle glass for the backs of $1000+ phones? Sturdy plastic would surviv...

• View post

  Carsten Linnemann wird Gesundheitsminister. Ausgerechnet der Mann, der seit Jahren vor allem dadurch auffällt, nach unten zu treten: Gegen Bürgergeldempfänger, gegen Geflüchtete und gegen die Cannabis-Legalisierungmit mit einer Politik, die soziale Probleme regelmäßig zu individuellen Fehlleistungen erklärt. Wer Gesundheit vor allem durch die Brille von Leistung, Disziplin und Sparzwang betrachtet, ist für dieses Amt keine gute Nachricht. Gesundheitspolitik braucht Solidarität, nicht neoliberal...

• View post

  New on the blog: my Home Assistant setup on FreeBSD. Home Assistant OS runs in a bhyve VM, but bhyve has no USB passthrough, so Zigbee2MQTT and Mosquitto live in a VNET jail with the ConBee II. Homematic comes in via a CCU3, and three IKEA Matter-over-Thread devices use my Nanoleaf Shapes controller as their border router. Three radio ecosystems, 474 entities, one dashboard. https://blog.hofstede.it/my-home-assistant-setup-bhyve-freebsd-jails-zigbee-homematic-and-matter-over-thread/ #FreeB...

• View post

  Little bit of urban photography from my neighborhood. #photography #urbamism #neighborhood

• View post

  New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy. A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data. The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries. https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/ #FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

• View post

  #pastpuzzle 507 🟩🟩🟥🟥 (-11) 🟩🟩🟥🟥 (+11) 🟩🟩🟩🟥 (+5) 🟩🟩🟩🟥 (+4) x/4 🟥 https://www.pastpuzzle.de