𝙹𝚘𝚎𝚕 𝙲𝚊𝚛𝚗𝚊𝚝 ♑️🤪

IRL: 🐡 🥋 📸 🌱 🍻 🎸
All we are is dust in the wind.

🖖☺️ Opened to discussions.
I will check your profile before accepting a follow request.

🔁 Retoot anything at will.
🕵️‍♂️ I don’t post things that should be kept secret.

♻️ Old messages are automatically deleted.

🗣️ 🇫🇷 🏴󠁧󠁢󠁥󠁮󠁧󠁿

#OpenBSD #RunBSD #UNIX #Slackware #FOSS #GoToSocial #MartialArt #Karate #Kobudo #ShindoMusoRyuJodo #Photography #Plant #Gardening #Music #Guitar

Public Key

npub1s5hwf7kw62h6ykqzjddzj74ywaf670pe296mr42yk83afyr3c82sa3h379

NIP-05 Address

joel@gts-tumfatig-net.mostr.pub

Profile Code

nprofile1qqsg2thylt8d9taztqpfxk3f02j8w5a08su4zad364ztrc75jpcur4gpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q73jxpt

Publishing to

relay.ditto.pub

Author Public Key

npub1s5hwf7kw62h6ykqzjddzj74ywaf670pe296mr42yk83afyr3c82sa3h379

Show more details

Last Notes

2026-06-02 21:59:01 UTC

:cloud: There is no Cloud!
:server: Only someone else’s #selfhosting

2026-06-02 21:59:01 UTC

- reply

@nprofile…vf35 one landed here, somewhere in Nederland, and was displayed in France.

2026-06-02 07:15:36 UTC

Hey :slackware: #slackware users, what is your preferred way of isolating (as-in what are zones/jails for Linux) daemons ? Is docker/podman the usual way-to-go or are there smarter native tools?

2026-05-28 22:00:58 UTC

- reply

@nprofile…hl5m Ctrl-Left or Ctrl-Right move cursor by words in the shell. #my2cents 😬

2026-05-26 19:28:21 UTC

This #GoToSocial instance has been migrated from #OpenBSD 7.8/arm64 to OpenBSD 7.9/amd64/bhyve.
:GoToSocial: ➡️ :openbsd: ➡️ :bhyve: ➡️ :freebsd: ➡️ 🙌
If you can read this, I didn’t mess up 😅
Nothing wrong with running it on the ODROID, I just wanted it back to a DC.

2026-05-26 19:28:21 UTC

- reply

@nprofile…hl5m yes, indeed. In vi, I would have thought of it. Although I can’t edit a file in anything but vi, I must admit I could never stand this mode in the shell 😬

2026-05-26 19:28:21 UTC

- reply

@nprofile…q6qh hum… most of the reason is memory muscle. But also I like to use the compression option (that cp does not have) from tar. The preserve metadata flag probably behaves the same way on cp and tar. But tar also manages non-standard files in a better manner IMO. But once again, this is mostly memory muscle as I also use the same command when copying from server to server via SSH.

2026-05-26 19:28:21 UTC

- reply

@nprofile…hl5m yep, like "next word" / "prev word" for commandline editing. Although that probably implies set -o emacs which breaks the whole vi.

2026-05-26 19:28:21 UTC

- reply

@nprofile…q6qh you may want to disable compression then 🤔

2026-05-26 19:28:21 UTC

This meeting could have been an SMS.

2026-05-25 09:24:33 UTC

Hey #Noctua! What about building silent fans for humans? Like standing one with 30-50cm blades that works at 20dB…

2026-05-25 09:24:33 UTC

- reply

@nprofile…q6qh not sure this will take much temperature out of my forehead 🤣

2026-05-20 13:13:27 UTC

Hey People,
When your #OpenBSD upgrades to 7.9 are done, don’t forget to upload the #dmesg to https://dmesgd.nycbug.org/dmesgd?do=index
It helps idiots like me select supported hardware from time to time 😬 Thank you.
Also make sure the devs get to know what works or not: https://www.openbsd.org/faq/faq4.html#SendDmesg
#79HYPE

2026-05-20 13:13:27 UTC

Dear #LinkedIn or #Microslop,
I receive quite a few unsolicited private messages from "Leading start-up mastering AI to improve your company".
Can you add a [ fuck off ] button to you Web User Interface?
Thank you.

2026-05-20 13:13:27 UTC

Reading FreeBSD CVE and thinking… so that’s Free as in you’re free to log into my server without a single credential… 🫢😬

2026-05-14 16:43:43 UTC

The extra magic spells to put the secondary #dhcpd and #unbound services in #FreeBSD jails; while still be able to synchronize with #OpenBSD.
https://www.tumfatig.net/2026/dhcpd-and-unbound-in-freebsd-jails/

2026-05-05 00:14:54 UTC

This shows a power consumption difference while transferring (at 500Mbps-1Gbps using rsync/ssh) data from a WD 16TB with Intel N150 to a WD 16TB with ARM Cortex-A53. And makes me confident migrating to #arm is a good idea - power consumption wise. Both run #FreeBSD 14 BTW.
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KRBM2VYSEZ1R6TX5ZXRT09WP.png

2026-04-29 10:42:18 UTC

- reply

@nprofile…5n7j so… do we all need to go for the pretty colored (or not) optimized for silent and efficiency brands or do the noname $2 plastic black ones do the job as good?

2026-04-24 05:29:48 UTC

/me: was you day productive?
/also_me: define productive!
#OpenBSD #WindowMaker #DockApps #sndiod
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KQ7WP47ASW8S4WCC559W6ZNP.png

2026-04-15 22:35:10 UTC

Ouch! Using laptop's 1920x1080 after months of using a 4K monitor reminds me why I once was into tiling WM...

2026-04-15 22:35:10 UTC

I write things so that I don’t have to remember them when I need ‘em so times later…
#FreeBSD #ThinkPad #RunBSD
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KPDX7Q5DG43RXH9GYVNC70NX.jpeg

2026-04-13 08:58:52 UTC

This #DIY "to be #Lego display case" is a success if you ask me! 🥳
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KP67J1ZH00XNH8KZYT796XFV.jpeg

2026-04-13 08:58:52 UTC

:runbsd: Now that the #arm64 boards are installed, it was time to use them as redundant #DHCP server and #DNS resolvers; using #dhcpd and #Unbound on both :openbsd: #OpenBSD and :freebsd: #FreeBSD.
https://www.tumfatig.net/2026/redundant-dhcp-server-and-dns-resolver-using-openbsd-and-freebsd/

2026-04-13 08:58:52 UTC

My poor #ODROID HC4 is having a hard time each time I send or receive :GoToSocial: #GoToSocial posts on :openbsd: #OpenBSD #arm64.
yeah, I know, this message will also add a drop of load to it :)
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KP71E03T3Q6T8P4Z5HQ9WSY1.png

2026-04-05 15:23:33 UTC

#SilentSunday the one year old #Wisteria sinensis Alba already pops a lot. #Garden
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KNF3VTNTS4XFD9JVY9VB1YT7.jpeg

2026-04-05 08:56:43 UTC

I've just applied this recipe to boot #NetBSD using FDE on my T480s.
And it worked. Thanks @nprofile…cck4
EDIT: maybe it was not a good idea to test it with the 11-beta release… wireless card not recognized, apmd not there, packages missing… got to redo this with a secured 10 release :p
https://fosstodon.org/@dwarmstrong/115011008168450086

2026-04-05 08:56:43 UTC

Could this be my new desktop wallpaper…
https://images.nasa.gov/
#artemis #moon #earth #space
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KNMF046P6DJ6DSPVDPQ63XX6.jpeg

2026-04-02 21:08:59 UTC

If you wonder, a long time ago (early 2000s), this Mac mini G4 has been hosting https://www.tumfatig.net for quite some time. #HomeLab #RunBSD
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KND5P9D39JWZ5PE46HCTCT7G.jpeg

2026-04-02 21:08:59 UTC

TIL that you can search/find text in your whooooole #tmux pane buffer using the simple spell: Ctrl-b [ /the text you search<Enter>. Now I can copy/paste the console output I had before the U-Boot update and put it in the blog post 🫥
https://superuser.com/a/231159

2026-03-31 17:06:51 UTC

I just noticed that https://cvsweb.openbsd.org/ seem to be running on #got now, given the /usr/local/bin/cvsgoweb built (...) footer. But then, the option to select a branch is not there anymore.
Anyone knows if there is a hidden parameter somewhere?
context is, I would like to check which revision of src/usr.sbin/relayd/parse.y has been sync with 7.9 branch.

2026-03-31 15:21:02 UTC

- reply

@nprofile…wslp 10W sounds like a lot for fans… Unless they blow fast enough to keep your NAS in the air 🫢

2026-03-21 22:30:28 UTC

It takes aaaaaaaaaaages to compile #GoToSocial for #OpenBSD on a #Raspberry Pi Zero 2 W... but it's a good stableness benchmark. So far, it has not hanged - now that I use another Ethernet Hat and POE adapter.

2026-03-21 10:38:14 UTC

- reply

@nprofile…7760 still, you haven’t said which keyboard this is. So that us, keyboard nerds, could go :flan_aww:

2026-03-04 18:03:37 UTC

From #Nextcloud on #FreeBSD jail to Nextcloud on #OpenBSD #bhyve virtual machine: processing…
Just because I can does mean I should.

2026-03-04 18:03:37 UTC

I finally had our iris shot printed on canvas and fixed it on a wall. Now, it’s our bedroom 🤭
https://gts.tumfatig.net/fileserver/01FJ093H6Y5VGN20G998J7KN1M/attachment/original/01KJX61DNK7ZN9YB2VDD1AH6B3.jpeg

2026-03-02 00:58:31 UTC

The 16yo thread that explains why my iPad can get an IP from my #OpenBSD APU even though I forgot to set some allow rules for ports 67/68 :flan_hearts: :flan_hacker:
https://misc.openbsd.narkive.com/7SGmbxm0/allow-dhcpd-with-pf
Neither dhcpd nor dhclient need any pass rules in pf.
Both tools use bpf to steal the packets before they're checked by pf.

2026-03-01 14:10:46 UTC

On my way to configure a Nextcloud #Jail on #FreeBSD. I pop up a Jail, install php-fpm and start it. I check if it listens properly on localhost and... see that it listens on the "public" Jail IP... I check php-fpm configuration, restart the daemon, have another look at netstat, same binding. I connect to the FreeBSD host and issue a netstat. "Horreur Malheur !" (don't bother, this is French), it binds to port 9000 on the physical IP of the host...
After yelling at FreeBSD, I drink a glass of water and start reading stuff because it can't be that ugly... The bug must be standing between the mat (I work standing, no chair involved) and the keyboard...
A few moments later ™, the configuration culprit is highlighted. I configure my Jails as described here in the Handbook: using ip4.addr and interface. And this seems to leak the Jail's localhost onto the host interface. The solution is to switch to VNET Jail. And to migrate all my current Jails to this configuration... Especially the SMB one because I need it for L’Apéro!!!
This way, the Jails look way more like what Illumos does with Zones. Which is probably the good sign that I went the right way. No more talking, I got to go watching a movie to ensure this configuration is correct. Except yelling if it isn't :p

2026-02-24 04:31:27 UTC

- reply

@nprofile…gqn3 hum, ok. As I wanted to "help" real users, I enabled all the standards doors: IPv4, IPv6, UDP, TCP, DoT, DoH.

2026-02-24 04:31:27 UTC

- reply

@nprofile…gqn3 the original message, from German Federal Office for Information Security (BSI), was:
> Dear Sir or Madam,
>
> open DNS resolvers are abused for conducting DDoS reflection/
> amplification attacks against third parties on a daily basis.
>
> Please find below a list of open DNS resolvers hosted on
> your network which can be abused for DDoS reflection/amplification
> attacks if no countermeasures have been implemented. The timestamp
> indicates when the open resolver was identified.
>
> We would like to ask you to check if the open resolvers identified
> on your network are intentionally configured as such and appropriate
> countermeasures preventing their abuse for DDoS attacks have been
> implemented.
The provider forwarded it to me with:
We have received a notification from the German Federal Office for Information Security (BSI) for (the IP address of) a server you have with us. We are
+automatically forwarding this notification on to you, for your information.
The original report has been included below. Additional information is provided with the how-to guides referenced in the report. Please note that we do not
+have any further information to share.
These notifications do not mean your server was involved in any abusive activity. They are simply alerting you to a potential issue on your server, that
+could be exploited, and that is usually fairly easy to secure.
You do not need to send us, or the BSI, a response.

2026-02-24 04:31:27 UTC

I was working on providing public DNS resolvers for people who would not like to use Google or Quad9, for whatever reasons - and couldn’t / didn’t want to selfhost their own. So I build two of those, tested them on my computerS for months and opened them to the test for limited audience - like advertised it to a limited audience but service was not source-filtered.
It didn’t take long (like 2-3 days) before they got assaulted by bots and stuff. They survived this quite well so I was not that worried.
Then I received an abuse report from one of the provider saying they received an alert notification from XXX Security Company. The initial content was like "there’s a dumbass running an open relay service that can be used by others to participate a DDOS". The provider email was more like "We received this alert. You may discard it. Or you may do something to ensure security". After checking my logs, I noticed that my servers cached things pretty well and that they wouldn’t query external DNS more than a few times a day, at worse, for specific DNS entries. I also checked that I had enabled limitations in the conf to prevent rogue access - I also feared I was limiting too much TBH.
Still, got kinda scared of participating in enshitting the Internet so I switched back to source-filtering the access to only my computers. And notify the limited audience that I rolled back and closed the service.
Papers I found online were simply recommending QoS and implementing query rate limitation. Online checkers I found simply went "Danger! Danger! Anyone can make recursive queries there! Turn this off!"
All that to say I wonder… Is this just Big Tech & friends trying to keep their users or is the danger real. How do the 4-5 so called alternative-public-resolver manage DDOS protection. Did they register somewhere as "official providers" to not be bothered by shitty observers.
What do you, #DNS people, say on this?

2026-02-24 04:31:27 UTC

This message would be an indication that 🦥🏳️‍🌈 #GoToSocial 0.21.0 works on #OpenBSD 7.8/amd64 in the NOWASM mode.
So... what's your excuse to not #RunBSD now ;-)

2026-01-13 03:41:18 UTC

- reply

@nprofile…vf35 picture or it didn’t happen! 🤪

2026-01-10 05:37:30 UTC

- reply

@nprofile…3xx2 @nprofile…hl5m always remember to use hex when girls go: 👸 how old do you think I am?

2026-01-10 05:37:30 UTC

- reply

@nprofile…hl5m happy around-the-sun-touring then!

2026-01-10 05:37:30 UTC

- reply

@nprofile…hl5m hum… the only thing I can think of is I set locales to use UTF. The emoji font is probably installed as a dependency cause I didn’t care about it. And the nerd-font I use in terminal has no colored symbols.

2025-12-02 02:06:25 UTC

- reply

@nprofile…gz84 #WindowMaker because What Else?

2025-12-02 02:06:25 UTC

I don’t know who needs to here this but there’s only 22 days left before Hans Gruber falls of Nakatomi Tower.

2025-12-02 02:06:25 UTC

- reply

@nprofile…x4wz I think I can turn it this was: FreeBSD does things I care most about in a worse manner than what OpenBSD does. And what FreeBSD does better than OpenBSD, I can live without. At least, on the desktop side. I can find interests in FreeBSD on the server side.

2025-11-21 01:50:24 UTC

- reply

@nprofile…4q5y honestly, the DNS would have answered queries… if pf had let them in 🤣

2025-11-19 06:20:37 UTC

- reply

@nprofile…x4wz yes but… ☃️

2025-11-19 06:20:37 UTC

- reply

@nprofile…x4wz I never find a good reason to go for neovim when I looked at it not so long ago. But I don’t use plugins so this may be a biais. In the end, I hate both for enabling mouse support by default!

2025-10-13 22:40:58 UTC

The other day, @nprofile…80s4 posted about using DDCutil to manage a Dell Monitor with KVM using software. I tested it on mine and stole the idea for another note post. All is summed up here https://www.tumfatig.net/2025/software-control-a-dell-monitor-kvm-from-linux/ for using it on #Slackware #Linux. But it should work on any distro. Unfortunately, it seems the i2c-dev and ddcutil are not available on *BSD.

2025-10-13 22:40:58 UTC

Why do they use Qualcomm WiFi chips in AMD new ThinkPad!?!? 😱 It seems to not be (well) supported on OpenBSD 😭

2025-10-13 22:40:58 UTC

Wink and wave from #GoToSocial 0.20.1 running on #OpenBSD #7.7. Duplicate posts in timeline should now be solved.

2025-10-13 22:40:58 UTC

- reply

@nprofile…x4wz the even worse thing is that it is soldered… 😩

2025-08-18 02:24:12 UTC

- reply

@nprofile…t4qe the port’s Makefile contains ˋ CONFIGURE_ARGS += -Dman=false` which may be the reason. It may also be possible to modify it to include a man page.

2025-07-23 18:29:37 UTC

- reply

@nprofile…h2u5 so few 😘

2025-07-23 18:29:37 UTC

This is what I answered to the question "Why are you still using #OpenBSD and why should we?" at the #UNIXsocialClub of #Dijon, #France, last weekend.
Slides in French. Post in english.
#RunBSD
https://www.tumfatig.net/2025/why-are-you-still-using-openbsd/

2025-07-23 18:29:37 UTC

- reply

@nprofile…h2u5 congratz!
There’s some kind of envy here when it comes to what you succeed to achieve! 💪😉

2025-07-11 23:29:14 UTC

Is there a #snac2 command to delete an instance?
So that it would send deletion notifications to the instances snac knows rather than silently disappearing. So that those instances would have the opportunity to delete the instance keys and references from their DB.