<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <updated>2026-05-21T00:38:49Z</updated>
  <generator>https://yabu.me</generator>

  <title>Nostr notes by Larvitz</title>
  <author>
    <name>Larvitz</name>
  </author>
  <link rel="self" type="application/atom+xml" href="https://yabu.me/npub1ueuurfmw4jgtz5uf3sxwcxdxvz8yx8a7yldnu5cyfwmlt55qz5tslqjlwv.rss" />
  <link href="https://yabu.me/npub1ueuurfmw4jgtz5uf3sxwcxdxvz8yx8a7yldnu5cyfwmlt55qz5tslqjlwv" />
  <id>https://yabu.me/npub1ueuurfmw4jgtz5uf3sxwcxdxvz8yx8a7yldnu5cyfwmlt55qz5tslqjlwv</id>
  <icon>https://media.bsd.cafe/bsdmmedia01/accounts/avatars/115/276/840/417/131/111/original/507e2134cf9f2a8d.webp</icon>
  <logo>https://media.bsd.cafe/bsdmmedia01/accounts/avatars/115/276/840/417/131/111/original/507e2134cf9f2a8d.webp</logo>




  <entry>
    <id>https://yabu.me/nevent1qqsfgx92xth3ehfsefjawangyfa8sn5qarywwajs4jw4v6nelamu3kszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wvfxwnv</id>
    
      <title type="html">Successfully updated my ThinkPad T480 to FreeBSD 15.1-RC1 ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsfgx92xth3ehfsefjawangyfa8sn5qarywwajs4jw4v6nelamu3kszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wvfxwnv" />
    <content type="html">
      Successfully updated my ThinkPad T480 to FreeBSD 15.1-RC1 :freebsd_logo: &lt;br/&gt;&lt;br/&gt;First impression: Solid release!&lt;br/&gt;&lt;br/&gt;- WiFi (Intel AX210) stable on 5 GHz (802.11AC) with expected WAN speed.&lt;br/&gt;- Graphics, Audio, USB-C Dock all working fine.&lt;br/&gt;- Factorio Space-Age running perfectly smooth.&lt;br/&gt;&lt;br/&gt;All running super well and without unexpected issues :-) Yay!&lt;br/&gt;&lt;br/&gt;#freebsd #thinkpad #runbsd #wifi #freebsd15 #t480&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/637/198/781/224/920/original/f981f63eb56bbdc4.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-05-25T21:04:02Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsfg7v74h8r66lspz5yxsyh0vngq9r456tnvnrstqskqdrpjtu9zmszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wv4jcrc</id>
    
      <title type="html">Updated my ThinkPad T480 to FreeBSD 15.1-RC1 :freebsd_logo: First ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsfg7v74h8r66lspz5yxsyh0vngq9r456tnvnrstqskqdrpjtu9zmszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wv4jcrc" />
    <content type="html">
      Updated my ThinkPad T480 to FreeBSD 15.1-RC1 :freebsd_logo: &lt;br/&gt;&lt;br/&gt;First impression: Solid release!&lt;br/&gt;&lt;br/&gt;- WiFi (Intel AX210) stable on 5GHZ with expected speed.&lt;br/&gt;- Graphics, Audio USB Dock all working fine.&lt;br/&gt;- Factorio Space-Age running perfectly smooth.&lt;br/&gt;&lt;br/&gt;All running super well and without unexpected issues :-) Yay!&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/637/198/781/224/920/original/f981f63eb56bbdc4.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-05-25T20:56:19Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxry52wq9vz0n9hmdxcev5shzs2adcgsys9t47ah8xgzsnm0c4twszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wgkyu0v</id>
    
      <title type="html">Hello there 7.9 :openbsd: 🙂 Updated my OpenBSD based ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxry52wq9vz0n9hmdxcev5shzs2adcgsys9t47ah8xgzsnm0c4twszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wgkyu0v" />
    <content type="html">
      Hello there 7.9 :openbsd: 🙂 &lt;br/&gt;&lt;br/&gt;Updated my OpenBSD based bastion/jump-host to 7.9 without issues. Everything running absolutely fine!&lt;br/&gt;&lt;br/&gt;Nice 🥳 &lt;br/&gt;&lt;br/&gt;#unix #openbsd #runbsd&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/634/328/939/654/167/original/66c5f81ea651b5e7.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-05-25T08:45:08Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs8ay42qq5z8gzzf8d2w94aya8qh9y07aqkwpy2u3uv0gef4tau5sqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wx6crpx</id>
    
      <title type="html">Hello 15.1-RC1 :freebsd_logo: 🙂 :freebsd_logo: Everything ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs8ay42qq5z8gzzf8d2w94aya8qh9y07aqkwpy2u3uv0gef4tau5sqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wx6crpx" />
    <content type="html">
      Hello 15.1-RC1 :freebsd_logo: 🙂 :freebsd_logo: &lt;br/&gt;&lt;br/&gt;Everything super stable so far! &lt;br/&gt;&lt;br/&gt;#freebsd #runbsd #rc1 #unix&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/624/981/337/076/711/original/099b31af6f1b002e.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-05-23T17:07:10Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsrgyzxmnedl0jdc8z6qmkfaan26scjhg3gfg9uewzagusjawxhqyqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2cfhgg</id>
    
      <title type="html">Giving 15.1-BETA3 a test-run today 🙂 Looking all very good so ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsrgyzxmnedl0jdc8z6qmkfaan26scjhg3gfg9uewzagusjawxhqyqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2cfhgg" />
    <content type="html">
      Giving 15.1-BETA3 a test-run today 🙂 Looking all very good so far! Even on an underpowerd troubleshooting node with just 512MB of memory!&lt;br/&gt;&lt;br/&gt;#freebsd #beta #testing #runbsd&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/589/989/325/242/890/original/6e2a9591b1afb6e3.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-05-17T12:48:51Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs9340s3e8e6veutr3q8xucrp3va7d5dzf8a58pkxfkfju0dt424cgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wkn4an3</id>
    
      <title type="html">RE: https://burningboard.net/@Larvitz/116584334811849567 ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs9340s3e8e6veutr3q8xucrp3va7d5dzf8a58pkxfkfju0dt424cgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wkn4an3" />
    <content type="html">
      RE: &lt;a href=&#34;https://burningboard.net/@Larvitz/116584334811849567&#34;&gt;https://burningboard.net/@Larvitz/116584334811849567&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;Post-mortem from today’s FreeBSD/arm64 outage of my prod web-server:&lt;br/&gt;&lt;br/&gt;After reboot, the box appeared to hang around ZFS root/init. Pools imported fine from live media, /sbin/init was valid, old kernel/BE made no difference. There was also a stale GPT signature on a whole-disk ZFS vdev, which made the trail extra noisy.&lt;br/&gt;&lt;br/&gt;Actual RCA: a stray &amp;#34; in /etc/rc.conf in my static_routes line. rc.conf is shell, so that broke early boot badly enough that networking never came up and it looked like kernel/ZFS/init trouble.&lt;br/&gt;&lt;br/&gt;Fixed syntax, restored ZFS canmount values, jails back online.&lt;br/&gt;&lt;br/&gt;Lesson: always run sh -n /etc/rc.conf before rebooting. 🫠&lt;br/&gt;&lt;br/&gt;#freebsd #outage #runbsd #oopsie&lt;blockquote class=&#34;border-l-05rem border-l-strongpink border-solid&#34;&gt;&lt;div class=&#34;-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2&#34;&gt;quoting &lt;br/&gt;&lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Article&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/note1kw00m56tymu97d3jdzva0h8qu25tc5pqxj6xvu8qf65eu7q8rphq3fycvr&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;note1kw0…ycvr&lt;/a&gt;&lt;/span&gt;&lt;br/&gt; &lt;/div&gt; My web-server is broken and does not boot anymore. Great :(&lt;br/&gt; &lt;img src=&#34;https://media.burningboard.net/media_attachments/files/116/584/334/199/618/207/original/98c01e3127a48f5d.png&#34;&gt; &lt;br/&gt; &lt;/blockquote&gt;
    </content>
    <updated>2026-05-16T20:49:03Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxw8j7pwvh902qvxn5q8jd75rfle4rwrk3uxcmayrpxll808dqxuqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wcu72gu</id>
    
      <title type="html">My upgrade process for several full jails on a host: for jail in ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxw8j7pwvh902qvxn5q8jd75rfle4rwrk3uxcmayrpxll808dqxuqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wcu72gu" />
    <content type="html">
      My upgrade process for several full jails on a host:&lt;br/&gt;&lt;br/&gt;for jail in $(jls name); do&lt;br/&gt;  echo &amp;#34;=== Updating jail: $jail ===&amp;#34;&lt;br/&gt;  jexec $jail freebsd-update fetch install&lt;br/&gt;  jexec $jail pkg upgrade -y&lt;br/&gt;done&lt;br/&gt;&lt;br/&gt;service jail restart&lt;br/&gt;&lt;br/&gt;Works, gets the job done and is &amp;#34;good enough&amp;#34;.&lt;br/&gt;&lt;br/&gt;#freebsd #jails #automation #shell
    </content>
    <updated>2026-05-16T19:58:57Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqstquf6ec5vvxzkvezr6hdn46pfawvm8tt5q9rfgqwu9sakyqnqmaszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wfqrtyh</id>
    
      <title type="html">It’s bigger on the inside. Successfully trapped a Bhyve ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqstquf6ec5vvxzkvezr6hdn46pfawvm8tt5q9rfgqwu9sakyqnqmaszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wfqrtyh" />
    <content type="html">
      It’s bigger on the inside.&lt;br/&gt;&lt;br/&gt;Successfully trapped a Bhyve hypervisor :bhyve: inside a VNET Jail on FreeBSD 15.0-RELEASE :freebsd_logo:&lt;br/&gt;&lt;br/&gt;Host -&amp;gt; Jail (named &amp;#39;tardis&amp;#39;) -&amp;gt; Hypervisor -&amp;gt; Virtual Machine.&lt;br/&gt;&lt;br/&gt;Complete with working dual-stack IPv4/IPv6 routed via pf on the host. Why? Because I needed to isolate the VMs from the host&amp;#39;s network, and I apparently enjoy fighting deep-nested devfs rulesets on a Friday night. &lt;br/&gt;&lt;br/&gt;#FreeBSD #bhyve #jails #networking #devops #sysadmin&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/424/732/297/475/409/original/52c6a988f231d3cf.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-04-18T08:21:34Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsyz6p8w3hlqxtwtgkzqakz5y9c8uajdwswgufhthq3k5tgwk7smzszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8cuter</id>
    
      <title type="html">Successfully virtualized a MikroTik Router (&amp;#34;Cloud Hosted ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsyz6p8w3hlqxtwtgkzqakz5y9c8uajdwswgufhthq3k5tgwk7smzszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8cuter" />
    <content type="html">
      Successfully virtualized a MikroTik Router (&amp;#34;Cloud Hosted Router&amp;#34;) on FreeBSD 15.0-RELEASE with BHYVE :bhyve: &lt;br/&gt;&lt;br/&gt;Works absolutely great (920 Gbps throughput on a 1Gbps license!) &lt;br/&gt;&lt;br/&gt;#freebsd #mikrotik #routeros #networking&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/414/609/802/377/835/original/6d53b99c844e87f5.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-04-16T13:29:20Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsrd0s70satp7c5dsyzyexah2r7zkvsh4felj5jdg96mtdx3mhntuszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsadv4m</id>
    
      <title type="html">Latest quarterly FreeBSD package upgrade broke my Nextcloud ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsrd0s70satp7c5dsyzyexah2r7zkvsh4felj5jdg96mtdx3mhntuszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsadv4m" />
    <content type="html">
      Latest quarterly FreeBSD package upgrade broke my Nextcloud 😮‍💨&lt;br/&gt;&lt;br/&gt;Post mortem: The new version of php85-pdo_pgsql is now compiled against PostgreSQL 18, not 17. So pkg upgrade removed postgresql17-server, leaving Nextcloud dysfunctional without a database.&lt;br/&gt;&lt;br/&gt;Solution:&lt;br/&gt;- Reinstalled postgresql17-server&lt;br/&gt;- Dumped the db with pg_dump&lt;br/&gt;- Installed postgresql18-server &amp;amp; php85-pdo_pgsql&lt;br/&gt;- Copied over pg_hba.conf &amp;amp; postgresql.conf&lt;br/&gt;- Created empty db/user in PG18&lt;br/&gt;- Imported the db dump&lt;br/&gt;- Ran occ maintenance:data-fingerprint&lt;br/&gt;&lt;br/&gt;Restarted php-fpm &amp;amp; nginx&lt;br/&gt;&lt;br/&gt;All fine again. But that was unpleasant 🙂&lt;br/&gt;&lt;br/&gt;#SysAdmin #SelfHosted #FreeBSD #Nextcloud #Postgresql
    </content>
    <updated>2026-04-14T10:36:45Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs0769zk33dr58m9snq0kl3cry2f4ulrvwsgg6zl8elceu8pm886aczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsjj602</id>
    
      <title type="html">Exciting news. I&amp;#39;ve just pushed a collection of ports for the ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs0769zk33dr58m9snq0kl3cry2f4ulrvwsgg6zl8elceu8pm886aczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsjj602" />
    <content type="html">
      Exciting news. I&amp;#39;ve just pushed a collection of ports for the #OpenPGP Card ecosystem to Codeberg.&lt;br/&gt;&lt;br/&gt;  Includes:&lt;br/&gt;   - openpgp-card-tools (oct)&lt;br/&gt;   - openpgp-card-tools-git (oct-git)&lt;br/&gt;   - openpgp-card-ssh-agent&lt;br/&gt;&lt;br/&gt;I&amp;#39;m currently polishing them for official submission to the freebsd ports tree this April!&lt;br/&gt;&lt;br/&gt;A huge thank you to &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/npub1ugfndvc4sm235uplmzphh6vv7vujg4438vmzkzv4zxs4hv2laj3q5fhya8&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;Heiko&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;npub1ugf…hya8&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; for these excellent #Rust tools!&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://codeberg.org/Larvitz/freebsd-openpgp-card-ports&#34;&gt;https://codeberg.org/Larvitz/freebsd-openpgp-card-ports&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#freebsd  #Security #Smartcard #Yubikey #Nitrokey #Infosec #RustLang
    </content>
    <updated>2026-03-20T20:57:46Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsdel49q5hxql0f2a8046rl9lw6kejge36lppgeyhtakk9t5a3hysgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w35x04z</id>
    
      <title type="html">Nice! NAT64 in action, My IPv6-only jail can successfully talk ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsdel49q5hxql0f2a8046rl9lw6kejge36lppgeyhtakk9t5a3hysgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w35x04z" />
    <content type="html">
      Nice! NAT64 in action, My IPv6-only jail can successfully talk with Github. No tayga, just the new &amp;#34;af-to&amp;#34; feature, that the &amp;#34;pf&amp;#34; firewall  got in 15.0-RELEASE:&lt;br/&gt;&lt;br/&gt;pass in quick on bastille0 inet6 from $jail_net to 64:ff9b::/96 \&lt;br/&gt;    af-to inet from ($ext_if) keep state&lt;br/&gt;&lt;br/&gt;This is genuinly nice! 🙂 &lt;br/&gt;&lt;br/&gt;#freebsd #networking #pf #nat64 #ipv6&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/193/697/558/791/499/original/0a1bb6a860ac3152.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-03-08T13:06:26Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs9he96q6yczvax6t43mfgm8vu4he4fk84akk7te3v3324w29qa7egzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wq0v7ky</id>
    
      <title type="html">Another work week starting :freebsd_logo: Short one (just 3 days) ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs9he96q6yczvax6t43mfgm8vu4he4fk84akk7te3v3324w29qa7egzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wq0v7ky" />
    <content type="html">
      Another work week starting :freebsd_logo: &lt;br/&gt;&lt;br/&gt;Short one (just 3 days) and the last before I’ll move to another city next week. &lt;br/&gt;&lt;br/&gt;#freebsd #workfromhome #SysAdmin&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/116/039/866/959/073/472/original/ee430f231e5b4b41.jpeg&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-02-09T09:08:44Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsgc3262nf68hkasxvydxclp3jxljzqqevplrpefvt5t65c2p6hugqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w58mkxa</id>
    
      <title type="html">New blog post: PF Firewall on FreeBSD - A Practical Guide After ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsgc3262nf68hkasxvydxclp3jxljzqqevplrpefvt5t65c2p6hugqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w58mkxa" />
    <content type="html">
      New blog post: PF Firewall on FreeBSD - A Practical Guide&lt;br/&gt;&lt;br/&gt;After years of running PF across multiple FreeBSD servers, I&amp;#39;ve written up the patterns that work: macros, tables, brute-force protection, NAT for jails, and dual-stack filtering.&lt;br/&gt;&lt;br/&gt;Covers everything from basic concepts to production configs, plus a sidebar on authpf for bastion hosts.&lt;br/&gt;&lt;br/&gt;If you&amp;#39;re running FreeBSD and want a firewall that&amp;#39;s elegant, powerful, and actually understandable, PF is worth your time.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/pf-firewall-on-freebsd-a-practical-guide/&#34;&gt;https://blog.hofstede.it/pf-firewall-on-freebsd-a-practical-guide/&lt;/a&gt;                                                                                                                                                                                     &lt;br/&gt;                                                                                                                                                                                                                                                            &lt;br/&gt;#FreeBSD #PF #Firewall #Security #Jails #SysAdmin #IPv6
    </content>
    <updated>2026-02-06T21:58:15Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsguavwxvljgfgvc7hw3va2654fd6tk05xm6062kvm4ulgwglpyycgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w707nku</id>
    
      <title type="html">Nice, my parcel from the FreeBSD foundation with some swag did ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsguavwxvljgfgvc7hw3va2654fd6tk05xm6062kvm4ulgwglpyycgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w707nku" />
    <content type="html">
      Nice, my parcel from the FreeBSD foundation with some swag did just arrive  :freebsd_logo: &lt;br/&gt;&lt;br/&gt;#freebsd #swag #bsd &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/npub1kkf6quxplpsg753nvacpmax0eyjxn8lq5jn7dc6pf54zjp4zhdwse06dgf&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;FreeBSD Foundation&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;npub1kkf…6dgf&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt;&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/990/783/637/306/915/original/3798ab17c3a5203a.jpeg&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-01-31T17:03:14Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsfqyrd0f74qukut3c2zpvw4vnvnt5her9n52e34uus93fsgq4raagzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23whfgcnh</id>
    
      <title type="html">I’ve documented a clean, native way to integrate FreeBSD 15 ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsfqyrd0f74qukut3c2zpvw4vnvnt5her9n52e34uus93fsgq4raagzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23whfgcnh" />
    <content type="html">
      I’ve documented a clean, native way to integrate FreeBSD 15 into a FreeIPA realm. No heavy dependencies, no Python shims, just pure Kerberos (GSSAPI) and nslcd.&lt;br/&gt;&lt;br/&gt;We get full SSH SSO, automated home directories, and centralized sudo rules using standard BSD tools. Pure, stateless, and sane.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/integrating-freebsd-15-with-freeipa-native-kerberos-and-ldap-authentication/&#34;&gt;https://blog.hofstede.it/integrating-freebsd-15-with-freeipa-native-kerberos-and-ldap-authentication/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #FreeIPA #SysAdmin #Unix #Kerberos #LDAP
    </content>
    <updated>2026-01-25T19:52:29Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsqrsgw2gz6dd337m43jh9dq0neyvppff5qtcjclgzhh83nxvk0rfczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23whrn7jd</id>
    
      <title type="html">Just published a deep dive on self-hosting CryptPad on FreeBSD ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsqrsgw2gz6dd337m43jh9dq0neyvppff5qtcjclgzhh83nxvk0rfczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23whrn7jd" />
    <content type="html">
      Just published a deep dive on self-hosting CryptPad on FreeBSD using VNET jails, PF NAT, and Caddy.&lt;br/&gt;&lt;br/&gt;End-to-end encrypted collaboration, fully isolated networking, no direct internet exposure for the app jail, and a few real-world gotchas (including the infamous “Loading…” issue).&lt;br/&gt;&lt;br/&gt;If you like FreeBSD, jails, and privacy-first self-hosting, this one’s for you.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/self-hosted-cryptpad-on-freebsd-with-vnet-jails-and-caddy/&#34;&gt;https://blog.hofstede.it/self-hosted-cryptpad-on-freebsd-with-vnet-jails-and-caddy/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #SelfHosting #Privacy #Jails #CryptPad
    </content>
    <updated>2026-01-24T11:24:49Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsffw4jnu3zkzne3fm2wave6cf3jcp92xefn63xzsysp0r6ceu7l4szyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w0tzhhn</id>
    
      <title type="html">My FreeBSD :freebsd_logo: ThinkPad T480 now runs on XLibre. ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsffw4jnu3zkzne3fm2wave6cf3jcp92xefn63xzsysp0r6ceu7l4szyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w0tzhhn" />
    <content type="html">
      My FreeBSD :freebsd_logo: ThinkPad T480 now runs on XLibre.&lt;br/&gt;&lt;br/&gt;Migrating over from xorg was simple and painless. Everything running just perfectly. XLibre is available in ports and packages 🙂 &lt;br/&gt;&lt;br/&gt;#freebsd #xlibre #x11 &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/npub1wj9aq395p9zy5k8ef0effejc4ypzeum22y5caxczdslw2vzu4ndq5mgx3h&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;XLibre&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;npub1wj9…gx3h&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt;&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/923/432/229/735/013/original/d8df64c3b1153911.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/923/432/599/383/475/original/dd23a908ff12e868.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-01-19T19:34:38Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqswl2q8xh2fjzwtthfpwa49gzmfzequ08ecfe454m5kumdje4g399qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w5yz9dl</id>
    
      <title type="html">The Linux version of the game Factorio runs perfectly fine (with ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqswl2q8xh2fjzwtthfpwa49gzmfzequ08ecfe454m5kumdje4g399qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w5yz9dl" />
    <content type="html">
      The Linux version of the game Factorio runs perfectly fine (with solid 60 FPS/UPS) on FreeBSD 15.0-RELEASE. Using linux64.ko and the rl9 user-land implementations. Performance is great, even on an 8 year old ThinkPad T480. &lt;br/&gt;&lt;br/&gt;$ file factorio &lt;br/&gt;factorio: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=3e1ef3fc882aecbbebb1c9d2fc5ca064842310fc, for GNU/Linux 3.2.0&lt;br/&gt;&lt;br/&gt;On 14.3-RELEASE, I did still run the Windows64 version via wine (the Linux version was flickering), but now the Linux version is running perfectly on FreeBSD.&lt;br/&gt;&lt;br/&gt;I&amp;#39;m very happy with how perfectly it works. Love to play that when traveling on in the hotels at business trips. &lt;br/&gt;&lt;br/&gt;THE FACTORY MUST GROW!! 🙂 🏭 &lt;br/&gt;&lt;br/&gt;🎮 :freebsd_logo: &lt;br/&gt;&lt;br/&gt;#bsdgaming #gaming #linuxlator #freebsd #runbsd #tinkpad #factorio&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/921/493/120/631/246/original/47fe18fc1b77f989.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/921/499/123/909/618/original/8b9feb4bba578904.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/921/499/683/311/764/original/551236155393d079.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-01-19T11:33:34Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsty3gxvue5suqq03qj2xergmuhzxx8yg63v05uej5d5ssnmsf6psqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wyf3cut</id>
    
      <title type="html">The best way to reclaim your privacy is to own the ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsty3gxvue5suqq03qj2xergmuhzxx8yg63v05uej5d5ssnmsf6psqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wyf3cut" />
    <content type="html">
      The best way to reclaim your privacy is to own the infrastructure.&lt;br/&gt;&lt;br/&gt;I migrated my email to a hardened FreeBSD  setup. Encrypted at rest via ZFS, isolated via Jails, and owned by me. Not a data-mining giant.&lt;br/&gt;&lt;br/&gt;If you want to build your own communication hub, here is the blueprint: &lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/self-hosting-email-on-freebsd-a-secure-jailed-setup-with-postfix-and-dovecot/&#34;&gt;https://blog.hofstede.it/self-hosting-email-on-freebsd-a-secure-jailed-setup-with-postfix-and-dovecot/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#DigitalSovereignty #DeGoogle #Privacy #SelfHosted #BSD #Mailserver
    </content>
    <updated>2026-01-18T15:49:16Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs94wfj7v3c0j5hrq3fm59l4d3cza25kzn2eqwwd93rjz8snfc4twqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wflpl68</id>
    
      <title type="html">I self-host my own e-mail servers for ~25 years now. Just ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs94wfj7v3c0j5hrq3fm59l4d3cza25kzn2eqwwd93rjz8snfc4twqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wflpl68" />
    <content type="html">
      I self-host my own e-mail servers for ~25 years now. Just finished he migration to a new system today.&lt;br/&gt;&lt;br/&gt;- OS: FreeBSD 15.0-RELEASE&lt;br/&gt;- MTA: Postfix 3.10&lt;br/&gt;- IMAP: Dovecot 2.3&lt;br/&gt;- Filter: Rspamd 3.14&lt;br/&gt;&lt;br/&gt;I used Imapsync to migrate the content of my Mailboxes from the old to the new system. Worked absolutely fine.&lt;br/&gt;&lt;br/&gt;Having the E-Mail Jail and the mailbox data on an encrypted ZFS dataset (AES256) that&amp;#39;s manually unlocked with my passphrase after rebooting the system. Backups are done via ZFS send/recv to by backup server (-w for raw send to ensure, data is encrypted at rest)&lt;br/&gt;&lt;br/&gt;- SPF: ✅ &lt;br/&gt;- DKIM Signing: ✅ &lt;br/&gt;- DMARC Reporting: ✅ &lt;br/&gt;- E-Mail delivery to major providers: ✅ &lt;br/&gt;- IPv6 working and actually being used: ✅ &lt;br/&gt;&lt;br/&gt;All working perfectly well. In about a week, I&amp;#39;ll decomission the old Debian based system, that I used since 2017!&lt;br/&gt;&lt;br/&gt;#linux #freebsd #sysadmin #selfhosting #email #postfix&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/916/126/379/685/716/original/b6c0a43a7c0ced9c.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-01-18T12:37:20Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs8fugaa57fgyuzrfwc7w7l3l3j6y0nfze47wyjuchlxchsdwfnhtgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w99puqe</id>
    
      <title type="html">Running Mastodon on FreeBSD? Stop using wrapper scripts that ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs8fugaa57fgyuzrfwc7w7l3l3j6y0nfze47wyjuchlxchsdwfnhtgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w99puqe" />
    <content type="html">
      Running Mastodon on FreeBSD? Stop using wrapper scripts that break service status.&lt;br/&gt;&lt;br/&gt;I&amp;#39;ve refactored the init scripts for Sidekiq, Puma, and Streaming to be fully production-grade: &lt;br/&gt;&lt;br/&gt;- Clean privilege dropping (no su wrappers)&lt;br/&gt;- Native signal handling for log rotation &lt;br/&gt;- Correct PID tracking &amp;amp; status reporting.&lt;br/&gt;&lt;br/&gt;I published the scripts and the reasoning behind them in my Codeberg gists:&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://codeberg.org/Larvitz/gists/src/branch/main/2026/20250115-FreeBSD_Mastodon_rc.d.md&#34;&gt;https://codeberg.org/Larvitz/gists/src/branch/main/2026/20250115-FreeBSD_Mastodon_rc.d.md&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;I use those to run a Mastodon instance and they&amp;#39;re working great so far!&lt;br/&gt;&lt;br/&gt;:freebsd_logo: ❤️  🦣 &lt;br/&gt;&lt;br/&gt;#FreeBSD #Mastodon #SelfHosting #mastoadmin #runbsd #OpenSource&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/900/494/237/520/243/original/545f50faf516bd58.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2026-01-15T18:21:00Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxvtw4x47gjsla5vrsfp7zdcs5y9td3ukzkx49tu5e5jvr8ujwyegzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wpsdtma</id>
    
      <title type="html">New blog post: GeoIP-Aware Firewalling with PF on FreeBSD Running ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxvtw4x47gjsla5vrsfp7zdcs5y9td3ukzkx49tu5e5jvr8ujwyegzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wpsdtma" />
    <content type="html">
      New blog post: GeoIP-Aware Firewalling with PF on FreeBSD&lt;br/&gt;&lt;br/&gt;Running a mail server means constant brute-force attempts. My solution: geographic filtering. SMTP stays open for global mail delivery, but client ports (IMAP, Submission, webmail) are restricted to Central European IP ranges only.&lt;br/&gt;&lt;br/&gt;Result: ~90% reduction in attack logs, cleaner signal-to-noise ratio, smaller attack surface.&lt;br/&gt;&lt;br/&gt;Using MaxMind GeoLite2 &#43; PF tables with ~273k CIDR blocks.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/geoip-aware-firewalling-with-pf-on-freebsd/&#34;&gt;https://blog.hofstede.it/geoip-aware-firewalling-with-pf-on-freebsd/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #InfoSec #SysAdmin #pf #DevOps
    </content>
    <updated>2026-01-13T17:34:53Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxwjexgnwxt7atreerjvvcxwj8ftd7e4frtrgpy43wyyn0kva945gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wekjk94</id>
    
      <title type="html">New blog post: Managing FreeBSD Jails with Ansible. I wrote ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxwjexgnwxt7atreerjvvcxwj8ftd7e4frtrgpy43wyyn0kva945gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wekjk94" />
    <content type="html">
      New blog post: Managing FreeBSD Jails with Ansible.&lt;br/&gt;&lt;br/&gt;I wrote jailexec - an Ansible connection plugin that lets you manage FreeBSD jails without running SSH inside each one. It connects to the jail host via SSH and uses jexec to run commands, just like you would manually.&lt;br/&gt;&lt;br/&gt;  Features:&lt;br/&gt;  • Single Python file, easy install&lt;br/&gt;  • Supports doas and sudo&lt;br/&gt;  • Secure two-stage file transfers&lt;br/&gt;  • Works with any jail manager&lt;br/&gt;&lt;br/&gt;Blog: &lt;a href=&#34;https://blog.hofstede.it/managing-freebsd-jails-with-ansible-the-jailexec-connection-plugin/&#34;&gt;https://blog.hofstede.it/managing-freebsd-jails-with-ansible-the-jailexec-connection-plugin/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;Code: &lt;a href=&#34;https://github.com/chofstede/ansible_jailexec&#34;&gt;https://github.com/chofstede/ansible_jailexec&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #Ansible #DevOps #SysAdmin #Jails #Automation
    </content>
    <updated>2025-12-31T11:09:36Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsy95ywgws4wg0quhae38apknhxpn6v6rrxgqwfce55ycmatxrtr7czyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wlf9ycx</id>
    
      <title type="html">Running FreeBSD 15 VM-Image on Proxmox? You might have noticed ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsy95ywgws4wg0quhae38apknhxpn6v6rrxgqwfce55ycmatxrtr7czyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wlf9ycx" />
    <content type="html">
      Running FreeBSD 15 VM-Image on Proxmox? You might have noticed your cloud-init static IPs are being ignored. 😓&lt;br/&gt;&lt;br/&gt;The issue: Proxmox generates legacy cloud-init &amp;#34;v1&amp;#34; configs, but FreeBSD&amp;#39;s new nuageinit tool only understands the modern &amp;#34;v2&amp;#34; format. The result is a silent fallback to DHCP (or no IP at all..).&lt;br/&gt;&lt;br/&gt;I wrote a shell script to bridge the gap. It runs on the host and generates a custom ISO with the v2 syntax FreeBSD actually expects.&lt;br/&gt;&lt;br/&gt;Read the full breakdown and grab the script: &lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/freebsd-15-cloud-init-on-proxmox-working-around-nuageinits-network-config-gap/&#34;&gt;https://blog.hofstede.it/freebsd-15-cloud-init-on-proxmox-working-around-nuageinits-network-config-gap/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #Proxmox #SysAdmin #CloudInit #Virtualization
    </content>
    <updated>2025-12-28T21:08:28Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsynmxajgm5365wqcqjeuxff4qs58ewk8lgnm49gn226eglzu4r9vqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wdg7y0v</id>
    
      <title type="html">FreeBSD shorts: Did you know &amp;#34;ps&amp;#34; can natively display ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsynmxajgm5365wqcqjeuxff4qs58ewk8lgnm49gn226eglzu4r9vqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wdg7y0v" />
    <content type="html">
      FreeBSD shorts:&lt;br/&gt;&lt;br/&gt;Did you know &amp;#34;ps&amp;#34; can natively display Jail information?&lt;br/&gt;&lt;br/&gt;Use the -o flag to customize your columns.&lt;br/&gt;&lt;br/&gt;Example (shows Jail ID, Name, PID, User, and resources): &lt;br/&gt;&lt;br/&gt;# ps -aux -o jid,jail,pid,%cpu,%mem,command&lt;br/&gt;&lt;br/&gt;#freebsd #sysadmin #devops #jails&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/796/715/398/879/928/original/5adca3bbb8043eb6.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-12-28T10:28:24Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqstrg98gxlgsxpyyd7qsa885tg2dk7v895rj2eqr8hn2w5aq4dx4kczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wrstsyu</id>
    
      <title type="html">Mastodon 4.5 running on FreeBSD 14.3-RELEASE with all major ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqstrg98gxlgsxpyyd7qsa885tg2dk7v895rj2eqr8hn2w5aq4dx4kczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wrstsyu" />
    <content type="html">
      Mastodon 4.5 running on FreeBSD 14.3-RELEASE with all major services seperated into different VNET Jails, different networks (different bridges, different l2-domains, firewalled by pf). &lt;br/&gt;&lt;br/&gt;Did a little writeup about the infrastructure over at &lt;a href=&#34;https://blog.hofstede.it/migrating-burningboardnet-mastodon-instance-to-a-multi-jail-freebsd-setup/&#34;&gt;https://blog.hofstede.it/migrating-burningboardnet-mastodon-instance-to-a-multi-jail-freebsd-setup/&lt;/a&gt; &lt;br/&gt;&lt;br/&gt;It&amp;#39;s running extremely stable for 30 hours now, migration from the old (Linux) host was a full success!&lt;br/&gt;&lt;br/&gt;And of course, everything implemented IPv6 first (It&amp;#39;s 2025!) with IPv4&#43;NAT only bolted on where neccesary for legacy-compatibility.&lt;br/&gt;&lt;br/&gt;#mastoadmin #freebsd #jails #bastillebsd #runbsd #ipv6&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/782/324/408/623/143/original/3c31a7942db84e2e.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/782/341/771/169/460/original/dd235d8f5a449c76.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-12-25T21:32:26Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqswa0g8w46rvv880zzl7sevg0z27ravkytyswctxvmgdgkl70ssqfszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wl9ju3e</id>
    
      <title type="html">Migrated the database of my Mastodon instance burningboard.net ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqswa0g8w46rvv880zzl7sevg0z27ravkytyswctxvmgdgkl70ssqfszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wl9ju3e" />
    <content type="html">
      Migrated the database of my Mastodon instance burningboard.net from Linux to PostgreSQL&#43;Valkey on FreeBSD (&#43;zfs)&lt;br/&gt;&lt;br/&gt;All looking perfectly fine :) Although there&amp;#39;s quite a lot of activity, the AMD EPYC Rome system is pretty much idling with the load being at 0.28 🙂 :freebsd_logo: &lt;br/&gt;&lt;br/&gt;#mastodon #freebsd #postgresql #valkey&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/765/028/135/836/435/original/b98e650785ed0be4.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-12-22T20:09:22Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqstk7e7hh3audxscylnqr40dwd423v6shcl0xed2wg8guweh53zunczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w4mzvgm</id>
    
      <title type="html">New blog post: Running a Factorio dedicated server on FreeBSD ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqstk7e7hh3audxscylnqr40dwd423v6shcl0xed2wg8guweh53zunczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w4mzvgm" />
    <content type="html">
      New blog post: Running a Factorio dedicated server on FreeBSD 🏭&lt;br/&gt;&lt;br/&gt;No native port? No problem. The Linuxulator runs Linux binaries seamlessly - Factorio doesn&amp;#39;t even know it&amp;#39;s not on Linux.&lt;br/&gt;&lt;br/&gt;Covered: Bastille jails, rc.d service script, PF firewall rules for IPv4/IPv6.&lt;br/&gt;&lt;br/&gt;The factory must grow. Even on FreeBSD.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/running-a-factorio-headless-server-on-freebsd-with-the-linuxulator/&#34;&gt;https://blog.hofstede.it/running-a-factorio-headless-server-on-freebsd-with-the-linuxulator/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #Factorio #Linuxulator #Gaming #SelfHosted #BastilleBSD
    </content>
    <updated>2025-12-20T13:22:55Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxd8m2lh5f3x8fs6uxkvyfq70qxyd324fymheucqu92hxdw7dszmszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8gh3r0</id>
    
      <title type="html">I feel dirty :freebsd_logo: 🪟 :bhyve: 😂 I needed some ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxd8m2lh5f3x8fs6uxkvyfq70qxyd324fymheucqu92hxdw7dszmszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8gh3r0" />
    <content type="html">
      I feel dirty :freebsd_logo: 🪟 :bhyve: 😂 &lt;br/&gt;&lt;br/&gt;I needed some Windows for a (German) tax related application, so just ran it in BHYVE. (Bit slow on the ThinkPad T480, but got the job done!)&lt;br/&gt;&lt;br/&gt;#freebsd #bhyve #windows #windows11 #runbsd #unix&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/720/096/091/649/835/original/286a98cc33fb4b7e.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-12-14T21:44:52Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs9px99t6xlmmy5w5ckds09mkkkdjmsat0p3f6uzz5rxauxssmtusqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8q0etc</id>
    
      <title type="html">RE: https://mastodon.bsd.cafe/@Larvitz/115718085687749256 My ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs9px99t6xlmmy5w5ckds09mkkkdjmsat0p3f6uzz5rxauxssmtusqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w8q0etc" />
    <content type="html">
      RE: &lt;a href=&#34;https://mastodon.bsd.cafe/@Larvitz/115718085687749256&#34;&gt;https://mastodon.bsd.cafe/@Larvitz/115718085687749256&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;My latest blog-article is (of course) also available via the Gemini protocol on my personal Gemini capsule:&lt;br/&gt;&lt;br/&gt;gemini://gemini.hofstede.it/freebsd_blog_infrastructure.gmi&lt;br/&gt;&lt;br/&gt;#freebsd #gemini #geminispace #smallweb&lt;blockquote class=&#34;border-l-05rem border-l-strongpink border-solid&#34;&gt;&lt;div class=&#34;-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2&#34;&gt;quoting &lt;br/&gt;&lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Article&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/note12hs9jzxfsfjl3zj28c5w7vn0tx3dd7yzvtv0ev6eejq6yw37zk7q6akr63&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;note12hs…kr63&lt;/a&gt;&lt;/span&gt;&lt;br/&gt; &lt;/div&gt; New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails&lt;br/&gt;&lt;br/&gt;A deep dive into my self-hosting setup:&lt;br/&gt;- FreeBSD 15.0 with securelevel 2&lt;br/&gt;- Bastille jails for isolation (Caddy, Nginx, deployment gateway)&lt;br/&gt;- PF firewall with strict NAT/RDR rules&lt;br/&gt;- CI/CD via Forgejo Actions with rrsync-restricted deployments&lt;br/&gt;- nullfs mounts for zero-copy file sharing between jails&lt;br/&gt;&lt;br/&gt;The &#34;transporter pattern&#34; keeps the blog jail unexposed while enabling automated deploys. Jails remain the most elegant isolation mechanism around.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/hosting-a-static-blog-on-freebsd-with-bastille-jails-and-automated-deployment/&#34;&gt;https://blog.hofstede.it/hosting-a-static-blog-on-freebsd-with-bastille-jails-and-automated-deployment/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#freebsd #bastillebsd #jails #blog #devops #cicd #forgejo &lt;/blockquote&gt;
    </content>
    <updated>2025-12-14T13:25:56Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs9tczeprycye0c3f9ru280xfh4ngkklzpx9k8ukdvueqdz8glpt0qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wvu9atp</id>
    
      <title type="html">New blog post: Hosting a Static Blog on FreeBSD with Bastille ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs9tczeprycye0c3f9ru280xfh4ngkklzpx9k8ukdvueqdz8glpt0qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wvu9atp" />
    <content type="html">
      New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails&lt;br/&gt;&lt;br/&gt;A deep dive into my self-hosting setup:&lt;br/&gt;- FreeBSD 15.0 with securelevel 2&lt;br/&gt;- Bastille jails for isolation (Caddy, Nginx, deployment gateway)&lt;br/&gt;- PF firewall with strict NAT/RDR rules&lt;br/&gt;- CI/CD via Forgejo Actions with rrsync-restricted deployments&lt;br/&gt;- nullfs mounts for zero-copy file sharing between jails&lt;br/&gt;&lt;br/&gt;The &amp;#34;transporter pattern&amp;#34; keeps the blog jail unexposed while enabling automated deploys. Jails remain the most elegant isolation mechanism around.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/hosting-a-static-blog-on-freebsd-with-bastille-jails-and-automated-deployment/&#34;&gt;https://blog.hofstede.it/hosting-a-static-blog-on-freebsd-with-bastille-jails-and-automated-deployment/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#freebsd #bastillebsd #jails #blog #devops #cicd #forgejo
    </content>
    <updated>2025-12-14T13:11:00Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxtdpguhc9497wd0qlrqx43sgdq5eeweppdh4jzxg4j38cqae9c3qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w9uj4nl</id>
    
      <title type="html">Goodbye Linux &amp;amp; Podman, hello FreeBSD &amp;amp; Jails! ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxtdpguhc9497wd0qlrqx43sgdq5eeweppdh4jzxg4j38cqae9c3qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w9uj4nl" />
    <content type="html">
      Goodbye Linux &amp;amp; Podman, hello FreeBSD &amp;amp; Jails!  :freebsd_logo: &lt;br/&gt;&lt;br/&gt;Just migrated my blog (&lt;a href=&#34;https://blog.hofstede.it&#34;&gt;https://blog.hofstede.it&lt;/a&gt;) to a fully native BSD stack (where my Gemini Capsule was already living).&lt;br/&gt;&lt;br/&gt;Stack (using Bastille VNET Jails) &lt;br/&gt;- Caddy (Ingress, TLS, Reverse-Proxy)&lt;br/&gt;- Nginx Jail  (Internal. Static file serving)&lt;br/&gt;- PF&lt;br/&gt;&lt;br/&gt;The Cool Part: A Zero-Trust CI/CD pipeline. &lt;br/&gt;&lt;br/&gt;My Forgejo runner deploys via restricted rrsync into an air-gapped &amp;#34;transporter&amp;#34; jail, which nullfs mounts the web root. &lt;br/&gt;&lt;br/&gt;Security: Source-IP restricted, no interactive shells, no PTY.&lt;br/&gt;&lt;br/&gt;The simplicity of files-on-disk beats container abstraction every time.&lt;br/&gt;&lt;br/&gt;#BastilleBSD #SelfHosted #SysAdmin #IPv6 #ZFS #FreeBSD #RunBSD&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/712/356/440/032/086/original/3d675d83b9fea191.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/712/358/195/557/539/original/24db4aee6deb8d34.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-12-13T12:59:09Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsv3udx4xprv6afln6g0v5fd2cpft499vwzvv5nz7jv2f365xy9e9czyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsk27e9</id>
    
      <title type="html">Mastodon running on FreeBSD 14.3-RELEASE in a Bastille jail. ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsv3udx4xprv6afln6g0v5fd2cpft499vwzvv5nz7jv2f365xy9e9czyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wsk27e9" />
    <content type="html">
      Mastodon running on FreeBSD 14.3-RELEASE in a Bastille jail. Running really smooth! Less problems than I had anticipated.&lt;br/&gt;&lt;br/&gt;Next steps:&lt;br/&gt;- Seperating into multiple jails (Postgres&#43;Valkey, Sidekiq, Puma and Streaming)&lt;br/&gt;&lt;br/&gt;Then testing and planning the actual migration of my instance ofer to the new server 🙂 &lt;br/&gt;&lt;br/&gt;#freebsd #runbsd #mastodon #selfhosted #socialmedia&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/639/461/437/707/637/original/9099deff46e24ba5.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-11-30T15:55:54Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsqmahjp6e26t426sj4yvfhkwrx3vp22ycen83njepge8fxzycm0zqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2wu2nr</id>
    
      <title type="html">Factorio: Space Age working PERFECTLY under FreeBSD 15.0-RC3 with ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsqmahjp6e26t426sj4yvfhkwrx3vp22ycen83njepge8fxzycm0zqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2wu2nr" />
    <content type="html">
      Factorio: Space Age working PERFECTLY under FreeBSD 15.0-RC3 with proper 60fps and really REALLY smooth performance on my Intel iGPU (UHD 620 via drm-66-kmod). &lt;br/&gt;&lt;br/&gt;Oh my productivity will be suffer so much from that !!! 🙂 &lt;br/&gt;&lt;br/&gt;THE FACTORY MUST GROW !!!&lt;br/&gt;&lt;br/&gt;#factorio #freebsd #runbsd #freebsd15 #bsdgaming #gaming&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/598/974/410/690/620/original/57176117a136d873.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-11-23T12:21:35Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsyzrp5xdr3jrtu97kajcka6qqwy6fkeem8l7442csxztt73rq4sjczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w9p9a9h</id>
    
      <title type="html">The headless Factorio game server runs absolute fine on FreeBSD ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsyzrp5xdr3jrtu97kajcka6qqwy6fkeem8l7442csxztt73rq4sjczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w9p9a9h" />
    <content type="html">
      The headless Factorio game server runs absolute fine on FreeBSD 14.3 via Linuxlator (Linux API compatibility layer) and the linux-base-rl9 userland package :) &lt;br/&gt;&lt;br/&gt;The factory must grow !! :-) &lt;br/&gt;&lt;br/&gt;#factorio #freebsd #linuxlator #gaming #runbsd &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/npub1zyt22cjaayp6r9g57z5hsl7znzvs2p4rrrcs4cqegqhy5fwq7wqsvpu6da&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;bbₜᵤₓᵢ&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;npub1zyt…u6da&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt; &lt;span itemprop=&#34;mentions&#34; itemscope itemtype=&#34;https://schema.org/Person&#34;&gt;&lt;a itemprop=&#34;url&#34; href=&#34;/npub1gjr63zlqf7t02pvxsd5g3tmkha6whf2et42hk0hzcrt9442wgcqsw39nul&#34; class=&#34;bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1&#34;&gt;&lt;span&gt;Agent6491&lt;/span&gt; (&lt;span class=&#34;italic&#34;&gt;npub1gjr…9nul&lt;/span&gt;)&lt;/a&gt;&lt;/span&gt;&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/577/591/752/010/481/original/b10e7f463a5b66d8.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-11-19T17:42:09Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxxyanchr8nk4quj5cf6xsrs9gqgz59s449tq45j2r4e50w9sdf7gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wus9mqa</id>
    
      <title type="html">New blog post: FreeBSD Dual-Stack with Jails on Hetzner Cloud ! ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxxyanchr8nk4quj5cf6xsrs9gqgz59s449tq45j2r4e50w9sdf7gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wus9mqa" />
    <content type="html">
      New blog post: FreeBSD Dual-Stack with  Jails on Hetzner Cloud !&lt;br/&gt;&lt;br/&gt;How to run VNET jails with proper IPv6 (no NAT66!) by splitting a /64 into two /65 subnets.&lt;br/&gt;&lt;br/&gt;- Complete working configs&lt;br/&gt;- IPv6-first philosophy&lt;br/&gt;- Production-tested&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://blog.hofstede.it/freebsd-dual-stack-jails-on-hetzner-cloud/&#34;&gt;https://blog.hofstede.it/freebsd-dual-stack-jails-on-hetzner-cloud/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #IPv6 #Jails #Bastille #Hetzner #sysadmin
    </content>
    <updated>2025-11-12T20:07:15Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsp7d0val7lgtjcny8etf2hjgug0f0vnlzaa84k2nqkqvt40h7es7qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wmfed6j</id>
    
      <title type="html">I did finally put my Blog website back online. Currently ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsp7d0val7lgtjcny8etf2hjgug0f0vnlzaa84k2nqkqvt40h7es7qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wmfed6j" />
    <content type="html">
      I did finally put my Blog website back online.&lt;br/&gt;&lt;br/&gt;Currently featuring three FreeBSD related articles from the past year:&lt;br/&gt;&lt;br/&gt;- FreeBSD 15.0 on the ThinkPad T480 -  Efficient, Stable, and 8 Hours on Battery&lt;br/&gt;&lt;br/&gt;- Simple Temperature Monitoring on FreeBSD&lt;br/&gt;&lt;br/&gt;- FreeBSD Cheat Sheet for Linux Admins&lt;br/&gt;&lt;br/&gt;I will keep publishing my FreeBSD / Linux / Sysadmin articles there. &lt;br/&gt;&lt;br/&gt;Web: &lt;a href=&#34;https://blog.hofstede.it&#34;&gt;https://blog.hofstede.it&lt;/a&gt; &lt;br/&gt;&lt;br/&gt;Gemini: gemini://gemini.hofstede.it&lt;br/&gt;&lt;br/&gt;#blog #freebsd #bsd #unix #website
    </content>
    <updated>2025-11-09T14:09:18Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxw6ekm46sxgygg2m9gnc5u9wmtv6xzlcw2us3gwc9d6hg7hvm4eszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wkmq942</id>
    
      <title type="html">Just published a detailed write-up on tuning a ThinkPad T480 for ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxw6ekm46sxgygg2m9gnc5u9wmtv6xzlcw2us3gwc9d6hg7hvm4eszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wkmq942" />
    <content type="html">
      Just published a detailed write-up on tuning a ThinkPad T480 for power efficiency under FreeBSD 15.0-BETA5.&lt;br/&gt;&lt;br/&gt;Achieving 6–8 hours of battery life with full suspend/resume, ZFS, Wi‑Fi, and XFCE.&lt;br/&gt;&lt;br/&gt;Read here → &lt;a href=&#34;https://codeberg.org/Larvitz/gists/src/branch/main/2025/20251109-T480_FreeBSD_Laptop_Efficiency.md&#34;&gt;https://codeberg.org/Larvitz/gists/src/branch/main/2025/20251109-T480_FreeBSD_Laptop_Efficiency.md&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #BSD #ThinkPad #XFCE #ZFS #Unix
    </content>
    <updated>2025-11-09T11:15:06Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsd5x66xr5cd4082uxjzuuwygrcmwul9hzzh96m9asnghag7cc94zszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wwfrtwl</id>
    
      <title type="html">Earlier this year, I developed &amp;#34;ansible_jailexec&amp;#34;, a ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsd5x66xr5cd4082uxjzuuwygrcmwul9hzzh96m9asnghag7cc94zszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wwfrtwl" />
    <content type="html">
      Earlier this year, I developed &amp;#34;ansible_jailexec&amp;#34;, a modern Ansible connection plugin that can manage FreeBSD Jails via jexec from the host (incl. transparent file copy into the jails filesystem). All released under a BSD license.&lt;br/&gt;&lt;br/&gt;That way, you can automate FreeBSD Jails via Ansible, even when they have no ssh or network connectivity.&lt;br/&gt;&lt;br/&gt;On Codeberg: &lt;a href=&#34;https://codeberg.org/Larvitz/ansible_jailexec&#34;&gt;https://codeberg.org/Larvitz/ansible_jailexec&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;On GitHub: &lt;a href=&#34;https://github.com/chofstede/ansible_jailexec/&#34;&gt;https://github.com/chofstede/ansible_jailexec/&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;The connection-plugin comes as a single python file (jailexec.py) and comes with Unit tests and internal safety checks.&lt;br/&gt;&lt;br/&gt;Maybe someone finds it useful Happy automating :freebsd_logo: 🙂 &lt;br/&gt;&lt;br/&gt;#freebsd #ansible #automation #bsd #automation #opensource #foss #jails
    </content>
    <updated>2025-11-02T12:13:47Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsw5sa5ju3utv5jht5w2uq9rnxzu49h7pdemjtf4xh6vqc7e8utxgszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w7d2khd</id>
    
      <title type="html">Little bit experimenting with OpenBSD 7.8 🙂 Working nice, but ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsw5sa5ju3utv5jht5w2uq9rnxzu49h7pdemjtf4xh6vqc7e8utxgszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w7d2khd" />
    <content type="html">
      Little bit experimenting with OpenBSD 7.8 🙂 &lt;br/&gt;Working nice, but I&amp;#39;ll stay with FreeBSD on my systems (too many commands in muscle-memory)&lt;br/&gt;&lt;br/&gt;:openbsd: &lt;br/&gt;&lt;br/&gt;#openbsd #bsd #unix #foss #opensource #xfce&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/476/829/237/989/217/original/e86f9b6becaf92f9.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-11-01T22:37:42Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqs8hy0zzjtqkdacme0v07ek3japq6ymyc42qt80dlrre0k9eazjmrszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wgslmtp</id>
    
      <title type="html">Upgraded my Laptop (ThinkPad T480) from 14.3-STABLE to ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqs8hy0zzjtqkdacme0v07ek3japq6ymyc42qt80dlrre0k9eazjmrszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wgslmtp" />
    <content type="html">
      Upgraded my Laptop (ThinkPad T480) from 14.3-STABLE to 15.0-BETA3. Did only take ~2.5 hours (makeworld, makekernel ..) &lt;br/&gt;&lt;br/&gt;Everything reasonably stable, iwlwifi with 802.11ac performing like a beast (300-500 Mbps on 80Mhz channel)&lt;br/&gt;&lt;br/&gt;Only issue: GPU firmware isn&amp;#39;t loading. Neither from -quarterly, from -stable or from the current ports tree :(&lt;br/&gt;&lt;br/&gt;GPU itself works fine with the DRM driver, just missing some power-management capabilities.&lt;br/&gt;&lt;br/&gt;KLD i915_kbl_dmc_ver1_04_bin.ko: depends on kernel - not available or version mismatch&lt;br/&gt;i915_kbl_dmc_ver1_04_bin: could not load binary firmware /boot/firmware/i915_kbl_dmc_ver1_04_bin either&lt;br/&gt;drmn0: could not load firmware image &amp;#39;i915/kbl_dmc_ver1_04.bin&amp;#39;&lt;br/&gt;drmn0: [drm] Failed to load DMC firmware i915/kbl_dmc_ver1_04.bin. Disabling runtime power management.&lt;br/&gt;&lt;br/&gt;#freebsd #freebsd15 #beta #opensource #foss #thinkpad&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/453/295/738/177/511/original/b544354d586956cb.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/453/330/963/029/052/original/4afc5c88b55c6536.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-28T19:00:38Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsxytk3mtr88lxcmphlv6du3gv2uf3v36dhgt02wtpllefk93rpgkqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wr07462</id>
    
      <title type="html">And a fully functioning &amp;#34;zone&amp;#34; (like a isolated Jail) ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsxytk3mtr88lxcmphlv6du3gv2uf3v36dhgt02wtpllefk93rpgkqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wr07462" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsvflm92hz2h9aus23dfpfqwtvt78pn9hk5gjvrhnz45e2ltaeux7gxkfycn&#39;&gt;nevent1q…fycn&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;And a fully functioning &amp;#34;zone&amp;#34; (like a isolated Jail) runnong on Openindiana/illumios (Solaris)&lt;br/&gt;&lt;br/&gt;Yay, i still know how do ti that :) &lt;br/&gt;&lt;br/&gt;#bsd #solaris #illumos #openindiana&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/408/719/381/712/298/original/d8cb0f14a83308e2.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-20T21:55:46Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsvflm92hz2h9aus23dfpfqwtvt78pn9hk5gjvrhnz45e2ltaeux7gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23we3g3ny</id>
    
      <title type="html">Today somethin different than FreeBSD for a change (but still ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsvflm92hz2h9aus23dfpfqwtvt78pn9hk5gjvrhnz45e2ltaeux7gzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23we3g3ny" />
    <content type="html">
      Today somethin different than FreeBSD for a change (but still Unix!). Brings back so many memories from 2001-2005 when I was administering Solaris machines during my first job. &lt;br/&gt;&lt;br/&gt;Even some commands still were in my head like zones (OS virtualization. somewhat like  Jails but different isolation :)&lt;br/&gt;&lt;br/&gt;# Install zone&lt;br/&gt;zoneadm -z myzone install&lt;br/&gt;# Boot zone&lt;br/&gt;zoneadm -z myzone boot&lt;br/&gt;# Check if zone is running&lt;br/&gt;sudo zoneadm list -cv&lt;br/&gt;# Llogin to zone&lt;br/&gt;sudo zlogin myzone&lt;br/&gt;&lt;br/&gt;So much nostangia :-) ☕ &lt;br/&gt;&lt;br/&gt;#freebsd #solaris #opensolaris #illumos #sunos  #sunmicrosystems #unix #openindiana&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/408/523/250/729/703/original/a09ef834cbe254f4.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-20T21:28:24Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqspaeg4tfv5xt6vree73l690tyjy60vaphvu66442cqjymqgqz3xsczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wxntjle</id>
    
      <title type="html">Seeing FreeBSD base updates like that in pkg still feels foreign ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqspaeg4tfv5xt6vree73l690tyjy60vaphvu66442cqjymqgqz3xsczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wxntjle" />
    <content type="html">
      Seeing FreeBSD base updates like that in pkg still feels foreign (and I did of course type &amp;#34;freebsd-update fetch&amp;#34; before, which doesn&amp;#39;t work anymore 😅)&lt;br/&gt;&lt;br/&gt;But so far, it works flawlessly on my 15-STABLE system :freebsd: &lt;br/&gt;&lt;br/&gt;#freebsd #pkgbase #desktop #update&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/408/043/048/295/585/original/f38e886d9aee2ae4.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-20T19:08:36Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsyn6afu0askzermnhs6luk8e2zqspqf72wd8r5t75aes44k2zqv9qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2zvzmd</id>
    
      <title type="html">Hello 15-STABLE BETA2 :freebsd_logo: 😀 All working great, but ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsyn6afu0askzermnhs6luk8e2zqspqf72wd8r5t75aes44k2zqv9qzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w2zvzmd" />
    <content type="html">
      Hello 15-STABLE BETA2 :freebsd_logo: 😀 &lt;br/&gt;&lt;br/&gt;All working great, but PKGBASE is something, I need to get used to haha.&lt;br/&gt;&lt;br/&gt;#freebsd #freebsd15 #testing #unix&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/396/025/216/794/718/original/28732b976fe619cd.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-18T15:49:26Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsy2avpwdc09secd0zl8le2388mr0dha0et4tr6nt4ttf2glwnatpqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w0fnn2z</id>
    
      <title type="html">Made my FreeBSD server at Netcup ready to host multiple isolated ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsy2avpwdc09secd0zl8le2388mr0dha0et4tr6nt4ttf2glwnatpqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w0fnn2z" />
    <content type="html">
      Made my FreeBSD server at Netcup ready to host multiple isolated applications with automatic https via Let&amp;#39;s Encrypt.&lt;br/&gt;&lt;br/&gt;Internet → Server → PF firewall → Caddy jail (reverse proxy) → Individual application jails&lt;br/&gt;&lt;br/&gt;Each app gets its own isolated jail for security, while Caddy handles all the  routing and https. PF keeps the front door locked.&lt;br/&gt;&lt;br/&gt;All of course with IPv6 first, where every Jail has it&amp;#39;s own public IP address and using NAT for legacy IPv4.&lt;br/&gt;&lt;br/&gt;Love how FreeBSD jails make this kind of segmentation so elegant.&lt;br/&gt;&lt;br/&gt;#FreeBSD #Jails #SelfHosting #Caddy #ipv4&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/394/508/895/636/144/original/65efd0c8cf326bd3.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-18T09:42:35Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsds28tqz2603skng2yltmwrfmz7xwxfjqkw2aazqt4vk90fz3vzyszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wqrv32l</id>
    
      <title type="html">For 10 years now, people from the Linux side, tell me systemd is ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsds28tqz2603skng2yltmwrfmz7xwxfjqkw2aazqt4vk90fz3vzyszyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wqrv32l" />
    <content type="html">
      For 10 years now, people from the Linux side, tell me systemd is so much easier and &amp;#34;Unit-Files&amp;#34; are so much cleaner and better than init-scripts ...&lt;br/&gt;&lt;br/&gt;Well, I still don&amp;#39;t get it. A well implemented init-system like that of FreeBSD is:&lt;br/&gt;&lt;br/&gt;- Clean&lt;br/&gt;- Flexible&lt;br/&gt;- Way more lightweight &lt;br/&gt;- Works with just shell code &lt;br/&gt;&lt;br/&gt;I have written a rc.d init-script for zigbee2mqtt today and honestly? It&amp;#39;s not going to be shorter than that. Would chose that instead of systemd! ANY TIME! K.I.S.S.&lt;br/&gt;&lt;br/&gt;10 years in and I still don&amp;#39;t see a real advantage of monolithic-binary init-systems with static configuration files. &lt;br/&gt;&lt;br/&gt;#freebsd #init #systemd #kiss #simplicity #scripting #linux&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/352/339/662/145/866/original/9a928cced48ffd41.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-10T22:58:53Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqstrt0m9f9zcme7arhevmh7wd326l592cfpn546ukvdudttkmptttczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wdn9sc5</id>
    
      <title type="html">Migrated my ZigBee2MQTT to BSD, of course running inside a Jail ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqstrt0m9f9zcme7arhevmh7wd326l592cfpn546ukvdudttkmptttczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wdn9sc5" />
    <content type="html">
      Migrated my ZigBee2MQTT to BSD, of course running inside a Jail (and with IPv6!) 🙂 &lt;br/&gt;&lt;br/&gt;All running perfectly fine and as stable as you&amp;#39;d expect from FreeBSD :freebsd_logo: &lt;br/&gt;&lt;br/&gt;Plus the rc.d script is so minimalistic and simple, that I don&amp;#39;t get it, why anyone would prefer intransparent systemd to  that!&lt;br/&gt;&lt;br/&gt;Another part of my home-infrastructure migrated over! &lt;br/&gt;&lt;br/&gt;#freebsd #jais #zigbee #mqtt #smarthome #unix #homelab&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/351/491/154/711/171/original/fdb6922b08f77f61.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/351/492/394/011/834/original/192908394d3340d0.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/351/493/919/299/811/original/2e8f465bf005d54f.png&#34;&gt; &lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/351/498/315/989/285/original/e0309b26b3dd3f1d.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-10-10T19:24:48Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsq0urs8j8l72agc0kwdzst8mak48m9qyhn762s9whw2n5qz4ntetczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wrzgm9f</id>
    
      <title type="html">Keep your FreeBSD system cool with built-in temperature ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsq0urs8j8l72agc0kwdzst8mak48m9qyhn762s9whw2n5qz4ntetczyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wrzgm9f" />
    <content type="html">
      Keep your FreeBSD system cool with built-in temperature monitoring!&lt;br/&gt;&lt;br/&gt;No ports needed, just sysctl and a simple shell script. Perfect for FreeBSD 14.x users who want lightweight, dependency-free thermal monitoring.&lt;br/&gt;&lt;br/&gt;Quick, practical, and very Unix.&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://codeberg.org/Larvitz/gists/src/branch/main/2025/20251009-FreeBSD_Temp-Monitoring.md&#34;&gt;https://codeberg.org/Larvitz/gists/src/branch/main/2025/20251009-FreeBSD_Temp-Monitoring.md&lt;/a&gt;&lt;br/&gt;&lt;br/&gt;#FreeBSD #BSD #SysAdmin #Unix
    </content>
    <updated>2025-10-09T20:54:59Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsq2r5q4weyayk2sy0qn5q9wxyjnnv8zewuqxdp2ca95p4zmcjdyzgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wszrpzg</id>
    
      <title type="html">Yay, got bhyve :bhyve: running on my Laptop. With Virtual ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsq2r5q4weyayk2sy0qn5q9wxyjnnv8zewuqxdp2ca95p4zmcjdyzgzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23wszrpzg" />
    <content type="html">
      Yay, got bhyve :bhyve:  running on my Laptop. &lt;br/&gt;&lt;br/&gt;With Virtual Machines behind a local bridge and NAT via pf :-) &lt;br/&gt;&lt;br/&gt;Just installed a test VM with Debian Linux and it&amp;#39;s working flawlessly. &lt;br/&gt;&lt;br/&gt;My FreeBSD :freebsd_logo:  based workstation gets more feature complete every day :-) &lt;br/&gt;&lt;br/&gt;#freebsd #bhyve #workstation #linux&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/283/465/159/533/050/original/f3410687d8ed4b31.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-09-28T19:03:55Z</updated>
  </entry>

  <entry>
    <id>https://yabu.me/nevent1qqsy9fswas9aj32jjkerhe90ej64tdkxu4zhds98cuuv32fal2aq2lqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w6cfttt</id>
    
      <title type="html">FreeBSD 14.3-RELEASE-p3 on Lenovo ThinkPad T480 with XFCE. - 5 ...</title>
    
    <link rel="alternate" href="https://yabu.me/nevent1qqsy9fswas9aj32jjkerhe90ej64tdkxu4zhds98cuuv32fal2aq2lqzyrn8nsd8d6kfpv2n3xxqemqe5esgusclhcnak0jnq39m0awjsq23w6cfttt" />
    <content type="html">
      FreeBSD 14.3-RELEASE-p3 on Lenovo ThinkPad T480 with XFCE.&lt;br/&gt;&lt;br/&gt;- 5 Ghz WiFi working like a charm with iwlwifi and really good speeds&lt;br/&gt;- System runs stable, reliably and snappy.&lt;br/&gt;&lt;br/&gt;Very very well usable, even without wifibox yay 🙂 &lt;br/&gt;&lt;br/&gt;#freebsd #runbsd #wifi #networking #thinkpad #ipv6&lt;br/&gt; &lt;img src=&#34;https://media.bsd.cafe/bsdmmedia01/media_attachments/files/115/281/482/783/905/094/original/d329af4306977f13.png&#34;&gt; &lt;br/&gt;
    </content>
    <updated>2025-09-28T10:38:57Z</updated>
  </entry>

</feed>