Introduction
Introduction Statistics Contact Development Disclaimer Help
bsdweekly.com.atom.xml - sfeed_tests - sfeed tests and RSS and Atom files
git clone git://git.codemadness.org/sfeed_tests
Log
Files
Refs
README
LICENSE
---
bsdweekly.com.atom.xml (131297B)
---
1 <?xml version="1.0" encoding="UTF-8"?>
2 <feed xml:lang="en-US" xmlns="http://www.w3.org/2005/Atom">
3 <id>tag:bsdsec.net,2005:/articles</id>
4 <link rel="alternate" type="text/html" href="https://bsdsec.net"/>
5 <link rel="self" type="application/atom+xml" href="https://bsdsec.net/…
6 <title>BSDSec</title>
7 <updated>2020-10-29T17:09:15Z</updated>
8 <entry>
9 <id>tag:bsdsec.net,2005:Article/1223</id>
10 <published>2020-10-29T17:09:15Z</published>
11 <updated>2020-10-29T17:09:15Z</updated>
12 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
13 <title>OpenBSD Errata: October 29th, 2020 (tmux)</title>
14 <content type="html">Errata patches for tmux have been released for …
15
16 tmux has a stack overflow in CSI parsing.
17
18 Binary updates for the amd64, i386, and arm64 platforms are available via
19 the syspatch utility. Source code patches can be found on the respective
20 errata page:
21
22 https://www.openbsd.org/errata67.html
23 https://www.openbsd.org/errata68.html
24 </content>
25 <tags>openbsd</tags>
26 <author>
27 <name>[email protected]</name>
28 </author>
29 </entry>
30 <entry>
31 <id>tag:bsdsec.net,2005:Article/1222</id>
32 <published>2020-10-28T17:36:48Z</published>
33 <updated>2020-10-28T17:36:48Z</updated>
34 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
35 <title>OpenBSD Errata: October 29th, 2020 (icmp6)</title>
36 <content type="html">Errata patches for the kernel have been release…
37
38 When generating the ICMP6 response to an IPv6 packet, the kernel could
39 use mbuf memory after freeing it.
40
41 Binary updates for the amd64, i386, and arm64 platforms are available via
42 the syspatch utility. Source code patches can be found on the respective
43 errata page:
44
45 https://www.openbsd.org/errata67.html
46 https://www.openbsd.org/errata68.html
47
48 As these affect the kernel, a reboot will be needed after patching.
49 </content>
50 <tags>openbsd</tags>
51 <author>
52 <name>[email protected]</name>
53 </author>
54 </entry>
55 <entry>
56 <id>tag:bsdsec.net,2005:Article/1221</id>
57 <published>2020-10-27T23:24:21Z</published>
58 <updated>2020-10-27T23:24:21Z</updated>
59 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
60 <title>[FreeBSD-Announce] FreeBSD 12.2-RELEASE Now Available</title>
61 <content type="html">-----BEGIN PGP SIGNED MESSAGE-----
62 Hash: SHA256
63
64 FreeBSD 12.2-RELEASE Announcement
65
66 The FreeBSD Release Engineering Team is pleased to announce the
67 availability of FreeBSD 12.2-RELEASE. This is the third release of the
68 stable/12 branch.
69
70 Some of the highlights:
71
72 * Updates to the wireless networking stack and various drivers have
73 been introduced to provide better 802.11n and 802.11ac support.
74
75 * The ice(4) driver has been added, supporting Intel(R) 100Gb ether…
76 cards.
77
78 * The jail(8) utility has been updated to allow running Linux(R) in…
79 jailed environment.
80
81 * OpenSSL has been updated to version 1.1.1h.
82
83 * OpenSSH has been updated to version 7.9p1.
84
85 * The clang, llvm, lld, lldb, compiler-rt utilities and libc++ have
86 been updated to version 10.0.1.
87
88 * And much more...
89
90 For a complete list of new features and known problems, please see the
91 online release notes and errata list, available at:
92
93 * https://www.FreeBSD.org/releases/12.2R/relnotes.html
94
95 * https://www.FreeBSD.org/releases/12.2R/errata.html
96
97 For more information about FreeBSD release engineering activities, pl…
98 see:
99
100 * https://www.FreeBSD.org/releng/
101
102 Availability
103
104 FreeBSD 12.2-RELEASE is now available for the amd64, i386, powerpc,
105 powerpc64, sparc64, armv6, and aarch64 architectures.
106
107 FreeBSD 12.2-RELEASE can be installed from bootable ISO images or over
108 the network. Some architectures also support installing from a USB me…
109 stick. The required files can be downloaded as described in the secti…
110 below.
111
112 SHA512 and SHA256 hashes for the release ISO, memory stick, and SD ca…
113 images are included at the bottom of this message.
114
115 PGP-signed checksums for the release images are also available at:
116
117 * https://www.FreeBSD.org/releases/12.2R/signatures.html
118
119 A PGP-signed version of this announcement is available at:
120
121 * https://www.FreeBSD.org/releases/12.2R/announce.asc
122
123 The purpose of the images provided as part of the release are as foll…
124
125 dvd1
126
127 This contains everything necessary to install the base FreeBSD
128 operating system, the documentation, debugging distribution s…
129 and a small set of pre-built packages aimed at getting a
130 graphical workstation up and running. It also supports booting
131 into a "livefs" based rescue mode. This should be all you nee…
132 you can burn and use DVD-sized media.
133
134 Additionally, this can be written to a USB memory stick (flash
135 drive) for the amd64 architecture and used to do an install on
136 machines capable of booting off USB drives. It also supports
137 booting into a "livefs" based rescue mode.
138
139 As one example of how to use the memstick image, assuming the…
140 drive appears as /dev/da0 on your machine something like this
141 should work:
142
143 # dd if=FreeBSD-12.2-RELEASE-amd64-dvd1.iso \
144 of=/dev/da0 bs=1m conv=sync
145
146 Be careful to make sure you get the target (of=) correct.
147
148 disc1
149
150 This contains the base FreeBSD operating system. It also supp…
151 booting into a "livefs" based rescue mode. There are no pre-b…
152 packages.
153
154 Additionally, this can be written to a USB memory stick (flash
155 drive) for the amd64 architecture and used to do an install on
156 machines capable of booting off USB drives. It also supports
157 booting into a "livefs" based rescue mode. There are no pre-b…
158 packages.
159
160 As one example of how to use the memstick image, assuming the…
161 drive appears as /dev/da0 on your machine something like this
162 should work:
163
164 # dd if=FreeBSD-12.2-RELEASE-amd64-disc1.iso \
165 of=/dev/da0 bs=1m conv=sync
166
167 Be careful to make sure you get the target (of=) correct.
168
169 bootonly
170
171 This supports booting a machine using the CDROM drive but does
172 not contain the installation distribution sets for installing
173 FreeBSD from the CD itself. You would need to perform a netwo…
174 based install (e.g., from an HTTP or FTP server) after booting
175 from the CD.
176
177 Additionally, this can be written to a USB memory stick (flash
178 drive) for the amd64 architecture and used to do an install on
179 machines capable of booting off USB drives. It also supports
180 booting into a "livefs" based rescue mode. There are no pre-b…
181 packages.
182
183 As one example of how to use the memstick image, assuming the…
184 drive appears as /dev/da0 on your machine something like this
185 should work:
186
187 # dd if=FreeBSD-12.2-RELEASE-amd64-bootonly.iso \
188 of=/dev/da0 bs=1m conv=sync
189
190 Be careful to make sure you get the target (of=) correct.
191
192 memstick
193
194 This can be written to a USB memory stick (flash drive) and u…
195 to do an install on machines capable of booting off USB drive…
196 It also supports booting into a "livefs" based rescue mode. T…
197 are no pre-built packages.
198
199 As one example of how to use the memstick image, assuming the…
200 drive appears as /dev/da0 on your machine something like this
201 should work:
202
203 # dd if=FreeBSD-12.2-RELEASE-amd64-memstick.img \
204 of=/dev/da0 bs=1m conv=sync
205
206 Be careful to make sure you get the target (of=) correct.
207
208 mini-memstick
209
210 This can be written to a USB memory stick (flash drive) and u…
211 to boot a machine, but does not contain the installation
212 distribution sets on the medium itself, similar to the booton…
213 image. It also supports booting into a "livefs" based rescue
214 mode. There are no pre-built packages.
215
216 As one example of how to use the mini-memstick image, assuming
217 the USB drive appears as /dev/da0 on your machine something l…
218 this should work:
219
220 # dd if=FreeBSD-12.2-RELEASE-amd64-mini-memstick.img \
221 of=/dev/da0 bs=1m conv=sync
222
223 Be careful to make sure you get the target (of=) correct.
224
225 FreeBSD/arm SD card images
226
227 These can be written to an SD card and used to boot the suppo…
228 arm system. The SD card image contains the full FreeBSD
229 installation, and can be installed onto SD cards as small as
230 512Mb.
231
232 For convenience for those without console access to the syste…
233 freebsd user with a password of freebsd is available by defau…
234 for ssh(1) access. Additionally, the root user password is se…
235 root, which it is strongly recommended to change the password…
236 both users after gaining access to the system.
237
238 To write the FreeBSD/arm image to an SD card, use the dd(1)
239 utility, replacing KERNEL with the appropriate kernel
240 configuration name for the system.
241
242 # dd if=FreeBSD-12.2-RELEASE-arm-armv6-KERNEL.img \
243 of=/dev/da0 bs=1m conv=sync
244
245 Be careful to make sure you get the target (of=) correct.
246
247 FreeBSD 12.2-RELEASE can also be purchased on CD-ROM or DVD from seve…
248 vendors. One of the vendors that will be offering FreeBSD 12.2-based
249 products is:
250
251 * FreeBSD Mall, Inc. https://www.freebsdmall.com
252
253 Pre-installed virtual machine images are also available for the amd64
254 (x86_64), i386 (x86_32), and AArch64 (arm64) architectures in QCOW2, …
255 and VMDK disk image formats, as well as raw (unformatted) images.
256
257 FreeBSD 12.2-RELEASE amd64 is also available on these cloud hosting
258 platforms:
259
260 * FreeBSD/amd64 Amazon(R) EC2(TM):
261 AMIs are available in the following regions:
262
263 af-south-1 region: ami-0183ba5b381eb0baa
264 eu-north-1 region: ami-0821c256650690884
265 ap-south-1 region: ami-009471f6e29b012ef
266 eu-west-3 region: ami-0bfaf7527f637d64b
267 eu-west-2 region: ami-023d320201b8d06c5
268 eu-south-1 region: ami-08828d09ef0598bc8
269 eu-west-1 region: ami-02b1b6bc3cface0ac
270 ap-northeast-2 region: ami-03f41a1a8d06363a5
271 me-south-1 region: ami-0e1e55e0288018f35
272 ap-northeast-1 region: ami-0a352b6e005340d93
273 sa-east-1 region: ami-0b9c77455fbf5f3f0
274 ca-central-1 region: ami-0dbf9b82233b2b970
275 ap-east-1 region: ami-0f4732ac090ec2a7d
276 ap-southeast-1 region: ami-045943797617e690c
277 ap-southeast-2 region: ami-0cbc4c8a75ded8b2d
278 eu-central-1 region: ami-0d94faf9636228402
279 us-east-1 region: ami-00be86d9bba30a7b3
280 us-east-2 region: ami-075db5a7ecd8b1456
281 us-west-1 region: ami-0e54f016b55b7f6ce
282 us-west-2 region: ami-0c273f14bc9df57d1
283
284 AMIs are also expected to be available in the Amazon(R) Marketpla…
285 once third-party validation is complete at:
286 https://aws.amazon.com/marketplace/pp/B07L6QV354/
287
288 FreeBSD/arm64 Amazon(R) EC2(TM):
289 AMIs are available in the following regions:
290
291 af-south-1 region: ami-0afe034012109b43b
292 eu-north-1 region: ami-04d3c1275757f20e9
293 ap-south-1 region: ami-07c0b1ad6978b7814
294 eu-west-3 region: ami-0bfc36baff5afe2a1
295 eu-west-2 region: ami-0276cf2663706fbb5
296 eu-south-1 region: ami-0fa854a53ca82be87
297 eu-west-1 region: ami-0aa22dfb10a633d26
298 ap-northeast-2 region: ami-0fb44fe96791af480
299 me-south-1 region: ami-000505dcbd78acc9e
300 ap-northeast-1 region: ami-066d14139dd815cda
301 sa-east-1 region: ami-03d75ceb6ca00c117
302 ca-central-1 region: ami-050385d1fdf3c70f2
303 ap-east-1 region: ami-00f184a5ec9b137ca
304 ap-southeast-1 region: ami-063ab54f54180837c
305 ap-southeast-2 region: ami-0903d6af1e37a63ff
306 eu-central-1 region: ami-02fcc489e80482d5f
307 us-east-1 region: ami-00eea2f51ee575a19
308 us-east-2 region: ami-00d07c574a09a4941
309 us-west-1 region: ami-03ad9a0a981f26542
310 us-west-2 region: ami-0fd803a9d8beb7d6d
311
312 AMIs are also available in the Amazon(R) Marketplace at:
313 https://aws.amazon.com/marketplace/pp/B081NF7BY7/
314
315 * Google(R) Compute Engine(TM):
316 Instances can be deployed using the gcloud utility:
317
318 % gcloud compute instances create INSTANCE \
319 --image freebsd-12-2-release-amd64 \
320 --image-project=freebsd-org-cloud-dev
321 % gcloud compute ssh INSTANCE
322
323 Replace INSTANCE with the name of the Google Compute Engine insta…
324
325 FreeBSD 12.2-RELEASE is also expected to be available in the
326 Google Compute Engine(TM) Marketplace once they have completed
327 third-party specific validation at:
328 https://console.cloud.google.com/launcher/browse?filter=category:…
329
330 * Hashicorp/Atlas(R) Vagrant(TM):
331 Instances can be deployed using the vagrant utility:
332
333 % vagrant init freebsd/FreeBSD-12.2-RELEASE
334 % vagrant up
335
336 Download
337
338 FreeBSD 12.2-RELEASE may be downloaded via https from the following s…
339
340 * https://download.freebsd.org/ftp/releases/ISO-IMAGES/12.2/
341
342 FreeBSD 12.2-RELEASE virtual machine images may be downloaded from:
343
344 * https://download.freebsd.org/ftp/releases/VM-IMAGES/12.2-RELEASE/
345
346 For instructions on installing FreeBSD or updating an existing machin…
347 12.2-RELEASE please see:
348
349 * https://www.FreeBSD.org/releases/12.2R/installation.html
350
351 Support
352
353 Based on the new FreeBSD support model, the FreeBSD 12 release series
354 will be supported until at least June 30, 2024. This point release,
355 FreeBSD 12.2-RELEASE, will be supported until at least three months a…
356 FreeBSD 12.3-RELEASE. Additional support information can be found at:
357
358 * https://www.FreeBSD.org/security/
359
360 Please note that 12.1 will be supported until three months from the 1…
361 release date, currently scheduled for January 31, 2021.
362
363 Acknowledgments
364
365 Many companies donated equipment, network access, or human time to
366 support the release engineering activities for FreeBSD 12.2 including:
367
368 The FreeBSD Foundation
369 Rubicon Communications, LLC (netgate.com)
370 Tarsnap
371 NetApp
372 Internet Systems Consortium
373 ByteMark Hosting
374 CyberOne Data
375 Sentex Data Communications
376 New York Internet
377 Juniper Networks
378 NetActuate
379 Department of Computer Science, National Chiao Tung University
380 NLNet Labs
381 iXsystems
382
383 The release engineering team for 12.2-RELEASE includes:
384
385 Glen Barber &lt;[email protected]&gt; Release Engineering Lead,
386 12.2-RELEASE Release Engineer
387 Konstantin Belousov &lt;[email protected]&gt; Release Engineering
388 Antoine Brodin &lt;[email protected]&gt; Package Building
389 Bryan Drewery &lt;[email protected]&gt; Release Engineering, Pac…
390 Building
391 Marc Fonvieille &lt;[email protected]&gt; Release Engineering, Doc…
392 Xin Li &lt;[email protected]&gt; Release Engineering, Sec…
393 Liaison
394 Ed Maste &lt;[email protected]&gt; Security Officer Deputy
395 Colin Percival &lt;[email protected]&gt; Release Engineering Depu…
396 Hiroki Sato &lt;[email protected]&gt; Release Engineering, Doc…
397 Gleb Smirnoff &lt;[email protected]&gt; Release Engineering
398 Gordon Tetlow &lt;[email protected]&gt; Security Officer
399
400 Trademark
401
402 FreeBSD is a registered trademark of The FreeBSD Foundation.
403
404 ISO Image Checksums
405
406 amd64 (x86_64):
407
408 SHA512 (FreeBSD-12.2-RELEASE-amd64-bootonly.iso) = de1a805cd7f2c740d0…
409 SHA512 (FreeBSD-12.2-RELEASE-amd64-bootonly.iso.xz) = 1ea2389e2c7dc4b…
410 SHA512 (FreeBSD-12.2-RELEASE-amd64-disc1.iso) = bbf67945d244c76f1ef26…
411 SHA512 (FreeBSD-12.2-RELEASE-amd64-disc1.iso.xz) = ba2990269cc73623b4…
412 SHA512 (FreeBSD-12.2-RELEASE-amd64-dvd1.iso) = 80e8c6804e0a965bc1be59…
413 SHA512 (FreeBSD-12.2-RELEASE-amd64-dvd1.iso.xz) = ab75d9cae6a4df12ecd…
414 SHA512 (FreeBSD-12.2-RELEASE-amd64-memstick.img) = 483b961fda9d48a6a5…
415 SHA512 (FreeBSD-12.2-RELEASE-amd64-memstick.img.xz) = 75219bd14c52efb…
416 SHA512 (FreeBSD-12.2-RELEASE-amd64-mini-memstick.img) = 392d5bb81387b…
417 SHA512 (FreeBSD-12.2-RELEASE-amd64-mini-memstick.img.xz) = 6f5c1e8e15…
418
419 SHA256 (FreeBSD-12.2-RELEASE-amd64-bootonly.iso) = f18412a1936d6f7df1…
420 SHA256 (FreeBSD-12.2-RELEASE-amd64-bootonly.iso.xz) = 0eafcd6f17b8f87…
421 SHA256 (FreeBSD-12.2-RELEASE-amd64-disc1.iso) = 289522e2f4e1260859505…
422 SHA256 (FreeBSD-12.2-RELEASE-amd64-disc1.iso.xz) = a4530246cafbf1dd42…
423 SHA256 (FreeBSD-12.2-RELEASE-amd64-dvd1.iso) = bc997989eafb41fcabd6ed…
424 SHA256 (FreeBSD-12.2-RELEASE-amd64-dvd1.iso.xz) = 221d6f9214de944bcdb…
425 SHA256 (FreeBSD-12.2-RELEASE-amd64-memstick.img) = c7fae987dc652aca21…
426 SHA256 (FreeBSD-12.2-RELEASE-amd64-memstick.img.xz) = 9422356d456f2b8…
427 SHA256 (FreeBSD-12.2-RELEASE-amd64-mini-memstick.img) = 83ad7fab69f8d…
428 SHA256 (FreeBSD-12.2-RELEASE-amd64-mini-memstick.img.xz) = 1e3fdefb66…
429
430
431 i386 (x86):
432
433 SHA512 (FreeBSD-12.2-RELEASE-i386-bootonly.iso) = 2eea6122389c0553d9a…
434 SHA512 (FreeBSD-12.2-RELEASE-i386-bootonly.iso.xz) = 53b08ae31359f730…
435 SHA512 (FreeBSD-12.2-RELEASE-i386-disc1.iso) = 3436f9f94fe7d35d604e4b…
436 SHA512 (FreeBSD-12.2-RELEASE-i386-disc1.iso.xz) = 18652842708c858e03c…
437 SHA512 (FreeBSD-12.2-RELEASE-i386-dvd1.iso) = 07ac2f0f81a8a0d2370cd6e…
438 SHA512 (FreeBSD-12.2-RELEASE-i386-dvd1.iso.xz) = 1c89d73db19a9bcbda72…
439 SHA512 (FreeBSD-12.2-RELEASE-i386-memstick.img) = d2aac7e9ab2f733f8f0…
440 SHA512 (FreeBSD-12.2-RELEASE-i386-memstick.img.xz) = b00ad7ecd524601c…
441 SHA512 (FreeBSD-12.2-RELEASE-i386-mini-memstick.img) = 5bdabe7a44a2b9…
442 SHA512 (FreeBSD-12.2-RELEASE-i386-mini-memstick.img.xz) = b68c51ebc80…
443
444 SHA256 (FreeBSD-12.2-RELEASE-i386-bootonly.iso) = 38ebc253646fa304888…
445 SHA256 (FreeBSD-12.2-RELEASE-i386-bootonly.iso.xz) = aca3ea590b4dec58…
446 SHA256 (FreeBSD-12.2-RELEASE-i386-disc1.iso) = b422b5f390f9bd05f5c717…
447 SHA256 (FreeBSD-12.2-RELEASE-i386-disc1.iso.xz) = a8761b1f6cef9d931c2…
448 SHA256 (FreeBSD-12.2-RELEASE-i386-dvd1.iso) = e7278d307966306fc5709a3…
449 SHA256 (FreeBSD-12.2-RELEASE-i386-dvd1.iso.xz) = cf562f8f8514ae344450…
450 SHA256 (FreeBSD-12.2-RELEASE-i386-memstick.img) = 83a32f4f2b90f82fa20…
451 SHA256 (FreeBSD-12.2-RELEASE-i386-memstick.img.xz) = 78630d283f882116…
452 SHA256 (FreeBSD-12.2-RELEASE-i386-mini-memstick.img) = e1055b30960827…
453 SHA256 (FreeBSD-12.2-RELEASE-i386-mini-memstick.img.xz) = 5087505d682…
454
455
456 powerpc:
457
458 SHA512 (FreeBSD-12.2-RELEASE-powerpc-bootonly.iso) = 48308b77fda1c3ed…
459 SHA512 (FreeBSD-12.2-RELEASE-powerpc-bootonly.iso.xz) = 0f0785a6eef88…
460 SHA512 (FreeBSD-12.2-RELEASE-powerpc-disc1.iso) = eb7feb628946caf47c2…
461 SHA512 (FreeBSD-12.2-RELEASE-powerpc-disc1.iso.xz) = 2983e759b5b3a58b…
462 SHA512 (FreeBSD-12.2-RELEASE-powerpc-dvd1.iso) = 5b76131677aa998e7ff5…
463 SHA512 (FreeBSD-12.2-RELEASE-powerpc-dvd1.iso.xz) = 3a36fb3c512006d45…
464 SHA512 (FreeBSD-12.2-RELEASE-powerpc-memstick.img) = 2d8175d46d4e9a1c…
465 SHA512 (FreeBSD-12.2-RELEASE-powerpc-memstick.img.xz) = 819b8b5a14bc2…
466 SHA512 (FreeBSD-12.2-RELEASE-powerpc-mini-memstick.img) = e214fdcabd6…
467 SHA512 (FreeBSD-12.2-RELEASE-powerpc-mini-memstick.img.xz) = d115bedb…
468
469 SHA256 (FreeBSD-12.2-RELEASE-powerpc-bootonly.iso) = a12775e330bd1085…
470 SHA256 (FreeBSD-12.2-RELEASE-powerpc-bootonly.iso.xz) = 3a60de08618b1…
471 SHA256 (FreeBSD-12.2-RELEASE-powerpc-disc1.iso) = ea75d83e7638e220849…
472 SHA256 (FreeBSD-12.2-RELEASE-powerpc-disc1.iso.xz) = 375fbdf7d1c4b936…
473 SHA256 (FreeBSD-12.2-RELEASE-powerpc-dvd1.iso) = a70df012ad49928a2458…
474 SHA256 (FreeBSD-12.2-RELEASE-powerpc-dvd1.iso.xz) = 94f2ad8bbf20e3baf…
475 SHA256 (FreeBSD-12.2-RELEASE-powerpc-memstick.img) = 2768337b74dbc306…
476 SHA256 (FreeBSD-12.2-RELEASE-powerpc-memstick.img.xz) = d3b771b2a8a20…
477 SHA256 (FreeBSD-12.2-RELEASE-powerpc-mini-memstick.img) = 922e51d46bf…
478 SHA256 (FreeBSD-12.2-RELEASE-powerpc-mini-memstick.img.xz) = ce6e6f18…
479
480
481 powerpc64:
482
483 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-bootonly.iso) = 4fe2e3…
484 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-bootonly.iso.xz) = df6…
485 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-disc1.iso) = 8de9a8da1…
486 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-disc1.iso.xz) = 7debd7…
487 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-dvd1.iso) = ab63a35ac4…
488 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-dvd1.iso.xz) = fdbb67c…
489 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-memstick.img) = 6ab2e4…
490 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-memstick.img.xz) = bd7…
491 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-mini-memstick.img) = 6…
492 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-mini-memstick.img.xz) …
493
494 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-bootonly.iso) = d12265…
495 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-bootonly.iso.xz) = a1e…
496 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-disc1.iso) = 0a85c8b34…
497 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-disc1.iso.xz) = f0a20b…
498 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-dvd1.iso) = 016db60867…
499 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-dvd1.iso.xz) = d02a44d…
500 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-memstick.img) = 0dfff2…
501 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-memstick.img.xz) = c2c…
502 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-mini-memstick.img) = b…
503 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpc64-mini-memstick.img.xz) …
504
505
506 powerpcspe:
507
508 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-bootonly.iso) = d44e2…
509 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-bootonly.iso.xz) = 24…
510 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-disc1.iso) = 16018c09…
511 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-disc1.iso.xz) = 67682…
512 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-dvd1.iso) = 613a646c9…
513 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-dvd1.iso.xz) = 577d44…
514 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-memstick.img) = 547b9…
515 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-memstick.img.xz) = dc…
516 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-mini-memstick.img) = …
517 SHA512 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-mini-memstick.img.xz)…
518
519 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-bootonly.iso) = 6468c…
520 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-bootonly.iso.xz) = d6…
521 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-disc1.iso) = e76e2a08…
522 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-disc1.iso.xz) = 739b8…
523 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-dvd1.iso) = 5bda07e5b…
524 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-dvd1.iso.xz) = d87a6c…
525 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-memstick.img) = 94a59…
526 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-memstick.img.xz) = 26…
527 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-mini-memstick.img) = …
528 SHA256 (FreeBSD-12.2-RELEASE-powerpc-powerpcspe-mini-memstick.img.xz)…
529
530
531 sparc64:
532
533 SHA512 (FreeBSD-12.2-RELEASE-sparc64-bootonly.iso) = 11b80a1e09134c13…
534 SHA512 (FreeBSD-12.2-RELEASE-sparc64-bootonly.iso.xz) = 7c293e0c55336…
535 SHA512 (FreeBSD-12.2-RELEASE-sparc64-disc1.iso) = 72a93fec891af9a731f…
536 SHA512 (FreeBSD-12.2-RELEASE-sparc64-disc1.iso.xz) = 4cdda67204c29fd0…
537 SHA512 (FreeBSD-12.2-RELEASE-sparc64-dvd1.iso) = aff90155def4dab46676…
538 SHA512 (FreeBSD-12.2-RELEASE-sparc64-dvd1.iso.xz) = 3b3aa8fafde8778c1…
539
540 SHA256 (FreeBSD-12.2-RELEASE-sparc64-bootonly.iso) = 33336bf0bfff8e74…
541 SHA256 (FreeBSD-12.2-RELEASE-sparc64-bootonly.iso.xz) = 31504bb3c2118…
542 SHA256 (FreeBSD-12.2-RELEASE-sparc64-disc1.iso) = 485d756a8ec56c73601…
543 SHA256 (FreeBSD-12.2-RELEASE-sparc64-disc1.iso.xz) = 5c637765409ac8c5…
544 SHA256 (FreeBSD-12.2-RELEASE-sparc64-dvd1.iso) = ca21d77e7241b6b30a0f…
545 SHA256 (FreeBSD-12.2-RELEASE-sparc64-dvd1.iso.xz) = a78421dbe2c203e8f…
546
547
548 aarch64 GENERIC:
549
550 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-memstick.img) = 5df3510851…
551 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-memstick.img.xz) = 003f4f1…
552 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-mini-memstick.img) = 5acdb…
553 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-mini-memstick.img.xz) = be…
554
555 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-memstick.img) = 59642a466f…
556 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-memstick.img.xz) = c9fb961…
557 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-mini-memstick.img) = 9499e…
558 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-mini-memstick.img.xz) = 6d…
559
560
561 aarch64 RPI3:
562
563 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-RPI3.img.xz) = 8ae44c1cd42…
564
565 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-RPI3.img.xz) = c11603f31f9…
566
567
568 aarch64 PINE64:
569
570 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-PINE64.img.xz) = edccfbec8…
571
572 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-PINE64.img.xz) = 8d96f8d3c…
573
574
575 aarch64 PINE64-LTS:
576
577 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64-PINE64-LTS.img.xz) = 987c1…
578
579 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64-PINE64-LTS.img.xz) = 9eedb…
580
581
582 armv7 BANANAPI:
583
584 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-BANANAPI.img.xz) = 81393337057…
585
586 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-BANANAPI.img.xz) = 2120668375c…
587
588
589 armv7 CUBIEBOARD:
590
591 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-CUBIEBOARD.img.xz) = a275ea08e…
592
593 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-CUBIEBOARD.img.xz) = 10d996025…
594
595
596 armv7 CUBIEBOARD2:
597
598 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-CUBIEBOARD2.img.xz) = 0e08c60f…
599
600 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-CUBIEBOARD2.img.xz) = edf76dd3…
601
602
603 armv7 CUBOX-HUMMINGBOARD:
604
605 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-CUBOX-HUMMINGBOARD.img.xz) = 3…
606
607 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-CUBOX-HUMMINGBOARD.img.xz) = 3…
608
609
610 armv7 GENERICSD:
611
612 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-GENERICSD.img.xz) = 11ad4b999b…
613
614 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-GENERICSD.img.xz) = 79b5722779…
615
616
617 armv6 RPI-B:
618
619 SHA512 (FreeBSD-12.2-RELEASE-arm-armv6-RPI-B.img.xz) = 5fc18ff8a7e27e…
620
621 SHA256 (FreeBSD-12.2-RELEASE-arm-armv6-RPI-B.img.xz) = 207097afd24c41…
622
623
624 armv7 RPI2:
625
626 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-RPI2.img.xz) = 8eb949dbc37aca1…
627
628 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-RPI2.img.xz) = 95cdd6b7d9da49b…
629
630
631 armv7 WANDBOARD:
632
633 SHA512 (FreeBSD-12.2-RELEASE-arm-armv7-WANDBOARD.img.xz) = d47df12567…
634
635 SHA256 (FreeBSD-12.2-RELEASE-arm-armv7-WANDBOARD.img.xz) = 692b9e17ba…
636
637
638 Virtual Machine Disk Image Checksums
639
640 amd64 (x86_64):
641
642 SHA512 (FreeBSD-12.2-RELEASE-amd64.qcow2.xz) = 33c2352abbc92665149182…
643 SHA512 (FreeBSD-12.2-RELEASE-amd64.raw.xz) = ead6a3ae3d9be2a7a459049d…
644 SHA512 (FreeBSD-12.2-RELEASE-amd64.vhd.xz) = b810f364c90eca105fcebeee…
645 SHA512 (FreeBSD-12.2-RELEASE-amd64.vmdk.xz) = 54987c803fd759290128947…
646
647 SHA256 (FreeBSD-12.2-RELEASE-amd64.qcow2.xz) = a0c5769d9ff776aa8f0166…
648 SHA256 (FreeBSD-12.2-RELEASE-amd64.raw.xz) = 0f8593382b6833658c6f6be5…
649 SHA256 (FreeBSD-12.2-RELEASE-amd64.vhd.xz) = 7c3346d448b1f7890f939f8c…
650 SHA256 (FreeBSD-12.2-RELEASE-amd64.vmdk.xz) = 39439ff0dd31e48b62c20be…
651
652
653 i386 (x86):
654
655 SHA512 (FreeBSD-12.2-RELEASE-i386.qcow2.xz) = 0ecee5d21df2998dc733b53…
656 SHA512 (FreeBSD-12.2-RELEASE-i386.raw.xz) = fc2034b279571648b05c4f6ec…
657 SHA512 (FreeBSD-12.2-RELEASE-i386.vhd.xz) = a16da143aec710d9faa2dd39b…
658 SHA512 (FreeBSD-12.2-RELEASE-i386.vmdk.xz) = 50660f5615208a5a2a6e6a40…
659
660 SHA256 (FreeBSD-12.2-RELEASE-i386.qcow2.xz) = 9b4fdcda43f93accafc5a06…
661 SHA256 (FreeBSD-12.2-RELEASE-i386.raw.xz) = 963ea53cc0deeafcfd6a1851d…
662 SHA256 (FreeBSD-12.2-RELEASE-i386.vhd.xz) = 2cf2c392822c8d654a2c0b285…
663 SHA256 (FreeBSD-12.2-RELEASE-i386.vmdk.xz) = ece59134fd93972375e93b50…
664
665
666 aarch64 (arm64):
667
668 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64.qcow2.xz) = ea14f57c3501d4…
669 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64.raw.xz) = 65091e7355893e5b…
670 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64.vhd.xz) = f9df34a94c979eb3…
671 SHA512 (FreeBSD-12.2-RELEASE-arm64-aarch64.vmdk.xz) = 4d0c7cf14eef2b3…
672
673 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64.qcow2.xz) = e9a4698d05adb7…
674 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64.raw.xz) = 879201066c8ab142…
675 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64.vhd.xz) = e8b333f92708bde8…
676 SHA256 (FreeBSD-12.2-RELEASE-arm64-aarch64.vmdk.xz) = b14fa9c8d98f9ec…
677
678
679 Love FreeBSD? Support this and future releases with a donation to The
680 FreeBSD Foundation! https://www.FreeBSDFoundation.org/donate/
681
682 -----BEGIN PGP SIGNATURE-----
683
684 iQIzBAEBCAAdFiEEjRJAPC5sqwhs9k2jAxRYpUeP4pMFAl+Yl1UACgkQAxRYpUeP
685 4pP/Dg//VCG7zAGfFGYjVSLb3OtnAa9KAyXV6ZT3em/bs+bcB9+OrcOAqJrYVRbc
686 BAYVqqbGIRcChI9Tr9Y1G0wLez+fOSvAk/wBjXm3iYGSFSeMIejFKXLEKl6PY3ny
687 /t/jVPU9YPg4P/Y7Pcbt7ts/S0xccPmwKyqWWPJ6IJTA6LY3AwndmtKsXe5eAbi9
688 2X2MV/FVQAhNGWOwVJJEkmTgvw11e49SCpS24EKLoKkdqDI4+u2WLjO+PKOEaTXE
689 bQp6TtxI4XEdgRkUroVAEGpsN9AsnQWd9NDxQrQP4hwndKQAVLYUUUz17JRmnSUn
690 WIZCaZe+PkL391h3nKT0GfUl41iWXIDDy/eMWSsOE8evZqs64TPtStvy/9ReQSg3
691 A5UK4rVty91Fwelbn/nD5D207g/p1KlVVC2JcuXXxRKaMbQfb1W62lj4WdMnBqS6
692 dgFvRuGO374C7RojGRFVNKj4xjV7MAI2pEE8EwVoZXFd719ytmeOFmICmYXXz4BH
693 j09CYmljn7S8AG/xmAT2H4h0xFMVLr4YYOq2eazSL7fXVDy2c3s3I+lE3pSNgbsZ
694 1oFwiHtkdAkYtdRGmioKF2kPT6SNKjQvwwC8A97eicvDatGiSE+eg+LBAcNyNf77
695 F4mEbRuSs6zvjWIvcvn2fq8r/ahiPDeq7GL5lvJF8f1rdefrfDQ=
696 =Cpal
697 -----END PGP SIGNATURE-----
698 _______________________________________________
699 [email protected] mailing list
700 https://lists.freebsd.org/mailman/listinfo/freebsd-announce
701 To unsubscribe, send any mail to "[email protected]…
702 <tags>freebsd</tags>
703 <author>
704 <name>[email protected]</name>
705 </author>
706 </entry>
707 <entry>
708 <id>tag:bsdsec.net,2005:Article/1220</id>
709 <published>2020-10-27T21:13:23Z</published>
710 <updated>2020-10-27T21:13:23Z</updated>
711 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
712 <title>OpenBSD Errata: October 29th, 2020 (bgpd)</title>
713 <content type="html">Errata patches for OpenBGPD have been released …
714
715 In bgpd, the roa-set parser could leak memory.
716
717 Binary updates for the amd64, i386, and arm64 platforms are available via
718 the syspatch utility. Source code patches can be found on the respective
719 errata page:
720
721 https://www.openbsd.org/errata67.html
722 https://www.openbsd.org/errata68.html
723 </content>
724 <tags>openbsd</tags>
725 <author>
726 <name>[email protected]</name>
727 </author>
728 </entry>
729 <entry>
730 <id>tag:bsdsec.net,2005:Article/1219</id>
731 <published>2020-10-21T22:06:17Z</published>
732 <updated>2020-10-21T22:06:17Z</updated>
733 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
734 <title>[FreeBSD-Announce] FreeBSD Quarterly Status Report - Third Qu…
735 <content type="html">
736 --6vqnfjaiktnxv5lf
737 Content-Type: text/plain; charset=iso-8859-1
738 Content-Disposition: inline
739 Content-Transfer-Encoding: quoted-printable
740
741 FreeBSD Project Quarterly Status Report - Third Quarter 2020
742 Introduction
743
744 This report covers FreeBSD related projects for the period between Ju…
745 and September, and is the third of four planned reports for 2020.
746
747 This quarter brings a good mix of additions and changes to the FreeBSD
748 Project and community, from a diverse number of teams and people
749 covering everything from architectures, continuous integration,
750 wireless networking and drivers, over drm, desktop and third-party
751 project work, as well as several team reports, along with many other
752 interesting subjects too numerous to mention.
753
754 As the world is still affected by the epidemic, we hope that this
755 report can also serve as a good reminder that there is good work that
756 can be done by people working together, even if we're apart.
757
758 We hope you'll be as interested in reading it, as we've been in making
759 it. Daniel Ebdrup Jensen, on behalf of the quarterly team.
760 __________________________________________________________________
761
762 FreeBSD Team Reports
763
764 * FreeBSD Foundation
765 * FreeBSD Release Engineering Team
766 * Cluster Administration Team
767 * Continuous Integration
768 * Ports Collection
769 * FreeBSD Office team - 3rd quarter 2020 report
770 * FreeBSD Graphics Team status report
771
772 Projects
773
774 * FreeBSD on Microsoft HyperV and Azure
775 * Building FreeBSD on non-FreeBSD hosts
776 * Git Migration Working Group
777 * Linux compatibility layer update
778 * LLDB Debugger Improvements
779 * Lua usage in FreeBSD
780 * NFS over TLS implementation
781 * syzkaller on FreeBSD
782
783 Kernel
784
785 * DRM Drivers Update
786 * DTS Update
787 * DesignWare Ethernet adapter driver improvements
788 * Google Summer of Code'20 Project - eBPF XDP Hooks
789 * ENA FreeBSD Driver Update
790 * IPSec Extended Sequence Number (ESN) support
791 * NXP ARM64 SoC support
792 * Addition of PowerPC64LE Architecture
793 * ure - USB 3.0 Gigabit Ethernet Driver update
794 * Stateless hardware offloads for VXLANs
795 * Wireless updates
796 * ZSTD Compression in ZFS
797
798 Architectures
799
800 * CheriBSD 2020 Q3
801 * FreeBSD/RISC-V Project
802
803 Ports
804
805 * Update to grub-bhyve
806 * KDE on FreeBSD
807
808 Documentation
809
810 * DOCNG on FreeBSD
811
812 Third-Party Projects
813
814 * Potluck - Flavour &amp; Image Repository for pot
815 __________________________________________________________________
816
817 FreeBSD Team Reports
818
819 Entries from the various official and semi-official teams, as found in
820 the Administration Page.
821
822 FreeBSD Foundation
823
824 Contact: Deb Goodkin &lt;[email protected]&gt;
825
826 The FreeBSD Foundation is a 501(c)(3) non-profit organization dedicat…
827 to supporting and promoting the FreeBSD Project and community
828 worldwide. Funding comes from individual and corporate donations and …
829 used to fund and manage software development projects, conferences and
830 developer summits, and provide travel grants to FreeBSD contributors.
831 The Foundation purchases and supports hardware to improve and maintain
832 FreeBSD infrastructure and provides resources to improve security,
833 quality assurance, and release engineering efforts; publishes marketi…
834 material to promote, educate, and advocate for the FreeBSD Project;
835 facilitates collaboration between commercial vendors and FreeBSD
836 developers; and finally, represents the FreeBSD Project in executing
837 contracts, license agreements, and other legal arrangements that
838 require a recognized legal entity.
839
840 Here are some highlights of what we did to help FreeBSD last quarter:
841
842 COVID-19 Impact to the Foundation
843
844 Like other organizations, we put policies in place for all of our sta…
845 members to work from home. We also put a temporary ban on travel for
846 staff members. We are continuing our work supporting the community and
847 Project, but some of our work and responses may be delayed because of
848 changes in some of our priorities and the impact of limited childcare
849 for a few of our staff members.
850
851 Partnerships and Commercial User Support
852
853 We help facilitate collaboration between commercial users and FreeBSD
854 developers. We also meet with companies to discuss their needs and
855 bring that information back to the Project. Not surprisingly, the stay
856 at home orders, combined with our company ban on travel during Q3 made
857 in-person meetings non-existent. However, the team was able to contin…
858 meeting with our partners and commercial users virtually. These
859 meetings help us understand some of the applications where FreeBSD is
860 used.
861
862 We are currently scheduling Zoom company meetings for Q4, please reach
863 out if you would like to schedule a meeting with us.
864
865 Fundraising Efforts
866
867 Last quarter we raised $192,874.43! Thank you to the individuals and
868 organizations that stepped in, to help fund our efforts. We'd like to
869 thank Arm for their large contribution last quarter, which helped bri…
870 our 2020 fundraising effort to $521k. We hope other organizations will
871 follow their lead and give back to help us continue supporting FreeBS…
872
873 These are trying times, and we deeply appreciate every donation that
874 has come in from $5 to $150,000. We're still here giving 110% to
875 supporting FreeBSD!
876
877 We are 100% funded by donations, and those funds go towards software
878 development work to improve FreeBSD, FreeBSD advocacy around the worl…
879 keeping FreeBSD secure, continuous integration improvements, sponsori…
880 BSD-related and computing conferences (even the virtual events!), leg…
881 support for the Project, and many other areas.
882
883 Please consider making a donation to help us continue and increase our
884 support for FreeBSD.
885
886 We also have the Partnership Program, to provide more benefits for our
887 larger commercial donors. Find out more information about the
888 partnership program and share with your companies!
889
890 OS Improvements
891
892 A number of FreeBSD Foundation grant recipients started, continued
893 working on, or completed projects during the third quarter. These
894 include:
895 * Ongoing WiFi and Linux KPI layer improvements.
896 * Linuxulator application compatibility.
897 * DRM / Graphics driver updates.
898 * Zstd compression for OpenZFS.
899 * Online RAID-Z expansion.
900 * Modernized LLDB target support for FreeBSD.
901
902 You can find more details about most of these projects in other
903 quarterly
904
905 reports.
906
907 Staff members also worked on a number of larger projects, including:
908 * Run-Time Dynamic Linker (rtld) and kernel ELF loader improvements.
909 * Rewritten UNIX domain socket locking.
910 * Build infrastructure.
911 * Open system call path handling support for O_BENEATH,
912 O_RESOLVE_BENEATH.
913 * arm64 support.
914 * Migration to a Git repository.
915
916 Many of these projects also have detailed entries in other quarterly
917 report
918
919 entries.
920
921 Staff members also put in significant effort in many ways other than
922 larger, individual projects. These include assisting with code review…
923 bug report triage, security report triage and advisory handling,
924 addressing syzkaller reports, and ongoing maintenance and bug fixes in
925 functional areas such as the tool chain, developer tools, virtual
926 memory kernel subsystem, low-level x86 infrastructure, sockets and
927 protocols, and others.
928
929 University of Waterloo Co-op
930
931 With the transition to working from home, the Foundation decided to
932 again take on three University of Waterloo Co-op students for the Fall
933 2020 term (September to December). Tiger returns for a second term,
934 joined by new students Yang and Zac. Projects for the term include mo…
935 work on ELF Tool Chain, application of Capsicum to additional
936 utilities, testing and integration of FreePBX and Asterisk VOIP
937 software, pkgbase, and exploring containerization tooling.
938
939 Continuous Integration and Quality Assurance
940
941 The Foundation provides a full-time staff member and funds projects on
942 improving continuous integration, automated testing, and overall
943 quality assurance efforts for the FreeBSD project.
944
945 During the third quarter of 2020, Foundation staff continued improving
946 and monitoring the Project's CI infrastructure, and working with
947 experts to fix the failing builds and the regressions found by tests.
948 The setting up of dedicated VM host for running tests is completed. N…
949 feature developments and the CI staging environment is in progress. We
950 are also working with other teams in the Project for their testing
951 needs. For example, tests of non-x86 architectures now run
952 periodically, and improve the CI of the embedded systems. We are also
953 working with many external projects and companies to improve the CI
954 between their products and FreeBSD.
955
956 See the FreeBSD CI section of this report for completed work items and
957 detailed information.
958
959 Supporting FreeBSD Infrastructure
960
961 The Foundation provides hardware and support to improve the FreeBSD
962 infrastructure. Last quarter, we continued supporting FreeBSD hardware
963 located around the world. We coordinated efforts between the new NYI
964 Chicago facility and clusteradm to start working on getting the
965 facility prepared for some of the new FreeBSD hardware we are planning
966 on purchasing. NYI generously provides this for free to the Project. …
967 also worked on connecting with the new owners of the Bridgewater site,
968 where most of the FreeBSD infrastructure is located.
969
970 Some of the purchases we made for the Project last quarter to support
971 infrastructure includes:
972 * Spamhaus spam filtering software to limit the amount of spam on t…
973 mailing lists.
974 * 5 application servers to run tasks like bugzilla, wiki, website,
975 cgi, Phabricator, host git, etc.
976 * 1 server to replace the old pkg server and provide a lot more IOPS
977 to avoid the slowdowns seen during peak times of the day where the
978 disks just cannot keep up with the request volume.
979 * 1 server for exp-runs to make them faster.
980 * 1 server to build packages more frequently.
981
982 FreeBSD Advocacy and Education
983
984 A large part of our efforts are dedicated to advocating for the
985 Project. This includes promoting work being done by others with
986 FreeBSD; producing advocacy literature to teach people about FreeBSD
987 and help make the path to starting using FreeBSD or contributing to t…
988 Project easier; and attending and getting other FreeBSD contributors …
989 volunteer to run FreeBSD events, staff FreeBSD tables, and give FreeB…
990 presentations.
991
992 The FreeBSD Foundation sponsors many conferences, events, and summits
993 around the globe. These events can be BSD-related, open source, or
994 technology events geared towards underrepresented groups. We support
995 the FreeBSD-focused events to help provide a venue for sharing
996 knowledge, to work together on projects, and to facilitate
997 collaboration between developers and commercial users. This all helps
998 provide a healthy ecosystem. We support the non-FreeBSD events to
999 promote and raise awareness of FreeBSD, to increase the use of FreeBSD
1000 in different applications, and to recruit more contributors to the
1001 Project. As is the case for most of us in this industry, COVID-19 has
1002 put our in-person events on hold. In addition to attending virtual
1003 events, we are continually working on new training initiatives and
1004 updating our selection of how-to guides to facilitate getting more
1005 folks to try out FreeBSD.
1006
1007 Check out some of the advocacy and education work we did last quarter:
1008 * Launched our FreeBSD Fridays series of 101 classes. Topics includ…
1009 an Introduction to FreeBSD, FreeBSD Installfest, Introduction to
1010 Security, Introduction to ZFS and more. Videos of the past sessio…
1011 and a schedule of upcoming events can be found here.
1012 * Attended and presented at OSI's State of the Source conference. T…
1013 event was held virtually, September 9-11, 2020.
1014 * Launched the redesign of the FreeBSD Foundation Website.
1015 * Announced the 20th Anniversary of the FreeBSD Foundation.
1016 * Participated as an Admin for Google Summer of Code 2020
1017 * Continued to promote the FreeBSD Office Hours series including
1018 holding our own Foundation led office hours. Videos from the one
1019 hour sessions can be found on the Project's YouTube Channel. You
1020 can watch ours here.
1021 * Interviewed members of the outgoing FreeBSD Core Team to get their
1022 thoughts on their term.
1023 * Began working with the FreeBSD Vendor Summit planning committee on
1024 the November 2020 Vendor Summit.
1025 * Promoted the Foundation's 20th Anniversary and our work to support
1026 the FreeBSD Project in the It's FOSS Article. FreeBSD Foundation
1027 Celebrates 20 Years of Promoting and Supporting FreeBSD Project.
1028 * Authored a Beginners Guide to FreeBSD for Fosslife.
1029 * Committed to sponsoring All Things Open as a media Sponsor.
1030 * Committed to sponsoring the OpenZFS Developers Summit at the Bron…
1031 level.
1032 * Became an International RISC-V Member.
1033 * Committed to giving a FreeBSD talk at the nerdear.la conference on
1034 October 20th.
1035
1036 Keep up to date with our latest work in our
1037
1038 monthly newsletters.
1039
1040 Netflix provided an update on how and why they use FreeBSD in our
1041 latest Contributor Case Study.
1042
1043 We help educate the world about FreeBSD by publishing the
1044 professionally produced FreeBSD Journal. As we mentioned previously,
1045 the FreeBSD Journal is now a free publication. Find out more and acce…
1046 the latest issues at https://www.FreeBSDfoundation.org/journal/.
1047
1048 You can find out more about events we attended and upcoming events at
1049 https://www.FreeBSDfoundation.org/news-and-events/.
1050
1051 Legal/FreeBSD IP
1052
1053 The Foundation owns the FreeBSD trademarks, and it is our
1054 responsibility to protect them. We also provide legal support for the
1055 core team to investigate questions that arise. We updated our Tradema…
1056 Usage Terms and Conditions on July 1, 2020.
1057
1058 Go to the FreeBSD Foundation's web site to find out how we support
1059 FreeBSD and how we can help you!
1060
1061 ### Other
1062
1063 We welcomed Andrew Wafaa and Kevin Bowling to our board of directors,
1064 to help govern the Foundation and guide us with our strategic
1065 direction. We have more information about our new board members on our
1066 website.
1067 __________________________________________________________________
1068
1069 FreeBSD Release Engineering Team
1070
1071 Links
1072 FreeBSD 12.2-RELEASE schedule=20
1073 URL: https://www.freebsd.org/releases/12.2R/schedule.html
1074 FreeBSD 12.2 test builds=20
1075 URL: https://www.freebsd.org/where.html#helptest
1076 FreeBSD development snapshots=20
1077 URL: https://download.freebsd.org/ftp/snapshots/ISO-IMAGES/
1078
1079 Contact: FreeBSD Release Engineering Team &lt;[email protected]&gt;
1080
1081 The FreeBSD Release Engineering Team is responsible for setting and
1082 publishing release schedules for official project releases of FreeBSD,
1083 announcing code freezes and maintaining the respective branches, among
1084 other things.
1085
1086 During the third quarter of 2020, the Release Engineering Team started
1087 work on the 12.2-RELEASE cycle, the third release from the stable/12
1088 branch.
1089
1090 As of this writing, two BETA builds have been released, with the
1091 expectation there will be a third BETA build currently remaining on t…
1092 schedule.
1093
1094 The 12.2-RELEASE cycle will continue throughout October, with two RC
1095 builds currently planned, and RC3 scheduled on an as-needed basis. The
1096 12.2-RELEASE is so far scheduled for final release on October 27.
1097
1098 In addition to the 12.2-RELEASE, Glen Barber of the Release Engineeri…
1099 Team finished work to the release build tools and scripts to prepare
1100 for the conversion from Subversion to Git for the 13.0-RELEASE cycle.
1101 There are no plans to merge these changes to stable branches at this
1102 time; as discussed within the Git working group, we feel such a change
1103 on a stable branch would be too intrusive to our user base as well as
1104 downstream FreeBSD consumers. Development snapshot builds for
1105 13.0-CURRENT have recently been built from the Git tree within the
1106 project, and further snapshot builds for 12.x and 11.x will continue …
1107 be built from Subversion.
1108
1109 Additionally throughout the quarter, several development snapshots
1110 builds were released for the head, stable/12, and stable/11 branches.
1111
1112 Finally, the Release Engineering Team would like to thank Marius Stro…
1113 for his time serving on the team; he had recently stepped down from t…
1114 Deputy RE Lead role due to constraints on his time. The Team welcomes
1115 Colin Percival, who has accepted fulfilling this role.
1116
1117 Much of this work was sponsored by Rubicon Communications, LLC
1118 (netgate.com) and the FreeBSD Foundation.
1119 __________________________________________________________________
1120
1121 Cluster Administration Team
1122
1123 Links
1124 Cluster Administration Team members=20
1125 URL: https://www.freebsd.org/administration.html#t-clusteradm
1126
1127 Contact: Cluster Administration Team &lt;[email protected]&gt;
1128
1129 The FreeBSD Cluster Administration Team consists of the people
1130 responsible for administering the machines that the Project relies on
1131 for its distributed work and communications to be synchronised. In th…
1132 quarter, the team has worked on the following:
1133 * Work with the FreeBSD Foundation on hardware update for web
1134 services, mirror and package building servers.
1135 * Disable directory indexing on the package mirrors to resolve
1136 performance issues of the machine.
1137 + This was later relaxed to allow indexing of the parent
1138 directories but still disallow the large package directories.
1139 * Ongoing systems administration work:
1140 + Accounts management for committers.
1141 + Backups of critical infrastructure.
1142 + Keeping up with security updates in 3rd party software.
1143
1144 Work in progress:
1145 * Setup Malaysia (KUL) mirror.
1146 * Setup Brazil (BRA) mirror.
1147 * Review the service jails and service administrators operation.
1148 * Infrastructure of building aarch64 and powerpc64 packages.
1149 + NVMe issues on PowerPC64 POWER9 blocking dual socket machine
1150 from being used as pkg builder.
1151 + Drive upgrade test for pkg builders (SSDs) courtesy of the
1152 FreeBSD Foundation.
1153 + Boot issues with Aarch64 reference machines.
1154 * New NYI.net sponsored colocation space in Chicago-land area.
1155 * Work with git working group for the git repository.
1156 * Searching for more providers that can fit the requirements for a
1157 generic mirrored layout or a tiny mirror.
1158 __________________________________________________________________
1159
1160 Continuous Integration
1161
1162 Links
1163 FreeBSD Jenkins Instance=20
1164 URL: https://ci.FreeBSD.org
1165 FreeBSD Hardware Testing Lab=20
1166 URL: https://ci.FreeBSD.org/hwlab
1167 FreeBSD CI artifact archive=20
1168 URL: https://artifact.ci.FreeBSD.org
1169 FreeBSD CI weekly report=20
1170 URL: https://hackmd.io/@FreeBSD-CI
1171 FreeBSD Jenkins wiki=20
1172 URL: https://wiki.freebsd.org/Jenkins
1173 Hosted CI wiki=20
1174 URL: https://wiki.freebsd.org/HostedCI
1175 3rd Party Software CI=20
1176 URL: https://wiki.freebsd.org/3rdPartySoftwareCI
1177 Tickets related to freebsd-testing@=20
1178 URL: https://preview.tinyurl.com/y9maauwg
1179 FreeBSD CI Repository=20
1180 URL: https://github.com/freebsd/freebsd-ci
1181
1182 Contact: Jenkins Admin &lt;[email protected]&gt;
1183 Contact: Li-Wen Hsu &lt;[email protected]&gt;
1184
1185 Contact: freebsd-testing Mailing List
1186 Contact: IRC #freebsd-ci channel on EFNet
1187
1188 The FreeBSD CI team maintains the continuous integration system of the
1189 FreeBSD project. The CI system firstly checks the committed changes c…
1190 be successfully built, then performs various tests and analysis over
1191 the newly built results. The artifacts from those builds are archived
1192 in the artifact server for further testing and debugging needs. The CI
1193 team members examine the failing builds and unstable tests and work
1194 with the experts in that area to fix the codes or adjust test
1195 infrastructure. The details of these efforts are available in the
1196 weekly CI reports.
1197
1198 During the third quarter of 2020, we continued working with the
1199 contributors and developers in the project to fulfill their testing
1200 needs and also keep collaborating with external projects and companies
1201 to improve their products and FreeBSD.
1202
1203 Important changes:
1204 * All !x86 -test builds now trigger a new build on 22:00 UTC daily;
1205 this was not running very often because running all the tests in
1206 qemu takes lots of time. The work on improving the test execution
1207 speed and parallelism is in progress. The following is a list of
1208 the jobs affected:
1209 + Test build for FreeBSD HEAD on ARMv7.
1210 + Test build for FreeBSD HEAD on AArch64.
1211 + Test build for FreeBSD HEAD on MIPS64.
1212 + Test build for FreeBSD HEAD on PowerPC64.
1213 + Test build for FreeBSD HEAD on RISC-V64.
1214 * The build and test results will be sent to the dev-ci mailing list
1215 soon. Feedback and help with analysis is very appreciated!
1216 + A builder dedicated to run jobs using provisioned VMs is
1217 setup, this improves the stableness and reduces the execution
1218 time.
1219 + The result of FreeBSD-head-amd64-test_zfs is changed after
1220 OpenZFS importing; we encourage everyone to check and fix the
1221 failing and skipped test cases.
1222
1223 New jobs added:
1224 * CI build for FreeBSD HEAD on PowerPC64LE.
1225
1226 Work in progress:
1227 * Collecting and sorting CI tasks and ideas here.
1228 * Testing and merging pull requests in the the FreeBSD-ci repo.
1229 * Designing and implementing pre-commit CI building and testing,
1230 * Reduce the procedures of CI/test environment setting up for
1231 contributors and developers.
1232 * Setting up the CI stage environment and putting the experimental
1233 jobs on it.
1234 * Setting up public network access for the VM guest running tests.
1235 * Implementing automatic tests on bare metal hardware.
1236 * Adding drm ports building tests against -CURRENT.
1237 * Planning to run ztest and network stack tests.
1238 * Adding more external toolchain related jobs.
1239 * Improving the hardware lab to be more mature and adding more
1240 hardware.
1241 * Helping more 3rd software get CI on FreeBSD through a hosted CI
1242 solution.
1243 * Working with hosted CI providers to have better FreeBSD support.
1244
1245 Please see freebsd-testing@ related tickets for more WIP information,
1246 and don't hesitate to join the effort!
1247
1248 Sponsor: The FreeBSD Foundation
1249 __________________________________________________________________
1250
1251 Ports Collection
1252
1253 Links
1254 About FreeBSD Ports=20
1255 URL: https://www.FreeBSD.org/ports/
1256 Contributing to Ports=20
1257 URL: https://www.freebsd.org/doc/en_US.ISO8859-1/articles/contributi…
1258 ports
1259 -contributing.html
1260 FreeBSD Ports Monitoring=20
1261 URL: http://portsmon.freebsd.org/index.html
1262 Ports Management Team=20
1263 URL: https://www.freebsd.org/portmgr/index.html
1264
1265 Contact: Ren=C3=A9 Ladan &lt;[email protected]&gt;
1266 Contact: FreeBSD Ports Management Team &lt;[email protected]&gt;
1267
1268 The Ports Management Team is responsible for overseeing the overall
1269 direction of the Ports Tree, building packages, and personnel matters.
1270 Below is what happened in the last quarter.
1271
1272 We passed the landmark of 40,000 ports in the Ports Collection and are
1273 now around 40,400 ports. The last quarter saw 9335 commits to the HEAD
1274 branch and 481 commits to the 2020Q3 branch by respectively 167 and 63
1275 committers. There are currently 2525 open problem reports of which 595
1276 are unassigned. Compared to last quarter, this means a slight decrease
1277 in activity and also a slight increase in open PRs.
1278
1279 During the last quarter we welcomed Rainer Hurling (rhurlin@) and said
1280 goodbye to Kevin Lo (kevlo@) and Grzegorz Blach (gblach@).
1281
1282 The last three months saw new default versions for Perl (5.32),
1283 PostgreSQL (12) and PHP (7.4). Various packages also got updated:
1284 Firefox to 81.0.1, Chromium to 84.0.4147.135, Gnome to 3.36, Xorg to
1285 1.20.9, Qt5 to 5.15.0, Emacs to 27.1, KDE Frameworks to 5.74.0 and pkg
1286 itself to 1.15.8.
1287
1288 Never tired, antoine@ ran 30 exp-runs to test port version updates, on
1289 such diverse matters as:
1290 * Updating byacc in base to 20200330.
1291 * Check balancing of sed "y" command.
1292 * Use of brackets.
1293 * Removing the now redundant "port" argument from USES=3Dreadline.
1294 __________________________________________________________________
1295
1296 FreeBSD Office team - 3rd quarter 2020 report
1297
1298 Links
1299 The FreeBSD Office project=20
1300 URL: https://wiki.freebsd.org/Office
1301
1302 Contact: FreeBSD Office team ML &lt;[email protected]&gt;
1303 Contact: Dima Panov &lt;[email protected]&gt;
1304 Contact: Li-Wen Hsu &lt;[email protected]&gt;
1305
1306 The FreeBSD Office team works on a number of office-related software
1307 suites and tools such as OpenOffice and LibreOffice.
1308
1309 Work during this quarter focused on providing the latest stable relea…
1310 of LibreOffice suite and companion apps to all FreeBSD users.
1311 * Alongside with updating old stable branch to latest 6.4.x release…
1312 current ports-tree now have a full-featured cutting-edge 7.0.1
1313 bundle.
1314 * Conservative users can keep 6.4.x stable version by switching to
1315 use all-in-one editors/libreoffice6 port and even with i18n
1316 language pack (off by default). It will be kept updated at least
1317 till 7.1.0 version is released.
1318
1319 We are looking for people to help the project.
1320
1321 All unstable work with LibreOffice snapshots is staged in our WIP
1322 repository.
1323 The open bugs list contains all filed issues which need some attentio…
1324 Patches, comments and objections are always welcome in the mailing li…
1325 and bugzilla.
1326 __________________________________________________________________
1327
1328 FreeBSD Graphics Team status report
1329
1330 Links
1331 Project GitHub page=20
1332 URL: https://github.com/FreeBSDDesktop
1333
1334 Contact: FreeBSD Graphics Team &lt;[email protected]&gt;
1335 Contact: Niclas Zeising &lt;[email protected]&gt;
1336
1337 The FreeBSD X11/Graphics team maintains the lower levels of the FreeB…
1338 graphics stack. This includes graphics drivers, graphics libraries su…
1339 as the MESA OpenGL implementation, the X.org xserver with related
1340 libraries and applications, and Wayland with related libraries and
1341 applications.
1342
1343 There have been several updates to the FreeBSD graphics stack and
1344 related libraries since the last report.
1345
1346 Most notably, MESA related ports were changed to use the meson build
1347 system, instead of the autotools based one. This was needed since mesa
1348 upstream has deprecated and removed the autotools build system, and
1349 this paved the way for further mesa updates. While there was a need f…
1350 a few minor corrections after the initial update, this update has been
1351 successful and made it possible to further update and improve the
1352 FreeBSD mesa port.
1353
1354 There have also been several security fixes for xorg-server and libX1…
1355 so these ports have been updated to fix these issues.
1356
1357 During the period, FreeBSD 12 was changed to improve the compatibility
1358 with input devices using udev/evdev and libinput. This change removes
1359 the need for local configuration and makes most mice, touchpads and
1360 keyboards work out of the box. This change will be in the upcoming
1361 FreeBSD 12.2 release.
1362
1363 There have also been several updates to various libraries, both in the
1364 graphics and input stacks, and several userland drivers have been
1365 updated. Libraries such as libdrm and libevdev have been updated to
1366 include new FreeBSD support, developed by team members and added
1367 upstream.
1368
1369 There has also been ongoing work to keep the various drm-kmod ports a…
1370 packages up to date, mostly in response to changes in various FreeBSD
1371 versions.
1372
1373 We have also continued our regularly scheduled bi-weekly meetings.
1374
1375 People who are interested in helping out can find us on the
1376 [email protected] mailing list, or on our gitter chat. We are also
1377 available in #freebsd-xorg on EFNet.
1378
1379 We also have a team area on GitHub where our work repositories can be
1380 found.
1381 __________________________________________________________________
1382
1383 Projects
1384
1385 Projects that span multiple categories, from the kernel and userspace
1386 to the Ports Collection or external projects.
1387
1388 FreeBSD on Microsoft HyperV and Azure
1389
1390 Links
1391 Microsoft Azure article on FreeBSD wiki =20
1392 URL: https://wiki.freebsd.org/MicrosoftAzure
1393 Microsoft HyperV article on FreeBSD wiki=20
1394 URL: https://wiki.freebsd.org/HyperV
1395
1396 Contact: FreeBSD Integration Services Team &lt;[email protected]&gt;
1397 Contact: Wei Hu &lt;[email protected]&gt;
1398 Contact: Li-Wen Hsu &lt;[email protected]&gt;
1399
1400 Li-Wen is working on the FreeBSD release code related to Azure for the
1401 -CURRENT, 12-STABLE and 11-STABLE branches. The work-in-progress is
1402 available here. The 11.4-RELEASE image on Azure Marketplace is
1403 published. We are testing the releng/12.2 branch and 12.2-RELEASE ima…
1404 will be published to Azure Marketplace soon after released.
1405
1406 This project is sponsored by The FreeBSD Foundation, with resources
1407 provided by Microsoft.
1408 __________________________________________________________________
1409
1410 Building FreeBSD on non-FreeBSD hosts
1411
1412 Links
1413 Wiki=20
1414 URL: https://wiki.freebsd.org/BuildingOnNonFreeBSD
1415
1416 Contact: Alex Richardson &lt;[email protected]&gt;
1417
1418 Until recently FreeBSD could only be built on a FreeBSD host. However,
1419 many popular free CI tools only allow building on Linux or macOS and
1420 therefore can not be used for building the FreeBSD base system.
1421 Furthermore, it is sometimes useful to cross-build FreeBSD for a remo…
1422 machine or an emulator even if the build machine is not running
1423 FreeBSD. The goal of this project is to allow building the base system
1424 on Linux and macOS hosts.
1425
1426 I started this project in 2017 to allow building CheriBSD on the Linux
1427 servers and desktops that many of us working on the CHERI project use.
1428 The first few patches were upstreamed in 2018 (see the 2018q3 report)
1429 and I merged the full set of patches to CheriBSD shortly after. Over
1430 the past two years I have slowly been upstreaming the remaining patch…
1431 and finally committed the last required change in time for this repor…
1432
1433 As of September 2020 it should be possible to use the buildworld and
1434 buildkernel make targets to build a fully-functional FreeBSD
1435 installation on macOS and Linux hosts. We use this in our continuous
1436 integration system to build and test CheriBSD disk images for multiple
1437 architectures. I have also committed a GitHub Actions configuration
1438 upstream that takes approximately 10 minutes to build an amd64 kernel.
1439 This will ensure that changes that break crossbuilding from Linux/mac…
1440 can be detected easily.
1441
1442 Upstreaming the crossbuilding changes has resulted in various build
1443 system cleanups. For example, we now no longer need to use lorder.sh
1444 when building libraries which speeds up the linking step a bit. The
1445 portability and bootstrapping changes should also make it easier to
1446 upgrade from older versions since we no longer rely on host headers in
1447 /usr/include matching those of the target system (e.g. when
1448 bootstrapping localedef, etc.).
1449
1450 While this support for building on Linux and macOS should still be
1451 considered experimental, it should work in many cases. If you would
1452 like to give it a try, the following command line should successfully
1453 build an amd64 world on Linux and macOS systems that have packages for
1454 LLVM 10 (or newer) installed: MAKEOBJDIRPREFIX=3D/somewhere
1455 ./tools/build/make.py TARGET=3Damd64 TARGET_ARCH=3Damd64 buildworld B…
1456 ds
1457 must be performed using the ./tools/build/make.py wrapper script since
1458 most Linux and macOS systems do not ship an appropriate version of
1459 bmake. Please let me know if you encounter any issues.
1460
1461 Sponsor: DARPA
1462 __________________________________________________________________
1463
1464 Git Migration Working Group
1465
1466 Links
1467 Git conversion tooling repo=20
1468 URL: https://github.com/freebsd/git_conv
1469 FreeBSD-git mailing list=20
1470 URL: https://lists.freebsd.org/mailman/listinfo/freebsd-git
1471 Beta doc git repo=20
1472 URL: https://cgit-beta.FreeBSD.org/doc
1473 Beta ports git repo=20
1474 URL: https://cgit-beta.FreeBSD.org/ports
1475 Beta src git repo=20
1476 URL: https://cgit-beta.FreeBSD.org/src
1477
1478 Contact: Ed Maste &lt;[email protected]&gt;
1479 Contact: Warner Losh &lt;[email protected]&gt;
1480 Contact: Ulrich Sp=C3=B6rlein &lt;[email protected]&gt;
1481
1482 Work continues on FreeBSD's migration from Subversion to Git. Ulrich
1483 has addressed all known issues with svn2git and has been able to work
1484 around the inconsistent metadata and forced commit issues in the
1485 Subversion history.
1486
1487 We still have additional documentation to write, and need to finish
1488 installing commit hooks (e.g. restricting branch creation, or ensuring
1489 appropriate data exists on cherry-pick commits).
1490
1491 We expect to open the beta repository to test commits before the end …
1492 October. This is to allow testing of the commit hooks, and to allow
1493 developers to test access and become familiar with git operation.
1494 Commits in this repository will be deleted and the repository will be
1495 recreated at least once prior to the final migration.
1496
1497 Those with an interest in the migration to Git are encouraged to
1498 subscribe to the FreeBSD-git mailing list and test out the beta src,
1499 ports, and/or doc repositories.
1500
1501 You are also welcome check out the wiki, issues, README and other
1502 documentation at the Git conversion tooling repo.
1503
1504 We currently expect to transition the src and doc repositories in
1505 mid-November. Additional investigation and experimentation with the
1506 ports repository is still underway.
1507
1508 Sponsor: The FreeBSD Foundation (in part)
1509 __________________________________________________________________
1510
1511 Linux compatibility layer update
1512
1513 Contact: Edward Tomasz Napierala &lt;[email protected]&gt;
1514 Contact: Mark Johnston &lt;[email protected]&gt;
1515
1516 Earlier Linuxulator work focused on code cleanups and improving
1517 diagnostic tools. Work has now shifted from cleanups to fixing actual
1518 applications. Current status is being tracked at Linux app status Wiki
1519 page. Initial focus was on applications that don't involve X11, mostly
1520 because they tend to be easier to test and debug, and the bug fixes a…
1521 not application-specific.
1522
1523 Foundation-sponsored work during this quarter included implementing a
1524 devfs(5) workaround to fix gettynam(3) inside jail/chroot, and
1525 workaround for the missing splice(2) syscall, which caused problems f…
1526 grep and autotools. The Linux version reported to userspace was bumped
1527 to 3.10.0, which matches the kernel shipped with RHEL 7 and is
1528 neccessary for IBM's DB2 database installation to succeed. The
1529 BLKPBSZGET ioctl neccessary for Oracle database is supported now. The…
1530 is now support for kcov(4), neccessary for syzcaller; as well as a
1531 number of fixes for issues reported by syzcaller, such as futex lock
1532 leaks. There were also more cleanups, including moving some
1533 Linuxulator-specific functionality related to error handling off from
1534 the syscall's fast code paths. The sysutils/debootstrap port, which
1535 provides an easy way to create Debian or Ubuntu jail, was updated to
1536 version 1.0.123. Finally there were some improvements to the
1537 documentation.
1538
1539 Most of those changes have been merged to FreeBSD 12-STABLE, in order
1540 to ship with 12.2-RELEASE.
1541
1542 There is increased involvement from other developers; this includes
1543 termios performance fixes, improved memfd support, implementing
1544 CLOCK_MONOTONIC_RAW required for Steam, madvise improvements, new
1545 compat.linux.use_emul_path sysctl. There is also ongoing work on
1546 tracking down the causes of failures related to Steam and WebKit, with
1547 fixes being first implemented in linuxulator-steam-utils.
1548
1549 Sponsor: The FreeBSD Foundation
1550 __________________________________________________________________
1551
1552 LLDB Debugger Improvements
1553
1554 Links
1555 Moritz Systems Project Description=20
1556 URL: https://www.moritz.systems/blog/lldb-debugger-improvements-for-…
1557 ebsd/
1558 Git Repository=20
1559 URL: https://github.com/moritz-systems/llvm-project
1560
1561 Contact: Kamil Rytarowski &lt;[email protected]&gt;
1562 Contact: Michal G=C3=B3rny &lt;[email protected]&gt;
1563
1564 FreeBSD includes LLDB, the debugger in the LLVM family, in the base
1565 system. At present it has some limitations in comparison with the GNU
1566 GDB debugger, and does not yet provide a complete replacement. It
1567 relies on an obsolete plugin model in LLDB that causes growing
1568 technical debt. This project aims to bring LLDB closer to a fully
1569 featured replacement for GDB, and therefore for FreeBSD to feature a
1570 modern debugger for software developers.
1571
1572 The legacy monolithic target supports the executed application being
1573 debugged in the same process space as the debugger. The modern LLDB
1574 plugin approach, used on other supported targets, executes the target
1575 process under a separate lldb-server process. This improves reliabili…
1576 and simplifies the process / thread model in LLDB itself. In addition,
1577 remote and local debugging will both be performed using the same
1578 approach.
1579
1580 After the migration to the new process model is complete, the project
1581 will include reviewing the results of LLDB's test suite and fixing
1582 tests as time permits. The work is expected to be complete in 2020.
1583
1584 The project schedule is divided into three milestones, each taking
1585 approximately one month:
1586
1587 1. Introduce new FreeBSD Remote Process Plugin for x86_64 with basic
1588 support and upstream to LLVM. 2. Ensure and add the mandated features
1589 in the project (process launch, process attach (pid), process attach
1590 (name), userland core files, breakpoints, watchpoints, threads, remote
1591 debugging) for FreeBSD/amd64 and FreeBSD/i386. 3. Iterate over the LL…
1592 tests. Detect, and as time permits, fix bugs. Ensure bug reports for
1593 each non-fixed and known problem. Add missing man pages and update the
1594 FreeBSD Handbook.
1595
1596 We are nearing the completion of the first milestone. The new plugin …
1597 getting into shape, and it can already run simple single-threaded
1598 programs. The supported features include single-stepping, breakpoints,
1599 memory and register I/O on amd64. Both plugins are supported
1600 simultaneously. The new plugin is used if FREEBSD_REMOTE_PLUGIN
1601 environment variable is set to any value, or if lldb-server is spawned
1602 directly. Otherwise, the old plugin is used for compatibility. Once t…
1603 new plugin matures, we are planning to enable it unconditionally on t…
1604 architectures that it is ported to.
1605
1606 Sponsor: The FreeBSD Foundation
1607 __________________________________________________________________
1608
1609 Lua usage in FreeBSD
1610
1611 Contact: Ed Maste &lt;[email protected]&gt;
1612 Contact: Kyle Evans &lt;[email protected]&gt;
1613 Contact: Ryan Moeller &lt;[email protected]&gt;
1614
1615 During this quarter, flua (FreeBSD Lua) was taught where to find base
1616 .lua modules in order to support require of .lua modules to be provid…
1617 by the base system. flua also gained support for require of binary
1618 modules.
1619
1620 A review for libjail bindings has also been submitted, pending review.
1621 libjail is an essential component if one wants to be able to write ja…
1622 management utilities in flua.
1623
1624 People interested in working with Lua in FreeBSD are welcome to get in
1625 contact to discuss other project ideas. To name a couple of potential
1626 projects, some interesting modules that have not been started but cou…
1627 prove useful (listed in no particular order):
1628 * libcrypt
1629 * libexpat
1630 * libnv
1631 * libxo
1632
1633 There is also a small list of scripts that would do well with a port …
1634 flua:
1635 * certctl(8)
1636 __________________________________________________________________
1637
1638 NFS over TLS implementation
1639
1640 Contact: Rick Macklem &lt;[email protected]&gt;
1641
1642 In an effort to improve NFS security, an internet draft which I expect
1643 will become an RFC soon specifies the use of TLS 1.3 to encrypt all
1644 data traffic on a Sun RPC connection used for NFS.
1645
1646 Although NFS has been able to use sec=3Dkrb5p to encrypt data on the
1647 wire, this requires a Kerberos environment and, as such, has not been
1648 widely adopted. It also required that encryption/decryption be done in
1649 software, since only the RPC message NFS arguments are encrypted. Sin…
1650 Kernel TLS is capable of using hardware assist to improve performance
1651 and does not require Kerberos, NFS over TLS may be more widely adopte…
1652 once implementations are available.
1653
1654 The coding for this project has now been completed. All required
1655 changes to the NFS and kernel RPC code have been committed to -CURREN…
1656 The daemons are now believed to be complete, but will remain in
1657 base/projects/nfs-over-tls until -CURRENT has an OpenSSL library with
1658 the kernel TLS support incorporated in it. If this does not happen for
1659 FreeBSD-13, hopefully the patched OpenSSL and the daemons can become
1660 ports.
1661
1662 To support clients such as laptops, the daemons that perform the TLS
1663 handshake may optionally handle client X.509 certificates from a site
1664 local CA. There are now exports(5) options to require client(s) to
1665 provide a valid X.509 certificate.
1666
1667 While setting up system(s) for testing is still a little awkward, the
1668 documentation is now available for those who want to help with testin…
1669
1670 The main limitation in the current implementation is that it uses
1671 TLS1.2 and not TLS1.3. This should change once the KERN_TLS rx patch
1672 includes TLS1.3 support.
1673
1674 Third party testing would be appreciated.
1675 __________________________________________________________________
1676
1677 syzkaller on FreeBSD
1678
1679 Contact: Mark Johnston &lt;[email protected]&gt;
1680
1681 See the syzkaller entry in the 2019q1 quarterly report for an
1682 introduction to syzkaller.
1683
1684 syzkaller, especially the public syzbot instance, continues to find
1685 bugs in the FreeBSD kernel. A number of these bugs have been fixed in
1686 subsystems such as the VFS name cache, the TCP and SCTP stacks, pf(4),
1687 the unix domain socket implementation, and the Linuxulator.
1688
1689 The FreeBSD Foundation sponsored some work to enable cross-OS fuzzing.
1690 This makes it possible to fuzz the Linuxulator using syzkaller's Linux
1691 target. This effort quickly found several bugs; once the support is
1692 committed upstream we will hopefully be able to leverage syzbot to ga…
1693 continuous testing of the Linux system call interface in addition to
1694 the native and 32-bit compatibility interfaces.
1695
1696 Some work was also done to enable running syzkaller in a FreeBSD jail,
1697 with the eventual aim of making it easy to distribute binary images
1698 containing everything required to immediately start running syzkaller
1699 on a new host. Currently a number of setup steps are required, making
1700 deployment somewhat painful.
1701
1702 Sponsor: The FreeBSD Foundation
1703 __________________________________________________________________
1704
1705 Kernel
1706
1707 Updates to kernel subsystems/features, driver support, filesystems, a…
1708 more.
1709
1710 DRM Drivers Update
1711
1712 Links
1713 drm-kmod=20
1714 URL: https://github.com/freebsd/drm-kmod/
1715
1716 Contact: Emmanuel Vadot &lt;[email protected]&gt;
1717
1718 The drm drivers for FreeBSD 13-CURRENT have been updated to match Lin…
1719 5.4.62 Then graphics/drm-current-kmod have been updated to follow this
1720 LTS release of Linux.
1721
1722 For now graphics/drm-devel-kmod is also tracking this release but will
1723 be updated to a later revision of Linux drm drivers in the near futur…
1724
1725 A lot of linuxkpi code was removed from the ports or replaced with a
1726 BSD licenced implementation.
1727
1728 Sponsor: The FreeBSD Foundation
1729 __________________________________________________________________
1730
1731 DTS Update
1732
1733 Contact: Emmanuel Vadot &lt;[email protected]&gt;
1734
1735 DTS files (Device Tree Sources) were updated to be on par with Linux
1736 5.8 for HEAD and 5.6 for the 12-STABLE branch.
1737 __________________________________________________________________
1738
1739 DesignWare Ethernet adapter driver improvements
1740
1741 Links
1742 WIP branch=20
1743 URL: https://github.com/gonzoua/freebsd/tree/rk_eth
1744
1745 Contact: Oleksandr Tymoshenko &lt;[email protected]&gt;
1746
1747 DesignWare Ethernet adapter IP is used in Rockchip and Allwinner SoCs.
1748 The driver was updated with following fixes:
1749 * Initialize clocks instead of relying on u-boot to do the right
1750 thing.
1751 * Sense media type and adjust controller configuration accordingly.
1752 * Add support for RMII PHY mode.
1753
1754 Yet uncommitted changes include performance optimisation by adding
1755
1756 support for multi-segment mbuf transmission. The next step is to try …
1757 get more performance boost by using interrupt coalescence.
1758 __________________________________________________________________
1759
1760 Google Summer of Code'20 Project - eBPF XDP Hooks
1761
1762 Links
1763 Github diff link=20
1764 URL: https://github.com/Ankurk99/freebsd/tree/ebpf-import
1765 Project wiki =20
1766 URL: https://wiki.freebsd.org/SummerOfCode2020Projects/eBPFXDPHooksl
1767
1768 Contact: Ankur Kothiwal &lt;[email protected]&gt;
1769
1770 The eBPF eXpress Data Path (XDP) allows eBPF programs to be run to
1771 filter received packets as early as possible, avoiding unnecessary
1772 processing overhead before the filter is run. The goal of this project
1773 is to extend an existing FreeBSD network driver (a virtual NIC like a
1774 VirtIO if_vtnet) to be able to call into an eBPF program when
1775 processing a newly received packet. In short, with XDP the driver must
1776 PASS (accept and process normally), DROP, TX or REDIRECT the packet as
1777 specified by the program. eBPF helper functions and maps for aiding in
1778 packet filtering will also be implemented.
1779
1780 Implemented:
1781 * Register a eBPF probe when an interface is registered with pfil.
1782 * Activating eBPF probe.
1783 * Create hooks and link them to the pfil head when the eBPF XDP pro…
1784 is activated and successfully list the XDP probes.
1785 * Create a xdp_rx function which will pass the received packets to
1786 the eBPF program where the packets can be further processed. This
1787 function will return XDP actions: DROP and PASS.
1788 * Register the xdp hook and link it to the pfil head.
1789 * Write an eBPF program to process (currently drop and pass) ICMP
1790 traffic - This is to test that the hook is working properly.
1791 * Write a loader function to load the ICMP filter program to the
1792 kernel.
1793
1794 Future Work:
1795 * Currently we can only attach the XDP hook to PASS and DROP the
1796 packets - The work on detaching the hook is left.
1797 * The XDP action to "TX" and "REDIRECT" the packets.
1798
1799 Final Deliverables:
1800 * Implemented XDP hook to pass and drop packets.
1801 * Created a loader program to attach the eBPF program to the kernel.
1802 * A test program to DROP ICMP filter.
1803
1804 This code was done under the Google Summer of Code 2020 under the
1805 guidance
1806
1807 of Ryan Stone (rstone@). The eBPF implementation for FreeBSD is still…
1808 work in progress and FreeBSD doesn't support eBPF yet. The basic
1809 implementation for eBPF was a GSoC'18 project, and is still under
1810 development. This project is based on that implementation so the XDP
1811 implementation for FreeBSD can only be merged into the FreeBSD source
1812 code once it supports eBPF.
1813
1814 Currently this code is a work in progress and is merged to Ryan Stone…
1815 branch with support for the eBPF implementation.
1816
1817 Sponsor: Google Summer of Code
1818 __________________________________________________________________
1819
1820 ENA FreeBSD Driver Update
1821
1822 Links
1823 ENA README=20
1824 URL: https://github.com/amzn/amzn-drivers/blob/master/kernel/fbsd/en…
1825 EADME
1826
1827 Contact: Michal Krawczyk &lt;[email protected]&gt;
1828 Contact: Artur Rojek &lt;[email protected]&gt;
1829 Contact: Marcin Wojtas &lt;[email protected]&gt;
1830
1831 ENA (Elastic Network Adapter) is the smart NIC available in the
1832 virtualized environment of Amazon Web Services (AWS). The ENA driver
1833 supports multiple transmit and receive queues and can handle up to 100
1834 Gb/s of network traffic, depending on the instance type on which it is
1835 used.
1836
1837 Completed since the last update:
1838 * Fix ENA compilation in case it is integrated into the kernel
1839 binary.
1840 * MFC of the ENA v2.2.0 driver to the FreeBSD 12.2.
1841
1842 Work in progress:
1843 * Add feature that allows reading extra ENI (Elastic Network
1844 Interface) metrics about exceeding BW/pps limits.
1845 * Introduce full kernel RSS API support.
1846 * Allow reconfiguration of the RSS indirection table and hash key.
1847 * Evaluation and prototyping of the driver port to the iflib
1848 framework.
1849
1850 Sponsor: Amazon.com Inc
1851 __________________________________________________________________
1852
1853 IPSec Extended Sequence Number (ESN) support
1854
1855 Contact: Grzegorz Jaszczyk &lt;[email protected]&gt;
1856 Contact: Patryk Duda &lt;[email protected]&gt;
1857 Contact: Marcin Wojtas &lt;[email protected]&gt;
1858
1859 Extended Sequence Number (ESN) is IPSec extension defined in RFC4303
1860 Section 2.2.1. It makes possible to implement high-speed IPSec
1861 implementations where standard, 32-bit sequence number is not
1862 sufficient. A key feature of the ESN is that only low order 32 bits of
1863 sequence number are transmitted over the wire. High-order 32 bits are
1864 maintained by sender and receiver. Additionally high-order bits are
1865 included in the computation of Integrity Check Value (ICV) field.
1866
1867 Extended Sequence Number support contains following:
1868 * Modification of existing anti-replay algorithm to fulfil ESN
1869 requirements.
1870 * Trigger soft lifetime expiration at 80% of UINT32_MAX when ESN is
1871 disabled.
1872 * Implement support for including ESN into ICV in cryptosoft engine
1873 in both encrypt and authenticate mode (eg. AES-CBC and SHA256 HMA…
1874 and combined mode (eg. AES-GCM).
1875 * Implement support for including ESN into ICV in AES-NI engine in
1876 both encrypt and authenticate mode and combined mode.
1877
1878 Completed since the last update:
1879 * Adjust implementation of crypto part to the reworked Open Crypto
1880 Framework.
1881 * Move the core ESN implementation from the crypto drivers to
1882 netipsec layer.
1883 * Make use of the newly introduced crp_aad mechanism for combined
1884 modes.
1885 * Introduce minor fixes and improvements.
1886
1887 TODO:
1888 * Complete review process in Phabricator and merge patches in the
1889 tree.
1890
1891 Sponsor: Stormshield
1892 __________________________________________________________________
1893
1894 NXP ARM64 SoC support
1895
1896 Contact: Marcin Wojtas &lt;[email protected]&gt;
1897 Contact: Artur Rojek &lt;[email protected]&gt;
1898 Contact: Dawid Gorecki &lt;[email protected]&gt;
1899
1900 The Semihalf team initiated working on FreeBSD support for the NXP
1901 LS1046A SoC
1902
1903 LS1046A are quad-core 64-bit ARMv8 Cortex-A72 processors with
1904 integrated packet processing acceleration and high speed peripherals
1905 including 10 Gb Ethernet, PCIe 3.0, SATA 3.0 and USB 3.0 for a wide
1906 range of networking, storage, security and industrial applications.
1907
1908 Completed since the last update:
1909 * Upstreaming of the QorIQ SDHCI driver (r365054).
1910
1911 With above the current Semihalf upstreaming activity is complete.
1912
1913 The major out-of-tree supported components:
1914 * DPAA network controller support.
1915 * QSPI controller support.
1916
1917 They work on 11.2-RELEASE, but still require significant
1918
1919 effort to adopt to FreeBSD-CURRENT.
1920
1921 Sponsor: Alstom Group
1922 __________________________________________________________________
1923
1924 Addition of PowerPC64LE Architecture
1925
1926 Links
1927 Early notes=20
1928 URL: https://lists.freebsd.org/pipermail/freebsd-ppc/2020-August/012…
1929 =2Ehtml
1930 Announcement=20
1931 URL: https://lists.freebsd.org/pipermail/freebsd-ppc/2020-September/…
1932 098.h
1933 tml
1934
1935 Contact: Brandon Bergren &lt;[email protected]&gt;
1936
1937 As of r366063, experimental support for little-endian PowerPC64
1938 (PowerPC64LE) is available in -CURRENT for POWER8 and POWER9 machines.
1939
1940 In 2010, when FreeBSD was ported to PowerPC64, the average user would
1941 have been using a G5 PowerMac, a purely big-endian machine.
1942
1943 While, at the time, a 32-bit PowerPC machine could run in
1944 little-endian, as well as POWER6 and POWER7, in practice, the
1945 complexities involved in managing it at the kernel level and lack of
1946 firmware support made it infeasible to support.
1947
1948 When IBM designed POWER8, one main focus was to improve little-endian
1949 support, and bring it up to parity with big-endian.
1950
1951 This improved support makes it practical to support a little-endian
1952 operating environment on what is traditionally a primarily big-endian
1953 platform.
1954
1955 In 2020, with POWER9 being affordable for many users thanks to the
1956 Raptor Blackbird, semi-easy access to surplus POWER8 hardware, IBM
1957 having a major future focus on POWER little-endian, and the decay of
1958 big-endian support in modern video cards and graphical environments,
1959 there is demand for a little-endian version of FreeBSD on POWER.
1960
1961 With FreeBSD/PowerPC64's transition in 2019 to the ELFv2 ABI as part …
1962 the 2019q4 PowerPC on Clang effort, the last major barrier to a
1963 little-endian port was eliminated.
1964
1965 Since nobody else was working on it, and I had the skillset required …
1966 do the port, I decided to experiment one weekend with a little-endian
1967 kernel to see how difficult it would be to port.
1968
1969 It turned out to be a lot more trivial than I was expecting. Three da…
1970 later I had console support in qemu, and after another week of
1971 debugging, I had it fully up and running on hardware.
1972
1973 FreeBSD PowerPC64LE is now an experimental MACHINE_ARCH in base, and …
1974 continuing to evolve at a rapid pace.
1975
1976 Big-endian PowerPC64 is still the preferred platform for the
1977 foreseeable future, and will not be deprecated.
1978
1979 Sponsor: Tag1 Consulting, Inc.
1980 __________________________________________________________________
1981
1982 ure - USB 3.0 Gigabit Ethernet Driver update
1983
1984 Links
1985 svn commit: r365648=20
1986 URL: https://svnweb.freebsd.org/changeset/base/365648
1987 FreeBSD-SA-20:27.ure=20
1988 URL: https://www.freebsd.org/security/advisories/FreeBSD-SA-20:27.ur…
1989 sc
1990 D25809 major update to if_ure=20
1991 URL: https://reviews.freebsd.org/D25809
1992
1993 Contact: John-Mark Gurney &lt;[email protected]&gt;
1994
1995 The ure is a driver for handling the RealTek ethernet adapters,
1996 including the RTL8153 USB 3.0 Gigabit ethernet adapters. It is used in
1997 many ethernet dongles and docking stations.
1998
1999 Previous to this update, the driver was limited in speed. In my
2000 testing, I was only able to get ~91Mbps. This limit was due to one
2001 packet per USB transfer. USB has a limit of 8000 transfers per second
2002 (1500 bytes/pkt * 8000 pkts/sec * 8bits/byte =3D=3D 96 Mbps). This was
2003 acceptable for fast ethernet (RTL8152, 100Mbps), but with the
2004 additional support for Gigabit ethernet, it became a bottleneck.
2005
2006 The updates add sending and receiving multiple packets in a single USB
2007 transfer, VLAN hardware tagging, and enable TCP and UDP checksum
2008 offloading. This increased the speed on gigabit ethernet to ~940 Mbps.
2009
2010 In doing this work, a security vulnerability was discovered in the
2011 driver. Due to improper setting of a device register, on some devices,
2012 it caused packets to be fragmented when they shouldn't be and the
2013 driver was unable to handle them correctly. This allowed an attacker,
2014 who could generate large frames (say, ping packets, or large TCP
2015 transfers), to inject arbitrary packets into the network stack. This
2016 could allow the attacker to spoof traffic from other machines, and
2017 bypass VLAN protections. See the SA for more information.
2018
2019 As part of this work, a script was created to run tests to validate
2020 that basic functionality of the driver (w/o options) work properly, a…
2021 then iterate over each option to make sure that they function properl…
2022 This will be released at some point in the future.
2023
2024 If you're interested in helping out, or testing it, let me know.
2025 __________________________________________________________________
2026
2027 Stateless hardware offloads for VXLANs
2028
2029 Links
2030 r365867=20
2031 URL: https://svnweb.freebsd.org/base?view=3Drevision&amp;revision=3D…
2032 r365868=20
2033 URL: https://svnweb.freebsd.org/base?view=3Drevision&amp;revision=3D…
2034 r365869=20
2035 URL: https://svnweb.freebsd.org/base?view=3Drevision&amp;revision=3D…
2036 r365870=20
2037 URL: https://svnweb.freebsd.org/base?view=3Drevision&amp;revision=3D…
2038 r365871=20
2039 URL: https://svnweb.freebsd.org/base?view=3Drevision&amp;revision=3D…
2040 RFC6935=20
2041 URL: https://tools.ietf.org/html/rfc6935
2042
2043 Contact: Navdeep Parhar &lt;[email protected]&gt;
2044
2045 VXLAN (Virtual eXtensible LAN) is a tunneling protocol in which Layer…
2046 traffic for a virtual LAN is encapsulated in UDP and transferred over
2047 Layer 3 networks between VTEPs (VXLAN Tunnel End Points). Traffic on
2048 the wire has two sets of networking headers: the headers for the
2049 encapsulation and the headers of the traffic being encapsulated. VXLA…
2050 are supported by if_vxlan(4) on FreeBSD.
2051
2052 Modern NICs commonly support header checksum insertion and
2053 verification, TSO (TCP Segmentation Offload) on transmit, and RSS for
2054 load distribution on receive. But the default is to operate on the
2055 outermost headers. Some NICs can operate on the inner encapsulated
2056 frames as well. The commits listed above allow if_vxlan(4) to take
2057 advantage of such NICs.
2058
2059 r365867 and r365868 add new mbuf checksum flags and ifnet capabilitie…
2060 r365870 implements the kernel parts of the new capabilities and updat…
2061 if_vxlan(4) to make use of them. r365871 implements driver support for
2062 the new capabilities in cxgbe(4).
2063
2064 VXLAN and other tunneling protocols that use UDP explicitly allow zero
2065 checksum in the outer UDP header, even with IPv6. r365869 adds support
2066 for configuring one UDP/IPv6 port where zero checksums are allowed.
2067
2068 This work was sponsored by Chelsio Communications and was implemented
2069 and tested using T6 (Terminator 6) NICs supported by cxgbe(4). It is
2070 available in 13.0-CURRENT (head) right now and will be available in
2071 12-STABLE in the future.
2072
2073 VXLANs can be created as usual and will automatically have checksum a…
2074 TSO capabilities if the underlying physical interface supports VXLAN
2075 stateless offloads. Use ifconfig to list, disable, and enable checksum
2076 capabilities on the VXLAN interface. Use
2077 https://bugs.freebsd.org/bugzilla/ to report bugs.
2078
2079 Future work:
2080 * Direct call into a vxlan input routine from the driver's receive
2081 routine.
2082 * LRO support in if_vxlan(4).
2083 * GENEVE support.
2084
2085 Sponsor: Chelsio Communications
2086 __________________________________________________________________
2087
2088 Wireless updates
2089
2090 Links
2091 The freebsd-wireless mailing list=20
2092 URL: https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
2093 athp github repository=20
2094 URL: https://github.com/erikarn/athp
2095
2096 Contact: Adrian Chadd &lt;[email protected]&gt;
2097 Contact: Bjoern A. Zeeb &lt;[email protected]&gt;
2098
2099 The following works happened in FreeBSD HEAD (some already in Q2) and
2100 were merged for 12.2-BETA2 and include net80211 and driver updates for
2101 better 11n and upcoming 11ac support.
2102
2103 In more detail, this includes an ath(4) update, some run(4) 11n
2104 support, 11n for otus(4), A-MPDU, A-MSDU, A-MPDU+A-MSDU and Fast fram…
2105 options, scanning fixes, enhanced PRIV checks for jails, restored
2106 parent device name printing, improvements for upcoming VHT support,
2107 lots of under-the-hood infrastructure improvements, new device IDs, a…
2108 debug tools updates.
2109
2110 If you have a chance please test before the release.
2111
2112 Atheros 11ac driver athp
2113
2114 In the last three months the athp(4) port of the ath10k driver has
2115 progressed well. Adrian reports the following important changes:
2116 * Per-node transmit buffering was implemented, required for correct
2117 hostap and QCA6174 behaviour.
2118 * Issues with ignoring sending some management frames got fixed;
2119 null-data frames were being filtered out and this caused
2120 undesirable hostap behaviour.
2121 * Transmit path refactoring reduced code duplication.
2122 * A fix on firmware start / VAP running tracking no longer stops the
2123 first VAP from coming active after VAP creation / ifconfig up.
2124 * Correcting hostap mode PHY configuration now allows non-VHT
2125 stations to associate and correctly exchange data with a VHT AP.
2126 * Addition of a crypto key configuration cache in the driver ensures
2127 the ieee80211_key details are available after the key is deleted;
2128 net80211 would reuse or free the state before the driver task wou…
2129 finish the firmware command.
2130
2131 Newer Intel Wireless device support
2132
2133 Initial work was done to integrate net80211 support in the LinuxKPI
2134 compat layer to get the wireless parts going. In addition, upstreaming
2135 code changes and working through problems and review started on two
2136 sides. One was trying to get mostly compile time changes upstreamed to
2137 the iwlwifi driver. The other is sorting out conflicting LinuxKPI
2138 changes to not break the DRM graphics drivers. Bjoern hopes that with
2139 some of that sorted out, he can soon go back to focus on the wireless
2140 parts and produce a new snapshot.
2141
2142 rtw88 and brcmfmac
2143
2144 As the Intel driver port and LinuxKPI advance, both the rtw88, and to…
2145 lower degree the brcmfmac, ports benefit from that. Bjoern lately also
2146 got a brcmfmac PCIe card and started to port support for that. This f…
2147 the moment remains a free-time project.
2148
2149 Work by Bjoern was sponsored by: Rubicon Communications, LLC (d/b/a
2150 "Netgate") and The FreeBSD Foundation
2151 __________________________________________________________________
2152
2153 ZSTD Compression in ZFS
2154
2155 Contact: Allan Jude &lt;[email protected]&gt;
2156
2157 Zstandard (ZSTD) is a modern high-performance compression algorithm
2158 designed to provide the compression ratios of gzip while offering much
2159 better performance. ZSTD has been adopted in FreeBSD for a number of
2160 other uses, including compressing kernel crash dumps, as a replacement
2161 for gzip or bzip for compressing log files, and for future versions of
2162 pkg(8).
2163
2164 This effort to complete the integration of ZSTD into ZFS is funded by
2165 the FreeBSD Foundation.
2166
2167 During the third quarter the integrating of ZSTD into OpenZFS was
2168 completed in the upstream OpenZFS repository, and the new OpenZFS 2.0
2169 codebase was imported into 13-CURRENT. Completed milestones in this
2170 project:
2171 * Importing ZSTD 1.4.5 into OpenZFS, using the recent upstream zstd
2172 features that make it easier to embed zstd in other projects.
2173 * Changing the way compression levels are tracked and inherited.
2174 * Save and restore the compression level via an embedded block
2175 header.
2176 * Also store the version of zstd used in the embedded block header,
2177 for future-proofing. The checksum of a block may not match if zstd
2178 is upgraded, since it may compress the block more.
2179 * Add tests to ensure zstd compression and metadata survive ZFS
2180 replication.
2181 * Resolve possible negative interactions with L2ARC and ZFS Native
2182 Encryption.
2183 * Fix bug with L2ARC if the Compressed ARC feature is disabled.
2184 * Improve the ZFS feature activation code, so that zstd cannot crea…
2185 pools that will panic older versions of ZFS.
2186
2187 With these changes, upgraded pools can compress data with zstd
2188
2189 or zstd-fast, across a wide range of different compression levels. Th…
2190 will allow the storage administrator to select the
2191 performance-vs-compression tradeoff that best suits their needs.
2192
2193 Tasks remaining to be completed:
2194 * Add a section to the FreeBSD Handbook ZFS chapter about zstd
2195 * Create more documentation around selecting a suitable compression
2196 level
2197 * Finish support for ZSTD in the FreeBSD boot loader (Warner Losh
2198 [email protected])
2199
2200 Sponsor: The FreeBSD Foundation
2201 __________________________________________________________________
2202
2203 Architectures
2204
2205 Updating platform-specific features and bringing in support for new
2206 hardware platforms.
2207
2208 CheriBSD 2020 Q3
2209
2210 Links
2211
2212 Contact: Alex Richardson &lt;[email protected]&gt;
2213 Contact: Andrew Turner &lt;[email protected]&gt;
2214 Contact: Brooks Davis &lt;[email protected]&gt;
2215 Contact: Edward Tomasz Napierala &lt;[email protected]&gt;
2216 Contact: George Neville-Neil &lt;[email protected]&gt;
2217 Contact: Jessica Clarke &lt;[email protected]&gt;
2218 Contact: John Baldwin &lt;[email protected]&gt;
2219 Contact: Robert Watson &lt;[email protected]&gt;
2220 Contact: Ruslan Bukin &lt;[email protected]&gt;
2221
2222 CheriBSD extends FreeBSD to implement memory protection and software
2223 compartmentalization features supported by the CHERI instruction-set
2224 extensions. There are three architectural implementations of the CHERI
2225 protection model: CHERI-MIPS, CHERI-RISC-V, and Arm's forthcoming
2226 experimental Morello processor (due late 2021). CheriBSD is a research
2227 operating system with a stable baseline implementation into which
2228 various new research features have been, or are currently being,
2229 merged:
2230 * Arm Morello - We are preparing to open source our adaptation of
2231 CheriBSD to Arm's Morello architecture. The Morello branch is bei…
2232 updated to the most recent CheriBSD baseline, and patches are in
2233 review for upstreaming to our open-source repository. CheriBSD
2234 currently boots and runs statically linked CheriABI binaries on t…
2235 Morello simulator, and dynamic linking support is in progress, wi…
2236 OS and toolchain bugs being worked on. We aim to make a first
2237 CheriBSD/Morello snapshot available alongside other open-source
2238 Morello software in mid-October 2020, however, our target for a
2239 more mature and usable implementation is December 2020.
2240 * Kernel spatial memory safety (pure-capability kernel) - The curre…
2241 CheriBSD kernel is a hybrid C program where only pointers to
2242 userspace are CHERI capabilities. This ensures that the kernel
2243 follows the intent of the application runtime and cannot be used …
2244 defeat bounds on application pointers. We have developed and will
2245 soon merge a pure-capability kernel where all pointers in the
2246 kernel are appropriately bounded capabilities. This vastly reduces
2247 the opportunity for buffer overflows. This spatial memory safety
2248 lays the groundwork for future work such as device driver
2249 compartmentalization and kernel temporal safety.
2250 * Userspace heap temporal memory safety (Cornucopia) - CHERI
2251 capabilities provide the necessary features to enable robust and
2252 efficient revocation of freed pointers. With Cornucopia we have
2253 implemented a light-weight revocation framework providing
2254 protection from use-after-reallocation bugs with an average cost
2255 below 2%. We aim to bring these overheads down further over the
2256 next year and merge this functionality into the mainline CheriBSD.
2257 * We have been working on updating the arm64 bhyve from Politehnica
2258 University of Bucharest to have it committed to FreeBSD. We have
2259 been upstreaming initial changes to help support this.
2260 * Baseline FreeBSD improvements - We are upstreaming (to FreeBSD)
2261 various bug fixes and tweaks for PCIe support, and support for the
2262 System MMU (SMMU) that will be present on the N1SDP and Morello
2263 SoCs. We have upstreamed support for cross-building FreeBSD from
2264 macOS and Linux (with some limitations; see separate entry on
2265 crossbuilding). We have also fixed implementation bugs in the
2266 RISC-V ABI.
2267
2268 CHERI Documentation and Exercises
2269
2270 * We have released [Capability Hardware Enhanced RISC Instructions:
2271 CHERI Instruction-Set Architecture (Version
2272 8)](https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-951.pdf).
2273 Notable changes include promotion of CHERI-RISC-V to
2274 non-experimental and discussion of Arm's Morello prototype.
2275 * We have developed a set of [Adversarial CHERI Exercises and
2276 Missions](https://ctsrd-cheri.github.io/cheri-exercises) to
2277 introduce security researchers to CHERI protections.
2278 __________________________________________________________________
2279
2280 FreeBSD/RISC-V Project
2281
2282 Links
2283 Wiki=20
2284 URL: https://wiki.freebsd.org/riscv
2285
2286 Contact: Mitchell Horne &lt;[email protected]&gt;
2287
2288 Contact: freebsd-riscv Mailing List
2289 Contact: IRC #freebsd-riscv on freenode
2290
2291 The FreeBSD/RISC-V project is providing support for running FreeBSD on
2292 the RISC-V Instruction Set Architecture.
2293
2294 This quarter saw several important bug fixes. A number of hangs in the
2295 system were identified and addressed, and a bug in QEMU's
2296 implementation of the Platform Level Interrupt Controller was fixed.
2297 This fix is included in the new devel/qemu50 and devel/qemu-devel
2298 ports.
2299
2300 The end result of these fixes is that the test suite can now be
2301 reliably run to completion in QEMU. The entire run takes several hour…
2302 so CI has been configured to run the job once a day. There is active
2303 effort into reducing the time it takes to run the entire test suite.
2304
2305 A new u-boot port was created: sysutils/u-boot-qemu-riscv64. This
2306 variant can be used as a secondary bootloader alongside OpenSBI to lo…
2307 and launch FreeBSD's loader(8) from an EFI System Partition.
2308
2309 Next quarter will likely bring further fixes to address some of the
2310 failing test cases.
2311 __________________________________________________________________
2312
2313 Ports
2314
2315 Changes affecting the Ports Collection, whether sweeping changes that
2316 touch most of the tree, or individual ports themselves.
2317
2318 Update to grub-bhyve
2319
2320 Links
2321 grub-bhyve Git Repository=20
2322 URL: https://gitlab.com/ctuffli/grub
2323
2324 Contact: Chuck Tuffli &lt;[email protected]&gt;
2325
2326 bhyve is the hypervisor included in FreeBSD and other operating syste…
2327 used to run virtual machines. When not using a boot ROM (i.e. UEFI),
2328 the user must load the guest operating system for bhyve. For
2329 non-FreeBSD guests, the loader is a version of GNU GRUB (a.k.a the GNU
2330 GRand Unified Bootloader) modified to interface with bhyve. This work
2331 is an effort to both update the base GRUB code to the latest version …
2332 well as improve the usability on FreeBSD.
2333
2334 The current grub-bhyve is based on an older version of GRUB (circa
2335 2015) and thus is missing more recent additions such as XFS file syst…
2336 and syslinux support. With the update, installing CentOS, for example,
2337 now does not require the extra step of changing the default file syst…
2338 to something other than XFS.
2339
2340 Internally, the code has been restructured to be its own "platform"
2341 which should make it easier to keep in sync with upstream development.
2342 The major improvement is the ability to automatically find and load t…
2343 GRUB configuration file from the guest disk image. With this change, …
2344 is not necessary to create a device map file or specify which Linux
2345 kernel or initrd image to use. More importantly, if the guest image
2346 updates its GRUB configuration, for example after updating the kernel,
2347 no changes are needed when invoking grub-bhyve. Note, this feature
2348 requires a new "disk" option:
2349
2350 # grub-bhyve --disk=3D/zroot/vms/u18-mini/disk0.img --vm=3Du18-mini
2351
2352 The automatic configuration file detection works with both GRUB
2353 configuration files (e.g. CentOS, Ubuntu) as well as syslinux
2354 configuration (e.g. Alpine). For the adventurous, there is experiment…
2355 support for Fedora's BootLoaderSpec (a.k.a. blscfg) on the blscfg
2356 branch of the grub-bhyve Git repository.
2357
2358 The code has been tested on a few Linux variants, but it would benefit
2359 from wider testing (and bug reports!). The new version does not have a
2360 Port but is easily built on FreeBSD. After cloning / downloading the
2361 source, run:
2362
2363 $ PYTHON=3Dpython3.7 ./bootstrap $ MAKE=3Dgmake ./configure
2364 --with-platform=3Dbhyve $ gmake
2365
2366 The resulting binary, grub-bhyve, will be in the grub-core/ directory.
2367 If you have success or troubles with it, please let me know.
2368 __________________________________________________________________
2369
2370 KDE on FreeBSD
2371
2372 Links
2373 KDE FreeBSD =20
2374 URL: https://freebsd.kde.org/
2375 KDE Community FreeBSD=20
2376 URL: https://community.kde.org/FreeBSD
2377
2378 Contact: Adriaan de Groot &lt;[email protected]&gt;
2379
2380 The KDE on FreeBSD project aims to package all of the software produc…
2381 by the KDE Community for the FreeBSD ports tree. The software includes
2382 a full desktop environment called KDE Plasma, an IDE with the name
2383 KDevelop, a PIM suite known as Kontact and hundreds of other
2384 applications that can be used on any FreeBSD machine.
2385
2386 With the continuation of the ever-so-peculiar era of
2387 almost-only-online, the KDE community has shifted gears and also gone
2388 for online events. The yearly conference, Akademy, was conducted onli…
2389 over video calls. Meanwhile, software continues to be released, so th…
2390 quarter the kde@ team:
2391 * Put the beta of the next version of KDE Plasma, scheduled for
2392 official release in October 2020, into the Area51 development tre…
2393 Area51 is a fork of the FreeBSD ports tree where new development
2394 for KDE ports happens.
2395 * The monthly regular updates to the KDE Plasma desktop landed
2396 on-time and safely.
2397 * With three months in a quarter, there were also three releases of
2398 KDE Frameworks 5, including a new framework for handling DAV jobs.
2399 * The June applications update and its .1 release landed a bit late,
2400 but brings with it the usual raft of updates to KDE applications
2401 and libraries,
2402 * A new Digikam release, which arrived in the ports tree on the day
2403 of its release.
2404 * A new KDevelop release arrived a day after its release. This upda…
2405 contains a number of crash fixes for refactoring support.
2406 * Qt was updated to Qt 5.15, the last in the Qt5 series and an LTS
2407 version. Bugfix releases are expected, but the next major Qt will
2408 be Qt 6.
2409
2410 On the infrastructure front, August saw some minor updates to CMake a…
2411 ninja.
2412
2413 As usual, kde@ continues to support the work of xorg@ and gnome@ in
2414 maintaining the Free Desktop stack on FreeBSD, including XOrg, popple…
2415 and xdg-utils. A new MAINTAINER group, desktop@, has been created to
2416 provide shared ownership of that shared stack.
2417
2418 With Python2 deprecation looming, the build system for QtWebEngine --
2419 itself a fork of Chromium -- is becoming a pressing issue in Q4 and
2420 will no doubt chew up a lot of time in the coming months.
2421 __________________________________________________________________
2422
2423 Documentation
2424
2425 Noteworthy changes in the documentation tree, in manpages, or in
2426 external books/documents.
2427
2428 DOCNG on FreeBSD
2429
2430 Links
2431 DOCNG Website Repo=20
2432 URL: https://gitlab.com/carlavilla/freebsd-hugo-website
2433 DOCNG Documentation Repo=20
2434 URL: https://gitlab.com/carlavilla/freebsd-hugo-documentation
2435 DOCNG Share Repo=20
2436 URL: https://gitlab.com/carlavilla/freebsd-hugo-data
2437
2438 Contact: Sergio Carlavilla &lt;[email protected]&gt;
2439
2440 The Doc New Generation project aims to convert the website and all
2441 existing documentation to Hugo/AsciiDoctor. Right now almost everythi…
2442 is converted as you can see in the repositories.
2443
2444 The objective of using Hugo and AsciiDoctor is to reduce the learning
2445 curve and let people to start quickly with our documentation system.
2446 Other benefits of using Hugo is that we can use other technologies
2447 aside from AsciiDoctor, like MarkDown, RST, Pandoc, etc.
2448
2449 The remaining tasks include:
2450 * Finish the conversion of some books to AsciiDoctor.
2451 * Get some tweaks in the CSS to be responsive.
2452 * Add AsciiDoctor extensions to create an index of tables and
2453 figures.
2454 * Make a general review.
2455
2456 The dates for making the migration have yet to be discussed.
2457
2458 Patches, comments and objections are always welcome.
2459 __________________________________________________________________
2460
2461 Third-Party Projects
2462
2463 Many projects build upon FreeBSD or incorporate components of FreeBSD
2464 into their project. As these projects may be of interest to the broad…
2465 FreeBSD community, we sometimes include brief updates submitted by
2466 these projects in our quarterly report. The FreeBSD project makes no
2467 representation as to the accuracy or veracity of any claims in these
2468 submissions.
2469
2470 Potluck - Flavour &amp; Image Repository for pot
2471
2472 Links
2473 Potluck Repository &amp; Project=20
2474 URL: https://potluck.honeyguide.net/
2475 Potluck on github =20
2476 URL: https://github.com/hny-gd/potluck
2477 pot project =20
2478 URL: https://pot.pizzamig.dev
2479
2480 Contact: &lt;&gt;
2481
2482 pot is a jail management tool that also supports orchestration through
2483 nomad.
2484
2485 Potluck aims to be to FreeBSD and pot what Dockerhub is to Linux and
2486 Docker: A repository of pot flavours and complete images for usage wi…
2487 pot.
2488
2489 In the last quarter, an initial set of Nomad, Consul and Traefik imag…
2490 has been created that are sufficient to run a simple virtual datacent…
2491 out of the box.
2492 A three-part article series explaining how to set this up is also
2493 available now.
2494
2495 Furthermore, ready-made images suitable for scheduling via Nomad and
2496 Consul in such an environment have been created, e.g. a BackupPC or a
2497 Postfix Backup MX service.
2498
2499 Future plans include additional images and exposing more configuration
2500 options in the existing images to allow a more flexible usage.
2501
2502 Beside general feedback and tests, additional flavours and patches are
2503 very welcome!
2504
2505 Sponsors: Honeyguide GmbH &amp; Honeyguide Group (Pty) Ltd ## Puppet
2506 Puppet Puppet's FreeBSD slack channel Bolt Choria Puppet Team
2507 [email protected]
2508
2509 Since out last status report a few years ago, the puppet@ team
2510 regularly updated the various Puppet ports to follow upstream releases
2511 of Puppet 4, Puppet 5 and Puppet 6. Puppet 4 was removed when it
2512 reached EOL.
2513
2514 More recently, an effort was made to enhance Facter 4 so that it can …
2515 used as a drop-in replacement of Facter 3 on FreeBSD. Facter 4 is a
2516 Ruby rewrite of Facter 3, the C++ rewrite of Facter 2 which was
2517 initially in Ruby. As a consequence we have two ports for Facter:
2518 sysutils/facter is the C++ implementation (Facter 3) and
2519 sysutils/rubygems-facter is the Ruby implementation (updated from
2520 Facter 2 to Facter 4 a few weeks ago). The Puppet 5 and Puppet 6 ports
2521 already allow to choose which version of Facter to use. Facter 4 will
2522 be the default version of Facter with Puppet 7 which is expected to be
2523 released soon.
2524
2525 We are getting ready to add a port for Puppet 7 as sysutils/puppet7
2526 when it is available, along with PuppetServer 7
2527 (sysutils/puppetserver7), and PuppetDB 7 (databases/puppetdb7).
2528
2529 Regarding orchestration, most Marionette Collective ports have been
2530 deprecated for a long time, and the last component sysutils/mcollecti…
2531 is expected to be deprecated soon: Marionette Collective was not
2532 shipped anymore with Puppet 6 and Bolt has been made available as a
2533 lightweight replacement.
2534
2535 Bolt is already available in the ports tree as sysutils/rubygems-bolt…
2536 but if you are using Marionette Collective, you are invited to look
2537 into Choria which will reach the ports tree soon as sysutils/choria.
2538 Choria is a direct evolution of Marionette Collective allowing a smoo…
2539 transition from MCollective. Once Choria is available in the ports
2540 tree, Marionette Collective will be deprecated.
2541 __________________________________________________________________
2542
2543 News Home | Status Home
2544 Site Map | Legal Notices | =C2=A9 1995-2020 The FreeBSD Project. All …
2545 hts
2546 reserved.
2547
2548 --6vqnfjaiktnxv5lf
2549 Content-Type: application/pgp-signature; name="signature.asc"
2550
2551 -----BEGIN PGP SIGNATURE-----
2552
2553 iQGTBAABCgB9FiEEDonNJPbg/JLIMoS6Ps5hSHzN87oFAl+QsKhfFIAAAAAALgAo
2554 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDBF
2555 ODlDRDI0RjZFMEZDOTJDODMyODRCQTNFQ0U2MTQ4N0NDREYzQkEACgkQPs5hSHzN
2556 87op1gf/YOFz9WlcOqrMZp+qGKEc8I6Z/JvH3hxazWTuuWAP/4k7zlXVSqx3LwR9
2557 TNt3pXGwgCUEbZ5HEOOBnSpB/tTRiS30Dfpu0XjCeoZ8Rg4WWZM6V5zLUVnLSZNJ
2558 X8pW65P28ErK12poVKwgJbGUxDjpRQiowA4UrfzBJL7FhDPNwDKBp5OmRmG0np4f
2559 yZ9Sy2Ux0CYyWZaL+BV6Cdz4VgEUbeseAFRD9afE7NIboE3gif4brIMdVHbdM+Az
2560 3+kkg7tSUYl1PF4vitPszRQRlb+u2UJwcclwSKyCPU/sV8emPJaGR5yjddCu5JM3
2561 p4LZgTSbnBK9VN8UUb0tPoKoCupGGw==
2562 =U8JA
2563 -----END PGP SIGNATURE-----
2564
2565 --6vqnfjaiktnxv5lf--</content>
2566 <tags>freebsd</tags>
2567 <author>
2568 <name>[email protected]</name>
2569 </author>
2570 </entry>
2571 <entry>
2572 <id>tag:bsdsec.net,2005:Article/1218</id>
2573 <published>2020-10-21T01:29:49Z</published>
2574 <updated>2020-10-21T01:29:49Z</updated>
2575 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
2576 <title>NetBSD 9.1 available!</title>
2577 <content type="html">The NetBSD Project is pleased to announce NetBS…
2578 feature and stability update for the netbsd-9 release branch.
2579
2580 Over the last months many changes have been made to the NetBSD 9 stable
2581 branch. As a stable branch the release engineering team and the NetBSD
2582 developers are conservative with changes to this branch and many users
2583 rely on the binaries from our regular auto-builds for production use.
2584
2585 The new release features (among various other changes) many bug fixes,
2586 a few performance enhancements, stability improvements for ZFS and LFS
2587 and support for USB security keys in a mode easily usable in Firefox
2588 and other applications.
2589
2590 For more details and instructions see the 9.1 announcement at
2591
2592 https://www.NetBSD.org/releases/formal-9/NetBSD-9.1.html</conten…
2593 <tags>netbsd</tags>
2594 <author>
2595 <name>[email protected]</name>
2596 </author>
2597 </entry>
2598 <entry>
2599 <id>tag:bsdsec.net,2005:Article/1217</id>
2600 <published>2020-10-20T18:30:14Z</published>
2601 <updated>2020-10-20T18:30:14Z</updated>
2602 <link rel="alternate" type="text/html" href="https://bsdsec.net/arti…
2603 <title>rpki-client 6.8p0 released</title>
2604 <content type="html">rpki-client 6.8p0 has just been released and wi…
2605 rpki-client directory of any OpenBSD mirror soon.
2606
2607 rpki-client is a FREE, easy-to-use implementation of the Resource
2608 Public Key Infrastructure (RPKI) for Relying Parties (RP) to
2609 facilitate validation of the Route Origin of a BGP announcement. The
2610 program queries the RPKI repository system and outputs Validated ROA
2611 Payloads in the configuration format of OpenBGPD, BIRD, and also as
2612 CSV or JSON objects for consumption by other routing stacks.
2613
2614 See RFC 6811 for a description of how BGP Prefix Origin Validation
2615 secures the Internet's global routing system.
2616
2617 rpki-client was primarily developed by Kristaps Dzonsons, Claudio
2618 Jeker, Job Snijders, and Sebastian Benoit as part of the OpenBSD
2619 Project and gets released as a base component of OpenBSD every six
2620 months, and follows the OpenBSD release numbering scheme.
2621
2622 This is the first release based on OpenBSD 6.8. It includes the following
2623 changes to the previous release:
2624
2625 * Improve how repositories are downloaded: do not fetch symlinks and
2626 clean extraneous files in the repositories after download using the
2627 cryptographically signed RPKI manifest listings.
2628
2629 * Fix a bug where rpki-client could hang after calling rsync.
2630
2631 * Remove the -f option, no longer needed.
2632
2633 * Improved validation of the trust anchors.
2634
2635 * Add new option '-s timeout' to make rpki-client automatically
2636 terminate after a timeout (default 1 hour). This helps when
2637 rpki-client is run via cron to prevent a hanging process to cause
2638 problems.
2639
2640 Portability improvements:
2641
2642 * Replace warnc() with warnx() + strerror()
2643
2644 * Replace b64_pton() with code using the libcrypto EVP_Decode*
2645 functionality.
2646
2647 * Adjust for OpenSSL 1.1.x compatible use of the EVP_ENCODE_CTX
2648 struct.
2649
2650 rpki-client is known to compile and run on at least the following
2651 Linux distributions: Alpine 3.12, Debian 9, Debian 10, Fedora 31,
2652 Fedora 32, Fedora 33, RHEL/CentOS 7, RHEL/CentOS 8.
2653 It is our hope that packagers take interest and help adapt
2654 OpenBGPD-portable to more distributions.
2655
2656 The mirrors where rpki-client can be found are on
2657 https://www.rpki-client.org/portable.html
2658
2659 Reporting Bugs:
2660 ===============
2661
2662 General bugs may be reported to [email protected]
2663
2664 Portable bugs may be filed at https://github.com/rpki-client/rpki-client…
2665
2666 We welcome feedback and improvements from the broader community.
2667 Thanks to all of the contributors who helped make this release
2668 possible.
2669 </content>
2670 <tags>openbsd</tags>
2671 <author>
2672 <name>[email protected]</name>
2673 </author>
2674 </entry>
2675 </feed>
You are viewing proxied material from codemadness.org. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.