#bsdinstall

[ready-jet-go]

Slashdot: FreeBSD 12 Released

FreeBSD 12 Released Published on December 12, 2018 at 10:25AM New submitter vivekgite writes: The 12th version of the FreeBSD has been released, bringing support for updated hardware. Some of the highlights include: OpenSSL has been updated to version 1.1.1a (LTS). Unbound has been updated to version 1.8.1, and DANE-TA has been enabled by default. OpenSSH has been updated to version 7.8p1. Additonal capsicum(4) support has been added to sshd(8). Clang, LLVM, LLD, LLDB, compiler-rt and libc++ has been updated to version 6.0.1. The vt(4) Terminus BSD Console font has been updated to version 4.46. The bsdinstall(8) utility now supports UEFI+GELI as an installation option. The VIMAGE kernel configuration option has been enabled by default. The NUMA option has been enabled by default in the amd64 GENERIC and MINIMAL kernel configurations. The netdump(4) driver has been added, providing a facility through which kernel crash dumps can be transmitted to a remote host after a system panic. The vt(4) driver has been updated with performance improvements, drawing text at rates ranging from 2- to 6-times faster. Various improvements to graphics support for current generation hardware. Support for capsicum(4) has been enabled on armv6 and armv7 by default. The UFS/FFS filesystem has been updated to consolidate TRIM/BIO_DELETE commands, reducing read/write requests due to fewer TRIM messages being sent simultaneously. The NFS version 4.1 server has been updated to include pNFS server support. The pf(4) packet filter is now usable within a jail(8) using vnet(9). The bhyve(8) utility has been updated to add NVMe device emulation. The bhyve(8) utility is now able to be run within a jail(8). Various Lua loader(8) improvements. KDE has been updated to version 5.12.

Read more of this story at Slashdot.

[baillieslf-blog]

全球最可靠开源防火墙pfSense升级：修补Wi-Fi漏洞

pfSense是一个基于FreeBSD、专为防火墙和路由器定制的开源系统，以可靠性著称，经常提供往往只存在于昂贵商业防火墙才具有的高级特性。

针对近日曝出的WPA2 KRACK Wi-Fi漏洞，Netgate宣布，pfSense 2.4.1最新版已经发布，在此前pfSense 2.4.0的基础上打补丁，完全封堵了这一漏洞，同时还修复了其他一些已知问题。

pfSense 2.4.0作为一次重大更新，加入了大量新特性，包括基于bsdinstall的全新安装程序、冉ㄖСZFS、支持UEFI设备、支持GPT/BIOS等多种分区表格式、支持Netgate ARM设备、支持OpenVPN 2.4。

在此之前，FreeBSD等基于Linux的发行版本都已经陆续修复了WPA2漏洞，Windows、iOS、macOS也已经免疫，Android则还在艰难推进之中。

[worrdev]

bsdinstall(8) troubles

rust xattr

I made a blog post a few days ago on my main blog about extended attributes. This reminded me that my rust patch is still in limbo, so I pinged the author, and he was nice enough to take a look and provide fantastic feedback.

https://github.com/Stebalien/xattr/pull/3/

bsdinstall

After working on fixing up my patches, I was in the mood to try and figure out why loading echo.ko was causing kernel panics. I started setting up a new FreeBSD instance in bhyve(8) to figure this one out.

Installing FreeBSD proved to be a problem.

This is the first time that I’m using the new bsdinstall over sysinstall, and I had a few problems actually make it to a successfully installed FreeBSD system.

The major issue that I encountered is that some components would either drop me back to the beginning of the installer, or drop me back to the beginning of that component. For example, partedit errors would drop me back to partedit, and zfsboot errors would restart the installation.

What made going through the installation over and over again extra frustrating, was that netconfig_ipv4 would error if you tried to configure an interface with a running dhclient. I submitted a report and simple patch to kill any dhclients if you’re configuring your installation interface to use dhcp.

Another bug that I found while proceeding through the install was that modifying a ZFS partition and just setting the mountpoint would cause partedit to segfault. Bug report and patch.

While I was looking through all this, I happened to find a potential issue that would hang the installer. When writing the bootcode to disk, partedit reads the file in a loop without checking for read(2) errors. If read(2) fails once for whatever reason, this will hang this installer, as that loop will never terminate. There was also an unchecked malloc(3) that took the result of an unchecked lseek(2) as well. I replaced all of that with an mmap(2)..