Language Selection

English French German Italian Portuguese Spanish

BSD

FreeBSD Finally Gets Mitigated For Spectre & Meltdown (and Hugs)

Filed under
BSD
  • FreeBSD Finally Gets Mitigated For Spectre & Meltdown

    Landing in FreeBSD today was the mitigation work for the Meltdown and Spectre CPU vulnerabilities.

    It's taken a few more weeks longer than most of the Linux distributions to be re-worked for Spectre/Meltdown mitigation as well as DragonFlyBSD, but with FreeBSD Revision 329462 it appears their initial fixes are in place.

    There is Meltdown mitigation for Intel CPUs via a KPTI implementation similar to Linux, the Kernel Page Table Isolation. There is also a PCID (Process Context Identifier) optimization for Intel Westmere CPUs and newer, just as was also done on Linux.

  • FreeBSD outlaws virtual hugs
  • AsiaBSDCon 2018 Conference Programme

Linux, Linux Foundation, Graphics, and BSD

Filed under
Linux
BSD

OPNsense 18.1

Filed under
Security
BSD
  • OPNsense 18.1 released

    For more than 3 years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.

    We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this release, nicknamed "Groovy Gecko". Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below.

  • OPNsense 18.1 BSD Firewall/Network OS Released

    After hitting the RC phase a few weeks ago, OPNsense 18.1 has been officially released as the latest version of this pfSense-forked network/router-oriented BSD operating system.

    OPNsense 18.1 is based on FreeBSD 11.1 while pulling in the HardenedBSD security changes. OPNsense 18.1 reworks its firewall NAT rules, PHP 7.1 and jQuery 3 are powering the web interface, there is now OpenVPN multi-remote support for clients, IPv6 shared forwarding support, improvements for intrusion detection alerts, a rewritten firewall live log, reverse DNS support for insight reporting, and a variety of new plugins.

BSD: LLVM/Clang-Based AOCC and OpenBSD Foundation Fundraising Campaign

Filed under
BSD
  • AMD AOCC Compiler 1.1 Released For Zen CPUs

    AOCC 1.1 is the second public release of the AMD Optimizing C/C++ Compiler designed for Ryzen/Threadripper/EPYC processors.

    Back in May AMD released AOCC 1.0 as their optimized compiler stack for Ryzen CPUs. AOCC is the replacement to the company's older AMD Open64 compiler designed for older CPUs. With Open64 sadly being a relic now of the past, AOCC is based upon LLVM/Clang.

  • Our 2018 Fundraising Campaign

    The OpenBSD Foundation needs your help to achieve our fundraising goal of $300,000 for 2018.

    Reaching this goal will ensure the continued health of the projects we support, will enable us to help them do more, and will avoid the distraction of financial emergencies that could spell the end of the projects.

Are the BSDs dying? Some security researchers think so

Filed under
BSD

Struck by the small number of reported BSD kernel vulnerabilities compared to Linux, von Sprundel sat down last summer and reviewed BSD source code in his spare time. "How come there are only a handful of BSD security kernel bugs advisories released every year?" he wanted to know. Is it because the BSDs are so much more secure? Or is it because no one is looking?

von Sprundel says he easily found around 115 kernel bugs across the three BSDs, including 30 for FreeBSD, 25 for OpenBSD, and 60 for NetBSD. Many of these bugs he called "low-hanging fruit." He promptly reported all the bugs, but six months later, at the time of his talk, many remained unpatched.

"By and large, most security flaws in the Linux kernel don't have a long lifetime. They get found pretty fast," von Sprundel says. "On the BSD side, that isn't always true. I found a bunch of bugs that have been around a very long time." Many of them have been present in code for a decade or more.

Read more

Compilers and CLI: LLVM, GCC and Bash

Filed under
Development
GNU
BSD

Some FreeBSD Users Are Still Running Into Random Lock-Ups With Ryzen

Filed under
BSD

While Linux has been playing happily with Ryzen CPUs as long as you weren't affected by the performance marginality problem where you had to swap out for a newer CPU (and Threadripper and EPYC CPUs have been running splendid in all of my testing with not having any worries), it seems the BSDs (at least FreeBSD) are still having some quirks to address.

This week on the FreeBSD mailing list has been another thread about Ryzen issues on FreeBSD. Some users are still encountering random lockups that do not correspond to any apparent load/activity on the system.

Read more

The Top 10 Linux Distros You Never Heard About

Filed under
GNU
Linux
BSD

As I have mentioned in previous articles, the open-source community is littered with many distributions – some of which you might never get to hear about if you’re not connected to an affiliated party or happen to come across a reference ad.

Plus, it’s a new year and we have been dropping Top 10 (and sometimes higher) titles since it began so you shouldn’t be surprised that we are here with another one.

In case you missed it, we recently published an article on The Top 10 Linux Desktop Distros of 2017, and I thought it will be nice if we checked out a couple of distros that might not have made it to the limelight in 2017 but are still significant and will probably be of great use to our readers.

Read more

OPNsense® 18.1 Release Candidate 1

Filed under
Security
BSD

For more than 3 years now, OPNsense is driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing.

We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this first release candidate. Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below.

Meltdown and Spectre patches are currently being worked on in FreeBSD[1], but there is no reliable timeline. We will keep you up to date through the usual channels as more news become available. Hang in there!

Read more

BSD: LLVM and OpenBSD

Filed under
BSD
  • LLVM Clang Is Moving Closer To Full OpenMP 4.5 Support

    While it took LLVM's Clang C/C++ compiler initially a long time to supporting OpenMP, the code continues to mature in supporting the latest updates to this parallel programming specification.

    As it stands now Clang has full support for OpenMP 3.1 and only partial support for OpenMP 4.5, but they continue moving closer to supporting OMP 4.5 on CPUs and eventually to NVIDIA GPUs with their CUDA back-end.

  • SPIR-V Support For Upstream LLVM Is Back To Being Discussed

    Next month the Vulkan 1.0 API will turn two years old but a goal that has remained elusive to date has been getting SPIR-V -- the intermediate representation shared by Vulkan and OpenCL -- into upstream LLVM.

    The goal would be upstream support for going between SPIR-V and LLVM IR. There's been various projects working on this SPIR-V and LLVM IR to/from translation support, but nothing has been upstreamed yet in LLVM itself for easier maintenance and focusing on a concerted effort.

  • OpenBSD-current now has 'smtpctl spf walk'

     

    This feature is still in need of testing, so please grab a snapshot and test!  

Syndicate content

More in Tux Machines

Amazon Linux 2 - Who nicked my cheese?

So far, it's a relatively benign, easy introduction to a new operating system that blends the familiar and new in a timid package. Perhaps that's the goal, because a radical offering would right away scare everyone. Amazon Linux 2 is an appealing concept, as it gives users what Red Hat never quite did (yet) - A Fedora-like bleeding-edge tech with the stability and long-term support of the mainstay enterprise offering. But then, it also pulls a Debian/Ubuntu stunt by breaking ABI, so it will be cubicle to those who enjoying living la vida loco (in their cubicle or open-space prison). Having lived and breathed the large-scale HPC world for many years, I am quite piqued to see how this will evolve. Performance, stability and ease of use will be my primary concerns. Then, is it possible to hook up a remote virtual machine into the EC2 hive? That's another experiment, and I'd like to see if scaling and deployment works well over distributed networks. Either way, even if nothing comes out of it, Amazon Linux 2 is a nice start to a possibly great adventure. Or yet another offspring in the fragmented family we call Linux. Time will tell. Off you go. Cloud away. Read more

Updates From OpenIndiana and LibreOffice (Projects That Oracle Discarded)

  • Migration to GCC 6.4 as userland compiler
    Modulo some minor details, the transition of our userland to GCC 6 is complete.
  • OpenIndiana Has Upgraded To The GCC 6 Compiler
    The OpenSolaris/Illumos-based OpenIndiana operating system has finally moved past GCC 4.9 as its base user-land compiler and is now using GCC 6.4. This comes while GCC 8.1 should be officially released in the next few weeks and they are already targeting GCC 7.3.0 as their next illumos-gate compiler.
  • LibreOffice 6.0 Open-Source Office Suite Passes 1 Million Downloads Mark
    The Document Foundation announced recently that its LibreOffice 6.0 open-source and cross-platform office suite reached almost 1 million downloads since its release last month on January 31, 2018. That's terrific news for the Open Source and Free Software community and a major milestone for the acclaimed LibreOffice office suite, which tries to be a free alternative to proprietary solutions like Microsoft Office. The 1 million downloads mark was reached just two weeks after the release of LibreOffice 6.0, which is the biggest update ever of the open-source office suite adding numerous new features and enhancements over previous versions.

FreeBSD Finally Gets Mitigated For Spectre & Meltdown (and Hugs)

  • FreeBSD Finally Gets Mitigated For Spectre & Meltdown
    Landing in FreeBSD today was the mitigation work for the Meltdown and Spectre CPU vulnerabilities. It's taken a few more weeks longer than most of the Linux distributions to be re-worked for Spectre/Meltdown mitigation as well as DragonFlyBSD, but with FreeBSD Revision 329462 it appears their initial fixes are in place. There is Meltdown mitigation for Intel CPUs via a KPTI implementation similar to Linux, the Kernel Page Table Isolation. There is also a PCID (Process Context Identifier) optimization for Intel Westmere CPUs and newer, just as was also done on Linux.
  • FreeBSD outlaws virtual hugs
  • AsiaBSDCon 2018 Conference Programme

Linux: To recurse or not

Linux and recursion are on very good speaking terms. In fact, a number of Linux command recurse without ever being asked while others have to be coaxed with just the right option. When is recursion most helpful and how can you use it to make your tasks easier? Let’s run through some useful examples and see. Read more