Larvitz@burningboard.net

https://netzluege.netlify.app #humor #networking #ipv6 #verschwörung #netzwerk

New toy for FreeBSD folks who run Ansible: a become plugin for mdo(1), the mac_do(4) counterpart to sudo/doas. The kernel decides whether the credential transition is allowed, so there is no password, no TTY, no doas.conf, and pipelining just works. Single file, BSD 2-Clause, tested against 15.1-RELEASE. https://github.com/chofstede/ansible-become-mdo Feedback welcome, especially from anyone already using mac_do in production. #FreeBSD #Ansible #RunBSD #DevOps #Automation

Post #4441259

Still one of the best explanations about SELinux, that I know: https://github.com/mairin/selinux-coloring-book/blob/master/PDF/en/selinux-coloring-book_A4-Stapled.pdf #linux #selinux #learning

Post #4382257

A bug in my Ansible connection plugin needed a real FreeBSD jail to reproduce. So I put three of them on an idle 512 MB free-tier VPS. With pkgbase, the base userland is just 33 MB. And persistent jails use zero idle processes. Here’s the build, the regression test, and the two sharp edges that cost me twenty minutes: https://blog.hofstede.it/three-test-jails-on-a-512-mb-free-tier-vps/ #FreeBSD #Ansible #pkgbase #SysAdmin #Devops

Post #4360789

Ansible is easy to install. A sane, reproducible development environment takes more thought. My downstream-first setup uses RHEL 10.2, Podman, VS Code Dev Containers, and Red Hat-packaged Ansible Development Tools, while keeping the boundaries between upstream projects, downstream products, development containers, and production Execution Environments explicit. https://blog.hofstede.it/sane-development-environments-for-ansible-automation-code/ #Ansible #RHEL #Podman #devop #linux

Post #4249239

AS201379, part 5: joined EVIX (an IXP whose fabric is VXLAN tunnels, so no port and no new machine), got IPv4 onto an IPv6-only network, and cleaned up four routers' worth of config drift. Fourteen BGP sessions, all FreeBSD, all still fitting on one Grafana screen. https://blog.hofstede.it/running-your-own-as-an-ixp-over-vxlan-ipv4-on-the-overlay-and-a-config-spring-clean/ #FreeBSD #BGP #IPv6 #Networking

Post #4247754

I really don’t need any more peers for my AS201379! (Okay, maybe a few more...) Started back in December 2025, and now this "little" infrastructure is running: 14 individual eBGP sessions 3 Internet Exchanges Multiple transit providers 110+ direct peers All 100% IPv6 (2a06:9801:1c::/48) because legacy IP belongs in the last century. Powered entirely by FreeBSD :freebsd: 4 routers on 15.1-RELEASE running FRR and PF. #BGP #IPv6 #FreeBSD #Routing #Networking #sysadmin

Post #4142052

From the engine room: Today, I updated our entire Mastodon infrastructure for burningboard.net to FreeBSD 15.1-RELEASE-p1 :freebsd: and applied all quarterly package updates. This included the Mastodon App-Server, the opensearch cluster and the Grafana monitoring stack. Also applied the Mastodon 4.6.4 update and did some cleanup (postgresql repack, removal of orphaned media files, search index rebuild, etc). All looking perfectly stable and healthy: https://status.burningboard.net :-) #masto...

Post #4116395

@slowclap@social.smplfi.com "Huge" .. It's roughly of 200GB of ripped DVDs 😂

Post #4112095

I was ill last week and discovered something uncomfortable: a huge Jellyfin library isn't entertainment, it's homework. Every time I opened it, it asked "what do you want?" and I just scrolled. So I built a TV station instead. ErsatzTV turns a media library into real linear channels with schedules and logos. It ships for Linux, Windows and macOS. My server runs FreeBSD. Turns out the entire porting effort was one conditional. The code asked "is this Linux?" when it...

Post #4073138

My digital sovereignty stack in 2026: Laptop OS: Linux (Fedora 44) :fedora: Server OS: FreeBSD 15.1 :freebsd: Phone: Android 17 :android: E-Mail: Self hosted dovecot/opensmtpd server File storage/sync: Nextcloud (Selfhosted) Contacts/Calendar: DAVx5 (Nextcloud backend) Camera Roll/Photos: Immich (selfhosted) Document storage: Paperless NGX (selfhosted) Bookmark storage: Kollect (my own self-developed and self-hosted app) Browser: Vivaldi (Linux, Android) :vivaldi: Mail-Client: Thunderbird...

Post #4069082

Had some unused keyboard body laying arround here for a while. A Keychron K8 pro, that I used in the past. Did build a fresh keyboard out of it today: - Body: Keychrom K8 Pro ANSI - Switches: Akko Rosewood (Linear, lubed) - Keycaps: Cheap double-shot PBT set "Botanical" For a budget build, it's super comfortable to type on and the plastic body of the K8-Pro with the Rosewood switches gives it a nice deep "thocky" sound profile while overall being rather quiet. Definit...

Post #4061180

I wanted to build Kollect for Android without filling Fedora 44 with Java, Gradle, Android SDKs, emulators, and assorted development debris. So I put the entire mobile toolchain in an Ubuntu Distrobox. It builds APKs, deploys them via wireless ADB, and even runs the Android emulator. The app also enriches links locally using Gemini Nano through AICore on my Pixel 10 Pro. Private, fast, and effectively free. https://blog.hofstede.it/android-development-on-fedora-44-without-installing-an-androi...

Post #4060184

I've been using my iFixit precision bit kit for years to crack open phones, laptops, and random electronics that had no business being that hard to open. Today, completely out of nowhere, it finally clicked. The kits come in sets of 16, 32, or 64 bits. Not 15. Not 20. Not some "nice round number for humans." 16, 32, 64. As in literal computer bits. Well played, iFixit. Well played. 😅 #NerdHumor #iFixit #RightToRepair #TechJokes #ITookTooLongToGetThis

Post #4059783

Finally got around to helping a friend with a phone repair today: shattered back glass + new battery on an iPhone 15 Pro. Waterproofing + glue everywhere made getting inside an absolute nightmare. Removing the shattered back glass was the worst part. Tiny shards everywhere, so much tedious, careful work. 😩 Job's done, phone's fixed, but that was NOT a fun repair. Seriously though, why do manufacturers keep using brittle glass for the backs of $1000+ phones? Sturdy plastic would surviv...

Post #4058375

Carsten Linnemann wird Gesundheitsminister. Ausgerechnet der Mann, der seit Jahren vor allem dadurch auffällt, nach unten zu treten: Gegen Bürgergeldempfänger, gegen Geflüchtete und gegen die Cannabis-Legalisierungmit mit einer Politik, die soziale Probleme regelmäßig zu individuellen Fehlleistungen erklärt. Wer Gesundheit vor allem durch die Brille von Leistung, Disziplin und Sparzwang betrachtet, ist für dieses Amt keine gute Nachricht. Gesundheitspolitik braucht Solidarität, nicht neoliberal...

Post #3920736

New on the blog: my Home Assistant setup on FreeBSD. Home Assistant OS runs in a bhyve VM, but bhyve has no USB passthrough, so Zigbee2MQTT and Mosquitto live in a VNET jail with the ConBee II. Homematic comes in via a CCU3, and three IKEA Matter-over-Thread devices use my Nanoleaf Shapes controller as their border router. Three radio ecosystems, 474 entities, one dashboard. https://blog.hofstede.it/my-home-assistant-setup-bhyve-freebsd-jails-zigbee-homematic-and-matter-over-thread/ #FreeB...

Post #3737267

Little bit of urban photography from my neighborhood. #photography #urbamism #neighborhood

Post #3713747

New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy. A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data. The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries. https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/ #FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

Post #3645402

#pastpuzzle 507 🟩🟩🟥🟥 (-11) 🟩🟩🟥🟥 (+11) 🟩🟩🟩🟥 (+5) 🟩🟩🟩🟥 (+4) x/4 🟥 https://www.pastpuzzle.de

Post #3644610

CDU "Mittelstandsunion" fordert Ende der Brandmauer zur AchFickDich, hat sogar einen Antrag dazu geschrieben. Haben die wieder eine Lieferung Lack erhalten? Mit Faschisten redet man nicht, da kann man nur verlieren. Der allgemeine Diskurs wurde bereits viel zu weit nach rechts verschoben. https://www.focus.de/politik/deutschland/mittelstandsunion-brandenburg-stimmt-ab-erstmals-fordert-ein-cdu-antrag-das-ende-der-brandmauer_21c2a87e-bc9d-4124-80e3-5bfbe7750254.html #fckafd #niewieder...

Post #3624507

#pastpuzzle 506 🟩🟩🟩🟩 (0) ▪️▪️▪️▪️ ▪️▪️▪️▪️ ▪️▪️▪️▪️ 1/4 🥇 https://www.pastpuzzle.de #pastpuzzle #luck #lucky #geraten

Post #3623369

AU ab Tag 1? Klar, Praxen sind ja bekanntlich leer und Ärzte haben zeit für sowas. Telefonische Krankschreibung weg? Super, dann holt man sich zur Erkältung im Wartezimmer noch die Grippe dazu. Minijobs stärker besteuern, Handwerkerbonus kürzen, Renten „reformieren“, Pflege und Gesundheit weiter kaputtsparen... Und als Trost eine Steuersenkung, die kaum über das verfassungsrechtlich Nötigste hinausgeht. Dazu Wohnraum-Vergesellschaftung blockieren, nachdem Berlin Demokratie gewagt hat. Das ist...

Post #3608166

My Roguelike game starts feeling better and better :-) So much fun building it out further and further every weekend 🙂 Implemented better save-state handling, combat machenics including weapons and armor, cavernous levels and much more this weekend. YAY. #gamedev #roguelike #rust #development

Post #3600899

New on the blog: patching FreeBSD machines inside DN42 without giving them a clearnet route. A small dual-homed VM lazily caches pkg.freebsd.org, update.freebsd.org and ftp.freebsd.org with nginx proxy_store, chases CDN redirects server-side, and serves it all over IPv6 into the mesh. pf default-denies both directions, and clients keep verifying signatures against the official FreeBSD keys. It is also a public DN42 service: point freebsd-update, pkg or bastille at bsdmirror.chofstede.dn42 and...

Post #3516668

FreeBSD 15.1-RELEASE is out. In my new guide, I walk through the official upgrade paths: • distribution sets with freebsd-update • packaged base with pkg • boot-environment rollback • .pkgnew merges • boot-loader checks for UEFI/BIOS https://blog.hofstede.it/upgrading-freebsd-150-release-to-151-release-the-official-paths/ #FreeBSD #BSD #Sysadmin #ZFS

Post #3452055

Wie gut funktioniert #KI im Support wirklich? Eine Bekannte aus dem eCommerce-Mittelstand hat gerade den perfekten Usecase geliefert. Nach der Einführung einer 80.000€ teuren custom-trainierten KI ür den Support-Chat fiel ihr Net-Promoter-Score von guten 8 auf magere 3. Die Quote der direkt gelösten Fälle (1. Kontakt) brach von 64% auf unter 25% ein. Das Management so: "Lass mal 1/3 der menschlichen Agents entlassen!" Der Rest der Abteilung darf nun per Anordnung 5 Überstunden pro W...

Post #3434673

1.000.000.000 € So viel hat Vonovia gerade als Dividende an seine Aktionär:innen ausgeschüttet. Leistungsloses Einkommen, direkt aus den Taschen der Mieter:innen gepresst. Um diese absurde Summe mal ins Verhältnis zu setzen: Das entspricht... ~ 1,25 Millionen durchschnittlichen Warmmieten (800 €) ~ 400.000 durchschnittlichen Netto-Monatsgehältern (2.500 €) ~ Knapp 1,8 Millionen monatlichen Bürgergeld/ALG2-Sätzen (563 €) Während in Talkshows jeden Tag nach unten getreten und gegen Arme geh...

Post #3428953

Had the problem on my DN42 (a distributed overlay network, that is sperated from the internet), that my FreeBSD servers couldn't update without hacky firewall tricks (NAT etc.) Did now finally solve that cleanly with a single caching Nginx server that is dual-homed (internet+dn42) and that enables me to use freebsd-update AND pkg from systems that only have DN42 connectivity :-) Also add that to the DN42 wiki and offer others to use it as infrastructure! bsdmirror.chofstede.dn42 (IPv6-on...

Post #3409129

Currently working on some (old school) ASCII dungeon crawler in the style of older roguelikes. Not yet sure, where this will lead, but I have lots of fun creating it :-) #roguelike #gamedev #rust #development #gaming

Larvitz :fedora:

Posts