All Jupiter Broadcasting Shows

Shell text processing, data rebalancing on ZFS mirrors, Add Security Headers with OpenBSD relayd, ZFS filesystem hierarchy in ZFS pools, speeding up ZSH, How Unix pipes work, grow ZFS pools over time, the real reason ifconfig on Linux is deprecated, clear your terminal in style, and more. Headlines Text processing in the shell This article is part of a self-published book project by Balthazar Rouberol and Etienne Brodu, ex-roommates, friends and colleagues, aiming at empowering the up and coming generation of developers. We currently are hard at work on it! One of the things that makes the shell an invaluable tool is the amount of available text processing commands, and the ability to easily pipe them into each other to build complex text processing workflows. These commands can make it trivial to perform text and data analysis, convert data between different formats, filter lines, etc. When working with text data, the philosophy is to break any complex problem you have into a set of smaller ones, and to solve each of them with a specialized tool. Rebalancing data on ZFS mirrors One of the questions that comes up time and time again about ZFS is “how can I migrate my data to a pool on a few of my disks, then add the rest of the disks afterward?” If you just want to get the data moved and don’t care about balance, you can just copy the data over, then add the new disks and be done with it. But, it won’t be distributed evenly over the vdevs in your pool. Don’t fret, though, it’s actually pretty easy to rebalance mirrors. In the following example, we’ll assume you’ve got four disks in a RAID array on an old machine, and two disks available to copy the data to in the short term. News Roundup Using OpenBSD relayd to Add Security Headers I am a huge fan of OpenBSD’s built-in httpd server as it is simple, secure, and quite performant. With the modern push of the large search providers pushing secure websites, it is now important to add security headers to your website or risk having the search results for your website downgraded. Fortunately, it is very easy to do this when you combine httpd with relayd. While relayd is principally designed for layer 3 redirections and layer 7 relays, it just so happens that it makes a handy tool for adding the recommended security headers. My website automatically redirects users from http to https and this gets achieved using a simple redirection in /etc/httpd.conf So if you have a configuration similar to mine, then you will still want to have httpd listen on the egress interface on port 80. The key thing to change here is to have httpd listen on 127.0.0.1 on port 443. How we set up our ZFS filesystem hierarchy in our ZFS pools Our long standing practice here, predating even the first generation of our ZFS fileservers, is that we have two main sorts of filesystems, home directories (homedir filesystems) and what we call 'work directory' (workdir) filesystems. Homedir filesystems are called /h/NNN (for some NNN) and workdir filesystems are called /w/NNN; the NNN is unique across all of the different sorts of filesystems. Users are encouraged to put as much stuff as possible in workdirs and can have as many of them as they want, which mattered a lot more in the days when we used Solaris DiskSuite and had fixed-sized filesystems. Speeding up ZSH https://web.archive.org/web/20200315184849/https://blog.jonlu.ca/posts/speeding-up-zsh I was opening multiple shells for an unrelated project today and noticed how abysmal my shell load speed was. After the initial load it was relatively fast, but the actual shell start up was noticeably slow. I timed it with time and these were the results. In the future I hope to actually recompile zsh with additional profiling techniques and debug information - keeping an internal timer and having a flag output current time for each command in a tree fashion would make building heat maps really easy. How do Unix Pipes work Pipes are cool! We saw how handy they are in a previous blog post. Let’s look at a typical way to use the pipe operator. We have some output, and we want to look at the first lines of the output. Let’s download The Brothers Karamazov by Fyodor Dostoevsky, a fairly long novel. What we do to enable us to grow our ZFS pools over time In my entry on why ZFS isn't good at growing and reshaping pools, I mentioned that we go to quite some lengths in our ZFS environment to be able to incrementally expand our pools. Today I want to put together all of the pieces of that in one place to discuss what those lengths are. Our big constraint is that not only do we need to add space to pools over time, but we have a fairly large number of pools and which pools will have space added to them is unpredictable. We need a solution to pool expansion that leaves us with as much flexibility as possible for as long as possible. This pretty much requires being able to expand pools in relatively small increments of space. Linux maintains bugs: The real reason ifconfig on Linux is deprecated In my third installment of FreeBSD vs Linux, I will discuss underlying reasons for why Linux moved away from ifconfig(8) to ip(8). In the past, when people said, “Linux is a kernel, not an operating system”, I knew that was true but I always thought it was a rather pedantic criticism. Of course no one runs just the Linux kernel, you run a distribution of Linux. But after reviewing userland code, I understand the significant drawbacks to developing “just a kernel” in isolation from the rest of the system. Clear Your Terminal in Style if you’re someone like me who habitually clears their terminal, sometimes you want a little excitement in your life. Here is a way to do just that. This post revolves around the idea of giving a command a percent chance of running. While the topic at hand is not serious, this simple technique has potential in your scripts. Feedback/Questions Guy - AMD GPU Help MLShroyer13 - VLANs and Jails Master One - ZFS Suspend/resume Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv Your browser does not support the HTML5 video tag.

Ell tells us about her first ever experience with Windows 10 and how it compares with Linux. Plus Drew has been using a Wayland-based i3-like tiling window manager called Sway.Links:Windows 10Linux Unplugged 344: Our Week with WindowsSway — Sway is a tiling Wayland compositor and a drop-in replacement for the i3 window manager for X11.Choose Linux 12: Regolith

We discover a few simple Raspberry Pi tricks that unlock incredible performance and make us re-think the capabilities of Arm systems. Plus we celebrate Wireguard finally landing in Linux, catch up on feedback, and check out the new Manjaro laptop.Special Guests: Brent Gervais and Philip Muller.Links:Raspberry Pi Ubuntu Server 20.04 LTS (Focal Fossa) Daily Build WireGuard 1.0.0 for Linux 5.6 Released LUP Started Covering WireGuard in June of 2016 Linux 5.6 Ships With Broken Intel WiFi Driver After Network Security Fixes Go Awry Linux 5.6 Is The Most Exciting Kernel In Years With So Many New Features Btrfs Ready For Linux 5.6 With Async Discard For Better Efficiency + Performance EXT4 Gets Performance Work While XFS Gets 32-Bit Fixes For Linux 5.6 F2FS Experimental Compression Is Ready For Extending Flash Storage Life Multipath TCP Support Is Working Its Upstream - First Bits Landing With Linux 5.6 USB4 Support Lands In The Linux 5.6 Kernel Linux 5.6 Is The First Kernel For 32-Bit Systems Ready To Run Past Year 2038 VirtualBox Shared Folder Driver Seeks Inclusion In Linux 5.6 User Error 88 Know when we’re going to be live. Check out the calendar Keep the conversation going join us on Telegram Feedback: Arch to FreeBSD? Feedback: Pi4 Fixes Raspberry Pi 4 Rev 1.2 Fixes USB-C Power Issues, Improves SD Card Resilience Feedback: Pi4 Projects Raspberry Pi NAS SATA Adapter Stackable X828 2.5" SATA HDD/SSD Cluster – Geekworm Feedback: Downsides of JSON in the Shell LINUX Unplugged 341: Long Term Rolling JC: JSON in the Shell Long Term Rolling Feedback Feedback: Try NixOS already! Feedback: Timeshift Story and Question Armbian – Linux for ARM development boards

Joe, Alan, and Dan speculate about what the world will be like after the situation with Coronavirus is under control and life returns to something resembling normality.Special Guests: Alan Pope and Daniel Fore.

Mozilla puts your money where your mouse is and partners with Scroll to launch Firefox for a Better Web. We'll explain the details, and why it might just have a shot. Plus we try out Plasma Bigscreen, cover Telegram's really bad news, and much more.Links:Try our latest Test Pilot, Firefox for a Better Web, offering privacy and faster access to great content — Today we are launching a new Test Pilot initiative called Firefox Better Web with Scroll. Scroll partners with Firefox to build a better internetScroll - a better internetFirefox Better Web with ScrollFirefox is launching a new test pilot with Scroll to pay web publishersPlasma Bigscreen — Plasma BigScreen is a platform intended to use on smart TVs with big remote-friendly UI controls, and Voice activation. What technology did we use for it? Plasma (of course!) and Mycroft.Plasma Bigscreen HomepageGoogle Play’s malicious app problem infects 1.7 million more devices — Apps went undetected by Google and antivirus scanners.Google Enlists Outside Help to Clean Up Android's Malware Mess — The newly formed App Defense Alliance will try to solve a malware problem that has bedeviled the Play Store since inception.Chrome and Chrome OS release updates resume — Today we’re sharing an update as we’re now resuming releases with an adjusted scheduleMicrosoft goes into Windows lockdown for builds from May — Microsoft on Tuesday said it has decided to halt Windows preview releases in May due to health concerns arising from the COVID-19 coronavirus crisis.Federal court judge grants temporary injunction against Telegram — Judge sides with the SEC and says that Telegram's upcoming crypto is likely a security. It's barred from distributing Grams, the currency for its TON blockchain network, until trial.

Brent sits down with Aleix Pol, president of KDE e.V., KDE software developer, co-founder of Linux App Summit and Barcelona Free Software. We discuss his longstanding collaborations within the KDE community, developer sponsorships in open source business models, and more.Special Guest: Aleix Pol.Links:KDE e.V.KDE Education ProjectKDE - Notable Uses - WikipediaBlue Systems — International developers working on Free/Libre SoftwareNetrunner GNU/Linux — KDE Plasma on Debian StableLinux App SummitBarcelona Free SoftwareAkademy — KDE's annual world summitGUADEC — The GNOME ConferenceBrunch with Brent: Nuritzi SanchezBrunch with Brent: Heather EllsworthAleix Pol - @AleixPol on Twitter — aleixpol@kde.orgBrent Gervais - @brentgervais on Twitter

The details that make a great distro, things that make us wince, smug people online, great photos, imposter syndrome, and more. 00:00:27 Do you ever get imposter syndrome? 00:08:16 What's your unusual "fingernails on chalkboard" equivalent? 00:12:26 What gives a Linux distro that feeling of polish? 00:23:16 What's your favorite photograph? 00:28:12 How do you feel when someone chimes in online with "well, actually…"?

Fighting the Coronavirus with FreeBSD, Wireguard VPN Howto in OPNsense, NomadBSD 1.3.1 available, fresh GhostBSD 20.02, New FuryBSD XFCE and KDE images, pf-badhost 0.3 released, and more. Headlines Fighting the Coronavirus with FreeBSD Here is a quick HOWTO for those who want to provide some FreeBSD based compute resources to help finding vaccines. UPDATE 2020-03-22: 0mp@ made a port out of this, it is in “biology/linux-foldingathome”. Per default it will now pick up some SARS-CoV‑2 (COVID-19) related folding tasks. There are some more config options (e.g. how much of the system resources are used). Please refer to the official Folding@Home site for more information about that. Be also aware that there is a big rise in compute resources donated to Folding@Home, so the pool of available work units may be empty from time to time, but they are working on adding more work units. Be patient. How to configure the Wireguard VPN in OPNsense WireGuard is a modern designed VPN that uses the latest cryptography for stronger security, is very lightweight, and is relatively easy to set up (mostly). I say ‘mostly’ because I found setting up WireGuard in OPNsense to be more difficult than I anticipated. The basic setup of the WireGuard VPN itself was as easy as the authors claim on their website, but I came across a few gotcha's. The gotcha's occur with functionality that is beyond the scope of the WireGuard protocol so I cannot fault them for that. My greatest struggle was configuring WireGuard to function similarly to my OpenVPN server. I want the ability to connect remotely to my home network from my iPhone or iPad, tunnel all traffic through the VPN, have access to certain devices and services on my network, and have the VPN devices use my home's Internet connection. WireGuard behaves more like a SSH server than a typical VPN server. With WireGuard, devices which have shared their cryptographic keys with each other are able to connect via an encrypted tunnel (like a SSH server configured to use keys instead of passwords). The devices that are connecting to one another are referred to as “peer” devices. When the peer device is an OPNsense router with WireGuard installed, for instance, it can be configured to allow access to various resources on your network. It becomes a tunnel into your network similar to OpenVPN (with the appropriate firewall rules enabled). I will refer to the WireGuard installation on OPNsense as the server rather than a “peer” to make it more clear which device I am configuring unless I am describing the user interface because that is the terminology used interchangeably by WireGuard. The documentation I found on WireGuard in OPNsense is straightforward and relatively easy to understand, but I had to wrestle with it for a little while to gain a better understanding on how it should be configured. I believe it was partially due to differing end goals – I was trying to achieve something a little different than the authors of other wiki/blog/forum posts. Piecing together various sources of information, I finally ended up with a configuration that met the goals stated above. News Roundup NomadBSD 1.3.1 NomadBSD 1.3.1 has recently been made available. NomadBSD is a lightweight and portable FreeBSD distribution, designed to run on live on a USB flash drive, allowing you to plug, test, and play on different hardware. They have also started a forum as of yesterday, where you can ask questions and mingle with the NomadBSD community. Notable changes in 1.3.1 are base system upgraded to FreeBSD 12.1-p2. automatic network interface setup improved, image size increased to over 4GB, Thunderbird, Zeroconf, and some more listed below. GhostBSD 20.02 Eric Turgeon, main developer of GhostBSD, has announced version 20.02 of the FreeBSD based operating system. Notable changes are ZFS partition into the custom partition editor installer, allowing you to install alongside with Windows, Linux, or macOS. Other changes are force upgrade all packages on system upgrade, improved update station, and powerd by default for laptop battery performance. New FuryBSD XFCE and KDE images This new release is now based on FreeBSD 12.1 with the latest FreeBSD quarterly packages. This brings XFCE up to 4.14, and KDE up to 5.17. In addition to updates this new ISO mostly addresses community bugs, community enhancement requests, and community pull requests. Due to the overwhelming amount of reports with GitHub hosting all new releases are now being pushed to SourceForge only for the time being. Previous releases will still be kept for archive purposes. pf-badhost 0.3 Released pf-badhost is a simple, easy to use badhost blocker that uses the power of the pf firewall to block many of the internet's biggest irritants. Annoyances such as SSH and SMTP bruteforcers are largely eliminated. Shodan scans and bots looking for webservers to abuse are stopped dead in their tracks. When used to filter outbound traffic, pf-badhost blocks many seedy, spooky malware containing and/or compromised webhosts. Beastie Bits DragonFly i915 drm update CShell is punk rock The most surprising Unix programs Feedback/Questions Master One - Torn between OpenBSD and FreeBSD Brad - Follow up to Linus ZFS story Filipe Carvalho - Call for Portuguese BSD User Groups Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv Your browser does not support the HTML5 video tag.

We have a neat self-hosted home inventory management system for preppers of any type, plus Chris' simple Home Assistant trick and Alex's valiant battle with the WebSockets daemon of the reverse proxies. Also - we answer listener questions, and share updates.Links:Grocy — ERP beyond your fridge - grocy is a web-based self-hosted groceries & household management solution for your homeHome Assistant Community Add-on: GrocyHome Assistant External Reverse Proxy Setup with nginx — I was running into an issue for a while tonight where I could get Home Assistant itself working just fine but any add-ons that used web sockets wouldn't load properly. Let's Encrypt, Nginx & Reverse Proxy Starter GuidePicture Elements Card - Home Assistant — The Picture Elements card is one of the most versatile types of cards.Screenshot of Chris' HA Watchful EyeGenmon — Generac Generator Monitoring using a Raspberry Pi and WiFiSalt-Level — Checks level of salt in water softner brine tankChrisLAS - Chris W. Fisher — Check out the ChrisLAS Cast

We debate the dangers and advantages of one-click deployments. Then Dan from elementary OS shares an AppCenter for Everyone update. Plus a big batch of feedback that kicks off some wide-ranging discussions.Special Guests: Daniel Fore and Neal Gompa.Links:FOSS Responders — COVID-19 is impacting the open source industry in many ways. If you or your community has been impacted, please let us knowSeems that NVIDIA silently axed their GTC talk about Nouveau? Update: NVIDIA GTC 2020 Announcements Postponed EntirelyLemur Pro - System76 Brunch with Brent: Stuart Langridge Know when we’re going to be live. Check out the calendar Keep the conversation going join us on Telegram FOSS Talk Live 2020 has been cancelled. — It seems very unlikely that London will be functioning by June so I have made this difficult call. I'm very sorry to anyone who has made travel and accommodation arrangements but I trust that everyone will understand why this had to be done.TXLF 2020 Rescheduled — Given the recommendations by public health officials, we have decided to not have Texas Linux Fest on May 2020 at the Palmer Events Center in Austin, TX. We are currently investigating opportunities to bring parts of Texas Linux Fest online.Unfilter is Back TurnKey GNU/Linux — a free Debian based library of system images that pre-integrates and polishes the best free software components into secure, easy to use solutions. Sandstorm — an open source project built by a community of volunteers with the goal of making it really easy to run open source web applications Bitnami Stack YunoHost — easily manage a server for your friends, association or enterprise. Dedicated Platform Package Manager — an easy way to install and manage server applications.Home Assistant Add-ons - Home Assistant Feedback: Backup software tips?Feedback: mac Apps and Little Snitch Little Snitch and the Deprecation of Kernel ExtensionsFeedback: Life at Microsoft Feedback: Mint Success Feedback: Mastodon Feedback: The Windows Burden