Connexion
The FreeBSD Release Engineering Team is announcing the availability of FreeBSD version 13.2-RELEASE on 11/April/2023. It is the third release of the stable/13 branches. I updated my FreeBSD version 13.1 to 13.2 using the CLI over an ssh-based session. Here are my quick notes.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade FreeBSD 13.1 to 13.2 release appeared first on nixCraft.
FreeBSD default comes with a drill command to see information about DNS. The userspace tools for FreeBSD come from the latest version of the BIND-TOOLs package. It includes delv, dig, host, nslookup, and nsupdate. Let us see how to search and install dig, delv, and host commands on FreeBSD using the pkg command.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install dig, delv, host commands on FreeBSD appeared first on nixCraft.
Today, I will share one helpful tip that allows FreeBSD developers and sysadmin to make a backup list of installed all FreeBSD packages and then restore it. Hence, this is useful for disaster recovery (DR) or simply rebuilding a new server. It will save you time.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to backup & restore a list of installed FreeBSD packages appeared first on nixCraft.
Like every other solo developer and sysadmin, I do stuff using ssh. Some stuff is automated using scripts, and others require ssh login. For example, one of my scripts logs into my Linux and FreeBSD server using public ssh keys and does a particular type of work for me. I have a dedicated user account for that purpose called autovivek on Raspberry PI 4 for Ansible and custom script automation. Here is how it works:
{rpi4:~}$ ssh autovivek@192.168.2.17 /path/to/taks1
In other cases, it sends scripts and then executes them on the remote server named 192.168.2.17. Sounds good, right? So, when I need to make backups and other tasks, I lock down the autovivek user account on the server so that it will not modify data on disks. For example, here is how to lock down a user account:
{linux-server:~}$ sudo usermod -L -e 1 autovivek
## OR ##
{freebsd-server:~}$ sudo pw lock -n autovivek
However, I soon discovered that a user named autovivek can still log into the server and make changes despite being locked down on both Linux and FreeBSD servers.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post A cautionary tale about locking Linux & FreeBSD user accounts appeared first on nixCraft.
Another day I wrote about setting up ssh public key password-less authentication for FreeBSD server version 12/13 with an optional 2FA hardware USB key (FIDO 2) for additional protection. However, FIDO2 and key type ecdsa-sk and ed25519-sk are not supported by the OpenSSH client and server version shipped with FreeBSD 12 or 13. But, fear not, we can safely upgrade the OpenSSH version using ports collection. This page explains how to install and configure the latest portable version of the OpenSSH client and server on FreeBSD 13.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install and upgrade OpenSSH server on FreeBSD appeared first on nixCraft.
SSH is an essential tool for login into the FreeBSD Unix box. Without SSH, you cannot manage a remote server easily. Furthermore, SSH means secure shell, and it is a replacement for insecure protocols such as telnet. This page explains how to configure and set up ssh key-based password-less authentication on a FreeBSD server or workstation.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to set up ssh public key password-less on FreeBSD appeared first on nixCraft.
This page explains setting up a static IP address on the FreeBSD Unix system using the command-line options.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to configure static IP Address on FreeBSD appeared first on nixCraft.
Most of us use love and use the jq command. It works on Linux or Unix-like systems to extract data from JSON documents. Recently I found htmlq, which is like jq and written in Rust lang. Imagine being able to sed or grep for HTML data. We can search, slice, and filter HTML data with htmlq. Let us see how to install and use this handy tool on Linux or Unix and play with HTML data.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to use htmlq to extract content from HTML files on Linux, macOS or FreeBSD appeared first on nixCraft.
All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. For example, a memory corruption bug exists in the bhyve hypervisor. Another overwrite the stack of ggatec and potentially execute arbitrary code. There are two issues fixed for OpenSSL in this security advisory too. Let us see what and how to fix these security vulnerabilities on FreeBSD.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post FreeBSD bhyve, OpenSSL, GEOM & libfetch security fixes released appeared first on nixCraft.
When working with FreeBSD and ZFS, you will run into ZFS cache size problems. Not all FreeBSD servers are file servers. Some servers act as backup servers. Others might run Linux and Windows VM where you want those guest VMs to manage their own caching. It would help if you had tons of RAM for ZFS, but you may not have that luxury in real life. This page explains how to set up ZFS arc size on FreeBSD to work with less RAM to avoid the computer running out of memory in the kernel.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to set up ZFS ARC size on FreeBSD appeared first on nixCraft.
Did you know? You can turn off the banner in Linux or Unix using a particular file. When you log in using ssh or other methods, you will find tons of information on the screen. Here is how my FreeBSD home server login looks:
Default motd with my hardware and other info
The first one is /etc/motd, and the second is the output of neofetch called from ~/.profile file. And my Ubuntu Linux box showing stuff too when I login using the ssh command:
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Quick Tip: Turn off the login banner in Linux or Unix .hushlogin file appeared first on nixCraft.
When we update FreeBSD from 12 to 13, we get an updated version of ZFS. FreeBSD 13 released with OpenZFS support with various performance boosts. Sometimes OS patching and minor FreeBSD upgrade can also offer an updated zpool version. In any case, we need to upgrade the ZFS storage pools version to get newer functionality and bug fixes. This page explains how to update the ZFS storage pools version on FreeBSD.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade ZFS storage pools version on FreeBSD appeared first on nixCraft.
Michael Lucas is a famous IT book author. Perhaps best know for FreeBSD, OpenBSD, and Unix book series. He worked as a system administrator for many years and has now become a full-time book writer. Lately, I did a quick Q and A with Michael about his journey as a professional book author and his daily workflow for writing books.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Interview with Michael Lucas *BSD, Unix, IT and other books author appeared first on nixCraft.
I need to download a large file and get the specified file using several connections to speed up downloads on FreeBSD. How do I install lftp and download files using FreeBSD?
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install lftp on FreeBSD using the CLI appeared first on nixCraft.
The FreeBSD project released FreeBSD version 13. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD. One can benefit greatly using an upgraded version of FreeBSD. Let us see what's new and quickly update FreeBSD 12 to 13 using the CLI.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post FreeBSD 13 released: Here is how to upgrade FreeBSD 12 to 13 appeared first on nixCraft.
Even if you do not use the curl command daily, the chances are high that you are still using curl and don't know. IoT and tons of other services on the Internet depend upon libcurl for network operations. Daniel Stenberg is a Swedish software developer, recipient of the Polhem Prize 2017, on cURL. Recently I did a quick Q and A with Daniel about starting the curl project and his daily workflow.
The post Interview with curl creator and Swedish software developer Daniel Stenberg appeared first on nixCraft.
All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. If the process is privileged, it may escape jail and gain full access to the FreeBSD system. Similarly, when using Xen, a malicious or buggy frontend driver may be able to cause resource leaks. Let us see what and how to fix these security vulnerabilities on FreeBSD.
The post FreeBSD jail, xen, and .pam_login_access security fixes released appeared first on nixCraft.
Bhyve (BSD hypervisor") is a free and opensource hypervisor for FreeBSD. We can use Bhyve to run Linux, Windows, and *BSD guest operating system as a virtual machine. Let us see how to install Linux VM using Bhyve on FreeBSD host operating system along with ZFS and bridged networking.
The post How to install Linux VM on FreeBSD using bhyve and ZFS appeared first on nixCraft.
ShellCheck is easy to use, free, and open-source static analysis tool that automatically finds bugs in your shell scripts. If you write shell scripts for automation or containers, you need this tool. Let us see how to install and use ShellCheck on the FreeBSD development Unix server.
The post How to install ShellCheck on FreeBSD – A shell script static analysis tool appeared first on nixCraft.
We use the df command to show how much disk space is free on mounted file systems in Linux, macOS, and Unix-like systems. We also have the du command to estimate file space usage. We now have another fancy and fantastic looking tool called duf to display statistics on free disk space in Unix, Linux, macOS, *BSD, Android, and Windows written in Golang.
The post duf – Disk Usage/Free Utility for Linux, BSD, macOS & Windows appeared first on nixCraft.
How do I install, set up and configure a FreeBSD 12 jail with VNET on ZFS? How can I create FreeBSD 12 VNET jail with /etc/jail.conf to run OpenVPN, Apache, Wireguard and other Internet-facing services securely on my BSD box?
The post How to set up FreeBSD 12 VNET jail with ZFS appeared first on nixCraft.
The last ten years in the computer and IT security world are crippled with so many vulnerabilities. We saw massive cloud computing adoption and end-users using mobile devices with high speed 4G LTE networks. A threat actor may have exploited such weakness in modern computers and networks. Let us look into top vulnerabilities and the attack surface in this decade (2010-2020) that affected Linux/Unix, macOS, IT, cloud-computing, and computers in general.
The post Significant vulnerabilities that crippled IT world this decade (2010-2020) appeared first on nixCraft.
FreeBSD is an open-source and free Unix-like operating system descended from the Berkeley Software Distribution (BSD). This quick tutorial explains how to download and prepare the USB stick/pen drive to install FreeBSD 12.2 to install FreeBSD using the target computer's USB port.
The post How to write FreeBSD image to USB disk for installation using dd command appeared first on nixCraft.
The bashtop is an impressive Linux resource monitor that shows usage and stats for processor, memory, disks, and network. However, it suffers from bash itself, and cross-platform support is a nightmare. Now we have the Python port of bashtop. We can use a resource monitor that shows usage and stats for CPU, RAM, SSD (hard disk), network, and processes information in a lovely format.
The post bpytop – Awesome Linux, macOS and FreeBSD resource monitor appeared first on nixCraft.
I am using the FreeBSD system. How do I install Speedtest-cli on a FreeBSD Unix system for checking the Internet speed?
The post How To Install Speedtest-cli On a FreeBSD To Check Internet Speed appeared first on nixCraft.
How do I integrate and configure Amazon/AWS SES with Postfix running on my FreeBSD Unix server?
The post FreeBSD configure AWS SES with Postfix MTA appeared first on nixCraft.
I brought eggs from the market, and it says best before 20 days from the date of packing. Say my egg box was packed on 29/July/2020. How do I add days to date using Linux CLI? I want to find out date 29/July/2020 + 20days using the CLI, and how do I do it?
The post How to add days to date and get new date on Linux appeared first on nixCraft.
I installed/set up a Wireguard VPN server on Debian 10 Linux box. How do I install, configure and set up a Wireguard client in a FreeBSD jail?
The post How to install a Wireguard VPN client in a FreeBSD jail appeared first on nixCraft.
When I install s3cmd package on my FreeBSD system and try to use the s3cmd command I get the following error:
ERROR: Test failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)
How do I fix this problem on FreeBSD Unix system?
The post ERROR: Test failed: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091) appeared first on nixCraft.
I have installed FreeBSD jail and set up an IP address. However, I am unable to ssh directly into my FreeBSD jail. How do I enable OpenSSH SSHD on the FreeBSD server?
The post How to enable SSHD on FreeBSD server / jail appeared first on nixCraft.
One of the essential tasks for developers and sysadmin is to get an alert notification about failed services or running out of disk space and other critical failures. Let us see how to send or push a direct message to a mobile device powered by Apple iOS or Google Android phone.
The post How to push/send message to iOS and Android from Linux CLI appeared first on nixCraft.
The cat (short for concatenate) command is one of the most frequently used flexible commands on Linux and Unix-like operating systems. Say hello to bat Linux command, which is a cat command written in Rust programming language. The bat command comes with syntax highlighting, git integration, and works as is a drop-in cat command replacement. Let us see how to install bat on Linux and Unix system for fun and profit.
The post bat Linux command – A cat clone with written in Rust appeared first on nixCraft.
My Nginx web server is behind a reverse proxy server. How do I restore the original and real IP address of my client/visitors when behind a reverse proxy server such as AWS Cloudfront, Fastly, Cloudflare CDN/WAF?
The post Nginx restore real IP address when behind a reverse proxy appeared first on nixCraft.
How do I forcefully renew the Letsencrypt certificate on an Ubuntu, Debian, CentOS, RHEL, Fedora, or FreeBSD Unix systems?
The post How to forcefully renew Let’s Encrypt certificate appeared first on nixCraft.
I need to remove the last character from a line and shell variable such as "${_allowed_ips}". For example, each line is as follows in my file:
foo,
bar,
demo,
I need output as follows:
foo
bar
demo.
How can I use sed to delete the last character?
The post How to sed remove last character from each line appeared first on nixCraft.
How do I see how many processes are running in Linux? How can count all running processes in Linux?
The post How do I count how many processes are running in Linux? appeared first on nixCraft.
The neofetch command like utility written in a bash shell. The main purpose of neofetch is to be used in screenshots to display other users what operating system or Linux distro you are using including theme, icons, hardware config and more. Now we have another tool called pfetch. It is a pretty system information tool written in POSIX sh. Let us see how to install and use pfetch Linux and Unix hardware information tool.
The post pfetch Linux and Unix hardware information tool appeared first on nixCraft.
I am a new FreeBSD system administrator. How do I add users on FreeBSD Unix operating systems using command line?
The post How to add users on FreeBSD using adduser or pw appeared first on nixCraft.
I am a new user of FreeBSD operating system. How do I install htop on FreeBSD using the pkg command?
The post How to install htop on FreeBSD appeared first on nixCraft.
I am a new FreeBSD developer and user. I have root access to my VM running in AWS cloud. How do I update packages and apply security upgrades on FreeBSD? What is the procedure for applying security updates on FreeBSD?
The post FreeBSD Applying Security Updates Using pkg/freebsd-update appeared first on nixCraft.
I recently switched from a Windows server 2016 to a FreeBSD Unix server. I need to check disk space on Unix command line. How do I find out disk space utilization information using the Unix command-line option?
The post How to check disk space on Unix servers appeared first on nixCraft.
How do I read my hard disk/SSD health using smartctl command on FreeBSD operating system? How can I hard drive health on FreeBSD and find out if my disk is dying?
The post How to check hard drive health on FreeBSD appeared first on nixCraft.
Can you explain bash exit status code? How do I set bash exit status in my Linux shell scripts?
The post Linux bash exit status and how to set exit status in bash appeared first on nixCraft.
Helios4 is ARM-based open source NAS SBC (Single-board computer) for Linux. This NAS (Network Attached Storage) comes with 4 SATA 3.0 port and comes with ECC memory. Let us see some details about the Helios4 Arm-Based Open Source NAS SBC and ongoing Kickstarter camping.
The post Helios4 Arm-Based Open Source NAS SBC For Linux/FreeBSD appeared first on nixCraft.
I configured Nginx server. However, it is sending the wrong content type. I need to force Nginx to send specific "Content-Type: text/xml; charset=UTF-8". How do I configure Nginx to override content type for given URL location?
The post How to override content type with Nginx web server appeared first on nixCraft.
I am a new to shell scripting. How do I check for NULL value in a Linux or Unix shell scripts?
The post Bash shell find out if a variable has NULL value OR not appeared first on nixCraft.
I installed GNU wget utility on FreeBSD as explained here. However, whenever I use the wget command to download stuff from the Internet, it says:
ERROR: cannot verify download.freebsd.org's certificate, issued by 'CN=Let\'s Encrypt Authority X3,O=Let\'s Encrypt,C=US':
Unable to locally verify the issuer's authority.
How do I fix this problem on FreeBSD 12?
The post FreeBSD wget cannot verify certificate, issued by Let’s Encrypt appeared first on nixCraft.
The FreeBSD project announces the availability of FreeBSD 12.0-RELEASE. It is the first release of the stable/12 branch. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD jails and more. One can benefit greatly using an upgraded version of FreeBSD.
The post FreeBSD 12 released: Here is how to upgrade FreeBSD 11 to 12 appeared first on nixCraft.
FreeBSD is a free and open source operating system. The NFS (Network File System) is a server and client application that turn FreeBSD into a file sharing server. Users can upload or update files on a remote NFS server. NFS is standard on NAS (network attached storage) devices or sharing data for web servers. A new bug found in NFS server code which could allow a remote attacker to crash the NFS server, resulting in a denial of service (DoS) attack. Another possibility is to execute arbitrary code on the server.
The post Multiple vulnerabilities in FreeBSD NFS server code appeared first on nixCraft.
Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi) 