OpenBSD 7.3 - Diskusage

New Proposal for 7.3 there is an request for at least 1.1GB free Storage at the /usr Partition when upgrading your systeme with sysupgrade. so, i have to adapt my settings a bit for new vm’s with at least 25GB Storage. Example with 20GB a 4G / a 1G swap a 1G /tmp a 4G /var a 6G /usr a * /home (ca. 4 GB) Example with 25GB (Vultr) a 4G / a 2G swap a 2G /tmp a 6G /var a 6G /usr a * /home (ca.

FreeBSD - Upgrade to 13.2

Upgrade FreeBSD 13.1 to 13.2 reading some NewFeeds, FreeBSD 13.2 got released … Let’s do an upgrade and see if it’s working fine. https://www.freebsd.org/releases/13.2R/installation/ https://www.freebsd.org/releases/13.2R/relnotes/ Patch it first freebsd-update fetch freebsd-update install reboot may not needed, but you have to boot anyway a few times … Fetch and Upgrade to 13.2 this needs some time ! depending on your internet speed, and specially to power and filesystem performance of your machine.

OpenBSD - NTopNG

NTOPNG with Self Signed Cert ntopng is a network traffic probe that provides 360° Network visibility, with its ability to gather traffic information from traffic mirrors, Netflow exporters, SNMP devices, Firewall logs, Intrusion Detection systems. package as root pkg_add ntopng Cert To use HTTPS on the built-in web server, create /etc/ssl/ntopng-cert.pem containing both the private key and certificate in the same file and make this readable by the _ntopng user. Use the -W flag to listen on HTTPS.

Debian 12

Debian 12 … is comming soon … if you can’t wait and wanna have a look at the latest RC, here is a small script for you! Source Debian 11.6 (Folder) Debian 11.6 (ISO) Debian 12.x Preview (Folder) Debian 12.x Preview (ISO) Links you may find some of my Posts about Debian useful Bootstrapping Debian Docker on Debian Posts about Debian Upgrade Script assuming you have Debian 11.x running cat << 'EOF' > /root/upgrade_to_v12.

OpenBSD - Terraform

Terraform OpenBSD & Vultr doas pkg_add git gmake go terraform cat << EOF # Go, $(date) export PATH=$PATH:$(go env GOPATH)/bin export GOPATH=$(go env GOPATH) EOF mkdir -p $GOPATH/src/github.com/vultr; cd $GOPATH/src/github.com/vultr git clone git@github.com:vultr/terraform-provider-vultr.git cd $GOPATH/src/github.com/vultr/terraform-provider-vultr gmake build main.tf cat << 'EOF' > main.tf terraform { required_providers { vultr = { source = "vultr/vultr" version = "2.12.1" } } } resource "vultr_instance" "web" { count = 2 plan = "vc2-1c-1gb" region = "fra" hostname = "web-${count.

Docker - Swarm

Setup Let’s assume we have 3 Nodes in a Docker Swarm Setup. Tick Trick Track Track is the Leader/Manager. All Machines runs Debian 12.0 (RC, as it is not yet released) Show Nodes docker node ls root@track:~# docker node ls ID HOSTNAME STATUS AVAILABILITY MANAGER STATUS ENGINE VERSION b2zvkc374v08q2rpocljhkg5n tick Ready Active 23.0.2 khom3cx05bxqxktjq1k5j16gk * track Ready Active Leader 23.0.2 lq53s6mhuzvqrehks0j68sr3e trick Ready Active 23.0.2 Create Simple Service Run a simple Docker service that uses an alpine-based filesystem, and isolates a ping to 8.

OpenBSD - Rclone

WebDAV Server need a little WebDAV Server ? Selfhosting your Password DB ? pkg pkg_add rclone mkdir -p /rclone/webdav run rclone serve webdav /your/root/folder --addr YOUR_PUBLIC_IP:PORT \ --key /etc/ssl/certs/your.private.key \ --cert /etc/ssl/certs/your.public.cer \ --user someuser \ --pass somepass Browser browse to https://your_public_ip:port user: someuser pass: somepass done ! htpasswd got some Users and wanna put them in the htaccess file ? be carefull as these users all share the same folder !

NextCloud - OpenBSD 7.3

NextCloud on OpenBSD 7.3 some install notes … Powerup Fresh VM Upgrade to 7.3 Beta (7.3 is not yet released) pkg_info nextcloud pkg_info -Q nextcloud -D snap nextcloud-23.0.12p0 nextcloud-24.0.10 nextcloud-25.0.4 nextcloudclient-3.7.4 adding 25.0.4 pkg_add -D snap nextcloud quirks-6.121 signed on 2023-03-21T18:57:42Z Ambiguous: choose package for nextcloud a 0: <None> 1: nextcloud-23.0.12p0 2: nextcloud-24.0.10 3: nextcloud-25.0.4 Your choice: 3 installed: php-8.1 lot of stuff got some readme ... nextcloud-25.0.4:gd-2.3.3: ok nextcloud-25.0.4:php-gd-8.1.16: ok nextcloud-25.

Ciphey

Ciphey Fully automated decryption/decoding/cracking tool using natural language processing & artificial intelligence, along with some common sense. Source: https://github.com/Ciphey/Ciphey Run in Docker encoding=$(echo -n "hello world" |base64); docker run -it --rm remnux/ciphey ${encoding} Result Possible plaintext: 'hello world' (y/N): y ╭─────────────────────────────────╮ │ Formats used: │ │ base64 │ │ utf8Plaintext: "hello world" │ ╰─────────────────────────────────╯ Supported Ciphers Ciphey currently supports 51 encryptions, encodings, compression methods, and hashes. https://github.com/Ciphey/Ciphey/wiki/Supported-Ciphers Any Comments ? sha256: a33eac04129d4cf6bedce35c8b38c6f395a68fcf0a3e4ad7285caa6f249de7eb

OpenBSD - OpenSMTPD

Running a Mailserver on OpenBSD … Source https://karchnu.fr/posts/2020-09-17-certificate-smtp-imap-antispam.html Requirements OpenBSD VM Public IP & FQDN no Portfilter from Hoster root permission Packages pkg_add opensmtpd-extras opensmtpd-filter-rspamd dovecot dovecot-pigeonhole redis rspamd-- opensmtpd-filter-senderscore FQDN export host="hostname" export domain="domain.tld" export fqdn="${host}.${domain}" httpd.conf f="/etc/httpd.conf"; test -f ${f} && cp ${f} "${f}-$(date +'%s')" cat << EOF > ${f} # added $(date) server "${fqdn}" { listen on * port 80 location "/.well-known/acme-challenge/*" { root "/acme" request strip 2 } } EOF chown root:wheel ${f}; chmod 644 ${f} pf.