26 ms·

FreeBSD 11.0 Now Available

346 points by eatonphil 10y ago

kimputin 10y ago
> Wireless support for 802.11n has been added. Wait, What?
- stock_toaster 10y ago
  My guess is this part: The iwn(4) driver was added, providing support for the Intel® Centrino™ Wireless-N 105 and 135 chipsets. [r266770] from: https://www.freebsd.org/releases/11.0R/relnotes.html#drivers-network https://www.freebsd.org/releases/11.0R/relnotes.html#drivers...
  - mioelnir 10y ago
    I think that should read that these chipsets were added to iwn, considering iwn has been in since at least 8.0 (going by my very non-scientific manpage search).
  - asveikau 10y ago
    That driver was on OpenBSD for a long time. I put FreeBSD on a machine a year or so ago and really missed that driver. Maybe now I can get rid of the USB dongle I've been using instead.
    - loeg 10y ago
      iwn(4) has been present for a long time. I suspect you mean iwm(4)?
      - asveikau 10y ago
        You're right. Also happy to report that machine is working way better now.
- loeg 10y ago
  Typo -- should read additional wireless support has been added.
- hackuser 10y ago
  IIRC, OpenBSD added 802.11n support in a recent release.
nickysielicki 10y ago
A couple things HN users might be excited about: * Docker via ZFS and jails (...running Linux x84-64 binaries): https://wiki.freebsd.org/Docker https://wiki.freebsd.org/Docker --- (See also, https://github.com/3ofcoins/jetpack https://github.com/3ofcoins/jetpack ) * Add support for trackpads found in Apple MacBook products: https://svnweb.freebsd.org/base?view=revision&revision=261260 https://svnweb.freebsd.org/base?view=revision&revision=26126... * CloudABI executable support: https://nuxi.nl/cloudabi/freebsd/ https://nuxi.nl/cloudabi/freebsd/ This is an awesome release.
- stock_toaster 10y ago
  Don't forget zfsd[1]! Graphics support for bhyve is also pretty spiffy. [1]: https://svnweb.freebsd.org/base?view=revision&revision=300906 https://svnweb.freebsd.org/base?view=revision&revision=30090...
  - cm3 10y ago
    > https://svnweb.freebsd.org/base?view=revision&revision=30090.. https://svnweb.freebsd.org/base?view=revision&revision=30090.... Is this a unique feature or how is this handled on illumos or Solaris?
    - loeg 10y ago
      Based on this article[0], I suspect something different ("FMA") is used on illumos. But I am not especially familiar with the subject, sorry. [0]: http://open-zfs.org/wiki/Fault_Management http://open-zfs.org/wiki/Fault_Management
- justincormack 10y ago
  Unfortunately the Docker daemon support never got merged upstream. It would be great if someone would work on that.
- terhechte 10y ago
  Also, support for running Apple's Swift language.
youdontknowtho 10y ago
Seems like they are releasing faster? Nice!
kchoudhu 10y ago
Congrats to RE@ for the release. Looking forward to that sweet, sweet IPSEC by default.
- gonzo 10y ago
  You're welcome. :-)
  - kchoudhu 10y ago
    ...we're missing IPSEC_NAT_T. Brought to you from a custom compiled FreeBSD 11-p1 host :(
vbit 10y ago
Often gets lost in the release notes - deploying on Google cloud is super easy: % gcloud compute instances create INSTANCE --image freebsd-11-0-release-p1-amd64 --image-project=freebsd-org-cloud-dev % gcloud compute ssh INSTANCE
- eb0la 10y ago
  That's really cool. They also provide official AMI imagex es and how to deploy on VAGRANT! vagrant init freebsd/FreeBSD-11.0-RELEASE-p1
- oskarth 10y ago
  Wow, nice. Do you know how straightforward it is to get it with ZFS?
  - __jal 10y ago
    ZFS is native in FreeBSD, so it is exactly as straightforward as the above.
  - djsumdog 10y ago
    Even the last release supports full ZFS+encryption with the default installer.
    - floatboth 10y ago
      But you don't use the installer with "cloud" / VPS providers. It's usually more like cloning a VM image where the system is already installed.
    - RJIb8RBYxzAMX9u 10y ago
      This is still geli+zfs, and not native zfs encryption that was recently presented in OpenZFS Developer Summit [0]. [0] https://www.youtube.com/watch?v=frnLiXclAMo https://www.youtube.com/watch?v=frnLiXclAMo
      - 10y ago
eb0la 10y ago
How much do you think it will take until Juniper JunOS and netApp will upgrade their kernels to 11.0-p1?
- oneplane 10y ago
  It will take buying the company and making it happen.
- kev009 10y ago
  Acknowledging this is somewhat inflammatory, both of those companies are absent and incompetent when it comes to open source interaction when compared to others like EMC Isilon and Netflix. NetApp does tend to be one of the higher financial contributors to the FreeBSD Foundation but this amounts to the salary of one full time engineer. I think the bhyve code drop was a fluke, but a very fortunate one, and the two developers left NetApp quickly after that happened. Outside of that, especially during the formative '90s and '00 where it could have been politically influential, continuing today there is almost no code reintegration. It's hard to find business justification because NetApp is a prime contributor to Linux, including the NFS server which could be argued has allowed companies like PureStorage to eat their lunch. Juniper has some storied history of many many-year projects to resync their branch. They have their own TCP stack. Many of the influential FreeBSD devs I know there have fled recently. I heard something about switching to Linux. Sounds like a rudderless company, following a nice anti-pattern example set by Yahoo. It is sad because JunOS and the HW was and is for now quite nice. I work at a small but highly traditional/bureaucratic company and was able to build a 4 person full time upstream BSD team in 2 years. I cannot fathom why NetApp and Juniper would not have a 10-40 people upstream team.
  - X86BSD 10y ago
    Sigh, you know, the Juniper story is so sad. I even owned stock in it at one time. It started out great, had such potential, and just imploded. Yeah I have heard the rumor of them moving to Linux too. Good luck with that tire fire! They do that and they are dead to me.
2trill2spill 10y ago
> A kernel panic triggered when destroying a vnet(9) jail(8) configured with gif(4) has been fixed. [r271917] > A kernel panic triggered when destroying a vnet(9) jail(8) configured with gre(4) has been fixed. [r271918] I see they fixed the kernel panics when destroying vnet jails but is vnet enabled by default? Or do I have to compile a custom kernel like with FreeBSD 10.x
- elcritch 10y ago
  I started using SmartOS partly because it has really nice VNIC support and you don't have to recompile the 10.x FreeBSD kernels. :-) It'd be good to know if 11.0 changed that.
  - kev009 10y ago
    Sadly it's not yet on by default, but it could still happen in the 11.x lifecycle.
  - shiftoutbox 10y ago
    We just need to get Garrett to dump streams and adopt FreeBSD TCP stack . Illumos/joyent just switched to FreeBSD boot loader . So we are making progress .
  - SSLy 10y ago
    Does linux have similar facilities yet?
    - caf 10y ago
      Yes, a "network namespace" is the Linux equivalent. http://man7.org/linux/man-pages/man8/ip-netns.8.html http://man7.org/linux/man-pages/man8/ip-netns.8.html
- voltagex_ 10y ago
  I'm pretty sure you'll still need to compile the kernel specifically for VNET. I'm not sure what's stopping it being enabled by default.
cm3 10y ago
I still have hope some or all HardendedBSD features might get ported or reimplemented in FreeBSD 12. Too much low hanging fruit, and now that linux has been steadily closing the gap to grsec, the competition in mainstream kernel branches is on.
- samgranieri 10y ago
  What has Linux done to close the gap to GRsec?
  - cm3 10y ago
    Kees Cook and others have been porting or reimplementing features exclusive to grsec in upstream linux. https://outflux.net/blog/archives/2016/09/26/security-things-in-linux-v4-3/ https://outflux.net/blog/archives/2016/09/26/security-things... https://outflux.net/blog/archives/2016/09/27/security-things-in-linux-v4-4/ https://outflux.net/blog/archives/2016/09/27/security-things... https://outflux.net/blog/archives/2016/09/28/security-things-in-linux-v4-5/ https://outflux.net/blog/archives/2016/09/28/security-things... https://outflux.net/blog/archives/2016/09/30/security-things-in-linux-v4-6/ https://outflux.net/blog/archives/2016/09/30/security-things... https://outflux.net/blog/archives/2016/10/03/security-things-in-linux-v4-7/ https://outflux.net/blog/archives/2016/10/03/security-things... https://outflux.net/blog/archives/2016/10/04/security-things-in-linux-v4-8/ https://outflux.net/blog/archives/2016/10/04/security-things... And naturally some stuff is exclusive to linux upstream, though grsec will benefit from those automatically if they deem it good enough.
- kev009 10y ago
  HardenedBSD is one of the bigger jokes in the BSD community. If you really care about the things it claims to do, I highly recommend using OpenBSD because it actually has competent and sustainable development.
  - cm3 10y ago
    Are you saying that the measures listed here http://hardenedbsd.org/content/easy-feature-comparison http://hardenedbsd.org/content/easy-feature-comparison do not work properly?
mankash666 10y ago
"Wireless support for 802.11n has been added" C'mon FreeBSD! We're in the 802.11ac era! As much as I love BSD, they're always a couple of years behind the status quo
- oneplane 10y ago
  It was support for an additional 802.11n card. Not 802.11n in general.
- erikarn 10y ago
  Hi! FreeBSD wifi person here! * ath(4)'s 11n support is much, much better now. All the AR93xx/AR95xx PCIe devices are supported and STA/AP 11n should work great. * iwn(4)'s 11n is much, much better. It still has some warts, and I'd love some help in chasing them down. * urtwn(4) in -HEAD does 11n now. * rsu(4) in -HEAD does 11n now. * iwm(4) (intel 7260, etc) is getting better every day in freebsd and dragonflybsd. Thanks to another developer for that !I think we're almost ready for starting the 11n bits? once the 11n bits are done and working, we can start on the 11ac bits. * Another developer is working on urtwn/rtwn unification and support for 11ac USB devices from realtek. * I'm working on an ath10k port from Linux to FreeBSD - I have association working now and I'm about to start on normal data TX. Once that's done, I'll get crypto and 11n station mode operation working. now, where's 11ac? It's mostly waiting for some stable like 11ac devices to appear in the tree with 11n support. 11ac is partially revolution and partially evolution - if 11n doesn't work, 11ac definitely won't work. So, between iwm 11n work, the rtwn/urtwn 11n/11ac USB work going on and my ath10k work, I think we're heading in the right direction. I'm hoping that once I get ath10k up in monitor, STA and AP mode, with crypto, QoS and 11n working, the 11ac bits will be trivial - at which point I can start on the 11ac stack pieces. I know what those stack pieces are and I've started writing them down - https://wiki.freebsd.org/WiFi/80211ac https://wiki.freebsd.org/WiFi/80211ac . All of this is non-commercial btw - no-one is sponsoring any work on BSD wireless at the present moment. If you'd like to help or contribute, please consider talking and donating to the FreeBSD foundation, or consider funding someone to help in these efforts. Thanks! adrian@freebsd.org
  - drvdevd 10y ago
tete 10y ago
I think the highlights don't mention the release's best bits. The full release notes are way larger and it really depends on what you do, what you might consider the most interesting part. Also I am happy to see a bunch of "Sponsored by..." Netflix, Yandex, NGINX Inc, Netgate, Citrix, Juniper Networks, Microsoft, Dell, Multiplay, ScaleEngine, etc. in there. https://www.freebsd.org/releases/11.0R/relnotes.html https://www.freebsd.org/releases/11.0R/relnotes.html
- cperciva 10y ago
  I think the highlights don't mention the release's best bits. It's always challenging to put together those highlights... different people consider different things important, and the release engineer has to guess what the largest number of people will care about. (And sometimes things don't end up in the release notes at all because developers forget to flag their commits with "Relnotes: yes", but we're getting better at that.)
- kev009 10y ago
  As a full time developer, you are correct that the relnotes don't capture all the great stuff. It is difficult to keep track of all that is going on. The only way I know how is to continuously read the commit logs. But distilling that down into a useful document for end users is quite hard, especially retroactively. I will say that the release has non-trivial improvements in TCP performance (Mike Karels, Matt Macy, Netflix crew). VNET jails also should be safe to tear down, and SysV SHM can be jailed/virtualized which should be interesting to many users.
  - voltagex_ 10y ago
    >I will say that the release has non-trivial improvements in TCP performance For your average home / small business user? Or do you need to be at Netflix scale to see the benefits? (that's not a bad thing).
    - kev009 10y ago
      It matters most for people doing 10-100gbps throughput, CPU usage will be lower and more stable in all cases though. There has been a lot of improvement to many network card drivers in 11, and I am helping to push/fund the final integration of Matt Macy's "iflib" for the common intel em/igb/ixgbe drivers. There are a lot of goodput improvements coming soon, which will affect all TCP users. I had Matt Macy upgrade TCP CUBIC to match 2016 RFC and most Linux behaviors (HyStart). Hiren Panchasara has been working full time for almost 2 years to address many other goodput and correctness issues in the TCP stack. Some of these are in 11, but the majority will hit in 11.1. Another company is working on the recently announced BBR congestion control from Google and a TCP stack with RACK/PRR https://wiki.freebsd.org/DevSummit/201606/Transport https://wiki.freebsd.org/DevSummit/201606/Transport. The end result of all this will be a more tightly integrated and coherent TCP implementation, which should make FreeBSD have the best network stack again in 2017 after falling behind for a while.
protomyth 10y ago
EC2(TM) users are urged to read the Errata Notes for FreeBSD 11.0-RELEASE regarding an issue discovered very late in the release cycle that may cause the system to hang during the boot process when upgrading from previous FreeBSD versions. New EC2(TM) installations are not affected, but existing installations running earlier releases are advised to wait until the issue is resolved in an Errata Notice before upgrading. This is discussed on BSD Now 162 https://www.youtube.com/watch?v=fJ-mgwxhNvo https://www.youtube.com/watch?v=fJ-mgwxhNvo
thijsvandien 10y ago
This would be a good moment to be "that guy" and kindly remind you to donate: https://www.freebsdfoundation.org/donate/ https://www.freebsdfoundation.org/donate/
unluckier 10y ago
No mention of ASLR. Helping to prevent memory corruption bugs apparently isn't on their radar?
- loeg 10y ago
  It's on their radar, but did not make it into 11.0. It's still under code review here: https://reviews.freebsd.org/D5603 https://reviews.freebsd.org/D5603
aphextron 10y ago
Does anyone know if FreeBSD supports PHP-FPM 7+? I'm so ready to drop Ubuntu if so
- loeg 10y ago
  It is enabled by default in the php55, php56, and php70 ports. (See the "FPM" OPTION in all three.) Does that answer your question? (Sorry, I'm not familiar with PHP.)
- Lammy 10y ago
  lang/php70 is what you want http://www.freshports.org/lang/php70 http://www.freshports.org/lang/php70
- tete 10y ago
  Yes. Running a setup with many production grade (ie people making their living off of those) WordPress installations on latest php7 and latest mariadb on it. Using Poudriere so everything uses the latest packages there. Poudriere is a charm to use so you really wanna do that.
ysleepy 10y ago
TRIM support in GELI (disk encryption), awesome!
duncan_bayne 10y ago
Going to grab the 11.0 release image and try installing it on my ThinkPad. Pre-release versions had issues with my Intel chipset that lead to boot loops.
qwertyuiop924 10y ago
Have they fixed the remnants of the update security hole? I haven't been keeping up, so they might have done that already, but I thought I'd ask.
- tete 10y ago
  Yes. They fixed the theoretical stuff and the things where you'd have required to be root anyway.
  - qwertyuiop924 10y ago
    Oh, good.
  - loeg 10y ago
    In 11.0-RELEASE-p1, or just 11-STABLE? Do you have a link to the commits landing in the RELEASE branch?
    - emaste 10y ago
      In 11.0-RELEASE-p1. I merged them here: https://svnweb.freebsd.org/base?view=revision&revision=306379 https://svnweb.freebsd.org/base?view=revision&revision=30637...
      - loeg 10y ago
        Great. Thanks, Ed.
voltagex_ 10y ago
I've got a 10.3 system that's running a "custom" kernel with VNET enabled for my iocage jails. What am I in for when I upgrade? How do I keep my ZFS pool safe through the upgrade?
- mioelnir 10y ago
  Why would your zpool be in any danger from the upgrade? If you upgrade via freebsd-update and have renamed your custom kernel (and not named it GENERIC), then freebsd-update will tell you when to build and install a new version of your kernel. If you kept GENERIC as the name of your custom kernel, which is a really really bad idea, then freebsd-update will probably still replace it with a vanilla kernel, haven't checked that in a while. In that case either rebuild your 10.3 kernel again with a fixed name, or upgrade to 11 from source.
- crest 10y ago
  If your pool is layed out in a beadm compatible way you can use beadm. Otherwise just snapshot your root dataset recursively and rollback the whole pool in the unlikely case that the update fails. Once the upgrade succeeded (including the new boot blocks) you can upgrade your pool by enabling the latest feature flags.
zackelan 10y ago
For anyone else curious about this strange and seemingly out-of-place command in the upgrade instructions: # : > /usr/bin/bspatch See https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29.bspatch.asc https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29... > Because this vulnerability exists in bspatch, a component used by freebsd-update, a special procedure must be followed to safely update. First, truncate bspatch to a zero byte file. > FreeBSD-update will fall back to replacing bspatch, rather than applying a binary patch. Proceed with FreeBSD-update as usual.
ToTheLeft 10y ago
https://svnweb.freebsd.org/base?view=revision&revision=287197 https://svnweb.freebsd.org/base?view=revision&revision=28719... POLA violated. Next FreeBSD will adopt ethX for wired networks and sdX for disks, and systemd for init.
ChuckMcM 10y ago
It would be awesome if there were a cookbook for getting this on to the Dragonboard 410c (its my only AArch 64 board ATM). The wiki page points to the 96boards site which has everything you need to put Ubuntu on but not FreeBSD AFAICT. I just may not be reading it closely enough though. [1] https://wiki.freebsd.org/arm64/DragonBoard410c https://wiki.freebsd.org/arm64/DragonBoard410c
- zxombie 10y ago
  booting on the Dragonboard is unlikely to happen any time soon, I started working on it, but don't have the time to get it into a usable state (and lack hardware to test). Source: I started & mostly work on the the FreeBSD arm64 port.
tachion 10y ago
FreeBSD is not 'just another OS out there' but an important piece of technology powering lots of things we often use: from Sony's PlayStation and WhatsApp, through Netflix and Yahoo, to Juniper and PFSense networking gear and EMC storage and FreeNAS appliance - and many, many more! So, have you donated yet? We need FreeBSD and FreeBSD needs your support! https://www.freebsdfoundation.org/donate/ https://www.freebsdfoundation.org/donate/
- softwarelimits 10y ago
  Wouldn't it be a good idea if they would change their licensing so that commercial usage allowed them to build a stable income stream and pay more and more developers every year? Also it would be very important to build developer schools and other educational facilities to sustain development in future, what would be much easier with a stable and growing budget.
  - 4ad 10y ago
    Let me guess... You have no idea why people chose to use, or contribute to FreeBSD, right? Especially no idea why commercial entities build products based on FreeBSD. Sometimes there's a cultural disconnect between the hacker news world and some $FOO software thing (FSF, GNU, what have you), but this tops them all. Developer schools? Was this even a serious comment or was I trolled by Poe's law?
    - softwarelimits 10y ago
      I was not able to find any answer to my question in your comment. I assume you assume the wrong things, also you seem to draw conclusions too fast.
      - vog 10y ago
        I think you received a perfectly valid answer. It was not a direct answer, but since the presupposition of your question is so deeply flawed, a direct answer is simply impossible. However, the answer could have been more detailed and less ranting about HN. Maybe the answer could be improved to: Things work completely different there. In particular, there are already people and companies making money with selling FreeBSD, and these are also contributing back a lot to FreeBSD. They are contributing back for moral reasons, pragmatic reasons or simply because they like FreeBSD, even though (and sometimes exactly because) they are not pushed to do so by the license.
xtf 10y ago
The image is from 29th september, is this the updated version?
panzerboy 10y ago
Regarding the Vagrant image: I'm trying to use it on OSX (El Capitan) with the latest VirtualBox. When I do vagrant up, I see the following error: No base MAC address was specified. This is required for the NAT networking to work properly (and hence port forwarding, SSH, etc.). Specifying this MAC address is typically up to the box and box maintainer. Please contact the relevant person to solve this issue. If I do vagrant up again, it seems to be working, but then I see a lot of: default: Warning: Remote connection disconnect. Retrying... and it eventually times out. Any ideas on how to solve this issue? Thanks!
tofupup 10y ago
neat

346 points by eatonphil 10y ago

kimputin 10y ago

> Wireless support for 802.11n has been added. Wait, What?

stock_toaster 10y ago
My guess is this part: The iwn(4) driver was added, providing support for the Intel® Centrino™ Wireless-N 105 and 135 chipsets. [r266770] from: https://www.freebsd.org/releases/11.0R/relnotes.html#drivers-network https://www.freebsd.org/releases/11.0R/relnotes.html#drivers...
- mioelnir 10y ago
  I think that should read that these chipsets were added to iwn, considering iwn has been in since at least 8.0 (going by my very non-scientific manpage search).
- asveikau 10y ago
  That driver was on OpenBSD for a long time. I put FreeBSD on a machine a year or so ago and really missed that driver. Maybe now I can get rid of the USB dongle I've been using instead.
  - loeg 10y ago
    iwn(4) has been present for a long time. I suspect you mean iwm(4)?
    - asveikau 10y ago
      You're right. Also happy to report that machine is working way better now.
loeg 10y ago
Typo -- should read additional wireless support has been added.
hackuser 10y ago
IIRC, OpenBSD added 802.11n support in a recent release.

nickysielicki 10y ago

A couple things HN users might be excited about: * Docker via ZFS and jails (...running Linux x84-64 binaries): https://wiki.freebsd.org/Docker https://wiki.freebsd.org/Docker --- (See also, https://github.com/3ofcoins/jetpack https://github.com/3ofcoins/jetpack ) * Add support for trackpads found in Apple MacBook products: https://svnweb.freebsd.org/base?view=revision&revision=261260 https://svnweb.freebsd.org/base?view=revision&revision=26126... * CloudABI executable support: https://nuxi.nl/cloudabi/freebsd/ https://nuxi.nl/cloudabi/freebsd/ This is an awesome release.

stock_toaster 10y ago
Don't forget zfsd[1]! Graphics support for bhyve is also pretty spiffy. [1]: https://svnweb.freebsd.org/base?view=revision&revision=300906 https://svnweb.freebsd.org/base?view=revision&revision=30090...
- cm3 10y ago
  > https://svnweb.freebsd.org/base?view=revision&revision=30090.. https://svnweb.freebsd.org/base?view=revision&revision=30090.... Is this a unique feature or how is this handled on illumos or Solaris?
  - loeg 10y ago
    Based on this article[0], I suspect something different ("FMA") is used on illumos. But I am not especially familiar with the subject, sorry. [0]: http://open-zfs.org/wiki/Fault_Management http://open-zfs.org/wiki/Fault_Management
justincormack 10y ago
Unfortunately the Docker daemon support never got merged upstream. It would be great if someone would work on that.
terhechte 10y ago
Also, support for running Apple's Swift language.

youdontknowtho 10y ago

Seems like they are releasing faster? Nice!

kchoudhu 10y ago

Congrats to RE@ for the release. Looking forward to that sweet, sweet IPSEC by default.

gonzo 10y ago
You're welcome. :-)
- kchoudhu 10y ago
  ...we're missing IPSEC_NAT_T. Brought to you from a custom compiled FreeBSD 11-p1 host :(

vbit 10y ago

Often gets lost in the release notes - deploying on Google cloud is super easy: % gcloud compute instances create INSTANCE --image freebsd-11-0-release-p1-amd64 --image-project=freebsd-org-cloud-dev % gcloud compute ssh INSTANCE

eb0la 10y ago
That's really cool. They also provide official AMI imagex es and how to deploy on VAGRANT! vagrant init freebsd/FreeBSD-11.0-RELEASE-p1
oskarth 10y ago
Wow, nice. Do you know how straightforward it is to get it with ZFS?
- __jal 10y ago
  ZFS is native in FreeBSD, so it is exactly as straightforward as the above.
- djsumdog 10y ago
  Even the last release supports full ZFS+encryption with the default installer.
  - floatboth 10y ago
    But you don't use the installer with "cloud" / VPS providers. It's usually more like cloning a VM image where the system is already installed.
  - RJIb8RBYxzAMX9u 10y ago
    This is still geli+zfs, and not native zfs encryption that was recently presented in OpenZFS Developer Summit [0]. [0] https://www.youtube.com/watch?v=frnLiXclAMo https://www.youtube.com/watch?v=frnLiXclAMo
    - 10y ago

eb0la 10y ago

How much do you think it will take until Juniper JunOS and netApp will upgrade their kernels to 11.0-p1?

oneplane 10y ago
It will take buying the company and making it happen.
kev009 10y ago
Acknowledging this is somewhat inflammatory, both of those companies are absent and incompetent when it comes to open source interaction when compared to others like EMC Isilon and Netflix. NetApp does tend to be one of the higher financial contributors to the FreeBSD Foundation but this amounts to the salary of one full time engineer. I think the bhyve code drop was a fluke, but a very fortunate one, and the two developers left NetApp quickly after that happened. Outside of that, especially during the formative '90s and '00 where it could have been politically influential, continuing today there is almost no code reintegration. It's hard to find business justification because NetApp is a prime contributor to Linux, including the NFS server which could be argued has allowed companies like PureStorage to eat their lunch. Juniper has some storied history of many many-year projects to resync their branch. They have their own TCP stack. Many of the influential FreeBSD devs I know there have fled recently. I heard something about switching to Linux. Sounds like a rudderless company, following a nice anti-pattern example set by Yahoo. It is sad because JunOS and the HW was and is for now quite nice. I work at a small but highly traditional/bureaucratic company and was able to build a 4 person full time upstream BSD team in 2 years. I cannot fathom why NetApp and Juniper would not have a 10-40 people upstream team.
- X86BSD 10y ago
  Sigh, you know, the Juniper story is so sad. I even owned stock in it at one time. It started out great, had such potential, and just imploded. Yeah I have heard the rumor of them moving to Linux too. Good luck with that tire fire! They do that and they are dead to me.

2trill2spill 10y ago

> A kernel panic triggered when destroying a vnet(9) jail(8) configured with gif(4) has been fixed. [r271917] > A kernel panic triggered when destroying a vnet(9) jail(8) configured with gre(4) has been fixed. [r271918] I see they fixed the kernel panics when destroying vnet jails but is vnet enabled by default? Or do I have to compile a custom kernel like with FreeBSD 10.x

elcritch 10y ago
I started using SmartOS partly because it has really nice VNIC support and you don't have to recompile the 10.x FreeBSD kernels. :-) It'd be good to know if 11.0 changed that.
- kev009 10y ago
  Sadly it's not yet on by default, but it could still happen in the 11.x lifecycle.
- shiftoutbox 10y ago
  We just need to get Garrett to dump streams and adopt FreeBSD TCP stack . Illumos/joyent just switched to FreeBSD boot loader . So we are making progress .
- SSLy 10y ago
  Does linux have similar facilities yet?
  - caf 10y ago
    Yes, a "network namespace" is the Linux equivalent. http://man7.org/linux/man-pages/man8/ip-netns.8.html http://man7.org/linux/man-pages/man8/ip-netns.8.html
voltagex_ 10y ago
I'm pretty sure you'll still need to compile the kernel specifically for VNET. I'm not sure what's stopping it being enabled by default.

cm3 10y ago

I still have hope some or all HardendedBSD features might get ported or reimplemented in FreeBSD 12. Too much low hanging fruit, and now that linux has been steadily closing the gap to grsec, the competition in mainstream kernel branches is on.

samgranieri 10y ago
What has Linux done to close the gap to GRsec?
- cm3 10y ago
  Kees Cook and others have been porting or reimplementing features exclusive to grsec in upstream linux. https://outflux.net/blog/archives/2016/09/26/security-things-in-linux-v4-3/ https://outflux.net/blog/archives/2016/09/26/security-things... https://outflux.net/blog/archives/2016/09/27/security-things-in-linux-v4-4/ https://outflux.net/blog/archives/2016/09/27/security-things... https://outflux.net/blog/archives/2016/09/28/security-things-in-linux-v4-5/ https://outflux.net/blog/archives/2016/09/28/security-things... https://outflux.net/blog/archives/2016/09/30/security-things-in-linux-v4-6/ https://outflux.net/blog/archives/2016/09/30/security-things... https://outflux.net/blog/archives/2016/10/03/security-things-in-linux-v4-7/ https://outflux.net/blog/archives/2016/10/03/security-things... https://outflux.net/blog/archives/2016/10/04/security-things-in-linux-v4-8/ https://outflux.net/blog/archives/2016/10/04/security-things... And naturally some stuff is exclusive to linux upstream, though grsec will benefit from those automatically if they deem it good enough.
kev009 10y ago
HardenedBSD is one of the bigger jokes in the BSD community. If you really care about the things it claims to do, I highly recommend using OpenBSD because it actually has competent and sustainable development.
- cm3 10y ago
  Are you saying that the measures listed here http://hardenedbsd.org/content/easy-feature-comparison http://hardenedbsd.org/content/easy-feature-comparison do not work properly?

mankash666 10y ago

"Wireless support for 802.11n has been added" C'mon FreeBSD! We're in the 802.11ac era! As much as I love BSD, they're always a couple of years behind the status quo

oneplane 10y ago
It was support for an additional 802.11n card. Not 802.11n in general.
erikarn 10y ago
Hi! FreeBSD wifi person here! * ath(4)'s 11n support is much, much better now. All the AR93xx/AR95xx PCIe devices are supported and STA/AP 11n should work great. * iwn(4)'s 11n is much, much better. It still has some warts, and I'd love some help in chasing them down. * urtwn(4) in -HEAD does 11n now. * rsu(4) in -HEAD does 11n now. * iwm(4) (intel 7260, etc) is getting better every day in freebsd and dragonflybsd. Thanks to another developer for that !I think we're almost ready for starting the 11n bits? once the 11n bits are done and working, we can start on the 11ac bits. * Another developer is working on urtwn/rtwn unification and support for 11ac USB devices from realtek. * I'm working on an ath10k port from Linux to FreeBSD - I have association working now and I'm about to start on normal data TX. Once that's done, I'll get crypto and 11n station mode operation working. now, where's 11ac? It's mostly waiting for some stable like 11ac devices to appear in the tree with 11n support. 11ac is partially revolution and partially evolution - if 11n doesn't work, 11ac definitely won't work. So, between iwm 11n work, the rtwn/urtwn 11n/11ac USB work going on and my ath10k work, I think we're heading in the right direction. I'm hoping that once I get ath10k up in monitor, STA and AP mode, with crypto, QoS and 11n working, the 11ac bits will be trivial - at which point I can start on the 11ac stack pieces. I know what those stack pieces are and I've started writing them down - https://wiki.freebsd.org/WiFi/80211ac https://wiki.freebsd.org/WiFi/80211ac . All of this is non-commercial btw - no-one is sponsoring any work on BSD wireless at the present moment. If you'd like to help or contribute, please consider talking and donating to the FreeBSD foundation, or consider funding someone to help in these efforts. Thanks! adrian@freebsd.org
- drvdevd 10y ago

tete 10y ago

I think the highlights don't mention the release's best bits. The full release notes are way larger and it really depends on what you do, what you might consider the most interesting part. Also I am happy to see a bunch of "Sponsored by..." Netflix, Yandex, NGINX Inc, Netgate, Citrix, Juniper Networks, Microsoft, Dell, Multiplay, ScaleEngine, etc. in there. https://www.freebsd.org/releases/11.0R/relnotes.html https://www.freebsd.org/releases/11.0R/relnotes.html

cperciva 10y ago
I think the highlights don't mention the release's best bits. It's always challenging to put together those highlights... different people consider different things important, and the release engineer has to guess what the largest number of people will care about. (And sometimes things don't end up in the release notes at all because developers forget to flag their commits with "Relnotes: yes", but we're getting better at that.)
kev009 10y ago
As a full time developer, you are correct that the relnotes don't capture all the great stuff. It is difficult to keep track of all that is going on. The only way I know how is to continuously read the commit logs. But distilling that down into a useful document for end users is quite hard, especially retroactively. I will say that the release has non-trivial improvements in TCP performance (Mike Karels, Matt Macy, Netflix crew). VNET jails also should be safe to tear down, and SysV SHM can be jailed/virtualized which should be interesting to many users.
- voltagex_ 10y ago
  >I will say that the release has non-trivial improvements in TCP performance For your average home / small business user? Or do you need to be at Netflix scale to see the benefits? (that's not a bad thing).
  - kev009 10y ago
    It matters most for people doing 10-100gbps throughput, CPU usage will be lower and more stable in all cases though. There has been a lot of improvement to many network card drivers in 11, and I am helping to push/fund the final integration of Matt Macy's "iflib" for the common intel em/igb/ixgbe drivers. There are a lot of goodput improvements coming soon, which will affect all TCP users. I had Matt Macy upgrade TCP CUBIC to match 2016 RFC and most Linux behaviors (HyStart). Hiren Panchasara has been working full time for almost 2 years to address many other goodput and correctness issues in the TCP stack. Some of these are in 11, but the majority will hit in 11.1. Another company is working on the recently announced BBR congestion control from Google and a TCP stack with RACK/PRR https://wiki.freebsd.org/DevSummit/201606/Transport https://wiki.freebsd.org/DevSummit/201606/Transport. The end result of all this will be a more tightly integrated and coherent TCP implementation, which should make FreeBSD have the best network stack again in 2017 after falling behind for a while.

protomyth 10y ago

EC2(TM) users are urged to read the Errata Notes for FreeBSD 11.0-RELEASE regarding an issue discovered very late in the release cycle that may cause the system to hang during the boot process when upgrading from previous FreeBSD versions. New EC2(TM) installations are not affected, but existing installations running earlier releases are advised to wait until the issue is resolved in an Errata Notice before upgrading. This is discussed on BSD Now 162 https://www.youtube.com/watch?v=fJ-mgwxhNvo https://www.youtube.com/watch?v=fJ-mgwxhNvo

thijsvandien 10y ago

This would be a good moment to be "that guy" and kindly remind you to donate: https://www.freebsdfoundation.org/donate/ https://www.freebsdfoundation.org/donate/

unluckier 10y ago

No mention of ASLR. Helping to prevent memory corruption bugs apparently isn't on their radar?

loeg 10y ago
It's on their radar, but did not make it into 11.0. It's still under code review here: https://reviews.freebsd.org/D5603 https://reviews.freebsd.org/D5603

aphextron 10y ago

Does anyone know if FreeBSD supports PHP-FPM 7+? I'm so ready to drop Ubuntu if so

loeg 10y ago
It is enabled by default in the php55, php56, and php70 ports. (See the "FPM" OPTION in all three.) Does that answer your question? (Sorry, I'm not familiar with PHP.)
Lammy 10y ago
lang/php70 is what you want http://www.freshports.org/lang/php70 http://www.freshports.org/lang/php70
tete 10y ago
Yes. Running a setup with many production grade (ie people making their living off of those) WordPress installations on latest php7 and latest mariadb on it. Using Poudriere so everything uses the latest packages there. Poudriere is a charm to use so you really wanna do that.

ysleepy 10y ago

TRIM support in GELI (disk encryption), awesome!

duncan_bayne 10y ago

Going to grab the 11.0 release image and try installing it on my ThinkPad. Pre-release versions had issues with my Intel chipset that lead to boot loops.

qwertyuiop924 10y ago

Have they fixed the remnants of the update security hole? I haven't been keeping up, so they might have done that already, but I thought I'd ask.

tete 10y ago
Yes. They fixed the theoretical stuff and the things where you'd have required to be root anyway.
- qwertyuiop924 10y ago
  Oh, good.
- loeg 10y ago
  In 11.0-RELEASE-p1, or just 11-STABLE? Do you have a link to the commits landing in the RELEASE branch?
  - emaste 10y ago
    In 11.0-RELEASE-p1. I merged them here: https://svnweb.freebsd.org/base?view=revision&revision=306379 https://svnweb.freebsd.org/base?view=revision&revision=30637...
    - loeg 10y ago
      Great. Thanks, Ed.

voltagex_ 10y ago

I've got a 10.3 system that's running a "custom" kernel with VNET enabled for my iocage jails. What am I in for when I upgrade? How do I keep my ZFS pool safe through the upgrade?

mioelnir 10y ago
Why would your zpool be in any danger from the upgrade? If you upgrade via freebsd-update and have renamed your custom kernel (and not named it GENERIC), then freebsd-update will tell you when to build and install a new version of your kernel. If you kept GENERIC as the name of your custom kernel, which is a really really bad idea, then freebsd-update will probably still replace it with a vanilla kernel, haven't checked that in a while. In that case either rebuild your 10.3 kernel again with a fixed name, or upgrade to 11 from source.
crest 10y ago
If your pool is layed out in a beadm compatible way you can use beadm. Otherwise just snapshot your root dataset recursively and rollback the whole pool in the unlikely case that the update fails. Once the upgrade succeeded (including the new boot blocks) you can upgrade your pool by enabling the latest feature flags.

zackelan 10y ago

For anyone else curious about this strange and seemingly out-of-place command in the upgrade instructions: # : > /usr/bin/bspatch See https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29.bspatch.asc https://www.freebsd.org/security/advisories/FreeBSD-SA-16:29... > Because this vulnerability exists in bspatch, a component used by freebsd-update, a special procedure must be followed to safely update. First, truncate bspatch to a zero byte file. > FreeBSD-update will fall back to replacing bspatch, rather than applying a binary patch. Proceed with FreeBSD-update as usual.

ToTheLeft 10y ago

https://svnweb.freebsd.org/base?view=revision&revision=287197 https://svnweb.freebsd.org/base?view=revision&revision=28719... POLA violated. Next FreeBSD will adopt ethX for wired networks and sdX for disks, and systemd for init.

ChuckMcM 10y ago

It would be awesome if there were a cookbook for getting this on to the Dragonboard 410c (its my only AArch 64 board ATM). The wiki page points to the 96boards site which has everything you need to put Ubuntu on but not FreeBSD AFAICT. I just may not be reading it closely enough though. [1] https://wiki.freebsd.org/arm64/DragonBoard410c https://wiki.freebsd.org/arm64/DragonBoard410c

zxombie 10y ago
booting on the Dragonboard is unlikely to happen any time soon, I started working on it, but don't have the time to get it into a usable state (and lack hardware to test). Source: I started & mostly work on the the FreeBSD arm64 port.

tachion 10y ago

FreeBSD is not 'just another OS out there' but an important piece of technology powering lots of things we often use: from Sony's PlayStation and WhatsApp, through Netflix and Yahoo, to Juniper and PFSense networking gear and EMC storage and FreeNAS appliance - and many, many more! So, have you donated yet? We need FreeBSD and FreeBSD needs your support! https://www.freebsdfoundation.org/donate/ https://www.freebsdfoundation.org/donate/

softwarelimits 10y ago
Wouldn't it be a good idea if they would change their licensing so that commercial usage allowed them to build a stable income stream and pay more and more developers every year? Also it would be very important to build developer schools and other educational facilities to sustain development in future, what would be much easier with a stable and growing budget.
- 4ad 10y ago
  Let me guess... You have no idea why people chose to use, or contribute to FreeBSD, right? Especially no idea why commercial entities build products based on FreeBSD. Sometimes there's a cultural disconnect between the hacker news world and some $FOO software thing (FSF, GNU, what have you), but this tops them all. Developer schools? Was this even a serious comment or was I trolled by Poe's law?
  - softwarelimits 10y ago
    I was not able to find any answer to my question in your comment. I assume you assume the wrong things, also you seem to draw conclusions too fast.
    - vog 10y ago
      I think you received a perfectly valid answer. It was not a direct answer, but since the presupposition of your question is so deeply flawed, a direct answer is simply impossible. However, the answer could have been more detailed and less ranting about HN. Maybe the answer could be improved to: Things work completely different there. In particular, there are already people and companies making money with selling FreeBSD, and these are also contributing back a lot to FreeBSD. They are contributing back for moral reasons, pragmatic reasons or simply because they like FreeBSD, even though (and sometimes exactly because) they are not pushed to do so by the license.

xtf 10y ago

The image is from 29th september, is this the updated version?

panzerboy 10y ago

Regarding the Vagrant image: I'm trying to use it on OSX (El Capitan) with the latest VirtualBox. When I do vagrant up, I see the following error: No base MAC address was specified. This is required for the NAT networking to work properly (and hence port forwarding, SSH, etc.). Specifying this MAC address is typically up to the box and box maintainer. Please contact the relevant person to solve this issue. If I do vagrant up again, it seems to be working, but then I see a lot of: default: Warning: Remote connection disconnect. Retrying... and it eventually times out. Any ideas on how to solve this issue? Thanks!

tofupup 10y ago

neat