8 ms·

I use OpenBSD for most of my servers, with FreeBSD mixed in too. It is very simple to administer, easy to upgrade (sysupgrade every six months, syspatch otherwi

I use OpenBSD for most of my servers, with FreeBSD mixed in too. It is very simple to administer, easy to upgrade (sysupgrade every six months, syspatch otherwise), reliable, and fits how I like to administer it. Pf on OpenBSD has pf auth which allows unblocking ports for users who have sshed in, which is nice when you are on a dynamic IP. It is generally just a nice system, minimalist, and straight forward. I don't want a million moving parts, just a UNIX platform to build on.

mjthompson 6y ago
I've recently switched my home network jump box to OpenBSD. Still learning the basics. I didn't even know about authpf. I'm reading the docs now and it looks great. Thanks for sharing that.
aj3 6y ago
> sysupgrade every six months, syspatch otherwise But that won't keep your system up to date with security patches, because OpenBSD does not rebuild binary packages.
- nix23 6y ago
  Sure they do, and he talked just about the system, remember packets and the system are two different thing in the bsd-world.
  - aj3 6y ago
    I doubt anyone manages to get with just the OpenBSD system on their desktop. Browsers in particular are a gaping security hole if not updated regularly.
    - nix23 6y ago
      https://stable.mtier.org/ https://stable.mtier.org/
      - aj3 6y ago
        No Chromium, no Firefox.
        nix23 6y ago
        Because it's already in the official package-tree: https://ftp.openbsd.org/pub/OpenBSD/6.8/packages-stable/amd64/ https://ftp.openbsd.org/pub/OpenBSD/6.8/packages-stable/amd6... firefox-esr-78.8.0.tgz
- throwawayboise 6y ago
  They do now. Binary packages for -stable are rebuilt only for security issues or other major fixes. Simply call pkg_add(1) with the -u flag to get the new files. https://www.openbsd.org/faq/faq10.html#Patches https://www.openbsd.org/faq/faq10.html#Patches
  - aj3 6y ago
    But that's just not true, check out how often they rebuild Chromium for their stable branch.
    - chungy 6y ago
      Chromium isn't part of the base system. There's some misunderstanding here between the base system and ports.

mjthompson 6y ago

I've recently switched my home network jump box to OpenBSD. Still learning the basics. I didn't even know about authpf. I'm reading the docs now and it looks great. Thanks for sharing that.

aj3 6y ago

> sysupgrade every six months, syspatch otherwise But that won't keep your system up to date with security patches, because OpenBSD does not rebuild binary packages.

nix23 6y ago
Sure they do, and he talked just about the system, remember packets and the system are two different thing in the bsd-world.
- aj3 6y ago
  I doubt anyone manages to get with just the OpenBSD system on their desktop. Browsers in particular are a gaping security hole if not updated regularly.
  - nix23 6y ago
    https://stable.mtier.org/ https://stable.mtier.org/
    - aj3 6y ago
      No Chromium, no Firefox.
      - nix23 6y ago
        Because it's already in the official package-tree: https://ftp.openbsd.org/pub/OpenBSD/6.8/packages-stable/amd64/ https://ftp.openbsd.org/pub/OpenBSD/6.8/packages-stable/amd6... firefox-esr-78.8.0.tgz
throwawayboise 6y ago
They do now. Binary packages for -stable are rebuilt only for security issues or other major fixes. Simply call pkg_add(1) with the -u flag to get the new files. https://www.openbsd.org/faq/faq10.html#Patches https://www.openbsd.org/faq/faq10.html#Patches
- aj3 6y ago
  But that's just not true, check out how often they rebuild Chromium for their stable branch.
  - chungy 6y ago
    Chromium isn't part of the base system. There's some misunderstanding here between the base system and ports.