3 ms·
NanoBSD? I feel like an important part of "hardening" a server is to remove/disable unused services. Does anyone know if NanoBSD is actively worked-on by the F
by tiffanyh 5y ago
NanoBSD?
I feel like an important part of "hardening" a server is to remove/disable unused services. Does anyone know if NanoBSD is actively worked-on by the FreeBSD team and/or still in use? For those note aware, NanoBSD is an official build from FreeBSD team that allows you to compile a slimmed down FreeBSD build that is read-only yet can run any/all FreeBSD software.
I can find very little about NanoBSD other than a handful of posts from 10 years ago. It seems like a great foundation for hardening a server.
https://docs.freebsd.org/en/articles/nanobsd/ https://docs.freebsd.org/en/articles/nanobsd/
- enduser 5y agoI looked into this for a project a couple of years ago (to boot VMs from minimal customized ISO) and ended up using mfsbsd instead. https://github.com/mmatuska/mfsbsd https://github.com/mmatuska/mfsbsd
- tiffanyh 5y agoThat's interesting, this appears to be created by a core FreeBSD developer. https://mfsbsd.vx.sk https://mfsbsd.vx.sk I'm not able to find a lot of documentation on it. How does it compare to NanoBSD (and why did you choose it over Nano)?
- enduser 5y agomfsbsd builds a custom live CD using an easily-customized Makefile. NanoBSD expects multiple partitions, some of which are mutable, so is more oriented toward booting small systems from flash. For my purposes I needed an application server that would reboot to a known-good state, so I embedded the application code inside a mfsbsd live CD.
- robohoe 5y agoI've used Martin Matuska's mfsbsd in the past to install a system with ZFS on root. I believe now that's natively supported, but back in the day it was quite an involved thing :)