3 ms·

Congratulations! Here's a summary of the highlights from the release announcement [1]: - OpenSSH has been updated to version 9.5p1. - OpenSSL has been updated

Congratulations! Here's a summary of the highlights from the release announcement [1]: - OpenSSH has been updated to version 9.5p1. - OpenSSL has been updated to version 3.0.12, a major upgrade from OpenSSL 1.1.1t in FreeBSD 13.2-RELEASE. - The bhyve hypervisor now supports TPM and GPU passthrough. - FreeBSD supports up to 1024 cores on the amd64 and arm64 platforms. - ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements. - It is now possible to perform background filesystem checks on UFS file systems running with journaled soft updates. - Experimental ZFS images are now available for AWS and Azure. - The default congestion control mechanism for TCP is now CUBIC. [1] https://www.freebsd.org/releases/14.0R/announce/ https://www.freebsd.org/releases/14.0R/announce/

throw0101a 3y ago
> - ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements. Post-2.2 OpenZFS has RAID-Z expansion committed: * https://github.com/openzfs/zfs/discussions/15232 https://github.com/openzfs/zfs/discussions/15232 Also committed to FreeBSD -HEAD/development: * https://github.com/freebsd/freebsd-src/commit/e716630d4cf89e69ec3f675ebfceee09f1a85e05 https://github.com/freebsd/freebsd-src/commit/e716630d4cf89e...
- e12e 3y ago
  How about zfs native encryption?
  - wut42 3y ago
    > There is a new zfskeys rc(8) service script, which allows for automatic decryption of ZFS datasets encrypted with ZFS native encryption during boot
    - e12e 3y ago
      Thanks! But does that mean zfs native encryption is now supported in freebsd? Last i checked (a good while back) - I got the impression geli(?) was strongly preferred and zfs native encryption was generally discouraged?
      - olgeni 3y ago
        Works for me :) I have per-dataset encryption and seems to work just fine.
      - avhception 3y ago
        Adding another anecdotal "works for me" data point. I'm running it on 2 machines, encrypting certain datasets (no boot volumes).
scythe 3y ago
- cperciva (also submitter of this post) now head of the releng team
- cperciva 3y ago
  To be clear, me taking over the release engineering team a few days before the release announcement was entirely coincidental timing.
jbverschoor 3y ago
- The bhyve hypervisor now supports TPM and GPU passthrough Supernice.. I'm really looking forward to more separation between OS installs. similar to Qubes.
deleted 3y ago
[deleted]

throw0101a 3y ago

> - ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements. Post-2.2 OpenZFS has RAID-Z expansion committed: * https://github.com/openzfs/zfs/discussions/15232 https://github.com/openzfs/zfs/discussions/15232 Also committed to FreeBSD -HEAD/development: * https://github.com/freebsd/freebsd-src/commit/e716630d4cf89e69ec3f675ebfceee09f1a85e05 https://github.com/freebsd/freebsd-src/commit/e716630d4cf89e...

e12e 3y ago
How about zfs native encryption?
- wut42 3y ago
  > There is a new zfskeys rc(8) service script, which allows for automatic decryption of ZFS datasets encrypted with ZFS native encryption during boot
  - e12e 3y ago
    Thanks! But does that mean zfs native encryption is now supported in freebsd? Last i checked (a good while back) - I got the impression geli(?) was strongly preferred and zfs native encryption was generally discouraged?
    - olgeni 3y ago
      Works for me :) I have per-dataset encryption and seems to work just fine.
    - avhception 3y ago
      Adding another anecdotal "works for me" data point. I'm running it on 2 machines, encrypting certain datasets (no boot volumes).

scythe 3y ago

- cperciva (also submitter of this post) now head of the releng team

cperciva 3y ago
To be clear, me taking over the release engineering team a few days before the release announcement was entirely coincidental timing.

jbverschoor 3y ago

- The bhyve hypervisor now supports TPM and GPU passthrough Supernice.. I'm really looking forward to more separation between OS installs. similar to Qubes.

deleted 3y ago

[deleted]