r/freebsd • • 17h ago

news PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

Thumbnail
thehackernews.com
41 Upvotes

This might be the first time I brought all of my relevant websites down, until the fix is available. Seems like there is a known mitigation but at the same time devs are saying it's not enough. Also, PoC is already available, so I expect bots are already warming up.


r/freebsd • • 22h ago

news eMudhra Intermediate CA Compromise

Thumbnail emudhra.we-have-a-problem.com
28 Upvotes

Hi all,

FreeBSD's temporary mediation is up for this recent 8 compromised TLS intermediary certificates.

Those on critical system (e.g. server, you can follow the 'untrust' instruction for now).

Pending upstream to roll out a new package version.


r/freebsd • • 48m ago

PHP on pkg

• Upvotes

If I install PHP via pkg but now have to upgrade it a.s.a.p. to a version not yet in the quarterly pkg packages, what is the recommended path? Just uninstall and then use ports (cd /usr/ports/... && make world)?


r/freebsd • • 1h ago

FreeBSD on Chromebook?

• Upvotes

I use Arch (btw) on the aforementioned machine with Sway and I'm considering a jump to the BSD side for it. It has four whopping GB of RAM and a Celeron N4020, along with 64GB of eMMC.

The only hardware that I see being problematic is the SOF audio. I remember having a bitch of a time with that after I unlocked this thing, even on non-Googled Linux, until similar hardware started showing up in normal laptops and mainline support improved. Will it work on FreeBSD, and if not out of the box, what do I need to do?.


r/freebsd • • 17m ago

help needed Wireless card support for laptop?

• Upvotes

Is my laptop supported? The model is a "aspire 5742" wireless on the front says "802.11b/g/n" I ran "fconfig" and didn't show anything but the Ethernet.

I just started BSD. Testing it out on this old laptop. Thanks.

I can give more information about laptop if needed or paste the fconfig or kldstat.


r/freebsd • • 7h ago

discussion iam switching to freebsd

3 Upvotes

iam an arch user and I want to try or switch to freebsd

I heard it is very stable and secure

I have already downloaded the amd64 iso

but before I install it

is their anything I should know before switching?


r/freebsd • • 8h ago

help needed Ports or pkg

Post image
1 Upvotes

I installed freebsd on my old pc. i liked it. i am planning to install it on my daily drive pc. My old pc just have 2 * i5. I couldnt use ports on it. But i can on my daily drive pc. I use gentoo on it for now


r/freebsd • • 1d ago

AI Android userland running on top of freebsd (WIP)

Post image
98 Upvotes

Managed to get the android userland to run on top of freebsd on my phone, work in progress.

Working so far: - USB driver - Touch screen

Notices: Yes I use ai coding assistance, and yes code will be made public.


r/freebsd • • 2d ago

discussion I want to try FreeBSD once more

27 Upvotes

I loved FreeBSD when I installed PC-BSD. it was great experience for me but I could not use it for long mainly because of lack of gaming. I think situation hasn't changed when it comes to gaming. But I can keep my PC running Linux for gaming and I want to use FreeBSD on my work laptop. I only use the following for my work:

  1. Many applications i use on Linux are available on FreeBSD like GIMP, jdownloader, thunderbird, ferdium etc.
  2. Some applications are not available like onlyoffice and LibreOffice is difficult for me
  3. I need containerized local website development option that can have its own php apache etc. and i googled a little and learned that I have to learn how to use jails for that and also assigning IP to each jail. right now i use local by flywheel for that.
  4. Helium web browser I love the most which is not available on FreeBSD.

r/freebsd • • 3d ago

news A faster, simpler, and prettier way to install FreeBSD

Enable HLS to view with audio, or disable this notification

262 Upvotes

For those who don’t know, I work primarily on Sylve, a management plane for FreeBSD. Until today, getting started meant installing FreeBSD first and then running pkg install sylve on top of it. That works fine, but a few things made the process harder than it needed to be.

The biggest one was networking. By default, bsdinstall lets you configure your NIC with a static IP, DHCP or SLAAC, but setting up a bridge is left to you. For our users setting up VMs and jails, that was a common sticking point. You can always configure a bridge after installation, but getting it right on a single-NIC machine can be a real pain in the ass. That setup alone accounted for around 60% of our support enquiries.

We originally set out to customise bsdinstall to support bridges. But while its text UI works well, I also wanted something that looked a bit more inviting to someone trying Sylve for the first time. So I figured we might as well build a graphical installer.

Three weeks later, here we are. It has a new Go backend and a SvelteKit frontend, displayed locally in a browser running in kiosk mode. That also means you can open the installer in your own browser on another machine and configure everything from there, without having to use the host’s display at all.

A few things about the installer

  1. It uses pkgbase exclusively. We’re big fans of pkgbase and have built the installer around it. We don’t see a benefit to supporting traditional distribution sets for our use case, especially for new users.
  2. GELI encryption is built in for both ZFS and UFS. You can enable disk encryption with a single click during setup.
  3. It supports unattended installs. Provide a JSON file with your installation settings and let the installer handle the rest. You can serve that configuration on your network to provision machines across your cluster without ever interacting with the installer UI.
  4. The ISOs target 15-STABLE and 16-CURRENT. bhyve/vmm/libvirt/etc. etc. and Sylve are evolving quickly, and we want to get those improvements to users without waiting for the next RELEASE. We have no plans to ship ISOs based on RELEASE branches. If you prefer to stay on a RELEASE branch, you can still use FreeBSD’s standard installer and then run pkg install sylve, though that isn’t the route we recommend for Sylve.

And you can try it right now. Our tip release is already shipping the ISOs, and we’d love for you to give them a go and tell us what works, what doesn’t, and what could be easier.

We’re aiming for a tagged release at the end of this month, alongside a bunch of new Sylve features, including Active Directory/LDAP support for things like Samba, auditing, and package management for both jails and the host OS. We’re also working on making Sylve itself easier to update, so keeping up with new features, bug fixes and patches takes less effort.

If you’d like to support more work like this, consider sponsoring us on GitHub: https://github.com/sponsors/AlchemillaHQ. The FreeBSD Foundation already supports the project by funding specific milestones, and we’re grateful for that support. Community sponsorship would give us more room to work on the fixes, improvements and new ideas that come up along the way, while making Sylve less dependent on a single source of funding.


r/freebsd • • 3d ago

news FreshPorts: recent improvements

37 Upvotes

https://www.freshports.org/

Briefly:

  • search no longer requires login
  • if there's only one search result, you'll be taken directly to the page for the port
  • if you mistype the name, or enter an outdated name, you might get suggestions.

Example:

  1. seek fusefs-squashfuse
  2. filesystems/squashfuse is suggested.

There's much more to enjoy, I guess that Dan Langille will post about the various improvements in due course:


r/freebsd • • 2d ago

AI ZAPUSK 2.9 GLOBAL UPDATE

Thumbnail
gallery
0 Upvotes

Hey guys! I just dropped a massive update for my project called Zapusk 2.9 Global.
Here is my repository: https://github.com/romanepev2014-stack/zapusk
Please download it and give it a try! A quick disclaimer: I am only 12 years old and I'm still learning system programming, so the code might look a bit like a spaghetti mess in some places. But it is completely open-source (GPL-3.0) and it works!
What's new in 2.9 Global:I still couldn't upload it to AUR due to the ongoing registration issues on their site, but you can install it easily with the scripts inside.
Feel free to play, fork, or modify it. Enjoy! I would really love to hear your feedback.


r/freebsd • • 4d ago

fluff she’s lowkey me…

Post image
266 Upvotes

r/freebsd • • 3d ago

video x11appjail v2.0.0: Testing D-Bus proxy and linux-brave

Thumbnail
youtube.com
19 Upvotes

D-Bus is a powerful daemon that enables applications to communicate seamlessly within our environment. As a very powerful daemon, it can pose a security risk if not used correctly. Much like Firejail and Flatpak, x11appjail now uses xdg-dbus-proxy to filter D-Bus communication between the jail and the host system.

In this video, I use linux-brave to demonstrate how notifications appear on the host system, how to use playerctl to control the linux-brave player via MPRIS, and how the theme of my desktop environment (in this case, a dark theme) is honored. We will also look at what happens when the bus session is not started.

Project: https://github.com/DtxdF/x11appjail


r/freebsd • • 3d ago

AI FreeBSD Firefox Widevine for DRM playback in Rocky Linux Podman container – NapoleonWils0n

Thumbnail
youtube.com
14 Upvotes

Video, fifteen minutes, with closed captions and a transcript (AI).

Credit: u/NapoleonWils0n | https://github.com/NapoleonWils0n/

Producer's description

Freebsd Firefox Widevine for drm playback now working in a Rocky Linux podman container

No Nvidia driver installed in the Podman container works by mounting the Linuxulator directories for the Nvidia drivers from Freebsd to the Podman container

Hardware accelerated video playback, persistent Firefox settings stored on the Freebsd host so all your extensions, bookmarks and settings are retained when you stop and restart the container

Wayland and Pulseaudio sockets for zero latency

The Podman container runs as the same user and id as on the Freebsd host

Downloads directory mounted from the Freebsd host to the podman container so you can upload and download files

Uses the DBUS_SESSION_BUS_ADDRESS from Freebsd so dekstop notifications also work

Picture in Picture so you can pop the video out and move it to your second monitor

I have Cuda working in Rocky Linux containers and nvenc encoding with ffmpeg as well

Working on a git repo so you can easily pull down all the files and build the containers


r/freebsd • • 3d ago

answered Plasma: no output or input devices found

Thumbnail
gallery
0 Upvotes

Devices are detected in Enlightenment, which I rarely test, but not in Plasma.

Any suggestions?

root@maximal:~ # cat /dev/sndstat
Installed devices:
pcm0: <Sigmatel STAC9221 (Analog 5.1/4ch)> (play/rec) default
pcm1: <Sigmatel STAC9221 (Front Analog Headphones)> (play)
pcm2: <Sigmatel STAC9221 (Rear Digital)> (play/rec)
No devices installed from userspace.
root@maximal:~ # pkg iinfo pulseaudio
pulseaudio-17.0_5
pulseaudio-qt6-1.9.0
root@maximal:~ # freebsd-version -kru ; uname -mvKU
16.0-CURRENT
16.0-CURRENT
16.0-CURRENT
FreeBSD 16.0-CURRENT main-n290194-fe6aee442d4d GENERIC-NODEBUG amd64 1600028 1600028
root@maximal:~ # pkg check -d
Checking all packages: 100%
gdal-backup-libraries depends on a missing or unregistered shared library: libpoppler.so.154
root@maximal:~ #

r/freebsd • • 4d ago

AI The Jail Is a Rather Better Container – Vivian Voss

Thumbnail
vivianvoss.net
59 Upvotes

Via https://mastodon.social/@CyReVolt/117457687125631980.

From a response to criticism under https://www.linkedin.com/posts/vvoss_unixuniverse-freebsd-jails-share-7512809821897879553-gaFH/:

The history is accurate for March 2000, and the piece describes the same mechanism: a prison attached to every process, consulted wherever the kernel checks a privilege.
 
What it argues is where the fence lives today. A FreeBSD 15.1 jail gets its own network stack through VNET, in the default kernel since 12.0, resource limits through RCTL since 9.0, 60 of 244 privileges and, if one insists, Podman with OCI images on top, whilst the jail itself stays one kernel object. VServer and OpenVZ were real, and they were patches outside mainline. Mainline Linux ships the parts to this day, and runc puts them together at every start in 16,465 lines. …

Also in LinkedIn:

… these pieces are written between half past seven and half past ten most mornings. AI serves as my secretary and as a second pair of eyes on the facts, so that what reaches you has been checked. Nothing here is automated apart from the deployment to the blog. The argument, the opinions, the examples and the measurements are mine. …


r/freebsd • • 4d ago

discussion FreeBSD 15.1-RELEASE Upgrading Instructions

Thumbnail freebsd.org
40 Upvotes

Hi all. FYI, for those who use pkg-base and bump into this issue:

USER@HOST$ pkg update
Updating FreeBSD-ports repository catalogue...
Fetching data: 100%  9241 KiB   1.4 MB/s    00:07   
Processing entries:   0%
Newer FreeBSD version for package zonenotify:
To ignore this error set IGNORE_OSVERSION=yes
- package: 1501000
- running userland: 1500068
Ignore the mismatch and continue? [y/N]:

Be aware there is an official 15.1-RELEASE release that you need to upgrade first before any package upgrades. Instructions are in the release note.

Peace.


r/freebsd • • 4d ago

discussion Fork of linux-browser-launcher, i updated it with debian stable chroot and adding more browser

Thumbnail github.com
10 Upvotes

while i dont sure if this really works on chromium side, i only find that firefox based and vivaldi are working without crash


r/freebsd • • 4d ago

help needed Uupgrade from 13.4-RELEASE via freebsd-update

6 Upvotes

Inherited a couple of air grapped 13.4-RELEASE machines that I need to get current.

Can you freebsd-update right from 13.4 to 15.1 ? Or should I got from 13.4 to 14.5 first; and then once everything set on 14.5 go to 15.1 ?

Or do I have to go from 13.4 to 13.5 and then 13.5 -> 14.5 -> 15.1 ?


r/freebsd • • 5d ago

discussion Which BSD version would you suggest for a begginer user who is moving from "windows like" desktop?

Thumbnail
16 Upvotes

r/freebsd • • 5d ago

help needed How to use IPv4 automatically when no interface/route has IPv6?

8 Upvotes

why would freebsd try to use ipv6 when i have no ipv6 address assigned to any interface and no default ipv6 route? do i really need configure it so that it knows it shouldn't rely on ipv6 when it doesn't have ipv6? i'm so confused because i've never had this issue before. thanks!

``` funguy% cat /var/log/messages|grep ntpd|tail -n 1 Oct 16 14:17:27 atlas ntpd[838]: error resolving pool 0.freebsd.pool.ntp.org: Address family for hostname not supported (1) funguy% ping 0.freebsd.pool.ntp.org PING 0.freebsd.pool.ntp.org (139.177.202.26): 56 data bytes C --- 0.freebsd.pool.ntp.org ping statistics --- 9 packets transmitted, 0 packets received, 100.0% packet loss funguy% ping -4 0.freebsd.pool.ntp.org PING 0.freebsd.pool.ntp.org (38.45.67.7): 56 data bytes 64 bytes from 38.45.67.7: icmp_seq=0 ttl=47 time=25.788 ms 64 bytes from 38.45.67.7: icmp_seq=1 ttl=47 time=25.809 ms 64 bytes from 38.45.67.7: icmp_seq=2 ttl=47 time=24.356 ms 64 bytes from 38.45.67.7: icmp_seq=3 ttl=47 time=24.864 ms C --- 0.freebsd.pool.ntp.org ping statistics --- 4 packets transmitted, 4 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 24.356/25.204/25.809/0.621 ms funguy% route -4 show default route to: default destination: default mask: default gateway: kharon fib: 0 interface: em0 flags: <UP,GATEWAY,DONE,STATIC> recvpipe sendpipe ssthresh rtt,msec mtu weight expire 0 0 0 0 1500 1 0 funguy% route -6 show default route: route has not been found funguy% ifconfig -a em0: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500 options=4e524bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6,HWSTATS,MEXTPG> ether de:ad:de:ad:de:ad inet 10.6.1.2 netmask 0xffffff00 broadcast 10.6.1.255 media: Ethernet autoselect (1000baseT <full-duplex>) status: active nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> lo0: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384 options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6> inet 127.0.0.1 netmask 0xff000000 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 groups: lo nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL> funguy% uname -v FreeBSD 14.5-RELEASE-p2 releng/14.5-n274894-872ce416b253 GENERIC

```

note that ping did seem to try ipv4 initially--the first pool host attempt was down by coincidence.


r/freebsd • • 5d ago

AI 72 Hours, 2 Laptops, and an AI Agent: Overturning Systems Engineering Misconceptions – Devin Teske | Linkedin

Thumbnail
linkedin.com
0 Upvotes

The author is, amongst other things, the author/maintainer of core system utilities like sysrc and bsdconfig.

June 2026:

Last week at BSDCan, I did something that breaks a modern corporate taboo. I brought an AI agent into the operating system kernel. …


r/freebsd • • 5d ago

help needed Can't print, FreeBSD 15.1, Gimp3

Post image
9 Upvotes

r/freebsd • • 5d ago

help needed 'less' is slow, backwards.

7 Upvotes

FreeBSD 13.2-RELEASE-p8 FreeBSD 13.2-RELEASE-p8 GENERIC amd64

For going backwards in 'less' (either the "b" key, or the up arrow), it seems to get slower with each new version.
I used to solve this problem my simply using an older (year 2000) version of it.
When that stopped working, I'd recompile an older version from /usr/src .
Now, of course, even that doesn't work.

Is there a switch? A terminal setting? An alternative version? Something else that does the same thing?