voidq
@hey@voidq.xyz
I am slowly coming to understand that the reason some applications crash often on OpenBSD is not the fault of OpenBSD, but the fault of poorly written applications that have tons of vulnerabilities. OpenBSD is designed to be a secure operating system as one of its main goals, and trying to circumvent these safety guardrails by "optimizing OpenBSD for desktop use" -- i.e. tweaking sysctl.conf to the max -- defeats the purpose of having the guardrails in the first place.
If you want an OS where applications are free to roam full of holes and exploits without crashing, use Linux I guess. It will happily continue to allow those poorly written programs to run, giving the user a false sense of stability. Meanwhile, I'm starting to prefer safety and security over "desktop performance at all costs". If a program misbehaves it should die, and OpenBSD will kill it before I even know it misbehaved.
@kaidenshi every day I inch closer to finally dual booting a BSD. And I thought I'd escaped the gravitational pull after that close call when I read the entire backlog of Lawrence Tratt.
@MaddieM4 I have OpenBSD running on a few devices, but my main desktop is Void Linux. When I finally move it to OpenBSD I won't even bother with a dual boot, I'll just go all the way. And I'm close. Really, really close! Honestly just waiting on the LibreWolf port being worked on by @libreleah to be accepted into ports and I'm there.
@kaidenshi @MaddieM4 for now, you can just compile my librewolf port from source. i've been told that it won't be merged for 7.9. therefore, it would be merged for 8.0, and in the mean time merged into just -current once openbsd has fully reviewed it.
they're not taking new ports in the tree at the moment, because it's locked for a few weeks. they will presumably unlock the tree after the release, which i'm informed will happen some time in the middle of May.
@libreleah @MaddieM4 May is great, happy birthday to me! I've been trying to get your port to compile on my secondary workstation here at the house but I'm still trying to figure out dependency stuff (I am in no way, shape, or form a developer). I think I've managed to tackle every dependency except icu-i18n. If I can't get it to build on my own I'll just use your -current port once it hits the tree since I tend to run -current anyway.
@kaidenshi @MaddieM4 no need to figure out dependencies. just make sure if using my master branch to be on openbsd -current. i onyl maintain that branch for current. i'll start maintaining it in tagged releases from openbsd 8.0 onward, once openbsd merges my port in -current
@libreleah @MaddieM4 Oh it's nothing wrong with your port, I just ran into issues building dependencies so I tried installing them as packages to both speed things up and avoid any compile issues, and that one package was being fiddly (the correct version from ports kept erroring out during compile, and (at the time I tried it the other day) the version in packages wasn't right).
Trying again right now with a fresh install of -current on my most powerful dedicated OpenBSD machine, hopefully this time it's all in place and it builds successfully.
@kaidenshi @MaddieM4 on my i7-4790k, the port takes about 12 hours to compile, which includes building dependencies. once dependencies are done though, building librewolf on its own takes maybe 2 hours?
@kaidenshi @MaddieM4 i'm contemplating whether to host a package repo for librewolf, for openbsd 7.9, since 8.0 is the first stable release that will receive my port. as i said before, they'll start merging new ports again in probably a few weeks. new ports are locked for now until the 7.9 release i think. that's the impression i got anyway. librewolf is the first openbsd port i ever did.
@libreleah @MaddieM4 That would be awesome and much appreciated! I still want to succeed at building it for my own personal achievement, but a pre-built package would be a boon to those of us who have been waiting years for a proper LibreWolf port. I feel like the intersection of OpenBSD enthusiasts and LibreWolf enthusiasts has to be wide and populous.
@libreleah @MaddieM4 In other news, all dependencies satisfied on my current iteration, and the librewolf package officially started building at 20:08 local time. It's an HP mini pc with the i5-6600T so probably similar compile time to yours, if not a little slower. Fingers crossed!
@kaidenshi @MaddieM4 Please do share a screenshot once you have it running!
@libreleah @MaddieM4 Success! Damn it feels good to run this browser on this OS. Thank you so much Leah!!
@kaidenshi @MaddieM4 fun fact: you might sometimes have to compile it again, when updating snapshots. unless you idk stick to 7.9 (like, update to 7.9 from pre-7.9 -current before release). because openbsd doesn't do ABI-safety like on linux, so userland stuff will have to be recompiled when enough things change in kernelspace.
but enoughh of me being a debbie downer. congratulations!
@kaidenshi @MaddieM4 but lw doesn't change much. unless firefox does a new release. so i'd probably not worry about it, plus 7.9 is out soon. and also i assume they'll merge my port in -current at some point over the next few weeks. then you'll be able to just use the binary packages, so no worries.
@libreleah @MaddieM4 I backed up the package I built for safekeeping since it runs perfectly (actually a little faster than Firefox on the same machine). I tend to run -current so I'll just use your binary once it's merged.
@kaidenshi @MaddieM4 now u must re-compile. https://mas.to/@libreleah/116456565479340855
LibreWolf 150.0-1 is out (upgrading from LibreWolf 149.0.2-2).
I've updated my LibreWolf OpenBSD port to v150.0-1 in this patch: https://codeberg.org/vimuser/librewolf-openbsd-port/commit/13592d957af620f8c9ebcdb7f463b8bcb48f123e
Eventually, my port will be merged in -current, but for now, updating means re-building from source. Remember you must ensure you're on the latest snapshot and packages, and latest ports from -current. My port is for -current only (for now).
If you previously installed my port, please make sure you update/recompile :D
EDIT: It compiled! See:
@libreleah @MaddieM4 Hell yes I'm about to chuck an SSD I found in my desk into my main workstation and start grinding away at it.
@libreleah @MaddieM4 Just under an hour on the main workstation. I think I'm ready to go all in on OpenBSD now. Thank you so much!
@kaidenshi @MaddieM4 i also hardened some of the options at build time. you can see it in the git repository for my port. it's much closer to the hardening openbsd applies for firefox now, but with librewolf's additional hardening.
@libreleah @kaidenshi @MaddieM4
Logged in after more than a year just to comment. THANK YOU SO MUCH for this. I very recently moved from linux to openbsd. Always used librewolf, and missed it on obsd. I am using -current branch, hopefully binaries are available soon! I have a thinkpad with i3, but runs a little hotter than on linux. On linux it uses like 7.5W and and on obsd it uses around 10-12 (even after experimenting with apmd -L and obsdfreqd). Not that bad though.
Greatful to you and everyone at Openbsd!! ❤️
@Hello @kaidenshi @MaddieM4 You can control CPU frequency, check apmd manual. Or use obsdfreqd (i think it's called that). Probably still not as efficient as Linux, but you can get pretty close. I use the latter on laptops, when I'm out and about. obsdfreqd is in ports. You have to reconfigure apmd to disable some of its automation; check both manuals. Or just disable apmd when using obsdfreqd.
Also, I'll update librewolf soon. Got other work on at the moment. But will update the port after 7.9
@Hello @kaidenshi @MaddieM4 seems i'm dehydrated. i neglected to realise you already mentioned tweaking apmd/obsdfreqd
yeah, openbsd runs hot. just something you have to accept. it's not as power-efficient as linux. but it is better in lots of other ways :)
so i have been learning #sam and #acme properly and oh my god. acme is the best editor i have ever used. i love the fact that it really is an os interface in its own right. i have been completely underutilising it. i now have a setup on my second desktop at all times.
sam just seems like ed on steroids with a lot of the acme benefits of the mouse interface.
i am using acme for actual work or writing and i use sam for quick edits or config files.
OpenBSD 7.8 // IKED // ERRATA 036
Date: May 8, 2026
Name: 036_iked.patch
Description: In iked(8), address sizes were not checked.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/036_iked.patch.sig
OpenBSD 7.8 // NFS // ERRATA 035
Date: May 8, 2026
Name: 035_nfs.patch
Description: Due to insufficient checks in NFS server, the kernel could crash.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/035_nfs.patch.sig
OpenBSD 7.8 // EXPAT // ERRATA 034
Date: May 8, 2026
Name: 034_expat.patch
Description: libexpat uses more entropy to protect against hash flooding. CVE-2026-41080
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/034_expat.patch.sig
OpenBSD 7.7 // IKED // ERRATA 042
Date: May 8, 2026
Name: 042_iked.patch
Description: In iked(8), address sizes were not checked.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.7/common/042_iked.patch.sig
OpenBSD 7.8 // RPKI // ERRATA 030
Date: April 14, 2026
Name: 030_rpki.patch
Description: A malicious RPKI Publication Server can cause an incorrect error exit. A malicious RRDP Publication Server can cause a NULL dereference.
Link: https://cdn.openbsd.org/pub/OpenBSD/patches/7.8/common/030_rpki.patch.sig
Here my version of it
Gmail -> @Tutanota
Youtube -> @peertube
Liar Signal -> @delta
Chrome -> #Helium
NordVPN -> @mullvadnet
PS: Signal IS big tech, they run on their server, they pay them, they are part of the problem not a solution to it.
#privacy #sovereinty #notogafam #google #signal #youtube #chrome #chromium #nordvpn #gmail #mullvad #deltachat #peertube #tutanota #tuta #decentralisation #europe #canada
It is my setup :)
Lots of Linux vulnerabilities lately. Time to move the instance to Windows.
@jerry No, CP/M. I saw on The Computer Chronicles that CP/M is the premier operating system, and I'm sure The Computer Chronicles is a completely unbiased source on the matter.
@jerry
Didn't you use to work for IBM? AIX is right there. Lets just get you some cosy POWER hardware for it. I'm already looking forward to the smitty modules for mastodon server mamagement.
@jerry The windows vuls are still pouring out but it's easier to hunt on linux because the source is available
@jerry Someone, somewhere in a ‘C’ suite, who thinks they have their finger on the pulse, is asking a tired Tech Director that question.
Betcha.
might have to get a few costco sized bags of popcorn to last it out while i watch this... and something to read. maybe "war and peace".
At MS, there was a big project to unify all of the Windows-derived things. Apparently some folks had a build working that booted to WSL, with no Win32k. I did wonder how secure that would be: at the very least, I doubt there are many people who know how to attack the NT kernel via the Linux syscall interface.
@jerry Its better to get hacked by some guy sitting in his parents garage than getting our data stolen by corporations to feed the AI.
@jerry Also, pwn2own with zero findings in Microsoft Internet Explorer for several years meanwhile (!).
Time for our blue friend to take back the web, not sure why we even abandoned the king of browsers.
@hey @jerry the issue lie in "feel" safe, when massive AI assisted code exploration will hit BSD i also expect a bunch of critical vulnerability.
Because the AI find thing human brain is not wired to see.
It's not a proof something is not secure tough, pretty sure BSD, Window, Mac, ETC are also full of those issue.
But we also can use A.i to find these holes in System;)
@jerry ikyk, but just for lolz sharing anyway
(img src and more 🤔😎 - https://www.dwarmstrong.org/freebsd-install/ )
so, i'm trying to shed myself of all the tech oligarchies #BreakTheOligarchy
so i'm migrating everything. & it's not about Windows' or Google's vulnerabilities
& from what i've learned about the mastodon & fediverse community is, this is the place to be if you support Linux💙
so i assume you're being sarcastic? i don't understand a lot of the discussion below but, you are either hated or hilarious😁
but i have a question. would the counter-argument to that statement be...
@WorldTravelerAll7 I was being sarcastic. It’s a problem I have.
The counter argument is that windows has a similar number of vulnerabilities to what Linux has been experiencing, but Windows experiences that every single month for the past 25 years
@jerry not a problem, i💙sarcasm😂 it's just hard to discern when one doesn't know the subject or speaker😁
i try to get word to the supposed "good billionaires" that if they want to prove they are good, fund FOSS projects around Linux & the fediverse
they could turn PeerTube into a YT competitor. they could build an amazon competitor built around the vendors & customers if they wanted
so i assume, whenever Linux or FOSS projects are attacked, they're doing something right😁
My apologies for interrupting, I got some trouble on notification via telegram bot, I input everything as required, but some reason I'm not getting notification at all, I checked logs:
snac[90250]: 03:22:32 telegram post 400
And I tried curl post on my server it was working perfect, maybe telegram refusing html or makrdown format? smthing else? before going to check source code, I would like to ask you about it:)
Thank you for your time
Best regards.