7 ms·

This is great for sure. I just wish Linode/Digital Ocean/etc would take notice how much work people are willing to go through to use openbsd on their platforms

This is great for sure. I just wish Linode/Digital Ocean/etc would take notice how much work people are willing to go through to use openbsd on their platforms and provide official images to make things easier. It's obviously a minority of people, but they're also loyal customers willing to go out of their way to run what they want on your platform. Seems like a great move to build community good-will.

hiphopyo 11y ago
I've been in talks with the DO owner regarding how at least half of the DO BSD UserVoice votes (https://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/3232571-support-bsd-os https://digitalocean.uservoice.com/forums/136585-digitalocea...) were for OpenBSD. Yet only FreeBSD got supported. How, for instance, most of the cool stuff in FreeBSD comes from OpenBSD (pf, OpenSSH, OpenSMTPD, OpenNTPD, LibreSSL, http://itwire.com/business-it-news/open-source/62641-crypto-freebsd-playing-catch-up-says-de-raadt http://itwire.com/business-it-news/open-source/62641-crypto-...). How, for instance, one cannot protect oneself properly using FreeBSD's outdated version of pf. He's expressed his utmost sympathy, and it is my belief that he's slowly but surely realizing OpenBSD's worth.
- unknownzero 11y ago
  This is great, I remember being disappointed about only freebsd being added from this effort as well. Thanks from the rest of us for keeping the conversation going :)
- pyvpx 11y ago
  can you mention what is unsafe with FreeBSD's outdated version of pf?
  - merlincorey 11y ago
    The main difference in my experience (I am both a FreeBSD and OpenBSD user) is in syntax, not functionality. It's not as if FreeBSD is shipping a strangely vulnerable version of PF. I believe it's possible also he may be referring to multi-core PF which last I heard was still a ways away in FreeBSD.
    - Sanddancer 11y ago
      Multi-core pf landed in freebsd 10. There are further enhancements in the pipe, like a better hashing algorithm, planned for 11
- VirginColada 11y ago
  OpenSMTPD, OpenNTPD and LibreSSL aren't in FreeBSD. To say that most cool stuff in FreeBSD comes from OpenBSD is pretty misleading. Certainly, FreeBSD has lots of cool things that come from other operating systems. :)
coherentpony 11y ago
As someone who is totally unfamiliar with OpenBSD, why are people going to all this trouble? Does it offer something different to the plethora of linux distributions that are available? Apologies if my curiosity is misinterpreted as ignorance.
- deleted 11y ago
  [deleted]
- unknownzero 11y ago
  Definitely not, curiosity is always important! I could mention the security focus and a bunch of other things but instead of going into another thread here explaining differences ( it looks like you already have a reply starting ), I'd suggest doing a search here on HN for OpenBSD. You'll find a ton of threads with discussions about the relative plusses and minuses.
- hiphopyo 11y ago
  Don't get me wrong, I love Linux and have been using it since I was a kid. But, for what it's worth, here's my selling point: Choose OpenBSD for your Unix needs. OpenBSD -- the world's simplest and most secure Unix-like OS. Creator of the world's most used SSH implementation OpenSSH, the world's most elegant firewall PF, the world's most elegant mail server OpenSMTPD, the OpenSSL rewrite LibreSSL, and the NTP rewrite OpenNTPD. OpenBSD -- the cleanest kernel, the cleanest userland and the cleanest configuration syntax.
  - moviuro 11y ago
    You forgot cleanest code ;-) http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/ http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/
  - comex 11y ago
    Nitpick: LibreSSL is a fork/cleanup of OpenSSL, not a rewrite.
    - yellowapple 11y ago

hiphopyo 11y ago

I've been in talks with the DO owner regarding how at least half of the DO BSD UserVoice votes (https://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/3232571-support-bsd-os https://digitalocean.uservoice.com/forums/136585-digitalocea...) were for OpenBSD. Yet only FreeBSD got supported. How, for instance, most of the cool stuff in FreeBSD comes from OpenBSD (pf, OpenSSH, OpenSMTPD, OpenNTPD, LibreSSL, http://itwire.com/business-it-news/open-source/62641-crypto-freebsd-playing-catch-up-says-de-raadt http://itwire.com/business-it-news/open-source/62641-crypto-...). How, for instance, one cannot protect oneself properly using FreeBSD's outdated version of pf. He's expressed his utmost sympathy, and it is my belief that he's slowly but surely realizing OpenBSD's worth.

unknownzero 11y ago
This is great, I remember being disappointed about only freebsd being added from this effort as well. Thanks from the rest of us for keeping the conversation going :)
pyvpx 11y ago
can you mention what is unsafe with FreeBSD's outdated version of pf?
- merlincorey 11y ago
  The main difference in my experience (I am both a FreeBSD and OpenBSD user) is in syntax, not functionality. It's not as if FreeBSD is shipping a strangely vulnerable version of PF. I believe it's possible also he may be referring to multi-core PF which last I heard was still a ways away in FreeBSD.
  - Sanddancer 11y ago
    Multi-core pf landed in freebsd 10. There are further enhancements in the pipe, like a better hashing algorithm, planned for 11
VirginColada 11y ago
OpenSMTPD, OpenNTPD and LibreSSL aren't in FreeBSD. To say that most cool stuff in FreeBSD comes from OpenBSD is pretty misleading. Certainly, FreeBSD has lots of cool things that come from other operating systems. :)

coherentpony 11y ago

As someone who is totally unfamiliar with OpenBSD, why are people going to all this trouble? Does it offer something different to the plethora of linux distributions that are available? Apologies if my curiosity is misinterpreted as ignorance.

deleted 11y ago
[deleted]
unknownzero 11y ago
Definitely not, curiosity is always important! I could mention the security focus and a bunch of other things but instead of going into another thread here explaining differences ( it looks like you already have a reply starting ), I'd suggest doing a search here on HN for OpenBSD. You'll find a ton of threads with discussions about the relative plusses and minuses.
hiphopyo 11y ago
Don't get me wrong, I love Linux and have been using it since I was a kid. But, for what it's worth, here's my selling point: Choose OpenBSD for your Unix needs. OpenBSD -- the world's simplest and most secure Unix-like OS. Creator of the world's most used SSH implementation OpenSSH, the world's most elegant firewall PF, the world's most elegant mail server OpenSMTPD, the OpenSSL rewrite LibreSSL, and the NTP rewrite OpenNTPD. OpenBSD -- the cleanest kernel, the cleanest userland and the cleanest configuration syntax.
- moviuro 11y ago
  You forgot cleanest code ;-) http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/ http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/
- comex 11y ago
  Nitpick: LibreSSL is a fork/cleanup of OpenSSL, not a rewrite.
  - yellowapple 11y ago