11–20 of 72 posts
I've had a long standing question about FreeBSD and ports/portsnap: does/how does FreeBSD prevent against bad mirrors or MITM attacks?
AFAIK ports checks the checksum of the file when it downloads it against the checksums the ports maintainer submitted. For the ISO mirrors, I don't think there's anything automatic, you have to manually run sha256 on the file and compare checksums. Do Linux distributions have another way?
It sounds like some amazing performance boosts around networking. I wonder how much of that will carry over to all of the network-type appliances built on FreeBSD? I know Juno's OS runs a pretty ancient version of FreeBSD (6 or 7 IIRC), but am not sure about any other commercial uses.
http://info.iet.unipi.it/~luigi/netmap/
I'm curious to see what kind of performance is possible with FreeBSD 10 (using `netmap`) and the new I/O manager which will be included in the upcoming GHC 7.8 release. The combination seems like it would be epic in terms of web server performance, and it might be a nice choice for web hosting companies / CDNs who have a vested interest in reducing latency as much as possible.
Earlier quoted context omitted.
AFAIK ports checks the checksum of the file when it downloads it against the checksums the ports maintainer submitted. For the ISO mirrors, I don't think there's anything automatic, you have to manually run sha256 on the file and compare checksums. Do Linux distributions have another way?
Most Linux package managers use GPG signed packages.
Earlier quoted context omitted.
AFAIK ports checks the checksum of the file when it downloads it against the checksums the ports maintainer submitted. For the ISO mirrors, I don't think there's anything automatic, you have to manually run sha256 on the file and compare checksums. Do Linux distributions have another way?
Most Linux package managers use GPG signed packages.
It makes sense to sign packages, but not ports. Ports do contain checksum files though, to make sure the source tarball/zip you download hasn't been changed -- this is what 'gaadd33' was referring to.
Earlier quoted context omitted.
Most Linux package managers use GPG signed packages.
In FreeBSD (and the other BSDs), packages and ports are two separate things. Packages are binary distributions; a port is just a set of patches (if necessary) and a special makefile telling the build system where to download the sources for the software you want to build and any special instructions necessary to build/install it. It makes sense to sign packages, but not ports. Ports do contain checksum files though,…
Earlier quoted context omitted.
Most Linux package managers use GPG signed packages.
Right but if you are downloading an ISO you still have to manually verify it correct?
I really like ports - as much for the knowledge that I have all the right header files.
- drop GCC for CLANG.
- introduce VPS (more virtualised approach to jails)
- introduce bhyve (native hypervisor on common standards)
- replace BIND
- Can be run on raspberry pi
- major speed ups in SMP, and networking
FreeBSD Is taking a fairly big leap forward in its sweet spot of the workhorse of the data farm. BSD has always had great jails virtualisation support (it's what LXC or docker is following) but now that's being expanded and complemented with the run-another-OS-on-my-host-OS of "virtio" style VMs
Raspberry pi of course is what the world has been waiting for - never mind all the rest :-)
edit: tidy ups
quick summary for the impatient: - drop GCC for CLANG. - introduce VPS (more virtualised approach to jails) - introduce bhyve (native hypervisor on common standards) - replace BIND - Can be run on raspberry pi - major speed ups in SMP, and networking FreeBSD Is taking a fairly big leap forward in its sweet spot of the workhorse of the data farm. BSD has always had great jails virtualisation support (it's what LXC or…
[1]: http://lists.freebsd.org/pipermail/freebsd-xen/2013-June/001...
[2]: http://wiki.xen.org/wiki/Testing_FreeBSD_PVHVM
It sounds like some amazing performance boosts around networking. I wonder how much of that will carry over to all of the network-type appliances built on FreeBSD? I know Juno's OS runs a pretty ancient version of FreeBSD (6 or 7 IIRC), but am not sure about any other commercial uses.
The `netmap` stuff (high-performance networking stack) is really neat. The author's site has a lot more information about it if you're interested: http://info.iet.unipi.it/~luigi/netmap/ I'm curious to see what kind of performance is possible with FreeBSD 10 (using `netmap`) and the new I/O manager which will be included in the upcoming GHC 7.8 release. The combination seems like it would be epic in terms of web serv…