Current status: Porting #hbsdfw (a #HardenedBSD soft fork of #OPNsense ) to HardenedBSD 15-STABLE.

This might take a while.

Current status: Attempting another build of #hbsdfw ( a #HardenedBSD based soft fork of #OPNsense ).

If I get the same ZFS-related kernel panic this time around, I'm gonna try to fix it.

Current status: I think I figured out why the last few #hbsdfw (a #HardenedBSD soft fork of #OPNsense ) builds were experiencing issues.

I've started a new build to test some theories. Hopefully we'll have a new functioning build this weekend.

Current status: Attempting a new build of #hbsdfw ( a #HardenedBSD based fork of #OPNsense ).

Running into an interesting #Suricata error on my #hbsdfw instance:

-- Just ran out of space in the queue. Please file a bug report on this

I've published a new, untested build of #hbsdfw (a #HardenedBSD 14-STABLE based fork of #OPNsense ).

Your update process is, as usual:

  • Backup your existing config
  • Reinstall with the new image
  • Restore your config
  • Default username: root
    Default password: hbsdfw

    https://hardenedbsd.org/~shawn/hbsdfw/hbsdfw_installer_vga_14.3-20250602-112258.iso.xz

    #infosec

    Current status: Building a new version of #hbsdfw (a #HardenedBSD fork of #OPNsense ).

    I"ll do a limited test deployment this week. If it works well enough, I'll publish it.

    Starting a new build of #hbsdfw (a #HardenedBSD based soft fork of #OPNsense ).

    I'll deploy it as part of the maintenance period this coming Wednesday/Thursday. If both the build and deployment succeeds, I'll publish it.

    I have published a new build of #hbsdfw (a #HardenedBSD 14-STABLE fork of #OPNsense): https://hardenedbsd.org/~shawn//hbsdfw/hbsdfw_installer_vga_14.2-20241231-212608.iso.xz

    This build has been lightly tested. Further testing would be appreciated. I plan to deploy this version on my perimeter firewall on 05 Jan 2025.

    This build also integrates the -fzero-call-used-regs=used feature that recently landed in HardenedBSD 15-CURRENT across the entirety of base userland and packages.

    Default username: root
    Default password: hbsdfw

    I've published a new (and currently untested) build of #hbsdfw (a #HardenedBSD 14-STABLE fork of #OPNsense):

    https://hardenedbsd.org/~shawn/hbsdfw/hbsdfw_installer_vga_14.2-20241211-200538.iso.xz

    Default username: root
    Default password: hbsdfw

    As usual, your upgrade steps are:

  • Backup your config
  • Reinstall with the new image
  • Restore your config
  • If you deploy this version, please let me know how it goes. Thanks!

    #infosec