DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 1st March 2020
barntop47 barntop47 is offline
New User
 
Join Date: Feb 2020
Posts: 4
Default OpenBSD Newbie with a lot of questions

Hi there.

I've been using Linux for the last couple of years now and have recently taken an interest in OpenBSD, specifically because the developers of the Libre distro Hyperbola Gnu/Linux-Libre have announced they are developing a new hardfork of OpenBSD which they promise to be more secure and privacy respecting.

So I thought I'd familiarise myself with OpenBSD itself so, coming from Linux, I've got quite a lot of questions to ask.
  • Is there a written installation guide for OpenBSD anywhere?
  • How do I make a full-disk encryption install with LVM?
  • How can I install OpenBSD in a multi-boot system?
  • Are there any hacking or pen-testing tools and apps for OpenBSD just like Kali Linux or BlackArch?
  • Can Docker or any equivalent container software be installed in OpenBSD?
  • Can I create my own OpenBSD iso for live booting?
  • Does OpenBSD have Firejail, AppArmor or any jailing equivalent?
  • Can I install LibreSSL to replace OpenSSL? If so, how?
  • Can I use OpenVPN on OpenBSD?
  • Does OpenBSD use any kind of Ramdisk like tmpfs?
  • Does anyone have any recommendations (apps, practises, settings, etc.) for new OpenBSD users, especially privacy and security-minded users?

Thanks.
Reply With Quote
  #2   (View Single Post)  
Old 1st March 2020
frcc frcc is offline
Don't Worry Be Happy!
 
Join Date: Jul 2011
Location: hot,dry,dusty,rainy,windy,straight winds, tornado,puts the fear of God in you-Texas
Posts: 185
Default

https://www.openbsd.org/faq/
Reply With Quote
  #3   (View Single Post)  
Old 1st March 2020
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,032
Default

Hello and welcome!

The FAQ is a great place to start, as frcc noted. It won't answer all of your questions, however, so I'll take a very brief stab at them:

----
  • installation guide -- FAQ
  • LVM - there isn't one.
  • multiboot - FAQ
  • pentest - some 3rd party tools in the package collection. Ports/packages are discussed in the FAQ.
  • Docker - no
  • Bootable live media - USB stick discussed in the FAQ
  • Jails - nope. chroot(2) and privilege separation instead.
  • LibreSSL - built in, my dude/dudette. Developed by OpenBSD devs, on OpenBSD. See https://www.libressl.org/
  • OpenVPN - yes, from the package collection, discussed in the FAQ
  • tmpfs - mount_mfs(8), and rd(4) which is used with install media (the RAMDISK kernel)
  • Recommendations -- The OS doesn't usually require any "tuning" "hardening" or "tweaking" as the defaults are carefully considered. The only place where we generally don't use the defaults -- although we may start with them -- is disk partition sizing. There's no LVM, as noted above.
Culturally, this OS Project is different from all others. The Project's members work on the OS that they want, the way they want to, for themselves. We users can come along for the ride, if that suits us.

Last edited by jggimi; 1st March 2020 at 03:03 PM. Reason: clarity
Reply With Quote
  #4   (View Single Post)  
Old 1st March 2020
jmccue jmccue is offline
Real Name: John McCue
Port Guard
 
Join Date: Aug 2012
Location: here
Posts: 44
Default

For tmpfs, not really like Linux, but you can create a ramdisk. I have this in my /etc/fstab to create a 1gig 'tmpfs', took me awhile to understand what to do from the docs

Thus I put it here in case you want to do the same.

Code:
swap /mnt/tmpfs mfs rw,noatime,nodev,nosuid,-s=1g 0 0
Note, from my experience, OpenBSD uses a lot less memory than Linux so I never came close to maxing memory out and I think 1g is a bit large for my use-cases.

I created and did a chmod 1777 on /mnt/tmpfs prior to updating fstab
Reply With Quote
  #5   (View Single Post)  
Old 2nd March 2020
CiotBSD CiotBSD is offline
c107:b5d::
 
Join Date: Jun 2019
Location: Under /
Posts: 107
Default

hi

for pentester, you have the SecBSD Project: https://www.secbsd.org/
(absolutly based on OpenBSD with tools to audit security)

as Live System USB/CD, you have the FuguITA project: http://fuguita.org/?FuguIta
(always on OpenBSD stable with recents syspatches)
* maybe ResFlash - depends your project - : https://stable.rcesoftware.com/resflash/

For Tmpfs, as said others, not exists like into Linux, but you can do same with mfs:
- into the console/terminal system, i.e:
Code:
mount_mfs -i 1024 -s 8m -o "rw,nodev,noexec,nosuid" swap "${directory}"
- into fstab file:
Code:
swap ${directory} mfs rw,-i=1024,-s=8m,nodev,noexec,nosuid 0 0
(as examples)

(and personally, I dont use never 1777 rights on tmpfs ; only 700, maybe 0705, it's enough)
__________________
GPG:Fingerprint ed25519 : 072A 4DA2 8AFD 868D 74CF 9EA2 B85E 9ADA C377 5E8E
GPG:Fingerprint rsa4096 : 4E0D 4AF7 77F5 0FAE A35D 5B62 D0FF 7361 59BF 1733
Reply With Quote
  #6   (View Single Post)  
Old 3rd March 2020
gpatrick gpatrick is offline
Spam Deminer
 
Join Date: Nov 2009
Posts: 239
Default

Quote:
Jails - nope. chroot(2) and privilege separation instead.
Did they end vmm development? Although it is a hypervisor that is more comparable to bhyve than jails, it is still an option.

It would be interesting if NetBSD's sailor could be ported to OpenBSD.

Last edited by gpatrick; 3rd March 2020 at 12:44 PM.
Reply With Quote
  #7   (View Single Post)  
Old 3rd March 2020
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,032
Default

Development of the hypervisor is still ongoing. But a hypervisor is not a process jail.
Reply With Quote
  #8   (View Single Post)  
Old 1st April 2020
Sensucht94's Avatar
Sensucht94 Sensucht94 is offline
Real Name: Paolo Vincenzo Olivo
Shell Scout
 
Join Date: Oct 2017
Location: Rome
Posts: 97
Default

Quote:
Originally Posted by gpatrick View Post
It would be interesting if NetBSD's sailor could be ported to OpenBSD.
sailor's been stagnating for a long time now, last commit is dated 2017, as iMil@ in the meantime moved to Kubernetes and seems to be focusing on it. At this point, I think it's safe to assume the project won't come to light in the foreseeable future.
__________________
“Mi casa tendrá dos piernas y mis sueños no tendrán fronteras„
Reply With Quote
Reply

Tags
install, linux, newbie, noob, openbsd

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Few questions from newbie NiCrAm OpenBSD General 5 16th March 2015 10:21 PM
OpenBSD Newbie! Majorix OpenBSD General 13 18th July 2013 10:14 PM
Newbie - Building OpenBSD WAP, need assistance bobmarss OpenBSD General 5 16th October 2012 10:00 PM
returning newbie questions jimbus FreeBSD Installation and Upgrading 6 22nd June 2012 02:19 AM
Is my OpenBSD system abnormally slow? (Newbie / pretty old hardware) Smith OpenBSD General 5 10th April 2012 03:10 AM


All times are GMT. The time now is 04:20 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick