Openbsd

Living out in the boonies has its charms: quiet nights, open skies, and an estate that keeps me busy, but internet choices aren’t one of them. Options are slim, and Carrier-Grade NAT (CGNAT) makes life rough if you want to self-host. Static, routable IPs are what you really need, but out here that’s a luxury. I didn’t want to rely on Cloudflare tunnels, ngrok, or similar middlemen. For a while, I leaned on Tailscale as a DIY SD-WAN (basically a secure mesh network overlay across your devices). It’s great, but not every service or device plays nicely over it. ...

Thanks to Anirudh for getting me started on the right path! Running Signal Desktop in a Debian VM on OpenBSD I wanted to get Signal Desktop running in a way that integrates smoothly with my OpenBSD host. Since Signal doesn’t have a native OpenBSD port, I spun up a Debian VM using vmm(4) and vmctl. Below are my notes for setting this up, including a few gotchas. Step 1: Download Debian ISO Start with the Bookworm Debian netinst ISO (I had issues with Trixie): ...

OpenBSD and Me OpenBSD holds a place near and dear to my heart. Back in the Air Force, I deployed some of the first Snort sensors in 2003/2004 to detect network traffic. I quickly became engrossed with the elegance and simplicity of OpenBSD’s build system and ongoing maintenance. I wish I could dig back through my early eBay purchases and find the little Compaq machine that powered my first home server install. In my dorm room, I built my first PF firewall and router to practice network configurations. After spending all day working on Sidewinder firewalls and Cisco gear, I was blown away by what I could accomplish with a $200 computer and some persistence. ...

Awhile back I wanted a fully supported laptop to use as my OpenBSD development machine. I ended up with a Lenovo u150 which has worked out great and the price was right. Along the way of setting it up, I have learned a few tricks to get OpenBSD purring on it. Wanted to share for those who come after me… ...

I have covered just about everything possible for drive encryption in OpenBSD. My last post is on using the least recommended option for encrypted volumes. It is slower, unsupported, and unfortunately the best option for seamless operations :) The best way to think about svnd is if you have used truecrypt, it is very similar in that you create an image rather than actually encrypting the entire partition. Using some fancy linking and auto mounts you can use it for hosting your /home /tmp and others. The instructions are below, but unlike the last howto it assumes your system is already installed. This is because svnd does not require you to modify the system prior to /install and can be a good security implementation to use if you are already up and running: ...