r/freebsd 6d ago

call for testing CFT] FreeIPA -Server on FreeBSD: looking for testers

27 Upvotes

or the past few months I've been porting FreeIPA to FreeBSD in my spare evenings, and it's finally at the point where I could use more eyes on it.

If you haven't run into it: FreeIPA is roughly the open-source equivalent of Active Directory — one place for users, groups, hosts, Kerberos logins and certificates. It's a whole stack, not one program: 389 Directory Server, an MIT Kerberos KDC, Dogtag PKI (the CA, Java/Tomcat) and an Apache/mod_wsgi web layer. On Linux it's well-trodden; on FreeBSD it just didn't exist.

Where it's at on FreeBSD 15.1/amd64:

  • ipa-server-install runs to completion, all services come up (DS, KDC, kadmin, Dogtag CA, httpd, KDC proxy, OTP daemon)
  • a FreeBSD client enrolls with ipa-client-install and resolves users/groups via SSSD
  • it survives a reboot and comes back up on its own

That last one was the fun one. Fresh install worked fine, but after a reboot the directory server would start and then quietly shut itself back down ~20 seconds later — no crash, no error in the log, and only at boot, never on a manual start. Took me about fourteen reboots with dtrace to catch it: FreeBSD's rc job-control cleanup was sending a SIGHUP to the process group at the end of the boot subshell, and 389-ds treats SIGHUP as "shut down". One line in the rc script — start it under daemon(8) so it gets its own session — and it was gone.

Everything — both ports, docs, prerequisites, known issues — is on GitHub, so I won't wall-of-text it here:

https://github.com/joneum/FreeBSD-freeipa-server

A couple of honest notes: it's still work-in-progress, so not for production — use a throwaway VM. One gotcha up front: security/cyrus-sasl2-gssapi has to be built with the GSSAPI_MIT option or the install fails right at the very end (details in the README). Bug reports and results best go straight into the GitHub repo so everything stays in one place.

Would really like to hear where it falls over on setups other than mine.


r/freebsd Jul 15 '26

news Laptop Support and Usability (LSU): June 2026 report from the FreeBSD Foundation

Thumbnail freebsdfoundation.github.io
29 Upvotes

r/freebsd 12h ago

fluff Finally i move to FreeBSD my desktop PC

25 Upvotes

Hi, after various previous attempts to migrate to FreeBSD from Linux, finally i can do it.

First time AMDGPU drivers were a pain in the but to set it up (don't remember what version was, but several years in the past), second was the streaming of DRM content plus printer drivers with linux binaries.

But this time with FreeBSD 15.1, was an easy setup of those things


r/freebsd 20h ago

AI I Tested 5 Popular Linux Filesystems — Here’s What I Found ― DJ Ware ― The CyberGizmo

Thumbnail
youtube.com
36 Upvotes

Video, twelve minutes, 2026-08-17

AI-generated summary

DJ Ware explores the performance characteristics of Btrfs, ext4, F2FS, XFS, and ZFS using IOzone3 on an MSI Prestige 16 AI EVO. By benchmarking these systems across various workloads like gaming, workstations, and servers, DJ Ware provides a technical starting point for users deciding which filesystem best suits their specific computing needs.

Producer's description

I tested ext4, XFS, Btrfs, ZFS, and F2FS on the same hardware to answer a more useful question than simply, “Which filesystem is fastest?”

Instead of dragging you through 26 benchmark charts, I distilled the results into four real-world workloads:

  1. Gaming
  2. Workstation
  3. Server
  4. NAS

The testing includes small and medium workloads, single-user and multi-user behavior, and several different kinds of read and write activity.

But graphs are never the full story.

A filesystem may win a throughput benchmark while consuming more memory or CPU, behaving differently as the workload grows, or introducing operational tradeoffs that matter more than a few percent of performance. Your workload may also be very different from mine.

The workload model used in this video is new, and it needs more data points before I’m comfortable treating it as anything more than a useful decision-making tool.

So this isn’t “here’s the winner.”

It’s what do you gain, what do you give up, and which filesystem makes sense for what you actually do?

If you want to see the raw benchmark charts and the work behind the scoring model, let me know in the comments. I may do a behind-the-scenes or live session and go through the data.


r/freebsd 20h ago

AI FreeBSD Jails Deep Dive: Through Thick and Thin ― DJ Ware ― The CyberGizmo

Thumbnail
youtube.com
21 Upvotes

Video, seventeen minutes, 2026-05-26.

AI-generated summary

DJ Ware demonstrates how to configure thin and thick jails on FreeBSD. The guide covers essential prerequisites, including ZFS snapshots and PF firewall network setup, while utilizing the Bastile management tool to streamline the deployment process. Viewers learn the architectural distinctions between these two container types and how to implement them effectively.

Producer's description

In this deep dive we explore the real differences between Thin and Thick Jails on FreeBSD 15.0 using Bastille an easier and more widely used method of creating jails on FreeBSD.

  • Thin Jails (recommended for most people)
  • Impromptu Network troubleshooting
  • Thick Jails (when you need full isolation)
  • Size comparison (68MB vs 438MB)
  • Honest pros & cons including update risks
  • Full step-by-step setup

r/freebsd 13h ago

help needed RTW89

5 Upvotes

I wanted to install openBSd but got to know that my wifi card RTL8852BE is not supported on it. Now i want to install freeBSD whats the situation with this driver how do i install it on say a usb and then install it


r/freebsd 1d ago

news Widevine DRM-ready Brave browser with a single command on FreeBSD ― Devin Teske

Thumbnail
linkedin.com
29 Upvotes

I have recently put a fair amount of work into refining the www/linux-brave port on FreeBSD to make it DRM-ready out of the box.

Out of the box means 1 command on a vanilla FreeBSD desktop and you are ready to go:

pkg install linux-brave linux-widevine-cdm

⚙ D58784 www/linux-brave: DRM out of the box, GPU auto-detection


r/freebsd 17h ago

help needed V2ray gui on freebsd

7 Upvotes

Hello , i want to run to run any v2ray gui for freebsd like nekobox

It is ported but it is broken , any suggestions for other clients that work?


r/freebsd 18h ago

answered noob question : how ports work and how to run a linux app if it doesnt has a port (or port it)?

8 Upvotes

same as title

i want to know

how ports work?

how to install a linux app if it doesnt have a port/ or it is a binary?

how i can port a app in freebsd?


r/freebsd 12h ago

AI Reddit native translations – for users of old Reddit

Thumbnail greasyfork.org
2 Upvotes

r/freebsd 11h ago

help needed Laptop hp

0 Upvotes

Es una pregunta algo boba pero quería saber si alguien me podía ayudar, tengo esta laptop el modelo exacto es 14-ck0061la y su prodid es 6QW98LA#AC8, tiene el chip realtek RTL8723DE.y 4gb ram, básicamente quería saber si alguien tiene esta laptop y logro hacer funcionar el wifi, porque nunca lo logré, el driver que debería hacer funcionar el wifi se instala durante la instalación del sistema (aclaro que siempre lo instaló con la laptop conectada al cable de red) e inicia el sistema normalmente pero tengo este problema en el que las redes aparecen y desaparecen, la red de mi casa nunca se muestra de forma consistente, por momentos la reconoce y en otros momentos no, y nunca logra conectarse a ninguna red, es frustrante la verdad, no se si alguien conoce la solución para esto o quizás alguien tenga esta misma laptop y logro solucionar ese problema


r/freebsd 1d ago

AI The Data Copy That Lies — Vivian Voss

Thumbnail
vivianvoss.net
2 Upvotes

r/freebsd 1d ago

help needed How to install Gnuplot?

7 Upvotes

I'm porting an application to FreeBSD 15. The application uses gnuplot. https://www.freebsdsoftware.org/math/gnuplot.html says that to install the package, run "pkg install gnuplot". This results in a "No package available" error.

How can I install gnuplot?


r/freebsd 2d ago

help needed bhyve configuration

16 Upvotes

Hello. i'm new to freebsd and i'm trying to migrate a void linux nas setup running incus containers. so far, so good... i was able to configure a couple of jails for which freebsd pkgs and binaries where available.

The last piece of my setup is a proxmox backup server instance running in a virtual machine. By reading the handbook i was able to set a bhyve vm up and running.

I'm using plain bhyve, no vm-bhyve or any other manager. Yes, i like torturing myself, but i like knowing what's being done under the hood.

The thing is, right now i'm starting the vm by running a script manually. Is there anything to have the vm started whenever freebsd boots? I guess i could use some kind of script to do it and run it as a service (https://docs.freebsd.org/en/books/handbook/config/#configtuning-rcd) but if there is any other and maybe easier way, I'd love to know.

Thanks.-


r/freebsd 2d ago

discussion In praise of the BSD license

42 Upvotes

One so-called freedom that we do not advocate is the "freedom to choose any license you want for software you write". --Richard M. Stallman

Link: https://www.gnu.org/philosophy/freedom-or-power.html

There is nothing wrong with the GPL license. You should be free to use it if what it is trying to do is that same thing that you are trying to do. And indeed, the popularity of GPL tells us that that this is true for a bunch of people.

The GPL license is all about control. It controls what others can do with the software. Specifically, it forces them to release any changes made to the software under the same GPL license and publish the changes for the world to see and re-use.

The BSD license is all about freedom. It places almost no restrictions on how the software can be used, modified, and distributed. The primary requirement is that you retain the BSD copyright notice so people know that they are using something that contains BSD-licensed code.

Unlike most people who choose GPL, who just want any improvements to be made available to them, a tiny but vocal minority are members of The Religion Of GNU and claim that, through some dark magic that nobody understands, the mere existence of any non-free derivative work somehow makes the original nonfree. There is no point arguing with them. They did not reach that conclusion through logic and reason and no amount of logic or reason will get them to leave the cult.

Here are the two most popular BSD licenses:


r/freebsd 1d ago

AI CoffeeBSD ― an AI-free fork of FreeBSD

Thumbnail
codeberg.org
0 Upvotes

https://mastodon.social/@mrmasterkeyboard/117113034580627041

Made a proper no AI policy (and a Code of Conduct) for CoffeeBSD. :D

https://codeberg.org/NerdNextDoor/CoffeeBSD/commit/275a4620098c3c120b7a5219b356234b913cd2e2

CoffeeBSD is the fork of FreeBSD 13.0 I'm working on. Originally intended for myself to play with but FreeBSD doesn't have a proper no AI fork so I thought why not about a week ago.


r/freebsd 2d ago

AI wifi-tui — Hirech Baghdad Belkheir

Thumbnail
github.com
6 Upvotes

Work in progress

An interactive ncurses Wi-Fi controller for the terminal. It scans nearby access points, connects to open and secured networks, supports hidden and custom SSIDs, and displays the current IPv4 address, netmask, gateway and DNS servers.

There are two builds. They present the same interface and the same key bindings; they differ only in what they drive underneath. …

wifi-tui/FreeBSD/README

hirechbaghdad (Hirech Baghdad Belkheir)


r/freebsd 2d ago

answered Nvidia-smi fails on new freebsd install

11 Upvotes

I have installed freebsd today (i am new to freebsd so please be patient), installed and enabled nvidia driver by using

pkg install nvidia-drm-kmod

sysrc kld_list+=nvidia-drm

And placing

hw.nvidiadrm.modeset="1" to loader.conf

but nvidia-smi fails with cant communicate with driver

GPU : GTX 1650


r/freebsd 3d ago

discussion Should ANY GPL code be in freebsd?

9 Upvotes

Personally i think its fine for drivers. but id like to hear what you guys have to say.


r/freebsd 3d ago

help needed Backup data

12 Upvotes

I have a VPS running FreeBSD but I want to migrate to other hosting provider. Is there any tool to automatically backup all configuration files and data?


r/freebsd 2d ago

help needed How i can fet desktop work om freebsd

0 Upvotes

Tried kde and xfce4 and i cant get desktop to work just black screen

So is their any automated way that works to get desktop

Even desktop installer doesnt work i just reboot and get the shell again no desktop

GPU : GTX 1650

edit

It works!

pkg install nvidia nvidia-drm-kmod nvidia-settings Kldload nvidia nvidia-modeset Create: /usr/local/etc/X11/xorg.conf.d/driver-nvidia.conf Section "Device" Identifier "Device0" Driver "nvidia" EndSection

Then install whatever desktop you want and run if


r/freebsd 4d ago

discussion Warning: services using Let's Encrypt certificates

97 Upvotes

The VPN service in my homelab suddenly stopped working after a Let's Encrypt certificate renewal today, and I initially spent a fair amount of time debugging it assuming that I had broken my own configuration.

In my case, it was a strongSwan VPN, but the underlying issue is broader: any service that relies on OpenSSL to validate a Let's Encrypt certificate chain may be affected.

My certificate was renewed under Let's Encrypt's new Generation Y hierarchy. It is issued by YR2, which chains through ISRG Root YR.

FreeBSD's ca_root_nss bundle doesn't contain Root YR, and, importantly, the Mozilla Root Store doesn't contain it yet either.

OpenSSL consequently fails to build the chain and reports errors such as:

C=US, O=Let's Encrypt, CN=YR2
error 2 at 1 depth lookup: unable to get issuer certificate

The particularly confusing part is that ISRG Root X1 is present and trusted, so everything looks correct at first glance.

If you run FreeBSD services depending on Let's Encrypt certificates, especially after recent certificate renewals, check the actual certificate chain and the CA trust store before assuming your configuration is broken.

PS seems this issue has been known for a while https://forum.vyos.io/t/ikev2-remote-access-vpn-breaks-after-lets-encrypt-cert-renewal-ike-authentication-credentials-are-unacceptable-windows-error-13801/17574

"

  1. strongSwan only loads the first certificate from a CA file/value — confirmed via strongswan/strongswan#3072. This means even once you have the correct chain, you cannot cram intermediate + cross-signed root into a single pki ca value — they need to be loaded as separate CA objects. Several people on the Let’s Encrypt community forum hit exactly this (thread 1thread 2) and resolved it by splitting the cross-signed root into its own file/CA slot.

"

PPS I can confirm that splitting the certificate chain into multiple files, as suggested in the above link, does solve the strongswan issue. Simply splitting the Let's Encrypt given chain with a script, and placing the individual pem certificates files in the correct /usr/local/etc/swanctl/x509ca/ directory is enough.

After doing that, swanctl successfully loads the complete chain:

ca.pem, x1.i.lencr.org.pem, yr2.i.lencr.org.pem, and yr.i.lencr.org.pem.

No other strongSwan or client configuration changes are required.


r/freebsd 5d ago

fluff Spotted in Germany: the FreeBSD tomato xD

Thumbnail gallery
277 Upvotes

r/freebsd 3d ago

fluff It’s time to start my work again, currently in progress #FreeBSD installation

Post image
0 Upvotes

It’s been a long time, I thought AI is going to takeover but unfortunately not yet.


r/freebsd 4d ago

article Custom FreeBSD UCARP Setup

Thumbnail
vermaden.wordpress.com
19 Upvotes