8 days 'til my birthday.. just sayin' :flan_umbrella:​

Ori Bernstein (ori@) has sent a follow-up mail about his experimental #GEFS port to #OpenBSD tech@, including a updated diff with newfs_gefs(8) utility, and more error handling. :flan_hacker:​

[...]
First off, thanks to Martijn, and everyone else who tried it out and sent patches.

Everything is updated and rebased, and the diff has been regenerated with all of the lastest.

I've gone through a the error handling code. In theory the filesystem will handle errors mostly correctly. There are probably still places where theory diverges from reality. I've also forward ported most of the important bugfixes from 9front.

[..]
Some userspace tools have been done (you can now mkfs on openbsd!), but snapshot control hasn't.

https://marc.info/?l=openbsd-tech&m=179346643071941&w=2

A new dbupdate(8) utility is being backported and released as a syspatch(8) update for #OpenBSD 7.9/8.0. This will make it easier for users to periodically update /etc/ssl/cert.pem and /usr/share/zoneinfo. :flan_thumbs:​

It's also available as an errata patch: https://www.openbsd.org/errata80.html#p005_dbupdate

#eMudhra

Here's me testing one of the games I had on GOG, "Iratus".

https://bsky.app/profile/brynet.ca/post/3mxx6ndw4ys2r

Also check out Thomas (thfr@)'s livestreams, he owns more games than me:
* Disco Elysium
* Hollow Knight
* PREY
* Death Stranding
* Witcher 3 Remastered
* Vampire Surviors
..

https://video.gamerstavern.online/c/playonbsd/videos

@thfr

Pigs really can fly, the moon is made of cheese and Wine now runs on #OpenBSD! :flan_cool:​

Largely made possible by the work of Andrii (NethIafin), fabien@, and thfr@, 64-bit Windows applications (yes, games) run on -current!

WIP ports@ patch here: https://marc.info/?l=openbsd-ports&m=179236125692175&w=2

#PlayOnBSD 🎮

Good news! Another common reason for having to run relayd or nginx in front of OpenBSD httpd(8) has been eliminated. :flan_thumbs:​

#OpenBSD httpd(8) now supports new block and drop rules for filtering HTTP requests based on header values! :flan_hacker:​

EDIT: Even gooder "Good News", this has been re-tagged and will make the upcoming #OpenBSD 8.0 release! :flan_thumbs:​

rsadowski@ modified src/usr.sbin/httpd/*: httpd: add header block/drop rules for request filtering

With this incoming requests can also be rejected based on the value of a request header. Valid options are:

header block name value code [arg]
Close the connection with an error response when a request header matches. Both name and value are shell-style patterns and are matched case-insensitively against the header name and value. code must be a valid HTTP status code. For codes in the 3xx range, arg is required and sent as the "Location" header. It must start with "http://" or "https://". For all other codes, arg is optional and used as the log message identifying the rule.

header drop name value
Silently close the connection without sending a response
when a request header matches, using the same pattern rules as block.

Based on a diff from Purple Rain from SecBSD, who wrote a initial version to block Ai- and other Scraper. Also requested and tested by Mischa.

Tested by Purple Rain, Mischa and others, thanks

Feedback by Lloyd, Christian Schulte, thanks

OK kirill@

Context (and configuration examples) can be found in the initial discussion on tech@: https://marc.info/?l=openbsd-tech&m=178999929723078&w=2

This follows support added for custom HTTP response headers back in July.

https://bsd.network/@brynet/116979133275422995

Some more good progress on Qualcomm X2 Elite, Tobias Heider (tobhe@) just committed a fix to #OpenBSD -current for PCIe NVMe controllers on these machines. :flan_hacker:​

This fixes a timeout in dwpcie_atu_config and makes the NVME attach on my HP Elitebook X G2q.

https://marc.info/?l=openbsd-cvs&m=179062185677960&w=2

Ori Bernstein (ori@) has sent an "early preview" diff for GEFS, the "Good enough file system" to #OpenBSD tech@. :flan_hacker:​

GEFS is a new crash-safe, snapshotting, copy on write [filesystem]

https://marc.info/?l=openbsd-tech&m=178948744271633&w=2

While still experimental, GEFS has been used in production on 9front/plan9.

As a reminder, Heartbleed was a buffer over-read. :flan_popcorn:​

According to LibreSSL developers, #OpenSSL 4.1 has silently introduced an undocumented major breaking change to no longer NUL-terminate ASN.1 strings, in a minor release.

"This will cause buffer overreads left and right."

https://marc.info/?l=openbsd-cvs&m=178919882590646&w=2

https://github.com/openbsd/src/commit/0bae430

Hope all my #BSD friends have a great time this week in Brussels, Belgium at #EuroBSDcon 2026! 😎

Hey friends, I would really appreciate a signal boost! Thanks! :flan_heart:​

Would really appreciate a signal boost! Thanks, friends! :flan_heart:​

Very much looking forward to Ori Bernstein (ori@)'s #EuroBSDCon 2026 talk "GEFS: The File Shredder of the Future" :flan_smile:​

https://events.eurobsdcon.org/2026/talk/NVMSCJ/

#OpenBSD

#OpenBSD has a new browser in -current ports! :flan_cool:​

landry@ modified ports/www/librewolf/*: Import www/librewolf 151.0.3pl1, from MAINTAINER Leah Rowe

LibreWolf is a modified version of Mozilla Firefox focused on privacy, security, and software freedom. It enhances protections against tracking and fingerprinting, and applies additional hardening compared to standard Firefox.

ok caspar@

Thanks goes to @libreleah (maintainer) for sticking with it and getting the port into shape and ready for import! :flan_thumbs:​ :flan_hacker:​

The qwz(4) driver for Qualcomm WCN7850 "ath12k" wifi devices has been enabled in #OpenBSD -current, it should arrive in upcoming arm64/amd64 snapshots. :flan_hurrah:​

mglocker@ modified src/sys/arch/{arm64,amd64}/conf/GENERIC: Enable qwz(4) for amd64 and arm64 GENERIC.

mglocker@ modified src/sys/arch/{arm64,amd64}/conf/RAMDISK{_CD}: Enable qwz(4) for amd64 and arm64 RAMDISK.

Thanks to Marcus Glocker! :flan_hacker:​

https://marc.info/?l=openbsd-cvs&m=177877544827590&w=2

Marcus Glocker (mglocker@) has sent a diff to tech@ enabling initial WPA2 client support to qwz(4), a driver for Qualcomm WCN7850 ath12k WiFi devices found on newer amd64 and arm64 laptops, such as the Snapdragon X1 series (e.g: Samsung Galaxy Book4 Edge). :flan_hacker:​

https://marc.info/?l=openbsd-tech&m=177715698908601&w=2

This follows some recent work already in-tree (nwid scanning).

https://marc.info/?l=openbsd-cvs&m=177676446228947&w=2

#OpenBSD

If any of my work on #OpenBSD, or my highlight posts here (or elsewhere) has been helpful in the past, a small recurring monthly donation would be extremely appreciated. :flan_heart:​

https://brynet.ca/wallofpizza.html

https://bsd.network/@brynet/114458997143046937

Also coincidentally, tmux creator, Nicholas Marriott (nicm@)'s first OpenBSD src commit exactly a year later. :flan_peek:​

https://marc.info/?l=openbsd-cvs&m=124389728412353&w=2

Approaching 18 years next month that I submitted my first #OpenBSD port.. and it's #tmux! :flan_smile:​

https://marc.info/?l=openbsd-ports-cvs&m=121226747005033&w=2