Manpage Monday: bastille tags
Organize your jails with labels.
Tag two jails as prod at once
> bastille tags 'myjail yourjail' add prod
List every jail carrying the web tag
> bastille tags ALL list web
Tags make it easy to target groups of jails across your fleet.
> bastille service TAG nginx restart
> bastille sysrc TAG -ae
See `man bastille-tags` for more details.
Monthly reminder to periodically check your bastille.conf for updates or new entries from the sample config:
cd /usr/local/etc/bastille
diff -u bastille.conf bastille.conf.sample
We try to keep config updates to a minimum, but sometimes they are required.
Pop quiz (because I'm trying to solve this problem):
How would you schedule a job to run at sunrise? Or at sunset?
The problem, of course, being that "sunrise" and "sunset" are moving targets. Different each day by a few minutes.
How would you solve this?
Happy Friday #FreeBSD
Any #FreeBSD folks working on OCI things:
Are there any plans for a bhyve-based runtime with a model similar to Apple's container tool or Kata Containers? I think the virtfs support is now in FreeBSD (sadly, not yet virtio-fs, but hopefully soon?). I'd love to have bhyve as an alternative to jails for container isolation.
For the curious among you, this is the list: https://github.com/BryanLunduke/SoftwarePoliticsTracker
For the youngest among you, or those who didn't pay any attention in History class: "promotes degeneracy" is literal Nazi speech. That's not a dog whistle, it's a loud and clear"sieg heil".
These people aren't even trying to hide it, why would we give them the benefit of doubt?
So, for the record: Bryan Lunduke is a fascist.
Manpage Monday: bastille limits
Keep a noisy jail from eating the whole host.
Powered by rctl + cpuset integrations.
Cap memory at 4G:
> bastille limits myjail set memoryuse 4G
Pin it to CPUs 0 and 1:
> bastille limits myjail set cpu 0,1
Clear every limit:
> bastille limits -a myjail reset
See `man bastille-limits` for more details.
Happy Friday #FreeBSD
How do you like "Cybersecurity Awareness month" so far?
Nothing like a couple of critical CVEs to completely derail a day.
How badly did it derail your day?
RE: https://chaos.social/@gsuberland/117476732249394887
It's got to take real effort to screw up this bad, right?
https://tech-insider.org/emudhra-ca-private-keys-compromised-number-4-2026/
Manpage Monday: bastille zfs
ZFS snapshots for your jails, without the ZFS syntax.
Snapshot a jail
> bastille zfs myjail snapshot
Roll back to the last snapshot
> bastille zfs myjail rollback
Check dataset disk usage
> bastille zfs myjail df
You can also get/set props or jail an extra dataset.
See `man bastille-zfs` for more details.
Happy Friday #FreeBSD
I got myself set up on Meshtastic over the weekend. Pleasantly surprised to find over 400 nodes in the regional mesh that spans nearly 650km (400mi)!
Manpage Monday: bastille clone
Duplicate a jail exactly. New name, new IP, in seconds.
Clone myjail to newjail
> bastille clone myjail newjail 10.23.3.4/24
On ZFS you can even clone a running jail live
> bastille clone -l myjail newjail 10.23.3.4/24
Perfect for spinning up test copies of jails.
I was in my Dad’s garage looking for a tool and found this old stack of CDs that he now uses to deter birds from his garden.
Ubuntu 9.10 server edition. Blast from the past!
Happy Friday #FreeBSD
Recommend your favorite Meshtastic / Meshcore hardware for someone getting started.
For context, I'm looking for something I can use from my RV while traveling and off-grid. I'm considering a vehicle mounted radio and 1-2 small mobile units for hikes and exploring.
📍 12 km ENE of Metahāra, Ethiopia
🕐 Mon 05 Oct 2026 19:47 UTC
🌍 M4.6 Earthquake 🟢 Light
📊 Magnitude: 4.6
📏 Depth: 10 km — Shallow
🗺️ 8.9608, 40.0091
🔗 https://earthquake.usgs.gov/earthquakes/eventpage/us6000tzry
#Earthquake #Seismic #EarthAlerts #DisasterAlert #BreakingNews #Environment #Nature #Science #OffGrid #Metahra #Ethiopia