Stefano Marinelli
boosted
Stefano Marinelli
boosted
Made my FreeBSD server at Netcup ready to host multiple isolated applications with automatic https via Let's Encrypt.
Internet → Server → PF firewall → Caddy jail (reverse proxy) → Individual application jails
Each app gets its own isolated jail for security, while Caddy handles all the routing and https. PF keeps the front door locked.
All of course with IPv6 first, where every Jail has it's own public IP address and using NAT for legacy IPv4.
Love how FreeBSD jails make this kind of segmentation so elegant.
Made my FreeBSD server at Netcup ready to host multiple isolated applications with automatic https via Let's Encrypt.
Internet → Server → PF firewall → Caddy jail (reverse proxy) → Individual application jails
Each app gets its own isolated jail for security, while Caddy handles all the routing and https. PF keeps the front door locked.
All of course with IPv6 first, where every Jail has it's own public IP address and using NAT for legacy IPv4.
Love how FreeBSD jails make this kind of segmentation so elegant.
Client: "I’d like to try some alternative themes for my WordPress site you’re hosting, but I’m afraid of breaking the production site."
Me: "Say no more."
I start:
- create a record for the test site
- bastille clone -l prod testing ip
- bastille console nginx → edit nginx proxy, add the new domain → certbot --nginx -d newdomain.tld
- bastille console testing → mysql → UPDATE wp_options SET option_value = 'https://newdomain.tld' WHERE option_name = 'siteurl';
UPDATE wp_options SET option_value = 'https://newdomain.tld' WHERE option_name = 'home';
- "Done. You can now connect to..."
FreeBSD, jails, ZFS. No limits.
Michael Dexter
and 1 other
boosted
Don't be a fool (like I was) when it comes to #jails on #FreeBSD. I ignored them despite using FreeBSD for decades, because I had no problem that could not be solved w/o them and thought "why learn yet another technology I barely need".
But it's not only about solving problems. It gives you a super lightweight and fast tool to test things (and trashing 🗑️ them with zfs destroy) without cluttering your configs or interfering with production services.
E.g. I hesitated to run a webserver for publishing content because I didn't want a publicly accessible Apache on my mail relays, nor on my Nextcloud instance at home.
With jails, the MX is left unmodified. If I feel like it I could move it to a different system just using tar or cpio or zfs send.
All I needed to accomplish that was a few shell scripts to initially generate a jail template and, of course, the invaluable book "FreeBSD Mastery: Jails" of @mwl .
What motivated me to get started? All the
speakers at #EuroBSDCon showing what incredible things they do with Jails. Especially >>IMUNES: A Network Emulation and Simulation Tool Built on FreeBSD<<.
If you want to watch the IMUNES talk you can find the link on my jailed webserver 😉 here https://pub.v32bis.cc/eurobsdcon.html
Don't be a fool (like I was) when it comes to #jails on #FreeBSD. I ignored them despite using FreeBSD for decades, because I had no problem that could not be solved w/o them and thought "why learn yet another technology I barely need".
But it's not only about solving problems. It gives you a super lightweight and fast tool to test things (and trashing 🗑️ them with zfs destroy) without cluttering your configs or interfering with production services.
E.g. I hesitated to run a webserver for publishing content because I didn't want a publicly accessible Apache on my mail relays, nor on my Nextcloud instance at home.
With jails, the MX is left unmodified. If I feel like it I could move it to a different system just using tar or cpio or zfs send.
All I needed to accomplish that was a few shell scripts to initially generate a jail template and, of course, the invaluable book "FreeBSD Mastery: Jails" of @mwl .
What motivated me to get started? All the
speakers at #EuroBSDCon showing what incredible things they do with Jails. Especially >>IMUNES: A Network Emulation and Simulation Tool Built on FreeBSD<<.
If you want to watch the IMUNES talk you can find the link on my jailed webserver 😉 here https://pub.v32bis.cc/eurobsdcon.html
Stefano Marinelli
boosted
Alex Akselrod
boosted
That new #SanDiego independent news outlet Daylight San Diego (on the Fedi at @index) did a really thorough article about a new push here locally to end incarceration of girls
https://www.daylightsandiego.org/san-diego-advocates-push-to-end-girls-incarceration/
That new #SanDiego independent news outlet Daylight San Diego (on the Fedi at @index) did a really thorough article about a new push here locally to end incarceration of girls
https://www.daylightsandiego.org/san-diego-advocates-push-to-end-girls-incarceration/
Stefano Marinelli
boosted
IT Notes
FreeBSD vs. SmartOS: Who's Faster for Jails, Zones, and bhyve VMs?
Which virtualization host performs better? I put FreeBSD and SmartOS in a head-to-head showdown. The performance of Jails, Zones, and bhyve VMs surprised me, forcing a second round of tests on different hardware to find the real winner.
⁂
More from
Stefano Marinelli
IT Notes
FreeBSD vs. SmartOS: Who's Faster for Jails, Zones, and bhyve VMs?
Which virtualization host performs better? I put FreeBSD and SmartOS in a head-to-head showdown. The performance of Jails, Zones, and bhyve VMs surprised me, forcing a second round of tests on different hardware to find the real winner.
⁂
More from
Stefano Marinelli
IT Notes
FreeBSD vs. SmartOS: Who's Faster for Jails, Zones, and bhyve VMs?
Which virtualization host performs better? I put FreeBSD and SmartOS in a head-to-head showdown. The performance of Jails, Zones, and bhyve VMs surprised me, forcing a second round of tests on different hardware to find the real winner.
⁂
More from
Stefano Marinelli
Alex Akselrod
boosted
Interesting... #SanDiego next?
https://calmatters.org/justice/2025/09/los-angeles-jail-lawsuit/
Interesting... #SanDiego next?
https://calmatters.org/justice/2025/09/los-angeles-jail-lawsuit/
Michael Dexter
boosted
Sylve is a new and very promising bhyve and jail manager for FreeBSD - coming with clustering support and a pretty nice and modern web ui which is alike the #Proxmox one. I had a closer look at it... And I'm amazed!
#sylve #freebsd #jail #jails #bhyve #vm #virtualization #manager #ipv6 #zfs #opensource #runbsd #blog #devops #go #golang #cluster #freebsdcluster #bhyvecluster
https://gyptazy.com/blog/sylve-a-proxmox-alike-webui-for-bhyve-on-freebsd/
Michael Dexter
and 1 other
boosted
Finally managed to join @dexter@bsd.network’s bhyve call after a long time. Really happy to see that #sylve plays an important role and we can discuss upcoming feature implementations. Things are definitely moving into the right direction with clearly visible progress! Thanks @hayzam@bsd.cafe
#freebsd #bhyve #jail #jails #development