Discussion
Loading...

Post

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Stefano Marinelli
@stefano@mastodon.bsd.cafe  ·  activity timestamp 4 weeks ago

16 days to go!

FreeBSD tips: native read-only root filesystem, simple and effective.

https://it-notes.dragas.net/2024/05/31/freebsd-tips-and-tricks-native-ro-rootfs/

#EuroBSDConAdvent#EuroBSDCon#BSD#FreeBSD#OpenBSD#NetBSD#DragonFlyBSD#ZFS#PF#RunBSD

  • Copy link
  • Flag this post
  • Block
matuzalem
@matuzalem@mastodon.bsd.cafe replied  ·  activity timestamp 4 weeks ago
@stefano brilliant. I will try this with my pi that is running with an external drive for everything but the system. Thank you!
  • Copy link
  • Flag this comment
  • Block
David Chisnall (*Now with 50% more sarcasm!*)
@david_chisnall@infosec.exchange replied  ·  activity timestamp 4 weeks ago
@stefano

I really wanted to move a load of things like default settings and init scripts out of /etc so that you could have a complete separation between system things (which can be on a read-only filesystem, support A/B upgrades, and so on) and user-modifiable things. MacOS has done this now and it's great. Updates are just 'download this disk image, extract it to a new volume, set the new volume as the boot one, reboot, delete the old one'.

You can get pretty close to this with ZFS (I'd love for upgrades to be possible with zfs receive!) but with other filesystems you have a problem with fstab. If /etc is not part of the root image, you need to be able to find it somehow.

  • Copy link
  • Flag this comment
  • Block
dch :flantifa: :flan_hacker:
@dch@bsd.network replied  ·  activity timestamp 4 weeks ago
@david_chisnall @stefano either of you played with https://github.com/KlaraSystems/sync-be ?

I could see this being formalised a bit and incorporated into FreeBSD in some way.

  • Copy link
  • Flag this comment
  • Block
Zeki Çatav 🤔 ☕ 🕯️🎶
@catavz@mastodon.social replied  ·  activity timestamp 4 weeks ago
@stefano The same logic could work on Linux too, right?
  • Copy link
  • Flag this comment
  • Block
Stefano Marinelli
@stefano@mastodon.bsd.cafe replied  ·  activity timestamp 4 weeks ago
@catavz no, as Linux doesn't support something like that, unless you're using an immutable Linux distribution.
  • Copy link
  • Flag this comment
  • Block
Log in

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.0-rc.3.1 no JS en
Automatic federation enabled
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login