Depenguinator "Upgrades" Linux to BSD
cperciva writes "Many systems around the world have been possessed by penguins and dead rats. It would be nice to exorcize these evil spirits, but this can be difficult without physical access to the machines in question.
Thanks to a new depenguinator, it is now possible to upgrade Linux systems to run FreeBSD 5.x without requiring anything more than an SSH connection." Clever idea.
The next root kit is announced and within days all machines have been *upgraded* to BSD. Argh
How do you moderate an entire article as flamebait? ;)
Cool stuff, but the write-up is a little, uhm, polarizing?
and watch this flame war. Marshmallows anyone?
If you can read this sig - the bitch fell off.
.. a worm to upgrade all windows boxes to linux remotely :D
Looks like a great tool. Unfortunality for the daemons, I want to replace my dead rat (7.2) with a Debian branded penguin. I would love to do that upgrade online. Any tips or tools?
Thanks!
They're lurking in a nice Linux system just waiting for the moment to come alive and do their dirty work.
Perhaps we penguinistas need to perfect a means of exorcising our systems of these evil daemons! Pure Linux, I say, pure Linux!
"Insanity is doing the same thing over again expecting a different result."
Oooooh! Fire! Pretty!
Be excellent to each other. And... PARTY ON, DUDES!
Personally, I find this howto more useful. ;-)
HOWTO - Install Debian Onto a Remote Linux System
Trusted Computing FAQ | Free Dawit Isaak!
---- It puts the lotion on its skin or else it gets the hose again. It does this whenever it's told.
This isnt new, I changed 3 of my dedicated servers (2 debian 1 redhat) to Gentoo using a doc thats almost 2 years old that was based of a "how to remote install BSD"
you can do this with any system that lets you bootstrap the OS from the harddrive (i.e. gentoos stage tarballs).
I follow the SDK and GDN principles.. Spelling Dont Kount, Grammer Dont Neither
Effective, yet mischievously evil.
Well. Uhoh.. I don't know what to think about this. I mean, it's kinda neat. It's called depenguinator to make clear it's going to get rid of your linux, butbut...
I still think the way of operation is very crude and evil.
It says:
I'd personally go as far as saying:
Do not use this unless you are reallyreallyabsolutely sure you want to permanently destroy your current system.
Bot Assisted Blogging
I've often wondered if this could be done with Windows - if one could make a (perhaps large) Windows executable that, when you double click on it, assimilates your system and turns it into a Linux box. (Which could in turn provide the depenguinators with lots more machines to work on.)
.exe could create the root filesystem (maybe something like a base debian or gentoo install), put everything in place, change how the machine boots, and restart.
Win9x should be more straight forward - you can boot a linux kernel directly from a real DOS prompt using loadlin (although this may not be necessary), and it's possible to have the whole root filesystem stored in one file on a FAT32 filesystem, so the
The dead are going after the living!
>5. Make sure that the first 40MB of space on your hard drive is not being actively used. ...
I'm afraid that is NOT a trivial thing in 99.9% of all machines
PHTHBBBBBTTTTT!!!!!
How do you moderate an entire article as flamebait?
May be you can write a program to flamebaitrate the article. Nobody said only people who freebsduse can verbgenerate, rite ?
getSexySig();
Dead Rat? OMG! I get it! It's like you took "Red Hat" and changed some letters around, and now it's like insulting!
That's what makes it funny!!!!111
"upgrading" from one OS to another is never trivial.
/boot or swap.
/boot?)
/boot is going bye bye anyway.
/home and other stuff that you want to survive the upgrade (/var/www perhaps) and nuking the whole thing using OpenBSD. If you are 'upgrading' from GNU/Linux to a BSD at least make it the safest variant ;-)
I would think that on most i386 systems running linux the first 40mb or so is
Swap is a simple case of swapoff then setting it up again in the freebsd setup (perhaps using the old
and
As a confirmed debian user (running it across multiple platforms) I wouldn't use this anyway and would suggest any user looking for a clean upgrade to a BSD from GNU/Linux would be better off backing up
blog and junk
So all this does is write to the boot partition and load a barebones copy of bsd on a ramdisk? Not terribly impressive. Now if there was a script which could make a list of my RH packages, backup all my config files, generate an BSD install script, then most importantly, intelligently copy my config files from their old RH default location to the new BSD location, then I would be impressed.
Not really difficult, just time consuming. Of course, this assumes the RH system was installed through packages only, would break on most anything compiled, but the script described above would be a start.
Linux is viral (due the the GPL) you're the worm! ;)
Ancient Anguish
This is PERFECT for one of those Dedicated Server hosting providers that don't let you touch your box at all.
That was the initial motivation; although it turns out that this is also very useful for installing FreeBSD on easily accessible servers, since loading the entire OS into a memory disk makes it possible to do things which sysinstall doesn't support -- for example, creating a vinum root system.
Tarsnap: Online backups for the truly paranoid
Reverse defenestration, throwing windows out of your computer. Where do I download? (Props to Eric for definition).
As someone who has been using FreeBSD on his desktop for over a year (first 4.8, now 5.1, soon 5.2) I'm interested in why you don't like FreeBSD on the workstation.
The way I look at it, you get all the stability of FreeBSD's server skills, but on your desk. And the "polish" hasn't been an issue as Gnome looks the same on FreeBSD and Linux.
Heck, I got a TV-in card for xmas and installed it in just a few moments. Popped it in, used kldload to load the driver without touching the kernel, built fxtv from ports, and a min later I was watching CNN in a window on my desktop.
What's up with BSD "demonizing" linux like that?
Actually, it's a fairly neat hack, even if the rivalry is somewhat silly.
You see? You see? Your stupid minds! Stupid! Stupid!
You've obviously never used FreeBSD... The most unstable and buggy version of FreeBSD is a dramatic step-up from any Linux distro.
This is no troll, it's a fact, and extremely hard to dispute ("Linux never crashed for me" does not count).
That just might be a small stumbling block... But I think this is just a proof-of-concept right now... I'm sure you'd be the first to jump up and start waving the Linux banner if something like this was created to convert Windows to Linux in the same manner.
Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
Yep, too many curious people. I've disabled mrtg.daemonology.net for now, but I'll put snapshots of the MRTG graphs online later for anyone who wants to see what a slashdotting looks like.
Tarsnap: Online backups for the truly paranoid
this is a good thing for linux and bsd. it would be nice to see a dedemonizer to go with it. this shows to people what "open systems" REALLY can be.
US Citizen living abroad? Register to vote!
Well, it's not quite what you're looking for, but I have written a shell script to remove all offending SCO IP from Linux based on the evidence presented so far:
I hope everyone finds this helpful.
If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
"having to do a make world on 300 boxen"
/usr/obj (and /usr/src as well?) as nfs, mount it on your 300 boxen, and you only need to install the shiny new bsd with 'make installworld'. That's it. So it is actually quite easy to deploy on a large server farm. You would go the same way with the ports btw: build on one machine and have it make pakcages, than install the packages with pkg_add -r whatever on the rest of the machines. Neat. :)
Not any more, and 'make world' is being deprecated in favor of 'make buildworld'. The difference is, that 'make buildworld' is totally self contained. You do 'make buldworld' on one machine, export
You've obviously never used FreeBSD... The most unstable and buggy version of FreeBSD is a dramatic step-up from any Linux distro.
This is no troll, it's a fact, and extremely hard to dispute ("Linux never crashed for me" does not count).
My experiences with FreeBSD have been universally bad.
From the fact that it didn't support the built-in network card on my laptop (worked fine in Linux and Windows) to the fact that no less than 3 versions of the FreeBSD boot CD *and* floppy hard-locked on my desktop on install (worked fine in Linux and Windows). Then there's the fact that the POSIX threading support was bad enough to make our core application unusable on all versions of FreeBSD (up to 4.9, and it works fine on Linux and Solaris).
I also find the whole CURRENT/STABLE/RELEASE naming a little confusing, but I could live with that if FreeBSD actually provided any real-world benefit. The only areas where I've seen a real, measurable benefit to FreeBSD is in high-volume UDP servers (which is to say: DNS, or possibly NFS) or the IPv6 stack (thanks to the KAME project).
The fact is the FreeBSD technology is playing catch-up to Linux, and even if the technology were great, the childish "my OS is better than your OS" attitude of most FreeBSD users that I've met is what really makes FreeBSD stand out.
I run two IBM T20s - on is my main machine, the other is backup and it runs the OS of the month. I keep FBSD 4.9 on most everything including my primary laptop, but last week I loaded 5.2RC to check its progress.
I was mostly interested in improved USB support and I'm pretty pleased with the behavior so far. I've found some things to not love about ACPI but that may be my lack of clue rather than a problem with the OS.
I pronounced 5.2RC almost cooked enough for daily use. I'm going to wrench on the backup lappie for a few more weeks and if it does nothing worse than ACPI neutering the power switch I'll probably swap drives and make it my main machine.
I am very easy to get along with, but I don't have time to waste being nice to people who are being stupid. -Theo
Like a program that would "Capture the Flag" of a certain monopolistic regime...
;) Taking all the current settings of a Windoze machine, keeping the "wallpaper" and similar, familiar trappings, and allowing you to switch to BSD (or your fax 'NIX), and minimize the trauma of some poor drone's switch to something "else"...
Now *that* would be a Wonderful use of a "program"
But what are the Odds of seeing That happen anytime soon?
mount /usr/src /usr/obj /usr/src /etc
mount
cd
make installkernel installworld
scp -r build:/etc/\*
This is assuming all your machines are identical. If not you'd have to be more careful about the config stuff, and use mergemaster, but that would be the case for any OS.
Of course, NFS is not something you'd want to use to a remote machine, the idea of opening RPC ports in my firewall makes my skin crawl. But for upgrading multiple machines on your own network, the BSD system is really quick and clean.
If something could be done to improve mergemaster, the ease of upgrading FBSD would be the killer argument for the death of the penguin. I've never seen a description of how to upgrade linux which didn't make me decide it would be easier just to do a clean install ofa new version. If there is such a description/method, please post and earn some well deserved karma.
_O_
.|< The named which can be named is not the true named
The worst example I ever saw was on IRC; a jackass said "yeah, if you're stupid you should use Linux, but once you really understand UNIX you should use BSD".
Hey! I said that!
I'm not sure how much of the Slashdot crowd woudl have decided to actually visit the page (your famous /. effect)... but I'm sure the server woudl remain up, as compared to other OS'es I've seen get /.-ed.
/. of my own making. Damned OS (FreeBSD 4.9) stayed up and chugging along...
;-)
I ran a LOTR promotion on my site a few months ago that brought a signifigant number of eyes to the page, in effect, a
I've seen both Windblows and Linux creak under the same type of stress. You may label this as a troll post, but there is a bit of cheer for this "depenguinator"... I'm surprised the Linux community hasn't developed a "downgrade" tool for *BSD (etc.) to pop Linux back on a system posessed by the Daemon!
Cheers folks...
In the FreeBSD Ports collection, there are many Ports marked as broken, and many more unmaintained and suffering from bit-rot.
Name any five that depend on each other and are important for real-world use? Ports suffers from both the desire to be large and from the fact that they're generally supported by one person. I've been running FreeBSD now for nearly 5 years and have only run into a broken port once, snmpd, which broke after a significant change in system variables, which in turn broke snmpd. It was fixed quickly, and since then every time I've built a port it's built.
How exactly is FreeBSD 5 a "dramatic step-up from ANY Linux distro"? FreeBSD releases are only supported for 12 months. Then you have to upgrade. In comparison, Debian supports its releases for at least two years, and RHEL offers a whopping FIVE years. That's right, five. This matters in real-world use.
You don't understand FreeBSD releases. There are point releases (eg, 5.2), -STABLE branches and -CURRENT branches. Most people track a -STABLE branch. Tracking a stable branch provides you with bug fixes and occasionally some new features backported from -CURRENT. Tracking -STABLE requires you to periodically rebuild the system from source, but this is FreeBSD's *advantage* -- it's a single, coherent system that can be easily and totally recompiled from up-to-date source code.
I've been running 4-STABLE now for almost 4 years and its still a supported (ie, active development and maintenance) branch of FreeBSD. The 2.2 and 3 STABLE branches are still there and I think 3 was still supported until the 5-STABLE branch was created.
Maintaining FreeBSD is easy if you track -STABLE and supported for years, and its often possible (albeit not necessarily recommnede) to upgrade from one major release to another -- I did it from 3.x to 4.x. In this manner (and not just point RELEASEs), FreeBSD revisions are suppported for years -- far longer than even most sane people would run a given revision of software.
I never did more chasing than I did trying to keep Dead Rat systems updated; either I used RPMs and prayed that the package author didn't decide to switch a bunch of compilation options, or a built packages from source, which meant I had to do my own porting. And then there was libc upgrades and all other manner of horror of trying to maintain an OS that was a kernel with a bunch of other stuff glued on without any coherency.
I'll grant some Linux distros have better turnkey desktop setups, and certainly greater corporate involvement (although ask yourself when "greater corporate involvement" and "better software" were part of the same sentence), and higher visibility.
But longer suppport, easier maintenance and reliability over the long haul? No way.
The same people who just reinstalled Windows 98.
Interestingly, the k root name server has been running Debian Linux for a year or two now and has not had any "creak". It gets about 1500 queries/second per machine (the root server is distributed geographically via anycasting, and at each site by load balancing), and receives all manner of ill-formed packets.
Other root servers seem to run Linux (use nmap if you're curious), but I don't know the people running them so I can't be sure.
Now admittedly this is a very specific type of service: it's a single application that all fits into memory.
We're going to be moving www.ripe.net and whois.ripe.net from Solaris to Linux in 2004. The WWW server gets about 20 hits/second as you can see here, and the whois server gets around 28 hits/second as you can see here. These have more complex usage, with disk I/O, new process creation, and so on. I wouldn't let these services migrate if I thought they would be unstable.
I've put a static snapshot of mrtg.daemonology.net up here: http://www.daemonology.net/depenguinator/slashdott ing/
I'll update it from time to time over the next day.
Tarsnap: Online backups for the truly paranoid
Correct! If by "just works" you mean:
1. load the driver from the supplied cd (where is that damn thing)
2. reboot
3. recover from blue screen of death
4. reboot in 'safe mode' (thanks MS, for protecting me from evil!)
5. Remove outdated, incompatable driver
6. Spend six hours reading forums and newsgroups about other users experience with how the device failed for them, and what they did.
7. Hunt down an obscure driver that is not intended for use with your device, but will give you some functionality without conflicting with your other drivers.
8. Download and install driver from a less than reputable source
9. Watch a worm run rampant through your system
10. Finally learn your lesson and install Linux or buy a Mac
I am definetily no fan of WinBlows. I use linux everyday. Unfortunately, installing *new* hardware on Linux can be just as inconveinent as any othe OS.
The same thing can be said about most Linux distros as well....
1. find the driver on some obscure website or news group.
2. Recompile the kerenel to include the driver(Damn it has errors)
3. Fix code problems
4. Recompile
5. Repeat steps 3 and 4
6. Write patch for incompaitable gcc version
7. Repeat steps 3 and 4
8. Restart with new kernel
9. kernel panic
10. reboot old kernel
11. Remove incorrectly compiled kernel.
12. Spend six hours reading forums and newsgroups about other users experience with how the device failed for them, and what they did.
14. Download and install beta or (shudder alpha level)driver.
15. Repeat steps 2 - 12
16. Compile driver as loadable module.
17. Repeat steps 3 - 7
18. Start Daemon or reboot
19. Kernel Panic
20. Reboot in 'interactive mode', 'different run level' or 'using emergency boot media'
21. Remove loadable module
22. spend 6months writing your own driver
23. Overlook security flaw in your own code.
24. Watch your box get r00t'ed.
22. Finally learn your lesson and install Windows or buy a Mac.
Those that live in glass houses should not throw stones.
I actually thought I was being funny and expected to be moderated that way. :-)
But moderating me and especially that post 'Insightful' takes the cake. I give up.
And thus hereby offically anounce: Credit for the biggest 'Funny' goes to Mr. '+1 Insightfull' modder.
We suffer more in our imagination than in reality. - Seneca
This is often true, but configurations in which it is not true are not uncommon. A friend of mine once had his BSD server stay up with a load of 86. It might take 2 minutes to completely service a request, but it still worked. When he had linux on the same box, same configuration on the same services, it would fall over around 12. BSD is incredible at handling load. It's less flexible in many ways than Linux, but it makes a really great server.
WARNING: there is a trojan on your
Whilst the above steps might seem trivial to the experienced users, you have to admit it's not the kind of intuitive setup proccess you would reccommend to your grandma.
The comparison was being made with Linux. Granted, Linux has made some strides recently. But look back just one year ago. Under FreeBSD you just mounted your camera like it was an everyday filesystem. Under Linux you had to get special software, wade through reams of imcomplete HOWTO's, cross your fingers, clench your buttocks, and hope it worked.
Whilst win32 is a joke to advanced users, you generally plug in supported hardware, and it just works.
Yeah right. And I have a bridge to sell you in Brooklyn...
Over Christmas vacation I was visiting my mom. Her computer was Win98SE. USB mass storage devices are supported by the OS. Plug in my thumbdrive and it works. But plug in my camera and it goes off into neverneverland. Even though my camera is a standard UMass device. I had to download the camera's USB drivers for Windows before it would recognize it. But I didn't need any special software under FreeBSD.
Don't blame me, I didn't vote for either of them!
While I certainly get your main point (rooting one box will leave the rest safe) I simply *must* take issue with your example.
You say if this guy roots your DNS VM, he won't be able to deface your website. I'll point out the obvious: he now has control over the web address, and can point your website at his own box, where the defaced site lies. Or he can point it at the DNS box itself, install apache, and deface it there.
Point is, if he roots your DNS server, you are all kinds of jacked.
Given a choice between free speech and free beer, most people will take the beer.