Slashdot Mirror


DragonFlyBSD 1.2 Released

vsarunas writes "The DragonFlyBSD Team is pleased to announce the official release of DragonFly 1.2.0! Get it here, or here, or as a torrent. DragonFlyBSD is a continuation of the stable and high-performance FreeBSD 4 branch of FreeBSD with acpica5 and updated drivers so it runs on more and newer machines. DragonFlyBSD can execute FreeBSD 4 and Linux binaries and uses the FreeBSD ports collection. In addition, DragonFlyBSD is also officially supported by pkgsrc. This release represents a significant milestone in efforts to improve the kernel infrastructure. It features a standards-conformant SACK implementation, improvements to the VFS layer, and a multithreaded networking stack that utilizes the DragonFly lightweight message passing system to communicate among processors. More information can be found on Matt Dillon's journal and the Status page of the DragonFly wiki."

184 comments

  1. DragonFly is awesome! by Anonymous Coward · · Score: 2, Funny

    Fly Fred Fly!!!!

    1. Re:DragonFly is awesome! by alpha_foobar · · Score: 1

      This isn't offtopic, Fred is the dragon fly mascot.

      Perhaps the moderator should know the topic? OK, the post isn't exactly useful.. but its not offtopic.

  2. FreeBSD alternatives on the rise... by Ars-Fartsica · · Score: 3, Interesting
    NetBSD in particular and DragonFlyBSD to a lesser extent seem to be taking off in the wake of what seems like mass disillusionment in FreeBSD 5.x.

    I would be interested in hearing from people how either of these BSD alternatives stack up as a desktop box.

    1. Re:FreeBSD alternatives on the rise... by dinivin · · Score: 5, Interesting

      DragonFly doesn't stack up as a desktop box at the moment. Here's a post I made on osnews.com about it:

      Go ahead, install Dfly, and cvsup the latest FreeBSD ports tree and DragonFly dfports tree. Now try to build some useful apps... Way too many apps won't build from the ports tree. If you're lucky enough, there's a dfports override. If you're even luckier, it'll be the same version as the ports tree. Let's assume you actually get those apps installed... A few weeks later you cvsup the ports tree again and try to do a portupgrade. Suddenly SDL in the ports tree is upgraded... By SDL in the dfports tree isn't. Great... Now you have apps that want the newer SDL that keep building SDL from dfports, which you already have installed and which isn't up-to-date...

      You can always try pkgsrc, if you want.

      First, you need to build and install the bootstrap code. Then you need to update bmake from the bmake package (the forget to tell you that on the gobsd.com site). Forget about getting enlightenment running, imlib2 fails to build. You currently need to patch the gtk2 port (assuming the patch hasn't been committed yet). Firefox won't build, nor will SDL. If you want to build Blender, it'll try to build nasm, which requires the gcc3-c package... Which won't build. (You can edit the nasm Makefile to remove the gcc3-c dependency).

      Sorry folks, but DragonFly is really only suited for developers at the moment, IMHO.

    2. Re:FreeBSD alternatives on the rise... by xedx · · Score: 3, Informative

      Unfortunately DragonFly doesn't yet have its own package manager, so some applications may not build or will require some extra effort like patches to build. But most if not all can be built using the DragonFly override of ports (DFPORTS) and PKGSRC

    3. Re:FreeBSD alternatives on the rise... by puppy0341 · · Score: 4, Informative

      I'm using DragonFlyBSD as my desktop without problems.
      You still need the libmap patch for flash, because they think it's too dirty to integrate.
      http://leaf.dragonflybsd.org/mailarchi ve/users/200 5-01/msg00045.html

      Packages are also availbale either built from netbsd pkgsrc of freebsd ports:
      wiki.dragonflybsd.org/index.php/Packages

      I also use the citrus patch to get wide char support:
      leaf.dragonflybsd.org/~joerg/citrus5.dif f

      Packages for use with the citrus patch are availble here:
      http://ftp.fortunaty.net/DragonFly/inoffici al/port s-packages-libc.so.5-gcc34/All/

      If you use gcc34 packages/world everything is compiled with stack protector.
      It's also very snappy :)

    4. Re:FreeBSD alternatives on the rise... by puppy0341 · · Score: 2, Informative

      If you are not a developer you should use packages.
      Of course it's not yet perfect, but who would exepct that.
      And i've yet to see a desktop without problems.

    5. Re:FreeBSD alternatives on the rise... by jensend · · Score: 1, Informative

      One problem with NetBSD is that despite nearly universal agreement that the 4-clause BSD license is stupid the NetBSD Foundation insists on keeping the advertising clause. This is a good reason to stick with FreeBSD or DragonFly.

    6. Re:FreeBSD alternatives on the rise... by Anonymous Coward · · Score: 3, Interesting

      I think the "packaging" idea of dragonflybsd deserves a comentary

      Tha plan of matt is to move part of the VFS to userspace (ala plan9 it looks to me, but don't trust me).

      This will allow to do neat tricks too. Say,you have a app depending in randomlib 1.0. Now you want to install something that installs randomlib 2.0 and and breaks the previous app. With the packaging work, matt seems to expect to allow both packages to live at the same time - randomlib 1.0 will be showed to one app and randomlib 2.0 with another.

      Join that VFS work to a good packagin system, and you'll have a system where you can install ANY package without conflicting with other packages - everything could be manipulated by the VFS to avoid conflicts. This means you won't have the conflicts you can have in current systems. With fragonfly, you'll be able to run 5-years old apps at the same time than beta code without incurring in package conflicts.

    7. Re:FreeBSD alternatives on the rise... by Anonymous Coward · · Score: 0

      Are we going to have to replace the "BSD IS DEAD" troll with a "BSD IS DISILLUSIONED" troll as if so has anyone sent a memo out to the GNAA idiots

    8. Re:FreeBSD alternatives on the rise... by dinivin · · Score: 2, Interesting

      If you are not a developer you should use packages.

      If that's the case, why not say that on their website? They don't (or as of this morning, they didn't). Instead, they point out that the FreeBSD ports, combined with the DragonFly dfports is the official method for installing software.

      Of course it's not yet perfect, but who would exepct that. And i've yet to see a desktop without problems.

      Nor did I ever make the claim that the developers said it'd be perfect. Far from it. I was simply responding to the top posters question about how DragonFly stacks up as a desktop OS.

      Dinivin

    9. Re:FreeBSD alternatives on the rise... by drmerope · · Score: 1

      This shouldn't surprise you...

      From the installation readme:
      NOTE!!! DRAGONFLY IS UNDERGOING DEVELOPMENT AND IS CONSIDERED EXPERIMENTAL! BSD RELATED EXPERIENCE IS RECOMMENDED WHEN USING THIS CDROM.

      Honestly. I don't think they've advertised themselves as being anything else. They're trying to validate their kernel architecture before they needlessly start putting a lot of effort into packaging.

      Note, despite being experimental, the OS is quite stable and developers are willing to fix broken port/pkg issues rapidly when they are reported. I just wouldn't expect everything to be nicely polished and "push-button" in the way that larger and more mature projects can deliver at the moment.

      If you're going to run this OS, you should be willing to interact a bit on the mailing lists.

      And that is precisely the people they want trying out the OS, b/c those are the people who are going to be able to submit good bug reports with kernel dumps and whatnot... and handle being asked to try patches.

      None of that means anything about whether it is a good desktop OS. It is fine on the desktop, but it isn't for the inexperienced or the unwilling (yet).

      And yes, you and I have spoken before on slashdot. I am aware you had a nasty experience.

    10. Re:FreeBSD alternatives on the rise... by drmerope · · Score: 2, Insightful

      I wouldn't call it disillusionment. It is more impatience. I've been using FreeBSD on the desktop since 5.0-Current in 2001, the only real glitch was when they broke signal delivery in 2002.

      As a desktop OS, FreeBSD is pretty healthy--the performance short-comings that still linger in 5.x are not so important on the desktop... imo.

    11. Re:FreeBSD alternatives on the rise... by Anonymous Coward · · Score: 0

      mass dillusionment ?? I tried FreeBSD 5.3 and found the bad press was severely unjustified.. works great!

    12. Re:FreeBSD alternatives on the rise... by dinivin · · Score: 1

      None of that means anything about whether it is a good desktop OS.

      And that's where we disagree. In my opinion, a good desktop OS should make it simple to update/upgrade software packages that are installed through the official method. Currently, DragonFly doesn't succeed at that. It certainly has potential, and you'll never hear me say that it's unstable, but unless a user has a very specific purpose for it, and knows that their needed packages/ports will install (and be up-to-date with what the need), I wouldn't be able to recommend it to that user.

      Dinivin

    13. Re:FreeBSD alternatives on the rise... by Anonymous Coward · · Score: 0

      I have been using DragonFly for a long time just as my Home Desktop System and got this:

      -GNOME 2.10
      -Gaim 1.2.1
      -XMMS
      -XChat 2.4.3
      -Pan 2
      -Evolution 2
      -Firefox 1.0.2
      -mp3blaster
      -OpenOffice.org 1.0
      -Acrobat Reader
      -MPlayer
      -Pornview

      Who says it is not for the Desktop user?

    14. Re:FreeBSD alternatives on the rise... by Anonymous Coward · · Score: 0

      And that also explains the relatively poor state of packaging for DFBSD.

      When the VFS work is done, you could build a really cool package management system on top of that. Meanwhile it doesn't make sense to invest too heavily in making other packaging systems work -- all that work will be thrown away when the native system is finished anyway.

      It is interesting to note that pkgsrc seems to have been relatively easy to get to work, though.

    15. Re:FreeBSD alternatives on the rise... by ArbitraryConstant · · Score: 1

      "Sorry folks, but DragonFly is really only suited for developers at the moment, IMHO."

      Indeed.

      I don't see anything particularly wrong with that. They're breaking a lot of new ground, and I don't see any of the developers claiming that they're production ready. I think Dillon mostly wants regular releases to keep the system stable enough to build itself.

      --
      I rarely criticize things I don't care about.
    16. Re:FreeBSD alternatives on the rise... by setagllib · · Score: 1

      How is it a good reason? It will only affect you if you want to use the few parts of software under the license in another project or embedded system. It doesn't make any difference to your usage or the quality of the operating system itself. I sincerely hope you're just trolling because you can't seriously believe what you say.

      --
      Sam ty sig.
  3. BSD? by stratjakt · · Score: 2, Interesting

    If I wanted to install a BSD on my little home router/gateway, just for the sake of playing around with BSD, which BSD is the one to cut your teeth on?

    With linux, the choice of distro is pretty much irrelevant - to me at least - because I wind up with virtually the same system, the only differences being the layout of some rc scripts.

    The world of BSD isn't the same though, so which is the most prolific, or newbie-friendly, or has the widest support for common hardware, etc?

    About the only thing keeping me from playing with BSD is the lack of a single "entry point".

    --
    I don't need no instructions to know how to rock!!!!
    1. Re:BSD? by swimmar132 · · Score: 2, Informative

      FreeBSD, for sure.

    2. Re:BSD? by Anonymous Coward · · Score: 0

      OpenBSD.

    3. Re:BSD? by Anonymous Coward · · Score: 0

      I'd say start with this, I know I am. At 80MB for a live ISO, it definitely looks like the easiest entry point ;)

    4. Re:BSD? by random_culchie · · Score: 3, Informative

      I would go with FreeBSD if I was in your shoes.

      Its Installer is a breeze to use and rarely have problems with com mon hardware.

      OpenBSD's Install is a nightmare for a new user (last time I used it!) and is clearly aimed at the security concious user. (The tin foil hat distro hehe)

      I have never used NetBSD but its claim to fame is the sheer number of platforms it supports.

    5. Re:BSD? by niteice · · Score: 2, Informative

      OpenBSD, definitely, since you're running it on a router/gateway.

      --
      ROMANES EUNT DOMUS
    6. Re:BSD? by Anonymous Coward · · Score: 0

      Agreed. OpenBSD is wonderful. I used FreeBSD on my server for two days and got annoyed by all the crap that FreeBSD had. After that I just said fuck it and installed OpenBSD. Best move I've ever made. OpenBSD is so clean it amazed me. No playing around, just one kickass and secure OS.

      Oh, and as for the installer, it's very easy to get a hang of, just make sure you have your partitions set up how you want them. ;)

    7. Re:BSD? by compass46 · · Score: 2, Funny
      OpenBSD's Install is a nightmare for a new user

      http://www.openbsd.org/faq/faq4.html ;)

      Specifically section 4.5. I use both Free and Open and I like the Open installer MUCH better and find it actually easier to deal with. I printed out section 4 of the FAQ and read along as I installed one of my first times. That install was my first successful one.

    8. Re:BSD? by DesScorp · · Score: 5, Informative

      "which BSD is the one to cut your teeth on?"

      That implies he doesn't know much about BSD. Advocating Open as a first install then, might not be the best of ideas...

      --
      Life is hard, and the world is cruel
    9. Re:BSD? by wallykeyster · · Score: 0

      I found myself in a similar position only a few weeks ago. I hadn't installed linux since Red Hat 6.x, so I had been out of the loop for a while. I started with Fedora but realized that my old box is not Fedora material :) I ended up installing FreeBSD and it went smoothly. I ftped the boot disk images then installed the OS via ftp. I then added and configured KDE and few other apps. All told, installation took less than two hours, plus another hour or two in download time.

      I'm running my install on a PII 300 with somewhere under 256 mb of RAM. The only unresolved problem so far is getting sound to work in KDE. I think my next project is turning this box into a firewall/router, so we'll see how that goes.

    10. Re:BSD? by Anonymous Coward · · Score: 1, Informative

      I don't think it's a big problem.
      I started out with OpenBSD a year ago with basically zero *nix knowledge and didn't think it was very hard.

    11. Re:BSD? by stratjakt · · Score: 1

      No, I've never installed any of the *BSD's to play with myself, but I know all about linux, have used Solaris, HP-UX and AIX, so I'm not intimidated.

      Everyone seems to be advocating OpenBSD or FreeBSD, and I'm not sure if it's a "free as in beer" vs "free as in free" philosophical thing, since noone has really said anything technical to back their arguments up.

      I think I'll just go with Windows ME.

      --
      I don't need no instructions to know how to rock!!!!
    12. Re:BSD? by Nimrangul · · Score: 3, Informative
      OpenBSD is the suggested often for a router because it is a tight little system with a fair number of security enhancements and it's pf packet filter is native to OpenBSD, thus more tightly integrated and tuned for Open.

      It's partly that you don't want a router cracked and partly cause you want the best packet handler, pf is that.

      Plus you can set it up as your mail relay and stop spam, and yadda, yadda, yadda... It's a generally nice small system and the ports with it almost all run without fuss.

      --
      I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
    13. Re:BSD? by random_culchie · · Score: 1

      Thanks for the info must give it another go if thats the case.

    14. Re:BSD? by KutuluWare · · Score: 2

      Ideally you will probably want OpenBSD on a router/gateway, since it's typically considered 'more secure' than the others. This is really 'more secure out-of-box', though, since a little effort with any *BSD will get you to the game point.

      However, having installed all four of them in the past 2 months, I can tell you that FreeBSD is the easiest to get up and running. The FreeBSD installer, and all it's well-documented problems, is still much better than the install process for OpenBSD or NetBSD. I would suggest installing the latest released version of FreeBSD 5.x, get used to that, and then try moving up to -STABLE. This will get you used to the ports process, the rebuilding world process, and the general operating of a BSD system.

      Once you are used to BSD, if you feel a need to migrate off of FreeBSD, I would suggest OpenBSD. I would avoid NetBSD unless you need it's platform support, as (IMO) it's the most advanced-admin-centric of the BSD variations.

    15. Re:BSD? by Anonymous Coward · · Score: 2, Insightful

      'About the only thing keeping me from playing with BSD is the lack of a single "entry point".'

      So you're saying that out of the 200+ Linux distributions you can find an easy entry point, but with the 3 BSD OSs (DragonFly is for developers for now) you can't make up your mind?

    16. Re:BSD? by stratjakt · · Score: 1

      No, I'm saying that linux is linux is linux. There isn't that much difference between distros, especially when you're like me and just install the base and wind up compiling everything you use by hand, because none of the packaged stuff ever has the features I want, for instance, links2 with svgalib support.

      Even so, you can use .rpms on debian or .debs on fedora.

      It's not so with BSD, OpenBSD and FreeBSD are, for what I can tell, completely different OS's with limited compatibility between the two.

      --
      I don't need no instructions to know how to rock!!!!
    17. Re:BSD? by onetruedabe · · Score: 5, Informative

      The common mantra has always been:

      For security, choose OpenBSD.
      For portability, choose NetBSD.
      For usability, choose FreeBSD.

      About the only thing keeping me from playing with BSD is the lack of a single "entry point".

      That's also the biggest strength -- different (*cough*) "distros" have different strengths and weaknesses. (You said it yourself, Linux has become "beige".)

      If you want to breathe new life into an old Alpha you picked up online, NetBSD is the way to go. (Or if you have a handful of different architectures you would like to keep synced to a common source tree.)

      If you want a lean, mean, server machine, you should opt for OpenBSD. [My preference.]

      If you're looking to build a box to use on your desktop and start "fiddling" with, go with FreeBSD -- this is the likely first choice for 80% of the BSD population, and it sounds like what you're looking for.

      (My other criteria is "If you need to run X, run FreeBSD" because it supports the most graphics cards & monitors.)

    18. Re:BSD? by FidelCatsro · · Score: 1

      honestly if you want the easiest newbie freindly BSD then get yourself a mac mini or an old imac with OS X.
      Other than that FreeBSD or one of the live cds
      http://www.freesbie.org/ or livecd.sourceforge.net(not sure how far along this one is) Though they are nowhere near as **newbie-freindly** as OS X .

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
    19. Re:BSD? by Anonymous Coward · · Score: 0

      "...If I wanted to install a BSD on my little home router/gateway, just for the sake of playing around with BSD, which BSD is the one to cut your teeth on?..."

      I looked at Linux, FreeBSD and OpenBSD to make a copper to radio, no IP (invisible) network bridge on an embedded Soekris box. OpenBSD was the most straight forward to install plus lots of tools made by others to help. I like pf rule set with its stateful connections and load balancing built in. But I also put m0n0wall on my Sokeris router/firewall and its built from FreeBSD. So take your pick.

    20. Re:BSD? by synthespian · · Score: 3, Informative

      OpenBSD install is *not* a nightmare. It's regarded as pretty straightforward. You just have to have some attention span to read the FAQ. Can you do that?
      Otherwise, it's a smooth install. It's not a Linux install, though, it's different. And, also, they generally assume you will *not* be dual-booting.
      Let's dismistify this thing that OpenBSD in an alien OS. It's a rock-solid Unix, secure, peer-verified-code with mechanisms built-in to prevent attacks. It's ports tree is growing.
      The "average" open-source person will not be missing a lot on their ports tree. Only if you need unsual software (unusual in terms of the average Unixhead), like some Common Lisp compilers, or cutting-edge programming languages (Alice, Oz, Mercury, etc) you will miss stuff in the ports tree. You can even install Java (you might miss Mono - but probably nobody's given a serious try at compiling Mono on OpenBSD (*)) But this is not your Linux-kid OS that wants a M$ replacement.
      Please remember BSD has a long history of Unix development. It doesn't have the money that Linux currently is attracting from the suits, but please take an unbiased view: look at the security record of any BSD and compare with *this year's* Linux kernel exploits (25, IIRC). However, people have different needs (some want Java, some want security, some want performance, others have different different hardware and need portability, others need to work on a supercomputer - whatever), so that has to be taken into account. My point is: all this is Unix. And that's a Good Thing.

      (*) A whole different problem, that seems to be growing, is people writing software full of Linuxisms, instead of writing stuff for *UNIX*, in which case it should be portable. This has been a cause of trouble for some programs, for me at least.

      --
      Main difference between the BSD license and the GPL license: one is from California and the other is from Massachusetts
    21. Re:BSD? by CondeZer0 · · Score: 2, Insightful

      From a conversation with a friend earlier today:

      "OpenBSD was my first *NIX, and I thank God for initiating me to Unix with the only barely sane *NIX at the time."

      Of course this days I know of better things.

      --
      "When in doubt, use brute force." Ken Thompson
    22. Re:BSD? by Anonymous Coward · · Score: 0

      I totaly agree, unless you're planning to run less common services, OpenBSD is possible to install and maintain for a complete newbe. All the problems I've encountered were nicly explaned in the FAQ.

      I never tried DragonflyBSD though, I like what they're doing but personaly I'm only like to play with my desktop OS and Linux is much more supported in this area and so better suited for me.

      P.S. I use OpenBSD for FW/nat/web/mail services.

    23. Re:BSD? by Anonymous Coward · · Score: 0

      > It's not so with BSD, OpenBSD and FreeBSD are, for what I can tell, completely different OS's with limited compatibility between the two.

      Ballocks. 99% of the time, the same stuff compiles out of the box on Open, Free, and NetBSD. DragonFly is really really different, and shouldn't be compared.

    24. Re:BSD? by EvilNTUser · · Score: 1

      A lot of people have already responded, but I would like to add my experience.

      When I was beginning my transition to Unix, I started by trying to install Mandrake on my personal computer. I failed. Then I tried installing FreeBSD on a secondary computer. It sort of worked, but I didn't really know what to do with it.

      Then I installed OpenBSD on my file server. It was love at first sight.

      The installer was simple, fast. I could boot off the network easier than I could burn a CD. Nothing was running by default. The man-pages were a work of art.

      Had it not been for OpenBSD, I'd probably still be running Windows, not having learned enough to successfully configure Linux.

      Thank You.


      (I now run FreeBSD on my primary computer, having recently dumped gentoo.)

      --
      My Sig: SEGV
    25. Re:BSD? by Anonymous Coward · · Score: 1, Funny
      "...Linux-kid OS..."

      Theo, is that you?

    26. Re:BSD? by jaseuk · · Score: 1

      The differences between the BSDs are not that great. Compatibility isn't an issue. The same software that runs on Linux runs on BSD, that also goes for binaries. In fact you can run old linux binaries (Redhat 6 for example) that are near to impossible to run on the latest Fedora.

      Getting back to your source example, FreeBSD's ports system handles your particular requirement for that package:

      echo WITH_SVGALIB=1 >> /etc/make.conf
      cd /usr/ports/www/links
      make install

      I suspect pretty much any customisation you'd typically make is available within the ports system.

      You can install RPMS on FreeBSD too, if you really, really want to. Both RPM3 and RPM4 are in the ports system.

      Which leads to another major benefit. You are not forced to use the particular version of a package that the distribution forces on you with their latest distribution. A good example is mysql which has 4 different versions available through the ports system to install. Most major apps have at least the last 2 major versions (eg: Apache 1.3 & Apache 2.0) and often a cutting edge development/beta.

      If you install FreeBSD for anything, install a box just to try out software. It'll save you so much time if you just want to try an app out to see if its worth using on your main systems.

    27. Re:BSD? by mccoma · · Score: 1
      I actually think it would be one of the better ones to start off with. The main caution is doing the partitioning. Look at the FAQ section of the install and read the through the pamphlet in the cd cover to see how an install goes.

      Other than that part, it is actually pretty easy. Once you have it installed, working on it is very easy. For router / gateway configurations there are a load of web pages to explain what to do, including the excellent FAQ and PF FAQ.

      Weirdly, I actually have a lot more problems with FreeBSD's graphic installer. Don't know why, I guess I just got used to the "get it running, then add ports" instead of doing it all at once.

      If you do intend to go to OpenBSD, order the 3.7 CD, it comes out in May.

    28. Re:BSD? by Anonymous Coward · · Score: 0

      *this year's* Linux kernel exploits (25, IIRC).

      Jesus! Not even Microsoft is that bad.

    29. Re:BSD? by Anonymous Coward · · Score: 0

      I would avoid NetBSD unless you need it's platform support, as (IMO) it's the most advanced-admin-centric of the BSD variations.

      As someone who actively maintains around 15 mixed OpenBSD and NetBSD servers/workstations, I can honestly say that the administriva is about the same.

      NetBSD has actually had less security advisories than OpenBSD in the past few years. This, along with vastly improved performance and scalability (although still nowhere near FreeBSD), means I probably won't bother using OpenBSD again.

    30. Re:BSD? by Anonymous Coward · · Score: 0

      (My other criteria is "If you need to run X, run FreeBSD" because it supports the most graphics cards & monitors.)

      What does this have to do with FreeBSD? Although FreeBSD is the only BSD with support for DRI accelerated OpenGL, X.org/XFree provides the same 2D graphics hardware support on all platforms.

    31. Re:BSD? by Anonymous Coward · · Score: 0

      OpenBSD install is *not* a nightmare. It's regarded as pretty straightforward. You just have to have some attention span to read the FAQ. Can you do that?

      Ah, the condescending attitude. Must be an OpenBSD user.

    32. Re:BSD? by Shanep · · Score: 1

      If I wanted to install a BSD on my little home router/gateway, just for the sake of playing around with BSD, which BSD is the one to cut your teeth on?

      I moved to OpenBSD full time years ago after I discovered the high quality documentation (the man pages mostly). Sometimes when I need to use something other than OpenBSD I am reminded of how great their doco really is. Now there are also lots of great quality dead tree books too.

      OpenBSD-specific books

      For learning, I think good quality texts as a guide and reference and a clean consistent platform are important. So I would recommend OpenBSD for that. You should suffer much less frustration if you are willing to read and use OpenBSD.

      For a firewall/gateway, OpenBSD is the native home of pf.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    33. Re:BSD? by Shanep · · Score: 1

      OpenBSD's Install is a nightmare for a new user

      OpenBSD's installer might be a shock to a newbie who is used to typical Linux installers, or even FreeBSD or NetBSD. But I love it! It is fast, straight forward and functional. Just read the fine documentation and then enjoy it from then on.

      I have been trying to install NetBSD 2.0 across multiple spindles and I can't seem to find a way to do it without loosing my disk configuration when moving on to the next disk. I resorted to installing on one disk, booting up from it and then creating the partition, slices and file systems manually, moving onto them what I wanted and then updating fstab. What a pain. OpenBSD deals with this no problem in the basic text installer. Trying this recently with NetBSD, I realised how spoiled I have been with OpenBSD.

      The OpenBSD installer is anti-bloat all the way. I can install OpenBSD on a modern PC in about 3 minutes and OpenBSD with X in about 5. Sometimes after installing OpenBSD, simply typing "startx" brings X up without configuring it.

      And once OpenBSD it is installed... pkg_add almost always works perfectly for every available package.

      I can't for the life of me, figure out what you mean when you say the OpenBSD installer is aimed at the tin foil hat user? I love the fact that I can easily modify boot media to install from a console port. Why bother with graphical fluff when installation is just an occasional means to an end. It's not like you want to spend any great amount of time in an installer.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    34. Re:BSD? by Shanep · · Score: 1

      they generally assume you will *not* be dual-booting.

      Before the days of my house having tens of operational computers, I used to dual boot OpenBSD often. For a long while I had two Seagate 20GB disks which I was booting between OpenBSD, Debian GNU/Linux, Windows 2000, QNX, OpenBSD, FreeBSD, BeOS 5 PE and Windows NT 4.0. Yes, OpenBSD was on each disk. One was my main OS and the other I used for testing.

      This was mostly for my learning. Smart Boot Manager is great!

      I never could get Solaris 8 x86 or SCO UnixWare to play well with other operating systems on the same disk.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    35. Re:BSD? by Shanep · · Score: 1

      That implies he doesn't know much about BSD. Advocating Open as a first install then, might not be the best of ideas...

      "Thrown into the deep end" mean anything to you?

      Read OpenBSD documentation, use OpenBSD, repeat and persist until it is crystal clear. What better way to learn than to be confronted with problems, research them and conquer them?

      I am not really impressed with NetBSD or FreeBSD documentation, especially compared with OpenBSD documentation. Do you advocate learning from a system that does more for you and explains less?

      If someone asked me what the best way to learn linux is, I would suggest Linux From Scratch. After that, all the distros will probably look restrictive and broken to most people who got the most out of LFS.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    36. Re:BSD? by Shanep · · Score: 1

      This is really 'more secure out-of-box', though, since a little effort with any *BSD will get you to the game point.

      Which of the other BSD's has gone all out nuts with active protection mechanisms? None to the point of OpenBSD.

      W^X, Propolice, Stackghost, priv sep, priv revocation, etc etc etc...

      Not to mention the passive efforts such as the audits and wholesale migrations away from potentially dangerous code.

      Sure it might not be perfect (what is?), but I don't see how anyone can claim that any other BSD can just be configured with a little effort to match OpenBSD's security. They specifically balance everything they do on security and true freedom. Teams of people working hard for years on such a specific area, yet you think it can easily be matched with a little effort with another BSD?

      How often have you read an advisory against the BSD's, which stated "OpenBSD not vulnerable" and "OpenBSD fixed this x months ago"?

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    37. Re:BSD? by Anonymous Coward · · Score: 0

      Meta-mods! Please note that this guy is a WELL_KNOWN Plan9 TROLL. I have nothing against plan9 os but stickong it into every post is defenietly troll-like behaviour.

    38. Re:BSD? by SillyNickName4me · · Score: 2, Interesting

      > OpenBSD is the suggested often for a router because it is a tight little system with a fair number of security enhancements

      Definitely but it is still lacking FreeBSD style jails (not often an issue on a router but can be very nice for seperating your mail environment a bit better from the router itself, see below)

      > and it's pf packet filter is native to OpenBSD, thus more tightly integrated and tuned for Open.

      Its native for open, but integration in freebsd seems to be pretty good. What is more, FreeBSD gives a choice of 3 different packet filters

      > It's partly that you don't want a router cracked and partly cause you want the best packet handler, pf is that. ...

      > Plus you can set it up as your mail relay and stop spam, and yadda, yadda, yadda... It's a generally nice small system and the ports with it almost all run without fuss.

      Uh, I can do the same with virtually any Unix, and setting this up with NetBSD, FreeBSD or Linux is really easy and well documented.

      When you want your router to also handle your mail, I'd prefer a system where I can run the smtp services in a well seperated environment, which means more then a mere chroot. Despite all the good work of Wietse, smtp, esp together with virus and spam checking and blocking is a too complex thing to trust it running on my router without such seperation. (perl, substantial amount of perl scripts for amavis and spamassasin etc)

      Regardless, I seconf your opinion that openbsd would be the better choice, but mostly because of the first reason, their very nice security enhancements.

    39. Re:BSD? by SillyNickName4me · · Score: 1

      > W^X, Propolice, Stackghost, priv sep, priv revocation, etc etc etc...

      How about MAC and ACLs?

      privilege seperation is a technique that can be employed on any Unix and is nowhere OpenBSD specific, their developers do use it where they can tho it seems.

    40. Re:BSD? by SillyNickName4me · · Score: 1

      > What does this have to do with FreeBSD? Although FreeBSD is the only BSD with support for DRI accelerated OpenGL, X.org/XFree provides the same 2D graphics hardware support on all platforms.

      Of course there is also the little thing of there beign an official nvidia driver for FreeBSD and not for the other ones.

      ANd yeah, this 'only' matters for OpenGL, so who cares?

      Well, everyone running a modern desktop system basicly since at least KDE and Gnome based desktops become quite a bit more responsive with hardware opengl support and your overal performance when making some what heavier use of your desktop will be better.

      But... aren't we getting rather offtopic here? (looks at article and sees something about a new Dragonfly release)

    41. Re:BSD? by Nimrangul · · Score: 1
      Regarding the mail relaying and stopping spam part, I don't know of any other system that has OpenBSD's spamd, which kicks some serious spammer ass.

      Setting up spamd with dspam or you other filter of choice is handy cause what gets through spamd usually won't get through the other.

      While I cannot say it for NetBSD or FreeBSD, Linux isn't documented so much as HOWTOed. I don't find a good man page very often for something done with Linux.

      --
      I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
    42. Re:BSD? by SillyNickName4me · · Score: 1

      > Setting up spamd with dspam or you other filter of choice is handy cause what gets through spamd usually won't get through the other.

      On FreeBSD:

      cd /usr/ports/mail/spamd && make install clean && cd ../dspam && make install clean

      I'm pretty sure equivalent packages are in pkgsrc on NetBSD.

      You may need to edit the config files for both in /usr/local/etc/ and uncomment a line here and there and change a few lines to match your config and you are done.

      > While I cannot say it for NetBSD or FreeBSD, Linux isn't documented so much as HOWTOed. I don't find a good man page very often for something done with Linux.

      Definitely agree there. For a quick setting up of things that is all that is needed tho. For understanding things I rather prefer any of the BSDs and their documentation.

    43. Re:BSD? by Shanep · · Score: 1

      privilege seperation is a technique that can be employed on any Unix and is nowhere OpenBSD specific, their developers do use it where they can tho it seems.

      Yes but priv sep requires code changes for each privilege seperated application. Some apps are particularly difficult to do this with, like ssh. But after a lot of effort, they did it. So there is a huge gap between "can be" and "is".

      As I've said before, OpenBSD is not perfect (what is?). But it is still one of the best choices for security and continues to advance. It obviously is not going to fit into every need.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    44. Re:BSD? by DashEvil · · Score: 1

      Plus XCOMPOSITE isn't nearly as harsh performance wise if you have your nVidia drivers set in xorg.conf to accelerate RENDER.

      --
      -If God wanted people to be better than me, he would have made them that way.
    45. Re:BSD? by SillyNickName4me · · Score: 1

      > Yes but priv sep requires code changes for each privilege seperated application. Some apps are particularly difficult to do this with, like ssh. But after a lot of effort, they did it. So there is a huge gap between "can be" and "is".

      The openssh team did a good job there, but openssh is far from OpenBSD exclusive. Privilege seperation is available for at least each unix like platform on which openssh runs.

      There is quite some overlap between the OpenBSD and OpenSSH teams, but as said, this is nowhere OpenBSD exclusive, and for example on FreeBSD and many Linux distributions you will get the exact same privilege seperation. In other words, this is a good reason to use openssh, but in itself not an argument for (or against) OpenBSD.

      > As I've said before, OpenBSD is not perfect (what is?). But it is still one of the best choices for security and continues to advance. It obviously is not going to fit into every need.

      It is a very good choice, I agree there. I just wanted to point out that privilege seperatiopn is not an operating system issue, it is an application issue, and for many relevant applications where OpenBSD has a default install with privilege seperation, you will find that other platforms have the same.

    46. Re:BSD? by Shanep · · Score: 1

      In other words, this is a good reason to use openssh, but in itself not an argument for (or against) OpenBSD.

      An operating system is more than just a kernel.

      It was OpenBSD developers who developed OpenSSH and added priv sep functionality. OpenSSH is just one example of priv sep work done and ready to use in default OpenBSD installs and they continue to work in that area and many other security enhancing areas. That's my point. That they cover many areas with a focus on security and we now all have priv sep OpenSSH thanks to their efforts.

      This is a single example application out of many, using a single example security mechanism out of many, which has been developed (the code, not the concept) on and primarily for OpenBSD by OpenBSD developers. And you think this is not an argument for OpenBSD when they have these skills and focus?

      I just wanted to point out that privilege seperatiopn is not an operating system issue, it is an application issue,

      My previous statement, "Yes but priv sep requires code changes for each privilege seperated application. Some apps are particularly difficult to do this with, like ssh.", does not refute that.

      and for many relevant applications where OpenBSD has a default install with privilege seperation, you will find that other platforms have the same.

      My original point, is that they roll out many security mechanisms and this is just one of them.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    47. Re:BSD? by SillyNickName4me · · Score: 1

      > This is a single example application out of many, using a single example security mechanism out of many, which has been developed (the code, not the concept) on and primarily for OpenBSD by OpenBSD developers.

      And they did a good job there as I said already. However, there are also other platforms which implement security mechanisms, and at times ones that OpenBSD does not have. Often those are Kernel level mechanisms that go beyond the basic Unix concept.

      At any rate, as I have said elsewhere already, if I were to build a router or small webserver, OpenBSD would definitely be one of my first choices, and idem for a shell server that is used for remote maintenance for example.

      If it were to include smtp support (not unthinkable on a home/small office router/gateway) or something like an smb or nfs server (not very likely on a router), I may find I have a need for things like mandatory access control and the ability to seperate the environment a service runs in beyond what a chroot can do.

      > My previous statement, "Yes but priv sep requires code changes for each privilege seperated application. Some apps are particularly difficult to do this with, like ssh.", does not refute that.

      I never said that it was easy or that anyone else did this or anything that intended to refute that this was difficult or whatever. I pointed out that you will find openssh with privilege seperation on virtually any modern unix and at least freebsd and many a linux distribution. Thanks to Theo and his people? definitely. Kudos to them. Exclusive to OpenBSD? Not at all, and that was my only point there.

      > My original point, is that they roll out many security mechanisms and this is just one of them.

      Which I never even tried to refute, I just pointed out that most of those mechanisms are not exclusive to OpenBSD (tho they may get them first)and that there are also security mechanisms out there that OpenBSD does not implement. That does in no way mean that I deny their focus on security, but it means that that is not something they are alone in.

      In short, while very secure, OpenBSD is by far not the only OS allowing you to build a very secure system, at times it may be the better choice, at other times it may not.

    48. Re:BSD? by Shanep · · Score: 1

      However, there are also other platforms which implement security mechanisms, and at times ones that OpenBSD does not have.

      I wouldn't deny that.

      My point has been that there are many active security mechanisms built into OpenBSD, which take it beyond what is just easily configurable on other BSD's. Privilege Seperation work is one small part of the whole and it is very far from the strongest example. W^X, Propolice and Stackghost (sparc) are transparent, effective and cheap on system resources and come as part of the whole as default. You don't have to apply patches and recompile only to find lots of binaries no longer work or that the new mechanism itself has caused a remote root vulnerability.

      I realise OpenBSD as it stands is not perfect, lacks some security mechanisms and is not always the best fit. But it seems to have the highest strength for general internet facing duties and is beyond taking another BSD and just adding a little extra effort to security.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    49. Re:BSD? by SillyNickName4me · · Score: 1

      > But it seems to have the highest strength for general internet facing duties and is beyond taking another BSD and just adding a little extra effort to security.

      And this is exactly where we seem to disagree.

      In my opinion, that is only true if what you need happens to fall within the focus of the OpenBSD team. They do a lot of good work, and if what I need happens to be within their area of focus, I will often use their work, but there are many more situations where OpenBSD simply does not offer the functrionality that I need for an internet facing machine.

      In other words, they are limited in what they offer, but when they offer something they do it well.

      On another note, I find it interesting how you (tho in a friendly way) get somewhat defensive as soon as someone suggests there may be other and even better solutions then OpenBSD while at the same time agreeing that it is not perfect. I don't think there is any reason for this defensiveness, noone is saying it is bad or was attacking it in any way.

    50. Re:BSD? by Shanep · · Score: 1

      ...strength for general internet facing duties...

      In my opinion, that is only true if what you need happens to fall within the focus of the OpenBSD team.


      By those general duties, I am refering to the usual suspects: DNS, FTP, HTTP, POP3, SMTP, etc. W^X, Propolice and Stackghost tackle some pretty generic security problems which can plague these services and are responsible for a large percentage of successful attacks. However these are not the only services that OpenBSD supports and the active security mechanisms work regardless of the application being protected.

      In other words, they are limited in what they offer, but when they offer something they do it well.

      I agree. But don't forget that the original argument is regarding OpenBSD security (obviously of what it actually supports), not OpenBSD suitability for everything.

      On another note, I find it interesting how you (tho in a friendly way) get somewhat defensive as soon as someone suggests there may be other and even better solutions then OpenBSD while at the same time agreeing that it is not perfect. I don't think there is any reason for this defensiveness, noone is saying it is bad or was attacking it in any way.

      You are preceiving something which is not there. But this is not hard when we are just passing text to each other.

      In my day to day work and personal life, I choose to mostly use NetBSD, OpenBSD, Mac OS X and Windows XP. When I get my hands on some nice dual-core Opterons, I will probably go back to FreeBSD for a lot of what I do at work. At the moment NetBSD is mostly what I use. I use OpenBSD for my servers and firewall/gateways, NetBSD for internal servers and workstations (R&D), OS X for my desktop work and XP because sometimes I have no other option.

      I am not getting defensive. I just don't think getting NetBSD or FreeBSD up to par on the security OpenBSD provides can be done with a little added effort. By the same token, I don't think getting OpenBSD to perform as quickly as NetBSD can be done with a little added effort. Same deal when the dust settles on FreeBSD and dual-cores are the norm, although probably to a much greater extent.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    51. Re:BSD? by SillyNickName4me · · Score: 1

      > By those general duties, I am refering to the usual suspects: DNS, FTP, HTTP, POP3, SMTP, etc. W^X, Propolice and Stackghost tackle some pretty generic security problems which can plague these services and are responsible for a large percentage of successful attacks. However these are not the only services that OpenBSD supports and the active security mechanisms work regardless of the application being protected.

      Absolutely, and those features are extremely usefull to tackle specific classes of attacks.

      Quite a few security breaches result from simple misconfigurations, and none of the mentioned mechanisms does much to prevent those while of course they do help prevent exploitation of a whole bunch of possible bugs that can result in privilege escalation, so there is a level of containment there.

      For services like a public dns, smtp and in many cases http, I prefer being able to seperate those from the host environment so that even in case of a local root compromise, the effect is still contained within an environment specifically built for that one service.

      This takes more efford and isn't entirely out of the box, so no argument about that.

      For many a situation I found having to put in quite a bit of efford to make things secure and functionally what is desired (I have yet to find the customer who only needs a basic apache and smtp server), so a little extra efford while setting things up is not too much of a problem, esp. when it saves efford for maintenance later on.

      Ideally, you'd have all the openbsd security mechanisms together with what I just described and something like mandatory access control (having acl support makes live a lot easier and safer when running samba on an internal server for example)

      As long as we can't have that, I'll have to make a choice, and I believe that choice is not as straightforward untill most peope only actually need a default install.

    52. Re:BSD? by Shanep · · Score: 1

      Absolutely, and those features are extremely usefull to tackle specific classes of attacks.

      Yes specific classes, however very often exploited attacks.

      Quite a few security breaches result from simple misconfigurations, and none of the mentioned mechanisms does much to prevent those while of course they do help prevent exploitation of a whole bunch of possible bugs that can result in privilege escalation, so there is a level of containment there.

      I'm not talking about user mess ups though. I'm talking about OpenBSD. No matter what the OpenBSD team does, I don't think they could ever cater for the users who can't help but get themselves into trouble.

      For services like a public dns, smtp and in many cases http, I prefer being able to seperate those from the host environment so that even in case of a local root compromise, the effect is still contained within an environment specifically built for that one service.

      No problem, in fact Apache ran in chroot by default, as of OpenBSD 3.2, Nov 1st 2002. named chroot by default, as of OpenBSD 2.4, Dec 1st 1998 and smtpd was default chroot at least in 2000.

      You use the word prefer as if you are choosing one over the other. Wouldn't you rather both to be sure? Especially if it comes like this as default?

      For many a situation I found having to put in quite a bit of efford to make things secure and functionally what is desired (I have yet to find the customer who only needs a basic apache and smtp server), so a little extra efford while setting things up is not too much of a problem, esp. when it saves efford for maintenance later on.

      Yes, life can be tough.

      Ideally, you'd have all the openbsd security mechanisms together with what I just described and something like mandatory access control (having acl support makes live a lot easier and safer when running samba on an internal server for example)

      Yes, I would like this.

      As long as we can't have that, I'll have to make a choice, and I believe that choice is not as straightforward untill most peope only actually need a default install.

      OpenBSD is an excellent choice as long as it at least can be configured to meet all needs. Obviously if it can't currently support a need then it must be overlooked. But this is a far cry from overlooking it just if the default configuration does not meet the needs. It's not like the default install is as functional as it gets. We all know that OpenBSD is quite the opposite.

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    53. Re:BSD? by SillyNickName4me · · Score: 1

      > No problem, in fact Apache ran in chroot by default, as of OpenBSD 3.2, Nov 1st 2002. named chroot by default, as of OpenBSD 2.4, Dec 1st 1998 and smtpd was default chroot at least in 2000.

      Systems like FreeBSD and SOlaris (at least on specific hardware) allow for going quite a bit beyond a chroot. Please look into it soemtime, the differences go beyond what I can explain in a single post, and the ways you can use it to make somewhat more complex configurations work with a high level of security is something you can fill a few books with.

      Just to be clear, what I am talking about is NOT just a chroot. The lack of this more then anything makes me often chose something else then OpenBSD.

      You can just keep ignoring this and point at all good OpenBSD features, well, we agreed quite a few posts ago about their attitude and featureset.

      >
      OpenBSD is an excellent choice as long as it at least can be configured to meet all needs. Obviously if it can't currently support a need then it must be overlooked.

      Maybe it is just me, but I end up very often eneding things (one thing in particular, see above) that OpenBSD does not supply.

      More recently I have found myself ending up using more and more SMP hardware, and while OpenBSD has become a valid option now on that in some cases, it is far from what I end up needing most often, for exactly that thing, an internet facing machine running some mix of services.

      > But this is a far cry from overlooking it just if the default configuration does not meet the needs. It's not like the default install is as functional as it gets. We all know that OpenBSD is quite the opposite.

      Yes, and this is why I do use it, and also consider it a very good system for learning about this and for building single purpose dedicated machines for example (ie, appliances)

    54. Re:BSD? by Shanep · · Score: 1

      Systems like FreeBSD and SOlaris (at least on specific hardware) allow for going quite a bit beyond a chroot. Please look into it soemtime

      I didn't say OpenBSD was the best solution for this. You seem to be getting defensive now and reading way more into what I am writing. I am showing solutions which OpenBSD provides, without any claim of comparitive effectiveness. It's not like I came in and said Solaris containers or DSD are a waste of time since OpenBSD has chroot!

      I find it pretty amusing that I'm being told on /. to look into this stuff.

      You can just keep ignoring this and point at all good OpenBSD features, well, we agreed quite a few posts ago about their attitude and featureset.

      I'm not trying to be a fanboy. I'm just stating things as I see them. I have not ignored anything. How many times do I have to say that OpenBSD is not perfect and does not always fit?

      Maybe it is just me, but I end up very often eneding things (one thing in particular, see above) that OpenBSD does not supply.

      I often choose something other than OpenBSD.

      More recently I have found myself ending up using more and more SMP hardware, and while OpenBSD has become a valid option now on that in some cases, it is far from what I end up needing most often, for exactly that thing, an internet facing machine running some mix of services.

      I wouldn't dare use OpenBSD for SMP in production at the moment. Nor would I use NetBSD or FreeBSD. If the only way to get acceptable performance to meet the needs was to go SMP, the it would typically be Solaris or Linux.

      Do you not think this discussion has become a little ridiculous? My original point and all along, has been that I don't believe the other BSD's can just be brought up to the security which OpenBSD provides, WITH A LITTLE EFFORT. Now all of a sudden we're talking about Solaris on "specific hardware" or a specific area of FreeBSD? I have been talking about overall security all along and you pick weaker points in OpenBSD which are covered very well elsewhere and go to town on them. Yet I have said time and time again, that OpenBSD is not perfect and does not always fit well.

      With a small amount of effort on Free or Net, you're going to get all the benefits of OpenBSD's ongoing audits, design stance and active mechanisms?

      --
      War crimes, torture, lies, illegal spying... Would someone give Bush a blowjob, already, so he can be impeached?
    55. Re:BSD? by evilviper · · Score: 1
      but it is still lacking FreeBSD style jails

      And FreeBSD is lacking in Systrace support which is by far a better option than just jailing processes.

      Its native for open, but integration in freebsd seems to be pretty good.

      FreeBSD's port of PF is lacking in many newer features, unfortunately. It's good enough for a basic firewall, but if you want to do QoS, CARP (fail-over), shared state, etc., you should stick with PF on OpenBSD

      What is more, FreeBSD gives a choice of 3 different packet filters

      Okay, but the others aren't remotely as good as PF, so it's just having a choice for the sake of having a choice. Besides, IPF (one of FreeBSD's choices) works fine on OpenBSD. So, unless you really want to use ipfw for some strange reason, there's no advantage to FreeBSD there.

      Uh, I can do the same with virtually any Unix, and setting this up with NetBSD, FreeBSD or Linux is really easy and well documented.

      No you can't. The poster just didn't explain it well. Programs like "spamd" aren't available for any OS other than OpenBSD AFAIK, so you certainly can't do it on another Unix.

      I'd prefer a system where I can run the smtp services in a well seperated environment, which means more then a mere chroot.

      This is pretty nonsensical. You make it sound like a chroot is something you can just break-out of. Once a program has chrooted itself, and dropped privlidges, it's locked there. No attacker is going to be breaking-out of the cheroot and getting access to the rest of your system. Jail doesn't provide any extra security there.

      Besides, as I said above, OpenBSD comes with systrace, which FreeBSD does not. Systrace is far better than even jailing your processes. Not to mention that OpenBSD has propolice, W^X, and the other protections that make your system even more secure, that FreeBSD is lacking.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    56. Re:BSD? by evilviper · · Score: 1
      If you want to breathe new life into an old Alpha you picked up online, NetBSD is the way to go.

      You'd think so, but no. I'm personally using OpenBSD on my Alpha, in part because I want it secure, but also because NetBSD doesn't (didn't?) have support for any graphics cards other than the default TGA cards that come with Alphas.

      Since I have an ATI plugged-in (and have no interest in spending tons of money on eBay to get an old DEC TGA card), that meant no X for me, on my Alpha.

      I looked at FreeBSD too, but it seemed to have limited support, and many of the apps I wanted to use on my Alpha didn't compile from ports... So I'm using OpenBSD instead.

      That's not to say OpenBSD is perfect, either. I occasionally hear from people who have odd Alpha machines that OpenBSD won't install on, for some reason. There's usually a workaround, though.

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    57. Re:BSD? by SillyNickName4me · · Score: 1

      > And FreeBSD is lacking in Systrace support which is by far a better option than just jailing processes.

      Systrace is way cool, and an extremely usefull tool.
      It provides granularity way beyond what a FreeBSD jail does (tho with MAC you get quite a bit closer, but following a different idea)

      Systreace has one big disadvantage, it is so flexible that it requires quite a bit of thought to configure it correctly, and it requires indeth knowledge of both the application and the operating system.

      Better for specific situations? definitely. Better as a general purpose security measure? I doubt it is for the average administrator, it requires too much configuration and knowledge for this.

      When having a choice between slightly more complexity in code, or more complexity in configuration, I prefer the first. Code is written once by supposedly knowledgable people, it can be fixed if needed. Configurations are in the end made by humans, many different ones for that. The chances of mistakes there are a lot bigger, and are in the end more difficult to find and are managed by less knowledgale people.

      > This is pretty nonsensical. You make it sound like a chroot is something you can just break-out of. Once a program has chrooted itself, and dropped privlidges, it's locked there. No attacker is going to be breaking-out of the cheroot and getting access to the rest of your system. Jail doesn't provide any extra security there.

      That depends a lot on what is in your chroot and how much you can trust it.

      > Besides, as I said above, OpenBSD comes with systrace, which FreeBSD does not. Systrace is far better than even jailing your processes.

      And requires way more work on the administrator side to be done correctly, introducing a bigger chance on mistakes, not to mention the cost in te form of time.

      > Not to mention that OpenBSD has propolice, W^X, and the other protections that make your system even more secure, that FreeBSD is lacking.

      propolice and W^X are usefull, no doubt.

      What made me write my original post, and now reply to yours, is the notion among certain people that OpenBSD cares about security and noone else does. That OpenBSD is the only one to have usefull features for this. Well, when looking purely from a coding point of view, OpenBSD has a very good featureset. When looking from a more practical point of view, building a functional system that is secure and maintainable, then it is not always the best choice, and in practise it often is not in my experience.

      Just so you know, I run Open, Net and FreeBSD (and some Linux variations), and I will use OpenBSD when appropriate, but I don't find it appropriate for quite a few situations.

  4. This looks pretty interesting. by Future+Man+3000 · · Score: 1
    Although it still looks a bit like it's playing catch-up with Linux (I'd swear they had a SACK implementation already) it's quite nice to have an alternative.

    This is probably the best BSD out there performance-wise however, and I wouldn't be surprised if it begins to usurp OpenBSD server space in performance-critical installations soon.

    --

    I never vote for anyone. I always vote against.
    -- W.C. Fields

    1. Re:This looks pretty interesting. by Codename_V · · Score: 3, Informative

      I don't know what the heck you've been reading, but performance has never been one of OpenBSD's strong points as compared to Linux and the various other BSD's.

      --
      Free will is just an illusion
  5. Does anyone have any metrics by Timesprout · · Score: 4, Interesting

    for the performance differential between DragonFly and the regular FreeBSDs ?

    --
    Do not try to read the dupe, thats impossible. Instead, only try to realize the truth
    What truth?
    There is no dupe
    1. Re:Does anyone have any metrics by Anonymous Coward · · Score: 0

      It's something like 2-3.5 TBAGs depending on the level of SACK compliance/installset of the version you compare to (STABLE, etc.)

    2. Re:Does anyone have any metrics by IBeatUpNerds · · Score: 5, Informative

      It's my understanding that this is currently on-par with FreeBSD 4.x (which I believe is faster than 5.x). The real performance imporvements are (supposedly) to come after everything has been ported over to use the messaging infrastructure (mainly the buffer cache). If the design holds true to its promise, then it should be a good step faster than FreeBSD 4.x in a few years. Especially in the area of SMP.

    3. Re:Does anyone have any metrics by Teja · · Score: 1

      or the performance difference between all three? or atleast between netbsd and freebsd.

      --
      - Teja
    4. Re:Does anyone have any metrics by Teja · · Score: 2, Informative

      does this help?

      --
      - Teja
    5. Re:Does anyone have any metrics by flynn_nrg · · Score: 4, Informative

      Wow, that's my weblog :)

      That entry is pretty old, and the situation is hardly the same. As of today, FreeBSD 5.4 (soon to be out) performs much better than the previous releases, but for UP machines NetBSD 2.0 or DragonFlyBSD are IMHO better choices.

      I run FreeBSD 5.4 on a SMP box and it's much better than it used to be. If/When I can allot some time I'll do some benchmarking of FreeBSD 5.4 vs DragonFlyBSD 1.2 on my dual PIII.

  6. I have to hand it to BSD by Anonymous Coward · · Score: 5, Funny

    It outlived the Pope.

    1. Re:I have to hand it to BSD by Cyram · · Score: 1

      Nah. I like to think of it as the pope going to the next version. Pope v.265 or v.266 depending on what list you go by. I just hope they don't have to release too many service patches to the next pope. I've had almost enough papal news for a while.

    2. Re:I have to hand it to BSD by Anonymous Coward · · Score: 0

      Pope v.265 or v.266 depending on what list you go by

      Nono, while the minor version number might be uncertain, the major version has been 2 since Vatican 2.0 was released back in 1965.

      So it's v2.265 or v2.266..

  7. two thumbs up by Anonymous Coward · · Score: 1, Interesting

    I've been running DragonFlyBSD for a while now and it's always been stable and fast for me. This latest release has been rock-solid. I'd give DragonFlyBSD two thumbs up.

  8. blah blah Netcraft confirms by kirun · · Score: 1, Funny

    Oh, I can't be bothered. Somebody else do it.

    --
    I'm scared of numbers that can't be written as a fraction. It's an irrational fear.
    1. Re:blah blah Netcraft confirms by random_culchie · · Score: 1

      Maybe the BSD troll is dying :) Netcraft confirms the FreeBSD troll is dying blah blah

    2. Re:blah blah Netcraft confirms by WebHostingGuy · · Score: 1

      Maybe the troll was the pope?

      --
      Quality Hosting e3 Servers
  9. Re:not by B-o-K · · Score: 1

    nslookup wiki.dragonflybsd.org
    Server: resolver.xs4all.nl
    Address: 194.109.9.99

    *** resolver.xs4all.nl can't find wiki.dragonflybsd.org: Non-existent host/domain

  10. Freebsd not dead, lot of things happening by Anonymous Coward · · Score: 5, Insightful

    FreeBSD has not been the best FreeBSD release but it's *not* dead. 5.3 has been the *first* stable release of the 5.x series, and as expected is not as polished as it should be

    I read the mailing lists (I'm not a FreeBSD user tough), and lots of work is happening. All those benchmarks you've seen where freebsd 5.3 loses were done with the 5.3 code which didn't incorported lots of performance work, just to get a stable 5.3 release

    Expect 5.4 to be the real 5.x release ie: fast (LOTS of performance work is happening in the threading and VFS land) and stable (lots of critical bugs has been fixed, 5.3 was the first public release)

    And no, FreeBSD 5 is not dying. RIght now FreeBSD is the BSD with better SMP support (and getting better), and dual core CPUs are starting to be sold this quarter. NetBSD and OpenBSD are not even near of the SMP support Freebsd has (oth of them detect several CPUs, but it will take all the year s it took to freebsd 5.x to use them efficiently, and most of the benchmarks done against NetBSD/OpenBSD are with only one CPU, which doesn't measure all the work done in the 5.x branch.

    1. Re:Freebsd not dead, lot of things happening by ArbitraryConstant · · Score: 1

      On a smaller number of CPUs, the performance penalty of a biglock kernel like OpenBSD, NetBSD and FreeBSD 4.x use isn't that bad. And given that OpenBSD and NetBSD don't generally need to run on > 2 CPUs, they can just sit back and see how the DragonFly approach to SMP works out. If it's successful, they can get similar performance to FreeBSD 5.x with a fraction of the work.

      --
      I rarely criticize things I don't care about.
    2. Re:Freebsd not dead, lot of things happening by Anonymous Coward · · Score: 0

      "OpenBSD, NetBSD and FreeBSD 4.x"

      or linux 2.4 and earlier

    3. Re:Freebsd not dead, lot of things happening by Anonymous Coward · · Score: 0

      No, actually 2.0 was biglock based. 2.2 I think may have had a couple of seperate locks for some things, but 2.4 had pretty fine grained locking. The biggest problem with 2.4 was the single lock for the scheduler and single lock for the block layer.

      Note, this is a single lock for *just* the scheduler, and *just* for the block layer, not a single global lock.

      But FreeBSD 5 and even 6 I think still use their SCHED_4BSD as default, which uses a single runqueue for all CPUs, so don't go trying to call the kettle black here.

      FreeBSD 4 has a *single* lock protecting the kernel. It is completely serial. If you really have no idea about Linux and operating systems in general, then I suggest you shut up and stop making a fool of yourself.

      Linux 2.4 has pretty damn good scalability for many applications and systems smaller than 16 way. That's better than you can say for FreeBSD 5, which has the most abysmal scalability I've ever seen on similar benchmarks (ie. parallel compiles).

  11. Curius about SMP by thanasakis · · Score: 4, Interesting

    It was my impression that one of the reasons for FreeBSD-5.x was to rearchitecture several parts of the kernel for better SMP support. I know, I know, there were problems but it seems that it had to be done, and the sooner the better.

    Now, if DragonFlyBSD continues down the road that was set by the 4.x train, what is going to be done about multiprocessor systems? I mean, multicore processors are right around the corner and other OS's (besides the BSD's I mean) like Linux are getting better and better(I won't even bother to mention Solaris).

    I do not profess to be some kind of expert, anyone has anything informative to say about DragonFly's plans on this?

    1. Re:Curius about SMP by Wesley+Felter · · Score: 3, Insightful

      DragonFly is rearchitecting for SMP, just in a different way than FreeBSD 5.x.

    2. Re:Curius about SMP by xedx · · Score: 1

      What is DragonFly BSD? DragonFly is an operating system and environment designed to be the logical continuation of the FreeBSD-4.x OS series. These operating systems belong in the same class as Linux in that they are based on UNIX ideals and APIs. DragonFly is a fork in the path, so to speak, giving the BSD base an opportunity to grow in an entirely new direction from the one taken in the FreeBSD-5 series. It is our belief that the correct choice of features and algorithms can yield the potential for excellent scalability, robustness, and debuggability in a number of broad system categories. Not just for SMP or NUMA, but for everything from a single-node UP system to a massively clustered system. It is our belief that a fairly simple but wide-ranging set of goals will lay the groundwork for future growth. The existing BSD cores, including FreeBSD-5, are still primarily based on models which could at best be called 'strained' as they are applied to modern systems. The true innovation has given way to basically just laying on hacks to add features, such as encrypted disks and security layering that in a better environment could be developed at far less cost and with far greater flexibility. We also believe that it is important to provide API solutions which allow reasonable backwards and forwards version compatibility, at least between userland and the kernel, in a mix-and-match environment. If one considers the situation from the ultimate in clustering... secure anonymous system clustering over the internet, the necessity of having properly specified APIs becomes apparent. Finally, we believe that a fully integrated and feature-full upgrade mechanism should exist to allow end users and system operators of all walks of life to easily maintain their systems. Debian Linux has shown us the way, but it is possible to do better. DragonFly is going to be a multi-year project at the very least. Achieving our goal set will require a great deal of groundwork just to reposition existing mechanisms to fit the new models. The goals link will take you to a more detailed description of what we hope to accomplish.

    3. Re:Curius about SMP by Anonymous Coward · · Score: 0


      "rearchitecting"

  12. Re:not by Anonymous Coward · · Score: 0
    let the friendly slashdot resolver help you:
    $ dig wiki.dragonflybsd.org

    ; <<>> DiG 8.3 <<>> wiki.dragonflybsd.org
    ;; res options: init recurs defnam dnsrch edns0
    ;; got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55797
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 1
    ;; QUERY SECTION:
    ;; wiki.dragonflybsd.org, type = A, class = IN

    ;; ANSWER SECTION:
    wiki.dragonflybsd.org. 59m28s IN CNAME www.sitetronics.com.
    www.sitetronics.com. 3h59m32s IN A 82.192.77.163

    ;; AUTHORITY SECTION:
    sitetronics.com. 3h59m32s IN NS ns1.sitetronics.com.
    sitetronics.com. 3h59m32s IN NS ns2.sitetronics.com.

    ;; ADDITIONAL SECTION:
    ; EDNS: version: 0, udp=4096, flags=0000

    ;; Total query time: 4 msec
    ;; FROM: charon.lan.0x54434D.net to SERVER: 0.0.0.0
    ;; WHEN: Mon Apr 11 23:23:50 2005
    ;; MSG SIZE sent: 50 rcvd: 135
  13. Are you sure he's dead? by MikeCapone · · Score: 3, Funny

    It outlived the Pope.

    Are you sure he's dead? Has Netcraft confirmed it?

    1. Re:Are you sure he's dead? by rovingeyes · · Score: 0, Offtopic
      Are you sure he's dead? Has Netcraft confirmed it?

      YES! here is their official statement:

      POPE DIED!

    2. Re:Are you sure he's dead? by evilviper · · Score: 1
      Are you sure he's dead? Has Netcraft confirmed it?

      As a matter of fact... Yes.

      http://news.netcraft.com/archives/2005/04/18/concl aves_start_slows_vatican_web_site.html

      --
      Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  14. What exactly is the reason by iamdrscience · · Score: 2, Insightful

    I was excited when I heard a while ago about a new BSD variant because there are areas where BSD isn't specifically tuned to. However, Dragonfly BSD doesn't seem to address any particular deficit of the other BSDs. Every other BSD split has had a mission, OpenBSD to concentrate on security and NetBSD to concentrate on remaining cross-platform portability. What exactly is the reason for Dragonfly BSD?

    1. Re:What exactly is the reason by Anonymous Coward · · Score: 1

      be a better FreeBSD

      Matt Dillon ( which was a core developer ) did not agree with where FreeBSD was heading, and forked.

    2. Re:What exactly is the reason by Anonymous Coward · · Score: 2, Informative

      DragonFlyBSD is just FreeBSD 4 with a bunch of updates and bug fixes, with a saner development model than the FreeBSD "core" team. It builds on all the things that FreeBSD did right and tries to fix the things that it does wrong.

    3. Re:What exactly is the reason by drmerope · · Score: 3, Interesting

      DragonflyBSD is aiming to make a name in Single-System-Image distributed computing. Think Plan 9 but an evolutionary move from a well established code + user base (FreeBSD 4).

      On traditional single machine installations, DragonflyBSD is being optimized for batch processing performance. The kernel is being re-architected to handle heterogenous resources. You often hear about per-cpu/per-core on their mailing lists, this is a reference to their desire to respect and avoid the high costs of IPC except when not using IPC and processor migration would itself be a penalty. You also hear a lot about cache-coherency, which is a desire to not thrash the processor caches and attempt to localize information to as few caches as possible.

      If you can do this, then if you have m processors, you have m*per_cpu_cache_size fast memory. Conversely, if you aren't careful you approach having only per_cpu_cache_size of fast memory.

      If it all works out (which is still an if) then you'll have an OS that is performance competitive and scales from one to hundreds of processors. This should rival FreeBSD for the performance title in the end...

    4. Re:What exactly is the reason by Anonymous Coward · · Score: 3, Informative

      > What exactly is the reason for Dragonfly BSD?

      Speed. That used to be FreeBSD's claim to fame, and they're certainly improving, but Dragonfly thinks it can do one better. They also aim for HURD-like flexibility, which will be more of a side effect.

      NetBSD, by the way, isn't just portable, you could print out the kernel source and it would be a textbook. It's all wonderfully commented and very clean code.

    5. Re:What exactly is the reason by Anonymous Coward · · Score: 0

      If you can do this, then if you have m processors, you have m*per_cpu_cache_size fast memory. Conversely, if you aren't careful you approach having only per_cpu_cache_size of fast memory.

      No, using per-cpu data effectively _reduces_ cache size over all CPUs in the system. It reduces cacheline contention, which is the big win.

    6. Re:What exactly is the reason by drmerope · · Score: 1

      No, it does. The point is that each cpu is managing a different dataset. For example, a TCP connection gets mapped to a processor and stays there. All the connection dependent information for that TCP session is local on the one processor and does not consume cache resources on the other processors.

      The SIDE-EFFECT is that you reduce cache-line contention + gain an additional performance gain in addition to the benefit from better utilization of your cache resources.

    7. Re:What exactly is the reason by Anonymous Coward · · Score: 0

      What you describe is kind of a good idea, but not a magical fix. Used with caution and where it fits properly it is a good idea.

      For example, suppose your TCP connection is mapped to CPU1. What if the app is on CPU0? OK, but the connection on CPU0? What if the NIC is on CPU1? Bind the app and the TCP connection to the NIC? Well then what about your CPU0 sitting there idle?

      OK, but the app on CPU0 and the NIC on CPU1, and start doing locking? Well then you're back to where you started.

    8. Re:What exactly is the reason by Anonymous Coward · · Score: 0

      Or to put it another way, it's FreeBSD from 5 years ago, with most of the effort of the DF developers going into backporting features from FreeBSD 5 and fixing the bugs already fixed there, and the rest going into bringing SMP support up to the standard of FreeBSD 5.

    9. Re:What exactly is the reason by Asmodai · · Score: 1

      That's a very shallow comment.

      DragonFly BSD is a amalgamation of FreeBSD 4.x, OpenBSD code, NetBSD code depending on where it makes sense.

      Add to this the slow move towards microkernelish ideas as well as a totally different way of doing SMP than FreeBSD 5.x does plus the fact the IP stack has been totally rewritten and is (almost) completely multithreading and the fact that clustering is at the center of development, I'd say your comment doesn't even hit close to the mark.

      --
      Jeroen Ruigrok/Asmodai
    10. Re:What exactly is the reason by Nimrangul · · Score: 1

      Don't you mean Mach-like? Hurd doesn't work.

      --
      I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
  15. Mass disillusionment is a myth by ikewillis · · Score: 2, Insightful
    NetBSD in particular and DragonFlyBSD to a lesser extent seem to be taking off in the wake of what seems like mass disillusionment in FreeBSD 5.x.

    I certainly don't see any kind of "mass disillusionment". FreeBSD 5.x has brought about added complexity for the sake of performance, namely in the SMP and multithreading arenas. These are areas where you will find the performance of NetBSD rather lacking. While NetBSD may win at certain meaningless microbenchmarks, the real world performance of FreeBSD, especially on multiprocessor systems, will generally be quite better. NetBSD has always had its primary focus on portability, whereas FreeBSD's has been primarily on performance. Microbenchmarks indicate, if anything, that FreeBSD has chosen higher overhead implementations which increase overall performance, whereas NetBSD has implementations whose simplicity incurs lower overhead on microbenchmarks.

    Firefly has taken a radically different approach and is attempting to refactor a BSD kernel into a more microkernel-like operating system. So while FreeBSD decided to take the SunOS/Solaris-like approach, DragonFly has gone the way of Mach. This is a rather fundamental design schism, and is more indicative that microkernel concepts are still quite valid than any kind of mass disillusionment over FreeBSD 5.x. I think it's great that they're introducing microkernel concepts to a stable and mature POSIX compatible OS rather than starting from scratch, but sadly I think DragonFly will be an OS that has trouble finding its niche.

    1. Re:Mass disillusionment is a myth by Anonymous Coward · · Score: 0

      Firefly has taken a radically different approach and is attempting to refactor a BSD kernel into a more microkernel-like operating system.

      Microkernel-like, huh? How so?

    2. Re:Mass disillusionment is a myth by BasharTeg · · Score: 5, Interesting

      Microkernel-like because they're going to a messaging / IPC based system instead of traditional syscall implementation maybe?

      I support both DragonFly and FreeBSD. As an admin, I need FreeBSD to step up to the plate and offer scalable SMP support because I run 100% SMP boxes. I am willing to wait for FreeBSD 5.x to clean up and show the performance benefits.

      However, I am highly interested in Matt's work on DragonFly because in my opinion, most of the popular "*nix" variants today stick too closely to the vanilla unix design which is why our socket code still uses select() and most I/O is done synchronously. I hope Matt expands his work to include super-scalable I/O systems like I/O Completion Ports. I heard there are Linux developers working on IOCP right now, so I'm hoping eventually this spawns a similar BSD effort.

      DragonFly will probably work very nicely with multi-core systems down the road. I believe in the long run NetBSD will continue to destroy FreeBSD 5.x in single CPU benchmarks.

      But there's the catch...

      How many multi-core processors have to roll off the production line for everyone to realize that all of this anti-FreeBSD naysaying is going to turn into a huge crow eating contest because when everything is dual or quad core down the road and FreeBSD scales nicely to match, nobody will give a god damn that NetBSD is faster on a single CPU system.

    3. Re:Mass disillusionment is a myth by TioHoltzman · · Score: 1

      Personally I am hoping that someone takes the DragonFly core and puts a really cool desktop layer over it. One that provides a uniform UI core of APIs, and takes a different approach than X does. I think there are some truly cool things that could be done with it, based on what I have been reading about it.

    4. Re:Mass disillusionment is a myth by WasterDave · · Score: 1

      I hope Matt expands his work to include super-scalable I/O systems like I/O Completion Ports.

      This has been in FreeBSD for about five years and is called kqueue. It exhibits O(1) scaling and goes like a rocket.

      Check out these rather old benchmarks.

      It's on OSX too, of course.

      Dave

      --
      I write a blog now, you should be afraid.
    5. Re:Mass disillusionment is a myth by BasharTeg · · Score: 2, Informative

      I'm aware of kqueue, but although it provides an I/O completion type mechanism, I believe the difference is, under the NT kernel and a couple other IOCP implementations, threads which are attached to an IOCP are put into a special scheduler which only activates N cpu threads at once, letting a thread run until it blocks again on I/O. Because threads attached to IOCPs are typically I/O bound, this leads to an excellent reduction of useless context switching, allowing longer bursts of execution between I/O events. Any type of blocking, be it sleep, waiting for events/handles, synchronous I/O operations, etc, will dequeue another thread from the runnable queue. The goal being to keep exactly N cpu threads from the IOCP program in the running state at all times (eliminating thread contention between threads in the same IOCP program). This also provides more optimal locking paths, because only N cpu threads are running at once, it is more likely that locks (critical sections) will be immediately available, and that the locks will be released before the context switch. This allows for maximum multi-threaded performance for I/O based systems, especially on SMP systems.

      There's a little more to it than just queueing I/O requests.

    6. Re:Mass disillusionment is a myth by WasterDave · · Score: 1

      Ah, OK. I just thought you were under the impression the *nix world was stuck at select().

      Cheers,
      Dave

      --
      I write a blog now, you should be afraid.
    7. Re:Mass disillusionment is a myth by Anonymous Coward · · Score: 0

      2.0 was NetBSD's first release with SMP support [on i386], so it's quite simple (big giant lock). FreeBSD and Linux evidently have better SMP performance at this moment. But do you really think that NetBSD developers will just sit on their asses and not improve their SMP model?

    8. Re:Mass disillusionment is a myth by BasharTeg · · Score: 2, Insightful

      I don't know, how long did it take them to implement SMP?

      Switching away from the giant lock model will require the same process of FreeBSD 4 -> 5, where the giant lock is replaced by fine grained locking for each data structure being protected. If they make that change, they'll be in the same boat as FreeBSD 5, only they're about two years behind.

      NetBSD's speed advantage over FreeBSD 5 on single CPU systems is mostly DUE to the fact that they use the giant lock model. If they move away from that, they're no better off than FreeBSD 5.

      Which I might point out, is why it's completely stupid to benchmark NetBSD's giant locked kernel against FreeBSD 5's fine grained locking kernel. Apples to oranges. If you want to benchmark NetBSD to show how the new release has great performance for a giant locked kernel, benchmark it against FreeBSD 4 or OpenBSD.

      You can't have your cake and eat it too. You can either have fine grained locking, and take a performance hit on single CPU systems, or you can have a giant lock, and take a performance hit on multi-CPU systems. Either design decision is fine today, but when all the chips being produced are dual core, fine grained locking will matter a whole lot more. How long will we have to wait for fine grained NetBSD? I have a lot of respect for NetBSD and OpenBSD, their accomplishments are golden in my eyes, but it seems they're quite a bit late to the SMP party, when the era of dual core is damn near upon us.

    9. Re:Mass disillusionment is a myth by setagllib · · Score: 1

      The 'unofficial roadmap' you can find (http://www.feyrer.de/NetBSD/roadmap.html). For 3.0, some things are already in-tree for it (PF, PAM), but most of that hasn't even shown evidence of being attempted. I'm not sure which devs actually agree with that map, but it is clear to see they don't all believe they can do it. 3.0-beta currently offers very little 2.0 doesn't for a huge range of users, the most likely to be noticed being the wonderful PF (which is forwarding these packets now... and normalizing them!).

      One note to PF newbies, if you want behavior like the other packet filters (linear top->bottom checking of rules, stopping at any matches), use 'quick' for every rule. It will save you headaches figuring out why some rules appear to be completely useless.

      Back on topic, it appears NetBSD (or at least someone there) decided to use Solaris-like SMP locking (the same thing that 'killed' FreeBSD 5). We'll see how that pans out, or if it's even true: but suffice to say it's not there in the netbsd-3 branch yet.

      --
      Sam ty sig.
  16. FreeBSD (Re:BSD?) by argent · · Score: 2, Informative

    FreeBSD is the most polished and user-friendly BSD for your x86 box, by far.

  17. Not Your Ordinary BSD.. by \\ · · Score: 2, Funny

    ..features a standards-conformant SACK implementation..

    DragonFlyBSD: The BSD with Balls

    1. Re:Not Your Ordinary BSD.. by Lew+Payne · · Score: 1

      "DragonFly BSD: The BSD with Balls" Yea... I can hear them scraping the ground, too.

  18. MOD UP! by Anonymous Coward · · Score: 0

    insightful

  19. Congrats by puppy0341 · · Score: 1, Offtopic

    Guess the upgrade will kill my little uptime :(
    9:40PM up 187 days, 4:57, 7 users, load averages: 5.21, 5.16, 5.05

    1. Re:Congrats by Anonymous Coward · · Score: 0

      Guess the upgrade will kill my little uptime :(
      9:40PM up 187 days, 4:57, 7 users, load averages: 5.21, 5.16, 5.05


      Looking at your load it wont hurt to upgrade to DragonFlyBSD ;-)

    2. Re:Congrats by puppy0341 · · Score: 1

      It is running DragonFly, doing about 1 TB per month :)

  20. Still relevant? by Just+Some+Guy · · Score: 1
    I posted this on Technocrat today, but probably stand to get more answers here:

    I have a lot of respect for Matt Dillon (as does pretty much everyone who's ever owned an Amiga), but I'm not sure yet that this is a good idea. The early versions of FreeBSD-5 were a mess, sure, but they've somehow managed to wrangle the new complexity into something that really works and works well.

    Still, I wish nothing but the best for the whole DragonFly team. If their ideas pan out, then the whole *BSD culture can benefit from them. If they don't, then hopefully we can learn from their mistakes. Good luck, Matt!

    --
    Dewey, what part of this looks like authorities should be involved?
    1. Re:Still relevant? by Anonymous Coward · · Score: 0

      get more answers for what? you made a statement, you did not ask a question.

    2. Re:Still relevant? by Anonymous Coward · · Score: 0

      I have a lot of respect for Matt Dillon

      So I take it you haven't seen There's something about Mary, then?

    3. Re:Still relevant? by oxygene2k2 · · Score: 1

      fbsd5 might be "fixed" somehow these days, but it's still a pretty complex piece of code.

      dfly attempts to remove this complexity (instead of routing around its problems, introducing more complexity), making it easier to work on productive code instead of fighting with thousands of locks.

    4. Re:Still relevant? by setagllib · · Score: 1

      DFly will remain relevant for having a pretty relaxed but surprisingly stable development model. While there were still bugs that kept me from using it as a gateway (and software support problems that kept me from using it as a desktop), it never actually crashed or did anything harmful - it just couldn't route packets the way they should be routed - and nobody replied to my message on bugs@ or the IRC channel. I switched to NetBSD 3.0-beta and the same configs (for PF and inetd) worked. So I stuck with that. None of the same ACPI weirdness either.

      FreeBSD 5 on the same machine could do almost nothing right at all, so I gave that up. I'm waiting for 5.4 release to make an assessment, because I didn't even get a chance to fetch sources this time.

      Out of curiosty, has the new shutdown sync hack been resolved? From 5.3 and a while after, it wold take ages to sync disks, since buffers could be created anew even after shutdown - only three consecutive "nothing left" instances would finalise the syncing. This is unlike what every other OS does (since they don't generate new buffers after shutting everything down) so I'm guessing 5.3 introduced some bugs that needed this hack. So, is that over now or do we still have long-ass shutdowns?

      --
      Sam ty sig.
  21. FreeBSD ports broken all the time by Anonymous Coward · · Score: 0, Redundant

    Have you tried to build any of those ports on FreeBSD? When I try it, I always have massive trouble with broken ports on FreeBSD. There are even periodic commit messages on the FreeBSD cvs-ports mailing list where huge numbers of ports get marked as broken and unbuildable in one fell sweep. Since DragonFlyBSD just uses the FreeBSD ports collection, you're basically taking your chances trying to compile any port.

    1. Re:FreeBSD ports broken all the time by dinivin · · Score: 1

      Have you tried to build any of those ports on FreeBSD?

      Frequently, that's how I know they work :-)

      Since DragonFlyBSD just uses the FreeBSD ports collection, you're basically taking your chances trying to compile any port.

      That's exactly what I said. Glad we're in agreement :-)

      Dinivin

    2. Re:FreeBSD ports broken all the time by kkenn · · Score: 1

      You're overstating the case. Most of these broken ports affect non-i386 architectures, or only particular versions of FreeBSD. And most of the ports that have problems are the less popular ports that have no maintainer and have often been abandonded by their original developers, i.e. the software that few people care about. The actual percentage of broken ports on i386 5.x is very low, about 4% the last time I counted it.

    3. Re:FreeBSD ports broken all the time by Anonymous Coward · · Score: 0

      This is why you want to stick with quarterly stable snapshots of the CVS tree. Yes, some packages will be out of date, but everything will be guaranteed to build.

      Remember that the ports tree is a very active CVS repository. At any given time, there are more than a few broken, or incomplete ports.

  22. No, this was the official statement by natrius · · Score: 1, Offtopic

    It is official; Netcraft confirms: Pope John Paul II is dead.

    One more crippling bombshell hit the already beleaguered Catholic community when the Vatican confirmed that John Paul II has died, ending his long papacy. Coming on the heels of a recent Netcraft survey which plainly states that Catholicism has lost more market share, this news serves to reinforce what we've known all along. Catholicism is collapsing in complete disarray, as fittingly exemplified by failing dead last in the recent survey of world religions.

    You don't need to be a Kreskin to predict Catholicism's future. The hand writing is on the wall: Catholicism faces a bleak future. In fact there won't be any future at all for Catholicism because Pope John Paul II is dead. Things are looking very bad for Catholicism. As many of us are already aware, Catholicism continues to lose mindshare. Red ink flows like a river of blood.

    All major surveys show that Catholicism has steadily declined in market share. Catholicism is very sick and its long term survival prospects are very dim. If Catholicism is to survive at all it will be among religion dilettante dabblers. Catholicism continues to decay. Nothing short of a miracle could save it at this point in time. For all practical purposes, Catholicism is dead.

    Fact: Pope John Paul II is dead.

    1. Re:No, this was the official statement by sabat · · Score: 1

      Considering the number of trolls who haunt the *BSD forum, this is not offtopic -- and it was funny! I chuckled.

      --
      I, for one, welcome our new Antichrist overlord.
  23. Chow Yun Fat as Matt Dillon in "A Better FreeBSD" by Anonymous Coward · · Score: 1, Funny

    John Woo reprises his HK classic movie of redemption with a bullets-flying Open Source rendition about two BSD Projects and their struggle for respectability.

  24. yes, yes, enough with the OS X already by Phil+Urich · · Score: 1

    As you may not have noticed, the idea was to install it in his router/gateway, for the sake of playing around with it.

    This means that:

    [1] He already has the computer.
    [2] A Mac Mini or iMac would simply not be viable from the hardware side of things.

    Now, points for noting the FreeBSD livecds, but, really now, you shouldn't just take any opportunity you can to tout your pet OS, it doesn't really seem applicable here.

    --
    I remember sigs. Oh, a simpler time!
    1. Re:yes, yes, enough with the OS X already by Anonymous Coward · · Score: 0

      :P I mentioned it as he wanted noob freindly and the others are just not newbie freindly , this is why i mentioned it and then gave the options of the liveCDs . ;) plus i have many pet OSs .
      i think the situation warented mentioning OS X.
      ---Fc

    2. Re:yes, yes, enough with the OS X already by DashEvil · · Score: 1

      Actually, he said he wanted something for cutting his teeth on it. OS X doesn't fit, it hides the complexity of BSD under a very thick GUI layer. Aside from the extremely high price factor (PPC + OS fees) it just doesn't seem like a good "Learn BSD" OS to me.

      --
      -If God wanted people to be better than me, he would have made them that way.
    3. Re:yes, yes, enough with the OS X already by FidelCatsro · · Score: 1

      Hm perhaps your right although you can get an old imac for around 100-150 euros (not sure about the USA , I picked up an old g3 400mhz imac and have it now running as a media server for about 150)with OS X on it , and if you want to learn the BSD core its open to examine from the a very comfertable chair (Aqua).

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
  25. Thats nothing! by Anonymous Coward · · Score: 0

    3:37PM up 1105 days, 21:09, 0 users, load averages: 0.00, 0.01, 0.00

  26. OpenBSD by ArbitraryConstant · · Score: 2, Interesting

    This is my personal opinion, the biggest problem I had with other BSDs was the way they didn't fit with the way I prefer to do things. People with different preferences can easily have similar needs and come to different conclusions.

    OpenBSD's goal is security, but as a side effect it's very easy to set up (eg hard to screw up and have an insecure configuration), and there are very few bugs compared to FreeBSD.

    You don't tweak the kernel because the default one has almost everything that is supported. It makes the kernel bigger than it might otherwise need to be, but if you've got more than 16 mb of memory it doesn't matter.

    There is a performance disadvantage (although PF performs well, and that's usually the only thing that matters), but things are easier to set up most of the time. If it's just a home gateway/router, your computer is probably bigtime overkill anyway, so you don't notice the performance disadvantage and you do notice the ease of configuration.

    I probably wouldn't use it as a desktop OS because of the lack of software, but all the BSDs suffer from this. I couldn't even get by with FreeBSD as a desktop due to the lack of software. As a router, I haven't had any problems with getting software. What isn't in ports generally compiles fine. The one thing I haven't been able to get working with OpenBSD is a Haskell compiler, and the Haskell interpreter works fine so I don't care that much...

    --
    I rarely criticize things I don't care about.
    1. Re:OpenBSD by SillyNickName4me · · Score: 1

      > You don't tweak the kernel because the default one has almost everything that is supported. It makes the kernel bigger than it might otherwise need to be, but if you've got more than 16 mb of memory it doesn't matter.

      If you are security consious, you should always be trying to only have those things installed and in memory that you need. Less code == les vulnerabilities, that even holds on OpenBSD.

    2. Re:OpenBSD by eggnet · · Score: 1

      If you are security consious, you should always be trying to only have those things installed and in memory that you need. Less code == les vulnerabilities, that even holds on OpenBSD.

      It takes more code to conditionally load drivers. It takes more effort to debug different kernel images. Extra drivers that aren't executed aren't a source of vulnerabilities.

    3. Re:OpenBSD by SillyNickName4me · · Score: 1

      > It takes more code to conditionally load drivers. It takes more effort to debug different kernel images.

      Removingdrivers and features that you do not need does not require any code to conditionally load drivers, it requires removing them in your kernel configuration and not building and linking them.

      You are jumping to the conclusion that I was talking about dynamically loading drivers, I was NOT.

      > Extra drivers that aren't executed aren't a source of vulnerabilities.

      The potential to call code in those drivers exists so yes, they can be a potential source of vulnerabilities.

  27. Re:wait... by dshaw858 · · Score: 1

    Some /. poster told me that BSD was dead! What the hell!?

    Er, yeah, that was a joke. I love BSD, in fact my servers run NetBSD 2.0 :)

    - dshaw

  28. BSDs UNITE! Use pkgsrc as packaging system! by Anonymous Coward · · Score: 0

    Pkgsrc www.pkgsrc.org is extremely portable. Use _single_ portable packaging system, which works not only on BSDs. Don't double manwork for ${DEITY}'s sake!

    1. Re:BSDs UNITE! Use pkgsrc as packaging system! by Anonymous Coward · · Score: 0

      Agreed. Pkgsrc kicks ass.

    2. Re:BSDs UNITE! Use pkgsrc as packaging system! by setagllib · · Score: 1

      pkgsrc rocks very hard, but currently only 2000 (out of 5000+) ports compile on DragonFly BSD (identified by a few bulk build attempts). While hackery can work around this, for most users it spells limited installs. Even gtk2 isn't happening.

      But I can confirm that it IS enough to get a web server with extras (php, mysql, etc.) up, although I did have an unexplained error at the end of mysql4-server's install. Nothing tragic.

      This will definitely improve over time and effort, but right now it's not MUCH better than FreeBSD Ports + DFly Overrides. You would really only be inspired to use it if you already have a pkgsrc tree for other systems on your network and don't want redundancy.

      pkgsrc is best on NetBSD where everything gets first-hand testing, and virtually nothing breaks. The situation is similar on (decent) Linux distributions - it is rumored some are entirely pkgsrc-based, even!

      --
      Sam ty sig.
  29. DragonFly Notes by m.dillon · · Score: 4, Informative

    Well, I have to say the slashdot response to this release is a marked improvement over the response to the last release. Most people are actually getting the concepts right this time! Kudos!

    There are a few things I will clarify about the release, in particular about our approach to SMP and the inevitable comparisons against, FreeBSD.

    On the SMP front what we are doing is basically rearchitecting big chunks of the kernel to operate efficiently in both UP and SMP environments, to be NUMA-friendly, and to be as maintainable as possible. Rather then throw mutexes around existing code we are undertaking a huge effort to make as many of our subsystems as mutex-free as possible by localizing the subsystem's operation on a per-cpu basis. Most of the time that means rewriting them from scratch.

    One example of this is our core Light Weight Kernel Thread scheduler (LWKT). Each cpu has its own indepenant LWKT scheduler which means that any given copy of the scheduler itself does not have to deal with or worry about contention between cpus. The code is very, very clean. If you think about it a bit you will realize that such a beast would work just as efficiently in an SMP environment as it would in a UP environment, and that is indeed one of our major goals.

    A second example of this is our network protocol stack (whos major architect is Jeffrey Hsu). A TCP connection goes through a hash and is routed to a tcp protocol handling thread on a particular cpu. If you have N cpus then your TCP connections will generally be split about evenly between the cpus. Any given connection is localized to its cpu which means that all the work related to that connection occurs on a single cpu and thus does not have to worry about or deal with contention between cpus... and operates as efficiently on a UP system as on a SMP system. The L1/L2 cache effects are an important bonus as well but the winning ticket is the ability for the protocol threads to run in a tight loop without needing to obtain or release a single mutex, lock, or other synchronizing mechanism other then the occassional critical section (which is a cpu-localize synchronization mechanism against interrupts).

    Another major goal is to make the code more maintainable... readable, understandable, etc, without any major gotchas to an unwary programmer, especially new programmers who are attracted to the project. This does not mean that FreeBSD is less stable, but I certainly believe that DragonFly's code base is a lot easier to maintain and a lot easier for new programmers to work with, with a much shorter ramp-up time then someone trying to dig into the FreeBSD codebase and far fewer new bugs introduced. I am taking a long-term view here.

    The problem with building an SMP friendly algorithm which requires a lot of synchronization to avoid contention (the mutex model) is that it is really easy to make a mistake and introduce a hard-to-find bug, especially if you are just ramping up on the codebase. The solution is to use algorithms (aka cpu-localization algorithms) that avoid the contention in the first place, and that is what we are doing. Regardless of FreeBSD's current stability (and I believe that FreeBSD is now far more stable then it was a year ago), they had to go and stomp hundreds of bugs introduced by experienced programmers. That's a red flag in my book, one that I am making a major effort to avoid in the DragonFly codebase.

    In less then two years of work (with very little destabilization of the kernel during that period, by the way), we are now within shouting distance of FreeBSD's and Linux's SMP parallelism. The only area where we are still significantly behind is in boot-time interrupt routing. This release is the last release where the Big Giant Lock is going to be in the critical path. We spent a lot of time isolating subsystems in order to reach this point, to be able to now take the last few steps and actually turn the Big Giant Lock *off* on a thread by thread basis. Not only tha

    1. Re:DragonFly Notes by Nimrangul · · Score: 1
      Matt, as long as you're around I figure I'll ask you about your license policy; recently there was a spat between Theo de Raadt of OpenBSD and Scott Long of FreeBSD regarding openness and freedom versus functionality.

      How do you stand when it comes to adding binary stuff into your system when you cannot get at the code?

      Theo was very, almost violently, adamant that adding anything there isn't code that the system's developers can see it isn't worth having in the system. While Scott felt that it was better to do some kowtowing to companies to get usablity, in the hopes that companies will continue to support the code and eventually see the light.

      I lean more to Theo's line of thought, if the company goes away, suddenly there is no support at all.

      The whole thing started because OpenBSD wanted to support some RAID hardware using a raidctl they are planning and the binary used by Linux and FreeBSD (and I would assume DragonFlyBSD as well, though I will admit I am too lazy to actually check) isn't good enough for what they want, which includes proper RAID management from within the operating system.

      Anyways, how do you stand on the issue, or do you prefer to just hack the core of the system and not fight so much with the other parts?

      --
      I'm sick of following my dreams - I'm just going to ask them where they're going and hook up with them later.
    2. Re:DragonFly Notes by m.dillon · · Score: 4, Insightful

      I don't think it's a good idea to incorporate binary modules not buildable from openly availble source, but I'm not rabid about not using such modules when it makes something work that I need to make work. I have to use NDIS on my laptop to get the wireless working and frankly I'm a very happy guy because it works :-).

      But that doesn't mean I have to like it! I think it's a mistake to try to cow-tow to vendors that clearly don't understand the value open source gives them (specifically, the fact that they don't have to support the drivers themselves). There are many reasons why vendors don't like to give out source. For one thing, chipsets often have a lot of bugs in them that the driver code has to work around and the vendors don't like to reveal the fact that those bugs exist. Another reason is that vendors are often paranoid about their code, even when it is substandard compared to other drivers that might be available as open-source (commercial entities invariably believe that their hired guns can code better then we can, and they are invariably proven wrong when such code occassionally sees the light of day).

      The question is do we want to support the bozo vendors and just perpetuate the problem? Or do we want to focus on supporting vendors that do provide good information on their drivers (or at least don't go nuts when someone reverse engineers it)?

      Another problem with binary-only modules is that, well, they might have bugs which you can't fix because you don't have the source. Or they might rely on API breakages that you would really like to rip out of your system. Or they might not work with a later rev of the chip in question even when the later rev is only an incremental improvement over the previous chip. Or they may not work with a particular configuration that you want to make work. Then you are stuck with a substandard driver that only works on older machines.

      If I were to state a position it would be that the occassional exception might be necessary, but that it just isn't a good idea for the open-source community to rely on vendor-provided binary modules to make hardware work.

      This brings up a far more important question, which is whether it is possible for an open-source 'trust' to be setup for the purposes of maintaining a driver whos source a vendor does not want to be released to the general public. That is, an entity which any open source programmer can join and through the signing of a simple non-invasive license then have access to the source for the purposes of making it work for that vendor's product line on open-source operating systems. The source would not be open to the public, but it would still be under the effective control of whatever open source programmers are interested in working on it. That is something I could live with and I think vendors could live with too if they took the time to think about it.

      -Matt

    3. Re:DragonFly Notes by Anonymous Coward · · Score: 0

      In less then two years of work (with very little destabilization of the kernel during that period, by the way), we are now within shouting distance of FreeBSD's and Linux's SMP parallelism.

      Very dependant on your definition of shouting distance ;)

      I mean, I wouldn't call FreeBSD as anywhere near shouting distance of Linux's SMP scalability after seeing this post showing it is only scaling with about 30% efficiency to 12 CPUs on something as simple (for the kernel) as a parallel gcc make.

      I was quite surprised about that. Considering the kernel compile fixation a few IBMers had very early on in 2.5 development (~2.5.5 IIRC), where they got it compiling a linux kernel in about 4 seconds flat on a 32-way POWER4. With most of that time chewed up by Amdahl in the final link stage.

      And then Linux has gone on a long way from there, and on *real* workloads, too.

      Even _booting_ on a 512-way is no mean feat. SGI had some issues where some shared cachelines (for fairly unimportant statistics, IIRC) in the timer interrupt was literally causing livelocks redering the system unbootable.

      But I wish you all the best of luck. I'm very very interested to see what your performance looks like when you remove the big lock.

    4. Re:DragonFly Notes by Anonymous Coward · · Score: 0

      it'd be great if you could update dragonfly's main page with more info like that!

    5. Re:DragonFly Notes by Espen+Skoglund · · Score: 1

      Just a short note on avoiding the problems of drivers relying on API breakage or some given kernel semantics. An alternative approach to supporting such drivers (in source or binary form) is to embed these drivers in a virtual machine. Such an approach incurs a little bit of overhead, sure, but you also get the added benefit that the direver need not necessarily be trusted by the rest of the system.

    6. Re:DragonFly Notes by Anonymous Coward · · Score: 0

      That's because assholes like Scott Long and Poul-Henning Kamp have fucked FreeBSD beyond repair.

    7. Re:DragonFly Notes by renoX · · Score: 1

      > The only area where we are still significantly behind is in boot-time interrupt routing.

      "Boot-time interrupt routing"?

      Can someone explain what this means to me?
      I'm thinking about 'interrupt latency' (Linux has a low latency patch) but I'm not sure if I understand correctly..

  30. Err.. *who* says it's dying?.. :) by ulib · · Score: 1

    > And no, FreeBSD 5 is not dying.

    Woa, thanks for the news!
    I kinda thought that the 2.5 million active sites that FreeBSD is serving (it's much more than any given Linux distro; and it had a *25%* increase in one year) was a sign of imminent death. ;)

    --
    Requiem for the FUD

  31. DragonFly will be THE BSD for the "Cell" processor by aphor · · Score: 1

    Dragonfly is designed to make asynchronous communication between hardware resources very very lightweight and scalable. Right now SMP is not really very efficient. All of the locking that goes on to keep one processor from stepping on the other processor's toes ends up making all processors except the one with the lock wait for the lock to be released, for example. The idea is to organize the memory usage so that kind of waiting only happens when it is explicitly necessary.

    Now, all of the sudden, the OS will scale to 64 CPUs. Maybe it would help to think of BSD scaling across processors like Solaris? Beyond that, it would allow vectorized (a whole batch of processing without if..then style branches) processing to happen cheaply off-core, perhaps on an asymmetric processor, or perhaps on another host across a network.. Like a server could use the GPU in the video card to do work...

    --
    --- Nothing clever here: move along now...
  32. BSD DOA by Anonymous Coward · · Score: 0

    Yet another sickening blow has struck what's left of the *BSD community, as a soon-to-be-released report by the independent Commision for Technology Management (CTM) after a year-long study has concluded: *BSD is already dead. Here are some of the commission's findings:

    Fact: DragonflyBSD, yet another offshoot of the beleaguered FreeBSD "project", is already collapsing under the weight of internal power struggles and in-fighting. "They haven't done a single decent release," notes Mark Baron, an industry watcher and columnist. "Their mailing lists read like an online version of a Jerry Springer episode, complete with food fights, swearing, name-calling, and chair-throwing." Netcraft reports that DragonflyBSD is run on exactly 0% of internet servers.

    Fact: the *BSDs have balkanized yet again. There are now no less than twelve separate, competing *BSD projects, each of which has introduced fundamental incompatibilities with the other *BSDs, and frequently with Unix standards. Average number of developers in each project: fewer than five. Average number of users per project: there are no definitive numbers, but reports show that all projects are on the decline.

    Fact: There are almost no FreeBSD developers left, and its use, according to Netcraft, is down to a sadly crippled .005% of internet servers. A recent attempt at a face-to-face summit in Boulder, Colorado culminated in an out-and-out fistfight between core developers, reportedly over code commenting formats (tabs vs. spaces). Hotel security guards broke up the melee and banned the participants from the hotel. Two of the developers were hospitalized, and one continues to have his jaw wired shut.

    Fact: *BSD has no support from the media. Number of Linux magazines available at bookstores: 5 (Linux Journal, Linux World, Linux Developer, Linux Format, Linux User). Number of available *BSD magazines: 0. Current count of Linux-oriented technical books: 1071. Current count of *BSD books: 6.

    Fact: Many user-level applications will no longer work under *BSD, and no one is working to change this. The GIMP, a Photoshop-like application, has not worked at all under *BSD since version 1.1 (sorry, too much trouble for such a small base, developers have said). OpenOffice, a Microsoft Office clone, has never worked under *BSD and never will. ("Why would we bother?" said developer Steven Andrews, an OpenOffice team lead.)

    With these incontroverible facts staring (what's left of) the *BSD community in the face, they can only draw one conclusion: *BSD is already dead.

  33. Its true at least part of it by Anonymous Coward · · Score: 0

    Fact: DragonflyBSD, yet another offshoot of the beleaguered FreeBSD "project", is already collapsing under the weight of internal power struggles and in-fighting. "They haven't done a single decent release," notes Mark Baron, an industry watcher and columnist. "Their mailing lists read like an online version of a Jerry Springer episode, complete with food fights, swearing, name-calling, and chair-throwing." Netcraft reports that DragonflyBSD is run on exactly 0% of internet servers.

    Man, Ill say -- anyone here on the mailing list? The name-calling and nit-picking are out of control. I cant' stand it.

  34. Requiem for the FUD by Anonymous Coward · · Score: 0
    // Please *don't* mod this up. It has already been done! Thx
    // Btw: DragonFlyBSD is missing from this list because it's still too young for production use, not because it's less cool!!

    ... facts are facts. ;)

    FreeBSD:
    FreeBSD, Stealth-Growth Open Source Project (Jun 2004)
    "FreeBSD has dramatically increased its market penetration over the last year."
    Nearly 2.5 Million Active Sites running FreeBSD (Jun 2004)
    "[FreeBSD] has secured a strong foothold with the hosting community and continues to grow, gaining over a million hostnames and half a million active sites since July 2003."
    What's New in the FreeBSD Network Stack (Sep 2004)
    "FreeBSD can now route 1Mpps on a 2.8GHz Xeon whilst Linux can't do much more than 100kpps."

    NetBSD:
    NetBSD, for When Portability and Stability Matter (Oct 2004)
    NetBSD sets Internet2 Land Speed World Record (May 2004)
    NetBSD again sets Internet2 Land Speed World Record (Sep 2004)

    OpenBSD:
    OpenBSD Widens Its Scope (Nov 2004)
    Review: OpenBSD 3.6 shows steady improvement (Nov 2004)
    OpenSSH (OpenBSD subproject) has become a de facto Internet standard.

    *BSD in general:
    Deep study: The world's safest computing environment (Nov 2004)
    "The world's safest and most secure 24/7 online computing environment - operating system plus applications - is proving to be the Open Source platform of BSD (Berkeley Software Distribution) and the Mac OS X based on Darwin."
    BSD Success Stories (O'Reilly, 2004) (pdf) ~ from Onlamp BSD DevCenter
    "The BSDs - FreeBSD, OpenBSD, NetBSD, Darwin, and others - have earned a reputation for stability, security, performance, and ease of administration."
    ..and last but not least, we have the cutest mascot as well - undisputedly. ;)

    --
    Being able to read *other people's* source code is a nice thing, not a 'fundamental freedom'. -- Requiem for the FUD

    1. Re:Requiem for the FUD by Anonymous Coward · · Score: 0

      I have checked out every "fact" in this Requium guy's list, and none of them check out. Netcraft doesn't say there are any two million freebsd servers; it says there are 50,000 and that the number is on the decline. Ad nauseum for the rest of his list.

      Im sick of seeing this list of lies, stop doing this.

      Also, being able to read others source code is a FUNDAMENTAL RIGHT not a privilege. If you talk to me I have the right to remember it. Its just the same with source code.

    2. Re:Requiem for the FUD by setagllib · · Score: 1

      I don't think that's what he meant at all (with the right/privelege for code reading). The assumption ulib is making is that people are smart enough to be able to understand what is meant, and he obviously gave /. readers too much credit.

      What is wrong with his list? All of those links work and are from who they claim to be: the graph of FreeBSD's server growth is from actual data, and only as old as 2004. Maybe you just can't read Netcraft's page properly. Or are trolling and hope nobody else will bother.

      OpenBSD's OpenSSH really is the most prominent SSH daemon out there, NetBSD really did set internet land speed records (even if it's recently been beaten by Linux on more powerful hardware), etc. It's all out there and for you to say "none of them check out" is either blatant trolling or, as I prefer to see it, unbelievable stupidity. Up to you.

      --
      Sam ty sig.
  35. Requiem for the Requiem by Anonymous Coward · · Score: 0

    IT IS OFFICIAL; WIRED NEWS CONFIRMS: LINUX IS SUPERIOR TO *BSD
    *BSD is Dying, Says Respected Journal

    Linux advocates have long insisted that open-source development results in better and more secure software. Now they have statistics to back up their claims.

    According to a four-year analysis of the 5.7 million lines of Linux source code conducted by five Stanford University computer science researchers, the Linux kernel programming code is better and more secure than the programming code of *BSD.

    The report, set to be released on Tuesday, states that the 2.6 Linux production kernel, shipped with software from Red Hat, Novell and other major Linux software vendors, contains 985 bugs in 5.7 million lines of code, well below the average for *BSD software. NetBSD, by comparison, contains about 40 million lines of code, with new bugs found on a frequent basis.

    *BSD software typically has 20 to 30 bugs for every 1,000 lines of code, according to Carnegie Mellon University's CyLab Sustainable Computing Consortium. This would be equivalent to 114,000 to 171,000 bugs in 5.7 million lines of code.

    The study identified 0.17 bugs per 1,000 lines of code in the Linux kernel. Of the 985 bugs identified, 627 were in critical parts of the kernel. Another 569 could cause a system crash, 100 were security holes, and 33 of the bugs could result in less-than-optimal system performance.

    Seth Hallem, CEO of Coverity, a provider of source-code analysis, noted that the majority of the bugs documented in the study have already been fixed by members of the Linux development community.

    "Our findings show that Linux contains an extremely low defect rate and is evidence of the strong security of Linux," said Hallem. "Many security holes in software are the result of software bugs that can be eliminated with good programming processes. However, we found that the BSDs seem to believe that they can just make up facts rather than write decent code. It is our belief that all of the BSD projects are on the decline and will be dead within a year."

    The Linux source-code analysis project started in 2000 at the Stanford University Computer Science Research Center as part of a large research initiative to improve core software engineering processes in the software industry.

    The initiative now continues at Coverity, a software engineering startup that now employs the five researchers who conducted the study. Coverity said it intends to start providing Linux bug analysis reports on a regular basis and will make a summary of the results freely available to the Linux development community.

    "This is a benefit to the Linux development community, and we appreciate Coverity's efforts to help us improve the security and stability of Linux," said Andrew Morton, lead Linux kernel maintainer. Morton said developers have already addressed the top-priority bugs uncovered in the study.

  36. You Have Been Trolled by Anonymous Coward · · Score: 0
  37. Re:wait... by Anonymous Coward · · Score: 0

    my servers run NetBSD 2.0 So that explains why they're so slow and hackable.

  38. Wet Dream... by Anonymous Coward · · Score: 0

    Now if only Apple would use DragonFly as the basis of Mac OS X's BSD bits... what a FANTASTIC operating system it would be... =)...