holgerschurig, 23 days ago

@louis My company machine had several major updates of Debian (whenever a new stable came out) followed through successfully. And with no hiccups. I never installed from scratch in 12 years, always updated.

At home I cannot say this ... but only because I use Debian Unstable there, a rolling release system. So there aren't major releases there by definition.

withoutclass, 23 days ago

@louis This is also why I love #gentoo, which took it's philosophy from BSD

spnw, 23 days ago

@louis Nice to hear, I've been considering making the switch too (on desktop).

puppygirlhornypost, 23 days ago

@louis Nice, whatcha using OpenBSD on? Is it a server or a desktop?

louis, 23 days ago

@puppygirlhornypost This one on a server, which is also doing media delivery for our Mastodon instance via varnishd and serving a few websites via relayd/httpd.

puppygirlhornypost, 23 days ago

@louis I just realized something, OpenBSD doesn't have a concept of jails does it? I mean https://man.openbsd.org/chroot but not anything like https://docs.freebsd.org/en/books/handbook/jails/. Do you just run them on service accounts? I don't think I know that much about how people utilize OpenBSD in server contexts

spnw, 23 days ago

@puppygirlhornypost @louis Hopefully someone can correct me if I'm wrong, but I think the OpenBSD way is as follows (there are no jails):

• Use root as little as possible in the first place
• chroot whenever applicable (e.g. httpd runs chrooted by default)
• Aggressively drop unneeded privileges using pledge(2)

https://man.openbsd.org/pledge.2

puppygirlhornypost, 23 days ago

@spnw @louis I have no idea, but I'm not opposed to starting a thread on this because I am curious to what OpenBSD's take on this is... OpenBSD is very opinionated.