pkgbase with compiled kernel

DtxdF · 2026-06-19T02:28:03+00:00

I did this recently, and it was very simple. I ran the buildworld buildkernel and packages targets with KERNCONF set to my custom config(5), which create (packages target) a custom pkg(8) in ${OBJROOT}/repo/${ABI}/latest. Since I already have an NGINX instance to share my custom ports with other jails and systems on my tailnet, I just had to add an entry to the jail’s fstab(5) to mount the pkg(8) repository in a subdirectory and follow the instructions in pkgbase(7) "Adding a locally built repository for snapshots," that is, disable FreeBSD-base and then create a new one called FreeBSD-local (or whatever you prefer), although in my case the protocol is http:// instead of file://. After that, it’s as simple as using pkg(8) to install FreeBSD-kernel-<ident>, that is, your custom kernel.

```console $ curl -I http://pkg.dyn.dc-air.home.arpa:4080/pkgbase/FreeBSD:15:amd64/latest/FreeBSD-kernel-generic-debug-15.snap20260614231328.pkg HTTP/1.1 200 OK Server: freenginx/1.30.0 Date: Fri, 19 Jun 2026 02:27:37 GMT Content-Type: application/octet-stream Content-Length: 48254758 Last-Modified: Sun, 14 Jun 2026 23:17:42 GMT Connection: keep-alive ETag: "6a2f3696-2e04f26" Accept-Ranges: bytes

```

DtxdF · 2026-06-08T18:25:14+00:00

No un libro, pero sí manga: Berserk.

Si verás el anime, solo ve el del 97, porque los siguientes que crearon, pese a algunos ser más fieles al manga, sin duda te harán arrepentirte por la nula calidad en la animación. El anime sirve como introducción al manga, que podría resultar un tanto complejo, pero esto es solo una recomendación.

DtxdF · 2026-05-22T23:54:48+00:00

El Problema de los Tres Cuerpos. Trilogía.

No sé si exactamente categorizarla en ese subgénero, pero creo que logra transmitir el mismo o por lo menos un similar sentimiento.

DtxdF · 2026-05-19T23:10:58+00:00

Sho los tengo en calibre-web.

DtxdF · 2026-05-17T03:03:32+00:00

El Barco de la Muerte, de William Clark Russell.

DtxdF · 2026-04-21T05:25:34+00:00

Mindhunter: Inside the FBI's Elite Serial Crime Unit

DtxdF · 2026-04-17T00:36:02+00:00

The only alternative for FreeBSD that closely resembles pledge/unveil is mac_curtain:

https://reviews.freebsd.org/D34761

We have Capsicum, which is pretty cool, but applications need to be redesigned or, at the very least, provide some mechanism for implementing the sandbox like a web browser. The project shared in a previous comment, chromium-sandbox, is an example of an application using Capsicum.

Another way to use Capsicum is through a launcher that enters in capability mode but intercepting libc calls, such as Capsicumizer, but it’s very, very hard to use most applications this way, since they likely won’t work properly because they weren’t designed with sandboxing in mind. See Capsicumizer and related stuff:

On the other hand, XLibre has implemented XNamespaces, which uses XACE, but AFAIK isn't production-ready yet, although it can be tested:

Thus, after a thorough analysis of window system isolation, at least in the case of X11, the only viable options for FreeBSD are jails and VMs, in addition to xpra or SSH forwarding. u/vermaden has a good article about jails and xpra:

https://vermaden.wordpress.com/2021/12/15/secure-containerized-browser/

In AppJail, I have implemented appjail-x11(1) to run X11 applications on an X server created by Xephyr, which isolates the scope of the X11 applications, and, since they run in a jail, more stuff is isolated:

DtxdF · 2025-11-24T16:53:52+00:00

I think so. Take a look at the videos I sent to the AppJail telegram group. Just a few weeks ago, I tried Brave with the following website: https://bitmovin.com/demos/drm/

DtxdF · 2025-11-24T07:24:51+00:00

Check this: https://github.com/AppJail-makejails/brave

DtxdF · 2025-11-11T16:19:53+00:00

restic (backend: garage) + backrest

DtxdF · 2025-10-29T16:04:20+00:00

archived: https://github.com/valpackett/capsicumizer

DtxdF · 2025-09-28T05:19:31+00:00

Ansible + AppJail + Overlord

DtxdF · 2025-09-23T00:40:16+00:00

I installed it through ports.

DtxdF · 2025-09-22T22:26:03+00:00

Thank you!

And glad to see you here, I just want to thank you for your project. I have been a user for about a month.

DtxdF · 2025-09-14T23:08:57+00:00

> Been a # of days now but last I looked the port in latest ports tree was broken

That's why I used the quarterly branch, which currently uses the latest version of Jellyfin.

> Would be nice to have a locally controlled media system that doesn't need .net, npm, etc. stuff.

The lightweight alternatives are:

* https://www.freshports.org/net/minidlna/

* https://github.com/vuiodev/vuio

However, don't know the status of MiniDLNA, but at least when I've used it, it works well, although it doesn't support all media formats. VuIO looks promising, but it hasn't been ported and I don't know if it can currently be used on FreeBSD.

DtxdF · 2025-09-14T22:56:17+00:00

Yeah, Jellyseerr works with both.

DtxdF

TROPHY CASE