NetBSD 11.0 RC1 and FreeBSD 14.4 Beta1 testing begins, OpenBSD libexpat security fixes, and more.
Releases
NetBSD 11.0 RC1 released for testing: The NetBSD project has announced the first release candidate for NetBSD 11.0, marking a significant step toward the final version after nearly a year of development on the netbsd-11 branch. The release includes both CD/R-sized and full-featured DVD ISO images, with users encouraged to select the latter for complete functionality unless constrained by media size. Installation notes and download links are provided for various architectures, including ARM-based devices via dedicated bootable images. The project invites feedback through mailing lists or problem reports to address any issues encountered during testing. This release candidate aims to refine stability and functionality before the official launch.
FreeBSD 14.4 Beta1: The first BETA build for the FreeBSD 14.4 release cycle is now available. ISO images for the amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv7, aarch64, and riscv64 architectures are FreeBSD mirror sites.
BSDSec
OpenBSD libexpat errata patches released for 7.7 and 7.8: OpenBSD has issued security errata patches for the libexpat library affecting versions 7.7 and 7.8 of the operating system. The updates address vulnerabilities in the XML parsing library, which is widely used for processing XML data. Binary patches are available for amd64, arm64, and i386 architectures through the syspatch utility, while source code fixes can be obtained from the official errata pages for each release. Users are encouraged to apply these updates to mitigate potential risks associated with the identified flaws.
As always, it’s worth following BSDSec. RSS feed available.
News
Valuable News – 2026/02/09: The Valuable News series curates a weekly summary of notable updates, articles, and resources primarily focused on UNIX, BSD, and Linux systems. This edition highlights key developments such as the release of The Book of PF (4th Edition) by Peter N. M. Hansteen, FreeBSD 14.4-BETA1 availability, and NetBSD 11.0-RC1 with enhanced Linux emulation. It also covers practical guides like setting up WireGuard on OpenBSD, implementing Carrier Grade NAT on FreeBSD, and migrating OPNsense DHCP from ISC to Kea.
NetBSD’s conservative stance on Rust in the kernel: A NetBSD developer addresses concerns about Rust adoption in the kernel, contrasting it with FreeBSD’s potential move toward memory-safety improvements. The post highlights NetBSD’s prior unconventional choice to embed Lua for driver prototyping while outlining practical barriers to Rust integration, including limited architecture support, compiler maintenance challenges, and incompatible release cycles. The reliance on binary bootstrapping conflicts with NetBSD’s source-based distribution model, and older Rust versions would quickly become obsolete for modern development. Despite these hurdles, the post acknowledges Rust’s technical merits but underscores NetBSD’s cautious, stability-focused approach compared to other Unix-like systems.
Tutorials
OpenZFS Monitoring and Observability: Effective OpenZFS deployments require continuous monitoring of pool health, snapshot behavior, and capacity trends to prevent data loss and ensure reliability. Key monitoring practices include manual checks using zpool status and automated scrubs to detect errors in storage devices, as well as tracking snapshot freshness to confirm backup integrity. Tools like Sanoid simplify these tasks by automating health checks, snapshot monitoring, and free space alerts, integrating with systems like Nagios or Healthchecks.io for notifications. Regular monitoring helps identify hardware failures, corrupted data, or misconfigured policies before they escalate into critical issues. For production environments, professional audits and support services can further optimize performance and mitigate risks.
FreeBSD audio diagnostics and optimization: This guide provides a comprehensive overview of audio diagnostics and optimization in FreeBSD, focusing on USB DAC devices and professional audio interfaces operating in bitperfect and real-time modes. It details key diagnostic tools like /dev/sndstat, hw.snd parameters, and sndctl(8), which offer insights into device states, buffer structures, and signal processing chains. The article emphasizes the importance of the xruns parameter as an indicator of audio stability, where non-zero values signal potential artifacts requiring configuration adjustments. It also covers system-level optimizations, including latency settings, USB polling rates, power management, and CPU C-states, all of which impact audio performance. Practical recommendations are provided for tuning these parameters to achieve stable, high-quality audio playback in professional and audiophile applications.
Running Docker containers on FreeBSD via Podman: FreeBSD lacks native Docker support, but Podman—a Docker-compatible container engine—can bridge the gap by leveraging Linux binary compatibility. The process involves enabling Linux emulation, configuring ZFS storage for containers, and installing Podman with necessary filesystem mounts (e.g., fdescfs). Testing with a basic “Hello World” container confirms functionality, while deploying Uptime Kuma demonstrates persistent storage via volumes and automatic restarts. Containers under Podman run as FreeBSD jails, allowing manual conversion to traditional jails for production use, including ZFS dataset replication and custom jail configurations. Challenges include rootless mode limitations on FreeBSD and hardcoded ports in some applications, though workarounds like NAT or multiple IPs exist. Complex multi-container apps may require additional tools or VNET jail setups, but single-container deployments integrate smoothly. The approach offers a viable path for running Linux containers on FreeBSD without full virtualization.
Did we miss anything?
This newsletter is made from your content on DiscoverBSD and BSDSec. Submit the stuff we missed so it can appear next time.
Do you have an OSS BSD-related project that you would like to showcase in BSD Weekly? Reply to sender and we can showcase you as a sponsor of an issue (for free).
Do you know anyone who would like this newsletter? Consider forwarding and tell them to subscribe.
Thanks for reading and see you next week! Stay safe!