HardenedBSD @[email protected]
Security-oriented derivative of FreeBSD. Primary goal is a clean-room reimplementation of the grsecurity patchset for the BSD community.
Joined Jan 2018
Pinned post
Due to a drastic increase in spam/fraudulent accounts in our self-hosted gitlab, we now require an admin approval of new accounts.
After registering, please email netops[AT]hardenedbsd.org to have us activate your account.
On Saturday, 31 Jan 2026, we are planning major maintenance of our development and build infrastructure: https://groups.google.com/a/hardenedbsd.org/g/users/c/9mC981rDbME/m/mL8lkfZPAAAJ
Downtime will likely be for the full day.
Do you use the #HardenedBSD security administration (secadm) tool?
Welcome 0x1eef (Robert) to the #HardenedBSD Development Team!
The #HardenedBSD 15-STABLE package repo has been published! Our bandwidth is limited, so please be gentle. :-)
Our longest status report ever, the #HardenedBSD December 2025 Status Report, is out!
https://hardenedbsd.org/article/shawn-webb/2025-12-28/hardenedbsd-december-2025-status-report
Due to lack of resources, #HardenedBSD will be delegating 14-STABLE support to the community at the end of 2025Q4: https://groups.google.com/a/hardenedbsd.org/g/users/c/51IARO8noYo/m/UN5gVfq-CwAJ
We're also hinting at an upcoming call for donations (either monetary or shipment of hardware) for a new (or refurbished) build server.
Donations are eligible for tax deduction in the USA.
We will be creating new builds of #HardenedBSD this week to mitigate expiring cryptographic key material. For more information: https://groups.google.com/a/hardenedbsd.org/g/users/c/l-UivSvXK5c/m/6hX7SknqBAAJ
HardenedBSD
boosted
@HardenedBSD I've started building my laptop packages locally and have fixed a few
ports (preferring fixing over disabling the new feature.) Some ports will have HARDCFLAGS disabled until I can get more time to fix them. I'm only disabling HARDCFLAGS for more complex cases.
I've kicked off a new 14-STABLE package build. This package build will be weird. You may see a number of missing packages once the repo is published. I will be working through that queue while the package build is taking place.
(Originally posted on the HardenedBSD Users mailing list: https://groups.google.com/a/hardenedbsd.org/g/users/c/_IuBY7Obw6I/m/0BX8AxtYAgAJ)
#HardenedBSD HEADS UP:
We just introduced a commit[1] that has the potential to cause a large number of ports to fail to build. Please be patient as we work through the breakages.
Please reach out and let us know of any ports that fail to build for you due to this commit.
We sent a notice a few minutes ago to the HardenedBSD Users mailing list[2]. We will monitor replies to both this Fediverse post and the mailing list post.
[1]: https://git.hardenedbsd.org/hardenedbsd/ports/-/commit/f3737f1d999bdfb5b2a0a4320232393b8adb31a9
[2]: https://groups.google.com/a/hardenedbsd.org/g/users/c/_IuBY7Obw6I
HardenedBSD
boosted
The #HardenedBSD October 2025 Status Report is out! This report covers both September and October 2025.
https://hardenedbsd.org/article/shawn-webb/2025-11-01/hardenedbsd-october-2025-status-report
HardenedBSD
boosted
The #HardenedBSD quarterly branches were updated yesterday to take into account the recent #FreeBSD security advisory for CVE-2025-24934.
I also brought in a couple extra commits that seemed fitting.
The new builds have been published.
HardenedBSD
boosted
The #HardenedBSD #Vaultwarden instance has been updated.
HardenedBSD
boosted
This bug is mitigated in #HardenedBSD when the hardening.kmalloc_zero sysctl tunable is set to 1.
https://cgit.FreeBSD.org/src/commit/?id=6535e9308a26e17023831fe68fb71d2febf2a002
HardenedBSD
boosted
Do #HardenedBSD users pay attention to #FreeBSD on a commit-by-commit basis?
The server is back online and should be stable. We have made a large number of changes, so please let us know if we screwed something up.
We're starting on the main website maintenance now. #HardenedBSD package repositories and binary updates will be unavailable over the next few hours.
HEADS UP: On 06 Sep 2025, we will be performing maintenance on our main web server. Downtime will likely be a few hours. The #HardenedBSD package repositories will be unavailable during the maintenance window.
We will keep everyone informed.
The #FreeBSD main development branch is now at version 16, in preparation for the 15.0 release. How this impacts #HardenedBSD users is discussed here: https://groups.google.com/a/hardenedbsd.org/g/users/c/15ReG6jFRmQ/m/5lEdgRzAAAAJ
The #HardenedBSD August 2025 Status Report is out!
https://hardenedbsd.org/article/shawn-webb/2025-08-30/hardenedbsd-august-2025-status-report
We would like to thank Stygian for providing a mirror of the #HardenedBSD builds in Montreal, Quebec, Canada!
Security-oriented derivative of FreeBSD. Primary goal is a clean-room reimplementation of the grsecurity patchset for the BSD community.
Joined Jan 2018
