1
General Discussion / OPNsense vs HBSD, amount of packages
« on: March 05, 2020, 06:51:33 pm »
Hello,
Please let me know:
1) How many packages are in HardenedBSD repository? It seems there are only 574 packages in OPNsense? Are there any additional binary repositories for OPNsense or compatible HBSD repos?
2) Can prebuilt binary HardenedBSD packages be used in OPNsense? Like adding a repository in Debian?
Or only build from ports sources?
3) Can instructions for moving already installed FreeBSD system from UFS to ZFS root be used for HBSD and OPNsense too?
I have installed OPNsense as a KVM guest, works fine, updated to the latest packages, installed a few of new packages like rsync, bash, etc.
I have created a new pool hbsd/rootfs, mounted it and rsynced mounted UFS root / to ZFS root.
Now going to reconfigure bootloader to boot OPNsense from ZFS root.
4) Does OPNsense support the same paxctl features, those are supported by HardenedBSD distro?
I cannot find paxctl package for OPNsense, does it exist at all?
secadm is missing too?
What about HBSD security features listed on the page:
https://hardenedbsd.org/content/easy-feature-comparison
?
Are all HBSD hardening features present in OPNsense too?
5) What I will miss in OPNsense if trying to use it as a general universal server OS for example just for a hardened ZFS storage? Provided I need only command line interface without a nice panel like in FreeNAS.
6) Will very minimum of HBSD or OPNsense work on a very old Pentium 1 MMX say with 200-300Mb of RAM?
At least without cryptography and with the most OPNsense services being stopped?
Without local ZFS of course because of low memory on Pentium1 host.
But may be booted by network iPXE from another librebooted host with ZFS+iSCSI ?
7) It seems HBSD project stalled at collecting money for further work? Why did it happen and how are you going to resolve this?
Please let me know:
1) How many packages are in HardenedBSD repository? It seems there are only 574 packages in OPNsense? Are there any additional binary repositories for OPNsense or compatible HBSD repos?
2) Can prebuilt binary HardenedBSD packages be used in OPNsense? Like adding a repository in Debian?
Or only build from ports sources?
3) Can instructions for moving already installed FreeBSD system from UFS to ZFS root be used for HBSD and OPNsense too?
I have installed OPNsense as a KVM guest, works fine, updated to the latest packages, installed a few of new packages like rsync, bash, etc.
I have created a new pool hbsd/rootfs, mounted it and rsynced mounted UFS root / to ZFS root.
Now going to reconfigure bootloader to boot OPNsense from ZFS root.
4) Does OPNsense support the same paxctl features, those are supported by HardenedBSD distro?
I cannot find paxctl package for OPNsense, does it exist at all?
secadm is missing too?
What about HBSD security features listed on the page:
https://hardenedbsd.org/content/easy-feature-comparison
?
Are all HBSD hardening features present in OPNsense too?
5) What I will miss in OPNsense if trying to use it as a general universal server OS for example just for a hardened ZFS storage? Provided I need only command line interface without a nice panel like in FreeNAS.
6) Will very minimum of HBSD or OPNsense work on a very old Pentium 1 MMX say with 200-300Mb of RAM?
At least without cryptography and with the most OPNsense services being stopped?
Without local ZFS of course because of low memory on Pentium1 host.
But may be booted by network iPXE from another librebooted host with ZFS+iSCSI ?
7) It seems HBSD project stalled at collecting money for further work? Why did it happen and how are you going to resolve this?