The Future of HardenedBSD-Based Builds

[lattera]

Hey All,

I've been thinking about this quite a bit for the past few weeks. My life is getting busier and busier and my available hobbyist time is diminishing. I've decided to scale back on a few items, including producing custom OPNsense builds based on HardenedBSD. Doing so takes a good chunk of my time from my main project (HardenedBSD). I will be focusing more of my efforts on HardenedBSD.

In talking with Franco, I'm happy to continue providing patches to OPNsense on behalf of HardenedBSD. My next goal is to help OPNsense implement PIE (and maybe with RELRO + BIND_NOW) across the board for both base and ports. I hope to have that both started and completed sometime in July. I feel I'll take more of a consulting role rather than the custom build producer role.

I'm excited for all the great things OPNsense is doing, especially with regards to security. If you have any questions, comments, or concerns, please let me know.

Editing this to comment: even though I'm scaling back right now doesn't mean that I won't resume doing HardenedBSD-based builds in the future. I've loved doing my own builds and seeing HardenedBSD running on my hardware firewall appliances. If my available hobbyist time increases in the future, I may pick up custom builds again.

Thanks,

Shawn Webb

[franco]

Hi Shawn,

For me this is sad to see your time shrink to such extent, but I'm happy for your busy future elsewhere as I heard it's not all that unpleasant.

Keep up the great work wherever it is needed and thank you for your time spent on HardenedBSD and OPNsense so far! Looking forward to new additions and improvements to HardenedBSD especially.


Cheers,
Franco

[weust]

Not unexpected. But good to see you will continue helping OPNsense as well.
I will look forward to any builds I can try out in Hyper-V :-)