Comment on Remote solution to decrypt disk at boot

• Jean_Mich_Much@jlai.lu ⁨11⁩ ⁨months⁩ ago

  No problem, I appreciate ;) I hope my answer was not too rude !

  At the beginning to try something different, curiosity. I’ve began to write a comparison but in fact I can not doing that because I never used Linux for self hosted services, just for user things like… Checking my mails. I find it easier for that side.

  But, for example , after setting my first jails , I’ve read how I could’ve done it on Linux. I’ve found lxc jails and other) hard to learn and configure while chroot was not enough secure to my taste without a little bit tuning. Jail is native, it’s one easy to read and write conf file and four lines in rc.conf to enable it (with its own virtual network interface). With zfs it’s easy to deploy the same base system for all your jails and to maintain it update and it’s fully isolated. Want to enable another service ? Write theservice_load=“YES” in rc.conf. no systemd linking with some file or whatever I know. Same if you want an additional virtual network (+1 more line). Customizing your kernel, build it and installing it is one conf file to edit +4 for short command line (don’t know how to do on Linux)…

  Again it’s not a comparison, it’s just why I stay with freebsd, maybe it’s more comfortable to me because I’m not doing real hard security things, I’m not a pro sysadmin , but I found doing and learning those things (customizing kernel, jails and other things) was (really) easy when reading the clear docs. And many security things are native.

  Sorry for the long answer ^^

  source

  • plague_sapiens@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Your answer wasn’t rude at all :) and thanks for the long one! Looks like I should try FreeBSD again, last time I was just overwhelmed, but that’s many years ago. My last try was OPNsense which didn’t work like I wanted it to (stupid IPv6-to-IPv4 tunnel, which didn’t properly reconnect after the 24h ISP disconnection and my script to fix this fucked up latency and gaming wasn’t possible because of stutters (probably packet loss too)). Security is the main aspect of my try to use it. Linux can be like a swiss cheese if misconfigured. Still better than Windows (Server) tho xD

    source

    • Jean_Mich_Much@jlai.lu ⁨11⁩ ⁨months⁩ ago

      Yeah, not hard to do better than windows ! ;) I thought freebsd has many improvements each new versions so if your try was many years ago maybe you will find something interesting today… Or maybe not ;) It wasn’t possible to fix the latency because of people who suffered of speech disorder ?

      source

      • plague_sapiens@lemmy.world ⁨11⁩ ⁨months⁩ ago

        What? xD The script used the DSL modems IPv6 WAN IP to set up the IPv6-to-IPv4 tunnel (to get IPv4 working) each time my ISP dropped the connection after 24h (standard DSL procedure over here in DE) or rnd reconnection. But somehow that script triggered a higher latency and probably packet loss/delay (couldn’t measure it, cause it only appeared in fast paced shooters like MW2019). Without the script everything ran fine except IPv4 after disconnections, which had to be setup manually. After that I sent the DSL modem back and returned to my AVM FritzBox as my main router. Can’t really say if it was directly the scripts fault or sth else in my OPNsense setup (low powered CPU, USB ethernet adapter, 4 port gbit LAN PCIe card, defective RAM, …). Maybe I’ll try a similar setup again some time, because I kinda liked OPNsense…

        source

        • -> View More Comments