HardenedBSD Installer Images and Call For Mirrors

[Shawn Webb]

Hey all,

The server hosting our installer images has experienced a critical
hardware failure.

This week, my goal is to deploy at home a build server that will build
14-CURRENT/amd64 and 13-STABLE. The installer images will be served
from that build server.

We used to publish automated builds on a nightly basis. With this
deployment, we will be going to either every other week or monthly.

Please reach out if you can provide mirrors of the installer images. I
will set up a protected rsync service for those who wish to provide
public mirrors.

Thanks,

--
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

[Shawn Webb]

On Sun, Jan 22, 2023 at 05:34:41AM -0500, Shawn Webb wrote:
> Hey all,
>
> The server hosting our installer images has experienced a critical
> hardware failure.
>
> This week, my goal is to deploy at home a build server that will build
> 14-CURRENT/amd64 and 13-STABLE. The installer images will be served
> from that build server.
>
> We used to publish automated builds on a nightly basis. With this
> deployment, we will be going to either every other week or monthly.
>
> Please reach out if you can provide mirrors of the installer images. I
> will set up a protected rsync service for those who wish to provide
> public mirrors.

I should probably also note that our basement is unfinished and is
cool in the winter time. However, in the summer, the basement can get
upwards of 90F/32C. Cooling this infrastructure is not a problem for
now, but may become a problem in the next few months.

[Shawn Webb]

On Sun, Jan 22, 2023 at 05:34:41AM -0500, Shawn Webb wrote:

> Hey all,
>
> The server hosting our installer images has experienced a critical
> hardware failure.
>
> This week, my goal is to deploy at home a build server that will build
> 14-CURRENT/amd64 and 13-STABLE. The installer images will be served
> from that build server.
>
> We used to publish automated builds on a nightly basis. With this
> deployment, we will be going to either every other week or monthly.
>
> Please reach out if you can provide mirrors of the installer images. I
> will set up a protected rsync service for those who wish to provide
> public mirrors.

Hey all,

A little status update:

I've started on a new set of scripts that will automate the build of
our installation media and binary updates. The two will be tied
together so that you know that when you're installing the latest
build, that it's also the latest update. The project can be found on
GitLab[0].

I'm incrementally developing and testing that project. As part of that
incremental development and testing, I'm exposing the published
builds. You can find the installer images at [1]. Note that both
GitLab and the installers are hosted out of my home, so please be
respectful. I enjoy the occasional Netflix binge as well. ;-)

Once the build framework development is completed, I will also expose
the builds via rsync. We've had a number of folks reach out wanting to
mirror the builds. Thank you for reaching out! I will get back to you
once the dust settles down.

The dead server was replaced by the hosting provider, but getting
access to the replacement is proving problematic (thank you ancient
Java IPMI virtual consoles.) Once access is regained, we'll have two
master/authoritative download locations.

A matter to note: I'm taking this time to also consider how we sign
our installer images. Instead of using GPG, we will be switching to
SSH public keys. You can find the public key at [2], which is also
attached to this GPG-signed email.

[0]: https://git.hardenedbsd.org/hardenedbsd/builder
[1]: https://installers.hardenedbsd.org/pub/
[2]: https://installers.hardenedbsd.org/pub/keys/ssh.pub.txt

Thank you for your patience and understanding.

Again, mirror providers: I will reach back out to you soon. Thank you
for volunteering!

[Shawn Webb]

On Sun, Jan 22, 2023 at 05:34:41AM -0500, Shawn Webb wrote:

> Hey all,
>
> The server hosting our installer images has experienced a critical
> hardware failure.
>
> This week, my goal is to deploy at home a build server that will build
> 14-CURRENT/amd64 and 13-STABLE. The installer images will be served
> from that build server.
>
> We used to publish automated builds on a nightly basis. With this
> deployment, we will be going to either every other week or monthly.
>
> Please reach out if you can provide mirrors of the installer images. I
> will set up a protected rsync service for those who wish to provide
> public mirrors.

Hey all,

I'm happy to announce we now have two up-to-date mirrors!

1. Lavabit in Dallas, TX, USA: https://hardenedbsd.org/content/mirrors
2. LAYLO in the Netherlands: https://mirror.laylo.io/pub/hardenedbsd/

If you can host a mirror, please reach out. We are incredibly grateful
for Lavabit and LAYLO and to all future mirrors.

[Ladar Levison]

On 2/4/23 6:46 PM, Shawn Webb wrote:

I'm happy to announce we now have two up-to-date mirrors!

1. Lavabit in Dallas, TX, USA: https://hardenedbsd.org/content/mirrors

i believe the URL Shawn meant to send out is: https://mirrors.lavabit.com/hardenedbsd/

The  https://hardenedbsd.org/content/mirrors page is worth bookmarking, as it contains a list of current mirror sites, which may change (hopefully grow) in the future.

L~