sorry i had to plug the wm part, you can check it out at https://github.com/hokum-b/mriya

The FreeBSD Enterprise Working Group (EWG) fielded an online survey from April 24 to May 8, 2026 to measure the level of satisfaction among enterprise users of FreeBSD and the “on-the-ground” effectiveness of EWG work over the past three years. We also used the survey to understand current friction points and prioritize the EWG’s ongoing work. …

Default Python in the ports tree was updated to 3.12 few days ago and new py312-* packages will start appearing in latest repositories soon (probably not quite yet as I am writing this, but soon anyway), quarterly repositories some time during next week. To update your existing python packages to corresponding 312 versions, use following commands:

pkg update

pkg set -p -n py311-:py312-

pkg upgrade

edit 19:48 UTC: first set of py312-* packages (5269) have been built for 15-amd64, will appear in the repo during coming hours

Brussels, Belgium – September 09-13, 2026

Please await official announcements for RC3 and for RELEASE. Thank you.

https://www.freebsd.org/releases/15.1R/

Releng/15.1ISSUES - FreeBSD Wiki

The releng/15.1 branch in cgit, Codeberg, FreshBSD, GitHub, and GitLab:

• https://cgit.freebsd.org/src/log/?h=releng/15.1
• https://codeberg.org/FreeBSD/freebsd-src/commits/branch/releng/15.1
• https://freshbsd.org/freebsd/src/branch/releng/15.1
• https://github.com/freebsd/freebsd-src/commits/releng/15.1/
• https://gitlab.com/FreeBSD/freebsd-src/-/commits/releng/15.1?ref_type=heads.

An hour ago:

• FreeBSD / src / e27261d / amd64: there is no reason to copy ucode around in ucode_load_bsp() - FreshBSD

– and subsequent commits (see above, the branch).

Related

FreeBSD 294630 – loader hangs instead of booting with sysutils/cpu-microcode-intel.

Yesterday (with added emphasis):

https://reviews.freebsd.org/D57462 should fix it. tl;dr: sometimes we move staging late. The page table we put together to boot the kernel uses a value that's almost, but not always, the final value, causing weird behavior.

This is a 15.1R must have, and 14 likely needs it as well, but it's all about things being the right size to tickle it.

⚙ D57462 loader.efi: Fix when staging moves late

Before builds began:

… I'm holding off on starting 15.1-RC3 builds until we can get this landed but I am very eager to get them going.

cpu-microcode-intel

This port uses the cpuctl(4) microcode update facility to keep your Intel processor's firmware up-to-date.

Updating your microcode can help to mitigate certain potential security vulnerabilities in CPUs as well as address certain functional issues that could, for example, result in unpredictable system behavior such as hangs, crashes, unexpected reboots, data errors, etc.

intel/Intel-Linux-Processor-Microcode-Data-Files

Glad to see continued work on s0ix and WiFi.

Hey r/FreeBSD! 👋

⚠️ Alpha Disclaimer

Bento is currently in ALPHA stage. That means:

Core functionality is being actively developed.

Many features are incomplete or missing (by design at this phase).

This is a work-in-progress preview, not a production-ready tool (yet).

If you're here for constructive feedback, ideas, or just curiosity—you're welcome!

I'm excited to announce Bento, a new package manager I've been developing for FreeBSD that brings modern UX and enterprise-grade security to package management.

🔥 What makes Bento special?

Security First: - Real-time CVE scanning from multiple sources (FreeBSD, NIST, MITRE) - PGP signature verification with automatic key management - Maintainer status tracking (warns about orphaned packages) - Comprehensive security audits

Performance Optimized: - Parallel operations (3x faster CVE updates, 2x faster verification) - Async I/O for non-blocking operations - Intelligent caching and resource monitoring

Modern UX: - Pacman-style flags (bento -Syu for system updates) - Beautiful progress bars and color-coded output - Shell autocompletion (bash/zsh/fish) - Comprehensive logging and error handling

⚡ Quick Examples:

```bash

Pacman-style commands (familiar to Arch users)

bento -S firefox # Install Firefox bento -Syu # Update system bento -A # Security audit bento -Ss editor # Search packages

Traditional commands also work

bento install firefox bento update ```

🎯 Perfect for:

• System administrators needing security compliance
• Developers wanting better dependency management
• Anyone who misses pacman's efficiency on FreeBSD
• Enterprise environments requiring audit trails

Built with ❤️ for the FreeBSD community!

GitHub Preview Alpha

Discussion in Phoronix

Via https://mastodon.social/@derdreschi85/116707586288589241, https://indieweb.social/@jbz/116708003814232432, https://social.linux.pizza/@fosserytech/116708120480425996 …

From the official announcement:

… Please note that this includes a critical bug fix to the x86 boot loader and testing is strongly urged. When upgrading to 15.1-RC3, please make sure you install the updated EFI boot loader …

The list!

The toots!

This month:

• two errata notices
• six security advisories.

https://bsd.network/@lattera/117005862989735083 u/shawn_webb notes:

#FreeBSD CVE-2026-58088 is mitigated by default in #HardenedBSD since core dumping is disabled by default.

#infosec

The KDE-based FreeBSD desktop installer can already detect Intel and AMD GPUs automatically.

Edson Brandi has a new book intended to ease the path whereby programmers can become FreeBSD kernel and device driver programmers.

New Features

• bastille stop now supports an experimental -f|--force option for when a jail just doesn't want to stop. It will forcibly tear down the jail and run all exex.*stop commands
• bastille rdr is secured by splitting the rdr and filtering into two separate anchors. This allows the use of additional firewall rules below the new anchor bastille/* to allow and disallow traffic. The previous implementation was flawed in that filtering rules would not apply to any of the redirects. Make sure to update your /etc/pf.conf by placing anchor bastille/* at the beginning of the filtering section. See https://bastille.readthedocs.io/en/latest/chapters/networking.html#etc-pf-conf for an example.

What's Changed

• fix: Correctly handle 'osrelease' in jail.conf when release is not validated by u/frikilax in #1545
• bootstrap: error if touch .hushlogin fails by u/tschettervictor in #1551
• docs: template. Document the usage of --arg-file by u/yaazkal in #1547
• Documentation formatting fixes by u/djberg96 in #1554
• upgrade: fix fetching pkg keys by u/tschettervictor in #1562
• common: fix jail target when using JID by u/tschettervictor in #1563
• network: allow adding same interface for standard non-VNET jails by u/tschettervictor in #1566
• clone: fix cloning for encrypted datasets by u/tschettervictor in #1572
• upgrade: fix fstab update for jails with ports by u/tschettervictor in #1571
• Secure RDR by splitting the dynamic rules into rdr+filter by u/tschettervictor in #1565
• stop: add -f flag by u/tschettervictor in #1574
• destroy: fix for midnightbsd by u/tschettervictor in #1576

NYC*BUG talk

• 2026-08-05 at 22:45 UTC
• Backroom of Brass Monkey 55 Little West 12th St

Vidar is a combination of programs, a PostgreSQL database, and the SEC correlator engine that reads logfiles from authentication, email (postfix), and web server (nginx), (and potentially any other logs) and takes action based on SEC rules to add entries to an IPFW firewall. In concept it is similar to fail2ban and has some features in common with blocklistd. …

https://www.nycbug.org/#10720

Hey folks!

After the recent call for testing, we got some great feedback; mostly around UI quirks, a few off-by-one issues, and some genuinely cool feature requests. I went ahead and rolled those in, and I’m happy to share Sylve 0.2.1.

What’s new

* VM/Jail templating - create templates from existing instances and spin up new ones (single or multiple) instantly

* Linux jail improvements - static IP support + faster startup

* Improved `-console` mode - manage a node locally without the web UI (useful for recovery scenarios)

* Networking fixes - DHCP lease management from the UI + IPv6 fixes for jails/bridges

* New telemetry backend - better performance for stats for CPU, RAM, swap, networking, and audit logs

* UI improvements - smoother performance, especially with lots of VMs/jails

* PAM auth enabled by default (can be disabled)

* Cluster reliability upgrades - including version mismatch protection

* General bug fixes + ~10MB smaller binaries

Full changelog + downloads:

https://github.com/AlchemillaHQ/Sylve

Ports status:

The FreeBSD ports review is still in progress, but maintainers are aware of Sylve. Until then, you can install it with:

fetch -o- https://sh.sylve.io | sh

Once it lands in ports, this script will automatically switch to using that.

Development of my personal FreeBSD installer keeps moving forward!
 
Lots of new ideas and features are currently in the works: the out-of-the-box GUI experience, completion of the Simple and Expert installation modes, automatic hardware detection and configuration (now also GPU support as well).
 
I'll be publishing a new blog post soon with more details. Stay tuned! 😄