We kinda discussed it in this thread: https://forums.freebsd.org/threads/from-the-39c3-escaping-containment-a-security-analysis-of-freebsd-jails.100969/
To avoid reinventing the wheel, there are the 3 workflows I know of:
1. Illumos pkg creates a new BE by default except when installing new packages.
2. openSUSE's zypper creates a Btrfs snapshot everytime, even when removing packages, keeping a configurable maximum of 10 snapshots.
3. GhostBSD...
I know modern SSD's resist a bit more but I dunno about eMMC's. It's also faster to download to RAM. I'm even tempted to symlink /var/cache/pkg to /tmp which is already tmpfs in my case but want to do it in a secure way.
I'm experimenting with this wrapper around pkg(8) to automatically mount the pkg cache in tmpfs and create a ZFS boot environment. The reason for using tmpfs is to prevent a eMMC/SSD from wearing. Any suggestions for improvements are welcome.
#!/bin/sh
#
# Wrapper around FreeBSD pkg(8) to...
You can't go wrong with the classics. In addition to The UNIX Programming Environment recommended above I'd also add Advanced Programming in the UNIX Environment by Richard W. Stevens. Any book by this author is a collectible item.
Both explain the concepts as well as the implementation...
This seems like an elaborate prank to make fun of minimalism or someone hasn't yet realized that the real world is orders of magnitude more complex than IT.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.
