FuguIta/BBS

Do you have any message for us?†

To avoid posts by spam, a message body without the word #FuguIta is rejected. Please include the word in your message text.
URLs in the body of the message will also be judged as spam. If you wish to express a URL, please omit the scheme (http://, https://, etc.).

different hashes ?†

LWS (2025-06-10 (Tue) 08:39:41)

#FuguIta

Hi, first of all I would like to give you my warmest compliments for this fantastic project. It is really very well done and extremely flexible.
I approached your project because I wanted to do a security check on my openbsd desktop. I wanted to check the base system and specifically everything in /usr/X11R6 i.e. the graphics server infrastructure. What I noticed, however, is an inconsistency between the hashes of my machine and some fuguita binaries and libraries. In fact, I assumed that the fuguita base system was taken from the openbsd installation iso. So assuming this and given that there was a hash variation I came to the wrong conclusion that there were indicators of compromise on my PC. But then I had doubts so I downloaded the openbsd 77 iso and rechecked the hashes which instead were correct. The ones that were not correct were those of fuguita. So I would like to ask you if these files were compiled by you and why only some are different and while others are not. Thank you very much and best wishes for fuguita.

lws

• Hi, and thank you very much for your kind words and your thoughtful question.
  To clarify: all binaries in FuguIta are built entirely from source using the procedures described in the OpenBSD manual page release(8). That means the base system in #FuguIta is not taken directly from the official OpenBSD installation ISO, but instead is fully rebuilt by myself from the same source code.
  Therefore, it is expected that the hash values of binaries and libraries in FuguIta may differ from those in the official release — even if the source code is identical.
  Interestingly, some hashes match while others do not. I do not know the precise reason for this, but possible factors might include:
  • embedded timestamps or other non-deterministic metadata (so-called “magic numbers”),
  • differences in environment during build time (e.g., order of linking),
  • or perhaps effects from security features like ASLR (Address Space Layout Randomization) or similar mechanisms during or after compilation.
• Additionally, the OpenBSD official release remains unchanged during its lifecycle, except for syspatches. In contrast, FuguIta may undergo multiple CVS updates and full rebuilds of OpenBSD during the release cycle, whenever needed. This can naturally result in differences in the resulting binaries compared to the static official builds.
  That said, if you'd like to ensure maximum trust and reproducibility from a security standpoint, you’re more than welcome to rebuild your own version of FuguIta, following the method described in the FuguIta Guide. This way, you can verify the entire build process yourself.
  Thanks again for your feedback and for using FuguIta!
  

  -- kaw 2025-06-10 (Tue) 16:04:24

• Diese Konversation wurde mit Duck.ai unter Verwendung des Mistral Small 3-Modells von Mistral AI generiert. ==================== What is a Hash? Mistral Small 3: A hash is a fixed-size numeric value that is generated from a string of text using a hash function. Hash functions take an input (or 'message') and return a fixed-size string of bytes. The output is often represented as a hexadecimal number. Hashes are commonly used in various applications, including data integrity verification, cryptography, and data indexing. ### Key Properties of Hash Functions: 1. **Deterministic**: The same input will always produce the same hash output. 2. **Fixed Size**: Regardless of the size of the input, the hash output is always the same length. 3. **Efficient**: Hash functions are designed to be computationally efficient. 4. **Preimage Resistance**: Given a hash value, it should be computationally infeasible to find the original input. 5. **Second Preimage Resistance**: It should be computationally infeasible to find a different input that hashes to the same value as a given input. 6. **Collision Resistance**: It should be computationally infeasible to find two different inputs that hash to the same value. ### Common Hash Functions: - **MD5 (Message Digest Algorithm 5)**: A widely used hash function, but considered broken and unsuitable for further use. - **SHA-1 (Secure Hash Algorithm 1)**: Also considered broken and not suitable for further use. - **SHA-2 (Secure Hash Algorithm 2)**: A family of hash functions that includes SHA-256, SHA-384, and SHA-512. SHA-256 is commonly used in cryptographic applications. - **SHA-3 (Secure Hash Algorithm 3)**: The latest member of the Secure Hash Algorithm family, designed to be more secure and flexible. ### Example Use Cases: - **Data Integrity**: Hashes can be used to verify that data has not been tampered with. For example, downloading a file and comparing its hash to a known good hash can ensure the file has not been altered. - **Cryptography**: Hashes are used in various cryptographic protocols, such as digital signatures and password storage. - **Data Indexing**: Hashes can be used to quickly index and retrieve data in databases and other storage systems. ### Example in Python: Here's a simple example of how to generate a SHA-256 hash in Python: ```python import hashlib # Input string input_string = "Hello, World!" # Create a SHA-256 hash object hash_object = hashlib.sha256() # Update the hash object with the bytes of the input string hash_object.update(input_string.encode('utf-8')) # Get the hexadecimal representation of the hash hash_hex = hash_object.hexdigest() print("SHA-256 Hash:", hash_hex) ``` This code will output the SHA-256 hash of the string "Hello, World!". #FuguIta -- budlun 2025-06-12 (Thu) 00:23:08

• There are several reasons why #FuguIta sometimes does a full build of the base OpeBSD.
  One is to prevent any errata from being missed.
  The other is to deal with the rare occasions when source code is modified in the -stable branch at a level that is not reflected in the errata.
  Furthermore, FuguIta's update tool, fiupdate, differs from OpenBSD's syspatch in that it always overwrites the entire OS, including the kernel, so a full build ensures the integrity of the entire system.
  Also, the kernel is always regenerated when a release is created, even if there are no changes to the kernel. This ensures that a randomly linked kernel is provided for each release. -- kaw 2025-06-13 (Fri) 10:12:27
• Too bad, you don't say anything lws #FuguIta Are lws a juggler? -- budlun 2025-06-26 (Thu) 06:49:30
• Whether or not LWS chooses to reply is entirely up to him. At #FuguIta BBS, both active participation and quiet observation are equally respected. -- kaw 2025-06-26 (Thu) 10:09:19
• Thank you kaw for respecting my rights. #FuguIta -- budlun 2025-06-26 (Thu) 21:34:32
• In this case a opinion and question of no equal rights? #FuguIta -- budlun 2025-06-26 (Thu) 21:44:11
• What about passive participation and poignant observation? #FuguIta -- budlun 2025-06-26 (Thu) 22:10:33
• They don't care, it's not your problem if it becomes fatal, the obsolete is then the problem, can feel safe in ambush with surveillance, ensures safety and takes no risks. #FuguIta -- budlun 2025-06-28 (Sat) 18:41:13
• Computer is not good for me. Everbody sold at IT Industry, in they want you are them delivered. they don't care about a Human. #FuguIta -- budlun 2025-06-29 (Sun) 04:47:11

FuguIta desktop environment demo version†

kaw (2025-05-18 (Sun) 23:37:08)

I made a demo version of FuguIta with a desktop environment. This demo version demonstrates that FuguIta can be used with a desktop environment as easily as a regular live system.

[How to use]

Download FuguIta-7.7_livedemo_en-amd64-202505101.img.xz from the test directory of the download mirror, unzip it with xz, and write it to a USB flashdrive of 16GB or more.

# pkg_add xz
# xz -dcv FuguIta-7.7_livedemo_en-amd64-202505101.img.xz > /dev/rsdNc  (sdN is the actual device name to write to)

You will be asked for the keyboard type during the first boot only, so please enter it. Once startup is complete, the desktop environment will start up automatically.

We recommend using a wired LAN network.
If you use WiFi, it is unlikely that you will be able to connect on the first startup. If you would like to set up WiFi after startup, please refer to "Switch between multiple network settings" and "Use a Wi-Fi device that requires a firmware download" from FuguIta Guide. The IP address is automatically set by DHCP for IPv4 and SLAAC for IPv6.

No passwords are set for the root and demo users. After logging in, set them as necessary.

• Included software is as follows.
• Desktop environment: xfce-4.20.0
• Web browser: firefox-137.0
• Mailer: thunderbird-128.9.0
• Office: libreoffice-25.2.1.2v0
• Media player: vlc-3.0.21p2
• Audio player: audacious-4.4.2
• Fonts: noto-cjk-20240730, noto-emoji-20240730, noto-fonts-24.9.1v0

If you are connected to the Internet, you can add software with the pkg_add command. You can also change the desktop environment with the dtjsetup command.

This is a demo version, so no bug fixes or improvements will be made. You can update the OS with fiupdate and update packages with pkg_add -u with this demo version.

In addition, added packages, various settings, and user-created data are automatically saved at shutdown and restored the next time the system is started.

You can also save them at any time by entering

doas usbfadm -r

To shut down the system, press and hold the power button on the PC. Or,

doas halt -p

will halt the system and turn off the power.

Please use at your own risk.

[Technical Notes]

This demo version uses the following features of Fuguita and OpenBSD.

• Automatic file saving at shutdown using the /etc/rc.shutdown file
• Automatic startup using the noasks file
• Automatic login using the xenodm-config file
• Additional partition mounting using the /etc/fuguita/fstab.tail file
• Initialization only at first startup using /etc/rc.firsttime

日本語デスクトップ環境デモ版†

kaw (2025-05-18 (Sun) 08:13:55)

河豚板に日本語デスクトップ環境を入れたデモ版を作ってみました。 このデモ版は、河豚板が一般のライブシステムと同様、手軽に日本語デスクトップ環境が使えることを実演します。

【使い方】

ダウンロードミラーのtestディレクトリからFuguIta-7.7_livedemo_ja-amd64-202505101.img.xzをダウンロードし、xzで解凍して16GB以上のサイズのUSBメモリに書き込んで下さい。

# pkg_add xz
# xz -dcv FuguIta-7.7_livedemo_ja-amd64-202505101.img.xz > /dev/rsdNc  (sdNは実際に書き込むデバイス名)

初回のみ起動途中でキーボードのタイプを訊かれますので、入力してください。 起動が完了すると、自動的に日本語デスクトップ環境が立ち上がります。

ネットワークは、有線LANの使用を推奨します。
WiFiを使った場合、初回の起動で接続できる可能性は低いです。起動後、WiFiを使用する設定を行いたい場合は河豚板ガイドの 複数のネットワーク設定を切り換えて使用する や ファームウェアのダウンロードが必要なWi-Fiデバイスを使う を参照して下さい。 IPアドレスは、IPv4はDHCP、IPv6はSLAACにより自動設定されます。

rootとdemoユーザにはパスワードは設定されていません。ログイン後、必要に応じて設定して下さい。

収録ソフトは以下のとおりです。

• デスクトップ環境: xfce-4.20.0
  
• ウェブブラウザ: firefox-137.0
  
• メーラ: thunderbird-128.9.0
  
• オフィス: libreoffice-25.2.1.2v0
  
• メディアプレーヤ: vlc-3.0.21p2
  
• オーディオプレーヤ: audacious-4.4.2
  
• 日本語入力: fcitx-anthy-5.1.5, fcitx-gtk-5.1.3
• 日本語端末: ja-kterm-6.2.0p9
  
• 文字コード変換: ja-nkf-2.1.5v0
  
• 文字フォント: hanazono-20170904, ja-fonts-funet-19911117p2, ja-fonts-gnu-1.2.1p0, ja-sazanami-ttf-20040629p3, mixfont-mplus-ipa-20060520p8, mplus-fonts-063a, noto-cjk-20240730, noto-emoji-20240730, noto-fonts-24.9.1v0, vlgothic-20230918

インターネットに接続できていれば、pkg_addコマンドでソフトの追加を行うことができます。また、dtjsetupコマンドによりデスクトップ環境の変更を行うことも可能です。

これはデモ版ですので不具合修正や改良は行いません。fiupdateによるOSのアップデートやpkg_add -uによるパッケージのアップデートは、このデモ版でも行えます。

なお、追加したパッケージ、各種設定、ユーザが作成したデータなどはシャットダウン時、自動的に保存され、次回起動時に復帰されます。
また、

doas usbfadm -r

と入力することで適時、保存を行うことができます。

システムをシャットダウンするには、PCの電源ボタンを長押しして下さい。または、

doas halt -p

を実行すると、システムの停止と電源断が行われます。

以上、at your own riskでご使用下さい。

【技術メモ】

このデモ版では、河豚板やOpenBSDの以下の機能を利用しています。

• /etc/rc.shutdownファイルによるシャットダウン時のファイル自動保存
• noasksファイルによる自動起動
• xenodm-configファイルによる自動ログイン
• /etc/fuguita/fstab.tailファイルによるパーティションの追加マウント
• /etc/rc.firsttimeによる、初回起動時のみの初期化

#FuguIta

Test version of FuguIta 7.7†

(2025-05-04 (Sun) 18:35:42)

The test version of #FuguIta 7.7 (i386/amd64/arm64), a live system based on OpenBSD, has been released

It's almost a release candidate version. Please try it out and check that it works.

In particular, the arm64 (RPi3/RPi4) version is currently in an environment where it is not possible to test it on a real machine, so I would be grateful if you could check whether X works, etc.

To kaw†

budlun (2025-04-25 (Fri) 09:34:09)

Hello kaw,

I've been with #FuguIta for more than a quarter now.
I love it, much more like OpenBSD.

To you, dear kaw, I value you very much. I want to take this opportunity to appreciate your work very much. I can't even describe it, I have tried so much, but only with FuguIta my cognetive dessonance on the computer is finally over and using Fuguita is no longer a problem for me cognetively.

For me, 4 points were decisive, which are well described in the FuguIta Guide.

Although I had already worked a lot with Unix, I would never be so well without FuguIta.
I am finally happy.
I'm glad.
Thank you very much kaw.
Best regards budlun

• Dear Budlun, I am very happy to hear that you are taking advantage of FuguIta. I am especially pleased to hear that the FuguIta Guide has contributed greatly to your use. It was worth the effort to write it. I hope you will continue to enjoy #FuguIta. -- kaw 2025-04-26 (Sat) 01:08:35

no subject†

Psycho (2025-04-18 (Fri) 22:45:11)

# dvd-format /dev/rcd0c (format media, if you will be burn it first)

What package should I install?
Sorry I can only boot OpenBSD 7.5.

OpenBSD$ dvd-format /dev/rcd0c
ksh: dvd-format: not found

#FuguIta

• Sorry, it is dvd-rw-format not dvd-format
  I found an error in the description of Getting Started with #FuguIta and corrected it.
  Thank you very much for reporting. -- kaw 2025-04-19 (Sat) 06:58:21

Font size larger! |How to do| [rox-filer]; [icewm]; FuguIta; (OpenBSD);†

Budlun (2025-04-04 (Fri) 07:01:39)

If you want to change the font size, you can do so:

#pkg_add nano
<Rox-Filer:>
#nano /home/$USER/.gtkrc-2.0
-> gtk-font-name="Sans 22"
<IceWM:>
#mkdir /home/$USER/.icewm
#cp /root/.icewm/preferences /home/$USER/.icewm
#nano /home/$USER/.icewm/preferences
-> All Font Size +10
Log out <> Log in

Finish

#FuguIta

test version for usbfadm archive†

kaw (2025-04-01 (Tue) 05:27:56)

The test version of FuguIta that supports usbfadm archive, as explained at FuguIta/BBS/14, has been placed in the test directory of the mirror server.
I look forward to receiving your trial reports.
If no particular problems are reported, this will become the official release of #FuguIta.

• The patch-011 of OpenBSD 7.6 has been applied at test release #FuguIta-7.6-*-202504011. -- kaw 2025-04-01 (Tue) 11:01:33
• With a created archive it reads faster in memory when booting up. With the archive, the file is well protected against malware. With a created archive, a backup to a mounted storage is done with a copy. #FuguIta -- budlun 2025-06-04 (Wed) 06:16:36

Former articles are at FuguIta/BBS/14.

recent(50)