OpenBSD on Protonet Maya

Photo src ref: Protonet Press Materials. Free for editorial use.

I always planed on using my Protonet Maya server as a fanless *nix desktop system. So, after a short test w/ stock Debian on to OpenBSD…

TL;DR

Almost boring. Just works! 🐡👍

Installation

Basically, one just follows the excellent OpenBSD Installation Guide, starting w/ download and verify—of course! 🤓

# Ubuntu Distrobox on Fedora Silverblue/ Bluefin
cd ~/Downloads

# download
curl -o https://cdn.openbsd.org/pub/OpenBSD/7.4/amd64/install74.img

# verify checksum (transit)
sudo apt install hashalot

curl -o https://cdn.openbsd.org/pub/OpenBSD/7.4/amd64/SHA256

sha256sum install74.img

# verfiy cryptographically (contents)
sudo apt install signify-openbsd signify-openbsd-keys

curl -o https://ftp.openbsd.org/pub/OpenBSD/7.4/openbsd-74-base.pub
curl -o https://cdn.openbsd.org/pub/OpenBSD/7.4/amd64/SHA256.sig

signify-openbsd -Cp ./openbsd-74-base.pub -x SHA256.sig install74.img 

Then, …

1. burn to USB stick (e.g. via Balena Etcher),
2. boot from USB (get access to Maya's BIOS by pressing Del key),
3. and choose (I)nstall and follow the instructions,
4. finally (R)eboot.

Next up: profit! 💪‍

Setup

I usually start by following OpenBSD Amsterdam's Finishing touches, followed by Roman's guides on OpenBSD as a server:

su -

# Update fstab(5) to add noatime:
maya# cp /etc/fstab /etc/fstab.bak
maya# sed -i 's/rw/rw,noatime/' /etc/fstab

# Add username to groups staff and _shutdown: 
maya# usermod -L staff matthias
maya# usermod -G _shutdown matthias

# Update login.conf(5) to increase memory limits:
maya# cp /etc/login.conf /etc/login.conf.bak
maya# sed -i 's/datasize-cur=1536M/datasize-cur=8192M/' /etc/login.conf

# Add username to /etc/doas.conf:
maya# echo 'permit matthias' > /etc/doas.conf
maya# echo 'permit nopass keepenv root as root' >> /etc/doas.conf

# Install additional packages:
maya$ pkg_add curl git neofetch

# Install tailscale
doas pkg_add tailscale
doas rcctl enable tailscaled
doas rcctl start tailscaled
doas tailscale up --ssh

TODO

• Maybe Docker (via vmd) 🤔
• …

TO BE CONTINUED…