Skip to content

CopperBSD 0.1.10

Choose a tag to compare

View all tags
@CopperArch CopperArch released this 14 Oct 10:45
v0.1.10
f010096

CopperBSD 0.1.10 live/installer image, based on FreeBSD 15.1 (amd64).

Download

CopperBSD-0.1.10-amd64.iso.zip (1.4 GB). The ISO itself is 4.7 GB, which is over GitHub's 2 GB limit per file, so it is zipped. Unzip it first, then write CopperBSD-15.1-amd64.iso to a USB stick.

Checksum of the ISO inside the zip (SHA-256):

9b01dc94a74c5ea4aa8eca98b44954c5033038ed9ac4ad139e271e544c2ac055

New since 0.1.8

  • Terminal dock in the dashboard. A terminal beside the panels with a pane picker: Shell, Processes, Jail stats, System log, Disk usage, the daily routine's log, and Claude Code once it is installed. There is an Ask box, and off / ¼ / ½ / ¾ / full widths (Ctrl+` steps through them). An agent pane keeps running when the dock is closed.
  • Copy and paste in the dock. Dragging over text copies it to the desktop clipboard; right-click or middle-click pastes the clipboard in.
  • Nightly security & firewall check, shown on the dashboard:
    • every run: pf firewall on (switched back on if it was off), no VPN leak from the download jail (stopped if it leaks), secret files such as the WireGuard key readable only by their owner;
    • nightly: what the internet can actually reach, probed from outside through the VPN and compared with what was there before, and sshd not open to the internet with password logins;
    • after the updates: pkg audit for known-vulnerable packages on the host and in every jail, upgrading them when a fixed version is out, and a warning when installed security patches need a reboot.

What has been tested

In a FreeBSD 15.1 VM with the full media stack, real pf and a real WireGuard tunnel:

  • Fixes: pf switched off and a key file opened up were both fixed.
  • Leaks: a deliberately created VPN leak was caught and the download jail stopped. A VPN exiting on the same connection gave a warning only.
  • Audit and probe: the vulnerability audit ran against FreeBSD's real database, and the exposure probe found the right ports.
  • Installer: a full CopperBSD re-apply installed the new parts.
  • Dock: built against QtWebEngine and used on a virtual display.

The ISO was built and validated by GitHub's build, its checksum checked, and its contents confirmed to be 0.1.10.

What has not been tested

  • This ISO has not been booted, and the graphical installer writing to a disk has not been run. Try it on a spare machine or a VM first.
  • The dashboard on a physical screen, real temperature sensors, a commercial VPN provider, Nextcloud and public access.
  • The full nightly routine end to end with the new check (each part was run on its own).
Assets 3
Loading