The setup of OpenBSD Amsterdam(openbsd.amsterdam) |
The setup of OpenBSD Amsterdam(openbsd.amsterdam) |
That said, I would consider this mostly a place for experimentation and hobby work, as I routinely am unable to connect or find that my VM has been unexpectedly rebooted.
Now THAT said, I think they are figuring things out, because the issues have been a lot less frequent since the big hard drive failure a month or so ago.
Anyway, if you want to learn you some OpenBSD, I highly recommend it as a place to experiment, and you help the OpenBSD community as well through their donation.
The consequence is that the range of possible passwords is probably smaller than was intended, and furthermore seeing previous passwords (or the random MAC) may help in predicting passwords. Of course without seeing their entire setup it's hard to say to what extent that is the case here.
This module may be useful (it even uses the same alphabet by default): https://metacpan.org/pod/Session::Token
This is slightly different from how it's handled outside the Perl software ecosystem, as all the srand* functions effectively became nops on OpenBSD in favour of strong random numbers, and userland ports had to be patched to use the deterministic variants if needed. I guess that would be hard with things like CPAN.
https://github.com/openbsd/src/commit/2e109fb9e8c0dc273648dd...
https://github.com/openbsd/src/commit/2e109fb9e8c0dc273648dd...
https://github.com/openbsd/src/commit/2e109fb9e8c0dc273648dd...
Looks like upstream Perl also uses drand48 from FreeBSD, with its own internal RNG. But I guess this can be overridden with build options.
I'd imagine something like pwgen would be better, but I doubt it matters here.
More comparable comparisons could be: bhyve for FreeBSD, xhyve for OSX, virtualbox for... everything. Or QEMU/KVM on Linux.
But still. Docker is containers, vmm is full virtualisation.
Docker can be compared to FreeBSD jails, Solaris Zones or.. actually, cgroups in linux (for masochists).