Comment by vedranm | Hacker News Reader

Comment by vedranm | Hacker News Reader

Congratulations! Here's a summary of the highlights from the release announcement [1]:

- OpenSSH has been updated to version 9.5p1.

- OpenSSL has been updated to version 3.0.12, a major upgrade from OpenSSL 1.1.1t in FreeBSD 13.2-RELEASE.

- The bhyve hypervisor now supports TPM and GPU passthrough.

- FreeBSD supports up to 1024 cores on the amd64 and arm64 platforms.

- ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements.

- It is now possible to perform background filesystem checks on UFS file systems running with journaled soft updates.

- Experimental ZFS images are now available for AWS and Azure.

- The default congestion control mechanism for TCP is now CUBIC.

[1] https://www.freebsd.org/releases/14.0R/announce/

> - ZFS has been upgraded to OpenZFS release 2.2, providing significant performance improvements.

Post-2.2 OpenZFS has RAID-Z expansion committed:

* https://github.com/openzfs/zfs/discussions/15232

Also committed to FreeBSD -HEAD/development:

* https://github.com/freebsd/freebsd-src/commit/e716630d4cf89e...

How about zfs native encryption?

> There is a new zfskeys rc(8) service script, which allows for automatic decryption of ZFS datasets encrypted with ZFS native encryption during boot

Thanks! But does that mean zfs native encryption is now supported in freebsd? Last i checked (a good while back) - I got the impression geli(?) was strongly preferred and zfs native encryption was generally discouraged?

Works for me :) I have per-dataset encryption and seems to work just fine.

Adding another anecdotal "works for me" data point. I'm running it on 2 machines, encrypting certain datasets (no boot volumes).

- The bhyve hypervisor now supports TPM and GPU passthrough

Supernice.. I'm really looking forward to more separation between OS installs. similar to Qubes.

- cperciva (also submitter of this post) now head of the releng team

To be clear, me taking over the release engineering team a few days before the release announcement was entirely coincidental timing.

Reply on news.ycombinator.com