Dbuild

Supply chain security in modern container ecosystems is often treated as a post-build afterthought: a secondary scanner runs against a finished image and tries to infer what packages are inside. When building native FreeBSD OCI images at Daemonless, we decided to make supply chain transparency a first-class citizen from day one. With recent updates to our custom build system (dbuild), every container image generated across our entire fleet now produces multi-format Software Bill of Materials (SBOM) artifacts directly at build time. ...

When you run FreeBSD in a homelab across multiple servers, VNET jails, or VMs, routine maintenance quickly reveals a hidden inefficiency. Every time you provision a new jail or update your fleet, each instance independently connects to public pkg.FreeBSD.org mirrors to download identical packages. If you have a dozen jails running services that need Python, SQLite, or FFmpeg, your WAN connection downloads the exact same binary archives a dozen times. ...