https://ahze.net/tags/dbuild/ Recent content in Dbuild on Michael Johnson https://ahze.net/images/profile.jpg https://ahze.net/images/profile.jpg Hugo -- 0.164.0 en-us Sat, 01 Aug 2026 15:00:00 -0400 https://ahze.net/posts/transparent-sboms-with-dbuild/ Sat, 01 Aug 2026 15:00:00 -0400 https://ahze.net/posts/transparent-sboms-with-dbuild/ <p>Supply chain security in modern container ecosystems is often treated as a post-build afterthought: a secondary scanner runs against a finished image and tries to infer what packages are inside.</p> <p>When building native FreeBSD OCI images at <a href="https://daemonless.io">Daemonless</a>, we decided to make supply chain transparency a first-class citizen from day one. With recent updates to our custom build system (<a href="https://github.com/daemonless/dbuild"><code>dbuild</code></a>), every container image generated across our entire fleet now produces multi-format <strong>Software Bill of Materials (SBOM)</strong> artifacts directly at build time.</p> https://ahze.net/posts/caching-freebsd-packages/ Wed, 01 Jul 2026 10:00:00 -0400 https://ahze.net/posts/caching-freebsd-packages/ <p>When you run FreeBSD in a homelab across multiple servers, VNET jails, or VMs, routine maintenance quickly reveals a hidden inefficiency. Every time you provision a new jail or update your fleet, each instance independently connects to public <code>pkg.FreeBSD.org</code> mirrors to download identical packages. If you have a dozen jails running services that need Python, SQLite, or FFmpeg, your WAN connection downloads the exact same binary archives a dozen times.</p>