ports VS i2pd

I think OpenBSD comes the closest to what you want with its two easy to use syscalls that provide syscall filtering and restricting access to paths:

https://man.openbsd.org/pledge.2

https://man.openbsd.org/unveil.2

A few random examples:

https://github.com/tmux/tmux/blob/c8494dff7b6b9a996866edaf8c...

https://github.com/openbsd/ports/blob/master/www/mozilla-fir...

https://github.com/openbsd/ports/blob/master/www/mozilla-fir...

To get the best isolation you need to patch the source — the application needs to go through initial setup and then drop privileges to the absolute possible minimum. But it's easy to make custom wrappers for third-party applications — the above profiles taken from the OpenBSD ports tree are the proof.

Have you checked the no-ip port: https://github.com/openbsd/ports/blob/master/net/no-ip/pkg/noip2.rc

> https://github.com/openbsd/ports/commit/bf33ea5f3ff390d8cde3...

Now, this is surprising. I randomly clicked on that link and I immediately see that the code and the patch has a bug. It only checks the first 8 characters:

    -      if (gr != NULL && strncmp(gr->gr_name, "operator", 8) == 0)

Some people are working around this by using obsdfreqd, some by patching sys/kern/sched_bsd.c (change if (hw_power) to if (0 && hw_power)), some by simply setting to a lower speed (sysctl hw.perfpolicy=manual and hw.setperf=99 might be enough as this disables turbo mode found on some CPUs).

You could also look into a port that has a hard dependency on openssl like: https://github.com/openbsd/ports/tree/master/security/sslscan

For me it's the ease of management and good documentation.

For example, during 6.8 to 6.9 upgrade, there was a major postgresql upgrade.

It is mentioned in the doc https://www.openbsd.org/faq/upgrade69.html (see Special packages at the bottom).

You're redirected to the package README with special instructions on how to setup and upgrade: https://github.com/openbsd/ports/blob/master/databases/postg...

Et voilà, everything is explained.

On debian, if I am not careful, I'll do an upgrade and risk breaking something during a db migration (I'm looking at you MySQL upgrades...).

Godot engine gamecontroller support. This is limited and incomplete, but it's a start. A huge number of indie games made with Godot are released every week; most of which work at least partially with an XBox {360,One} controller. You can follow This Week in Godot if you're interested.

> OpenBSD has handled this case for some years. I do not know if there was any breakage or fallout from this.

The other thing about OpenBSD is that when they make a change to their OS, they also go through to make sure all the (third-party) ports/packages:

* https://cvsweb.openbsd.org/ports/

* https://github.com/openbsd/ports

do not break. So they're create patches for the software and and submit them upstream.

I'm running a tor bridge on my home proxmox box, and I'm interested in running an i2p node as well but I have no experience with this. From what I was able to gather the easiest way is to install the i2pd .deb (https://github.com/PurpleI2P/i2pd/releases).

need someone to find me c++ developers who are very familiar with the i2pd codebase and link me up with them for the price of $25 USD (I can do payments in crypto or cashapp).

If you really dislike Java that much, there are other I2P implementations like this:

https://github.com/PurpleI2P/i2pd

I created an ansible role for i2pd. Basically, this allows system administrators who want to take part in the I2P network to automate i2pd deployment.

Check this: https://i2pd.website/

there may be instructions in the github i think? https://github.com/PurpleI2P/i2pd

> We are building network which helps people to communicate and share information without restrictions.

> Free from censorship. Free from privacy violations.

https://i2pd.website/

I2P is neither “for” nor “not for” piracy. I2P is for protecting communications and data from any kind of censorship.

Filtering copyright violating content is a type of censorship. To some it is justified. To others it is not.

To a network protocol like I2P the point is that no kind of censorship should be possible. Regardless of reason.