Sylve – A Modern Virtualization Solution

Sylve is a FreeBSD-based virtualization platform built around:

  • bhyve
  • FreeBSD jails
  • ZFS

Rather than hiding the underlying operating system, Sylve embraces the BSD philosophy.
It extends the native virtualization capabilities of FreeBSD with a modern web interface, API, clustering support, and integrated management tools.

Instead of following the design of Linux-based hypervisors, Sylve builds upon native FreeBSD technologies.

Sylve builds on top of bhyve by providing:

  • Web-based management
  • REST API
  • VM console access
  • Clustering
  • Backups
  • Native ZFS integration

Installation

For this demonstration, the FreeBSD host already has a bridge device named bridge0.
Sylve can either create virtual switches itself or use existing bridge interfaces.

Install Sylve with pkg:

pkg install sylve

Enable the service in rc.conf:

sysrc sylve_enable="YES"

Start Sylve:

service sylve start

Navigate in your browser to https://<ip>:8181.

Login with the credentials admin/admin.

Finish the configuration in the web-UI, then reboot the system.

Initial Configuration & Security

Edit the Sylve configuration file with your preferred editor:

ee /usr/local/etc/sylve/config.json

Configure the environment and change the admin password:

"environment": "production",
"auth": {
"enablePAM": true
},
"admin": {
"email": "admin@sylve.local",
"password": "<new-password>"
},

Restart the service:

service sylve restart

After the service has restarted successfully, remove the password from the configuration file by setting it to an empty string:

"password": ""

The original password will stay encrypted in the tool’s database after the change.
If you want to change the admin password again, fill the value and restart the service.

You can log in with admin/<new-password>.

If enablePAM is true, you can log in with your local user.

Network Configuration

Sylve comes with a transparent, explicit network configuration.
You can create a bridge device in the web-GUI, or add a pre-created one, as I do.

Unlike many virtualization platforms, Sylve does not try to hide the networking stack.
Virtual switches map directly to existing FreeBSD bridge interfaces, making the configuration predictable and easy to troubleshoot.

For this example, the existing bridge interface is imported into Sylve.

Configure the networking in the web-UI:

  1. Go to Data Center / Host / Network / Switches / Manual.
  2. Click New.
  3. Give it an identifier and choose the bridge0.

Installation Media

Add the installers to your Sylve:

  1. Go to Data Center / Host / Utilities / Downloader.
  2. Click Upload.
  3. Upload the ISOs.
  4. Click New.
  5. Paste the FreeBSD base system URL to the textbox for jails.
  6. Wait for it to download.

Usage

Once the installation media has been added, creating workloads is straightforward.

  • Click Create VM to deploy a bhyve virtual machine.
  • Click Create Jail to create a native FreeBSD jail.

Both workflows are available directly from the toolbar.

Final Thoughts

Sylve is not trying to replace every virtualization platform on the market.
Instead, it focuses on exposing the strengths of FreeBSD rather than hiding them.

If you already use bhyve, jails, and ZFS, Sylve provides a clean management layer without taking control away from the administrator.

The platform remains transparent, predictable, and easy to understand.

For administrators who prefer understanding their infrastructure instead of abstracting it away, Sylve is an excellent addition to the FreeBSD ecosystem.

Install Debian Linux On Btrfs

You investigate Btrfs. You read the documentation and many blog posts about it.
It has its advantages. It gives you value. Structure.
Then you check some installation guides:

  • Escape to shell from the installer to do the partitioning.
  • Bootstrap a Debian system while you mount the disk from a live CD.

No. You don’t have to be a magician to install Debian on Btrfs.
The Debian installer can do it for you.

The installer creates a perfectly usable Btrfs filesystem.
You can organize it into subvolumes later, after the first boot.

Continue reading “Install Debian Linux On Btrfs”

The Small Business Server Stack

Small and medium businesses are in a difficult position concerning technology and computers.
Most of you are in survival mode to be able to operate.

  • You cannot afford expensive hardware equipment.
  • You cannot subscribe to enterprise cloud solutions.
  • You cannot hire the top talent for 24/7.

Probably an acquaintance or relative helps you – or a small company suggested by them.

Continue reading “The Small Business Server Stack”

Use ZFS The Architect Way

A major system upgrade.
A risky configuration change.
Testing a new application.

On traditional filesystems, recovery usually means restoring from backups.
Sometimes it requires reinstalling the system entirely.

OpenZFS provides tools for managing risk.
Snapshotsdataset propertiescompression, and encryption can be managed directly by the filesystem.

OpenZFS is more than a filesystem.
It is a filesystem and volume manager designed to simplify storage administration.

Continue reading “Use ZFS The Architect Way”

FreeBSD Jails

The classic system administration changed a lot in a decade.
Virtualization and container technology went through a remarkable improvement.

They have a stable place in the systems:

  • Virtual machines run almost isolated from the host system.
  • Containers sit on the top of the same kernel bringing a lightweight separation.

FreeBSD Jails don’t compete with containers.
They don’t substitute virtual machines.
Jails just fill a gap.

Continue reading “FreeBSD Jails”

Matrix Homeserver As Hidden Service Over Tor (Synapse)

Matrix as a hidden service over Tor can increase privacy.
You already learned during our “hidden service” series:

that Tor is not an invisible cape. It’s not full-anonymity.
Using Tor you can maintain better privacy and OPSEC.
It’s a better protection against metadata leaks if you use it carefully.

Continue reading “Matrix Homeserver As Hidden Service Over Tor (Synapse)”

Protect Your Privacy With An XMPP Tor Hidden Service (Prosody)

The world is changing fast.
Yesterday’s mistake becomes today’s data leak – and tomorrow’s compromise.

Privacy is not a default setting.
It’s constant configuration and calibration.

You know how to install an IRC server as a Tor hidden service.
You’ve seen the modern features and modularity of the XMPP protocol.

A Tor hidden service protects both the server and the user.
This setup is designed to reduce exposure of IP addresses and limit metadata leakage.
It does not protect against compromised endpoints or user mistakes.

Continue reading “Protect Your Privacy With An XMPP Tor Hidden Service (Prosody)”

Run IRC As A Tor Hidden Service (Inspircd + Anope)

IRC with InspIRCd and Anope works well as an internet-facing service.
Your domain name, the TLS certificates and SASL authentication make it secure.
Cloaking hides your address from other users.

But what about IRC Operators and Network Admins?
They can see the addresses/hosts the clients connect from.

As an IRC Operator you can increase the trust in your services.

You will learn now how to run InspIRCd as a Tor-only hidden service.

Continue reading “Run IRC As A Tor Hidden Service (Inspircd + Anope)”

XMPP – The Middle Ground Of Instant Messaging (Prosody)

XMPP or Extensible Messaging and Presence Protocol is an open communication protocol.
It has been actively developed since it was introduced in 1999.
Over time, a large part of its user base migrated to centralized cloud platforms.

IRC is a simple, reliable, text-based protocol.
Matrix is a robust but more complex protocol with higher resource requirements.
XMPP sits between them, closer to IRC in simplicity while offering more modern features.

In this article you will learn to install a private, non-federated XMPP server.

Continue reading “XMPP – The Middle Ground Of Instant Messaging (Prosody)”

Build A Modular IRC Server In 2026 (Inspircd + Anope)

You saw the simplicity of Ergo Chat.
Now you think about how to build a modern, modular IRC server – like in the old days.

  • Inspircd is a modern IRC server.
  • Anope is a services bot.

Together they form the base of a stable and reliable communications service.

In 2026 IRC may not be the primary comms channel, but it’s perfect for secondary/backup.

Continue reading “Build A Modular IRC Server In 2026 (Inspircd + Anope)”

Run Your Own IRC Server (Ergo Chat)

Want a private comms channel without relying on Discord or Slack?
IRC is alive, and you can run your own today.

A small, well-configured IRC server gives you privacy, control, and minimal attack surface – all in a few commands.

Some people think that IRC is dead.
Some of them don’t even know what is it.
They’re young, grew up on modern comms.

IRC is the protocol that laid the foundation of modern chats.

Networks used large footprint ircd daemons for the base.
They registered services daemons for channel and nick retention.
TLS settings were rare and uncomfortable.
SASL authentication was hardly set.

Then new developments appeared.
The old technology got a modern revision.

Continue reading “Run Your Own IRC Server (Ergo Chat)”