9 ms·
OpenBSD 7.1
- jbirer 5y agoI wonder why OpenBSD does not provide a separate non-free firmware included ISO mirror like Debian does.
- traceroute66 5y ago> I wonder why OpenBSD does not provide a separate non-free firmware included ISO mirror like Debian does. Unfortunately powers that be at OpenBSD are pretty hardcore about "Open means open".
- brynet 5y agoOpenBSD includes firmware it can permissively redistribute, for example as of 7.1, OpenBSD developers spent many months working with Realtek to change the firmware license for rtwn(4), urtwn(4) and rsu(4) wireless devices so that it could be included in base and on the install media. https://marc.info/?l=openbsd-cvs&m=163331097625151&w=2 https://marc.info/?l=openbsd-cvs&m=163331097625151&w=2 For firmware that cannot be distributed on the install media, it is instead packaged separately and made installable through fw_update(8), if you have a working Internet connection will be fetched automatically from the installer or on first boot. You can also add firmware to install media yourself, if you have an existing OpenBSD install: https://www.openbsd.org/faq/faq4.html#WifiOnly https://www.openbsd.org/faq/faq4.html#WifiOnly
- omnibrain 5y agoNice artwork as usual, but it looks like the song is missing. Sadly I can't say much about the release because I have no real use case for OpenBSD.
- Shared404 4y agoCame here to comment on the missing song as well. It's a fun time playing around with OpenBSD on laptop. I've used it a couple times on old thinkpad's, it's always an interesting reminder that there is *nix that is not Linux, and that there's more than one way to do things. Maybe when I finally get around to building a router it'll be OpenBSD, that would be fun.
- evh 4y agoSetting up an OpenBSD router is almost trivial - it's all there in the base system. dhcpd, unbound, net.inet.ip.forwarding=1 and a forwarding rule in pf.conf and you're good to go. Then the tinkering starts, of course (even wireguard's available in base). Do run a few benchmarks - my APU2 can't really live up to gbit IP throughput (iperf3 speeds were about 500 Mbps, no performance tuning ). Luckily the veb(4) software switching does reach 1 Gbps locally and my uplink is only 100/100. Would recommend it, very nice to work with.
- Shared404 4y agoWhat I'm more worried about is hardware support, specifically for a PCI Wifi board I pulled from recycling a while ago. It'll probably trivial to find out, even if just by installing the OS and trying fw_update. I need to just sit down and do it, but I have a working setup right now and can't quite get the motivation to at the moment.
- evh 4y agoYeah wlan is by far the weakest point of OpenBSD networking - especially as an AP. Slipped my mind completely actually. The way most do it is to have separate APs. Still, you can check https://man.openbsd.org/pci.4#Wireless_network_interfaces https://man.openbsd.org/pci.4#Wireless_network_interfaces to get a general idea. Unfortunately only a few support host AP mode (last I checked).
- mdb31 5y agoYup, there were some premature release announcements, but it seems it's really available now. (Note that OpenBSD releases come out twice a year, pretty much like clockwork, and that version numbers aren't indicative of the magnitude of the underlying changes: 7.0 was just the next release after 6.9). Headline improvement for this version: it's fully supported on Apple Silicon. Not sure there is a huge market for that, but still pretty cool!
- traceroute66 5y ago> Yup, there were some premature release announcements, but it seems it's really available now Technically you it was always available, you can always follow -current or whatever they call it. Most sensible people don't, however, because it entails going back to the old-school way of keeping OpenBSD up to date, i.e. you don't get to benefit from syspatch, fwupdate and sysupgrade. All three utils being (relatively) recent inventions that help keep your average sysadmin sane !
- messe 5y agoActually you get the advantages of all of those when running -current if you follow it by using the binary snapshots. You can follow current by upgrading to the latest snapshot via ‘sysupgrade -s’.
- brynet 5y agoLink to official release page: https://www.openbsd.org/71.html https://www.openbsd.org/71.html Announcement mail: https://marc.info/?l=openbsd-announce&m=165054715122282&w=2 https://marc.info/?l=openbsd-announce&m=165054715122282&w=2
- johnklos 5y agoIt's good to see their regular update cadence bringing new code to the masses without much delay, like OpenSSH 9.0, for example. I think many people who run other Unix-like OSes don't always realize how much of the code they use regularly comes from the OpenBSD project, even if we don't often run OpenBSD directly. Thanks, OpenBSD!
- tharne 5y ago> I think many people who run other Unix-like OSes don't always realize how much of the code they use regularly comes from the OpenBSD project, even if we don't often run OpenBSD directly. OpenBSD is a huge contributor to the Unix ecosystem. Also, don't forget the top-notch documentation. Even when I'm using Linux at work, I'll still often pull up the OpenBSD man pages because they're so much better.
- sjmulder 4y agoWith mandoc, they've also worked hard on the HTML output. No more fixed with fonts, good layout, internal and external links, and compact. I wish more documentation was like this! Examples: http://man.openbsd.org/kqueue http://man.openbsd.org/kqueue http://man.openbsd.org/acme-client http://man.openbsd.org/acme-client
- Gualdrapo 5y agoIn their website they mention OpenSSH is a product of their efforts: > As an example of the effect OpenBSD has, the popular OpenSSH software comes from OpenBSD. But I think they could reformulate it to illustrate that even more good stuff has been done there and it is used by many
- icybox 4y agoObligatory link to Peter N.M. Hansteen's presentation "OpenBSD and You". On slide 6, you'll see which operating systems use OpenBSD's code to its benefit. https://home.nuug.no/~peter/openbsd_and_you/ https://home.nuug.no/~peter/openbsd_and_you/ EDIT:grammar
- enriquto 5y agoComplete upgrading instructions: ssh myopenbsdbox # log-in to your machine doas sysupgrade # will log you out, go drink some coffee ssh myopenbsdbox # log-in to the upgraded machine doas sysmerge # if any, solve merge conflicts of your cfg files doas pkg_add -u # if any, upgrade local packages doas sysclean # print obsolete files that you may want to remove the last step is optional. You may pipe its output to xargs rm -rf if you feel confident.
- amatecha 4y agoDon't forget to read this page: https://www.openbsd.org/faq/upgrade71.html https://www.openbsd.org/faq/upgrade71.html :)
- Aaronstotle 5y agoI need to try OpenBSD on a partition again, I kept running into issues where my display would freeze after 15 minutes. I assume it was because I was trying to watch videos + coupled with using an Nvidia card. From what I read online, OpenBSD does lack compared to FreeBSD in hardware support
- throwawayboise 5y agoYeah OpenBSD and Nvidia are not a good combo. Even with Intel or AMD, check the docs to be sure your video hardware is supported.
- throw_1999 5y ago> Implemented poll(2), select(2), ppoll(2) and pselect(2) on top of kqueue. Does anyone have more information on this? OpenBSD must be the only one to implement this way?
- brynet 5y agoApparently it was inspired by similar work done on DragonFlyBSD for select(2), unfortunately I cannot find any details about their implementation.
- asveikau 4y agoI feel like this doesn't matter much from outside the kernel, it's just an implementation detail. The limitations of those syscalls are inherent to the interface and won't be "fixed" this way. So it's no doubt convenient for the OpenBSD devs to unify the implementation, but this is not a user visible change or even something user mode programmers should care about.
- snvzz 5y agoI keep telling myself that one of these days, they'll migrate the cvs repo to git.
- icybox 4y agoThere is official read-only git mirror at https://github.com/openbsd/src https://github.com/openbsd/src CVS still works just fine for the devs ...
- voakbasda 4y agoCVS might work for the existing devs, but it can be a non-starter for onboarding experienced developers. Avoiding the upgrade to modern VCS tooling would be a deal-breaker for me, despite any other potential upsides. I view it as the tip of an iceberg of outstanding technical debt.
- icybox 4y agoI think you focus on the wrong thing. If your code is good, just send git diff to the mailing list and watch it being commited. Tools used is not some kind of magic pixie dust ...
- rawoke083600 5y agoCongrats ! I know the answer is "just use FreeBSD", but out of interest does anyone run OpenBSD with a LAMP stack in any sort of production environment with a medium-level(whatever this may mean to you) of traffic ?
- icybox 4y agoThe answer is actually "just use OpenBSD". I work for a local ISP and reinstalled all the aging OpenSUSE boxes with OpenBSD almost 5 years ago. Zero issues and peace of mind, because you know your servers can take care of themselves while you're on vacation. (I've started with OpenBSD around version 5.0 and have witnessed a situation where linux had a bug where whole world was running around with hands in the air and the same issue has been either fixed or mitigated in OpenBSD years ago) Core of the network is still Cisco and Nokia boxes, but all the support/servery stuff runs on OpenBSD - ELK stack, nextcloud servers, db servers, smokeping, nagios, syslog, tacacs, rpki validators, mail relay.s - you name it. Only exception is backups servers, where we use TrueNAS with ZFS (FreeBSD-based). I was testing 10gig SFP+ NICs (intel, broadcom) in linux, freebsd and openbsd with iperf3. I was seeing line rate in linux and freebsd and somewhere around 3gbps in OpenBSD. So while linux and freebsd has top performance, OpenBSD's performance with security mitigations enabled by default is good enough(tm) in most cases. YMMV
- rawoke083600 4y agoInteresting ! Been toying with the idea to move my "medium'ish" site to an OpenBSD stack currently on Ubuntu Linux 18 (can you get any more vanilla ?) For no other reasons than: 1) I can (i'm the boss, and only employee :/) 2) OpenBSD, will always have a special place in my heart going back 20 years, trying to "share" our dialup modem on my 386 ! 3) I also like going on vacation and not worry 4) That artwork :P 5) Just love the pure simplicity of it, everything "fits in your working mind" 6) I feel the older I get, the more I move to a graybeard-unix-mindset. Although I'm no way near as clever or component as the 'myth'. I like to think the (ok my) "ultimate final destination" is me sitting on a mountain top with a netbook coding in a LISP in Emacs on OpenBSB. Of course I might need some eye-candy so I will allow lolcat-bash-prompts for that color-req in my life. *The final zen-state* Now if I can only find a "DECENT" VPS host that offers any bsd default install options looking at you scaleway !
- dingleberry 5y agoi tried freebsd and surprised that pf is already included. that and zfs (no partition, can use whole disk). i'm considering using freebsd on both server and laptop from now on. will i miss anything?
- deleted 5y ago[deleted]
- icybox 4y agoFreeBSD's PF has been forked long time ago and lives independent life now. FreeBSD have implemented SMP improvements, but this hasn't been taken back by OpenBSD that has moved on since ... there are some incompatibilities. Both OpenBSD and FreeBSD are boringtech(tm). It just work, without all the drama, changing init systems and or system tools every couple years. It really depends on your workload, but with FreeBSD, you can run linux/windows/whatever in BHYVE or virtualbox if you need something specific ... I've ran FreeBSD servers with ZFS and jails (bastille) before, but I usually fall back to OpenBSD (if storage <100G) or SmartOS (storage >100G -> ZFS). Really depends on the workload. Give it a shot or mention what you need.
- upofadown 4y agoLast I checked it is a different version of pf than the version shipped on OpenBSD. I think that OpenBSD tends to be better on laptops.
- protomyth 4y agoAnyone got any information on sysclean? It doesn't seem to be installed with my 7.1 and there wasn't a manual page for it?
- icybox 4y agopkg_add sysclean
- protomyth 4y agoAny idea why it is a separate package when its in the release notes?
- brynet 4y agosysclean is not mentioned in the release notes, there is a small mention in the upgrade guide which states it's a package. There's some ongoing discussions that imply it probably shouldn't even be mentioned there. https://marc.info/?l=openbsd-misc&m=165056241101774&w=2 https://marc.info/?l=openbsd-misc&m=165056241101774&w=2
- brynet 4y agoAs an update, the mention on the upgrade guide has been removed: https://marc.info/?l=openbsd-cvs&m=165057387509256&w=2 https://marc.info/?l=openbsd-cvs&m=165057387509256&w=2
- eixiepia 4y ago
- sirmac1k 4y agoDoes anyone know what is the current state of UTF-8 support in OpenBSD? Last time I tired it I had big problems with it in base install. Both editors and mandoc were falling short in that regard.
- icybox 4y agoText console is ASCII. Xorg speaks UTF-8 fluently. Just set LC_CTYPE=cs_CZ.UTF-8 in .xsession or equivalent (locale -a) and you're good to go.
- sirmac1k 4y agoThanks. Unfortunately that's what I was afraid of. I need it mostly in TTY, so still gonna wait for some improvements there.
- johnisgood 4y agoExtended ASCII, that is. So, there are characters such as á, ű, ó and whatnot. Many people think that "lack of UTF-8" or "ASCII only" means there are no such characters.
- sph 4y agoThere is no such thing as extended ASCII, as the standard only specifies characters up to 0x7F. What comes after is implementation dependent, DOS/Windows had code pages, there's ISO standards, SHIFT-JIS, etc. none of which are compatible with each other.
- johnisgood 4y agoGlad to hear that. In that case text console in OpenBSD is not ASCII since I can pretty much both type and see those characters, right?! I mean, why say that it is ASCII-only if extended ASCII does not exist, yet those characters are displayed properly?
- 4y ago
- user3939382 4y agoI’ll use OpenBSD again if and when there’s a long-term branch that freezes the pf.conf syntax, let’s say for 10 years. Of course people are free to run their volunteer projects however they like, but I’m also free to decide that I’m not going to have my firewall rules randomly break if I want to keep my router updated. Over the last 15 years or so I’ve been burned by OpenBSD multiple times on this issue.
- icybox 4y agoAll the changes are mentioned in changelog and/or upgrade guide. What's the story here?
- stockerta 4y agoReading is hard /s
- user3939382 4y agoYeah try reconfiguring a remote firewall with breaking changes and therefore new behavior without OOB access. Don’t make a single mistake or you could be traveling hours/days. Good luck with your “reading” now that the breaking changes have made hundreds of online tutorials, articles, books etc that would guide you obsolete and wrong.
- IcePic 4y agoSo if you skip testing, and you skip reading the upgrade guide, skip editing pf.conf to adapt to some upcoming change and reboot into the upgraded OS version, you will still get a default pf that allows you to ssh in and fix it. But sure, one can still shoot oneself in the foot if you aim for it.
- amatecha 4y agoEvery OpenBSD release comes with a comprehensive, release-specific upgrade guide which tells you all quirks (including changes to configuration syntax). For this version, you can find the respective doc here: https://www.openbsd.org/faq/upgrade71.html https://www.openbsd.org/faq/upgrade71.html (Note the entire section called "Configuration and syntax changes") There's also a pretty clear instruction at the top: "For critical or physically remote machines, test it on an identical, local system first." I mean, I know it's annoying to hear that, but they are pretty upfront about basically everything with this OS, and you just have to be diligent about actually reading the documentation for the system upgrade. You were not "burned" by the OS or its developers.