Annotation of www/34.html, Revision 1.3
1.1 david 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 3.4 Release</title>
5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
8: <meta name="description" content="OpenBSD 3.4">
9: <meta name="keywords" content="openbsd,main">
10: <meta name="distribution" content="global">
11: <meta name="copyright" content="This document copyright 2003 by OpenBSD.">
12: </head>
13:
14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
15:
16: <a href="index.html">
17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
18: <hr>
19:
20: <p>
21: <a href="images/Hood.gif">
22: <img align="left" width="255" height="343" hspace="24"
23: src="images/Hood.gif" alt="OpenBSD 3.4 logo"></a>
24: <h2><font color="#0000e0">The OpenBSD 3.4 Release:</font></h2>
25: <p>
26:
27: Released Nov 1, 2003<br>
28: Copyright 1997-2003, Theo de Raadt.<br>
29: <font color="#e00000">ISBN 0-9731791-2-0</font>
30: <p>
31:
32: <a href="#new">What's New</a><br>
33: <a href="#install">How to install</a><br>
34: <a href="#ports">How to use the ports tree</a><br>
35: <a href="orders.html">Ordering a CD set</a><br>
36:
37: <p>
38: <h3><font color="#0000e0">
39: To get the files for this release:
40: <ul>
41: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
42: <li>See the information on <a href="ftp.html">The FTP page</a> for
43: a list of mirror machines.
44: <li>Go to the <font color="#e00000">pub/OpenBSD/3.4/</font> directory on
45: one of the mirror sites.
46: <li>Briefly read the rest of this document.
47: <li>Have a look at <a href="errata.html">The 3.4 Errata page</a> for a list
48: of bugs and workarounds.
49: <li>See a <a href="plus.html">detailed log of changes</a> between the
50: 3.3 and 3.4 releases.
51: </ul>
52: </font></h3>
53: <br clear=all>
54: <br>
55: <p>
56:
57: <strong>Note:</strong> All applicable copyrights and credits can be found
58: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
59: XF4.tar.gz, or in the files fetched via ports.tar.gz. The distribution
60: files used to build packages from the ports.tar.gz file are not included on
61: the CDROM because of lack of space.
62: <p>
63:
64: <a name="new"></a>
65: <hr>
66: <p>
67: <h3><font color="#0000e0">What's New</font></h3>
68: <p>
69: This is a partial list of new features and systems included in OpenBSD 3.4.
70: For a comprehensive list, see the <a href="plus.html">changelog</a> leading
71: to 3.4.
72: <p>
73:
74: <ul>
75:
76: <li>The i386 architecture has been switched to the ELF executable format.
77: <p>
78:
79: <li>Further W^X improvements, including support for the i386 and powerpc
80: architectures.
81: <p>
82:
83: <li>ELF platforms now have random library ordering for greater resistance to
84: attacks.
85: <p>
86:
87: <li>A static bounds checker has been added to the compiler to perform basic
88: checks on functions which accept buffers and sizes.
89: <p>
90:
91: <li>Privilege separation for syslogd was integrated.
92: <p>
93:
94: <li>Many unsafe string functions have been removed from the kernel and userland
95: utilities.
96: <p>
97:
98: <li>Support for
99: <a href="http://www.research.ibm.com/trl/projects/security/ssp/">
100: ProPolice</a> stack protection in the kernel has been added.
101: <p>
102:
103: <li>Manual pages have been greatly cleaned up and improved.
104: <p>
105:
106: <li>Systrace support in the ports subsystem to aid in detecting misbehaving
107: programs.
108: <p>
109:
1.3 ! jason 110: <li>More licenses fixes, including the removal of the advertising clause
! 111: for large parts of the source tree.
! 112: <p>
! 113:
1.1 david 114: <li>Over 2400 tested packages.
115: <p>
116:
117: <li>A large number of bug fixes, changes, and optimizations to our packet filter
118: including:
119: <ul>
120: <li>packet tagging
121: <li>stateful TCP normalization
122: <li>passive OS detection
123: <li>SYN proxy
124: <li>adaptive state timeouts
125: </ul>
126: <p>
127:
128: <li>The system includes the following major components from outside suppliers:
129: <ul>
1.2 david 130: <li>XFree86 4.3.0 (and i386 contains 3.3.X servers also, thus providing support
131: for all chipsets)
1.1 david 132: <li>Gcc 2.95.3 (+ patches)
133: <li>Perl 5.8.0 (+ patches)
134: <li>Apache 1.3.28, mod_ssl 2.8.15, DSO support (+ patches)
135: <li>OpenSSL 0.9.7beta3 (+ patches)
136: <li>Groff 1.15
137: <li>Sendmail 8.12.9
138: <li>Bind 9.2.2 (+ patches)
139: <li>Lynx 2.8.4rel.1 with HTTPS support added (+ patches)
140: <li>Sudo 1.6.7p5
141: <li>Ncurses 5.2
142: <li>Latest KAME IPv6
143: <li>Heimdal 0.6rc1 (+ patches)
144: <li>Arla-current
145: <li>OpenSSH 3.7
146: </ul>
147: <p>
148:
149: <p>
150: <li>Many improvements for security and reliability (look for the red
151: print in the <a href="plus.html">complete changelog</a>).
152: <p>
153: <li> and much more.
154:
155: </ul>
156:
157: <a name="install"></a>
158: <hr>
159: <p>
160: <h3><font color="#0000e0">How to install</font></h3>
161: <p>
162: Following this are the instructions which you would have on a piece of
163: paper if you had purchased a CDROM set instead of doing an alternate
164: form of install. The instructions for doing an ftp (or other style
165: of) install are very similar; the CDROM instructions are left intact
166: so that you can see how much easier it would have been if you had
167: purchased a CDROM instead.
168: <p>
169:
170: <hr>
171: Please refer to the following files on the three CDROMs or ftp mirror for
172: extensive details on how to install OpenBSD 3.4 on your machine:
173: <p>
174: <ul>
175: <li> CD1:3.4/i386/INSTALL.i386
176: <p>
177: <li> CD2:3.4/macppc/INSTALL.macppc
178: <li> CD2:3.4/vax/INSTALL.vax
179: <p>
180: <li> CD3:3.4/sparc/INSTALL.sparc
181: <li> CD3:3.4/sparc64/INSTALL.sparc64
182: <p>
183: <li> FTP:.../OpenBSD/3.4/alpha/INSTALL.alpha
184: <li> FTP:.../OpenBSD/3.4/hp300/INSTALL.hp300
185: <li> FTP:.../OpenBSD/3.4/hppa/INSTALL.hppa
186: <li> FTP:.../OpenBSD/3.4/mac68k/INSTALL.mac68k
187: <li> FTP:.../OpenBSD/3.4/mvme68k/INSTALL.mvme68k
188: </ul>
189: <hr>
190:
191: <p>
192: Quick installer information for people familiar with OpenBSD, and the
193: use of the "disklabel -E" command. If you are at all confused when
194: installing OpenBSD, read the relevant INSTALL.* file as listed above!
195: <p>
196:
197: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
198: <ul>
199: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
200: release is on CD1. If your BIOS does not support booting from CD, you will need
201: to create a boot floppy to install from. To create a boot floppy write
202: <i>CD1:3.4/i386/floppy34.fs</i> to a floppy and boot via the floppy drive.
203:
204: <p>
205: Use <i>CD1:3.4/i386/floppyB34.fs</i> instead for greater scsi controller
206: support, or <i>CD1:3.4/i386/floppyC34.fs</i> for better laptop support.
207:
208: <p>
1.2 david 209: If you are planning on dual booting OpenBSD with another OS, you will need to
210: read the included INSTALL.i386 document.
1.1 david 211:
212: <p>
213: To make a boot floppy under MS-DOS, use the "rawrite" utility located
1.2 david 214: at <i>CD:/3.4/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
215: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
216: dd&sektion=1">dd(1)</a> utility. The following is an example usage of
217: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)
218: </a>, where the device could be "floppy", "rfd0c", or
219: "rfd0a".
1.1 david 220:
221: <ul><pre>
222: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
223: </pre></ul>
224:
225: <p>
1.2 david 226: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
227: your install will most likely fail. For more information on creating a boot
228: floppy and installing OpenBSD/i386 please refer to
229: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
1.1 david 230: </ul>
231:
232: <p>
233: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
234: <ul>
235: Put the CD2 in your CDROM drive and poweron your machine while holding down the
236: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
237:
238: <p>
239: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
240: /3.4/macppc/bsd.rd</i>
241: </ul>
242:
243: <p>
244: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
245: <ul>
246: Boot over the network via mopbooting as described in INSTALL.vax.
247: </ul>
248:
249: <p>
250: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
251: <ul>
1.2 david 252: The 3.4 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
253: can use one of the two commands listed below, depending on the version of your
254: ROM.
1.1 david 255:
256: <ul><pre>
257: > <strong>boot cdrom 3.4/sparc/bsd.rd</strong>
258: or
259: > <strong>b sd(0,6,0)3.4/sparc/bsd.rd</strong>
260: </pre></ul>
261:
262: <p>
263: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.2 david 264: To do so you need to write "CD3:3.4/sparc/floppy34.fs" to a floppy.
265: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
266: the floppy use one of the two commands listed below, depending on the version of
267: your ROM.
1.1 david 268:
269: <ul><pre>
270: > <strong>boot floppy</strong>
271: or
272: > <strong>boot fd()</strong>
273: </pre></ul>
274:
275: <p>
1.2 david 276: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
277: will most likely fail.
1.1 david 278:
279: <p>
280: If your sparc doesn't have a floppy drive nor a CD drive, you can either
281: setup a bootable tape, or install via network, as told in the
282: INSTALL.sparc file.
283: </ul>
284:
285: <p>
286: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
287: <ul>
288: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
289:
290: <p>
291: If this doesn't work, or if you don't have a CDROM drive, you can write
292: <i>CD3:3.4/sparc64/floppy34.fs</i> to a floppy and boot it with <i>boot
293: floppy</i>.<br>
1.2 david 294: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
295: will most likely fail.
1.1 david 296:
297: <p>
298: You can also write <i>CD3:3.4/sparc64/miniroot34.fs</i> to the swap partition on
299: the disk and boot with <i>boot disk:b</i>.
300:
301: <p>
302: If nothing works, you can boot over the network as described in INSTALL.sparc64
303: </ul>
304:
305: <p>
306: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
307: <ul>
308: <p>Write <i>FTP:3.4/alpha/floppy34.fs</i> or
309: <i>FTP:3.4/alpha/floppyB34.fs</i> (depending on your machine) to a diskette and
310: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
311:
312: <p>
1.2 david 313: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
314: will most likely fail.
1.1 david 315:
316: </ul>
317:
318: <p>
319: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
320: <ul>
321: <p>
322: Boot over the network by following the instructions in INSTALL.hp300.
323: </ul>
324:
325: <p>
326: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
327: <ul>
328: <p>
329: Boot over the network by following the instructions in INSTALL.hppa or the
330: <a href="hppa.html#netboot">hppa platform page</a>.
331: </ul>
332:
333: <p>
334: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
335: <ul>
336: <p>
337: Boot MacOS as normal and partition your disk with the appropriate A/UX
338: configurations. Then, extract the Macside utilities from
339: <i>FTP:3.4/mac68k/utils</i> onto your hard disk. Run Mkfs to create your
340: filesystems on the A/UX partitions you just made. Then, use the
341: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.4/mac68k/</i> onto your
342: partitions. Finally, you will be ready to configure the "BSD/Mac68k
343: Booter" with the location of your kernel and boot the system.
344: </ul>
345:
346: <p>
347: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
348: <ul>
349: <p>
350: You can create a bootable installation tape or boot over the network.<br>
351: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
352: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
353: for more details.
354: </ul>
355:
356: <p>
357: <h3><font color="#e00000">Notes about the source code:</font></h3>
358: <ul>
359: src.tar.gz contains a source archive starting at /usr/src. This file
360: contains everything you need except for the kernel sources, which are
361: in a separate archive. To extract:
362: <p>
363: <ul><pre>
364: # <strong>mkdir -p /usr/src</strong>
365: # <strong>cd /usr/src</strong>
366: # <strong>tar xvfz /tmp/src.tar.gz</strong>
367: </pre></ul>
368: <p>
369: sys.tar.gz contains a source archive starting at /usr/src/sys.
370: This file contains all the kernel sources you need to rebuild kernels.
371: To extract:
372: <p>
373: <ul><pre>
374: # <strong>mkdir -p /usr/src/sys</strong>
375: # <strong>cd /usr/src</strong>
376: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
377: </pre></ul>
378: <p>
379: Both of these trees are a regular CVS checkout. Using these trees it
380: is possible to get a head-start on using the anoncvs servers as
381: described <a href="anoncvs.html">here</a>.
382: Using these files
383: results in a much faster initial CVS update than you could expect from
384: a fresh checkout of the full OpenBSD source tree.
385: <p>
386: </ul>
387: <a name="ports"></a>
388: <hr>
389: <p>
390: <h3><font color="#0000e0">Ports Tree</font></h3>
391: <p>
392: A ports tree archive is also provided. To extract:
393: <p>
394: <ul><pre>
395: # <strong>cd /usr</strong>
396: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
397: # <strong>cd ports</strong>
398: </pre></ul>
399: <p>
400: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
401: read the <a href="ports.html">ports</a> page
402: if you know nothing about ports
403: at this point. This text is not a manual of how to use ports.
404: Rather, it is a set of notes meant to kickstart the user on the
405: OpenBSD ports system.
406: <p>
407: Certainly, the OpenBSD ports system is not complete. It is doubtful it
408: will ever be. However, it is growing very fast and getting more stable.
409: Almost all ports provided with this release should build without problems
410: on most architectures (over 2400 packages build on i386, for instance).
411: <p>
412: The <i>ports/</i> directory represents a CVS (see the manpage for
413: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
414: cvs(1)</a> if
415: you aren't familiar with CVS) checkout of our ports. As with our complete
416: source tree, our ports tree is available via anoncvs. So, in
417: order to keep current with it, you must make the <i>ports/</i> tree
418: available on a read-write medium and update the tree with a command
419: like:
420: <p>
421: <ul><pre>
422: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3_4</strong>
423: </pre></ul>
424: <p>
425: [Of course, you must replace the local directory and server name here
426: with the location of your ports collection and a nearby anoncvs
427: server.]
428: <p>
429: Note that most ports are available as packages through ftp. Updated
430: packages for the 3.4 release will be made available if problems arise.
431: <p>
432: If you're interested in seeing a port added, would like to help out, or just
433: would like to know more, the mailing list ports@openbsd.org is a good
434: place to know.
435: <p>
436:
437: <hr>
438: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
439: alt="OpenBSD"></a>
440: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
441: <br><small>
1.3 ! jason 442: $OpenBSD: 34.html,v 1.2 2003/09/04 03:21:47 david Exp $
1.1 david 443: </small>
444:
445: </body>
446: </html>