[BACK]Return to 35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/35.html, Revision 1.100

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
1.100   ! deraadt     4: <title>OpenBSD 3.5</title>
1.1       deraadt     5: <meta name="resource-type" content="document">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      7: <meta name="description" content="OpenBSD 3.5">
                      8: <meta name="keywords" content="openbsd,main">
                      9: <meta name="distribution" content="global">
1.25      miod       10: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.1       deraadt    11: </head>
                     12:
                     13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     14:
                     15: <a href="index.html">
                     16: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     17: <hr>
                     18:
                     19: <p>
                     20: <a href="images/Carp.gif">
1.100   ! deraadt    21: <img align="left" width="255" height="343" hspace="24"
1.1       deraadt    22: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
1.100   ! deraadt    23: <h2><font color="#0000e0">OpenBSD 3.5</font></h2>
1.1       deraadt    24: <p>
                     25: Released May 1, 2004<br>
                     26: Copyright 1997-2004, Theo de Raadt.<br>
1.89      wvdputte   27: <font color="#e00000">ISBN 0-9731791-3-9</font>
1.93      deraadt    28: <br>
                     29: <a href="lyrics.html#35">3.5 Song: "CARP License" and "Redundancy must be free"</a>
1.1       deraadt    30: <p>
                     31: <ul>
                     32: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     33: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     34:     a list of mirror machines.
                     35: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
                     36:     one of the mirror sites.
                     37: <li>Briefly read the rest of this document.
1.92      miod       38: <li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list
1.1       deraadt    39:     of bugs and workarounds.
1.88      deraadt    40: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1       deraadt    41:     3.4 and 3.5 releases.
                     42: </ul>
                     43: <br clear=all>
1.100   ! deraadt    44: All applicable copyrights and credits can be found in the applicable
        !            45: file sources found in the files src.tar.gz, sys.tar.gz,
        !            46: xenocara.tar.gz, or in the files fetched via ports.tar.gz.  The
        !            47: distribution files used to build packages from the ports.tar.gz file
        !            48: are not included on the CDROM because of lack of space.
1.1       deraadt    49: <p>
                     50:
                     51: <a name="new"></a>
                     52: <hr>
                     53: <p>
                     54: <h3><font color="#0000e0">What's New</font></h3>
                     55: <p>
                     56: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88      deraadt    57: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1       deraadt    58: to 3.5.
                     59: <p>
                     60:
                     61: <ul>
                     62:
1.14      deraadt    63: <li> New platforms:
                     64: <ul>
1.74      deraadt    65: <li><a href="amd64.html">OpenBSD/amd64</a><br>
                     66: Supporting the AMD64 architecture natively,
                     67: with full 64-bit support, 8 extra registers in the architecture
                     68: to significantly increase performance, and a memory management
                     69: Non-Executable bit that permits full W^X support.<br>
1.94      david      70: (Note: The upcoming Intel "ia32e" AMD64-compatible CPUs have also
1.74      deraadt    71: been tested, and work, even though they lack the NX bit).
                     72: <li><a href="cats.html">OpenBSD/cats</a><br>
1.94      david      73: Our first entry in the ARM-CPU landscape.  We intend to use this as a
1.74      deraadt    74: development platform for something else we plan for the future...
                     75: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.94      david      76: Supporting an older, but very cool CPU architecture, perhaps the
                     77: most pure RISC CPU ever.
1.14      deraadt    78: </ul>
                     79: <p>
                     80:
1.35      otto       81: <li>Replacement of the GNU
1.12      otto       82: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
                     83: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4       deraadt    84: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
                     85: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1       deraadt    86: commands with BSD licensed equivalents.
                     87: <p>
                     88:
1.5       mcbride    89: <li>A large number of bug fixes, changes, and optimizations to our packet filter
                     90:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
                     91:     including:
                     92: <ul>
1.19      otto       93: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
                     94:     inconsistent state).
1.69      djm        95: <li>A 30% reduction in the size of state table entries.
1.19      otto       96: <li>Source-tracking (limit number of clients and states per client).
                     97: <li>Sticky-address (the flexibility of round-robin with the benefits of
                     98:     source-hash).
1.53      mcbride    99: <li>Invert the socket match order when redirecting to
1.34      avsm      100:     localhost (prevents the potential security problem of remote connections
1.19      otto      101:     being identified as local).
1.5       mcbride   102: <li>Significant improvements to interface handling.
                    103: </ul>
                    104: <p>
                    105:
1.53      mcbride   106: <li>New tools for filtering gateway failover:
1.5       mcbride   107: <ul>
                    108: <li>CARP (the Common Address Redundancy Protocol)
                    109:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
                    110:     allows multiple machines to share responsibility for a given IP address or
                    111:     addresses. If the owner of the address fails, another member of the group
                    112:     will take over for it. A discussion of the history of CARP can be found
1.62      deraadt   113:     <a href="lyrics.html">here</a>.
1.5       mcbride   114: <li>Additions to the
                    115:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
                    116:     interface allow it to synchronise state table entries between two or more
                    117:     firewalls which are operating in parallel, allowing stateful connections
                    118:     to cross any of the firewalls regardless of where the state was initially
                    119:     created.
                    120: </ul>
                    121: <p>
                    122:
1.6       todd      123: <li> New functionality:
                    124: <ul>
1.51      millert   125: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
1.6       todd      126: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
1.47      deraadt   127: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
                    128: As a result any process can now open a pty easily, meaning
                    129: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>
                    130: and
                    131: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xconsole&sektion=1">xconsole(1)</a>
                    132: are no longer setuid root.  (In 3.4 they were setuid root, but privilege revoking).
1.17      otto      133: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
                    134: system call has been added.
1.6       todd      135: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17      otto      136: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
1.70      djm       137: <li>Network boot support for i386 and amd64, using
                    138:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19      otto      139: <li>The i386 8GB boot loader limitation has been removed.
1.6       todd      140: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.52      beck      141: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
                    142: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80      tdeval    143: <li>Interface 'cloning', accessed by
1.6       todd      144: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19      otto      145: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82      tdeval    146: <li>
                    147: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
                    148: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47      deraadt   149: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
                    150: <li>Complete rewrite of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">package</a> tools in perl.
1.21      djm       151: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>
                    152: now supports logging to memory buffers, to be read using
                    153: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogc&sektion=8">syslogc(8)</a>.
1.47      deraadt   154: This is useful for diskless or flash-based computers.
1.34      avsm      155: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
1.33      otto      156: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">
1.79      tdeval    157: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33      otto      158: reads and writes.
1.43      beck      159: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">
                    160: authpf(8)</a> now tags traffic in
                    161: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">
                    162: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46      tedu      163: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.94      david     164: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpu&arch=i386">CPUs</a>,
1.91      henning   165: great for prolonged battery life.
1.48      beck      166: <li>XFS has been added to the GENERIC kernels so that
                    167: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)
                    168: </a> may be started easily, eliminating the need to recompile the kernel
1.49      deraadt   169: to use AFS.<br>
                    170: AFS can now be used anonymously by enabling it in
                    171: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48      beck      172: with no further configuration.
1.55      millert   173: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
1.51      millert   174: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
1.64      krw       175: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8"
                    176: >dhclient(8)</a> now detects when the interface it configured is modified and
                    177: gracefully exits.
                    178: e.g. repeatedly running it against the same interface leaves only the
                    179: last instance active.
1.6       todd      180: </ul>
                    181: <p>
                    182:
1.47      deraadt   183: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6       todd      184: <ul>
                    185: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
                    186: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.47      deraadt   187: (Previously privilege revoking, but this had a small breakage).
1.13      todd      188: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6       todd      189: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
                    190: </ul>
                    191: <p>
                    192:
                    193: <li> New tools:
                    194: <ul>
1.47      deraadt   195: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
                    196: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
                    197: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
1.10      deraadt   198: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
1.35      otto      199: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6       todd      200: </ul>
                    201: <p>
                    202:
1.23      henning   203: <li> Performance improvements:
                    204: <ul>
1.35      otto      205: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72      djm       206: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71      djm       207: <li>Implemented TCP adjustments recommended by
                    208:     <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
                    209:     controllable via
                    210:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl</a>.
1.23      henning   211: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42      henning   212:     des, 3des, rsa, dsa and bn.
1.77      tdeval    213: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
                    214:     provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.94      david     215:     CPU performing AES more than 10x faster than the fastest CPU currently sold).
1.45      tedu      216: <li>Directory hashing makes lookups in large directories much faster.
1.90      mcbride   217: <li>Zeroing pages with SSE. Faster operation, and avoids clobbering the cache.
1.23      henning   218: </ul>
                    219: <p>
                    220:
1.84      miod      221: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67      krw       222: <ul>
1.73      otto      223: <li>Bus probe made faster by skipping non-existent LUNs.
1.67      krw       224: <li>Bus probe made saner by elimination of spurious commands.
                    225: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81      krw       226: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67      krw       227: <li>SCSIDEBUG output can now be restricted to specified buses.
                    228: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
                    229: <li>Better error handling.
                    230: </ul>
                    231: <p>
                    232:
1.29      henning   233: <li>Improved hardware support, including:
                    234: <ul>
1.97      deraadt   235: <li>The <a href="hppa.html">hppa</a> architecture gets support for many
1.29      henning   236:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
1.37      mickey    237:     based machines w/ addition of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
1.78      otto      238: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
1.55      millert   239: <li>Major improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
1.35      otto      240: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
                    241: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> driver for  LSI Fusion-MPT SCSI and FibreChannel host adapters.
1.39      henning   242: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snapper&amp;arch=macppc&amp;sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
1.44      millert   243: <li>Improved stability of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
                    244: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
1.61      marco     245: <li>Fixed several firmware incompatibility issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
1.68      grange    246: <li>Improved ATA and SATA support.
1.50      mickey    247: <li>Support for i835 AGP GART in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>.
1.54      marco     248: <li>Improved Gigabit Ethernet support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> &  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>.
1.66      marco     249: <li>Several fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>.
1.63      marco     250: <li>Support for Intel 852/855/865 AGP chipsets.
1.67      krw       251: <li>Many more USB Flash and other
                    252: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29      henning   253: </ul>
1.20      otto      254: <p>
                    255:
1.57      marco     256: <li> This release ships with Firefox for all major architectures.
                    257: <p>
                    258:
1.58      marco     259: <li> Major improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.
                    260: <p>
                    261:
1.18      sturm     262: <li> Over 2500 ports, 2300 pre-built packages.
                    263: <p>
                    264:
1.7       todd      265: <li>Many improvements for security and reliability (look for the red
1.88      deraadt   266: print in the <a href="plus35.html">complete changelog</a>).
1.7       todd      267: <p>
                    268:
1.19      otto      269: <li>Many improvements in manual pages and other documentation.
                    270: <p>
                    271:
1.40      tdeval    272: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62      deraadt   273: <a href="amd64.html">OpenBSD/amd64</a>,
                    274: <a href="cats.html">OpenBSD/cats</a> and
                    275: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28      henning   276: platforms.
                    277: Other architectures still use gcc 2.95.3 with the same local additions.
                    278: <p>
1.75      markus    279: <li>OpenSSH 3.8.1:
                    280: <ul>
                    281: <li>
                    282: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
                    283: now supports forced changes of expired passwords via
                    284: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
                    285: <li>
                    286: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    287: now uses untrusted cookies for X11-Forwarding.
                    288: Some X11 applications might need full access to the X11 server,
                    289: see ForwardX11Trusted in
1.76      djm       290: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75      markus    291: and
                    292: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a>.
                    293: <li>
                    294: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    295: now supports sending application layer
                    296: keep-alive messages to the server.  See ServerAliveInterval in
1.76      djm       297: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75      markus    298: <li> Improved
                    299: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
                    300: batch file support.
                    301: <li> New KerberosGetAFSToken option for
                    302: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
                    303: <li> Updated /etc/moduli file and improved performance for
                    304: protocol version 2.
                    305: <li> Support for host keys in DNS.
                    306: <li> The experimental "gssapi" support has been replaced with
                    307: the "gssapi-with-mic" to fix possible MITM attacks.
                    308: The two versions are not compatible.
                    309: </ul>
                    310: <p>
1.28      henning   311:
                    312: <li>The system includes the following major components from outside suppliers:
                    313: <ul>
                    314: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
                    315:     providing support for all chipsets)
1.40      tdeval    316: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28      henning   317: <li>Perl 5.8.2 (+ patches)
                    318: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    319: <li>OpenSSL 0.9.7c (+ patches)
                    320: <li>Groff 1.15
                    321: <li>Sendmail 8.12.11
                    322: <li>Bind 9.2.3 (+ patches)
                    323: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
                    324: <li>Sudo 1.6.7p5
                    325: <li>Ncurses 5.2
                    326: <li>Latest KAME IPv6
                    327: <li>Heimdal 0.6rc1 (+ patches)
                    328: <li>Arla-current
                    329: </ul>
                    330: <p>
1.1       deraadt   331:
                    332: </ul>
                    333:
                    334: <a name="install"></a>
                    335: <hr>
                    336: <p>
                    337: <h3><font color="#0000e0">How to install</font></h3>
                    338: <p>
                    339: Following this are the instructions which you would have on a piece of
                    340: paper if you had purchased a CDROM set instead of doing an alternate
                    341: form of install.  The instructions for doing an ftp (or other style
                    342: of) install are very similar; the CDROM instructions are left intact
                    343: so that you can see how much easier it would have been if you had
                    344: purchased a CDROM instead.
                    345: <p>
                    346:
                    347: <hr>
                    348: Please refer to the following files on the three CDROMs or ftp mirror for
                    349: extensive details on how to install OpenBSD 3.5 on your machine:
                    350: <p>
                    351: <ul>
                    352: <li>CD1:3.5/i386/INSTALL.i386
1.2       deraadt   353: <li>CD1:3.5/vax/INSTALL.vax
1.1       deraadt   354: <p>
1.2       deraadt   355: <li>CD2:3.5/amd64/INSTALL.amd64
1.1       deraadt   356: <li>CD2:3.5/macppc/INSTALL.macppc
                    357: <p>
                    358: <li>CD3:3.5/sparc/INSTALL.sparc
                    359: <li>CD3:3.5/sparc64/INSTALL.sparc64
                    360: <p>
                    361: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27      miod      362: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1       deraadt   363: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
                    364: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
                    365: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
                    366: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2       deraadt   367: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1       deraadt   368: </ul>
                    369: <hr>
                    370:
                    371: <p>
                    372: Quick installer information for people familiar with OpenBSD, and the
                    373: use of the "disklabel -E" command.  If you are at all confused when
                    374: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    375: <p>
                    376:
                    377: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    378: <ul>
                    379: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    380: release is on CD1. If your BIOS does not support booting from CD, you will need
                    381: to create a boot floppy to install from. To create a boot floppy write
1.2       deraadt   382: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1       deraadt   383:
                    384: <p>
1.2       deraadt   385: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
                    386: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1       deraadt   387:
                    388: <p>
1.83      tom       389: If you can't boot from a CD or a floppy disk,
                    390: you can install across the network using PXE as described in
                    391: the included INSTALL.i386 document.
                    392:
                    393: <p>
1.1       deraadt   394: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83      tom       395: read INSTALL.i386.
1.1       deraadt   396:
                    397: <p>
                    398: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
1.83      tom       399: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.1       deraadt   400: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
                    401: dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
                    402: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)
                    403: </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    404: &quot;rfd0a&quot;.
                    405:
                    406: <ul><pre>
                    407: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    408: </pre></ul>
                    409:
                    410: <p>
                    411: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    412: your install will most likely fail. For more information on creating a boot
                    413: floppy and installing OpenBSD/i386 please refer to
                    414: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
                    415: </ul>
                    416:
                    417: <p>
1.84      miod      418: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1       deraadt   419: <ul>
1.84      miod      420: Boot over the network via mopbooting as described in INSTALL.vax.
1.1       deraadt   421: </ul>
                    422:
                    423: <p>
1.2       deraadt   424: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    425: <ul>
1.84      miod      426: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83      tom       427: Boot from the CD to begin the install - you may need to adjust
                    428: your BIOS options first.
                    429: If you can't boot from the CD, you can create a boot floppy to install from.
1.85      tom       430: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83      tom       431: boot from the floppy drive.
                    432:
                    433: <p>
                    434: If you can't boot from a CD or a floppy disk,
                    435: you can install across the network using PXE as described in the included
                    436: INSTALL.amd64 document.
                    437:
                    438: <p>
                    439: If you are planning to dual boot OpenBSD with another OS, you will need to
                    440: read INSTALL.amd64.
1.2       deraadt   441: </ul>
                    442:
                    443: <p>
1.84      miod      444: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1       deraadt   445: <ul>
1.84      miod      446: Put the CD2 in your CDROM drive and poweron your machine while holding down the
                    447: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    448:
                    449: <p>
                    450: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    451: /3.5/macppc/bsd.rd</i>
1.1       deraadt   452: </ul>
                    453:
                    454: <p>
                    455: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    456: <ul>
                    457: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    458: can use one of the two commands listed below, depending on the version of your
                    459: ROM.
                    460:
                    461: <ul><pre>
1.86      miod      462: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1       deraadt   463: or
1.86      miod      464: &gt; <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1       deraadt   465: </pre></ul>
                    466:
                    467: <p>
                    468: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84      miod      469: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1       deraadt   470: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
                    471: the floppy use one of the two commands listed below, depending on the version of
                    472: your ROM.
                    473:
                    474: <ul><pre>
1.86      miod      475: ok <strong>boot floppy</strong>
1.1       deraadt   476: or
1.95      miod      477: &gt; <strong>boot fd()</strong>
1.1       deraadt   478: </pre></ul>
                    479:
                    480: <p>
                    481: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    482: will most likely fail.
                    483:
                    484: <p>
                    485: If your sparc doesn't have a floppy drive nor a CD drive, you can either
                    486: setup a bootable tape, or install via network, as told in the
                    487: INSTALL.sparc file.
                    488: </ul>
                    489:
                    490: <p>
                    491: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    492: <ul>
                    493: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    494:
                    495: <p>
                    496: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2       deraadt   497: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1       deraadt   498: floppy</i>.<br>
                    499: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    500: will most likely fail.
                    501:
                    502: <p>
1.2       deraadt   503: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1       deraadt   504: the disk and boot with <i>boot disk:b</i>.
                    505:
                    506: <p>
                    507: If nothing works, you can boot over the network as described in INSTALL.sparc64
                    508: </ul>
                    509:
                    510: <p>
                    511: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    512: <ul>
1.2       deraadt   513: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
                    514: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1       deraadt   515: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    516:
                    517: <p>
                    518: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    519: will most likely fail.
                    520:
                    521: </ul>
                    522:
                    523: <p>
1.87      miod      524: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    525: <ul>
                    526: <p>
                    527: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    528: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    529: or an existing FFS or EXT2FS partition).
                    530: </ul>
                    531:
                    532: <p>
1.1       deraadt   533: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    534: <ul>
                    535: <p>
                    536: Boot over the network by following the instructions in INSTALL.hp300.
                    537: </ul>
                    538:
                    539: <p>
                    540: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    541: <ul>
                    542: <p>
                    543: Boot over the network by following the instructions in INSTALL.hppa or the
                    544: <a href="hppa.html#netboot">hppa platform page</a>.
                    545: </ul>
                    546:
                    547: <p>
                    548: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    549: <ul>
                    550: <p>
                    551: Boot MacOS as normal and partition your disk with the appropriate A/UX
                    552: configurations.  Then, extract the Macside utilities from
                    553: <i>FTP:3.5/mac68k/utils</i> onto your hard disk.  Run Mkfs to create your
                    554: filesystems on the A/UX partitions you just made.  Then, use the
                    555: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
                    556: partitions.  Finally, you will be ready to configure the "BSD/Mac68k
                    557: Booter" with the location of your kernel and boot the system.
                    558: </ul>
                    559:
                    560: <p>
                    561: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    562: <ul>
                    563: <p>
                    564: You can create a bootable installation tape or boot over the network.<br>
                    565: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    566: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    567: for more details.
                    568: </ul>
                    569:
                    570: <p>
1.2       deraadt   571: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    572: <ul>
                    573: <p>
                    574: You can create a bootable installation tape or boot over the network.<br>
                    575: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    576: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    577: for more details.
                    578: </ul>
                    579:
                    580: <p>
1.1       deraadt   581: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    582: <ul>
                    583: src.tar.gz contains a source archive starting at /usr/src.  This file
                    584: contains everything you need except for the kernel sources, which are
                    585: in a separate archive.  To extract:
                    586: <p>
                    587: <ul><pre>
                    588: # <strong>mkdir -p /usr/src</strong>
                    589: # <strong>cd /usr/src</strong>
                    590: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    591: </pre></ul>
                    592: <p>
                    593: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    594: This file contains all the kernel sources you need to rebuild kernels.
                    595: To extract:
                    596: <p>
                    597: <ul><pre>
                    598: # <strong>mkdir -p /usr/src/sys</strong>
                    599: # <strong>cd /usr/src</strong>
                    600: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    601: </pre></ul>
                    602: <p>
                    603: Both of these trees are a regular CVS checkout.  Using these trees it
                    604: is possible to get a head-start on using the anoncvs servers as
                    605: described <a href="anoncvs.html">here</a>.
                    606: Using these files
                    607: results in a much faster initial CVS update than you could expect from
                    608: a fresh checkout of the full OpenBSD source tree.
                    609: <p>
                    610: </ul>
                    611: <a name="ports"></a>
                    612: <hr>
                    613: <p>
                    614: <h3><font color="#0000e0">Ports Tree</font></h3>
                    615: <p>
                    616: A ports tree archive is also provided.  To extract:
                    617: <p>
                    618: <ul><pre>
                    619: # <strong>cd /usr</strong>
                    620: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    621: # <strong>cd ports</strong>
                    622: </pre></ul>
                    623: <p>
                    624: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
1.98      jasper    625: read the <a href="faq/faq15.html">ports</a> page
1.1       deraadt   626: if you know nothing about ports
                    627: at this point.  This text is not a manual of how to use ports.
                    628: Rather, it is a set of notes meant to kickstart the user on the
                    629: OpenBSD ports system.
                    630: <p>
                    631: The <i>ports/</i> directory represents a CVS (see the manpage for
                    632: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    633: cvs(1)</a> if
                    634: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    635: source tree, our ports tree is available via anoncvs.  So, in
                    636: order to keep current with it, you must make the <i>ports/</i> tree
                    637: available on a read-write medium and update the tree with a command
                    638: like:
                    639: <p>
                    640: <ul><pre>
1.96      deraadt   641: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1       deraadt   642: </pre></ul>
                    643: <p>
                    644: [Of course, you must replace the local directory and server name here
                    645: with the location of your ports collection and a nearby anoncvs
                    646: server.]
                    647: <p>
                    648: Note that most ports are available as packages through ftp. Updated
                    649: packages for the 3.5 release will be made available if problems arise.
                    650: <p>
                    651: If you're interested in seeing a port added, would like to help out, or just
                    652: would like to know more, the mailing list ports@openbsd.org is a good
                    653: place to know.
                    654: <p>
                    655:
                    656: </body>
                    657: </html>