Annotation of www/35.html, Revision 1.111
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
1.100 deraadt 4: <title>OpenBSD 3.5</title>
1.1 deraadt 5: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
6: <meta name="description" content="OpenBSD 3.5">
1.25 miod 7: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.111 ! tb 8: <meta name="viewport" content="width=device-width, initial-scale=1">
! 9: <link rel="stylesheet" type="text/css" href="openbsd.css">
1.106 sthen 10: <link rel="canonical" href="http://www.openbsd.org/35.html">
1.1 deraadt 11: </head>
12:
13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
14:
1.111 ! tb 15: <h2>
1.1 deraadt 16: <a href="index.html">
1.111 ! tb 17: <font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a>
! 18: <font color="#e00000">3.5</font>
! 19: </h2>
1.1 deraadt 20:
21: <a href="images/Carp.gif">
1.100 deraadt 22: <img align="left" width="255" height="343" hspace="24"
1.1 deraadt 23: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
24: <p>
25: Released May 1, 2004<br>
26: Copyright 1997-2004, Theo de Raadt.<br>
1.89 wvdputte 27: <font color="#e00000">ISBN 0-9731791-3-9</font>
1.93 deraadt 28: <br>
1.108 deraadt 29: 3.5 Song: <a href="lyrics.html#35">"CARP License" and "Redundancy must be free"</a>
1.1 deraadt 30: <p>
31: <ul>
1.105 deraadt 32: <li>Order a CDROM from our <a href="https://openbsdstore.com">ordering system</a>.
1.1 deraadt 33: <li>See the information on <a href="ftp.html">The FTP page</a> for
34: a list of mirror machines.
35: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
36: one of the mirror sites.
1.92 miod 37: <li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list
1.1 deraadt 38: of bugs and workarounds.
1.88 deraadt 39: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1 deraadt 40: 3.4 and 3.5 releases.
41: </ul>
1.111 ! tb 42: All applicable copyrights and credits are in the src.tar.gz,
! 43: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
! 44: files fetched via ports.tar.gz.
! 45: <br clear="all">
1.1 deraadt 46:
1.111 ! tb 47: <hr>
1.1 deraadt 48: <a name="new"></a>
49: <p>
50: <h3><font color="#0000e0">What's New</font></h3>
51: <p>
52: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88 deraadt 53: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1 deraadt 54: to 3.5.
55: <p>
56:
57: <ul>
58:
1.14 deraadt 59: <li> New platforms:
60: <ul>
1.74 deraadt 61: <li><a href="amd64.html">OpenBSD/amd64</a><br>
62: Supporting the AMD64 architecture natively,
63: with full 64-bit support, 8 extra registers in the architecture
64: to significantly increase performance, and a memory management
65: Non-Executable bit that permits full W^X support.<br>
1.94 david 66: (Note: The upcoming Intel "ia32e" AMD64-compatible CPUs have also
1.74 deraadt 67: been tested, and work, even though they lack the NX bit).
68: <li><a href="cats.html">OpenBSD/cats</a><br>
1.94 david 69: Our first entry in the ARM-CPU landscape. We intend to use this as a
1.74 deraadt 70: development platform for something else we plan for the future...
71: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.94 david 72: Supporting an older, but very cool CPU architecture, perhaps the
73: most pure RISC CPU ever.
1.14 deraadt 74: </ul>
75: <p>
76:
1.35 otto 77: <li>Replacement of the GNU
1.110 sthen 78: <a href="http://man.openbsd.org/?query=bc">bc(1)</a>,
79: <a href="http://man.openbsd.org/?query=dc">dc(1)</a>,
80: <a href="http://man.openbsd.org/?query=nm">nm(1)</a> and
81: <a href="http://man.openbsd.org/?query=size">size(1)</a>
1.1 deraadt 82: commands with BSD licensed equivalents.
83: <p>
84:
1.5 mcbride 85: <li>A large number of bug fixes, changes, and optimizations to our packet filter
1.110 sthen 86: <a href="http://man.openbsd.org/?query=pf">pf(4)</a>
1.5 mcbride 87: including:
88: <ul>
1.19 otto 89: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
90: inconsistent state).
1.69 djm 91: <li>A 30% reduction in the size of state table entries.
1.19 otto 92: <li>Source-tracking (limit number of clients and states per client).
93: <li>Sticky-address (the flexibility of round-robin with the benefits of
94: source-hash).
1.53 mcbride 95: <li>Invert the socket match order when redirecting to
1.34 avsm 96: localhost (prevents the potential security problem of remote connections
1.19 otto 97: being identified as local).
1.5 mcbride 98: <li>Significant improvements to interface handling.
99: </ul>
100: <p>
101:
1.53 mcbride 102: <li>New tools for filtering gateway failover:
1.5 mcbride 103: <ul>
104: <li>CARP (the Common Address Redundancy Protocol)
1.110 sthen 105: <a href="http://man.openbsd.org/?query=carp">carp(4)</a>
1.5 mcbride 106: allows multiple machines to share responsibility for a given IP address or
107: addresses. If the owner of the address fails, another member of the group
108: will take over for it. A discussion of the history of CARP can be found
1.62 deraadt 109: <a href="lyrics.html">here</a>.
1.5 mcbride 110: <li>Additions to the
1.110 sthen 111: <a href="http://man.openbsd.org/?query=pfsync">pfsync(4)</a>
1.5 mcbride 112: interface allow it to synchronise state table entries between two or more
113: firewalls which are operating in parallel, allowing stateful connections
114: to cross any of the firewalls regardless of where the state was initially
115: created.
116: </ul>
117: <p>
118:
1.6 todd 119: <li> New functionality:
120: <ul>
1.110 sthen 121: <li><a href="http://man.openbsd.org/?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
122: <li>New ptm device (see <a href="http://man.openbsd.org/?query=pty&sektion=4">pty(4)</a>)
1.47 deraadt 123: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
124: As a result any process can now open a pty easily, meaning
1.110 sthen 125: <a href="http://man.openbsd.org/?query=xterm&sektion=1">xterm(1)</a>
1.111 ! tb 126: and
1.110 sthen 127: <a href="http://man.openbsd.org/?query=xconsole&sektion=1">xconsole(1)</a>
1.47 deraadt 128: are no longer setuid root. (In 3.4 they were setuid root, but privilege revoking).
1.110 sthen 129: <li>The <a href="http://man.openbsd.org/?query=closefrom&sektion=2">closefrom(2)</a>
1.17 otto 130: system call has been added.
1.110 sthen 131: <li>TCP MD5 signatures (used by <a href="http://man.openbsd.org/?query=nc&sektion=1">nc(1)</a>
132: and <a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>).
1.70 djm 133: <li>Network boot support for i386 and amd64, using
1.110 sthen 134: <a href="http://man.openbsd.org/?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19 otto 135: <li>The i386 8GB boot loader limitation has been removed.
1.110 sthen 136: <li><a href="http://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a>
1.52 beck 137: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
138: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80 tdeval 139: <li>Interface 'cloning', accessed by
1.110 sthen 140: <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19 otto 141: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82 tdeval 142: <li>
1.110 sthen 143: <a href="http://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>
1.82 tdeval 144: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47 deraadt 145: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
1.110 sthen 146: <li>Complete rewrite of <a href="http://man.openbsd.org/?query=pkg_add&sektion=1">package</a> tools in perl.
147: <li><a href="http://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a>
1.111 ! tb 148: now supports logging to memory buffers, to be read using
1.110 sthen 149: <a href="http://man.openbsd.org/?query=syslogc&sektion=8">syslogc(8)</a>.
1.47 deraadt 150: This is useful for diskless or flash-based computers.
1.110 sthen 151: <li><a href="http://man.openbsd.org/?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
152: <li><a href="http://man.openbsd.org/?query=malloc&sektion=3">
1.79 tdeval 153: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33 otto 154: reads and writes.
1.110 sthen 155: <li><a href="http://man.openbsd.org/?query=authpf&sektion=8">
1.43 beck 156: authpf(8)</a> now tags traffic in
1.110 sthen 157: <a href="http://man.openbsd.org/?query=pflog&sektion=4">
1.43 beck 158: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46 tedu 159: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.110 sthen 160: <a href="http://man.openbsd.org/?query=cpu&arch=i386">CPUs</a>,
1.91 henning 161: great for prolonged battery life.
1.48 beck 162: <li>XFS has been added to the GENERIC kernels so that
1.110 sthen 163: <a href="http://man.openbsd.org/?query=afsd&sektion=8">afsd(8)
1.48 beck 164: </a> may be started easily, eliminating the need to recompile the kernel
1.49 deraadt 165: to use AFS.<br>
166: AFS can now be used anonymously by enabling it in
1.110 sthen 167: <a href="http://man.openbsd.org/?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48 beck 168: with no further configuration.
1.110 sthen 169: <li>The <a href="http://man.openbsd.org/?query=ps&sektion=1">ps</a>, <a href="http://man.openbsd.org/?query=top&sektion=1">top</a> and <a href="http://man.openbsd.org/?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
170: <li>A <a href="http://man.openbsd.org/?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://man.openbsd.org/?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://man.openbsd.org/?query=poll&sektion=2">poll</a> over <a href="http://man.openbsd.org/?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
171: <li><a href="http://man.openbsd.org/?query=dhclient&sektion=8"
1.64 krw 172: >dhclient(8)</a> now detects when the interface it configured is modified and
173: gracefully exits.
174: e.g. repeatedly running it against the same interface leaves only the
175: last instance active.
1.6 todd 176: </ul>
177: <p>
178:
1.47 deraadt 179: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6 todd 180: <ul>
1.110 sthen 181: <li><a href="http://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a>
182: <li><a href="http://man.openbsd.org/?query=named&sektion=8">named(8)</a>
1.47 deraadt 183: (Previously privilege revoking, but this had a small breakage).
1.110 sthen 184: <li><a href="http://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a>
185: <li><a href="http://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a>
1.6 todd 186: </ul>
187: <p>
188:
189: <li> New tools:
190: <ul>
1.110 sthen 191: <li><a href="http://man.openbsd.org/?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
192: <li><a href="http://man.openbsd.org/?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
193: <li><a href="http://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
194: <li><a href="http://man.openbsd.org/?query=pkill&sektion=1">pkill(1)</a> and
195: <a href="http://man.openbsd.org/?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6 todd 196: </ul>
197: <p>
198:
1.23 henning 199: <li> Performance improvements:
200: <ul>
1.35 otto 201: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72 djm 202: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71 djm 203: <li>Implemented TCP adjustments recommended by
204: <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
205: controllable via
1.110 sthen 206: <a href="http://man.openbsd.org/?query=sysctl&sektion=8">sysctl</a>.
1.23 henning 207: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42 henning 208: des, 3des, rsa, dsa and bn.
1.77 tdeval 209: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
210: provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.94 david 211: CPU performing AES more than 10x faster than the fastest CPU currently sold).
1.45 tedu 212: <li>Directory hashing makes lookups in large directories much faster.
1.90 mcbride 213: <li>Zeroing pages with SSE. Faster operation, and avoids clobbering the cache.
1.23 henning 214: </ul>
215: <p>
216:
1.110 sthen 217: <li><a href="http://man.openbsd.org/?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67 krw 218: <ul>
1.73 otto 219: <li>Bus probe made faster by skipping non-existent LUNs.
1.67 krw 220: <li>Bus probe made saner by elimination of spurious commands.
221: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81 krw 222: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67 krw 223: <li>SCSIDEBUG output can now be restricted to specified buses.
224: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
225: <li>Better error handling.
226: </ul>
227: <p>
228:
1.29 henning 229: <li>Improved hardware support, including:
230: <ul>
1.111 ! tb 231: <li>The <a href="hppa.html">hppa</a> architecture gets support for many
1.110 sthen 232: <a href="http://man.openbsd.org/?query=pci">PCI</a>
233: based machines w/ addition of <a href="http://man.openbsd.org/?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
234: <li>New <a href="http://man.openbsd.org/?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
235: <li>Major improvements to <a href="http://man.openbsd.org/?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
236: <li>New <a href="http://man.openbsd.org/?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
237: <li>New <a href="http://man.openbsd.org/?query=mpt&sektion=4">mpt(4)</a> driver for LSI Fusion-MPT SCSI and FibreChannel host adapters.
238: <li>New <a href="http://man.openbsd.org/?query=snapper&arch=macppc&sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
239: <li>Improved stability of the <a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
240: <li><a href="http://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
241: <li>Fixed several firmware incompatibility issues in <a href="http://man.openbsd.org/?query=an&sektion=4">an(4)</a>.
1.68 grange 242: <li>Improved ATA and SATA support.
1.110 sthen 243: <li>Support for i835 AGP GART in <a href="http://man.openbsd.org/?query=vga&sektion=4">vga(4)</a>.
244: <li>Improved Gigabit Ethernet support for <a href="http://man.openbsd.org/?query=em&sektion=4">em(4)</a>, <a href="http://man.openbsd.org/?query=sk&sektion=4">sk(4)</a> & <a href="http://man.openbsd.org/?query=bge&sektion=4">bge(4)</a>.
245: <li>Several fixes for <a href="http://man.openbsd.org/?query=apm&sektion=4">apm(4)</a>.
1.63 marco 246: <li>Support for Intel 852/855/865 AGP chipsets.
1.67 krw 247: <li>Many more USB Flash and other
1.110 sthen 248: <a href="http://man.openbsd.org/?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29 henning 249: </ul>
1.20 otto 250: <p>
251:
1.57 marco 252: <li> This release ships with Firefox for all major architectures.
253: <p>
254:
1.110 sthen 255: <li> Major improvements in <a href="http://man.openbsd.org/?query=pthreads&sektion=3">pthreads(3)</a>.
1.58 marco 256: <p>
257:
1.18 sturm 258: <li> Over 2500 ports, 2300 pre-built packages.
259: <p>
260:
1.7 todd 261: <li>Many improvements for security and reliability (look for the red
1.88 deraadt 262: print in the <a href="plus35.html">complete changelog</a>).
1.7 todd 263: <p>
264:
1.19 otto 265: <li>Many improvements in manual pages and other documentation.
266: <p>
267:
1.40 tdeval 268: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62 deraadt 269: <a href="amd64.html">OpenBSD/amd64</a>,
270: <a href="cats.html">OpenBSD/cats</a> and
271: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28 henning 272: platforms.
273: Other architectures still use gcc 2.95.3 with the same local additions.
274: <p>
1.75 markus 275: <li>OpenSSH 3.8.1:
276: <ul>
277: <li>
1.110 sthen 278: <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>
1.75 markus 279: now supports forced changes of expired passwords via
1.110 sthen 280: <a href="http://man.openbsd.org/?query=passwd&sektion=1">passwd(1)</a>.
1.75 markus 281: <li>
1.110 sthen 282: <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.75 markus 283: now uses untrusted cookies for X11-Forwarding.
284: Some X11 applications might need full access to the X11 server,
285: see ForwardX11Trusted in
1.110 sthen 286: <a href="http://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75 markus 287: and
1.110 sthen 288: <a href="http://man.openbsd.org/?query=xauth&sektion=1">xauth(1)</a>.
1.75 markus 289: <li>
1.110 sthen 290: <a href="http://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>
1.75 markus 291: now supports sending application layer
292: keep-alive messages to the server. See ServerAliveInterval in
1.110 sthen 293: <a href="http://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75 markus 294: <li> Improved
1.110 sthen 295: <a href="http://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>
1.75 markus 296: batch file support.
297: <li> New KerberosGetAFSToken option for
1.110 sthen 298: <a href="http://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.
1.75 markus 299: <li> Updated /etc/moduli file and improved performance for
300: protocol version 2.
301: <li> Support for host keys in DNS.
302: <li> The experimental "gssapi" support has been replaced with
303: the "gssapi-with-mic" to fix possible MITM attacks.
304: The two versions are not compatible.
305: </ul>
306: <p>
1.28 henning 307:
308: <li>The system includes the following major components from outside suppliers:
309: <ul>
310: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
311: providing support for all chipsets)
1.40 tdeval 312: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28 henning 313: <li>Perl 5.8.2 (+ patches)
314: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
315: <li>OpenSSL 0.9.7c (+ patches)
316: <li>Groff 1.15
317: <li>Sendmail 8.12.11
318: <li>Bind 9.2.3 (+ patches)
319: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
320: <li>Sudo 1.6.7p5
321: <li>Ncurses 5.2
322: <li>Latest KAME IPv6
323: <li>Heimdal 0.6rc1 (+ patches)
324: <li>Arla-current
325: </ul>
326: <p>
1.1 deraadt 327:
328: </ul>
329:
330: <a name="install"></a>
331: <hr>
332: <p>
333: <h3><font color="#0000e0">How to install</font></h3>
334: <p>
335: Following this are the instructions which you would have on a piece of
336: paper if you had purchased a CDROM set instead of doing an alternate
337: form of install. The instructions for doing an ftp (or other style
338: of) install are very similar; the CDROM instructions are left intact
339: so that you can see how much easier it would have been if you had
340: purchased a CDROM instead.
341: <p>
342:
343: <hr>
344: Please refer to the following files on the three CDROMs or ftp mirror for
345: extensive details on how to install OpenBSD 3.5 on your machine:
346: <p>
347: <ul>
348: <li>CD1:3.5/i386/INSTALL.i386
1.2 deraadt 349: <li>CD1:3.5/vax/INSTALL.vax
1.1 deraadt 350: <p>
1.2 deraadt 351: <li>CD2:3.5/amd64/INSTALL.amd64
1.1 deraadt 352: <li>CD2:3.5/macppc/INSTALL.macppc
353: <p>
354: <li>CD3:3.5/sparc/INSTALL.sparc
355: <li>CD3:3.5/sparc64/INSTALL.sparc64
356: <p>
357: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27 miod 358: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1 deraadt 359: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
360: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
361: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
362: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2 deraadt 363: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1 deraadt 364: </ul>
365: <hr>
366:
367: <p>
368: Quick installer information for people familiar with OpenBSD, and the
369: use of the "disklabel -E" command. If you are at all confused when
370: installing OpenBSD, read the relevant INSTALL.* file as listed above!
371: <p>
372:
373: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
374: <ul>
375: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
376: release is on CD1. If your BIOS does not support booting from CD, you will need
377: to create a boot floppy to install from. To create a boot floppy write
1.2 deraadt 378: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1 deraadt 379:
380: <p>
1.2 deraadt 381: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
382: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1 deraadt 383:
384: <p>
1.83 tom 385: If you can't boot from a CD or a floppy disk,
386: you can install across the network using PXE as described in
387: the included INSTALL.i386 document.
388:
389: <p>
1.1 deraadt 390: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83 tom 391: read INSTALL.i386.
1.1 deraadt 392:
393: <p>
394: To make a boot floppy under MS-DOS, use the "rawrite" utility located
1.83 tom 395: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.110 sthen 396: use the <a href="http://man.openbsd.org/?query=
1.1 deraadt 397: dd&sektion=1">dd(1)</a> utility. The following is an example usage of
1.110 sthen 398: <a href="http://man.openbsd.org/?query=dd&sektion=1">dd(1)
1.1 deraadt 399: </a>, where the device could be "floppy", "rfd0c", or
400: "rfd0a".
401:
402: <ul><pre>
403: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
404: </pre></ul>
405:
406: <p>
407: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
408: your install will most likely fail. For more information on creating a boot
409: floppy and installing OpenBSD/i386 please refer to
410: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
411: </ul>
412:
413: <p>
1.84 miod 414: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1 deraadt 415: <ul>
1.84 miod 416: Boot over the network via mopbooting as described in INSTALL.vax.
1.1 deraadt 417: </ul>
418:
419: <p>
1.2 deraadt 420: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
421: <ul>
1.84 miod 422: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83 tom 423: Boot from the CD to begin the install - you may need to adjust
424: your BIOS options first.
425: If you can't boot from the CD, you can create a boot floppy to install from.
1.85 tom 426: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83 tom 427: boot from the floppy drive.
428:
429: <p>
430: If you can't boot from a CD or a floppy disk,
431: you can install across the network using PXE as described in the included
432: INSTALL.amd64 document.
433:
434: <p>
435: If you are planning to dual boot OpenBSD with another OS, you will need to
436: read INSTALL.amd64.
1.2 deraadt 437: </ul>
438:
439: <p>
1.84 miod 440: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1 deraadt 441: <ul>
1.84 miod 442: Put the CD2 in your CDROM drive and poweron your machine while holding down the
443: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
444:
445: <p>
446: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
447: /3.5/macppc/bsd.rd</i>
1.1 deraadt 448: </ul>
449:
450: <p>
451: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
452: <ul>
453: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
454: can use one of the two commands listed below, depending on the version of your
455: ROM.
456:
457: <ul><pre>
1.86 miod 458: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1 deraadt 459: or
1.86 miod 460: > <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1 deraadt 461: </pre></ul>
462:
463: <p>
464: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84 miod 465: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1 deraadt 466: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
467: the floppy use one of the two commands listed below, depending on the version of
468: your ROM.
469:
470: <ul><pre>
1.86 miod 471: ok <strong>boot floppy</strong>
1.1 deraadt 472: or
1.95 miod 473: > <strong>boot fd()</strong>
1.1 deraadt 474: </pre></ul>
475:
476: <p>
477: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
478: will most likely fail.
479:
480: <p>
481: If your sparc doesn't have a floppy drive nor a CD drive, you can either
482: setup a bootable tape, or install via network, as told in the
483: INSTALL.sparc file.
484: </ul>
485:
486: <p>
487: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
488: <ul>
489: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
490:
491: <p>
492: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 deraadt 493: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1 deraadt 494: floppy</i>.<br>
495: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
496: will most likely fail.
497:
498: <p>
1.2 deraadt 499: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1 deraadt 500: the disk and boot with <i>boot disk:b</i>.
501:
502: <p>
503: If nothing works, you can boot over the network as described in INSTALL.sparc64
504: </ul>
505:
506: <p>
507: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
508: <ul>
1.2 deraadt 509: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
510: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1 deraadt 511: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
512:
513: <p>
514: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
515: will most likely fail.
516:
517: </ul>
518:
519: <p>
1.87 miod 520: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
521: <ul>
522: <p>
523: After updating the firmware to at least ABLE 1.95 if necessary, boot
524: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
525: or an existing FFS or EXT2FS partition).
526: </ul>
527:
528: <p>
1.1 deraadt 529: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
530: <ul>
531: <p>
532: Boot over the network by following the instructions in INSTALL.hp300.
533: </ul>
534:
535: <p>
536: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
537: <ul>
538: <p>
539: Boot over the network by following the instructions in INSTALL.hppa or the
540: <a href="hppa.html#netboot">hppa platform page</a>.
541: </ul>
542:
543: <p>
544: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
545: <ul>
546: <p>
547: Boot MacOS as normal and partition your disk with the appropriate A/UX
548: configurations. Then, extract the Macside utilities from
549: <i>FTP:3.5/mac68k/utils</i> onto your hard disk. Run Mkfs to create your
550: filesystems on the A/UX partitions you just made. Then, use the
551: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
552: partitions. Finally, you will be ready to configure the "BSD/Mac68k
553: Booter" with the location of your kernel and boot the system.
554: </ul>
555:
556: <p>
557: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
558: <ul>
559: <p>
560: You can create a bootable installation tape or boot over the network.<br>
561: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
562: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
563: for more details.
564: </ul>
565:
566: <p>
1.2 deraadt 567: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
568: <ul>
569: <p>
570: You can create a bootable installation tape or boot over the network.<br>
571: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
572: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
573: for more details.
574: </ul>
575:
576: <p>
1.1 deraadt 577: <h3><font color="#e00000">Notes about the source code:</font></h3>
578: <ul>
579: src.tar.gz contains a source archive starting at /usr/src. This file
580: contains everything you need except for the kernel sources, which are
581: in a separate archive. To extract:
582: <p>
583: <ul><pre>
584: # <strong>mkdir -p /usr/src</strong>
585: # <strong>cd /usr/src</strong>
586: # <strong>tar xvfz /tmp/src.tar.gz</strong>
587: </pre></ul>
588: <p>
589: sys.tar.gz contains a source archive starting at /usr/src/sys.
590: This file contains all the kernel sources you need to rebuild kernels.
591: To extract:
592: <p>
593: <ul><pre>
594: # <strong>mkdir -p /usr/src/sys</strong>
595: # <strong>cd /usr/src</strong>
596: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
597: </pre></ul>
598: <p>
599: Both of these trees are a regular CVS checkout. Using these trees it
600: is possible to get a head-start on using the anoncvs servers as
601: described <a href="anoncvs.html">here</a>.
602: Using these files
603: results in a much faster initial CVS update than you could expect from
604: a fresh checkout of the full OpenBSD source tree.
605: <p>
606: </ul>
607: <a name="ports"></a>
608: <hr>
609: <p>
610: <h3><font color="#0000e0">Ports Tree</font></h3>
611: <p>
612: A ports tree archive is also provided. To extract:
613: <p>
614: <ul><pre>
615: # <strong>cd /usr</strong>
616: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
617: # <strong>cd ports</strong>
618: </pre></ul>
619: <p>
620: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
1.98 jasper 621: read the <a href="faq/faq15.html">ports</a> page
1.1 deraadt 622: if you know nothing about ports
623: at this point. This text is not a manual of how to use ports.
624: Rather, it is a set of notes meant to kickstart the user on the
625: OpenBSD ports system.
626: <p>
627: The <i>ports/</i> directory represents a CVS (see the manpage for
1.110 sthen 628: <a href="http://man.openbsd.org/?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
1.1 deraadt 629: cvs(1)</a> if
630: you aren't familiar with CVS) checkout of our ports. As with our complete
631: source tree, our ports tree is available via anoncvs. So, in
632: order to keep current with it, you must make the <i>ports/</i> tree
633: available on a read-write medium and update the tree with a command
634: like:
635: <p>
636: <ul><pre>
1.96 deraadt 637: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1 deraadt 638: </pre></ul>
639: <p>
640: [Of course, you must replace the local directory and server name here
641: with the location of your ports collection and a nearby anoncvs
642: server.]
643: <p>
644: Note that most ports are available as packages through ftp. Updated
645: packages for the 3.5 release will be made available if problems arise.
646: <p>
647: If you're interested in seeing a port added, would like to help out, or just
648: would like to know more, the mailing list ports@openbsd.org is a good
649: place to know.
650: <p>
651:
652: </body>
653: </html>