Annotation of www/35.html, Revision 1.20
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 3.5 Release</title>
5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
8: <meta name="description" content="OpenBSD 3.5">
9: <meta name="keywords" content="openbsd,main">
10: <meta name="distribution" content="global">
11: <meta name="copyright" content="This document copyright 2003 by OpenBSD.">
12: </head>
13:
14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
15:
16: <a href="index.html">
17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
18: <hr>
19:
20: <p>
21: <a href="images/Carp.gif">
22: <img align="left" width="255" height="343" hspace="24" vspace="30"
23: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
24: <h2><font color="#0000e0">The OpenBSD 3.5 Release:</font></h2>
25: <p>
26: Released May 1, 2004<br>
27: Copyright 1997-2004, Theo de Raadt.<br>
28: <font color="#e00000">ISBN 0-9731791-1-9</font>
29: <p>
30:
31: <a href="#new">What's New</a><br>
32: <a href="#install">How to install</a><br>
33: <a href="#ports">How to use the ports tree</a><br>
34: <a href="orders.html">Ordering a CD set</a><br>
35:
36: <p>
37: <h3><font color="#0000e0">
38: To get the files for this release:
39: <ul>
40: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
41: <li>See the information on <a href="ftp.html">The FTP page</a> for
42: a list of mirror machines.
43: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
44: one of the mirror sites.
45: <li>Briefly read the rest of this document.
46: <li>Have a look at <a href="errata.html">The 3.5 Errata page</a> for a list
47: of bugs and workarounds.
48: <li>See a <a href="plus.html">detailed log of changes</a> between the
49: 3.4 and 3.5 releases.
50: </ul>
51: </font></h3>
52: <br clear=all>
53:
54: <strong>Note:</strong> All applicable copyrights and credits can be found
55: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
56: XF4.tar.gz, or in the files fetched via ports.tar.gz. The distribution
57: files used to build packages from the ports.tar.gz file are not included on
58: the CDROM because of lack of space.
59: <p>
60:
61: <a name="new"></a>
62: <hr>
63: <p>
64: <h3><font color="#0000e0">What's New</font></h3>
65: <p>
66: This is a partial list of new features and systems included in OpenBSD 3.5.
1.2 deraadt 67: For a comprehensive list, see the <a href="plus.html">changelog</a> leading
1.1 deraadt 68: to 3.5.
69: <p>
70:
71: <ul>
72:
1.14 deraadt 73: <li> New platforms:
74: <ul>
75: <li><a href="http://www.openbsd.org/amd64.html">OpenBSD/amd64</a>
76: <li><a href="http://www.openbsd.org/cats.html">OpenBSD/cats</a>
77: </ul>
78: <p>
79:
1.4 deraadt 80: <li>...
1.1 deraadt 81: <p>
82:
1.3 mickey 83: <li>The HPPA architecture gets support for many
84: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
85: based machines.
86: <p>
87:
1.1 deraadt 88: <li>Replacement of GNU
1.12 otto 89: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
90: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4 deraadt 91: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
92: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1 deraadt 93: commands with BSD licensed equivalents.
94: <p>
95:
1.5 mcbride 96: <li>A large number of bug fixes, changes, and optimizations to our packet filter
97: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
98: including:
99: <ul>
1.19 otto 100: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
101: inconsistent state).
102: <li>A 30 percent reduction in the size of state table entries.
103: <li>Source-tracking (limit number of clients and states per client).
104: <li>Sticky-address (the flexibility of round-robin with the benefits of
105: source-hash).
106: <li>Invert the specific/general socket match order when redirecting to
1.5 mcbride 107: localhost (Prevents the potential security problem of remote connections
1.19 otto 108: being identified as local).
1.5 mcbride 109: <li>Significant improvements to interface handling.
110: </ul>
111: <p>
112:
113: <li>New tools for high availability and load balancing:
114: <ul>
115: <li>CARP (the Common Address Redundancy Protocol)
116: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
117: allows multiple machines to share responsibility for a given IP address or
118: addresses. If the owner of the address fails, another member of the group
119: will take over for it. A discussion of the history of CARP can be found
120: <a href="http://www.openbsd.org/lyrics.html">here</a>.
121: <li>Additions to the
122: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
123: interface allow it to synchronise state table entries between two or more
124: firewalls which are operating in parallel, allowing stateful connections
125: to cross any of the firewalls regardless of where the state was initially
126: created.
127: </ul>
128: <p>
129:
1.6 todd 130: <li> XFree86 4.4 unencumbered
1.9 deraadt 131: <p>
1.6 todd 132:
133: <li> New functionality:
134: <ul>
135: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
136: that allows non-privileged processes to allocate a properly-permissioned pty. No more setuid(root)
137: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>!
1.17 otto 138: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
139: system call has been added.
1.6 todd 140: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17 otto 141: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
142: <li>i386 and amd64 <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8">pxeboot(8)</a>.
1.19 otto 143: <li>The i386 8GB boot loader limitation has been removed.
1.6 todd 144: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.16 todd 145: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support.
1.6 todd 146: <li>Interface 'cloning,' accessed by
147: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19 otto 148: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.17 otto 149: <li>The MAKEDEV(8) manual pages are now generated.
1.18 sturm 150: <li>Complete rewrite of package tools in perl.
1.6 todd 151: </ul>
152: <p>
153:
1.19 otto 154: <li> New Privilege Separation Functionality:
1.6 todd 155: <ul>
156: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
157: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.13 todd 158: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6 todd 159: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
160: </ul>
161: <p>
162:
163: <li> New tools:
164: <ul>
165: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>
1.18 sturm 166: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>
1.6 todd 167: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>
1.10 deraadt 168: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
169: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>
1.6 todd 170: </ul>
171: <p>
172:
1.20 ! otto 173: <li> <a href="http://www.openssh.org">OpenSSH 3.8</a>.
! 174: <p>
! 175:
! 176: <li> gcc 3.2.2, including local additions like ProPolice support for the
! 177: <a href="http://www.openbsd.org/amd64.html">OpenBSD/amd64</a>,
! 178: <a href="http://www.openbsd.org/cats.html">OpenBSD/cats</a> and
! 179: <a href="http://www.openbsd.org/sparc64.html">OpenBSD/sparc64</a>
! 180: platforms.
! 181: <p>
! 182:
! 183: <li> New and improved drivers, like:
! 184: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>,
! 185: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a>,
! 186: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a>,
! 187: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sis&sektion=4">sis(4)</a>
! 188: and
! 189: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a>.
! 190: <p>
! 191:
1.18 sturm 192: <li> Over 2500 ports, 2300 pre-built packages.
193: <p>
194:
1.7 todd 195: <li>Many improvements for security and reliability (look for the red
196: print in the <a href="plus.html">complete changelog</a>).
197: <p>
198:
1.19 otto 199: <li>Many improvements in manual pages and other documentation.
200: <p>
201:
1.20 ! otto 202: <li> And much more.
1.1 deraadt 203:
204: </ul>
205:
206: <a name="install"></a>
207: <hr>
208: <p>
209: <h3><font color="#0000e0">How to install</font></h3>
210: <p>
211: Following this are the instructions which you would have on a piece of
212: paper if you had purchased a CDROM set instead of doing an alternate
213: form of install. The instructions for doing an ftp (or other style
214: of) install are very similar; the CDROM instructions are left intact
215: so that you can see how much easier it would have been if you had
216: purchased a CDROM instead.
217: <p>
218:
219: <hr>
220: Please refer to the following files on the three CDROMs or ftp mirror for
221: extensive details on how to install OpenBSD 3.5 on your machine:
222: <p>
223: <ul>
224: <li>CD1:3.5/i386/INSTALL.i386
1.2 deraadt 225: <li>CD1:3.5/vax/INSTALL.vax
1.1 deraadt 226: <p>
1.2 deraadt 227: <li>CD2:3.5/amd64/INSTALL.amd64
1.1 deraadt 228: <li>CD2:3.5/macppc/INSTALL.macppc
229: <p>
230: <li>CD3:3.5/sparc/INSTALL.sparc
231: <li>CD3:3.5/sparc64/INSTALL.sparc64
232: <p>
233: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
234: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
235: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
1.2 deraadt 236: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1 deraadt 237: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
238: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2 deraadt 239: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1 deraadt 240: </ul>
241: <hr>
242:
243: <p>
244: Quick installer information for people familiar with OpenBSD, and the
245: use of the "disklabel -E" command. If you are at all confused when
246: installing OpenBSD, read the relevant INSTALL.* file as listed above!
247: <p>
248:
249: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
250: <ul>
251: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
252: release is on CD1. If your BIOS does not support booting from CD, you will need
253: to create a boot floppy to install from. To create a boot floppy write
1.2 deraadt 254: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1 deraadt 255:
256: <p>
1.2 deraadt 257: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
258: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1 deraadt 259:
260: <p>
261: If you are planning on dual booting OpenBSD with another OS, you will need to
262: read the included INSTALL.i386 document.
263:
264: <p>
265: To make a boot floppy under MS-DOS, use the "rawrite" utility located
266: at <i>CD:/3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
267: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
268: dd&sektion=1">dd(1)</a> utility. The following is an example usage of
269: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)
270: </a>, where the device could be "floppy", "rfd0c", or
271: "rfd0a".
272:
273: <ul><pre>
274: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
275: </pre></ul>
276:
277: <p>
278: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
279: your install will most likely fail. For more information on creating a boot
280: floppy and installing OpenBSD/i386 please refer to
281: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
282: </ul>
283:
284: <p>
285: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
286: <ul>
287: Put the CD2 in your CDROM drive and poweron your machine while holding down the
288: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
289:
290: <p>
291: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
292: /3.5/macppc/bsd.rd</i>
293: </ul>
294:
295: <p>
1.2 deraadt 296: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
297: <ul>
298: [write a chunk here]
299: </ul>
300:
301: <p>
1.1 deraadt 302: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
303: <ul>
304: Boot over the network via mopbooting as described in INSTALL.vax.
305: </ul>
306:
307: <p>
308: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
309: <ul>
310: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
311: can use one of the two commands listed below, depending on the version of your
312: ROM.
313:
314: <ul><pre>
315: > <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
316: or
317: > <strong>boot sd(0,6,0)3.5/sparc/bsd.rd</strong>
318: </pre></ul>
319:
320: <p>
321: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.2 deraadt 322: To do so you need to write "CD3:3.5/sparc/floppy35.fs" to a floppy.
1.1 deraadt 323: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
324: the floppy use one of the two commands listed below, depending on the version of
325: your ROM.
326:
327: <ul><pre>
328: > <strong>boot floppy</strong>
329: or
330: > <strong>boot fd()</strong>
331: </pre></ul>
332:
333: <p>
334: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
335: will most likely fail.
336:
337: <p>
338: If your sparc doesn't have a floppy drive nor a CD drive, you can either
339: setup a bootable tape, or install via network, as told in the
340: INSTALL.sparc file.
341: </ul>
342:
343: <p>
344: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
345: <ul>
346: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
347:
348: <p>
349: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2 deraadt 350: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1 deraadt 351: floppy</i>.<br>
352: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
353: will most likely fail.
354:
355: <p>
1.2 deraadt 356: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1 deraadt 357: the disk and boot with <i>boot disk:b</i>.
358:
359: <p>
360: If nothing works, you can boot over the network as described in INSTALL.sparc64
361: </ul>
362:
363: <p>
364: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
365: <ul>
1.2 deraadt 366: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
367: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1 deraadt 368: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
369:
370: <p>
371: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
372: will most likely fail.
373:
374: </ul>
375:
376: <p>
377: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
378: <ul>
379: <p>
380: Boot over the network by following the instructions in INSTALL.hp300.
381: </ul>
382:
383: <p>
384: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
385: <ul>
386: <p>
387: Boot over the network by following the instructions in INSTALL.hppa or the
388: <a href="hppa.html#netboot">hppa platform page</a>.
389: </ul>
390:
391: <p>
392: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
393: <ul>
394: <p>
395: Boot MacOS as normal and partition your disk with the appropriate A/UX
396: configurations. Then, extract the Macside utilities from
397: <i>FTP:3.5/mac68k/utils</i> onto your hard disk. Run Mkfs to create your
398: filesystems on the A/UX partitions you just made. Then, use the
399: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
400: partitions. Finally, you will be ready to configure the "BSD/Mac68k
401: Booter" with the location of your kernel and boot the system.
402: </ul>
403:
404: <p>
405: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
406: <ul>
407: <p>
408: You can create a bootable installation tape or boot over the network.<br>
409: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
410: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
411: for more details.
412: </ul>
413:
414: <p>
1.2 deraadt 415: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
416: <ul>
417: <p>
418: You can create a bootable installation tape or boot over the network.<br>
419: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
420: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
421: for more details.
422: </ul>
423:
424: <p>
1.1 deraadt 425: <h3><font color="#e00000">Notes about the source code:</font></h3>
426: <ul>
427: src.tar.gz contains a source archive starting at /usr/src. This file
428: contains everything you need except for the kernel sources, which are
429: in a separate archive. To extract:
430: <p>
431: <ul><pre>
432: # <strong>mkdir -p /usr/src</strong>
433: # <strong>cd /usr/src</strong>
434: # <strong>tar xvfz /tmp/src.tar.gz</strong>
435: </pre></ul>
436: <p>
437: sys.tar.gz contains a source archive starting at /usr/src/sys.
438: This file contains all the kernel sources you need to rebuild kernels.
439: To extract:
440: <p>
441: <ul><pre>
442: # <strong>mkdir -p /usr/src/sys</strong>
443: # <strong>cd /usr/src</strong>
444: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
445: </pre></ul>
446: <p>
447: Both of these trees are a regular CVS checkout. Using these trees it
448: is possible to get a head-start on using the anoncvs servers as
449: described <a href="anoncvs.html">here</a>.
450: Using these files
451: results in a much faster initial CVS update than you could expect from
452: a fresh checkout of the full OpenBSD source tree.
453: <p>
454: </ul>
455: <a name="ports"></a>
456: <hr>
457: <p>
458: <h3><font color="#0000e0">Ports Tree</font></h3>
459: <p>
460: A ports tree archive is also provided. To extract:
461: <p>
462: <ul><pre>
463: # <strong>cd /usr</strong>
464: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
465: # <strong>cd ports</strong>
466: </pre></ul>
467: <p>
468: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
469: read the <a href="ports.html">ports</a> page
470: if you know nothing about ports
471: at this point. This text is not a manual of how to use ports.
472: Rather, it is a set of notes meant to kickstart the user on the
473: OpenBSD ports system.
474: <p>
475: The <i>ports/</i> directory represents a CVS (see the manpage for
476: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
477: cvs(1)</a> if
478: you aren't familiar with CVS) checkout of our ports. As with our complete
479: source tree, our ports tree is available via anoncvs. So, in
480: order to keep current with it, you must make the <i>ports/</i> tree
481: available on a read-write medium and update the tree with a command
482: like:
483: <p>
484: <ul><pre>
1.2 deraadt 485: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1 deraadt 486: </pre></ul>
487: <p>
488: [Of course, you must replace the local directory and server name here
489: with the location of your ports collection and a nearby anoncvs
490: server.]
491: <p>
492: Note that most ports are available as packages through ftp. Updated
493: packages for the 3.5 release will be made available if problems arise.
494: <p>
495: If you're interested in seeing a port added, would like to help out, or just
496: would like to know more, the mailing list ports@openbsd.org is a good
497: place to know.
498: <p>
499:
500: <hr>
501: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
502: alt="OpenBSD"></a>
503: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
504: <br><small>
1.20 ! otto 505: $OpenBSD: 35.html,v 1.19 2004/03/24 09:50:49 otto Exp $
1.1 deraadt 506: </small>
507:
508: </body>
509: </html>