[BACK]Return to 35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/35.html, Revision 1.88

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 3.5 Release</title>
                      5: <link rev=made href="mailto:www@openbsd.org">
                      6: <meta name="resource-type" content="document">
                      7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      8: <meta name="description" content="OpenBSD 3.5">
                      9: <meta name="keywords" content="openbsd,main">
                     10: <meta name="distribution" content="global">
1.25      miod       11: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.1       deraadt    12: </head>
                     13:
                     14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     15:
                     16: <a href="index.html">
                     17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     18: <hr>
                     19:
                     20: <p>
                     21: <a href="images/Carp.gif">
                     22: <img align="left" width="255" height="343" hspace="24" vspace="30"
                     23: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
                     24: <h2><font color="#0000e0">The OpenBSD 3.5 Release:</font></h2>
                     25: <p>
                     26: Released May 1, 2004<br>
                     27: Copyright 1997-2004, Theo de Raadt.<br>
                     28: <font color="#e00000">ISBN 0-9731791-1-9</font>
                     29: <p>
                     30:
                     31: <a href="#new">What's New</a><br>
                     32: <a href="#install">How to install</a><br>
                     33: <a href="#ports">How to use the ports tree</a><br>
                     34: <a href="orders.html">Ordering a CD set</a><br>
                     35:
                     36: <p>
                     37: <h3><font color="#0000e0">
                     38: To get the files for this release:
                     39: <ul>
                     40: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     41: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     42:     a list of mirror machines.
                     43: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
                     44:     one of the mirror sites.
                     45: <li>Briefly read the rest of this document.
                     46: <li>Have a look at <a href="errata.html">The 3.5 Errata page</a> for a list
                     47:     of bugs and workarounds.
1.88    ! deraadt    48: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1       deraadt    49:     3.4 and 3.5 releases.
                     50: </ul>
                     51: </font></h3>
                     52: <br clear=all>
                     53:
                     54: <strong>Note:</strong> All applicable copyrights and credits can be found
                     55: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
                     56: XF4.tar.gz, or in the files fetched via ports.tar.gz.  The distribution
                     57: files used to build packages from the ports.tar.gz file are not included on
                     58: the CDROM because of lack of space.
                     59: <p>
                     60:
                     61: <a name="new"></a>
                     62: <hr>
                     63: <p>
                     64: <h3><font color="#0000e0">What's New</font></h3>
                     65: <p>
                     66: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88    ! deraadt    67: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1       deraadt    68: to 3.5.
                     69: <p>
                     70:
                     71: <ul>
                     72:
1.14      deraadt    73: <li> New platforms:
                     74: <ul>
1.74      deraadt    75: <li><a href="amd64.html">OpenBSD/amd64</a><br>
                     76: Supporting the AMD64 architecture natively,
                     77: with full 64-bit support, 8 extra registers in the architecture
                     78: to significantly increase performance, and a memory management
                     79: Non-Executable bit that permits full W^X support.<br>
                     80: (Note: The upcoming Intel "ia32e" AMD64-compatible cpus have also
                     81: been tested, and work, even though they lack the NX bit).
                     82: <li><a href="cats.html">OpenBSD/cats</a><br>
                     83: Our first entry in the ARM-cpu landscape.  We intend to use this as a
                     84: development platform for something else we plan for the future...
                     85: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.77      tdeval     86: Supporting an older, but very cool cpu architecture, perhaps the
1.74      deraadt    87: most pure RISC cpu ever.
1.14      deraadt    88: </ul>
                     89: <p>
                     90:
1.35      otto       91: <li>Replacement of the GNU
1.12      otto       92: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
                     93: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4       deraadt    94: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
                     95: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1       deraadt    96: commands with BSD licensed equivalents.
                     97: <p>
                     98:
1.5       mcbride    99: <li>A large number of bug fixes, changes, and optimizations to our packet filter
                    100:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
                    101:     including:
                    102: <ul>
1.19      otto      103: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
                    104:     inconsistent state).
1.69      djm       105: <li>A 30% reduction in the size of state table entries.
1.19      otto      106: <li>Source-tracking (limit number of clients and states per client).
                    107: <li>Sticky-address (the flexibility of round-robin with the benefits of
                    108:     source-hash).
1.53      mcbride   109: <li>Invert the socket match order when redirecting to
1.34      avsm      110:     localhost (prevents the potential security problem of remote connections
1.19      otto      111:     being identified as local).
1.5       mcbride   112: <li>Significant improvements to interface handling.
                    113: </ul>
                    114: <p>
                    115:
1.53      mcbride   116: <li>New tools for filtering gateway failover:
1.5       mcbride   117: <ul>
                    118: <li>CARP (the Common Address Redundancy Protocol)
                    119:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
                    120:     allows multiple machines to share responsibility for a given IP address or
                    121:     addresses. If the owner of the address fails, another member of the group
                    122:     will take over for it. A discussion of the history of CARP can be found
1.62      deraadt   123:     <a href="lyrics.html">here</a>.
1.5       mcbride   124: <li>Additions to the
                    125:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
                    126:     interface allow it to synchronise state table entries between two or more
                    127:     firewalls which are operating in parallel, allowing stateful connections
                    128:     to cross any of the firewalls regardless of where the state was initially
                    129:     created.
                    130: </ul>
                    131: <p>
                    132:
1.6       todd      133: <li> New functionality:
                    134: <ul>
1.51      millert   135: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
1.6       todd      136: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
1.47      deraadt   137: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
                    138: As a result any process can now open a pty easily, meaning
                    139: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>
                    140: and
                    141: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xconsole&sektion=1">xconsole(1)</a>
                    142: are no longer setuid root.  (In 3.4 they were setuid root, but privilege revoking).
1.17      otto      143: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
                    144: system call has been added.
1.6       todd      145: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17      otto      146: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
1.70      djm       147: <li>Network boot support for i386 and amd64, using
                    148:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19      otto      149: <li>The i386 8GB boot loader limitation has been removed.
1.6       todd      150: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.52      beck      151: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
                    152: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80      tdeval    153: <li>Interface 'cloning', accessed by
1.6       todd      154: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19      otto      155: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82      tdeval    156: <li>
                    157: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
                    158: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47      deraadt   159: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
                    160: <li>Complete rewrite of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">package</a> tools in perl.
1.21      djm       161: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>
                    162: now supports logging to memory buffers, to be read using
                    163: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogc&sektion=8">syslogc(8)</a>.
1.47      deraadt   164: This is useful for diskless or flash-based computers.
1.34      avsm      165: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
1.33      otto      166: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">
1.79      tdeval    167: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33      otto      168: reads and writes.
1.43      beck      169: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">
                    170: authpf(8)</a> now tags traffic in
                    171: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">
                    172: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46      tedu      173: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.48      beck      174: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpu&arch=i386">cpus</a>,
                    175: great for prolonged battery life..
                    176: <li>XFS has been added to the GENERIC kernels so that
                    177: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)
                    178: </a> may be started easily, eliminating the need to recompile the kernel
1.49      deraadt   179: to use AFS.<br>
                    180: AFS can now be used anonymously by enabling it in
                    181: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48      beck      182: with no further configuration.
1.55      millert   183: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
1.51      millert   184: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
1.64      krw       185: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8"
                    186: >dhclient(8)</a> now detects when the interface it configured is modified and
                    187: gracefully exits.
                    188: e.g. repeatedly running it against the same interface leaves only the
                    189: last instance active.
1.6       todd      190: </ul>
                    191: <p>
                    192:
1.47      deraadt   193: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6       todd      194: <ul>
                    195: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
                    196: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.47      deraadt   197: (Previously privilege revoking, but this had a small breakage).
1.13      todd      198: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6       todd      199: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
                    200: </ul>
                    201: <p>
                    202:
                    203: <li> New tools:
                    204: <ul>
1.47      deraadt   205: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
                    206: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
                    207: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
1.10      deraadt   208: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
1.35      otto      209: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6       todd      210: </ul>
                    211: <p>
                    212:
1.23      henning   213: <li> Performance improvements:
                    214: <ul>
1.35      otto      215: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72      djm       216: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71      djm       217: <li>Implemented TCP adjustments recommended by
                    218:     <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
                    219:     controllable via
                    220:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl</a>.
1.23      henning   221: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42      henning   222:     des, 3des, rsa, dsa and bn.
1.77      tdeval    223: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
                    224:     provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.56      deraadt   225:     cpu performing AES more than 10x faster than the fastest cpu currently sold).
1.45      tedu      226: <li>Directory hashing makes lookups in large directories much faster.
1.23      henning   227: </ul>
                    228: <p>
                    229:
1.84      miod      230: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67      krw       231: <ul>
1.73      otto      232: <li>Bus probe made faster by skipping non-existent LUNs.
1.67      krw       233: <li>Bus probe made saner by elimination of spurious commands.
                    234: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81      krw       235: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67      krw       236: <li>SCSIDEBUG output can now be restricted to specified buses.
                    237: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
                    238: <li>Better error handling.
                    239: </ul>
                    240: <p>
                    241:
1.29      henning   242: <li>Improved hardware support, including:
                    243: <ul>
1.35      otto      244: <li>The <a href="/hppa.html">hppa</a> architecture gets support for many
1.29      henning   245:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
1.37      mickey    246:     based machines w/ addition of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
1.78      otto      247: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
1.55      millert   248: <li>Major improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
1.35      otto      249: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
                    250: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> driver for  LSI Fusion-MPT SCSI and FibreChannel host adapters.
1.39      henning   251: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snapper&amp;arch=macppc&amp;sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
1.44      millert   252: <li>Improved stability of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
                    253: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
1.61      marco     254: <li>Fixed several firmware incompatibility issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
1.68      grange    255: <li>Improved ATA and SATA support.
1.50      mickey    256: <li>Support for i835 AGP GART in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>.
1.54      marco     257: <li>Improved Gigabit Ethernet support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> &  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>.
1.66      marco     258: <li>Several fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>.
1.63      marco     259: <li>Support for Intel 852/855/865 AGP chipsets.
1.67      krw       260: <li>Many more USB Flash and other
                    261: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29      henning   262: </ul>
1.20      otto      263: <p>
                    264:
1.57      marco     265: <li> This release ships with Firefox for all major architectures.
                    266: <p>
                    267:
1.58      marco     268: <li> Major improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.
                    269: <p>
                    270:
1.18      sturm     271: <li> Over 2500 ports, 2300 pre-built packages.
                    272: <p>
                    273:
1.7       todd      274: <li>Many improvements for security and reliability (look for the red
1.88    ! deraadt   275: print in the <a href="plus35.html">complete changelog</a>).
1.7       todd      276: <p>
                    277:
1.19      otto      278: <li>Many improvements in manual pages and other documentation.
                    279: <p>
                    280:
1.40      tdeval    281: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62      deraadt   282: <a href="amd64.html">OpenBSD/amd64</a>,
                    283: <a href="cats.html">OpenBSD/cats</a> and
                    284: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28      henning   285: platforms.
                    286: Other architectures still use gcc 2.95.3 with the same local additions.
                    287: <p>
1.75      markus    288: <li>OpenSSH 3.8.1:
                    289: <ul>
                    290: <li>
                    291: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
                    292: now supports forced changes of expired passwords via
                    293: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
                    294: <li>
                    295: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    296: now uses untrusted cookies for X11-Forwarding.
                    297: Some X11 applications might need full access to the X11 server,
                    298: see ForwardX11Trusted in
1.76      djm       299: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75      markus    300: and
                    301: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a>.
                    302: <li>
                    303: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    304: now supports sending application layer
                    305: keep-alive messages to the server.  See ServerAliveInterval in
1.76      djm       306: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75      markus    307: <li> Improved
                    308: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
                    309: batch file support.
                    310: <li> New KerberosGetAFSToken option for
                    311: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
                    312: <li> Updated /etc/moduli file and improved performance for
                    313: protocol version 2.
                    314: <li> Support for host keys in DNS.
                    315: <li> The experimental "gssapi" support has been replaced with
                    316: the "gssapi-with-mic" to fix possible MITM attacks.
                    317: The two versions are not compatible.
                    318: </ul>
                    319: <p>
1.28      henning   320:
                    321: <li>The system includes the following major components from outside suppliers:
                    322: <ul>
                    323: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
                    324:     providing support for all chipsets)
1.40      tdeval    325: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28      henning   326: <li>Perl 5.8.2 (+ patches)
                    327: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    328: <li>OpenSSL 0.9.7c (+ patches)
                    329: <li>Groff 1.15
                    330: <li>Sendmail 8.12.11
                    331: <li>Bind 9.2.3 (+ patches)
                    332: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
                    333: <li>Sudo 1.6.7p5
                    334: <li>Ncurses 5.2
                    335: <li>Latest KAME IPv6
                    336: <li>Heimdal 0.6rc1 (+ patches)
                    337: <li>Arla-current
                    338: </ul>
                    339: <p>
1.1       deraadt   340:
                    341: </ul>
                    342:
                    343: <a name="install"></a>
                    344: <hr>
                    345: <p>
                    346: <h3><font color="#0000e0">How to install</font></h3>
                    347: <p>
                    348: Following this are the instructions which you would have on a piece of
                    349: paper if you had purchased a CDROM set instead of doing an alternate
                    350: form of install.  The instructions for doing an ftp (or other style
                    351: of) install are very similar; the CDROM instructions are left intact
                    352: so that you can see how much easier it would have been if you had
                    353: purchased a CDROM instead.
                    354: <p>
                    355:
                    356: <hr>
                    357: Please refer to the following files on the three CDROMs or ftp mirror for
                    358: extensive details on how to install OpenBSD 3.5 on your machine:
                    359: <p>
                    360: <ul>
                    361: <li>CD1:3.5/i386/INSTALL.i386
1.2       deraadt   362: <li>CD1:3.5/vax/INSTALL.vax
1.1       deraadt   363: <p>
1.2       deraadt   364: <li>CD2:3.5/amd64/INSTALL.amd64
1.1       deraadt   365: <li>CD2:3.5/macppc/INSTALL.macppc
                    366: <p>
                    367: <li>CD3:3.5/sparc/INSTALL.sparc
                    368: <li>CD3:3.5/sparc64/INSTALL.sparc64
                    369: <p>
                    370: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27      miod      371: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1       deraadt   372: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
                    373: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
                    374: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
                    375: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2       deraadt   376: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1       deraadt   377: </ul>
                    378: <hr>
                    379:
                    380: <p>
                    381: Quick installer information for people familiar with OpenBSD, and the
                    382: use of the "disklabel -E" command.  If you are at all confused when
                    383: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    384: <p>
                    385:
                    386: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    387: <ul>
                    388: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    389: release is on CD1. If your BIOS does not support booting from CD, you will need
                    390: to create a boot floppy to install from. To create a boot floppy write
1.2       deraadt   391: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1       deraadt   392:
                    393: <p>
1.2       deraadt   394: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
                    395: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1       deraadt   396:
                    397: <p>
1.83      tom       398: If you can't boot from a CD or a floppy disk,
                    399: you can install across the network using PXE as described in
                    400: the included INSTALL.i386 document.
                    401:
                    402: <p>
1.1       deraadt   403: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83      tom       404: read INSTALL.i386.
1.1       deraadt   405:
                    406: <p>
                    407: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
1.83      tom       408: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.1       deraadt   409: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
                    410: dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
                    411: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)
                    412: </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    413: &quot;rfd0a&quot;.
                    414:
                    415: <ul><pre>
                    416: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    417: </pre></ul>
                    418:
                    419: <p>
                    420: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    421: your install will most likely fail. For more information on creating a boot
                    422: floppy and installing OpenBSD/i386 please refer to
                    423: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
                    424: </ul>
                    425:
                    426: <p>
1.84      miod      427: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1       deraadt   428: <ul>
1.84      miod      429: Boot over the network via mopbooting as described in INSTALL.vax.
1.1       deraadt   430: </ul>
                    431:
                    432: <p>
1.2       deraadt   433: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    434: <ul>
1.84      miod      435: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83      tom       436: Boot from the CD to begin the install - you may need to adjust
                    437: your BIOS options first.
                    438: If you can't boot from the CD, you can create a boot floppy to install from.
1.85      tom       439: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83      tom       440: boot from the floppy drive.
                    441:
                    442: <p>
                    443: If you can't boot from a CD or a floppy disk,
                    444: you can install across the network using PXE as described in the included
                    445: INSTALL.amd64 document.
                    446:
                    447: <p>
                    448: If you are planning to dual boot OpenBSD with another OS, you will need to
                    449: read INSTALL.amd64.
1.2       deraadt   450: </ul>
                    451:
                    452: <p>
1.84      miod      453: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1       deraadt   454: <ul>
1.84      miod      455: Put the CD2 in your CDROM drive and poweron your machine while holding down the
                    456: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    457:
                    458: <p>
                    459: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    460: /3.5/macppc/bsd.rd</i>
1.1       deraadt   461: </ul>
                    462:
                    463: <p>
                    464: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    465: <ul>
                    466: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    467: can use one of the two commands listed below, depending on the version of your
                    468: ROM.
                    469:
                    470: <ul><pre>
1.86      miod      471: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1       deraadt   472: or
1.86      miod      473: &gt; <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1       deraadt   474: </pre></ul>
                    475:
                    476: <p>
                    477: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84      miod      478: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1       deraadt   479: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
                    480: the floppy use one of the two commands listed below, depending on the version of
                    481: your ROM.
                    482:
                    483: <ul><pre>
1.86      miod      484: ok <strong>boot floppy</strong>
1.1       deraadt   485: or
1.86      miod      486: &gt; <strong>b fd()</strong>
1.1       deraadt   487: </pre></ul>
                    488:
                    489: <p>
                    490: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    491: will most likely fail.
                    492:
                    493: <p>
                    494: If your sparc doesn't have a floppy drive nor a CD drive, you can either
                    495: setup a bootable tape, or install via network, as told in the
                    496: INSTALL.sparc file.
                    497: </ul>
                    498:
                    499: <p>
                    500: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    501: <ul>
                    502: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    503:
                    504: <p>
                    505: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2       deraadt   506: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1       deraadt   507: floppy</i>.<br>
                    508: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    509: will most likely fail.
                    510:
                    511: <p>
1.2       deraadt   512: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1       deraadt   513: the disk and boot with <i>boot disk:b</i>.
                    514:
                    515: <p>
                    516: If nothing works, you can boot over the network as described in INSTALL.sparc64
                    517: </ul>
                    518:
                    519: <p>
                    520: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    521: <ul>
1.2       deraadt   522: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
                    523: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1       deraadt   524: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    525:
                    526: <p>
                    527: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    528: will most likely fail.
                    529:
                    530: </ul>
                    531:
                    532: <p>
1.87      miod      533: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    534: <ul>
                    535: <p>
                    536: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    537: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    538: or an existing FFS or EXT2FS partition).
                    539: </ul>
                    540:
                    541: <p>
1.1       deraadt   542: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    543: <ul>
                    544: <p>
                    545: Boot over the network by following the instructions in INSTALL.hp300.
                    546: </ul>
                    547:
                    548: <p>
                    549: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    550: <ul>
                    551: <p>
                    552: Boot over the network by following the instructions in INSTALL.hppa or the
                    553: <a href="hppa.html#netboot">hppa platform page</a>.
                    554: </ul>
                    555:
                    556: <p>
                    557: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    558: <ul>
                    559: <p>
                    560: Boot MacOS as normal and partition your disk with the appropriate A/UX
                    561: configurations.  Then, extract the Macside utilities from
                    562: <i>FTP:3.5/mac68k/utils</i> onto your hard disk.  Run Mkfs to create your
                    563: filesystems on the A/UX partitions you just made.  Then, use the
                    564: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
                    565: partitions.  Finally, you will be ready to configure the "BSD/Mac68k
                    566: Booter" with the location of your kernel and boot the system.
                    567: </ul>
                    568:
                    569: <p>
                    570: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    571: <ul>
                    572: <p>
                    573: You can create a bootable installation tape or boot over the network.<br>
                    574: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    575: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    576: for more details.
                    577: </ul>
                    578:
                    579: <p>
1.2       deraadt   580: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    581: <ul>
                    582: <p>
                    583: You can create a bootable installation tape or boot over the network.<br>
                    584: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    585: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    586: for more details.
                    587: </ul>
                    588:
                    589: <p>
1.1       deraadt   590: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    591: <ul>
                    592: src.tar.gz contains a source archive starting at /usr/src.  This file
                    593: contains everything you need except for the kernel sources, which are
                    594: in a separate archive.  To extract:
                    595: <p>
                    596: <ul><pre>
                    597: # <strong>mkdir -p /usr/src</strong>
                    598: # <strong>cd /usr/src</strong>
                    599: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    600: </pre></ul>
                    601: <p>
                    602: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    603: This file contains all the kernel sources you need to rebuild kernels.
                    604: To extract:
                    605: <p>
                    606: <ul><pre>
                    607: # <strong>mkdir -p /usr/src/sys</strong>
                    608: # <strong>cd /usr/src</strong>
                    609: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    610: </pre></ul>
                    611: <p>
                    612: Both of these trees are a regular CVS checkout.  Using these trees it
                    613: is possible to get a head-start on using the anoncvs servers as
                    614: described <a href="anoncvs.html">here</a>.
                    615: Using these files
                    616: results in a much faster initial CVS update than you could expect from
                    617: a fresh checkout of the full OpenBSD source tree.
                    618: <p>
                    619: </ul>
                    620: <a name="ports"></a>
                    621: <hr>
                    622: <p>
                    623: <h3><font color="#0000e0">Ports Tree</font></h3>
                    624: <p>
                    625: A ports tree archive is also provided.  To extract:
                    626: <p>
                    627: <ul><pre>
                    628: # <strong>cd /usr</strong>
                    629: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    630: # <strong>cd ports</strong>
                    631: </pre></ul>
                    632: <p>
                    633: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    634: read the <a href="ports.html">ports</a> page
                    635: if you know nothing about ports
                    636: at this point.  This text is not a manual of how to use ports.
                    637: Rather, it is a set of notes meant to kickstart the user on the
                    638: OpenBSD ports system.
                    639: <p>
                    640: The <i>ports/</i> directory represents a CVS (see the manpage for
                    641: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    642: cvs(1)</a> if
                    643: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    644: source tree, our ports tree is available via anoncvs.  So, in
                    645: order to keep current with it, you must make the <i>ports/</i> tree
                    646: available on a read-write medium and update the tree with a command
                    647: like:
                    648: <p>
                    649: <ul><pre>
1.2       deraadt   650: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1       deraadt   651: </pre></ul>
                    652: <p>
                    653: [Of course, you must replace the local directory and server name here
                    654: with the location of your ports collection and a nearby anoncvs
                    655: server.]
                    656: <p>
                    657: Note that most ports are available as packages through ftp. Updated
                    658: packages for the 3.5 release will be made available if problems arise.
                    659: <p>
                    660: If you're interested in seeing a port added, would like to help out, or just
                    661: would like to know more, the mailing list ports@openbsd.org is a good
                    662: place to know.
                    663: <p>
                    664:
                    665: <hr>
                    666: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    667: alt="OpenBSD"></a>
                    668: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
                    669: <br><small>
1.88    ! deraadt   670: $OpenBSD: 35.html,v 1.87 2004/03/27 21:57:03 miod Exp $
1.1       deraadt   671: </small>
                    672:
                    673: </body>
                    674: </html>