[BACK]Return to 35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/35.html, Revision 1.91

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 3.5 Release</title>
                      5: <link rev=made href="mailto:www@openbsd.org">
                      6: <meta name="resource-type" content="document">
                      7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      8: <meta name="description" content="OpenBSD 3.5">
                      9: <meta name="keywords" content="openbsd,main">
                     10: <meta name="distribution" content="global">
1.25      miod       11: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.1       deraadt    12: </head>
                     13:
                     14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     15:
                     16: <a href="index.html">
                     17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     18: <hr>
                     19:
                     20: <p>
                     21: <a href="images/Carp.gif">
                     22: <img align="left" width="255" height="343" hspace="24" vspace="30"
                     23: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
                     24: <h2><font color="#0000e0">The OpenBSD 3.5 Release:</font></h2>
                     25: <p>
                     26: Released May 1, 2004<br>
                     27: Copyright 1997-2004, Theo de Raadt.<br>
1.89      wvdputte   28: <font color="#e00000">ISBN 0-9731791-3-9</font>
1.1       deraadt    29: <p>
                     30:
                     31: <a href="#new">What's New</a><br>
                     32: <a href="#install">How to install</a><br>
                     33: <a href="#ports">How to use the ports tree</a><br>
                     34: <a href="orders.html">Ordering a CD set</a><br>
                     35:
                     36: <p>
                     37: <h3><font color="#0000e0">
                     38: To get the files for this release:
                     39: <ul>
                     40: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     41: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     42:     a list of mirror machines.
                     43: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
                     44:     one of the mirror sites.
                     45: <li>Briefly read the rest of this document.
                     46: <li>Have a look at <a href="errata.html">The 3.5 Errata page</a> for a list
                     47:     of bugs and workarounds.
1.88      deraadt    48: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1       deraadt    49:     3.4 and 3.5 releases.
                     50: </ul>
                     51: </font></h3>
                     52: <br clear=all>
                     53:
                     54: <strong>Note:</strong> All applicable copyrights and credits can be found
                     55: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
                     56: XF4.tar.gz, or in the files fetched via ports.tar.gz.  The distribution
                     57: files used to build packages from the ports.tar.gz file are not included on
                     58: the CDROM because of lack of space.
                     59: <p>
                     60:
                     61: <a name="new"></a>
                     62: <hr>
                     63: <p>
                     64: <h3><font color="#0000e0">What's New</font></h3>
                     65: <p>
                     66: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88      deraadt    67: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1       deraadt    68: to 3.5.
                     69: <p>
                     70:
                     71: <ul>
                     72:
1.14      deraadt    73: <li> New platforms:
                     74: <ul>
1.74      deraadt    75: <li><a href="amd64.html">OpenBSD/amd64</a><br>
                     76: Supporting the AMD64 architecture natively,
                     77: with full 64-bit support, 8 extra registers in the architecture
                     78: to significantly increase performance, and a memory management
                     79: Non-Executable bit that permits full W^X support.<br>
                     80: (Note: The upcoming Intel "ia32e" AMD64-compatible cpus have also
                     81: been tested, and work, even though they lack the NX bit).
                     82: <li><a href="cats.html">OpenBSD/cats</a><br>
                     83: Our first entry in the ARM-cpu landscape.  We intend to use this as a
                     84: development platform for something else we plan for the future...
                     85: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.77      tdeval     86: Supporting an older, but very cool cpu architecture, perhaps the
1.74      deraadt    87: most pure RISC cpu ever.
1.14      deraadt    88: </ul>
                     89: <p>
                     90:
1.35      otto       91: <li>Replacement of the GNU
1.12      otto       92: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
                     93: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4       deraadt    94: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
                     95: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1       deraadt    96: commands with BSD licensed equivalents.
                     97: <p>
                     98:
1.5       mcbride    99: <li>A large number of bug fixes, changes, and optimizations to our packet filter
                    100:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
                    101:     including:
                    102: <ul>
1.19      otto      103: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
                    104:     inconsistent state).
1.69      djm       105: <li>A 30% reduction in the size of state table entries.
1.19      otto      106: <li>Source-tracking (limit number of clients and states per client).
                    107: <li>Sticky-address (the flexibility of round-robin with the benefits of
                    108:     source-hash).
1.53      mcbride   109: <li>Invert the socket match order when redirecting to
1.34      avsm      110:     localhost (prevents the potential security problem of remote connections
1.19      otto      111:     being identified as local).
1.5       mcbride   112: <li>Significant improvements to interface handling.
                    113: </ul>
                    114: <p>
                    115:
1.53      mcbride   116: <li>New tools for filtering gateway failover:
1.5       mcbride   117: <ul>
                    118: <li>CARP (the Common Address Redundancy Protocol)
                    119:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
                    120:     allows multiple machines to share responsibility for a given IP address or
                    121:     addresses. If the owner of the address fails, another member of the group
                    122:     will take over for it. A discussion of the history of CARP can be found
1.62      deraadt   123:     <a href="lyrics.html">here</a>.
1.5       mcbride   124: <li>Additions to the
                    125:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
                    126:     interface allow it to synchronise state table entries between two or more
                    127:     firewalls which are operating in parallel, allowing stateful connections
                    128:     to cross any of the firewalls regardless of where the state was initially
                    129:     created.
                    130: </ul>
                    131: <p>
                    132:
1.6       todd      133: <li> New functionality:
                    134: <ul>
1.51      millert   135: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
1.6       todd      136: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
1.47      deraadt   137: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
                    138: As a result any process can now open a pty easily, meaning
                    139: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>
                    140: and
                    141: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xconsole&sektion=1">xconsole(1)</a>
                    142: are no longer setuid root.  (In 3.4 they were setuid root, but privilege revoking).
1.17      otto      143: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
                    144: system call has been added.
1.6       todd      145: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17      otto      146: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
1.70      djm       147: <li>Network boot support for i386 and amd64, using
                    148:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19      otto      149: <li>The i386 8GB boot loader limitation has been removed.
1.6       todd      150: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.52      beck      151: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
                    152: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80      tdeval    153: <li>Interface 'cloning', accessed by
1.6       todd      154: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19      otto      155: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82      tdeval    156: <li>
                    157: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
                    158: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47      deraadt   159: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
                    160: <li>Complete rewrite of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">package</a> tools in perl.
1.21      djm       161: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>
                    162: now supports logging to memory buffers, to be read using
                    163: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogc&sektion=8">syslogc(8)</a>.
1.47      deraadt   164: This is useful for diskless or flash-based computers.
1.34      avsm      165: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
1.33      otto      166: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">
1.79      tdeval    167: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33      otto      168: reads and writes.
1.43      beck      169: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">
                    170: authpf(8)</a> now tags traffic in
                    171: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">
                    172: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46      tedu      173: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.48      beck      174: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpu&arch=i386">cpus</a>,
1.91    ! henning   175: great for prolonged battery life.
1.48      beck      176: <li>XFS has been added to the GENERIC kernels so that
                    177: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)
                    178: </a> may be started easily, eliminating the need to recompile the kernel
1.49      deraadt   179: to use AFS.<br>
                    180: AFS can now be used anonymously by enabling it in
                    181: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48      beck      182: with no further configuration.
1.55      millert   183: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
1.51      millert   184: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
1.64      krw       185: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8"
                    186: >dhclient(8)</a> now detects when the interface it configured is modified and
                    187: gracefully exits.
                    188: e.g. repeatedly running it against the same interface leaves only the
                    189: last instance active.
1.6       todd      190: </ul>
                    191: <p>
                    192:
1.47      deraadt   193: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6       todd      194: <ul>
                    195: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
                    196: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.47      deraadt   197: (Previously privilege revoking, but this had a small breakage).
1.13      todd      198: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6       todd      199: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
                    200: </ul>
                    201: <p>
                    202:
                    203: <li> New tools:
                    204: <ul>
1.47      deraadt   205: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
                    206: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
                    207: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
1.10      deraadt   208: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
1.35      otto      209: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6       todd      210: </ul>
                    211: <p>
                    212:
1.23      henning   213: <li> Performance improvements:
                    214: <ul>
1.35      otto      215: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72      djm       216: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71      djm       217: <li>Implemented TCP adjustments recommended by
                    218:     <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
                    219:     controllable via
                    220:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl</a>.
1.23      henning   221: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42      henning   222:     des, 3des, rsa, dsa and bn.
1.77      tdeval    223: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
                    224:     provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.56      deraadt   225:     cpu performing AES more than 10x faster than the fastest cpu currently sold).
1.45      tedu      226: <li>Directory hashing makes lookups in large directories much faster.
1.90      mcbride   227: <li>Zeroing pages with SSE. Faster operation, and avoids clobbering the cache.
1.23      henning   228: </ul>
                    229: <p>
                    230:
1.84      miod      231: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67      krw       232: <ul>
1.73      otto      233: <li>Bus probe made faster by skipping non-existent LUNs.
1.67      krw       234: <li>Bus probe made saner by elimination of spurious commands.
                    235: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81      krw       236: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67      krw       237: <li>SCSIDEBUG output can now be restricted to specified buses.
                    238: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
                    239: <li>Better error handling.
                    240: </ul>
                    241: <p>
                    242:
1.29      henning   243: <li>Improved hardware support, including:
                    244: <ul>
1.35      otto      245: <li>The <a href="/hppa.html">hppa</a> architecture gets support for many
1.29      henning   246:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
1.37      mickey    247:     based machines w/ addition of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
1.78      otto      248: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
1.55      millert   249: <li>Major improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
1.35      otto      250: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
                    251: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> driver for  LSI Fusion-MPT SCSI and FibreChannel host adapters.
1.39      henning   252: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snapper&amp;arch=macppc&amp;sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
1.44      millert   253: <li>Improved stability of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
                    254: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
1.61      marco     255: <li>Fixed several firmware incompatibility issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
1.68      grange    256: <li>Improved ATA and SATA support.
1.50      mickey    257: <li>Support for i835 AGP GART in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>.
1.54      marco     258: <li>Improved Gigabit Ethernet support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> &  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>.
1.66      marco     259: <li>Several fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>.
1.63      marco     260: <li>Support for Intel 852/855/865 AGP chipsets.
1.67      krw       261: <li>Many more USB Flash and other
                    262: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29      henning   263: </ul>
1.20      otto      264: <p>
                    265:
1.57      marco     266: <li> This release ships with Firefox for all major architectures.
                    267: <p>
                    268:
1.58      marco     269: <li> Major improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.
                    270: <p>
                    271:
1.18      sturm     272: <li> Over 2500 ports, 2300 pre-built packages.
                    273: <p>
                    274:
1.7       todd      275: <li>Many improvements for security and reliability (look for the red
1.88      deraadt   276: print in the <a href="plus35.html">complete changelog</a>).
1.7       todd      277: <p>
                    278:
1.19      otto      279: <li>Many improvements in manual pages and other documentation.
                    280: <p>
                    281:
1.40      tdeval    282: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62      deraadt   283: <a href="amd64.html">OpenBSD/amd64</a>,
                    284: <a href="cats.html">OpenBSD/cats</a> and
                    285: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28      henning   286: platforms.
                    287: Other architectures still use gcc 2.95.3 with the same local additions.
                    288: <p>
1.75      markus    289: <li>OpenSSH 3.8.1:
                    290: <ul>
                    291: <li>
                    292: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
                    293: now supports forced changes of expired passwords via
                    294: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
                    295: <li>
                    296: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    297: now uses untrusted cookies for X11-Forwarding.
                    298: Some X11 applications might need full access to the X11 server,
                    299: see ForwardX11Trusted in
1.76      djm       300: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75      markus    301: and
                    302: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a>.
                    303: <li>
                    304: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    305: now supports sending application layer
                    306: keep-alive messages to the server.  See ServerAliveInterval in
1.76      djm       307: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75      markus    308: <li> Improved
                    309: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
                    310: batch file support.
                    311: <li> New KerberosGetAFSToken option for
                    312: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
                    313: <li> Updated /etc/moduli file and improved performance for
                    314: protocol version 2.
                    315: <li> Support for host keys in DNS.
                    316: <li> The experimental "gssapi" support has been replaced with
                    317: the "gssapi-with-mic" to fix possible MITM attacks.
                    318: The two versions are not compatible.
                    319: </ul>
                    320: <p>
1.28      henning   321:
                    322: <li>The system includes the following major components from outside suppliers:
                    323: <ul>
                    324: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
                    325:     providing support for all chipsets)
1.40      tdeval    326: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28      henning   327: <li>Perl 5.8.2 (+ patches)
                    328: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    329: <li>OpenSSL 0.9.7c (+ patches)
                    330: <li>Groff 1.15
                    331: <li>Sendmail 8.12.11
                    332: <li>Bind 9.2.3 (+ patches)
                    333: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
                    334: <li>Sudo 1.6.7p5
                    335: <li>Ncurses 5.2
                    336: <li>Latest KAME IPv6
                    337: <li>Heimdal 0.6rc1 (+ patches)
                    338: <li>Arla-current
                    339: </ul>
                    340: <p>
1.1       deraadt   341:
                    342: </ul>
                    343:
                    344: <a name="install"></a>
                    345: <hr>
                    346: <p>
                    347: <h3><font color="#0000e0">How to install</font></h3>
                    348: <p>
                    349: Following this are the instructions which you would have on a piece of
                    350: paper if you had purchased a CDROM set instead of doing an alternate
                    351: form of install.  The instructions for doing an ftp (or other style
                    352: of) install are very similar; the CDROM instructions are left intact
                    353: so that you can see how much easier it would have been if you had
                    354: purchased a CDROM instead.
                    355: <p>
                    356:
                    357: <hr>
                    358: Please refer to the following files on the three CDROMs or ftp mirror for
                    359: extensive details on how to install OpenBSD 3.5 on your machine:
                    360: <p>
                    361: <ul>
                    362: <li>CD1:3.5/i386/INSTALL.i386
1.2       deraadt   363: <li>CD1:3.5/vax/INSTALL.vax
1.1       deraadt   364: <p>
1.2       deraadt   365: <li>CD2:3.5/amd64/INSTALL.amd64
1.1       deraadt   366: <li>CD2:3.5/macppc/INSTALL.macppc
                    367: <p>
                    368: <li>CD3:3.5/sparc/INSTALL.sparc
                    369: <li>CD3:3.5/sparc64/INSTALL.sparc64
                    370: <p>
                    371: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27      miod      372: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1       deraadt   373: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
                    374: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
                    375: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
                    376: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2       deraadt   377: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1       deraadt   378: </ul>
                    379: <hr>
                    380:
                    381: <p>
                    382: Quick installer information for people familiar with OpenBSD, and the
                    383: use of the "disklabel -E" command.  If you are at all confused when
                    384: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    385: <p>
                    386:
                    387: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    388: <ul>
                    389: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    390: release is on CD1. If your BIOS does not support booting from CD, you will need
                    391: to create a boot floppy to install from. To create a boot floppy write
1.2       deraadt   392: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1       deraadt   393:
                    394: <p>
1.2       deraadt   395: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
                    396: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1       deraadt   397:
                    398: <p>
1.83      tom       399: If you can't boot from a CD or a floppy disk,
                    400: you can install across the network using PXE as described in
                    401: the included INSTALL.i386 document.
                    402:
                    403: <p>
1.1       deraadt   404: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83      tom       405: read INSTALL.i386.
1.1       deraadt   406:
                    407: <p>
                    408: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
1.83      tom       409: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.1       deraadt   410: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
                    411: dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
                    412: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)
                    413: </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    414: &quot;rfd0a&quot;.
                    415:
                    416: <ul><pre>
                    417: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    418: </pre></ul>
                    419:
                    420: <p>
                    421: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    422: your install will most likely fail. For more information on creating a boot
                    423: floppy and installing OpenBSD/i386 please refer to
                    424: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
                    425: </ul>
                    426:
                    427: <p>
1.84      miod      428: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1       deraadt   429: <ul>
1.84      miod      430: Boot over the network via mopbooting as described in INSTALL.vax.
1.1       deraadt   431: </ul>
                    432:
                    433: <p>
1.2       deraadt   434: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    435: <ul>
1.84      miod      436: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83      tom       437: Boot from the CD to begin the install - you may need to adjust
                    438: your BIOS options first.
                    439: If you can't boot from the CD, you can create a boot floppy to install from.
1.85      tom       440: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83      tom       441: boot from the floppy drive.
                    442:
                    443: <p>
                    444: If you can't boot from a CD or a floppy disk,
                    445: you can install across the network using PXE as described in the included
                    446: INSTALL.amd64 document.
                    447:
                    448: <p>
                    449: If you are planning to dual boot OpenBSD with another OS, you will need to
                    450: read INSTALL.amd64.
1.2       deraadt   451: </ul>
                    452:
                    453: <p>
1.84      miod      454: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1       deraadt   455: <ul>
1.84      miod      456: Put the CD2 in your CDROM drive and poweron your machine while holding down the
                    457: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    458:
                    459: <p>
                    460: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    461: /3.5/macppc/bsd.rd</i>
1.1       deraadt   462: </ul>
                    463:
                    464: <p>
                    465: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    466: <ul>
                    467: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    468: can use one of the two commands listed below, depending on the version of your
                    469: ROM.
                    470:
                    471: <ul><pre>
1.86      miod      472: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1       deraadt   473: or
1.86      miod      474: &gt; <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1       deraadt   475: </pre></ul>
                    476:
                    477: <p>
                    478: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84      miod      479: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1       deraadt   480: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
                    481: the floppy use one of the two commands listed below, depending on the version of
                    482: your ROM.
                    483:
                    484: <ul><pre>
1.86      miod      485: ok <strong>boot floppy</strong>
1.1       deraadt   486: or
1.86      miod      487: &gt; <strong>b fd()</strong>
1.1       deraadt   488: </pre></ul>
                    489:
                    490: <p>
                    491: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    492: will most likely fail.
                    493:
                    494: <p>
                    495: If your sparc doesn't have a floppy drive nor a CD drive, you can either
                    496: setup a bootable tape, or install via network, as told in the
                    497: INSTALL.sparc file.
                    498: </ul>
                    499:
                    500: <p>
                    501: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    502: <ul>
                    503: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    504:
                    505: <p>
                    506: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2       deraadt   507: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1       deraadt   508: floppy</i>.<br>
                    509: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    510: will most likely fail.
                    511:
                    512: <p>
1.2       deraadt   513: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1       deraadt   514: the disk and boot with <i>boot disk:b</i>.
                    515:
                    516: <p>
                    517: If nothing works, you can boot over the network as described in INSTALL.sparc64
                    518: </ul>
                    519:
                    520: <p>
                    521: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    522: <ul>
1.2       deraadt   523: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
                    524: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1       deraadt   525: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    526:
                    527: <p>
                    528: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    529: will most likely fail.
                    530:
                    531: </ul>
                    532:
                    533: <p>
1.87      miod      534: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    535: <ul>
                    536: <p>
                    537: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    538: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    539: or an existing FFS or EXT2FS partition).
                    540: </ul>
                    541:
                    542: <p>
1.1       deraadt   543: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    544: <ul>
                    545: <p>
                    546: Boot over the network by following the instructions in INSTALL.hp300.
                    547: </ul>
                    548:
                    549: <p>
                    550: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    551: <ul>
                    552: <p>
                    553: Boot over the network by following the instructions in INSTALL.hppa or the
                    554: <a href="hppa.html#netboot">hppa platform page</a>.
                    555: </ul>
                    556:
                    557: <p>
                    558: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    559: <ul>
                    560: <p>
                    561: Boot MacOS as normal and partition your disk with the appropriate A/UX
                    562: configurations.  Then, extract the Macside utilities from
                    563: <i>FTP:3.5/mac68k/utils</i> onto your hard disk.  Run Mkfs to create your
                    564: filesystems on the A/UX partitions you just made.  Then, use the
                    565: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
                    566: partitions.  Finally, you will be ready to configure the "BSD/Mac68k
                    567: Booter" with the location of your kernel and boot the system.
                    568: </ul>
                    569:
                    570: <p>
                    571: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    572: <ul>
                    573: <p>
                    574: You can create a bootable installation tape or boot over the network.<br>
                    575: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    576: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    577: for more details.
                    578: </ul>
                    579:
                    580: <p>
1.2       deraadt   581: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    582: <ul>
                    583: <p>
                    584: You can create a bootable installation tape or boot over the network.<br>
                    585: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    586: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    587: for more details.
                    588: </ul>
                    589:
                    590: <p>
1.1       deraadt   591: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    592: <ul>
                    593: src.tar.gz contains a source archive starting at /usr/src.  This file
                    594: contains everything you need except for the kernel sources, which are
                    595: in a separate archive.  To extract:
                    596: <p>
                    597: <ul><pre>
                    598: # <strong>mkdir -p /usr/src</strong>
                    599: # <strong>cd /usr/src</strong>
                    600: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    601: </pre></ul>
                    602: <p>
                    603: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    604: This file contains all the kernel sources you need to rebuild kernels.
                    605: To extract:
                    606: <p>
                    607: <ul><pre>
                    608: # <strong>mkdir -p /usr/src/sys</strong>
                    609: # <strong>cd /usr/src</strong>
                    610: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    611: </pre></ul>
                    612: <p>
                    613: Both of these trees are a regular CVS checkout.  Using these trees it
                    614: is possible to get a head-start on using the anoncvs servers as
                    615: described <a href="anoncvs.html">here</a>.
                    616: Using these files
                    617: results in a much faster initial CVS update than you could expect from
                    618: a fresh checkout of the full OpenBSD source tree.
                    619: <p>
                    620: </ul>
                    621: <a name="ports"></a>
                    622: <hr>
                    623: <p>
                    624: <h3><font color="#0000e0">Ports Tree</font></h3>
                    625: <p>
                    626: A ports tree archive is also provided.  To extract:
                    627: <p>
                    628: <ul><pre>
                    629: # <strong>cd /usr</strong>
                    630: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    631: # <strong>cd ports</strong>
                    632: </pre></ul>
                    633: <p>
                    634: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    635: read the <a href="ports.html">ports</a> page
                    636: if you know nothing about ports
                    637: at this point.  This text is not a manual of how to use ports.
                    638: Rather, it is a set of notes meant to kickstart the user on the
                    639: OpenBSD ports system.
                    640: <p>
                    641: The <i>ports/</i> directory represents a CVS (see the manpage for
                    642: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    643: cvs(1)</a> if
                    644: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    645: source tree, our ports tree is available via anoncvs.  So, in
                    646: order to keep current with it, you must make the <i>ports/</i> tree
                    647: available on a read-write medium and update the tree with a command
                    648: like:
                    649: <p>
                    650: <ul><pre>
1.2       deraadt   651: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1       deraadt   652: </pre></ul>
                    653: <p>
                    654: [Of course, you must replace the local directory and server name here
                    655: with the location of your ports collection and a nearby anoncvs
                    656: server.]
                    657: <p>
                    658: Note that most ports are available as packages through ftp. Updated
                    659: packages for the 3.5 release will be made available if problems arise.
                    660: <p>
                    661: If you're interested in seeing a port added, would like to help out, or just
                    662: would like to know more, the mailing list ports@openbsd.org is a good
                    663: place to know.
                    664: <p>
                    665:
                    666: <hr>
                    667: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    668: alt="OpenBSD"></a>
                    669: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
                    670: <br><small>
1.91    ! henning   671: $OpenBSD: 35.html,v 1.90 2004/04/08 18:32:01 mcbride Exp $
1.1       deraadt   672: </small>
                    673:
                    674: </body>
                    675: </html>