[BACK]Return to 35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/35.html, Revision 1.96

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 3.5 Release</title>
                      5: <link rev=made href="mailto:www@openbsd.org">
                      6: <meta name="resource-type" content="document">
                      7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      8: <meta name="description" content="OpenBSD 3.5">
                      9: <meta name="keywords" content="openbsd,main">
                     10: <meta name="distribution" content="global">
1.25      miod       11: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.1       deraadt    12: </head>
                     13:
                     14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     15:
                     16: <a href="index.html">
                     17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     18: <hr>
                     19:
                     20: <p>
                     21: <a href="images/Carp.gif">
                     22: <img align="left" width="255" height="343" hspace="24" vspace="30"
                     23: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
                     24: <h2><font color="#0000e0">The OpenBSD 3.5 Release:</font></h2>
                     25: <p>
                     26: Released May 1, 2004<br>
                     27: Copyright 1997-2004, Theo de Raadt.<br>
1.89      wvdputte   28: <font color="#e00000">ISBN 0-9731791-3-9</font>
1.93      deraadt    29: <br>
                     30: <a href="lyrics.html#35">3.5 Song: "CARP License" and "Redundancy must be free"</a>
1.1       deraadt    31: <p>
                     32:
                     33: <a href="#new">What's New</a><br>
                     34: <a href="#install">How to install</a><br>
                     35: <a href="#ports">How to use the ports tree</a><br>
                     36: <a href="orders.html">Ordering a CD set</a><br>
                     37:
                     38: <p>
                     39: <h3><font color="#0000e0">
                     40: To get the files for this release:
                     41: <ul>
                     42: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     43: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     44:     a list of mirror machines.
                     45: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
                     46:     one of the mirror sites.
                     47: <li>Briefly read the rest of this document.
1.92      miod       48: <li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list
1.1       deraadt    49:     of bugs and workarounds.
1.88      deraadt    50: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1       deraadt    51:     3.4 and 3.5 releases.
                     52: </ul>
                     53: </font></h3>
                     54: <br clear=all>
                     55:
                     56: <strong>Note:</strong> All applicable copyrights and credits can be found
                     57: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
                     58: XF4.tar.gz, or in the files fetched via ports.tar.gz.  The distribution
                     59: files used to build packages from the ports.tar.gz file are not included on
                     60: the CDROM because of lack of space.
                     61: <p>
                     62:
                     63: <a name="new"></a>
                     64: <hr>
                     65: <p>
                     66: <h3><font color="#0000e0">What's New</font></h3>
                     67: <p>
                     68: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88      deraadt    69: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1       deraadt    70: to 3.5.
                     71: <p>
                     72:
                     73: <ul>
                     74:
1.14      deraadt    75: <li> New platforms:
                     76: <ul>
1.74      deraadt    77: <li><a href="amd64.html">OpenBSD/amd64</a><br>
                     78: Supporting the AMD64 architecture natively,
                     79: with full 64-bit support, 8 extra registers in the architecture
                     80: to significantly increase performance, and a memory management
                     81: Non-Executable bit that permits full W^X support.<br>
1.94      david      82: (Note: The upcoming Intel "ia32e" AMD64-compatible CPUs have also
1.74      deraadt    83: been tested, and work, even though they lack the NX bit).
                     84: <li><a href="cats.html">OpenBSD/cats</a><br>
1.94      david      85: Our first entry in the ARM-CPU landscape.  We intend to use this as a
1.74      deraadt    86: development platform for something else we plan for the future...
                     87: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.94      david      88: Supporting an older, but very cool CPU architecture, perhaps the
                     89: most pure RISC CPU ever.
1.14      deraadt    90: </ul>
                     91: <p>
                     92:
1.35      otto       93: <li>Replacement of the GNU
1.12      otto       94: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
                     95: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4       deraadt    96: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
                     97: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1       deraadt    98: commands with BSD licensed equivalents.
                     99: <p>
                    100:
1.5       mcbride   101: <li>A large number of bug fixes, changes, and optimizations to our packet filter
                    102:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
                    103:     including:
                    104: <ul>
1.19      otto      105: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
                    106:     inconsistent state).
1.69      djm       107: <li>A 30% reduction in the size of state table entries.
1.19      otto      108: <li>Source-tracking (limit number of clients and states per client).
                    109: <li>Sticky-address (the flexibility of round-robin with the benefits of
                    110:     source-hash).
1.53      mcbride   111: <li>Invert the socket match order when redirecting to
1.34      avsm      112:     localhost (prevents the potential security problem of remote connections
1.19      otto      113:     being identified as local).
1.5       mcbride   114: <li>Significant improvements to interface handling.
                    115: </ul>
                    116: <p>
                    117:
1.53      mcbride   118: <li>New tools for filtering gateway failover:
1.5       mcbride   119: <ul>
                    120: <li>CARP (the Common Address Redundancy Protocol)
                    121:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
                    122:     allows multiple machines to share responsibility for a given IP address or
                    123:     addresses. If the owner of the address fails, another member of the group
                    124:     will take over for it. A discussion of the history of CARP can be found
1.62      deraadt   125:     <a href="lyrics.html">here</a>.
1.5       mcbride   126: <li>Additions to the
                    127:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
                    128:     interface allow it to synchronise state table entries between two or more
                    129:     firewalls which are operating in parallel, allowing stateful connections
                    130:     to cross any of the firewalls regardless of where the state was initially
                    131:     created.
                    132: </ul>
                    133: <p>
                    134:
1.6       todd      135: <li> New functionality:
                    136: <ul>
1.51      millert   137: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
1.6       todd      138: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
1.47      deraadt   139: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
                    140: As a result any process can now open a pty easily, meaning
                    141: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>
                    142: and
                    143: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xconsole&sektion=1">xconsole(1)</a>
                    144: are no longer setuid root.  (In 3.4 they were setuid root, but privilege revoking).
1.17      otto      145: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
                    146: system call has been added.
1.6       todd      147: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17      otto      148: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
1.70      djm       149: <li>Network boot support for i386 and amd64, using
                    150:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19      otto      151: <li>The i386 8GB boot loader limitation has been removed.
1.6       todd      152: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.52      beck      153: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
                    154: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80      tdeval    155: <li>Interface 'cloning', accessed by
1.6       todd      156: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19      otto      157: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82      tdeval    158: <li>
                    159: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
                    160: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47      deraadt   161: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
                    162: <li>Complete rewrite of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">package</a> tools in perl.
1.21      djm       163: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>
                    164: now supports logging to memory buffers, to be read using
                    165: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogc&sektion=8">syslogc(8)</a>.
1.47      deraadt   166: This is useful for diskless or flash-based computers.
1.34      avsm      167: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
1.33      otto      168: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">
1.79      tdeval    169: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33      otto      170: reads and writes.
1.43      beck      171: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">
                    172: authpf(8)</a> now tags traffic in
                    173: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">
                    174: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46      tedu      175: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.94      david     176: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpu&arch=i386">CPUs</a>,
1.91      henning   177: great for prolonged battery life.
1.48      beck      178: <li>XFS has been added to the GENERIC kernels so that
                    179: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)
                    180: </a> may be started easily, eliminating the need to recompile the kernel
1.49      deraadt   181: to use AFS.<br>
                    182: AFS can now be used anonymously by enabling it in
                    183: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48      beck      184: with no further configuration.
1.55      millert   185: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
1.51      millert   186: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
1.64      krw       187: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8"
                    188: >dhclient(8)</a> now detects when the interface it configured is modified and
                    189: gracefully exits.
                    190: e.g. repeatedly running it against the same interface leaves only the
                    191: last instance active.
1.6       todd      192: </ul>
                    193: <p>
                    194:
1.47      deraadt   195: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6       todd      196: <ul>
                    197: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
                    198: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.47      deraadt   199: (Previously privilege revoking, but this had a small breakage).
1.13      todd      200: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6       todd      201: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
                    202: </ul>
                    203: <p>
                    204:
                    205: <li> New tools:
                    206: <ul>
1.47      deraadt   207: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
                    208: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
                    209: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
1.10      deraadt   210: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
1.35      otto      211: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6       todd      212: </ul>
                    213: <p>
                    214:
1.23      henning   215: <li> Performance improvements:
                    216: <ul>
1.35      otto      217: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72      djm       218: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71      djm       219: <li>Implemented TCP adjustments recommended by
                    220:     <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
                    221:     controllable via
                    222:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl</a>.
1.23      henning   223: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42      henning   224:     des, 3des, rsa, dsa and bn.
1.77      tdeval    225: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
                    226:     provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.94      david     227:     CPU performing AES more than 10x faster than the fastest CPU currently sold).
1.45      tedu      228: <li>Directory hashing makes lookups in large directories much faster.
1.90      mcbride   229: <li>Zeroing pages with SSE. Faster operation, and avoids clobbering the cache.
1.23      henning   230: </ul>
                    231: <p>
                    232:
1.84      miod      233: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67      krw       234: <ul>
1.73      otto      235: <li>Bus probe made faster by skipping non-existent LUNs.
1.67      krw       236: <li>Bus probe made saner by elimination of spurious commands.
                    237: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81      krw       238: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67      krw       239: <li>SCSIDEBUG output can now be restricted to specified buses.
                    240: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
                    241: <li>Better error handling.
                    242: </ul>
                    243: <p>
                    244:
1.29      henning   245: <li>Improved hardware support, including:
                    246: <ul>
1.35      otto      247: <li>The <a href="/hppa.html">hppa</a> architecture gets support for many
1.29      henning   248:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
1.37      mickey    249:     based machines w/ addition of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
1.78      otto      250: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
1.55      millert   251: <li>Major improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
1.35      otto      252: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
                    253: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> driver for  LSI Fusion-MPT SCSI and FibreChannel host adapters.
1.39      henning   254: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snapper&amp;arch=macppc&amp;sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
1.44      millert   255: <li>Improved stability of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
                    256: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
1.61      marco     257: <li>Fixed several firmware incompatibility issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
1.68      grange    258: <li>Improved ATA and SATA support.
1.50      mickey    259: <li>Support for i835 AGP GART in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>.
1.54      marco     260: <li>Improved Gigabit Ethernet support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> &  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>.
1.66      marco     261: <li>Several fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>.
1.63      marco     262: <li>Support for Intel 852/855/865 AGP chipsets.
1.67      krw       263: <li>Many more USB Flash and other
                    264: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29      henning   265: </ul>
1.20      otto      266: <p>
                    267:
1.57      marco     268: <li> This release ships with Firefox for all major architectures.
                    269: <p>
                    270:
1.58      marco     271: <li> Major improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.
                    272: <p>
                    273:
1.18      sturm     274: <li> Over 2500 ports, 2300 pre-built packages.
                    275: <p>
                    276:
1.7       todd      277: <li>Many improvements for security and reliability (look for the red
1.88      deraadt   278: print in the <a href="plus35.html">complete changelog</a>).
1.7       todd      279: <p>
                    280:
1.19      otto      281: <li>Many improvements in manual pages and other documentation.
                    282: <p>
                    283:
1.40      tdeval    284: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62      deraadt   285: <a href="amd64.html">OpenBSD/amd64</a>,
                    286: <a href="cats.html">OpenBSD/cats</a> and
                    287: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28      henning   288: platforms.
                    289: Other architectures still use gcc 2.95.3 with the same local additions.
                    290: <p>
1.75      markus    291: <li>OpenSSH 3.8.1:
                    292: <ul>
                    293: <li>
                    294: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
                    295: now supports forced changes of expired passwords via
                    296: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
                    297: <li>
                    298: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    299: now uses untrusted cookies for X11-Forwarding.
                    300: Some X11 applications might need full access to the X11 server,
                    301: see ForwardX11Trusted in
1.76      djm       302: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75      markus    303: and
                    304: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a>.
                    305: <li>
                    306: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    307: now supports sending application layer
                    308: keep-alive messages to the server.  See ServerAliveInterval in
1.76      djm       309: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75      markus    310: <li> Improved
                    311: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
                    312: batch file support.
                    313: <li> New KerberosGetAFSToken option for
                    314: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
                    315: <li> Updated /etc/moduli file and improved performance for
                    316: protocol version 2.
                    317: <li> Support for host keys in DNS.
                    318: <li> The experimental "gssapi" support has been replaced with
                    319: the "gssapi-with-mic" to fix possible MITM attacks.
                    320: The two versions are not compatible.
                    321: </ul>
                    322: <p>
1.28      henning   323:
                    324: <li>The system includes the following major components from outside suppliers:
                    325: <ul>
                    326: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
                    327:     providing support for all chipsets)
1.40      tdeval    328: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28      henning   329: <li>Perl 5.8.2 (+ patches)
                    330: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    331: <li>OpenSSL 0.9.7c (+ patches)
                    332: <li>Groff 1.15
                    333: <li>Sendmail 8.12.11
                    334: <li>Bind 9.2.3 (+ patches)
                    335: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
                    336: <li>Sudo 1.6.7p5
                    337: <li>Ncurses 5.2
                    338: <li>Latest KAME IPv6
                    339: <li>Heimdal 0.6rc1 (+ patches)
                    340: <li>Arla-current
                    341: </ul>
                    342: <p>
1.1       deraadt   343:
                    344: </ul>
                    345:
                    346: <a name="install"></a>
                    347: <hr>
                    348: <p>
                    349: <h3><font color="#0000e0">How to install</font></h3>
                    350: <p>
                    351: Following this are the instructions which you would have on a piece of
                    352: paper if you had purchased a CDROM set instead of doing an alternate
                    353: form of install.  The instructions for doing an ftp (or other style
                    354: of) install are very similar; the CDROM instructions are left intact
                    355: so that you can see how much easier it would have been if you had
                    356: purchased a CDROM instead.
                    357: <p>
                    358:
                    359: <hr>
                    360: Please refer to the following files on the three CDROMs or ftp mirror for
                    361: extensive details on how to install OpenBSD 3.5 on your machine:
                    362: <p>
                    363: <ul>
                    364: <li>CD1:3.5/i386/INSTALL.i386
1.2       deraadt   365: <li>CD1:3.5/vax/INSTALL.vax
1.1       deraadt   366: <p>
1.2       deraadt   367: <li>CD2:3.5/amd64/INSTALL.amd64
1.1       deraadt   368: <li>CD2:3.5/macppc/INSTALL.macppc
                    369: <p>
                    370: <li>CD3:3.5/sparc/INSTALL.sparc
                    371: <li>CD3:3.5/sparc64/INSTALL.sparc64
                    372: <p>
                    373: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27      miod      374: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1       deraadt   375: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
                    376: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
                    377: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
                    378: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2       deraadt   379: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1       deraadt   380: </ul>
                    381: <hr>
                    382:
                    383: <p>
                    384: Quick installer information for people familiar with OpenBSD, and the
                    385: use of the "disklabel -E" command.  If you are at all confused when
                    386: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    387: <p>
                    388:
                    389: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    390: <ul>
                    391: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    392: release is on CD1. If your BIOS does not support booting from CD, you will need
                    393: to create a boot floppy to install from. To create a boot floppy write
1.2       deraadt   394: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1       deraadt   395:
                    396: <p>
1.2       deraadt   397: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
                    398: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1       deraadt   399:
                    400: <p>
1.83      tom       401: If you can't boot from a CD or a floppy disk,
                    402: you can install across the network using PXE as described in
                    403: the included INSTALL.i386 document.
                    404:
                    405: <p>
1.1       deraadt   406: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83      tom       407: read INSTALL.i386.
1.1       deraadt   408:
                    409: <p>
                    410: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
1.83      tom       411: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.1       deraadt   412: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
                    413: dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
                    414: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)
                    415: </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    416: &quot;rfd0a&quot;.
                    417:
                    418: <ul><pre>
                    419: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    420: </pre></ul>
                    421:
                    422: <p>
                    423: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    424: your install will most likely fail. For more information on creating a boot
                    425: floppy and installing OpenBSD/i386 please refer to
                    426: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
                    427: </ul>
                    428:
                    429: <p>
1.84      miod      430: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1       deraadt   431: <ul>
1.84      miod      432: Boot over the network via mopbooting as described in INSTALL.vax.
1.1       deraadt   433: </ul>
                    434:
                    435: <p>
1.2       deraadt   436: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    437: <ul>
1.84      miod      438: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83      tom       439: Boot from the CD to begin the install - you may need to adjust
                    440: your BIOS options first.
                    441: If you can't boot from the CD, you can create a boot floppy to install from.
1.85      tom       442: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83      tom       443: boot from the floppy drive.
                    444:
                    445: <p>
                    446: If you can't boot from a CD or a floppy disk,
                    447: you can install across the network using PXE as described in the included
                    448: INSTALL.amd64 document.
                    449:
                    450: <p>
                    451: If you are planning to dual boot OpenBSD with another OS, you will need to
                    452: read INSTALL.amd64.
1.2       deraadt   453: </ul>
                    454:
                    455: <p>
1.84      miod      456: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1       deraadt   457: <ul>
1.84      miod      458: Put the CD2 in your CDROM drive and poweron your machine while holding down the
                    459: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    460:
                    461: <p>
                    462: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    463: /3.5/macppc/bsd.rd</i>
1.1       deraadt   464: </ul>
                    465:
                    466: <p>
                    467: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    468: <ul>
                    469: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    470: can use one of the two commands listed below, depending on the version of your
                    471: ROM.
                    472:
                    473: <ul><pre>
1.86      miod      474: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1       deraadt   475: or
1.86      miod      476: &gt; <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1       deraadt   477: </pre></ul>
                    478:
                    479: <p>
                    480: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84      miod      481: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1       deraadt   482: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
                    483: the floppy use one of the two commands listed below, depending on the version of
                    484: your ROM.
                    485:
                    486: <ul><pre>
1.86      miod      487: ok <strong>boot floppy</strong>
1.1       deraadt   488: or
1.95      miod      489: &gt; <strong>boot fd()</strong>
1.1       deraadt   490: </pre></ul>
                    491:
                    492: <p>
                    493: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    494: will most likely fail.
                    495:
                    496: <p>
                    497: If your sparc doesn't have a floppy drive nor a CD drive, you can either
                    498: setup a bootable tape, or install via network, as told in the
                    499: INSTALL.sparc file.
                    500: </ul>
                    501:
                    502: <p>
                    503: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    504: <ul>
                    505: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    506:
                    507: <p>
                    508: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2       deraadt   509: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1       deraadt   510: floppy</i>.<br>
                    511: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    512: will most likely fail.
                    513:
                    514: <p>
1.2       deraadt   515: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1       deraadt   516: the disk and boot with <i>boot disk:b</i>.
                    517:
                    518: <p>
                    519: If nothing works, you can boot over the network as described in INSTALL.sparc64
                    520: </ul>
                    521:
                    522: <p>
                    523: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    524: <ul>
1.2       deraadt   525: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
                    526: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1       deraadt   527: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    528:
                    529: <p>
                    530: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    531: will most likely fail.
                    532:
                    533: </ul>
                    534:
                    535: <p>
1.87      miod      536: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    537: <ul>
                    538: <p>
                    539: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    540: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    541: or an existing FFS or EXT2FS partition).
                    542: </ul>
                    543:
                    544: <p>
1.1       deraadt   545: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    546: <ul>
                    547: <p>
                    548: Boot over the network by following the instructions in INSTALL.hp300.
                    549: </ul>
                    550:
                    551: <p>
                    552: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    553: <ul>
                    554: <p>
                    555: Boot over the network by following the instructions in INSTALL.hppa or the
                    556: <a href="hppa.html#netboot">hppa platform page</a>.
                    557: </ul>
                    558:
                    559: <p>
                    560: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    561: <ul>
                    562: <p>
                    563: Boot MacOS as normal and partition your disk with the appropriate A/UX
                    564: configurations.  Then, extract the Macside utilities from
                    565: <i>FTP:3.5/mac68k/utils</i> onto your hard disk.  Run Mkfs to create your
                    566: filesystems on the A/UX partitions you just made.  Then, use the
                    567: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
                    568: partitions.  Finally, you will be ready to configure the "BSD/Mac68k
                    569: Booter" with the location of your kernel and boot the system.
                    570: </ul>
                    571:
                    572: <p>
                    573: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    574: <ul>
                    575: <p>
                    576: You can create a bootable installation tape or boot over the network.<br>
                    577: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    578: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    579: for more details.
                    580: </ul>
                    581:
                    582: <p>
1.2       deraadt   583: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    584: <ul>
                    585: <p>
                    586: You can create a bootable installation tape or boot over the network.<br>
                    587: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    588: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    589: for more details.
                    590: </ul>
                    591:
                    592: <p>
1.1       deraadt   593: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    594: <ul>
                    595: src.tar.gz contains a source archive starting at /usr/src.  This file
                    596: contains everything you need except for the kernel sources, which are
                    597: in a separate archive.  To extract:
                    598: <p>
                    599: <ul><pre>
                    600: # <strong>mkdir -p /usr/src</strong>
                    601: # <strong>cd /usr/src</strong>
                    602: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    603: </pre></ul>
                    604: <p>
                    605: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    606: This file contains all the kernel sources you need to rebuild kernels.
                    607: To extract:
                    608: <p>
                    609: <ul><pre>
                    610: # <strong>mkdir -p /usr/src/sys</strong>
                    611: # <strong>cd /usr/src</strong>
                    612: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    613: </pre></ul>
                    614: <p>
                    615: Both of these trees are a regular CVS checkout.  Using these trees it
                    616: is possible to get a head-start on using the anoncvs servers as
                    617: described <a href="anoncvs.html">here</a>.
                    618: Using these files
                    619: results in a much faster initial CVS update than you could expect from
                    620: a fresh checkout of the full OpenBSD source tree.
                    621: <p>
                    622: </ul>
                    623: <a name="ports"></a>
                    624: <hr>
                    625: <p>
                    626: <h3><font color="#0000e0">Ports Tree</font></h3>
                    627: <p>
                    628: A ports tree archive is also provided.  To extract:
                    629: <p>
                    630: <ul><pre>
                    631: # <strong>cd /usr</strong>
                    632: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    633: # <strong>cd ports</strong>
                    634: </pre></ul>
                    635: <p>
                    636: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    637: read the <a href="ports.html">ports</a> page
                    638: if you know nothing about ports
                    639: at this point.  This text is not a manual of how to use ports.
                    640: Rather, it is a set of notes meant to kickstart the user on the
                    641: OpenBSD ports system.
                    642: <p>
                    643: The <i>ports/</i> directory represents a CVS (see the manpage for
                    644: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    645: cvs(1)</a> if
                    646: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    647: source tree, our ports tree is available via anoncvs.  So, in
                    648: order to keep current with it, you must make the <i>ports/</i> tree
                    649: available on a read-write medium and update the tree with a command
                    650: like:
                    651: <p>
                    652: <ul><pre>
1.96    ! deraadt   653: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1       deraadt   654: </pre></ul>
                    655: <p>
                    656: [Of course, you must replace the local directory and server name here
                    657: with the location of your ports collection and a nearby anoncvs
                    658: server.]
                    659: <p>
                    660: Note that most ports are available as packages through ftp. Updated
                    661: packages for the 3.5 release will be made available if problems arise.
                    662: <p>
                    663: If you're interested in seeing a port added, would like to help out, or just
                    664: would like to know more, the mailing list ports@openbsd.org is a good
                    665: place to know.
                    666: <p>
                    667:
                    668: <hr>
                    669: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    670: alt="OpenBSD"></a>
                    671: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
                    672: <br><small>
1.96    ! deraadt   673: $OpenBSD: 35.html,v 1.95 2005/08/27 18:23:47 miod Exp $
1.1       deraadt   674: </small>
                    675:
                    676: </body>
                    677: </html>