[BACK]Return to 35.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/35.html, Revision 1.99

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 3.5 Release</title>
                      5: <meta name="resource-type" content="document">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      7: <meta name="description" content="OpenBSD 3.5">
                      8: <meta name="keywords" content="openbsd,main">
                      9: <meta name="distribution" content="global">
1.25      miod       10: <meta name="copyright" content="This document copyright 2004 by OpenBSD.">
1.1       deraadt    11: </head>
                     12:
                     13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     14:
                     15: <a href="index.html">
                     16: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     17: <hr>
                     18:
                     19: <p>
                     20: <a href="images/Carp.gif">
                     21: <img align="left" width="255" height="343" hspace="24" vspace="30"
                     22: src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a>
                     23: <h2><font color="#0000e0">The OpenBSD 3.5 Release:</font></h2>
                     24: <p>
                     25: Released May 1, 2004<br>
                     26: Copyright 1997-2004, Theo de Raadt.<br>
1.89      wvdputte   27: <font color="#e00000">ISBN 0-9731791-3-9</font>
1.93      deraadt    28: <br>
                     29: <a href="lyrics.html#35">3.5 Song: "CARP License" and "Redundancy must be free"</a>
1.1       deraadt    30: <p>
                     31:
                     32: <a href="#new">What's New</a><br>
                     33: <a href="#install">How to install</a><br>
                     34: <a href="#ports">How to use the ports tree</a><br>
                     35: <a href="orders.html">Ordering a CD set</a><br>
                     36:
                     37: <p>
                     38: <h3><font color="#0000e0">
                     39: To get the files for this release:
                     40: <ul>
                     41: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     42: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     43:     a list of mirror machines.
                     44: <li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on
                     45:     one of the mirror sites.
                     46: <li>Briefly read the rest of this document.
1.92      miod       47: <li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list
1.1       deraadt    48:     of bugs and workarounds.
1.88      deraadt    49: <li>See a <a href="plus35.html">detailed log of changes</a> between the
1.1       deraadt    50:     3.4 and 3.5 releases.
                     51: </ul>
                     52: </font></h3>
                     53: <br clear=all>
                     54:
                     55: <strong>Note:</strong> All applicable copyrights and credits can be found
                     56: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
                     57: XF4.tar.gz, or in the files fetched via ports.tar.gz.  The distribution
                     58: files used to build packages from the ports.tar.gz file are not included on
                     59: the CDROM because of lack of space.
                     60: <p>
                     61:
                     62: <a name="new"></a>
                     63: <hr>
                     64: <p>
                     65: <h3><font color="#0000e0">What's New</font></h3>
                     66: <p>
                     67: This is a partial list of new features and systems included in OpenBSD 3.5.
1.88      deraadt    68: For a comprehensive list, see the <a href="plus35.html">changelog</a> leading
1.1       deraadt    69: to 3.5.
                     70: <p>
                     71:
                     72: <ul>
                     73:
1.14      deraadt    74: <li> New platforms:
                     75: <ul>
1.74      deraadt    76: <li><a href="amd64.html">OpenBSD/amd64</a><br>
                     77: Supporting the AMD64 architecture natively,
                     78: with full 64-bit support, 8 extra registers in the architecture
                     79: to significantly increase performance, and a memory management
                     80: Non-Executable bit that permits full W^X support.<br>
1.94      david      81: (Note: The upcoming Intel "ia32e" AMD64-compatible CPUs have also
1.74      deraadt    82: been tested, and work, even though they lack the NX bit).
                     83: <li><a href="cats.html">OpenBSD/cats</a><br>
1.94      david      84: Our first entry in the ARM-CPU landscape.  We intend to use this as a
1.74      deraadt    85: development platform for something else we plan for the future...
                     86: <li><a href="mvme88k.html">OpenBSD/mvme88k</a><br>
1.94      david      87: Supporting an older, but very cool CPU architecture, perhaps the
                     88: most pure RISC CPU ever.
1.14      deraadt    89: </ul>
                     90: <p>
                     91:
1.35      otto       92: <li>Replacement of the GNU
1.12      otto       93: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bc">bc(1)</a>,
                     94: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc">dc(1)</a>,
1.4       deraadt    95: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nm">nm(1)</a> and
                     96: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=size">size(1)</a>
1.1       deraadt    97: commands with BSD licensed equivalents.
                     98: <p>
                     99:
1.5       mcbride   100: <li>A large number of bug fixes, changes, and optimizations to our packet filter
                    101:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf">pf(4)</a>
                    102:     including:
                    103: <ul>
1.19      otto      104: <li>Atomic commits of ruleset changes (reduce the chance of ending up in an
                    105:     inconsistent state).
1.69      djm       106: <li>A 30% reduction in the size of state table entries.
1.19      otto      107: <li>Source-tracking (limit number of clients and states per client).
                    108: <li>Sticky-address (the flexibility of round-robin with the benefits of
                    109:     source-hash).
1.53      mcbride   110: <li>Invert the socket match order when redirecting to
1.34      avsm      111:     localhost (prevents the potential security problem of remote connections
1.19      otto      112:     being identified as local).
1.5       mcbride   113: <li>Significant improvements to interface handling.
                    114: </ul>
                    115: <p>
                    116:
1.53      mcbride   117: <li>New tools for filtering gateway failover:
1.5       mcbride   118: <ul>
                    119: <li>CARP (the Common Address Redundancy Protocol)
                    120:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp">carp(4)</a>
                    121:     allows multiple machines to share responsibility for a given IP address or
                    122:     addresses. If the owner of the address fails, another member of the group
                    123:     will take over for it. A discussion of the history of CARP can be found
1.62      deraadt   124:     <a href="lyrics.html">here</a>.
1.5       mcbride   125: <li>Additions to the
                    126:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync">pfsync(4)</a>
                    127:     interface allow it to synchronise state table entries between two or more
                    128:     firewalls which are operating in parallel, allowing stateful connections
                    129:     to cross any of the firewalls regardless of where the state was initially
                    130:     created.
                    131: </ul>
                    132: <p>
                    133:
1.6       todd      134: <li> New functionality:
                    135: <ul>
1.51      millert   136: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit.
1.6       todd      137: <li>New ptm device (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pty&sektion=4">pty(4)</a>)
1.47      deraadt   138: that allows non-privileged processes to allocate a properly-permissioned pty.<br>
                    139: As a result any process can now open a pty easily, meaning
                    140: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xterm&sektion=1">xterm(1)</a>
                    141: and
                    142: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xconsole&sektion=1">xconsole(1)</a>
                    143: are no longer setuid root.  (In 3.4 they were setuid root, but privilege revoking).
1.17      otto      144: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=closefrom&sektion=2">closefrom(2)</a>
                    145: system call has been added.
1.6       todd      146: <li>TCP MD5 signatures (used by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nc&sektion=1">nc(1)</a>
1.17      otto      147: and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>).
1.70      djm       148: <li>Network boot support for i386 and amd64, using
                    149:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>.
1.19      otto      150: <li>The i386 8GB boot loader limitation has been removed.
1.6       todd      151: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&sektion=8">spamd(8)</a>
1.52      beck      152: gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be
                    153: done on a firewall for many mail hosts, no matter what MTA is being used.
1.80      tdeval    154: <li>Interface 'cloning', accessed by
1.6       todd      155: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
1.19      otto      156: commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'.
1.82      tdeval    157: <li>
                    158: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>
                    159: can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'.
1.47      deraadt   160: <li>The MAKEDEV(8) manual pages are now generated, and hence, accurate.
                    161: <li>Complete rewrite of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">package</a> tools in perl.
1.21      djm       162: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&sektion=8">syslogd(8)</a>
                    163: now supports logging to memory buffers, to be read using
                    164: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogc&sektion=8">syslogc(8)</a>.
1.47      deraadt   165: This is useful for diskless or flash-based computers.
1.34      avsm      166: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation.
1.33      otto      167: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">
1.79      tdeval    168: malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds
1.33      otto      169: reads and writes.
1.43      beck      170: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8">
                    171: authpf(8)</a> now tags traffic in
                    172: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&sektion=4">
                    173: pflog(4)</A> so that users may be associated with traffic through a NAT setup.
1.46      tedu      174: <li>hw.setperf sysctl allows controlling the speed of many new i386
1.94      david     175: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cpu&arch=i386">CPUs</a>,
1.91      henning   176: great for prolonged battery life.
1.48      beck      177: <li>XFS has been added to the GENERIC kernels so that
                    178: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=afsd&sektion=8">afsd(8)
                    179: </a> may be started easily, eliminating the need to recompile the kernel
1.49      deraadt   180: to use AFS.<br>
                    181: AFS can now be used anonymously by enabling it in
                    182: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rc.conf&sektion=8">rc.conf(8)</a>
1.48      beck      183: with no further configuration.
1.55      millert   184: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ps&sektion=1">ps</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=top&sektion=1">top</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures.
1.51      millert   185: <li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> interface has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=poll&sektion=2">poll</a> over <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors.
1.64      krw       186: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&sektion=8"
                    187: >dhclient(8)</a> now detects when the interface it configured is modified and
                    188: gracefully exits.
                    189: e.g. repeatedly running it against the same interface leaves only the
                    190: last instance active.
1.6       todd      191: </ul>
                    192: <p>
                    193:
1.47      deraadt   194: <li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes:
1.6       todd      195: <ul>
                    196: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&sektion=8">isakmpd(8)</a>
                    197: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=named&sektion=8">named(8)</a>
1.47      deraadt   198: (Previously privilege revoking, but this had a small breakage).
1.13      todd      199: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&sektion=8">pflogd(8)</a>
1.6       todd      200: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8">tcpdump(8)</a>
                    201: </ul>
                    202: <p>
                    203:
                    204: <li> New tools:
                    205: <ul>
1.47      deraadt   206: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors.
                    207: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map.
                    208: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="http://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol.
1.10      deraadt   209: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkill&sektion=1">pkill(1)</a> and
1.35      otto      210: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name.
1.6       todd      211: </ul>
                    212: <p>
                    213:
1.23      henning   214: <li> Performance improvements:
                    215: <ul>
1.35      otto      216: <li>Improved connection/socket lookup - about 100 times faster at 10000 sockets than 3.4.
1.72      djm       217: <li>TCP SYN cache. Greatly reduces the memory cost of half-open TCP connections.
1.71      djm       218: <li>Implemented TCP adjustments recommended by
                    219:     <a href="http://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>,
                    220:     controllable via
                    221:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8">sysctl</a>.
1.23      henning   222: <li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish,
1.42      henning   223:     des, 3des, rsa, dsa and bn.
1.77      tdeval    224: <li>OpenSSL now directly uses the new AES instructions some VIA C3 processors
                    225:     provide, increasing AES to 780MBytes/second (so you get to see a fan-less
1.94      david     226:     CPU performing AES more than 10x faster than the fastest CPU currently sold).
1.45      tedu      227: <li>Directory hashing makes lookups in large directories much faster.
1.90      mcbride   228: <li>Zeroing pages with SSE. Faster operation, and avoids clobbering the cache.
1.23      henning   229: </ul>
                    230: <p>
                    231:
1.84      miod      232: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&sektion=4">SCSI(4)</a> improvements:
1.67      krw       233: <ul>
1.73      otto      234: <li>Bus probe made faster by skipping non-existent LUNs.
1.67      krw       235: <li>Bus probe made saner by elimination of spurious commands.
                    236: <li>Bus probe made safer by having INQUIRY commands ask only for available data.
1.81      krw       237: <li>Eliminated a race that, e.g., caused problems burning CDs at high speeds.
1.67      krw       238: <li>SCSIDEBUG output can now be restricted to specified buses.
                    239: <li>ASC/ASCQ diagnostic messages updated to SCSI-3 standards.
                    240: <li>Better error handling.
                    241: </ul>
                    242: <p>
                    243:
1.29      henning   244: <li>Improved hardware support, including:
                    245: <ul>
1.97      deraadt   246: <li>The <a href="hppa.html">hppa</a> architecture gets support for many
1.29      henning   247:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pci">PCI</a>
1.37      mickey    248:     based machines w/ addition of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge.
1.78      otto      249: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters.
1.55      millert   250: <li>Major improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models.
1.35      otto      251: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset.
                    252: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&sektion=4">mpt(4)</a> driver for  LSI Fusion-MPT SCSI and FibreChannel host adapters.
1.39      henning   253: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=snapper&amp;arch=macppc&amp;sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models.
1.44      millert   254: <li>Improved stability of the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP.
                    255: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions.
1.61      marco     256: <li>Fixed several firmware incompatibility issues in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=an&sektion=4">an(4)</a>.
1.68      grange    257: <li>Improved ATA and SATA support.
1.50      mickey    258: <li>Support for i835 AGP GART in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vga&sektion=4">vga(4)</a>.
1.54      marco     259: <li>Improved Gigabit Ethernet support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&sektion=4">em(4)</a>,  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sk&sektion=4">sk(4)</a> &  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&sektion=4">bge(4)</a>.
1.66      marco     260: <li>Several fixes for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apm&sektion=4">apm(4)</a>.
1.63      marco     261: <li>Support for Intel 852/855/865 AGP chipsets.
1.67      krw       262: <li>Many more USB Flash and other
                    263: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements.
1.29      henning   264: </ul>
1.20      otto      265: <p>
                    266:
1.57      marco     267: <li> This release ships with Firefox for all major architectures.
                    268: <p>
                    269:
1.58      marco     270: <li> Major improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.
                    271: <p>
                    272:
1.18      sturm     273: <li> Over 2500 ports, 2300 pre-built packages.
                    274: <p>
                    275:
1.7       todd      276: <li>Many improvements for security and reliability (look for the red
1.88      deraadt   277: print in the <a href="plus35.html">complete changelog</a>).
1.7       todd      278: <p>
                    279:
1.19      otto      280: <li>Many improvements in manual pages and other documentation.
                    281: <p>
                    282:
1.40      tdeval    283: <li>Gcc 3.3.2, including local additions like ProPolice support, for the
1.62      deraadt   284: <a href="amd64.html">OpenBSD/amd64</a>,
                    285: <a href="cats.html">OpenBSD/cats</a> and
                    286: <a href="sparc64.html">OpenBSD/sparc64</a>
1.28      henning   287: platforms.
                    288: Other architectures still use gcc 2.95.3 with the same local additions.
                    289: <p>
1.75      markus    290: <li>OpenSSH 3.8.1:
                    291: <ul>
                    292: <li>
                    293: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>
                    294: now supports forced changes of expired passwords via
                    295: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a>.
                    296: <li>
                    297: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    298: now uses untrusted cookies for X11-Forwarding.
                    299: Some X11 applications might need full access to the X11 server,
                    300: see ForwardX11Trusted in
1.76      djm       301: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>
1.75      markus    302: and
                    303: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xauth&sektion=1">xauth(1)</a>.
                    304: <li>
                    305: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>
                    306: now supports sending application layer
                    307: keep-alive messages to the server.  See ServerAliveInterval in
1.76      djm       308: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&sektion=5">ssh_config(5)</a>.
1.75      markus    309: <li> Improved
                    310: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&sektion=1">sftp(1)</a>
                    311: batch file support.
                    312: <li> New KerberosGetAFSToken option for
                    313: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.
                    314: <li> Updated /etc/moduli file and improved performance for
                    315: protocol version 2.
                    316: <li> Support for host keys in DNS.
                    317: <li> The experimental "gssapi" support has been replaced with
                    318: the "gssapi-with-mic" to fix possible MITM attacks.
                    319: The two versions are not compatible.
                    320: </ul>
                    321: <p>
1.28      henning   322:
                    323: <li>The system includes the following major components from outside suppliers:
                    324: <ul>
                    325: <li>XFree86 4.4.0 unencumbered (+ patches, and i386 contains 3.3.X servers also, thus
                    326:     providing support for all chipsets)
1.40      tdeval    327: <li>Gcc 2.95.3 (+ patches) and 3.3.2 (+ patches)
1.28      henning   328: <li>Perl 5.8.2 (+ patches)
                    329: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    330: <li>OpenSSL 0.9.7c (+ patches)
                    331: <li>Groff 1.15
                    332: <li>Sendmail 8.12.11
                    333: <li>Bind 9.2.3 (+ patches)
                    334: <li>Lynx 2.8.4rel.1 with HTTPS and IPv6 support (+ patches)
                    335: <li>Sudo 1.6.7p5
                    336: <li>Ncurses 5.2
                    337: <li>Latest KAME IPv6
                    338: <li>Heimdal 0.6rc1 (+ patches)
                    339: <li>Arla-current
                    340: </ul>
                    341: <p>
1.1       deraadt   342:
                    343: </ul>
                    344:
                    345: <a name="install"></a>
                    346: <hr>
                    347: <p>
                    348: <h3><font color="#0000e0">How to install</font></h3>
                    349: <p>
                    350: Following this are the instructions which you would have on a piece of
                    351: paper if you had purchased a CDROM set instead of doing an alternate
                    352: form of install.  The instructions for doing an ftp (or other style
                    353: of) install are very similar; the CDROM instructions are left intact
                    354: so that you can see how much easier it would have been if you had
                    355: purchased a CDROM instead.
                    356: <p>
                    357:
                    358: <hr>
                    359: Please refer to the following files on the three CDROMs or ftp mirror for
                    360: extensive details on how to install OpenBSD 3.5 on your machine:
                    361: <p>
                    362: <ul>
                    363: <li>CD1:3.5/i386/INSTALL.i386
1.2       deraadt   364: <li>CD1:3.5/vax/INSTALL.vax
1.1       deraadt   365: <p>
1.2       deraadt   366: <li>CD2:3.5/amd64/INSTALL.amd64
1.1       deraadt   367: <li>CD2:3.5/macppc/INSTALL.macppc
                    368: <p>
                    369: <li>CD3:3.5/sparc/INSTALL.sparc
                    370: <li>CD3:3.5/sparc64/INSTALL.sparc64
                    371: <p>
                    372: <li>FTP:.../OpenBSD/3.5/alpha/INSTALL.alpha
1.27      miod      373: <li>FTP:.../OpenBSD/3.5/cats/INSTALL.cats
1.1       deraadt   374: <li>FTP:.../OpenBSD/3.5/hp300/INSTALL.hp300
                    375: <li>FTP:.../OpenBSD/3.5/hppa/INSTALL.hppa
                    376: <li>FTP:.../OpenBSD/3.5/mac68k/INSTALL.mac68k
                    377: <li>FTP:.../OpenBSD/3.5/mvme68k/INSTALL.mvme68k
1.2       deraadt   378: <li>FTP:.../OpenBSD/3.5/mvme88k/INSTALL.mvme88k
1.1       deraadt   379: </ul>
                    380: <hr>
                    381:
                    382: <p>
                    383: Quick installer information for people familiar with OpenBSD, and the
                    384: use of the "disklabel -E" command.  If you are at all confused when
                    385: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    386: <p>
                    387:
                    388: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    389: <ul>
                    390: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    391: release is on CD1. If your BIOS does not support booting from CD, you will need
                    392: to create a boot floppy to install from. To create a boot floppy write
1.2       deraadt   393: <i>CD1:3.5/i386/floppy35.fs</i> to a floppy and boot via the floppy drive.
1.1       deraadt   394:
                    395: <p>
1.2       deraadt   396: Use <i>CD1:3.5/i386/floppyB35.fs</i> instead for greater scsi controller
                    397: support, or <i>CD1:3.5/i386/floppyC35.fs</i> for better laptop support.
1.1       deraadt   398:
                    399: <p>
1.83      tom       400: If you can't boot from a CD or a floppy disk,
                    401: you can install across the network using PXE as described in
                    402: the included INSTALL.i386 document.
                    403:
                    404: <p>
1.1       deraadt   405: If you are planning on dual booting OpenBSD with another OS, you will need to
1.83      tom       406: read INSTALL.i386.
1.1       deraadt   407:
                    408: <p>
                    409: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
1.83      tom       410: at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
1.1       deraadt   411: use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=
                    412: dd&amp;sektion=1">dd(1)</a> utility. The following is an example usage of
                    413: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)
                    414: </a>, where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    415: &quot;rfd0a&quot;.
                    416:
                    417: <ul><pre>
                    418: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    419: </pre></ul>
                    420:
                    421: <p>
                    422: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    423: your install will most likely fail. For more information on creating a boot
                    424: floppy and installing OpenBSD/i386 please refer to
                    425: <a href="faq/faq4.html#MkFlop">FAQ4.1</a>.
                    426: </ul>
                    427:
                    428: <p>
1.84      miod      429: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
1.1       deraadt   430: <ul>
1.84      miod      431: Boot over the network via mopbooting as described in INSTALL.vax.
1.1       deraadt   432: </ul>
                    433:
                    434: <p>
1.2       deraadt   435: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    436: <ul>
1.84      miod      437: The 3.5 release of OpenBSD/amd64 is located on CD2.
1.83      tom       438: Boot from the CD to begin the install - you may need to adjust
                    439: your BIOS options first.
                    440: If you can't boot from the CD, you can create a boot floppy to install from.
1.85      tom       441: To do this, write <i>CD2:3.5/amd64/floppy35.fs</i> to a floppy, then
1.83      tom       442: boot from the floppy drive.
                    443:
                    444: <p>
                    445: If you can't boot from a CD or a floppy disk,
                    446: you can install across the network using PXE as described in the included
                    447: INSTALL.amd64 document.
                    448:
                    449: <p>
                    450: If you are planning to dual boot OpenBSD with another OS, you will need to
                    451: read INSTALL.amd64.
1.2       deraadt   452: </ul>
                    453:
                    454: <p>
1.84      miod      455: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
1.1       deraadt   456: <ul>
1.84      miod      457: Put the CD2 in your CDROM drive and poweron your machine while holding down the
                    458: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    459:
                    460: <p>
                    461: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    462: /3.5/macppc/bsd.rd</i>
1.1       deraadt   463: </ul>
                    464:
                    465: <p>
                    466: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    467: <ul>
                    468: The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    469: can use one of the two commands listed below, depending on the version of your
                    470: ROM.
                    471:
                    472: <ul><pre>
1.86      miod      473: ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong>
1.1       deraadt   474: or
1.86      miod      475: &gt; <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong>
1.1       deraadt   476: </pre></ul>
                    477:
                    478: <p>
                    479: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.84      miod      480: To do so you need to write <i>CD3:3.5/sparc/floppy35.fs</i> to a floppy.
1.1       deraadt   481: For more information see <a href="faq/faq4.html#MkFlop">FAQ4.1</a>. To boot from
                    482: the floppy use one of the two commands listed below, depending on the version of
                    483: your ROM.
                    484:
                    485: <ul><pre>
1.86      miod      486: ok <strong>boot floppy</strong>
1.1       deraadt   487: or
1.95      miod      488: &gt; <strong>boot fd()</strong>
1.1       deraadt   489: </pre></ul>
                    490:
                    491: <p>
                    492: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    493: will most likely fail.
                    494:
                    495: <p>
                    496: If your sparc doesn't have a floppy drive nor a CD drive, you can either
                    497: setup a bootable tape, or install via network, as told in the
                    498: INSTALL.sparc file.
                    499: </ul>
                    500:
                    501: <p>
                    502: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    503: <ul>
                    504: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    505:
                    506: <p>
                    507: If this doesn't work, or if you don't have a CDROM drive, you can write
1.2       deraadt   508: <i>CD3:3.5/sparc64/floppy35.fs</i> to a floppy and boot it with <i>boot
1.1       deraadt   509: floppy</i>.<br>
                    510: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    511: will most likely fail.
                    512:
                    513: <p>
1.2       deraadt   514: You can also write <i>CD3:3.5/sparc64/miniroot35.fs</i> to the swap partition on
1.1       deraadt   515: the disk and boot with <i>boot disk:b</i>.
                    516:
                    517: <p>
                    518: If nothing works, you can boot over the network as described in INSTALL.sparc64
                    519: </ul>
                    520:
                    521: <p>
                    522: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    523: <ul>
1.2       deraadt   524: <p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or
                    525: <i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and
1.1       deraadt   526: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    527:
                    528: <p>
                    529: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    530: will most likely fail.
                    531:
                    532: </ul>
                    533:
                    534: <p>
1.87      miod      535: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    536: <ul>
                    537: <p>
                    538: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    539: <i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    540: or an existing FFS or EXT2FS partition).
                    541: </ul>
                    542:
                    543: <p>
1.1       deraadt   544: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    545: <ul>
                    546: <p>
                    547: Boot over the network by following the instructions in INSTALL.hp300.
                    548: </ul>
                    549:
                    550: <p>
                    551: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    552: <ul>
                    553: <p>
                    554: Boot over the network by following the instructions in INSTALL.hppa or the
                    555: <a href="hppa.html#netboot">hppa platform page</a>.
                    556: </ul>
                    557:
                    558: <p>
                    559: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    560: <ul>
                    561: <p>
                    562: Boot MacOS as normal and partition your disk with the appropriate A/UX
                    563: configurations.  Then, extract the Macside utilities from
                    564: <i>FTP:3.5/mac68k/utils</i> onto your hard disk.  Run Mkfs to create your
                    565: filesystems on the A/UX partitions you just made.  Then, use the
                    566: "BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your
                    567: partitions.  Finally, you will be ready to configure the "BSD/Mac68k
                    568: Booter" with the location of your kernel and boot the system.
                    569: </ul>
                    570:
                    571: <p>
                    572: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    573: <ul>
                    574: <p>
                    575: You can create a bootable installation tape or boot over the network.<br>
                    576: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    577: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    578: for more details.
                    579: </ul>
                    580:
                    581: <p>
1.2       deraadt   582: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    583: <ul>
                    584: <p>
                    585: You can create a bootable installation tape or boot over the network.<br>
                    586: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    587: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    588: for more details.
                    589: </ul>
                    590:
                    591: <p>
1.1       deraadt   592: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    593: <ul>
                    594: src.tar.gz contains a source archive starting at /usr/src.  This file
                    595: contains everything you need except for the kernel sources, which are
                    596: in a separate archive.  To extract:
                    597: <p>
                    598: <ul><pre>
                    599: # <strong>mkdir -p /usr/src</strong>
                    600: # <strong>cd /usr/src</strong>
                    601: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    602: </pre></ul>
                    603: <p>
                    604: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    605: This file contains all the kernel sources you need to rebuild kernels.
                    606: To extract:
                    607: <p>
                    608: <ul><pre>
                    609: # <strong>mkdir -p /usr/src/sys</strong>
                    610: # <strong>cd /usr/src</strong>
                    611: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    612: </pre></ul>
                    613: <p>
                    614: Both of these trees are a regular CVS checkout.  Using these trees it
                    615: is possible to get a head-start on using the anoncvs servers as
                    616: described <a href="anoncvs.html">here</a>.
                    617: Using these files
                    618: results in a much faster initial CVS update than you could expect from
                    619: a fresh checkout of the full OpenBSD source tree.
                    620: <p>
                    621: </ul>
                    622: <a name="ports"></a>
                    623: <hr>
                    624: <p>
                    625: <h3><font color="#0000e0">Ports Tree</font></h3>
                    626: <p>
                    627: A ports tree archive is also provided.  To extract:
                    628: <p>
                    629: <ul><pre>
                    630: # <strong>cd /usr</strong>
                    631: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    632: # <strong>cd ports</strong>
                    633: </pre></ul>
                    634: <p>
                    635: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
1.98      jasper    636: read the <a href="faq/faq15.html">ports</a> page
1.1       deraadt   637: if you know nothing about ports
                    638: at this point.  This text is not a manual of how to use ports.
                    639: Rather, it is a set of notes meant to kickstart the user on the
                    640: OpenBSD ports system.
                    641: <p>
                    642: The <i>ports/</i> directory represents a CVS (see the manpage for
                    643: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    644: cvs(1)</a> if
                    645: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    646: source tree, our ports tree is available via anoncvs.  So, in
                    647: order to keep current with it, you must make the <i>ports/</i> tree
                    648: available on a read-write medium and update the tree with a command
                    649: like:
                    650: <p>
                    651: <ul><pre>
1.96      deraadt   652: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong>
1.1       deraadt   653: </pre></ul>
                    654: <p>
                    655: [Of course, you must replace the local directory and server name here
                    656: with the location of your ports collection and a nearby anoncvs
                    657: server.]
                    658: <p>
                    659: Note that most ports are available as packages through ftp. Updated
                    660: packages for the 3.5 release will be made available if problems arise.
                    661: <p>
                    662: If you're interested in seeing a port added, would like to help out, or just
                    663: would like to know more, the mailing list ports@openbsd.org is a good
                    664: place to know.
                    665: <p>
                    666:
                    667: </body>
                    668: </html>