[BACK]Return to 40.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/40.html, Revision 1.66

1.1       david       1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 4.0 Release</title>
                      5: <link rev=made href="mailto:www@openbsd.org">
                      6: <meta name="resource-type" content="document">
                      7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      8: <meta name="description" content="OpenBSD 4.0">
                      9: <meta name="keywords" content="openbsd,main">
                     10: <meta name="distribution" content="global">
                     11: <meta name="copyright" content="This document copyright 2006 by OpenBSD.">
                     12: </head>
                     13:
                     14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     15:
                     16: <a href="index.html">
                     17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     18: <hr>
                     19:
                     20: <p>
1.46      deraadt    21: <a href="images/Pufferix.jpg">
                     22: <img align="left" width="227" height="343" hspace="24" vspace="30"
                     23: src="images/Pufferix.jpg" alt="OpenBSD 4.0 logo"></a>
1.1       david      24: <h2><font color="#0000e0">The OpenBSD 4.0 Release:</font></h2>
                     25: <p>
                     26: Released Nov 1, 2006<br>
                     27: Copyright 1997-2006, Theo de Raadt.<br>
                     28: <!-- XXX ISBN
                     29: <font color="#e00000">ISBN XXX </font>
                     30: -->
                     31: <!-- XXX song
                     32: <br>
                     33: <a href="lyrics.html#40">4.0 Song: "XXX"</a>
                     34: -->
                     35: <p>
                     36:
                     37: <a href="#new">What's New</a><br>
                     38: <a href="#install">How to install</a><br>
                     39: <a href="#upgrade">How to upgrade</a><br>
                     40: <a href="#ports">How to use the ports tree</a><br>
                     41: <a href="orders.html">Ordering a CD set</a><br>
                     42:
                     43: <p>
                     44: <h3><font color="#0000e0">
                     45: To get the files for this release:
                     46: <ul>
                     47: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
                     48: <li>See the information on <a href="ftp.html">The FTP page</a> for
                     49:     a list of mirror machines.
                     50: <li>Go to the <font color="#e00000">pub/OpenBSD/4.0/</font> directory on
                     51:     one of the mirror sites.
                     52: <li>Briefly read the rest of this document.
                     53: <li>Have a look at <a href="errata.html">The 4.0 Errata page</a> for a list
                     54:     of bugs and workarounds.
                     55: <li>See a <a href="plus.html">detailed log of changes</a> between the
                     56:     3.9 and 4.0 releases.
                     57: <!-- XXX plus40.html -->
                     58: </ul>
                     59: </font></h3>
                     60: <br clear=all>
                     61:
                     62: <strong>Note:</strong> All applicable copyrights and credits can be found
                     63: in the applicable file sources found in the files src.tar.gz, sys.tar.gz,
                     64: XF4.tar.gz, or in the files fetched via ports.tar.gz.  The distribution
                     65: files used to build packages from the ports.tar.gz file are not included on
                     66: the CDROM because of lack of space.
                     67: <p>
                     68:
                     69: <a name="new"></a>
                     70: <hr>
                     71: <p>
                     72: <h3><font color="#0000e0">What's New</font></h3>
                     73: <p>
                     74: This is a partial list of new features and systems included in OpenBSD 4.0.
                     75: For a comprehensive list, see the <a href="plus.html">changelog</a> leading
                     76: to 4.0.
                     77: <!-- XXX plus40.html -->
                     78: <p>
                     79:
                     80: <ul>
                     81:
1.66    ! deraadt    82: <li>New/extended platforms:
1.11      jsg        83: <ul>
                     84: <li><a href="armish.html">OpenBSD/armish</a>.<br>
1.66    ! deraadt    85:     Various ARM-based appliances, using the Redboot boot loader, currently
        !            86:     only supporting the Thecus N2100 and IOData HDL-G.
        !            87: <li><a href="sparc64.html">OpenBSD/sparc64</a>.<br>
        !            88:     UltraSPARC III based  machines are now supported!
        !            89: <li><a href="zaurus.html">OpenBSD/zaurus</a>.<br>
        !            90:     Support for the Zaurus SL-C3200.
1.11      jsg        91: </ul>
                     92: <p>
                     93:
1.1       david      94: <li>Improved hardware support, including:
                     95: <ul>
1.30      niallo     96: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=msk&amp;sektion=4">msk(4)</a> driver for Marvell/SysKonnect Yukon-2 Gigabit Ethernet.
                     97: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bnx&amp;sektion=4">bnx(4)</a> driver for Broadcom NetXtreme II Gigabit Ethernet.
                     98: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xge&amp;sektion=4">xge(4)</a> driver for Neterion Xframe/Xframe II 10Gb Ethernet.
                     99: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rum&amp;sektion=4">rum(4)</a> driver for Ralink Technology 2nd gen USB IEEE 802.11a/b/g wireless.
                    100: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=acx&amp;sektion=4">acx(4)</a> driver for Texas Instruments ACX100/ACX111 IEEE 802.11a/b/g wireless.
1.42      brad      101: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pgt&amp;sektion=4">pgt(4)</a> driver for Connexant/Intersil Prism GT Full-MAC IEEE 802.11a/b/g wireless.
                    102: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uath&amp;sektion=4">uath(4)</a> driver for Atheros USB IEEE 802.11a/b/g wireless.
1.30      niallo    103: <li>New binary blob free <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wpi&amp;sektion=4">wpi(4)</a> driver for Intel PRO/Wireless 3945ABG IEEE 802.11a/b/g wireless.
1.62      marco     104: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc&amp;sektion=4">arc(4)</a> driver for Areca Technology Corporation SATA RAID; including RAID management via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bio&amp;sektion=4">bio(4)</a>.
                    105: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mfi&amp;sektion=4">mfi(4)</a> driver for LSI Logic & Dell MegaRAID SAS RAID; including RAID management via <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bio&amp;sektion=4">bio(4)</a>.
1.30      niallo    106: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=azalia&amp;sektion=4">azalia(4)</a> driver for generic High Definition Audio.
1.46      deraadt   107: <li>New SD/MMC/SDIO drivers (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sdhc&amp;sektion=4">sdhc(4)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sdmmc&amp;sektion=4">sdmmc(4)</a>), currently supporting SD memory cards as fake SCSI <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&amp;sektion=4">sd(4)</a> drives.
1.30      niallo    108: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=udcf&amp;sektion=4">udcf(4)</a> driver for Gude ADS Expert mouseCLOCK DCF77/HBG time signal station receivers.
                    109: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uslcom&amp;sektion=4">uslcom(4)</a> driver for Silicon Laboratories CP2101/CP2102 based USB serial adapters.
                    110: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ucycom&amp;sektion=4">ucycom(4)</a> driver for Cypress microcontroller based USB serial adapters.
                    111: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=uark&amp;sektion=4">uark(4)</a> driver for Arkmicro Technologies ARK3116 based USB serial adapters.
                    112: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umsm&amp;sektion=4">umsm(4)</a> driver for Qualcomm MSM EVDO based modems.
1.21      jsg       113: <li>New Dallas/Maxim 1-Wire bus support, including:
                    114: <ul>
                    115: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpioow&amp;sektion=4">gpioow(4)</a> driver for 1-Wire bus bit-banging through GPIO pin
                    116: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=onewire&amp;sektion=4">onewire(4)</a> 1-Wire bus driver
                    117: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=owid&amp;sektion=4">owid(4)</a> 1-Wire ID family driver
                    118: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=owtemp&amp;sektion=4">owtemp(4)</a> 1-Wire temperature family driver
                    119: </ul>
1.30      niallo    120: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isagpio&amp;sektion=4">isagpio(4)</a> driver for ISA I/O mapped as GPIO.
1.49      mbalmer   121: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nmea&amp;sektion=4">nmea(4)</a>
                    122: line discipline for NMEA 0183 (GPS) devices. The new
                    123: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nmeaattach&amp;sektion=8">nmeaattach(8)</a>
                    124: utility can be used to receive NMEA 0183 data and provide the time
                    125: received as a timedelta sensor to be used by, for example,
                    126: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&amp;sektion=8">ntpd(8)</a>.
1.37      jsg       127: <li>New VAX framebuffer drivers:
                    128: <ul>
                    129: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lcg&sektion=4&arch=vax">lcg(4)</a> driver for VAXstation 4000/60 and VLC color frame buffers
                    130: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lcspx&sektion=4&arch=vax">lcspx(4)</a> driver for Low-Cost SPX color frame buffers
                    131: <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gpx&sektion=4&arch=vax">gpx(4)</a> driver for GPX color frame buffers
                    132: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=smg&sektion=4&arch=vax">smg(4)</a> driver for Small Monochrome Graphics frame buffers heavily updated to be a modern <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wscons&sektion=4">wscons(4)</a> driver
                    133: </ul>
1.52      miod      134: <li>Support for VAX-based Digital VXT2000 and VXT2000+ terminals.
1.30      niallo    135: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bge&amp;sektion=4">bge(4)</a> driver supporting newer chipsets, such as the Broadcom BCM5754, BCM5755, BCM5786, and BCM5787.
                    136: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&amp;sektion=4">em(4)</a> driver supporting newer chipsets, such as the Intel ESB2 and ICH8.
                    137: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nfe&amp;sektion=4">nfe(4)</a> driver supporting newer chipsets, such as the NVIDIA MCP61 and MCP65.
                    138: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=re&amp;sektion=4">re(4)</a> driver supporting newer chipsets, such as the Realtek RT8101E, RT8168, and RT8169SC.
                    139: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a> driver supporting newer chipsets, such as the ADMtek ADM9511 and ADM9513.
1.6       brad      140: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pciide&amp;sektion=4">pciide(4)</a> driver supporting newer chipsets, such as:
                    141: <ul>
1.38      jsg       142: <li>ATI IXP300 SATA, IXP600 IDE
                    143: <li>Intel 6321ESB IDE/SATA, 82801G SATA, and 82801H SATA
                    144: <li>IT Express IT8211F IDE
                    145: <li>NVIDIA MCP61 SATA, MCP65 SATA
1.6       brad      146: <li>Promise PDC205xx SATA
                    147: <li>ServerWorks SATA
1.38      jsg       148: <li>VIA VT8237A SATA
1.6       brad      149: </ul>
1.31      brad      150: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpt&amp;sektion=4">mpt(4)</a> driver has been replaced with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mpi&amp;sektion=4">mpi(4)</a>, a more stable driver that supports more hardware.
1.64      fkr       151: <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=com&amp;sektion=4">com(4)</a> driver now supports pcmcia and cardbus cards on macppc.
1.30      niallo    152: <li>Working interrupt routing on Sun Netra t1 105, Ultra 60 and possibly other <a href="sparc64.html">sparc64</a> systems.
                    153: <li>Work around broken VIA and NVIDIA MPBIOSes, fixes interrupt routing with GENERIC.MP on several systems.
                    154: <li>Initial <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bio&amp;sektion=4">bio(4)</a> support for Compaq/HP <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ciss&amp;sektion=4">ciss(4)</a> Smart ARRAY 5/6 SAS/SCSI RAID controllers.
1.61      deraadt   155: <li>Improved speed control on some systems:
                    156: <ul>
1.60      dim       157: <li>New SpeedStep detection code, also adds support for VIA C7-M, and several newer Pentium M's.</li>
                    158: <li>Support SpeedStep in rudimentary fashion on most unknown CPU's that advertise the feature.</li>
1.61      deraadt   159: <li>Zaurus can be moved into slower speeds now too.
                    160: <li>PowerNow K7 and K8 support is now working reliably.
                    161: </ul>
                    162: <li>Support for Intel 945G/GM video chipsets (on i386).</li>
1.1       david     163: </ul>
                    164: <p>
                    165:
                    166: <li>New tools:
                    167: <ul>
1.28      niallo    168: <li>GNU RCS has been replaced with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rcs&amp;sektion=1">OpenRCS</a>.
1.1       david     169: </ul>
                    170: <p>
                    171:
                    172: <li>New functionality:
                    173: <ul>
1.32      naddy     174: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecctl&amp;sektion=8">ipsecctl(8)</a> has been greatly extended and completely supersedes ipsecadm(8).
1.15      steven    175: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ftp&amp;sektion=1">ftp(1)</a> now supports HTTPS.
1.18      steven    176: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&amp;sektion=1">cdio(1)</a> can now perform track-at-once burning and rewritable blanking.
1.29      niallo    177: <li>spppcontrol(8) and wicontrol(8) functionality has been merged into
1.17      steven    178: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a>.
1.16      steven    179: <li>gcc(1) provides a new warning, -Wstack-larger-than-N, to report functions
                    180: which are too greedy in stack variables, see
                    181: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&amp;sektion=1">gcc-local(1)</a> for details.
1.30      niallo    182: <li>An in-kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&amp;sektion=3">getcwd(3)</a> implementation.
1.49      mbalmer   183: <li>A new system call <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adjfreq&amp;sektion=2">adjfreq(2)</a>
1.12      otto      184: to allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntpd&amp;sektion=8">ntpd(8)</a>
                    185: to adjust the tick rate of the system clock automatically.
1.37      jsg       186: <li>Support for X11 on VAX has been added
1.30      niallo    187: <li>Virtual Allocation Table (VAT) support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_udf&amp;sektion=8">UDF</a>.
1.16      steven    188: <li>C99 functions
                    189: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=round&amp;sektion=3">round(3)</a>,
                    190: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=roundf&amp;sektion=3">roundf(3)</a>,
                    191: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trunc&amp;sektion=3">trunc(3)</a>, and
                    192: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=truncf&amp;sektion=3">truncf(3)</a>
                    193: have been added to libm, the math library.
1.34      djm       194: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>
                    195:  now supports Unicast Reverse Path Forwarding (uRPF) checks for simplified
1.35      aanriot   196:  ingress filtering.
1.34      djm       197: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a>
                    198:  can now ignore packets based on their direction (inbound/outbound) using the
1.35      aanriot   199:  BIOCSDIRFILT ioctl.
1.36      martin    200: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pdisk&amp;sektion=8&amp;arch=mac68k">pdisk(8)</a>
                    201:  can now set up slices on HFS(DPME) partitioned disks on mac68k.
1.55      reyk      202: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sasyncd&amp;sektion=8">sasyncd(8)</a>
1.47      ian       203:  communicates with its
1.46      deraadt   204:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>,
                    205:  telling it to run active or passive. This makes IPsec failover setups much more robust.
1.58      stevesk   206: <li>New dissectors have been added to
1.55      reyk      207:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a>:
                    208: <ul>
1.56      reyk      209: <li>Cisco's VQP (VLAN Query Protocol)
                    210: <li>IEEE 802.1AB LLDP (Link Layer Discovery Protocol)
1.55      reyk      211: </ul>
                    212: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=trunk&amp;sektion=4">trunk(4)</a> now
                    213:  supports the new loadbalance mode to balance outgoing traffic based on hashed protocol header
                    214:  information.
1.62      marco     215: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bioctl&amp;sektion=8">bioctl(8)</a> has been extended to provide runtime information on rebuilds, scrubs and initialization.
1.63      ray       216: <li>New sysctls to check the system vendor, product, version, and UUID.
1.65      claudio   217: <li>Equal cost multipath routing support. Needs to be enabled by a sysctl.
1.1       david     218: </ul>
                    219: <p>
                    220:
                    221: <li>Assorted improvements and code cleanup:
                    222: <ul>
1.13      otto      223: <li>Much better time keeping for multiprocessor <a href="i386.html">OpenBSD/i386</a>
                    224: systems.
                    225: <li>Much improved implementation of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telldir&amp;sektion=3">telldir(3)</a>
                    226: and friends.
1.53      ray       227: <li>Replacement of many
1.34      djm       228:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=3">malloc(3)</a>
                    229:  calls that follow a pattern prone to integer overflow with safer constructs.
1.44      mpf       230: <li>Improved failover handling in
                    231:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&amp;sektion=4">carp(4)</a>:
                    232:  <ul>
                    233:  <li>Extend the carp protocol with the demotion counter to act smarter on multiple failures.
                    234:  <li>Group failovers now work without carp running preempt mode.
                    235:  <li>Demotion can now be controlled via interface groups.
                    236:  </ul>
1.54      krw       237: <li>
                    238:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chio&amp;sektion=1">chio(1)</a>
                    239: is now a useful tool for controlling tape changers.
                    240: <li>Much improved
                    241:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=st&amp;sektion=4">st(4)</a>
                    242: device setup, tape handling and error processing.
                    243: <li>Many
                    244:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhclient&amp;sektion=8">dhclient(8)</a>
                    245: fixes, including 'alias' handling and improved interface initialization.
                    246: <li>
                    247:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&amp;sektion=8">scsi(4)</a>
                    248: devices detect the correct SCSI version.
                    249: <li>More
                    250:  <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=umass&amp;sektion=4">umass(4)</a>
                    251: devices properly detected.
                    252: <li>Improved detection of fibre channel devices and devices in SCSI enclosures.
1.56      reyk      253: <li>The new RSSI header has been added to the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ieee80211_radiotap&amp;sektion=9">ieee80211_radiotap(9)</a>
                    254:   framework as a replacement for ANTSIGNAL headers.
1.54      krw       255: </ul>
                    256: <p>
                    257:
                    258: <li>Install/Upgrade process changes
                    259: <ul>
                    260: <li>Host specific site files add easy customization for individual hosts
                    261: <li>X Window aperture support, where available, now defaults to off
1.1       david     262: </ul>
                    263: <p>
                    264:
1.56      reyk      265: <li>New functionality for
                    266:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hostapd&amp;sektion=8">hostapd(8)</a>,
                    267:     the Host Access Point Daemon:
                    268: <ul>
                    269: <li>IP based roaming to build wireless networks without the requirement
                    270:     of a single broadcast domain.
                    271: <li>New event rules to match optional elements of radiotap headers:
                    272:     signal percentage, transmit rate and channel frequency.
                    273: <li>Various bug fixes and improvements.
                    274: </ul>
                    275: <p>
                    276:
1.1       david     277: <li>OpenSSH 4.4:
                    278: <ul>
1.40      dtucker   279: <li>Conditional configuration in <a href=
                    280:    "http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5"
                    281:    >sshd_config(5)</a> using the <b>Match</b> directive.  This allows some
                    282:    configuration options to be selectively overridden if specific criteria
                    283:    (based on user, group, hostname and/or address) are met.
                    284: <li>Add support for Diffie-Hellman group exchange key agreement with a
                    285:    final hash of SHA256.
                    286: <li>Added a <b>ForceCommand</b> directive to <a href=
                    287:    "http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5"
                    288:    >sshd_config(5)</a>, similar to the command="..." option in
                    289:    ~/.ssh/authorized_keys.
                    290: <li>Added a <b>PermitOpen</b> directive to <a href=
                    291:    "http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5"
                    292:    >sshd_config(5)</a>, similar to the permitopen="..." option in
                    293:    authorized_keys, to allow control over the port-forwardings that a
                    294:    user is allowed to establish.
                    295: <li>Added an <b>ExitOnForwardFailure</b> option to cause ssh(1) to exit (with
                    296:    a non-zero exit code) when requested port forwardings could not be
                    297:    established.
                    298: <li>Added optional logging of transactions to <a href=
                    299:    "http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&amp;sektion=8"
                    300:    >sftp-server(8)</a>.
                    301: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1"
                    302:    >ssh(1)</a> will now record port numbers for hosts stored in
                    303:    ~/.ssh/authorized_keys when a non-standard port has been requested.
                    304: <li>Extended the <a href=
                    305:    "http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5"
                    306:    >sshd_config(5)</a> "SubSystem" directive to allow the
                    307:    specification of commandline arguments.
                    308: <li>Many manpage fixes and improvements
1.1       david     309: </ul>
                    310: <p>
                    311:
                    312: <li>OpenBGPD 4.0:
                    313: <ul>
1.48      henning   314: <li>new nexthop selection logic ignoring bgpd routes, helps in complex setups
                    315:     with ospfd
                    316: <li>add a &quot;detailed&quot; show rib view to bgpctl, including communities
                    317: <li>allow requesting a route refresh from a peer that supports it
                    318: <li>have bgpd always report back the result of an operation to bgpctl, so
                    319:     the operator can spot errors quicker
                    320: <li>allow bgpd to manipulate carp demotion counters based on session states,
                    321:     gives even greater failover support
                    322: <li>support restarting sessions that reached max-prefix after a given time
                    323: <li>bgpctl can now show all routes received from a neighbor before filters
                    324:     were applied, and routes sent to neighbors
                    325: <li>assorted fixes and improvements, as usual
1.1       david     326: </ul>
                    327: <p>
                    328:
1.41      norby     329: <li>OpenOSPFD 4.0:
1.1       david     330: <ul>
1.41      norby     331: <li>Track uptime of the daemon itself.
                    332: <li>Track uptime of all ospf enabled interfaces.
                    333: <li>Adjust logging behaviour to prevent unwanted logging.
                    334: <li>Delay LSA updates when removing and adding - prevent flapping.
                    335: <li>Fix plaintext authentication.
1.43      brad      336: <li>Improve the output of 'ospfctl show interfaces'.
1.41      norby     337: <li>Support rtlabels when redistributing routes.
1.1       david     338: </ul>
                    339: <p>
1.41      norby     340:
1.50      henning   341: <li>OpenNTPD 4.0:
1.49      mbalmer   342: <ul>
1.50      henning   343: <li>support timedelta sensors, such as DCF77 receivers supported by
                    344:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=udcf&amp;sektion=4">udcf(4)</a>
                    345:     and GPS receivers supported by
                    346:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nmea&amp;sektion=4">nmea(4)</a>.
                    347: <li>Adjust the kernel tick frequency, using
                    348:     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=adjfreq&amp;sektion=2">adjfreq(3)</a>,
                    349:     improving accuracy on many machines.
                    350: <li>allow for weight to be added to sensors or servers, so that one can
                    351:     weight timedelta sensors higher than ntp peers
1.49      mbalmer   352: </ul>
                    353: <p>
1.1       david     354:
1.9       steven    355: <li>Over 3700 ports, 3400 pre-built packages, improved package tools.
1.57      espie     356: <li>Full support for pkg_add(1) over ssh(1), using one single connection.
1.1       david     357: <!-- XXX update numbers -->
                    358: <p>
                    359:
                    360: <li>As usual, steady improvements in manual pages and other documentation.
                    361: <p>
                    362:
                    363: <li>The system includes the following major components from outside suppliers:
                    364: <ul>
                    365: <li>X.Org 6.9.0 (+ patches, and i386 contains XFree86 3.3.6 servers
                    366: (+ patches) for legacy chipsets not supported by X.Org)
                    367: <li>Gcc 2.95.3
                    368: (+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&amp;sektion=1">patches</a>)
                    369: and 3.3.5
                    370: (+ <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=gcc-local&amp;sektion=1">patches</a>)
                    371: <li>Perl 5.8.8 (+ patches)
                    372: <li>Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
                    373: <li>OpenSSL 0.9.7j (+ patches)
                    374: <li>Groff 1.15
                    375: <li>Sendmail 8.13.8, with libmilter
1.26      david     376: <li>Bind 9.3.2-P1 (+ patches)
1.1       david     377: <li>Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
                    378: <li>Sudo 1.6.8p9
                    379: <li>Ncurses 5.2
                    380: <li>Latest KAME IPv6
1.24      biorn     381: <li>Heimdal 0.7.2 (+ patches)
1.1       david     382: <li>Arla 0.35.7
                    383: <li>Binutils 2.15 (+ patches)
                    384: <li>Gdb 6.3
                    385: <!-- XXX double check versions -->
                    386: </ul>
                    387: <p>
                    388:
                    389: </ul>
                    390:
                    391: <a name="install"></a>
                    392: <hr>
                    393: <p>
                    394: <h3><font color="#0000e0">How to install</font></h3>
                    395: <p>
                    396: Following this are the instructions which you would have on a piece of
                    397: paper if you had purchased a CDROM set instead of doing an alternate
                    398: form of install.  The instructions for doing an FTP (or other style
                    399: of) install are very similar; the CDROM instructions are left intact
                    400: so that you can see how much easier it would have been if you had
                    401: purchased a CDROM instead.
                    402: <p>
                    403:
                    404: <hr>
                    405: Please refer to the following files on the three CDROMs or FTP mirror for
                    406: extensive details on how to install OpenBSD 4.0 on your machine:
                    407: <p>
                    408: <ul>
                    409: <li>CD1:4.0/i386/INSTALL.i386
                    410: <p>
                    411: <li>CD2:4.0/amd64/INSTALL.amd64
                    412: <li>CD2:4.0/macppc/INSTALL.macppc
                    413: <p>
                    414: <li>CD3:4.0/sparc/INSTALL.sparc
                    415: <li>CD3:4.0/sparc64/INSTALL.sparc64
                    416: <p>
                    417: <li>FTP:.../OpenBSD/4.0/alpha/INSTALL.alpha
1.33      brad      418: <li>FTP:.../OpenBSD/4.0/armish/INSTALL.armish
1.1       david     419: <li>FTP:.../OpenBSD/4.0/cats/INSTALL.cats
                    420: <li>FTP:.../OpenBSD/4.0/hp300/INSTALL.hp300
                    421: <li>FTP:.../OpenBSD/4.0/hppa/INSTALL.hppa
                    422: <li>FTP:.../OpenBSD/4.0/luna88k/INSTALL.luna88k
                    423: <li>FTP:.../OpenBSD/4.0/mac68k/INSTALL.mac68k
                    424: <li>FTP:.../OpenBSD/4.0/mvme68k/INSTALL.mvme68k
                    425: <li>FTP:.../OpenBSD/4.0/mvme88k/INSTALL.mvme88k
                    426: <li>FTP:.../OpenBSD/4.0/sgi/INSTALL.sgi
                    427: <li>FTP:.../OpenBSD/4.0/vax/INSTALL.vax
                    428: <li>FTP:.../OpenBSD/4.0/zaurus/INSTALL.zaurus
                    429: </ul>
                    430: <hr>
                    431:
                    432: <p>
                    433: Quick installer information for people familiar with OpenBSD, and the
                    434: use of the "disklabel -E" command.  If you are at all confused when
                    435: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    436: <p>
                    437:
                    438: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    439: <ul>
                    440: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    441: release is on CD1. If your BIOS does not support booting from CD, you will need
                    442: to create a boot floppy to install from. To create a boot floppy write
                    443: <i>CD1:4.0/i386/floppy40.fs</i> to a floppy and boot via the floppy drive.
                    444:
                    445: <p>
                    446: Use <i>CD1:4.0/i386/floppyB40.fs</i> instead for greater SCSI controller
                    447: support, or <i>CD1:4.0/i386/floppyC40.fs</i> for better laptop support.
                    448:
                    449: <p>
                    450: If you can't boot from a CD or a floppy disk,
                    451: you can install across the network using PXE as described in
                    452: the included INSTALL.i386 document.
                    453:
                    454: <p>
                    455: If you are planning on dual booting OpenBSD with another OS, you will need to
                    456: read INSTALL.i386.
                    457:
                    458: <p>
                    459: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
                    460: at <i>CD1:4.0/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
                    461: use the
                    462: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>
                    463: utility. The following is an example usage of
                    464: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>,
                    465: where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    466: &quot;rfd0a&quot;.
                    467:
                    468: <ul><pre>
                    469: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    470: </pre></ul>
                    471:
                    472: <p>
                    473: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    474: your install will most likely fail. For more information on creating a boot
                    475: floppy and installing OpenBSD/i386 please refer to
                    476: <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
                    477: </ul>
                    478:
                    479: <p>
                    480: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    481: <ul>
                    482: The 4.0 release of OpenBSD/amd64 is located on CD2.
                    483: Boot from the CD to begin the install - you may need to adjust
                    484: your BIOS options first.
                    485: If you can't boot from the CD, you can create a boot floppy to install from.
                    486: To do this, write <i>CD2:4.0/amd64/floppy40.fs</i> to a floppy, then
                    487: boot from the floppy drive.
                    488:
                    489: <p>
                    490: If you can't boot from a CD or a floppy disk,
                    491: you can install across the network using PXE as described in the included
                    492: INSTALL.amd64 document.
                    493:
                    494: <p>
                    495: If you are planning to dual boot OpenBSD with another OS, you will need to
                    496: read INSTALL.amd64.
                    497: </ul>
                    498:
                    499: <p>
                    500: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
                    501: <ul>
                    502: Put CD2 in your CDROM drive and poweron your machine while holding down the
                    503: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
                    504:
                    505: <p>
                    506: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    507: /4.0/macppc/bsd.rd</i>
                    508: </ul>
                    509:
                    510: <p>
                    511: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    512: <ul>
                    513: The 4.0 release of OpenBSD/sparc is located on CD3. To boot off of this CD you
                    514: can use one of the two commands listed below, depending on the version of your
                    515: ROM.
                    516:
                    517: <ul><pre>
                    518: ok <strong>boot cdrom 4.0/sparc/bsd.rd</strong>
                    519: or
                    520: &gt; <strong>b sd(0,6,0)4.0/sparc/bsd.rd</strong>
                    521: </pre></ul>
                    522:
                    523: <p>
                    524: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
                    525: To do so you need to write <i>CD3:4.0/sparc/floppy40.fs</i> to a floppy.
                    526: For more information see <a href="faq/faq4.html#MkFlop">FAQ 4.3.1</a>.
                    527: To boot from the floppy use one of the two commands listed below,
                    528: depending on the version of your ROM.
                    529:
                    530: <ul><pre>
                    531: ok <strong>boot floppy</strong>
                    532: or
                    533: &gt; <strong>b fd()</strong>
                    534: </pre></ul>
                    535:
                    536: <p>
                    537: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    538: will most likely fail.
                    539:
                    540: <p>
                    541: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
                    542: setup a bootable tape, or install via network, as told in the
                    543: INSTALL.sparc file.
                    544: </ul>
                    545:
                    546: <p>
                    547: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    548: <ul>
                    549: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    550:
                    551: <p>
                    552: If this doesn't work, or if you don't have a CDROM drive, you can write
                    553: <i>CD3:4.0/sparc64/floppy40.fs</i> or <i>CD3:4.0/sparc64/floppyB40.fs</i>
                    554: (depending on your machine) to a floppy and boot it with <i>boot
                    555: floppy</i>. Refer to INSTALL.sparc64 for details.
                    556:
                    557: <p>
                    558: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    559: will most likely fail.
                    560:
                    561: <p>
                    562: You can also write <i>CD3:4.0/sparc64/miniroot40.fs</i> to the swap partition on
                    563: the disk and boot with <i>boot disk:b</i>.
                    564:
                    565: <p>
                    566: If nothing works, you can boot over the network as described in INSTALL.sparc64.
                    567: </ul>
                    568:
                    569: <p>
                    570: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    571: <ul>
                    572: <p>Write <i>FTP:4.0/alpha/floppy40.fs</i> or
                    573: <i>FTP:4.0/alpha/floppyB40.fs</i> (depending on your machine) to a diskette and
                    574: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    575:
                    576: <p>
                    577: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    578: will most likely fail.
                    579:
                    580: </ul>
                    581:
                    582: <p>
                    583: <h3><font color="#e00000">OpenBSD/armish:</font></h3>
                    584: <ul>
                    585: <p>
1.33      brad      586: Boot over the network by following the instructions in INSTALL.armish.
1.1       david     587: </ul>
                    588:
                    589: <p>
                    590: <h3><font color="#e00000">OpenBSD/cats:</font></h3>
                    591: <ul>
                    592: <p>
                    593: After updating the firmware to at least ABLE 1.95 if necessary, boot
                    594: <i>FTP:4.0/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM
                    595: or an existing FFS or EXT2FS partition).
                    596: </ul>
                    597:
                    598: <p>
                    599: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
                    600: <ul>
                    601: <p>
                    602: Boot over the network by following the instructions in INSTALL.hp300.
                    603: </ul>
                    604:
                    605: <p>
                    606: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    607: <ul>
                    608: <p>
                    609: Boot over the network by following the instructions in INSTALL.hppa or the
                    610: <a href="hppa.html#install">hppa platform page</a>.
                    611: </ul>
                    612:
                    613: <p>
                    614: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
                    615: <ul>
                    616: <p>
                    617: Copy bsd.rd to a Mach or UniOS partition, and boot it from the PROM.
                    618: Alternatively, you can create a bootable tape and boot from it. Refer to
                    619: the instructions in INSTALL.luna88k for more details.
                    620: </ul>
                    621:
                    622: <p>
                    623: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
                    624: <ul>
                    625: <p>
                    626: Boot MacOS as normal and extract the Macside "BSD/Mac68k Booter" utility from
                    627: <i>FTP:4.0/mac68k/utils</i> onto your hard disk.  Configure the "BSD/Mac68k
                    628: Booter" with the location of your bsd.rd kernel and boot into the installer.
                    629: Refer to the instructions in INSTALL.mac68k for more details.
                    630: </ul>
                    631:
                    632: <p>
                    633: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
                    634: <ul>
                    635: <p>
                    636: You can create a bootable installation tape or boot over the network.<br>
                    637: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
                    638: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
                    639: for more details.
                    640: </ul>
                    641:
                    642: <p>
                    643: <h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>
                    644: <ul>
                    645: <p>
                    646: You can create a bootable installation tape or boot over the network.<br>
                    647: The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
                    648: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
                    649: for more details.
                    650: </ul>
                    651:
                    652: <p>
                    653: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
                    654: <ul>
                    655: <p>
                    656: Burn cd40.iso on a CD-R, put it in the CD drive of your machine and
                    657: select <i>Install System Software</i> from the System Maintenance menu.
                    658:
                    659: <p>
                    660: If your machine doesn't have a CD drive, you can
                    661: setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd".
                    662: Refer to the instructions in INSTALL.sgi for more details.
                    663: </ul>
                    664:
                    665: <p>
                    666: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
                    667: <ul>
                    668: Boot over the network via mopbooting as described in INSTALL.vax.
                    669: </ul>
                    670:
                    671: <p>
                    672: <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>
                    673: <ul>
                    674: <p>
                    675: Using the Linux built-in graphical ipkg installer, install the
                    676: openbsd40_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus
                    677: for a few important details.
                    678: </ul>
                    679:
                    680: <p>
                    681: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    682: <ul>
                    683: src.tar.gz contains a source archive starting at /usr/src.  This file
                    684: contains everything you need except for the kernel sources, which are
                    685: in a separate archive.  To extract:
                    686: <p>
                    687: <ul><pre>
                    688: # <strong>mkdir -p /usr/src</strong>
                    689: # <strong>cd /usr/src</strong>
                    690: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    691: </pre></ul>
                    692: <p>
                    693: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    694: This file contains all the kernel sources you need to rebuild kernels.
                    695: To extract:
                    696: <p>
                    697: <ul><pre>
                    698: # <strong>mkdir -p /usr/src/sys</strong>
                    699: # <strong>cd /usr/src</strong>
                    700: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    701: </pre></ul>
                    702: <p>
                    703: Both of these trees are a regular CVS checkout.  Using these trees it
                    704: is possible to get a head-start on using the anoncvs servers as
                    705: described <a href="anoncvs.html">here</a>.
                    706: Using these files
                    707: results in a much faster initial CVS update than you could expect from
                    708: a fresh checkout of the full OpenBSD source tree.
                    709: <p>
                    710: </ul>
                    711:
                    712: <a name="upgrade"></a>
                    713: <hr>
                    714: <p>
                    715: <h3><font color="#0000e0">How to upgrade</font></h3>
                    716: <p>
                    717: If you already have an OpenBSD 3.9 system, and do not want to reinstall,
                    718: upgrade instructions and advice can be found in the
1.14      henning   719: <a href="faq/upgrade40.html">Upgrade Guide</a>.
1.1       david     720: <!-- XXX upgrade40.html -->
                    721:
                    722: <a name="ports"></a>
                    723: <hr>
                    724: <p>
                    725: <h3><font color="#0000e0">Ports Tree</font></h3>
                    726: <p>
                    727: A ports tree archive is also provided.  To extract:
                    728: <p>
                    729: <ul><pre>
                    730: # <strong>cd /usr</strong>
                    731: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    732: # <strong>cd ports</strong>
                    733: </pre></ul>
                    734: <p>
                    735: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    736: read the <a href="ports.html">ports</a> page
                    737: if you know nothing about ports
                    738: at this point.  This text is not a manual of how to use ports.
                    739: Rather, it is a set of notes meant to kickstart the user on the
                    740: OpenBSD ports system.
                    741: <p>
                    742: The <i>ports/</i> directory represents a CVS (see the manpage for
                    743: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;apropos=0&amp;sektion=1&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html">
                    744: cvs(1)</a> if
                    745: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    746: source tree, our ports tree is available via anoncvs.  So, in
                    747: order to keep current with it, you must make the <i>ports/</i> tree
                    748: available on a read-write medium and update the tree with a command
                    749: like:
                    750: <p>
                    751: <ul><pre>
                    752: # <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_0</strong>
                    753: </pre></ul>
                    754: <p>
                    755: [Of course, you must replace the local directory and server name here
                    756: with the location of your ports collection and a nearby anoncvs
                    757: server.]
                    758: <p>
                    759: Note that most ports are available as packages through FTP. Updated
                    760: packages for the 4.0 release will be made available if problems arise.
                    761: <p>
                    762: If you're interested in seeing a port added, would like to help out, or just
                    763: would like to know more, the mailing list ports@openbsd.org is a good
                    764: place to know.
                    765: <p>
                    766:
                    767: <hr>
                    768: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    769: alt="OpenBSD"></a>
                    770: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
                    771: <br><small>
1.66    ! deraadt   772: $OpenBSD: 40.html,v 1.65 2006/09/19 15:33:41 claudio Exp $
1.1       david     773: </small>
                    774:
                    775: </body>
                    776: </html>