OpenBSD 5.4

What's New

This is a partial list of new features and systems included in OpenBSD 5.4. For a comprehensive list, see the changelog leading to 5.4. @@ -77,43 +90,43 @@

Improved hardware support, including:

inteldrm(4) +
inteldrm(4) has been overhauled, including:
- Now mostly in sync with Linux 3.8.13.
- Support for Kernel Mode Setting (KMS) including support for additional output types such as DisplayPort.
- Sandy Bridge and newer parts which previously had only ShadowFB acceleration now have full hardware acceleration including use of the 3D rings. -
- wsdisplay(4) now attaches to - inteldrm(4) and providers a +
- wsdisplay(4) now attaches to + inteldrm(4) and providers a framebuffer console.
-
vgafb(4/macppc) now supports multiple virtual consoles. -
Support for Elantech touchpads version 4 (clickpad) added to pms(4). -
Fixed st(4) EOM handling, enabling much better Bacula support. -
Support for vdsk(4) disks larger than 2TB. +
vgafb(4/macppc) now supports multiple virtual consoles. +
Support for Elantech touchpads version 4 (clickpad) added to pms(4). +
Fixed st(4) EOM handling, enabling much better Bacula support. +
Support for vdsk(4) disks larger than 2TB.

Generic network stack improvements:

Reworked checksum handling for network protocols. -
divert(4) now recalculates the IP and protocol checksums of reinjected packets. +
divert(4) now recalculates the IP and protocol checksums of reinjected packets.
No longer attempt to delete the undeletable RNF_ROOT route.

Routing daemons and other userland network improvements:

Support SSL inspection in relayd(8). -
Added slowcgi(8), a libevent-based FastCGI implementation. -
Enabled ECDHE support in httpd(8). -
Do not start inetd(8) by default any more. -
Many ldpd(8) improvements, including a speed-up of the session establishment process, support for adjacencies and targeted hellos, support for multiple addresses per interface, and more. +
Support SSL inspection in relayd(8). +
Added slowcgi(8), a libevent-based FastCGI implementation. +
Enabled ECDHE support in httpd(8). +
Do not start inetd(8) by default any more. +
Many ldpd(8) improvements, including a speed-up of the session establishment process, support for adjacencies and targeted hellos, support for multiple addresses per interface, and more.

dhcpd(8) improvements: +

dhcpd(8) improvements:

Improved compliance with RFC 2131 strictures on client-identifiers.
Fixed synchronization of leases. @@ -123,7 +136,7 @@
-
dhclient(8) improvements: +

dhclient(8) improvements:

Delete routes added by defunct dhclient processes.
Improved handling of client-identifier option. @@ -164,7 +177,7 @@
- Don't require the kernel lock when processing audio interrupts.
- Improved kernel bcopy/memmove/memcpy implementations and made more careful choices between them. -
- Implemented symbol caching and RELCOUNT/RELACOUNT optimizations in ld.so(1). +
- Implemented symbol caching and RELCOUNT/RELACOUNT optimizations in ld.so(1).
@@ -176,28 +189,28 @@
Assorted improvements:
- Added a locale(1) utility. -
- Added ltrace(1), a tool to trace PLT calls. -
- Added a new implementation of cu(1). -
- Added shm_open(3)/shm_unlink(3). -
- Added getprogname(3)/setprogname(3). -
- Added clock_getcpuclockid(3) and - pthread_getcpuclockid(3). -
- Added fmemopen(3). -
- Added open_memstream(3)/open_wmemstream(3). -
- Added memmem(3). -
- Added fdatasync(2). -
- Added ppoll(2). -
- Added pselect(2). -
- Added utrace(2). -
- Switched the VAX platform to ELF. +
- Added a locale(1) utility. +
- Added ltrace(1), a tool to trace PLT calls. +
- Added a new implementation of cu(1). +
- Added shm_open(3)/shm_unlink(3). +
- Added getprogname(3)/setprogname(3). +
- Added clock_getcpuclockid(3) and + pthread_getcpuclockid(3). +
- Added fmemopen(3). +
- Added open_memstream(3)/open_wmemstream(3). +
- Added memmem(3). +
- Added fdatasync(2). +
- Added ppoll(2). +
- Added pselect(2). +
- Added utrace(2). +
- Switched the VAX platform to ELF.
- Fixed kernel profiling on multiprocessor systems. -
- Experimental support for fuse(4). -
- Added support for write_opt=nodir and the 'path' and 'linkpath' extended headers to pax(1) (aka tar(1)). -
- Brought getconf(1) up to date with recent POSIX updates. -
- Added -L and -P options to ln(1). -
- More structures and symbolic values displayed by kdump(1). -
- pkill(1) now accepts an -I option to ask for confirmation on killing processes. +
- Experimental support for fuse(4). +
- Added support for write_opt=nodir and the 'path' and 'linkpath' extended headers to pax(1) (aka tar(1)). +
- Brought getconf(1) up to date with recent POSIX updates. +
- Added -L and -P options to ln(1). +
- More structures and symbolic values displayed by kdump(1). +
- pkill(1) now accepts an -I option to ask for confirmation on killing processes.
@@ -205,112 +218,112 @@
- New features:
  - sshd(8): +
  - sshd(8): add - ssh-agent(1) + ssh-agent(1) support to - sshd(8); + sshd(8); allows encrypted hostkeys, or hostkeys on smartcards. -
  - ssh(1) +
  - ssh(1) and - sshd(8): + sshd(8): allow optional time-based rekeying via a second argument to the - existing RekeyLimit option. RekeyLimit is now + existing RekeyLimit option. RekeyLimit is now supported in - sshd_config(5) + sshd_config(5) as well as on the client. -
  - sshd(8): +
  - sshd(8): standardise logging of information during user authentication. -
  - ssh(1): +
  - ssh(1): add the ability to query supported ciphers, MAC algorithms, key types and key exchange methods. -
  - ssh(1): - support ProxyCommand=- to allow support cases where stdin and +
  - ssh(1): + support ProxyCommand=- to allow support cases where stdin and stdout already point to the proxy. -
  - ssh(1): - allow IdentityFile=none. -
  - ssh(1) +
  - ssh(1): + allow IdentityFile=none. +
  - ssh(1) and - sshd(8): - add -E option to - ssh(1) + sshd(8): + add -E option to + ssh(1) and - sshd(8) + sshd(8) to append debugging logs to a specified file instead of stderr or syslog. -
  - sftp(1): - add support for resuming partial downloads using the reget +
  - sftp(1): + add support for resuming partial downloads using the reget command and on the - sftp(1) - commandline or on the get commandline using the -a + sftp(1) + commandline or on the get commandline using the -a (append) option. -
  - ssh(1): - add an IgnoreUnknown configuration option to selectively +
  - ssh(1): + add an IgnoreUnknown configuration option to selectively suppress errors arising from unknown configuration directives. -
  - sshd(8): +
  - sshd(8): add support for submethods to be appended to required authentication - methods listed via AuthenticationMethods. + methods listed via AuthenticationMethods.
- The following significant bugs have been fixed in this release:
  - sshd(8): +
  - sshd(8): fix refusal to accept certificate if a key of a different type to the - CA key appeared in authorized_keys before the CA key. -
  - ssh(1), - ssh-agent(1) + CA key appeared in authorized_keys before the CA key. +
  - ssh(1), + ssh-agent(1) and - sshd(8): + sshd(8): Use a monotonic time source for timers so that things like keepalives and rekeying will work properly over clock steps. -
  - sftp(1): +
  - sftp(1): update progressmeter when data is acknowledged, not when it's sent. (bz#2108) -
  - ssh(1) +
  - ssh(1) and - ssh-keygen(1): + ssh-keygen(1): improve error messages when the current user does not exist in - /etc/passwd. (bz#2125) -
  - ssh(1): + /etc/passwd. (bz#2125) +
  - ssh(1): reset the order in which public keys are tried after partial authentication success. -
  - ssh-agent(1): +
  - ssh-agent(1): clean up socket files after SIGINT when in debug mode. (bz#2120) -
  - ssh(1) +
  - ssh(1) and others: avoid confusing error messages in the case of broken system resolver configurations. (bz#2122) -
  - ssh(1): - set TCP nodelay for connections started with -N. (bz#2124) -
  - ssh(1): - correct manual for permission requirements on ~/.ssh/config. +
  - ssh(1): + set TCP nodelay for connections started with -N. (bz#2124) +
  - ssh(1): + correct manual for permission requirements on ~/.ssh/config. (bz#2078) -
  - ssh(1): - fix ControlPersist timeout not triggering in cases where TCP +
  - ssh(1): + fix ControlPersist timeout not triggering in cases where TCP connections have hung. (bz#1917) -
  - ssh(1): - properly detach a ControlPersist master from its controlling +
  - ssh(1): + properly detach a ControlPersist master from its controlling terminal. -
  - sftp(1): +
  - sftp(1): avoid crashes in libedit when it has been compiled with multi-byte character support. (bz#1990) -
  - sshd(8): - when running sshd -D, close stderr unless we have explicitly +
  - sshd(8): + when running sshd -D, close stderr unless we have explicitly requested logging to stderr. (bz#1976) -
  - ssh(1): +
  - ssh(1): fix incomplete bzero. (bz#2100) -
  - sshd(8): - log and error and exit if ChrootDirectory is specified and +
  - sshd(8): + log and error and exit if ChrootDirectory is specified and running without root privileges.
  - Many improvements to the regression test suite. In particular log files are now saved from - ssh(1) + ssh(1) and - sshd(8) + sshd(8) after failures.
  - Fix a number of memory leaks. (bz#1967, bz#2096 and others) -
  - sshd(8): - fix public key authentication when a :style is appended to the +
  - sshd(8): + fix public key authentication when a :style is appended to the requested username. -
  - ssh(1): +
  - ssh(1): do not fatally exit when attempting to cleanup multiplexing-created channels that are incompletely opened. (bz#2079)
  @@ -326,28 +339,22 @@

Many pre-built packages for each architecture: - - -

i386: 7976
sparc64: 6959
alpha: 6062
m68k: 3862 -

sh: 989
amd64: 7941
powerpc: 7483
m88k: 3951 -

sparc: 4823
arm: 5582
hppa: 6607 -

vax: 2226
mips64: 6739
mips64el: 6306 -

Some highlights: @@ -395,14 +402,15 @@
Less 444 (+ patches)
Awk Aug 10, 2011 version

- +

How to install

Following this are the instructions which you would have on a piece of paper if you had purchased a CDROM set instead of doing an alternate form of install. The instructions for doing an FTP (or other style @@ -442,14 +450,16 @@

Quick installer information for people familiar with OpenBSD, and the use of the "disklabel -E" command. If you are at all confused when installing OpenBSD, read the relevant INSTALL.* file as listed above! -

OpenBSD/i386:

Play with your BIOS options to enable booting from a CD. The OpenBSD/i386 release is on CD1. If your BIOS does not support booting from CD, you will need to create a boot floppy to install from. To create a boot floppy write @@ -472,26 +482,25 @@ To make a boot floppy under MS-DOS, use the "rawrite" utility located at CD1:5.4/tools/rawrite.exe. To make the boot floppy under a Unix OS, use the -dd(1) +dd(1) utility. The following is an example usage of -dd(1), +dd(1), where the device could be "floppy", "rfd0c", or "rfd0a". -

+ # dd if=<file> of=/dev/<device> bs=32k
-

Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or your install will most likely fail. For more information on creating a boot floppy and installing OpenBSD/i386 please refer to this page. -

OpenBSD/amd64:

If you are planning to dual boot OpenBSD with another OS, you will need to read INSTALL.amd64. -

OpenBSD/macppc:

OpenBSD/macppc boot

Alternatively, at the Open Firmware prompt, enter boot cd:,ofwboot /5.4/macppc/bsd.rd -

OpenBSD/sparc64:

boot cdrom

@@ -542,12 +549,11 @@

If nothing works, you can boot over the network as described in INSTALL.sparc64. -

OpenBSD/alpha:

Write FTP:5.4/alpha/floppy54.fs or +Write FTP:5.4/alpha/floppy54.fs or FTP:5.4/alpha/floppyB54.fs (depending on your machine) to a diskette and enter boot dva0. Refer to INSTALL.alpha for more details. @@ -555,12 +561,9 @@ Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail. -

OpenBSD/armish:

After connecting a serial port, Thecus can boot directly from the network either tftp or http. Configure the network using fconfig, reset, then load bsd.rd, see INSTALL.armish for specific details. @@ -568,82 +571,63 @@ and copy 'boot' and bsd.rd into the first partition on wd0 (hda1) then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition. More details are available in INSTALL.armish. -

OpenBSD/hp300:

Boot over the network by following the instructions in INSTALL.hp300. -

OpenBSD/hppa:

Boot over the network by following the instructions in INSTALL.hppa or the hppa platform page. -

OpenBSD/landisk:

Write miniroot54.fs to the start of the CF or disk, and boot normally. -

OpenBSD/loongson:

Write miniroot54.fs to a USB stick and boot bsd.rd from it or boot bsd.rd via tftp. Refer to the instructions in INSTALL.loongson for more details. -

OpenBSD/luna88k:

Copy bsd.rd to a Mach or UniOS partition, and boot it from the PROM. Alternatively, you can create a bootable tape and boot from it. Refer to the instructions in INSTALL.luna88k for more details. -

OpenBSD/mvme68k:

You can create a bootable installation tape or boot over the network.
The network boot requires a MVME68K BUG version that supports the NIOT and NBO debugger commands. Follow the instructions in INSTALL.mvme68k for more details. -

OpenBSD/mvme88k:

You can create a bootable installation tape or boot over the network.
The network boot requires a MVME88K BUG version that supports the NIOT and NBO debugger commands. Follow the instructions in INSTALL.mvme88k for more details. -

OpenBSD/octeon:

After connecting a serial port, boot bsd.rd over the network via DHCP/tftp. Refer to the instructions in INSTALL.octeon for more details. -

OpenBSD/sgi:

To install on an O2, burn cd54.iso on a CD-R, put it in the CD drive of your machine and select Install System Software from the System Maintenance menu. @@ -653,27 +637,24 @@ setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your system type. Refer to the instructions in INSTALL.sgi for more details. -

OpenBSD/socppc:

After connecting a serial port, boot over the network via DHCP/tftp. Refer to the instructions in INSTALL.socppc for more details. -

OpenBSD/sparc:

-ok boot cdrom 5.4/sparc/bsd.rd
++ok boot cdrom 5.4/sparc/bsd.rd
 or
-> b sd(0,6,0)5.4/sparc/bsd.rd
-

b sd(0,6,0)5.4/sparc/bsd.rd

If your SPARC system does not have a CD drive, you can alternatively boot from floppy. @@ -682,11 +663,11 @@ To boot from the floppy use one of the two commands listed below, depending on the version of your ROM. -

-ok boot floppy
++ok boot floppy
 or
-> b fd()
-

b fd()

Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install @@ -696,45 +677,46 @@ If your SPARC system doesn't have a floppy drive nor a CD drive, you can either setup a bootable tape, or install via network, as told in the INSTALL.sparc file. -

OpenBSD/vax:

Boot over the network via mopbooting as described in INSTALL.vax. - +

OpenBSD/zaurus:

Using the Linux built-in graphical ipkg installer, install the openbsd54_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus for a few important details. -

+ +

Notes about the source code:

+# mkdir -p /usr/src
+# cd /usr/src
+# tar xvfz /tmp/src.tar.gz
+

-# mkdir -p /usr/src
-# cd /usr/src
-# tar xvfz /tmp/src.tar.gz
-

sys.tar.gz contains a source archive starting at /usr/src/sys. This file contains all the kernel sources you need to rebuild kernels. To extract: -

-# mkdir -p /usr/src/sys
-# cd /usr/src
+
++# mkdir -p /usr/src/sys
+# cd /usr/src
 # tar xvfz /tmp/sys.tar.gz
-

Both of these trees are a regular CVS checkout. Using these trees it is possible to get a head-start on using the anoncvs servers as @@ -742,29 +724,31 @@ Using these files results in a much faster initial CVS update than you could expect from a fresh checkout of the full OpenBSD source tree. -

- +

-OpenBSD -5.4 +OpenBSD +5.4

What's New

What's New

How to install

How to install

OpenBSD/i386:

OpenBSD/i386:

OpenBSD/amd64:

OpenBSD/amd64:

OpenBSD/macppc:

OpenBSD/macppc:

OpenBSD/sparc64:

OpenBSD/sparc64:

OpenBSD/alpha:

OpenBSD/alpha:

OpenBSD/armish:

OpenBSD/armish:

OpenBSD/hp300:

OpenBSD/hp300:

OpenBSD/hppa:

OpenBSD/hppa:

OpenBSD/landisk:

OpenBSD/landisk:

OpenBSD/loongson:

OpenBSD/loongson:

OpenBSD/luna88k:

OpenBSD/luna88k:

OpenBSD/mvme68k:

OpenBSD/mvme68k:

OpenBSD/mvme88k:

OpenBSD/mvme88k:

OpenBSD/octeon:

OpenBSD/octeon:

OpenBSD/sgi:

OpenBSD/sgi:

OpenBSD/socppc:

OpenBSD/socppc:

OpenBSD/sparc:

OpenBSD/sparc:

OpenBSD/vax:

OpenBSD/vax:

OpenBSD/zaurus:

OpenBSD/zaurus:

Notes about the source code:

Notes about the source code:

How to upgrade

How to upgrade

Ports Tree

Ports Tree