[BACK]Return to 56.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/56.html, Revision 1.22

1.1       deraadt     1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
                      2: <html>
                      3: <head>
                      4: <title>OpenBSD 5.6</title>
                      5: <meta name="resource-type" content="document">
                      6: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                      7: <meta name="description" content="OpenBSD 5.6">
                      8: <meta name="keywords" content="openbsd,main">
                      9: <meta name="distribution" content="global">
                     10: <meta name="copyright" content="This document copyright 2014 by OpenBSD.">
                     11: </head>
                     12:
                     13: <body bgcolor="#ffffff" text="#000000" link="#24248E">
                     14:
                     15: <a href="index.html">
                     16: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
                     17: <p>
                     18:
1.20      deraadt    19: <a href="images/CaptainTedu.jpg">
                     20: <img align="left" width="227" height="343" hspace="24" src="images/CaptainTedu.jpg"></a>
1.1       deraadt    21: <h2><font color="#0000e0">OpenBSD 5.6</font></h2>
                     22: <p>
1.20      deraadt    23: To be released Nov 1, 2014<br>
1.1       deraadt    24: Copyright 1997-2014, Theo de Raadt.<br>
                     25: <font color="#e00000">ISBN 978-0-9881561-4-2</font>
                     26: <br>
1.20      deraadt    27: <a href="lyrics.html#56">5.6 Song: "Ride of the Valkyries"</a>
1.1       deraadt    28: <p>
                     29:
                     30: <ul>
1.22    ! deraadt    31: <li>Order a CDROM from our <a href="https://openbsdstore.com">ordering system</a>.
1.1       deraadt    32: <li>See the information on <a href="ftp.html">the FTP page</a> for
                     33:     a list of mirror machines.
                     34: <li>Go to the <font color="#e00000">pub/OpenBSD/5.6/</font> directory on
                     35:     one of the mirror sites.
                     36: <li>Have a look at <a href="errata56.html">the 5.6 errata page</a> for a list
                     37:     of bugs and workarounds.
                     38: <li>See a <a href="plus56.html">detailed log of changes</a> between the
                     39:     5.5 and 5.6 releases.
                     40: <p>
1.10      deraadt    41: <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&amp;sektion=1">signify(1)</a> pubkeys for this release:<br>
                     42: base: RWR0EANmo9nqhpPbPUZDIBcRtrVcRwQxZ8UKGWY8Ui4RHi229KFL84wV<br>
                     43: fw:   RWT4e3jpYgSeLYs62aDsUkcvHR7+so5S/Fz/++B859j61rfNVcQTRxMw<br>
                     44: pkg:  RWSPEf7Vpp2j0PTDG+eLs5L700nlqBFzEcSmHuv3ypVUEOYwso+UucXb<br>
1.1       deraadt    45: </ul>
                     46: <br clear=all>
                     47: All applicable copyrights and credits can be found in the applicable
                     48: file sources found in the files src.tar.gz, sys.tar.gz,
                     49: xenocara.tar.gz, or in the files fetched via ports.tar.gz.  The
                     50: distribution files used to build packages from the ports.tar.gz file
                     51: are not included on the CDROM because of lack of space.
                     52: <p>
                     53:
                     54: <a name="new"></a>
                     55: <hr>
                     56: <p>
                     57: <h3><font color="#0000e0">What's New</font></h3>
                     58: <p>
                     59: This is a partial list of new features and systems included in OpenBSD 5.6.
                     60: For a comprehensive list, see the <a href="plus56.html">changelog</a> leading
                     61: to 5.6.
                     62: <p>
                     63:
                     64: <ul>
                     65: <li>...
                     66: <p>
                     67:
                     68:
                     69: <li>Installer improvements:
                     70:     <ul>
1.15      krw        71:     <li>Remove ftp and tape as install methods.
                     72:     <li>Preserve the disklabel (and next 6 blocks) when installing boot block on
                     73: 4k-sector disk drives.
                     74:     <li>Change the "Server?" question to "HTTP Server?" to allow unambiguous auto-install handling.
1.1       deraadt    75:     <li>...
                     76:     </ul>
                     77: <p>
                     78:
                     79: <li>New/extended platforms:
                     80:     <ul>
                     81:     <li>...
                     82:     </ul>
                     83: <p>
                     84:
                     85: <li>Improved hardware support, including:
                     86:     <ul>
1.13      dlg        87:     <li>SCSI Multipathing support via <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/mpath.4">mpath(4)</a> and associated path drivers on several architectures.
1.1       deraadt    88:     </ul>
                     89: <p>
                     90:
                     91: <li>Generic network stack improvements:
                     92:     <ul>
1.19      lteo       93:     <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/divert.4">divert(4)</a> now supports checksum offload.
1.1       deraadt    94:     </ul>
                     95: <p>
                     96:
                     97: <li>Routing daemons and other userland network improvements:
                     98:     <ul>
1.19      lteo       99:     <li>When used with the -v flag, <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8">tcpdump(8)</a> now shows the actual bad checksum within the IP/protocol header itself and what the good checksum should be.
                    100:     <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/ftp.1">ftp(1)</a> now allows its User-Agent to be changed via the -U command-line option.
1.1       deraadt   101:     </ul>
                    102: <p>
                    103:
                    104: <li>OpenSMTPD 5.4.2 (includes changes to 5.4.1):
                    105:     <ul>
                    106:     <li>...
                    107:     </ul>
                    108: <p>
                    109:
                    110: <li>Security improvements:
                    111:     <ul>
1.2       pascal    112:     <li>Changed the heuristics of the stack protector to also protect functions with local array definitions and references to local frame addresses.  This matches the -fstack-protector-strong option of upstream GCC.
                    113:     <li>Position-independent executables (PIE) are now used by default on powerpc.
                    114:     <li>Removed Kerberos.
                    115:     </ul>
                    116: <p>
                    117:
                    118: <li>Assorted improvements:
                    119:     <ul>
1.3       espie     120:     <li>locate databases for both base and xenocara, as
                    121:     <code>/usr/lib/locate/src.db</code> and
                    122:     <code>/usr/X11R6/lib/locate/xorg.db</code>.
                    123:     <li>Much faster package updates, due to package contents reordering that
                    124:     precludes re-downloading unchanged files.
1.16      krw       125:     <li>Fix many programs that failed when accessing disks having sector sizes other than 512 bytes, including
                    126: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/badsect.8">badsect(8)</a>,
                    127: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/df.1">df(1)</a>,
                    128: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dump.8">dump(8)</a>,
                    129: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dumpfs.8">dumpfs(8)</a>,
                    130: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ext2fs.8">fsck_ext2fs(8)</a>,
                    131: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsck_ffs.8">fsck_ffs(8)</a>,
                    132: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fsdb.8">fsdb(8)</a>,
                    133: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/growfs.8">growfs(8)</a>,
                    134: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ncheck_ffs.8">ncheck_ffs(8)</a>,
                    135: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/quotacheck.8">quotacheck(8)</a>,
                    136: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tunefs.8">tunefs(8)</a>.
1.17      krw       137:     <li>Constrain MSDOS timestamps to 1/1/1980 through 12/31/2107.  64-bit
                    138: time_t values outside that range are stored as 1/1/1980.
                    139:     <li>Enhance
                    140: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/disklabel.8">disklabel(8)</a> to recover filesystem mountpoint information when reading saved ascii labels.
1.18      krw       141:     <li>Properly handle
                    142: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man3/msgbuf_write.3">msgbuf_write(3)</a> EOF conditions, including uses in
                    143: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/tmux.1">tmux(1)</a>,
                    144: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dvmrpd.8">dvmrpd(8)</a>,
                    145: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldapd.8">ldapd(8)</a>,
                    146: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ldpd.8">ldpd(8)</a>,
                    147: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospf6d.8">ospf6d(8)</a>,
                    148: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ospfd.8">ospfd(8)</a>,
                    149: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/relayd.8">relayd(8)</a>,
                    150: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ripd.8">ripd(8)</a>,
                    151: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/smtpd.8">smtpd(8)</a>,
                    152: <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/ypldap.8">ypldap(8)</a>.
1.21      krw       153:     <li>Constrain <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a> '-l' to disk sizes of 64 blocks or more.
                    154:     <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/fdisk.8">fdisk(8)</a> built-in MBR with current /usr/mdec/mbr.
                    155:     <li>Quiet <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a> '-q' even more.
                    156:     <li>Log less redundant <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a> info.
                    157:     <li>New leases, lease renewals, cable state changes more obvious to applications monitoring <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a> files.
                    158:     <li>Preserve chronological order of leases in the <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/dhclient.leases.5">dhclient.leases(5)</a> leases files.
                    159:     <li>Use 'lease {}' statements in <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/dhclient.conf.5">dhclient.conf(5)</a>, allowing interfaces to get an address when no dynamic lease is available.
                    160:     <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a> parsing and printing of classess static routes.
                    161:     <li>Eliminate unnecessary rewrites of <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/resolv.conf.5">resolv.conf(5)</a> by <a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/dhclient.8">dhclient(8)</a>.
1.1       deraadt   162:     </ul>
                    163: <p>
                    164:
1.2       pascal    165: <li>LibreSSL
1.1       deraadt   166:     <ul>
                    167:     <li>...
                    168:     </ul>
                    169: <p>
                    170:
1.2       pascal    171: <li>OpenSSH 6.7
1.1       deraadt   172:     <ul>
1.14      sobrado   173:     <li>Potentially-incompatible changes:
1.1       deraadt   174:       <ul>
1.14      sobrado   175:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    176:         The default set of ciphers and <i>MAC</i>s has been altered to remove
                    177:         unsafe algorithms.  In particular, <i>CBC ciphers</i> and
                    178:         <i>arcfour*</i> are disabled by default.
                    179:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    180:         Support for <i>tcpwrappers</i>/<i>libwrap</i> has been removed.
                    181:       <li>OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections
                    182:         using the "curve25519-sha256@libssh.org" <i>KEX exchange method</i>
                    183:         to fail when connecting with something that implements the
                    184:         specification correctly.  OpenSSH 6.7 disables this KEX method when
                    185:         speaking to one of the affected versions.
1.1       deraadt   186:       </ul>
                    187:     <li>New/changed features:
                    188:       <ul>
1.14      sobrado   189:       <li>Major internal refactoring to begin to make part of OpenSSH usable
                    190:         as a library.  So far the wire parsing, key handling and KRL code
                    191:         has been refactored.  Please note that we do not consider the API
                    192:         stable yet, nor do we offer the library in separable form.
                    193:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    194:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    195:         Add support for <i>Unix domain socket</i> forwarding.  A remote TCP
                    196:         port may be forwarded to a local Unix domain socket and vice versa or
                    197:         both ends may be a Unix domain socket.
                    198:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    199:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    200:         Add support for <i>SSHFP DNS records</i> for <i>Ed2551</i>9 key types.
                    201:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>:
                    202:         Allow resumption of interrupted uploads.
                    203:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    204:         When rekeying, skip file/DNS lookups of the hostkey if it is the same
                    205:         as the one sent during initial key exchange.  (bz#2154)
                    206:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    207:         Allow explicit ::1 and 127.0.0.1 forwarding bind addresses when
                    208:         <tt>GatewayPorts=no</tt>; allows client to choose address family.
                    209:         (bz#2222)
                    210:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    211:         Add a
                    212:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&amp;sektion=5">sshd_config(5)</a>
                    213:         <tt>PermitUserRC</tt> option to control whether <tt>~/.ssh/rc</tt> is
                    214:         executed, mirroring the <tt>no-user-rc</tt> authorized_keys option.
                    215:         (bz#2160)
                    216:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    217:         Add a %C escape sequence for <tt>LocalCommand</tt> and
                    218:         <tt>ControlPath</tt> that expands to a unique identifer based on a
                    219:         hash of the tuple of (local host, remote user, hostname, port).  Helps
                    220:         avoid exceeding miserly pathname limits for Unix domain sockets in
                    221:         multiplexing control paths.  (bz#2220)
                    222:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    223:         Make the "Too many authentication failures" message include the user,
                    224:         source address, port and protocol in a format similar to the
                    225:         authentication success/failure messages.  (bz#2199)
                    226:       <li>Added <i>unit</i> and <i>fuzz</i> tests for refactored code.
1.1       deraadt   227:       </ul>
                    228:     <li>The following significant bugs have been fixed in this release:
                    229:       <ul>
1.14      sobrado   230:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    231:         Fix remote forwarding with same listen port but different listen
                    232:         address.
                    233:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    234:         Fix inverted test that caused <i>PKCS#11</i> keys that were explicitly
                    235:         listed in
                    236:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh_config&amp;sektion=5">ssh_config(5)</a>
                    237:         or on the commandline not to be preferred.
                    238:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    239:         Fix bug in KRL generation: multiple consecutive revoked certificate
                    240:         serial number ranges could be serialised to an invalid format.
                    241:         Readers of a broken KRL caused by this bug will fail closed, so no
                    242:         should-have-been-revoked key will be accepted.
                    243:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    244:         Reflect stdio-forward ("<tt>ssh -W host:port ...</tt>") failures in
                    245:         exit status.  Previously we were always returning 0.  (bz#2255)
                    246:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>,
                    247:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    248:         Make Ed25519 keys' title fit properly in the randomart border.
                    249:         (bz#2247)
                    250:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&amp;sektion=1">ssh-agent(1)</a>:
                    251:         Only cleanup agent socket in the main agent process and not in any
                    252:         subprocesses it may have started (e.g. forked askpass).  Fixes agent
                    253:         sockets being zapped when askpass processes <i>fatal()</i>.  (bz#2236)
                    254:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>:
                    255:         Make stdout line-buffered; saves partial output getting lost when
                    256:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>
                    257:         <i>fatal()</i>s part-way through (e.g. when listing keys from an
                    258:         agent that supports key types that
                    259:         <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-add&amp;sektion=1">ssh-add(1)</a>
                    260:         doesn't).  (bz#2234)
                    261:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>:
                    262:         When hashing or removing hosts, don't choke on "@revoked" markers and
                    263:         don't remove "@cert-authority" markers.  (bz#2241)
                    264:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    265:         Don't fatal when hostname canonicalisation fails and a
                    266:         <tt>ProxyCommand</tt> is in use; continue and allow the
                    267:         <tt>ProxyCommand</tt> to connect anyway (e.g. to a host with a name
                    268:         outside the DNS behind a bastion).
                    269:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scp&amp;sektion=1">scp(1)</a>:
                    270:         When copying local->remote fails during read, don't send uninitialised
                    271:         heap to the remote end.
                    272:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>:
                    273:         Fix fatal "el_insertstr failed" errors when tab-completing filenames
                    274:         with a single quote char somewhere in the string.  (bz#2238)
                    275:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keyscan&amp;sektion=1">ssh-keyscan(1)</a>:
                    276:         Scan for Ed25519 keys by default.
                    277:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>:
                    278:         When using <tt>VerifyHostKeyDNS</tt> with a DNSSEC resolver,
                    279:         down-convert any certificate keys to plain keys and attempt SSHFP
                    280:         resolution.  Prevents a server from skipping SSHFP lookup and forcing
                    281:         a new-hostkey dialog by offering only certificate keys.
                    282:       <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&amp;sektion=8">sshd(8)</a>:
                    283:         Avoid crash at exit via NULL pointer reference.  (bz#2225)
                    284:       <li>Fix some strict-alignment errors.
1.1       deraadt   285:       </ul>
                    286:     </ul>
                    287: <p>
                    288:
                    289: <li>Ports and packages:
                    290:     <ul>
1.2       pascal    291:     <li>Over 8,800 ports.
1.1       deraadt   292:     <li>...
                    293:     </ul>
                    294: <p>
                    295: <li>Many pre-built packages for each architecture:
                    296:     <table border=0 cellspacing=0 cellpadding=2 width="95%">
                    297:     <tr>
                    298:     <td valign="top" width="25%">
                    299:     <ul>
                    300:       <li>i386:       XXXX
                    301:       <li>sparc64:    XXXX
                    302:       <li>alpha:      XXXX
                    303:       <li>m68k:       XXXX
                    304:     </ul></td><td valign=top width="25%"><ul>
                    305:       <li>sh:         XXXX
                    306:       <li>amd64:      XXXX
                    307:       <li>powerpc:    XXXX
                    308:       <li>m88k:       XXXX
                    309:     </ul></td><td valign=top width="25%"><ul>
                    310:       <li>sparc:      XXXX
                    311:       <li>arm:        XXXX
                    312:       <li>hppa:       XXXX
                    313:     </ul></td><td valign=top width="25%"><ul>
                    314:       <li>vax:        XXXX
                    315:       <li>mips64:     XXXX
                    316:       <li>mips64el:   XXXX
                    317:   </ul></td></tr></table>
                    318: <p>
                    319:
                    320: <li>Some highlights:
                    321:     <ul>
1.2       pascal    322:     <li>GNOME 3.12.2                   <li>KDE 3.5.10
1.11      zhuk      323:     <li>KDE 4.13.3
1.1       deraadt   324:     <li>Xfce 4.10                      <li>MySQL 5.1.73
1.2       pascal    325:     <li>PostgreSQL 9.3.4               <li>Postfix 2.11.1
                    326:     <li>OpenLDAP 2.3.43 and 2.4.39     <li>Mozilla Firefox 31.0
                    327:     <li>Mozilla Thunderbird 31.0       <li>GHC 7.6.3
                    328:     <li>LibreOffice 4.1.6.2            <li>Emacs 21.4 and 24.3
                    329:     <li>Vim 7.4.135                    <li>PHP 5.3.28, 5.4.30 and 5.5.14
                    330:     <li>Python 2.7.8, 3.3.5 and 3.4.1  <li>Ruby 1.8.7.374, 1.9.3.545, 2.0.0.481 and 2.1.2
                    331:     <li>Tcl/Tk 8.5.15 and 8.6.1                <li>JDK 1.6.0.32 and 1.7.0.55
                    332:     <li>Mono 3.4.0                     <li>Chromium 36.0.1985.125
                    333:     <li>Groff 1.22.2                   <li>Go 1.3
                    334:     <li>GCC 4.6.4, 4.8.3 and 4.9.0     <li>LLVM/Clang 3.5 (20140228)
                    335:     <li>Node.js 0.10.28
1.1       deraadt   336:     </ul>
                    337: <p>
                    338:
                    339: <li>As usual, steady improvements in manual pages and other documentation.
                    340: <p>
                    341:
                    342: <li>The system includes the following major components from outside suppliers:
                    343:     <ul>
1.2       pascal    344:     <li>Xenocara (based on X.Org 7.7 with xserver 1.15.2 + patches,
                    345:       freetype 2.5.3, fontconfig 2.11.1, Mesa 10.2.3, xterm 309,
                    346:       xkeyboard-config 2.11 and more)
1.1       deraadt   347:     <li>Gcc 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.12      lteo      348:     <li>Perl 5.18.2 (+ patches)
1.2       pascal    349:     <li>Nginx 1.6.0 (+ patches)
                    350:     <li>SQLite 3.8.4.3 (+ patches)
1.1       deraadt   351:     <li>Sendmail 8.14.8, with libmilter
                    352:     <li>Bind 9.4.2-P2 (+ patches)
1.12      lteo      353:     <li>NSD 4.0.3
1.2       pascal    354:     <li>Unbound 1.4.22
1.1       deraadt   355:     <li>Sudo 1.7.2p8
                    356:     <li>Ncurses 5.7
                    357:     <li>Binutils 2.15 (+ patches)
                    358:     <li>Gdb 6.3 (+ patches)
1.12      lteo      359:     <li>Less 458 (+ patches)
1.1       deraadt   360:     <li>Awk Aug 10, 2011 version
                    361:     </ul>
                    362:
                    363: </ul>
                    364:
                    365: <a name="install"></a>
                    366: <hr>
                    367: <p>
                    368: <h3><font color="#0000e0">How to install</font></h3>
                    369: <p>
                    370: Following this are the instructions which you would have on a piece of
                    371: paper if you had purchased a CDROM set instead of doing an alternate
                    372: form of install.  The instructions for doing an FTP (or other style
                    373: of) install are very similar; the CDROM instructions are left intact
                    374: so that you can see how much easier it would have been if you had
                    375: purchased a CDROM instead.
                    376: <p>
                    377:
                    378: <hr>
                    379: Please refer to the following files on the three CDROMs or FTP mirror for
                    380: extensive details on how to install OpenBSD 5.6 on your machine:
                    381: <p>
                    382: <ul>
1.8       deraadt   383: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.alpha">
                    384:        .../OpenBSD/5.6/alpha/INSTALL.alpha (on CD1)</a>
1.1       deraadt   385: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/i386/INSTALL.i386">
                    386:        .../OpenBSD/5.6/i386/INSTALL.i386 (on CD1)</a>
1.8       deraadt   387: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.hppa">
                    388:        .../OpenBSD/5.6/hppa/INSTALL.hppa (on CD1)</a>
1.1       deraadt   389: <p>
                    390: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/amd64/INSTALL.amd64">
1.8       deraadt   391:        .../OpenBSD/5.6/amd64/INSTALL.amd64 (on CD2)</a>
1.1       deraadt   392: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/macppc/INSTALL.macppc">
1.8       deraadt   393:        .../OpenBSD/5.6/macppc/INSTALL.macppc (on CD2)</a>
1.1       deraadt   394: <p>
                    395: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc64/INSTALL.sparc64">
1.8       deraadt   396:        .../OpenBSD/5.6/sparc64/INSTALL.sparc64 (on CD3)</a>
1.1       deraadt   397: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc/INSTALL.sparc">
1.8       deraadt   398:        .../OpenBSD/5.6/sparc/INSTALL.sparc (on CD3)</a>
1.1       deraadt   399: <p>
                    400: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/alpha/INSTALL.alpha">
                    401:        .../OpenBSD/5.6/alpha/INSTALL.alpha</a>
                    402: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/armish/INSTALL.armish">
                    403:        .../OpenBSD/5.6/armish/INSTALL.armish</a>
                    404: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/armv7/INSTALL.armv7">
                    405:        .../OpenBSD/5.6/armv7/INSTALL.armv7</a>
                    406: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/aviion/INSTALL.aviion">
                    407:        .../OpenBSD/5.6/aviion/INSTALL.aviion</a>
                    408: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/hppa/INSTALL.hppa">
                    409:        .../OpenBSD/5.6/hppa/INSTALL.hppa</a>
                    410: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/landisk/INSTALL.landisk">
                    411:        .../OpenBSD/5.6/landisk/INSTALL.landisk</a>
                    412: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/loongson/INSTALL.loongson">
                    413:        .../OpenBSD/5.6/loongson/INSTALL.loongson</a>
                    414: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/luna88k/INSTALL.luna88k">
                    415:        .../OpenBSD/5.6/luna88k/INSTALL.luna88k</a>
                    416: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/macppc/INSTALL.macppc">
                    417:        .../OpenBSD/5.6/macppc/INSTALL.macppc</a>
                    418: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/octeon/INSTALL.octeon">
                    419:        .../OpenBSD/5.6/octeon/INSTALL.octeon</a>
                    420: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sgi/INSTALL.sgi">
                    421:        .../OpenBSD/5.6/sgi/INSTALL.sgi</a>
                    422: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/socppc/INSTALL.socppc">
                    423:        .../OpenBSD/5.6/socppc/INSTALL.socppc</a>
                    424: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/sparc/INSTALL.sparc">
                    425:        .../OpenBSD/5.6/sparc/INSTALL.sparc</a>
                    426: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/vax/INSTALL.vax">
                    427:        .../OpenBSD/5.6/vax/INSTALL.vax</a>
                    428: <li><a href="http://ftp.openbsd.org/pub/OpenBSD/5.6/zaurus/INSTALL.zaurus">
                    429:        .../OpenBSD/5.6/zaurus/INSTALL.zaurus</a>
                    430: </ul>
                    431: <hr>
                    432:
                    433: <p>
                    434: Quick installer information for people familiar with OpenBSD, and the
                    435: use of the "disklabel -E" command.  If you are at all confused when
                    436: installing OpenBSD, read the relevant INSTALL.* file as listed above!
                    437: <p>
                    438:
                    439: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
                    440: <ul>
                    441: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
                    442: release is on CD1. If your BIOS does not support booting from CD, you will need
                    443: to create a boot floppy to install from. To create a boot floppy write
                    444: <i>CD1:5.6/i386/floppy56.fs</i> to a floppy and boot via the floppy drive.
                    445:
                    446: <p>
                    447: Use <i>CD1:5.6/i386/floppyB56.fs</i> instead for greater SCSI controller
                    448: support, or <i>CD1:5.6/i386/floppyC56.fs</i> for better laptop support.
                    449:
                    450: <p>
                    451: If you can't boot from a CD or a floppy disk,
                    452: you can install across the network using PXE as described in
                    453: the included INSTALL.i386 document.
                    454:
                    455: <p>
                    456: If you are planning on dual booting OpenBSD with another OS, you will need to
                    457: read INSTALL.i386.
                    458:
                    459: <p>
                    460: To make a boot floppy under MS-DOS, use the &quot;rawrite&quot; utility located
                    461: at <i>CD1:5.6/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
                    462: use the
                    463: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>
                    464: utility. The following is an example usage of
                    465: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&amp;sektion=1">dd(1)</a>,
                    466: where the device could be &quot;floppy&quot;, &quot;rfd0c&quot;, or
                    467: &quot;rfd0a&quot;.
                    468:
                    469: <ul><pre>
                    470: # <strong>dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k</strong>
                    471: </pre></ul>
                    472:
                    473: <p>
                    474: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
                    475: your install will most likely fail. For more information on creating a boot
                    476: floppy and installing OpenBSD/i386 please refer to
                    477: <a href="faq/faq4.html#MkFlop">FAQ 4.3.2</a>.
                    478: </ul>
                    479:
                    480: <p>
                    481: <h3><font color="#e00000">OpenBSD/amd64:</font></h3>
                    482: <ul>
                    483: The 5.6 release of OpenBSD/amd64 is located on CD2.
                    484: Boot from the CD to begin the install - you may need to adjust
                    485: your BIOS options first.
                    486: If you can't boot from the CD, you can create a boot floppy to install from.
                    487: To do this, write <i>CD2:5.6/amd64/floppy56.fs</i> to a floppy, then
                    488: boot from the floppy drive.
                    489:
                    490: <p>
                    491: If you can't boot from a CD or a floppy disk,
                    492: you can install across the network using PXE as described in the included
                    493: INSTALL.amd64 document.
                    494:
                    495: <p>
                    496: If you are planning to dual boot OpenBSD with another OS, you will need to
                    497: read INSTALL.amd64.
                    498: </ul>
                    499:
                    500: <p>
                    501: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
                    502: <ul>
                    503: Burn the image from the FTP site to a CDROM, and power on your machine
                    504: while holding down the <i>C</i> key until the display turns on and
                    505: shows <i>OpenBSD/macppc boot</i>.
                    506:
                    507: <p>
                    508: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
                    509: /5.6/macppc/bsd.rd</i>
                    510: </ul>
                    511:
                    512: <p>
                    513: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
                    514: <ul>
                    515: Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
                    516:
                    517: <p>
                    518: If this doesn't work, or if you don't have a CDROM drive, you can write
                    519: <i>CD3:5.6/sparc64/floppy56.fs</i> or <i>CD3:5.6/sparc64/floppyB56.fs</i>
                    520: (depending on your machine) to a floppy and boot it with <i>boot
                    521: floppy</i>. Refer to INSTALL.sparc64 for details.
                    522:
                    523: <p>
                    524: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    525: will most likely fail.
                    526:
                    527: <p>
                    528: You can also write <i>CD3:5.6/sparc64/miniroot56.fs</i> to the swap partition on
                    529: the disk and boot with <i>boot disk:b</i>.
                    530:
                    531: <p>
                    532: If nothing works, you can boot over the network as described in INSTALL.sparc64.
                    533: </ul>
                    534:
                    535: <p>
                    536: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
                    537: <ul>
                    538: <p>Write <i>FTP:5.6/alpha/floppy56.fs</i> or
                    539: <i>FTP:5.6/alpha/floppyB56.fs</i> (depending on your machine) to a diskette and
                    540: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
                    541:
                    542: <p>
                    543: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    544: will most likely fail.
                    545:
                    546: </ul>
                    547:
                    548: <p>
                    549: <h3><font color="#e00000">OpenBSD/armish:</font></h3>
                    550: <ul>
                    551: <p>
                    552: After connecting a serial port, Thecus can boot directly from the network
                    553: either tftp or http. Configure the network using fconfig, reset,
                    554: then load bsd.rd, see INSTALL.armish for specific details.
                    555: IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
                    556: and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
                    557: then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
                    558: More details are available in INSTALL.armish.
                    559: </ul>
                    560:
                    561: <p>
                    562: <h3><font color="#e00000">OpenBSD/hppa:</font></h3>
                    563: <ul>
                    564: <p>
                    565: Boot over the network by following the instructions in INSTALL.hppa or the
                    566: <a href="hppa.html#install">hppa platform page</a>.
                    567: </ul>
                    568:
                    569: <p>
                    570: <h3><font color="#e00000">OpenBSD/landisk:</font></h3>
                    571: <ul>
                    572: <p>
                    573: Write <i>miniroot56.fs</i> to the start of the CF
                    574: or disk, and boot normally.
                    575: </ul>
                    576:
                    577: <p>
                    578: <h3><font color="#e00000">OpenBSD/loongson:</font></h3>
                    579: <ul>
                    580: <p>
                    581: Write <i>miniroot56.fs</i> to a USB stick and boot bsd.rd from it
                    582: or boot bsd.rd via tftp.
                    583: Refer to the instructions in INSTALL.loongson for more details.
                    584: </ul>
                    585: <p>
                    586:
                    587: <p>
                    588: <h3><font color="#e00000">OpenBSD/luna88k:</font></h3>
                    589: <ul>
                    590: <p>
                    591: Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader
                    592: from the PROM, and the bsd.rd from the bootloader.
                    593: Refer to the instructions in INSTALL.luna88k for more details.
                    594: </ul>
                    595:
                    596: <p>
                    597: <h3><font color="#e00000">OpenBSD/octeon:</font></h3>
                    598: <ul>
                    599: <p>
                    600: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
                    601: Refer to the instructions in INSTALL.octeon for more details.
                    602: </ul>
                    603:
                    604: <p>
                    605: <h3><font color="#e00000">OpenBSD/sgi:</font></h3>
                    606: <ul>
                    607: <p>
                    608: To install, burn cd56.iso on a CD-R, put it in the CD drive of your
                    609: machine and select <i>Install System Software</i> from the System Maintenance
                    610: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
                    611: CD-ROM, and need a proper invocation from the PROM prompt.
                    612: Refer to the instructions in INSTALL.sgi for more details.
                    613:
                    614: <p>
                    615: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
                    616: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
                    617: system type. Refer to the instructions in INSTALL.sgi for more details.
                    618: </ul>
                    619:
                    620: <p>
                    621: <h3><font color="#e00000">OpenBSD/socppc:</font></h3>
                    622: <ul>
                    623: <p>
                    624: After connecting a serial port, boot over the network via DHCP/tftp.
                    625: Refer to the instructions in INSTALL.socppc for more details.
                    626: </ul>
                    627:
                    628: <p>
                    629: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
                    630: <ul>
                    631: Boot from one of the provided install ISO images, using one of the two
                    632: commands listed below, depending on the version of your ROM.
                    633:
                    634: <ul><pre>
                    635: ok <strong>boot cdrom 5.6/sparc/bsd.rd</strong>
                    636: or
                    637: &gt; <strong>b sd(0,6,0)5.6/sparc/bsd.rd</strong>
                    638: </pre></ul>
                    639:
                    640: <p>
                    641: If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
                    642: To do so you need to write <i>floppy56.fs</i> to a floppy.
                    643: For more information see <a href="faq/faq4.html#MkFlop">FAQ 4.3.2</a>.
                    644: To boot from the floppy use one of the two commands listed below,
                    645: depending on the version of your ROM.
                    646:
                    647: <ul><pre>
                    648: ok <strong>boot floppy</strong>
                    649: or
                    650: &gt; <strong>b fd()</strong>
                    651: </pre></ul>
                    652:
                    653: <p>
                    654: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    655: will most likely fail.
                    656:
                    657: <p>
                    658: If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
                    659: setup a bootable tape, or install via network, as told in the
                    660: INSTALL.sparc file.
                    661: </ul>
                    662:
                    663: <p>
                    664: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
                    665: <ul>
                    666: Boot over the network via mopbooting as described in INSTALL.vax.
                    667: </ul>
                    668:
                    669: <p>
                    670: <h3><font color="#e00000">OpenBSD/zaurus:</font></h3>
                    671: <ul>
                    672: <p>
                    673: Using the Linux built-in graphical ipkg installer, install the
                    674: openbsd56_arm.ipk package.  Reboot, then run it.  Read INSTALL.zaurus
                    675: for a few important details.
                    676: </ul>
                    677:
                    678: <p>
                    679: <h3><font color="#e00000">Notes about the source code:</font></h3>
                    680: <ul>
                    681: src.tar.gz contains a source archive starting at /usr/src.  This file
                    682: contains everything you need except for the kernel sources, which are
                    683: in a separate archive.  To extract:
                    684: <p>
                    685: <ul><pre>
                    686: # <strong>mkdir -p /usr/src</strong>
                    687: # <strong>cd /usr/src</strong>
                    688: # <strong>tar xvfz /tmp/src.tar.gz</strong>
                    689: </pre></ul>
                    690: <p>
                    691: sys.tar.gz contains a source archive starting at /usr/src/sys.
                    692: This file contains all the kernel sources you need to rebuild kernels.
                    693: To extract:
                    694: <p>
                    695: <ul><pre>
                    696: # <strong>mkdir -p /usr/src/sys</strong>
                    697: # <strong>cd /usr/src</strong>
                    698: # <strong>tar xvfz /tmp/sys.tar.gz</strong>
                    699: </pre></ul>
                    700: <p>
                    701: Both of these trees are a regular CVS checkout.  Using these trees it
                    702: is possible to get a head-start on using the anoncvs servers as
                    703: described <a href="anoncvs.html">here</a>.
                    704: Using these files
                    705: results in a much faster initial CVS update than you could expect from
                    706: a fresh checkout of the full OpenBSD source tree.
                    707: <p>
                    708: </ul>
                    709:
                    710: <a name="upgrade"></a>
                    711: <hr>
                    712: <p>
                    713: <h3><font color="#0000e0">How to upgrade</font></h3>
                    714: <p>
1.6       deraadt   715: If you already have an OpenBSD 5.5 system, and do not want to reinstall,
1.1       deraadt   716: upgrade instructions and advice can be found in the
                    717: <a href="faq/upgrade56.html">Upgrade Guide</a>.
                    718:
                    719: <a name="ports"></a>
                    720: <hr>
                    721: <p>
                    722: <h3><font color="#0000e0">Ports Tree</font></h3>
                    723: <p>
                    724: A ports tree archive is also provided.  To extract:
                    725: <p>
                    726: <ul><pre>
                    727: # <strong>cd /usr</strong>
                    728: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
                    729: </pre></ul>
                    730: <p>
                    731: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree.  Go
                    732: read the <a href="faq/ports/index.html">ports</a> page
                    733: if you know nothing about ports
                    734: at this point.  This text is not a manual of how to use ports.
                    735: Rather, it is a set of notes meant to kickstart the user on the
                    736: OpenBSD ports system.
                    737: <p>
                    738: The <i>ports/</i> directory represents a CVS (see the manpage for
                    739: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;arch=i386">
                    740: cvs(1)</a> if
                    741: you aren't familiar with CVS) checkout of our ports.  As with our complete
                    742: source tree, our ports tree is available via
                    743: <a href="anoncvs.html">AnonCVS</a>.
                    744: So, in order to keep current with it, you must make the <i>ports/</i> tree
                    745: available on a read-write medium and update the tree with a command
                    746: like:
                    747: <p>
                    748: <ul><pre>
                    749: # <strong>cd /usr/ports</strong>
1.6       deraadt   750: # <strong>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_6</strong>
1.1       deraadt   751: </pre></ul>
                    752: <p>
                    753: [Of course, you must replace the server name here with a nearby anoncvs
                    754: server.]
                    755: <p>
                    756: Note that most ports are available as packages through FTP. Updated
                    757: packages for the 5.6 release will be made available if problems arise.
                    758: <p>
                    759: If you're interested in seeing a port added, would like to help out, or just
                    760: would like to know more, the mailing list
                    761: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
                    762: <p>
                    763: </body>
                    764: </html>