OpenBSD 6.5

Released May 1, 2019
Copyright 1997-2019, Theo de Raadt.

@@ -29,7 +30,7 @@

See the information on the FTP page for a list of mirror machines. -
Go to the pub/OpenBSD/6.5/ directory on +
Go to the pub/OpenBSD/6.5/ directory on one of the mirror sites.
Have a look at the 6.5 errata page for a list of bugs and workarounds. @@ -39,38 +40,39 @@

signify(1) pubkeys for this release:

- -
+ +
openbsd-65-base.pub: - + RWSZaRmt1LEQT9CtPygf9CvONu8kYPTlVEJdysNoUR62/NkeWgdkc3zY -
+
openbsd-65-fw.pub: - + RWQYdGVtTv5IvpH2c+TLQAC4iV7RjoGZ/v75q8MCuC9Mca7nFVCXRefy -
+
openbsd-65-pkg.pub: - + RWS5D4+188RI6jULDOFzga0Cm1zrXYUAHT6xu0mLrZidbn6xrMB5aZeR -
+
openbsd-65-syspatch.pub: - + RWT8U2yd3Aq5DnetILjmSoCQxmyt3VqfGS7GBh19oh4Xre4ywc31PEpw -

+
All applicable copyrights and credits are in the src.tar.gz, sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the files fetched via ports.tar.gz. - -
+

What's New

This is a partial list of new features and systems included in OpenBSD 6.5. For a comprehensive list, see the changelog leading to 6.5. @@ -130,7 +132,7 @@

If an auto-join list is configured, wireless interfaces will no longer connect to unknown open networks by default. This behaviour must now be explicitly enabled by adding the empty network name to the - auto-join list, e.g. ifconfig iwm0 join "", or join "" + auto-join list, e.g. ifconfig iwm0 join "", or join "" in hostname.if files.

The iwn(4) and iwm(4) drivers will now @@ -158,7 +160,7 @@ tcpdump(8) as a filtering mechanism early in the device receive path.

ifconfig(8) gains - txprio for controlling the encoding of priority in + txprio for controlling the encoding of priority in tunnel headers, and support in drivers including vlan(4), gre(4), @@ -233,7 +235,7 @@ recursive nameserver for 127.0.0.1. It is particularly suitable for laptops moving between networks.

ifconfig(8) gains - sff and sffdump modes, displaying diagnostic + sff and sffdump modes, displaying diagnostic information from fibre transceivers and similar modules. Currently ix(4) and @@ -255,15 +257,15 @@

The configuration of BGP MPLS VPN changed and the config needs to be adjusted if VPNs are used.

Added support for IPv6 BGP MPLS VPNs. -

Implemented as-override in bgpd(8), +

Implemented as-override in bgpd(8), a feature where the neighbor AS is replaced by the local AS in AS paths.

It is now possible to match multiple communities, ext-communities or large-communities per filter rule. -

Added support for *, local-as and neighbor-as +

Added support for *, local-as and neighbor-as for ext-community matching and addition or removal.

Prevent bgpd(8) from being started more than once with the same config. -

announce inet none no longer clears announce settings of +

announce inet none no longer clears announce settings of other address families.

Removed potential for a spurious End-of-RIB marker being sent.

Fixed mrt table dumps and the route collector mode. @@ -273,17 +275,17 @@ terminates early.

Improved handling of communities, large-communities and ext-communities in bgpctl(8) -

It is now possible to use neighbor group <name> to run +

It is now possible to use neighbor group <name> to run bgpctl(8) commands against the specified group of neighbors:


-            bgpctl neighbor group  [clear|destroy|down|refresh|up]

-            bgpctl show neighbor group  [messages|terse|timers]

-            bgpctl show rib neighbor group  ...

+            bgpctl neighbor group <name> [clear|destroy|down|refresh|up]

+            bgpctl show neighbor group <name> [messages|terse|timers]

+            bgpctl show rib neighbor group <name> ...

bgpctl(8) can now add networks into BGP VPN tables by specifying the route distinguisher - rd on the network command. + rd on the network command.

bgplg(8) and bgplgsh(8) can now filter on Origin Validation State and Extended Communities. @@ -627,34 +629,20 @@

C++ ports for non-clang architectures are now compiled with ports gcc, so that more packages can be provided.

Many pre-built packages for each architecture: -

Many pre-built packages for each architecture: - - -
-
+

aarch64: 9654
amd64: 10602
arm: 8721 -

i386: 10535
mips64: 8556
mips64el: XXXX -

powerpc: 9515
sparc64: 9495 -
-

- -

Some highlights: -

- - -

+ +

Some highlights: +

AFL 2.52b
Asterisk 16.2.1
Audacity 2.3.1 @@ -668,7 +656,6 @@
Go 1.12.1
Groff 1.22.4
JDK 8u202 and 11.0.2+9-3 -

LLVM/Clang 7.0.1
LibreOffice 6.2.2.2
Lua 5.1.5, 5.2.4 and 5.3.5 @@ -682,7 +669,6 @@
OpenLDAP 2.3.43 and 2.4.47
PHP 7.1.28, 7.2.17 and 7.3.4
Postfix 3.3.3 and 3.4.20190106 -

PostgreSQL 11.2
Python 2.7.16 and 3.6.8
R 3.5.3 @@ -696,7 +682,7 @@
TeX Live 2018
Vim 8.1.1048 and Neovim 0.3.4
Xfce 4.12 -

As usual, steady improvements in manual pages and other documentation. @@ -719,10 +705,12 @@

Expat 2.2.6 +

How to install

Please refer to the following files on the mirror site for extensive details on how to install OpenBSD 6.5 on your machine: @@ -758,146 +746,122 @@

Quick installer information for people familiar with OpenBSD, and the use of the "disklabel -E" command. If you are at all confused when installing OpenBSD, read the relevant INSTALL.* file as listed above! -

OpenBSD/alpha:

+
Write floppy65.fs or floppyB65.fs (depending on your machine) to a diskette and enter boot dva0. Refer to INSTALL.alpha for more details. +
-
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail. -

OpenBSD/amd64:

+
If your machine can boot from CD, you can write install65.iso or cd65.iso to a CD and boot from it. You may need to adjust your BIOS options first. +
-
If your machine can boot from USB, you can write install65.fs or miniroot65.fs to a USB stick and boot from it. +
-
If you can't boot from a CD, floppy disk, or USB, you can install across the network using PXE as described in the included INSTALL.amd64 document. +
-
If you are planning to dual boot OpenBSD with another OS, you will need to read INSTALL.amd64. -

OpenBSD/arm64:

+
Write miniroot65.fs to a disk and boot from it after connecting to the serial console. Refer to INSTALL.arm64 for more details. -
-

OpenBSD/armv7:

+
Write a system specific miniroot to an SD card and boot from it after connecting to the serial console. Refer to INSTALL.armv7 for more details. -
-

OpenBSD/hppa:

+
Boot over the network by following the instructions in INSTALL.hppa or the hppa platform page. -

OpenBSD/i386:

+
If your machine can boot from CD, you can write install65.iso or cd65.iso to a CD and boot from it. You may need to adjust your BIOS options first. +
-
If your machine can boot from USB, you can write install65.fs or miniroot65.fs to a USB stick and boot from it. +
-
If you can't boot from a CD, floppy disk, or USB, you can install across the network using PXE as described in the included INSTALL.i386 document. +
-
If you are planning on dual booting OpenBSD with another OS, you will need to read INSTALL.i386. -

OpenBSD/landisk:

+
Write miniroot65.fs to the start of the CF or disk, and boot normally. -

OpenBSD/loongson:

+
Write miniroot65.fs to a USB stick and boot bsd.rd from it or boot bsd.rd via tftp. Refer to the instructions in INSTALL.loongson for more details. -

OpenBSD/luna88k:

-Copy `boot' and `bsd.rd' to a Mach or UniOS partition, and boot the bootloader +
+Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader from the PROM, and then bsd.rd from the bootloader. Refer to the instructions in INSTALL.luna88k for more details. -

OpenBSD/macppc:

+
Burn the image from a mirror site to a CDROM, and power on your machine while holding down the C key until the display turns on and shows OpenBSD/macppc boot. +
-
Alternatively, at the Open Firmware prompt, enter boot cd:,ofwboot /6.5/macppc/bsd.rd -

OpenBSD/octeon:

+
After connecting a serial port, boot bsd.rd over the network via DHCP/tftp. Refer to the instructions in INSTALL.octeon for more details. -

OpenBSD/sgi:

+
To install, burn cd65.iso on a CD-R, put it in the CD drive of your machine and select Install System Software from the System Maintenance menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from @@ -905,90 +869,98 @@ Refer to the instructions in INSTALL.sgi for more details.
-
If your machine doesn't have a CD drive, you can setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your system type. Refer to the instructions in INSTALL.sgi for more details. -

OpenBSD/sparc64:

+
Burn the image from a mirror site to a CDROM, boot from it, and type boot cdrom. +
-
If this doesn't work, or if you don't have a CDROM drive, you can write floppy65.fs or floppyB65.fs (depending on your machine) to a floppy and boot it with boot floppy. Refer to INSTALL.sparc64 for details. +
-
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail. +
-
You can also write miniroot65.fs to the swap partition on the disk and boot with boot disk:b. +
-
If nothing works, you can boot over the network as described in INSTALL.sparc64. -

How to upgrade

If you already have an OpenBSD 6.4 system, and do not want to reinstall, upgrade instructions and advice can be found in the Upgrade Guide. -

Notes about the source code

-src.tar.gz contains a source archive starting at /usr/src. +

+src.tar.gz contains a source archive starting at /usr/src. This file contains everything you need except for the kernel sources, which are in a separate archive. To extract:

-# mkdir -p /usr/src
-# cd /usr/src
-# tar xvfz /tmp/src.tar.gz
+# mkdir -p /usr/src
+# cd /usr/src
+# tar xvfz /tmp/src.tar.gz

-sys.tar.gz contains a source archive starting at /usr/src/sys. +

+sys.tar.gz contains a source archive starting at /usr/src/sys. This file contains all the kernel sources you need to rebuild kernels. To extract:

-# mkdir -p /usr/src/sys
-# cd /usr/src
-# tar xvfz /tmp/sys.tar.gz
+# mkdir -p /usr/src/sys
+# cd /usr/src
+# tar xvfz /tmp/sys.tar.gz

Both of these trees are a regular CVS checkout. Using these trees it is possible to get a head-start on using the anoncvs servers as described here. Using these files results in a much faster initial CVS update than you could expect from a fresh checkout of the full OpenBSD source tree. -

Ports Tree

A ports tree archive is also provided. To extract:

-# cd /usr
-# tar xvfz /tmp/ports.tar.gz
+# cd /usr
+# tar xvfz /tmp/ports.tar.gz

Go read the ports page if you know nothing about ports at this point. This text is not a manual of how to use ports. @@ -1003,19 +975,20 @@ with a command like:

-# cd /usr/ports
-# cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5
+# cd /usr/ports
+# cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_5

[Of course, you must replace the server name here with a nearby anoncvs server.] +

Note that most ports are available as packages on our mirrors. Updated ports for the 6.5 release will be made available if problems arise. +

If you're interested in seeing a port added, would like to help out, or just would like to know more, the mailing list ports@openbsd.org is a good place to know. -

- - +

+

-OpenBSD -6.5 +OpenBSD +6.5

What's New

What's New

How to install

How to install

OpenBSD/alpha:

OpenBSD/alpha:

OpenBSD/amd64:

OpenBSD/amd64:

OpenBSD/arm64:

OpenBSD/arm64:

OpenBSD/armv7:

OpenBSD/armv7:

OpenBSD/hppa:

OpenBSD/hppa:

OpenBSD/i386:

OpenBSD/i386:

OpenBSD/landisk:

OpenBSD/landisk:

OpenBSD/loongson:

OpenBSD/loongson:

OpenBSD/luna88k:

OpenBSD/luna88k:

OpenBSD/macppc:

OpenBSD/macppc:

OpenBSD/octeon:

OpenBSD/octeon:

OpenBSD/sgi:

OpenBSD/sgi:

OpenBSD/sparc64:

OpenBSD/sparc64:

How to upgrade

How to upgrade

Notes about the source code

Notes about the source code

Ports Tree

Ports Tree