Annotation of www/66.html, Revision 1.21
1.7 bentley 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
1.1 beck 5: <title>OpenBSD 6.6</title>
6: <meta name="description" content="OpenBSD 6.6">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
9: <link rel="canonical" href="https://www.openbsd.org/66.html">
10:
1.7 bentley 11: <h2 id=OpenBSD>
1.1 beck 12: <a href="index.html">
1.7 bentley 13: <i>Open</i><b>BSD</b></a>
14: 6.6
1.1 beck 15: </h2>
16:
1.7 bentley 17: <table>
18: <tr>
19: <td>
1.21 ! benno 20: <a href="images/Puffystock.gif"><!-- XXX -->
! 21: <img alt="XXX" width="227" height="343" src="images/Puffystock-s.gif"></a>
1.7 bentley 22: <td>
1.1 beck 23: Released XXX, 2019<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
1.21 ! benno 27: Artwork by XXX Y Z.<!-- XXX -->
1.1 beck 28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
1.7 bentley 32: <li>Go to the <code class=reldir>pub/OpenBSD/6.6/</code> directory on
1.1 beck 33: one of the mirror sites.
34: <li>Have a look at <a href="errata66.html">the 6.6 errata page</a> for a list
35: of bugs and workarounds.
36: <li>See a <a href="plus66.html">detailed log of changes</a> between the
37: 6.5 and 6.6 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<p>
41:
1.7 bentley 42: <table class=signify>
43: <tr><td>
44: openbsd-66-base.pub:
1.1 beck 45: <td>
46: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/openbsd-66-base.pub">
1.21 ! benno 47: RWSvK/c+cFe24BIalifKnqoqdvLlXfeZ9MIj3MINndNeKgyYw5PpcWGn</a>
1.7 bentley 48: <tr><td>
1.1 beck 49: openbsd-66-fw.pub:
1.7 bentley 50: <td>
1.21 ! benno 51: RWSKyzM3wogTrgHkO88MnRiK/yuu8xy2OeIqhnP/uGL/j2IF4I5djMIM
1.7 bentley 52: <tr><td>
1.1 beck 53: openbsd-66-pkg.pub:
1.7 bentley 54: <td>
1.21 ! benno 55: RWSS4lqHZ5ayOFMBPj3leAkE9tCsSWG9OxD6MmAIS5Y3H3tD6F4vP/eF
1.7 bentley 56: <tr><td>
1.1 beck 57: openbsd-66-syspatch.pub:
1.7 bentley 58: <td>
1.21 ! benno 59: RWRQMmZg6mMlSTfHsJH9czeLAvf9e+ViLvkQ4id4dxaQqWU3aX9Cl/W1
1.1 beck 60: </table>
1.7 bentley 61: </ul>
1.1 beck 62: <p>
63: All applicable copyrights and credits are in the src.tar.gz,
64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
1.9 deraadt 65: files fetched via <code>ports.tar.gz</code>.
1.7 bentley 66: </table>
1.1 beck 67:
68: <hr>
69:
1.7 bentley 70: <section id=new>
71: <h3>What's New</h3>
72: <p>
1.1 beck 73: This is a partial list of new features and systems included in OpenBSD 6.6.
74: For a comprehensive list, see the <a href="plus66.html">changelog</a> leading
75: to 6.6.
76:
77: <ul>
78:
1.21 ! benno 79: <li>General improvements and bugfixes::
! 80: <ul>
! 81: <li>Fixed support for amd64 machines with greater than 1023GB
! 82: physical memory.
! 83: <li><a href="https://man.openbsd.org/drm.4">drm(4)</a> updates.
! 84: <li>The powerpc and octeon architectures are now build with
! 85: <a href="https://man.openbsd.org/clang.1">clang(1)</a>, in
! 86: addition to aarch64, amd64, arm, i386, mips64el, sparc64.
! 87: <li>Disabled <a href="https://man.openbsd.org/gcc.1">gcc</a> in
! 88: base on armv7 and i386.
! 89: <li>Prevented <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
! 90: from repeatedly obtaining a new lease when the mtu is given in a
! 91: lease.
! 92: <li>Prevented more than one thread from opening a
! 93: <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> device in
! 94: read/write mode.
! 95: <li>Allowed non-root users to become owner of the
! 96: <a href="https://man.openbsd.org/drm.4">drm(4)</a> device when they are
! 97: the first to open it.
! 98: <li>Added regular expression support for the format search, match
! 99: and substitute modifiers in
! 100: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
! 101: <li>Added a -v flag to source-file in
! 102: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to show the commands
! 103: and line numbers.
! 104: <li>Added simple menus usable with mouse or keyboard in
! 105: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
! 106: Introduced the command "display-menu" to show a menu bound to
! 107: the mouse on status line by default, and added menus in tree,
! 108: client and buffer modes.
! 109: <li>Changed the behavior of swap-window -d in
! 110: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to match
! 111: swap-pane.
! 112: <li>Allow panes to be empty in
! 113: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, and
! 114: enabling output to be piped to them with split-window or
! 115: display-message -I.
! 116: <li>Adjusted <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
! 117: to automatically scroll when dragging to create a selection with
! 118: the mouse when the cursor reaches the top or bottom line.
! 119: <li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
! 120: crash when killing the current window, and other bugfixes.
! 121: </ul>
! 122:
! 123: <li>SMP-Improvements, System call unlocking: ... <!-- XXX -->
! 124: <ul>
! 125: <li>Unlocked <a href="https://man.openbsd.org/getrlimit.2">getrlimit(2)</a>
! 126: and <a href="https://man.openbsd.org/setrlimit.2">setrlimit(2)</a>
! 127: syscalls.
! 128: <li>Unlocked <a href="https://man.openbsd.org/read.2">read(2)</a> and
! 129: <a href="https://man.openbsd.org/write.2">write(2)</a> syscalls.
! 130: <li>Removed the KERNEL_LOCK from
! 131: the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>
! 132: output fast-path.
! 133: <li>Made resource limit access MP-safe.
! 134: </ul>
! 135:
1.1 beck 136: <li>Improved hardware support, including:
1.21 ! benno 137: <ul>
! 138: <li>Added support for ethernet on Lenovo USB-C docks.
! 139: <li>Implemented Linux compatibility
! 140: <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>
! 141: interfaces and enabled the ACPI support code in
! 142: <a href="https://man.openbsd.org/radeon.4">radeon(4)</a> and
! 143: <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
! 144: <li>Implemented backlight control for
! 145: <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, allowing setting
! 146: of the backlight using
! 147: <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
! 148: <li>Speakers now work on the ThinkPad X1C7.
! 149: <li>Added <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, an AMD
! 150: RADEON GPU video driver.
! 151: <li>Added TSC synchronization for multiprocessor machines and re-enabled TSC
! 152: as the default amd64 time source.
! 153: <li>Added support of Realtek ALC285 in
! 154: <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>.
! 155: <li>Added <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a> support
! 156: for the KSMedia 8-bit IR format and for dual functions on integrated USB
! 157: cameras.
! 158: <li>Added the <a href="https://man.openbsd.org/aplgpi.4">aplgpio(4)</a>
! 159: driver for the gpio controllers on Intel's Apollo Lake SoC.
! 160: <li>Implemented MSI-X support on sparc64.
! 161: <li>Skipped PCI host bridges and devices not present with
! 162: <a href="https://man.openbsd.org/acpi.1">acpi(1)</a> when establishing
! 163: the mapping between ACPI device nodes and PCI devices.
! 164: <li>Added the <a href="https://man.openbsd.org/ukspan.4">ukspan(4)</a>
! 165: driver for the Keyspan USA19HS USB serial adapter.
! 166: <li>Supported 64BIT DMA for io in
! 167: <a href="https://man.openbsd.org/mpii.4">mpii(4)</a>.
! 168: <li>Fixed MSI/MSI-X on arm64 machines with
! 169: <a href="https://man.openbsd.org/agintc.4">agintc(4)</a>.
! 170: <li>Added MSI-X support in
! 171: <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>, pciecam,
! 172: <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> and
! 173: <a href="https://man.openbsd.org/rkpcie.4">rkpcie(4)</a>.
! 174: <li>Improved support for type4 devices in the
! 175: <a href="https://man.openbsd.org/ubcmtp.4">ubcmtp(4)</a> multi-touch
! 176: trackpad driver.
! 177: <li>Support for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> 1.0
! 178: specification for PCI devices.
! 179: <li>Improved support for the AR9271 chipset
! 180: in <a href="https://man.openbsd.org/athn.4">athn(4)</a> .
! 181: <li>Support for the trackpad and trackpoint of the Dell Precision 7520
! 182: laptop in the <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>
! 183: driver.
! 184: <li>Added the colemak keyboard layout.
! 185: <li>New <a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
! 186: driver for the Fairchild FUSB302 USB Type-C controller.
! 187: <li>Added a fallback to
! 188: <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>
! 189: which enables the USB ports on the RockPro64.
! 190: <li>Added support for more Intel 300 Series PCH devices to
! 191: <a href="https://man.openbsd.org/ichiic.4">ichiic(4)</a>.
! 192: <li>Added <a href="https://man.openbsd.org/mcx.4">mcx(4)</a> driver for
! 193: Mellanox ConnectX-4 (and later) Ethernet controllers.
! 194: <li>Added support for the cryptographic coprocessor found on newer
! 195: AMD Ryzen CPUs/APUs.
! 196: <li>Improved the <a href="https://man.openbsd.org/envy.4">envy(4)</a> codec
! 197: API and used it on ESI Juli@ cards.
! 198: <li>Enabled EnvyHT-specific sample rates (above 96kHz) on the host
! 199: controller for <a href="https://man.openbsd.org/envy.4">envy(4)</a>
! 200: devices.
! 201: <li>Added support for the USB serial adapter found in Juniper SRX 300 to
! 202: <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.
! 203: <li>Updated shared drm code,
! 204: <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>
! 205: and <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
! 206: to linux 4.19.34. This adds support for Intel Broxton/Apollo
! 207: Lake, Amber Lake, Gemini Lake, Coffee Lake, Whiskey Lake, Cannon
! 208: Lake and Ice Lake hardware.
! 209: <li>Made <a href="https://man.openbsd.org/startx.1">startx(1)</a> and
! 210: <a href="https://man.openbsd.org/xinit.1">xinit(1)</a> work again on
! 211: modern systems using
! 212: <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>,
! 213: <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
! 214: and <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
! 215: <li>Added <a href="https://man.openbsd.org/mcprtc.4">mcprtc(4)</a>, a driver
! 216: for the Microchip MCP79400 RTC and similar.
! 217: <li>Added I2C clock gates to <a href="https://man.openbsd.org/mvclock.4">
! 218: mvclock(4)</a>.
! 219: <li>Added support for MSI-X to <a href="https://man.openbsd.org/bnx.4">
! 220: bnxt(4)</a>.
! 221: <li>Added <a href="https://man.openbsd.org/octpip.4">octpip(4)</a>, a driver
! 222: for the Octeon packet input processing unit.
! 223: <li>Added the <a href="https://man.openbsd.org/octiic.4">octiic(4)</a>
! 224: driver for OCTEON two-wire serial interfaces.
! 225: <li>Enabled <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> on octeon.
! 226: <li>Added <a href="https://man.openbsd.org/octpcie.4">octpcie(4)</a>, a
! 227: driver for the PCIe controller found on OCTEON II and OCTEON III.
! 228: <li>Added the <a href="https://man.openbsd.org/octiic.4">octiic(4)</a>
! 229: driver for OCTEON two-wire serial interfaces.
! 230: <li>Fixed random kernel hangs on
! 231: some <a href="https://www.openbsd.org/sparc64.html">sparc64</a>
! 232: machines by blocking interrupts while sending an IPI on sunv4
! 233: (as on sun4u).
! 234: </ul>
! 235:
! 236: <li>Improved <a href="https://www.openbsd.org/arm64.html">arm64</a> hardware
! 237: support, including:
! 238: <ul>
! 239: <li>Added support for Ampere eMAG CPU based systems.
! 240: <li>Added support to <a href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>
! 241: for obtaining CPU clock frequency.
! 242: <li>Enabled <a href="https://man.openbsd.org/amlmmc.4">amlmmc(4)</a>, a
! 243: driver for the SD/MMC controller found on various Amlogic SoCs.
! 244: <li>Implemented setting the CPU clock for Allwinner A64 SoCs in
! 245: <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
! 246: <li>Added <a href="https://man.openbsd.org/amldwusb.4">amldwusb(4)</a>,
! 247: <a href="https://man.openbsd.org/amlusbphy.4">amlusbphy(4)</a> and
! 248: <a href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>, drivers
! 249: for the USB controller and PHYs on the Amlogic G12A/B SoCs.
! 250: <li>Added <a href="https://man.openbsd.org/imxtmu.4">imxtmu(4)</a>, a driver
! 251: to upport the temperature sensors on i.MX8M SoCs.
! 252: <li>Added <a href="https://man.openbsd.org/amlrng.4">amlrng(4)</a>, a simple
! 253: random number generator driver for Amlogic SoCs.
! 254: <li>Added <a href="https://man.openbsd.org/amclock.4">amclock(4)</a>,
! 255: a driver for the Amlogic SoC clocks.
! 256: <li>Added <a href="https://man.openbsd.org/amluart.4">amluart(4)</a>, a
! 257: driver for the UARTs found on various Amlogic SoCs.
! 258: <li>Added support for the SMBus System Interfaces (SSIF) to
! 259: <a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a>.
! 260: <li>PXE booting using U-Boot works now.
! 261: <li>Added clock support
! 262: to <a href="https://man.openbsd.org/sxisyscon.4">sxisyscon(4)</a>,
! 263: a driver for the system controller found on various Allwinner
! 264: SoCs.
! 265: <li>Implemented <a href="https://man.openbsd.org/smbios.4">smbios(4)</a>
! 266: support on arm64.
! 267: <li>Added <a href="https://man.openbsd.org/ucrcom.4">ucrcom(4)</a>, a driver
! 268: for the serial console of chromebooks.
! 269: <li>Enabled <a href="https://man.openbsd.org/mvmdio.4">mvmdio(4)</a> and
! 270: <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> on arm64.
! 271: <li>Added <a href="https://man.openbsd.org/pinctrl.4">pinctrl(4)</a>
! 272: support for 'pinconf-single' devices and support for
! 273: bias and drive-strength properties, needed for HiSilicon SoCs.
! 274: <li>Added <a href="https://man.openbsd.org/mvdog.4">mvdog(4), a driver</a>
! 275: to support the watchdog on the Armada 3700 SoC.
! 276: <li>Added support for the Allwinner H6 to
! 277: <a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a> and
! 278: <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
! 279: <li>Enabled <a href="https://man.openbsd.org/amlmmc.4">amlmmc(4)</a>, a
! 280: driverfor the SD/MMC controller found on various Amlogic SoCs.
! 281: <li>Added <a href="https://man.openbsd.org/mviic.4">mviic(4)</a>, a driver
! 282: to support the I2C controller on the Armada 3700 SoC.
! 283: <li>Added <a href="https://man.openbsd.org/mvuart.4">mvuart(4)</a> to
! 284: support the Armada 3720's serial console.
! 285: <li>Added support for the Armada 3720 clocks to
! 286: <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>
! 287: and added <a href="https://man.openbsd.org/mvuart.4">mvuart(4) to</a>
! 288: support the serial console.
! 289: <li>Added support for the Armada 3720 pinctrl controller to
! 290: <a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a>. This
! 291: controller also includes GPIO controller functionality.
! 292: <li>Added the RK3328 and RK3399 GMAC clocks to
! 293: <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
! 294: <li>Increased MAXCPUs to 32 in arm64, allowing use of all cores on the Ampere
! 295: eMAG.
! 296: <li>Added support for the Cortex-A65 CPU.
! 297: <li>Implemented interrupt controller functionality in
! 298: <a href="https://man.openbsd.org/rkgpio.4">rkgpio(4)</a>,
! 299: allowing use of the
! 300: <a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
! 301: interrupt on the RockPro64.
! 302: </ul>
1.1 beck 303:
304: <li>IEEE 802.11 wireless stack improvements:
305: <ul>
1.21 ! benno 306: <li>Made net80211 expose reasons for association failures to have
! 307: <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
! 308: display them in "scan" output and on the
! 309: <a href="https://man.openbsd.org/ieee80211.9">ieee80211(9)</a>
! 310: status line.
! 311: <li><a href="https://man.openbsd.org/ure.4">ure(4)</a> now supports
! 312: RTL8153B devices.
! 313: <li>Added support for 802.11n Tx aggregation to net80211 and
! 314: <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
! 315: <li>... <!-- XXX -->
1.1 beck 316: </ul>
317:
318: <li>Generic network stack improvements:
1.21 ! benno 319: <ul>
! 320: <li>Enabled TCP and UDP checksum offloading by default for
! 321: <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
! 322: <li>Added <a href="https://man.openbsd.org/tpmr.4">tpmr(4)</a>, a 802.1Q
! 323: two-port MAC relay implementation.
! 324: <li>Added <a href="https://man.openbsd.org/iavf.4">iavf(4)</a> driver for
! 325: Intel SR-IOV Virtual Functions of Intel 700 series ethernet controllers.
! 326: <li>Added <a href="https://man.openbsd.org/aggr.4">aggr(4)</a>, a
! 327: dedicated driver to implement 802.1AX link aggregration.
! 328: <li>Added port protection support
! 329: to <a href="https://man.openbsd.org/switch.4">switch(4)</a>. Domain
! 330: membership is checked for unicast, flooded (broadcast) and local
! 331: (host-network-bound, e.g. trunk) traffic.
! 332: <li>Disabled <a href="https://man.openbsd.org/mobileip.4">mobileip(4)</a>.
! 333: <li>Added support
! 334: to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
! 335: for getting and setting rxprio, finishing support for RFC
! 336: 2983. Implemented configuring rxprio
! 337: in <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>,
! 338: <a href="https://man.openbsd.org/gre.4">gre(4)</a>,
! 339: <a href="https://man.openbsd.org/mpw.4">mpw(4)</a>,
! 340: <a href="https://man.openbsd.org/mpe.4">mpe(4)</a>,
! 341: <a href="https://man.openbsd.org/mpip.4">mpip(4)</a>,
! 342: <a href="https://man.openbsd.org/etherip.4">etherip(4)</a>
! 343: and <a href="https://man.openbsd.org/bpe.4">bpe(4)</a> .
! 344: <li>Implemented tx mitigation by calling the hardware transmit
! 345: routine per several packets rather than for individual
! 346: packets. Defers calls to the transmit routine to a network taskq,
! 347: or until a backlog of packets has built up.
! 348: <li>Stopped using <a href="https://man.openbsd.org/splnet.9">splnet(9)</a> when
! 349: running the network stack now
! 350: that it is using the NET_LOCK for protection, reducing latency spikes.
! 351: <li>Added <a href="https://man.openbsd.org/sfp.4">sfp(4), a driver</a>
! 352: allowing communication with SFPs connected over
! 353: an I2C bus and reading pages over the SFP framework.
! 354: <li>Added SFP and I2C ofw frameworks.
! 355: </ul>
1.1 beck 356:
357: <li>Installer improvements:
1.21 ! benno 358: <ul>
! 359: <li>Allowed quoted SSIDs in the installer, rather than ignoring
! 360: those containing whitespace.
! 361: <li>Introduced <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
! 362: that can be used to upgrade OpenBSD from one release to the next
! 363: or from snapshot to snapshot without user input.
! 364: <li>Added octeon bootloader to files copied to the boot partition.
! 365: To use the bootloader, the firmware must be configured to load file "boot"
! 366: instead of "bsd."
! 367: <li>Included <a href="https://man.openbsd.org/mount_nfs.8">mount_nfs(8)</a>
! 368: on the amd64 CD ramdisk.
! 369: <li>Added <a href="https://man.openbsd.org/tee.1">tee(1)</a> to the ramdisk, and
! 370: display a moving progress bar
! 371: during auto upgrade/install.
! 372: <li>Repaired and improved v6 default route selection, fixing autoinstalls.
! 373: <li>Added <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
! 374: support to the sparc64 bootloader.
! 375: <li>The dhcp configuration is now preserved when restarting an install.
! 376: <li>The installer now remembers 'autoconf' when restarting an install.
! 377: <li>Stopped prompting for disks that do not contain a root
! 378: partition during upgrades. This defaults to the correct disk
! 379: when full disk encryption is in use, and will be useful for
! 380: future unattended upgrades.
! 381: <li>Added <a href="https://www.openbsd.org/octeon.html">octeon</a>
! 382: bootloader to files copied to the boot partition. To use the
! 383: bootloader, the firmware must be configured to load file "boot"
! 384: instead of "bsd."
! 385: </ul>
1.1 beck 386:
387: <li>Security improvements:
388: <ul>
1.21 ! benno 389: <li><a href="https://man.openbsd.org/unveil.2">unveil(2)</a> is
! 390: now used in 77 userland programs to restrict filesystem
! 391: access.
! 392: <li>Various changes
! 393: in <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
! 394: to improve application behaiviour when encountering hidden
! 395: filesystem paths.
! 396: <li><a href="https://man.openbsd.org/ps.1">ps(1)</a> can now show
! 397: which processes have called unveil(2) to run with a restricted
! 398: filesystem view.
! 399: <li>Further and improved mittigations against Spectre side-channel
! 400: vulnerability in Intel CPUs built since 2012.
! 401: <li>Mitigations for Intel's Microarchitectural Data Sampling
! 402: vulnerability, using the new CPU VERW behavior if available or
! 403: by using the proper sequence from Intel's "Deep Dive" doc in the
! 404: return-to-userspace and enter-VMM-guest
! 405: paths. Updated <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
! 406: to pass through the MSR bits so that guests can apply the
! 407: optimal mitigation.
! 408: <li>Rewrote <a href="https://man.openbsd.org/doas.1">doas(1)</a>
! 409: environment inheritance not to inherit, and instead reset to the
! 410: target user's values by default.
! 411: <li>Make
! 412: the <a href="https://www.openbsd.org/amd64.htmp">amd64</a> BIOS
! 413: bootloader load a kernel at a random virtual address.
! 414: <li>Introduced
! 415: <a href="https://man.openbsd.org/malloc_conceal.3">malloc_conceal(3)</a>
! 416: and <a href="https://man.openbsd.org/calloc_conceal.3">calloc_conceal(3)</a>,
! 417: which return memory in pages marked MAP_CONCEAL and call
! 418: <a href="https://man.openbsd.org/freezero.3">freezero(3)</a>
! 419: on <a href="https://man.openbsd.org/free.3">free(3)</a>.
! 420: <li>Make 'systat pf' not require root permissions
! 421: (<a href="https://man.openbsd.org/systat.8">systat(8)</a>).
! 422: <li>Added support for the EFI Random Number Generator Protocol,
! 423: using it to XOR random data into the buffer we feed the kernel for
! 424: <a href="https://www.openbsd.org/amd64.html">amd64</a>.
! 425: <li>Added information about system call memory write protection
! 426: and stack mappion violations to system
! 427: accounting. Now <a href="https://man.openbsd.org/daily.8">daily(8)</a>
! 428: will print a list of affected processes
! 429: and <a href="https://man.openbsd.org/lastcom.1">lastcomm(1)</a>
! 430: will flag violations with 'M'.
1.1 beck 431: </ul>
432:
433: <li>Routing daemons and other userland network improvements:
1.21 ! benno 434: <ul>
! 435: <li>The <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
! 436: daemon now gets and sets the clock in a secure way when booting
! 437: even when a battery-backed clock is absent.
! 438: <li><a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> now
! 439: removes IPv6 addresses when it detects a link-state change but
! 440: no new router advertisement is received.
! 441: <li><a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
! 442: now reports SFP, SFP+ and QSFP module information.
! 443: <li>Imported <a href="https://man.openbsd.org/snmp.1">snmp(1)</a>,
! 444: a new snmp client which aims to be netsnmp-compatible for
! 445: supported features, and
! 446: removed <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a>.
! 447: <li>Improvements
! 448: in <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>s dns
! 449: resoving and constraints checking, especially during
! 450: startup. Unreliable ntp peers are removed them from the pool and
! 451: dns resolving is repeated to add replacements.
! 452: <li>Changed the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
! 453: Adj-RIB-Out to a per-peer set of RB trees, improving speed.
! 454: <li>Rewrote <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
! 455: community matching and handling code and improved performance
! 456: for setups using many communities.
! 457: <li>Checked the type of a network statement when looking for
! 458: duplicates
! 459: in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>. This
! 460: fixes added network 0.0.0.0/0 after 'network inet static'.
! 461: <li>Made improvements
! 462: to <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> speed when
! 463: configuring many peers.
! 464: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>
! 465: 'show mrt neighbors', to print the neighbor table of MRT
! 466: TABLE_DUMP_V2 dumps.
! 467: <li>Moved <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
! 468: pfkey socket to the parent process. The refreshing of the keys
! 469: for MD5 and IPSEC is done whenever the session state changes to
! 470: IDLE or ACTIVE, which should behave better when reloading
! 471: configs with auth changes.
! 472: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, fixed
! 473: reloading of network statements that have no fixed prefix
! 474: specification.
! 475: <li>Extended the maximum size of
! 476: the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
! 477: shutdown communication message to 255 bytes.
! 478: <li>Improvements
! 479: in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>, to
! 480: always check for namespace collisions on table
! 481: commands. Introduced 'pfctl -FR' to reset pfctl(8) settings to
! 482: defaults.
! 483: <li>Added support
! 484: to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
! 485: and various network drivers to display SFP+, XFP, and d QSFP+
! 486: tranceiver information.
! 487: <li>Imported Kristaps Dzonsons' RPKI
! 488: validator, <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
! 489: <li> <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports
! 490: binary protocol health checking. See
! 491: <a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a>.
! 492: <li>Added support for OCSP stapling
! 493: to <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
! 494: <li>Added <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>
! 495: support for SNI with new 'tls keypair' option to load additional
! 496: certificates.
! 497: <li>Added support for 'from/to address[/prefix]'
! 498: in <a href="https://man.openbsd.org/.8">relayd(8)</a> filter rules.
! 499: <li>Implemented RFC 8555 "Automatic Certificate Management
! 500: Environment (ACME)" to
! 501: enable <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
! 502: to communicate with the v02 Let's Encrypt API. Read the
! 503: <a href="faq/upgrade66.html">upgrade guide</a> for more information.
! 504: <li><a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
! 505: support for '-T erspan' and
! 506: arbitrary <a href="https://man.openbsd.org/gre.4">gre(4)</a>
! 507: protocols.
! 508: <li>Allowed specifying area by number as well as id
! 509: in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.
! 510: <li><a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> now
! 511: accepts both address and number format for 'ospfctl show
! 512: database area XXX'.
! 513: <li><a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> reload
! 514: improvements.
! 515: <li>Added a check
! 516: to <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>
! 517: and <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>
! 518: that any "depend on" interfaces are in the same rdomain.
! 519: <li>Make 'passive' (announce a network configured on an interface
! 520: as a stub network) work with P2P interfaces
! 521: in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>.
! 522: <li>Shutdown the service port when behind a captive portal
! 523: with <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>,
! 524: allowing bypass of captive portals that correctly answer SOA
! 525: queries for the root zone and return NXDOMAIN for the captive
! 526: portal redirect domain if edns0 is present.
! 527: <li>Implemented DNS block lists
! 528: in <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>.
! 529: <li>Added support for IKEv2 Message Fragmentation (RFC 7383)
! 530: to <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
! 531: <li>Enabled switching between wireless and wired interfaces in
! 532: dhclient(8), setting the default route with the interface
! 533: address and allowing two default routes in the routing table. A
! 534: wired interface will be preferred when connected.
! 535: <li>Added consistent use of 'ifconfig $_if [-inet| -inet6]' to clear existing
! 536: configurations completely after restarting an install.
! 537: <li>Added 'forwarded' log format extending the 'combined' log
! 538: format in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
! 539: </ul>
! 540:
! 541: <li>Assorted improvements:
1.1 beck 542: <ul>
543: <li> The filesystem buffer cache now more aggressively uses memory
544: outside the DMA region, to improve cache performance on amd64
545: machines.
1.5 rob 546: <li> The BER API previously internal to
1.21 ! benno 547: <a href="https://man.openbsd.org/ldap.1">ldap(1)</a>,
! 548: <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
! 549: <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, and
! 550: <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> has been moved into
! 551: libutil.
! 552: See <a href="https://man.openbsd.org/ber_read_elements.3">ber_read_elements(3)</a>.
1.6 anton 553: <li>Support for specifying boot device in
1.21 ! benno 554: <a href="https://man.openbsd.org/vm.conf#boot_device">vm.conf(5)</a>.
! 555: <li>Removed the old
! 556: userland <a href="https://man.openbsd.org/realpath.3">realpath(3)</a>
! 557: and replaced it with __realpath(2), a kernel
! 558: implementation. This will prevent
! 559: calling <a href="https://man.openbsd.org/readlink.2">readlink(2)</a>
! 560: on every component of a path and improve performance for
! 561: <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>.
! 562: <li><a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> speedups,
! 563: improving dynamic linker performance for large objects.
! 564: <li>Modified <a href="https://man.openbsd.org/systat.1">systat(1)</a>
! 565: to allow the use of 'b' to switch to stats since boot.
! 566: </ul>
! 567:
! 568: <li>VMM/VMD improvements ... <!-- XXX -->
! 569: <ul>
! 570: <li>Added support for 'boot device'
! 571: to <a href="https://man.openbsd.org/vm.conf.5">vm.conf(5)</a>
! 572: grammar, the '-B device' counterpart
! 573: from <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>.
! 574: <li>Emulated kvm pvclock
! 575: in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, compatible
! 576: with <a href="https://man.openbsd.org/pvclock.4">pvclock(4)</a> in
! 577: OpenBSD.
! 578: <li>Enabled reporting of the vm state through use of
! 579: the <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>
! 580: 'status' command.
! 581: <li>Synced vm state
! 582: in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> when
! 583: (un)pausing a vm to ensure
! 584: both <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
! 585: and <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> processes
! 586: know the vm is paused.
! 587: <li>Handled some unhandled instructions for SVM which led
! 588: to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guest
! 589: termination, as well as RDTSCP and INVLPGA instructions.
! 590: <li>Modified <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to
! 591: flush guest TLB entries if the guest disables paging.
1.1 beck 592: </ul>
593:
594: <li>OpenSMTPD 6.6.0
595: <ul>
1.18 gilles 596: <li>New Features
597: <ul>
598: <li>Introduced support for ECDSA certificates with an ECDSA privsep engine.
1.21 ! benno 599: <li>Introduced builtin filters to allow basic filtering of incoming sessions
! 600: in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
! 601: <li>Introduced option to deliver junk to a Junk folder
! 602: in <a href="https://man.openbsd.org/mail.maildir.8">mail.maildir(8)</a>.
1.18 gilles 603: </ul>
604: <li>Bug fixes
605: <ul>
1.21 ! benno 606: <li>Fixed the <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> client
! 607: so it uses correct default port for SMTPS.
! 608: <li>Fixed an <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> crash on
! 609: excessively large input.
1.18 gilles 610: <li>Ensured mail rejected by an LMTP server will stay queued rather than bouncing.
611: </ul>
612: <li>Experimental Features
613: <ul>
1.21 ! benno 614: <li>Introduced a filters API to allow writing standalone filters
! 615: for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
1.18 gilles 616: with multiple filters made available in ports.
1.21 ! benno 617: <li>Introduced support for proxy-v2 protocol
! 618: allowing <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to
! 619: operate behind proxy.
1.18 gilles 620: </ul>
1.1 beck 621: </ul>
622:
623: <li>LibreSSL 3.0.X
624: <ul>
625: <li>API and Documentation Enhancements
626: <ul>
1.11 tb 627: <li>Completed the port of RSA_METHOD accessors from the
1.13 tb 628: OpenSSL 1.1 API.
1.21 ! benno 629: <li>Documented undescribed options and removed unfunctional
! 630: options description
! 631: in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
! 632: manual.
1.1 beck 633: </ul>
634:
635: <li>Compatibility Changes
636: <ul>
637: </ul>
638:
639: <li>Testing and Proactive Security
640: <ul>
641: <li>
1.2 tb 642: A plethora of small fixes due to regular oss-fuzz testing.
1.13 tb 643: <li>
1.21 ! benno 644: Various side channels in DSA and ECDSA were addressed. These
! 645: are some of the many issues found in an extensive systematic
! 646: analysis of bignum usage by Samuel Weiser, David Schrammel et
! 647: al.
1.20 tb 648: <li>
1.21 ! benno 649: Try to compute the cofactor if a nonsensical value was
! 650: provided for ECC parameters. Fix from Billy Brumley.
1.1 beck 651: </ul>
652:
653: <li>Internal Improvements
1.21 ! benno 654: <ul>
! 655: </ul>
1.1 beck 656:
657: <li>Portable Improvements
658: <ul>
1.21 ! benno 659: <li>Enabled performance optimizations when building with Visual
! 660: Studio on Windows.
1.12 inoguchi 661: <li>Enabled openssl(1) speed subcommand on Windows platform.
1.1 beck 662: </ul>
663:
664: <li>Bug Fixes
665: <ul>
1.21 ! benno 666: <li>Fixed issue where SRTP extension would not be sent by
! 667: server.
! 668: <li>Fixed incorrect carry operation in 512 addition for
! 669: Streebog.
1.12 inoguchi 670: <li>Fixed -modulus option with openssl(1) dsa subcommand.
1.21 ! benno 671: <li>Fixed PVK format output issue with openssl(1) dsa and rsa
! 672: subcommand.
1.1 beck 673: </ul>
674: </ul>
675:
676: <li>OpenSSH 8.X
677: <ul>
1.21 ! benno 678: <li>New Features
! 679: <ul>
! 680: <li>Added sshsig, a lightweight signature and verification
! 681: ability for OpenSSH,
! 682: to <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
! 683: Signatures can be made and verified using <code>ssh-keygen
! 684: -Y sign|verify</code>.
! 685: <li>Included SHA2-variant RSA key algorithms in KEX proposal,
! 686: allowing <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>
! 687: to harvest keys from servers that disable SHA1 ssh-rsa.
! 688: <li>Encrypted
! 689: private <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
! 690: keys that are not in use as protection against speculation
! 691: and memory sidechannel attacks like Spectre, Meltdown,
! 692: Rowhammer and Rambleed.
! 693: <li>Adjusted <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
! 694: to default to using the rsa-sha2-512 signature algorith when
! 695: signing certificates with an RSA key. This will render these
! 696: certificates incompatible with OpenSSH 7.1 and earlier,
! 697: unless the default is overridden by use of the (1) -t flag.
! 698: <li>Added logging
! 699: of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
! 700: PermitOpen and PermitListen violations.
! 701: <li>Allowed prepending a list of algorithms to the default set in ssh(1) by
! 702: starting the list with the ^ character.
! 703: </ul>
! 704: <li>Bugfixes
! 705: <ul>
! 706: <li>
! 707: </ul>
1.1 beck 708: </ul>
709: <li>Mandoc XXX
710: <ul>
1.21 ! benno 711: <li>Provided a notification to stderr to indicate messages have been shown when
! 712: mandoc(1) output is printed without a pager, to indicate messages may have
! 713: preceded the output.
! 714: <li>Fixed a segfault
! 715: in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> when
! 716: /tmp is not writable.
! 717: <li>Added <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
! 718: support for 'prefers-color-scheme: dark'.
! 719: <li>Improved <a href="https://man.openbsd.org/man.1">man(1)</a>
! 720: matching for requests for a specific section.
1.1 beck 721: </ul>
722:
723: <li>Xenocara
724: <ul>
1.21 ! benno 725: <li>
1.1 beck 726: </ul>
727:
1.7 bentley 728: <li><p>Ports and packages:
1.1 beck 729: <ul>
730: </ul>
1.7 bentley 731: <p>Many pre-built packages for each architecture:
1.1 beck 732: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
1.7 bentley 733: <ul style="column-count: 3">
1.1 beck 734: <li>aarch64: XXXX
735: <li>amd64: XXXX
736: <li>arm: XXXX
737: <li>i386: XXXX
738: <li>mips64: XXXX
739: <li>mips64el: XXXX
740: <li>powerpc: XXXX
741: <li>sparc64: XXXX
1.7 bentley 742: </ul>
1.1 beck 743:
1.7 bentley 744: <p>Some highlights:
745: <ul style="column-count: 3">
1.21 ! benno 746: <li>
! 747: <li>
! 748: <li>
! 749: <li>
! 750: <li>
! 751: <li>
1.7 bentley 752: </ul>
1.1 beck 753:
754: <li>As usual, steady improvements in manual pages and other documentation.
755:
756: <li>The system includes the following major components from outside suppliers:
1.21 ! benno 757: <ul>
! 758: <li>ibexpat to 2.2.7
! 759: <li>unbound 1.9.3
! 760: <li>NSD 4.2.2.
! 761: <li>LLVM 8.0.0
! 762: <li>perl 5.28.2.
! 763: <li>Mesa 19.0.5.
! 764: <li>libdrm 2.4.98
! 765: <li>LLVM 8.0.1
! 766: </ul>
1.1 beck 767: </ul>
1.7 bentley 768: </section>
1.1 beck 769:
770: <hr>
771:
1.7 bentley 772: <section id=install>
773: <h3>How to install</h3>
774: <p>
1.1 beck 775: Please refer to the following files on the mirror site for
776: extensive details on how to install OpenBSD 6.6 on your machine:
777:
778: <ul>
779: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/alpha/INSTALL.alpha">
780: .../OpenBSD/6.6/alpha/INSTALL.alpha</a>
781: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/amd64/INSTALL.amd64">
782: .../OpenBSD/6.6/amd64/INSTALL.amd64</a>
783: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/arm64/INSTALL.arm64">
784: .../OpenBSD/6.6/arm64/INSTALL.arm64</a>
785: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/armv7/INSTALL.armv7">
786: .../OpenBSD/6.6/armv7/INSTALL.armv7</a>
787: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/hppa/INSTALL.hppa">
788: .../OpenBSD/6.6/hppa/INSTALL.hppa</a>
789: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/i386/INSTALL.i386">
790: .../OpenBSD/6.6/i386/INSTALL.i386</a>
791: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/landisk/INSTALL.landisk">
792: .../OpenBSD/6.6/landisk/INSTALL.landisk</a>
793: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/loongson/INSTALL.loongson">
794: .../OpenBSD/6.6/loongson/INSTALL.loongson</a>
795: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/luna88k/INSTALL.luna88k">
796: .../OpenBSD/6.6/luna88k/INSTALL.luna88k</a>
797: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/macppc/INSTALL.macppc">
798: .../OpenBSD/6.6/macppc/INSTALL.macppc</a>
799: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/octeon/INSTALL.octeon">
800: .../OpenBSD/6.6/octeon/INSTALL.octeon</a>
801: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sgi/INSTALL.sgi">
802: .../OpenBSD/6.6/sgi/INSTALL.sgi</a>
803: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sparc64/INSTALL.sparc64">
804: .../OpenBSD/6.6/sparc64/INSTALL.sparc64</a>
805: </ul>
1.8 deraadt 806: </section>
1.1 beck 807:
808: <hr>
809:
1.7 bentley 810: <section id=quickinstall>
1.1 beck 811: <p>
812: Quick installer information for people familiar with OpenBSD, and the use of
813: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
814: If you are at all confused when installing OpenBSD, read the relevant
815: INSTALL.* file as listed above!
816:
1.7 bentley 817: <h3>OpenBSD/alpha:</h3>
1.1 beck 818:
1.7 bentley 819: <p>
1.1 beck 820: Write <i>floppy66.fs</i> or <i>floppyB66.fs</i> (depending on your machine)
821: to a diskette and enter <i>boot dva0</i>.
822: Refer to INSTALL.alpha for more details.
1.7 bentley 823:
1.1 beck 824: <p>
825: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
826: will most likely fail.
827:
1.7 bentley 828: <h3>OpenBSD/amd64:</h3>
1.1 beck 829:
1.7 bentley 830: <p>
1.1 beck 831: If your machine can boot from CD, you can write <i>install66.iso</i> or
832: <i>cd66.iso</i> to a CD and boot from it.
833: You may need to adjust your BIOS options first.
1.7 bentley 834:
1.1 beck 835: <p>
836: If your machine can boot from USB, you can write <i>install66.fs</i> or
837: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 838:
1.1 beck 839: <p>
840: If you can't boot from a CD, floppy disk, or USB,
841: you can install across the network using PXE as described in the included
842: INSTALL.amd64 document.
1.7 bentley 843:
1.1 beck 844: <p>
845: If you are planning to dual boot OpenBSD with another OS, you will need to
846: read INSTALL.amd64.
847:
1.7 bentley 848: <h3>OpenBSD/arm64:</h3>
1.1 beck 849:
1.7 bentley 850: <p>
1.1 beck 851: Write <i>miniroot66.fs</i> to a disk and boot from it after connecting
852: to the serial console. Refer to INSTALL.arm64 for more details.
853:
1.7 bentley 854: <h3>OpenBSD/armv7:</h3>
1.1 beck 855:
1.7 bentley 856: <p>
1.1 beck 857: Write a system specific miniroot to an SD card and boot from it after connecting
858: to the serial console. Refer to INSTALL.armv7 for more details.
859:
1.7 bentley 860: <h3>OpenBSD/hppa:</h3>
1.1 beck 861:
1.7 bentley 862: <p>
1.1 beck 863: Boot over the network by following the instructions in INSTALL.hppa or the
864: <a href="hppa.html#install">hppa platform page</a>.
865:
1.7 bentley 866: <h3>OpenBSD/i386:</h3>
1.1 beck 867:
1.7 bentley 868: <p>
1.1 beck 869: If your machine can boot from CD, you can write <i>install66.iso</i> or
870: <i>cd66.iso</i> to a CD and boot from it.
871: You may need to adjust your BIOS options first.
1.7 bentley 872:
1.1 beck 873: <p>
874: If your machine can boot from USB, you can write <i>install66.fs</i> or
875: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 876:
1.1 beck 877: <p>
878: If you can't boot from a CD, floppy disk, or USB,
879: you can install across the network using PXE as described in
880: the included INSTALL.i386 document.
1.7 bentley 881:
1.1 beck 882: <p>
883: If you are planning on dual booting OpenBSD with another OS, you will need to
884: read INSTALL.i386.
885:
1.7 bentley 886: <h3>OpenBSD/landisk:</h3>
1.1 beck 887:
1.7 bentley 888: <p>
1.1 beck 889: Write <i>miniroot66.fs</i> to the start of the CF
890: or disk, and boot normally.
891:
1.7 bentley 892: <h3>OpenBSD/loongson:</h3>
1.1 beck 893:
1.7 bentley 894: <p>
1.1 beck 895: Write <i>miniroot66.fs</i> to a USB stick and boot bsd.rd from it
896: or boot bsd.rd via tftp.
897: Refer to the instructions in INSTALL.loongson for more details.
898:
1.7 bentley 899: <h3>OpenBSD/luna88k:</h3>
1.1 beck 900:
1.7 bentley 901: <p>
902: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
1.1 beck 903: from the PROM, and then bsd.rd from the bootloader.
904: Refer to the instructions in INSTALL.luna88k for more details.
905:
1.7 bentley 906: <h3>OpenBSD/macppc:</h3>
1.1 beck 907:
1.7 bentley 908: <p>
1.1 beck 909: Burn the image from a mirror site to a CDROM, and power on your machine
910: while holding down the <i>C</i> key until the display turns on and
911: shows <i>OpenBSD/macppc boot</i>.
1.7 bentley 912:
1.1 beck 913: <p>
914: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
915: /6.6/macppc/bsd.rd</i>
916:
1.7 bentley 917: <h3>OpenBSD/octeon:</h3>
1.1 beck 918:
1.7 bentley 919: <p>
1.1 beck 920: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
921: Refer to the instructions in INSTALL.octeon for more details.
922:
1.7 bentley 923: <h3>OpenBSD/sgi:</h3>
1.1 beck 924:
1.7 bentley 925: <p>
1.1 beck 926: To install, burn cd66.iso on a CD-R, put it in the CD drive of your
927: machine and select <i>Install System Software</i> from the System Maintenance
928: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
929: CD-ROM, and need a proper invocation from the PROM prompt.
930: Refer to the instructions in INSTALL.sgi for more details.
931:
932: <p>
933: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
934: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
935: system type. Refer to the instructions in INSTALL.sgi for more details.
936:
1.7 bentley 937: <h3>OpenBSD/sparc64:</h3>
1.1 beck 938:
1.7 bentley 939: <p>
1.1 beck 940: Burn the image from a mirror site to a CDROM, boot from it, and type
941: <i>boot cdrom</i>.
1.7 bentley 942:
1.1 beck 943: <p>
944: If this doesn't work, or if you don't have a CDROM drive, you can write
945: <i>floppy66.fs</i> or <i>floppyB66.fs</i>
946: (depending on your machine) to a floppy and boot it with <i>boot
947: floppy</i>. Refer to INSTALL.sparc64 for details.
1.7 bentley 948:
1.1 beck 949: <p>
950: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
951: will most likely fail.
1.7 bentley 952:
1.1 beck 953: <p>
954: You can also write <i>miniroot66.fs</i> to the swap partition on
955: the disk and boot with <i>boot disk:b</i>.
1.7 bentley 956:
1.1 beck 957: <p>
958: If nothing works, you can boot over the network as described in INSTALL.sparc64.
1.7 bentley 959: </section>
1.1 beck 960:
961: <hr>
962:
1.7 bentley 963: <section id=upgrade>
964: <h3>How to upgrade</h3>
965: <p>
1.1 beck 966: If you already have an OpenBSD 6.5 system, and do not want to reinstall,
967: upgrade instructions and advice can be found in the
968: <a href="faq/upgrade66.html">Upgrade Guide</a>.
1.7 bentley 969: </section>
1.1 beck 970:
971: <hr>
972:
1.7 bentley 973: <section id=sourcecode>
974: <h3>Notes about the source code</h3>
975: <p>
976: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
1.1 beck 977: This file contains everything you need except for the kernel sources,
978: which are in a separate archive.
979: To extract:
980: <blockquote><pre>
1.7 bentley 981: # <kbd>mkdir -p /usr/src</kbd>
982: # <kbd>cd /usr/src</kbd>
983: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
1.1 beck 984: </pre></blockquote>
1.7 bentley 985: <p>
986: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
1.1 beck 987: This file contains all the kernel sources you need to rebuild kernels.
988: To extract:
989: <blockquote><pre>
1.7 bentley 990: # <kbd>mkdir -p /usr/src/sys</kbd>
991: # <kbd>cd /usr/src</kbd>
992: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
1.1 beck 993: </pre></blockquote>
1.7 bentley 994: <p>
1.1 beck 995: Both of these trees are a regular CVS checkout. Using these trees it
996: is possible to get a head-start on using the anoncvs servers as
997: described <a href="anoncvs.html">here</a>.
998: Using these files
999: results in a much faster initial CVS update than you could expect from
1000: a fresh checkout of the full OpenBSD source tree.
1.7 bentley 1001: </section>
1.1 beck 1002:
1003: <hr>
1004:
1.7 bentley 1005: <section id=ports>
1006: <h3>Ports Tree</h3>
1007: <p>
1.1 beck 1008: A ports tree archive is also provided. To extract:
1009: <blockquote><pre>
1.7 bentley 1010: # <kbd>cd /usr</kbd>
1011: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
1.1 beck 1012: </pre></blockquote>
1.7 bentley 1013: <p>
1.1 beck 1014: Go read the <a href="faq/ports/index.html">ports</a> page
1015: if you know nothing about ports
1016: at this point. This text is not a manual of how to use ports.
1017: Rather, it is a set of notes meant to kickstart the user on the
1018: OpenBSD ports system.
1019: <p>
1020: The <i>ports/</i> directory represents a CVS checkout of our ports.
1021: As with our complete source tree, our ports tree is available via
1022: <a href="anoncvs.html">AnonCVS</a>.
1023: So, in order to keep up to date with the -stable branch, you must make
1024: the <i>ports/</i> tree available on a read-write medium and update the tree
1025: with a command like:
1026: <blockquote><pre>
1.7 bentley 1027: # <kbd>cd /usr/ports</kbd>
1.15 jsg 1028: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_6</kbd>
1.1 beck 1029: </pre></blockquote>
1.7 bentley 1030: <p>
1.1 beck 1031: [Of course, you must replace the server name here with a nearby anoncvs
1032: server.]
1033: <p>
1034: Note that most ports are available as packages on our mirrors. Updated
1035: ports for the 6.6 release will be made available if problems arise.
1036: <p>
1037: If you're interested in seeing a port added, would like to help out, or just
1038: would like to know more, the mailing list
1039: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1.7 bentley 1040: </section>