Annotation of www/66.html, Revision 1.36
1.7 bentley 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
1.1 beck 5: <title>OpenBSD 6.6</title>
6: <meta name="description" content="OpenBSD 6.6">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
9: <link rel="canonical" href="https://www.openbsd.org/66.html">
10:
1.7 bentley 11: <h2 id=OpenBSD>
1.1 beck 12: <a href="index.html">
1.7 bentley 13: <i>Open</i><b>BSD</b></a>
14: 6.6
1.1 beck 15: </h2>
16:
1.7 bentley 17: <table>
18: <tr>
19: <td>
1.21 benno 20: <a href="images/Puffystock.gif"><!-- XXX -->
21: <img alt="XXX" width="227" height="343" src="images/Puffystock-s.gif"></a>
1.7 bentley 22: <td>
1.1 beck 23: Released XXX, 2019<br>
24: Copyright 1997-2019, Theo de Raadt.<br>
25: <br>
26: <br>
1.21 benno 27: Artwork by XXX Y Z.<!-- XXX -->
1.1 beck 28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
1.7 bentley 32: <li>Go to the <code class=reldir>pub/OpenBSD/6.6/</code> directory on
1.1 beck 33: one of the mirror sites.
34: <li>Have a look at <a href="errata66.html">the 6.6 errata page</a> for a list
35: of bugs and workarounds.
36: <li>See a <a href="plus66.html">detailed log of changes</a> between the
37: 6.5 and 6.6 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<p>
41:
1.7 bentley 42: <table class=signify>
43: <tr><td>
44: openbsd-66-base.pub:
1.1 beck 45: <td>
46: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/openbsd-66-base.pub">
1.21 benno 47: RWSvK/c+cFe24BIalifKnqoqdvLlXfeZ9MIj3MINndNeKgyYw5PpcWGn</a>
1.7 bentley 48: <tr><td>
1.1 beck 49: openbsd-66-fw.pub:
1.7 bentley 50: <td>
1.21 benno 51: RWSKyzM3wogTrgHkO88MnRiK/yuu8xy2OeIqhnP/uGL/j2IF4I5djMIM
1.7 bentley 52: <tr><td>
1.1 beck 53: openbsd-66-pkg.pub:
1.7 bentley 54: <td>
1.21 benno 55: RWSS4lqHZ5ayOFMBPj3leAkE9tCsSWG9OxD6MmAIS5Y3H3tD6F4vP/eF
1.7 bentley 56: <tr><td>
1.1 beck 57: openbsd-66-syspatch.pub:
1.7 bentley 58: <td>
1.21 benno 59: RWRQMmZg6mMlSTfHsJH9czeLAvf9e+ViLvkQ4id4dxaQqWU3aX9Cl/W1
1.1 beck 60: </table>
1.7 bentley 61: </ul>
1.1 beck 62: <p>
63: All applicable copyrights and credits are in the src.tar.gz,
64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
1.9 deraadt 65: files fetched via <code>ports.tar.gz</code>.
1.7 bentley 66: </table>
1.1 beck 67:
68: <hr>
69:
1.7 bentley 70: <section id=new>
71: <h3>What's New</h3>
72: <p>
1.1 beck 73: This is a partial list of new features and systems included in OpenBSD 6.6.
74: For a comprehensive list, see the <a href="plus66.html">changelog</a> leading
75: to 6.6.
76:
77: <ul>
78:
1.21 benno 79: <li>General improvements and bugfixes::
80: <ul>
81: <li>Fixed support for amd64 machines with greater than 1023GB
82: physical memory.
83: <li><a href="https://man.openbsd.org/drm.4">drm(4)</a> updates.
1.31 brynet 84: <li>The octeon platform is now using
85: <a href="https://man.openbsd.org/clang-local.1">clang(1)</a>
86: as the base system compiler.
87: <li>The powerpc architecture is now provided with
1.21 benno 88: <a href="https://man.openbsd.org/clang.1">clang(1)</a>, in
89: addition to aarch64, amd64, arm, i386, mips64el, sparc64.
90: <li>Disabled <a href="https://man.openbsd.org/gcc.1">gcc</a> in
1.34 fcambus 91: base on armv7 and i386.
1.21 benno 92: <li>Prevented <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>
93: from repeatedly obtaining a new lease when the mtu is given in a
94: lease.
95: <li>Prevented more than one thread from opening a
96: <a href="https://man.openbsd.org/wscons.4">wscons(4)</a> device in
97: read/write mode.
98: <li>Allowed non-root users to become owner of the
99: <a href="https://man.openbsd.org/drm.4">drm(4)</a> device when they are
100: the first to open it.
101: <li>Added regular expression support for the format search, match
102: and substitute modifiers in
103: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
104: <li>Added a -v flag to source-file in
105: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to show the commands
106: and line numbers.
107: <li>Added simple menus usable with mouse or keyboard in
108: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
109: Introduced the command "display-menu" to show a menu bound to
110: the mouse on status line by default, and added menus in tree,
1.23 fcambus 111: client and buffer modes.
1.21 benno 112: <li>Changed the behavior of swap-window -d in
113: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> to match
114: swap-pane.
115: <li>Allow panes to be empty in
116: <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>, and
117: enabling output to be piped to them with split-window or
118: display-message -I.
119: <li>Adjusted <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
120: to automatically scroll when dragging to create a selection with
121: the mouse when the cursor reaches the top or bottom line.
122: <li>Fixed a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>
123: crash when killing the current window, and other bugfixes.
124: </ul>
125:
126: <li>SMP-Improvements, System call unlocking: ... <!-- XXX -->
127: <ul>
128: <li>Unlocked <a href="https://man.openbsd.org/getrlimit.2">getrlimit(2)</a>
129: and <a href="https://man.openbsd.org/setrlimit.2">setrlimit(2)</a>
1.34 fcambus 130: syscalls.
1.21 benno 131: <li>Unlocked <a href="https://man.openbsd.org/read.2">read(2)</a> and
132: <a href="https://man.openbsd.org/write.2">write(2)</a> syscalls.
133: <li>Removed the KERNEL_LOCK from
134: the <a href="https://man.openbsd.org/bridge.4">bridge(4)</a>
1.23 fcambus 135: output fast-path.
1.21 benno 136: <li>Made resource limit access MP-safe.
137: </ul>
138:
1.1 beck 139: <li>Improved hardware support, including:
1.21 benno 140: <ul>
1.25 jsg 141: <li>Added support for Ethernet on Lenovo USB-C docks.
1.21 benno 142: <li>Implemented Linux compatibility
143: <a href="https://man.openbsd.org/acpi.4">acpi(4)</a>
144: interfaces and enabled the ACPI support code in
145: <a href="https://man.openbsd.org/radeon.4">radeon(4)</a> and
146: <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
147: <li>Implemented backlight control for
148: <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, allowing setting
149: of the backlight using
150: <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a>.
151: <li>Speakers now work on the ThinkPad X1C7.
152: <li>Added <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>, an AMD
1.25 jsg 153: Radeon GPU video driver.
1.21 benno 154: <li>Added TSC synchronization for multiprocessor machines and re-enabled TSC
155: as the default amd64 time source.
156: <li>Added support of Realtek ALC285 in
157: <a href="https://man.openbsd.org/azalia.4">azalia(4)</a>.
158: <li>Added <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a> support
159: for the KSMedia 8-bit IR format and for dual functions on integrated USB
160: cameras.
161: <li>Added the <a href="https://man.openbsd.org/aplgpi.4">aplgpio(4)</a>
162: driver for the gpio controllers on Intel's Apollo Lake SoC.
163: <li>Implemented MSI-X support on sparc64.
164: <li>Skipped PCI host bridges and devices not present with
165: <a href="https://man.openbsd.org/acpi.1">acpi(1)</a> when establishing
166: the mapping between ACPI device nodes and PCI devices.
167: <li>Added the <a href="https://man.openbsd.org/ukspan.4">ukspan(4)</a>
168: driver for the Keyspan USA19HS USB serial adapter.
169: <li>Supported 64BIT DMA for io in
170: <a href="https://man.openbsd.org/mpii.4">mpii(4)</a>.
171: <li>Fixed MSI/MSI-X on arm64 machines with
172: <a href="https://man.openbsd.org/agintc.4">agintc(4)</a>.
173: <li>Added MSI-X support in
174: <a href="https://man.openbsd.org/acpipci.4">acpipci(4)</a>, pciecam,
175: <a href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> and
176: <a href="https://man.openbsd.org/rkpcie.4">rkpcie(4)</a>.
177: <li>Improved support for type4 devices in the
178: <a href="https://man.openbsd.org/ubcmtp.4">ubcmtp(4)</a> multi-touch
179: trackpad driver.
180: <li>Support for <a href="https://man.openbsd.org/virtio.4">virtio(4)</a> 1.0
181: specification for PCI devices.
182: <li>Improved support for the AR9271 chipset
183: in <a href="https://man.openbsd.org/athn.4">athn(4)</a> .
184: <li>Support for the trackpad and trackpoint of the Dell Precision 7520
185: laptop in the <a href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>
186: driver.
187: <li>Added the colemak keyboard layout.
188: <li>New <a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
189: driver for the Fairchild FUSB302 USB Type-C controller.
190: <li>Added a fallback to
191: <a href="https://man.openbsd.org/ehci.4">ehci(4)</a>
192: which enables the USB ports on the RockPro64.
193: <li>Added support for more Intel 300 Series PCH devices to
194: <a href="https://man.openbsd.org/ichiic.4">ichiic(4)</a>.
195: <li>Added <a href="https://man.openbsd.org/mcx.4">mcx(4)</a> driver for
1.34 fcambus 196: Mellanox ConnectX-4 (and later) Ethernet controllers.
1.21 benno 197: <li>Added support for the cryptographic coprocessor found on newer
198: AMD Ryzen CPUs/APUs.
199: <li>Improved the <a href="https://man.openbsd.org/envy.4">envy(4)</a> codec
200: API and used it on ESI Juli@ cards.
201: <li>Enabled EnvyHT-specific sample rates (above 96kHz) on the host
202: controller for <a href="https://man.openbsd.org/envy.4">envy(4)</a>
203: devices.
204: <li>Added support for the USB serial adapter found in Juniper SRX 300 to
205: <a href="https://man.openbsd.org/uslcom.4">uslcom(4)</a>.
206: <li>Updated shared drm code,
207: <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>
208: and <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
1.25 jsg 209: to linux 4.19.74. This adds support for Intel Broxton/Apollo
210: Lake, Amber Lake, Gemini Lake, Coffee Lake, Whiskey Lake,
1.34 fcambus 211: and Comet Lake hardware.
1.21 benno 212: <li>Made <a href="https://man.openbsd.org/startx.1">startx(1)</a> and
213: <a href="https://man.openbsd.org/xinit.1">xinit(1)</a> work again on
214: modern systems using
215: <a href="https://man.openbsd.org/inteldrm.4">inteldrm(4)</a>,
216: <a href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a>
217: and <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
218: <li>Added <a href="https://man.openbsd.org/mcprtc.4">mcprtc(4)</a>, a driver
219: for the Microchip MCP79400 RTC and similar.
220: <li>Added I2C clock gates to <a href="https://man.openbsd.org/mvclock.4">
221: mvclock(4)</a>.
222: <li>Added support for MSI-X to <a href="https://man.openbsd.org/bnx.4">
223: bnxt(4)</a>.
224: <li>Added <a href="https://man.openbsd.org/octpip.4">octpip(4)</a>, a driver
1.34 fcambus 225: for the Octeon packet input processing unit.
1.21 benno 226: <li>Added the <a href="https://man.openbsd.org/octiic.4">octiic(4)</a>
227: driver for OCTEON two-wire serial interfaces.
228: <li>Enabled <a href="https://man.openbsd.org/nvme.4">nvme(4)</a> on octeon.
229: <li>Added <a href="https://man.openbsd.org/octpcie.4">octpcie(4)</a>, a
230: driver for the PCIe controller found on OCTEON II and OCTEON III.
231: <li>Fixed random kernel hangs on
232: some <a href="https://www.openbsd.org/sparc64.html">sparc64</a>
233: machines by blocking interrupts while sending an IPI on sunv4
234: (as on sun4u).
235: </ul>
236:
237: <li>Improved <a href="https://www.openbsd.org/arm64.html">arm64</a> hardware
238: support, including:
1.23 fcambus 239: <ul>
1.21 benno 240: <li>Added support for Ampere eMAG CPU based systems.
241: <li>Added support to <a href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>
242: for obtaining CPU clock frequency.
243: <li>Enabled <a href="https://man.openbsd.org/amlmmc.4">amlmmc(4)</a>, a
244: driver for the SD/MMC controller found on various Amlogic SoCs.
245: <li>Implemented setting the CPU clock for Allwinner A64 SoCs in
246: <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
247: <li>Added <a href="https://man.openbsd.org/amldwusb.4">amldwusb(4)</a>,
248: <a href="https://man.openbsd.org/amlusbphy.4">amlusbphy(4)</a> and
249: <a href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>, drivers
250: for the USB controller and PHYs on the Amlogic G12A/B SoCs.
251: <li>Added <a href="https://man.openbsd.org/imxtmu.4">imxtmu(4)</a>, a driver
1.23 fcambus 252: to support the temperature sensors on i.MX8M SoCs.
1.21 benno 253: <li>Added <a href="https://man.openbsd.org/amlrng.4">amlrng(4)</a>, a simple
254: random number generator driver for Amlogic SoCs.
255: <li>Added <a href="https://man.openbsd.org/amclock.4">amclock(4)</a>,
256: a driver for the Amlogic SoC clocks.
257: <li>Added <a href="https://man.openbsd.org/amluart.4">amluart(4)</a>, a
258: driver for the UARTs found on various Amlogic SoCs.
259: <li>Added support for the SMBus System Interfaces (SSIF) to
1.34 fcambus 260: <a href="https://man.openbsd.org/ipmi.4">ipmi(4)</a>.
1.21 benno 261: <li>PXE booting using U-Boot works now.
262: <li>Added clock support
263: to <a href="https://man.openbsd.org/sxisyscon.4">sxisyscon(4)</a>,
264: a driver for the system controller found on various Allwinner
265: SoCs.
266: <li>Implemented <a href="https://man.openbsd.org/smbios.4">smbios(4)</a>
267: support on arm64.
268: <li>Added <a href="https://man.openbsd.org/ucrcom.4">ucrcom(4)</a>, a driver
269: for the serial console of chromebooks.
270: <li>Enabled <a href="https://man.openbsd.org/mvmdio.4">mvmdio(4)</a> and
271: <a href="https://man.openbsd.org/mvneta.4">mvneta(4)</a> on arm64.
272: <li>Added <a href="https://man.openbsd.org/pinctrl.4">pinctrl(4)</a>
273: support for 'pinconf-single' devices and support for
1.23 fcambus 274: bias and drive-strength properties, needed for HiSilicon SoCs.
1.32 fcambus 275: <li>Added <a href="https://man.openbsd.org/mvdog.4">mvdog(4)</a>, a driver
1.21 benno 276: to support the watchdog on the Armada 3700 SoC.
277: <li>Added support for the Allwinner H6 to
278: <a href="https://man.openbsd.org/sxipio.4">sxipio(4)</a> and
279: <a href="https://man.openbsd.org/sxiccmu.4">sxiccmu(4)</a>.
280: <li>Added <a href="https://man.openbsd.org/mviic.4">mviic(4)</a>, a driver
281: to support the I2C controller on the Armada 3700 SoC.
282: <li>Added <a href="https://man.openbsd.org/mvuart.4">mvuart(4)</a> to
1.34 fcambus 283: support the Armada 3720's serial console.
1.21 benno 284: <li>Added support for the Armada 3720 clocks to
1.33 fcambus 285: <a href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>.
1.21 benno 286: <li>Added support for the Armada 3720 pinctrl controller to
287: <a href="https://man.openbsd.org/mvpinctrl.4">mvpinctrl(4)</a>. This
288: controller also includes GPIO controller functionality.
289: <li>Added the RK3328 and RK3399 GMAC clocks to
1.34 fcambus 290: <a href="https://man.openbsd.org/rkclock.4">rkclock(4)</a>.
1.21 benno 291: <li>Increased MAXCPUs to 32 in arm64, allowing use of all cores on the Ampere
292: eMAG.
293: <li>Added support for the Cortex-A65 CPU.
294: <li>Implemented interrupt controller functionality in
295: <a href="https://man.openbsd.org/rkgpio.4">rkgpio(4)</a>,
296: allowing use of the
297: <a href="https://man.openbsd.org/fusbtc.4">fusbtc(4)</a>
298: interrupt on the RockPro64.
299: </ul>
1.1 beck 300:
301: <li>IEEE 802.11 wireless stack improvements:
302: <ul>
1.21 benno 303: <li>Made net80211 expose reasons for association failures to have
304: <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
305: display them in "scan" output and on the
306: <a href="https://man.openbsd.org/ieee80211.9">ieee80211(9)</a>
1.34 fcambus 307: status line.
1.21 benno 308: <li><a href="https://man.openbsd.org/ure.4">ure(4)</a> now supports
309: RTL8153B devices.
310: <li>Added support for 802.11n Tx aggregation to net80211 and
311: <a href="https://man.openbsd.org/iwm.4">iwm(4)</a>.
312: <li>... <!-- XXX -->
1.1 beck 313: </ul>
314:
315: <li>Generic network stack improvements:
1.21 benno 316: <ul>
317: <li>Enabled TCP and UDP checksum offloading by default for
318: <a href="https://man.openbsd.org/ix.4">ix(4)</a>.
319: <li>Added <a href="https://man.openbsd.org/tpmr.4">tpmr(4)</a>, a 802.1Q
320: two-port MAC relay implementation.
321: <li>Added <a href="https://man.openbsd.org/iavf.4">iavf(4)</a> driver for
1.34 fcambus 322: Intel SR-IOV Virtual Functions of Intel 700 series Ethernet controllers.
1.21 benno 323: <li>Added <a href="https://man.openbsd.org/aggr.4">aggr(4)</a>, a
324: dedicated driver to implement 802.1AX link aggregration.
325: <li>Added port protection support
326: to <a href="https://man.openbsd.org/switch.4">switch(4)</a>. Domain
327: membership is checked for unicast, flooded (broadcast) and local
1.34 fcambus 328: (host-network-bound, e.g. trunk) traffic.
1.21 benno 329: <li>Disabled <a href="https://man.openbsd.org/mobileip.4">mobileip(4)</a>.
330: <li>Added support
331: to <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
332: for getting and setting rxprio, finishing support for RFC
333: 2983. Implemented configuring rxprio
334: in <a href="https://man.openbsd.org/vlan.4">vlan(4)</a>,
335: <a href="https://man.openbsd.org/gre.4">gre(4)</a>,
336: <a href="https://man.openbsd.org/mpw.4">mpw(4)</a>,
337: <a href="https://man.openbsd.org/mpe.4">mpe(4)</a>,
338: <a href="https://man.openbsd.org/mpip.4">mpip(4)</a>,
339: <a href="https://man.openbsd.org/etherip.4">etherip(4)</a>
1.23 fcambus 340: and <a href="https://man.openbsd.org/bpe.4">bpe(4)</a>.
1.21 benno 341: <li>Implemented tx mitigation by calling the hardware transmit
342: routine per several packets rather than for individual
343: packets. Defers calls to the transmit routine to a network taskq,
344: or until a backlog of packets has built up.
345: <li>Stopped using <a href="https://man.openbsd.org/splnet.9">splnet(9)</a> when
346: running the network stack now
347: that it is using the NET_LOCK for protection, reducing latency spikes.
1.29 deraadt 348: <li>Added support for reading SFPs to some ethernet cards.
1.21 benno 349: </ul>
1.1 beck 350:
351: <li>Installer improvements:
1.21 benno 352: <ul>
353: <li>Allowed quoted SSIDs in the installer, rather than ignoring
354: those containing whitespace.
355: <li>Introduced <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
356: that can be used to upgrade OpenBSD from one release to the next
1.23 fcambus 357: or from snapshot to snapshot without user input.
1.29 deraadt 358: <li>Created an <a href="https://www.openbsd.org/octeon.html">octeon</a>
359: bootloader which is a modified kernel. To use this bootloader, the
360: firmware must be configured to load file "boot" instead of "bsd".
1.21 benno 361: <li>Included <a href="https://man.openbsd.org/mount_nfs.8">mount_nfs(8)</a>
362: on the amd64 CD ramdisk.
363: <li>Added <a href="https://man.openbsd.org/tee.1">tee(1)</a> to the ramdisk, and
364: display a moving progress bar
365: during auto upgrade/install.
366: <li>Repaired and improved v6 default route selection, fixing autoinstalls.
367: <li>Added <a href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a>
368: support to the sparc64 bootloader.
369: <li>The dhcp configuration is now preserved when restarting an install.
370: <li>The installer now remembers 'autoconf' when restarting an install.
371: <li>Stopped prompting for disks that do not contain a root
372: partition during upgrades. This defaults to the correct disk
373: when full disk encryption is in use, and will be useful for
374: future unattended upgrades.
375: </ul>
1.1 beck 376:
377: <li>Security improvements:
378: <ul>
1.21 benno 379: <li><a href="https://man.openbsd.org/unveil.2">unveil(2)</a> is
1.28 deraadt 380: now used in 77 userland programs to redact filesystem access.
1.21 benno 381: <li>Various changes
382: in <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
1.23 fcambus 383: to improve application behavior when encountering hidden
1.21 benno 384: filesystem paths.
1.28 deraadt 385: <li><a href="https://man.openbsd.org/ps.1">ps(1)</a> can show which
386: processes have called <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>
387: with the <b>u</b> and <b>U</b> flags in STATE field.
388: <li><a href="https://man.openbsd.org/ps.1">ps(1)</a> can show the list
389: of <a href="https://man.openbsd.org/pledge.2">pledge(2)</a> options
390: processes use with the <b>-o pledge</b> option.
1.22 benno 391: <li>Further and improved mitigations against Spectre side-channel
1.21 benno 392: vulnerability in Intel CPUs built since 2012.
393: <li>Mitigations for Intel's Microarchitectural Data Sampling
394: vulnerability, using the new CPU VERW behavior if available or
395: by using the proper sequence from Intel's "Deep Dive" doc in the
396: return-to-userspace and enter-VMM-guest
397: paths. Updated <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
398: to pass through the MSR bits so that guests can apply the
399: optimal mitigation.
400: <li>Rewrote <a href="https://man.openbsd.org/doas.1">doas(1)</a>
401: environment inheritance not to inherit, and instead reset to the
402: target user's values by default.
1.28 deraadt 403: <li>Prepare
1.21 benno 404: the <a href="https://www.openbsd.org/amd64.htmp">amd64</a> BIOS
1.28 deraadt 405: bootloader for loading the kernel at a random virtual address (future work).
1.21 benno 406: <li>Introduced
407: <a href="https://man.openbsd.org/malloc_conceal.3">malloc_conceal(3)</a>
408: and <a href="https://man.openbsd.org/calloc_conceal.3">calloc_conceal(3)</a>,
409: which return memory in pages marked MAP_CONCEAL and call
410: <a href="https://man.openbsd.org/freezero.3">freezero(3)</a>
411: on <a href="https://man.openbsd.org/free.3">free(3)</a>.
412: <li>Make 'systat pf' not require root permissions
413: (<a href="https://man.openbsd.org/systat.8">systat(8)</a>).
414: <li>Added support for the EFI Random Number Generator Protocol,
415: using it to XOR random data into the buffer we feed the kernel for
416: <a href="https://www.openbsd.org/amd64.html">amd64</a>.
417: <li>Added information about system call memory write protection
1.23 fcambus 418: and stack mapping violations to system
1.21 benno 419: accounting. Now <a href="https://man.openbsd.org/daily.8">daily(8)</a>
420: will print a list of affected processes
421: and <a href="https://man.openbsd.org/lastcom.1">lastcomm(1)</a>
422: will flag violations with 'M'.
1.1 beck 423: </ul>
424:
425: <li>Routing daemons and other userland network improvements:
1.21 benno 426: <ul>
427: <li>The <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a>
428: daemon now gets and sets the clock in a secure way when booting
429: even when a battery-backed clock is absent.
430: <li><a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a> now
431: removes IPv6 addresses when it detects a link-state change but
432: no new router advertisement is received.
433: <li><a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>
1.29 deraadt 434: now reports SFP, SFP+ and QSFP module information when using
435: the <b>sff</b> option.
1.21 benno 436: <li>Imported <a href="https://man.openbsd.org/snmp.1">snmp(1)</a>,
437: a new snmp client which aims to be netsnmp-compatible for
438: supported features, and
439: removed <a href="https://man.openbsd.org/snmpctl.8">snmpctl(8)</a>.
440: <li>Improvements
1.23 fcambus 441: in <a href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> dns
1.21 benno 442: resoving and constraints checking, especially during
443: startup. Unreliable ntp peers are removed them from the pool and
444: dns resolving is repeated to add replacements.
445: <li>Changed the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
446: Adj-RIB-Out to a per-peer set of RB trees, improving speed.
447: <li>Rewrote <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
448: community matching and handling code and improved performance
449: for setups using many communities.
450: <li>Checked the type of a network statement when looking for
451: duplicates
452: in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>. This
453: fixes added network 0.0.0.0/0 after 'network inet static'.
454: <li>Made improvements
455: to <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> speed when
456: configuring many peers.
457: <li>Implemented <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>
458: 'show mrt neighbors', to print the neighbor table of MRT
459: TABLE_DUMP_V2 dumps.
460: <li>Moved <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
461: pfkey socket to the parent process. The refreshing of the keys
462: for MD5 and IPSEC is done whenever the session state changes to
463: IDLE or ACTIVE, which should behave better when reloading
464: configs with auth changes.
465: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, fixed
466: reloading of network statements that have no fixed prefix
467: specification.
468: <li>Extended the maximum size of
469: the <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>
470: shutdown communication message to 255 bytes.
471: <li>Improvements
472: in <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>, to
473: always check for namespace collisions on table
474: commands. Introduced 'pfctl -FR' to reset pfctl(8) settings to
475: defaults.
476: <li>Imported Kristaps Dzonsons' RPKI
477: validator, <a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a>.
478: <li> <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> now supports
479: binary protocol health checking. See
480: <a href="https://man.openbsd.org/relayd.conf.5">relayd.conf(5)</a>.
481: <li>Added support for OCSP stapling
482: to <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
483: <li>Added <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>
484: support for SNI with new 'tls keypair' option to load additional
485: certificates.
486: <li>Added support for 'from/to address[/prefix]'
487: in <a href="https://man.openbsd.org/.8">relayd(8)</a> filter rules.
488: <li>Implemented RFC 8555 "Automatic Certificate Management
489: Environment (ACME)" to
490: enable <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
491: to communicate with the v02 Let's Encrypt API. Read the
492: <a href="faq/upgrade66.html">upgrade guide</a> for more information.
493: <li><a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a>
494: support for '-T erspan' and
495: arbitrary <a href="https://man.openbsd.org/gre.4">gre(4)</a>
496: protocols.
497: <li>Allowed specifying area by number as well as id
498: in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.
499: <li><a href="https://man.openbsd.org/ospfctl.8">ospfctl(8)</a> now
500: accepts both address and number format for 'ospfctl show
501: database area XXX'.
502: <li><a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> reload
503: improvements.
504: <li>Added a check
505: to <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>
506: and <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>
507: that any "depend on" interfaces are in the same rdomain.
508: <li>Make 'passive' (announce a network configured on an interface
509: as a stub network) work with P2P interfaces
510: in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>.
511: <li>Shutdown the service port when behind a captive portal
512: with <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>,
513: allowing bypass of captive portals that correctly answer SOA
514: queries for the root zone and return NXDOMAIN for the captive
515: portal redirect domain if edns0 is present.
516: <li>Implemented DNS block lists
517: in <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>.
518: <li>Added support for IKEv2 Message Fragmentation (RFC 7383)
519: to <a href="https://man.openbsd.org/iked.8">iked(8)</a>.
520: <li>Enabled switching between wireless and wired interfaces in
521: dhclient(8), setting the default route with the interface
522: address and allowing two default routes in the routing table. A
1.23 fcambus 523: wired interface will be preferred when connected.
1.21 benno 524: <li>Added consistent use of 'ifconfig $_if [-inet| -inet6]' to clear existing
525: configurations completely after restarting an install.
526: <li>Added 'forwarded' log format extending the 'combined' log
527: format in <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
528: </ul>
1.23 fcambus 529:
530: <li>Assorted improvements:
1.1 beck 531: <ul>
532: <li> The filesystem buffer cache now more aggressively uses memory
533: outside the DMA region, to improve cache performance on amd64
534: machines.
1.5 rob 535: <li> The BER API previously internal to
1.21 benno 536: <a href="https://man.openbsd.org/ldap.1">ldap(1)</a>,
537: <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a>,
538: <a href="https://man.openbsd.org/ypldap.8">ypldap(8)</a>, and
539: <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a> has been moved into
540: libutil.
541: See <a href="https://man.openbsd.org/ber_read_elements.3">ber_read_elements(3)</a>.
1.6 anton 542: <li>Support for specifying boot device in
1.21 benno 543: <a href="https://man.openbsd.org/vm.conf#boot_device">vm.conf(5)</a>.
544: <li>Removed the old
545: userland <a href="https://man.openbsd.org/realpath.3">realpath(3)</a>
546: and replaced it with __realpath(2), a kernel
547: implementation. This will prevent
548: calling <a href="https://man.openbsd.org/readlink.2">readlink(2)</a>
549: on every component of a path and improve performance for
550: <a href="https://man.openbsd.org/unveil.2">unveil(2)</a>.
551: <li><a href="https://man.openbsd.org/ld.so.1">ld.so(1)</a> speedups,
552: improving dynamic linker performance for large objects.
553: <li>Modified <a href="https://man.openbsd.org/systat.1">systat(1)</a>
554: to allow the use of 'b' to switch to stats since boot.
555: </ul>
556:
557: <li>VMM/VMD improvements ... <!-- XXX -->
558: <ul>
559: <li>Added support for 'boot device'
560: to <a href="https://man.openbsd.org/vm.conf.5">vm.conf(5)</a>
561: grammar, the '-B device' counterpart
562: from <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>.
563: <li>Emulated kvm pvclock
564: in <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>, compatible
565: with <a href="https://man.openbsd.org/pvclock.4">pvclock(4)</a> in
566: OpenBSD.
567: <li>Enabled reporting of the vm state through use of
568: the <a href="https://man.openbsd.org/vmctl.8">vmctl(8)</a>
569: 'status' command.
570: <li>Synced vm state
571: in <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> when
572: (un)pausing a vm to ensure
573: both <a href="https://man.openbsd.org/vmm.4">vmm(4)</a>
574: and <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> processes
575: know the vm is paused.
576: <li>Handled some unhandled instructions for SVM which led
577: to <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> guest
578: termination, as well as RDTSCP and INVLPGA instructions.
579: <li>Modified <a href="https://man.openbsd.org/vmm.4">vmm(4)</a> to
580: flush guest TLB entries if the guest disables paging.
1.1 beck 581: </ul>
582:
583: <li>OpenSMTPD 6.6.0
584: <ul>
1.18 gilles 585: <li>New Features
586: <ul>
587: <li>Introduced support for ECDSA certificates with an ECDSA privsep engine.
1.21 benno 588: <li>Introduced builtin filters to allow basic filtering of incoming sessions
589: in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>.
590: <li>Introduced option to deliver junk to a Junk folder
591: in <a href="https://man.openbsd.org/mail.maildir.8">mail.maildir(8)</a>.
1.18 gilles 592: </ul>
593: <li>Bug fixes
594: <ul>
1.21 benno 595: <li>Fixed the <a href="https://man.openbsd.org/smtp.1">smtp(1)</a> client
596: so it uses correct default port for SMTPS.
597: <li>Fixed an <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> crash on
598: excessively large input.
1.18 gilles 599: <li>Ensured mail rejected by an LMTP server will stay queued rather than bouncing.
600: </ul>
601: <li>Experimental Features
602: <ul>
1.21 benno 603: <li>Introduced a filters API to allow writing standalone filters
604: for <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
1.18 gilles 605: with multiple filters made available in ports.
1.21 benno 606: <li>Introduced support for proxy-v2 protocol
607: allowing <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> to
608: operate behind proxy.
1.18 gilles 609: </ul>
1.1 beck 610: </ul>
611:
612: <li>LibreSSL 3.0.X
613: <ul>
614: <li>API and Documentation Enhancements
615: <ul>
1.11 tb 616: <li>Completed the port of RSA_METHOD accessors from the
1.13 tb 617: OpenSSL 1.1 API.
1.21 benno 618: <li>Documented undescribed options and removed unfunctional
619: options description
620: in <a href="https://man.openbsd.org/openssl.1">openssl(1)</a>
621: manual.
1.1 beck 622: </ul>
623:
624: <li>Compatibility Changes
625: <ul>
626: </ul>
627:
628: <li>Testing and Proactive Security
629: <ul>
630: <li>
1.2 tb 631: A plethora of small fixes due to regular oss-fuzz testing.
1.13 tb 632: <li>
1.21 benno 633: Various side channels in DSA and ECDSA were addressed. These
634: are some of the many issues found in an extensive systematic
635: analysis of bignum usage by Samuel Weiser, David Schrammel et
636: al.
1.20 tb 637: <li>
1.21 benno 638: Try to compute the cofactor if a nonsensical value was
639: provided for ECC parameters. Fix from Billy Brumley.
1.1 beck 640: </ul>
641:
642: <li>Internal Improvements
1.21 benno 643: <ul>
644: </ul>
1.1 beck 645:
646: <li>Portable Improvements
647: <ul>
1.21 benno 648: <li>Enabled performance optimizations when building with Visual
649: Studio on Windows.
1.12 inoguchi 650: <li>Enabled openssl(1) speed subcommand on Windows platform.
1.1 beck 651: </ul>
652:
653: <li>Bug Fixes
654: <ul>
1.21 benno 655: <li>Fixed issue where SRTP extension would not be sent by
656: server.
657: <li>Fixed incorrect carry operation in 512 addition for
658: Streebog.
1.12 inoguchi 659: <li>Fixed -modulus option with openssl(1) dsa subcommand.
1.21 benno 660: <li>Fixed PVK format output issue with openssl(1) dsa and rsa
661: subcommand.
1.1 beck 662: </ul>
663: </ul>
664:
665: <li>OpenSSH 8.X
666: <ul>
1.21 benno 667: <li>New Features
668: <ul>
669: <li>Added sshsig, a lightweight signature and verification
670: ability for OpenSSH,
671: to <a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>.
672: Signatures can be made and verified using <code>ssh-keygen
673: -Y sign|verify</code>.
674: <li>Included SHA2-variant RSA key algorithms in KEX proposal,
675: allowing <a href="https://man.openbsd.org/ssh-keyscan.1">ssh-keyscan(1)</a>
676: to harvest keys from servers that disable SHA1 ssh-rsa.
677: <li>Encrypted
678: private <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
679: keys that are not in use as protection against speculation
680: and memory sidechannel attacks like Spectre, Meltdown,
681: Rowhammer and Rambleed.
682: <li>Adjusted <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
1.23 fcambus 683: to default to using the rsa-sha2-512 signature algorithm when
1.21 benno 684: signing certificates with an RSA key. This will render these
685: certificates incompatible with OpenSSH 7.1 and earlier,
686: unless the default is overridden by use of the (1) -t flag.
687: <li>Added logging
688: of <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
689: PermitOpen and PermitListen violations.
690: <li>Allowed prepending a list of algorithms to the default set in ssh(1) by
691: starting the list with the ^ character.
692: </ul>
693: <li>Bugfixes
694: <ul>
695: <li>
696: </ul>
1.1 beck 697: </ul>
698: <li>Mandoc XXX
699: <ul>
1.21 benno 700: <li>Provided a notification to stderr to indicate messages have been shown when
701: mandoc(1) output is printed without a pager, to indicate messages may have
702: preceded the output.
703: <li>Fixed a segfault
704: in <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a> when
705: /tmp is not writable.
706: <li>Added <a href="https://man.openbsd.org/mandoc.1">mandoc(1)</a>
707: support for 'prefers-color-scheme: dark'.
708: <li>Improved <a href="https://man.openbsd.org/man.1">man(1)</a>
709: matching for requests for a specific section.
1.1 beck 710: </ul>
711:
712: <li>Xenocara
713: <ul>
1.21 benno 714: <li>
1.1 beck 715: </ul>
716:
1.7 bentley 717: <li><p>Ports and packages:
1.1 beck 718: <ul>
719: </ul>
1.7 bentley 720: <p>Many pre-built packages for each architecture:
1.1 beck 721: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
1.7 bentley 722: <ul style="column-count: 3">
1.1 beck 723: <li>aarch64: XXXX
724: <li>amd64: XXXX
725: <li>arm: XXXX
726: <li>i386: XXXX
727: <li>mips64: XXXX
728: <li>mips64el: XXXX
729: <li>powerpc: XXXX
730: <li>sparc64: XXXX
1.7 bentley 731: </ul>
1.1 beck 732:
1.7 bentley 733: <p>Some highlights:
734: <ul style="column-count: 3">
1.21 benno 735: <li>
736: <li>
737: <li>
738: <li>
739: <li>
740: <li>
1.7 bentley 741: </ul>
1.1 beck 742:
743: <li>As usual, steady improvements in manual pages and other documentation.
744:
745: <li>The system includes the following major components from outside suppliers:
1.21 benno 746: <ul>
1.25 jsg 747: <li>Xenocara (based on X.Org 7.7 with xserver 1.20.5 + patches,
748: freetype 2.10.1, fontconfig 2.12.4, Mesa 19.0.8, xterm 344,
749: xkeyboard-config 2.20 and more)
750: <li>LLVM/Clang 8.0.1 (+ patches)
751: <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
752: <li>Perl 5.28.2 (+ patches)
1.21 benno 753: <li>NSD 4.2.2.
1.25 jsg 754: <li>Unbound 1.9.3
755: <li>Ncurses 5.7
756: <li>Binutils 2.17 (+ patches)
757: <li>Gdb 6.3 (+ patches)
758: <li>Awk Aug 10, 2011 version
759: <li>Expat 2.2.8
1.21 benno 760: </ul>
1.1 beck 761: </ul>
1.7 bentley 762: </section>
1.1 beck 763:
764: <hr>
765:
1.7 bentley 766: <section id=install>
767: <h3>How to install</h3>
768: <p>
1.1 beck 769: Please refer to the following files on the mirror site for
770: extensive details on how to install OpenBSD 6.6 on your machine:
771:
772: <ul>
773: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/alpha/INSTALL.alpha">
774: .../OpenBSD/6.6/alpha/INSTALL.alpha</a>
775: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/amd64/INSTALL.amd64">
776: .../OpenBSD/6.6/amd64/INSTALL.amd64</a>
777: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/arm64/INSTALL.arm64">
778: .../OpenBSD/6.6/arm64/INSTALL.arm64</a>
779: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/armv7/INSTALL.armv7">
780: .../OpenBSD/6.6/armv7/INSTALL.armv7</a>
781: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/hppa/INSTALL.hppa">
782: .../OpenBSD/6.6/hppa/INSTALL.hppa</a>
783: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/i386/INSTALL.i386">
784: .../OpenBSD/6.6/i386/INSTALL.i386</a>
785: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/landisk/INSTALL.landisk">
786: .../OpenBSD/6.6/landisk/INSTALL.landisk</a>
787: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/loongson/INSTALL.loongson">
788: .../OpenBSD/6.6/loongson/INSTALL.loongson</a>
789: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/luna88k/INSTALL.luna88k">
790: .../OpenBSD/6.6/luna88k/INSTALL.luna88k</a>
791: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/macppc/INSTALL.macppc">
792: .../OpenBSD/6.6/macppc/INSTALL.macppc</a>
793: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/octeon/INSTALL.octeon">
794: .../OpenBSD/6.6/octeon/INSTALL.octeon</a>
795: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.6/sparc64/INSTALL.sparc64">
796: .../OpenBSD/6.6/sparc64/INSTALL.sparc64</a>
797: </ul>
1.8 deraadt 798: </section>
1.1 beck 799:
800: <hr>
801:
1.7 bentley 802: <section id=quickinstall>
1.1 beck 803: <p>
804: Quick installer information for people familiar with OpenBSD, and the use of
805: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
806: If you are at all confused when installing OpenBSD, read the relevant
807: INSTALL.* file as listed above!
808:
1.7 bentley 809: <h3>OpenBSD/alpha:</h3>
1.1 beck 810:
1.7 bentley 811: <p>
1.1 beck 812: Write <i>floppy66.fs</i> or <i>floppyB66.fs</i> (depending on your machine)
813: to a diskette and enter <i>boot dva0</i>.
814: Refer to INSTALL.alpha for more details.
1.7 bentley 815:
1.1 beck 816: <p>
817: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
818: will most likely fail.
819:
1.7 bentley 820: <h3>OpenBSD/amd64:</h3>
1.1 beck 821:
1.7 bentley 822: <p>
1.1 beck 823: If your machine can boot from CD, you can write <i>install66.iso</i> or
824: <i>cd66.iso</i> to a CD and boot from it.
825: You may need to adjust your BIOS options first.
1.7 bentley 826:
1.1 beck 827: <p>
828: If your machine can boot from USB, you can write <i>install66.fs</i> or
829: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 830:
1.1 beck 831: <p>
832: If you can't boot from a CD, floppy disk, or USB,
833: you can install across the network using PXE as described in the included
834: INSTALL.amd64 document.
1.7 bentley 835:
1.1 beck 836: <p>
837: If you are planning to dual boot OpenBSD with another OS, you will need to
838: read INSTALL.amd64.
839:
1.7 bentley 840: <h3>OpenBSD/arm64:</h3>
1.1 beck 841:
1.7 bentley 842: <p>
1.1 beck 843: Write <i>miniroot66.fs</i> to a disk and boot from it after connecting
844: to the serial console. Refer to INSTALL.arm64 for more details.
845:
1.7 bentley 846: <h3>OpenBSD/armv7:</h3>
1.1 beck 847:
1.7 bentley 848: <p>
1.1 beck 849: Write a system specific miniroot to an SD card and boot from it after connecting
850: to the serial console. Refer to INSTALL.armv7 for more details.
851:
1.7 bentley 852: <h3>OpenBSD/hppa:</h3>
1.1 beck 853:
1.7 bentley 854: <p>
1.1 beck 855: Boot over the network by following the instructions in INSTALL.hppa or the
856: <a href="hppa.html#install">hppa platform page</a>.
857:
1.7 bentley 858: <h3>OpenBSD/i386:</h3>
1.1 beck 859:
1.7 bentley 860: <p>
1.1 beck 861: If your machine can boot from CD, you can write <i>install66.iso</i> or
862: <i>cd66.iso</i> to a CD and boot from it.
863: You may need to adjust your BIOS options first.
1.7 bentley 864:
1.1 beck 865: <p>
866: If your machine can boot from USB, you can write <i>install66.fs</i> or
867: <i>miniroot66.fs</i> to a USB stick and boot from it.
1.7 bentley 868:
1.1 beck 869: <p>
870: If you can't boot from a CD, floppy disk, or USB,
871: you can install across the network using PXE as described in
872: the included INSTALL.i386 document.
1.7 bentley 873:
1.1 beck 874: <p>
875: If you are planning on dual booting OpenBSD with another OS, you will need to
876: read INSTALL.i386.
877:
1.7 bentley 878: <h3>OpenBSD/landisk:</h3>
1.1 beck 879:
1.7 bentley 880: <p>
1.1 beck 881: Write <i>miniroot66.fs</i> to the start of the CF
882: or disk, and boot normally.
883:
1.7 bentley 884: <h3>OpenBSD/loongson:</h3>
1.1 beck 885:
1.7 bentley 886: <p>
1.1 beck 887: Write <i>miniroot66.fs</i> to a USB stick and boot bsd.rd from it
888: or boot bsd.rd via tftp.
889: Refer to the instructions in INSTALL.loongson for more details.
890:
1.7 bentley 891: <h3>OpenBSD/luna88k:</h3>
1.1 beck 892:
1.7 bentley 893: <p>
894: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
1.1 beck 895: from the PROM, and then bsd.rd from the bootloader.
896: Refer to the instructions in INSTALL.luna88k for more details.
897:
1.7 bentley 898: <h3>OpenBSD/macppc:</h3>
1.1 beck 899:
1.7 bentley 900: <p>
1.1 beck 901: Burn the image from a mirror site to a CDROM, and power on your machine
902: while holding down the <i>C</i> key until the display turns on and
903: shows <i>OpenBSD/macppc boot</i>.
1.7 bentley 904:
1.1 beck 905: <p>
906: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
907: /6.6/macppc/bsd.rd</i>
908:
1.7 bentley 909: <h3>OpenBSD/octeon:</h3>
1.1 beck 910:
1.7 bentley 911: <p>
1.1 beck 912: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
913: Refer to the instructions in INSTALL.octeon for more details.
914:
1.7 bentley 915: <h3>OpenBSD/sparc64:</h3>
1.1 beck 916:
1.7 bentley 917: <p>
1.1 beck 918: Burn the image from a mirror site to a CDROM, boot from it, and type
919: <i>boot cdrom</i>.
1.7 bentley 920:
1.1 beck 921: <p>
922: If this doesn't work, or if you don't have a CDROM drive, you can write
923: <i>floppy66.fs</i> or <i>floppyB66.fs</i>
924: (depending on your machine) to a floppy and boot it with <i>boot
925: floppy</i>. Refer to INSTALL.sparc64 for details.
1.7 bentley 926:
1.1 beck 927: <p>
928: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
929: will most likely fail.
1.7 bentley 930:
1.1 beck 931: <p>
932: You can also write <i>miniroot66.fs</i> to the swap partition on
933: the disk and boot with <i>boot disk:b</i>.
1.7 bentley 934:
1.1 beck 935: <p>
936: If nothing works, you can boot over the network as described in INSTALL.sparc64.
1.7 bentley 937: </section>
1.1 beck 938:
939: <hr>
940:
1.7 bentley 941: <section id=upgrade>
942: <h3>How to upgrade</h3>
943: <p>
1.1 beck 944: If you already have an OpenBSD 6.5 system, and do not want to reinstall,
945: upgrade instructions and advice can be found in the
946: <a href="faq/upgrade66.html">Upgrade Guide</a>.
1.7 bentley 947: </section>
1.1 beck 948:
949: <hr>
950:
1.7 bentley 951: <section id=sourcecode>
952: <h3>Notes about the source code</h3>
953: <p>
954: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
1.1 beck 955: This file contains everything you need except for the kernel sources,
956: which are in a separate archive.
957: To extract:
958: <blockquote><pre>
1.7 bentley 959: # <kbd>mkdir -p /usr/src</kbd>
960: # <kbd>cd /usr/src</kbd>
961: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
1.1 beck 962: </pre></blockquote>
1.7 bentley 963: <p>
964: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
1.1 beck 965: This file contains all the kernel sources you need to rebuild kernels.
966: To extract:
967: <blockquote><pre>
1.7 bentley 968: # <kbd>mkdir -p /usr/src/sys</kbd>
969: # <kbd>cd /usr/src</kbd>
970: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
1.1 beck 971: </pre></blockquote>
1.7 bentley 972: <p>
1.1 beck 973: Both of these trees are a regular CVS checkout. Using these trees it
974: is possible to get a head-start on using the anoncvs servers as
975: described <a href="anoncvs.html">here</a>.
976: Using these files
977: results in a much faster initial CVS update than you could expect from
978: a fresh checkout of the full OpenBSD source tree.
1.7 bentley 979: </section>
1.1 beck 980:
981: <hr>
982:
1.7 bentley 983: <section id=ports>
984: <h3>Ports Tree</h3>
985: <p>
1.1 beck 986: A ports tree archive is also provided. To extract:
987: <blockquote><pre>
1.7 bentley 988: # <kbd>cd /usr</kbd>
989: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
1.1 beck 990: </pre></blockquote>
1.7 bentley 991: <p>
1.1 beck 992: Go read the <a href="faq/ports/index.html">ports</a> page
993: if you know nothing about ports
994: at this point. This text is not a manual of how to use ports.
995: Rather, it is a set of notes meant to kickstart the user on the
996: OpenBSD ports system.
997: <p>
998: The <i>ports/</i> directory represents a CVS checkout of our ports.
999: As with our complete source tree, our ports tree is available via
1000: <a href="anoncvs.html">AnonCVS</a>.
1001: So, in order to keep up to date with the -stable branch, you must make
1002: the <i>ports/</i> tree available on a read-write medium and update the tree
1003: with a command like:
1004: <blockquote><pre>
1.7 bentley 1005: # <kbd>cd /usr/ports</kbd>
1.15 jsg 1006: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_6</kbd>
1.1 beck 1007: </pre></blockquote>
1.7 bentley 1008: <p>
1.1 beck 1009: [Of course, you must replace the server name here with a nearby anoncvs
1010: server.]
1011: <p>
1012: Note that most ports are available as packages on our mirrors. Updated
1013: ports for the 6.6 release will be made available if problems arise.
1014: <p>
1015: If you're interested in seeing a port added, would like to help out, or just
1016: would like to know more, the mailing list
1017: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1.7 bentley 1018: </section>