Annotation of www/69.html, Revision 1.9
1.1 deraadt 1: <!doctype html>
2: <html lang=en id=release>
3: <meta charset=utf-8>
4:
5: <title>OpenBSD 6.9</title>
6: <meta name="description" content="OpenBSD 6.9">
7: <meta name="viewport" content="width=device-width, initial-scale=1">
8: <link rel="stylesheet" type="text/css" href="openbsd.css">
9: <link rel="canonical" href="https://www.openbsd.org/69.html">
10:
11: <h2 id=OpenBSD>
12: <a href="index.html">
13: <i>Open</i><b>BSD</b></a>
14: 6.9
15: </h2>
16:
17: <table>
18: <tr>
19: <td>
20: <a href="images/XXX.png">
21: <img width="227" height="303" src="images/XXX-s.gif" alt="XXX"></a>
22: <td>
1.2 kn 23: Released May 1, 2021.<br>
24: Copyright 1997-2021, Theo de Raadt.<br>
1.1 deraadt 25: <br>
26: 6.9 Song:
27: <a href="lyrics.html#69">"XXX"</a>.
28: <br>
1.7 job 29: Artwork by Joy San.
1.1 deraadt 30: <br>
31: <ul>
32: <li>See the information on <a href="ftp.html">the FTP page</a> for
33: a list of mirror machines.
34: <li>Go to the <code class=reldir>pub/OpenBSD/6.9/</code> directory on
35: one of the mirror sites.
36: <li>Have a look at <a href="errata69.html">the 6.9 errata page</a> for a list
37: of bugs and workarounds.
38: <li>See a <a href="plus69.html">detailed log of changes</a> between the
39: 6.8 and 6.9 releases.
40: <p>
41: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
42: pubkeys for this release:<p>
43:
44: <table class=signify>
45: <tr><td>
46: openbsd-69-base.pub:
47: <td>
48: <a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/openbsd-69-base.pub">
49: RWQZj25CSG5R2oLo5735Hh6C48kkjFsj5rJDjW+fGZwyY+BkD5/zps8f</a>
50: <tr><td>
51: openbsd-69-fw.pub:
52: <td>
53: RWSYx4htNi/zavF8ZToMBDFz2xymRfFnnR1MEKV9csYbvnrTBwdkXhdy
54: <tr><td>
55: openbsd-69-pkg.pub:
56: <td>
57: RWQlDXyHx5KlPoEiz4yWRK/Gt/rvPwI8KEAt3utge/dBS7R+EscdzA5K
58: <tr><td>
59: openbsd-69-syspatch.pub:
60: <td>
61: RWRWuHkSV0U8PUX24vGa3ywrvKNQY6llV3PLvKEzDTiTVPfIRaXPfvzR
62: </table>
63: </ul>
64: <p>
65: All applicable copyrights and credits are in the src.tar.gz,
66: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
67: files fetched via <code>ports.tar.gz</code>.
68: </table>
69:
70: <hr>
71:
72: <section id=new>
73: <h3>What's New</h3>
74: <p>
75: This is a partial list of new features and systems included in OpenBSD 6.9.
76: For a comprehensive list, see the <a href="plus69.html">changelog</a> leading
77: to 6.9.
78:
79: <ul>
80:
81: <li>New/extended platforms:
82: <ul>
1.3 benno 83: <li>Added <a href="https://man.openbsd.org/astfb.4">astfb(4)</a>, a
84: driver for the framebuffer of the Aspeed BMC found on many POWER8 and
85: POWER9 systems.
86: <li>Added bsd.mp to powerpc64's installXX.{img,iso}.
87: <li>Added RETGUARD implementation for powerpc and powerpc64.
88: <li>Added powerpc64 retguard macros for setjmp/longjmp.
89: <li>Added retguard macros to powerpc64 locore functions.
90: <li>Added a workaround for PCIO devices that cannot address the full
91: 64-bit PCI address space to powerpc64. Needed for <a
92: href="https://man.openbsd.org/radeondrm.4">radeondrm(4)</a> and <a
93: href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> since Radeon
94: GPUs only implement 36, 40, or 44 bits of address space.
95: <li>Added limited emulation of unaligned access in the powerpc64 kernel.
96: <li>Changed <a href="https://man.openbsd.org/astfb.4">astfb(4)</a> to
97: allow it to become the console on powerpc64.
98: <li>Added support for passing a bootmac command line argument to
99: RAMDISK on powerpc64.
1.5 benno 100: <li>Fixed booting on powerpc64 machines with memory banks higher in
101: physical address space, needing a larger TCE table.
102: <li>Introduced power-saving mode on POWER9 (ISA v3).
1.9 ! benno 103: <li>Enabled floating-point exceptions on powerpc64.
! 104:
! 105:
! 106:
! 107: <!-- loongson -->
! 108: <li>Made loongson kernels recognize Lynloong LM9002/9003 and LM9013.
! 109: <li>Use native display resolution 1368x768 for Lynloong all-in-one computers.
! 110:
! 111: <li>Disabled base-gcc on loongson and octeon.
1.3 benno 112:
113:
1.1 deraadt 114: </ul>
115:
116: <li>Improvements to time measurements, mostly in the kernel:
117: <ul>
1.9 ! benno 118: <li>Changed the <a href="https://man.openbsd.org/pool.9">pool(9)</a> timeouts to use the system uptime instead of ticks.
! 119:
! 120: <li>Ensured <a href="https://man.openbsd.org/sleep.3">sleep(3)</a>
! 121: calls <a href="https://man.openbsd.org/nanosleep.2">nanosleep(2)</a>
! 122: if seconds is zero, now delegating all decisions about whether or not
! 123: to yield the CPU.
! 124:
1.1 deraadt 125: </ul>
126:
127: <li>Various kernel improvements:
128: <ul>
1.5 benno 129: <li>Added basic support for kclock timeouts to <a
130: href="https://man.openbsd.org/timeout.9">timeout(9)</a>.
131: <li>Added a top-level 'reboot' command to <a
132: href="https://man.openbsd.org/ddb.4">ddb(4)</a>.
133: <li>Fixed the "entry point at 0x10010000" hang reported on amd64
134: machines by using a 64MB block to load the kernel.
135: <li>Added <a href="https://man.openbsd.org/witness.4">witness(4)</a>
136: check for uninitialized (or zeroed) lock usage.
137: <li>Added fd close notification for kqueue-based <a
138: href="https://man.openbsd.org/poll.2">poll(2)</a> and <a
139: href="https://man.openbsd.org/select.2">select(2)</a>.
140: <li>Added a global "nowake" channel for threads avoiding <a
141: href="https://man.openbsd.org/wakeup.9">wakeup(9)</a> to <a
142: href="https://man.openbsd.org/tsleep.9">tsleep(9)</a>.
143: <li>Corrected accounting of zero length Transfer Descriptors in <a
144: href="https://man.openbsd.org/xhci.4">xhci(4)</a>, preventing running
145: out of free Transfer Ring Blocks.
146: <li>Used per-CPU counter for fault and stats counters reached in uvm_fault().
147: <li>Introduced kern.video.record for <a
148: href="https://man.openbsd.org/video.4">video(4)</a> devices, an analog
149: to the kern.audio.record <a
150: href="https://man.openbsd.org/sysctl.8">sysctl(8)</a> parameter for <a
151: href="https://man.openbsd.org/audio.4">audio(4)</a> devices. By
152: default, kern.video.record will be set to zero and blank all data
153: delivered by drivers attaching to <a
154: href="https://man.openbsd.org/video.4">video(4)</a>.
1.9 ! benno 155: <li>Allowed a process to open a <a
! 156: href="https://man.openbsd.org/video.4">video(4)</a> device multiple
! 157: times. Fixes webcam usage with Firefox and BigBlueButton.
1.5 benno 158: <li>Added trace points for <a
159: href="https://man.openbsd.org/malloc.9">malloc(9)</a> and <a
160: href="https://man.openbsd.org/free.9">free(9)</a>, making them
161: traceabe via <a href="https://man.openbsd.org/dt.4">dt(4)</a> and <a
162: href="https://man.openbsd.org/btrace.8">btrace(8)</a>.
1.9 ! benno 163: <li>Fixed a boot-time crash on sparc64 due to mutex use during the
! 164: message buffer initialization.
! 165: <li>Prevented a panic in some acpi firmware that provided invalid
! 166: memory regions in their reserved memory region reporting table.
! 167: <li>Disabled <a href="https://man.openbsd.org/com.4">com(4)</a> on
! 168: sparc64 for m3000s. Console i/o should fall back to ofw routines.
! 169:
! 170:
! 171:
! 172: <li>Introduced new function <a
! 173: href="https://man.openbsd.org/if_unit.9">if_unit(9)</a>, returning a
! 174: pointer to the interface descriptor corresponding to the unique name.
1.5 benno 175:
1.3 benno 176:
177: <!-- SMP -->
178: <li>Introduced "if_cloners_lock" rwlock and used it to serialize if_clone_{create,destroy}(), avoiding multiple race conditions.
179: <li>Introduced a system-wide mutex that serializes msgbuf operations.
1.5 benno 180: <li>Made <a href="https://man.openbsd.org/uvm_pagealloc.9">uvm_pagealloc(9)</a> of the physical memory allocator mp-safe.
1.9 ! benno 181: <li>Unlocked <a href="https://man.openbsd.org/getppid.2">getppid(2)</a>.
! 182: <li>Introduced locking for amaps and anons, improving build performance.
1.3 benno 183:
184: <!-- DRM -->
185: <li>Implemented linux interval tree functions for <a href="https://man.openbsd.org/drm.4">drm(4)</a>.
186: <li>Fixed <a href="https://man.openbsd.org/wsconsctl.8">wsconsctl(8)</a> display commands when using <a href="https://man.openbsd.org/drm.4">drm(4)</a> drivers on macppc.
187: <li>Changed from <a href="https://man.openbsd.org/rwlock.9">rwlock(9)</a> to <a href="https://man.openbsd.org/mutex.9">mutex(9)</a> for linux rwlocks.
188: <li>Fixed a panic associated with locks and <a href="https://man.openbsd.org/drm.4">drm(4)</a> on macppc with Powerbook5,6 and RV350.
189: <li>Revised the initialization of the <a href="https://man.openbsd.org/drm.4">drm(4)</a> Linux emulation layer to call it only when the first drm instance attaches.
1.5 benno 190: <li>Fixed DRI3 support on <a href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a> and <a href="https://man.openbsd.org/ati.4">ati(4)</a>.
1.3 benno 191:
192:
1.1 deraadt 193: </ul>
194:
195: <li>Various new userland features:
196: <ul>
1.3 benno 197: <li>Added <a
198: href="https://man.openbsd.org/doas.conf.5">doas.conf(5)</a> "nolog"
199: option to avoid <a
200: href="https://man.openbsd.org/syslog.3">syslog(3)</a>.
201: <li>Allowed specific <a
202: href="https://man.openbsd.org/sndio.7">sndio(7)</a> devices to be used
203: for play-only and rec-only modes.
1.9 ! benno 204: <li>Use an 8th order FIR low-pass filter for resampling in <a
! 205: href="https://man.openbsd.org/sndiod.8">sndiod(8)</a> and for <a
! 206: href="https://man.openbsd.org/aucat.1">aucat(1)</a>, removing most of
! 207: the aliasing noise during resampling.
1.3 benno 208:
1.1 deraadt 209: </ul>
210:
211: <li>Various bugfixes and tweaks in userland:
212: <ul>
1.3 benno 213: <li>Fixed a pledge violation in <a
214: href="https://man.openbsd.org/csh.1">csh(1)</a> where redirecting
215: input from a file containing ^T would cause csh(1) to perform a tty
216: ioctl operation against a non-tty.
217: <li>Prevented a crash due to <a
218: href="https://man.openbsd.org/httpd.8">httpd(8)</a> listening on port
219: 443 with missing TLS certificates.
220: <li>Stopped exempting file systems from <a
221: href="https://man.openbsd.org/security.8">security(8)</a> on the basis
222: of nodev and nosuid options, which may not be used for file systems
223: mounted beneath.
224: <li>Modified <a href="https://man.openbsd.org/daily.8">daily(8)</a>
225: to stop reporting disk status and networking statistics.
226: <li>Made <a
227: href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> specify
228: a version when it uses <a
229: href="https://man.openbsd.org/fw_update.1">fw_update(1)</a> to avoid
230: the situation where upgrading a pre-6.8 snapshot to 6.8 release with
231: "-r" would install firmware packages from snapshots.
232: <li>Increased speed of the dependency check pass for <a
233: href="https://man.openbsd.org/pkg_add.1">pkg_add(1)</a>.
234:
235: <li>Prevented process exit in multithreaded programs from reporting
236: the wrong error code.
237:
1.5 benno 238: <li>Allowed booting of amd64/i386 from 4TB GPT formatted disks.
239:
240: <li>When using the <a href="https://man.openbsd.org/cat.1">cat(1)</a>
241: -n flag, correctly enumerate files with more than INT_MAX lines.
242: <li>Fixed a memory leak in ld.so's malloc.
1.9 ! benno 243: <li>Added a "xenodm" login class for <a
! 244: href="https://man.openbsd.org/xenodm.1">xenodm(1)</a> and increased
! 245: openfiles to 512 to avoid running out of file descriptors with a busy
! 246: desktop.
! 247: <li>Fixed -s option for <a href="https://man.openbsd.org/cmp.1">cmp(1)</a>.
! 248: <li>Improve pledge in <a
! 249: href="https://man.openbsd.org/doas.1">doas(1)</a>, specifically added
! 250: pledge to the "-C" code path.
1.6 otto 251: <li>Inproved performance of <a
252: href="https://man.openbsd.org/malloc.3">malloc(3)</a>'s cache.
1.1 deraadt 253: </ul>
254:
255: <li>Improved hardware support and driver bugfixes, including:
256: <ul>
1.3 benno 257:
258: <li>Moved mfokclock(4) from loongson to make it available for other
259: platforms and renamed it to <a
260: href="https://man.openbsd.org/mfokrtc.4">mfokrtc(4)</a>.
261: <li>Fixed brightness setting on MacBooks.
262: <li>Added AMD Vi and Intel VTD IOMMU support. This creates separate
263: domains for each PCI device and can provide protection against invalid
264: memory access.
265: <li>Enabled brightness keys on powerbooks where the keyboard attaches
266: as <a href="https://man.openbsd.org/ukbd.4">ukbd(4)</a>.
267: <li>Set initial default display brightness on macppc via
268: of_setbrightness() to ensure <a
269: href="https://man.openbsd.org/wscons.4">wscons(4)</a> and ofw are in
270: sync.
271: <li>Added the ClearFog GT 8K to <a
272: href="https://man.openbsd.org/mvclock.4">mvclock(4)</a>.
273: <li>Added support for the PL2303HXN series chips to <a
274: href="https://man.openbsd.org/uplcom.4">uplcom(4)</a>.
275: <li>Added support for the PCA9547 I2C mux to <a
276: href="https://man.openbsd.org/pcamux.4">pcamux(4)</a>.
277: <li>Extended <a href="https://man.openbsd.org/pcamux.4">pcamux(4)</a>
278: with ACPI support.
279: <li>Added <a href="https://man.openbsd.org/acpige.4">acpige(4)</a>, a
280: driver for ACPI generic event devices, used on te HoneyComb LX2K to
281: implement power button handling.
282: <li>Added <a href="https://man.openbsd.org/pchgpio.4">pchgpio(4)</a>,
283: a driver for the GPIO controllers found on modern Intel PCHs.
284: <li>Added ACPI support to <a
285: href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
286: <li>Fixed panics on the HoneyComb LX2K with <a
287: href="https://man.openbsd.org/amdgpu.4">amdgpu(4)</a>.
288: <li>Fixed very old <a
289: href="https://man.openbsd.org/umass.4">umass(4)</a> devices where the
290: INQUIRY command succeeds but with a residue equal to the requested
291: bytes.
1.5 benno 292: <li>Added Gemini Lake I2C id to <a
293: href="https://man.openbsd.org/dwiic.4">dwiic(4)</a>, making the
294: touchpad work on the Teclast F7 Plus laptop.
1.3 benno 295:
296: <!-- ARM64 -->
297: <li>Optimized arm64 <a
298: href="https://man.openbsd.org/copyin.9">copyin(9)</a>, <a
299: href="https://man.openbsd.org/copyout.9">copyout(9)</a> and <a
300: href="https://man.openbsd.org/kcopy.9">kcopy(9)</a> by doing 16-byte
301: copies if possible.
302: <li>Added recognition of Cortex-A78AE, Cortex-X1 and Neoverse V1 arm64 CPUs.
303: <li>Added clock support for i.MX8MP.
304: <li>Added support for the VF610 I2C controller to <a
305: href="https://man.openbsd.org/imxiic.4">imxiic(4)</a>.
306: <li>Fixed a panic seen with mbuf chains on arm64.
1.5 benno 307: <li>Added <a href="https://man.openbsd.org/dwgpio.4">dwgpio(4)</a>, a
308: driver for the Synopsys DesignWare GPIO controller.
309: <li>Added "amlogic,meson-g12a-dwmac" to <a
310: href="https://man.openbsd.org/dwge.4">dwge(4)</a>.
311: <li>Added <a
312: href="https://man.openbsd.org/amlpinctrl.4">amlpinctrl(4)</a> support
313: for the "Always On" GPIOs.
314: <li>Added PCIe clocks to <a
315: href="https://man.openbsd.org/amlclock.4">amlclock(4)</a>.
316: <li>Made large read and write transactions work in <a
317: href="https://man.openbsd.org/amliic.4">amliic(4)</a>.
1.9 ! benno 318: <li>Added PCIe support to <a
! 319: href="https://man.openbsd.org/amlpciephy.4">amlpciephy(4)</a>.
! 320: <li>Added support to <a
! 321: href="https://man.openbsd.org/dwpcie.4">dwpcie(4)</a> for the PCIe
! 322: controller found on Amlogic G12A/G12B/SM1 SoCs.
! 323: <li>Implemented intx support in <a
! 324: href="https://man.openbsd.org/mvkpcie.4">mvkpcie(4)</a>.
1.3 benno 325:
326:
1.1 deraadt 327: </ul>
328:
329: <li>New or improved network hardware support:
330: <ul>
1.3 benno 331: <li>Fixed link state change behavior in 82598 <a
332: href="https://man.openbsd.org/ix.4">ix(4)</a> chips.
333: <li>Fixed issues with network stopping after the first down/up cycle
334: in <a href="https://man.openbsd.org/mvpp.4">mvpp(4)</a> Marvel Armada
335: Ethernet device.
336: <li>Added SFP+ support to ofw, including support for direct attach cables.
337: <li>Added 10G media support to <a
338: href="https://man.openbsd.org/mvpp.4">mvpp(4)</a>.
339: <li>Added support for 1000base-x and 2500base-x connections to <a
340: href="https://man.openbsd.org/mvneta.4">mvneta(4)</a>.
341: <li>Added <a href="https://man.openbsd.org/mvsw.4">mvsw(4)</a>, a
342: driver for Marvel "SOHO" switches.
343:
1.5 benno 344: <li>Enabled auto-negotiation on the SerDes links, allowing
345: in-band-status to work between <a
346: href="https://man.openbsd.org/mvpp.4">mvpp(4)</a> and <a
347: href="https://man.openbsd.org/mvsw.4">mvsw(4)</a> on the ClearFog GT
348: 8K.
349: <li>Added support for the i.MX8MP PCIe clocks, USB clocks and second
350: ethernet.
351: <li>Added Wake on LAN support to <a
352: href="https://man.openbsd.org/rge.4">rge(4)</a>.
353: <li>Enabled IPv4 and TCP/UDP checksum offload on transmission in <a
354: href="https://man.openbsd.org/ogx.4">ogx(4)</a>.
355:
356:
1.1 deraadt 357: </ul>
358:
359: <li>Added or improved wireless network drivers:
360: <ul>
1.3 benno 361: <li>Fixed <a href="https://man.openbsd.org/athn.4">athn(4)</a> in
362: client mode against APs that use WPA1/TKIP as the group cipher.
363: <li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>
364: against access points using WPA1/TKIP as the group cipher.
365: <li>Added multicast support to <a
366: href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> to allow IPv6.
367: <li>Fixed <a href="https://man.openbsd.org/urtwn.4">urtwn(4)</a>
368: repeated DEAUTH and loss/restoration of link.
1.5 benno 369: <li>Introduced a delay to work around an issue in <a
370: href="https://man.openbsd.org/bwfm.4">bwfm(4)</a> on the BCM43602 that
371: was triggering "unexpected pairwise key update" errors.
1.9 ! benno 372: <li>Enabled <a href="https://man.openbsd.org/athn.4">athn(4)</a> for arm64.
1.3 benno 373:
1.1 deraadt 374: </ul>
375:
376: <li>IEEE 802.11 wireless stack improvements and bugfixes:
377: <ul>
1.5 benno 378: <li>Fixed the calculation of "maxlen" in <a
379: href="https://man.openbsd.org/iwm.4">iwm(4)</a> and <a
380: href="https://man.openbsd.org/iwx.4">iwx(4)</a> when there are
381: multiple MPDUs in one packet.
382: <li>Fixed 802.11 RSN capabilities announced to peers.
383: <li>Flushed the reorder buffer after gap timeout to prevent frames
384: from remaining in the buffer until the next frame is received.
385: <li>Avoided spurious "input packet decapsulations failed" errors in
386: <a href="https://man.openbsd.org/netstat.1">netstat(1)</a> -W with
387: A-MSDU enabled.
388:
389:
1.1 deraadt 390: </ul>
391:
392: <li>Generic network stack improvements and bugfixes:
393: <ul>
1.3 benno 394: <li>Prevented kernel reuse of mbuf memory when generating the ICMP6
395: response to an IPv6 packet.
396: <li>Added the ability to force the selection of source IP address for
397: programs that do not specify a source IP, configurable via <a
398: href="https://man.openbsd.org/route.8">route(8)</a>.
399: <li>For IPv6 addresses, added tracking of address proposal creation
400: times to be able to establish total lifetime. This information is used
401: to renew pltime/vltime of privacy addresse per RFC 4941.
402: <li>Fixed <a href="https://man.openbsd.org/wg.4">wg(4)</a> on macppc
403: by keeping track of allowed ips pointer correctly.
404:
405:
1.1 deraadt 406: </ul>
407:
408: <li>Installer improvements:
409: <ul>
1.5 benno 410: <li>Prevented a race in <a
411: href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> privsep
412: which could cause autoinstall to fail by calling <a
413: href="https://man.openbsd.org/ftp.1">ftp(1)</a> without a local
414: address.
415: <li>Fixed hangs on amd64 bsd.rd due to misreported core clock
416: frequency on newer Intel Comet Lake models.
1.9 ! benno 417: <li>Began distributing the gzip'd version of bsd.rd on all platforms with boot methods supporting it.
1.5 benno 418:
1.1 deraadt 419: </ul>
420:
421: <li>Security improvements:
422: <ul>
1.3 benno 423: <li>Added notices to syslog whenever the "%n" format string component of <a href="https://man.openbsd.org/printf.3">printf(3)</a> is used.
1.1 deraadt 424: </ul>
425:
426: <li>Routing daemons and other userland network improvements:
427: <ul>
1.3 benno 428: <!-- BGP -->
429: <li>Fixed a memory leak when parsing <a
430: href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> roa-set lists.
431: <li>Stopped allowing configuration of the same neighbor multiple
432: times in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
1.5 benno 433: <li>When exporting prefixes from multiple sessions in <a
434: href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> into the same <a
435: href="https://man.openbsd.org/pf.4">pf(4)</a> table, now prefixes are
436: only removed from the table when withdrawn from all sessions that
437: announced them.
438: <li>Introduced a send hold timer in <a
439: href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> to detect stalls on
440: the sending side of a TCP connection, acting as a last resort to
441: detect faulty peers.
442: <li>Added <a href="https://man.openbsd.org/bgpctl.8">bgpctl(8)</a>
443: "show sets" to display information about the roa-set, as-sets and
444: prefix-sets loaded into <a
445: href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
446:
1.9 ! benno 447: <li>Allowed use of <a
! 448: href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> on interfaces that
! 449: share the same IP.
1.5 benno 450:
1.3 benno 451: <!-- HTTPD -->
452: <li>Created a new "location (found|notfound)" option for <a
453: href="https://man.openbsd.org/httpd.conf.5">httpd.conf(5)</a> to allow
454: testing for resource path existence.
455: <li>Added a directive to <a
456: href="https://man.openbsd.org/httpd.8">httpd(8)</a> to check if a path
457: is accessible.
458: <li>Fixed detection of duplicate locations in <a
459: href="https://man.openbsd.org/httpd.8">httpd(8)</a>.
1.9 ! benno 460: <li>Fixed the <a href="https://man.openbsd.org/httpd.8">httpd(8)</a>
! 461: example configuration not to generate errors when running without TLS
! 462: keys already in place.
! 463:
! 464:
1.3 benno 465:
466:
467: <!-- IKE/IPSEC -->
468: <li>Added support to request IP addresses as IKEv2 initiator to <a
469: href="https://man.openbsd.org/iked.8">iked(8)</a>. If 'request addr
470: 0.0.0.0' is configured, any address will be accepted.
471: <li>Make <a href="https://man.openbsd.org/iked.8">iked(8)</a> accept
472: ANY dynamic address with 'request addr 0.0.0.0'.
473: <li>Added 'dynamic' keyword to <a
474: href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> to allow
475: configuration of flows to dynamically assigned addresses.
476: <li>Added the 'any' keyword to <a
477: href="https://man.openbsd.org/iked.conf.5">iked.conf(5)</a> for
478: requests to allow "request address any".
479: <li>Enabled <a href="https://man.openbsd.org/iked.8">iked(8)</a>
480: support for ASN1_DN ipsec identifiers.
481: <li>Implemented <a href="https://man.openbsd.org/iked.8">iked(8)</a>
482: "from dynamic," installing flows where "dynamic" is replaced by the
483: received dynamic IP address.
484: <li>Made sure not to replace 0.0.0.0 with a dynamic address in <a
485: href="https://man.openbsd.org/iked.8">iked(8)</a> if it is a network
486: address.
487: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> -s
488: socket option to specify a control socket.
489: <li>Used a counter instead of random IV for AES-GCM in <a
490: href="https://man.openbsd.org/iked.8">iked(8)</a>, eliminating the
491: risk of random collisions.
492: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a>
493: support for multiple address pools.
494: <li>Added the <a href="https://man.openbsd.org/iked.8">iked(8)</a>
495: "set stickyaddress" option, which attempts to assign the same "config
496: address" when an IKESA is negotiated with the DSTID of an existing
497: IKESA.
498: <li>Ensured rekeying of every child SA in <a
499: href="https://man.openbsd.org/iked.8">iked(8)</a>.
1.5 benno 500: <li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a> support
501: for RSASSA-PSS signature verification (RFC 7427).
502: <li>Corrected the first packet of an <a
503: href="https://man.openbsd.org/ipsec.4">ipsec(4)</a> SA to have
504: sequence number 1.
505: <li>Accepted reject and blackhole routes for IPsec PMTU discovery.
506: <li>Prevented leaking of ipsec_hosts in <a
507: href="https://man.openbsd.org/iked.8">iked(8)</a> when building
508: hosts_list.
509: <li>Prevented initiation of new additional SAs for each policy upon
510: every <a href="https://man.openbsd.org/ikectl.8">ikectl(8)</a> config
511: reload.
512: <li>Fixed "any" and "dynamic" keywords for flows in <a
513: href="https://man.openbsd.org/iked.8">iked(8)</a> and added proper
514: IPv6 support.
1.9 ! benno 515: <li>Created a path MTU host route for <a
! 516: href="https://man.openbsd.org/ipsec.4">IPsec(4)</a> over IPv6.
1.3 benno 517:
518:
519: <!-- LDAP -->
520: <li>Fixed <a href="https://man.openbsd.org/ldapd.8">ldapd(8)</a> cert
521: and key path inference for absolute paths.
522:
523:
524: <!-- PF -->
525: <li>Relaxed checks in <a
526: href="https://man.openbsd.org/pfctl.8">pfctl(8)</a> and <a
527: href="https://man.openbsd.org/pf.4">pf(4)</a> to accept any valid
528: routing domain, even if it does not yet exist.
529:
1.5 benno 530: <li>Made <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>
531: detect and reject bogus ranges before loading the ruleset to prevent a
532: panic.
533:
534:
1.3 benno 535:
1.5 benno 536: <!-- dig -->
537: <li>Implemented RFC 8914 Extended DNS Errors for <a
538: href="https://man.openbsd.org/dig.1">dig(1)</a>.
539: <li>Fixed <a href="https://man.openbsd.org/dig.1">dig(1)</a> EDNS
540: Client Subnet option (+subnet=).
541: <li>Fixed IPv6 link-local address handling for nameservers to talk to
542: and address to bind to in <a
543: href="https://man.openbsd.org/dig.1">dig(1)</a>.
544:
545: <!-- dhclient -->
546: <li>Fixed incorrect behavior when using <a
547: href="https://man.openbsd.org/dhclient.conf.5">dhclient.conf(5)</a> to
548: change the lease renew/rebind/expiry timing.
549: <li>Allowed the provision of <a
550: href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> options on
551: "dhcp" lines in <a
552: href="https://man.openbsd.org/hostname.if.5">hostname.if(5)</a> files.
553:
554:
555: <!-- other -->
1.3 benno 556: <li>Changed <a href="https://man.openbsd.org/ping.8">ping(8)</a> to
557: drain the raw socket of packets received before we were fully setup to
558: avoid reporting ICMP responses intended for other instances of ping(8)
559: running in parallel.
560:
561: <li>Changed <a href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>
562: Duplicate Address Detection (DAD) to only generate a new address if we
563: are using Semantically Opaque Interface Identifiers.
564: <li>Handled an autoconf interface changing its rdomain in <a
565: href="https://man.openbsd.org/slaacd.8">slaacd(8)</a>.
566: <li>Fixed rare crashes of <a
567: href="https://man.openbsd.org/unwind.8">unwind(8)</a> when DNS answers
568: are larger than the maximum imsg size.
1.9 ! benno 569: <li>Implemented <a
! 570: href="https://man.openbsd.org/unwind.8">unwind(8)</a> listening on
! 571: TCP.
! 572:
1.3 benno 573: <li>Removed the -L option from <a
574: href="https://man.openbsd.org/dhclient.8">dhclient(8)</a>.
575: <li>Added a simple --timeout implementation to <a
576: href="https://man.openbsd.org/openrsync.1">openrsync(1)</a>.
577: <li>Added support for the use of !command to <a
578: href="https://man.openbsd.org/mygate.5">mygate(5)</a>, so that
579: netstart has a late opportunity to perform network configuration.
1.5 benno 580: <li>Make <a href="https://man.openbsd.org/rad.8">rad(8)</a> to handle
581: multiple rdomains in a single daemon (instead of running it in
582: multiple rdomains).
583: <li>Added a specific headline to <a
584: href="https://man.openbsd.org/netstat.1">netstat(1)</a> for TCP state
585: and IP protocol.
1.9 ! benno 586: <li>Handle permanent redirects (RFC 7538) in <a
1.5 benno 587: href="https://man.openbsd.org/ftp.1">ftp(1)</a> fetch.
1.9 ! benno 588: <li>Added requests for a new certificate without requiring -F when <a
! 589: href="https://man.openbsd.org/acme-client.1">acme-client(1)</a>
! 590: detects an added or removed SAN in the config file not reflected in
! 591: the existing certificate on disk.
! 592: <li>Print rewritten addresses in <a
! 593: href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> logged with <a
! 594: href="https://man.openbsd.org/pflog.4">pflog(4)</a> for rdr-to, nat-to
! 595: and af-to rules.
! 596:
1.3 benno 597:
1.1 deraadt 598: </ul>
599:
600: <li><a href="https://man.openbsd.org/tmux">tmux(1)</a> improvements and bug fixes:
601: <ul>
1.5 benno 602: <li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> synchronize-panes a pane option and added set-option -U flag to unset an option on all panes.
1.1 deraadt 603: </ul>
604:
605: <li>OpenSMTPD 6.9.0
606: <ul>
1.5 benno 607: <li>Introduced <a href="https://man.openbsd.org/smtp.1">smtp(1)</a>
608: -a to perform authentication before sending a message.
609: <li>Fixed a memory leak in <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> resolver.
610: <li>Prevented a crash due to premature release of resources by the <a
611: href="https://man.openbsd.org/smtpd.8">smtpd(8)</a> filter state
612: machine.
613:
1.1 deraadt 614: </ul>
615:
616: <li>LibreSSL 3.2.2
617: <ul>
618: <li>New Features
619: <ul>
1.3 benno 620: <!-- XXX not sorted into categories yet -->
621: <li>Added a -legacy_verify flag to <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> to force use of the old validator.
622: <li>Changed <a href="https://man.openbsd.org/crypto.3">crypto(3)</a>
623: to call its get_issuer() callback to try and find a suitable
624: certificate in cases where it has failed to find a print certificate
625: from the supplied roots and intermediates.
626: <li>Corrected an issue where <a href="https://man.openbsd.org/openssl.1">openssl(1)</a> verify might not error on expired certificates.
627: <li>Fixed an issue in the TLS 1.3 code that caused stalls in haproxy and other software.
628: <li>Implemented auto chain for the TLSv1.3 server.
629: <li>Implemented the key material exporter for TLSv1.3.
1.9 ! benno 630: <li>Fixed problems which could arise with software such as bacula and icinga when a root certificate was specified as both a trusted and an untrusted certificate.
! 631: <li>Added support for <a href="https://man.openbsd.org/SSL_get_shared_ciphers.3">SSL_get_shared_ciphers(3)</a> in TLSv1.3 and fixed to correctly return ciphers shared by the client and the server.
1.3 benno 632:
633:
1.1 deraadt 634: </ul>
635:
636: <li>API and Documentation Enhancements
637: <ul>
638: <li>...
639: </ul>
640:
641: <li>Compatibility Changes
642: <ul>
643: <li>...
644: </ul>
645:
646: <li>Testing and Proactive Security
647: <ul>
648: <li>...
649: </ul>
650:
651: <li>Internal Improvements
652: <ul>
653: <li>...
654: </ul>
655:
656: <li>Portable Improvements
657: <ul>
658: <li>...
659: </ul>
660:
661: <li>Bug Fixes
662: <ul>
663: <li>...
664: </ul>
665: </ul>
666:
667: <li>OpenSSH 8.4
1.3 benno 668:
1.1 deraadt 669: <ul>
1.3 benno 670:
671: <!-- XXX not sorted into categories yet -->
672: <li>Preferred ed25519 signature algorithm variants over ECDSA in <a
673: href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> and <a
674: href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>.
675: <li>Enabled <a
676: href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
677: UpdateHostkeys by default when the configuration has not overridden
678: UserKnownHostFile.
679: <li>Prefixed <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
680: keyboard interactive prompts with "user@host" for easier
681: identification of connections.
682: <li>Displayed any other hostnames/addresses associated with a new
683: hostkey when <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
684: prompts the user to accept it.
685: <li>When doing an <a href="https://man.openbsd.org/sftp.1">sftp(1)</a>
686: recursive upload or download of a read-only directory, ensured that
687: the directory was created with write and execute permissions in the
688: interim to allow the transfer.
689: <li>Set the specified TOS/DSCP for interactive use prior to TCP
690: connect in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
691: <li>CLeaned up passing of struct passwd from monitor to preauth
692: privsep process in <a href="https://man.openbsd.org/ssh.1">ssh(1)</a>.
1.5 benno 693: <li>Added an <a
694: href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>
695: KnownHostsCommand that allows the client to obtain known_hosts data
696: from a command in addition to the usual files.
1.9 ! benno 697: <li>Made CheckHostIP default to "no" in <a
! 698: href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>.
! 699: <li>Added PerSourceMaxStartups and PerSourceNetBlockSize options to
! 700: <a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
1.3 benno 701:
702:
1.1 deraadt 703: <li>Potentially incompatible changes.
704: <ul>
705: <li>...
706: </ul>
707: <li>New Features
708: <ul>
709: <li>...
710: </ul>
711: <li>Bugfixes
712: <ul>
713: <li>...
714: </ul>
715: </ul>
716:
717: <li>Ports and packages:
718: <p>Many pre-built packages for each architecture:
719: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
720: <ul style="column-count: 3">
721: <li>aarch64: XXX
722: <li>amd64: XXX
723: <li>arm: XXX
724: <li>i386: XXX
725: <li>mips64: XXX
726: <li>mips64el: XXX
727: <li>powerpc: XXX
728: <li>powerpc64: XXX
729: <li>sparc64: XXX
730: </ul>
731:
732: <li>As usual, steady improvements in manual pages and other documentation.
733:
734: <li>The system includes the following major components from outside suppliers:
735: <ul>
1.5 benno 736:
737: <li>Xenocara (based on X.Org 7.7 with xserver 1.20.10 + patches,
1.9 ! benno 738: freetype 2.10.4, fontconfig 2.12.4, Mesa 20.0.8, xterm 363,
1.5 benno 739: xkeyboard-config 2.20, fonttosfnt 1.2.1 and more)
1.1 deraadt 740: <li>LLVM/Clang 10.0.1 (+ patches)
741: <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
742: <li>Perl 5.30.3 (+ patches)
1.8 florian 743: <li>NSD 4.3.6
744: <li>Unbound 1.13.1
1.1 deraadt 745: <li>Ncurses 5.7
746: <li>Binutils 2.17 (+ patches)
747: <li>Gdb 6.3 (+ patches)
1.5 benno 748: <li>Awk December 18, 2020 version
749: <li>Expat 2.2.10
1.1 deraadt 750: </ul>
751:
752: </ul>
753: </section>
754:
755: <hr>
756:
757: <section id=install>
758: <h3>How to install</h3>
759: <p>
760: Please refer to the following files on the mirror site for
761: extensive details on how to install OpenBSD 6.9 on your machine:
762:
763: <ul>
764: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/alpha/INSTALL.alpha">
765: .../OpenBSD/6.9/alpha/INSTALL.alpha</a>
766: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/amd64/INSTALL.amd64">
767: .../OpenBSD/6.9/amd64/INSTALL.amd64</a>
768: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/arm64/INSTALL.arm64">
769: .../OpenBSD/6.9/arm64/INSTALL.arm64</a>
770: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/armv7/INSTALL.armv7">
771: .../OpenBSD/6.9/armv7/INSTALL.armv7</a>
772: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/hppa/INSTALL.hppa">
773: .../OpenBSD/6.9/hppa/INSTALL.hppa</a>
774: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/i386/INSTALL.i386">
775: .../OpenBSD/6.9/i386/INSTALL.i386</a>
776: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/landisk/INSTALL.landisk">
777: .../OpenBSD/6.9/landisk/INSTALL.landisk</a>
778: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/loongson/INSTALL.loongson">
779: .../OpenBSD/6.9/loongson/INSTALL.loongson</a>
780: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/luna88k/INSTALL.luna88k">
781: .../OpenBSD/6.9/luna88k/INSTALL.luna88k</a>
782: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/macppc/INSTALL.macppc">
783: .../OpenBSD/6.9/macppc/INSTALL.macppc</a>
784: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/octeon/INSTALL.octeon">
785: .../OpenBSD/6.9/octeon/INSTALL.octeon</a>
786: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/powerpc64/INSTALL.powerpc64">
1.4 landry 787: .../OpenBSD/6.9/powerpc64/INSTALL.powerpc64</a>
1.1 deraadt 788: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/sgi/INSTALL.sgi">
789: .../OpenBSD/6.9/sgi/INSTALL.sgi</a>
790: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/6.9/sparc64/INSTALL.sparc64">
791: .../OpenBSD/6.9/sparc64/INSTALL.sparc64</a>
792: </ul>
793: </section>
794:
795: <hr>
796:
797: <section id=quickinstall>
798: <p>
799: Quick installer information for people familiar with OpenBSD, and the use of
800: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
801: If you are at all confused when installing OpenBSD, read the relevant
802: INSTALL.* file as listed above!
803:
804: <h3>OpenBSD/alpha:</h3>
805:
806: <p>
807: If your machine can boot from CD, you can write <i>install69.iso</i> or
808: <i>cd69.iso</i> to a CD and boot from it.
809: Refer to INSTALL.alpha for more details.
810:
811: <h3>OpenBSD/amd64:</h3>
812:
813: <p>
814: If your machine can boot from CD, you can write <i>install69.iso</i> or
815: <i>cd69.iso</i> to a CD and boot from it.
816: You may need to adjust your BIOS options first.
817:
818: <p>
819: If your machine can boot from USB, you can write <i>install69.img</i> or
820: <i>miniroot69.img</i> to a USB stick and boot from it.
821:
822: <p>
823: If you can't boot from a CD, floppy disk, or USB,
824: you can install across the network using PXE as described in the included
825: INSTALL.amd64 document.
826:
827: <p>
828: If you are planning to dual boot OpenBSD with another OS, you will need to
829: read INSTALL.amd64.
830:
831: <h3>OpenBSD/arm64:</h3>
832:
833: <p>
834: Write <i>miniroot69.img</i> to a disk and boot from it after connecting
835: to the serial console. Refer to INSTALL.arm64 for more details.
836:
837: <h3>OpenBSD/armv7:</h3>
838:
839: <p>
840: Write a system specific miniroot to an SD card and boot from it after connecting
841: to the serial console. Refer to INSTALL.armv7 for more details.
842:
843: <h3>OpenBSD/hppa:</h3>
844:
845: <p>
846: Boot over the network by following the instructions in INSTALL.hppa or the
847: <a href="hppa.html#install">hppa platform page</a>.
848:
849: <h3>OpenBSD/i386:</h3>
850:
851: <p>
852: If your machine can boot from CD, you can write <i>install69.iso</i> or
853: <i>cd69.iso</i> to a CD and boot from it.
854: You may need to adjust your BIOS options first.
855:
856: <p>
857: If your machine can boot from USB, you can write <i>install69.img</i> or
858: <i>miniroot69.img</i> to a USB stick and boot from it.
859:
860: <p>
861: If you can't boot from a CD, floppy disk, or USB,
862: you can install across the network using PXE as described in
863: the included INSTALL.i386 document.
864:
865: <p>
866: If you are planning on dual booting OpenBSD with another OS, you will need to
867: read INSTALL.i386.
868:
869: <h3>OpenBSD/landisk:</h3>
870:
871: <p>
872: Write <i>miniroot69.img</i> to the start of the CF
873: or disk, and boot normally.
874:
875: <h3>OpenBSD/loongson:</h3>
876:
877: <p>
878: Write <i>miniroot69.img</i> to a USB stick and boot bsd.rd from it
879: or boot bsd.rd via tftp.
880: Refer to the instructions in INSTALL.loongson for more details.
881:
882: <h3>OpenBSD/luna88k:</h3>
883:
884: <p>
885: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
886: from the PROM, and then bsd.rd from the bootloader.
887: Refer to the instructions in INSTALL.luna88k for more details.
888:
889: <h3>OpenBSD/macppc:</h3>
890:
891: <p>
892: Burn the image from a mirror site to a CDROM, and power on your machine
893: while holding down the <i>C</i> key until the display turns on and
894: shows <i>OpenBSD/macppc boot</i>.
895:
896: <p>
897: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
898: /6.9/macppc/bsd.rd</i>
899:
900: <h3>OpenBSD/octeon:</h3>
901:
902: <p>
903: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
904: Refer to the instructions in INSTALL.octeon for more details.
905:
906: <h3>OpenBSD/powerpc64:</h3>
907:
908: <p>
909: To install, write <i>install69.img</i> or <i>miniroot69.img</i> to a
910: USB stick, plug it into the machine and choose the <i>OpenBSD
911: install</i> menu item in Petitboot.
912: Refer to the instructions in INSTALL.powerpc64 for more details.
913:
914: <h3>OpenBSD/sgi:</h3>
915:
916: <p>
917: To install, burn cd69.iso on a CD-R, put it in the CD drive of your
918: machine and select <i>Install System Software</i> from the System Maintenance
919: menu. Indigo/Indy/Indigo2 (R4000) systems will not boot automatically from
920: CD-ROM, and need a proper invocation from the PROM prompt.
921: Refer to the instructions in INSTALL.sgi for more details.
922:
923: <p>
924: If your machine doesn't have a CD drive, you can setup a DHCP/tftp network
925: server, and boot using "bootp()/bsd.rd.IP##" using the kernel matching your
926: system type. Refer to the instructions in INSTALL.sgi for more details.
927:
928: <h3>OpenBSD/sparc64:</h3>
929:
930: <p>
931: Burn the image from a mirror site to a CDROM, boot from it, and type
932: <i>boot cdrom</i>.
933:
934: <p>
935: If this doesn't work, or if you don't have a CDROM drive, you can write
936: <i>floppy69.img</i> or <i>floppyB69.img</i>
937: (depending on your machine) to a floppy and boot it with <i>boot
938: floppy</i>. Refer to INSTALL.sparc64 for details.
939:
940: <p>
941: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
942: will most likely fail.
943:
944: <p>
945: You can also write <i>miniroot69.img</i> to the swap partition on
946: the disk and boot with <i>boot disk:b</i>.
947:
948: <p>
949: If nothing works, you can boot over the network as described in INSTALL.sparc64.
950: </section>
951:
952: <hr>
953:
954: <section id=upgrade>
955: <h3>How to upgrade</h3>
956: <p>
957: If you already have an OpenBSD 6.7 system, and do not want to reinstall,
958: upgrade instructions and advice can be found in the
959: <a href="faq/upgrade69.html">Upgrade Guide</a>.
960: </section>
961:
962: <hr>
963:
964: <section id=sourcecode>
965: <h3>Notes about the source code</h3>
966: <p>
967: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
968: This file contains everything you need except for the kernel sources,
969: which are in a separate archive.
970: To extract:
971: <blockquote><pre>
972: # <kbd>mkdir -p /usr/src</kbd>
973: # <kbd>cd /usr/src</kbd>
974: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
975: </pre></blockquote>
976: <p>
977: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
978: This file contains all the kernel sources you need to rebuild kernels.
979: To extract:
980: <blockquote><pre>
981: # <kbd>mkdir -p /usr/src/sys</kbd>
982: # <kbd>cd /usr/src</kbd>
983: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
984: </pre></blockquote>
985: <p>
986: Both of these trees are a regular CVS checkout. Using these trees it
987: is possible to get a head-start on using the anoncvs servers as
988: described <a href="anoncvs.html">here</a>.
989: Using these files
990: results in a much faster initial CVS update than you could expect from
991: a fresh checkout of the full OpenBSD source tree.
992: </section>
993:
994: <hr>
995:
996: <section id=ports>
997: <h3>Ports Tree</h3>
998: <p>
999: A ports tree archive is also provided. To extract:
1000: <blockquote><pre>
1001: # <kbd>cd /usr</kbd>
1002: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
1003: </pre></blockquote>
1004: <p>
1005: Go read the <a href="faq/ports/index.html">ports</a> page
1006: if you know nothing about ports
1007: at this point. This text is not a manual of how to use ports.
1008: Rather, it is a set of notes meant to kickstart the user on the
1009: OpenBSD ports system.
1010: <p>
1011: The <i>ports/</i> directory represents a CVS checkout of our ports.
1012: As with our complete source tree, our ports tree is available via
1013: <a href="anoncvs.html">AnonCVS</a>.
1014: So, in order to keep up to date with the -stable branch, you must make
1015: the <i>ports/</i> tree available on a read-write medium and update the tree
1016: with a command like:
1017: <blockquote><pre>
1018: # <kbd>cd /usr/ports</kbd>
1019: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_6_9</kbd>
1020: </pre></blockquote>
1021: <p>
1022: [Of course, you must replace the server name here with a nearby anoncvs
1023: server.]
1024: <p>
1025: Note that most ports are available as packages on our mirrors. Updated
1026: ports for the 6.9 release will be made available if problems arise.
1027: <p>
1028: If you're interested in seeing a port added, would like to help out, or just
1029: would like to know more, the mailing list
1030: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
1031: </section>
![[BACK]](/icons/back.gif){kind=icon}
Return to 69.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www