[BACK]Return to 74.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/74.html, Revision 1.10

1.1       deraadt     1: <!doctype html>
                      2: <html lang=en id=release>
                      3: <head>
                      4: <meta charset=utf-8>
                      5:
                      6: <title>OpenBSD 7.4</title>
                      7: <meta name="description" content="OpenBSD 7.4">
                      8: <meta name="viewport" content="width=device-width, initial-scale=1">
                      9: <link rel="stylesheet" type="text/css" href="openbsd.css">
                     10: <link rel="canonical" href="https://www.openbsd.org/74.html">
                     11: </head><body>
                     12: <h2 id=OpenBSD>
                     13: <a href="index.html">
                     14: <i>Open</i><b>BSD</b></a>
                     15: 7.4
                     16: </h2>
                     17:
                     18: <table>
                     19: <tr>
                     20: <td>
                     21: <a href="images/XXX.png">
                     22: <img width="227" height="303" src="images/XXX-s.gif" alt="XXX"></a>
                     23: <td>
                     24: Released Oct XXX, 2023. (55th OpenBSD release)<br>
                     25: Copyright 1997-2023, Theo de Raadt.<br>
                     26: <br>
1.4       job        27: Artwork by Jessica Scott.
1.1       deraadt    28: <br>
                     29: <ul>
                     30: <li>See the information on <a href="ftp.html">the FTP page</a> for
                     31:     a list of mirror machines.
                     32: <li>Go to the <code class=reldir>pub/OpenBSD/7.4/</code> directory on
                     33:     one of the mirror sites.
                     34: <li>Have a look at <a href="errata74.html">the 7.4 errata page</a> for a list
                     35:     of bugs and workarounds.
                     36: <li>See a <a href="plus74.html">detailed log of changes</a> between the
                     37:     7.3 and 7.4 releases.
                     38: <p>
                     39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
                     40:     pubkeys for this release:<p>
                     41:
                     42: <table class=signify>
                     43: <tr><td>
                     44: openbsd-74-base.pub:
                     45: <td>
                     46: <a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/openbsd-74-base.pub">
                     47: RWRoyQmAD08ajTqgzK3UcWaVlwaJMckH9/CshU8Md5pN1GoIrcBdTF+c</a>
                     48: <tr><td>
                     49: openbsd-74-fw.pub:
                     50: <td>
                     51: RWTRA9KXRuZKunpXYK0ed5OxbE0K7rYWpDnTu+M8wZdqzRroFqed0U6I
                     52: <tr><td>
                     53: openbsd-74-pkg.pub:
                     54: <td>
                     55: RWR/h7gubZ9M/O46RNy3PzLTPevOCK24LGCPca41IHMwSH4YuVA+jnWO
                     56: <tr><td>
                     57: openbsd-74-syspatch.pub:
                     58: <td>
                     59: RWQqty2voy8V8afR9/v2RzuNr7r4y9cKwljABN7Tytd7JcPdBjnXg0Ue
                     60: </table>
                     61: </ul>
                     62: <p>
                     63: All applicable copyrights and credits are in the src.tar.gz,
                     64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
                     65: files fetched via <code>ports.tar.gz</code>.
                     66: </table>
                     67:
                     68: <hr>
                     69:
                     70: <section id=new>
                     71: <h3>What's New</h3>
                     72: <p>
                     73: This is a partial list of new features and systems included in OpenBSD 7.4.
                     74: For a comprehensive list, see the <a href="plus74.html">changelog</a> leading
                     75: to 7.4.
                     76:
                     77: <ul>
                     78:
                     79: <li>New/extended platforms:
                     80:   <ul>
                     81:   <li>...
                     82:   </ul>
                     83:
                     84: <li>Various kernel improvements:
                     85:   <ul>
                     86:   <li>...
                     87:   </ul>
                     88:
                     89: <li>SMP Improvements
                     90:   <ul>
                     91:   <li>...
                     92:   </ul>
                     93:
                     94: <li>Direct Rendering Manager and graphics drivers
                     95:   <ul>
                     96:   <li>...
                     97:   </ul>
                     98:
                     99: <li>VMM/VMD improvements
                    100:   <ul>
                    101:   <li>...
                    102:   </ul>
                    103:
                    104: <li>Various new userland features:
                    105:   <ul>
                    106:   <li>...
                    107:   </ul>
                    108:
                    109: <li>Various bugfixes and tweaks in userland:
                    110:   <ul>
                    111:   <li>...
                    112:   </ul>
                    113:
                    114: <li>Improved hardware support and driver bugfixes, including:
                    115:   <ul>
                    116:   <li>...
                    117:   </ul>
                    118:
                    119: <li>New or improved network hardware support:
                    120:   <ul>
                    121:   <li>...
                    122:   </ul>
                    123:
                    124: <li>Added or improved wireless network drivers:
                    125:   <ul>
                    126:   <li>...
                    127:   </ul>
                    128:
                    129: <li>IEEE 802.11 wireless stack improvements and bugfixes:
                    130:   <ul>
                    131:   <li>...
                    132:   </ul>
                    133:
                    134: <li>Installer, upgrade and bootloader improvements:
                    135:   <ul>
                    136:   <li>...
                    137:   </ul>
                    138:
                    139: <li>Security improvements:
                    140:   <ul>
                    141:   <li>...
                    142:   </ul>
                    143:
                    144: <li>Changes in the network stack:
                    145:   <ul>
                    146:   <li>...
                    147:  </ul>
                    148:
                    149: <li>Routing daemons and other userland network improvements:
                    150:   <ul>
                    151:   <li>IPsec support was improved:
                    152:   <ul>
                    153:        <li>...
                    154:   </ul>
                    155:   <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>,
                    156:   <ul>
                    157:        <li>...
                    158:   </ul>
                    159:   <li><a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> saw some changes:
                    160:   <ul>
                    161:        <li>...
                    162:   </ul>
                    163:
                    164:   <li>In <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>,
                    165:   <ul>
                    166:        <li>...
                    167:   </ul>
                    168:
                    169:   <li>...
                    170:   </ul>
                    171:
                    172: <li><a href="https://man.openbsd.org/tmux.1">tmux(1)</a> improvements and bug fixes:
                    173:   <ul>
                    174:   <li>...
                    175:   </ul>
                    176:
1.7       tb        177: <li>LibreSSL version 3.8.2
1.1       deraadt   178:   <ul>
1.7       tb        179:   <li>Security fixes
                    180:     <ul>
                    181:     <li>Disabled TLSv1.0 and TLSv1.1 in libssl so that they may no longer
                    182:       be selected for use.
                    183:     <li>BN_is_prime{,_fasttest}_ex() refuse to check numbers larger than
                    184:       32 kbits for primality. This mitigates various DoS vectors.
                    185:     <li>Restricted the RFC 3779 code to IPv4 and IPv6. It was not written
                    186:       to be able to deal with anything else.
                    187:     </ul>
                    188:   <li>Portable changes
                    189:     <ul>
                    190:     <li>Extended the endian.h compat header with hto* and *toh macros.
                    191:     <li>Adapted more tests to the portable framework.
                    192:     <li>Internal tools are now statically linked.
                    193:     <li>Applications bundled as part of the LibreSSL package internally,
                    194:       nc(1) and openssl(1), now are linked statically if static libraries
                    195:       are built.
                    196:     <li>Internal compatibility function symbols are no longer exported from
                    197:       libcrypto. Instead, the libcompat library is linked to libcrypto,
                    198:       libssl, and libtls separately. This increases size a little, but
                    199:       ensures that the libraries are not exporting symbols to programs
                    200:       unintentionally.
                    201:     <li>Selective removal of CET implementation on platforms where it is
                    202:       not supported (macOS).
                    203:     <li>Integrated four more tests.
                    204:     <li>Added Windows ARM64 architecture to tested platforms.
                    205:     <li>Removed Solaris 10 support, fixed Solaris 11.
                    206:     <li>libtls no longer links statically to libcrypto / libssl unless
                    207:            <code>--enable-libtls-only</code> is specified at configure time.
                    208:     <li>Improved Windows compatibility library, namely handling of files vs
                    209:       sockets, correcting an exception when operating on a closed socket.
                    210:     <li>CMake builds no longer hardcode <code>-O2</code> into the compiler flags,
                    211:       instead using flags from the CMake build type instead.
                    212:     <li>Set the CMake default build type to <code>Release</code>. This can be overridden
                    213:       during configuration.
                    214:     <li>Fixed broken ASM support with MinGW builds.
                    215:     </ul>
1.1       deraadt   216:   <li>New features
                    217:     <ul>
1.7       tb        218:     <li>Added support for truncated SHA-2 and for SHA-3.
                    219:     <li>The BPSW primality test performs additional Miller-Rabin rounds
                    220:       with random bases to reduce the likelihood of composites passing.
                    221:     <li>Allow testing of ciphers and digests using badly aligned buffers
                    222:       in openssl speed using -unalign.
                    223:     <li>Ed25519 certificates are now supported in openssl(1) ca and req.
                    224:       Prepared Ed25519 support in libssl.
                    225:     <li>Add branch target information (BTI) support to amd64 and arm64
                    226:       assembly.
1.1       deraadt   227:     </ul>
                    228:   <li>Compatibility changes
                    229:     <ul>
1.7       tb        230:     <li>Added a workaround for a poorly thought-out change in OpenSSL 3 that
                    231:       broke privilege separation support in libtls.
                    232:     <li>Moved libtls from ECDSA_METHOD to EC_KEY_METHOD.
                    233:     <li>Removed GF2m support: BIGNUM no longer supports binary extension
                    234:       field arithmetic and all binary elliptic builtin curves were removed.
                    235:     <li>Removed dangerous, "fast" NIST prime and elliptic curve implementations.
                    236:       In particular, EC_GFp_nist_method() is no longer available.
                    237:     <li>Removed most public symbols that were deprecated in OpenSSL 0.9.8.
                    238:     <li>Removed the public X9.31 API (RSA_X931_PADDING is still available).
                    239:     <li>Removed Cipher Text Stealing mode.
                    240:     <li>Removed ENGINE support, including ECDH_METHOD and ECDSA_METHOD.
                    241:     <li>Removed COMP, DSO, dynamic loading of conf modules and support for
                    242:       custom ex_data and error stacks.
                    243:     <li>Removed proxy certificate (RFC 3820) support.
                    244:     <li>Removed SXNET and NETSCAPE_CERT_SEQUENCE support including the
1.8       tb        245:       openssl(1) nseq command.
1.7       tb        246:     <li>ENGINE support was removed and OPENSSL_NO_ENGINE is set. In spite
                    247:       of this, some stub functions are provided to avoid patching some
                    248:       applications that do not honor OPENSSL_NO_ENGINE.
                    249:     <li>The POLICY_TREE and its related structures and API were removed.
                    250:     <li>In X509_VERIFY_PARAM_inherit() copy hostflags independently of the
                    251:       host list.
                    252:     <li>Made CRYPTO_get_ex_new_index() not return 0 to allow applications
                    253:       to use *_{get,set}_app_data() and *_{get,set}_ex_data() alongside
                    254:       each other.
                    255:     <li>X509_NAME_get_text_by_{NID,OBJ}() now only succeed if they contain
                    256:       valid UTF-8 without embedded NUL.
                    257:     <li>The explicitText user notice uses UTF8String instead of VisibleString
                    258:       to reduce the risk of emitting certificates with invalid DER-encoding.
                    259:     <li>Initial fixes for RSA-PSS support to make the TLSv1.3 stack more
                    260:       compliant with RFC 8446.
                    261:     <li>Fixed EVP_CIPHER_CTX_iv_length() to return what was set with
                    262:       EVP_CTRL_AEAD_SET_IVLEN or one of its aliases.
1.1       deraadt   263:     </ul>
1.7       tb        264:   <li>Internal improvements
1.1       deraadt   265:     <ul>
1.7       tb        266:     <li>Improved sieve of Eratosthenes script used for generating a table
                    267:       of small primes.
                    268:     <li>Removed incomplete and dangerous BN_RECURSION code.
                    269:     <li>Imported RFC 5280 policy checking code from BoringSSL and used it
                    270:       to replace the old exponential time code.
                    271:     <li>Converted more of libcrypto to use CBB/CBS.
                    272:     <li>Started cleaning up and rewriting SHA internals.
                    273:     <li>Reduced the dependency of hash implementations on many layers of
                    274:       macros. This results in significant speedups since modern compilers
                    275:       are now less confused.
                    276:     <li>Improved BIGNUM internals and performance.
                    277:     <li>Significantly simplified the BN_BLINDING internals used in RSA.
                    278:     <li>Made BN_num_bits() independent of bn->top.
                    279:     <li>Rewrote and simplified bn_sqr().
                    280:     <li>Significantly improved Montgomery multiplication performance.
                    281:     <li>Rewrote and improved BN_exp() and BN_copy().
                    282:     <li>Changed ASN1_item_sign_ctx() and ASN1_item_verify() to work with
                    283:       Ed25519 and fixed a few bugs in there.
                    284:     <li>Lots of cleanup for DH, DSA, EC, RSA internals.  Plugged numerous
                    285:       memory leaks, fixed logic errors and inconsistencies.
                    286:     <li>Cleaned up and simplified various ECDH and ECDSA internals.
                    287:     <li>Removed EC_GROUP precomp machinery.
                    288:     <li>Fixed various issues with EVP_PKEY_CTX_{new,dup}().
                    289:     <li>Rewrote OBJ_find_sigid_algs() and OBJ_find_sigid_by_algs().
                    290:     <li>Improved X.509 certificate version checks.
                    291:     <li>Ensure no X.509v3 extensions appear more than once in certificates.
                    292:     <li>Replaced ASN1_bn_print with a cleaner internal implementation.
                    293:     <li>Fix OPENSSL_cpuid_setup() invocations on arm/aarch64.
                    294:     <li>Improved checks for commonName in libtls.
                    295:     <li>Fixed error check for X509_get_ext_d2i() failure in libtls.
                    296:     <li>Removed code guarded by #ifdef ZLIB.
                    297:     <li>Plug a potential memory leak in ASN1_TIME_normalize().
                    298:     <li>Fixed a use of uninitialized in i2r_IPAddrBlocks().
                    299:     <li>Rewrote CMS_SignerInfo_{sign,verify}().
1.1       deraadt   300:     </ul>
1.7       tb        301:   <li>Bug fixes
1.1       deraadt   302:     <ul>
1.7       tb        303:     <li>Correctly handle negative input to various BIGNUM functions.
                    304:     <li>Ensure ERR_load_ERR_strings() does not set errno unexpectedly.
                    305:     <li>Fix error checking of i2d_ECDSA_SIG() in ossl_ecdsa_sign().
1.8       tb        306:     <li>Fixed aliasing issue in BN_mod_inverse(). Disallowed aliasing of result
                    307:       and modulus in various BN_mod_* functions.
1.7       tb        308:     <li>Fixed detection of extended operations (XOP) on AMD hardware.
                    309:     <li>Ensure Montgomery exponentiation is used for the initial RSA blinding.
                    310:     <li>Policy is always checked in X509 validation. Critical policy extensions
                    311:       are no longer silently ignored.
                    312:     <li>Fixed error handling in tls_check_common_name().
                    313:     <li>Add missing pointer invalidation in SSL_free().
                    314:     <li>Fixed X509err() and X509V3err() and their internal versions.
                    315:     <li>Ensure that OBJ_obj2txt() always returns a C string again.
                    316:     <li>Made EVP_PKEY_set1_hkdf_key() fail on a NULL key.
                    317:     <li>On socket errors in the poll loop, netcat could issue system calls
                    318:       on invalidated file descriptors.
                    319:     <li>Allow IP addresses to be specified in a URI.
                    320:     <li>Fixed a copy-paste error in ASN1_TIME_compare() that could lead
                    321:       to two UTCTimes or two GeneralizedTimes incorrectly being compared
                    322:       as equal.
                    323:     </ul>
                    324:   <li>Documentation improvements
                    325:     <ul>
                    326:     <li>Improved documentation of BIO_ctrl(3), BIO_set_info_callback(3),
                    327:       BIO_get_info_callback(3), BIO_method_type(3), and BIO_method_name(3).
                    328:     <li>Marked BIO_CB_return(), BIO_cb_pre(), and BIO_cb_post() as intentionally
                    329:       undocumented.
                    330:     <li>Made it very explicit that the verify callback should not be used.
                    331:     <li>Called out that the CRL lastUpdate is standardized as thisUpdate.
                    332:     <li>Documented the RFC 3779 API and its shortcomings.
                    333:     </ul>
                    334:   <li>Testing and Proactive Security
                    335:     <ul>
                    336:     <li>Significantly improved test coverage of BN_mod_sqrt() and GCD.
                    337:     <li>As always, new test coverage is added as bugs are fixed and subsystems
                    338:       are cleaned up.
1.1       deraadt   339:     </ul>
                    340:   </ul>
                    341:
                    342: <li>OpenSSH XXX.YYY
                    343:   <ul>
                    344:   <li>Security
                    345:     <ul>
                    346:     <li>...
                    347:     </ul>
                    348:   <li>Potentially-incompatible changes
                    349:     <ul>
                    350:     <li>...
                    351:     </ul>
                    352:   <li>Bugfixes
                    353:     <ul>
                    354:     <li>...
                    355:     </ul>
                    356:   </ul>
                    357:
                    358: <li>mandoc XXX plus some new features and many bugfixes, including:
                    359:   <ul>
                    360:   <li>...
                    361:   </ul>
                    362:
                    363: <li>Ports and packages:
                    364:   <p>Many pre-built packages for each architecture:
                    365:   <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
                    366:   <ul style="column-count: 3">
                    367:     <li>aarch64:
                    368:     <li>amd64:
                    369:     <li>arm:
                    370:     <li>i386:
                    371:     <li>mips64:
                    372:     <li>powerpc:
                    373:     <li>powerpc64:
                    374:     <li>riscv64:
                    375:     <li>sparc64:
                    376:   </ul>
                    377:
                    378:   <p>Some highlights:
1.7       tb        379:   <ul style="column-count: 3"><!-- XXX all need to be checked/updated 2023-03-04 -->
1.6       matthieu  380:     <li>Asterisk 16.30.1, 18.19.0 and 20.4.0
1.5       matthieu  381:     <li>Audacity 3.3.3
                    382:     <li>CMake 3.27.5
1.10    ! matthieu  383:     <li>Chromium 117.0.5838.149
1.5       matthieu  384:     <li>Emacs 29.1
                    385:     <li>FFmpeg 4.4.4
1.1       deraadt   386:     <li>GCC 8.4.0 and 11.2.0
1.5       matthieu  387:     <li>GHC 9.2.7
                    388:     <li>GNOME 44
                    389:     <li>Go 1.21.1
                    390:     <li>JDK 8u382, 11.0.20 and 17.0.8
                    391:     <li>KDE Applications 23.08.0
1.1       deraadt   392:     <li>KDE Frameworks 5.98.0
1.5       matthieu  393:     <li>Krita 5.1.5
                    394:     <li>LLVM/Clang 13.0.0 and 16.0.6
                    395:     <li>LibreOffice 7.6.2.1
                    396:     <li>Lua 5.1.5, 5.2.4, 5.3.6 and 5.4.6
                    397:     <li>MariaDB 10.9.6
                    398:     <li>Mono 6.12.0.199
                    399:     <li>Mozilla Firefox 118.0.1 and ESR 115.3.1
                    400:     <li>Mozilla Thunderbird 115.3.1
                    401:     <li>Mutt 2.2.12 and NeoMutt 20230517
                    402:     <li>Node.js 18.18.0
1.1       deraadt   403:     <li>OCaml 4.12.1
1.5       matthieu  404:     <li>OpenLDAP 2.6.6
                    405:     <li>PHP 7.4.33, 8.0.30, 8.1.24 and 8.2.11
                    406:     <li>Postfix 3.7.3
                    407:     <li>PostgreSQL 15.4
                    408:     <li>Python 2.7.18, 3.9.18, 3.10.13 and 3.11.5
                    409:     <li>Qt 5.15.10 and 6.5.2
                    410:     <li>R 4.2.3
                    411:     <li>Ruby 3.0.6, 3.1.4 and 3.2.2
                    412:     <li>Rust 1.72.1
1.9       lteo      413:     <li>SQLite 3.42.0
1.5       matthieu  414:     <li>Shotcut 23.07.29
                    415:     <li>Sudo 1.9.14.2
                    416:     <li>Suricata 6.0.12
                    417:     <li>Tcl/Tk 8.5.19 and 8.6.13
                    418:     <li>TeX Live 2022
                    419:     <li>Vim 9.0.1897 and Neovim 0.9.1
                    420:     <li>Xfce 4.18
1.1       deraadt   421:   </ul>
                    422:   <p>
                    423:
                    424: <li>As usual, steady improvements in manual pages and other documentation.
                    425:
                    426: <li>The system includes the following major components from outside suppliers:
1.7       tb        427:   <ul><!-- XXX all need to be checked/updated 2023-03-04 -->
1.5       matthieu  428:     <li>Xenocara (based on X.Org 7.7 with xserver 21.1.8 + patches,
                    429:         freetype 2.13.0, fontconfig 2.14.2, Mesa 22.3.7, xterm 378,
1.1       deraadt   430:         xkeyboard-config 2.20, fonttosfnt 1.2.2 and more)
                    431:     <li>LLVM/Clang 13.0.0 (+ patches)
                    432:     <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.5       matthieu  433:     <li>Perl 5.36.1 (+ patches)
                    434:     <li>NSD 4.7.0
                    435:     <li>Unbound 1.18.0
1.1       deraadt   436:     <li>Ncurses 5.7
                    437:     <li>Binutils 2.17 (+ patches)
                    438:     <li>Gdb 6.3 (+ patches)
1.5       matthieu  439:     <li>Awk September 12, 2023
                    440:     <li>Expat 2.5.0
1.1       deraadt   441:   </ul>
                    442:
                    443: </ul>
                    444: </section>
                    445:
                    446: <hr>
                    447:
                    448: <section id=install>
                    449: <h3>How to install</h3>
                    450: <p>
                    451: Please refer to the following files on the mirror site for
                    452: extensive details on how to install OpenBSD 7.4 on your machine:
                    453:
                    454: <ul>
                    455: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/alpha/INSTALL.alpha">
1.2       jsg       456:        .../OpenBSD/7.4/alpha/INSTALL.alpha</a>
1.1       deraadt   457: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/amd64/INSTALL.amd64">
1.2       jsg       458:        .../OpenBSD/7.4/amd64/INSTALL.amd64</a>
1.1       deraadt   459: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/arm64/INSTALL.arm64">
1.2       jsg       460:        .../OpenBSD/7.4/arm64/INSTALL.arm64</a>
1.1       deraadt   461: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/armv7/INSTALL.armv7">
1.2       jsg       462:        .../OpenBSD/7.4/armv7/INSTALL.armv7</a>
1.1       deraadt   463: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/hppa/INSTALL.hppa">
1.2       jsg       464:        .../OpenBSD/7.4/hppa/INSTALL.hppa</a>
1.1       deraadt   465: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/i386/INSTALL.i386">
1.2       jsg       466:        .../OpenBSD/7.4/i386/INSTALL.i386</a>
1.1       deraadt   467: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/landisk/INSTALL.landisk">
1.2       jsg       468:        .../OpenBSD/7.4/landisk/INSTALL.landisk</a>
1.1       deraadt   469: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/loongson/INSTALL.loongson">
1.2       jsg       470:        .../OpenBSD/7.4/loongson/INSTALL.loongson</a>
1.1       deraadt   471: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/luna88k/INSTALL.luna88k">
1.2       jsg       472:        .../OpenBSD/7.4/luna88k/INSTALL.luna88k</a>
1.1       deraadt   473: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/macppc/INSTALL.macppc">
1.2       jsg       474:        .../OpenBSD/7.4/macppc/INSTALL.macppc</a>
1.1       deraadt   475: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/octeon/INSTALL.octeon">
1.2       jsg       476:        .../OpenBSD/7.4/octeon/INSTALL.octeon</a>
1.1       deraadt   477: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/powerpc64/INSTALL.powerpc64">
1.2       jsg       478:        .../OpenBSD/7.4/powerpc64/INSTALL.powerpc64</a>
1.1       deraadt   479: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/riscv64/INSTALL.riscv64">
1.2       jsg       480:        .../OpenBSD/7.4/riscv64/INSTALL.riscv64</a>
1.1       deraadt   481: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/sparc64/INSTALL.sparc64">
1.2       jsg       482:        .../OpenBSD/7.4/sparc64/INSTALL.sparc64</a>
1.1       deraadt   483: </ul>
                    484: </section>
                    485:
                    486: <hr>
                    487:
                    488: <section id=quickinstall>
                    489: <p>
                    490: Quick installer information for people familiar with OpenBSD, and the use of
                    491: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
                    492: If you are at all confused when installing OpenBSD, read the relevant
                    493: INSTALL.* file as listed above!
                    494:
                    495: <h3>OpenBSD/alpha:</h3>
                    496:
                    497: <p>
                    498: If your machine can boot from CD, you can write <i>install74.iso</i> or
                    499: <i>cd74.iso</i> to a CD and boot from it.
                    500: Refer to INSTALL.alpha for more details.
                    501:
                    502: <h3>OpenBSD/amd64:</h3>
                    503:
                    504: <p>
                    505: If your machine can boot from CD, you can write <i>install74.iso</i> or
                    506: <i>cd74.iso</i> to a CD and boot from it.
                    507: You may need to adjust your BIOS options first.
                    508:
                    509: <p>
                    510: If your machine can boot from USB, you can write <i>install74.img</i> or
                    511: <i>miniroot74.img</i> to a USB stick and boot from it.
                    512:
                    513: <p>
                    514: If you can't boot from a CD, floppy disk, or USB,
                    515: you can install across the network using PXE as described in the included
                    516: INSTALL.amd64 document.
                    517:
                    518: <p>
                    519: If you are planning to dual boot OpenBSD with another OS, you will need to
                    520: read INSTALL.amd64.
                    521:
                    522: <h3>OpenBSD/arm64:</h3>
                    523:
                    524: <p>
                    525: Write <i>install74.img</i> or <i>miniroot74.img</i> to a disk and boot from it
                    526: after connecting to the serial console.  Refer to INSTALL.arm64 for more
                    527: details.
                    528:
                    529: <h3>OpenBSD/armv7:</h3>
                    530:
                    531: <p>
                    532: Write a system specific miniroot to an SD card and boot from it after connecting
                    533: to the serial console.  Refer to INSTALL.armv7 for more details.
                    534:
                    535: <h3>OpenBSD/hppa:</h3>
                    536:
                    537: <p>
                    538: Boot over the network by following the instructions in INSTALL.hppa or the
                    539: <a href="hppa.html#install">hppa platform page</a>.
                    540:
                    541: <h3>OpenBSD/i386:</h3>
                    542:
                    543: <p>
                    544: If your machine can boot from CD, you can write <i>install74.iso</i> or
                    545: <i>cd74.iso</i> to a CD and boot from it.
                    546: You may need to adjust your BIOS options first.
                    547:
                    548: <p>
                    549: If your machine can boot from USB, you can write <i>install74.img</i> or
                    550: <i>miniroot74.img</i> to a USB stick and boot from it.
                    551:
                    552: <p>
                    553: If you can't boot from a CD, floppy disk, or USB,
                    554: you can install across the network using PXE as described in
                    555: the included INSTALL.i386 document.
                    556:
                    557: <p>
                    558: If you are planning on dual booting OpenBSD with another OS, you will need to
                    559: read INSTALL.i386.
                    560:
                    561: <h3>OpenBSD/landisk:</h3>
                    562:
                    563: <p>
                    564: Write <i>miniroot74.img</i> to the start of the CF
                    565: or disk, and boot normally.
                    566:
                    567: <h3>OpenBSD/loongson:</h3>
                    568:
                    569: <p>
                    570: Write <i>miniroot74.img</i> to a USB stick and boot bsd.rd from it
                    571: or boot bsd.rd via tftp.
                    572: Refer to the instructions in INSTALL.loongson for more details.
                    573:
                    574: <h3>OpenBSD/luna88k:</h3>
                    575:
                    576: <p>
                    577: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
                    578: from the PROM, and then bsd.rd from the bootloader.
                    579: Refer to the instructions in INSTALL.luna88k for more details.
                    580:
                    581: <h3>OpenBSD/macppc:</h3>
                    582:
                    583: <p>
                    584: Burn the image from a mirror site to a CDROM, and power on your machine
                    585: while holding down the <i>C</i> key until the display turns on and
                    586: shows <i>OpenBSD/macppc boot</i>.
                    587:
                    588: <p>
                    589: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
1.2       jsg       590: /7.4/macppc/bsd.rd</i>
1.1       deraadt   591:
                    592: <h3>OpenBSD/octeon:</h3>
                    593:
                    594: <p>
                    595: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
                    596: Refer to the instructions in INSTALL.octeon for more details.
                    597:
                    598: <h3>OpenBSD/powerpc64:</h3>
                    599:
                    600: <p>
                    601: To install, write <i>install74.img</i> or <i>miniroot74.img</i> to a
                    602: USB stick, plug it into the machine and choose the <i>OpenBSD
                    603: install</i> menu item in Petitboot.
                    604: Refer to the instructions in INSTALL.powerpc64 for more details.
                    605:
                    606: <h3>OpenBSD/riscv64:</h3>
                    607:
                    608: <p>
                    609: To install, write <i>install74.img</i> or <i>miniroot74.img</i> to a
                    610: USB stick, and boot with that drive plugged in.
                    611: Make sure you also have the microSD card plugged in that shipped with the
                    612: HiFive Unmatched board.
                    613: Refer to the instructions in INSTALL.riscv64 for more details.
                    614:
                    615: <h3>OpenBSD/sparc64:</h3>
                    616:
                    617: <p>
                    618: Burn the image from a mirror site to a CDROM, boot from it, and type
                    619: <i>boot cdrom</i>.
                    620:
                    621: <p>
                    622: If this doesn't work, or if you don't have a CDROM drive, you can write
                    623: <i>floppy74.img</i> or <i>floppyB74.img</i>
                    624: (depending on your machine) to a floppy and boot it with <i>boot
                    625: floppy</i>. Refer to INSTALL.sparc64 for details.
                    626:
                    627: <p>
                    628: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
                    629: will most likely fail.
                    630:
                    631: <p>
                    632: You can also write <i>miniroot74.img</i> to the swap partition on
                    633: the disk and boot with <i>boot disk:b</i>.
                    634:
                    635: <p>
                    636: If nothing works, you can boot over the network as described in INSTALL.sparc64.
                    637: </section>
                    638:
                    639: <hr>
                    640:
                    641: <section id=upgrade>
                    642: <h3>How to upgrade</h3>
                    643: <p>
1.3       jsg       644: If you already have an OpenBSD 7.3 system, and do not want to reinstall,
1.1       deraadt   645: upgrade instructions and advice can be found in the
                    646: <a href="faq/upgrade74.html">Upgrade Guide</a>.
                    647: </section>
                    648:
                    649: <hr>
                    650:
                    651: <section id=sourcecode>
                    652: <h3>Notes about the source code</h3>
                    653: <p>
                    654: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
                    655: This file contains everything you need except for the kernel sources,
                    656: which are in a separate archive.
                    657: To extract:
                    658: <blockquote><pre>
                    659: # <kbd>mkdir -p /usr/src</kbd>
                    660: # <kbd>cd /usr/src</kbd>
                    661: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
                    662: </pre></blockquote>
                    663: <p>
                    664: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
                    665: This file contains all the kernel sources you need to rebuild kernels.
                    666: To extract:
                    667: <blockquote><pre>
                    668: # <kbd>mkdir -p /usr/src/sys</kbd>
                    669: # <kbd>cd /usr/src</kbd>
                    670: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
                    671: </pre></blockquote>
                    672: <p>
                    673: Both of these trees are a regular CVS checkout.  Using these trees it
                    674: is possible to get a head-start on using the anoncvs servers as
                    675: described <a href="anoncvs.html">here</a>.
                    676: Using these files
                    677: results in a much faster initial CVS update than you could expect from
                    678: a fresh checkout of the full OpenBSD source tree.
                    679: </section>
                    680:
                    681: <hr>
                    682:
                    683: <section id=ports>
                    684: <h3>Ports Tree</h3>
                    685: <p>
                    686: A ports tree archive is also provided.  To extract:
                    687: <blockquote><pre>
                    688: # <kbd>cd /usr</kbd>
                    689: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
                    690: </pre></blockquote>
                    691: <p>
                    692: Go read the <a href="faq/ports/index.html">ports</a> page
                    693: if you know nothing about ports
                    694: at this point.  This text is not a manual of how to use ports.
                    695: Rather, it is a set of notes meant to kickstart the user on the
                    696: OpenBSD ports system.
                    697: <p>
                    698: The <i>ports/</i> directory represents a CVS checkout of our ports.
                    699: As with our complete source tree, our ports tree is available via
                    700: <a href="anoncvs.html">AnonCVS</a>.
                    701: So, in order to keep up to date with the -stable branch, you must make
                    702: the <i>ports/</i> tree available on a read-write medium and update the tree
                    703: with a command like:
                    704: <blockquote><pre>
                    705: # <kbd>cd /usr/ports</kbd>
1.2       jsg       706: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_7_4</kbd>
1.1       deraadt   707: </pre></blockquote>
                    708: <p>
                    709: [Of course, you must replace the server name here with a nearby anoncvs
                    710: server.]
                    711: <p>
                    712: Note that most ports are available as packages on our mirrors. Updated
                    713: ports for the 7.4 release will be made available if problems arise.
                    714: <p>
                    715: If you're interested in seeing a port added, would like to help out, or just
                    716: would like to know more, the mailing list
                    717: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
                    718: </section>
                    719: </body>
                    720: </html>