Annotation of www/74.html, Revision 1.7
1.1 deraadt 1: <!doctype html>
2: <html lang=en id=release>
3: <head>
4: <meta charset=utf-8>
5:
6: <title>OpenBSD 7.4</title>
7: <meta name="description" content="OpenBSD 7.4">
8: <meta name="viewport" content="width=device-width, initial-scale=1">
9: <link rel="stylesheet" type="text/css" href="openbsd.css">
10: <link rel="canonical" href="https://www.openbsd.org/74.html">
11: </head><body>
12: <h2 id=OpenBSD>
13: <a href="index.html">
14: <i>Open</i><b>BSD</b></a>
15: 7.4
16: </h2>
17:
18: <table>
19: <tr>
20: <td>
21: <a href="images/XXX.png">
22: <img width="227" height="303" src="images/XXX-s.gif" alt="XXX"></a>
23: <td>
24: Released Oct XXX, 2023. (55th OpenBSD release)<br>
25: Copyright 1997-2023, Theo de Raadt.<br>
26: <br>
1.4 job 27: Artwork by Jessica Scott.
1.1 deraadt 28: <br>
29: <ul>
30: <li>See the information on <a href="ftp.html">the FTP page</a> for
31: a list of mirror machines.
32: <li>Go to the <code class=reldir>pub/OpenBSD/7.4/</code> directory on
33: one of the mirror sites.
34: <li>Have a look at <a href="errata74.html">the 7.4 errata page</a> for a list
35: of bugs and workarounds.
36: <li>See a <a href="plus74.html">detailed log of changes</a> between the
37: 7.3 and 7.4 releases.
38: <p>
39: <li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
40: pubkeys for this release:<p>
41:
42: <table class=signify>
43: <tr><td>
44: openbsd-74-base.pub:
45: <td>
46: <a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/openbsd-74-base.pub">
47: RWRoyQmAD08ajTqgzK3UcWaVlwaJMckH9/CshU8Md5pN1GoIrcBdTF+c</a>
48: <tr><td>
49: openbsd-74-fw.pub:
50: <td>
51: RWTRA9KXRuZKunpXYK0ed5OxbE0K7rYWpDnTu+M8wZdqzRroFqed0U6I
52: <tr><td>
53: openbsd-74-pkg.pub:
54: <td>
55: RWR/h7gubZ9M/O46RNy3PzLTPevOCK24LGCPca41IHMwSH4YuVA+jnWO
56: <tr><td>
57: openbsd-74-syspatch.pub:
58: <td>
59: RWQqty2voy8V8afR9/v2RzuNr7r4y9cKwljABN7Tytd7JcPdBjnXg0Ue
60: </table>
61: </ul>
62: <p>
63: All applicable copyrights and credits are in the src.tar.gz,
64: sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
65: files fetched via <code>ports.tar.gz</code>.
66: </table>
67:
68: <hr>
69:
70: <section id=new>
71: <h3>What's New</h3>
72: <p>
73: This is a partial list of new features and systems included in OpenBSD 7.4.
74: For a comprehensive list, see the <a href="plus74.html">changelog</a> leading
75: to 7.4.
76:
77: <ul>
78:
79: <li>New/extended platforms:
80: <ul>
81: <li>...
82: </ul>
83:
84: <li>Various kernel improvements:
85: <ul>
86: <li>...
87: </ul>
88:
89: <li>SMP Improvements
90: <ul>
91: <li>...
92: </ul>
93:
94: <li>Direct Rendering Manager and graphics drivers
95: <ul>
96: <li>...
97: </ul>
98:
99: <li>VMM/VMD improvements
100: <ul>
101: <li>...
102: </ul>
103:
104: <li>Various new userland features:
105: <ul>
106: <li>...
107: </ul>
108:
109: <li>Various bugfixes and tweaks in userland:
110: <ul>
111: <li>...
112: </ul>
113:
114: <li>Improved hardware support and driver bugfixes, including:
115: <ul>
116: <li>...
117: </ul>
118:
119: <li>New or improved network hardware support:
120: <ul>
121: <li>...
122: </ul>
123:
124: <li>Added or improved wireless network drivers:
125: <ul>
126: <li>...
127: </ul>
128:
129: <li>IEEE 802.11 wireless stack improvements and bugfixes:
130: <ul>
131: <li>...
132: </ul>
133:
134: <li>Installer, upgrade and bootloader improvements:
135: <ul>
136: <li>...
137: </ul>
138:
139: <li>Security improvements:
140: <ul>
141: <li>...
142: </ul>
143:
144: <li>Changes in the network stack:
145: <ul>
146: <li>...
147: </ul>
148:
149: <li>Routing daemons and other userland network improvements:
150: <ul>
151: <li>IPsec support was improved:
152: <ul>
153: <li>...
154: </ul>
155: <li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>,
156: <ul>
157: <li>...
158: </ul>
159: <li><a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> saw some changes:
160: <ul>
161: <li>...
162: </ul>
163:
164: <li>In <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>,
165: <ul>
166: <li>...
167: </ul>
168:
169: <li>...
170: </ul>
171:
172: <li><a href="https://man.openbsd.org/tmux.1">tmux(1)</a> improvements and bug fixes:
173: <ul>
174: <li>...
175: </ul>
176:
1.7 ! tb 177: <li>LibreSSL version 3.8.2
1.1 deraadt 178: <ul>
1.7 ! tb 179: <li>Security fixes
! 180: <ul>
! 181: <li>Disabled TLSv1.0 and TLSv1.1 in libssl so that they may no longer
! 182: be selected for use.
! 183: <li>BN_is_prime{,_fasttest}_ex() refuse to check numbers larger than
! 184: 32 kbits for primality. This mitigates various DoS vectors.
! 185: <li>Restricted the RFC 3779 code to IPv4 and IPv6. It was not written
! 186: to be able to deal with anything else.
! 187: </ul>
! 188: <li>Portable changes
! 189: <ul>
! 190: <li>Extended the endian.h compat header with hto* and *toh macros.
! 191: <li>Adapted more tests to the portable framework.
! 192: <li>Internal tools are now statically linked.
! 193: <li>Applications bundled as part of the LibreSSL package internally,
! 194: nc(1) and openssl(1), now are linked statically if static libraries
! 195: are built.
! 196: <li>Internal compatibility function symbols are no longer exported from
! 197: libcrypto. Instead, the libcompat library is linked to libcrypto,
! 198: libssl, and libtls separately. This increases size a little, but
! 199: ensures that the libraries are not exporting symbols to programs
! 200: unintentionally.
! 201: <li>Selective removal of CET implementation on platforms where it is
! 202: not supported (macOS).
! 203: <li>Integrated four more tests.
! 204: <li>Added Windows ARM64 architecture to tested platforms.
! 205: <li>Removed Solaris 10 support, fixed Solaris 11.
! 206: <li>libtls no longer links statically to libcrypto / libssl unless
! 207: <code>--enable-libtls-only</code> is specified at configure time.
! 208: <li>Improved Windows compatibility library, namely handling of files vs
! 209: sockets, correcting an exception when operating on a closed socket.
! 210: <li>CMake builds no longer hardcode <code>-O2</code> into the compiler flags,
! 211: instead using flags from the CMake build type instead.
! 212: <li>Set the CMake default build type to <code>Release</code>. This can be overridden
! 213: during configuration.
! 214: <li>Fixed broken ASM support with MinGW builds.
! 215: </ul>
1.1 deraadt 216: <li>New features
217: <ul>
1.7 ! tb 218: <li>Added support for truncated SHA-2 and for SHA-3.
! 219: <li>The BPSW primality test performs additional Miller-Rabin rounds
! 220: with random bases to reduce the likelihood of composites passing.
! 221: <li>Allow testing of ciphers and digests using badly aligned buffers
! 222: in openssl speed using -unalign.
! 223: <li>Ed25519 certificates are now supported in openssl(1) ca and req.
! 224: Prepared Ed25519 support in libssl.
! 225: <li>Add branch target information (BTI) support to amd64 and arm64
! 226: assembly.
1.1 deraadt 227: </ul>
228: <li>Compatibility changes
229: <ul>
1.7 ! tb 230: <li>Added a workaround for a poorly thought-out change in OpenSSL 3 that
! 231: broke privilege separation support in libtls.
! 232: <li>Moved libtls from ECDSA_METHOD to EC_KEY_METHOD.
! 233: <li>Removed GF2m support: BIGNUM no longer supports binary extension
! 234: field arithmetic and all binary elliptic builtin curves were removed.
! 235: <li>Removed dangerous, "fast" NIST prime and elliptic curve implementations.
! 236: In particular, EC_GFp_nist_method() is no longer available.
! 237: <li>Removed most public symbols that were deprecated in OpenSSL 0.9.8.
! 238: <li>Removed the public X9.31 API (RSA_X931_PADDING is still available).
! 239: <li>Removed Cipher Text Stealing mode.
! 240: openssl(1) nseq command.
! 241: <li>Removed ENGINE support, including ECDH_METHOD and ECDSA_METHOD.
! 242: <li>Removed COMP, DSO, dynamic loading of conf modules and support for
! 243: custom ex_data and error stacks.
! 244: <li>Removed proxy certificate (RFC 3820) support.
! 245: <li>Removed SXNET and NETSCAPE_CERT_SEQUENCE support including the
! 246: <li>ENGINE support was removed and OPENSSL_NO_ENGINE is set. In spite
! 247: of this, some stub functions are provided to avoid patching some
! 248: applications that do not honor OPENSSL_NO_ENGINE.
! 249: <li>The POLICY_TREE and its related structures and API were removed.
! 250: <li>In X509_VERIFY_PARAM_inherit() copy hostflags independently of the
! 251: host list.
! 252: <li>Made CRYPTO_get_ex_new_index() not return 0 to allow applications
! 253: to use *_{get,set}_app_data() and *_{get,set}_ex_data() alongside
! 254: each other.
! 255: <li>X509_NAME_get_text_by_{NID,OBJ}() now only succeed if they contain
! 256: valid UTF-8 without embedded NUL.
! 257: <li>The explicitText user notice uses UTF8String instead of VisibleString
! 258: to reduce the risk of emitting certificates with invalid DER-encoding.
! 259: <li>Initial fixes for RSA-PSS support to make the TLSv1.3 stack more
! 260: compliant with RFC 8446.
! 261: <li>Fixed EVP_CIPHER_CTX_iv_length() to return what was set with
! 262: EVP_CTRL_AEAD_SET_IVLEN or one of its aliases.
1.1 deraadt 263: </ul>
1.7 ! tb 264: <li>Internal improvements
1.1 deraadt 265: <ul>
1.7 ! tb 266: <li>Improved sieve of Eratosthenes script used for generating a table
! 267: of small primes.
! 268: <li>Removed incomplete and dangerous BN_RECURSION code.
! 269: <li>Imported RFC 5280 policy checking code from BoringSSL and used it
! 270: to replace the old exponential time code.
! 271: <li>Converted more of libcrypto to use CBB/CBS.
! 272: <li>Started cleaning up and rewriting SHA internals.
! 273: <li>Reduced the dependency of hash implementations on many layers of
! 274: macros. This results in significant speedups since modern compilers
! 275: are now less confused.
! 276: <li>Improved BIGNUM internals and performance.
! 277: <li>Significantly simplified the BN_BLINDING internals used in RSA.
! 278: <li>Made BN_num_bits() independent of bn->top.
! 279: <li>Rewrote and simplified bn_sqr().
! 280: <li>Significantly improved Montgomery multiplication performance.
! 281: <li>Rewrote and improved BN_exp() and BN_copy().
! 282: <li>Changed ASN1_item_sign_ctx() and ASN1_item_verify() to work with
! 283: Ed25519 and fixed a few bugs in there.
! 284: <li>Lots of cleanup for DH, DSA, EC, RSA internals. Plugged numerous
! 285: memory leaks, fixed logic errors and inconsistencies.
! 286: <li>Cleaned up and simplified various ECDH and ECDSA internals.
! 287: <li>Removed EC_GROUP precomp machinery.
! 288: <li>Fixed various issues with EVP_PKEY_CTX_{new,dup}().
! 289: <li>Rewrote OBJ_find_sigid_algs() and OBJ_find_sigid_by_algs().
! 290: <li>Improved X.509 certificate version checks.
! 291: <li>Ensure no X.509v3 extensions appear more than once in certificates.
! 292: <li>Replaced ASN1_bn_print with a cleaner internal implementation.
! 293: <li>Fix OPENSSL_cpuid_setup() invocations on arm/aarch64.
! 294: <li>Improved checks for commonName in libtls.
! 295: <li>Fixed error check for X509_get_ext_d2i() failure in libtls.
! 296: <li>Removed code guarded by #ifdef ZLIB.
! 297: <li>Plug a potential memory leak in ASN1_TIME_normalize().
! 298: <li>Fixed a use of uninitialized in i2r_IPAddrBlocks().
! 299: <li>Rewrote CMS_SignerInfo_{sign,verify}().
1.1 deraadt 300: </ul>
1.7 ! tb 301: <li>Bug fixes
1.1 deraadt 302: <ul>
1.7 ! tb 303: <li>Correctly handle negative input to various BIGNUM functions.
! 304: <li>Ensure ERR_load_ERR_strings() does not set errno unexpectedly.
! 305: <li>Fix error checking of i2d_ECDSA_SIG() in ossl_ecdsa_sign().
! 306: <li>Fixed aliasing issue in BN_mod_inverse().
! 307: <li>Fixed detection of extended operations (XOP) on AMD hardware.
! 308: <li>Ensure Montgomery exponentiation is used for the initial RSA blinding.
! 309: <li>Policy is always checked in X509 validation. Critical policy extensions
! 310: are no longer silently ignored.
! 311: <li>Fixed error handling in tls_check_common_name().
! 312: <li>Add missing pointer invalidation in SSL_free().
! 313: <li>Fixed X509err() and X509V3err() and their internal versions.
! 314: <li>Ensure that OBJ_obj2txt() always returns a C string again.
! 315: <li>Fixed aliasing issue in BN_mod_inverse().
! 316: <li>Made EVP_PKEY_set1_hkdf_key() fail on a NULL key.
! 317: <li>On socket errors in the poll loop, netcat could issue system calls
! 318: on invalidated file descriptors.
! 319: <li>Allow IP addresses to be specified in a URI.
! 320: <li>Fixed a copy-paste error in ASN1_TIME_compare() that could lead
! 321: to two UTCTimes or two GeneralizedTimes incorrectly being compared
! 322: as equal.
! 323: </ul>
! 324: <li>Documentation improvements
! 325: <ul>
! 326: <li>Improved documentation of BIO_ctrl(3), BIO_set_info_callback(3),
! 327: BIO_get_info_callback(3), BIO_method_type(3), and BIO_method_name(3).
! 328: <li>Marked BIO_CB_return(), BIO_cb_pre(), and BIO_cb_post() as intentionally
! 329: undocumented.
! 330: <li>Made it very explicit that the verify callback should not be used.
! 331: <li>Called out that the CRL lastUpdate is standardized as thisUpdate.
! 332: <li>Documented the RFC 3779 API and its shortcomings.
! 333: </ul>
! 334: <li>Testing and Proactive Security
! 335: <ul>
! 336: <li>Significantly improved test coverage of BN_mod_sqrt() and GCD.
! 337: <li>As always, new test coverage is added as bugs are fixed and subsystems
! 338: are cleaned up.
1.1 deraadt 339: </ul>
340: </ul>
341:
342: <li>OpenSSH XXX.YYY
343: <ul>
344: <li>Security
345: <ul>
346: <li>...
347: </ul>
348: <li>Potentially-incompatible changes
349: <ul>
350: <li>...
351: </ul>
352: <li>Bugfixes
353: <ul>
354: <li>...
355: </ul>
356: </ul>
357:
358: <li>mandoc XXX plus some new features and many bugfixes, including:
359: <ul>
360: <li>...
361: </ul>
362:
363: <li>Ports and packages:
364: <p>Many pre-built packages for each architecture:
365: <!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
366: <ul style="column-count: 3">
367: <li>aarch64:
368: <li>amd64:
369: <li>arm:
370: <li>i386:
371: <li>mips64:
372: <li>powerpc:
373: <li>powerpc64:
374: <li>riscv64:
375: <li>sparc64:
376: </ul>
377:
378: <p>Some highlights:
1.7 ! tb 379: <ul style="column-count: 3"><!-- XXX all need to be checked/updated 2023-03-04 -->
1.6 matthieu 380: <li>Asterisk 16.30.1, 18.19.0 and 20.4.0
1.5 matthieu 381: <li>Audacity 3.3.3
382: <li>CMake 3.27.5
383: <li>Chromium 117.0.5938.132
384: <li>Emacs 29.1
385: <li>FFmpeg 4.4.4
1.1 deraadt 386: <li>GCC 8.4.0 and 11.2.0
1.5 matthieu 387: <li>GHC 9.2.7
388: <li>GNOME 44
389: <li>Go 1.21.1
390: <li>JDK 8u382, 11.0.20 and 17.0.8
391: <li>KDE Applications 23.08.0
1.1 deraadt 392: <li>KDE Frameworks 5.98.0
1.5 matthieu 393: <li>Krita 5.1.5
394: <li>LLVM/Clang 13.0.0 and 16.0.6
395: <li>LibreOffice 7.6.2.1
396: <li>Lua 5.1.5, 5.2.4, 5.3.6 and 5.4.6
397: <li>MariaDB 10.9.6
398: <li>Mono 6.12.0.199
399: <li>Mozilla Firefox 118.0.1 and ESR 115.3.1
400: <li>Mozilla Thunderbird 115.3.1
401: <li>Mutt 2.2.12 and NeoMutt 20230517
402: <li>Node.js 18.18.0
1.1 deraadt 403: <li>OCaml 4.12.1
1.5 matthieu 404: <li>OpenLDAP 2.6.6
405: <li>PHP 7.4.33, 8.0.30, 8.1.24 and 8.2.11
406: <li>Postfix 3.7.3
407: <li>PostgreSQL 15.4
408: <li>Python 2.7.18, 3.9.18, 3.10.13 and 3.11.5
409: <li>Qt 5.15.10 and 6.5.2
410: <li>R 4.2.3
411: <li>Ruby 3.0.6, 3.1.4 and 3.2.2
412: <li>Rust 1.72.1
413: <li>SQLite 3.42.9
414: <li>Shotcut 23.07.29
415: <li>Sudo 1.9.14.2
416: <li>Suricata 6.0.12
417: <li>Tcl/Tk 8.5.19 and 8.6.13
418: <li>TeX Live 2022
419: <li>Vim 9.0.1897 and Neovim 0.9.1
420: <li>Xfce 4.18
1.1 deraadt 421: </ul>
422: <p>
423:
424: <li>As usual, steady improvements in manual pages and other documentation.
425:
426: <li>The system includes the following major components from outside suppliers:
1.7 ! tb 427: <ul><!-- XXX all need to be checked/updated 2023-03-04 -->
1.5 matthieu 428: <li>Xenocara (based on X.Org 7.7 with xserver 21.1.8 + patches,
429: freetype 2.13.0, fontconfig 2.14.2, Mesa 22.3.7, xterm 378,
1.1 deraadt 430: xkeyboard-config 2.20, fonttosfnt 1.2.2 and more)
431: <li>LLVM/Clang 13.0.0 (+ patches)
432: <li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
1.5 matthieu 433: <li>Perl 5.36.1 (+ patches)
434: <li>NSD 4.7.0
435: <li>Unbound 1.18.0
1.1 deraadt 436: <li>Ncurses 5.7
437: <li>Binutils 2.17 (+ patches)
438: <li>Gdb 6.3 (+ patches)
1.5 matthieu 439: <li>Awk September 12, 2023
440: <li>Expat 2.5.0
1.1 deraadt 441: </ul>
442:
443: </ul>
444: </section>
445:
446: <hr>
447:
448: <section id=install>
449: <h3>How to install</h3>
450: <p>
451: Please refer to the following files on the mirror site for
452: extensive details on how to install OpenBSD 7.4 on your machine:
453:
454: <ul>
455: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/alpha/INSTALL.alpha">
1.2 jsg 456: .../OpenBSD/7.4/alpha/INSTALL.alpha</a>
1.1 deraadt 457: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/amd64/INSTALL.amd64">
1.2 jsg 458: .../OpenBSD/7.4/amd64/INSTALL.amd64</a>
1.1 deraadt 459: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/arm64/INSTALL.arm64">
1.2 jsg 460: .../OpenBSD/7.4/arm64/INSTALL.arm64</a>
1.1 deraadt 461: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/armv7/INSTALL.armv7">
1.2 jsg 462: .../OpenBSD/7.4/armv7/INSTALL.armv7</a>
1.1 deraadt 463: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/hppa/INSTALL.hppa">
1.2 jsg 464: .../OpenBSD/7.4/hppa/INSTALL.hppa</a>
1.1 deraadt 465: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/i386/INSTALL.i386">
1.2 jsg 466: .../OpenBSD/7.4/i386/INSTALL.i386</a>
1.1 deraadt 467: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/landisk/INSTALL.landisk">
1.2 jsg 468: .../OpenBSD/7.4/landisk/INSTALL.landisk</a>
1.1 deraadt 469: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/loongson/INSTALL.loongson">
1.2 jsg 470: .../OpenBSD/7.4/loongson/INSTALL.loongson</a>
1.1 deraadt 471: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/luna88k/INSTALL.luna88k">
1.2 jsg 472: .../OpenBSD/7.4/luna88k/INSTALL.luna88k</a>
1.1 deraadt 473: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/macppc/INSTALL.macppc">
1.2 jsg 474: .../OpenBSD/7.4/macppc/INSTALL.macppc</a>
1.1 deraadt 475: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/octeon/INSTALL.octeon">
1.2 jsg 476: .../OpenBSD/7.4/octeon/INSTALL.octeon</a>
1.1 deraadt 477: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/powerpc64/INSTALL.powerpc64">
1.2 jsg 478: .../OpenBSD/7.4/powerpc64/INSTALL.powerpc64</a>
1.1 deraadt 479: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/riscv64/INSTALL.riscv64">
1.2 jsg 480: .../OpenBSD/7.4/riscv64/INSTALL.riscv64</a>
1.1 deraadt 481: <li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.4/sparc64/INSTALL.sparc64">
1.2 jsg 482: .../OpenBSD/7.4/sparc64/INSTALL.sparc64</a>
1.1 deraadt 483: </ul>
484: </section>
485:
486: <hr>
487:
488: <section id=quickinstall>
489: <p>
490: Quick installer information for people familiar with OpenBSD, and the use of
491: the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
492: If you are at all confused when installing OpenBSD, read the relevant
493: INSTALL.* file as listed above!
494:
495: <h3>OpenBSD/alpha:</h3>
496:
497: <p>
498: If your machine can boot from CD, you can write <i>install74.iso</i> or
499: <i>cd74.iso</i> to a CD and boot from it.
500: Refer to INSTALL.alpha for more details.
501:
502: <h3>OpenBSD/amd64:</h3>
503:
504: <p>
505: If your machine can boot from CD, you can write <i>install74.iso</i> or
506: <i>cd74.iso</i> to a CD and boot from it.
507: You may need to adjust your BIOS options first.
508:
509: <p>
510: If your machine can boot from USB, you can write <i>install74.img</i> or
511: <i>miniroot74.img</i> to a USB stick and boot from it.
512:
513: <p>
514: If you can't boot from a CD, floppy disk, or USB,
515: you can install across the network using PXE as described in the included
516: INSTALL.amd64 document.
517:
518: <p>
519: If you are planning to dual boot OpenBSD with another OS, you will need to
520: read INSTALL.amd64.
521:
522: <h3>OpenBSD/arm64:</h3>
523:
524: <p>
525: Write <i>install74.img</i> or <i>miniroot74.img</i> to a disk and boot from it
526: after connecting to the serial console. Refer to INSTALL.arm64 for more
527: details.
528:
529: <h3>OpenBSD/armv7:</h3>
530:
531: <p>
532: Write a system specific miniroot to an SD card and boot from it after connecting
533: to the serial console. Refer to INSTALL.armv7 for more details.
534:
535: <h3>OpenBSD/hppa:</h3>
536:
537: <p>
538: Boot over the network by following the instructions in INSTALL.hppa or the
539: <a href="hppa.html#install">hppa platform page</a>.
540:
541: <h3>OpenBSD/i386:</h3>
542:
543: <p>
544: If your machine can boot from CD, you can write <i>install74.iso</i> or
545: <i>cd74.iso</i> to a CD and boot from it.
546: You may need to adjust your BIOS options first.
547:
548: <p>
549: If your machine can boot from USB, you can write <i>install74.img</i> or
550: <i>miniroot74.img</i> to a USB stick and boot from it.
551:
552: <p>
553: If you can't boot from a CD, floppy disk, or USB,
554: you can install across the network using PXE as described in
555: the included INSTALL.i386 document.
556:
557: <p>
558: If you are planning on dual booting OpenBSD with another OS, you will need to
559: read INSTALL.i386.
560:
561: <h3>OpenBSD/landisk:</h3>
562:
563: <p>
564: Write <i>miniroot74.img</i> to the start of the CF
565: or disk, and boot normally.
566:
567: <h3>OpenBSD/loongson:</h3>
568:
569: <p>
570: Write <i>miniroot74.img</i> to a USB stick and boot bsd.rd from it
571: or boot bsd.rd via tftp.
572: Refer to the instructions in INSTALL.loongson for more details.
573:
574: <h3>OpenBSD/luna88k:</h3>
575:
576: <p>
577: Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
578: from the PROM, and then bsd.rd from the bootloader.
579: Refer to the instructions in INSTALL.luna88k for more details.
580:
581: <h3>OpenBSD/macppc:</h3>
582:
583: <p>
584: Burn the image from a mirror site to a CDROM, and power on your machine
585: while holding down the <i>C</i> key until the display turns on and
586: shows <i>OpenBSD/macppc boot</i>.
587:
588: <p>
589: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
1.2 jsg 590: /7.4/macppc/bsd.rd</i>
1.1 deraadt 591:
592: <h3>OpenBSD/octeon:</h3>
593:
594: <p>
595: After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
596: Refer to the instructions in INSTALL.octeon for more details.
597:
598: <h3>OpenBSD/powerpc64:</h3>
599:
600: <p>
601: To install, write <i>install74.img</i> or <i>miniroot74.img</i> to a
602: USB stick, plug it into the machine and choose the <i>OpenBSD
603: install</i> menu item in Petitboot.
604: Refer to the instructions in INSTALL.powerpc64 for more details.
605:
606: <h3>OpenBSD/riscv64:</h3>
607:
608: <p>
609: To install, write <i>install74.img</i> or <i>miniroot74.img</i> to a
610: USB stick, and boot with that drive plugged in.
611: Make sure you also have the microSD card plugged in that shipped with the
612: HiFive Unmatched board.
613: Refer to the instructions in INSTALL.riscv64 for more details.
614:
615: <h3>OpenBSD/sparc64:</h3>
616:
617: <p>
618: Burn the image from a mirror site to a CDROM, boot from it, and type
619: <i>boot cdrom</i>.
620:
621: <p>
622: If this doesn't work, or if you don't have a CDROM drive, you can write
623: <i>floppy74.img</i> or <i>floppyB74.img</i>
624: (depending on your machine) to a floppy and boot it with <i>boot
625: floppy</i>. Refer to INSTALL.sparc64 for details.
626:
627: <p>
628: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
629: will most likely fail.
630:
631: <p>
632: You can also write <i>miniroot74.img</i> to the swap partition on
633: the disk and boot with <i>boot disk:b</i>.
634:
635: <p>
636: If nothing works, you can boot over the network as described in INSTALL.sparc64.
637: </section>
638:
639: <hr>
640:
641: <section id=upgrade>
642: <h3>How to upgrade</h3>
643: <p>
1.3 jsg 644: If you already have an OpenBSD 7.3 system, and do not want to reinstall,
1.1 deraadt 645: upgrade instructions and advice can be found in the
646: <a href="faq/upgrade74.html">Upgrade Guide</a>.
647: </section>
648:
649: <hr>
650:
651: <section id=sourcecode>
652: <h3>Notes about the source code</h3>
653: <p>
654: <code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
655: This file contains everything you need except for the kernel sources,
656: which are in a separate archive.
657: To extract:
658: <blockquote><pre>
659: # <kbd>mkdir -p /usr/src</kbd>
660: # <kbd>cd /usr/src</kbd>
661: # <kbd>tar xvfz /tmp/src.tar.gz</kbd>
662: </pre></blockquote>
663: <p>
664: <code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
665: This file contains all the kernel sources you need to rebuild kernels.
666: To extract:
667: <blockquote><pre>
668: # <kbd>mkdir -p /usr/src/sys</kbd>
669: # <kbd>cd /usr/src</kbd>
670: # <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
671: </pre></blockquote>
672: <p>
673: Both of these trees are a regular CVS checkout. Using these trees it
674: is possible to get a head-start on using the anoncvs servers as
675: described <a href="anoncvs.html">here</a>.
676: Using these files
677: results in a much faster initial CVS update than you could expect from
678: a fresh checkout of the full OpenBSD source tree.
679: </section>
680:
681: <hr>
682:
683: <section id=ports>
684: <h3>Ports Tree</h3>
685: <p>
686: A ports tree archive is also provided. To extract:
687: <blockquote><pre>
688: # <kbd>cd /usr</kbd>
689: # <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
690: </pre></blockquote>
691: <p>
692: Go read the <a href="faq/ports/index.html">ports</a> page
693: if you know nothing about ports
694: at this point. This text is not a manual of how to use ports.
695: Rather, it is a set of notes meant to kickstart the user on the
696: OpenBSD ports system.
697: <p>
698: The <i>ports/</i> directory represents a CVS checkout of our ports.
699: As with our complete source tree, our ports tree is available via
700: <a href="anoncvs.html">AnonCVS</a>.
701: So, in order to keep up to date with the -stable branch, you must make
702: the <i>ports/</i> tree available on a read-write medium and update the tree
703: with a command like:
704: <blockquote><pre>
705: # <kbd>cd /usr/ports</kbd>
1.2 jsg 706: # <kbd>cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_7_4</kbd>
1.1 deraadt 707: </pre></blockquote>
708: <p>
709: [Of course, you must replace the server name here with a nearby anoncvs
710: server.]
711: <p>
712: Note that most ports are available as packages on our mirrors. Updated
713: ports for the 7.4 release will be made available if problems arise.
714: <p>
715: If you're interested in seeing a port added, would like to help out, or just
716: would like to know more, the mailing list
717: <a href="mail.html">ports@openbsd.org</a> is a good place to know.
718: </section>
719: </body>
720: </html>