[BACK]Return to index.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/index.html, Revision 1.86

1.18      fn          1: <!DOCTYPE HTML PUBLIC  "-//IETF//DTD HTML Strict//EN">
                      2: <html>
1.1       deraadt     3: <head>
                      4: <title>OpenBSD</title>
1.19      fn          5: <base href=http://www.openbsd.org/>
1.18      fn          6: <link rev=made href=mailto:www@openbsd.org>
                      7: <meta name="resource-type" content="document">
                      8: <meta name="description" content="the main OpenBSD page">
                      9: <meta name="keywords" content="openbsd,main">
                     10: <meta name="distribution" content="global">
                     11: <meta name="copyright" content="This document copyright 1996 by OpenBSD, Inc.">
1.1       deraadt    12: </head>
1.18      fn         13:
                     14: <body>
                     15:
1.31      deraadt    16: <h1>OpenBSD</h1>
                     17: <br>
1.37      deraadt    18: <img src="head.gif">
1.30      deraadt    19: <br>
                     20: <small>The picture is Copyright (C) 1996 Shawn Mueller</small>
                     21: <br>
                     22: <h1>OpenBSD</h1>
1.1       deraadt    23:
1.18      fn         24: <p>
1.1       deraadt    25: The OpenBSD project involves continuing development of a multiplatform
                     26: 4.4BSD-based Unix-like operating system.
1.18      fn         27: </p>
1.1       deraadt    28:
                     29: <p>
1.22      deraadt    30: <ul>
                     31: <li><a href=#additions>Changes Relative to other *BSD's</a>
                     32: <li><a href=#curplat>Supported platforms</a>
                     33: <li><a href=#futplat>New platforms under development</a>
1.50      deraadt    34: <li><a href=#devel>How we help developers and users</a>
1.55      deraadt    35: <li><a href=#snapshots>Binary snapshots</a>
1.48      deraadt    36: <li><a href=#ftp>FTP mirrors</a>
1.50      deraadt    37: <li><a href=#maillist>Mailing Lists</a>
                     38: <li><a href=#gnats>Bug tracking</a>
                     39: <li><a href=#sup>Sup</a>
                     40: <li><a href=#anoncvs>AnonCVS</a>
1.22      deraadt    41: <li><a href=goals.html>OpenBSD project goals</a>
                     42: </ul>
                     43: </p>
                     44:
                     45: <h3><hr><a name=additions>Changes Relative to other *BSD's.</a></h3>
                     46:
                     47: <p>
1.1       deraadt    48: OpenBSD looks a lot like NetBSD (which it is derived from, following
                     49: the 4.4BSD roots), but is now being developed seperately.  Good changes
                     50: from other free operating systems will be merged in (of course, depending
1.24      deraadt    51: on various factors like developer time for example.)  OpenBSD tracks
                     52: NetBSD changes very closely; say anywhere between 2 days to 10 days
                     53: behind the state of NetBSD-current all the time.  Hence you can truly
                     54: say that OpenBSD is NetBSD <b>PLUS MORE STUFF</b>.
1.18      fn         55: </p>
1.1       deraadt    56:
                     57: <p>
1.22      deraadt    58: Various additions have been made. This is only a small partial list of
1.25      deraadt    59: the major machine independent changes (ie. it is the most interesting
                     60: changes or what people ask about most often). Check the specific port
                     61: you are interested in for further details of that port -- many of them
                     62: have been extended too.
1.1       deraadt    63: <ul>
1.35      deraadt    64: <li>Many many NetBSD PR's fixed (which NetBSD has not yet fixed)
1.22      deraadt    65: <li>New curses library, including libform, libpanel and libmenu.
1.25      deraadt    66: <li>a termlib library which understands termcap.db, needed for new curses.
                     67: <li>The FreeBSD ports subsystem was integrated and is usable by you!
1.22      deraadt    68: <li>ipfilter for filtering dangerous packets
                     69: <li>better ELF support
1.25      deraadt    70: <li>nlist() that understands ELF, ECOFF, and a.out, allowing non-a.out ports
                     71:        to use kvm utilies
1.22      deraadt    72: <li>Verbatim integration of the GNU tools (using a wrapper Makefile)
                     73: <li>All the pieces needed for cross compilation are in the source tree.
                     74: <li>Some LKM support in the tree.
                     75: <li>ATAPI support (should work on all ISA busses)
1.25      deraadt    76: <li>new scsi, md5, pkg_* commands
1.22      deraadt    77: <li>Numerous security related fixes
1.25      deraadt    78: <li>Kerberos and other crypto in the source tree that is exportable
                     79: <li>Solid YP master, server, and client capabilities.
1.86    ! deraadt    80: <li>/dev/*random -- a device driver providing some kinds of random data
1.23      deraadt    81: <li>In-kernel update(8) with an adaptive algorithm
1.25      deraadt    82: <li>Some ddb improvements and extensions
                     83: <li>Numerous scsi fixes
1.78      deraadt    84: <li>ncheck utility for ffs
                     85: <li>/sbin/init now deals with non-existant ttys, no longer spins gettys madly.
1.28      deraadt    86: <li>new system calls: rfork(), minherit(), poll().
                     87: <li>select() that can handle any amount of file descriptors.
1.29      deraadt    88: <li>kernfs extensions
                     89: <li>ATM support (support for one company's sparc & i386 cards available)
1.33      deraadt    90: <li>Boot kernels with "-c" to edit/enable/disable device configuration tables
1.38      deraadt    91: <li>pax as tar, gnutar is toast
1.42      deraadt    92: <li>using AT&T awk, gawk is toast
1.38      deraadt    93: <li>Even more security fixes.
1.47      deraadt    94: <li>Accepts FreeBSD MD5 passwords in password maps, soon will be able to
                     95:        generate them too
1.40      deraadt    96: <li>Linux ext2fs and BSD4.4 LFS support being worked on.
1.65      deraadt    97: <li>Working ATAPI audio support for multiple architectures.
1.51      deraadt    98: <li>terminfo database support.
1.53      deraadt    99: <li>Fortran in the tree.
                    100: <li>The most secure rdist support anywhere.
1.63      deraadt   101: <li>randomized port allocation in bind(), bindresvport(), and rresvport() --
                    102:        security via unpredictability.
1.53      deraadt   103: <li>Protection from the udp spamming and ftp bounce attacks.
                    104: <li>Significantly improved ftp daemon.
                    105: <li>Numerous more security policy and implimentation improvements (OpenBSD
                    106:        defaults to installing in a very secure mode)
                    107: <li>zlib (non-GPL'd gzip-compatible library)
1.78      deraadt   108: <li>Newest version of pppd.
1.54      deraadt   109: <li>_POSIX_SAVED_IDS behaviour with permitted BSD extensions.
1.60      deraadt   110: <li>Fixed long-standing vm swap-leak.
                    111: <li>FreeBSD malloc() that uses mmap() and is able to free unused memory.
                    112: <li>Numerous FreeBSD userland fixes and improvements incorporated.
1.62      deraadt   113: <li>new rdisc Router Discovery daemon
1.63      deraadt   114: <li>generic protection against the bind() takeover problem.
                    115: <li>at -f security fix.
                    116: <li>install now supports -C, -p, and -S flags.
1.68      deraadt   117: <!-- <li>a real adduser program, which can even be used uninteractively. -->
                    118: <li>POSIX & C2 requirement; lose setuid/setgid bits if owner/group changed
                    119:        by chown(). This can be turned off with sysctl.
1.66      deraadt   120: <li>partial protection against tcp SYN attacks.
1.67      deraadt   121: <li>added /etc/fbtab support to login & init.
1.72      deraadt   122: <li>RCS version 5.7
                    123: <li>much newer join command (4.4lite2 with other fixes)
                    124: <li>scsi subsystem security fix
                    125: <li>Kerberos is much more silent if not configured
                    126: <li>arc4-based random support in kernel
                    127: <li>ncr53cXXX scsi scripts assembler
1.82      deraadt   128: <li>Numerous ftpd improvements and fixes, including multihomed support.
1.73      deraadt   129: <li>`lsof'-style features in fstat.
1.82      deraadt   130: <li>/bin/ksh (latest version of pdksh) with more fixes.
1.76      deraadt   131: <li>rudimentary support for ISA Plug-and-Play cards
1.77      deraadt   132: <li>Fixed timeout support in RPC library, and also fixed it to support more than
                    133:        FD_SETSIZE file descriptors.
1.78      deraadt   134: <li>improved locate command
                    135: <li>a good start at NETIPX support
1.82      deraadt   136: <li>vi version 1.75
1.78      deraadt   137: <li>gcc 2.7.2.1 (to get closer to native alpha support and fix a few other gcc
                    138:        bugs).
1.79      deraadt   139: <li>latest version of perl, and a lndir command.
1.82      deraadt   140: <li>Even more security fixes.
                    141: <li>cdio command for using CD audio.
                    142: <li>Kernel warns if /dev/console does not exist; nice warning for booting with an
                    143:        unpopulated /dev directory.
1.83      deraadt   144: <li>libgnumalloc is gone; our malloc() is better.
1.86    ! deraadt   145: <li>FreeBSD pipe() system call; quite a bit faster.
1.1       deraadt   146: </ul>
1.18      fn        147: </p>
1.1       deraadt   148:
1.18      fn        149: <h3><hr><a name=curplat>Platforms currently supported.</a></h3>
1.1       deraadt   150:
1.18      fn        151: <p>
1.75      deraadt   152: Note: for some of these platforms, the platform-dependent code may
1.1       deraadt   153: be identical to that found in NetBSD because there isn't a specific
1.75      deraadt   154: OpenBSD developer.  For other ports the differences are significant.
1.1       deraadt   155: If you find an empty page that means nothing of consequence that is
1.75      deraadt   156: directly port-specific has changed from NetBSD.  (Of course there are
1.1       deraadt   157: differences, but they just aren't in the /sys/arch/XXXX directory).
1.18      fn        158: </p>
1.1       deraadt   159:
1.18      fn        160: <p>
1.1       deraadt   161: <dl>
1.41      deraadt   162: <dt><a href=alpha.html>Alpha</a>       <dd> DEC Alpha-based machines.
1.80      niklas    163: <dt><a href=amiga.html>Amiga</a>       <dd> Amiga m68k-based models (MMU required).
1.41      deraadt   164: <dt><a href=arc.html>ARC</a>           <dd> ARC R4000/R4400 machines (including PICA)
                    165: <dt><a href=arm32.html>Arm32</a>       <dd> Acorn ARM6+ computers.
                    166: <dt><a href=atari.html>Atari</a>       <dd> Atari TT and Falcon models.
                    167: <dt><a href=hp300.html>HP300</a>       <dd> Hewlett-Packard HP300/HP400 machines.
1.1       deraadt   168: <dt><a href=i386.html>i386</a>         <dd> Your standard run-of-the-mill PC.
                    169: <dt><a href=mac68k.html>mac68k</a>     <dd> Most MC680x0-based Apple Macintosh models.
1.41      deraadt   170: <dt><a href=mvme68k.html>MVME68K</a>   <dd> Motorola MVME147/16x/17x 68K VME cards.
                    171: <dt><a href=pc532.html>PC532</a>       <dd> A rare NS32532-based computer.
                    172: <dt><a href=pmax.html>Pmax</a>         <dd> DEC MIPS-based machines.
1.85      deraadt   173: <dt><a href=sparc.html>Sparc</a>       <dd> Sun's Sun4, sun4c, and sun4m models.
1.41      deraadt   174: <dt><a href=sun3.html>Sun3</a>         <dd> Sun's sun3 models.
                    175: <dt><a href=vax.html>Vax</a>           <dd> DEC's VAX computers.
1.1       deraadt   176: </dl>
1.18      fn        177: </p>
                    178:
                    179: <h3><hr><a name=futplat>New platforms under development.</a></h3>
1.1       deraadt   180:
1.18      fn        181: <p>
1.1       deraadt   182: <dl>
1.10      deraadt   183: <dt><a href=mvme88k.html>mvme88k</a>   <dd> Motorola MVME18x/19x 88K VME cards
1.25      deraadt   184: <dt><a href=ppc.html>ppc</a>           <dd> IBM/Apple/Motorola PowerPC-based machines.
1.84      downsj    185: <dt><a href=romp.html>romp</a>         <dd> IBM PC RT series of machines.
1.1       deraadt   186: </dl>
1.18      fn        187: </p>
1.1       deraadt   188:
                    189: <p>
                    190: <h3>Platforms not being developed, but which should be</h3>
1.36      deraadt   191: There is enough free code available to make porting to these
                    192: machines relatively easy.
1.18      fn        193: </p>
                    194:
                    195: <p>
1.1       deraadt   196: <dl>
                    197: <dt><a href=hppa.html>hppa</a>         <dd> Hewlett-Packard PA-RISC HP700/HP800 models.
                    198: <dt><a href=iris.html>iris</a>         <dd> SGI Iris machines.
                    199: </dl>
1.18      fn        200: </p>
1.1       deraadt   201:
1.26      deraadt   202:
1.49      deraadt   203: <hr><hr>
                    204: <h3><a name=devel>How we help developers and users.</a></h3>
                    205:
1.50      deraadt   206: <dl>
1.55      deraadt   207: <dt><h4><a name=snapshots>BINARY SNAPSHOTS:</a></h4>
                    208:
                    209: <p>
1.59      deraadt   210: <dd>Snapshots will be made available from time to time on the ftp mirrors.
                    211: The snapshots are available on each of the FTP servers listed below,
1.55      deraadt   212: typically in the directory <strong>OpenBSD/snapshots</strong>.
                    213: You should also read the <a href=snapshots.html>general description
                    214: about OpenBSD snapshots</a>.
                    215: </p>
                    216:
1.59      deraadt   217: <p>
1.70      deraadt   218: <strong>
1.69      deraadt   219: NOTE: please do not fetch binaries directly from cvs.openbsd.org
                    220: but instead use one of the mirror sites.
                    221: </strong>
1.59      deraadt   222:
1.56      deraadt   223: </dl>
1.55      deraadt   224: <dl>
1.56      deraadt   225: <dt><h4><a name=ftp>FTP:</a></h4>
1.48      deraadt   226: <dd>This is a list of currently known ftp servers:<p>
                    227: <ul>
1.18      fn        228:
1.48      deraadt   229: <li><a href=ftp://ftp.openbsd.org/pub/OpenBSD>
                    230: ftp://ftp.openbsd.org/pub/OpenBSD</a><br>
                    231: located at Rutgers University, eastern USA.
                    232: <!-- deraadt@openbsd.org -->
1.18      fn        233:
1.48      deraadt   234: <li><a href=ftp://ftp.ibp.fr/pub/OpenBSD>
                    235: ftp://ftp.ibp.fr/pub/OpenBSD</a><br>
1.1       deraadt   236: located in France.
                    237: <!-- ftpmaint@ftp.ibp.fr -->
1.48      deraadt   238:
                    239: <li><a href=ftp://ftp.univ-evry.fr/pub/system/OpenBSD>
                    240: ftp://ftp.univ-evry.fr/pub/system/OpenBSD</a><br>
                    241: located in France.
                    242: <!-- mirror@ftp.univ-evry.fr -->
                    243:
1.52      deraadt   244: <li><a href=ftp://hal.heuris.com/pub/OpenBSD>
                    245: ftp://hal.heuris.com/pub/OpenBSD</a><br>
1.1       deraadt   246: located in University of Missouri-Rolla, mid-western USA.
                    247: <!-- johns@cs.umr.edu -->
1.48      deraadt   248:
                    249: <li><a href=ftp://ftp.tut.ac.jp/OpenBSD>
                    250: ftp://ftp.tut.ac.jp/OpenBSD</a><br>
                    251: located at Toyohashi University of Technology, Aichi, JAPAN
                    252: <!-- Keijiro Umehara ume@ftp.tut.ac.jp -->
                    253:
1.1       deraadt   254: </ul>
1.48      deraadt   255:
                    256: <p>
                    257: The file structure of each FTP server is as follows:
1.18      fn        258: </p>
                    259:
                    260: <p>
1.48      deraadt   261: <strong>
                    262: <dl>
1.81      deraadt   263: <dt>pub/OpenBSD/snapshots/
                    264: <dt>pub/OpenBSD/X11/
                    265: <dt>pub/OpenBSD/src/
1.48      deraadt   266: </dl>
                    267: </strong>
1.18      fn        268: </p>
1.1       deraadt   269:
                    270: <p>
1.48      deraadt   271: If you add a new FTP mirror site, please contact
                    272: <a href=mailto:deraadt@theos.com> the FTP maintainer</a>.
                    273: </p>
1.50      deraadt   274: </dl>
1.48      deraadt   275:
1.50      deraadt   276: </dl>
1.1       deraadt   277: <dl>
1.50      deraadt   278: <dt><h4><a name=maillist>MAILING LISTS:</a></h4>
1.1       deraadt   279: <dd>Some mailing lists are used for the development and use of OpenBSD.
                    280: In each case, send mail to
                    281: <a href=mailto:majordomo@OpenBSD.org>majordomo@OpenBSD.org</a>
                    282: with a message body of "<strong>subscribe mailing-list-name</strong>".
1.18      fn        283:
1.27      deraadt   284: There is a only minimal set of mailing lists intentionally; among
                    285: other benefits such as more communication it reduces cross-posting.
1.26      deraadt   286: There are no private mailing lists.
                    287: <p>
1.1       deraadt   288: These are the mailing lists:
                    289: <dl>
                    290: <dt><strong>announce</strong>
                    291: <dd>important announcements. Since this is a low volume list
                    292: it is excellent for people who just want to follow important events.
                    293: <dt><strong>tech</strong>
                    294: <dd>technical discussions
                    295: <dt><strong>misc</strong>
                    296: <dd>user questions and answers
                    297: <dt><strong>source-changes</strong>
                    298: <dd>automated mailout of CVS source tree changes
1.18      fn        299: </dl>
                    300:
1.1       deraadt   301: <p>
1.61      deraadt   302: For further assistance, send a message body of "<strong>help</strong>"
                    303: to <a href=mailto:majordomo@OpenBSD.org>majordomo@OpenBSD.org</a>
1.1       deraadt   304: and you will receive a reply outlining all your options.
1.18      fn        305: </p>
1.1       deraadt   306:
1.61      deraadt   307: <p>
                    308: Furthermore, a
                    309: <a href=http://www.sigmasoft.com/~openbsd>mailing list archive</a>
                    310: is available.
                    311: </p>
                    312:
1.26      deraadt   313: </dl>
1.50      deraadt   314: <dl><h4><a name=gnats>BUG TRACKING:</a></h4>
                    315: <dd>We run GNATS for tracking bugs:
                    316: <a href=/cgi-bin/wwwgnats.pl>Click here to enter the bug tracking system.</a>
1.26      deraadt   317:
1.39      deraadt   318: </dl>
1.50      deraadt   319: <dl>
                    320: <dt><h4><a name=sup>SUP:</a></h4>
1.21      deraadt   321: <dd>Sorry, unlike other *BSD projects, the SUP service is not
                    322: available.  We do not believe the SUP service to be a good tool for
                    323: source code access. But read below for the description of the
                    324: <a href="#anoncvs"><strong>anoncvs</strong> service!</a>
1.1       deraadt   325:
1.50      deraadt   326: <dt><h4><a name=anoncvs>CVS Access:</a></h4>
1.7       david     327: <dd>CVS is used to manage the OpenBSD source tree. This allows
                    328: developers to work on a local source tree and commit their changes when
                    329: ready.  Also <strong>anyone</strong> can edit source files on their
                    330: local machines, and automatically track and merge in any changes made
                    331: in the OpenBSD CVS repository. Additionally they can easily see the
                    332: logs of, check out, or "diff" the source files in the OpenBSD source
                    333: tree.
1.57      deraadt   334: </p>
                    335:
                    336: <p>
                    337: Most importantly, the <strong>anoncvs</strong> service does NOT
                    338: delete the changes you make in your local copy of the source tree --
                    339: read on for more details!
                    340: </p>
1.18      fn        341:
1.1       deraadt   342: <p>
1.17      deraadt   343: The latest version of CVS is available at
                    344: <a href=ftp://ftp.cyclic.com/pub/cvs/>Cyclic</a>.
                    345: Versions earlier than 1.6 are not recommended, and may not work.
1.57      deraadt   346: If you already have OpenBSD installed, CVS is included.
1.18      fn        347: </p>
                    348:
1.17      deraadt   349: <p>
1.18      fn        350: There are two levels of source tree access:
                    351: </p>
1.1       deraadt   352:
                    353: <dl>
1.58      deraadt   354: <dt><strong>Read-write access for developers:</strong>
1.1       deraadt   355: <dd>Developers who need to commit changes to the source tree must have
                    356: an account on the OpenBSD machines.  Getting this access will be a
                    357: natural result of working on the sources with other OpenBSD developers.
1.58      deraadt   358: If someone does some good work and shows they can work with the team,
                    359: they will get an account.
1.18      fn        360: </dl>
                    361:
                    362: <dl>
1.58      deraadt   363: <dt><strong>Read-only access for everyone:</strong>
1.5       deraadt   364: <dd>Anyone can access the read-only CVS repositories. These copies
                    365: of the read-write CVS repository are mirrored often. To use one,
                    366: set your <strong>CVSROOT</strong> environment variable to one of
                    367: the following values:
1.1       deraadt   368: <ul>
1.21      deraadt   369: <p>
1.12      deraadt   370: <li><strong>CVSROOT=anoncvs@anoncvs.usa.openbsd.org:/cvs</strong><br>
                    371: Host also known as <strong>anoncvs.openbsd.org</strong> and
                    372: <strong>eap.ccrc.wustl.edu</strong>.<br>
1.4       deraadt   373: located at Washington University, St. Louis, mid-west USA.<br>
1.21      deraadt   374: maintained by <a href=mailto:chuck@maria.wustl.edu>Chuck Cranor</a>.<br>
1.5       deraadt   375: protocols: rsh, ssh, ssh port 2022.<br>
1.21      deraadt   376: updated every 4 hours.<br>
                    377: <p>
1.12      deraadt   378: <li><strong>CVSROOT=anoncvs@anoncvs2.usa.openbsd.org:/cvs</strong><br>
1.52      deraadt   379: Host also known as <strong>hal.heuris.com</strong>.<br>
                    380: located in MO, mid-west USA.<br>
                    381: maintained by <a href=mailto:johns@heuris.com>John Stone</a>.<br>
                    382: protocols: rsh, ssh, ssh port 2022.<br>
1.21      deraadt   383: updated every 12 hours.<br>
                    384: <p>
1.65      deraadt   385: <li><strong>CVSROOT=anoncvs@anoncvs3.usa.openbsd.org:/cvs</strong><br>
                    386: Host also known as <strong>freestuff.cs.colorado.edu</strong>.<br>
                    387: located at the University of Colorado, Boulder, western USA.<br>
                    388: maintained by <a href=mailto:Todd.Miller@cs.colorado.edu>Todd Miller</a>.<br>
                    389: protocols: ssh, ssh port 2022.<br>
                    390: updated every 6 hours.<br>
                    391: <p>
1.21      deraadt   392: <li><strong>CVSROOT=anoncvs@anoncvs.uk.openbsd.org:/cvs</strong><br>
                    393: Host also known as <strong>dumpty.wonderland.org</strong>.<br>
                    394: located in London, UK.<br>
                    395: maintained by <a href=mailto:peter@wonderland.org>Peter Galbavy</a>.<br>
1.64      deraadt   396: protocols: rsh.<br>
1.21      deraadt   397: updated every 12 hours.<br>
1.43      deraadt   398: <p>
                    399: <li><strong>CVSROOT=anoncvs@anoncvs.tw.openbsd.org:/cvs</strong><br>
                    400: Host also known as <strong>hercules.secc.fju.edu.tw</strong>.<br>
                    401: located in Taipei, Taiwan.<br>
                    402: maintained by <a href=mailto:shawn@openbsd.org>Shawn Hsiao</a>.<br>
                    403: protocols: rsh, ssh, ssh port 2022.<br>
                    404: updated every 12 hours.<br>
1.71      deraadt   405: <p>
                    406: <li><strong>CVSROOT=anoncvs@anoncvs.no.openbsd.org:/cvs</strong><br>
                    407: located in Norway.<br>
                    408: maintained by <a href=mailto:micheals@openbsd.org>Michael Shuldman</a>.<br>
                    409: protocols: rsh, ssh, ssh port 2022.<br>
                    410: updated every 4 hours.<br>
1.1       deraadt   411: </ul>
1.21      deraadt   412: <p>
                    413: You may want to use `traceroute' to find out which server is nearest you.
1.1       deraadt   414: </dl>
1.18      fn        415: </p>
                    416:
1.1       deraadt   417: <p>
                    418: <strong>IMPORTANT NOTE:</strong>
                    419: There are a few issues relating to cryptographic software that everyone
                    420: should be aware of:
                    421: <ul>
1.20      deraadt   422: <li>The OpenBSD sources are from Canada.
                    423: <a href=http://insight.mcmaster.ca/org/efc/pages/doc/crypto-export.html>It
                    424: is legal to export crypto software from Canada to the world.</a>
1.21      deraadt   425: <p>
1.1       deraadt   426: <li>However, if you are outside the USA or Canada, you should not
1.5       deraadt   427: fetch the cryptographic sections of the OpenBSD sources from an
                    428: anoncvs server located in the USA. The files in question are...
1.1       deraadt   429: <ul>
                    430: <li>src/kerberosIV/*
                    431: <li>src/lib/libc/crypt/crypt.c
                    432: <li>src/lib/libc/crypt/morecrypt.c
                    433: </ul>
                    434: Because of the USA ITAR munitions list,
                    435: crypto software may only be exported to Canada from the USA.
1.21      deraadt   436: <p>
1.58      deraadt   437: <li>The OpenBSD project is looking for more anoncvs servers -- read
                    438: on to find out how you can help.
1.1       deraadt   439: </ul>
1.18      fn        440: </p>
                    441:
1.1       deraadt   442: <p>
1.5       deraadt   443: A sample use of an anoncvs CVS server would be:
1.1       deraadt   444: <pre>
1.12      deraadt   445: % setenv CVSROOT anoncvs@anoncvs.usa.openbsd.org:/cvs
1.1       deraadt   446: % cd /tmp
1.58      deraadt   447: % cvs get src/sys/arch/sparc
1.1       deraadt   448: [copies the files from the repository to your machine]
1.58      deraadt   449: % cvs log src/sys/arch/sparc/sparc/locore.s
1.1       deraadt   450: [shows the commit log for the chosen file ]
1.58      deraadt   451: % cvs diff -bc -r1.1 -r1.5 src/sys/arch/sparc/sparc/locore.s
1.1       deraadt   452: [shows the changes between revisions 1.1 and rev 1.5]
                    453: </pre>
1.18      fn        454: </p>
                    455:
                    456: <p>
1.44      deraadt   457: Here is how someone using anoncvs regularily would update his
                    458: source tree:
                    459: <pre>
                    460: # setenv CVSROOT anoncvs@anoncvs.usa.openbsd.org:/cvs
                    461: # cd /usr
                    462: # cvs -q get -PA src
                    463: </pre>
                    464: or similarily later on he might try
                    465: <pre>
                    466: # cd /usr/src
                    467: # cvs -q up -PAd
                    468: </pre>
1.58      deraadt   469: Everytime you ran this it would syncronize your /usr/src tree. It would
                    470: not destroy any of your local changes, rather it would attempt to merge
                    471: changes in. If you use obj directories (not obj symbolic links) you may
                    472: wish to append "-I obj" to the cvs command line, this will keep cvs from
                    473: spitting out a warning about all the obj directories it is going to
                    474: encounter which are not in the repository.
1.44      deraadt   475: </p>
                    476:
                    477: <p>
1.1       deraadt   478: The CVS man page (included with the CVS sources) has much more
1.18      fn        479: information about how CVS can be used.
                    480: </p>
                    481:
1.1       deraadt   482: <p>
                    483: The anoncvs service gives fledgling developers a chance to learn CVS
                    484: operation and get thoroughly involved in the development process
                    485: before getting "commit" access -- as a result of showing useful
                    486: skills and high quality results they will naturally later be given
1.18      fn        487: developer access.  As well, people providing patches can create
                    488: their "diff"s relative to the CVS tree, which will ease integration.
                    489: </p>
                    490:
                    491: <p>
                    492: The CVS client uses rsh to talk to the CVS server.  If some local
                    493: security measure like a firewall (or imperfect protocol emulators
                    494: like slirp) prevents you from using rsh, you may be able to use
1.58      deraadt   495: <a href=http://www.cs.hut.fi/ssh>ssh</a> instead.  In this case,
                    496: one sets the environment variable <strong>CVS_RSH</strong> to point
                    497: to ssh (typically <strong>/usr/local/bin/ssh</strong>). To reduce the
                    498: performance hit the anoncvs server would take it is recommended (and
                    499: requested) that you disable encryption.  If your local site prevents
                    500: you from connecting out to port 22 (which ssh defaults to using) use
                    501: port 2022.
1.18      fn        502: </p>
1.5       deraadt   503:
                    504: <p>
1.1       deraadt   505: Do not be tempted to turn on compression since CVS already compresses.
                    506: Use something like the following in your <strong>$HOME/.ssh/config</strong>
                    507: file.
1.18      fn        508: </p>
1.1       deraadt   509: <pre>
1.12      deraadt   510:        Host anoncvs.usa.openbsd.org
1.1       deraadt   511:            Cipher none
                    512:            Port 2022
                    513: </pre>
1.18      fn        514:
                    515: <p>
1.71      deraadt   516: CVS is a little noisy starting up; to quiet it a bit you may want to
                    517: do this:
                    518: <pre>
                    519: setenv CVS_CLIENT_PORT -1
                    520: </pre>
                    521: </p>
                    522:
                    523: <p>
1.18      fn        524: If you wish to be a new anoncvs mirror site, please contact the anoncvs
                    525: <a href=mailto:deraadt@theos.com>maintainer</a>.
1.16      deraadt   526: Anoncvs mirrors require about 300MB of disk, and use up to 4MB of swap
1.1       deraadt   527: per anoncvs user (assuming the user does a large operation; while smaller
                    528: operations use fewer resources, anoncvs still makes much more of an
1.18      fn        529: impact than ftp or sup).  Such anoncvs machines should have excellent
                    530: network connectivity for the area they are expected to serve.  A
                    531: <a href=anoncvs.shar>document</a>
                    532: which describes the setup of anoncvs servers is available.
                    533: </p>
1.1       deraadt   534:
                    535: </dl>
                    536:
                    537: <hr>
                    538: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.86    ! deraadt   539: <br><small>$OpenBSD: index.html,v 1.85 1996/08/27 11:58:04 deraadt Exp $</small>
1.18      fn        540:
                    541: </body>
                    542: </html>