Annotation of www/index.html, Revision 1.90
1.18 fn 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
1.1 deraadt 3: <head>
4: <title>OpenBSD</title>
1.18 fn 5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996 by OpenBSD, Inc.">
1.1 deraadt 11: </head>
1.18 fn 12:
13: <body>
14:
1.31 deraadt 15: <h1>OpenBSD</h1>
16: <br>
1.37 deraadt 17: <img src="head.gif">
1.30 deraadt 18: <br>
19: <small>The picture is Copyright (C) 1996 Shawn Mueller</small>
20: <br>
21: <h1>OpenBSD</h1>
1.1 deraadt 22:
1.18 fn 23: <p>
1.1 deraadt 24: The OpenBSD project involves continuing development of a multiplatform
25: 4.4BSD-based Unix-like operating system.
1.18 fn 26: </p>
1.1 deraadt 27:
28: <p>
1.22 deraadt 29: <ul>
30: <li><a href=#additions>Changes Relative to other *BSD's</a>
31: <li><a href=#curplat>Supported platforms</a>
32: <li><a href=#futplat>New platforms under development</a>
1.50 deraadt 33: <li><a href=#devel>How we help developers and users</a>
1.55 deraadt 34: <li><a href=#snapshots>Binary snapshots</a>
1.48 deraadt 35: <li><a href=#ftp>FTP mirrors</a>
1.50 deraadt 36: <li><a href=#maillist>Mailing Lists</a>
37: <li><a href=#gnats>Bug tracking</a>
38: <li><a href=#sup>Sup</a>
39: <li><a href=#anoncvs>AnonCVS</a>
1.22 deraadt 40: <li><a href=goals.html>OpenBSD project goals</a>
41: </ul>
42: </p>
43:
44: <h3><hr><a name=additions>Changes Relative to other *BSD's.</a></h3>
45:
46: <p>
1.1 deraadt 47: OpenBSD looks a lot like NetBSD (which it is derived from, following
48: the 4.4BSD roots), but is now being developed seperately. Good changes
49: from other free operating systems will be merged in (of course, depending
1.24 deraadt 50: on various factors like developer time for example.) OpenBSD tracks
51: NetBSD changes very closely; say anywhere between 2 days to 10 days
52: behind the state of NetBSD-current all the time. Hence you can truly
53: say that OpenBSD is NetBSD <b>PLUS MORE STUFF</b>.
1.18 fn 54: </p>
1.1 deraadt 55:
56: <p>
1.22 deraadt 57: Various additions have been made. This is only a small partial list of
1.25 deraadt 58: the major machine independent changes (ie. it is the most interesting
59: changes or what people ask about most often). Check the specific port
60: you are interested in for further details of that port -- many of them
61: have been extended too.
1.1 deraadt 62: <ul>
1.35 deraadt 63: <li>Many many NetBSD PR's fixed (which NetBSD has not yet fixed)
1.22 deraadt 64: <li>New curses library, including libform, libpanel and libmenu.
1.25 deraadt 65: <li>a termlib library which understands termcap.db, needed for new curses.
66: <li>The FreeBSD ports subsystem was integrated and is usable by you!
1.22 deraadt 67: <li>ipfilter for filtering dangerous packets
68: <li>better ELF support
1.25 deraadt 69: <li>nlist() that understands ELF, ECOFF, and a.out, allowing non-a.out ports
70: to use kvm utilies
1.22 deraadt 71: <li>Verbatim integration of the GNU tools (using a wrapper Makefile)
72: <li>All the pieces needed for cross compilation are in the source tree.
73: <li>Some LKM support in the tree.
74: <li>ATAPI support (should work on all ISA busses)
1.25 deraadt 75: <li>new scsi, md5, pkg_* commands
1.22 deraadt 76: <li>Numerous security related fixes
1.25 deraadt 77: <li>Kerberos and other crypto in the source tree that is exportable
78: <li>Solid YP master, server, and client capabilities.
1.86 deraadt 79: <li>/dev/*random -- a device driver providing some kinds of random data
1.23 deraadt 80: <li>In-kernel update(8) with an adaptive algorithm
1.25 deraadt 81: <li>Some ddb improvements and extensions
82: <li>Numerous scsi fixes
1.78 deraadt 83: <li>ncheck utility for ffs
84: <li>/sbin/init now deals with non-existant ttys, no longer spins gettys madly.
1.28 deraadt 85: <li>new system calls: rfork(), minherit(), poll().
86: <li>select() that can handle any amount of file descriptors.
1.29 deraadt 87: <li>kernfs extensions
88: <li>ATM support (support for one company's sparc & i386 cards available)
1.33 deraadt 89: <li>Boot kernels with "-c" to edit/enable/disable device configuration tables
1.38 deraadt 90: <li>pax as tar, gnutar is toast
1.42 deraadt 91: <li>using AT&T awk, gawk is toast
1.38 deraadt 92: <li>Even more security fixes.
1.47 deraadt 93: <li>Accepts FreeBSD MD5 passwords in password maps, soon will be able to
94: generate them too
1.40 deraadt 95: <li>Linux ext2fs and BSD4.4 LFS support being worked on.
1.65 deraadt 96: <li>Working ATAPI audio support for multiple architectures.
1.51 deraadt 97: <li>terminfo database support.
1.53 deraadt 98: <li>Fortran in the tree.
99: <li>The most secure rdist support anywhere.
1.63 deraadt 100: <li>randomized port allocation in bind(), bindresvport(), and rresvport() --
101: security via unpredictability.
1.53 deraadt 102: <li>Protection from the udp spamming and ftp bounce attacks.
103: <li>Significantly improved ftp daemon.
104: <li>Numerous more security policy and implimentation improvements (OpenBSD
105: defaults to installing in a very secure mode)
106: <li>zlib (non-GPL'd gzip-compatible library)
1.78 deraadt 107: <li>Newest version of pppd.
1.54 deraadt 108: <li>_POSIX_SAVED_IDS behaviour with permitted BSD extensions.
1.60 deraadt 109: <li>Fixed long-standing vm swap-leak.
110: <li>FreeBSD malloc() that uses mmap() and is able to free unused memory.
111: <li>Numerous FreeBSD userland fixes and improvements incorporated.
1.62 deraadt 112: <li>new rdisc Router Discovery daemon
1.63 deraadt 113: <li>generic protection against the bind() takeover problem.
114: <li>at -f security fix.
115: <li>install now supports -C, -p, and -S flags.
1.68 deraadt 116: <!-- <li>a real adduser program, which can even be used uninteractively. -->
117: <li>POSIX & C2 requirement; lose setuid/setgid bits if owner/group changed
118: by chown(). This can be turned off with sysctl.
1.66 deraadt 119: <li>partial protection against tcp SYN attacks.
1.67 deraadt 120: <li>added /etc/fbtab support to login & init.
1.72 deraadt 121: <li>RCS version 5.7
122: <li>much newer join command (4.4lite2 with other fixes)
123: <li>scsi subsystem security fix
124: <li>Kerberos is much more silent if not configured
125: <li>arc4-based random support in kernel
126: <li>ncr53cXXX scsi scripts assembler
1.82 deraadt 127: <li>Numerous ftpd improvements and fixes, including multihomed support.
1.73 deraadt 128: <li>`lsof'-style features in fstat.
1.82 deraadt 129: <li>/bin/ksh (latest version of pdksh) with more fixes.
1.76 deraadt 130: <li>rudimentary support for ISA Plug-and-Play cards
1.77 deraadt 131: <li>Fixed timeout support in RPC library, and also fixed it to support more than
132: FD_SETSIZE file descriptors.
1.78 deraadt 133: <li>improved locate command
134: <li>a good start at NETIPX support
1.82 deraadt 135: <li>vi version 1.75
1.78 deraadt 136: <li>gcc 2.7.2.1 (to get closer to native alpha support and fix a few other gcc
137: bugs).
1.79 deraadt 138: <li>latest version of perl, and a lndir command.
1.82 deraadt 139: <li>Even more security fixes.
140: <li>cdio command for using CD audio.
141: <li>Kernel warns if /dev/console does not exist; nice warning for booting with an
142: unpopulated /dev directory.
1.83 deraadt 143: <li>libgnumalloc is gone; our malloc() is better.
1.86 deraadt 144: <li>FreeBSD pipe() system call; quite a bit faster.
1.87 deraadt 145: <li>Some serial drivers support /dev/cuaXX devices for transparent
146: dialout+dialout, like in SunOS
1.88 deraadt 147: <li>DDB can now access symbol tables from LKM modules
1.1 deraadt 148: </ul>
1.18 fn 149: </p>
1.1 deraadt 150:
1.18 fn 151: <h3><hr><a name=curplat>Platforms currently supported.</a></h3>
1.1 deraadt 152:
1.18 fn 153: <p>
1.75 deraadt 154: Note: for some of these platforms, the platform-dependent code may
1.1 deraadt 155: be identical to that found in NetBSD because there isn't a specific
1.75 deraadt 156: OpenBSD developer. For other ports the differences are significant.
1.1 deraadt 157: If you find an empty page that means nothing of consequence that is
1.75 deraadt 158: directly port-specific has changed from NetBSD. (Of course there are
1.1 deraadt 159: differences, but they just aren't in the /sys/arch/XXXX directory).
1.18 fn 160: </p>
1.1 deraadt 161:
1.18 fn 162: <p>
1.1 deraadt 163: <dl>
1.41 deraadt 164: <dt><a href=alpha.html>Alpha</a> <dd> DEC Alpha-based machines.
1.80 niklas 165: <dt><a href=amiga.html>Amiga</a> <dd> Amiga m68k-based models (MMU required).
1.41 deraadt 166: <dt><a href=arc.html>ARC</a> <dd> ARC R4000/R4400 machines (including PICA)
167: <dt><a href=arm32.html>Arm32</a> <dd> Acorn ARM6+ computers.
168: <dt><a href=atari.html>Atari</a> <dd> Atari TT and Falcon models.
169: <dt><a href=hp300.html>HP300</a> <dd> Hewlett-Packard HP300/HP400 machines.
1.1 deraadt 170: <dt><a href=i386.html>i386</a> <dd> Your standard run-of-the-mill PC.
171: <dt><a href=mac68k.html>mac68k</a> <dd> Most MC680x0-based Apple Macintosh models.
1.41 deraadt 172: <dt><a href=mvme68k.html>MVME68K</a> <dd> Motorola MVME147/16x/17x 68K VME cards.
173: <dt><a href=pc532.html>PC532</a> <dd> A rare NS32532-based computer.
174: <dt><a href=pmax.html>Pmax</a> <dd> DEC MIPS-based machines.
1.85 deraadt 175: <dt><a href=sparc.html>Sparc</a> <dd> Sun's Sun4, sun4c, and sun4m models.
1.41 deraadt 176: <dt><a href=sun3.html>Sun3</a> <dd> Sun's sun3 models.
177: <dt><a href=vax.html>Vax</a> <dd> DEC's VAX computers.
1.1 deraadt 178: </dl>
1.18 fn 179: </p>
180:
181: <h3><hr><a name=futplat>New platforms under development.</a></h3>
1.1 deraadt 182:
1.18 fn 183: <p>
1.1 deraadt 184: <dl>
1.10 deraadt 185: <dt><a href=mvme88k.html>mvme88k</a> <dd> Motorola MVME18x/19x 88K VME cards
1.25 deraadt 186: <dt><a href=ppc.html>ppc</a> <dd> IBM/Apple/Motorola PowerPC-based machines.
1.84 downsj 187: <dt><a href=romp.html>romp</a> <dd> IBM PC RT series of machines.
1.1 deraadt 188: </dl>
1.18 fn 189: </p>
1.1 deraadt 190:
191: <p>
192: <h3>Platforms not being developed, but which should be</h3>
1.36 deraadt 193: There is enough free code available to make porting to these
194: machines relatively easy.
1.18 fn 195: </p>
196:
197: <p>
1.1 deraadt 198: <dl>
199: <dt><a href=hppa.html>hppa</a> <dd> Hewlett-Packard PA-RISC HP700/HP800 models.
200: <dt><a href=iris.html>iris</a> <dd> SGI Iris machines.
201: </dl>
1.18 fn 202: </p>
1.1 deraadt 203:
1.26 deraadt 204:
1.49 deraadt 205: <hr><hr>
206: <h3><a name=devel>How we help developers and users.</a></h3>
207:
1.50 deraadt 208: <dl>
1.55 deraadt 209: <dt><h4><a name=snapshots>BINARY SNAPSHOTS:</a></h4>
210:
211: <p>
1.59 deraadt 212: <dd>Snapshots will be made available from time to time on the ftp mirrors.
213: The snapshots are available on each of the FTP servers listed below,
1.55 deraadt 214: typically in the directory <strong>OpenBSD/snapshots</strong>.
215: You should also read the <a href=snapshots.html>general description
216: about OpenBSD snapshots</a>.
217: </p>
218:
1.59 deraadt 219: <p>
1.70 deraadt 220: <strong>
1.69 deraadt 221: NOTE: please do not fetch binaries directly from cvs.openbsd.org
222: but instead use one of the mirror sites.
223: </strong>
1.59 deraadt 224:
1.56 deraadt 225: </dl>
1.55 deraadt 226: <dl>
1.56 deraadt 227: <dt><h4><a name=ftp>FTP:</a></h4>
1.48 deraadt 228: <dd>This is a list of currently known ftp servers:<p>
229: <ul>
1.18 fn 230:
1.48 deraadt 231: <li><a href=ftp://ftp.openbsd.org/pub/OpenBSD>
232: ftp://ftp.openbsd.org/pub/OpenBSD</a><br>
233: located at Rutgers University, eastern USA.
234: <!-- deraadt@openbsd.org -->
1.18 fn 235:
1.48 deraadt 236: <li><a href=ftp://ftp.ibp.fr/pub/OpenBSD>
237: ftp://ftp.ibp.fr/pub/OpenBSD</a><br>
1.1 deraadt 238: located in France.
239: <!-- ftpmaint@ftp.ibp.fr -->
1.48 deraadt 240:
241: <li><a href=ftp://ftp.univ-evry.fr/pub/system/OpenBSD>
242: ftp://ftp.univ-evry.fr/pub/system/OpenBSD</a><br>
243: located in France.
244: <!-- mirror@ftp.univ-evry.fr -->
245:
1.52 deraadt 246: <li><a href=ftp://hal.heuris.com/pub/OpenBSD>
247: ftp://hal.heuris.com/pub/OpenBSD</a><br>
1.1 deraadt 248: located in University of Missouri-Rolla, mid-western USA.
249: <!-- johns@cs.umr.edu -->
1.48 deraadt 250:
251: <li><a href=ftp://ftp.tut.ac.jp/OpenBSD>
252: ftp://ftp.tut.ac.jp/OpenBSD</a><br>
253: located at Toyohashi University of Technology, Aichi, JAPAN
254: <!-- Keijiro Umehara ume@ftp.tut.ac.jp -->
255:
1.89 deraadt 256: <li><a href=ftp://ftp.cs.tu-berlin.de/pub/OpenBSD>
257: ftp://ftp.cs.tu-berlin.de/pub/OpenBSD</a><br>
258: Berlin, Germany
259: <!-- ftpadm@ftp.cs.tu-berlin.de -->
260:
1.1 deraadt 261: </ul>
1.48 deraadt 262:
263: <p>
264: The file structure of each FTP server is as follows:
1.18 fn 265: </p>
266:
267: <p>
1.48 deraadt 268: <strong>
269: <dl>
1.81 deraadt 270: <dt>pub/OpenBSD/snapshots/
271: <dt>pub/OpenBSD/X11/
272: <dt>pub/OpenBSD/src/
1.48 deraadt 273: </dl>
274: </strong>
1.18 fn 275: </p>
1.1 deraadt 276:
277: <p>
1.48 deraadt 278: If you add a new FTP mirror site, please contact
279: <a href=mailto:deraadt@theos.com> the FTP maintainer</a>.
280: </p>
1.50 deraadt 281: </dl>
1.48 deraadt 282:
1.50 deraadt 283: </dl>
1.1 deraadt 284: <dl>
1.50 deraadt 285: <dt><h4><a name=maillist>MAILING LISTS:</a></h4>
1.1 deraadt 286: <dd>Some mailing lists are used for the development and use of OpenBSD.
287: In each case, send mail to
288: <a href=mailto:majordomo@OpenBSD.org>majordomo@OpenBSD.org</a>
289: with a message body of "<strong>subscribe mailing-list-name</strong>".
1.18 fn 290:
1.27 deraadt 291: There is a only minimal set of mailing lists intentionally; among
292: other benefits such as more communication it reduces cross-posting.
1.26 deraadt 293: There are no private mailing lists.
294: <p>
1.1 deraadt 295: These are the mailing lists:
296: <dl>
297: <dt><strong>announce</strong>
298: <dd>important announcements. Since this is a low volume list
299: it is excellent for people who just want to follow important events.
300: <dt><strong>tech</strong>
301: <dd>technical discussions
302: <dt><strong>misc</strong>
303: <dd>user questions and answers
304: <dt><strong>source-changes</strong>
305: <dd>automated mailout of CVS source tree changes
1.18 fn 306: </dl>
307:
1.1 deraadt 308: <p>
1.61 deraadt 309: For further assistance, send a message body of "<strong>help</strong>"
310: to <a href=mailto:majordomo@OpenBSD.org>majordomo@OpenBSD.org</a>
1.1 deraadt 311: and you will receive a reply outlining all your options.
1.18 fn 312: </p>
1.1 deraadt 313:
1.61 deraadt 314: <p>
315: Furthermore, a
316: <a href=http://www.sigmasoft.com/~openbsd>mailing list archive</a>
317: is available.
318: </p>
319:
1.26 deraadt 320: </dl>
1.50 deraadt 321: <dl><h4><a name=gnats>BUG TRACKING:</a></h4>
322: <dd>We run GNATS for tracking bugs:
323: <a href=/cgi-bin/wwwgnats.pl>Click here to enter the bug tracking system.</a>
1.26 deraadt 324:
1.39 deraadt 325: </dl>
1.50 deraadt 326: <dl>
327: <dt><h4><a name=sup>SUP:</a></h4>
1.21 deraadt 328: <dd>Sorry, unlike other *BSD projects, the SUP service is not
329: available. We do not believe the SUP service to be a good tool for
330: source code access. But read below for the description of the
331: <a href="#anoncvs"><strong>anoncvs</strong> service!</a>
1.1 deraadt 332:
1.50 deraadt 333: <dt><h4><a name=anoncvs>CVS Access:</a></h4>
1.7 david 334: <dd>CVS is used to manage the OpenBSD source tree. This allows
335: developers to work on a local source tree and commit their changes when
336: ready. Also <strong>anyone</strong> can edit source files on their
337: local machines, and automatically track and merge in any changes made
338: in the OpenBSD CVS repository. Additionally they can easily see the
339: logs of, check out, or "diff" the source files in the OpenBSD source
340: tree.
1.57 deraadt 341: </p>
342:
343: <p>
344: Most importantly, the <strong>anoncvs</strong> service does NOT
345: delete the changes you make in your local copy of the source tree --
346: read on for more details!
347: </p>
1.18 fn 348:
1.1 deraadt 349: <p>
1.17 deraadt 350: The latest version of CVS is available at
351: <a href=ftp://ftp.cyclic.com/pub/cvs/>Cyclic</a>.
352: Versions earlier than 1.6 are not recommended, and may not work.
1.57 deraadt 353: If you already have OpenBSD installed, CVS is included.
1.18 fn 354: </p>
355:
1.17 deraadt 356: <p>
1.18 fn 357: There are two levels of source tree access:
358: </p>
1.1 deraadt 359:
360: <dl>
1.58 deraadt 361: <dt><strong>Read-write access for developers:</strong>
1.1 deraadt 362: <dd>Developers who need to commit changes to the source tree must have
363: an account on the OpenBSD machines. Getting this access will be a
364: natural result of working on the sources with other OpenBSD developers.
1.58 deraadt 365: If someone does some good work and shows they can work with the team,
366: they will get an account.
1.18 fn 367: </dl>
368:
369: <dl>
1.58 deraadt 370: <dt><strong>Read-only access for everyone:</strong>
1.5 deraadt 371: <dd>Anyone can access the read-only CVS repositories. These copies
372: of the read-write CVS repository are mirrored often. To use one,
373: set your <strong>CVSROOT</strong> environment variable to one of
374: the following values:
1.1 deraadt 375: <ul>
1.21 deraadt 376: <p>
1.12 deraadt 377: <li><strong>CVSROOT=anoncvs@anoncvs.usa.openbsd.org:/cvs</strong><br>
378: Host also known as <strong>anoncvs.openbsd.org</strong> and
379: <strong>eap.ccrc.wustl.edu</strong>.<br>
1.4 deraadt 380: located at Washington University, St. Louis, mid-west USA.<br>
1.21 deraadt 381: maintained by <a href=mailto:chuck@maria.wustl.edu>Chuck Cranor</a>.<br>
1.5 deraadt 382: protocols: rsh, ssh, ssh port 2022.<br>
1.21 deraadt 383: updated every 4 hours.<br>
384: <p>
1.12 deraadt 385: <li><strong>CVSROOT=anoncvs@anoncvs2.usa.openbsd.org:/cvs</strong><br>
1.52 deraadt 386: Host also known as <strong>hal.heuris.com</strong>.<br>
387: located in MO, mid-west USA.<br>
388: maintained by <a href=mailto:johns@heuris.com>John Stone</a>.<br>
389: protocols: rsh, ssh, ssh port 2022.<br>
1.21 deraadt 390: updated every 12 hours.<br>
391: <p>
1.65 deraadt 392: <li><strong>CVSROOT=anoncvs@anoncvs3.usa.openbsd.org:/cvs</strong><br>
393: Host also known as <strong>freestuff.cs.colorado.edu</strong>.<br>
394: located at the University of Colorado, Boulder, western USA.<br>
395: maintained by <a href=mailto:Todd.Miller@cs.colorado.edu>Todd Miller</a>.<br>
396: protocols: ssh, ssh port 2022.<br>
397: updated every 6 hours.<br>
398: <p>
1.21 deraadt 399: <li><strong>CVSROOT=anoncvs@anoncvs.uk.openbsd.org:/cvs</strong><br>
400: Host also known as <strong>dumpty.wonderland.org</strong>.<br>
401: located in London, UK.<br>
402: maintained by <a href=mailto:peter@wonderland.org>Peter Galbavy</a>.<br>
1.64 deraadt 403: protocols: rsh.<br>
1.21 deraadt 404: updated every 12 hours.<br>
1.43 deraadt 405: <p>
406: <li><strong>CVSROOT=anoncvs@anoncvs.tw.openbsd.org:/cvs</strong><br>
407: Host also known as <strong>hercules.secc.fju.edu.tw</strong>.<br>
408: located in Taipei, Taiwan.<br>
409: maintained by <a href=mailto:shawn@openbsd.org>Shawn Hsiao</a>.<br>
410: protocols: rsh, ssh, ssh port 2022.<br>
411: updated every 12 hours.<br>
1.71 deraadt 412: <p>
413: <li><strong>CVSROOT=anoncvs@anoncvs.no.openbsd.org:/cvs</strong><br>
414: located in Norway.<br>
415: maintained by <a href=mailto:micheals@openbsd.org>Michael Shuldman</a>.<br>
416: protocols: rsh, ssh, ssh port 2022.<br>
417: updated every 4 hours.<br>
1.1 deraadt 418: </ul>
1.21 deraadt 419: <p>
420: You may want to use `traceroute' to find out which server is nearest you.
1.1 deraadt 421: </dl>
1.18 fn 422: </p>
423:
1.1 deraadt 424: <p>
425: <strong>IMPORTANT NOTE:</strong>
426: There are a few issues relating to cryptographic software that everyone
427: should be aware of:
428: <ul>
1.20 deraadt 429: <li>The OpenBSD sources are from Canada.
430: <a href=http://insight.mcmaster.ca/org/efc/pages/doc/crypto-export.html>It
431: is legal to export crypto software from Canada to the world.</a>
1.21 deraadt 432: <p>
1.1 deraadt 433: <li>However, if you are outside the USA or Canada, you should not
1.5 deraadt 434: fetch the cryptographic sections of the OpenBSD sources from an
435: anoncvs server located in the USA. The files in question are...
1.1 deraadt 436: <ul>
437: <li>src/kerberosIV/*
438: <li>src/lib/libc/crypt/crypt.c
439: <li>src/lib/libc/crypt/morecrypt.c
440: </ul>
441: Because of the USA ITAR munitions list,
442: crypto software may only be exported to Canada from the USA.
1.21 deraadt 443: <p>
1.58 deraadt 444: <li>The OpenBSD project is looking for more anoncvs servers -- read
445: on to find out how you can help.
1.1 deraadt 446: </ul>
1.18 fn 447: </p>
448:
1.1 deraadt 449: <p>
1.5 deraadt 450: A sample use of an anoncvs CVS server would be:
1.1 deraadt 451: <pre>
1.12 deraadt 452: % setenv CVSROOT anoncvs@anoncvs.usa.openbsd.org:/cvs
1.1 deraadt 453: % cd /tmp
1.58 deraadt 454: % cvs get src/sys/arch/sparc
1.1 deraadt 455: [copies the files from the repository to your machine]
1.58 deraadt 456: % cvs log src/sys/arch/sparc/sparc/locore.s
1.1 deraadt 457: [shows the commit log for the chosen file ]
1.58 deraadt 458: % cvs diff -bc -r1.1 -r1.5 src/sys/arch/sparc/sparc/locore.s
1.1 deraadt 459: [shows the changes between revisions 1.1 and rev 1.5]
460: </pre>
1.18 fn 461: </p>
462:
463: <p>
1.44 deraadt 464: Here is how someone using anoncvs regularily would update his
465: source tree:
466: <pre>
467: # setenv CVSROOT anoncvs@anoncvs.usa.openbsd.org:/cvs
468: # cd /usr
469: # cvs -q get -PA src
470: </pre>
471: or similarily later on he might try
472: <pre>
473: # cd /usr/src
474: # cvs -q up -PAd
475: </pre>
1.58 deraadt 476: Everytime you ran this it would syncronize your /usr/src tree. It would
477: not destroy any of your local changes, rather it would attempt to merge
478: changes in. If you use obj directories (not obj symbolic links) you may
479: wish to append "-I obj" to the cvs command line, this will keep cvs from
480: spitting out a warning about all the obj directories it is going to
481: encounter which are not in the repository.
1.44 deraadt 482: </p>
483:
484: <p>
1.1 deraadt 485: The CVS man page (included with the CVS sources) has much more
1.18 fn 486: information about how CVS can be used.
487: </p>
488:
1.1 deraadt 489: <p>
490: The anoncvs service gives fledgling developers a chance to learn CVS
491: operation and get thoroughly involved in the development process
492: before getting "commit" access -- as a result of showing useful
493: skills and high quality results they will naturally later be given
1.18 fn 494: developer access. As well, people providing patches can create
495: their "diff"s relative to the CVS tree, which will ease integration.
496: </p>
497:
498: <p>
499: The CVS client uses rsh to talk to the CVS server. If some local
500: security measure like a firewall (or imperfect protocol emulators
501: like slirp) prevents you from using rsh, you may be able to use
1.58 deraadt 502: <a href=http://www.cs.hut.fi/ssh>ssh</a> instead. In this case,
503: one sets the environment variable <strong>CVS_RSH</strong> to point
504: to ssh (typically <strong>/usr/local/bin/ssh</strong>). To reduce the
505: performance hit the anoncvs server would take it is recommended (and
506: requested) that you disable encryption. If your local site prevents
507: you from connecting out to port 22 (which ssh defaults to using) use
508: port 2022.
1.18 fn 509: </p>
1.5 deraadt 510:
511: <p>
1.1 deraadt 512: Do not be tempted to turn on compression since CVS already compresses.
513: Use something like the following in your <strong>$HOME/.ssh/config</strong>
514: file.
1.18 fn 515: </p>
1.1 deraadt 516: <pre>
1.12 deraadt 517: Host anoncvs.usa.openbsd.org
1.1 deraadt 518: Cipher none
519: Port 2022
520: </pre>
1.18 fn 521:
522: <p>
1.71 deraadt 523: CVS is a little noisy starting up; to quiet it a bit you may want to
524: do this:
525: <pre>
526: setenv CVS_CLIENT_PORT -1
527: </pre>
528: </p>
529:
530: <p>
1.18 fn 531: If you wish to be a new anoncvs mirror site, please contact the anoncvs
532: <a href=mailto:deraadt@theos.com>maintainer</a>.
1.16 deraadt 533: Anoncvs mirrors require about 300MB of disk, and use up to 4MB of swap
1.1 deraadt 534: per anoncvs user (assuming the user does a large operation; while smaller
535: operations use fewer resources, anoncvs still makes much more of an
1.18 fn 536: impact than ftp or sup). Such anoncvs machines should have excellent
537: network connectivity for the area they are expected to serve. A
538: <a href=anoncvs.shar>document</a>
539: which describes the setup of anoncvs servers is available.
540: </p>
1.1 deraadt 541:
542: </dl>
543:
544: <hr>
545: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.90 ! deraadt 546: <br><small>$OpenBSD: index.html,v 1.89 1996/08/31 11:03:18 deraadt Exp $</small>
1.18 fn 547:
548: </body>
549: </html>