DuckDuckGo

 

 

 

1.  OpenBSD Journal: A resource for the OpenBSD community
    In what can only be called a great stride forward in routing security, Sebastian Benoit (benno@) announced the availability of rpki-client version 9.0.The announcement reads, Subject: rpki-client 9.0 released From: Sebastian Benoit <benno openbsd ! org> Date: 2024-03-03 17:24:06 rpki-client 9.0 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon.
    undeadly.org/cgi
   
2.  Using a Yubikey as smartcard for SSH public key authentication
    It's in -current only, so it will be available in 6.5, out in two months or so. Right now your options are: build it yourself (easy), port the port to 6.4 or upgrade to a snapshot (which is is 6.5-beta since last week).
    undeadly.org/cgi?action=article;sid=20190302235509
   
3.  Next steps toward mimmutable, from deraadt@
    In a recent message to the tech mailing list, Theo de Raadt (deraadt@) summarized the state of the new memory protections work.The thread also includes a followup from Otto Moerbeek (otto@) on consequent changes to the memory allocation mechanisms.. Theo writes, From: "Theo de Raadt" <deraadt openbsd ! org> Date: Fri, 18 Nov 2022 03:10:05 +0000 To: openbsd-tech Subject: More on mimmutable ...
    undeadly.org/cgi?action=article;sid=20221120115616
   
4.  April 21, 2022: OpenBSD 7.1 Released
    The long spring (or fall) wait is over, the OpenBSD project today formally released OpenBSD 7.1, the 52nd release of our favorite open source operating system.. As usual, the release page lists the main highlights of the new release, which include . OpenBSD/arm64 contains greatly improved support for Apple M1 systems [See earlier article].; loongson platform retired.
    undeadly.org/cgi?action=article;sid=20220421132230
   
5.  Initial support for guided disk encryption in the installer
    The OpenBSD installer now has basic support for configuring disk encryption during the regular installation process. Previously, disk encryption needed to be set up manually by dropping to the shell from the installer. Initial support, likely to be expanded upon, was committed by Klemens Nanni ( kn@) on March 7, 2023 . The commit reads,
    undeadly.org/cgi?action=article;sid=20230308063109
   
6.  Introducing dhcpleased(8)
    Now enabled by default on OpenBSD -current is dhcpleased (8), a dynamic host configuration protocol daemon written by florian@ (Florian Obser), who spoke with us about his work: I suppose this is either the KAME project 's fault, or if we don't want to go that far back, Theo's fault. At g2k16 he floated the idea of a network configuration daemon.
    undeadly.org/cgi?action=article;sid=20210722072359
   
7.  OpenBSD 7.4 Released
    The OpenBSD project has announced the release of OpenBSD 7.4, the 55 th release of the OpenBSD operating system.. The new release contains a number of innovations and improvements across a number of areas, including Mandatory enforcement of indirect branch targets [See earlier report].; viogpu(4), a VirtIO GPU driver [See earlier report]. vmd(8) has moved to a multi-process model for virtio(4 ...
    undeadly.org/cgi?action=article&sid=20231016130614&ref=upstract.com
   
8.  Index for 2022 - undeadly.org
    OpenBSD Journal. Home Archives About Submit Story Create Account Login. Archive Index for 2022. January. DRM updated; LibreSSL update; A proof of concept: running OpenBSD on the PinePhone; February. New 'Reckless guide to OpenBSD' published
    undeadly.org/cgi?action=archive;y=2022
   
9.  About the OpenBSD Journal
    OpenBSD Journal. Home Archives About Submit Story Create Account Login. About the OpenBSD Journal Purpose. The OpenBSD Journal is a site dedicated to providing news and information of interest to members of the OpenBSD community.. The site is run by a small group of volunteers. Although several OpenBSD developers are registered users of the site, and the site receives frequent contributions ...
    undeadly.org/cgi?action=about
   
10.  OpenBSD 7.0 released
    Contributed by rueda on 2021-09-20 from the Undeadly-SYNs dept. The OpenBSD project has released OpenBSD 7.0 , the project's 51 st release. As usual, the release page offers highlights, installation and upgrade instructions, as well as links to other resources such as the detailed changelog. Notable improvements include, but are not limited to:
    undeadly.org/cgi?action=article;sid=20211014144620
   
11.  September 30th, 2021 syspatches: some assembly might be required
    Did you just run syspatch(8) and see it fail? Here's the reason: one of the two root certificates behind the (excellent) Let's Encrypt CA service has expired. A bug in (the "legacy" verifier of) LibreSSL also contributed. The syspatches (for OpenBSD 6.8, 032, for OpenBSD 6.9, 018) mitigate the unfortunate situation. However, your syspatch may fail if your local mirror uses a Let's Encrypt ...
    undeadly.org/cgi?action=article;sid=20211001073034
   
12.  OpenBSD KDE Status Report 2022 - undeadly.org
    Contributed by Peter N. M. Hansteen on 2022-12-28 from the O-K6 dept. The end of the year is rapidly approaching, and Rafael Sadowski ( rsadowski@) has published the OpenBSD KDE Status Report 2022 . The report leads in, A lot has happened since the last OpenBSD KDE Status Report in 2021. Let's split the report in four areas the good, the bad ...
    undeadly.org/cgi?action=article;sid=20221229103836
   
13.  How to create a USB flash installer for OpenBSD
    The isolinux method is quite interesting, they provide an HD-compatible MBR and post-process the ISO with a program which searches for the location of the actual isolinux boot loader and patches it in.
    undeadly.org/cgi?action=article&sid=20140225072408
   
14.  Introduction to sysclean(8)
    Introduction to. sysclean (8) Contributed by rueda on 2023-09-27 from the keep-it-clean! dept. Many OpenBSD sysadmins find the sysclean (8) port useful for removing obsolete files following upgrades. Sebastien Marie ( semarie@ ), the author of sysclean (8) , has written a piece giving an under-the-hood look at the operation of this handy utility.
    undeadly.org/cgi?action=article;sid=20230927103221
   
15.  pinning all system calls
    Theo de Raadt (deraadt@) posted to tech@ regarding restrictions on the addresses from which system calls can be made.In addition to providing background, the post contains information (and a patch) for an imminent change - the introduction of a new syscall, pinsyscalls(2) [link not working at the time of writing because change not yet committed], which specifies the addresses from which ...
    undeadly.org/cgi?action=article;sid=20231209115835
   
16.  OpenSSH 9.3/9.3p1 released - undeadly.org
    On 2023-03-15 , the release of version 9.3 of OpenSSH was announced: […] This release fixes a number of security bugs. safety problem. The memory safety problem is not believed to be. security bugs. * ssh-add(1): when adding smartcard keys to ssh-agent(1) with the. per-hop desination constraints (ssh-add -h ...) added in OpenSSH.
    undeadly.org/cgi?action=article;sid=20230316040613
   
17.  HEADS UP: ntpd changing
    The ntpd options -s and -S are going to be removed soon and at startup. with print: -s option no longer works and will be removed soon. Please reconfigure to use constraints or trusted servers. Probably after 6.7 we'll delete the warning. Maybe for 6.8 we'll remove. -s and -S from getopt, and starting with those options will fail.
    undeadly.org/cgi?action=article;sid=20191111075815
   
18.  Help the OpenBSD Foundation Reach Its 2022 Funding Goal
    The OpenBSD Foundation, which is central to funding the OpenBSD project, needs your help to reach its 2022 Fundraising Goal of $300,000. At the time of writing, the amount raised in 2022 stands at a little over 50% of the stated goal. The Foundation needs your help to sustainably fund the project. Please head over to the Foundation's donations ...
    undeadly.org/cgi?action=article;sid=20221202062601
   
19.  OpenBSD Developer: Ted Unangst
    OpenBSD Developer: Ted Unangst. Date: 2015-10-25. On October 18th 20 years ago the first commits to the OpenBSD project landed in the CVS repository. Today on the anniversary the beastie.pl team invites all readers to a series of interviews that our staff conducted with the project developers. We continue with our eight interview - Ted Unangst. 1.
    undeadly.org/features/2015/10/beastie_pl_interviews/ted-unangst.html
   
20.  Wayland on OpenBSD
    Wayland on OpenBSD. Contributed by rueda on 2023-07-10 from the way to go to land dept. Matthieu Herrb ( matthieu@) has written some notes on his work at the (recently-concluded) g2k23 hackathon in Tallinn, Estonia . His article, Wayland on OpenBSD , starts: These are my notes from experimenting with building Wayland bits on OpenBSD during ...
    undeadly.org/cgi?action=article;sid=20230711113344
   
21.  Index for 2024 - undeadly.org
    Archive Index for 2024. Archive Index for. 2024. January. TSO for em (4) committed to -current. OpenBSD workstation hardening tips. DSA removal from OpenSSH. Effortless OpenBSD Audio and Desktop Screen Recording Guide. pinsyscalls (2) working in anger.
    undeadly.org/cgi?action=archive
   
22.  Soft updates (softdep) disabled for future VFS work
    A low key leak from the ongoing g2k23 hackathon comes the news that soft updates (aka softdep) will, for now, be a no-op on OpenBSD-current.. The commit message by Bob Beck (beck@) reads, . From: Bob Beck <beck cvs ! openbsd ! org> Date: 2023-07-05 15:13:28 CVSROOT: /cvs Module name: src Changes by: beck@cvs.openbsd.org 2023/07/05 09:13:28 Modified files: sys/kern : vfs_syscalls.c sys/sys ...
    undeadly.org/cgi?action=article;sid=20230706044554