OpenBSD Journal

OpenBSD 4.1 Released!

Contributed by dwc on from the open-SOURCEame dept.

The OpenBSD team is proud to announce the release of OpenBSD 4.1. See the full announcement for more information. Place an order worldwide or order in Europe, or if you only download from FTP then make a donation.

For a list of the shiny new toys, and release highlights, read on:

  • New/extended platforms:
    • OpenBSD/landisk.
      Various SH4-based appliances, made by IO-Data and resold by Plextor.
    • OpenBSD/sparc64.
      UltraSPARC III based machines are now supported even better, and run at full speed now!
  • Removed platforms:
    • OpenBSD/cats.
      Because the machines are very hard to find, and the developers hate them.
  • Improved hardware support, including:
    • New USB client controller support:
      • Support for the USB client functionality in the pxaudc(4) driver on the Zaurus.
      • New usbf(4) midlayer for USB Client controllers.
      • New cdcef(4) driver for providing a CDCE function on USB client controllers.
    • New cas(4) driver for Sun Cassini 10/100/Gigabit Ethernet devices.
    • New uow(4) driver for Maxim/Dallas DS2490 USB 1-Wire devices.
    • New owsbm(4) driver for 1-Wire smart battery monitor devices.
    • New zyd(4) driver for ZyDAS ZD1211/ZD1211B USB IEEE 802.11b/g wireless network devices.
    • New moscom(4) driver for MosChip Semiconductor MCS7703 based USB serial adapters.
    • New glxsb(4) driver for hardware random numbers and AES acceleration on the AMD Geode LX processor.
    • New vic(4) driver for VMware VMXnet Virtual Interface Controllers.
    • New malo(4) driver for Marvell Libertas IEEE 802.11b/g wireless network devices.
    • New pwdog(4) driver for Quancom PWDOG1 watchdog timer devices.
    • New uberry(4) driver for Research In Motion Blackberry devices.
    • New mbg(4) driver for Meinberg Funkuhren radio clocks.
    • New mesh(4) driver for the on-board SCSI controller of old world Apple Power Macintosh systems.
    • New mc(4) driver for the on-board Ethernet of many old world Apple Power Macintosh systems
    • Improved msk(4) driver now supports many more Marvell Yukon-2 variants including dual port cards and fiber cards.
    • The gem(4) driver now supports fiber cards.
    • The OpenBSD/amd64 platform now has more accurate and robust time keeping.
    • The OpenBSD/i386 boot(8) program now works properly on Intel-based Macs.
    • The pciide(4) driver has had support added for newer chipsets, including:
      • AMD CS5536 IDE;
      • Intel i31244;
      • NVIDIA MCP67 PATA, MCP67 SATA.
    • The com(4) driver now supports ST16C654 devices.
    • The adt(4) driver supports some newer chipsets, such as the ADT7475.
    • The OpenBSD/macppc platform now automatically turns the machine back on following an unexpected loss of power.
    • boot.mac an XCOFF formated boot loader for OpenBSD/macppc capable of booting on many old world macs.
  • New tools:
    • BSD-licensed pkg-config(1), a complete rewrite of the GNU tool of the same name, significantly smaller and more maintainable.
    • hoststated(8), a layer 3 and layer 7 server load balancing daemon with host monitoring capacities.
    • new BSD-licensed ripd(8).
    • bgplg(8), a CGI looking glass for OpenBGPD, is now available for use with the system httpd.
    • bgplgsh(8), a looking glass shell for OpenBGPD, is now available for use as a restricted read-only command line interface.
  • New functionality:
    • syslogd(8) can now pipe logs directly to other programs, making real-time log analysis easier.
    • The IP_RECVTTL ip(4) socket option allows programs to receive the incoming ttl on raw and udp sockets.
    • The IP_MINTTL ip(4) socket option allows programs to ask the kernel to discard any packets with a ttl smaller than the given one, for implementing the IP TTL security hack aka the Generalized TTL Security Mechanism specified in RFC 3682.
    • Multiple, independent routing tables, with pf(4) acting as selector. route(8) can be told which table to work with now, and routing daemons have been modified to cope as well.
    • The pflog(4) interface is now clonable. pf(4) can log to multiple pflog interfaces now, each rule can specify which pflog interface to log to. pflogd(8) and spamlogd(8) can now be told which pflog interface to work with.
    • The pfsync(4) interface is now clonable as well, thus only there when actually needed.
    • pfctl(8) can now expire table entries.
    • keep state is now the default for pf.conf(5) rules, as is the flags S/SA option on TCP connections. no state and flags any can be used to disable stateful filtering or TCP flags checking.
    • The pfctl(8) ruleset optimiser can be enabled in pf.conf(5).
    • pf(4) anchors can now be loaded inline in the main pf.conf(5) and can be printed recursively.
    • Allow pf(4) rules inside anchors to have their counters reset, and make counter read & reset an atomic operation.
    • sensorsd(8) dampens status changes now, thus not alerting for a single wrong sensor read, since many sensors lie once in a while.
    • spamd(8) and spamlogd(8) now support synchronisation of the greylist database across multiple hosts. The greytrapping mechanism now allows for whole domain traps, and noticing out of order MX use.
    • spamd(8) database format has changed from DB_BTREE to DB_HASH for much better performance on large installations with big databases.
    • The bridge(4) driver and the brconfig(8) tool now support the Rapid Spanning Tree Protocol (RSTP). The new RSTP mode is now used by default when enabled with the stp option.
    • cd(4) now supports reading from region protected DVDs.
    • Detect MS-DOS filesystems and spoof disklabel partitions for them even when there is no MBR, e.g. on some newer iPods.
  • Assorted improvements and code cleanup:
    • The fsck_ffs(8) command has been improved to be more robust to various forms of inode and superblock corruption.
    • The top(1) command got some new ways of filtering the display.
    • pthreads(3) file descriptor handling has been improved to eliminate several race and deadlock conditions and improve performance.
    • The MS-DOS filesystem has had a potential corruption issue fixed, and is more reliable when given a corrupted filesystem to mount.
    • The MS-DOS filesystem and the fdisk(8) command have been enhanced to work on devices with 2048 byte sectors, e.g. newer iPods.
    • The OpenRCS tools are smarter at handling files, especially when dealing with binary files. GNU RCS compatibility has also been improved.
    • The mg(1) editor now displays column numbers in the status bar. It has also received several improvements which make it more reliable: line numbers, file insertions, and search wrapping all now work as expected.
    • The systat(1) command has a cleaner look, and a display was added for hardware sensors.
    • The OpenBSD/alpha platform now uses gcc3.
    • Improved support for usb attached cd drives and ever more odd umass(4) devices.
    • Don't treat NetBSD or FreeBSD MBR partitions as substitutes for an OpenBSD partition. i.e. don't try to boot from them or use them to store OpenBSD disklabels.
  • Install/Upgrade process changes:
    • More reliable detection of disk and cd devices.
    • More reliable installation from MSDOS FAT partitions.
    • New sanity check in case sets for the wrong architecture are selected.
    • No need to specify the filesystem types of source partitions during disk or cd installs.
    • No need to select a source partition during disk or cd installs when there is only one to choose from.
  • OpenBGPD 4.1:
    • Fixes for sessions with tcp md5sig and ipsec. Now sessions can be migrated from and to any form of ipsec and tcpmd5 with just a simple bgpctl reload, and the session migrates the next time it gets established.
    • Include file support in the config parser.
    • Can now use the new IP_MINTTL socket option to implement the ttl security mechanism.
  • OpenOSPFD 4.1:
    • Reload support added. It is no longer needed to restart ospfd after a configuration change.
    • Multiple networks per interface are now supported.
    • It is now possible to specify the route metric and type for each redistribution rule.
  • OpenNTPD 4.1:
    • Greatly improved support for timedelta sensors.
    • ntpd now uses a strictly monotonically increasing time (uptime, basically) for its internal timers, so setting the system clock doesn't influence query rates, trust levels, etc. any more.
  • OpenSSH 4.6:
    • sshd now allows the enabling and disabling of authentication methods on a per user, group, host and network basis via the Match directive in sshd_config(5).
  • Over 4200 ports, 4000 pre-built packages (for i386), minor robustness improvements in package tools. Some highlights:
    • gstreamer-0.10 tools.
    • OpenOffice.org package, available through ftp for size reasons.
    • KDE 3.5.6 and koffice 1.6.2.
    • a large (> 500) number of new/updated perl modules, from CPAN, including most of the catalyst web framework.
    • NetBeans 5.5 Java IDE.
    • updated Linux emulation support by using Fedora Core libraries.
    • Mozilla Firefox 2.0.0.2 (with translations).
    • PostgreSQL 8.2.3.
  • As usual, steady improvements in manual pages and other documentation.
  • The system includes the following major components from outside suppliers:
    • X.Org 6.9.0 (+ patches, and i386 contains XFree86 3.3.6 servers (+ patches) for legacy chipsets not supported by X.Org)
    • Gcc 2.95.3 (+ patches) and 3.3.5 (+ patches)
    • Perl 5.8.8 (+ patches)
    • our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
    • OpenSSL 0.9.7j (+ patches)
    • Groff 1.15
    • Sendmail 8.14.0, with libmilter
    • Bind 9.3.4 (+ patches)
    • Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
    • Sudo 1.6.8p9
    • Ncurses 5.2
    • Latest KAME IPv6
    • Heimdal 0.7.2 (+ patches)
    • Arla 0.35.7
    • Binutils 2.15 (+ patches)
    • Gdb 6.3 (+ patches)
  • (Comments are closed)


    Comments
    1. By Jay (84.62.207.31) on http://zilium.de

      Congrats! Keep up the good work!

    2. By Nickolay A. Burkov (84.47.138.240) root[at]reklamy[d.o.t]ru on

      Congratulations to my favourite computer operating system!
      Best wishes to the whole friendly OpenBSD-community; guys, you rock!
      Keep clean & simple, as usual.
      *BEER*

    3. By Anonymous Coward (83.5.71.21) on

      Thank you!

      Every new OpenBSD release is like Christmas for me & all those, who like *NIX OS.

      Comments
      1. By Travers Buda (128.255.167.160) on

        Mmmm. Christmas comes twice a year. =)

    4. By Anonymous Coward (203.218.153.8) on

      USD < EUR
      But CD-Sets: 50USD == 50 EUR
      Wich means People in Europe pay much more...

      Comments
      1. By Peter N. M. Hansteen (194.54.107.19) peter@bsdly.net on http://www.bsdly.net/~peter/

        > USD < EUR
        > But CD-Sets: 50USD == 50 EUR
        > Wich means People in Europe pay much more...

        You can always order from Canada or elsewhere if you like. It's possible that the added postage would make up a significant part of the difference, though.

        Then again, it's not like the money goes to line some greedy capitalist's pockets either (this being May 1st and all ;) )

      2. By Timo Myyrä (87.192.13.207) on

        > USD < EUR
        > But CD-Sets: 50USD == 50 EUR
        > Wich means People in Europe pay much more...

        We're just more generous people than others :D

      3. By Anonymous Coward (80.124.160.138) on

        > USD < EUR
        > But CD-Sets: 50USD == 50 EUR
        > Wich means People in Europe pay much more...

        May be Wim can't do more complicated operations to compute the European price?

        Comments
        1. By Wim Vandeputte (wvdputte) wim@kd85.com on https://kd85.com/notforsale.html

          > > USD < EUR
          > > But CD-Sets: 50USD == 50 EUR
          > > Wich means People in Europe pay much more...
          >
          > May be Wim can't do more complicated operations to compute the European price?

          Sure, I'm the first one to admit I'm lazy but guys, why do we have to go over this every release?

          It's even stated in the ANNOUNCEMENT file...

          The European price includes 21% VAT and the expenses to ship the stuff from Canada to Belgium.

          Oh, and for those who have been receiving the CD weeks ago via UPS from us, do you really think UPS does this for EUR 5 per CD? I don't think so...

          Some of you trolls keep trying to get me depressed, just go away... perls before swine, right? :-)

          Comments
          1. By Darrin Chandler (dwc) on http://www.stilyagin.com/darrin/

            > Some of you trolls keep trying to get me depressed, just go away... perls before swine, right? :-)

            The part I always remember is the first person to write "My CDs ARE HERE!!" on misc@ is someone who bought them from you. Keep up the great work, Wim!

      4. By Anonymous Coward (69.3.44.234) on

        > USD < EUR
        > But CD-Sets: 50USD == 50 EUR
        > Wich means People in Europe pay much more...


        You know you could simply donate whatever the Americans pay, or whatever you feel like, via paypal, and just download it from the ftp site.

        Comments
        1. By Anonymous Coward (128.171.90.200) on

          > You know you could simply donate whatever the Americans pay, or whatever you feel like, via paypal, and just download it from the ftp site.


          Of course the FTP site doesn't have stickers

    5. By Brynet (Brynet) on

      I keep getting errors when running the following:
      "pkg_add -ui -F update -F updatedepends"

      lib not found X11.10.0
      lib not found Xet.10.0
      lib not found Xi.10.0
      lib not found Xv.5.0
      ...

      What's going on? Why can't I upgrade X related packages?

      Comments
      1. By Brynet (Brynet) on

        Please, I'm desperate.. I upgraded my system like I always have in the past but I'm getting all these X page errors.

        What is causing it? Does anyone know what is wrong?

        Comments
        1. By Darrin Chandler (dwc) on http://www.stilyagin.com/darrin/

          > Please, I'm desperate.. I upgraded my system like I always have in the past but I'm getting all these X page errors.
          >
          > What is causing it? Does anyone know what is wrong?
          >

          what does "echo $PKG_PATH" say?

          Comments
          1. By Brynet (Brynet) on

            > what does "echo $PKG_PATH" say?
            The following:

            http://gulus.usherbrooke.ca/pub/distro/OpenBSD/4.1/packages/i386

            Comments
            1. By MiK[3]Zz (91.127.1.98) mikezz@eastside.sk on http://www.eastside.sk

              > > what does "echo $PKG_PATH" say?
              > The following:
              >
              > http://gulus.usherbrooke.ca/pub/distro/OpenBSD/4.1/packages/i386

              From that mirror:
              "Forbidden
              You don't have permission to access /pub/distro/OpenBSD/4.1/packages/i386/ on this server."

              Try another mirror (ftp mirror is better) and try to add slash ("/") after your arch (i386).

      2. By Brynet (Brynet) on

        > I keep getting errors when running the following:
        > "pkg_add -ui -F update -F updatedepends"
        >
        > lib not found X11.10.0
        > lib not found Xet.10.0
        > lib not found Xi.10.0
        > lib not found Xv.5.0
        > ...
        >
        > What's going on? Why can't I upgrade X related packages?

        Should I post full output? Can please tell my why it's not working.. I upgraded via the normal bsd.rd route and "X -version" is showing the build date as the 7th of March 07.

        I could really use some insight on why it's not finding the X related stuff.. Please, "Any ideas" AT ALL??

      3. By Otto Moerbeek (otto) on http://www.drijf.net

        > I keep getting errors when running the following:
        > "pkg_add -ui -F update -F updatedepends"
        >
        > lib not found X11.10.0
        > lib not found Xet.10.0
        > lib not found Xi.10.0
        > lib not found Xv.5.0
        > ...
        >
        > What's going on? Why can't I upgrade X related packages?

        The package upgrade checks the version of the installed libs to make sure the version of the packages correspond to the system they are being installed to. It notices that some required lib versions are not present.

        Either you did not upgrade X11, or you are trying to install packages that are not 4.1 packages.

        Comments
        1. By Brynet (Brynet) on

          >
          > The package upgrade checks the version of the installed libs to make sure the version of the packages correspond to the system they are being installed to. It notices that some required lib versions are not present.
          >
          > Either you did not upgrade X11, or you are trying to install packages that are not 4.1 packages.
          >

          But I did just install 4.1 using the normal bsd.rd route, The X11 packages included.. As I just said in a recent post "X -version" is reporting a build date of the 7th of March.

          The mirror I'm using is official, It's number 11 of the list IIRC!

          Comments
          1. By Otto Moerbeek (otto) on http://www.drijf.net

            > >
            > > The package upgrade checks the version of the installed libs to make sure the version of the packages correspond to the system they are being installed to. It notices that some required lib versions are not present.
            > >
            > > Either you did not upgrade X11, or you are trying to install packages that are not 4.1 packages.
            > >
            >
            > But I did just install 4.1 using the normal bsd.rd route, The X11 packages included.. As I just said in a recent post "X -version" is reporting a build date of the 7th of March.
            >
            > The mirror I'm using is official, It's number 11 of the list IIRC!

            it looks like the mirror does not have the official stuff. Try another.


      4. By Brynet (Brynet) on

        Sorry all, It seems to be working with a different mirror.. Thanks Otto for the help.

      5. By Anonymous Coward (213.41.185.88) on

        > I keep getting errors when running the following:
        > "pkg_add -ui -F update -F updatedepends"
        >
        > lib not found X11.10.0
        > lib not found Xet.10.0
        > lib not found Xi.10.0
        > lib not found Xv.5.0
        > ...
        >
        > What's going on? Why can't I upgrade X related packages?

        The packages you're trying to add are not 4.1 packages, they're
        post-xenocara switch.

        4.1 still has X11 at 9.0.

        Comments
        1. By Brynet (Brynet) on

          > > I keep getting errors when running the following:
          > > "pkg_add -ui -F update -F updatedepends"
          > >
          > > lib not found X11.10.0
          > > lib not found Xet.10.0
          > > lib not found Xi.10.0
          > > lib not found Xv.5.0
          > > ...
          > >
          > > What's going on? Why can't I upgrade X related packages?
          >
          > The packages you're trying to add are not 4.1 packages, they're
          > post-xenocara switch.
          >
          > 4.1 still has X11 at 9.0.

          Thanks, I'm all setup now.. *shakes fist at evil mirror* :D

        2. By Anonymous Coward (71.197.194.170) on

          > > I keep getting errors when running the following:
          > > "pkg_add -ui -F update -F updatedepends"
          > >
          > > lib not found X11.10.0
          > > lib not found Xet.10.0
          > > lib not found Xi.10.0
          > > lib not found Xv.5.0
          > > ...
          > >
          > > What's going on? Why can't I upgrade X related packages?
          >
          > The packages you're trying to add are not 4.1 packages, they're
          > post-xenocara switch.
          >
          > 4.1 still has X11 at 9.0.

          I'm guessing the mirror might've been providing -CURRENT packages.

    6. By Anonymous Coward (195.29.157.74) on

      Great work! (already received DVD...)

      Many many thanks to all developers for bringing us as usualy high quality OS !

    7. By Anonymous Coward (24.37.242.64) on

      I know this is OT, but is it now possible to get XFce 4.4 working?

      BTW, Thanks for 4.1! Time to run 4.1-stable on my WRAP device.

      Comments
      1. By Landry Breuil (gaston) on http://gruiik.info

        > I know this is OT, but is it now possible to get XFce 4.4 working?
        >
        > BTW, Thanks for 4.1! Time to run 4.1-stable on my WRAP device.

        I'm working on it, latest patches against -current are available here : http://marc.info/?l=openbsd-ports&m=117759279428068&w=2

        Btw, this is against -current/xenocara, it won't work with OpenBSD 4.1.

    8. Comments
      1. By Han (213.84.147.9) on

        > My unofficial 4.1/i386 iso is available here.

        Even though you may have good intention there is no way we can verify them. Therefor I _strongly_ recommend people _not_ to use this unofficial ISO and consider buying an official CD or make their own iso, which is not hard at all: http://www.xs4all.nl/~hanb/documents/makeopenbsdiso

        Also I request the author of the previous article to take this into consideration and remove the torrent.

        Comments
        1. By Anonymous Coward (122.49.149.169) on

          > Also I request the author of the previous article to take this into consideration and remove the torrent.

          What are you talking about, the torrents are not isos.
          The torrents are basically mirroring the contents of the ftp server. This is not a bad thing at all.

          Comments
          1. By Han (213.84.147.9) on

            > What are you talking about, the torrents are not isos.
            > The torrents are basically mirroring the contents of the ftp server.
            > This is not a bad thing at all.

            There are two torrent links, the other one for the download files and this one for a real iso, you are replying to the wrong thread.

        2. By Anonymous Coward (71.197.194.170) on

          > > My unofficial 4.1/i386 iso is available here.
          >
          > Even though you may have good intention there is no way we can verify them.

          Sure there is. If you really want to verify, go download CKSUM and MD5 from ftp.openbsd.org and check it that way.

          Comments
          1. By Anonymous Coward (213.84.147.9) on

            > Sure there is. If you really want to verify, go download CKSUM and MD5 from ftp.openbsd.org and check it that way.

            Then you'd have to download the iso and only then you can verify the contents.

            Comments
            1. By CODOR (CODOR) on

              > Then you'd have to download the iso and only then you can verify the contents.

              So? Right now I can't verify the files from an official mirror until I've downloaded them all, anyway. (Or at least all of the ones I need.)

              Although if one of the first few I grab happen to be corrupted I can always switch mirrors. With an ISO I still have to wait.

              What is more useful is a torrent of a dump of the FTP site (I think there's a link earlier in the comments). Then the download could be distributed amongst the uses and save the mirrors a bit of network usage, while still being able to detect corrupted archives without having to wait for the end...

    9. By Anonymous Coward (85.178.90.145) on

      Lynx is IPv6 capable but how to tell lynx to use IPv6?!

      lynx http://&IP_V6_ADRESS wont work...

      Btw: Any reason apache got not patched to be able to use IPv6?!
      Will it propably get replaced with some other webserver in the future or is there just no interrest or spare time to fix apache? I´ve read about IPv6 Patches for Apache 1.x that´s why I ask.

      Comments
      1. By Anonymous Coward (85.178.90.145) on

        > Lynx is IPv6 capable but how to tell lynx to use IPv6?!
        >
        > lynx http://&IP_V6_ADRESS wont work...
        >
        > Btw: Any reason apache got not patched to be able to use IPv6?!
        > Will it propably get replaced with some other webserver in the future or is there just no interrest or spare time to fix apache? I´ve read about IPv6 Patches for Apache 1.x that´s why I ask.

        Forget the lynx Part *duh*....

      2. By Mathieu Sauve-Frankel (210.138.62.130) msf@openbsd.org on

        > Lynx is IPv6 capable but how to tell lynx to use IPv6?!
        >
        > lynx http://&IP_V6_ADRESS wont work...
        >
        > Btw: Any reason apache got not patched to be able to use IPv6?!
        > Will it propably get replaced with some other webserver in the future or is there just no interrest or spare time to fix apache? I´ve read about IPv6 Patches for Apache 1.x that´s why I ask.

        Apache will never get IPv6 support in tree. This is because the IPv6 patch
        breaks the Modules API. If you need an IPv6 enabled webserver you can always use something in the ports tree... like lighttpd for instance.

        Comments
        1. By Anonymous Coward (81.57.42.108) on

          > breaks the Modules API. If you need an IPv6 enabled webserver you can always use something in the ports tree... like lighttpd for instance.

          By the way, I'm considering using Apache 2.2 (I need it because I've no choice on the modules I must use).

          I planned to install it from source, but wondered if there's a special reason I'd need to consider for it not being in ports (I mean, not like "no one stepped up to package it" but are there actual problems like "is broken on OpenBSD") ? (if so, hell, I'll need to switch lin*x).

          Comments
          1. By Anonymous Coward (71.197.194.170) on

            I've heard of people running Apache 2 on OpenBSD, so I assume there's no real problem.

            Don't know why it's not even in packages/ports at least, there's plenty of more restrictive software already included (eg, Opera).

            Comments
            1. By Anonymous Coward (87.79.247.234) on

              > I've heard of people running Apache 2 on OpenBSD, so I assume there's no real problem.
              >
              > Don't know why it's not even in packages/ports at least, there's plenty of more restrictive software already included (eg, Opera).

              In my dimension there is a port for Apache 2.2.4 in
              /usr/ports/www/apache-httpd ...

              Comments
              1. By Brynet (Brynet) on

                > In my dimension there is a port for Apache 2.2.4 in
                > /usr/ports/www/apache-httpd ...
                >

                Exactly!.. ;)

                For those of you who are to lazy to search the ports tree, This site is handy: http://ports.openbsd.nu/

              2. By Anonymous Coward (71.197.194.170) on

                > > I've heard of people running Apache 2 on OpenBSD, so I assume there's no real problem.
                > >
                > > Don't know why it's not even in packages/ports at least, there's plenty of more restrictive software already included (eg, Opera).
                >
                > In my dimension there is a port for Apache 2.2.4 in
                > /usr/ports/www/apache-httpd ...
                >

                Whoops, sorry about that. I was searching for 'apache2' as it is named in many other operating systems. ;)

          2. By Henrik Kramshoej (90.184.69.92) hlk on

            > > breaks the Modules API. If you need an IPv6 enabled webserver you can always use something in the ports tree... like lighttpd for instance.
            >
            > By the way, I'm considering using Apache 2.2 (I need it because I've no choice on the modules I must use).
            >
            > I planned to install it from source, but wondered if there's a special reason I'd need to consider for it not being in ports (I mean, not like "no one stepped up to package it" but are there actual problems like "is broken on OpenBSD") ? (if so, hell, I'll need to switch lin*x).
            >
            I usually install most of the webserver from ports, but compile apache 2 from source. That way I have full control and can easily include exactly the parts I want - and exclude the silly parts I dont need.

            Apache 2 on OpenBSD has worked great for multiple years - thank you OpenBSD and Apache people!

            PS regarding price I always put in something extra anyway - so who cares about the CD price? It is the stickers that matter! The savings from NOT running Windows or Mac OS X as servers are quite extreme!

    10. By wim Vandeputte (88.82.33.37) wim@kd85.com on https://kd85.com/notforsale.html

      why not for a change go <a href=http://bsd.slashdot.org/bsd/07/05/01/2231229.shtml>troll slashdot</a> instead of them trolling here? :-)

      Comments
    11. By Anonymous Coward (85.178.118.192) on

      Are the Packages compiled with Debug-Symbols?
      I always compiled from Ports because I like to have everything with Debug symbols in case of a Crash (Application).

      Comments
      1. By Ray Lai (ray) ray@ on http://cyth.net/~ray/

        > Are the Packages compiled with Debug-Symbols?
        > I always compiled from Ports because I like to have everything with Debug symbols in case of a Crash (Application).

        Ports and userland programs are not compiled with symbols, unfortunately. It would take up too much space to do so! Only the libraries are compiled with symbols.

    12. By Anonymous Coward (68.165.27.172) on

      Thanks for porting OpenBSD to UltraSparc III, it would have been quite useful back in the days.

      Now I'm wondering, is there any good reason to use an UltraSparc III vs. a peecee? I am pretty fortunate as I own a rather fast pc, which flawlessly runs OpenBSD 4.1 as of now. But is there any possible reason why I would want to purchase an UltraSparc III (like... from ebay) to use it as a workstation and/or server these days?

      I understand the reasons why porting OpenBSD (or anything really) to new platform, and I totally support this, it's a good way to write clean code and to make our lives more exciting, but in absolute honesty, is there any good reason to run on US III rather than PC these days? Is the US III faster in any possible way? Or can it do something that the PC can not?

      This is a real question, I do not wish to start a flamewar, I am just curious about this. Again, I appreciate the port of OpenBSD to non PC hardware, but still, the question remains.

      Thank you for the hard work.

      Comments
      1. By Anonymous Coward (71.197.194.170) on

        Maybe people want to have their old hardware still usable instead of just having it as a paperweight?

      2. By Anonymous Coward (192.165.213.18) on

        Suns are much more reliable than PCs in my experience.

        Comments
        1. By Anonymous Coward (64.81.246.230) on

          > Suns are much more reliable than PCs in my experience.

          Same observation here, Sun's hardware seems very solid. I'm still using old Ultras as servers; sure they don't boast the same CPU power as today's PCs, but I've yet to see one with a blown power supply, dying fans, memory problems, flaky solder or bad contacts on connectors, etc etc...
          Not that high-quality x86 hardware doesn't exist; IBM server-class gear looks very well-built too, but I don't have experience with those.

          Fast / Cheap / Reliable -- pick two

          Comments
          1. By Anonymous Coward (156.34.73.6) on

            > > Suns are much more reliable than PCs in my experience.

            I agree about the reliability statements in general, but these days I also try to consider power consumption when choosing what devices I'm going to leave powered on 24/7. I suspect that, sometimes, otherwise inferior networking appliances may often turn out to be a more practical choice than any kind of old PC dollars and sense-wise in the long term -- especially for lightly used home routers and firewalls. Just a thought ...

      3. By Marc Espie (163.5.254.20) espie@openbsd.org on

        > Thanks for porting OpenBSD to UltraSparc III, it would have been quite useful back in the days.
        >
        > Now I'm wondering, is there any good reason to use an UltraSparc III vs. a peecee? I am pretty fortunate as I own a rather fast pc, which flawlessly runs OpenBSD 4.1 as of now. But is there any possible reason why I would want to purchase an UltraSparc III (like... from ebay) to use it as a workstation and/or server these days?
        >

        Yes, there are some security reasons, for instance.
        True W^X, no arbitrary threshold. Better development platform for
        robust software (64 bits and pointer alignment issues).

        I don't remember off-hand if stackguard is only sparc or also sparc64.

        Comments
        1. By Miod Vallat (miod) on

          > I don't remember off-hand if stackguard is only sparc or also sparc64.

          You mean stackghost, and it is working on both sparc and sparc64 nowadays.

        2. By Anonymous Coward (151.188.247.104) on

          > Yes, there are some security reasons, for instance.
          > True W^X, no arbitrary threshold. Better development platform for
          > robust software (64 bits and pointer alignment issues).
          >
          > I don't remember off-hand if stackguard is only sparc or also sparc64.
          >


          What about the AMD Opteron? It, too, is 64-bits and has W^X, etc.

          Comments
          1. By Anonymous Coward (128.171.90.200) on

            > What about the AMD Opteron? It, too, is 64-bits and has W^X, etc.

            no stack ghost

          2. By Anonymous Coward (128.171.90.200) on

            > What about the AMD Opteron? It, too, is 64-bits and has W^X, etc.

            not as cheap or reliable

      4. By sthen (85.158.44.149) on

        > Thanks for porting OpenBSD to UltraSparc III, it would have been quite useful back in the days.
        >
        > Now I'm wondering, is there any good reason to use an UltraSparc III vs. a peecee? I am pretty fortunate as I own a rather fast pc, which flawlessly runs OpenBSD 4.1 as of now. But is there any possible reason why I would want to purchase an UltraSparc III (like... from ebay) to use it as a workstation and/or server these days?

        No, none at all, no need to increase demand and push ebay prices up for people who want them (-:

    13. By Anonymous (but not) Coward (131.202.9.12) on

      I strongly suggest OpenBSD be released once a year, not every May 1st and Nov. 1st. Two reasons:
      First, I've seen how busy our volunteers are and how slow our OpenBSD website are updated when every new release.
      Second, It's been taking a lot of time to upgrade a new release, especially when you take care of several machines.
      Am I right?

      Comments
      1. By Brad (brad) on

        > I strongly suggest OpenBSD be released once a year, not every May 1st and Nov. 1st. Two reasons:
        > First, I've seen how busy our volunteers are and how slow our OpenBSD website are updated when every new release.
        > Second, It's been taking a lot of time to upgrade a new release, especially when you take care of several machines.
        > Am I right?

        A few hours to update the site on release day is slow?

        It only takes a long time if you do not know what you're doing.

        Comments
        1. By Anonymous Coward (131.202.9.12) on

          > A few hours to update the site on release day is slow?
          >
          > It only takes a long time if you do not know what you're doing.

          I'm just suggesting!! I understand OpenBSd is only for super computer guys. They got time everyday to play with it. I have my own professional field, but I am a OpenBSD lover. I got my openbsd PC without any CD-ROM so leave me relying on ftp server.
          The 4.1 packages are not online yet. Today is May 3rd. I am fine with that. I know they are busy working! That's why I suggested!

          Comments
          1. By Ray Percival (sng) on http://undeadly.org/cgi?action=search&sort=time&query=sng

            > > A few hours to update the site on release day is slow?
            > >
            > > It only takes a long time if you do not know what you're doing.
            >
            > I'm just suggesting!! I understand OpenBSd is only for super computer guys. They got time everyday to play with it. I have my own professional field, but I am a OpenBSD lover. I got my openbsd PC without any CD-ROM so leave me relying on ftp server.
            > The 4.1 packages are not online yet. Today is May 3rd. I am fine with that. I know they are busy working! That's why I suggested!
            >

            Yes, the packages are up. Have been since the 1st. Learn how to work ftp or something.

            Making the release cycle a year would be a fucking nightmare for a working admin. The correct answer is upgrade whenever you want to. But a six month release cycle is ideal from my point of view. Long enough to be stable and short enough that I get new toys on a regular basis.

            I love that people who have no clue what they are doing will feel like they can make suggestions to the pros and that they should be listened to. You would not tell a doctor how to do his job or think that your ravings have anything to do with reality. So... Why do you when it comes to IT?

      2. By wim Vandeputte (88.82.33.37) wim@kd85.com on https://kd85.com/notforsale.html

        > I strongly suggest OpenBSD be released once a year, not every May 1st and Nov. 1st. Two reasons:
        > First, I've seen how busy our volunteers are and how slow our OpenBSD website are updated when every new release.
        > Second, It's been taking a lot of time to upgrade a new release, especially when you take care of several machines.

        Because the -stable branch is maintained for 12 months, you have the choice to only install and upgrade the machines once a year.

      3. By Anonymous Coward (128.171.90.200) on

        > Second, It's been taking a lot of time to upgrade a new release, especially when you take care of several machines.
        > Am I right?

        I don't know, I tend to blow away my OpenBSD installs fairly frequently, partitions that don't get touched during an install can be saved and configurations are kept and replaced using a custom script.

    14. By ntt (70.52.21.2) on

      All I can say is Wow. Painless X configuration (7900GS) powering an Acer AL1916W (widescreen) X -configure did the trick. (Thanks Matthieu Herrb for xenocara), on my P5B Deluxe; Sound works, Both onboard ethernet adapters works (msk0, sk0) SATA works. I'm pretty happy with 4.1 :) Ordered my CD set and sending some karma (donation).

      Thank you.

      Comments
      1. By Brynet (Brynet) on

        > All I can say is Wow. Painless X configuration (7900GS) powering an Acer AL1916W (widescreen) X -configure did the trick. (Thanks Matthieu Herrb for xenocara), on my P5B Deluxe; Sound works, Both onboard ethernet adapters works (msk0, sk0) SATA works. I'm pretty happy with 4.1 :) Ordered my CD set and sending some karma (donation).
        >
        > Thank you.
        >

        Where were you? Xenocara is not part of OpenBSD 4.1.. lol..

    15. By Barry (216.19.13.14) on

      "boot.mac an XCOFF formated boot loader for OpenBSD/macppc capable of booting on many old world macs."

      Is this documented anywhere?

      It's not in INSTALL.macppc on CD2.
      It's not in the FAQ.

      Trying to install on a Beige G3... Yeah, I always beat my head against a wall just for fun.

      Comments
      1. By Barry (216.19.13.14) on

        Best documentation is right here:
        http://www.undeadly.org/cgi?action=article&sid=20061209032245&mode=expanded

        Baahhh, I have a headache, maybe I'll try again in 6 months...

        Comments
        1. By Martin Reindl (martin) martin@ on

          > Best documentation is right here:
          > http://www.undeadly.org/cgi?action=article&sid=20061209032245&mode=expanded
          >
          > Baahhh, I have a headache, maybe I'll try again in 6 months...
          >

          The problem is, old-world Mac support is not top priority for developers.
          There are some things missing and therefore they are not officially supported, but most of them should just work with some tinkering.

      2. By Gordon Willem Klok (24.57.96.182) gwk@openbsd.org on

        > "boot.mac an XCOFF formated boot loader for OpenBSD/macppc capable of booting on many old world macs."
        >
        > Is this documented anywhere?
        >
        > It's not in INSTALL.macppc on CD2.
        > It's not in the FAQ.
        >
        > Trying to install on a Beige G3... Yeah, I always beat my head against a wall just for fun.

        No its not documented yet and we are not calling it supported because its missing some pretty critical functionality mainly you cant yet boot off the internal disks. You can boot from the network using the instructions in undeadly blog and if you ask martin nicely he can provide you with a special CD that these old buggy ofw imps can boot off, floppy booting should work as well but is untested. You have to use serial there isnt any way to get around this at the moment, the console probe routines have not been altered yet to support the old worlds.

        My personal old world TODO list:
        * bootxx/installboot first stage boot loader/installer so we can boot off the internal disks.

        * fix esp(4)

        * fix the console probe/boot path selection

        * swim3

        Have patience some of this is already started and I work on it when I can, also keep in mind more has happened to support these machines in the last eight months then the prior eight years.

        gwk

    Credits

    Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]