9 ms·
OpenBSD 6.3 released
- krylon 8y agoCongratulations and thanks to the OpenBSD developers for yet another great release!
- peatmoss 8y agoI notice the new Broadcom Wifi bwfm(4) drivers. Anyone with better knowledge of the project know what hardware is supported by that? The manpage doesn't mention specific chips: https://man.openbsd.org/bwfm.4 https://man.openbsd.org/bwfm.4
- cat199 8y agohttp://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/if_bwfm_pci.c http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/if_... indicates: static const struct pci_matchid bwfm_pci_devices[] = { { PCI_VENDOR_BROADCOM, PCI_PRODUCT_BROADCOM_BCM43602 }, { PCI_VENDOR_BROADCOM, PCI_PRODUCT_BROADCOM_BCM4350 }, }; those are hex codes defined in: http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/pcidevs http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/dev/pci/pci... as: vendor BROADCOM 0x14e4 Broadcom product BROADCOM BCM4350 0x43a3 BCM4350 product BROADCOM BCM43602 0x43ba BCM43602 so if you're not sure, checking boot up dmesg on OpenBSD or lspci on linux should give the hexcode of your device which should match 0x14e4 + one of the other two..
- peatmoss 8y agoOoh! Interesting. I've a ~2 year old Macbook Pro with the 43602 chipset. Would be lovely to be able to run OpenBSD on it without wifi dongles.
- deleted 8y ago[deleted]
- dingleberry 8y ago6.3 Song: Maybe...
- zie 8y agono more songs. :(
- Panino 8y agoBusy upgrading machines now, lots of nice new things. Looking forward to checking out the new execpromises in pledge. I use pledge in all my C stuff and have added it to a few other apps. Thanks OpenBSD devs!
- krylon 8y agoI just wish other systems would adopt pledge. Of all the priviledge dropping mechanisms I have encountered, pledge seemed the most comprehensible.
- zokier 8y ago> Looking forward to checking out the new execpromises in pledge Interesting that they just changed the interface from `int pledge(const char * promises, const char * paths[]);` to `int pledge(const char * promises, const char * execpromises);`. I guess that is the power they have by being a BSD and integrated system, they do not worry about userland compatibility.
- kiwidrew 8y agoThe pledge(2) manpage for 6.2 and earlier states: "BUGS. The path whitelist feature is not available at this time." So the second argument was previously unused, and thus could be repurposed without hurting backwards compatability.
- ams6110 8y agozokier's point is still correct though. OpenBSD is a complete system, kernel + userland. You upgrade in lockstep.
- ComputerGuru 8y agoWhat type of machines do you run OpenBSD on, out of curiosity? Routers, workstations, web servers, embedded devices?
- Panino 8y ago
- rob-olmos 8y agosshd(8): Add "expiry-time" option for authorized_keys files to allow for expiring keys. -- hooray! Can someone help explain what the "routing domain" is?
- jlgaddis 8y agoYou can have multiple routing tables (similar to VRFs on networking gear) which are classified into routing domains and assign different rdomains to different applications. See rdomain(4): https://man.openbsd.org/rdomain.4 https://man.openbsd.org/rdomain.4
- rob-olmos 8y agoThanks! And for the VRF tip.
- tedunangst 8y agoman rdomain to start, though unfortunately you kind of need to already understand rdomains to fully understand the docs. Basically it's a network partitioning/virtualization tool. Two computers can have two routing tables. rdomains lets one computer have two routing tables. Each process is in one rdomain or another which determines where its traffic goes and how it sees the network.
- rob-olmos 8y agoThanks!
- throwaway2048 8y agoInterfaces can be places into rdomains aswell
- MawKKe 8y agoSo.. they are like linux network namespaces?
- thisrod 8y ago
- MaupitiBlue 8y agoIf only they could find a way to support Wine.
- equalunique 8y agoFrom the release notes: > o Support the sun4v hypervisor interrupt cookie API, adding support for SPARC T7-1/2/4 machines. Who is running OpenBSD on a big expensive SPARC T7 and why? I'm genuinely curious as to what possible use cases there are which make this a desirable combination.
- brynet 8y agoIt was probably for testing, but that platform supports partitioning up the hardware through LDOMs, which OpenBSD supports as both a host and guest. https://www.tedunangst.com/flak/post/OpenBSD-on-a-Sun-T5120 https://www.tedunangst.com/flak/post/OpenBSD-on-a-Sun-T5120 (Not expired, Ted runs his own CA) http://man.openbsd.org/man8/sparc64/ldomctl.8 http://man.openbsd.org/man8/sparc64/ldomctl.8
- captn3m0 8y agounrelated, but I found his post about running his own CA quite interesting: https://www.tedunangst.com/flak/post/moving-to-https https://www.tedunangst.com/flak/post/moving-to-https
- zaat 8y agoActually, being special is sometimes just boring and annoying. >Do we really want an internet where the use of encryption requires authorization? No, it doesn't require, it provides identification and that's a huge benefit. We are all far better by having it as a standard. Just configure Let's Encrypt and stop annoying your readers.
- nickpsecurity 8y agoFor a while, every article from his site on Lobste.rs had someone complaining about that. It got old. I eventually came up with a theory about what the prankster was really up to: https://lobste.rs/s/rboyfz/books_chapter_nine#c_p7mv5p https://lobste.rs/s/rboyfz/books_chapter_nine#c_p7mv5p
- zdw 8y ago
- INTPenis 8y agoI actually searched the release notes for ipv4 due to that awful april fools gag. That wasn't funny. ;)
- besonmark 8y agoAre you interested in binary trading,invest with a trusted account manager and get a better return in 7days,i can help you manage your account with the minimum of $300 assure you get $3300.Contact us here $200 get $3200 $300 get $4300 $500 get $6400 $1000 get $10,000 $1,500 get $15,400 $2000 get $20,800 All in weekly profits and 100% guaranteed.(payout is assured)you can also monitor your account whenever you want. contact us on besonmark458@gmail.com
- dptd 8y agoI apologize for being an ignorant for so many years but... who is the OpenBSD target audience? In which areas it is the most popular OS? I worked with Windows, GNU/Linux and macOS (OSX) but never tried OpenBSD.
- alecco 8y agoBSD people, usually networking. And people who like security (though OpenBSD has detractors). It was used a lot as firewall for critical infrastructure a few years ago, perhaps still is. Also, installation was quite fast if you knew what you were doing.
- blitmap 8y agoThis may seem like a ridiculous comment but I love that a lot of work on Linux has been to make it easy-as-pie to install/setup quickly and I feel like it's happened in the last couple years (cgroup + systemd stuff mostly). I praise docker for making immutable services commonplace, but I also love projects like cockpit from redhat + netbox + coreOS. There used to be so much technical debt that went into getting a server off the ground and monitoring it. I'm weird, dunno if others agree ~
- sverige 8y agoIt has been my daily driver on laptops and desktops for eight years. I have run home servers with it as well.
- ams6110 8y agoIt's my primary desktop as well. I like it because it's low churn, everything I need just works, and most of the configurations have sane defaults so config files tend to be short and simple or not needed at all. I don't hack on the internals or build my own ports, I just use it. It stays out of my way and I like that.
- milcron 8y agoOpenBSD is great if you enjoy rooting around in the innards. I find the code simple and easy to read. Man pages are extraordinarily complete and accurate. OpenBSD devs go out of their way to delete unused and crufty code.
- segmondy 8y agoCurrently running my VPN in Linux on a pi. Gonna see if I get openbsd to run on the pi.
- ams6110 8y agohttps://www.openbsd.org/arm64.html https://www.openbsd.org/arm64.html
- cmb-prgmr 8y agoAs of this morning, customers can install OpenBSD 6.3 on a Prgmr.com VPS using our updated netboot installer. https://prgmr.com/blog/2018/04/03/distributions-updated.html https://prgmr.com/blog/2018/04/03/distributions-updated.html