forked from openbsd/www
-
Notifications
You must be signed in to change notification settings - Fork 0
/
50.html
733 lines (647 loc) · 31.5 KB
/
50.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
<!doctype html>
<html lang=en id=release>
<meta charset=utf-8>
<title>OpenBSD 5.0</title>
<meta name="description" content="OpenBSD 5.0">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/50.html">
<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
5.0
</h2>
<table>
<tr>
<td>
<a href="images/MAD.jpg">
<img width="227" height="343" src="images/MAD.jpg" alt="MAD"></a>
<td>
Released Nov 1, 2011<br>
Copyright 1997-2011, Theo de Raadt.<br>
<cite class=isbn>ISBN 978-0-9784475-8-8</cite>
<br>
5.0 Song: <a href="lyrics.html#50">"What Me Worry?"</a>
<br>
<br>
<ul>
<li>See the information on <a href="ftp.html">the FTP page</a> for
a list of mirror machines.
<li>Go to the <code class=reldir>pub/OpenBSD/5.0/</code> directory on
one of the mirror sites.
<li>Have a look at <a href="errata50.html">The 5.0 Errata page</a> for a list
of bugs and workarounds.
<li>See a <a href="plus50.html">detailed log of changes</a> between the
4.9 and 5.0 releases.
</ul>
<p>
All applicable copyrights and credits are in the src.tar.gz,
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
files fetched via <code>ports.tar.gz</code>.
</table>
<hr>
<section id=new>
<h3>What's New</h3>
<p>
This is a partial list of new features and systems included in OpenBSD 5.0.
For a comprehensive list, see the <a href="plus50.html">changelog</a> leading
to 5.0.
<p>
<ul>
<li>Improved hardware support, including:
<ul>
<li>MSI interrupts for many devices, on those architectures which can
support them (amd64, i386, sparc64 only so far).
<li>A new <a href="https://man.openbsd.org/dma_alloc.9">dma_alloc(9)</a> API makes it easier for kernel code to allocate
dma-safe memory. Many drivers (especially network drivers) and
subsystems (in particular scsi and the buffer cache) were adapted
to use this.
<li>As a result, big-memory support has been enabled on all possible
architectures.
<li>The rather rare <a href="https://man.openbsd.org/bce.4">bce(4)</a> driver now copies mbufs all the time, to cope
with the hardware having a 1GB limit.
<li>Added <a href="https://man.openbsd.org/hds.4">hds(4)</a>, a driver for Hitachi Modular Storage SCSI devices.
<li>Added <a href="https://man.openbsd.org/myx.4">myx(4)</a>, a driver for the Myricom Myri-10G 10GB Ethernet devices.
<li>Added <a href="https://man.openbsd.org/macppc/dfs.4">dfs(4)</a>, a driver for Dynamic Frequency Switching on some macppc
systems.
<li><a href="https://man.openbsd.org/cardbus.4">cardbus(4)</a> and <a href="https://man.openbsd.org/pcmcia.4">pcmcia(4)</a> support on sgi.
<li>Suspend/resume support on Loongson Yeelong laptops.
</ul>
<p>
<li>Generic network stack improvements:
<ul>
<li>Added support for sending Wake on Lan packets using <a href="https://man.openbsd.org/arp.8">arp(8)</a>.
<li>Permit turning Wake on Lan support on/off using <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.
<li>Added Wake on Lan support to <a href="https://man.openbsd.org/xl.4">xl(4)</a>, <a href="https://man.openbsd.org/re.4">re(4)</a>, and <a href="https://man.openbsd.org/vr.4">vr(4)</a>.
<li>Allow <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a> to proxy across rdomains.
<li>The IPv4 stack will no longer accept ICMP redirects when
acting as a router.
<li>By default the IPv6 stack will not process ICMP6 redirects.
<a href="https://man.openbsd.org/rtsol.8">rtsol(8)</a> will turn it back if -F is used.
<li>Reworked large parts of the <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> options processing for better
interoperability.
<li>Fixed <a href="https://man.openbsd.org/carp.4">carp(4)</a> to work in IPv6 only setups.
<li>Make it possible to <a href="https://man.openbsd.org/bind.2">bind(2)</a> to the local network broadcast address
on datagram and raw sockets.
<li>The default multicast reject route is now ignored if the UDP socket
uses the IP_MULTICAST_IF socket option.
<li>Make <a href="https://man.openbsd.org/gre.4">gre(4)</a> work between systems in the same LAN.
<li>Removed the link1 mode special addressing mode on <a href="https://man.openbsd.org/lo.4">lo(4)</a>.
<li>Kernel randomization speed and quality improved substantially.
</ul>
<p>
<li>Routing daemons and other userland network improvements:
<ul>
<li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> no longer bumps the rlimits: the rc.d framework respects
login classes which is a much better solution.
<li>Correctly set the network filtersets on reload in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.
<li>The routing socket is now sending RTM_DESYNC messages if the
socketbuffer overflows.
<li>Allow <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> to send out LS updates and other messages
larger than the MTU.
<li>Fixed nexthop calculation in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> for directly connected P2P links.
<li>First bits to support opaque LSA in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>. Only basic redistribute
logic and LSDB handling for now.
<li>Creating new interfaces will no longer cause a fatal error in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.
<li><a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a> handles link-state changes better.
<li>Better loopback handling in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.
<li>No longer install extra multicast routes in <a href="https://man.openbsd.org/ripd.8">ripd(8)</a> and <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>.
<li>Make <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> work with <a href="https://man.openbsd.org/sosplice.9">sosplice(9)</a>.
<li>Enabled <a href="https://man.openbsd.org/sosplice.9">sosplice(9)</a> in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> for TCP.
<li>Added support for divert-to which provides some benefits over
rdr-to in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
<li>Fixed trap sending in <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.
<li>Make <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> compare minimum amount of bytes between what
was received and what was sent out.
<li>Make <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a> with type-of-service setted (-t) display
a message if the returned packet has a different tos type.
<li>Added the socket splicing fields of struct socket to netstat -vP output.
</ul>
<p>
<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> improvements:
<ul>
<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> reassemble IPv6 fragments. In the forward case, pf
refragments the packets with the same maximum size.
<li>Allow <a href="https://man.openbsd.org/pf.4">pf(4)</a> to filter on the rdomain a packet belongs to.
<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> allow userland proxies to establish cross rdomain
proxy sessions.
<li>Added IPv6 ACK prioritization in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.
<li>Change 'set skip on <...>' to work with interface groups.
<li><a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> supports IPv6 as network protocol.
<li>Switched <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a> over to divert-to instead of rdr-to.
<li><a href="https://man.openbsd.org/tftp-proxy.8">tftp-proxy(8)</a> uses 'divert-to' as well.
</ul>
<p>
<li>SCSI improvements:
<ul>
<li>most SCSI hardware drivers now use the new iopools infrastructure.
<li><a href="https://man.openbsd.org/sci.4">scsi(4)</a> devices are now all provided with a unique devid, which
is displayed during the probe process.
<li>ASC/ASCQ error codes and verbiage now in sync with
http://www.t10.org/lists/asc-num.txt.
<li>progress on iSCSI includes better login, better logout, preliminary
FSM support in <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a>, and improved logging and debug information.
<li><a href="https://man.openbsd.org/uk.4">uk(4)</a> can now safely and reliably detach an unknown SCSI device.
<li><a href="https://man.openbsd.org/mpath.4">mpath(4)</a> device and kernel support is improved.
<li><a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> now ensures output always goes to the correct connection.
<li><a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> connections can now be reset gracefully.
<li><a href="https://man.openbsd.org/scsi.4">scsi(4)</a> devices on fibre channel fabrics no longer inherit the adapter's
address.
</ul>
<p>
<li>Assorted improvements:
<ul>
<li>For additional security, <a href="https://man.openbsd.org/security.8">security(8)</a> was rewritten in Perl.
<li>Mandoc 1.11.4: Now accepts <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> input (no fancy formatting yet)
and supports -Tutf8 output (but no utf8 input yet).
<li>Removed a variety of OS-compat emulation code, leaving just the Linux
support.
<li>Small improvements to Linux compat (only available on i386).
<li>Improved our own <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a> implementation with extended comparison
scheme and implementing various new options.
<li>The math library, libm, was fully fleshed out to support all C99 required
parts. Many bugs for various architectures were fixed along the way.
<li><a href="https://man.openbsd.org/malloc.3">malloc(3)</a> is a lot faster and has a few further security features (more
randomization, as well as the 'S' flag to enable all paranoia checks).
<li>'make depend' is no longer necessary in kernel compilation directories
since the dependencies are calculated automatically.
<li>Increased the default size of the buffer cache.
<li><a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> now works on /dev/random and spliced sockets
<li>On MBR-based disks, scan through up to 256 extended partition tables
when looking for an OpenBSD partition table.
<li>Added POSIX 2008 <a href="https://man.openbsd.org/fdopendir.3">fdopendir(3)</a> and <a href="https://man.openbsd.org/opennat.2">openat(2)</a> functions, as well as the
O_CLOEXEC, O_DIRECTORY, and F_DUPFD_CLOEXEC flags.
<li>Improved lint format string checks and added a few other checks.
<li><a href="https://man.openbsd.org/kdump.1">kdump(1)</a> now dumps stat and sockaddr structures, sysctl mib
strings, and decodes syscall flags and operation bits.
<li>Improved kernel pool debug checking.
<li>Improved correctness of signals and various syscalls when rthreads
are in use.
<li>Kernel <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> space and stacks moved to non-dma memory.
<li>Fixed some shutdown/reboot hangs on NFS clients.
<li>UNIX-domain socket paths are now guaranteed to be NUL-terminated.
<li>Added support for <a href="https://man.openbsd.org/wprintf.3">*wprintf(3)</a>, <a href="https://man.openbsd.org/wcscasecmp.3">wcs{,n}casecmp(3)</a>, and <a href="https://man.openbsd.org/wcsdup.3">wcsdup(3)</a>.
<li>NULL is now a (void *).
</ul>
<p>
<li>Install/Upgrade process changes:
<ul>
<li>Completed support for DUID disk installs, and enabled it fully.
<li>Tried to make <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> work in the installer, but ran into small
problems and decided to disable it.
<li>Install non-free firmwares from the internet upon first boot, based on a
question in the installer.
<li><a href="https://man.openbsd.org/svnd.4">svnd(4)</a>-like behaviour became the default for <a href="https://man.openbsd.org/vnd.4">vnd(4)</a> devices. This is
what is used to build the media.
</ul>
<p>
<li><a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> framework improvements:
<ul>
<li><a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> is now also used for the base system daemons.
<li>Backward compatible with the historic way of starting daemons.
<li>Notify the user by appending (ok) or (failed) in interactive mode.
<li>Better diagnostics with the introduction of RC_DEBUG.
</ul>
<p>
<li>OpenSSH 5.9:
<ul>
<li>New features:
<ul>
<li>Introduce sandboxing of the pre-auth privsep child using an optional
<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
"UsePrivilegeSeparation=sandbox" mode that enables mandatory
restrictions on the syscalls the privsep child can perform.
<li>Add new SHA256-based HMAC transport integrity modes from
https://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt
These modes are hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512,
and hmac-sha2-512-96, and are available by default in
<a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
and
<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.
<li>The pre-authentication
<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>
privilege separation slave process now logs via a socket shared with
the master process, avoiding the need to maintain /dev/log inside the
chroot.
<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
now warns when a server refuses X11 forwarding.
<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>'s
AuthorizedKeysFile now accepts multiple paths, separated by whitespace.
The undocumented AuthorizedKeysFile2 option is deprecated (though the
default for AuthorizedKeysFile includes .ssh/authorized_keys2).
<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>:
similarly deprecate UserKnownHostsFile2 and GlobalKnownHostsFile2 by
making UserKnownHostsFile and GlobalKnownHostsFile accept multiple
options and default to include known_hosts2.
<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>'s
ControlPath option now expands %L to the host portion of the
destination host name.
<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>
"Host" options now support negated Host matching.
<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>:
a new RequestTTY option provides control over when a TTY is requested
for a connection, similar to the existing -t/-tt/-T
<a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
commandline options.
<li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:
Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) for
which host keys do not exist, generate the host keys with the default
key file path, an empty passphrase, default bits for the key type, and
default comment. This is useful for system initialisation scripts.
<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
Allow graceful shutdown of multiplexing: request that a mux server
removes its listener socket and refuse future multiplexing requests but
don't kill existing connections. This may be requested using
"ssh -O stop ...".
<li><a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a>:
now accepts keys piped from standard input.
</ul>
<li>The following significant bugs have been fixed in this release:
<ul>
<li>Retain key comments when loading v.2 keys. These will be visible in
"ssh-add -l" and other places. (bz#439)
<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>
and
<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
set IPv6 traffic class from IPQoS (as well as IPv4 ToS/DSCP). (bz#1855)
<li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:
allow GSSAPI authentication to detect when a server-side failure causes
authentication failure and don't count such failures against
MaxAuthTries. (bz#1244)
<li><a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a>:
now signs hostbased authentication challenges correctly using ECDSA
keys. (bz#1858)
<li><a href="https://man.openbsd.org/sftp.1">sftp(1)</a>:
document that sftp accepts square brackets to delimit addresses
(useful for IPv6). (bz#1847a)
<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:
when using session multiplexing, the master process will change its
process title to reflect the control path in use and when a
ControlPersist-ed master is waiting to close. (bz#1883 and bz#1911)
<li>Other minor bugs fixed: bz#1849, bz#1861, bz#1862, bz#1869, bz#1875,
bz#1878, bz#1879, bz#1892, bz#1900, bz#1905, and bz#1913.
</ul>
</ul>
<p>
<li>Over 7,200 ports, major robustness and speed improvements in package tools.
<li>Many pre-built packages for each architecture:
<ul style="column-count: 4">
<li>i386: 7008
<li>sparc64: 6456
<li>alpha: 6046
<li>sh: 3721
<li>amd64: 6960
<li>powerpc: 6691
<li>sparc: 3277
<li>arm: 2963
<li>hppa: 6125
<li>vax: 1409
<li>mips64: 5689
<li>mips64el: 5709
</ul>
<p>
<li>Some highlights:
<ul>
<li>Gnome 2.32.2 <li>KDE 3.5.10
<li>Xfce 4.8.0 <li>MySQL 5.1.54
<li>PostgreSQL 9.0.5 <li>Postfix 2.8.4
<li>OpenLDAP 2.3.43 and 2.4.25 <li>Mozilla Firefox 3.5.19, 3.6.18 and 5.0
<li>Mozilla Thunderbird 5.0 <li>GHC 7.0.4
<li>LibreOffice 3.4.1.3 <li>Emacs 21.4, 22.3 and 23.3
<li>Vim 7.3.154 <li>PHP 5.2.17 and 5.3.6
<li>Python 2.4.6, 2.5.4 and 2.7.1 <li>Ruby 1.8.7.352 and 1.9.2.200
<li>Tcl 8.5.9 <li>Jdk 1.7
<li>Mono 2.10.2 <li>Chromium 12.0.742.122
<li>Groff 1.21
</ul>
<p>
<li>As usual, steady improvements in manual pages and other documentation.
<li>Base system and Xenocara manuals are now installed as source code,
making <a href="https://man.openbsd.org/grep.1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.
<li>If both formatted and source versions of manuals are installed,
<a href="https://man.openbsd.org/man.1">man(1)</a> automatically displays the newer version of each page.
<li>The system includes the following major components from outside suppliers:
<ul>
<li>Xenocara (based on X.Org 7.6 with xserver 1.9 + patches,
freetype 2.4.5, fontconfig 2.8.0, Mesa 7.8.2, xterm 270,
xkeyboard-config 2.3 and more)
<li>Gcc 2.95.3 (+ patches), 3.3.5 (+ patches) and 4.2.1 (+patches)
<li>Perl 5.12.2 (+ patches)
<li>Our improved and secured version of Apache 1.3, with
SSL/TLS and DSO support
<li>OpenSSL 1.0.0a (+ patches)
<li>Sendmail 8.14.5, with libmilter
<li>Bind 9.4.2-P2 (+ patches)
<li>Lynx 2.8.7rel.2 with HTTPS and IPv6 support (+ patches)
<li>Sudo 1.7.2p8
<li>Ncurses 5.7
<li>Heimdal 0.7.2 (+ patches)
<li>Arla 0.35.7
<li>Binutils 2.15 (+ patches)
<li>Gdb 6.3 (+ patches)
</ul>
</ul>
</section>
<hr>
<section id=install>
<h3>How to install</h3>
<p>
Following this are the instructions which you would have on a piece of
paper if you had purchased a CDROM set instead of doing an alternate
form of install. The instructions for doing an FTP (or other style
of) install are very similar; the CDROM instructions are left intact
so that you can see how much easier it would have been if you had
purchased a CDROM instead.
<p>
<hr>
Please refer to the following files on the three CDROMs or FTP mirror for
extensive details on how to install OpenBSD 5.0 on your machine:
<p>
<ul>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/i386/INSTALL.i386">
.../OpenBSD/5.0/i386/INSTALL.i386 (on CD1)</a>
<p>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/amd64/INSTALL.amd64">
.../OpenBSD/5.0/amd64/INSTALL.amd64 (on CD2)</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/macppc/INSTALL.macppc">
.../OpenBSD/5.0/macppc/INSTALL.macppc (on CD2)</a>
<p>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/sparc64/INSTALL.sparc64">
.../OpenBSD/5.0/sparc64/INSTALL.sparc64 (on CD3)</a>
<p>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/alpha/INSTALL.alpha">
.../OpenBSD/5.0/alpha/INSTALL.alpha</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/armish/INSTALL.armish">
.../OpenBSD/5.0/armish/INSTALL.armish</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/hp300/INSTALL.hp300">
.../OpenBSD/5.0/hp300/INSTALL.hp300</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/hppa/INSTALL.hppa">
.../OpenBSD/5.0/hppa/INSTALL.hppa</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/landisk/INSTALL.landisk">
.../OpenBSD/5.0/landisk/INSTALL.landisk</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/loongson/INSTALL.loongson">
.../OpenBSD/5.0/loongson/INSTALL.loongson</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/mvme68k/INSTALL.mvme68k">
.../OpenBSD/5.0/mvme68k/INSTALL.mvme68k</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/mvme88k/INSTALL.mvme88k">
.../OpenBSD/5.0/mvme88k/INSTALL.mvme88k</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/sgi/INSTALL.sgi">
.../OpenBSD/5.0/sgi/INSTALL.sgi</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/socppc/INSTALL.socppc">
.../OpenBSD/5.0/socppc/INSTALL.socppc</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/sparc/INSTALL.sparc">
.../OpenBSD/5.0/sparc/INSTALL.sparc</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/vax/INSTALL.vax">
.../OpenBSD/5.0/vax/INSTALL.vax</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/5.0/zaurus/INSTALL.zaurus">
.../OpenBSD/5.0/zaurus/INSTALL.zaurus</a>
</ul>
</section>
<hr>
<section id=quickinstall>
<p>
Quick installer information for people familiar with OpenBSD, and the
use of the "disklabel -E" command. If you are at all confused when
installing OpenBSD, read the relevant INSTALL.* file as listed above!
<h3>OpenBSD/i386:</h3>
<p>
Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
release is on CD1. If your BIOS does not support booting from CD, you will need
to create a boot floppy to install from. To create a boot floppy write
<i>CD1:5.0/i386/floppy50.fs</i> to a floppy and boot via the floppy drive.
<p>
Use <i>CD1:5.0/i386/floppyB50.fs</i> instead for greater SCSI controller
support, or <i>CD1:5.0/i386/floppyC50.fs</i> for better laptop support.
<p>
If you can't boot from a CD or a floppy disk,
you can install across the network using PXE as described in
the included INSTALL.i386 document.
<p>
If you are planning on dual booting OpenBSD with another OS, you will need to
read INSTALL.i386.
<p>
To make a boot floppy under MS-DOS, use the "rawrite" utility located
at <i>CD1:5.0/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,
use the
<a href="https://man.openbsd.org/dd.1">dd(1)</a>
utility. The following is an example usage of
<a href="https://man.openbsd.org/dd.1">dd(1)</a>,
where the device could be "floppy", "rfd0c", or
"rfd0a".
<blockquote><pre>
# <kbd>dd if=<file> of=/dev/<device> bs=32k</kbd>
</pre></blockquote>
<p>
Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or
your install will most likely fail. For more information on creating a boot
floppy and installing OpenBSD/i386 please refer to
<a href="faq/faq4.html#MkFlop">this page</a>.
<h3>OpenBSD/amd64:</h3>
<p>
The 5.0 release of OpenBSD/amd64 is located on CD2.
Boot from the CD to begin the install - you may need to adjust
your BIOS options first.
If you can't boot from the CD, you can create a boot floppy to install from.
To do this, write <i>CD2:5.0/amd64/floppy50.fs</i> to a floppy, then
boot from the floppy drive.
<p>
If you can't boot from a CD or a floppy disk,
you can install across the network using PXE as described in the included
INSTALL.amd64 document.
<p>
If you are planning to dual boot OpenBSD with another OS, you will need to
read INSTALL.amd64.
<h3>OpenBSD/macppc:</h3>
<p>
Put CD2 in your CDROM drive and poweron your machine while holding down the
<i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
<p>
Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
/5.0/macppc/bsd.rd</i>
<h3>OpenBSD/sparc64:</h3>
<p>
Put CD3 in your CDROM drive and type <i>boot cdrom</i>.
<p>
If this doesn't work, or if you don't have a CDROM drive, you can write
<i>CD3:5.0/sparc64/floppy50.fs</i> or <i>CD3:5.0/sparc64/floppyB50.fs</i>
(depending on your machine) to a floppy and boot it with <i>boot
floppy</i>. Refer to INSTALL.sparc64 for details.
<p>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<p>
You can also write <i>CD3:5.0/sparc64/miniroot50.fs</i> to the swap partition on
the disk and boot with <i>boot disk:b</i>.
<p>
If nothing works, you can boot over the network as described in INSTALL.sparc64.
<h3>OpenBSD/alpha:</h3>
<p>
<p>Write <i>5.0/alpha/floppy50.fs</i> or
<i>5.0/alpha/floppyB50.fs</i> (depending on your machine) to a diskette and
enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
<p>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<h3>OpenBSD/armish:</h3>
<p>
After connecting a serial port, Thecus can boot directly from the network
either tftp or http. Configure the network using fconfig, reset,
then load bsd.rd, see INSTALL.armish for specific details.
IOData HDL-G can only boot from an EXT-2 partition. Boot into linux
and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)
then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.
More details are available in INSTALL.armish.
<h3>OpenBSD/hp300:</h3>
<p>
Boot over the network by following the instructions in INSTALL.hp300.
<h3>OpenBSD/hppa:</h3>
<p>
Boot over the network by following the instructions in INSTALL.hppa or the
<a href="hppa.html#install">hppa platform page</a>.
<h3>OpenBSD/landisk:</h3>
<p>
Write <i>miniroot50.fs</i> to the start of the CF
or disk, and boot normally.
<h3>OpenBSD/loongson:</h3>
<p>
Write <i>miniroot50.fs</i> to a USB stick and boot bsd.rd from it
or boot bsd.rd via tftp.
Refer to the instructions in INSTALL.loongson for more details.
<h3>OpenBSD/mvme68k:</h3>
<p>
You can create a bootable installation tape or boot over the network.<br>
The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
for more details.
<h3>OpenBSD/mvme88k:</h3>
<p>
You can create a bootable installation tape or boot over the network.<br>
The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k
for more details.
<h3>OpenBSD/sgi:</h3>
<p>
To install on an O2, burn cd50.iso on a CD-R, put it in the CD drive of your
machine and select <i>Install System Software</i> from the System Maintenance
menu.
<p>
On other systems, or if your machine doesn't have a CD drive, you can
setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd.IP##" using
the kernel matching your system type.
Refer to the instructions in INSTALL.sgi for more details.
<h3>OpenBSD/socppc:</h3>
<p>
After connecting a serial port, boot over the network via DHCP/tftp.
Refer to the instructions in INSTALL.socppc for more details.
<h3>OpenBSD/sparc:</h3>
<p>
Boot from one of the provided install ISO images, using one of the two
commands listed below, depending on the version of your ROM.
<blockquote><pre>
ok <kbd>boot cdrom 5.0/sparc/bsd.rd</kbd>
or
> <kbd>b sd(0,6,0)5.0/sparc/bsd.rd</kbd>
</pre></blockquote>
<p>
If your SPARC system does not have a CD drive, you can alternatively boot from floppy.
To do so you need to write <i>floppy50.fs</i> to a floppy.
For more information see <a href="faq/faq4.html#MkFlop">this page</a>.
To boot from the floppy use one of the two commands listed below,
depending on the version of your ROM.
<blockquote><pre>
ok <kbd>boot floppy</kbd>
or
> <kbd>b fd()</kbd>
</pre></blockquote>
<p>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<p>
If your SPARC system doesn't have a floppy drive nor a CD drive, you can either
setup a bootable tape, or install via network, as told in the
INSTALL.sparc file.
<h3>OpenBSD/vax:</h3>
<p>
Boot over the network via mopbooting as described in INSTALL.vax.
<h3>OpenBSD/zaurus:</h3>
<p>
Using the Linux built-in graphical ipkg installer, install the
openbsd50_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus
for a few important details.
</section>
<hr>
<section id=sourcecode>
<h3>Notes about the source code</h3>
<p>
<code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
This file contains everything you need except for the kernel sources, which are
in a separate archive. To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/src.tar.gz</kbd>
</pre></blockquote>
<p>
<code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
This file contains all the kernel sources you need to rebuild kernels.
To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src/sys</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
</pre></blockquote>
<p>
Both of these trees are a regular CVS checkout. Using these trees it
is possible to get a head-start on using the anoncvs servers as
described <a href="anoncvs.html">here</a>.
Using these files
results in a much faster initial CVS update than you could expect from
a fresh checkout of the full OpenBSD source tree.
</section>
<hr>
<section id=upgrade>
<h3>How to upgrade</h3>
<p>
If you already have an OpenBSD 4.9 system, and do not want to reinstall,
upgrade instructions and advice can be found in the
<a href="faq/upgrade50.html">Upgrade Guide</a>.
</section>
<hr>
<section id=ports>
<h3>Ports Tree</h3>
<p>
A ports tree archive is also provided. To extract:
<blockquote><pre>
# <kbd>cd /usr</kbd>
# <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
</pre></blockquote>
<p>
The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
read the <a href="faq/ports/index.html">ports</a> page
if you know nothing about ports
at this point. This text is not a manual of how to use ports.
Rather, it is a set of notes meant to kickstart the user on the
OpenBSD ports system.
<p>
The <i>ports/</i> directory represents a CVS (see the manpage for
<a href="https://man.openbsd.org/cvs.1">cvs(1)</a> if
you aren't familiar with CVS) checkout of our ports. As with our complete
source tree, our ports tree is available via anoncvs. So, in
order to keep current with it, you must make the <i>ports/</i> tree
available on a read-write medium and update the tree with a command
like:
<blockquote><pre>
# <kbd>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_0</kbd>
</pre></blockquote>
<p>
[Of course, you must replace the local directory and server name here
with the location of your ports collection and a nearby anoncvs
server.]
<p>
Note that most ports are available as packages on our mirrors. Updated
packages for the 5.0 release will be made available if problems arise.
<p>
If you're interested in seeing a port added, would like to help out, or just
would like to know more, the mailing list
<a href="mail.html">ports@openbsd.org</a> is a good place to know.
</section>