Stories
Slash Boxes
Comments
typodupeerror delete not in

Comments: 178 +-   OpenBSD 4.6 Released on Sunday October 18, @07:33PM

Posted by kdawson on Sunday October 18, @07:33PM
from the onward-and-upward dept.
upgrades
bsd
pgilman writes "The release of OpenBSD 4.6 was announced today. Highlights of the new release include a new privilege-separated smtpd; numerous improvements to packet filtering, software RAID, routing daemons, and the TCP stack; a new installer; and lots more. Grab a CD set or download from a mirror, and please support the project (which also brings you OpenSSH and lots of other great free software) if you can."
story

Related Stories

This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by wb8wsf (106309) on Sunday October 18, @07:38PM (#29788387)

    OpenBSD is 14 as of today.

    Today would be a great day for even a little gift. ;-)

  • by Anonymous Coward

    I just want to give a huge Thanks to Theo and the rest of the OpenBSD developers. They're doing a fantastic job. I'll order my CD soon.

  • Doing what others only dream... a scheduled release, early!

  • Where's the song [openbsd.org]? There was supposed to be an earth-shattering song!
  • Anyone know of the preformace? Been using mdadm for a while and been liking it.
    • Now if mdadm only had the ease use gmirror/geom does in freebsd, then it might be more widely adopted.

      mdadm is a perfectly functional package, but it's setup is quite awkward. gmirror however is a breeze to setup, and it's performance kicks the crap out of most hardware controllers I've tried(admittedly few). I imagine OpenBSD implementation is also a good performer as software raid. This states a 30% speedup for certain cases. http://www.openbsd.org/plus.html [openbsd.org]

  • by Mr.Ned (79679) on Sunday October 18, @11:49PM (#29790137)

    When I looked at the release notes sent out by email, I saw this under "New functionality":

    "httpd(8) can now serve files larger than 2GB in size."

    I'm very surprised by this.

  • by fadir (522518) on Monday October 19, @01:18AM (#29790717)

    Rock solid, thought through and very conservative.

    They have their niche and do their best to serve it as good as they can. I'm very glad that this project exists even though I don't use OpenBSD but various of its offsprings (OpenSSH/SSL, etc.) only.
    Theo is a very controversial person but at least he keeps the project on focus and going. Congratulations for that and best of luck for the future.
    I don't see myself using OpenBSD anytime soon but I know a few people that do and they are happy with it. So keep going, the community needs you!

  • FreeBSD is already at 7.2! No way they can catch up now, unless they pull a Windows.
  • Apparently, softraid is also included in the GENERIC kernel. This means that, unlike with the old RAIDframe, you don't have to compile your own kernel before you can use it.

  • Can someone recommend a good platform on which to run OpenBSD which will consume the lowest possible power and let me run a Wireless-G and a Wireless-N NIC in master mode at the same time? I also need 100baseT[x]. Ideally it would run from fairly broad DC power (8-18VDC). I want to spend minimal money :) So far in the running are PC Engines, Mikrotik, and Soekris, in my current order of preference from most to least. I'm willing to have my mind changed, though. SD, USB, or CF storage, I don't care.

    • Re:Soft RAID? (Score:5, Informative)

      by rivaldufus (634820) on Sunday October 18, @07:58PM (#29788491)
      OpenBSD has had the RAIDframe driver for a long time. This releases is adding some sort of RAID 4 and 5 implementation.
      • Aye, just notice the use of semicolons and commas in the sentence :-)

        Becomes:

        Numerous improvements to: (packet filtering, software RAID, routing daemons, and the TCP stack);

        (but yes I did read it for a moment as saying that one of the new things was a TCP stack!)

        • It's true, but the OpenBSD FAQ only lists RAIDFRAME and not softraid. I suspect that will change in a release or two.
    • Re: (Score:3, Insightful)

      Most distros have at least one or two really good mirrors nearby. Maybe when they don't offer a 4GB file (their install.iso file is 200MB) they don't see the need.

      • Even a 200MB iso would benefit from bittorrent.

        • Re: (Score:2, Informative)

          Except if you're following installation directions (and for some reason not using bsd.rd, etc, to install), you would be downloading the 6MB cd64.iso, not the 200MB install46.iso. http://www.openbsd.org/faq/faq3.html#ISO [openbsd.org]
            • Re: (Score:2, Informative)

              For those that need a bootable CD for their system, bootdisk ISO images (named cd46.iso) are available for a number of platforms [...]. ...
            • Funny that just says that the iso files available are not official. I do not see where it says that the 6MB network installer is more official than the 200 MB installer with all of the file sets on it.

              I am guessing that statement is just outdated since at one point in time some or all of the .iso files they release now were not available in the past and other people made and distributed unofficial ones.

      • Re: (Score:3, Insightful)

        Maybe when they don't offer a 4GB file (their install.iso file is 200MB) they don't see the need.

        Every openbsd installer I have ever downloaded has been 10MB...

    • NetBSD has torrents as well. About as year ago I wanted an AMD64 iso to I got the torrent but it turned into a straight download so I may as well not have bothered. I wonder if the actual demand for openbsd is enough to justify the effort.

    • http://openbsd.somedomain.net/index.php?version=latest+release [somedomain.net]

      List of all their torrents, by architecture and type. Search for the text "install" to find the binary install images (rather than source code or package bundles).

        • The 200MB iso is meant primarily for installing on networkless or low speed connections so the packages are already available. A comparison would be a linux network install cd/floppy vs the live cd/cd with packages on it.

    • Re: (Score:3, Informative)

      ah, that's super easy, have you ever even tried to read the docs? If 10.0.0.1 is a gateway that people are nat'd behind, something like block in from 10.0.0.1 to 192.168.0.0/24 in pf.conf, done. pfctl -n -f /etc/pf.conf to check that the grammar is correct, and pfctl -F rules -f /etc/pf.conf to reload the rules. If you mean you need to set up the openbsd box to *do* nating it's still pretty simple. All it takes is a quick look at the PF documentation.
    • "floor" is one of those functions... ugh.

      Depending on what language/program/whatever you're using, it'll either round towards -inf (as apparently they've patched this one to do), or towards 0. The mathematical definition of the term "floor" is -inf, so I guess this change makes it "more correct." But God help you if you have a program that relied on the previous behavior.

      • Re: (Score:2, Informative)

        But God help you if you have a program that relied on the previous behavior.

        Well, IIUC, that would just entail converting all floors on negative numbers to ceils:

        double floorToZero (double n)
        {
                return (n < 0) ? ceil(n) : floor(n);
        }

    • by Spit (23158) on Monday October 19, @02:10AM (#29790971)

      OpenBSD's focus is preventing the exploits in the first place with many overflow vulnerabities in third-party software being non-exploitable on OpenBSD. After running it for 10 years, I trust OpenBSD's record. It has some of the best in the business probing it, and with the most serious flaw in years being a subtle IP6 attack, I think that trust is well founded. If you were to prove otherwise, I'm sure you would instantly be a big name in security.

      Although sound design, role security is added complexity which increases scope for vulnerabilities. From coding errors to implementation errors, complexity breeds insecurity. They also create a false sense of security: having implemented RBAC on Solaris I was initially impressed until I realized one could bypass it with suid bombs.

      OpenBSD's simple design and sound default permissions mean that even with a local account, it is very difficult to gain root access. The base system is comprehensive so usually there's little reason to go to ports to implement OpenBSD in its perimiter focused role.

      You would do well to back up your claim that OpenBSD is snake-oil.

    • Re: (Score:3, Informative)

      Well, I beg to differ (what else ;-)

      OpenBSD does help you, when something goes wrong:
      like for example with immuteable files, or append only files, so no one can delete your logfiles! At least you have the chance to look at what the "bad guys" did. Indeed a very fine feature for a logserver, isn't it?
      Or OpenBSD secure modes?
      Plus, you can put your WEB-Server in a jail, so *IF* someone breaks into your WEB-Server, well, the whole system is still NOT compromised.
      Jails work very well! Maybe even better the the c

    • Re: (Score:3, Interesting)

      Comparing the latest OpenBSD to the Ubuntu Server, what are the security advantages of OpenBSD that would warrant it's usage over Ubuntu Server?

      A far more secure kernel. User-land wise, there is a lot of manual configuration to get things right which Ubuntu just does out of the box.

      Ubuntu Server home page boasts quite a lot of security features and I presume it's faster than OpenBSD as well.

      OpenBSD is certainly faster on a single core system on a dual core system the difference is not as apparent unless run

Perhaps they will have to outlaw sending random lists of words. fee fie foe foo [sic] -- Larry Wall in <199710311916.LAA19760@wall.org>