Misplaced Pages

OpenBSD

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.

This is an old revision of this page, as edited by 2001:4453:75b:ff00:40a8:2cb1:8e74:5b7 (talk) at 06:50, 14 May 2024 (NO MORE STOP OPERATION!). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Revision as of 06:50, 14 May 2024 by 2001:4453:75b:ff00:40a8:2cb1:8e74:5b7 (talk) (NO MORE STOP OPERATION!)(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff) Operating system Not to be confused with FreeBSD.

Operating system
OpenBSD
Puffy, the pufferfish mascot of OpenBSD posing in the official logo.Free, Functional, and Secure
OpenBSD 7.0 default desktop with various utilities: top, xterm, xcalc, and glxgears
DeveloperTheo de Raadt et al.
Written inC, assembly, Perl, Unix shell
OS familyUnix-like (BSD)
Working stateCurrent
Source modelOpen source
Initial releaseJuly 1996; 28 years ago (1996-07)
Latest release7.6 (8 October 2024; 2 months ago (2024-10-08)) [±]
Repository
Package managerOpenBSD package tools
PlatformsAlpha, x86-64, ARMv7, ARMv8 (64-bit), PA-RISC, IA-32, LANDISK, Loongson, Omron LUNA-88K, MIPS64, macppc, PowerPC, 64-bit RISC-V, SPARC64
Kernel typeMonolithic
UserlandBSD
Default
user interface		Modified pdksh, X11 (FVWM)
LicenseBSD, ISC, other permissive licenses
Official websitewww.openbsd.org

OpenBSD is a security-focused, free and open-source, Unix-like operating system based on the Berkeley Software Distribution (BSD). Theo de Raadt created OpenBSD in 1995 by forking NetBSD 1.0. The OpenBSD project emphasizes portability, standardization, correctness, proactive security, and integrated cryptography.

The OpenBSD project maintains portable versions of many subsystems as packages for other operating systems. Because of the project's preferred BSD license, which allows binary redistributions without the source code, many components are reused in proprietary and corporate-sponsored software projects. The firewall code in Apple's macOS is based on OpenBSD's PF firewall code, Android's Bionic C standard library is based on OpenBSD code, LLVM uses OpenBSD's regular expression library, and Windows 10 uses OpenSSH (OpenBSD Secure Shell) with LibreSSL.

The word "open" in the name OpenBSD refers to the availability of the operating system source code on the Internet, although the word "open" in the name OpenSSH means "OpenBSD". It also refers to the wide range of hardware platforms the system supports. OpenBSD supports a variety of system architectures including x86-64, IA-32, ARM, PowerPC, and 64-bit RISC-V.

NO MORE STOP OPERATION!

Development

OpenBSD developers at c2k1 hackathon at MIT, June 2001
OpenBSD hackathon s2k17

Development is continuous, and team management is open and tiered. Anyone with appropriate skills may contribute, with commit rights being awarded on merit and De Raadt acting as coordinator. Two official releases are made per year, with the version number incremented by 0.1, and these are each supported for twelve months (two release cycles). Snapshot releases are also available at frequent intervals.

Maintenance patches for supported releases may be applied using syspatch, manually or by updating the system against the patch branch of the CVS source repository for that release. Alternatively, a system administrator may opt to upgrade to the next snapshot release using sysupgrade, or by using the -current branch of the CVS repository, in order to gain pre-release access to recently added features. The sysupgrade tool can also upgrade to the latest stable release version.

The generic OpenBSD kernel provided by default is strongly recommended for end users, in contrast to operating systems that recommend user kernel customization.

Packages outside the base system are maintained by CVS through a ports tree and are the responsibility of the individual maintainers, known as porters. As well as keeping the current branch up to date, porters are expected to apply appropriate bug-fixes and maintenance fixes to branches of their package for OpenBSD's supported releases. Ports are generally not subject to the same continuous auditing as the base system due to lack of manpower.

Binary packages are built centrally from the ports tree for each architecture. This process is applied for the current version, for each supported release, and for each snapshot. Administrators are recommended to use the package mechanism rather than build the package from the ports tree, unless they need to perform their own source changes.

OpenBSD's developers regularly meet at special events called hackathons, where they "sit down and code", emphasizing productivity.

Most new releases include a song.

Open source and open documentation

OpenBSD is known for its high-quality documentation.

When OpenBSD was created, De Raadt decided that the source code should be available for anyone to read. At the time, a small team of developers generally had access to a project's source code. Chuck Cranor and De Raadt concluded this practice was "counter to the open source philosophy" and inconvenient to potential contributors. Together, Cranor and De Raadt set up the first public, anonymous revision control system server. De Raadt's decision allowed users to "take a more active role", and established the project's commitment to open access. OpenBSD is notable for its continued use of CVS (more precisely an unreleased, OpenBSD-managed fork named OpenCVS), when most other projects that used it have migrated to other systems.

OpenBSD does not include closed source binary drivers in the source tree, nor do they include code requiring the signing of non-disclosure agreements. According to the GNU Project, OpenBSD includes small "blobs" of proprietary object code as device firmware.

Since OpenBSD is based in Canada, no United States export restrictions on cryptography apply, allowing the distribution to make full use of modern algorithms for encryption. For example, the swap space is divided into small sections and each section is encrypted with its own key, ensuring that sensitive data does not leak into an insecure part of the system.

OpenBSD randomizes various behaviors of applications, making them less predictable and thus more difficult to attack. For example, PIDs are created and associated randomly to processes; the bind system call uses random port numbers; files are created with random inode numbers; and IP datagrams have random identifiers. This approach also helps expose bugs in the kernel and in user space programs.

The OpenBSD policy on openness extends to hardware documentation: in the slides for a December 2006 presentation, De Raadt explained that without it "developers often make mistakes writing drivers", and pointed out that "the rush is harder to achieve, and some developers just give up." He went on to say that vendor-supplied binary drivers are unacceptable for inclusion in OpenBSD, that they have "no trust of vendor binaries running in our kernel" and that there is "no way to fix ... when they break."

Licensing

See also: Comparison of free and open-source software licenses and Free software license

OpenBSD maintains a strict license policy, preferring the ISC license and other variants of the BSD license. The project attempts to "maintain the spirit of the original Berkeley Unix copyrights," which permitted a "relatively un-encumbered Unix source distribution." The widely used Apache License and GNU General Public License are considered overly restrictive.

In June 2001, triggered by concerns over Darren Reed's modification of IPFilter's license wording, a systematic license audit of the OpenBSD ports and source trees was undertaken. Code in more than a hundred files throughout the system was found to be unlicensed, ambiguously licensed or in use against the terms of the license. To ensure that all licenses were properly adhered to, an attempt was made to contact all the relevant copyright holders: some pieces of code were removed, many were replaced, and others, such as the multicast routing tools mrinfo and map-mbone, were relicensed so that OpenBSD could continue to use them. Also removed during this audit was all software produced by Daniel J. Bernstein. At the time, Bernstein requested that all modified versions of his code be approved by him prior to redistribution, a requirement to which OpenBSD developers were unwilling to devote time or effort.

Because of licensing concerns, the OpenBSD team has reimplemented software from scratch or adopted suitable existing software. For example, OpenBSD developers created the PF packet filter after unacceptable restrictions were imposed on IPFilter. PF first appeared in OpenBSD 3.0 and is now available in many other operating systems. OpenBSD developers have also replaced GPL-licensed tools (such as CVS and pkg-config) with permissively licensed equivalents.

Funding

Although the operating system and its portable components are used in commercial products, De Raadt says that little of the funding for the project comes from the industry: "traditionally all our funding has come from user donations and users buying our CDs (our other products don't really make us much money). Obviously, that has not been a lot of money."

For a two-year period in the early 2000s, the project received funding from DARPA, which "paid the salaries of 5 people to work completely full-time, bought about $30k in hardware, and paid for 3 hackathons", from the POSSE project.

In 2006, the OpenBSD project experienced financial difficulties. The Mozilla Foundation and GoDaddy are among the organizations that helped OpenBSD to survive. However, De Raadt expressed concern about the asymmetry of funding: "I think that contributions should have come first from the vendors, secondly from the corporate users, and thirdly from individual users. But the response has been almost entirely the opposite, with almost a 15-to-1 dollar ratio in favor of the little people. Thanks a lot, little people!"

On 14 January 2014, Bob Beck issued a request for funding to cover electrical costs. If sustainable funding was not found, Beck suggested the OpenBSD project would shut down. The project soon received a US$20,000 donation from Mircea Popescu, the Romanian creator of the MPEx bitcoin stock exchange, paid in bitcoins. The project raised US$150,000 in response to the appeal, enabling it to pay its bills and securing its short-term future.

OpenBSD Foundation

OpenBSD Foundation
FormationJuly 25, 2007; 17 years ago (2007-07-25)
FounderOpenBSD developers
Legal statusNonprofit organization
Location
Websitewww.openbsdfoundation.org
ASN

The OpenBSD Foundation is a Canadian federal non-profit organization founded by the OpenBSD project as a "single point of contact for persons and organizations requiring a legal entity to deal with when they wish to support OpenBSD." It was announced to the public by OpenBSD developer Bob Beck on 25 July 2007. It also serves as a legal safeguard over other projects which are affiliated with OpenBSD, including OpenSSH, OpenBGPD, OpenNTPD, OpenCVS, OpenSMTPD and LibreSSL.

Since 2014, several large contributions to the OpenBSD Foundation have come from corporations such as Microsoft, Facebook, and Google as well as the Core Infrastructure Initiative.

In 2015, Microsoft became the foundation's first gold level contributor donating between $25,000-50,000 to support development of OpenSSH, which had been integrated into PowerShell in July, and later into Windows Server in 2018. Other contributors include Google, Facebook and DuckDuckGo.

During the 2016 and 2017 fundraising campaigns, Smartisan, a Chinese company, was the leading financial contributor to the OpenBSD Foundation.

Distribution

OpenBSD is freely available in various ways: the source can be retrieved by anonymous CVS, and binary releases and development snapshots can be downloaded by FTP, HTTP, and rsync. Prepackaged CD-ROM sets through version 6.0 can be ordered online for a small fee, complete with an assortment of stickers and a copy of the release's theme song. These, with their artwork and other bonuses, have been one of the project's few sources of income, funding hardware, Internet service, and other expenses. Beginning with version 6.1, CD-ROM sets are no longer released.

OpenBSD provides a package management system for easy installation and management of programs which are not part of the base operating system. Packages are binary files which are extracted, managed and removed using the package tools. On OpenBSD, the source of packages is the ports system, a collection of Makefiles and other infrastructure required to create packages. In OpenBSD, the ports and base operating system are developed and released together for each version: this means that the ports or packages released with, for example, 4.6 are not suitable for use with 4.5 and vice versa.

Songs and artwork

3D-rendered, animated OpenBSD mascot PuffyOpenBSD 2.3 cover

Initially, OpenBSD used a haloed version of the BSD daemon mascot drawn by Erick Green, who was asked by De Raadt to create the logo for the 2.3 and 2.4 versions of OpenBSD. Green planned to create a full daemon, including head and body, but only the head was completed in time for OpenBSD 2.3. The body as well as pitchfork and tail was completed for OpenBSD 2.4.

Subsequent releases used variations such as a police daemon by Ty Semaka, but eventually settled on a pufferfish named Puffy. Since then, Puffy has appeared on OpenBSD promotional material and featured in release songs and artwork.

The promotional material of early OpenBSD releases did not have a cohesive theme or design, but later the CD-ROMs, release songs, posters and tee-shirts for each release have been produced with a single style and theme, sometimes contributed to by Ty Semaka of the Plaid Tongued Devils. These have become a part of OpenBSD advocacy, with each release expounding a moral or political point important to the project, often through parody.

Themes have included Puff the Barbarian in OpenBSD 3.3, which included an 80s rock song and parody of Conan the Barbarian alluding to open documentation, The Wizard of OS in OpenBSD 3.7, related to the project's work on wireless drivers, and Hackers of the Lost RAID, a parody of Indiana Jones referencing the new RAID tools in OpenBSD 3.8.

Releases

The following table summarizes the version history of the OpenBSD operating system.

Legend: Old version, not maintained Old version, still maintained Current stable version Latest preview version Future release
Version Release date Supported until Significant changes
Old version, no longer maintained: 1.1 18 October 1995
  • OpenBSD CVS repository created by Theo de Raadt.
  • While the version number used at this stage was 1.1, OpenBSD 1.1 was not an official OpenBSD release in the sense which this term subsequently came to be used.
Old version, no longer maintained: 1.2 1 July 1996
  • Creation of the intro(9) man page, for documenting kernel internals.
  • Integration of the update(8) command into the kernel.
  • As before, while this version number was used in the early development of the OS, OpenBSD 1.2 was not an official release in the subsequently applicable sense.
Old version, no longer maintained: 2.0 1 October 1996
  • The first official release of OpenBSD, and also the point at which XFree86 first recognized OpenBSD as separate from NetBSD.
  • Initial integration of the FreeBSD ports system.
  • Replacement of gawk with the AT&T awk.
  • Integration of zlib.
  • Added sudo.
Old version, no longer maintained: 2.1 1 June 1997 Replacement of the older sh with pdksh.
Old version, no longer maintained: 2.2 1 December 1997 Addition of the afterboot(8) man page.
Old version, no longer maintained: 2.3 19 May 1998 Introduced the haloed daemon, or aureola beastie, in head-only form created by Erick Green.
Old version, no longer maintained: 2.4 1 December 1998 Featured the complete haloed daemon, with trident and a finished body.
Old version, no longer maintained: 2.5 19 May 1999 Introduced the Cop daemon image done by Ty Semaka.
Old version, no longer maintained: 2.6 1 December 1999 Based on the original SSH suite and developed further by the OpenBSD team, 2.6 saw the first release of OpenSSH, which is now available standard on most Unix-like operating systems and is the most widely used SSH suite.
Old version, no longer maintained: 2.7 15 June 2000 Support for SSH2 added to OpenSSH.
Old version, no longer maintained: 2.8 1 December 2000 isakmpd(8)
Old version, no longer maintained: 2.9 1 June 2001

Filesystem performance increases from softupdates and dirpref code.

Old version, no longer maintained: 3.0 1 December 2001

E-Railed (OpenBSD Mix), a techno track performed by the release mascot Puff Daddy, the famed rapper and political icon.

Old version, no longer maintained: 3.1 19 May 2002 Systemagic, where Puffy, the Kitten Slayer, battles evil script kitties. Inspired by the works of Rammstein and a parody of Buffy the Vampire Slayer.
  • First official remote security hole - OpenSSH integer overflow
Old version, no longer maintained: 3.2 1 November 2002 Goldflipper, a tale in which James Pond, agent 077, super spy and suave lady's man, deals with the dangers of a hostile internet. Styled after the orchestral introductory ballads of James Bond films.
Old version, no longer maintained: 3.3 1 May 2003

Puff the Barbarian, born in a tiny bowl; Puff was a slave, now he hacks through the C, searching for the Hammer. It is an 80s rock-style song and parody of Conan the Barbarian dealing with open documentation.

  • In 2003, code from ALTQ, which had a license disallowing the sale of derivatives, was relicensed, integrated into pf and made available in OpenBSD 3.3.
  • First release adding the W^X feature, a fine-grained memory permissions layout, ensuring that memory which can be written to by application programs can not be executable at the same time and vice versa.
Old version, no longer maintained: 3.4 1 November 2003

The Legend of Puffy Hood where Sir Puffy of Ramsay, a freedom fighter who, with Little Bob of Beckley, took from the rich and gave to all. Tells of the POSSE project's cancellation. An unusual blend of both hip-hop and medieval-style music, a parody of the tale of Robin Hood intended to express OpenBSD's attitude to free speech.

Old version, no longer maintained: 3.5 1 May 2004

CARP License and Redundancy must be free, where a fish seeking to license his free redundancy protocol, CARP, finds trouble with the red tape. A parody of the Fish License skit and Eric the Half-a-Bee Song by Monty Python, with an anti-software patents message.

  • CARP, an open alternative to the HSRP and VRRP redundancy systems available from commercial vendors.
  • GPL licensed parts of the GNU tool-set, bc, dc, nm and size, were all replaced with BSD licensed equivalents.
  • AMD64 platform becomes stable enough for release and is included for the first time as part of a release.
Old version, no longer maintained: 3.6 1 November 2004

Pond-erosa Puff (live) was the tale of Pond-erosa Puff, a no-guff freedom fighter from the wild west, set to hang a lickin' on no-good bureaucratic nerds who encumber software with needless words and restrictions. The song was styled after the works of Johnny Cash, a parody of the Spaghetti Western and Clint Eastwood and inspired by liberal license enforcement.

  • OpenNTPD, a compatible alternative to the reference NTP daemon, was developed within the OpenBSD project. The goal of OpenNTPD was not solely a compatible license. It also aims to be a simple, secure NTP implementation providing acceptable accuracy for most cases, without requiring detailed configuration.
  • Because of its questionable security record and doubts of developers for better future development, OpenBSD removed Ethereal from its ports tree prior to its 3.6 release.
  • Added support for IC master/slave devices
Old version, no longer maintained: 3.7 19 May 2005 The Wizard of OS, where Puffathy, a little Alberta girl, must work with Taiwan to save the day by getting unencumbered wireless. This release was styled after the works of Pink Floyd and a parody of The Wizard of Oz; this dealt with wireless hacking.
Old version, no longer maintained: 3.8 1 November 2005 1 November 2006 Hackers of the Lost RAID, which detailed the exploits of Puffiana Jones, famed hackologist and adventurer, seeking out the Lost RAID, Styled after the radio serials of the 1930s and 40s, this was a parody of Indiana Jones and was linked to the new RAID tools featured as part of this release. This is the first version released without the telnet daemon which was completely removed from the source tree by Theo de Raadt in May 2005.
Old version, no longer maintained: 3.9 1 May 2006 1 May 2007

Attack of the Binary BLOB, which chronicles the developer's fight against binary blobs and vendor lock-in, a parody of the 1958 film The Blob and the pop-rock music of the era.

  • Enhanced OpenBGPD feature-set.
  • Improved hardware sensors support, including a new IPMI subsystem and a new IC scan subsystem; number of drivers using the sensors framework increased to a total of 33 drivers (compared to 9 in the prior 3.8 release 6 months ago).
Old version, no longer maintained: 4.0 1 November 2006 1 November 2007 Humppa Negala, a Hava Nagilah parody with a portion of Entrance of the Gladiators and Humppa music fused together, with no story behind it, simply a homage to one of the OpenBSD developers' favorite genres of music.
  • Second official remote security hole - buffer overflow by malformed ICMPv6 packets
Old version, no longer maintained: 4.1 1 May 2007 1 May 2008 Puffy Baba and the 40 Vendors, a parody of the Arabic fable Ali Baba and the Forty Thieves, part of the book of One Thousand and One Nights, in which Linux developers are mocked over their allowance of non-disclosure agreements when developing software while at the same time implying hardware vendors are criminals for not releasing documentation required to make reliable device drivers.
  • Redesigned sysctl hw.sensors into a two-level sensor API; a total of 46 device drivers exporting sensors through the framework with this release.
Old version, no longer maintained: 4.2 1 November 2007 1 November 2008 100001 1010101, the Linux kernel developers gets a knock for violating the ISC-style license of OpenBSD's open hardware abstraction layer for Atheros wireless cards.
  • Usability of sensorsd improved, allowing zero-configuration monitoring of smart sensors from the hw.sensors framework (e.g., IPMI or bio(4)-based), and easier configuration for monitoring of non-smart sensors.
Old version, no longer maintained: 4.3 1 May 2008 1 May 2009 Home to Hypocrisy
Old version, no longer maintained: 4.4 1 November 2008 18 October 2009

Trial of the BSD Knights, summarizes the history of BSD including the USL v. BSDi lawsuit. The song was styled after the works of Star Wars.

Old version, no longer maintained: 4.5 1 May 2009 19 May 2010 Games. It was styled after the works of Tron.
  • The hw.sensors framework is used by 72 device drivers.
Old version, no longer maintained: 4.6 18 October 2009 1 November 2010 Planet of the Users. In the style of Planet of the Apes, Puffy travels in time to find a dumbed-down dystopia, where "one very rich man runs the earth with one multinational". Open-source software has since been replaced by one-button computers, one-channel televisions, and closed-source software which, after you purchase it, becomes obsolete before you have a chance to use it. People subsist on soylent green. The theme song is performed in the reggae rock style of The Police.
  • smtpd(8), privilege-separated SMTP server
  • tmux(1) terminal multiplexer
  • The hw.sensors framework is used by 75 device drivers.
Old version, no longer maintained: 4.7 19 May 2010 1 May 2011 I'm Still Here
Old version, no longer maintained: 4.8 1 November 2010 1 November 2011 El Puffiachi.
  • iked(8) IKEv2 daemon
  • ldapd(8) LDAP daemon
Old version, no longer maintained: 4.9 1 May 2011 1 May 2012 The Answer.
  • rc.d(8) daemon control
Old version, no longer maintained: 5.0 1 November 2011 1 November 2012 What Me Worry?.
Old version, no longer maintained: 5.1 1 May 2012 1 May 2014 Bug Busters. The song was styled after the works of Ghostbusters.
Old version, no longer maintained: 5.2 1 November 2012 1 November 2013 Aquarela do Linux.
Old version, no longer maintained: 5.3 1 May 2013 1 May 2014 Blade Swimmer. The song was styled after the works of Roy Lee, a parody of Blade Runner.
Old version, no longer maintained: 5.4 1 November 2013 1 November 2014 Our favorite hacks, a parody of My Favorite Things.
Old version, no longer maintained: 5.5 1 May 2014 1 May 2015 Wrap in Time.
  • signify(1) cryptographic signatures of release and packages
  • 64bit time_t on all platforms (Y2K38 ready)
Old version, no longer maintained: 5.6 1 November 2014 18 October 2015 Ride of the Valkyries.
Old version, no longer maintained: 5.7 1 May 2015 29 March 2016 Source Fish.
  • rcctl(8) utility to control daemons
  • nginx(8) removed from base
  • procfs has been removed
Old version, no longer maintained: 5.8 18 October 2015 1 September 2016 20 years ago today, Fanza, So much better, A Year in the Life.

(20th anniversary release)

  • doas(1) replacement of sudo
Old version, no longer maintained: 5.9 29 March 2016 11 April 2017 Doctor W^X, Systemagic (Anniversary Edition).
  • W^X enforced in i386 kernel
  • pledge(2) process restriction
Old version, no longer maintained: 6.0 1 September 2016 9 October 2017 Another Smash of the Stack, Black Hat, Money, Comfortably Dumb (the misc song), Mother, Goodbye and Wish you were Secure, Release songs parodies of Pink Floyd's The Wall, Comfortably Numb and Wish You Were Here.
  • vmm(4) virtualization (disabled by default)
  • Removed vax and 32-bit SPARC support
Old version, no longer maintained: 6.1 11 April 2017 15 April 2018 Winter of 95, a parody of Summer of '69.
  • syspatch(8) utility for binary base system updates
  • new arm64 platform
Old version, no longer maintained: 6.2 9 October 2017 18 October 2018 A three-line diff
  • inteldrm(4) Skylake/Kaby Lake/Cherryview devices
  • clang(1) base system compiler on i386 and amd64 platforms
Old version, no longer maintained: 6.3 2 April 2018 3 May 2019
  • SMP is supported on arm64 platforms.
  • Several parts of the network stack now run without KERNEL_LOCK().
  • Multiple security improvements have been made, including Meltdown/Spectre (variant 2) mitigations. Intel CPU microcode is loaded on boot on amd64.
  • pledge() has been modified to support "execpromises" (as the second argument).
Old version, no longer maintained: 6.4 18 October 2018 17 October 2019
  • unveil(2) filesystem visibility restriction.
Old version, no longer maintained: 6.5 24 April 2019 19 May 2020
Old version, no longer maintained: 6.6 17 October 2019 18 October 2020
  • sysupgrade(8) automates upgrades to new releases or snapshots.
  • amdgpu(4) AMD RADEON GPU video driver.
Old version, no longer maintained: 6.7 19 May 2020 1 May 2021
  • Made ffs2 the default filesystem type on installs except for landisk, luna88k and sgi.
Old version, no longer maintained: 6.8 18 October 2020 14 October 2021
  • 25th anniversary release.
  • New powerpc64 platform.
Old version, no longer maintained: 6.9 1 May 2021 21 April 2022
  • 50th release.
Old version, no longer maintained: 7.0 14 October 2021 20 October 2022
  • 51st release.
  • New riscv64 platform.
Old version, no longer maintained: 7.1 21 April 2022 10 April 2023
  • 52nd release.
  • loongson support was temporarily discontinued for this release.
Old version, no longer maintained: 7.2 20 October 2022 16 October 2023
  • 53rd release.
Old version, no longer maintained: 7.3 10 April 2023 5 April 2024
  • 54th release.
  • Immutable permissions on address space regions.
  • "xonly" support on many architectures.
  • Support for full-disk encryption in the installer (via softraid driver)
Old version, yet still maintained: 7.4 16 October 2023 November 2024
  • 55th release.
Current stable version: 7.5 5 April 2024 May 2024
  • 56th release.

See also

Notes

  1. Compare release history of NetBSD, which OpenBSD branched from
  2. ^ OpenBSD is released roughly every 6 months targeting May and November and only the latest two releases receive security and reliability fixes for the base system.

References

  1. "Package Management". OpenBSD Frequently Asked Questions. Retrieved 1 June 2016.
  2. "Platforms". OpenBSD. Retrieved 3 September 2016.
  3. ^ "Copyright Policy". OpenBSD. Retrieved 13 December 2011.
  4. Cite error: The named reference coremail was invoked but never defined (see the help page).
  5. OpenBSD Project (19 May 2020). "OpenBSD". OpenBSD.org. Retrieved 12 October 2020.
  6. "Murus App, Apple PF for macOS from OpenBSD".
  7. "Android's C Library Has 173 Files of Unchanged OpenBSD Code". Retrieved 8 October 2018.
  8. "LLVM Release License". Retrieved 8 October 2018.
  9. "OpenSSH for Windows". Retrieved 8 October 2018.
  10. Grimes, Roger A. (29 December 2006). "New year's resolution No. 1: Get OpenBSD". InfoWorld.
  11. Lucas, Michael W. (April 2013). Absolute OpenBSD: Unix for the Practical Paranoid (2nd ed.). San Francisco, California: No Starch Press. ISBN 978-1-59327-476-4.
  12. ^ Andrews, Jeremy (2 May 2006). "Interview: Theo de Raadt". KernelTrap. Archived from the original on 24 April 2013.
  13. "OpenBSD's flavors". OpenBSD Frequently Asked Questions. Retrieved 22 May 2016.
  14. "Applying patches in OpenBSD". OpenBSD Frequently Asked Questions. Retrieved 15 May 2016.
  15. "Migrating to OpenBSD". OpenBSD Frequently Asked Questions. Retrieved 4 January 2017.
  16. "Hackathons". OpenBSD. Retrieved 18 May 2016.
  17. "Interview: Theo de Raadt of OpenBSD". NewsForge. 28 March 2006. Retrieved 31 March 2016.
  18. ^ "Release Songs". OpenBSD. Retrieved 22 May 2016.
  19. Chisnall, David (20 January 2006). "BSD: The Other Free UNIX Family". InformIT. Archived from the original on 4 April 2014.
  20. Smith, Jesse (18 November 2013). "OpenBSD 5.4: Puffy on the Desktop". Archived from the original on 29 April 2014.
  21. ^ Cranor, Chuck D.; De Raadt, Theo (6 June 1999). Opening the Source Repository with Anonymous CVS. USENIX Annual Technical Conference. Monterey, California. Retrieved 13 December 2011.
  22. Cranor, Chuck D. "Chuck Cranor's Home Page". Retrieved 13 December 2011. I also hosted and helped create the first Anonymous CVS server on the Internet (the original anoncvs.openbsd.org
  23. Fresh, Andrew. "Why OpenBSD Developers Use CVS". Retrieved 30 August 2021.
  24. "Project Goals". OpenBSD. Retrieved 18 May 2016. Integrate good code from any source with acceptable licenses. , NDAs are never acceptable.
  25. "Explaining Why We Don't Endorse Other Systems". 10 December 2023. Archived from the original on 23 November 2023. Retrieved 10 December 2023.
  26. McIntire, Tim (8 August 2006). "Take a closer look at OpenBSD". Developerworks. IBM. Retrieved 13 December 2011.
  27. De Raadt, Theo; Hallqvist, Niklas; Grabowski, Artur; Keromytis, Angelos D.; Provos, Niels (6 June 1999). "Randomness Used Inside the Kernel". Cryptography in OpenBSD: An Overview. USENIX Annual Technical Conference. Monterey, California. Retrieved 1 February 2014.
  28. ^ De Raadt, Theo (5 December 2006). "Presentation at OpenCON". OpenBSD. Retrieved 13 December 2011.
  29. Matzan, Jem (15 June 2005). "BSD cognoscenti on Linux". NewsForge. Linux.com. Retrieved 28 May 2016.
  30. Gasperson, Tina (6 June 2001). "OpenBSD and ipfilter still fighting over license disagreement". Linux.com. Archived from the original on 26 June 2008.
  31. "src/usr.sbin/mrinfo/mrinfo.c – view – 1.7". cvsweb.openbsd.org. 31 July 2001. Retrieved 24 May 2016. New license from Xerox! This code is now FREE! Took a while and a lot of mails, but it is worth it.
  32. "src/usr.sbin/map-mbone/mapper.c – view – 1.5". cvsweb.openbsd.org. 31 July 2001. Retrieved 24 May 2016. New license from Xerox! This code is now FREE! Took a while and a lot of mails, but it is worth it.
  33. De Raadt, Theo (24 August 2001). "Re: Why were all DJB's ports removed? No more qmail?". openbsd-misc (Mailing list). Archived from the original on 19 April 2016.
  34. Bernstein, Daniel J. (27 August 2001). "Re: Why were all DJB's ports removed? No more qmail?". openbsd-misc (Mailing list). Archived from the original on 4 February 2012.
  35. Espie, Marc (28 August 2001). "Re: Why were all DJB's ports removed? No more qmail?". openbsd-misc (Mailing list). Archived from the original on 19 April 2016.
  36. Hartmeier, Daniel (10 June 2002). Design and Performance of the OpenBSD Stateful Packet Filter (pf). USENIX Annual Technical Conference. Monterey, California. Retrieved 13 December 2011.
  37. The OpenBSD PF Packet Filter Book: PF for NetBSD, FreeBSD, DragonFly and OpenBSD. Reed Media Services. 2006. ISBN 0-9790342-0-5. Retrieved 19 May 2016.
  38. "New BSD licensed CVS replacement for OpenBSD". 6 December 2004. Retrieved 9 October 2018.
  39. "pkg-config(1)". Retrieved 9 October 2018.
  40. "OpenBSD Project in Financial Danger". Slashdot. 21 March 2006. Retrieved 12 December 2014.
  41. "Mozilla Foundation Donates $10K to OpenSSH". Slashdot. 4 April 2006. Retrieved 12 December 2014.
  42. "GoDaddy.com Donates $10K to Open Source Development Project". The Hosting News. 19 April 2006. Archived from the original on 11 November 2006.
  43. Beck, Bob (14 January 2014). "Request for Funding our Electricity". openbsd-misc (Mailing list). Retrieved 17 May 2016.
  44. ^ Bright, Peter (20 January 2014). "OpenBSD rescued from unpowered oblivion by $20K bitcoin donation". Ars Technica. Retrieved 20 January 2014.
  45. "The OpenBSD Foundation 2014 Fundraising Campaign". OpenBSD Foundation. Retrieved 24 May 2014.
  46. "Announcing - The OpenBSD Foundation". OpenBSD Journal. 26 July 2007. Retrieved 8 May 2014.
  47. Brodkin, Jon (22 April 2014). "OpenSSL code beyond repair, claims creator of "LibreSSL" fork". Ars Technica. Retrieved 18 August 2021.
  48. McAllister, Neil (8 July 2015). "Microsoft rains cash on OpenBSD Foundation, becomes top 2015 donor". The Register. Retrieved 27 May 2016.
  49. "Contributors". OpenBSD Foundation. Retrieved 27 May 2016.
  50. Vaughan-Nichols, Steven J. "Microsoft becomes OpenBSD's first gold contributor". ZDNet. Retrieved 18 August 2021.
  51. Mackie, Kurt; 12 November 2018. "Microsoft Now Supports OpenSSH in Windows Server 2019 -- Redmondmag.com". Redmondmag. Retrieved 18 August 2021.{{cite web}}: CS1 maint: numeric names: authors list (link)
  52. "Donate to the OpenBSD Foundation". www.openbsdfoundation.org. Retrieved 18 August 2021.
  53. "OpenBSD Donors".
  54. "Smartisan Makes Another Iridium Donation to the OpenBSD Foundation". OpenBSD Journal.
  55. "Anonymous CVS". OpenBSD. Retrieved 13 December 2011.
  56. "Mirrors". OpenBSD. Retrieved 22 May 2016.
  57. "Orders". OpenBSD. Archived from the original on 19 December 2011. Retrieved 20 May 2016.
  58. ^ "Packages and Ports". OpenBSD Frequently Asked Questions. Retrieved 22 May 2016.
  59. "OpenBSD". mckusick.com. Retrieved 12 December 2014.
  60. De Raadt, Theo (19 May 1999). "OpenBSD 2.5 Release Announcement". openbsd-announce (Mailing list). Archived from the original on 2 February 2014. OpenBSD 2.5 introduces the new Cop daemon image done by cartoonist Ty Semeka.
  61. "OpenBSD 2.7". OpenBSD. Retrieved 22 May 2016.
  62. Matzan, Jem (1 December 2006). "OpenBSD 4.0 review". Software in Review. Archived from the original on 11 January 2012. Retrieved 13 December 2011. Each OpenBSD release has a graphical theme and a song that goes with it. The theme reflects a major concern that the OpenBSD programmers are addressing or bringing to light.
  63. "Undeadly". Retrieved 9 October 2018.
  64. "Changes". Archived from the original on 18 October 1997.
  65. "OpenBSD 2.0". Retrieved 9 October 2018.
  66. "Release Notes". Retrieved 9 October 2018.
  67. "Release Notes". Retrieved 9 October 2018.
  68. "Release Notes". Retrieved 9 October 2018.
  69. "Release Notes". Retrieved 9 October 2018.
  70. "Release Notes". Retrieved 9 October 2018.
  71. "Release Notes". Retrieved 9 October 2018.
  72. "Release Notes". Retrieved 9 October 2018.
  73. "OpenBSD 2.8 Changelog". Retrieved 10 August 2021.
  74. "Release Notes". Retrieved 9 October 2018.
  75. "Release Notes". Retrieved 9 October 2018.
  76. "Release Notes". Retrieved 9 October 2018.
  77. "Errata". Retrieved 9 October 2018.
  78. "Release Notes". Retrieved 9 October 2018.
  79. "Release Notes". Retrieved 9 October 2018.
  80. "Release Notes". Retrieved 9 October 2018.
  81. "p0f". Retrieved 9 October 2018.
  82. ^ "OpenBSD Innovations". The OpenBSD project. Retrieved 12 September 2016.
  83. ^ Constantine A. Murenin; Raouf Boutaba (17 March 2009). "6. Evolution of the framework". OpenBSD Hardware Sensors Framework (PDF). AsiaBSDCon 2009 Proceedings, 12–15 March 2009. Tokyo University of Science, Tokyo, Japan (published 14 March 2009). Archived (PDF) from the original on 20 June 2010. Retrieved 4 March 2019. Alt URL
  84. "Release Notes". Retrieved 9 October 2018.
  85. Federico Biancuzzi (15 April 2004). "OpenBSD PF Developer Interview". ONLamp. O'Reilly Media. Archived from the original on 8 May 2004. Retrieved 20 March 2019.
  86. Federico Biancuzzi (6 May 2004). "OpenBSD PF Developer Interview, Part 2". ONLamp. O'Reilly Media. Archived from the original on 19 June 2004. Retrieved 20 March 2019.
  87. "bc(1)". Retrieved 9 October 2018.
  88. "dc(1)". Retrieved 9 October 2018.
  89. "nm(1)". Retrieved 9 October 2018.
  90. "size(1)". Retrieved 9 October 2018.
  91. "Release Notes". Retrieved 9 October 2018.
  92. "Release Notes". Retrieved 9 October 2018.
  93. ^ Federico Biancuzzi (28 October 2004). "OpenBSD 3.6 Live". ONLamp. O'Reilly Media. Archived from the original on 29 October 2004. Retrieved 20 March 2019.
  94. "Release Notes". Retrieved 9 October 2018.
  95. Federico Biancuzzi (19 May 2005). "OpenBSD 3.7: The Wizard of OS". ONLamp. O'Reilly Media. Archived from the original on 21 May 2005. Retrieved 20 March 2019.
  96. "Release Notes". Retrieved 9 October 2018.
  97. de Raadt, Theo. "CVS: cvs.openbsd.org: src". OpenBSD-CVS mailing list. Removed files: libexec/telnetd
  98. Federico Biancuzzi (20 October 2005). "OpenBSD 3.8: Hackers of the Lost RAID". ONLamp. O'Reilly Media. Archived from the original on 27 December 2005. Retrieved 20 March 2019.
  99. "Release Notes". Retrieved 9 October 2018.
  100. ^ Federico Biancuzzi (27 April 2006). "OpenBSD 3.9: Blob-Busters Interviewed". ONLamp. O'Reilly Media. Archived from the original on 12 May 2006. Retrieved 19 March 2019.
  101. "Release Notes". Retrieved 9 October 2018.
  102. Federico Biancuzzi (26 October 2006). "OpenBSD 4.0: Pufferix's Adventures". ONLamp. O'Reilly Media. Archived from the original on 10 March 2007. Retrieved 19 March 2019.
  103. "Errata". Retrieved 9 October 2018.
  104. "Release Notes". Retrieved 9 October 2018.
  105. Federico Biancuzzi (3 May 2007). "OpenBSD 4.1: Puffy Strikes Again". ONLamp. O'Reilly Media. Archived from the original on 18 May 2008. Retrieved 19 March 2019.
  106. Constantine A. Murenin (30 December 2006). Marco Peereboom (ed.). "New two-level sensor API". OpenBSD Journal. Retrieved 4 March 2019.
  107. Constantine A. Murenin (17 April 2007). "4.3. What we have proposed and implemented". Generalised Interfacing with Microprocessor System Hardware Monitors. Proceedings of 2007 IEEE International Conference on Networking, Sensing and Control, 15–17 April 2007. London, United Kingdom: IEEE. pp. 901–906. doi:10.1109/ICNSC.2007.372901. ISBN 978-1-4244-1076-7. IEEE ICNSC 2007, pp. 901–906.
  108. "Release Notes". Retrieved 9 October 2018.
  109. Federico Biancuzzi (1 November 2007). "Puffy's Marathon: What's New in OpenBSD 4.2". ONLamp. O'Reilly Media. Archived from the original on 13 October 2011. Retrieved 3 March 2019.
  110. "Release Notes". Retrieved 9 October 2018.
  111. Federico Biancuzzi (29 April 2008). "Puffy and the Cryptonauts: What's New in OpenBSD 4.3". ONLamp. O'Reilly Media. Archived from the original on 6 May 2008. Retrieved 20 March 2019.
  112. "Release Notes". Retrieved 9 October 2018.
  113. Kurt Miller (2008). "OpenBSD's Position Independent Executable (PIE) Implementation". Archived from the original on 12 June 2011. Retrieved 22 July 2011.
  114. ^ Federico Biancuzzi (3 November 2008). "Source Wars - Return of the Puffy: What's New in OpenBSD 4.4". O'Reilly Media. Archived from the original on 24 May 2012. Retrieved 3 March 2019.
  115. "Release Notes". Retrieved 9 October 2018.
  116. Federico Biancuzzi (15 June 2009). "PuffyTron recommends OpenBSD 4.5". O'Reilly Media. Archived from the original on 19 June 2009. Retrieved 19 March 2019.
  117. ^ Constantine A. Murenin (21 May 2010). "6.2. Evolution of drivers; Chart VII. Number of drivers using the sensors framework from OpenBSD 3.4 to 4.6.". OpenBSD Hardware Sensors — Environmental Monitoring and Fan Control (MMath thesis). University of Waterloo: UWSpace. hdl:10012/5234. Document ID: ab71498b6b1a60ff817b29d56997a418.
  118. "Release Notes". Retrieved 9 October 2018.
  119. "Release Notes". Retrieved 9 October 2018.
  120. "Release Notes". Retrieved 9 October 2018.
  121. "MARC". Retrieved 9 October 2018.
  122. "Release Notes". Retrieved 9 October 2018.
  123. "Release Notes". Retrieved 9 October 2018.
  124. "Release Notes". Retrieved 9 October 2018.
  125. "Release Notes". Retrieved 9 October 2018.
  126. "Release Notes". Retrieved 9 October 2018.
  127. "Release Notes". Retrieved 9 October 2018.
  128. "Release Notes". Retrieved 9 October 2018.
  129. "Release Notes". Retrieved 9 October 2018.
  130. "Release Notes". Retrieved 9 October 2018.
  131. "Release Notes". Retrieved 9 October 2018.
  132. "MARC". Retrieved 9 October 2018.
  133. "Release Notes". Retrieved 9 October 2018.
  134. OpenBSD 6.0. ISBN 978-0-9881561-8-0. Retrieved 24 July 2016. {{cite book}}: |website= ignored (help)
  135. "OpenBSD vax". OpenBSD. Retrieved 2 September 2016.
  136. "OpenBSD sparc". OpenBSD. Retrieved 2 September 2016.
  137. "OpenBSD 6.1". OpenBSD. Retrieved 11 April 2017.
  138. "OpenBSD 6.2". OpenBSD.
  139. "unveil(2)". OpenBSD. Retrieved 19 October 2018.
  140. "OpenBSD 6.6". OpenBSD. Retrieved 17 January 2020.
  141. "OpenBSD 6.7". OpenBSD. Retrieved 21 May 2020.
  142. "OpenBSD 6.8". OpenBSD. Retrieved 18 October 2020.
  143. "OpenBSD FAQ". OpenBSD. Retrieved 5 May 2021.
  144. "OpenBSD 6.9". OpenBSD. Retrieved 2 May 2021.
  145. ^ "OpenBSD 7.0". OpenBSD. Retrieved 15 October 2021.
  146. "OpenBSD 7.1". OpenBSD. Retrieved 21 April 2022.
  147. "OpenBSD loongson". Archived from the original on 22 August 2022.
  148. "OpenBSD 7.2". OpenBSD. Retrieved 20 October 2022.
  149. "OpenBSD 7.3". OpenBSD. Retrieved 10 April 2023.
  150. "OpenBSD 7.4". OpenBSD. Retrieved 16 October 2023.
  151. "OpenBSD 7.5". OpenBSD. Retrieved 9 April 2024.

Cite error: A list-defined reference named "2.0-release" is not used in the content (see the help page).
Cite error: A list-defined reference named "2.3-announcement" is not used in the content (see the help page).
Cite error: A list-defined reference named "6.0-release" is not used in the content (see the help page).
Cite error: A list-defined reference named "allegations-ipsec" is not used in the content (see the help page).
Cite error: A list-defined reference named "announcing-openbsd-foundation" is not used in the content (see the help page).
Cite error: A list-defined reference named "archlinux_openssh-portable" is not used in the content (see the help page).
Cite error: A list-defined reference named "calyptix" is not used in the content (see the help page).
Cite error: A list-defined reference named "crypto-openbsd-overview" is not used in the content (see the help page).
Cite error: A list-defined reference named "debian_openssh-portable" is not used in the content (see the help page).
Cite error: A list-defined reference named "dragonflybsd_openssh-base" is not used in the content (see the help page).
Cite error: A list-defined reference named "faq11" is not used in the content (see the help page).
Cite error: A list-defined reference named "free-for-all" is not used in the content (see the help page).
Cite error: A list-defined reference named "freebsd_openssh-base" is not used in the content (see the help page).
Cite error: A list-defined reference named "genua" is not used in the content (see the help page).
Cite error: A list-defined reference named "glass" is not used in the content (see the help page).
Cite error: A list-defined reference named "informationweek_ipsec" is not used in the content (see the help page).
Cite error: A list-defined reference named "interview-espie" is not used in the content (see the help page).
Cite error: A list-defined reference named "man_clang-local" is not used in the content (see the help page).
Cite error: A list-defined reference named "man_gcc-local" is not used in the content (see the help page).
Cite error: A list-defined reference named "netbsd_openssh-base" is not used in the content (see the help page).
Cite error: A list-defined reference named "no-ipsec-backdoor" is not used in the content (see the help page).
Cite error: A list-defined reference named "onlamp-interview" is not used in the content (see the help page).
Cite error: A list-defined reference named "openbsd-desktop" is not used in the content (see the help page).
Cite error: A list-defined reference named "openbsd_innovations_privsep" is not used in the content (see the help page).
Cite error: A list-defined reference named "openports" is not used in the content (see the help page).
Cite error: A list-defined reference named "openssh-history" is not used in the content (see the help page).
Cite error: A list-defined reference named "openssh-usage" is not used in the content (see the help page).
Cite error: A list-defined reference named "opensuse_openssh-portable" is not used in the content (see the help page).
Cite error: A list-defined reference named "osnews-ipsec" is not used in the content (see the help page).
Cite error: A list-defined reference named "oss-good-for-security" is not used in the content (see the help page).
Cite error: A list-defined reference named "privilege-separated-openssh" is not used in the content (see the help page).
Cite error: A list-defined reference named "rtmx" is not used in the content (see the help page).
Cite error: A list-defined reference named "security" is not used in the content (see the help page).
Cite error: A list-defined reference named "staying-cutting-edge" is not used in the content (see the help page).
Cite error: A list-defined reference named "strlcpy-strlcat-paper" is not used in the content (see the help page).
Cite error: A list-defined reference named "survey" is not used in the content (see the help page).
Cite error: A list-defined reference named "vantronix" is not used in the content (see the help page).

Cite error: A list-defined reference named "xenocara" is not used in the content (see the help page).

External links

The OpenBSD Project
Operating system
Related projects
People
Organizations
Publications
Berkeley Software Distribution
People
Derivatives
Active
Discontinued
Companies
Other topics
Unix and Unix-like operating systems and compatibility layers
Operating
systems
BSD
Linux
System V
Other
Compatibility
layers
Categories: