Settings

Theme

OpenBSD 5.4 Released

openbsd.org

156 points by sramov 12 years ago · 106 comments

Reader

earlz 12 years ago

I found out that http://openbsd.org is not the same as http://www.openbsd.org (one is much lower bandwidth) and apparently it's intentional that one doesn't redirect to the other. And that's not even to mention the website not using a static generator or CSS (despite http://www.openbsdfoundation.org/ actually being modern and good looking). From what I understand is the reason it's not changed is because it'd be too much work because it's duplicated everywhere, but they won't accept contributions to change it.

I love OpenBSD as a piece of software, but I don't understand it's developers or community at all.

  • tedunangst 12 years ago

    openbsd.org is a different machine than www.openbsd.org. Why are you using openbsd.org? Who gave you a link to it? Tell them to stop.

    • VMG 12 years ago

      I think I'm getting a little glimpse of the community here

      • _pmf_ 12 years ago

        Yeah, god forbid people having actual tasks to do instead of micromanaging their online presence like a SF web monkey.

        • ciupicri 12 years ago

          As if it's very hard to make a redirect to the www domain. It takes only a couple of minutes.

        • walshemj 12 years ago

          What you actually mean is to lazy to do their job properly.

          Just like my last employer where I spent a lot of time finding the simple things the developers didn't do (but would cause havoc with Google if we let it launch in that state)

        • anatoly 12 years ago

          One more tiny glimpse of the community!

    • bcj 12 years ago

      It's hard to fault someone for going to a base domain, especially when it's content is identical to the www domain.

    • abadidea 12 years ago

      I just went to AOL keyword OPENBSD. Or it's not 1998 anymore and it's just common sense to type domain.org instead of www.domain.org.

      Why would anyone even have them be two separate machines with the same content?

      • sdkmvx 12 years ago

        > Why would anyone even have them be two separate machines with the same content?

        They are in different locations. openbsd.org is updated first and in the same (physical) location as the CVS servers, build equipment, etc., and www.openbsd.org and the other mirrors are mirrors with much more bandwidth.

  • csmuk 12 years ago

    To be honest I've been using it for about 7 years and I didn't know that.

    I'm not sure that matters either. It's not really a priority and I respect that.

    • earlz 12 years ago

      No, and being able to download all the FAQs easily is cool but there are things where it actually impacts me. For instance, I have a netbook without a cdrom drive or floppy disk. So, to install OpenBSD on it, I had to first install OpenBSD onto another PC computer, and then run makeboot and such on my USB drive and copy over the ramdisk.

      Apparently the cited excuse for why they don't support USB bootable media is because it's hard because some computers only support floppy emulator or don't support it, and there are many bugs in USB boot for older BIOS.. But that doesn't keep every other operating system of this day and age supporting it

      • okasaki 12 years ago

        That can't be true. I used to run OpenBSD on a netbook and I'm pretty you can just dd the cdrom image onto a usb stick and boot that.

      • csmuk 12 years ago

        Yeah I do the same with the USB stick as its easier than CD media. I have a vbox VM ready to roll for such occasions.

        I have had numerous problems on older Dell/HP machines with USB booting anything so it's reasonable. I buy the official media even though I rarely use it.

      • retzkek 12 years ago

        You can cut out one step by directly installing OpenBSD on the USB drive, and then when you boot on the target machine enter "bsd.rd" at the boot prompt.

      • calvin_ 12 years ago

        If you use GRUB, try copying bsd.rd to /boot, and running kopenbsd bsd.rd - it's really neat, no external media necessary!

      • itwontdie 12 years ago

        I ran into this problem as well at first. The issue is easily overcome as described at the following URL.

        http://www.openbsd.org/faq/faq4.html#noflopcd

        Can this easily be done from any Linux distribution? AFAIK it can not, instead they waste resources creating USB installs and images.

        • ciupicri 12 years ago

          > Can this easily be done from any Linux distribution?

          Let's see...

          > Network boot, using PXE (i386 or amd64) or diskless(8) (other platforms).

          Red Hat and Fedora had this for ages. Also the installa media can be on a FTP, HTTP or NFS server.

          > External USB CD-ROM or USB floppy, if your machine can boot from one.

          This should work with most Linux distributions, too.

          > USB Flash disk or hard disk

          The same.

          > Worst case, if none of the above is suitable, you can usually pull the disk out of the target system, use suitable adapters to install it in a "normal" computer, install OpenBSD, then replace the disk back in the target system.

          Again this should be possible with most Linux distributions.

          Now does OpenBSD have an automated installer?

          • csmuk 12 years ago

            > Now does OpenBSD have an automated installer?

            Yes. You can use expect with /install easily and you can simply add your own local "site set" tgz which can be hosted on a local HTTP/FTP server to apply any local customisations.

            However, if you're provisioning lots of machines, it's very easy just to "restore" filesystems off a bootable USB stick, mount them, set the hostname then tell ansible/puppet to do the rest. Don't need kickstart or any of that crap.

            Personally though I'd just netboot lots of systems off PXE/TFTP, NFS mount all filesystems and have local swap disk only. I used to do that with Sun systems. We had 50 SPARCstation 5's booting off a SPARCserver 1000E on Solaris and it worked nicely. OpenBSD works pretty much the same. Linux is a piece of crap to netboot.

            Plenty of ways to skin that cat.

            • ciupicri 12 years ago

              Do you need to modify the install media in order to use expect? I'd like to read more about the process.

              You can netboot Linux. Knoppix [1] offers Terminal Server which configures DHCP, TFTP and NFS so that you can boot Knoppix from the local network.

              [1] http://www.knoppix.org/

              • csmuk 12 years ago

                Yes you do but you usually netboot to do large installations so this is just a case of adding a new root device with some extra tools on it on your netboot server.

                There is an official solution in -current that involves DHCP but I don't know the details.

sramovOP 12 years ago

Packets already flowing through 5.4 -release on my 'lil ALIX home router. Workstation on -current, of course.

There is nothing quite like OpenBSD out there. Thank you OpenBSD developers!

  • csmuk 12 years ago

    Signed up to agree.

    Canned 6 Ubuntu machines (servers) and replaced with OpenBSD 5.3 recently. So much goodness ships with openbsd it's unreal. Bar Theo's sharp tongue (which is usually spot on), you get pf, opensmtpd (so much cleaner than postfix), nginx in base, miles better manual pages than Linux, no horrid gnu info, small and simple base system, absolutely no surprises, no bloated crap like dbus/upstart, tmux in base and what I can only describe as a warm fuzzy "why the hell isn't everything like this" feeling.

    Also, it's just about the only thing I've found that can work adequately entirely offline without having to use google to fix obscure problems and decypher documentation.

    I've got a bootable USB stick that contains the base packages, entire FAQ (main documentation source outside manpages), all normal binary packages I use, WiFi firmware and its less than 2Gb.

    Thanks as well.

    • pit 12 years ago

      Agreed, the base install gives you a system that feels both minimal and complete at the same time.

      Plus, every release includes a song: http://www.openbsd.org/lyrics.html#54

    • pfortuny 12 years ago

      The doc is really unbeatable, I know nothing like it anywhere.

      • dman 12 years ago

        Are they much different than the freebsd docs?

        • itwontdie 12 years ago

          From my experience FreeBSD documentation is often outdated and no longer applicable. In my opinion incorrect documentation is worse than having no information as it often causes more problems and frustration.

          • GalacticDomin8r 12 years ago

            > From my experience FreeBSD documentation is often outdated and no longer applicable

            You were using an open source project and as such feedback is critical. Can you list the bug report you filed on the problems?

            > In my opinion incorrect documentation is worse than having no information as it often causes more problems and frustration.

            That is your opinion of course. IMO experience, having outdated docs is much better than having none at all.

    • microcolonel 12 years ago

      D-Bus is just a low-level socket protocol(which is, by the way, really quite light); there is nothing "bloated" about it.

      • justincormack 12 years ago

        Well, its going into the kernel as kdbus, which you could argue is bloated. Linux is much bigger than the BSDs, although it is modular and you can remove it, but the big distros use much of it so you can't if you use them...

        • microcolonel 12 years ago

          A lot of things in linux are faster than in the various bsd kernels, some of this owing to having a few optional codepaths rather than just one.

          Also, kdbus basically means there is in fact /less/ code made necessary by using the dbus protocol, since you don't need the daemon anymore, it also means lower latency.

    • ape4 12 years ago

      Yeah, what is the point of gnu info?

      • teddyh 12 years ago

        From https://www.gnu.org/prep/standards/html_node/GNU-Manuals.htm...

        The preferred document format for the GNU system is the Texinfo formatting language. Every GNU package should (ideally) have documentation in Texinfo both for reference and for learners. Texinfo makes it possible to produce a good quality formatted book, using TeX, and to generate an Info file. It is also possible to generate HTML output from Texinfo source.

        [...]

        Make sure your manual is clear to a reader who knows nothing about the topic and reads it straight through. This means covering basic topics at the beginning, and advanced topics only later. This also means defining every specialized term when it is first used.

        Programmers tend to carry over the structure of the program as the structure for its documentation. But this structure is not necessarily good for explaining how to use the program; it may be irrelevant and confusing for a user.

        Instead, the right way to structure documentation is according to the concepts and questions that a user will have in mind when reading it. This principle applies at every level, from the lowest (ordering sentences in a paragraph) to the highest (ordering of chapter topics within the manual). Sometimes this structure of ideas matches the structure of the implementation of the software being documented—but often they are different. An important part of learning to write good documentation is to learn to notice when you have unthinkingly structured the documentation like the implementation, stop yourself, and look for better alternatives.

        For example, each program in the GNU system probably ought to be documented in one manual; but this does not mean each program should have its own manual. That would be following the structure of the implementation, rather than the structure that helps the user understand.

        Instead, each manual should cover a coherent topic. For example, instead of a manual for diff and a manual for diff3, we have one manual for “comparison of files” which covers both of those programs, as well as cmp. By documenting these programs together, we can make the whole subject clearer.

        The manual which discusses a program should certainly document all of the program’s command-line options and all of its commands. It should give examples of their use. But don’t organize the manual as a list of features. Instead, organize it logically, by subtopics. Address the questions that a user will ask when thinking about the job that the program does. Don’t just tell the reader what each feature can do—say what jobs it is good for, and show how to use it for those jobs. Explain what is recommended usage, and what kinds of usage users should avoid.

        In general, a GNU manual should serve both as tutorial and reference. It should be set up for convenient access to each topic through Info, and for reading straight through (appendixes aside). A GNU manual should give a good introduction to a beginner reading through from the start, and should also provide all the details that hackers want. The Bison manual (https://www.gnu.org/software/bison/manual/html_node/Concepts...) is a good example of this—please take a look at it to see what we mean.

        That is not as hard as it first sounds. Arrange each chapter as a logical breakdown of its topic, but order the sections, and write their text, so that reading the chapter straight through makes sense. Do likewise when structuring the book into chapters, and when structuring a section into paragraphs. The watchword is, at each point, address the most fundamental and important issue raised by the preceding text.

        If necessary, add extra chapters at the beginning of the manual which are purely tutorial and cover the basics of the subject. These provide the framework for a beginner to understand the rest of the manual. The Bison manual (https://www.gnu.org/software/bison/manual/html_node/Concepts...) provides a good example of how to do this.

        To serve as a reference, a manual should have an Index that lists all the functions, variables, options, and important concepts that are part of the program. One combined Index should do for a short manual, but sometimes for a complex package it is better to use multiple indices. The Texinfo manual includes advice on preparing good index entries, see Making Index Entries(https://www.gnu.org/software/texinfo/manual/texinfo/html_nod...) in GNU Texinfo, and see Defining the Entries of an Index(https://www.gnu.org/software/texinfo/manual/texinfo/html_nod...) in GNU Texinfo.

        Don’t use Unix man pages as a model for how to write GNU documentation; most of them are terse, badly structured, and give inadequate explanation of the underlying concepts. (There are, of course, some exceptions.) Also, Unix man pages use a particular format which is different from what we use in GNU manuals.

        [...]

        • csmuk 12 years ago

          Unix manpages are fine. If you've read the GNU awk manual vs BSD awk, you'll understand what I mean. GNU awk manual is hundreds of pages long and serves only to confuse the user. Not only that, half of it is listing differences between GNU awk and other awks which is just mindnumbing. A fine case of cat -v. And don't get me started on glibc.

          The bit that pisses me off is: man awk (see info awk instead). I think they fixed that but it was a pain in the butt for years. Is it in man or is it in info?

          One tool for the job.

          Edit: cite your sources :)

          1 - OpenBSD awk (6 pages if I print preview it): http://www.openbsd.org/cgi-bin/man.cgi?query=awk&apropos=0&s...

          2 - GNU awk (330 pages if I print preview it): https://www.gnu.org/software/gawk/manual/gawk.html

          • teddyh 12 years ago

            Even the document I cited conceded that there are some very good Unix man pages — BSD Awk may very well be one of many, I have not read it. It follows, logically, that there could be some very bad Info documentation manuals, and the GNU Awk manual may very well be one of many; I have not read it.

            This does not disprove the point the citation made; namely, that the Unix man page structure is unsuitable for many things since its structure tends to make people write manuals badly, and there is no place for the kind of introductions and tutorials that good manuals should contain. On the contrary, the man page format lends itself to very strict and terse reference documentation, which is not what I would call a “manual”, as such.

            Someone should perhaps do a study of which of the two formats seem to generate the better documentation.

            > The bit that pisses me off is: man awk (see info awk instead). I think they fixed that but it was a pain in the butt for years. Is it in man or is it in info?

            The official GNU system documentation is in Info. Now, the GNU system is meant to be compatible with Unix, and Unix uses man pages. And since many GNU tools were (and are) not actually developed to be used in the GNU system as such, but instead find their major use and development as parts of various Unix variants, it follows that most of them have Unix have man pages too. Since writing documentation is work, and writing duplicated documentation is even more work, the man pages for GNU tools are often overly terse, incomplete and/or out of date compared to the Info documentation, which is the official documentation. Some well-known exceptions exist, notably GNU Bash does not have any Info documentation, but instead has an (enormously long) Unix man page.

            • nodata 12 years ago

              > The official GNU system documentation is in Info

              There is nobody in the world outside of the GNU foundation who prefers using info pages to man pages.

              • teddyh 12 years ago

                (You are demonstrably wrong, but I will address your implied point instead of your hyperbole.)

                I think that the hostility to Info comes from exposure to the standalone Info reader. It is non-intuitive, non-Unix-like, and does, as far as I know, not even support text attributes, so it looks bad even for a text-based UI. It is not very newbie friendly (like GNU nano with its very explicit menus to guide you). Nor is it consistent with other Unix-based text UIs like “vim” or “less”. Instead it behaves like a brain-damaged Emacs, but without even many basic text-navigation features from Emacs, so even Emacs users feel lost in Info.

                I feel that if someone made a module for vim or something to read and navigate Info documentation (and made it the default instead of the barebones standalone Info reader), then Unix people would warm up to Info documentation.

                Personally, I read Info documentation using the Emacs built-in reader. It is, unofficially I think, the canonical Info documentation reader, and it is beautifully integrated with Emacs. I prefer reading most manuals this way (if they have an Info version).

                • clarry 12 years ago

                  My problem with info is the document structure. The manual for each application seems to be structured so differently with topics under specific titles and subtitles, I always get lost and it takes me a while to find the thing I'm looking for. And it really is frustrating to stumble in the dark looking for that one command line flag or input format that you've found and used many times before.

                  For me the consistent reference-like structure and terse language of man pages is ideal. The whole document is shorter than a bunch of info pages will be, and because of the structure, I always know where to expect specific things to be. Some man pages do not quite fit the traditional model so there is a bit of compromise, but I still find it easier to scan through such pages and remember the location of things than I do with info pages.

                  The difference between (Open)BSD and GNU/Linux world man pages is that the former group spend plenty of effort on polishing the language & structure to make the text clean, short and to-the-point, as well as consistent. So exactly the qualities I prefer man for are taken as far as possible. And because we love well written man pages, there's a man page for damn well near anything in the base system; whereas on other systems you're sometimes looking at info pages, sometimes html documentation installed where-ever or nowhere, READMEs, comments in config files, howtos and tutorials via Google, or at the source because nobody bothered write real documentation. If the source isn't at hand or you don't have the time for it, you try imitate what you see in use already, and pray..

                  • teddyh 12 years ago

                    > My problem with info is the document structure. The manual for each application seems to be structured so differently with topics under specific titles and subtitles, I always get lost and it takes me a while to find the thing I'm looking for.

                    Use the index – it’s what it’s there for. In the usual Info readers, it’s the “i” key. This is what I use when, for instance, reading the GNU C Library manual and wanting the documentation for a specific function, struct or macro. If you want the command-line switches for the “foo” command, the node to go to in the manual you find yourself when invoking “info foo” is called “foo invocation”; you go to a specified node using the “g” key. Then you simply use the space key to navigate serially through all the following nodes. There are only three more keys that I use when reading Info documentation.¹

                    I think it’s mostly a question of habit. Man pages has taught you to read mostly the whole document quickly, while scanning for the information you need. These are habits unsuitable to both to reading a book of printed documentation or Info documentation. If you have a specific idea of what you want to find, you use the index.

                    1) The “l” key – “l” for “last” – corresponds to a web browser’s back button, the “u” key goes “up” in the document tree, and the “t” key goes to the top of the current document. These five keys are all the keys I use for Info navigation, except for normal searching with C-s, but that’s Emacs. This should not be difficult, but it is. I suspect, as I wrote previously, that it’s not Unix-y enough.

                    • clarry 12 years ago

                      The index is the problem. The index for each application and library looks different. There are headings and subheadings and subheadings.. sometimes they're descriptive enough to help you find what you need, but in my experience, they often are not. But in either case you still need to read through them and interpret them. And reading through tens of headings is a pain, especially if after reading them you navigate to the seemingly most relevant page and find it doesn't have the information you need. ("Where the hell was it?!" is something I've said more than once, trying to battle info documents.) This is what I mean when I complain about structure; it's not consistent, it's not predictable. I don't want it to read like book, I want it to be useful and being consistent in such a manner that I can always find my answer quick helps there. Good man pages more or less have this consistency. And because they're terse, it's still quite easy to scan even when the structure for some reason does not conform to the tradition.

                      • teddyh 12 years ago

                        I think you misunderstood me; the Index is not the table of contents or the list of headings. The index is what you access with the “i” key, and can also be read directly using the “g” key to go directly to the “Index” node.

                        I agree, reading headings and navigating that way is mostly a waste of time when trying to find something specific. Which is why I never do it; I use the Index.

                • mpyne 12 years ago

                  KDE also has an interface to GNU Info pages. "info:foo" in Konqueror/Rekonq/etc. and you get hyperlinks and text.

                  It's probably not nearly as good as emacs, but it's not nearly as bad as info(1).

              • ghshephard 12 years ago

                I'll pile on with an additional anecdote - in 17 years of working almost daily with *nix/BSD systems (and hitting man pages routinely) - I've never once looked at an info page.

                • sigzero 12 years ago

                  Ditto! I have always read man pages. Never read an Info one and I fail to see any need to do so.

            • ams6110 12 years ago

              Obligatory xkcd

              http://xkcd.com/912/

            • cmccabe 12 years ago

              If I want an introduction to complex topic, I usually won't use man pages. I will open up a web browser and search. That will give me web pages that have pictures, diagrams, and possibly even introductory essays about the topic.

              There are many more people who know how to write web pages or forum posts than who know how to write "info" pages. There are also great tools for searching the web, but poor tools for search info pages. "info" pages can't even have diagrams or pictures. Consequently, information obtained via "info" tend to be stale, incomplete, and generally unhelpful.

              The real question is why "man" pages are still useful in the era of the internet. The answer is that sometimes, you want a concise, accurate, quick reference to what is installed on your system. "man" fills this function admirably. "info" fills that function awkwardly and poorly.

              • sarnowski 12 years ago

                This is true for me too as long as I don't use OpenBSD. The cause is that GNU/Linux manpages are horrible. They are mostly outdated and not in sync with the versions that are actually installed.

                As soon as you log in to your newly installed OpenBSD system, your root account has a mail in her mailbox stating to read the "afterboot" manpage. When I first time entered "man afterboot" in my shell, I was blown away.

                http://www.openbsd.org/cgi-bin/man.cgi?query=afterboot

                  The idea is to create a list of items that can be checked
                  off so that you have a warm fuzzy feeling that something
                  obvious has not been missed.
                
                It gives you a fast introduction with all informations you need and then references all locations where you find every other topic. At that point, you don't need google anymore where you again find outdated and incorrect informations.

                The documentation is so high quality that this is the biggest advantage I appreciate the most.

                • cmccabe 12 years ago

                  Yeah. One thing that some people seem to miss is that you can have multiple man pages for a topic-- perhaps one that lays out the general outlines, and one for more specific information.

                  git does this: it has "man gittutorial" and "gitcvs-migration", as well as man pages for each command. It makes a lot of sense and avoids the "giant wall of irrelevant text" approach.

                  Bash, on the other hand... yeah. Just try finding anything in there.

              • teddyh 12 years ago

                An internet search will give me many different choices of documentation of unknown provenance, authorship, official status, datedness, accuracy, and comprehensibility. This, to me, is not helpful, since I have no way of knowing which are any good, even after reading them. On the other hand, Info documentation will give me the official, up-to-date, correct, and mostly well-written documentation.

                Internet searches certainly have their place if I want forum posts, mailing lists or blog posts, which I sometimes do. But I often want the official documentation corresponding exactly to my installed version of the software, and this is often harder to find using a web search than simply using the Info documentation, because of the above issues. Also, something to keep in mind in these modern times is that web usage is monitored. Local reading of Info documentation is not.

                Tools for searching Info pages are built-in to most Info browsers. I use the Emacs Info browser, which has both the usual Emacs way of searching (C-s and C-r searches both in the current node and in the whole document), and the Info Index, which is what I start with when looking up the reference documentation for something.

                Also, contrary to what you claim, Info documentation can and do contain images. For example, the HTML GnuTLS documentation here: (http://gnutls.org/manual/html_node/OpenPGP-certificates.html) was generated from Texinfo, and the images are still there when I browse the corresponding Info documentation with the Emacs Info reader. Those images are simple because they are generated from Dia drawings via EPS files, but images can be anything, just like in HTML.

                • cmccabe 12 years ago

                  An internet search will give me many different choices of documentation of unknown provenance, authorship, official status, datedness, accuracy, and comprehensibility.

                  True. But the documentation for GNU programs, both man and info, is often also "of unknown provenance, authorship, datedness, accuracy, and comprehensibility." You even said yourself that the man pages for many of these GNU programs are years out of date on some systems. Official status is not guaranteed either, since anyone can fork an open source program and produce a clone.

                  Somehow, despite all that, we manage to muddle on. Probably, it's because we're humans, with the ability to filter out bad information and incomprehensible explanations, and find the real information. And in my experience, this is much easier to do with a man page, which usually simply gets to the point, than with a long, meandering info page which treats me like an idiot and yet often fails to mention vital information.

                  Thank you for the clarification that info pages can support images. Since I have only ever used info in a terminal, I was not aware of this.

                  In a lot of ways, info reminds me of Microsoft's CHM format, another HTML workalike with limited abilities. CHM can also support images.

                  Web usage may be monitored, but I suspect that searching for information about open source programs won't reveal anything about me that downloading Linux did not.

          • emidln 12 years ago

            Given how readily good search and navigation exist, I'd much prefer GNU-style awk man pages to BSD-style awk man pages. 15 years ago I taught myself the AWK programming language using "man awk" on a Red Hat Linux box with no network connection. Had the manual been merely a listing of available switches, that wouldn't have been possible.

            I'd actually prefer it if more languages provided man pages with detailed language as opposed to random assortments of HTML posing as documentation. Always liked perl precisely due to this.

            • csmuk 12 years ago

              That 6 pages, if you read it, includes the language, all functions, flags and examples. Its possible to digest it fully in a few minutes.

              It is complete.

      • noselasd 12 years ago

        install pinfo , and you'll be able to read all the wonderful documentation instead of fighting with the GNU info frontend.

      • philsnow 12 years ago

        hypertext man pages ? what is it that people don't like about them ?

        • ape4 12 years ago

          Isn't there some way to get hypertext into man pages? Eg extend nroff. Then you don't have to have a parallel system.

          • clarry 12 years ago

            You can use w3mman (it installs with the w3m package on OBSD) and you'll be able to follow manual xrefs. Html output with links can also be generated, see the afterbook man page linked above for an example.

          • 4ad 12 years ago

            nroff isn't the problem, the pager is. I view manual pages in acme and they become very hypertexty. It's not perfect, as they weren't written with that in mind, but it's damn good.

      • mhurron 12 years ago

        NIH

    • DennisP 12 years ago

      Do you know how it does with high concurrent loads these days?

      • stock_toaster 12 years ago

        I think PF in openbsd is still single core[1]. FreeBSD 10.x apparently has an SMP version of PF[2].

        My feeling is still that if high performance is desired, FreeBSD is still preferred. For "normal" workloads though, I think OpenBSD would be a fine choice. I do like how "clean" an OpenBSD system feels.

        [1]: http://openbsd.7691.n7.nabble.com/Performance-limits-with-Op...

        [2]: http://lists.freebsd.org/pipermail/freebsd-pf/2012-June/0066...

      • csmuk 12 years ago

        I've not done a direct comparison but it feels solid under load. IO bound processes seem to balance IO fairly i.e. no bad neighbour problem where one process will starve another and a fork bomb won't take out the system even though I managed to hit a loadavg of 80! It still was very responsive.

        Secondarily, I have a VM on BigV which seems to suffer less pauses and oddness than Ubuntu 12.04LTS did.

        Works nicely on UltraSparc machines (U30 and U60 tested) as well which is a bonus. I still find them superior to Intel even if they are power hungry and rather old now. Context switch time seems pretty low on Sparcs. Not sure if it uses hardware contexts or not though - haven't looked at the code.

  • protomyth 12 years ago

    I'm going to reinstall a couple of servers this weekend with 5.4. It generally is just a matter of printing out /etc/fstab, doing the install (I skip the upgrade on these), install some packages, and laying back down the configs and keys from source code control. It takes about 20 - 30 minutes to put these servers up (gateway, dns).

    [edit] I should point out I've had a box running it before release to make sure that any changes are accounted for.

    • ams6110 12 years ago

      Upgrades generally work well for me, but DO always check the release notes and the upgrade guide for the new version. Sometimes you need to do a few extra steps, but in my experience it will always be clearly documented. And just a heads-up for the NEXT version:

      OpenBSD 5.5 will be year 2038 ready, but this requires a change to a 64 bit time type. This results in a "flag day" event, where old binaries will not run on the new kernel, and the new binaries won't run on the old kernel, and some file formats will be changing. A remote, no-console process will be provided, but it will be a more touchy update process than usual.

    • aflott 12 years ago

      I used to do fresh installs (due to a general fear of incremental upgrades failing) until I tried using their upgrade guides. I've never looked back. http://www.openbsd.org/faq/upgrade54.html

      • protomyth 12 years ago

        I do upgrades on some machines, but for some servers (firewall, dns, print server), it just takes a lot less time to do a fresh install. I keep the configs, keys, etc. under source control and can put it all back faster than doing the upgrade.

        It is also pretty good practice for anytime those servers go bad. It helps to be able to put temporary replacements in service from whatever I have lying around. I can save the hot spares for machines that have user data on them (e-mail, file servers).

      • ghshephard 12 years ago

        I seem to recall someone (Theo, I believe) say that in order for an OpenBSD to maintain library compatibility with existing applications, you had to do an "Upgrade in Place" - and not do a fresh install.

        I.E. The default approach, incremental upgrade, is the only way to ensure your OpenBSD system doesn't fail.

        • protomyth 12 years ago

          For the servers I'm talking about, blowing the whole thing away and installing any packages from the new disc is just fine and keeps away the clutter.

          I look at it this way, if all I'm really doing is adding some flags or configuration files, I would rather just blow it away and do the reinstall. Last couple of times I did that with my firewall, it was a 20 minute install.

          • ghshephard 12 years ago

            Completely agree with you - and it's what I've done in almost every case. The Library thing is an OpenBSD issue that people who are upgrading need to take note of though.

jorgecastillo 12 years ago

If you haven't tried OpenBSD yet I invite you to try it, you might like it. A long time ago I used OpenBSD as my sole desktop for six months and I fell in love with it. Right now OpenBSD is not a viable solution for my needs, but depending on your use case it might be for you. I definitely hope that one day I can use OpenBSD as my main operating system.

My favorite OpenBSD features:

-Awesome documentation (FAQ & Man Pages)

-Small installation media (amd64/install54.iso - 232MB)

-OpenBSD developers eat their own dog food

-Just works philosophy

pimeys 12 years ago

I'm a big OS geek, I love to install and test all new operating systems. Does anybody use OpenBSD as their main development OS? At least there's ports, and looks like you can compile all the necessary tools (xmonad, vim, firefox, zsh) from the ports system. But is this the ideal use of OpenBSD? Do I gain something if changing from Gentoo?

  • Mordak 12 years ago

    I use OpenBSD in a development environment. The environment happens to be offline, so the win for OpenBSD here is that it is very easy to work with in places where you don't have internet access. The entire system comes on CDs that you can carry around, and you can easily work offline with a local copy of the package repository when you need to install something. The included man pages are excellent, and are all you really need to consult when configuring the system. I find it is generally more productive to consult the man pages than search the internet when trying to do something.

    Aside from being easy to work with when you don't have internet, the other upsides are the small footprint and light resource requirements, built in VMWare support, transparent and simple configuration and system initialization, and overall Just Works factor. The package repository has the things I generally want, and it's easy for me to set up my preferred development environment (xmonad, vim, firefox). As far as actually doing development, it's much like on any other *nix (xterm, vim, ruby, python, etc.).

    If you're an OS geek, I don't see why you wouldn't want to have a look. I don't know if you'll prefer it over Gentoo, but you may be pleasantly surprised by the functionality and simplicity of the system. I find it a bit of a breath of fresh air when I get to it after time spent on Linux or OS X.

    • clarry 12 years ago

      "A breath of fresh air" is exactly the expression I've used to describe my experience with OpenBSD. It feels so simple, clean, consistent, and well documented. After using it for a while everything else starts to look like a clusterfk.

  • itwontdie 12 years ago

    OpenBSD is made for developers by developers. Everything from configuration files in /etc to any system API calls are well documented in the man pages. They treat the man pages just as any other piece of the operating system. I.e. incorrect information in a man page is treated as a bug and dealt with just as diligently.

    http://www.openbsd.org/cgi-bin/man.cgi

    I moved from using Gentoo for 10 years to OpenBSD and have not looked back.

    Edit; You gain quite a bit of time moving from Gentoo to OpenBSD because there is no requirement to compile or fix your operating system.

  • ams6110 12 years ago

    I use OpenBSD as my main desktop and dev machine, with Awesome as the window manager (it's a tiling window manager).

    http://awesome.naquadah.org/

    I use Xombrero (formerly called xxxterm) for browsing, or Chromium from packages if I'm working with anything on Google.

    https://opensource.conformal.com/wiki/xombrero

    I use Emacs as my editor and email client, and do pretty much everything else in a terminal.

    • pimeys 12 years ago

      Are you using any specific font setup? Infinality patches etc? At least default install leaves the fonts in a pretty bad state.

      • sramovOP 12 years ago

        The fonts are looking nice and sharp for me:

        http://s24.postimg.org/n94n4dred/fonts.png

        I fetch freetype via CVS from xenocara tree:

            cvs co xenocara/lib/freetype
        
        Apply the subpixel patch (the Adobe CFF stuff is already default in -current):

        http://dpaste.com/hold/1438578/

        And use the following `~/.config/fontconfig/fonts.conf`:

        http://dpaste.com/hold/1438579/

        You might also want to delete `/etc/fonts/conf.d/30-lucida-aliases.conf`.

        • sramovOP 12 years ago

          Forgot to add, after you uncomment the subpixel stuff, just do a `make && sudo make install && make clean` from the `xenocara/lib/freetype` directory.

          Also, repeat the same after each snapshot upgrade, as the X sets will overwrite it every time, naturally. Don't forget to keep it updated as well, with `cvs up`.

      • ams6110 12 years ago

        Hm no.. have never heard of Infinality and didn't see anything OpenBSD-specific.

        I'd say if you're needing extensive font support, or do any really heavy graphics work, OpenBSD may not work well for you as a desktop. For me, the stock fonts on OpenBSD meet my needs.

    • weavie 12 years ago

      What do you code?

      That awesome looks um.. awesome. Never come across it before. I have an old netbook here that has a broken trackpad. I might be tempted to give it a go with that.

      • pimeys 12 years ago

        Please try out the tiling window managers. Awesome, i3 or Xmonad are all great work environments. The learning curve is maybe a bit tough, but when you get over it, you just can't go back.

      • ams6110 12 years ago

        Right now I'm working mostly in python and javascript, with some database development (mysql and postgres) and general sysadmin (can't ever seem to get away from that). I've had success using the FreeTDS and sqsh packages to do SQL Server work (with a remote server, obviously. In theory you can run VMs on OpenBSD using qemu but the one time I tried it was so painfully slow it wasn't worth it).

  • aortega 12 years ago

    I used it for a while as a desktop. Maybe it's because I have an old Thinkpad, and I know OpenBSD is being developed mainly in old Thinkpads, but everything works just a little better in OpenBSD. The video, sleep/resume, power, wifi, etc. Everything just works a bit faster, a bit cleaner. It's like FreeBSD but without feeling that a script kiddie will remotely crash or pwn your box.

    If you limit yourself to the package repository (about 10K packages) everything just works. Compiling things from source often doesn't, (not different than many linux distros). Tip: use the binary packages.

    Also it can't run virtualbox or any other virtualization software, so sadly had to switch to Linux again. Soon...

  • dysoco 12 years ago

    I tried luck with FreeBSD and OpenBSD, but just couldn't.

    Yes, I love both Operating Systems, I love that they are integrated and somewhat less retarded than Linux, I also like their community and development team and OpenBSD's focus on security and code-correctness.

    But they are not yet "there" for Desktop use, many applications won't work or will be difficult to set up, and driver compatibility is way worse.

    So maybe in a couple of years I'll switch to FreeBSD as a desktop, but for now Funtoo is still fun and somewhat usable.

    • mmariani 12 years ago

      Or you could switch to Mavericks which is based on Darwin that was forked from FreeBSD, and desktop ready. ;)

      • empthought 12 years ago

        You probably know this, but the Darwin/FreeBSD relationship is much, much more complicated than a fork.

        Darwin's the successor to NeXTSTEP, which included a Mach microkernel and some BSD APIs and userland. When they developed OS X, Apple updated much of the userland using more recent FreeBSD versions as a base.

        Even more confusingly, Apple has contributed some subsystems to open source that have made their way into FreeBSD (notably the compiler and libc++).

        So Darwin's not a fork in the same way that OpenBSD is a fork of NetBSD.

      • dysoco 12 years ago

        I will if you pay me a Mac :P

      • pimeys 12 years ago

        But is too complicated system underneath for me to use. I love Funtoo/Gentoo for it's simplicity. I know exactly what's installed to my system and how I should configure it. With OS X, Ubuntu or Windows, I don't have that feeling anymore.

  • hcal 12 years ago

    Before I switched to Mac, I ran OpenBSD for about a year on my primary laptop. It was a pretty good experience but my laptop stays plugged in 90% of the time. I took a pretty good hit on battery life and that would have been a pain if I traveled more. OpenBSD really felt more at home on my server but it still makes an OK desktop. Last I checked GNOME3 wasn't fully operational, but I think it was coming along.

    You are really encouraged by the communtiy to use packages over the ports system, but you'll find everything you listed in both.

  • digitalzombie 12 years ago

    i'd use it for firewall.

    I hear pf firewall is awesome.

simonw 12 years ago

The vocals on the release song are lovely http://www.openbsd.org/songs/song54.mp3 - http://www.openbsd.org/lyrics.html#54

brunoqc 12 years ago

What is the best hardware for a home router? Soekris was very popular in the past but I'm wondering that maybe there's cool hardware out there.

I also wonder if carpd is usable with a DHCP connection.

  • abjr 12 years ago

    I'm not sure you'd consider it "cool", but I've been using one of these for the past 5 months with OpenBSD 5.3 with no issues:

    http://www.newegg.com/Product/Product.aspx?Item=N82E16856205...

  • sramovOP 12 years ago

    Also, there are some nice fanless Mini-ITX boards out there with dual gigabit, which is all you need (plus a case for a board and a switch, of course).

    M350 enclosure is popular and cheap.

    It goes without saying such box will smoke anything you can buy of-the-shelf. Hell, even the anemic ALIX Geode gave a nice boost to my home network over the crappy Linksys I had previously (things are now snappy and 100% stable).

  • sramovOP 12 years ago

    Soekris now has new models with Intel Atoms, top quality stuff as always (old ones are rock solid too, if a bit dated). I went with ALIX instead as I had a local distributor so it was quite a bit cheaper. Plenty fast for now, too.

  • aflott 12 years ago

    While may not be the best, but with no moving parts Alix boards are quite nice. http://www.pcengines.ch/alix2d3.htm

spetsnaz 12 years ago

Great for Firewall or Gateway...simply the best!

jtth 12 years ago

This building is energy neutral because all the lights are off and there's no power.

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection