Slashdot Mirror


OpenBSD 5.7 Released

An anonymous reader writes: Right on schedule, OpenBSD 5.7 was released today, May 1, 2015. The theme of the 5.7 release is "Source Fish." There are some big changes in OpenBSD 5.7. The nginx httpd server was removed from base in favor of an internally developed httpd server in 5.7. BIND (named) was retired from base in 5.7 in favor of nsd(8) (authoritative DNS) and unbound(8) (recursive resolver). Packages will exist for BIND and nginx. This version includes a new control utility, rcctl(8), for managing daemons/services, USB 3 support and more. See a detailed log of changes between the 5.6 and 5.7 releases for more information. If you already have an OpenBSD 5.6 system, and do not want to reinstall, upgrade instructions and advice can be found in the Upgrade Guide. You can order the 5.7 CD set from the new OpenBSD Store and support the project.

80 comments

  1. BSD is dying by Anonymous Coward · · Score: 0

    Obviously ;-)

    1. Re:BSD is dying by Anonymous Coward · · Score: 2, Funny

      According to comments on Slashdot 95% or so of Linux server admins have already switched or is in the process of switching to OpenBSD.

    2. Re:BSD is dying by danbob999 · · Score: 1

      Very true. Was Debian 8.0 even announced on Slashdot?

    3. Re:BSD is dying by Anonymous Coward · · Score: 4, Funny

      Yes it was. But so far no one has downloaded it. Even the Debian developers switched to OpenBSD because of Systemd.

    4. Re:BSD is dying by Anonymous Coward · · Score: 0

      I'm waiting for LibreBSD.

    5. Re:BSD is dying by phantomfive · · Score: 1

      It's hard to believe that page is not satire.

      --
      "First they came for the slanderers and i said nothing."
    6. Re:BSD is dying by Anonymous Coward · · Score: 0

      It isn't. Spread the word.

    7. Re:BSD is dying by Zaelath · · Score: 1

      Spread the word about what? How someone has a ridiculous blog that uses logic akin to:

      All dogs have four legs.
      Cats have four legs.
      Therefore, cats are dogs.

      ?

  2. Re:wow first time by antiperimetaparalogo · · Score: 1

    first post??

    Yes, first post, i confirm it - as i confirm that the "confirmed dead" (open/free/net/e.t.c.) BSD is alive enough.

    --
    Antisthenes: "Wisdom begins by examining the words/names." - excuse my English, i am (slightly...) better with my Greek!
  3. Cool by nult · · Score: 1

    Looking forward to upgrading ! I think the rcctl is a great new addition to the OS.

  4. They forgot the best feature.... by Etcetera · · Score: 5, Insightful

    No systemd ;)

    Seriously, though. Although I can't see myself switching wholesale back to BSD, and the long term *nix-esque commodity (non-specialized) ecosystem will revolve around Linux for the foreseeable future, there are enough people frustrated by the OS vendor directions that it's good to have a backup.

    Think of BSD as a third party, to keep the primary two enterprise Linux vendors in check should they decide to ignore their constitu^H^H^H^H^H^H^H users too much.

    1. Re:They forgot the best feature.... by Anonymous Coward · · Score: 1

      BSD is a major commodity ecosystem for end-consumer products. I'd wager that there are more MacBooks and iPods out there running OSX and iOS flavors of BSD than there are Linux ones. They just suck in the server space, though, and that's where Linux cannot at the moment be questioned, let alone defeated.

    2. Re:They forgot the best feature.... by QuietLagoon · · Score: 4, Insightful

      BSD is a major commodity ecosystem for end-consumer products. I'd wager that there are more MacBooks and iPods out there running OSX and iOS flavors of BSD than there are Linux ones. They just suck in the server space, though, and that's where Linux cannot at the moment be questioned, let alone defeated.

      My FreeBSD servers run just fine, thank-you. I moved those servers from Linux to FreeBSD a number of years ago, and never had the need to look back.

    3. Re:They forgot the best feature.... by BitZtream · · Score: 1

      Mean while ... the BSD people keep thinking of Linux as a 'third party' they'd not let their worst enemy run.

      Linux is for the unenlightened. Running a Linux file server or firewall on a heavy network ... there you're just showing how ignorant you are.

      Linux on a desktop with shitty hardware that BSD doesn't support ... sure, its great.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    4. Re:They forgot the best feature.... by Etcetera · · Score: 2

      BSD is a major commodity ecosystem for end-consumer products. I'd wager that there are more MacBooks and iPods out there running OSX and iOS flavors of BSD than there are Linux ones. They just suck in the server space, though, and that's where Linux cannot at the moment be questioned, let alone defeated.

      Ironically, systemd is quite well suited for system designers creating embedded products, or those where there's effectively no "middle layer" between the naive "true end user" and the original builder/vendor -- a locked down iOS or an OS X system where the terminal-level control isn't needed.

      The folks most objecting to systemd are in the server space -- true OS system admins who design and integrate the architecture, and are responsible for keeping things up and running.

      Yeah, systemd+busybox might be perfect for the next OpenWRT embedded IoS device -- but it's not what I'll want on the next massive Dell server I'm responsible for at work.

    5. Re:They forgot the best feature.... by Anonymous Coward · · Score: 0

      They just suck in the server space

      "They" as in OSX or "BSD"? FreeBSD is a wonderful server OS that has been gaining ground quickly.

    6. Re:They forgot the best feature.... by Aighearach · · Score: 1

      Linux on a desktop with shitty hardware that BSD doesn't support ... sure, its great.

      NetBSD runs everywhere, even shitty hardware.

      Everything on the "linux desktop" is portable stuff that runs fine on *BSD.

    7. Re:They forgot the best feature.... by Anonymous Coward · · Score: 0

      As someone who has implemented many custom Linux builds for embedded products over the years I can say systemd is not well suited for the embedded space.

      First, systemd devs have shown they don't really care much about the embedded market. An example is the hard dependency to glibc. uClibc, dietlib, musl libc....none of these are compatible with systemd.

      Second, I can already get Linux to boot in 4 seconds on a 600MHz Ti am3352, with a custom init that handles dependencies and parallel task startup. This stuffs not rocket science, don't need systemd.

    8. Re:They forgot the best feature.... by Anonymous Coward · · Score: 1

      hear, hear. people always are surprised when I tell them I run OpenBSD as my desktop. It's surprisingly good. I think it's the best BSD if you want current gnome support and their Python/Ruby support are also really good and current.

    9. Re:They forgot the best feature.... by Anonymous Coward · · Score: 1

      yeah, no way they suck in server space. FreeBSD serves all of netflix, plus my openbsd servers are nicely locked down so I can sleep well at night without worrying about security.

    10. Re:They forgot the best feature.... by Anonymous Coward · · Score: 0

      No linux is being used because it supports alot of different hardware and is easy to deploy.
      BSD is superior to Linux on the server front. It's a pain is the ass to get the hardware right but it's rock solid. THAT's the only reason why Linux cannot be "defeated". Because of all the Linux admins that get paid shit loads of money to take the easy way out instead of using a solid SERVER OS.

      Wow, keep spewing your shit. Oh ya, you're probably one of those linux admins, right?

    11. Re:They forgot the best feature.... by zlogic · · Score: 1

      Probably a stupid question, but who do you consider to be the other (non-RedHat) enterprise Linux vendor?

  5. Re: SEcond Poast. Fuck Theo. Fuck lennart in the g by Anonymous Coward · · Score: 0

    Tell us how you really feel

  6. Re:SEcond Poast. Fuck Theo. Fuck lennart in the go by Anonymous Coward · · Score: 0

    Frost piss missed.

    Theo d Rat is a fucking shithead by the way, fuck you Theo, fuck you. And Fuck lennart pottering for his shit systemd fuck shit. Theo is a shithead, but Lennart is a cock smoking butt fucking felching as ramming pig fucker dick stain shit face puke father fucker.

    What is this weak-ass shit? Is that the best you can do?

    I've seen better rants from little girls peddling girl scout cookies.

    If you're gonna rant about something, at least make it somewhat coherent. You can't even fucking spell correctly.

  7. Yay! by Anonymous Coward · · Score: 3, Informative

    Nice to see these guys continually putting out good stuff. There also seems to be a Google Summer of Code to get the HAMMER2 filesystem in OpenBSD. If this happens I can definitely see swtiching our systems over to OpenBSD from Linux. We have been waiting for a real filesystem with checksumming, compression and deduplication features in OpenBSD for some time now.

    1. Re:Yay! by Anonymous Coward · · Score: 0

      I've pushed out better during my daily shit!

    2. Re:Yay! by Anonymous Coward · · Score: 0

      Ah, a Linux kernel developer, eh!

    3. Re:Yay! by Anne+Thwacks · · Score: 1

      Possible Poettering Posture?

      --
      Sent from my ASR33 using ASCII
    4. Re:Yay! by Anonymous Coward · · Score: 0

      What will happen to Dragonfly then?

  8. Re:Boy! I hope it has systemd! by Anonymous Coward · · Score: 0

    Oh yes! BSD will be nothing if they don't charge 2079 centuries ahead of the rest of us!

  9. Systemd by Anonymous Coward · · Score: 0

    Y all the h8â½ D:

  10. New HTTP daemon by Aethedor · · Score: 1

    I understand they replaced nginx with something different. But why a half-finished webserver that doesn't even support things like URL rewriting. For those who seek a secure webserver, but with features to properly support the modern website/framework/CMS, try the Hiawatha webserver.

    --
    It doesn't have to be like this. All we need to do is make sure we keep talking.
    1. Re:New HTTP daemon by Anonymous Coward · · Score: 2, Informative

      nginx is still available as a port, as well as apache.

    2. Re:New HTTP daemon by Anonymous Coward · · Score: 0

      Because most people do not need a server full of (holes?) features... They just need to serve a few pages. Everything else is in ports, even your precious Hiawata...

    3. Re:New HTTP daemon by brynet · · Score: 3, Informative

      It's not a "half-finished" server, it's a new server written using OpenBSD's existing development practices, sharing code with relayd(8) in base. For OpenBSD httpd(8), 'featuritis' is being avoided so that the codebase remains simple and maintainable.

      https://github.com/reyk/httpd/...

      I've never heard of Hiawatha, but the GPL licencing makes it inappropriate for the base system. It is available as a package and in the ports, along with nginx and many other servers.

    4. Re:New HTTP daemon by Aethedor · · Score: 1

      No, most people want to run a simple PHP website (Wordpress, Drupal, etc). But since almost every modern CMS and framework require at least a simple form of URL rewriting (rewrite every request for a non-existig file to /index.php), OpenBSD's httpd is a no-go.

      --
      It doesn't have to be like this. All we need to do is make sure we keep talking.
    5. Re:New HTTP daemon by Anonymous Coward · · Score: 0

      I require mod_rewrite for more advanced caching, and shit, even for my SEO score.

      Does this httpd have the amount of eyes and ears that apache2 or nginx do? I'll trust it after 4 years when people have had a chance to put it through the gauntlet.

    6. Re:New HTTP daemon by brynet · · Score: 4, Informative

      OpenBSD's httpd(8) supports HTTP redirects, and it certainly seems possible to redirect requests to i.e: php-fpm.

              location "*.php" {
                      fastcgi socket "/path/to/php-fpm.sock"
              }

              location "/" {
                      block return 301 "/index.php"
              }

      Reyk Floeter (reyk@) has a Wiki with some additional example configurations, contribute more:

      https://github.com/reyk/httpd/...

    7. Re:New HTTP daemon by Anonymous Coward · · Score: 0

      OpenBSD is not looking to replace apache or nginx, they just don't want those programs being installed by default anymore. The goal of OpenBSD is to have a system that is secure out of the box, even without the latest patches. nginx did not full-fill that requirement. what was the saying for a while, one remote security flaw in over 10 years? I know it's gone up a bit since, but that is the best in the industry.

    8. Re:New HTTP daemon by Anonymous Coward · · Score: 1

      Many of OpenBSD's programs have the titles of no known security flaws ever. Of the ones that do have flaws, they are at rates magnitudes less than industry average. Don't expect features, just bare minimum functionality that OpenBSD requires. If the program also works for you, then you're in luck.

      OpenBSD devs have stated many times, they only end users they care about are themselves. The fact that their software is useful to others is just luck for everyone else.

    9. Re:New HTTP daemon by Noryungi · · Score: 4, Insightful

      No, most people want to run a simple PHP website (Wordpress, Drupal, etc). But since almost every modern CMS and framework require at least a simple form of URL rewriting (rewrite every request for a non-existig file to /index.php), OpenBSD's httpd is a no-go.

      Err... If you are running PHP on OpenBSD, you have COMPLETELY missed the point of OpenBSD in the first place.

      Seriously, though. PHP?

      --
      The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    10. Re:New HTTP daemon by Aethedor · · Score: 1

      And there you have the reason why almost nobody uses OpenBSD.

      --
      It doesn't have to be like this. All we need to do is make sure we keep talking.
    11. Re:New HTTP daemon by Noryungi · · Score: 2

      And there you have the reason why almost nobody uses OpenBSD.

      Yeah, well, I use OpenBSD, and I know a ton of people who use it for, say, firewalls, routers and other. And, yes, even web servers an other stuff.

      Seriously, man: PHP? Really?

      --
      The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    12. Re:New HTTP daemon by Aethedor · · Score: 1

      Seriously, man: OpenBSD? Really?

      As you can see, pointless flaming can be done about anything. If you want to critcize PHP, come up with some proper and valid arguments. Otherwise, you're nothing more than a loudmouth fanboy. I have several PHP websites running for many years, without a single hack, without a any significant downtime (besides server maintaince) and with proper speed. PHP is just a tool, it's the developer that makes it a good or bad website.

      --
      It doesn't have to be like this. All we need to do is make sure we keep talking.
    13. Re:New HTTP daemon by Anonymous Coward · · Score: 1
    14. Re:New HTTP daemon by Aighearach · · Score: 1

      Right, exactly, the default one is for bare minimum use. If you're hosting some modern what-the-what, then you install a full size web server. If you just need to serve up some HTML on a server that mostly does something else, then this is great.

      If you are actually hosting something, using a default bare-bones httpd is a no-go. You will have to make a choice between web server packages, and install one. Probably configure it, too.

    15. Re:New HTTP daemon by Anonymous Coward · · Score: 0, Flamebait

      OpenBSD's httpd is a no-go.

      ....as it should be. Strategic Wordpress deployment utilizes Windows 2003 servers, distracting would-be attackers from all of the holes and exploits available in the application with all of the holes an exploits available in the underlying operating system. OpenBSD isn't for you, but I hear the new Debian release has a great new systemd feature someone such as yourself will LOVE.....

    16. Re:New HTTP daemon by Anonymous Coward · · Score: 1

      OpenBSD does not care about us mortals. They are the reason why we have ASLR, PIE, 64bit, and many other features in most OSes. While the features existed, they were not pushed out by default because programs would randomly break for no apparent reason. OpenBSD took a step forward and made system designs that would cause programs that make use of undefined programming, break. This made it very easy to quickly find most flaws, allowing Linux to eventually go 64bit, among other things.

      Unlike most Linux ports, much of BSD is shared among the flavors. A lot of work gets shared, even if not all at the same time. There are forks of FreeBSD explicitly forked for the purpose of security testing. They try new exciting things, if they work, they port them back to FreeBSD. You don't see this often in Linux.

    17. Re:New HTTP daemon by Anonymous Coward · · Score: 1

      Unlike other packages and OS's, Theo wants the most secure OS possible. In order to do that the default packages need to be as secure as possible. They moved to their own HTTPd to ensure that it's secure out-of-the-box.

      You're missing a key point here. Just because other packages take 4 years to "harden" doesn't mean that younger packages are crap. The quality has nothing to do with age but everything to do with quality of design and ensuring that all 'i' are dotted and 't''s are crossed.

      The reason for vulnerabilities are do to lazy programming or panic programming where a feature needs to ship tomorrow, who cares how it's implemented. If done correctly, vulnerabilities can be eliminated. There are finite reasons for vulnerabilities, if proper practices are followed, when processing data from the outside world will not cause security issues. There are unit tests that can ensure that cases are covered correctly.

      For all we know the daemon has been run through attacks for a while now, possibly your 4 years, before being released.

      You're high-horse comment simply shows that you're a shill, troll, or have no idea what OpenBSD stands for. I'd recommend you go back in your cave.

    18. Re: New HTTP daemon by Aethedor · · Score: 1

      I knew you would come up with these articles. Those troll articles are filles with incorrect claims, things that are not PHP specific and outdated stuff. You only believe those stories because you want to believe them. Please, grow up.

      --
      It doesn't have to be like this. All we need to do is make sure we keep talking.
    19. Re: New HTTP daemon by Aethedor · · Score: 1

      Systemd, yuck, no thanks. It seriously makes me consider moving to FreeBSD.

      --
      It doesn't have to be like this. All we need to do is make sure we keep talking.
    20. Re:New HTTP daemon by Anonymous Coward · · Score: 0

      OpenBSD is a great OS with a lot of nice features. There's no need to lie about features that other OS' had as default long before OBSD to try to make it look good.

  11. Switch and leave the drama behind by Anonymous Coward · · Score: 1

    I switched from Fedora to NetBSD. Feels good knowing the OS isn't turning inside out every month. Oh yeah, I hate LVM too. For a desktop? What's wrong with a swap and a /? Nothing is wrong, never was.

    1. Re:Switch and leave the drama behind by Anonymous Coward · · Score: 0

      What's wrong with a swap and a /? Nothing is wrong, never was.

      if it's not enterprisey, it's uncool. Wait, now it's all about cloud. Enterprise is so 2009.

    2. Re:Switch and leave the drama behind by shoor · · Score: 2

      There was plenty of drama in the 90s around the various BSDs (FreeBSD, NetBSD, and OpenBSD) before they split apart. You could go look at the old Usenet postings to see what it was like.

      --
      In theory, theory and practice are the same; in practice they're different. (Yogi Berra & A. Einstein)
    3. Re:Switch and leave the drama behind by Anonymous Coward · · Score: 0

      I switched from gentoo to NetBSD. Quite a while before the systemd drama started, enabling me to watch the whole thing with a chuckle and occasionally engage in a flamewar without really being affected by the matter.

  12. Re:SEcond Poast. Fuck Theo. Fuck lennart in the go by Anonymous Coward · · Score: 0

    Switch to decaf

  13. Re:Boy! I hope it has systemd! by Anonymous Coward · · Score: 0

    Systemd is the future!

  14. kdbus by Anonymous Coward · · Score: 0

    Here's more Poetteringware to hate, headed for the kernel!

  15. Re:Debian's opinion on "anti-systemd people" by Anonymous Coward · · Score: 1

    Yup, definitely a good reason to switch. Russell Coker is an idiot. Linking gender identity to systemd makes as much sense as linking Doc Marten's to skinheads. Yeah, some angry nuts emailed him and really do appear to be homophobic woman haters. And Doc Marten's are popular with skinheads.

    Does that mean Doc Marten's are a shitty shoe? Does that mean that systemd is a good idea?

    Who gives a shit. I'm leaving the drama behind and choosing freedom from the insanity instead. Oh, and Fuck You Russell for suggesting I hate women or homosexuals because I don't like systemd. You're a complete shithead.

  16. Re:Banning Abusers is the OpenSource way by Anonymous Coward · · Score: 0

    Uh...I'm anti-SystemD in the server room and I'm a lesbian. How does this make me a woman hater exactly? Is SystemD female?

  17. Time To Give It a Try by organgtool · · Score: 3, Interesting

    I was going to upgrade my servers to Ubuntu 15.04 until I learned that they integrated SystemD into that release, so now is a great time to evaluate OpenBSD in a virtual machine. Maybe OpenBSD could create a section on their web site that provides documentation on the advantages of BSD over Linux as well as some advice on how to avoid common pitfalls that Linux users typically make in BSD. Just for fun, they could call that section "Because of SystemD". In any event, I'm curious to see what I'll miss coming from the Linux world after spending some time in OpenBSD.

    On a semi-related note: what's with replacing nginx with their own http daemon? Is the NIH syndrome spreading to OpenBSD as well?

    1. Re:Time To Give It a Try by Noryungi · · Score: 2

      [...] Maybe OpenBSD could create a section on their web site that provides documentation on the advantages of BSD over Linux as well as some advice on how to avoid common pitfalls that Linux users typically make in BSD. [...] In any event, I'm curious to see what I'll miss coming from the Linux world after spending some time in OpenBSD.
      On a semi-related note: what's with replacing nginx with their own http daemon? Is the NIH syndrome spreading to OpenBSD as well?

      Nope, they have explained at legnth that nginx was getting too big, and its developpers too unresponsive, for it to be a part of base anymore. That was also the case with the previous web server, which was an old version of Apache with a lot of patches.You can still install nginx from ports though and Apache is in there somewhere as well.

      As far as documentation is concerned, please refer to the OpenBSD FAQ:

      http://www.openbsd.org/faq/faq...

      And:

      http://www.openbsd.org/faq/faq...

      What will you miss? Probably not much, except for the eye candy. OpenBSD is a really good and complete OS, and its quality is excellent.

      --
      The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
    2. Re:Time To Give It a Try by Anonymous Coward · · Score: 1

      I would add to this there are some differences between Linux and BSD in terms of tools/command line switches for some administrative tasks, etc. I highly recommend the Absolute OpenBSD book by Michael Lucas. Great ref to have on hand when for Linux users switching over!

    3. Re:Time To Give It a Try by Anonymous Coward · · Score: 0

      I really like Matt Fuller's "rant", here: https://www.over-yonder.net/~fullermd/rants/bsd4linux/01

    4. Re:Time To Give It a Try by thegarbz · · Score: 1

      I'm curious to see what I'll miss coming from the Linux world after spending some time in OpenBSD

      You'll miss nothing. As someone who won't consider trialling an upgrade because of some program and have absolutely no idea whether it will work or not, and then will happily throw the metaphorical baby out with the bathwater and switch to a completely different OS... you won't miss a thing.

  18. Re: Banning Abusers is the OpenSource way by Anonymous Coward · · Score: 0

    Russell Coker is an idiot. Don't listen to that BS. Use what you like, haters can fuxk themselves.

  19. Re: by Anonymous Coward · · Score: 1

    Still wish OpenSSL would have been renamed to WideOpenSSL

  20. Re:Banning Abusers is the OpenSource way by Anonymous Coward · · Score: 1

    Not that I'd want to, but as a white cis male, am I even allowed to run systemd? Or is my oppression not welcome?

  21. Re:Banning Abusers is the OpenSource way by Anonymous Coward · · Score: 0

    If you were in charge of debian and someone submitted an opensource program for packaging who's author did not like debrah, women, or lesbians and did like reiserFS in it's day and Hans Reiser... would you reject that software for packaging on those grounds?