-
Notifications
You must be signed in to change notification settings - Fork 43
/
Copy path77.html
986 lines (891 loc) · 40.8 KB
/
77.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
<!doctype html>
<html lang="en" id="release">
<head>
<meta charset=utf-8>
<title>OpenBSD 7.7</title>
<meta name="description" content="OpenBSD 7.7">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/77.html">
</head><body>
<h2 id="OpenBSD">
<a href="index.html">
<i>Open</i><b>BSD</b></a>
7.7
</h2>
<table>
<tr>
<td>
<a href="images/xxx.jpg">
<img width="100" height="1000" src="images/xxx-s.gif" alt="i need coffeeXXXX"></a>
<td>
Released Apr XX, 2025. (58th OpenBSD release)<br>
Copyright 1997-2025, Theo de Raadt.<br>
<br>
Artwork by Tomáš Rodr.
<br>
<ul>
<li>See the information on <a href="ftp.html">the FTP page</a> for
a list of mirror machines.
<li>Go to the <code class=reldir>pub/OpenBSD/7.7/</code> directory on
one of the mirror sites.
<li>Have a look at <a href="errata77.html">the 7.7 errata page</a> for a list
of bugs and workarounds.
<li>See a <a href="plus77.html">detailed log of changes</a> between the
7.6 and 7.7 releases.
<p>
<li><a href="https://man.openbsd.org/signify.1">signify(1)</a>
pubkeys for this release:<p>
<table class=signify>
<tr><td>
openbsd-77-base.pub:
<td>
<a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/openbsd-77-base.pub">
RWSbCCUoGpcxVRmNb/XFYBbthxWMK7G6fNbJhb993Ohuh29WFaT9vhe2
</a><tr><td>
openbsd-77-fw.pub:
<td>
RWSJsKh8CzZG93aXHWDPCNM04iMwt7wRzfWzs1nL/2K6OsUvmAEfQavY
<tr><td>
openbsd-77-pkg.pub:
<td>
RWQ0omJ8AdcUd41n7fqEccjc/VyLhJLKVJo7oFUg7epg6lUHRtgMgT52
<tr><td>
openbsd-77-syspatch.pub:
<td>
RWRtcHFMyeKCcG4TkoK/TbEvDd1vch0tq8VgRR5UBpvAQkUcgja3jtV9
</table>
</ul>
<p>
All applicable copyrights and credits are in the src.tar.gz,
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
files fetched via <code>ports.tar.gz</code>.
</table>
<hr>
<section id="new">
<h3>What's New</h3>
<p>
This is a partial list of new features and systems included in OpenBSD 7.7.
For a comprehensive list, see the <a href="plus77.html">changelog</a> leading to 7.7.
<p>
<ul>
<li>Platforms specific improvements:
<ul>
<li>arm64:
<ul>
<li>Set AP power state, fixing the SMC initialization on the M1 MacBook with the latest system firmware.
</ul>
<li>amd64:
<ul>
<li>Allowed boot loader to run as AMD SEV guest on QEMU with EFI.
<li>Allowed kernel boot on QEMU with AMD SEV.
<li>Allowed use of MSI with the QEMU default pc-i440fx machine.
<li>Stopped amd64 leak of kernel stack guard pages.
<li>Implemented the AMD SEV <a href="https://man.openbsd.org/psp.4">psp(4)</a> download firmware command to load new firmware onto the chip and made the AMD SEV automatically load psp(4) firmware during <a href="https://man.openbsd.org/vmd.8">vmd(8)</a> startup.
</ul>
<li>riscv64:
<ul>
<li>...
</ul>
<li>sparc64:
<ul>
<li>Implemented an interrupt depth counter for sparc64.
</ul>
<li>mips64:
<ul>
<li>...
</ul>
<li>hppa:
<ul>
<li>Moved the hppa stack 1GB higher.
</ul>
<li>i386:
<ul>
<li>Stability improvements in low-memory situations, especially for MP.
<li>...
</ul>
<li>powerpc:
<ul>
<li>Fixed a powerpc64 bug where a pte could be put into an incorrect pteg, leading to a crash.
<li>...
</ul>
<li>luna88k:
<ul>
<li>Changed luna88k disklabel labeloffset to 0.
</ul>
<li>More platform specific changes can be found in the <a href="#hardware_support">hardware support</a> section below.
</ul>
<li>Various kernel improvements:
<ul>
<li>Added multi-line strings support to the <a
href="https://man.openbsd.org/bt.5">bt(5)</a> script parser.
<li>Added support for read/write of xmm/ymm registers to <a
href="https://man.openbsd.org/lldb.1">lldb(1)</a>.
<li>Adjusted the ptrace interface to properly support
single-threaded continue and make it possible to use breakpoints in
multi-threaded processes in gdb.
<li>Add <a href="https://man.openbsd.org/ptrace.2">ptrace(2)</a>
commands used to read/write the XSAVE area of a traced process.
<li>Improved responsiveness in OOM situations and made free target checks coherent.
<li>Added the ability for <a
href="https://man.openbsd.org/bus_dmamem_alloc.9">bus_dmamem_alloc(9)</a>
to recognize the BUS_DMA_64BIT flag and allocate memory for DMA
without any 4GB restrictions on amd64.
<li>Moved to indicating that a process has stopped by setting PS_STOPPED flag.
<li>Removed the ability to specify a root, dump or swap device on <a
href="https://man.openbsd.org/st.4">st(4)</a>.
<li>Added support for CSI b control sequence (repeat last printed
character) to the <a
href="https://man.openbsd.org/wscons.4">wscons(4)</a> vt100 emulation.
<li>Implemented CSI s and CSI u to save and restore cursor position in
<a href="https://man.openbsd.org/wscons.4">wscons(4)</a>.
<li>Correctly honored the count optional argument of the <a
href="https://man.openbsd.org/ddb.4">ddb(4)</a> break command,
ensuring execution does not stop until the breakpoint is hit at least
that many times.
<li>Taught <a href="https://man.openbsd.org/ddb.4">ddb(4)</a> how to disassemble endbr64.
<li>In uvm, prevent a race where a mapped object is being truncated
while we are spinning to unwire it.
<li>Optimized page daemon active and inactive list traversals when
looking only for low pages.
<li>Added a helper to check if memory has been freed for a given
request to improve speed of the page daemon loop.
<li>Started accounting for in-flight pages being written to disk when
the page daemon is computing page shortage.
<li>Fixed <a href="https://man.openbsd.org/simplefb.4">simplefb(4)</a> colours for BPP16 and BPP24.
<li>Added support for BPP16 16-bit color EFI framebuffer format as offered by u-boot.
<!-- suspend/resume -->
<li>...
<ul>
<li>...
</ul>
<!-- fixed crashes/bugs -->
<li>...
</ul>
<li id="SMP_Improvements">SMP Improvements
<ul>
<li>Unlocked timeout_sysctl().
<li>Unlocked KERN_ALLOWKMEM.
<li>Reduced kernel lock contention when tearing down file-backed regions.
<li>Moved <a href="https://man.openbsd.org/dt.4">dt(4)</a> to using a ringbuffer per CPU.
<li>Unlocked ptsignal, psignal and prsignal.
<li>Used a mutex to make <a href="https://man.openbsd.org/psp.4">psp(4)</a> MP safe.
<li>Locked send socket buffer for fstat syscall.
<li>Made lock changes to reduce lock contention in __thrsleep and
__thrwakeup syscalls. go performance particularly benefits from this.
</ul>
<li>Direct Rendering Manager and graphics drivers
<ul>
<li>...
</ul>
<li>VMM/VMD improvements
<ul>
<li>Added an IPI for executing INVEPT to flush EPT on remote CPUs, a
first step toward allowing guest memory not to be wired by UVM.
<li>Implemented <a href="https://man.openbsd.org/psp.4">psp(4)</a>
shutdown command and <a
href="https://man.openbsd.org/ioctl.2">ioctl(2)</a> PSP_IOC_SHUTDOWN,
which will be used by <a
href="https://man.openbsd.org/vmd.8">vmd(8)</a> to reset <a
href="https://man.openbsd.org/psp.4">psp(4)</a> on startup.
</ul>
<li>Various new userland features:
<ul>
<li>Developed a new imsg API and applied it across the tree.<!-- details? -->
<li>Allow the user to provide an alternative perfpolicy when on
battery, extending the semantics of hw.perfpolicy to provide two
buttons to specify desired behavior. This gives users more flexibility
in setting the performance when AC-powered vs. battery powered.
<li>Disk partition information is now saved by
<a href="https://man.openbsd.org/security.8">security(8).
</ul>
<li>Various bugfixes and tweaks in userland:
<ul>
<li>Added <a href="https://man.openbsd.org/wsconscfg.8">wsconscfg(8)</a> -g option to get the index of the current virtual terminal.
<li>Made <a href="https://man.openbsd.org/getgrouplist.3">getgrouplist(3)</a> always return the total number of groups found.
<li>Ignore extra groups that don't fit in the buffer passed to <a href="https://man.openbsd.org/getgrouplist.3">getgrouplist(3)</a>, providing only the kernel maximum of sixteen groups.
<li>Prevent <a href="https://man.openbsd.org/newsyslog.8">newsyslog(8)</a> running through time checks when an entry is definitely oversized.
<li>Changed <a href="https://man.openbsd.org/ps.1">ps(1)</a> print
the session id (PID of the session leader) instead of a pointer with display argument 'sess'.
<li>In <a href="https://man.openbsd.org/cu.1">cu(1)</a>, map ucom unit number to cuaU number using the same
scheme MAKEDEV uses, fixing problems with ucom units > 10.
<li>Made CPU frequencies human-readable with <a href="https://man.openbsd.org/systat.1">systat(1)</a> sensors -h.
<li>Fixed a bug where <a href="https://man.openbsd.org/getty.8">getty(8)</a> dx flag was supposed to set decctlq, but was setting ixany instead.
<li>Made pkg_add run <a href="https://man.openbsd.org/ldconfig.8">ldconfig(8)</a> after each updateset if the list of shared libraries was changed.
<!-- audio -->
<li>...
<!-- pax -->
<li>...
<!-- various -->
<li>...
<!-- editors -->
<li>...
</ul>
<li id="hardware_support">Improved hardware support and driver bugfixes, including:
<ul>
<li>Increased <a href="https://man.openbsd.org/psp.4">psp(4)</a> timeouts, allowing the EPYC 9124 time to attach.
<li>Fixed RunTimeToEmpty on some EATON models in <a href="https://man.openbsd.org/upd.4">upd(4)</a>.
<li>Improved the heuristic for detecting i2c devices (making type-A ports on the Vivobook work in ACPI mode).
<li>Made scaling available for normal wsmouse.4 mice, not just touchpads.
<li>Added <a href="https://man.openbsd.org/pinctrl.4">pinctrl(4)</a> support to the <a href="https://man.openbsd.org/qciic.4">qciic(4)</a> driver for Qualcomm Snapdragon SoCs.
<li>Moved to send only a single reset during attach for <a href="https://man.openbsd.org/ihidev.4">ihidev(4)</a> devices, preventing issues with some devices like the built-in keyboard on the ThinkPad T14s Gen 6.
<li>Changed the <a href="https://man.openbsd.org/sdhc.4">sdhc(4)</a> bus power behavior to no longer perform a power-off voltage switch request when the card is already operating at the requested voltage.
<li>Implemented <a href="https://man.openbsd.org/aplsmc.4">aplsmc(4)</a> support for the new CHLS key used to control the battery charge level in newer SMC firmware.
<li>Made qcpas(4) send APM_POWER_CHANGE events on AC/battery life changes, allowing upowerd to react.
<li>Added <a href="https://man.openbsd.org/qccpucp.4">qccpucp(4)</a>, a driver for the CPUSS Control Processor (CPUCP) mailbox controller.
<li>Fixed support for AMD 600 series <a href="https://man.openbsd.org/ahci.4">ahci(4)</a> controller.
<li>Implemented <a href="https://man.openbsd.org/rkpmic.4">rkpmic(4)</a> power down if the PMIC is marked as the system power controller in the device tree.
<li>Added <a href="https://man.openbsd.org/scmi.4">scmi(4)</a> mailbox transport and perf protocol for cpu frequency management on Snapdragon X Elite.
<li>Added <a href="https://man.openbsd.org/dwmmc.4">dwmmc(4)</a> support for the "post-power-on-delay-ms" in the MMC power sequencing.
<li>Added RK3399 support to <a href="https://man.openbsd.org/rkusbphy.4">rkusbphy(4)</a>.
<li>Added <a href="https://man.openbsd.org/uvideo.4">uvideo(4)</a> support for Jabra PanaCast 20.
<li>Added PercentLoad sensor to upd.4, reporting the % of the available UPS power drawn by output outlets.
<!-- group everything suspend/hibernate/resume related -->
<li>Ensured all
<a href="https://man.openbsd.org/apm.8">hibernate</a>
data is written inside the allocated chunk of swap.
<li>Removed unneeded zeroing of free pages during
<a href="https://man.openbsd.org/apm.8">hibernate</a>.
<li>Corrected
<a href="https://man.openbsd.org/apm.8">hibernate</a>
error detection during RLE writes.
<li>Ensured
<a href="https://man.openbsd.org/apm.8">hibernate</a>
fails when I/O or memory allocation errors occur.
</ul><!-- end hardware support and driver bugfixes -->
<li>New or improved network hardware support:
<ul>
<li>Added <a href="https://man.openbsd.org/ice.4">ice(4)</a>, a driver for Intel E810 devices.
<li>Increased receive mbuf size with LRO in <a href="https://man.openbsd.org/vio.4">vio(4)</a>, helping TCP splice performance.
<li>Fixed <a href="https://man.openbsd.org/xbf.4">xbf(4)</a> and <a href="https://man.openbsd.org/xnf.4">xnf(4)</a> not attaching on XCP-ng 8.3/Xen 4.17.
<li>Added printing of number of queues and interrupt and Ethernet address details to <a href="https://man.openbsd.org/mcx.4">mcx(4)</a>.
<li>Fixed the <a href="https://man.openbsd.org/bnxt.4">bnxt(4)</a> receive refill timeout to only refill rings that are currently empty, preventing possible corruption and crashes.
<li>Added support for AX88772D to <a href="https://man.openbsd.org/axen.4">axen(4)</a>.
<li>Added <a href="https://man.openbsd.org/ixv.4">ixv(4)</a>, a driver for virtual functions of Intel 82598EB, 82559 and X540.
<li>Enabled rx/tx checksum offloading on <a href="https://man.openbsd.org/ivaf.4">ivaf(4)</a>.
<!-- sort by driver at the end -->
</ul>
<li>Added or improved wireless network drivers:
<ul>
<li>Added support for MA devices to <a href="https://man.openbsd.org/iwx.4">iwx(4)</a>.
</ul>
<li>IEEE 802.11 wireless stack improvements and bugfixes:
<ul>
<li>...
</ul>
<li>Installer, upgrade and bootloader improvements:
<ul>
<li>On the <a href="https://www.openbsd.org/macppc.html">macppc</a>
architecture, make ofwboot sync instruction cache before entering
kernel, preventing a potential boot failure.
<li>Made <a
href="https://man.openbsd.org/installboot.8">installboot(8)</a>
install a copy of the UEFI bootloader in /efi/openbsd on the EFI
system partition, allowing creation of boot options for the firmware
boot manager other OSes will leave alone.
<li>Changed to only install a second copy of the bootloader if the EFI
System Partition is at least 1MB to avoid filling up the tiny ESPs we
used to create a few releases ago.
<li>Added <a
href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> -R #.#
to try to use a specific release version rather than the immediate
+0.1.
<li>Provided a mechanism for getting required keys to <a
href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> older
machines, providing a new set of keybundles signed by older keys to
allow sysupgrade to securely and automatically download the required
key.
<li>Added firmware keys to the signify key bundles. <a
href="https://man.openbsd.org/sysupgrade.8">sysupgrade(8)</a> will now
extract the firmware key also, allowing fw_update fetch the most
up-to-date firmware before upgrading.
<li>Added support to sysupgrade.8 to perform a sysupgrade from a
fileset stored on a filesystem. This is convenient for offline
machines.
<li>Made <a
href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> -a mean
all when downloading or installing, not just deleting.
<li>Allowed <a
href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> to
download firmware without root.
<li>Added <a
href="https://man.openbsd.org/fw_update.8">fw_update(8)</a> -l flag to
list drivers or files.
</ul>
<li>Security improvements:
<ul>
<li>Added sshd-auth to the binaries that relink at boot.
<li>Split the user authentication code from the sshd-session binary
into a separate sshd-auth binary. This will be executed by
sshd-session to complete the user authentication phase of the protocol
only. Splitting this code into a separate binary ensures that the
crucial pre-authentication attack surface has an entirely disjoint
address space from the code used for the rest of the connection.
</ul>
<li>New features in the network stack: <!--XXX -->
<ul>
</ul>
<li>Further changes and bugfixes in the network stack:
<ul>
<li>Replaced rwlock with iterator in UDP input multicast loop, preventing a potential kernel crash.
<li>Fixed TCP checksum for IPv6 packets with extension headers.
<li>Provided <a href="https://man.openbsd.org/tun.4">tun(4)</a> network offloads between the kernel and userland and introduced a new TUNSCAP ioctl .
<li>Ensure that the correct address family is used in ip_deliver()
for enquing a packet, fixing a problem with tunneling of different
address families.
<!-- ipsec -->
</ul>
<li>The following changes were made to the <a
href="https://man.openbsd.org/pf.4">pf(4)</a> firewall:
<ul>
<li>Allowed <a href="https://man.openbsd.org/pfctl.8">pfctl(8)</a>
specification of interface and queue bandwidths greater than ~4Gbit.
</ul>
<li>Routing daemons and other userland network improvements:
<ul>
<li>IPsec support was improved:
<ul>
<li>Added <a href="https://man.openbsd.org/iked.8">iked(8)</a>
"natt" option that forces negotiation of nat-t (and udpencap).
</ul>
<li>More RADIUS changes:
<ul>
<li>Made <a href="https://man.openbsd.org/radiusd.8">radiusd(8)</a> log the username when rejecting by ipcp.
</ul>
<li>In <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>,
<ul>
<li>Cache the Adj-RIB-Out for sessions that have not been down for
more than 1h. This significantly improves synchronisation time
of peers that flap.
<li>Implement RFC 8538: Notification Message Support for
BGP Graceful Restart.
<li>Add support for RFC 8654, extended messages.
<li>In bgplgd add additional endpoints to query the Adj-RIB-In and
Adj-RIB-Out.
<li>Bump internal message size limit to 128k and handle up to 10 000
ASPA SPAS entries as suggested in draft-ietf-sidrops-aspa-profile.
<li>Various improvements to the ibuf API including a new reader API
which is used to make all message parsing in bgpd memory safe.
<li>Added support for IPsec and TCP MD5 to RTR sessions.
<li>Improve default multiproto capability announcement selection.
The default MP capability is only set if no other capability is
configured on the neighbor.
<li>The `reject as-set` configuration option now defaults to yes.
Route announcements with AS_SET segments in the AS_PATH Attribute
will be rejected. See draft-ietf-idr-deprecate-as-set-confed-set
for more information.
<li>The RFC 8654 Extended Message configuration changed from
"announce extended (yes|no|enforce)" to
"announce extended message (yes|no|enforce)"
<li>RFC 8950 - Extended nexthop encoding support in the RIB.
<li>Preliminary support for EVPN in the RIB.
<li>When "transparent-as yes" is set, well-known BGP communities are
passed on according to RFC 7947. This means that IX Route Servers
transparently pass through NO_EXPORT, NO_ADVERTISE, etc.
<li>Make the example bgpd.conf work out of the box with 4byte ASN.
</ul>
<li><a href="https://man.openbsd.org/rpki-client.8">rpki-client(8)</a> saw
these and more changes:
<ul>
<li>The generated BIRD config file was reworked. BIRD versions 1.x are no
longer supported and the -T option to customize the ROA table name was
removed. The config file now includes the ASPA-set by default and is
therefore only compatible with BIRD 2.16 and later. If compatibility
with older BIRD versions is required, the ASPA-set can be excluded
with the -A flag. Operators should delete any remaining bird1v4 and
bird1v6 output files.
<li>Validated ROA payloads from AS0 TALs are by default excluded from the
output files as they are not recommended for automatic filtering of
BGP routes. This precaution can be overridden with the new -0 flag.
<li>Various improvements to the ibuf API, including a new reader API
which is used to make all message parsing in rpki-client memory safe.
<li>Warn about gaps in manifest issuance. Such gaps can appear for example
if rpki-client isn't run frequently enough, if there are issues with
an RFC 8181 publication server or if there is an operational error on
the side of the CA.
<li>Work around a backward compatibility break accidentally introduced
in OpenSSL 3.4.0, which resulted in all RPKI signed objects being
rejected. Earlier and later versions of OpenSSL are not affected.
<li>Improved validity period checking in file mode. The product's lifetime
and the expiration time of the signature path are now taken into
account.
<li>Better cleanup in case of a fallback from RRDP to RSYNC. In rare
circumstances, files were moved to the wrong place in the cache.
<li>rpki-client now includes arin.tal which is no longer legally encumbered.
See https://www.arin.net/announcements/20250116-tal/
<li>rpki-client reports Certification Authorities that do not meaningfully
participate in the RPKI as non-functional CAs. By definition, a CA is
non-functional if there is no currently valid Manifest. The number of
such CAs is printed at the end of each run and more detailed information
is available in the JSON (-j) and ometrics (-m) output.
<li>Fix a problem where incorrect internal RRDP state handling in
rpki-client could lead to a denial of service.
<li>Termination of rsync child processes with SIGTERM is no longer treated as
an error if rpki-client has sent this signal. This only affects openrsync.
<li>Do not exit filemode with an error if a .gbr or a .tak object contains
control characters in its UTF-8 strings. Instead, only warn and emit a
sanitized version in JSON output.
</ul>
<li>In <a href="https://man.openbsd.org/smtpd.8">smtpd(8)</a>,
<ul>
<li>...
</ul>
<li>Network auto configuration improvements:
<ul>
<li>...
</ul>
<!-- OTHER -->
<li>Many other changes in various network programs and libraries:
<ul>
<li>Made <a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> print PPPoE tags as hex dumps.
<li>Added support for client certificates to <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.
<li>Made <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> -v show the account URI from the Location header sent by the server in response to the newAccount API call.
<li>Made <a href="https://man.openbsd.org/acme-client.1">acme-client(1)</a> always print account URI on first creation of an account key.
<li>Added TLS support to <a href="https://man.openbsd.org/tcpbench.1">tcpbench(1)</a>.
<li>Started taking into account how long the <a
href="https://man.openbsd.org/ntpd.8">ntpd(8)</a> DNS probe takes
before deciding to punt.
<li>Added <a href="https://man.openbsd.org/unwind.8">unwind(8)</a>
block list wildcard support using block list entries starting with '.'.
</ul>
</ul><!-- Routing daemons and other userland network improvements -->
<li><a href="https://man.openbsd.org/tmux.1">tmux(1)</a> improvements and bug fixes:
<ul>
<li>Fixed grey color in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
<li>Added a way to make the preview larger in <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> tree mode.
<li>Fixed <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> problems with pasted text being interpreted as extended keys.
<li>Made <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> only use default-shell for popups, returning to /bin/sh for run-shell, if-shell and #().
<li>Added MSYSTEM to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> default update-environment.
<li>Added copy-mode-position-format to configure the <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> position indicator.
<li>Added -y flag to disable <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> confirmation prompts in modes.
<li>Reworked <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> copy mode commands ("send-keys -X") to parse the arguments so that flags may be detected properly rather than just looking for strings ("-O" and so on). Also added -C and -P flags to the copy commands. -C prevents the commands from sending the text to the clipboard and -P prevents them from adding the text as a paste buffer.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> prompt-cursor-colour and prompt-cursor-style to set the style of the cursor in the command prompt and remove the emulated cursor.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> initial-repeat-time option to allow the first repeat time to be increased and later reduced.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> sixel_support format variable which is 1 if SIXEL is supported (always 0 on OpenBSD).
<li>Allowed control characters prefixed with C-v to be entered at the tmux.1 command prompt.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> support for a scrollbar at the side of each pane using new options pane-scrollbars, pane-scrollbars-positions and pane-scrollbars-styles.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> option to control the input buffer size.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> scrollbar mouse support.
<li>Added a <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> no-detach-on-destroy client option, useful for control mode clients.
<li>Added <a href="https://man.openbsd.org/tmux.1">tmux(1)</a> scrollbar style parameters width and pad.
<li>Added copy-mode-position-style and copy-mode-selection-style options to <a href="https://man.openbsd.org/tmux.1">tmux(1)</a>.
</ul>
<li>LibreSSL version 4.1.0
<ul>
<li>Portable changes
<ul>
<li>Added initial experimental support for loongarch64.
<li>Fixed compilation for mips32 and reenable CI.
<li>Fixed CMake builds on FreeBSD.
<li>Fixed the --prefix option for cmake --install.
<li>Fixed tests for MinGW due to missing sh(1).
</ul>
<li>Internal improvements
<ul>
<li>Cleaned up the error implementation.
<li>Many bug fixes and simplifications in the EC ASN.1 code.
<li>Corrected DER encoding for EC keys and parameters.
<li>Polished EC_POINT_{oct2point,point2oct}() internals.
<li>Rewrote the wNAF code for fast ECDSA verification.
<li>Improved the code setting compressed coordinates for EC points.
<li>Reworked CPU capabilities detection for amd64 and aarch64.
<li>New SHA-1, SHA-256 and SHA-512 assembly implementations for amd64.
These make use of the SHA-NI instruction if it is available and
replace the perl-generated assembly optimized for museum pieces.
These are not yet enabled in libressl-portable.
<li>New SHA-256 and SHA-512 assembly implementations for aarch64
making use of the ARM Cryptographic Extension (CE). Not yet
enabled in libressl-portable.
<li>New simplified, readable MD5 implementation for amd64.
<li>Rewrote BN_bn2binpad() and its lebin siblings.
<li>The BIGNUMs in EC_GROUP and EC_POINT are now heap allocated.
<li>Rewrote TS_ASN1_INTEGER_print_bio().
<li>Improved bit counter handling in MD5.
<li>Simplified and cleaned up the BN_RECP_CTX internals.
<li>Improved SM4 to match other symmetric ciphers more closely.
<li>Rewrote X509_NAME_oneline() and X509_NAME_print() using CBS/CBB.
<li>CRLs are now cached in the issuer cache like certificates.
<li>Replaced combinations of BN_MONT_CTX_new/set with an internal
BN_MONT_CTX_create().
<li>Replaced BN_bn2hex() reimplementation in openssl(1) ca with
a proper API call.
<li>Fixed integer overflows due to signed shift in obj_dat.c.
<li>Improved some X509_VERIFY_PARAM internals and avoid an out of
bounds read from public API.
<li>Imported ML-KEM 768 and 1024 from BoringSSL (not yet public API).
</ul>
<li>Compatibility changes
<ul>
<li>Added an OPENSSL_INIT_NO_ATEXIT flag for OPENSSL_init_crypto().
It has no effect since LibreSSL doesn't call atexit().
<li>Elliptic curve parameters are only accepted if they encode a
built-in curve.
<li>EC_METHOD is no longer public and the API exposing it has been
removed. This includes EC_GROUP_new(), EC_GFp_mont_method(),
EC_GROUP_method_of() and EC_METHOD_get_field_type().
<li>The precomputation stubs for EC_GROUP were removed.
<li>The API setting Jacobian projective coordinates for a point was
removed as were EC_POINTs_{mul,make_affine}().
<li>All elliptic curves over fields with less than 224 bits and a
few more were removed from the built-in curves. This includes
all WTLS curves and P-192.
<li>It is no longer necessary to set RSA_FLAG_SIGN_VER to use the
sign and verify handlers set with RSA_meth_set_{sign,verify}.
<li>Removed the -C option to generate "C code" from the openssl(1)
dh, dhparam, dsaparam, ecparam, and x509 subcommands.
<li>Removed #error in headers when OPENSSL_NO_* is defined.
<li>CRYPTO_set_mem_functions() now matches OpenSSL 1.1 and
CRYPTO_set_mem_ex_functions() was removed.
<li>The tls_session_secret_cb_fn type now matches OpenSSL 1.1.
<li>Unexport X509_NAME_print() and X509_OBJECT_up_ref_count().
<li>const corrected UI_OpenSSL() and BN_MONT_CTX_copy().
<li>Support OPENSSL_NO_FILENAMES.
<li>Support SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION.
<li>Export PKCS12_key_gen_uni() again.
</ul>
<li>New features
<ul>
<li>libtls has a new tls_peer_cert_common_name() API call to retrieve
the peer's common name without having to inspect the PEM.
</ul>
<li>Bug fixes
<ul>
<li>Plugged a leak in eckey_compute_pubkey().
<li>Again allow the magic values -1, -2 and -3 for the salt length
of an RSA-PSS key in the EVP_PKEY_CTX_ctrl_str() interface.
<li>Fixed a few memory leaks in legacy code.
</ul>
<li>Documentation
<ul>
<li>The remaining undocumented public EVP API is now documented.
<li>Reorganization of existing documentation for clarity and accuracy.
</ul>
<li>Testing and proactive security
<ul>
<li>Improved regress coverage of the EC code.
</ul>
</ul>
<li>OpenSSH xxx and OpenSSH xxx
<ul>
<li>Security fixes
<ul>
<li>...
</ul>
<li>New features
<ul>
<li>...
</ul>
<li>Bugfixes
<ul>
<li>...
</ul>
</ul>
<li>Ports and packages:
<p>Many pre-built packages for each architecture:
<!-- number of FTP packages minus SHA256, SHA256.sig, index.txt -->
<ul style="column-count: 3">
<li>aarch64: xxx
<li>amd64: 12593
<li>arm: xxx
<li>i386: 10429
<li>mips64: xxx
<li>powerpc: xxx
<li>powerpc64: 7501
<li>riscv64: xxx
<li>sparc64: xxx
</ul>
<p>Some highlights:
<ul style="column-count: 3"><!-- checked 2025-04-12 -->
<li>Asterisk 16.30.1, 18.26.1, 20.13.0 and 22.3.0
<li>Audacity 3.7.3
<li>CMake 3.31.6
<li>Chromium 135.0.7049.52
<li>Emacs 30.1
<li>FFmpeg 6.1.2
<li>GCC 8.4.0 and 11.2.0
<li>GHC 9.8.3
<li>GNOME 47
<li>Go 1.24.1
<li>JDK 8u442, 11.0.26, 17.0.14 and 21.0.6
<li>KDE Applications 24.12.3
<li>KDE Frameworks 6.12.0
<li>KDE Plasma 6.3.3
<li>Krita 5.2.9
<li>LLVM/Clang 13.0.0, 16.0.6, 18.1.8 and 19.1.7
<li>LibreOffice 25.2.1.2
<li>Lua 5.1.5, 5.2.4, 5.3.6 and 5.4.7
<li>MariaDB 11.4.5
<li>Mono 6.12.0.199
<li>Mozilla Firefox 137.0 and ESR 128.9.0
<li>Mozilla Thunderbird 128.9.0
<li>Mutt 2.2.14 and NeoMutt 20250113
<li>Node.js 22.14.0
<li>OCaml 4.14.2
<li>OpenLDAP 2.6.9
<li>PHP 8.2.28, 8.3.19 and 8.4.5
<li>Postfix 3.10.1
<li>PostgreSQL 17.4
<li>Python 2.7.18 and 3.12.9
<li>Qt 5.15.16 (+ kde patches) and 6.8.2
<li>R 4.4.2
<li>Ruby 3.2.8, 3.3.7 and 3.4.2
<li>Rust 1.86.0
<li>SQLite 3.49.1
<li>Shotcut 25.01.25
<li>Sudo 1.9.16p1
<li>Suricata 7.0.7
<li>Tcl/Tk 8.5.19 and 8.6.16
<li>TeX Live 2024
<li>Vim 9.1.1199 and Neovim 0.10.4
<li>Xfce 4.20.0
</ul>
<p>
<li>As usual, steady improvements in manual pages and other documentation.
<li>The system includes the following major components from outside suppliers:
<ul><!-- XXX updated 2025-04-12 -->
<li>Xenocara (based on X.Org 7.7 with xserver 21.1.16 + patches,
freetype 2.13.3, fontconfig 2.15.0, Mesa 23.3.6, xterm 395,
xkeyboard-config 2.20, fonttosfnt 1.2.4 and more)
<li>LLVM/Clang 16.0.6 (+ patches)
<li>GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
<li>Perl 5.40.1 (+ patches)
<li>NSD 4.9.1
<li>Unbound 1.22.0
<li>Ncurses 6.4
<li>Binutils 2.17 (+ patches)
<li>Gdb 6.3 (+ patches)
<li>Awk 20250116
<li>Expat 2.7.1
<li>zlib 1.3.1 (+ patches)
</ul>
</ul>
</section>
<hr>
<section id="install">
<h3>How to install</h3>
<p>
Please refer to the following files on the mirror site for
extensive details on how to install OpenBSD 7.7 on your machine:
<ul>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/alpha/INSTALL.alpha">
.../OpenBSD/7.7/alpha/INSTALL.alpha</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/amd64/INSTALL.amd64">
.../OpenBSD/7.7/amd64/INSTALL.amd64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/arm64/INSTALL.arm64">
.../OpenBSD/7.7/arm64/INSTALL.arm64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/armv7/INSTALL.armv7">
.../OpenBSD/7.7/armv7/INSTALL.armv7</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/hppa/INSTALL.hppa">
.../OpenBSD/7.7/hppa/INSTALL.hppa</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/i386/INSTALL.i386">
.../OpenBSD/7.7/i386/INSTALL.i386</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/landisk/INSTALL.landisk">
.../OpenBSD/7.7/landisk/INSTALL.landisk</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/loongson/INSTALL.loongson">
.../OpenBSD/7.7/loongson/INSTALL.loongson</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/luna88k/INSTALL.luna88k">
.../OpenBSD/7.7/luna88k/INSTALL.luna88k</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/macppc/INSTALL.macppc">
.../OpenBSD/7.7/macppc/INSTALL.macppc</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/octeon/INSTALL.octeon">
.../OpenBSD/7.7/octeon/INSTALL.octeon</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/powerpc64/INSTALL.powerpc64">
.../OpenBSD/7.7/powerpc64/INSTALL.powerpc64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/riscv64/INSTALL.riscv64">
.../OpenBSD/7.7/riscv64/INSTALL.riscv64</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/7.7/sparc64/INSTALL.sparc64">
.../OpenBSD/7.7/sparc64/INSTALL.sparc64</a>
</ul>
</section>
<hr>
<section id="quickinstall">
<p>
Quick installer information for people familiar with OpenBSD, and the use of
the "<a href="https://man.openbsd.org/disklabel.8">disklabel</a> -E" command.
If you are at all confused when installing OpenBSD, read the relevant
INSTALL.* file as listed above!
<h3>OpenBSD/alpha:</h3>
<p>
If your machine can boot from CD, you can write <i>install77.iso</i> or
<i>cd77.iso</i> to a CD and boot from it.
Refer to INSTALL.alpha for more details.
<h3>OpenBSD/amd64:</h3>
<p>
If your machine can boot from CD, you can write <i>install77.iso</i> or
<i>cd77.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
If your machine can boot from USB, you can write <i>install77.img</i> or
<i>miniroot77.img</i> to a USB stick and boot from it.
<p>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in the included
INSTALL.amd64 document.
<p>
If you are planning to dual boot OpenBSD with another OS, you will need to
read INSTALL.amd64.
<h3>OpenBSD/arm64:</h3>
<p>
If your machine can boot from CD, you can write <i>install77.iso</i> or
<i>cd77.iso</i> to a CD and boot from it.
<p>
To boot from disk, write <i>install77.img</i> or <i>miniroot77.img</i> to a
disk and boot from it after connecting to the serial console. Refer to
INSTALL.arm64 for more details.
<h3>OpenBSD/armv7:</h3>
<p>
Write a system specific miniroot to an SD card and boot from it after connecting
to the serial console. Refer to INSTALL.armv7 for more details.
<h3>OpenBSD/hppa:</h3>
<p>
Boot over the network by following the instructions in INSTALL.hppa or the
<a href="hppa.html#install">hppa platform page</a>.
<h3>OpenBSD/i386:</h3>
<p>
If your machine can boot from CD, you can write <i>install77.iso</i> or
<i>cd77.iso</i> to a CD and boot from it.
You may need to adjust your BIOS options first.
<p>
If your machine can boot from USB, you can write <i>install77.img</i> or
<i>miniroot77.img</i> to a USB stick and boot from it.
<p>
If you can't boot from a CD, floppy disk, or USB,
you can install across the network using PXE as described in
the included INSTALL.i386 document.
<p>
If you are planning on dual booting OpenBSD with another OS, you will need to
read INSTALL.i386.
<h3>OpenBSD/landisk:</h3>
<p>
Write <i>miniroot77.img</i> to the start of the CF
or disk, and boot normally.
<h3>OpenBSD/loongson:</h3>
<p>
Write <i>miniroot77.img</i> to a USB stick and boot bsd.rd from it
or boot bsd.rd via tftp.
Refer to the instructions in INSTALL.loongson for more details.
<h3>OpenBSD/luna88k:</h3>
<p>
Copy 'boot' and 'bsd.rd' to a Mach or UniOS partition, and boot the bootloader
from the PROM, and then bsd.rd from the bootloader.
Refer to the instructions in INSTALL.luna88k for more details.
<h3>OpenBSD/macppc:</h3>
<p>
Burn the image from a mirror site to a CDROM, and power on your machine
while holding down the <i>C</i> key until the display turns on and
shows <i>OpenBSD/macppc boot</i>.
<p>
Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
/7.7/macppc/bsd.rd</i>
<h3>OpenBSD/octeon:</h3>
<p>
After connecting a serial port, boot bsd.rd over the network via DHCP/tftp.
Refer to the instructions in INSTALL.octeon for more details.
<h3>OpenBSD/powerpc64:</h3>
<p>
To install, write <i>install77.img</i> or <i>miniroot77.img</i> to a
USB stick, plug it into the machine and choose the <i>OpenBSD
install</i> menu item in Petitboot.
Refer to the instructions in INSTALL.powerpc64 for more details.
<h3>OpenBSD/riscv64:</h3>
<p>
To install, write <i>install77.img</i> or <i>miniroot77.img</i> to a
USB stick, and boot with that drive plugged in.
Make sure you also have the microSD card plugged in that shipped with the
HiFive Unmatched board.
Refer to the instructions in INSTALL.riscv64 for more details.
<h3>OpenBSD/sparc64:</h3>
<p>
Burn the image from a mirror site to a CDROM, boot from it, and type
<i>boot cdrom</i>.
<p>
If this doesn't work, or if you don't have a CDROM drive, you can write
<i>floppy77.img</i> or <i>floppyB77.img</i>
(depending on your machine) to a floppy and boot it with <i>boot
floppy</i>. Refer to INSTALL.sparc64 for details.
<p>
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install
will most likely fail.
<p>
You can also write <i>miniroot77.img</i> to the swap partition on
the disk and boot with <i>boot disk:b</i>.
<p>
If nothing works, you can boot over the network as described in INSTALL.sparc64.
</section>
<hr>
<section id="upgrade">
<h3>How to upgrade</h3>
<p>
If you already have an OpenBSD 7.6 system, and do not want to reinstall,
upgrade instructions and advice can be found in the
<a href="faq/upgrade77.html">Upgrade Guide</a>.
</section>
<hr>
<section id="sourcecode">
<h3>Notes about the source code</h3>
<p>
<code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
This file contains everything you need except for the kernel sources,
which are in a separate archive.
To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/src.tar.gz</kbd>
</pre></blockquote>
<p>
<code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
This file contains all the kernel sources you need to rebuild kernels.
To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src/sys</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/sys.tar.gz</kbd>
</pre></blockquote>
<p>
Both of these trees are a regular CVS checkout. Using these trees it
is possible to get a head-start on using the anoncvs servers as
described <a href="anoncvs.html">here</a>.
Using these files
results in a much faster initial CVS update than you could expect from
a fresh checkout of the full OpenBSD source tree.
</section>
<hr>
<section id="ports">
<h3>Ports Tree</h3>
<p>
A ports tree archive is also provided. To extract:
<blockquote><pre>
# <kbd>cd /usr</kbd>
# <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
</pre></blockquote>
<p>
Go read the <a href="faq/ports/index.html">ports</a> page
if you know nothing about ports
at this point. This text is not a manual of how to use ports.
Rather, it is a set of notes meant to kickstart the user on the
OpenBSD ports system.
<p>
The <i>ports/</i> directory represents a CVS checkout of our ports.
As with our complete source tree, our ports tree is available via
<a href="anoncvs.html">AnonCVS</a>.
So, in order to keep up to date with the -stable branch, you must make
the <i>ports/</i> tree available on a read-write medium and update the tree
with a command like:
<blockquote><pre>
# <kbd>cd /usr/ports</kbd>
# <kbd>cvs -d [email protected]:/cvs update -Pd -rOPENBSD_7_7</kbd>
</pre></blockquote>
<p>
[Of course, you must replace the server name here with a nearby anoncvs
server.]
<p>
Note that most ports are available as packages on our mirrors. Updated
ports for the 7.7 release will be made available if problems arise.
<p>
If you're interested in seeing a port added, would like to help out, or just
would like to know more, the mailing list
<a href="mail.html">[email protected]</a> is a good place to know.
</section>
</body>
</html>