Feed openbsd-journal OpenBSD Journal

OpenBSD Journal

Link http://undeadly.org/
Feed http://undeadly.org/cgi?action=rss
Updated 2020-10-25 14:02
OpenBSD 6.8 Released
On its 25 birthday,the OpenBSD project has releasedOpenBSD 6.8,the 49 release.The new release comes with a large number of improvements and debuts a new architecture, OpenBSD/powerpc64, running on the POWER9 family of processors. The full list of changes can be found in the announcement and on the release page. Some highlights:
Cryptographic Signing using ssh-keygen(1) with a FIDO Authenticator
IntroductionHitherto, releases of thefwobacsoftware (which underliesUndeadly)have been unsigned.This is overdue for change, so for the latest release [version 1.7], we are providing a digital signature.As signing is being performed manually, why not employ an additional [hardware] factor?signify(1)does not support the use of FIDO authenticators.However, recent versions ofOpenSSH do support signingusing the [under-appreciated]-Y sign option ofssh-keygen(1),and with the recent addition of FIDO authenticator support to OpenSSH[as reported previously],we have a means (using tools in base OpenBSD) of using a hardware factor when signing files.Read more…
RETGUARD for powerpc and powerpc64 added to -current
Todd Mortimer (mortimer@) hascommittedRETGUARD(seepreviouscoverage)for the macppc (powerpc) and powerpc64 platforms:
Ingo announces pta (Plain Text Accounting)
Ingo (schwarze@) writes in about a side project he's been working on to do his own accounting:
k2k20 hackathon report: Rafael Sadowski on KDE and other packages progress
Fresh off the k2k20 hackathon, Rafael Sadowski (rsadowski@)writes in:
k2k20 hackathon report: Florian Obser on DNS
The fourth report from k2k20 comes from Florian Obser (florian@), who worked mostly on DNS related things:
k2k20 hackathon report: Klemens Nanni on network land decluttering
Our next k2k20 report comes from Klemens Nanni (kn@):
k2k20 hackathon report: Bob Beck on LibreSSL progress
Fresh off the just-finished k2k20 hackathon, here is a report from Bob Beck(beck@):
k2k20 hackathon report: Martijn van Duren on snmp, agentx, and other progress
Thek2k20 hackathonconcluded recently, and we are please to havereceived a report from Martijn van Duren (martijn@):
login_ldap added to -current
Withthis commit,Martijn van Duren (martijn@)addedlogin_ldap(8)to -current:
6.8-beta tagged in CVS
Theo (deraadt@) has just committed the crank to 6.8-beta to CVS
Frederic Cambus on text console improvements
Frederic Cambus (fcambus@) has published an article on his blog about the work that has been done to improve the text-console experience on OpenBSD. Well worth a read if, as a proper UNIX-sysadmin, you enjoy working in a text-only environment; but also if you spend most of your time in X!
LibreSSL documentation status update
More than six years ago,LibreSSL was forked fromOpenSSL, and almost two years ago,i explained the status of LibreSSL documentation duringEuroBSDCon2018 in Bucuresti.So it seems providing an update might be in order.Read more…
LLVM 10.0.0 imported into -current
Withthis commitand several more, Patrick Wildt (patrick@)upgraded -current to version 10.0.0 of LLVM:
Timecounters available to userland in -current
In this commit, Paul Irofti (pirofti@) added support for reading timecounters in userland without making a syscall.Read more…
First powerpc64 snapshots available
Since we reported the first bits of powerpc64 support going into the tree on 16 May, work has progressed at a steady pace, resulting in snapshots now being available for this platform.So, if you have a POWER9 system idling around, go to your nearestmirrorand fetch this snapshot. Keep in mind that as this is still very early days, very little handholding is available - you are basically on your own.Read more…
WireGuard imported into OpenBSD
In the followingcommit(and a bunch of others), David Gwynne (dlg@) imported most of the code submitted recently by Jason A. Donenfeld and Matt Dunwoodie to allow you to use WireGuard natively on OpenBSD:Read more…
Graphical view of the x86 OpenBSD boot process
Wesley Mouedine Assaby who runs the OpenBSD Jumpstart webpage with hints and tips for beginners about OpenBSD in general has produced a visualization of how PCs boot into OpenBSD.Read more…
BSDCAN 2020 talk on Using OpenBGPd as a Control Plane for an ISP
I presented a talk on how I used OpenBGPd as a control plane for my ISP. I cover areas such as Routing fundamentals, a lightning introduction to BGP. An interesting aspect of the design is how the OpenBSD / OpenBGPdis used to control the routing information in my ISP yet theforwarding of packets is offloaded to hardware Layer 3 switches. I also outline my favourite new feature of OpenBGPd max prefix outwhich I'm sure will save my blushes if/when I fat finger my Prefix filters(although if my hair cut is anything to go by it is clear I have no shame anyway!).You can check out the talk here!Tom would welcome comments and feedback on the talk.I hope the talk will help others in deploying OpenBGPd and OpenBSD in their networks.I would also suggest that those interested in learning more about OpenBGPdcheck out Peter Hessler's Tutorial on OpenBGPd which served as anessential aid in getting comfortable in configuring BGP on OpenBSD / OpenBGPd.Peter usually runs the Tutorial in advance of BSD Conferences.I would like to give a big shout out to the people who write thecode in OpenBSD and OpenBGPd, and that your effort makes my life runningmy network and ISP easier.A huge word of thanks is due to Dan Langielle and theBSDCAN2020 Volunteers who organised the virtualBSDCAN 2020 conference this yearin quite difficult circumstances.
DRM update committed
Jonathan Gray (jsg@) has just committed an update to theDRM code to the tree.This update brings support for newer AMD and Intel graphics parts.
OpenBSD 6.7 and ffs2 FAQs
Otto Moerbeek (otto@)posted to misc@a useful summary of the state of play of FFS2in the 6.7 release (and, to some extent, -current).In his mail, Otto clarifies some things about the latest release:
Installation images renamed from .fs to .img
In a commit touching quite a few files, Theo recently renamed the installation images from installXX.fs to installXX.img:
OpenBSD 6.7 Released
The OpenBSD project has released OpenBSD 6.7, marking the 48th release of our favorite operating system. The announcement message and the release page both have detailed information.These are some highlights of the improvements in the present release:
First seed for OpenBSD/powerpc64 planted by kettenis@
In a set of commits to the tree on Saturday, Mark Kettenis (kettenis@) added the early beginnings of support for the 64-bit PowerPC platform:
Undeadly now also supports TLS 1.3
After our article on TLS 1.3 server support in LibreSSL, we have decided to upgrade the machine running the undeadly website to newer LibreSSL.Since earlier today the site supports TLS 1.3. Undeadly still gets an A+ on Qualys' SSL Labs.
Using qemu guest agent on OpenBSD kvm/qemu guests
In a post to the ports@ mailing list, Landry Breuil (landry@) shared some of his notes on using qemu guest agent on OpenBSD kvm/qemu guests. He made a few enhancements for Undeadly:Read more…
WireGuard patchset for OpenBSD
In a post to tech@,Matt Dunwoodieannouncedthe availability of aWireGuard[VPN]patchset for OpenBSD:
TLSv1.3 server code enabled in LibreSSL in -current
With the followingcommit,Joel Sing (jsing@) enabled theTLSv1.3 server code (inLibreSSL) in -current:
Catch up 2020-04-30
While many of us have been busy social distancing, OpenBSD development workhas continued.Noteworthy things not previously reported here include:
Booting from an FFS2 filesystem
Developer Otto Moerbeek (otto@) hasbeenworkingonsupporttobootfromFFS2. He writes in with the below article, to give us a little insight into the challenges he faced while working on this.
Bob Beck Interview from EuroBSDCon 2018
I had the pleasure ofsitting with Bob Beckat EuroBSDCon2018 in Bucharest and asking him some questions about theOpenBSD Project, its approaches and some of his favouriteaspects of the Operating System and its projects. Bobpatiently outlines the hows and whys of his involvementin the BSD project.Tom and Bob conduct a post-mortem on a training course onLibTLS Bob Delivered (excellently) in EuroBSDCon & BSDCAN.Bob discusses what online services he used in class fortraining students on LibTLS and why it can be a veryeffective teaching aid.Bob modestly plays down his ability to churn out LibTLS Developers.Bob also gives guidance on the approaches to contributing to the project.Bob reveals the code he least likes working on and why.Bob lets us know what he really thinks about documentation and its value to the community.Bob outlines an example of applying lessons learned from one bug to inform audits looking for similar bugs elsewhere in the OS and the software ecosystem that it supports.I enjoyed making the interview with Bob who answered thequestions with a remarkable combination of purpose and humour.Bob thanks again for your time, and putting up with myinterruptions and jokes :)
p2k19 Hackathon Report: Rafael Sadowski on KDE+Qt5 progress, more
We have a new p2k19 report from Rafael Sadowski (rsadowski@),who writes:
a2k20 Hackathon Report: Ken Westerback on xhci(4), dhclient(8), and scsi
Ken Westerback (krw@) kindly wrote in with a reportfrom last month'sa2k20hackathon in Hobart, Australia:
OpenBSD Foundation 2019 campaign wrapup
Ken Westerback [krw@ when wearing his OpenBSD hat]wrote us with this update about theOpenBSD Foundation's work:
FOSDEM 2020 videos available
Video recordings fromFOSDEM 2020are now available.The OpenBSD presentations were:
u2k20 Hackathon Report: Tracey Emery on GotWeb
Fresh in from u2k20 is this report from Tracey Emery, who visited the hackathon in Uckermark, Germany after getting invited by Stefan Sperling (stsp@):
u2k20 Hackathon Report: Alexandr Nedvedicky on PF anchors work
The first report from the just concluded u2k20 hackathon comes from Alexandr Nedvedicky (sashan@), who writes:
Firefox pkg for 6.6-stable will not receive latest updates. [Updated]
An update has now been committed to the -stable branch for the latest firefox version, and the package is available for updating!
Theo De Raadt Interview between Ottawa 2019 Hackathon and BSDCAN 2019
Tom Smyth writes in about an interview he did with Theo de Raadt in between g2k19, the general hackathon in Ottawa, and BSDCAN 2019:
e2k19 Hackathon Report: Stefan Sperling on GoT and wireless
Next up from the snowy Elk Lakes area with his Hackathon Report is Stefan Sperling (stsp@):
Meet Radiant Award Recipient Claudio Jeker
TheInternet Security Research Groupand partnershave announcedthat Claudio Jeker (claudio@) is the thirdRadiant Awardrecipient.From theannouncement:
attention please: host's IP stack behavior got changed slightly
Alexandr Nedvedicky (sashan@)wrote to tech@regarding a recent significantchange:
e2k19 Hackathon Report: At e2k19 nobody can hear you scream (Claudio Jeker)
Fresh from the just concluded e2k19 hackathon, Claudio Jeker (claudio@) writes in:
syscall call-from verification
Theo de Raadt (deraadt@) hascommittedcode for a new exploit-prevention mechanism:
unwind(8) gains "Happy Eyeballs"-like flexibility
Florian Obser (florian@) hascommittedcode to giveunwind(8)a flexible approach to resolving strategies:
p2k19 Hackathon Report: Stefan Sperling on iwm(4) wifi progress, more
Next up in our hackathon series from p2k19 is one from Stefan Sperling (stsp@),who writes:
krw@ adventures at p2k19
Next up in the series of p2k19 reports is Ken Westerback (krw@), who writes:
p2k19 Hackathon Report: Jeremy Evans on PostgreSQL and Ruby
Our next p2k19 report comes from Jeremy Evans (jeremy@):
p2k19 Hackathon Report: Landry Breuil on unveil(2)-ing Mozilla, sqlite3 testing
Fresh from the just concluded p2k19 hackathon comes this report from Landry breuil (landry@), who writes:
Martin Pieuchot: The Unknown Plan
Fresh from Bucharest is this story from Martin Pieuchot (mpi@) with his experience from p2k19: