on (#304QG)
Next up in our series of t2k17 hackathon reports is this one from Philip Guenther:
OpenBSD Journal
| Link | http://undeadly.org/ |
| Feed | http://undeadly.org/cgi?action=rss |
| Updated | 2024-05-02 01:02 |
on (#304QH)
Our next hackathon report comes from Andrew Hewus Fresh, who writes:
on (#304QJ)
The next t2k17 report comes from Martin Pieuchot (mpi@) who writes
on (#2ZYAD)
The t2k17 hackathon reports keep trickling in. Here's the one from Ian Sutton, who writes:
on (#2ZX7H)
I slacked so much that even portroachstopped mailing the outdated ports I maintained as it noticed how pointless itwas :-)Read more...
on (#2ZY3Z)
I slacked so much that even portroachstopped mailing the outdated ports I maintained as it noticed how pointless itwas :-)Read more…
on (#2ZY40)
It almost went unnoticed due to the 6.2-beta announcement, but Antoine Jacoutot (ajacoutot@) just commited a very useful update to syspatch. In this commit, the groundwork is done for having syspatch update only the kernel object files that have changed. Due to KARL, the scheme to relink the kernel for each reboot, it makes sense to save space and bandwidth that way.The commit message reads:Read more…
on (#2ZWF3)
It almost went unnoticed due to the 6.2-beta announcement, but Antoine Jacoutot (ajacoutot@) just commited a very useful update to syspatch. In this commit, the groundwork is done for having syspatch update only the kernel object files that have changed. Due to KARL, the scheme to relink the kernel for each reboot, it makes sense to save space and bandwidth that way.The commit message reads:Read more...
on (#2ZY41)
Theo has just committed the diff that marks the end of the development cycle and the beginning of the testing phase for the upcoming 6.2 release:
on (#2ZVHC)
Theo has just committed the diff that marks the end of the development cycle and the beginning of the testing phase for the upcoming 6.2 release:
on (#2ZJZJ)
The second report from the just completed t2k17 hackathoncomes from Ted Unangst (tedu@), who writes:
on (#2ZQPB)
In a message to the tech mailling list, Theo de Raadt(deraadt@) offered a preview of the next big thing in exploit mitigation, dubbed RETGUARD:
on (#2ZY42)
In a message to the tech mailling list, Theo de Raadt(deraadt@) offered a preview of the next big thing in exploit mitigation, dubbed RETGUARD:
on (#2ZKY2)
As there have been no reports of functional bugs since the last beta, and the primary goal of the work was achieved long ago, the (main) Undeadly server is to be upgraded.The upgrade, which is expected to involve downtime of no more than one hour, is scheduled for next Tuesday, 2017-08-22 07:00 UTC.Changes since the last public beta include:
on (#2ZY43)
As there have been no reports of functional bugs since the last beta, and the primary goal of the work was achieved long ago, the (main) Undeadly server is to be upgraded.The upgrade, which is expected to involve downtime of no more than one hour, is scheduled for next Tuesday, 2017-08-22 07:00 UTC.Changes since the last public beta include:
on (#2ZY44)
The second report from the just completed t2k17 hackathoncomes from Ted Unangst (tedu@), who writes:
on (#2ZY45)
News from the OpenBSD Foundation: The Foundation has this year's first Iridium donor.The official statement from the foundation, via director Ken Westerback reads,
on (#2ZHTN)
News from the OpenBSD Foundation: The Foundation has this year's first Iridium donor.The official statement from the foundation, via director Ken Westerback reads,
on (#2ZY46)
The first report from the just completed t2k17 hackathon comes from Bob Beck, who writes:
on (#2ZBAD)
The first report from the just completed t2k17 hackathon comes from Bob Beck, who writes:
on (#2YNW3)
https://beta.undeadly.org/ has received an update. The most significant changes include:
on (#2YBA7)
In response to the DEF CON presentation by Ilja van Sprundel,a large set of kernel patches have been released (for OpenBSD 6.0 and 6.1).These important patches should be applied ASAP!From the announce@ mailing list:
on (#2XJVT)
With this commit, the default compiler for (-current base system on the) amd64 and i386 platforms has been changed to clang(1):
on (#2VM14)
The flak reports by Ted Unangst (tedu@) continue with part 624.Update - part 625
on (#2WKSF)
As we see from the commit message, new developer Pratik Vyas (pd@) adds the ability to do paused VM migrations for VMM.Mike Larkin also writes on Twitter:
on (#2W5KX)
Over at his blog, Undeadly co-editor Peter Hansteen describes the experience of installing OpenBSD-current on a new laptop.The article, OpenBSD and the modern laptop, goes into some detail on the install procedure, and hits only minor snags even when using modern and recent additions such as UEFI boot.The conclusion is that OpenBSD is well suited for laptop and desktop use, and things tend to just work.On the other hand, we strongly suggest Peter posted the article before the contents of his home directory had actually been completely transferred. He's such a packrat.
on (#2VEE5)
As you may have heard (and as was mentioned in an earlier article), on recent OpenBSD snapshots we have KARL, which means that the kernel is relinked so each boot comes with a new kernel where all .o files are linked in random order and with random offsets. Theo de Raadt summarized the status in a message to the tech@ mailing list, subject kernel relinking as follows:
on (#2VMQ7)
TL;DR - A modernised version of Undeadly is available for testing at <https://beta.undeadly.org/>.Broken features of the current site have been fixed, removed, or replaced.The new software supports - and, where appropriate, requires - HTTPS. Testing, contributions, and constructive feedback would be appreciated.An effort to modernise the Undeadly software was initiated in response to the article Undeadly and HTTPS.This has resulted in substantially reworked software which is now available for public testing.Note that this is not the completely new system which is (arguably) needed.Read more...
on (#2VE2Q)
Theo de Raadt (deraadt@) provided some history on the insecurity of TIOCSTI [simulate typed input on terminal], with a proposal to disable it on OpenBSD:
on (#2V8VZ)
The OpenBSD presence at the just concluded BSDCan was quite strong, and here is the first trip report, from Phillipp Buehler:
on (#2V7ZT)
Our next report from the d2k17 hackathon comes from Martin Pieuchot, who writes:
on (#2V4NJ)
Alexander Bluhm (bluhm@) wrote in with a hackathon report:
on (#2TMAA)
You heard it here (or on tech@) first: Trapsleds are in, and it makes OpenBSD even safer. Work done by Todd Mortimer and submitted to tech@ in the Trapsleds thread was later committed by Theo de Raadt.Todd's message to tech says,
on (#2SRW2)
In amessage to the tech@ mailing list,Theo de Raadt (deraadt@) has announced a new randomization feature forkernel protection:
on (#2SDN7)
OpenBSD developer Adam Wolk (awolk@) talks about a community effort to read at least one C source file from OpenBSD every day at https://blog.tintagel.pl/2017/06/09/openbsd-daily.html.
on (#2SCP1)
A new Microsoft Azure blog entry, Running OpenBSD on Azure, describes OpenBSD support:
on (#2SBAY)
Florian Obser (florian@) kindly supplied a report on his d2k17 activities:
on (#2S8AG)
Our next d2k17 report comes from Antoine Jacoutot (ajacoutot@), who writes:
on (#2RZBN)
Our second d2k17 report is from Ken Westerback (krw@), who writes:
on (#2RJMM)
The first report from the recently completed d2k17 hackathon comes from Stefan Sperling, who writes:
on (#2R8FF)
The flak reports by Ted Unangst (tedu@) continue with parts 620, 621, and 622.As always, there are plenty of interesting developments.Update: part 623
on (#2R8FG)
Relayd and Httpd Mastery, the latest book in the "Mastery" series by Michael W Lucas, is now available.From the author's page for the book:
on (#2NXWR)
Kenneth R Westerback of The OpenBSD Foundation (aka krw@, when wearing his dev hat) writes:
on (#2N8H3)
OpenBSD 6.1 was announced as the first release with no CD available for purchase.Now it turns out that in fact, exactly one CD set was made, and it can be yours if you are the successful bidder in the auction that ends on May 13, 2017.Bob Beck (beck@) writes in to tell us
on (#2N6HN)
Errata for OpenBSD 6.1 and 6.0 have been announced. The message to announce@openbsd.org [from T.J. Townsend (tj@)] reads:
on (#2MXNA)
In a series of commits starting here and ending with this one, Damien Miller completed the removal of all support for the now-historic SSHv1 protocol from OpenSSH. The final commit message, for the commit that removes the SSHv1 related regression tests, reads:
on (#2M9Z7)
Landry Breuil, OpenBSD's firefox (and other Mozilla ports) maintainer, writes:Maybe i haven't talked about it enough on the lists, but since i'vebeen maintaining the various mozillas in the portstree (cvs log says istarted around firefox 3.6.something... 7 years ago. *sigh*) alot of things changed, so i wanted take the 6.1 release as an occasionto sum up the various ways one could run which version of which firefoxon which version of OpenBSD.Read more...
on (#2MFNM)
Every OpenBSD release since 3.0 (back in 2001) has had at least one relase song, and OpenBSD 6.1 is no different. Today, Theo de Raadt released the OpenBSD 6.1. The Songs page has download links, lyrics and a background story, which reads:
on (#2KSTN)
A series of commits, culminating in this one, have seen clang(1) added to the base system (as a non-default compiler) on the amd64 and i386 platforms: