Live data from Hacker News

OpenBSD 5.1 released

openbsd.org

21–30 of 42 posts

Re: OpenBSD 5.1 released

#21

I wish I could go back to using it but I currently have to do some GWT dev and they only officially support linux. I tried running a vm and dual boot but that was too much hustle... as soon as I'm done with this project I'll go back to this distro. :)

OpenBSD isn't a 'distro'. It's a distro in the same sense that Windows is a distro.

Re: OpenBSD 5.1 released

#22
post #3

So what really sets the various BSDs apart? Has anyone done a good comparison between them?

FreeBSD is the one you should run. It has the best performance and hardware/software compatibility of the three. It's the easiest to get off the ground with for a beginner as well, so it's also a good starting point. NetBSD is the one whose source you should study. The emphasis is on correctness and portability. The book Code Reading by Diomidis Spinellis used mainly examples from NetBSD even though he is a FreeBSD d…

NetBSD is the one whose source you should study.

Why not OpenBSD?

Re: OpenBSD 5.1 released

#23

one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…

Let's hope that it does not end like: http://www.opencvs.org

How did that end?

Re: OpenBSD 5.1 released

#25
post #5

Earlier quoted context omitted.

Awesome, isn't it. It's transparent and works every time. Not something you can say about apt-get...

"Awesome", yes. It's also going to take about an hour of my full concentration to accomplish. That's also not something I can say about apt-get...

The upgrade procedure takes but minutes in itself. The time you take to save and then write your old configuration files back to /etc and whatnot is on your hands :) Sure, upgrading OpenBSD's core system files isn't as smooth as doing it on f.e. FreeBSD via its package manager, but it's definitely not about hours.

Re: OpenBSD 5.1 released

#26

one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…

I don't think configuring e.g. postfix is that difficult:

    #
    # /etc/postfix/main.cf
    #
    # disable diff service
    biff = no

    # TLS parameters
    smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
    smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
    smtpd_use_tls=yes
    smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
    smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

    # disable warnings about NIS on mail delivery (default adds nis:mail.aliases)
    alias_maps = hash:/etc/aliases

    # do not grant special privileges to hosts except localhost
    mynetworks_style = host

    #set the mailbox size to limit to `unlimited'
    mailbox_size_limit = 0

    myhostname = fulla.mrothe.de
    mydestination = $myhostname, localhost.$mydomain, localhost,
                    mrothe.de

    mailbox_command = procmail -a "$EXTENSION"
And on a backup MX instead of adding your domains to `mydestination` you just set:

    [...]
    
    myhostname = blei.mrothe.de
    #don't touch mydestination, which defaults to "$myhostname, localhost.$mydomain, localhost"

    # accept mail for these domains to be relayed
    relay_domains = $mydestination, mrothe.de

Re: OpenBSD 5.1 released

#27
post #3

So what really sets the various BSDs apart? Has anyone done a good comparison between them?

There's a wikipedia page with tables of differences: https://en.wikipedia.org/wiki/Comparison_of_BSD_operating_sy... In my opinion: OpenBSD - Focused on security above all else. Host project of OpenSSH and pf/carp/altq?. Lags behind on architecture support and performance (Previously poor SMP performance?). Primary use: Router/firewall. FreeBSD - All around features and performance (zfs,dtrace,pf,linux syscall emulat…

This is actually a good summary, but it's missing the reason for the DragonFlyBSD fork: light-weight kernel threads. But yes, they've been doing a lot of work around clustering and performance in general.

Re: OpenBSD 5.1 released

#28

one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…

Let's hope that it does not end like: http://www.opencvs.org

They sometimes take on too much. They are very ambitious.

Re: OpenBSD 5.1 released

#29
post #26

one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…

I don't think configuring e.g. postfix is that difficult: # # /etc/postfix/main.cf # # disable diff service biff = no # TLS parameters smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache # disable…

Two nitpicks: you don't need to set myhostname; many mailservers will think you less spammy if your hostname is mail.$mydomain.

Re: OpenBSD 5.1 released

#30

one thing to definitely watch in OpenBSD is their new mail daemon, OpenSMTPD. It has a configuration syntax that is about 100x easier to setup and understand than anything else out there, although they are still working to get it up to par feature wise. The code is also written with a heavy focus on security, correctness, and simplicity. Its definitely something to watch for all those hackers that want an alternative…

People still use qmail? I thought the more rational sendmail alternatives had gotten alot more traction?
Post reply on HN