Live data from Hacker News

OpenBSD 6.5

openbsd.org

31–40 of 208 posts

Re: OpenBSD 6.5

#31
post #6
post #4

> Xorg(1), the X window server, is no longer installed setuid. xenodm(1) should be used to start X. That is really great!

Does this mean that I can’t startx on a machine that I rarely use X on? Is a display manager now required for running X? From a security standpoint this makes sense, of course, but how are you supposed to deal with a half-desktop-half-server system?

No. It just means that startx no longer requires root to start X. It removes setuid root from one more executable.

Re: OpenBSD 6.5

#32

> First release of unwind(8), a validating, recursive nameserver for 127.0.0.1. It is particularly suitable for laptops moving between networks. When systemd-resolvd was first released it was the biggest mistake ever to write a new recursive resolver instead of using unbound or dnsmasq. Also since DNS ".. wasn't broken, so it did not need fixing". I wonder if unwind will be received with the same hostility.

OpenBSD has done a few of these daemons over the years, where they reject existing popular implementations to do their own with their own priorties. I started typing a list but really there are too many, big and small. They tend to have the OpenBSD minimalist, security focused, "no bullshit" approach.

It's not very much like systemd.

Re: OpenBSD 6.5

#33

Sorry for noob question, but why would one use OpenBSD instead of FreeBSD? I like latter, but also hear good things about former, although there are some limitations (e.g. no ZFS). Thank you in advance.

Simplicity, correctness and security before features.

Re: OpenBSD 6.5

#34

Sorry for noob question, but why would one use OpenBSD instead of FreeBSD? I like latter, but also hear good things about former, although there are some limitations (e.g. no ZFS). Thank you in advance.

Simplicity. I have a long love for FreeBSD, but the project has different aims than OpenBSD.

Linux and FreeBSD are novels. OpenBSD strives to be a short poem.

Linux and FreeBSD push really hard to add cutting-edge features, but OpenBSD pushes hard to see what can be removed and still retain essential functionality. OpenBSD packs a remarkable amount of functionality into a code footprint that doesn’t feel like it has grown appreciably since I first ran it in the late 90s.

At the same time, this flensing process has allowed OpenBSD to move quickly on some innovations like “doas” instead of sudo. They also maintain cononical implementations of their other products like OpenSSH and were able to move quickly to their cleaned-up OpenSSL implementation LibreSSL.

As for laptop support, I wouldn’t say their hardware support compares to Linux. That is, they don’t support everything. Rather, for supported laptop (and desktop!) hardware, that suppport is excellent. Put another way: that which is supported is supported very well.

Re: OpenBSD 6.5

#35
Just to say I also love this OS, although I'm very far from a hardcore hacker.

It just worked out of the box on that generic unbranded laptop I retrieved (no touchpad though). I use Xfce wich is well integrated, and the package manager is plain simple and easy.

Definately better experience than my previous Linux ones. Some penalty on performance though.

PS : I've put it on my Raspberry Pi too.

Re: OpenBSD 6.5

#36
post #3

> ROP mitigations in clang(1) have been improved, resulting in a significant decrease in the number of polymorphic ROP gadgets in binaries on i386/amd64. Does anybody know if there's a writeup somewhere? Or what are the commits to look at.

In addition to Todd Mortimer's slides, linked in the sibling comment, there is this video of the same, which I enjoyed: https://www.youtube.com/watch?v=ZvSSHtRv5Mg

Re: OpenBSD 6.5

#37
post #24
post #22

Earlier quoted context omitted.

All the OS X users seem to be content running Docker in a Linux VM. It's more secure that way too, fitting with OpenBSD mentality :) Doesn't help with the desktop OS part though.

OpenBSD does not yet have kvm support, so you can run qemu, but it'll be very slow.

OpenBSD has its own hypervisor these days https://www.openbsd.org/faq/faq16.html

Re: OpenBSD 6.5

#38
post #26

What!? They don't have OpenBSD t-shirts anymore !?!?!?!?! My old OpenBSD 2.3 tshirt (the wireframe daemon) will die soon and I need a replacement!

https://www.openbsd.org/artwork.html

> [...] This artwork emblazoned CDs and posters up until version 6.0, after which we stopped producing product and only release software on the internet.

See also [0]; you should be able to make your own t-shirt with official logos, and donate as usual [1,2,3]

[0] https://marc.info/?l=openbsd-misc&m=155439809001096&w=2

[1] https://www.openbsd.org/donations.html

[2] https://www.openbsdfoundation.org/campaign2019.html

[3] https://www.openbsdfoundation.org/donations.html

Re: OpenBSD 6.5

#39
post #23

> MariaDB 10.0.38 Can anyone share some insight why OpenBSD does not provide a more recent MariaDB Version ?

ok, found it.

http://openbsd-archive.7691.n7.nabble.com/Update-MariaDB-fro...

10.2 is a no go for us as the new client library requires atomic ops killing the client library on a handful of archs.

Re: OpenBSD 6.5

#40
post #14

Earlier quoted context omitted.

Odd that you put this on a the travel laptop and not the desktop, I imagine most OS polygot its the inverse for things like battery life, touchpad drivers, webcam driver. Am curious why not make the switch on desktop? Same semantics? Same dotfiles? Do you use the same window manager across both linux and openbsd? Also what's the "much nicer" you refer to.. Please sell me

Oh, I need Docker a lot. And our target platforms are Linux and OSX, so I just want to have some kind of standard OS on Desktop. Also stuff like Signal, Spotify etc. I still haven't been able to get running on OpenBSD, maybe some day... Nicer in a way that setting up the wifi, suspend et. al. just works. And is very easy.

I don't know how adventurous that may be but you can try to run Docker in a Linux VMM ;)
Post reply on HN