A new dbupdate(8) utility is being backported and released as a syspatch(8) update for #OpenBSD 7.9/8.0. This will make it easier for users to periodically update /etc/ssl/cert.pem and /usr/share/zoneinfo. ​

It's also available as an errata patch: https://www.openbsd.org/errata80.html#p005_dbupdate

#eMudhra

Upgraded my OpenBSD server to version 8.0 yesterday. My ssh session dropped, naturally, and I waited patiently with a

while true; do ssh my.server; sleep 5; done

After a really long time (5 minutes? 10 minutes? It felt like ages), I decided I had to learn how to connect to the console so that I could debug and fix the upgrade problems. Thankfully, @OpenBSDAms has made this really easy and Unix friendly:
ssh into the host and use vmctl. So easy. So cool!

Anyways, by the time I had done that and ran rcctl status ssh, it was up again. Everything had worked, syspgrade had run flawlessly.

I just should've had a little more patience.

#openbsd #unix

emulators/wine (re)entering OpenBSD ports https://www.undeadly.org/cgi?action=article;sid=20261022052106 #openbsd #emulators #wine #windows #windows64 #development #ports #packages

dbupdate(8) added to -current https://www.undeadly.org/cgi?action=article;sid=20261021191736 #openbsd #dbupdate #zoneinfo #cert #certificates

Ok #PHP SecOps, #OpenBSD #relayd and I are standing by…

(…)
match request from $home_ip url "example.com/baikal/" tag "baikal"
(…)

I'm happy to announce the 19th release of the #OpenBSD #webzine

https://webzine.puffy.cafe/issue-19.html

My #thinkcentre and the #t480s are now both updated to #OpenBSD8. #EasyPeasy, no incidents.
#OpenBSD has really done a marvellous job in making an automated upgrade procedure.

If you're using #OpenBSD 8.0 #httpd and have manually configured “ciphers” delete them. #httpd is now secure and PQC by default

Raspberry Pi 4 upgraded to OpenBSD 8.0.

Reboot after 'sysupgrade' took a few minutes , had me worried for a bit.

#OpenBSD #RaspberryPi

https://www.openbsd.org/faq/upgrade80.html

Alt...

Screenshot of 'fastfetch' output from OpenBSD 8.0 on a Raspberry Pi 4

DUST VICTIMS PRAY FOR OKLAHOMA RAIN

#content_review #openbsd #unix_surrealism #comic #art #fediart #ai #programming #runbsd

Alt...

Funhole Content Review OPENBSD 'Too bad. You can use other software.' 4 Hours of Theo ASMR to fall asleep to DEEP DIVE: Who coined the term FishLinux? HTTPD UPDATE: My static blog is now the most secure website on the planet Drinking while gaming - is it safe? Cyber wars: The only winning move is not to play, or is it? Exclusive interview with the elusive dutch artist behind 8.0's release art COUPON: FREE FISH FOOD SICK FISH? NO PROBLEM! 2 fsck tips

So if wine comes to OpenBSD I may fire up my gaming rig to play on it again, since the AMD GPU support is already there.

#OpenBSD

no gods no masters, includes openbsd

Like I know I shouldn't take things personally, but
with AI it's like that's the argument.
A non-person telling me to take something not-personally.

#openbsd

@prahou @jaypatelani @OpenBSDAms
jamming a stick into your own wheel is a fitting metaphor for #openbsd pushing such #AIslop.

If you are using the bwfm(4) #wifi driver on #OpenBSD, consider updating to -current soon, which just received some fixes for a crafted wifi frame injection issue where according the report "memcpy() then attempts to copy 0xfffffff0 bytes into a fresh mbuf cluster. [...] With datalen 0xfffffff0 and no received payload, the unpatched kernel [...] reset immediately to the boot loader".

Which sounds wild, but this reproducer injected fake ethernet frames into the driver via software hacks, and I don't have the patience to verify these claims with real hardware.

And of course, a PCI device has DMA access which means it can change kernel memory arbitrarily anyway unless the system has an iommu, which AFAIK OpenBSD does not use yet, at least not on amd64.

Not sure yet if there will be errata.

The Linux driver has some of the same bugs.

#OpenBSD ... Undsrea Lreer ...?????!!!???!!

My sloppy-sense is tingling

(if you don't know what I'm looking at - https://www.openbsd.org/ <- image)

what I love about the #OpenBSD community is all the artwork AND music associated with the OS. it's fantastic stuff. if you haven't already check it out: https://www.openbsd.org/artwork.html

first south park, now openbsd, nothing is sacred.

Alt...

fish with legs and hands

Alt...

forbidden fish 1 year ago

Financial summary of our #Git hosting service based on #OpenBSD and #GameOfTrees in Q3/2026:

Our financial situation is profitable. Our expenses with 3 production servers (web, mail, repositories) are now fully covered by our subscriber base. Our one and only repository server is almost booked out.

There is not enough money left over to pay anyone for their time working on the project so we remain in full volunteer mode. We will keep a buffer to prepare for renting additional servers once this becomes necessary.

Expenses:

Total hosting costs in Q3 2026: 781€

Payment processor fees: 52.66€

EU VAT: 147.11€

Amount total: 980.77€

Funds received from subscribers in Q3 2026:

EU amount total: 701.00€

non-EU amount: 454.00€

Amount total: 1155.00€

Funds received on #OpenCollective in Q3 2026:

EU amount total: 538.65€

non-EU amount: 171.50€

Amount total: 710.15€

# sysupgrade
# syspatch
# sysmerge
# pkg_add -ua
# reboot
#

Procession of Fools \\ HAPPY BIRTHDAY, #OPENBSD!

#unix_surrealism #technomage #comic #analognowhere #phone_bad_book_good #mobilek #ai

Alt...

Girl to Fish: Master I did all the work! Fish: All the work? Girl: YES! CAN I GO OUTSIDE AND WATCH THE PARADE NOW PLS? Fish: What parade? Girl: The AI one? Fish: Sure, whatever. it's a parade. jugglers, rope walkers, magicians, banner carries with conflicting messages, what have you Penguin: I can't believe he lets you watch this. Girl: it's educational

Let the fun begin!

#OpenBSD #RunBSD

Alt...

Upgrading my Acer laptop to OpenBSD 8.0

You’ve got mail!

#OpenBSD #HYPE80

#OpenBSD: When You Update Your Production System Before Your First Cup of Coffee! 8.0 is huge!

OpenBSD 8.0 Released https://www.undeadly.org/cgi?action=article;sid=20261020021401 #openbsd #newrelease #development #security #networking #freesoftware #libresoftware

https://www.openbsd.org/80.html

Pigs really can fly, the moon is made of cheese and Wine now runs on #OpenBSD! ​

Largely made possible by the work of Andrii (NethIafin), fabien@, and thfr@, 64-bit Windows applications (yes, games) run on -current!

WIP ports@ patch here: https://marc.info/?l=openbsd-ports&m=179236125692175&w=2

#PlayOnBSD 🎮

The 61st OpenBSD release is here... 8.0!

https://www.openbsd.org/80.html

Start your sysupgrade engines!
Incredible work has been done on vmd(8)/vmm(4)! And of course many many other fixes and features.

Artwork by yvaneht nioj and clanker

#OpenBSD #RUNBSD

You should know #OpenBSD has released the following security patches:

035: RELIABILITY FIX
In ppp(4), an off-by-one error could lead to an out-of-bounds write.

036: RELIABILITY FIX
By providing malformed config mode payloads, a malicious IKEv1 peer could crash isakmpd(8) due to an out-of-bounds read.

037: SECURITY FIX
Backport security fixes from nsd(8) version 4.15.3.

1/2 🧵

If you're looking for some #OpenBSD #80HYPE I have a summary post from earlier this month. ​

https://bsd.network/@brynet/117407035545900963

Surprise! 🎉​ #OpenBSD 8.0 is released! Happy release day! ​ 🐡​

https://www.openbsd.org/80.html

This is the 61st release of OpenBSD. Now get to upgrading/installing on all your machines. ​

Announcement mail: https://marc.info/?l=openbsd-announce&m=179245843570316&w=2

I think it's about time for some #OpenBSD #80HYPE ​

Clang/LLVM 22 is now OpenBSD's base compiler on clang architectures, including updated libc++{,abi}, compiler-rt & libunwind support libraries.

https://bsd.network/@brynet/116658062479940402

OpenBSD/sparc64 switches to Clang by default! This was the last significant architecture to switch. This makes OpenBSD the only operating system to support sparc64 with a modern toolchain.

https://bsd.network/@brynet/117130130536792528

Since 7.9, Jonathan Gray (jsg@) has continued to update the drm graphics stack (inteldrm/radeondrm/amdgpu) bringing OpenBSD 8.0 to Linux 6.18.y/6.18.53, adding driver support for Intel Arc A-Series (DG2/Alchemist) cards.

Increased KVA (kernel virtual addresses) on amd64 (to 512G) now allows mapping more than 4G of VRAM (for example, GPU compute w/ Vulkan)

https://freshbsd.org/openbsd/src?q=drm&committer[]=jsg

https://bsd.network/@brynet/116794461642940154

After a ton of work in Edmonton by Mike Larkin (mlarkin@) and Dave Voutila (dv@), OpenBSD vmm/vmd(8) now supports SMP guests up to 64 VCPUs per VM! ​ 🎉​

https://bsd.network/@brynet/117295044109301163

https://bsd.network/@brynet/117299753668348206

OpenBSD 8.0 adds qwz(4), new WiFi driver for Qualcomm WCN7850 "ath12k" devices.

https://bsd.network/@brynet/116574369382033904

A new driver, sambat(4), for monitoring battery status, cycle count/charge info on Samsung Galaxy Book4 Edge (Snapdragon arm64) machines.

https://bsd.network/@brynet/116600674574234896

Accelerated swap encryption on amd64 and arm64 by using AES CPU instructions.

https://bsd.network/@brynet/117090842236460135

OpenBSD/arm64 and OpenBSD/riscv64 boards can now heartbeat blinking LEDs to show system load averages.

​ Das Blinkenlights!! ​

https://bsd.network/@brynet/116879479168132932

#OpenBSD httpd(8) now supports many new features:

• Setting custom HTTP response headers.
• New blocking/filtering rules based on received HTTP headers (e.g: User-Agent: )

https://bsd.network/@brynet/117371604463587328

https://bsd.network/@brynet/116979133275422995

See also rsadowski@'s report: https://rsadowski.de/posts/2026/w2k26-edmonton-openbsd-hackathon/

.. and finally, ​

I made my first commit to #OpenSSH this release cycle!

https://bsd.network/@brynet/117007833531799959

And lots more to see in 8.0! ​​

@Bredroll haha, yes, there are quite a few people using #OpenBSD theses days :D

I've been thinking more about #openbsd the last couple of days, I've not used it since 3.9 and back then it was the core of a security product. It was perfect for that. Does anyone use it these days?

@Bredroll yes. So long as you can live with a limited selection of packages/ports #OpenBSD is actually one of the easiest of the BSD's to get setup on a laptop. I can, and do, operate happily with it. I also have some stuff that I need available on the public Internet running on @OpenBSDAms - a wonderful hosting service that supports the OpenBSD project too!

Pigs really can fly, the moon is made of cheese and Wine now runs on #OpenBSD! ​

Largely made possible by the work of Andrii (NethIafin), fabien@, and thfr@, 64-bit Windows applications (yes, games) run on -current!

WIP ports@ patch here: https://marc.info/?l=openbsd-ports&m=179236125692175&w=2

#PlayOnBSD 🎮

A bit late on the run but this instance now runs #GoToSocial 0.22.2 Shrubbiest Sloth 🌿🌿🌿, luckily in a proper way, on #OpenBSD using the #nowasm unsupported flavor.

When I was young, one of my favorite games was Age of Empires, which was released for Windows. I haven't used Windows for a long time, but my love for the game has remained. There is a Linux port of the game called OpenAge. I began porting this game to OpenBSD in 2014; I finished the port last week, and all the patches for OpenBSD have been accepted upstream. Hooray!

I'll sent patches to ports@ soon.

https://github.com/ligurio/openbsd-wip/tree/bf0bb4502b5d890797789257fdd69799cb7e2094/games/openage

#playonbsd #openbsd #openage

Oct 18 #OpenBSD born, Wednesday 08:37:01 GMT, 1995

The upcoming #OpenBSD #Qt update to 6.12 will come with VA-API support enabled in QtMultimedia. QtMultimedia’s FFmpeg backend can now offload video decoding to the GPU via VA-API (Intel media driver / Mesa on AMD), so Qt and KDE apps on OpenBSD get hardware-accelerated playback for codecs like H.264, HEVC, VP9 and AV1 instead of decoding everything on the CPU.

Heads up, Theo de Raadt has committed some additional tightening of setuid/setgid programs in #OpenBSD -current. ​

deraadt@ modified src/lib/libc/dlfcn/init.c: libc initialization now aborts if a setuid/setgid program does not have the global variable _permit_setugid declaring that it is setuid/setgid.
The more important packages have been fixed, and the long tail will be fixed by people who encounter this problem.
ok sthen

deraadt@ modified src/lib/libc/dlfcn/init.c: For any binary linked against libc, compare the file setuid/setgid bits against the internal global variable _permit_setugid.
If either bit is set in the file mode, but the same bit is not set in the variable, generate a syslog message, output the same to stderr.
It looks like this: /usr/bin/x: not supposed to be setuid, aborting
[...]

More details were revealed in commits made last week laying the groundwork. ​

Create the weak global _permit_setugid which must match the setuid/setgid
mode of the executable file. This is documented in execve(2).

If the corresponding bits are not set right, it means this binary was not intended to be setuid/setgid. The file has become setuid/setgid accidentally, unintentionally, or due to attacker control, and libc will log the event and abort.
[...]
This change in bsd.prog.mk automatically (based upon BINMODE) creates an additional .c file with the correct variable definition to compile and link into the program, so that we don't need any additional changes in userland base.

More seatbelts! ​

install77.img 801mb
install78.img 801mb
install79.img 801mb
install80.img 851mb *

i see we stuck with deprecated v6

Somebody in my TL asked for #NetBSD Mint. That reminded me I once covered #OpenBSD with Mint sauce.

https://www.tumfatig.net/2019/openbsd-with-mint-sauce/

This can probably apply to any other OS where #Xfce runs.

Am I wrong understanding that all recent the #hype around privilege escalation on #OpenBSD 7.9 was solved / patched last month in the errata 018? 🤔

@rqm also is it -CURRENT because FISH and WATER? #openbsd

New local kernel exploit for #OpenBSD called #bigfish gets attackers root with KARL/SMAP/SMEP enabled, with building blocks in the chain going back ~37 years to the original BSD sources:

https://calif.io/research/big-fish

It also has really cool ANSI art. 😉

So the new wifi card for my X390 is the wrong one :( My fault for not checking more closely!
Anyway, I am not going to spend more time on FreeBSD on this laptop, so I have instead installed #OpenBSD on it. WiFi speeds are fine with 80211ac connection, just a shade under the 300 in/50 out I have paid for with the ISP.
I am now trying to change the console font so that terminal based programs which use box characters render properly. Tips would be welcome - it seems the Handbook and FAQ focus on VGA driven devices with wsconsctl and wsfontload utilities, which don't work on "newer devices".
I am sure at least one of you has fixed this...! If so, how did you do it? Thanks!

I had the feeling I was not posting OpenBSD related interesting stuff on the blog anymore - because I fell into the HW&PM rabbit hole. But after checking the posts’ list, the last "interesting" (IMO :) dates from 2026-05-27. Which is not that bad after all. Still not really happy with it but that’s what happens when things just work.

Anyway, next #OpenBSD release #HYPE80 may be the opportunity to redo / enhance things and chatterbox bloggerbox about it 🤞

As @brynet has been pointing out... it's time for some #80HYPE 🧙🏻‍♂️​ 🐡

Some of the highlights we are looking forward to! This is just a teeny tiny subset of all the amazing things coming in 8.0! https://www.openbsd.org/80.html

OpenBSD vmm/vmd(8)
- Added MP support for up to 64 VCPUs per guest VM

This is what a dmesg looks like:
https://dmesgd.nycbug.org/dmesgd?do=view&id=9166

OpenBSD httpd(8)
- Setting custom HTTP response headers.
- New blocking/filtering rules based on received HTTP headers (e.g: User-Agent: )

OpenBSD relayd(8)
- Added Lua patterns(7) support for relayd(8) filter rules; improved glob(7) documentation.
- Added ECDSA support to the relayd(8) CA privsep engine.
- Switched the default TLS cipher in relayd.conf(5) set from 'HIGH:!aNULL' to 'secure.'

Thank you @mlarkin, dv@ and @sizeofvoid for these specifically, and of course all developers who are working tirelessly on #OpenBSD

My #OpenBSD laptop has never seen another screen hooked up to it. I am pondering whether to attend #OmniOpenCon 2026 with i3 as I settled on, go back to cwm or experiment with some #Wayland compositor which may or may not crash mid-talk (mango crashed on my first day of heavy use). I'm tempted to try some infinite canvas WM like slide (X11) or hevel (Wayland) because I think it's cooler for a presentation, but does really anyone outside r/unixporn daily drive any of these on OpenBSD? (StumpWM is also on the table, but since I'm not going to use Emacs for absolutely everything, not sure if it's worth the potential headache)

My latest summaries of the main recent changes to OpenBSD-current (linuxians might call it the "rolling release branch," from around Oct 2nd to yesterday):

https://www.openbsd.org/plus.html

#openbsd

@Kiloku here's many of the games that you can play on #openbsd https://pobsd.chocolatines.org/

Be me, be sending out diffs and forgetting things so I have to resend and resend and its more and more embarrassing every time.

#OpenBSD

Let's settle this once and for all! 👻

Linux vs. BSD! 😈

Which side are you on? 🐧🐡

#Linux #Debian #Arch #ArchLinux #Fedora #FedoraLinux #BSD #OpenBSD #FreeBSD #NetBSD