27.html

<!doctype html>
<html lang=en id=release>
<meta charset=utf-8>

<title>OpenBSD 2.7</title>
<meta name="description" content="OpenBSD 2.7">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/27.html">

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
2.7
</h2>

<table>
<tr>
<td>
<a href=images/spacefish.jpg>
<img src=images/spacefish.jpg alt="Spacefish"></a>
<td>
Released June 15, 2000.<br>
Copyright 1997-2000, Theo de Raadt.<br>
<cite class=isbn>ISBN 0-9683637-5-X</cite>

<ul>
<li>See the information on <a href="ftp.html">the FTP page</a> for
    a list of mirror machines.
<li>Go to the <code class=reldir>pub/OpenBSD/2.7/</code> directory on
    one of the mirror sites.
<li>Have a look at <a href="errata27.html">The 2.7 Errata page</a> for a list
    of bugs and workarounds.
<li>See a <a href=plus27.html>detailed log of changes</a> between the
    2.6 and 2.7 releases.
</ul>
<p>
All applicable copyrights and credits are in the src.tar.gz,
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the
files fetched via <code>ports.tar.gz</code>.
</table>

<hr>

<section id=new>
<h3>What's New</h3>
<p>
This is a partial list of new features and systems included in OpenBSD 2.7.
For a comprehensive list, see the <a href=plus27.html>changelog</a> leading
to 2.7.

<ul>

<li><a href="https://www.OpenSSH.com">OpenSSH</a> now supports both the
SSH1 and SSH2 protocols.  The SSH2 protocol is slowly gaining
acceptance.  Up until recently, SSH2 was just available in various
commercial offerings.  The benefit with SSH2 is that it avoids the RSA
cipher and uses DSA instead, which is freely reusable.  The downside
is that DSA is not nearly as fast on old slow machines.  But since
OpenSSH still supports SSH1 protocol (if the RSA libraries are
installed) our users get the best of both worlds.
<p>

<li>The clever trick used in 2.6 remains, allowing us to distribute
the same CD-ROM worldwide containing full strength crypto without
violating the RSA patent in the USA.  The next OpenBSD release will
ship with RSA support in the operating system by default, since the
patent expires on September 21, 2000.
<p>

<li>Extensive changes to the documentation, notably the man pages and
the Web FAQ. The manual pages now include useful examples to
supplement the explanations.

<p>

<li>More complete collection and better tested set of "ports".
<p>

<li>Over 500 pre-built and tested packages.
<p>

<li>The system includes the following major components from outside suppliers:
<p>
<ul>
<li>XFree86 3.3.6
<li>gcc 2.95.2
<li>perl 5.6.0 plus a few fixes.
<li>Apache 1.3.12 + Mod_ssl 2.6.2 + OpenSSL 0.9.5a, DSO
<li>ipf 3.3.14
<li>groff 1.15
<li>sendmail 8.10.1
<li>lynx 2.8.2 with HTTPS support added
<li>sudo 1.6.3
<li>Recent ncurses release
<li>Latest KAME IPv6 as of mid-May 2000.
<li>KTH Kerberos 1.0
<li>OpenSSH 2.1
</ul>
<p>

<li>Much improved device driver support
<p>
<ul>
<li>Support for crypto hardware to accelerate IPSEC performance, ie.
    <a href=http://www.powercrypt.com>PowerCrypt</a>.
<li>Support for all new
    <a href="https://man.openbsd.org/ahc.4">Adaptec</a>,
    <a href="https://man.openbsd.org/ncr.4">NCR</a>,
    <a href="https://man.openbsd.org/isp.4">Qlogic</a>,
    and
    <a href="https://man.openbsd.org/adw.4">Advansys</a>
    scsi controllers.
<li>Many new ethernet devices supported, including
    <a href="https://man.openbsd.org/sis.4">
    SiS900/7016</a>,
    <a href="https://man.openbsd.org/sf.4">
    Adaptec Starfire</a>,
    <a href="https://man.openbsd.org/dc.4">
    21143</a>,
    <a href="https://man.openbsd.org/ste.4">
    Sundance ST201 (DEC DFE-550TX)</a>, etc.
<li>New USB ethernet devices supported, including
    <a href="https://man.openbsd.org/aue.4">ADMtek USB</a>,
    <a href="https://man.openbsd.org/cue.4">CATC USB</a>,
    and
    <a href="https://man.openbsd.org/kue.4">
    Kawasaki USB</a>.
<li>A good start at
    <a href="https://man.openbsd.org/cardbus.4">
    cardbus</a> support.
<li>Significant improvements to
    <a href="https://man.openbsd.org/pcmcia.4">
    pcmcia</a>.
<li>Support for many more wireless networking cards, ie.
    <a href="https://man.openbsd.org/wi.4">WaveLAN</a>,
    <a href="https://man.openbsd.org/an.4">Aironet</a>,
    <a href="https://man.openbsd.org/ray.4">Aviator</a>,
    etc.
<li>Many improvements in
    <a href="https://man.openbsd.org/usb.4">USB</a>
    support.
<li>Hypersparc support for the sparc port.
<li>Support for most of the gigabit ethernet cards on the market, ie.
    <a href="https://man.openbsd.org/sk.4">SysKonnect</a>,
    <a href="https://man.openbsd.org/wx.4">Intel</a>, and
    <a href="https://man.openbsd.org/ti.4">Alteon</a>.
<li>Support for the
    <a href="https://man.openbsd.org/gdt.4">
    ICP Vortex RAID controller</a>.
<li>Support for large PC's using multiple PCI busses based on the Intel 451 or
    RCC ServerWorks chipsets.
<li>New audio drivers, including
    <a href="https://man.openbsd.org/neo.4">Neomagic</a>,
    <a href="https://man.openbsd.org/cmpci.4">
    C-Media CMI8x38</a>, and
    <a href="https://man.openbsd.org/uaudio.4">
    USB audio</a>.
<li>Improvements in
    <a href="https://man.openbsd.org/pciide.4">
    PCI IDE subsystem</a>, including new support for AMD 756.
</ul>
<p>

<li>Many improvements for security and reliability (look for the red
print in the <a href=plus27.html>complete changelog</a>).
<p>

<li>Many other new features, including:
<p>
<ul>
<li>Support for encrypting swap space.
<li>Improved
    <a href="https://man.openbsd.org/compat_linux.8">
    Linux emulation</a>
<li>Support for large
    <a href="https://man.openbsd.org/mount_msdos.8">
    FAT32 filesystems</a>.
<li>Significant improvements to the
    <a href="https://man.openbsd.org/bridge.4">
	network bridging</a> code.
<li>Improved
    <a href="https://man.openbsd.org/pthreads.3">
    pthreads</a> support.
<li>Support for
    <a href="https://man.openbsd.org/vlan.4">
    vlan</a> networking.
</ul>

</ul>
</section>

<hr>

<section id=install>
<h3>How to install</h3>
<p>
Following this are the instructions which you would have on a piece of
paper if you had purchased a CDROM set instead of doing an alternate
form of install.  The instructions for doing an ftp (or other style
of) install are very similar; the CDROM instructions are left intact
so that you can see how much easier it would have been if you had
purchased a CDROM instead.

<hr>
Please refer to the following files on the two CDROMs for extensive
details on how to install OpenBSD 2.7 on your machine:

<ul>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/i386/INSTALL.i386">
	.../OpenBSD/2.7/i386/INSTALL.i386 (on CD1)</a>
<p>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/sparc/INSTALL.sparc">
	.../OpenBSD/2.7/sparc/INSTALL.sparc (on CD2)</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/mvme68k/INSTALL.mvme68k">
	.../OpenBSD/2.7/mvme68k/INSTALL.mvme68k (on CD2)</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/amiga/INSTALL.amiga">
	.../OpenBSD/2.7/amiga/INSTALL.amiga (on CD2)</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/mac68k/INSTALL.mac68k">
	.../OpenBSD/2.7/mac68k/INSTALL.mac68k (on CD2)</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/hp300/INSTALL.hp300">
	.../OpenBSD/2.7/hp300/INSTALL.hp300 (on CD2)</a>
<p>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/pmax/INSTALL.pmax">
	.../OpenBSD/2.7/pmax/INSTALL.pmax</a>
<li><a href="https://ftp.openbsd.org/pub/OpenBSD/2.7/sun3/INSTALL.sun3">
	.../OpenBSD/2.7/sun3/INSTALL.sun3</a>
</ul>
</section>

<hr>

<section id=quickinstall>
<p>
Quick installer information for people familiar with OpenBSD, and the
use of the new "disklabel -E" command.  If you are at all confused when
installing OpenBSD, read the relevant INSTALL.* file as listed above!

<h3>OpenBSD/i386:</h3>
<p>
Play with your BIOS options, and see if you can enable booting off a
CD; try using CD1.  If not, write CD1:2.7/i386/floppy27.fs to a
floppy, then boot that.  If you are mixing OpenBSD with another
operating system, you will surely need to read the INSTALL.i386
document.
<p>
To make a floppy under MS-DOS, use /2.7/tools/rawrite.exe.  Under
Unix, use "dd if=&lt;file&gt; of=/dev/&lt;device&gt; bs=32k" (where device could
be "floppy" or "rfd0c" or "rfd0a").  Use properly formatted perfect
floppies with NO BAD BLOCKS or you will lose.

<h3>OpenBSD/sparc:</h3>
<p>
To boot off CD2, type "boot cdrom 2.7/sparc/bsd.rd", or
"b sd(0,6,0)2.7/sparc/bsd.rd" depending on your ROM version.
Alternatively, write CD2:2.7/sparc/floppy27.fs to a floppy and boot it
using "boot floppy" or "boot fd()" depending on your ROM version.
Finally, a third alternative is to write CD2:2.7/sparc/kc.fs and
CD2:2.7/sparc/inst.fs to two separate floppies.  Then insert "kc.fs",
and boot as described above.  As soon as the floppy drive ejects a
floppy, insert "inst.fs".  Answer a bunch of questions.  Reboot from
the "kc.fs" floppy.  This time, when the floppy is ejected simply
re-insert "kc.fs" again and answer a different set of questions.

<h3>OpenBSD/amiga:</h3>
<p>
Create BSD partitions according to INSTALL.amiga's preparation section.
Mount the CD2 under AmigaOS as device CD0: Next, execute the following
CLI command: "CD0:2.7/amiga/utils/loadbsd CD0:2.7/amiga/bsd.rd".

<h3>OpenBSD/hp300:</h3>
<p>
You can boot over the network by following the instructions in
INSTALL.hp300.

<h3>OpenBSD/mac68k:</h3>
<p>
Boot MacOS as normal and partition your disk with the appropriate A/UX
configurations.  Then, extract the Macside utilities from
CD1:2.7/mac68k/utils onto your hard disk.  Run Mkfs to create your
filesystems on the A/UX partitions you just made.  Then, use the
BSD/Mac68k Installer to copy all the sets in CD1:2.7/mac68k/ onto your
partitions.  Finally, you will be ready to configure the BSD/Mac68k
Booter with the location of your kernel and boot the system.

<h3>OpenBSD/sun3:</h3>
<p>
Get the release via ftp. Then, you can either setup a diskless boot or
create an installation tape, as described in INSTALL.sun3.
</section>

<hr>

<section id=sourcecode>
<h3>Notes about the source code</h3>
<p>
<code>src.tar.gz</code> contains a source archive starting at <code>/usr/src</code>.
This file contains everything you need except for the kernel sources, which are
in a separate archive.  To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/src.tar.gz</kbd>
</pre></blockquote>
<p>
<code>sys.tar.gz</code> contains a source archive starting at <code>/usr/src/sys</code>.
This file contains all the kernel sources you need to rebuild kernels.
To extract:
<blockquote><pre>
# <kbd>mkdir -p /usr/src/sys</kbd>
# <kbd>cd /usr/src</kbd>
# <kbd>tar xvfz /tmp/srcsys.tar.gz</kbd>
</pre></blockquote>
<p>
Both of these trees are a regular CVS checkout.  Using these trees it
is possible to get a head-start on using the anoncvs servers as
described <a href="anoncvs.html">here</a>.
Using these files
results in a much faster initial CVS update than you could expect from
a fresh checkout of the full OpenBSD source tree.
</section>

<hr>

<section id=ports>
<h3>Ports Tree</h3>
<p>
A ports tree archive is also provided.  To extract:
<blockquote><pre>
# <kbd>cd /usr</kbd>
# <kbd>tar xvfz /tmp/ports.tar.gz</kbd>
</pre></blockquote>
<p>
The ports/ subdirectory is a checkout of the OpenBSD ports tree.  Go
read <a href="faq/faq15.html">https://www.OpenBSD.org/faq/faq15.html</a>
if you know nothing about ports
at this point.  This text is not a manual of how to use ports.
Rather, it is a set of notes meant to kickstart the user on the
OpenBSD ports system.
<p>
Certainly, the OpenBSD ports system is not complete.  This is because
the full integration of ports into the OpenBSD environment is still a
young project as of this release.  We believe the ports that are
provided here are stable, but it is most important to realize that
ports will continue to grow a great deal in functionality in the
future.
<p>
As we said, ports will be growing a lot in the future.  The ports/
directory represents a CVS (see the manpage for cvs(1) if you aren't
familiar with CVS) checkout of our ports.  As with our complete source
tree, our ports tree is available via anoncvs.  So, in
order to keep current with it, you must make the ports/ tree
available on a read-write medium and update the tree with a command
like:
<blockquote><pre>
# <kbd>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd</kbd>
</pre></blockquote>
<p>
[Of course, you must replace the local directory and server name here
with the location of your ports collection and a nearby anoncvs
server.]
<p>
Again, it is important to see the webpage for specific instructions as
this is a new service which hasn't yet been ironed out
completely.
<p>
Finally, despite ports' youth, help is never far.  If you're
interested in seeing a port added, would like to help out, or just
would like to know more, the mailing list
<a href="mail.html">ports@openbsd.org</a> is a good place to know.
</section>