anoncvs.html

<!-- DO NOT EDIT ANONCVS.HTML MANUALLY - IT IS GENERATED FROM TEMPLATES!
     See comments in www/build/mirrors.dat for details -->

<!doctype html>
<html lang=en>
<meta charset=utf-8>

<title>OpenBSD Anonymous CVS</title>
<meta name="description" content="How to get OpenBSD updates via Internet using Anonymous CVS">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" type="text/css" href="openbsd.css">
<link rel="canonical" href="https://www.openbsd.org/anoncvs.html">

<h2 id=OpenBSD>
<a href="index.html">
<i>Open</i><b>BSD</b></a>
Anonymous CVS
</h2>

<hr>

<p>
Anonymous CVS is a method of keeping your local copy of the OpenBSD source
tree up to date with respect to changes made to current OpenBSD sources.
In addition to following the bleeding edge of development, it is
also possible to track the <a href="faq/faq10.html#Patches">errata patches</a>
of a release.

<p>
Anonymous CVS works directly against a central source code repository.
This means that you have the full set of CVS commands available to control
merging and updating your changes with other source changes, performing diffs,
change histories and other queries against the central repository.
In the event that the changes can't be completely merged, CVS provides annotated
changes to your local copy and preserves an unmodified copy of your version.

<p>
The OpenBSD Project currently has four active source repositories:

<ul>
  <li><b>src</b> - source code for the base system
  <li><b>ports</b> - the <a href="faq/ports">ports tree</a>
  <li><b>www</b> - web pages
  <li><b>xenocara</b> - xenocara
</ul>

<h3 id="CVS">What is CVS?</h3>

<p>
<a href="https://savannah.nongnu.org/projects/cvs">CVS</a> is the
source code control system used to manage the OpenBSD source tree.
It implements a central repository for all officially released source code
and changes, while permitting developers to maintain local copies of the
source code with their working changes.

<p>
There are two levels of source tree access:

<ul>
<li>Read-write access for developers
<li>Read-only access for everyone
</ul>

<h3 id="starting">Pre-Loading the Source Tree</h3>

<p>
While you can download the entire source tree from an AnonCVS server, you can
save time and bandwidth by pre-loading your tree with the source tarballs.
This is particularly true if you are running
<a href="stable.html">-stable</a>, as relatively few files change
between the release and -stable.

<p>
The source files for download from the <a href="ftp.html">mirrors</a> are
separated into two files to reduce the download time for those wishing to
work with only one part of the tree.
The kernel sources are in <code>sys.tar.gz</code> and the userland sources
are in <code>src.tar.gz</code>.

<p>
The following commands assume you have followed
<a href="faq/faq5.html#wsrc">these instructions</a> to give a non-root
user write access to the src, ports and xenocara directories.

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>tar xzf /tmp/src.tar.gz</b>
$ <b>tar xzf /tmp/sys.tar.gz</b>
$ <b>cd /usr</b>
$ <b>tar xzf /tmp/ports.tar.gz</b>
$ <b>cd /usr/xenocara</b>
$ <b>tar xzf /tmp/xenocara.tar.gz</b>
</pre>

<h3 id="using">Using CVS to Get and Update Your Source Trees</h3>

<p>
<a href="https://man.openbsd.org/cvs">cvs(1)</a> was designed to be a simple way
to retrieve and update your sources.
You must first decide whether you want to track -current or a
<a href="stable.html">-stable</a> branch.
The current tree has all of the up to the minute changes, whereas the
-stable branch contains the sources for the release plus the patches from
the <a href="errata.html">errata</a> and lesser issues already applied.
For more information on the flavors of OpenBSD, see
<a href="faq/faq5.html#Flavors">here</a>.

<p>
Choose the Anonymous CVS server you are going to use from the
<a href="#CVSROOT">list of servers</a> below, then you can start using cvs.
If you begin with <code>src.tar.gz</code> and <code>sys.tar.gz</code> as mentioned
above, you can skip the initial <kbd>checkout</kbd> and proceed to updating.

<p>
<b>Warning:</b>
When using cvs, you should take care that your current directory is either the
root of the tree you are referencing or in a separate place such as
<code>/tmp</code>.
Some commands, such as <kbd>cvs checkout</kbd>, can create an arbitrary sub-tree
in the current directory, and a subsequent update will recursively flesh out
this sub-tree.

<h4 id="getting">Getting an Initial Tree</h4>

<p>
The following commands assume that your user is member of the <code>wsrc</code>
group; replace <code>anoncvs.example.org</code> with a mirror from the
<a href="#CVSROOT">list below</a>.

<p>
If you are following -current:

<pre class="cmdbox">
$ <b>cd /usr</b>
$ <b>cvs -qd anoncvs@anoncvs.example.org:/cvs checkout -P src</b>
</pre>

<p>
If you are following the 7.7 -stable branch:

<pre class="cmdbox">
$ <b>cd /usr</b>
$ <b>cvs -qd anoncvs@anoncvs.example.org:/cvs checkout -rOPENBSD_7_7 -P src</b>
</pre>
<!-- DO NOT EDIT ANONCVS.HTML MANUALLY - IT IS GENERATED FROM TEMPLATES! -->

<p>
Anonymous CVS uses passwordless SSH as a transport.
If this is the first time you have connected to a server,
you will be asked to confirm the SSH fingerprint to ensure that you
are connecting to the expected server:

<pre class="cmdbox">
$ <b>cvs -d anoncvs@anoncvs.spacehopper.org:/cvs checkout -P src</b>
The authenticity of host 'anoncvs.spacehopper.org (2001:67c:15f4:a423::28)' can't be established.
ED25519 key fingerprint is SHA256:oaJ7VEyjt2EHMeixzKn9zJGiV5YlWHIUls070tKdBzI.
Are you sure you want to continue connecting (yes/no)?
</pre>

<p>
In most cases, the list below includes the fingerprints for the server,
so you can compare it against the displayed fingerprint as additional
verification that you are connecting to the correct server.
Confirm this, and the fingerprint will then be saved as usual.

<pre class="cmdbox">
Are you sure you want to continue connecting (yes/no)? <b>yes</b>
Warning: Permanently added 'anoncvs.spacehopper.org' (ED25519) to the list of known hosts.
</pre>

<h4 id="updating">Updating an Existing Tree</h4>

<p>
If you are following -current:

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>cvs -q up -Pd -A</b>
</pre>

<p>
If you are following the 7.7 -stable branch:

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>cvs -q up -Pd -rOPENBSD_7_7</b>
</pre>

<p>
Every time you run this, cvs(1) synchronizes your <code>/usr/src</code> tree.
It does not destroy any of your local changes; rather it attempts to merge
changes in.

<h4>Changing the Server</h4>

<p>
If you are updating a source tree that you initially fetched
from a different server, or from a tar file, you <b>must</b>
add the <em>-d [cvsroot]</em> option to cvs.

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>cvs -d anoncvs@anoncvs.example.org:/cvs -q up -Pd</b>
</pre>

<h4>Getting the ports and xenocara Trees</h4>

<p>
Make sure your user is member of the <code>wsrc</code> group and that
<code>/usr/ports</code> is group writable by <code>wsrc</code>.
Replace <kbd>ports</kbd> with <kbd>xenocara</kbd> throughout to get or update a
xenocara tree.

<ul><li>

<p>
If you are following -current:

<pre class="cmdbox">
$ <b>cd /usr</b>
$ <b>cvs -qd anoncvs@anoncvs.example.org:/cvs checkout -P ports</b>
</pre>

<p>
If you are following the 7.7 -stable branch:

<pre class="cmdbox">
$ <b>cd /usr</b>
$ <b>cvs -qd anoncvs@anoncvs.example.org:/cvs checkout -rOPENBSD_7_7 -P ports</b>
</pre>

<li> Any time afterwards, to update this tree:

<p>
If you are following -current:

<pre class="cmdbox">
$ <b>cd /usr/ports</b>
$ <b>cvs -q up -Pd -A</b>
</pre>

<p>
If you are following the 7.7 -stable branch:

<pre class="cmdbox">
$ <b>cd /usr/ports</b>
$ <b>cvs -q up -Pd -rOPENBSD_7_7</b>
</pre>

</ul>

<h4>Creating a Diff</h4>

<p>
To make a diff of a locally patched module (here <code>cd.c</code>) to include with
a bug report:

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>cvs diff -u sys/scsi/cd.c &gt; /tmp/patch</b>
</pre>

<h3 id="EXAMPLE">Example Usage</h3>

<pre class="cmdbox">
$ <b>cd /tmp</b>
$ <b>cvs -d anoncvs@anoncvs.example.org:/cvs checkout -P src/sys/arch/sparc</b>
[copies the files from the repository to your machine]
$ <b>cd src/sys/arch/sparc</b>
$ <b>cvs log locore.s</b>
[shows the commit log for the chosen file]
$ <b>cvs diff -bc -r1.1 -r1.5 locore.s</b>
[shows the changes between revisions 1.1 and rev 1.5]
</pre>

<h3 id="rsync">Mirroring the Repository</h3>

<p>
As noted in the list below, some repository mirrors also allow fetching
the entire repository via rsync.
Please use the <code>reposync</code> wrapper script which checks for updates to
CVSROOT/ChangeLog and avoids a full directory scan in some cases where no update
was detected.
It also handles SSH port forwarding for mirrors where this is available,
allowing to connect to an "rsync --daemon" server over an
authenticated and encrypted channel.

<p>
Install <code>reposync</code> from packages, create a user and directory to
hold the repository, and a directory for reposync's own use:

<pre class="cmdbox">
# <b>pkg_add reposync</b>
# <b>useradd cvs</b>
# <b>install -d -o cvs /home/cvs /var/db/reposync</b>
</pre>

<p>
Now the following command might be used to mirror or update the repository.
If your chosen mirror does not support SSH port-forwarding, either switch to
a better mirror, or change to "reposync -p".

<pre class="cmdbox">
# <b>su -m cvs -c "reposync rsync://mirror.example.org/cvs /home/cvs"</b>
</pre>

<p>
After mirroring, you can use the local directory as your cvsroot, for example:

<pre class="cmdbox">
$ <b>cd /usr/src</b>
$ <b>cvs -d /home/cvs -q up -Pd</b>
</pre>

<!-- XXXrelease - needs an occasional update -->
As of March 2024, repository sizes are as follows:

<pre class="cmdbox">
$ <b>du -shc *</b>
224M    CVSROOT
1.6G    ports
3.9G    src
936M    www
2.3G    xenocara
9.0G    total
</pre>

<p>
The overall repository size currently increases at a rate
of about <b>530</b>MB per annum. The src repository increases by about
<b>220</b>MB.

<h3 id="CVSROOT">Available Anonymous CVS Servers</h3>

<ul>
    <li><strong>CVSROOT=anoncvs@anoncvs.au.openbsd.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs.au.openbsd.org/cvs/</strong><br>
Location: Brisbane, Australia.<br>
Maintained by <a href="mailto:dlg@openbsd.org">David Gwynne</a>.<br>
Protocols: ssh.<br>
Updated hourly.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:pPcBY4E33vwreETbz5KJUIzZpWWzaZPhrpnLaFa7WuQ</code><br>
(ECDSA) <code>SHA256:kg2Zaqpd8ZuluPzlpFS9rEw0KR1UmxD9jSG6+2tr28A</code><br>
(ED25519) <code>SHA256:4CbDtzH/6mqQ/f6KDLz0rdqK2Thk4dQQtHXOxTONEvk</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs.comstyle.com:/cvs</strong><br>
<strong>reposync rsync://anoncvs.comstyle.com/cvs/</strong><br>
Location: Toronto, Canada.<br>
Maintained by <a href="mailto:brad@comstyle.com">Brad Smith</a>.<br>
Protocols: ssh, ssh port 2022.<br>
Updated hourly.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:vYSNKOoCHReBzmdJy3SiULg7YyEZVoib3X3jGJShezA</code><br>
(ECDSA) <code>SHA256:W2WEQDka4xicJzeQY0Nm0iCv3h2xZLzfp+TT1UvtBTw</code><br>
(ED25519) <code>SHA256:cqNaOU0KSmJ/S7jrV4UbZ6WkkyXWZ07rhWK8yrRZUV0</code><br>
<p>
<li><strong>CVSROOT=anoncvs@obsdacvs.cs.toronto.edu:/cvs</strong><br>
<strong>reposync rsync://obsdacvs.cs.toronto.edu/obsdcvs/</strong><br>
Location: University of Toronto, Toronto, ON, Canada.<br>
Maintained by <a href="mailto:nick@holland-consulting.net">Nick Holland</a>.<br>
Protocols: ssh.<br>
Updated every 2 hours from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:BosSX+gUL/17cUdppQlmXht1S5GGHrHNrL6+U3hyG+o</code><br>
(ECDSA) <code>SHA256:4I5R4/tGayGG0KDEsj6CY1eCqt2sbcYtA3nqnhUaD04</code><br>
(ED25519) <code>SHA256:AqblfWV4KT2ptlpV3mq3gb4jNPzgYtjDvlBBcaeohxQ</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs.fr.openbsd.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs.fr.openbsd.org/openbsd-cvs/</strong><br>
Location: Paris, France.<br>
Maintained by <a href="mailto:openbsd-mirror@bsdfrog.org">Landry Breuil, Antoine Jacoutot</a>.<br>
Protocols: ssh.<br>
Updated every 2 hours from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:d3o82eY/kIfUfmhVpwFu7Do1I7+Wol/tvWmm6Ye9HZ4</code><br>
(ECDSA) <code>SHA256:WXN4m8NHd4vcTqxmzLMMVenSh6gp8060nv39JIiCSss</code><br>
(ED25519) <code>SHA256:STeC5WGChnZjIi5Rb+XTAQSbKXQJ+B9wxhaacYNff7k</code><br>
<p>
<li><strong>CVSROOT=anoncvs@mirror.osn.de:/cvs</strong><br>
<strong>reposync -p rsync://mirror.osn.de/openbsd-all/</strong><br>
Location: N&uuml;rnberg, Germany.<br>
Maintained by <a href="mailto:aw@osn.de">Armin Wolfermann</a>.<br>
Protocols: ssh.<br>
Updated every 3 hours.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:fQGY+UhLdbB3oDI4frFtSKF2BjQIkSY0lnSA6lVv8+o</code><br>
(ECDSA) <code>SHA256:plj+1CPTaKi0AIId/aDMCGgZZnkxc1ow+ffBNMvYW4A</code><br>
(ED25519) <code>SHA256:np+DK8xlo9A4YnYXO/22GBV8iyuL13r3g5I0/N1Mf8g</code><br>
<p>
<li><strong>CVSROOT=anoncvs@ftp.hostserver.de:/cvs</strong><br>
<strong>reposync rsync://ftp.hostserver.de/cvs/</strong><br>
Location: Frankfurt, Germany.<br>
Maintained by <a href="mailto:mirror@hostserver.de">Sebastian Benoit, Florian Obser</a>.<br>
Protocols: ssh.<br>
Updated hourly from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:XrjDaKqJ6J02iSQ/eoiqII0LxJX9D/41eeC6pSQAJXs</code><br>
(ECDSA) <code>SHA256:v6G11hMFfS2+zPh44hhZcpUqDEppyvGQe0vzmrtIHA8</code><br>
(ED25519) <code>SHA256:KeG1InAfAnQKqpCewmXw/Egb+4UZZuIMGdlYVG+uxNg</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs.jp.openbsd.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs.jp.openbsd.org/cvs/</strong><br>
Host also known as <strong>kankoromochi.econ.nagasaki-u.ac.jp</strong>.<br>
Location: Nagasaki University, Faculty of Economics, Nagasaki, Japan.<br>
Maintained by <a href="mailto:sigh@nagasaki-u.ac.jp">SUZUKI Hitoshi</a>.<br>
Protocols: ssh.<br>
Updated every 2 hours.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:3XcKWDBEcB5XE4shCmRfh0LmSOyDcp4vcSQp8NK62Gk</code><br>
(ECDSA) <code>SHA256:aXpmw11DuXXLm8PsJ37L65jEXbu8JF2cnVfQptSkoyQ</code><br>
(ED25519) <code>SHA256:vLLJFhJCzzmXd7FwgQ+vJpnAQiDibSS2aZOgeuVZmjQ</code><br>
<p>
<li><strong>CVSROOT=anoncvs@mirror.litnet.lt:/cvs</strong><br>
Location: Kaunas, Lithuania.<br>
Maintained by <a href="mailto:pkugrinas@gmail.com">Patrikas Kugrinas</a>.<br>
Protocols: ssh.<br>
Updated every 2 hours from anoncvs.eu.openbsd.org.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:RmbGnT7IGLvVd9tm5mAx7rz6VntYlwqW6qyT2QuritY</code><br>
(ECDSA) <code>SHA256:hj1btBB8gqLdm3EumX3T3LaUZkY9fm1RFvw9DVS2oi8</code><br>
(ED25519) <code>SHA256:EnczVm1Q8+lE+Zmue3jAPh/pA6BJhEDwL+HNMfedpXI</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs.eu.openbsd.org:/cvs</strong><br>
<strong>reposync -p rsync://anoncvs.eu.openbsd.org/OpenBSD-cvs/</strong><br>
Location: Safespring AB, Stockholm, Sweden.<br>
Maintained by <a href="mailto:jj@deadzoft.org">Janne Johansson</a>.<br>
Protocols: ssh.<br>
Updated every 2 hours from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:QcoosLgIy8UxR6PF82E+0wS+2F0WzSaavJSIUxBL8oE</code><br>
(ECDSA) <code>SHA256:OUJAC3qFB0Qs8/Oyw5SaUPr0rRlb6wcR2fR9laKBGRs</code><br>
(ED25519) <code>SHA256:ZW5umXyiwexF5Tcz3SXgDIA/+vgPFGZ6EE44WLi+x3U</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs.spacehopper.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs.spacehopper.org/cvs/</strong><br>
Location: Plymouth, United Kingdom.<br>
Maintained by <a href="mailto:sthen@openbsd.org">Stuart Henderson</a>.<br>
Protocols: ssh, ssh port 2022, ssh port 443.<br>
Updated hourly from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:orTIOu6IKP7Ndz317tyCaz8LJnJWz4jmzSuG+FK7jwM</code><br>
(ECDSA) <code>SHA256:p+VCx2KynGtiFFaaiF010SIQu6gJgmJb//yokW2sGBE</code><br>
(ED25519) <code>SHA256:oaJ7VEyjt2EHMeixzKn9zJGiV5YlWHIUls070tKdBzI</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs4.usa.openbsd.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs4.usa.openbsd.org/cvs/</strong><br>
Host also known as <strong>ftp3.usa.openbsd.org, ftp4.usa.openbsd.org, ftp5.usa.openbsd.org</strong>.<br>
Location: New York Internet, New York, NY, USA.<br>
Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
Protocols: ssh, ssh port 2022.<br>
Updated hourly from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:RT7vVXrvmKgZ7VkrVZ0lgugDFCBPVT6iSwMh+m1vZTA</code><br>
(ECDSA) <code>SHA256:JreaFNTlm2Uhlk3iaMs4Rweq27KPSVYUgj9sZUsOxCc</code><br>
(ED25519) <code>SHA256:iLsNcXOnluavlGUV+O4JE7TNppEwIMvsjZ7m1VVObiM</code><br>
<p>
<li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
<strong>reposync rsync://anoncvs1.usa.openbsd.org/cvs/</strong><br>
Host also known as <strong>anoncvs.usa.openbsd.org, anoncvs2.usa.openbsd.org, anoncvs3.usa.openbsd.org</strong>.<br>
Location: Network Media, LLC, Bend, OR, USA.<br>
Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
Protocols: ssh, pserver.<br>
Updated hourly from main server.<br>
SSH fingerprints:<br>
(RSA) <code>SHA256:PFKE28DFbJLmqoLkq9xfBuiYl9GN2LABsvUpzNk+LlE</code><br>
(ECDSA) <code>SHA256:Ofstc7xq/W+73vBMUpb3A4ZqLNhKI3u2FdzbOkJpOHI</code><br>
(ED25519) <code>SHA256:IYHq/zKqYnd2wy71Br6X8Q1Jk0XGjOJA4PU6CAr6pDo</code><br>
<p>

</ul>

<p>
If your server is listed on here with inaccurate or unknown information, please
contact <a href="mailto:beck@openbsd.org"><code>beck@openbsd.org</code></a>.

<p>
You may want to use
<a href="https://man.openbsd.org/traceroute">traceroute(8)</a>
to find out which server is nearest you.
Problems with a server should be reported to the <b>maintainer</b> of the
server in question.

<p>
If local policy prevents outgoing connections to ssh's default port of 22,
some servers permit connections on an alternative port (typically 2022).
These are noted in the list above.
To use a different port, reconfigure your ssh client by adding a <code>Host</code>
entry to <code>$HOME/.ssh/config</code>, e.g.:
<pre class="cmdbox">
Host anoncvs.example.org
    Port 2022
</pre>

<h3 id="MIRROR">Setting up an AnonCVS Mirror</h3>

<p>
<!-- XXXrelease - needs an occasional update -->
AnonCVS mirrors currently require about 9GB of disk (and it will grow!), and use
up to 64MB of swap per anoncvs user (assuming the user does a large operation;
while smaller operations use fewer resources, AnonCVS still makes much more of
an impact than ftp).
Such AnonCVS machines should have excellent network connectivity for the area
they are expected to serve.
A <a href="anoncvs.shar">document</a> which describes the setup of AnonCVS
servers is available.

<h3 id="NOTES">Final Notes</h3>

<p>
After upgrading your source tree, you should read the comments at the top of
<code>/usr/src/Makefile</code> before attempting a build.
Also, you should build a new kernel <strong>before</strong> doing a <kbd>make build</kbd>
if possible.
In some cases it may be necessary to rebuild and install the <code>config</code>
utility before you can build the kernel.
If <kbd>config GENERIC</kbd> fails this is probably the case.

<p>
It is important to note that upgrading from a release to the current tree
by rebuilding the sources is not supported.
Therefore, it is suggested that you first install the latest snapshot before
attempting a tree build from source.