Posts in category OpenBSD Journal
arm64 gains RETGUARD
In a
series
of
commits,
Todd Mortimer (mortimer@) has added RETGUARD
for the arm64 platform.
We previously reported the
addition of RETGUARD for amd64.
Read more…
Happy Bob’s Libtls tutorial
Bob Beck (beck@ when wearing OpenBSD-only hat)
has written
a tutorial
on using libtls:
[…]
This tutorial is designed for people with some C experience on a POSIX, BSD like machine with the latest libtls installed. It focuses on changes that are necessary to make an existing program written in C that uses the POSIX sockets api t [...]
mandoc-1.14.4 released
Ingo Schwarze (schwarze@ when wearing OpenBSD-only hat)
wrote in to let us know about the new release:
From: Ingo Schwarze [elided]
Date: Wed, 8 Aug 2018 22:21:13 +0200
To: discuss@mandoc.bsd.lv
Subject: mandoc-1.14.4 released
Hello,
after a full year of tranquil development, i just released mandoc-1.14.4.
This is a regular ma [...]
X11 on really small devices
Patrick Wildt (patrick@) has been experimenting with small I2C and SPI-connected displays, and with
this commit, it was enabled for armv7 and arm64 platforms as ssdfb(4) in -current.
Read more…
g2k18 hackathon report: Ingo Schwarze...
For the g2k18 Ljubljana hackathon, i decided to try and get rid
of as many small userland tasks as possible.
Lots of them have been piling up over time.
Read more…
Theo de Raadt on “unveil(2) usa...
In a
message
to tech@, Theo de Raadt (deraadt@) discusses the state of development of
unveil(2)
support in userland (and for a certain port):
Read more…
g2k18 hackathon report: Kenneth Weste...
A new g2k18 hackathon report has arrived, this time from Kenneth Westerback (krw@), who writes:
Other than missing a connection due to \"seat maintenance\" in YYZ,
travel was uneventful. I arrived MUC (twelve hours late) and spent a
week hacking with bluhm@ and mpi@ at Genua\'s Geekweek, to which bluhm@
had kindly arranged an invitatio [...]
More mitigations against speculative ...
Philip Guenther (guenther@)
and Bryan Steele (brynet@)
have added more mitigations against speculative execution
CPU vulnerabilities
on the amd64 platform.
Read more…
rtadvd(8) has been replaced by rad(8)
rad(8) [as described in the g2k18 hackathon
report by
Florian Obser (florian@)]
is now the only IPv6
router advertisement daemon in -current, following the removal of
rtadvd(8).
Advice on making the transition has been
added to current.html
g2k18 hackathon report: Claudio Jeker...
Claudio Jeker (claudio@) is next up with his report from Ljubljana:
I arrived in Ljubljana late on Sunday. At that time I knew I will
spend most of my time on making bgpd(8) fast since this is actually
my day job for the next year.
Read more…
g2k18 hackathon report: Carlos Carden...
Another g2k18 hackathon report has arrived, this one from
Carlos Cardenas (ccardenas@), who writes:
Howdy.
This was my first hackathon and as a FNG, I didn\'t know what to
expect, except for meeting folks and being able to place a face with their
name/handle.
Luckily, I got some great advice from mlarkin@:
You can start somethin [...]
g2k18 Hackathon Report: Klemens Nanni...
The next g2k18 report comes from Klemens Nanni (kn@), who writes:
With no clear goal in mind, I mainly set out to g2k18 for meeting new faces,
discovering the city and to wander off through various places in our tree…
Read more…
g2k18 hackathon report: Florian Obser...
Fresh from the just concluded hackathon in Ljubjlana comes our next report from Florian Obser
(florian@) who writes:
Sometimes you have to roll the hard six.
I have been trying to bolt a standard OpenBSD parse.y based config
file onto rtadvd(8) for about a year now. I could not do it. The code
base is just too weird. (Read more...)
g2k18 hackathon report: Matthieu Herr...
Next in from Ljubljana is Matthieu Herrb (matthieu@):
I spent the first day and a half chasing an issue that many people
have been experiencing: the first X start after an install or upgrade
from a snapshot was slow. The direct cause of this is well-known: it\'s
the fontconfig library (used by all applications that do font
rendering [...]
g2k18 hackathon report: Antoine Jacou...
Before winning the football world cup, the french were writing their hackathon reports. Here\'s the one from Antoine Jacoutot (ajacoutot@):
g2k18 was my third General Hackathon in Ljubljana, Slovenia. I love it there,
it\'s a great place to host such an event: perfect location (city center),
beautiful city, cheap yet very nice food e [...]
g2k18 Hackathon Report: Marc Espie on...
The
g2k18
hackathon has just concluded, and already we have our first report.
Marc Espie (espie@) wrote in:
So I came into Ljublana running. Specifically, I\'ve been working on
a lot of ports infrastructure stuff recently.
update-plist at g2k18
the infamous cups bug fix a bit later
and now tags.
Read more…
OpenBSD gains Wi-Fi “auto-join&...
In a change which is bound to be welcomed widely, -current has gained
"auto-join" for Wi-Fi networks.
Peter Hessler (phessler@) has been working on this for quite some time and he wrote about it in his p2k18 hackathon report. He has
committed
the work from the g2k18 hackathon in Ljubljana:
CVSROOT: /cvs
Module name: src
C [...]
Fixing bufferbloat with PF and OpenBS...
In this post, Paul Smith shows how to reduce buffer bloat and improve interactive traffic latencies.
Long time ago, Daniel Hartmeier wrote a nice piece on how to prioritize ACKs and small packets using ALTQ in PF to sustain download speeds on (mostly) assymetric links, but since then PF and queuing has undergone quite a few changes.
To [...]
httpd(8) Gains Simple Request Rewrite...
Reyk Floeter (reyk@) has
committed
support for simple request rewrites to
httpd(8)/
httpd.conf(5) [in -current]:
CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2018/06/20 10:43:05
Modified files:
usr.sbin/httpd : config.c httpd.conf.5 httpd.h parse.y
server_http. [...]
SMT Disabled by Default in -current
As part of ongoing mitigations against CPU vulnerabilities,
-current has gained a new sysctl, "hw.smt",
to control Simultaneous Multi Threading (SMT).
This is disabled by default (only on Intel® CPUs, for now).
Read more…
