OpenBSD 4.0 版本：

已于2006年11月1日发布
Copyright 1997-2006, Theo de Raadt.
ISBN 0-9731791-8-X
4.0 Song: "Humppa Negala"

新特征
如何安装
如何更新
如何使用Ports树
购买一张CD

如何得到新版本:

• 从我们的订购系统中订购.
• 从镜像网点的FTP页面 中选择合适的镜像.
• 从镜像网点的pub/OpenBSD/4.0/目录中找寻相关的版本.
• 大致阅览本文件的接下来的部分.
• 浏览 4.0 已知错误列表 和规避错误的方法 .
• 浏览 3.9 和 4.0 版本之间详细的更新列表

新特征

以下是仅OpenBSD 4.0中新特征和新系统功能的部分列表.更详细的，请参阅有关4.0版本的changelog.

• 新增的可安装的构架平台s:
  • OpenBSD/armish.
    用Redboot引导的各种基于ARM的应用中，目前只支持 Thecus N2100 和 IOData HDL-G.
  • OpenBSD/sparc64.
    现在支持基于 UltraSPARC III 的机器!
  • OpenBSD/zaurus.
    支持 Zaurus SL-C3200平台.

• 更新了硬件支持, 包括:
  • New msk(4) driver for Marvell/SysKonnect Yukon-2 Gigabit Ethernet.
  • New bnx(4) driver for Broadcom NetXtreme II Gigabit Ethernet.
  • New xge(4) driver for Neterion Xframe/Xframe II 10Gb Ethernet.
  • New rum(4) driver for Ralink Technology 2nd gen USB IEEE 802.11a/b/g wireless.
  • New acx(4) driver for Texas Instruments ACX100/ACX111 IEEE 802.11a/b/g wireless.
  • New pgt(4) driver for Connexant/Intersil Prism GT Full-MAC IEEE 802.11a/b/g wireless.
  • New uath(4) driver for Atheros USB IEEE 802.11a/b/g wireless.
  • New binary blob free wpi(4) driver for Intel PRO/Wireless 3945ABG IEEE 802.11a/b/g wireless.
  • New arc(4) driver for Areca Technology Corporation SATA RAID; including RAID management via bio(4).
  • New mfi(4) driver for LSI Logic & Dell MegaRAID SAS RAID; including RAID management via bio(4).
  • New azalia(4) driver for generic High Definition Audio.
  • New SD/MMC/SDIO drivers (sdhc(4), sdmmc(4)), currently supporting SD memory cards as fake SCSI sd(4) drives.
  • New udcf(4) driver for Gude ADS Expert mouseCLOCK DCF77/HBG time signal station receivers.
  • New uslcom(4) driver for Silicon Laboratories CP2101/CP2102 based USB serial adapters.
  • New ucycom(4) driver for Cypress microcontroller based USB serial adapters.
  • New uark(4) driver for Arkmicro Technologies ARK3116 based USB serial adapters.
  • New umsm(4) driver for Qualcomm MSM EVDO based modems.
  • New Dallas/Maxim 1-Wire bus support, including:
    • New gpioow(4) driver for 1-Wire bus bit-banging through GPIO pin
    • New onewire(4) 1-Wire bus driver
    • New owid(4) 1-Wire ID family driver
    • New owtemp(4) 1-Wire temperature family driver
  • New isagpio(4) driver for ISA I/O mapped as GPIO.
  • New nmea(4) line discipline for NMEA 0183 (GPS) devices. The new nmeaattach(8) utility can be used to receive NMEA 0183 data and provide the time received as a timedelta sensor to be used by, for example, ntpd(8).
  • New VAX framebuffer drivers:
    • New lcg(4) driver for VAXstation 4000/60 and VLC color frame buffers
    • New lcspx(4) driver for Low-Cost SPX color frame buffers
    • New gpx(4) driver for GPX color frame buffers
    • smg(4) driver for Small Monochrome Graphics frame buffers heavily updated to be a modern wscons(4) driver
  • Support for VAX-based Digital VXT2000 and VXT2000+ terminals.
  • The bge(4) driver supporting newer chipsets, such as the Broadcom BCM5754, BCM5755, BCM5786, and BCM5787.
  • The em(4) driver supporting newer chipsets, such as the Intel ESB2 and ICH8.
  • The nfe(4) driver supporting newer chipsets, such as the NVIDIA MCP61 and MCP65.
  • The re(4) driver supporting newer chipsets, such as the Realtek RT8101E, RT8168, and RT8169SC.
  • The dc(4) driver supporting newer chipsets, such as the ADMtek ADM9511 and ADM9513.
  • The pciide(4) driver supporting newer chipsets, such as:
    • ATI IXP300 SATA, IXP600 IDE
    • Intel 6321ESB IDE/SATA, 82801G SATA, and 82801H SATA
    • IT Express IT8211F IDE
    • NVIDIA MCP61 SATA, MCP65 SATA
    • Promise PDC205xx SATA
    • ServerWorks SATA
    • VIA VT8237A SATA
  • The mpt(4) driver has been replaced with mpi(4), a more stable driver that supports more hardware.
  • The com(4) driver now supports pcmcia and cardbus cards on macppc.
  • Working interrupt routing on Sun Netra t1 105, Ultra 60 and possibly other sparc64 systems.
  • Work around broken VIA and NVIDIA MPBIOSes, fixes interrupt routing with GENERIC.MP on several systems.
  • Initial bio(4) support for Compaq/HP ciss(4) Smart ARRAY 5/6 SAS/SCSI RAID controllers.
  • Improved speed control on some systems:
    • New SpeedStep detection code, also adds support for VIA C7-M, and several newer Pentium M's.
    • Support SpeedStep in rudimentary fashion on most unknown CPU's that advertise the feature.
    • Zaurus can be moved into slower speeds now too.
    • The Pentium 4 Thermal Clock Control driver now supports more CPU's including the Intel Pentium M and Xeon, and provides an estimated performance impact.
    • Numerous improvements to PowerNow K7 and K8 support on i386, and support for K8 was added to amd64.
  • Support for Intel 945G/GM video chipsets (on i386).
  • Support for additional I2C sensors:
    • The adt(4) driver now supports the National Semiconductor LM9600, SMSC EMC6D10x and SMSC SCH5017 chips.
    • The admtemp(4) driver now supports the Analog Devices ADM1023, Genesys Logic GL523SM and Global Mixed-mode Technology G781 chips.

• New tools:
  • GNU RCS has been replaced with OpenRCS.

• New functionality:
  • IPsec has been greatly improved:
    • ipsecctl(8) has been greatly extended and completely supersedes ipsecadm(8):
      • Lots of documentation improvements (man ipsec.conf)
      • IPv6 support
      • AH support
      • Transport mode support
      • Dynamic IKE support for roaming users
      • USER_FQDN id support
    • sasyncd(8) works much better:
      • communicates with isakmpd(8), telling it to run active or passive depending on the master/slave state of the carp(4) interfaces. This makes IPsec failover setups much more robust.
      • looks at the carp(4) interface group by default to suppress preemption of IPsec traffic during system boot.
    • isakmpd(8) can now be safely configured by ipsecctl(8) on startup.
  • ftp(1) now supports HTTPS.
  • cdio(1) can now perform track-at-once burning and rewritable blanking.
  • spppcontrol(8) and wicontrol(8) functionality has been merged into ifconfig(8).
  • gcc(1) provides a new warning, -Wstack-larger-than-N, to report functions which are too greedy in stack variables, see gcc-local(1) for details.
  • An in-kernel getcwd(3) implementation.
  • A new system call adjfreq(2) to allow ntpd(8) to adjust the tick rate of the system clock automatically.
  • Support for X11 on VAX has been added
  • Virtual Allocation Table (VAT) support for UDF.
  • C99 functions round(3), roundf(3), trunc(3), and truncf(3) have been added to libm, the math library.
  • pf(4) now supports Unicast Reverse Path Forwarding (uRPF) checks for simplified ingress filtering.
  • bpf(4) can now ignore packets based on their direction (inbound/outbound) using the BIOCSDIRFILT ioctl.
  • pdisk(8) can now set up slices on HFS(DPME) partitioned disks on mac68k.
  • New dissectors have been added to tcpdump(8):
    • Cisco's VQP (VLAN Query Protocol)
    • IEEE 802.1AB LLDP (Link Layer Discovery Protocol)
  • trunk(4) now supports the new loadbalance mode to balance outgoing traffic based on hashed protocol header information.
  • bioctl(8) has been extended to provide runtime information on rebuilds, scrubs and initialization.
  • New sysctls to check the system vendor, product, version, serial number, and UUID.
  • Equal cost multipath routing support. Needs to be enabled by a sysctl.
  • Prebind, a secure implementation of prelinking, has been added to ldconfig(8), it speeds up launching of shared binaries. Prebind is compatible with address space randomization, unlike prelink.
  • vnconfig(8) can now use PKCS #5 PBKDF2 to create a more secure key when using encryption.

• Assorted improvements and code cleanup:
  • Much better time keeping for multiprocessor OpenBSD/i386 systems.
  • Much improved implementation of telldir(3) and friends.
  • Replacement of many malloc(3) calls that follow a pattern prone to integer overflow with safer constructs.
  • Improved failover handling in carp(4):
    • Extend the carp protocol with the demotion counter to act smarter on multiple failures.
    • Group failovers now work without carp running preempt mode.
    • Demotion can now be controlled via interface groups.
  • chio(1) is now a useful tool for controlling tape changers.
  • Much improved st(4) device setup, tape handling and error processing.
  • Many dhclient(8) fixes, including 'alias' handling and improved interface initialization.
  • scsi(4) devices detect the correct SCSI version.
  • More umass(4) devices properly detected.
  • Improved detection of fibre channel devices and devices in SCSI enclosures.
  • The new RSSI header has been added to the ieee80211_radiotap(9) framework as a replacement for ANTSIGNAL headers.
  • Many integer type safety cleanups with lint(1).

• Install/Upgrade process changes
  • Host specific site files add easy customization for individual hosts
  • X Window aperture support, where available, now defaults to off

• New functionality for hostapd(8), the Host Access Point Daemon:
  • IP based roaming to build wireless networks without the requirement of a single broadcast domain.
  • New event rules to match optional elements of radiotap headers: signal percentage, transmit rate and channel frequency.
  • Various bug fixes and improvements.

• OpenSSH 4.4:
  • Conditional configuration in sshd_config(5) using the Match directive. This allows some configuration options to be selectively overridden if specific criteria (based on user, group, hostname and/or address) are met.
  • Add support for Diffie-Hellman group exchange key agreement with a final hash of SHA256.
  • Added a ForceCommand directive to sshd_config(5), similar to the command="..." option in ~/.ssh/authorized_keys.
  • Added a PermitOpen directive to sshd_config(5), similar to the permitopen="..." option in authorized_keys, to allow control over the port-forwardings that a user is allowed to establish.
  • Added an ExitOnForwardFailure option to cause ssh(1) to exit (with a non-zero exit code) when requested port forwardings could not be established.
  • Added optional logging of transactions to sftp-server(8).
  • ssh(1) will now record port numbers for hosts stored in ~/.ssh/authorized_keys when a non-standard port has been requested.
  • Extended the sshd_config(5) "SubSystem" directive to allow the specification of commandline arguments.
  • Many manpage fixes and improvements

• OpenBGPD 4.0:
  • new nexthop selection logic ignoring bgpd routes, helps in complex setups with ospfd
  • add a detailed show rib view to bgpctl, including communities
  • allow requesting a route refresh from a peer that supports it
  • have bgpd always report back the result of an operation to bgpctl, so the operator can spot errors quicker
  • allow bgpd to manipulate carp demotion counters based on session states, gives even greater failover support
  • support restarting sessions that reached max-prefix after a given time
  • bgpctl can now show all routes received from a neighbor before filters were applied, and routes sent to neighbors
  • assorted fixes and improvements, as usual

• OpenOSPFD 4.0:
  • Track uptime of the daemon itself.
  • Track uptime of all ospf enabled interfaces.
  • Adjust logging behaviour to prevent unwanted logging.
  • Delay LSA updates when removing and adding - prevent flapping.
  • Fix plaintext authentication.
  • Improve the output of 'ospfctl show interfaces'.
  • Support rtlabels when redistributing routes.

• OpenNTPD 4.0:
  • support timedelta sensors, such as DCF77 receivers supported by udcf(4) and GPS receivers supported by nmea(4).
  • Adjust the kernel tick frequency, using adjfreq(2), improving accuracy on many machines.
  • allow for weight to be added to sensors or servers, so that one can weight timedelta sensors higher than ntp peers

• 超过3700的 ports，3400预编译的packages，更好的package 工具.
• 完全支持 pkg_add(1) over ssh(1), 通过一个简单的连接.

• 每次推出新版本，说明文件或其他文件也会有相应补充和变动 .

• 以下是系统自带的由外部提供的主要程序组:
  • X.Org 6.9.0 (+ patches, and i386 contains XFree86 3.3.6 servers (+ patches) for legacy chipsets not supported by X.Org)
  • Gcc 2.95.3 (+ patches) and 3.3.5 (+ patches)
  • Perl 5.8.8 (+ patches)
  • Apache 1.3.29, mod_ssl 2.8.16, DSO support (+ patches)
  • OpenSSL 0.9.7j (+ patches)
  • Groff 1.15
  • Sendmail 8.13.8, with libmilter
  • Bind 9.3.2-P1 (+ patches)
  • Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
  • Sudo 1.6.8p9
  • Ncurses 5.2
  • Latest KAME IPv6
  • Heimdal 0.7.2 (+ patches)
  • Arla 0.35.7
  • Binutils 2.15 (+ patches)
  • Gdb 6.3 (+ patches)

如何安装

如果已经购买了CD套装，就不用考虑FTP的安装方式，CD上有详细完整的安装帮助说明，会让你的安装更加的容易.当然，如果你打算通过FTP来安装，同样可以从CD的安装说明中得到帮助.

• CD1:4.0/i386/INSTALL.i386

• CD2:4.0/amd64/INSTALL.amd64
• CD2:4.0/macppc/INSTALL.macppc

• CD3:4.0/sparc/INSTALL.sparc
• CD3:4.0/sparc64/INSTALL.sparc64

• FTP:.../OpenBSD/4.0/alpha/INSTALL.alpha
• FTP:.../OpenBSD/4.0/armish/INSTALL.armish
• FTP:.../OpenBSD/4.0/cats/INSTALL.cats
• FTP:.../OpenBSD/4.0/hp300/INSTALL.hp300
• FTP:.../OpenBSD/4.0/hppa/INSTALL.hppa
• FTP:.../OpenBSD/4.0/luna88k/INSTALL.luna88k
• FTP:.../OpenBSD/4.0/mac68k/INSTALL.mac68k
• FTP:.../OpenBSD/4.0/mvme68k/INSTALL.mvme68k
• FTP:.../OpenBSD/4.0/mvme88k/INSTALL.mvme88k
• FTP:.../OpenBSD/4.0/sgi/INSTALL.sgi
• FTP:.../OpenBSD/4.0/vax/INSTALL.vax
• FTP:.../OpenBSD/4.0/zaurus/INSTALL.zaurus

快速安装仅适合熟悉OpenBSD 和有关disklabel -E 命令用法的人.安装时有疑惑，请参阅上面罗列的相关INSTALL.*文件!

OpenBSD/i386:

• 安装前，设置BIOS 为CD引导. OpenBSD/i386 版本在第一张CD中.如果你的BIOS不支持CD启动，可以制作引导软盘来引导启动.用第一张CD中的4.0/i386/floppy40.fs来制作启动软盘，通过软盘驱动器来引导启动.

• 如果你有SCSI控制卡，最好用第一张CD中的 4.0/i386/floppyB40.fs 来制作引导软盘，以获得更好的支持.如果你要在笔记本电脑上安装，最好用第一张CD中 4.0/i386/floppyC40.fs来制作引导软盘，对本本的支持会更好.

• CD和软盘启动都不行的话，你还可以用PXE通过网络来安装，相关信息请参阅 INSTALL.i386 文件.

• 如果计划让OpenBSD与另一操作系统共存，双重启动引导，请参阅 INSTALL.i386 文件

• 用在第一张CD中的4.0/tools/rawrite.exe ，rawrite来制作MS-DOS环境下的引导软盘.UNIX环境下的，用dd 制作.下面是有关dd用法的例子，这里的device可以是floppy, rfd0c, or rfd0a

  # dd if=<file> of=/dev/<device> bs=32k

• 确保你的软盘无坏道，格式化正确，否则，很有可能使得安装失败.有关制作启动软盘和安装OpenBSD/i386的信息请参阅FAQ 4.3.1.

OpenBSD/amd64:

• OpenBSD/amd64的4.0版本在第二张CD中.开始安装时，设置BIOS以CD方式启动.如果不能支持CD启动，可制作启动软盘来引导启动安装.用第二张CD中的 4.0/amd64/floppy40.fs 来制作，然后用软驱来启动引导.

• CD或软盘启动都不支持，可以用PXE通过网络来安装，有关信息请参阅INSTALL.amd64 文件

• 如果计划让OpenBSD可与另一个操作系统共存，双重启动引导，请参阅INSTALL.amd64

OpenBSD/macppc:

• 将第二张CD放入CDROM，开机然后一直按着C键，直到显示器显示 OpenBSD/macppc 启动.还可以在开机提示时，输入boot cd:,ofwboot /4.0/macppc/bsd.rd

OpenBSD/sparc的4.0版本在第三张CD中，启动该CD时，根据你所用的ROM的版本，需用到下面两个命令中的一个：

• ok boot cdrom 4.0/sparc/bsd.rd

  >or
  > b sd(0,6,0)4.0/sparc/bsd.rd

  如果你的SPARC系统没有CD驱动器，可以选择通过软盘来启动引导.将第三张CD中的 4.0/sparc/floppy40.fs 写入软盘来制作引导盘.更多的信息请参阅FAQ 4.3.1. .根据ROM版本的不同，从软盘启动需要下面两个命令中的一个：

  ok boot floppy

  >or
  > b fd()

• 确保你的软盘无坏道，格式化正确，否则，很有可能使得安装失败.

• 如果你的SPARC系统既没有软驱也没有光驱，你可以通过可引导启动的磁带或者通过网络来安装，相关信息请参阅 INSTALL.sparc 文件

OpenBSD/sparc64:

将第三张CD放入你的CDROM驱动器，然后输入 boot cdrom

如果这个没有用，或你没有光驱，你可以把第三张CD的 sparc64/floppy40.fs 或4.0/sparc64/floppyB40.fs 写入软盘中，用它作为启动盘来启动引导.详细内容参阅 INSTALL.sparc64

确保你的软盘无坏道，格式化正确，否则，很有可能使得安装失败

你也可以将第三张光盘中的 4.0/sparc64/miniroot40.fs 写入磁盘中的swap分区然后输入boot disk:b 来启动

如果以上的都不行，你可以通过网络来启动安装.相关内容在INSTALL.sparc64有介绍

OpenBSD/alpha:

根据你的机器类型，选择将 FTP:4.0/alpha/floppy40.fs 或 FTP:4.0/alpha/floppyB40.fs 写入一张软盘，然后输入 boot dva0.

详细信息请参阅INSTALL.alpha.

确保你的软盘无坏道，格式化正确，否则，很有可能使得安装失败

OpenBSD/armish:

将串口联网之后，Thecus能直接通过网络用tftp或http启动.用fconfig配置网络，重设之后，加载bsd.rd，更详细相关信息参INSTALL.armish .IOData HDL-G 在EXT2格式的分区上启动.启动进入linux，复制‘boot’和bsd.rd到wd0(hda1)第一分区上，然后加载运行bsd.rd,保留wd0i(hda1)ext2ts 分区.更多信息请参阅INSTALL.armish

OpenBSD/cats:

有必要的话，将固件驱动升级到最新的ABLE1.95，通过ABLE支持的设备（例如光驱或已有的FFS或EXT2FS分区）来 boot FTP:4.0/cats/bsd.rd 安装

OpenBSD/hp300:

按照 INSTALL.hp300 的相关说明通过网络来启动安装

OpenBSD/hppa:

按照 INSTALL.hppa 相关说明或浏览 hppa platform page查询相关信息通过网络来启动安装

OpenBSD/luna88k:

将bsd.rd复制到Mach或UniOS分区，通过PROM启动进行安装.你也可以制作可启动磁带来启动引导安装.更多信息请参阅 INSTALL.luna88k

OpenBSD/mac68k:

正常启动MacOS，通过FTP将 4.0/mac68k/utils 下Macside BSD/Mac68k Booter 程序解压到硬盘.在你bsd.rd 内核文件的位置配置BSD/Mac68k Booter，启动进入安装程序.更多相关信息请参阅 INSTALL.mac68k

OpenBSD/mvme68k:

可以制作可启动的磁带或通过网络来进行安装操作.

网络启动需要支持 NIOT 和 NBO debugger命令的MVME68K BUG版.

更多相关信息请参阅 INSTALL.mvme68k

OpenBSD/mvme88k:

可以制作可启动的磁带或通过网络来进行安装操作

网络启动需要支持 NIOT 和 NBO debugger命令的MVME88K BUG版.

更多相关信息请参阅

OpenBSD/sgi:

刻录一张cd40.iso的光盘，将其放入光驱中，从系统维护菜单中选择Install System Software进行安装.

如果没有光驱，可以通过DHCP或tftp连接到网络服务器的话，用bootp()/bsd.rd来引导启动安装.

更多相关信息请参阅 INSTALL.sgi

OpenBSD/vax:

用mopbooting通过网络来启动进行安装，相关信息请参阅INSTALL.vax

OpenBSD/zaurus:

用Linux内置的图形化安装程序ipkg来安装openbsd40_arm.ipk package，重启之后，即可运行.更多重要相关信息请参阅INSTALL.zaurus

关于源代码的说明：

src.tar.gz包含的源代码文件位于 /usr/src.该文件包括内核源文件，也包括了你需要的一切，其中内核源文件是单独一个文件.解压：

# mkdir -p /usr/src
# cd /usr/src
# tar xvfz /tmp/src.tar.gz

sys.tar.gz包含的源代码文件位于 /usr/src/sys.该文件包括了重建内核所需的所有的内核源代码.解压：

# mkdir -p /usr/src/sys
# cd /usr/src
# tar xvfz /tmp/sys.tar.gz

CVS会定期检查更新这两个trees.相对于用anoncvs servers，用这些trees版本的时间上会稍早一点，有关内容，请参阅here.用这些文件使得从较早的CVS升级的速度比从拥有新的完整的OpenBSD源码树升级的速度要快，这有点出乎你的意料吧.

怎样升级

Ports Tree

提供了一个Ports Tree文件.解压缩：

# cd /usr
# tar xvfz /tmp/ports.tar.gz
# cd ports

Ports/子目录是OpenBSD的ports tree一个时间的翻版.假如你对此不了解请浏览ports 页面.该文本文件并非是ports的使用说明，用户照着做就行了.

这个ports/ 目录代表了我们ports的一个CVS翻版.有了完整的资源tree，我们的ports tree就可以通过匿名的CVS得到.因此，为了确保版本是最新的，必须使得ports/ tree是在的可读写的介质中，升级tree用下面的命令：

# cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_0

［当然，在实际操作时需要将本地目录和网站名换成你的ports collection的所在位置和较近的匿名CVS服务器］

说明：大部分的ports可以通过FTP以打包的形式得到.4.0版本的升级包只有在发现问题后才发布.

如有兴趣看看一个新加的port，或想提供帮助或想寻找更多的咨询，请访问邮件列表 ports@openbsd.org ，这是一个很好的地方.

www@openbsd.org
$OpenBSD: 40.html,v 1.3 2007/02/08 13:18:30 jufi Exp $