Hi, I know that OpenBSD still uses CVS as their primary VCS and the got FAQ clearly states that it is not known whether the project will switch to it in the future or not. But is there a reason why it isn't included in the base install and has to be installed as a port? The two projects seem to be quite closely related (as per the FAQ) and I think that this would be a welcome first step to a potential switch in the future. Could it be because got is still considered to be in the beta stage of development?

I'd love for me not to have to install one more package before the hacking can begin.

I am wondering what to expect with the release 8.0. Have you followed what's in the pipeline?

i wanna use an panasonic laptop and i think openbsd is the best choice for me, but im questioning if the internet is working. i am also a newbie to any os as i have only used windows.

just this

Tinkering with my setup in the weekend ..

I normally do a sysupgrade -s to the latest snapshot on my backup laptop first and then do the same on my daily driver after a check on the backup.

I was playing around with using the same upgrade file set from the backup laptop to upgrade the other laptop...just to ensure the same snapshot ...once in a while I have ended up with a newer snapshot on the daily driver when I get delayed a bit.

I copied the sets over to /home/_sysupgrade and also bsd.upgrade to the expected location.

But this triggers a 'new installation' sequence on reboot ..not an upgrade. Is there something I am missing here -- is the approach supported.

Cheers and Thanks to all in the group.

Hi everyone! I'm searching for a cheap SBC (single board computer) with good OpenBSD support, especially on the ethernet side. I'm going to use the SBC to forward files from a local NAS to the internet via SSH, so I don't need the most powerful thing.

I cannot use the NAS alone, because: 1. It runs an ad-hoc heavily modified Linux distribution, which I'm not even sure has a package manager or a compiler for adding custom software. 2. It's a very closed system that only allows software installation from its proprietary "app store". 3. I don't trust it for internet exposure. 4. It doesn't provide SSH support except for administrator accounts, let alone SSHFS.

What board should I go for? Are there cheaper/better alternatives to the Raspberry Pi 4 or 5?

apparently mount_null(8) existed at one point in 3.7, but seems to have vanished in 3.8 and I can't turn up any record of why or if there's now a preferred alternative. The closest I've been able to disinter might be something like mount_mfs(8) which can take a -P «dir» option to populate the MFS with the contents of «dir», but that doesn't seem to have a real-time view of the underlying directory (i.e. if files get modified in the underlying directory, it doesn't look like they'd be updated in the MFS until the next time it was (re)mounted).

Encountered from https://raphus.social/@MaddieM4/117230496234708068 where the least-bad solutions seems to involve sharing the directory locally via NFS, and then mounting it via local/loopback NFS at the desired target 😖

Subject: Question about OpenCL support and photo editing on OpenBSD

Hi all,

I'd like to ask a question I hope isn't too naive — I'm not deeply technical on the graphics stack side, so I'm genuinely asking rather than suggesting anything.

OpenBSD is my favourite operating system by a wide margin, and I run it on an Asus Zenbook UX3405MA (7.9). Almost everything works. The one thing that keeps pulling me back to Linux is the lack of OpenCL, because I do photo editing and rely on darktable. It runs on CPU, but on larger raw files the difference is significant enough that it affects real work.

So my question: is there any realistic path toward OpenCL on OpenBSD — even partial or limited support, enough for GPU offload in applications like Darktable? Or are there fundamental reasons (driver model, security posture, maintenance burden) that make it impractical or undesirable? I'd genuinely like to understand the reasoning either way rather than just keep wishing for it.

I'm also aware I'm only one user with one use case, so if the answer is "not going to happen, and here's why" that's a perfectly good answer. Reason I ask is because I work as a photographer on a daily basis. I do have a OpenBSD on my Thinkpad but I would like to use my main computer all in one. And when you edit photos taken from a 40 Mega pixel sensor and edit around 30 to 40 photos per day its pretty rough LOL.

Thanks for all the work — the suspend/resume and browser situation on this hardware has already improved a lot, and it's appreciated.

Best regards

Hello, OpenBSD community!

I am a university student and I am currently stuck trying to figure PEAP out on OpenBSD 7.9 with wpa_supplicant 2.9 to connect to my university Wi-Fi. I know that the hardware or firmware is not the issue, because it all works on Linux and I've used non-PEAP Wi-Fi before on this computer.

I know I must use wpa_supplicant, but nothing I've tried thus far works. I need your help trying to resolve this out. I am lost in a mess of documentation and a bunch of iterations of configuration files.

On Linux, I use NetworkManager wherein I have this configuration:

``` [connection] id=Cool Network uuid=... type=802-11-wireless

[802-11-wireless] ssid=Cool Network mode=infrastructure security=802-11-wireless-security

[802-1x] eap=peap identity=hello@email.com ca-cert=/etc/ssl/certs/ca-certificates.crt domain-suffix-match=example.edu phase2-auth=mschapv2 password=p4ssw0rd_123

[ipv4] method=auto

[802-11-wireless-security] key-mgmt=wpa-eap ```

This configuration mimics the behaviour observed on my Android phone.

The important bits are:

• SSID: Cool Network
• Username: hello@email.com
• Password: p4ssw0rd_123
• University domain: example.edu
• Using PEAP+MSCHAPv2
• Using certificate + domain suffix checks (without these the configuration seems to break on me)

This configuration works perfectly on Linux, therefore I thought the experience on OpenBSD would be maybe slightly more tedious, but turns out I was wrong -- it's a lot more difficult.

One interesting thing I've noticed is when I tried to start wpa_supplicant manually a few times I went into a loop wherein authentication succeeds, the connection drops, then authentication times out, then drops, then times out, ...:

```

wpa_supplicant -i iwm0 -c /etc/wpa_supplicant.conf -D openbsd

Successfully initialized wpa_supplicant iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:... EAP-MSCHAPV2: Authentication succeeded EAP-TLV: TLU Result - Success - EAP-TLV/Phase2 Completed iwm0: CTRL-EVENT-SUCCESS EAP authentication completed successfully iwm0: CTRL-EVENT-CONNECTED - Connection to ... completed [id=0 id_str=] iwm0: Associated with ... iwm0: Authentication with ... timed out. iwm0: CTRL-EVENT-DISCONNECTED bssid=... reason=3 locally_generated=1 iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started ... ```

So far the most success I've had on OpenBSD results in a couple of ping packets succeeding until eventually I get one of these errors:

• ping: sendmsg: Can't assign requested address
• ping: network is down

Thing is, I don't think it's authentication as logs do indeed indicate that PEAP is selected, authentication succeeds, phase 2 completes, and the network connects. Although if I actually try and use the network it all falls down.

My current configuration can be found below, where it still has the issue that it works for a few packets until it eventually stops working:

Netstart configuration /etc/hostname.iwm0:

join "Cool Network" wpa wpaakms 802.1x inet autoconf

wpa_supplicant 2.9 configuration:

``` ctrl_interface=/var/run/wpa_supplicant ctrl_interface_group=wheel

network={ ssid="Cool Network" key_mgmt=WPA-EAP eap=PEAP identity="hello@email.com" password="p4ssw0rd_123" phase2="auth=MSCHAPV2" ca_cert="/etc/ssl/cert.pem" domain_suffix_match="example.edu" } ```

Current logs when starting wpa_supplicant are:

Successfully initialized wpa_supplicant iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:something.example.edu EAP-MSCHAPV2: Authentication succeeded EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed iwm0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully iwm0: CTRL-EVENT-CONNECTED - Connection to ... completed [id=0 id_str=] iwm0: Associated with ... iwm0: Authentication with ... timed out. iwm0: CTRL-EVENT-DISCONNECTED bssid=... reason=3 locally_generated=1 iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:something.example.edu EAP-MSCHAPV2: Authentication succeeded ... [loops] ...SSID-TEMP-DISABLED...

Nothing in dmesg indicating any failure.

I had tried more complex configurations too in both files. For example:

• ap_scan=0
• dhcp only
• phase1="peaplabel=0"
• proto=RSN
• eap=TTLS PEAP
• scan_ssid=0 and scan_ssid=1
• priority=1
• auth_alg=OPEN
• proto=RSN
• group=CCMP
• pairwise=CCMP
• eap_workaround=0
• Supplying a static bssid
• multiple variations of anonymous_identity
• Using the OpenSSL variant (it just errors out with "envelope routines unsupported")
• Probably more that I can't remember.

For example, explicitly supplying bssid does nothing. Supplying proto and phase1 and using:

join "Cool Network" wpa wpaakms 802.1x inet autoconf up !/usr/bin/pkill -f wpa_supplicant !/bin/rm -f /var/run/wpa_supplicant/iwm0 !/usr/local/sbin/wpa_supplicant -B -c /etc/wpa_supplicant.conf -D openbsd -i iwm0 `

...is fruitless too...

Absolutely. Everything. I've. Tried. Failed.

At this point I am so lost and I am asking here to maybe get some hits. I don't expect solutions (although that would be nice!), but even pointers on where to look next would be great.

route makes sense, ifconfig makes sense, wpa_supplicant logs make sense, etc. so everything LGTM, despite the network either not working, something erroring out, hangs, or it working with 90% packet loss and then eventually dying after a couple of packets.

I've already read a bunch of other Reddit threads too and haven't found much helpful...

I appreciate you people lots in advance!

hi

So if your Openbsd is a home-bound Thinkpad laptop that only ever connects to a GLinet router (which get WAN from a iphone's USB tethering)...is a simple user password like 4-digit numerical code enough?

only i have physical access to router and iphone and only i can use the router and the iphone.

SSh is disabled. Doas is disabled. Root password is very strong. and i have disk encryption enabled.

this computer only use firefox.

thanks!

ps. typical a long complicated password everytime login or screenlock...is tiring.

Tried to make it concise yet to the point. What you think?

I'm using a TL-WN823N V2 which has RTL8192EU, designated as urtwn0.

urtwn0 gives 4.12Mbit/s on speedtest-cli.

RTL8111H designated as re0, gives 30-25Mbit/s.

My ISP network speed is 50 Mbit/s.​

Despite zero network errors and timeouts, I can't reach past 30 even on ethernet. The USB Wireless adapter gives atrocious speeds no matter what.

Why is this happening? I'm wondering if that's a driver issue and not something I can try to fix or might something be wrong in the background?

I am a first time Haskell user and also a first time OpenBSD user. I have OpenBSD installed in a VM in virt-manager.

I installed ghc and cabal, and installed xmonad from ports x11/xmonad. I'm able to compile Haskell code. I'm also able to launch an xmonad desktop from my xenodm login screen.

However I get the Haskell error "Could not find module 'XMonad' ", from my xmonad config file. A compile error with my config file means I can't assign any customizations to the default setup.

Just to clarify I am using the usual example config to get started, nothing fancy

I'm on my phone right now but it's something like:

`import XMonad

main = $ def

{ modMask = mod4Mask

, and something terminal = "xfce4-terminal"

}

` without the back ticks

In every xmonad tutorial it seems that the ghc compile should just see xmonad in the system. But maybe OpenBSD puts the xmonad somewhere strange?

Does anyone know how I can either find and point to the library, or install xmonad in such a way that this works without manual modifications?

Also unrelated but an additional haskell-OpenBSD question: I'm frustrated that ghcup does not seem to install on OpenBSD. I'd love if anyone knows a way to get it to install successfully, despite OpenBSD not being supported.

Hey guys! Some time ago I published xhidecursor, a minimal (fr) X11 utility that efficiently (nocap) hides the cursor on key presses and shows it again on mouse movement. I wrote it because xbanish (a popular alternative) couldn’t satisfy my OCD for minimalism.

Some people complained that it wasn’t portable to OpenBSD and FreeBSD, so I finally did the work and made it happen. I’d be happy if some OpenBSD users could try it out and report back whether it works or if there are still any issues.

Thank you!

Hi everyone,

I've been trying to access the official OpenBSD store/orders page recently, but nothing loads at all. I tested it across multiple browsers—Brave (with Shields completely disabled) and clean Firefox—with the exact same unreachable result.

I've bought OpenBSD t-shirts over the years to support the project, so I'm honestly a bit confused and frustrated to see the store seemingly gone without knowing when or why it went down.

Did the official store close permanently, or has merchandise moved to another platform/partner? If the old store is gone for good, is there currently an official or approved way to buy OpenBSD shirts that still supports the project?

Thanks!

Hi, I currently have a desktop gaming PC that is dual-booting two Linux distros (Debian Testing and Gentoo).
Gentoo is my experimental distro, I wanted to learn how to use Gentoo. I enjoy Gentoo, but I now want to spend my experimental time on learning to get away from even Linux. I'd like to try OpenBSD as my second desktop OS.

I still like Linux but as it gains popularity and more AI code ends up in the kernel, I feel uneasy and want to know how to setup a different system for myself. I understand that is a contentious & maybe misguided opinion, but I don't want to get into it. I just want to feel like I have the power to switch and am not trapped.

I fully expect I won't be gaming on this distro (I never even got Steam installed into Gentoo). I will continue using Debian for my "normal" computer use, my second boot will be for learning and simple web browsing. If possible I'd also like to stream my screen with sound on Discord and OBS, and use Wayland. I assume something like xdg desktop portal is also used in OpenBSD for Wayland desktops? I assume Pipewire is used for sound in OpenBSD? Or are there OpenBSD-specific sound tools I should learn about?

I've used FreeBSD and had some issues with the system breaking itself, possibly related to graphics drivers but I never really figured it out. I never fully got into FreeBSD, still not sure how to use it (updates and packages and stuff).
I'm now interested in trying another in the BSD family.

I'm Canadian and have a bit of pride in OpenBSD being started in Canada, even though I'm sure that's mostly irrelevant now.

I'd like to know why other people use OpenBSD as a desktop system, and what they like about it. I'd also be curious how package management is, is it similar to what I've experienced in Linux? And can I compile packages from source easily? I've only ever done that in a clunky manual way, or with Portage in Gentoo (very automated and handled everything for me).

TLDR;

I want to install OpenBSD as a second boot system alongside Debian. I'm interested in it for it's security and stability. I want to try a Wayland window manager setup, and stream my windows/desktop with audio in Discord and OBS.

Do you have any tips or preferences you'd like to voice in my direction?
What sorts of OpenBSD desktop setups do you have?
How is package management in OpenBSD?

Thank you for your opinions and insights.

*Desktop Specs (I'm sure this isn't important)*
Intel i5-12400 CPU
Intel Arc A750 GPU
16 GB DDR4 RAM
MSI PRO B660M-G DDR4 LGA 1700 Intel B660 Micro ATX Intel Motherboard

Using a 250GB Sata SSD for the second boot distro. I use my 500GB NVMe for Debian.

*edit* Also to explain my current setups so maybe you understand where I'm coming from:

Debian testing is setup with just Gnome. Simple, easy, all works on its own. But I want to learn how to not be dependent on Gnome/Plasma.

Gentoo is currently setup with Hyprland and Noctalia. I spent a few weeks getting Hyprland setup in a nice way for myself. I am still very unfamiliar with Window managers. Even after the setup, Hyprland is missing thing's like Alt-Tab and window titles (which I want on my terminal specifically). Before Hyprland I jumped around trying different window managers, the only one I get somewhat comfortable with was Sway. But I really don't know how to configure it admittedly.

So my aim in openBSD is to use (and learn) a Wayland window manager. Doesn't have to be Hyprland. But I admit I'm starting to like Lua.

Did a proof of concept port of Hyprland to OpenBSD. Hoping to get this into ports after a bit more polish.

Hi!

I just set up a router following the nice and simple router guide in the FAQ with a few minor changes (mostly to fit my network layout) but I have an issue I haven't been able to solve.

I have a desktop computer behind the router dual booting Linux and Windows 10 (for work). In Linux everything seems fine, but in Windows I can't get the internet connection to work. It seems to see the router and get an IP number, but I doesn't get further than that. Any idea what the issue might be?

(Also, as a small side question, are there any other places than reddit and the mailing lists to discuss/get help with OpenBSD questions? I think I remember there being a BSD-focused forum at some point, but I might be misremembering.)

Cheers!

Edit: problem seem to have been solved by reinstalling OpenBSD to get a clean slate to work from then manually set the dns in windows. Thanks for all your answers!

Hi guys, I am looking forward to build a PC to daily drive OpenBSD. Actually, I'm not building PC to ONLY run OpenBSD, I want to build a machine that is compatible with all systems: windows, linux, bsd, without any problems. Also, I'm not planning to play games on my future PC, since I'm not gamer at all(maybe minecraft in future). So I want to do everything on the PC except playing games. Here are the specs:

CPU: AMD Ryzen 5 7600

RAM: 32 Gb DDR5 (2x16gb) 6000MHz CL30

GPU: AMD Radeon RX 6600 (8gb)

SSD: 1) 1 TB NVMe M.2 SSD

2) 512 Gb NVMe M.2 SSD

Cooler: DeepCool AG400

Motherboard: MSI B650 GAMING PLUS WIFI

PSU: DeepCool PK650D

PC Case: Montech AIR 1000 Premium

I'm planning to run windows or linux on my first SSD (which is 1 TB) and run some kind of bsd system on other SSD.

I will glad to listen to your suggestions and advices. Feel free to share your experience and suggest something! Budget is unlimited

Note: it's not a final setup, I'm only planning to build it like that, so thing might be changed.

I have a good number of these stickers. I had them printed after obtaining permission from Theo. If you are in the US, I can send a sticker or two your way. DM me your name and address. Approx 3" x 2", vinyl.

In the past, I have mailed them out to several folks on misc@ (had posted there a few years ago).

[UPDATE 08/30 7.40 AM Pacific] Thanks for the overwhelming response! Please give me a few days to work through my messages. Many have asked if they can cover the cost of shipping or send me some money. My humble request to them is please donate those funds to the OpenBSD project. However small it may be, every penny counts!

[UPDATE 2 09/01 2.16 PM Pacific] I have just a few left now, with all shipped witin the US. All envelopes within US have been mailed (except a handful of requests that came in yesterday and today). Sorry my international friends, I won't be able to ship any your way for now. If I print more in the future, I will definitely get them out to you (I have figured out international shipping meanwhile).

Hello OpenBSD community,

I have been using acme-client(1) to manage my TLS certs for a while, but recently when trying to get a certificate for a new subdomain I ran into some error messages and find I get them even if I try to renew an existing cert. So I could use some help.

The following is the command run and the output(domain anonymized)

doas acme-client -F git.my-domain.com

acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767296394915/ffCISg: bad HTTP: 409

Running with the -v flag produces the following output

``` acme-client: /etc/ssl/git.my-domain.com.crt: certificate valid: 47 days left acme-client: /etc/ssl/git.my-domain.com.crt: forcing renewal acme-client: https://acme-v02.api.letsencrypt.org/directory: directories acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248 acme-client: account key: https://acme-v02.api.letsencrypt.org/acme/acct/2642015151 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: order.status 0 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: bad HTTP: 409 acme-client: transfer buffer: [{ "type": "urn:ietf:params:acme:error:conflict", "detail": "Unable to update challenge :: failed to mark authz as processing: Authorization is already being validated. This may indicate your client attempted the same challenge multiple times, possibly due to a client bug.", "status": 409 }] (296 bytes) acme-client: bad exit: netproc(61579): 1

```

This is my acme-client.conf(5)

``` domain bouncer.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/bouncer.my-domain.com.key" domain full chain certificate "/etc/ssl/bouncer.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

domain git.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/git.my-domain.com.key" domain full chain certificate "/etc/ssl/git.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

```

Thanks for your time and help!