I'm starting to get more into kernel hacking and building my own base system(s). Playing/reading/hacking on various UNIX-like kernels (among others) for fun lately.

Realistically, how hard would it be to port the functionality in the OpenBSD kernel that allows the above three things to function to other kernels?

Let's keep it simple and say for the sake of argument we limiting this to the two other most popular BSD kernels: NetBSD and FreeBSD. Since I see a lot of people here mentioning that they run one or the other (or both). Since like me I'm sure most people here either work with or like to play with other UNIX-like kernels for various reasons.

The reason(s) I ask:

1) Pledge/Unveil is really nice and since so much work has been done already in the OpenBSD ports tree it would be easy to port those changes to existing ports on the other OSs or apply the patches within the OpenBSD port to their existing ports.

2) If those OSs supported these features OpenBSD would benefit in return. As it would make porting software over to OpenBSD easier and most upstream projects might be willing to merge pledge/unveil patches into their projects.

3) In the case of Xenocara. It would be very nice to have the option to run the patch set on other UNIX-like OSs as opposed to default Xorg those OSs generally offer right now. Again, OpenBSD could benefit in return because more people would be working to help maintain the patch set.

These three things are probably my main reason for preferring running OpenBSD as a desktop opposed to the other *BSDs in common use right now. Well outside of the man pages and the simplicity of configuring the rest of the base system. Xenocara makes my life a lot easier since I don't have to fiddle so much with X on OpenBSD compared to the other BSDs (and Linux) to get things how I like them. It's certainly much nicer in the fact that I don't have to set it up at all post-install. It's there, it works and I can be sure I'll never break it unless I do something really stupid.

There are some kernel features I'm also interested in learning how hard it'd be to port to the other BSD kernels. But I guess I'll save those for another time.

I understand not everyone here is kernel hacking on things outside of OpenBSD. But I thought it might be interesting to ask anyway. I'm also curious about getting this stuff going on Linux of course. But I didn't want to turn this into a Linux/OpenBSD kernel debate type of thing. But again: I think OpenBSD would really benefit in return if that ever happened because a lot of stuff in the ports tree would probably no longer need OpenBSD unique patches anymore if their upstreams provided pledge/unveil out of the box.

Hey guys! Some time ago I published xhidecursor, a minimal (fr) X11 utility that efficiently (nocap) hides the cursor on key presses and shows it again on mouse movement. I wrote it because xbanish (a popular alternative) couldn’t satisfy my OCD for minimalism.

Some people complained that it wasn’t portable to OpenBSD and FreeBSD, so I finally did the work and made it happen. I’d be happy if some OpenBSD users could try it out and report back whether it works or if there are still any issues.

Thank you!

Hi everyone,

I've been trying to access the official OpenBSD store/orders page recently, but nothing loads at all. I tested it across multiple browsers—Brave (with Shields completely disabled) and clean Firefox—with the exact same unreachable result.

I've bought OpenBSD t-shirts over the years to support the project, so I'm honestly a bit confused and frustrated to see the store seemingly gone without knowing when or why it went down.

Did the official store close permanently, or has merchandise moved to another platform/partner? If the old store is gone for good, is there currently an official or approved way to buy OpenBSD shirts that still supports the project?

Thanks!

Hi, I currently have a desktop gaming PC that is dual-booting two Linux distros (Debian Testing and Gentoo).
Gentoo is my experimental distro, I wanted to learn how to use Gentoo. I enjoy Gentoo, but I now want to spend my experimental time on learning to get away from even Linux. I'd like to try OpenBSD as my second desktop OS.

I still like Linux but as it gains popularity and more AI code ends up in the kernel, I feel uneasy and want to know how to setup a different system for myself. I understand that is a contentious & maybe misguided opinion, but I don't want to get into it. I just want to feel like I have the power to switch and am not trapped.

I fully expect I won't be gaming on this distro (I never even got Steam installed into Gentoo). I will continue using Debian for my "normal" computer use, my second boot will be for learning and simple web browsing. If possible I'd also like to stream my screen with sound on Discord and OBS, and use Wayland. I assume something like xdg desktop portal is also used in OpenBSD for Wayland desktops? I assume Pipewire is used for sound in OpenBSD? Or are there OpenBSD-specific sound tools I should learn about?

I've used FreeBSD and had some issues with the system breaking itself, possibly related to graphics drivers but I never really figured it out. I never fully got into FreeBSD, still not sure how to use it (updates and packages and stuff).
I'm now interested in trying another in the BSD family.

I'm Canadian and have a bit of pride in OpenBSD being started in Canada, even though I'm sure that's mostly irrelevant now.

I'd like to know why other people use OpenBSD as a desktop system, and what they like about it. I'd also be curious how package management is, is it similar to what I've experienced in Linux? And can I compile packages from source easily? I've only ever done that in a clunky manual way, or with Portage in Gentoo (very automated and handled everything for me).

TLDR;

I want to install OpenBSD as a second boot system alongside Debian. I'm interested in it for it's security and stability. I want to try a Wayland window manager setup, and stream my windows/desktop with audio in Discord and OBS.

Do you have any tips or preferences you'd like to voice in my direction?
What sorts of OpenBSD desktop setups do you have?
How is package management in OpenBSD?

Thank you for your opinions and insights.

*Desktop Specs (I'm sure this isn't important)*
Intel i5-12400 CPU
Intel Arc A750 GPU
16 GB DDR4 RAM
MSI PRO B660M-G DDR4 LGA 1700 Intel B660 Micro ATX Intel Motherboard

Using a 250GB Sata SSD for the second boot distro. I use my 500GB NVMe for Debian.

*edit* Also to explain my current setups so maybe you understand where I'm coming from:

Debian testing is setup with just Gnome. Simple, easy, all works on its own. But I want to learn how to not be dependent on Gnome/Plasma.

Gentoo is currently setup with Hyprland and Noctalia. I spent a few weeks getting Hyprland setup in a nice way for myself. I am still very unfamiliar with Window managers. Even after the setup, Hyprland is missing thing's like Alt-Tab and window titles (which I want on my terminal specifically). Before Hyprland I jumped around trying different window managers, the only one I get somewhat comfortable with was Sway. But I really don't know how to configure it admittedly.

So my aim in openBSD is to use (and learn) a Wayland window manager. Doesn't have to be Hyprland. But I admit I'm starting to like Lua.

Did a proof of concept port of Hyprland to OpenBSD. Hoping to get this into ports after a bit more polish.

I have a good number of these stickers. I had them printed after obtaining permission from Theo. If you are in the US, I can send a sticker or two your way. DM me your name and address. Approx 3" x 2", vinyl.

In the past, I have mailed them out to several folks on misc@ (had posted there a few years ago).

[UPDATE 08/30 7.40 AM Pacific] Thanks for the overwhelming response! Please give me a few days to work through my messages. Many have asked if they can cover the cost of shipping or send me some money. My humble request to them is please donate those funds to the OpenBSD project. However small it may be, every penny counts!

[UPDATE 2 09/01 2.16 PM Pacific] I'm have just a few left now, with all shipped witin the US. All envelopes within US have been mailed (except a handful of requests that came in yesterday and today). Sorry my international friends, I won't be able to ship any your way for now. If I print more in the future, I will definitely get them out to you (I have figured out international shipping meanwhile).

Hi!

I just set up a router following the nice and simple router guide in the FAQ with a few minor changes (mostly to fit my network layout) but I have an issue I haven't been able to solve.

I have a desktop computer behind the router dual booting Linux and Windows 10 (for work). In Linux everything seems fine, but in Windows I can't get the internet connection to work. It seems to see the router and get an IP number, but I doesn't get further than that. Any idea what the issue might be?

(Also, as a small side question, are there any other places than reddit and the mailing lists to discuss/get help with OpenBSD questions? I think I remember there being a BSD-focused forum at some point, but I might be misremembering.)

Cheers!

Edit: problem seem to have been solved by reinstalling OpenBSD to get a clean slate to work from then manually set the dns in windows. Thanks for all your answers!

Hi guys, I am looking forward to build a PC to daily drive OpenBSD. Actually, I'm not building PC to ONLY run OpenBSD, I want to build a machine that is compatible with all systems: windows, linux, bsd, without any problems. Also, I'm not planning to play games on my future PC, since I'm not gamer at all(maybe minecraft in future). So I want to do everything on the PC except playing games. Here are the specs:

CPU: AMD Ryzen 5 7600

RAM: 32 Gb DDR5 (2x16gb) 6000MHz CL30

GPU: AMD Radeon RX 6600 (8gb)

SSD: 1) 1 TB NVMe M.2 SSD

2) 512 Gb NVMe M.2 SSD

Cooler: DeepCool AG400

Motherboard: MSI B650 GAMING PLUS WIFI

PSU: DeepCool PK650D

PC Case: Montech AIR 1000 Premium

I'm planning to run windows or linux on my first SSD (which is 1 TB) and run some kind of bsd system on other SSD.

I will glad to listen to your suggestions and advices. Feel free to share your experience and suggest something! Budget is unlimited

Note: it's not a final setup, I'm only planning to build it like that, so thing might be changed.

Hello OpenBSD community,

I have been using acme-client(1) to manage my TLS certs for a while, but recently when trying to get a certificate for a new subdomain I ran into some error messages and find I get them even if I try to renew an existing cert. So I could use some help.

The following is the command run and the output(domain anonymized)

doas acme-client -F git.my-domain.com

acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767296394915/ffCISg: bad HTTP: 409

Running with the -v flag produces the following output

``` acme-client: /etc/ssl/git.my-domain.com.crt: certificate valid: 47 days left acme-client: /etc/ssl/git.my-domain.com.crt: forcing renewal acme-client: https://acme-v02.api.letsencrypt.org/directory: directories acme-client: acme-v02.api.letsencrypt.org: DNS: 172.65.32.248 acme-client: account key: https://acme-v02.api.letsencrypt.org/acme/acct/2642015151 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: order.status 0 acme-client: dochngreq: https://acme-v02.api.letsencrypt.org/acme/authz/2642015151/767295102005 acme-client: challenge, token: a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo, uri: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA, status: 0 acme-client: /var/www/acme/a24dVutLxji9PDeo8kx98MqBBUU278Ah6HkI7jrRIpo: created acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: challenge acme-client: https://acme-v02.api.letsencrypt.org/acme/chall/2642015151/767295102005/NT5csA: bad HTTP: 409 acme-client: transfer buffer: [{ "type": "urn:ietf:params:acme:error:conflict", "detail": "Unable to update challenge :: failed to mark authz as processing: Authorization is already being validated. This may indicate your client attempted the same challenge multiple times, possibly due to a client bug.", "status": 409 }] (296 bytes) acme-client: bad exit: netproc(61579): 1

```

This is my acme-client.conf(5)

``` domain bouncer.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/bouncer.my-domain.com.key" domain full chain certificate "/etc/ssl/bouncer.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

domain git.my-domain.com { #alternative names { bouncer.my-domain.com } domain key "/etc/ssl/private/git.my-domain.com.key" domain full chain certificate "/etc/ssl/git.my-domain.com.crt" # Test with the staging server to avoid aggressive rate-limiting. #sign with letsencrypt-staging sign with letsencrypt }

```

Thanks for your time and help!

I have a Broadcom BCM4315 Wi-Fi card on OpenBSD i386. I ran fw_update bwfm and also tried bwi, but it still doesn't work.

So my questions are:

1) Is this card supported at all on OpenBSD? If yes, what driver should it use?

2) Can I manually get a firmware file from Linux (using b43-fwcutter), convert it somehow, and make it work on OpenBSD? Or is it completely incompatible?

I know on Linux this card works with the b43 driver, but I'm not sure if the same firmware can be used on OpenBSD.

OpenVmctl is a Django web application for virtual machines on OpenBSD. It supports two backends:

• OpenBSD vmm(4), through vmd(8) and vmctl(8).
• QEMU system emulators, when QEMU is installed on the host.

It also manages selected host network interfaces, disk images, PF information, and install images. The relayd configuration page is read-only.

disclaimer: non-production-ready

if anyone can cooperate to e2e/uat test or development write me please

Hi all! I don't know how to make Suricata divert mode work as IPS mode on my OpenBSD router. In my pf.conf if I add rules to redirect packets into divert port, it will immediately lost internet connection.

Please help!

I am planning to dualboot OpenBSD(encrypted) and Linux distribution on one intertal SSD.

Can I install OpenBSD bootblocks only to its own partition and chainload via GRUB from Linux, or does OpenBSD have to own the MBR?

Any other known headaches: partition table conflicts, GRUB not recognizing disklabel, or time/device naming problems after rebooting between OSes?

Anu chance it does something usable? Say, on -current? Has anybody tried that?

I suppose the reason is that xterm was made when monitors had a much narrower DPI rate. In any case, on both two laptops (M1 MacBook Air, Asus PU551) with a fresh openbsd install where I'm willing to go with the default as much as possible, xterm's font is insanely small and makes my eyes pain.

I have not succeeded in finding for a solution while looking through the (very lenghty) manual page for xterm, nor searching through the web meeting various people who faced the same issue.

Has anyone here managed to use/keep xterm's default setup (I am satisfied with the bitmap font), while permanently making the font larger using the .Xresources file or something else ?

I made a phone wallpaper (1080x2400) and tried to make it AMOLED-friendly. What do you think? I'm not a professional designer; I used GIMP for it.

does anyone have any of the old OpenBSD CD installers or music CDs and willing to sell

OpenVmctl

A modern, (non-production-ready) Django administration appliance for OpenBSD's vmm(4) hypervisor and QEMU, built on top of vmctl(8), /etc/vm.conf (vm.conf(5)), QEMU system emulators, pf(4) firewall, and relayd(8) proxying.

active development ongoing
not published yet

Anyone is interested in a tool like this for OpenBSD ?

Anyone is interested to help in code review/development ?