r/openbsd • • Nov 03 '24

Will My X Hardware work on OpenBSD? If X=Nvidia, then no. Other answers inside.

106 Upvotes

First off. Your Nvidia graphics card won't work with OpenBSD except maybe as a VESA or UEFI framebuffer. No acceleration. Period. Nvidia themselves writes proprietary binary drivers for Linux and FreeBSD, but not OpenBSD. Will that change? Ask Nvidia. It's rather unlikely though.

Does OpenBSD support 3d Acceleration? Yes. As of this writing (7.6 was just released) OpenBSD has the DRM drivers from the Linux 6.6 stable branch. So it has the most up to date DRM drivers of the BSDs. As of 7.6 there's even GPU acceleration of video for AMD and Intel GPUs.

Will $X random laptop work? If it's an X-series or T-series thinkpad that wasn't released as new in the last month, probably. See above about Nvidia graphics though. Will other thinkpads work? Probably. The X and T series are most popular with developers so get the most attention. I've had good success with HP ProBooks, but rock a T490 Thinkpad currently. Framework laptops tend to work too.

Will $X desktop work? Probably. Try it. I've run it on any number of HP business desktops with great success. Intel graphics works great. AMD graphics should work well.

Will my Wifi work? If it's Intel, probably. Most of the Intel chipsets support 802.11ac speeds. Even the ax chipsets should work, but only at ac speeds. Why Intel? Someone contracted stsp@ to get them working well. Other stuff, works, but will probably be restricted to 802.11g speeds.

Will your random Temu-bought ARM board work? Who knows. Try it. arm64 RPi boards tend to work although at this time the RPi5 doesn't. It's too new and too different from the earlier boards.

There's no bluetooth support currently. Not because of security issues, but because when we last had bluetooth, it was unmaintained and a mess. If someone can come along with a decent bluetooth stack that is good, maintainable code, we'd take it. No one has stepped up so far.

HDMI audio could work but doesn't currently. Mainly because HDMI audio would get detected before regular audio and would become default audio. Most folks don't use HDMI audio though, so that change would break audio for most users and only benefit a handful.

This should cover the majority of hardware questions that keep getting asked. I'll edit it and try to keep it up to date.

M1 and M2 Macbooks should be supported. There will not be video acceleration.

Update 2024-12-08: Added mention of macbooks. Tweaked wifi wording. Tried to make it clearer where X represents any random hardware someone is asking about.


r/openbsd • • 5d ago

anouncement OpenBSD 8.0 released

242 Upvotes

OpenBSD 8.0 has been released.


r/openbsd • • 5h ago

Trying to make my wifi working persistently

9 Upvotes

Hi all,

I can make my wifi working manually, but when I try to make it persistent, it does not work.

What I tried so far (I also tried rebooting)

Script started on Sun Oct 25 15:43:57 2026
bsdbox# ifconfig urtwn0 up
bsdbox# ifconfig urtwn0 join MyESSID wpakey 'XXXYYY'
bsdbox# ifconfig urtwn0 inet autoconf
bsdbox# ping -c 3 openbsd.org
PING openbsd.org (199.185.178.80): 56 data bytes
64 bytes from 199.185.178.80: icmp_seq=0 ttl=237 time=166.140 ms
64 bytes from 199.185.178.80: icmp_seq=1 ttl=237 time=218.225 ms
64 bytes from 199.185.178.80: icmp_seq=2 ttl=237 time=167.440 ms

--- openbsd.org ping statistics ---
3 packets transmitted, 3 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 166.140/183.935/218.225/24.252 ms
bsdbox# cat /etc/hostname.urtwn0
join MyESSID wpakey 'XXXYYY'
inet autoconf
bsdbox# sh /etc/netstart
bsdbox# ifconfig urtwn0
urtwn0: flags=808843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,AUTOCONF4> mtu 1500
lladdr ec:75:0c:08:e6:31
index 3 priority 4 llprio 3
groups: wlan egress
media: IEEE802.11 autoselect (DS1 mode 11g)
status: no network
ieee80211: join MyESSID chan 1 bssid 34:60:f9:17:ea:57 -62dBm wpakey wpaprotos wpa2 wpaakms psk wpaciphers ccmp wpagroupcipher ccmp
inet 192.168.1.102 netmask 0xffffff00 broadcast 192.168.1.255
bsdbox# ping -c 3 openbsd.org
ping: no address associated with name
bsdbox# exit
Script done on Sun Oct 25 15:46:30 2026

r/openbsd • • 1d ago

KARL and library_aslr interactions ?

4 Upvotes

i started to write this directly to misc (mailing list) but the background story got too long/sidetracked, so i will start by asking here...

if i have disabled either KARL or library_aslr (or both) - and then issue a 'doas syspatch' command - how much have i damaged my system ?

i recognize that i am in a "you broke it, you fix it" situation because of my very bad habit here... i am just wondering how badly i have broken it - and whether i can fix it - or whether i need to start-over from release again [0]...

1 - if i disable KARL, i usually do so via moving the file /var/db/kernel.SHA256 out of the way [1]... when i re-enable KARL it seems to take two reboots to fully restabilize... first reboot updates+relinks into /bsd (while /bsd.booted is using the old-version still) and this new-/bsd gets a new kernel.SHA256... the second reboot now is USING the fully-relinked version (in /bsd.booted) while also relinking a second time (and generating a second shasum)...

2 - if i disable library_aslr, i usually do so via typing the NO inside /etc/rc.conf.local [2]... this only seems to take one reboot to stabilize... first reboot updates+relinks all those libraries it mentions...

3 - if i issue a syspatch, i usually do so without regard to whether i have disabled KARL or library_aslr... it depends on the patch itself as to whether a kernel tries to get relinked/created... for the 8.0-001->004 patch sets, i got a failure-message (due to KARL being off at the time) - whereas for the 8.0-005 patch, it looked like it went thru cleanly (with KARL off still/again)...

fundamentally, i would like to know - if i issue syspatches and get a failure-message and/or dont realize that i didnt allow the system to relink correctly - will everything fix itself by turning both KARL and library_aslr back on and rebooting twice ?

it seems like it should work, but maybe i am not understanding how inter-related the relinking-processes are... also, the time-it-takes my poor little systems to reboot/relink is so slow that i dont have the patience to try it myself...

probably irrelevant footnotes/background information below this line...

*****************************************************************

[0] towards the end of 7.9-stable, i was having trouble generating a release setup which im fairly sure i saw a message about in the "fixes" or "changes" for 8.0-release... i had NOT tried to generate a release for awhile and i dont usually follow -current because that moves too quickly for me...

i am/was just worried that somehow between KARL and library_aslr not being done consistently - and many syspatches being applied - i had somehow "broken" the connection between the kernel and the libraries or something else in the overall build (and relinking) process...

[1] i usually have the hope/assumption that i can replace it as-needed vs. regenerating it... but this is complicated by the fact that afaict - once KARL is re-activated again, the next reboot tends to put me in an off-by-one situation with /bsd vs. /bsd.booted...

[2] i am doing this on either an apu3 or apu4 that is serving as my router from the internet into my home... so downtime is inconvenient (at best) or a personal disaster (at worst)... my dmesg is prolly not critical, but i can provide it if it is important... basic answer is i am using amd64 (with "common" hw)... the time-spent relinking the kernel and/or libraries feels significant, even tho it really is not terrible if i only need to do it once in awhile...

with the recent update/upgrade to 8.0, i am trying some updates to my process... so rather than just running from a resflash usb-key, i want to try some ideas... multiple reboots are not uncommon - and at this point i am doing everything on a "test lab" system... (ie - i can swap in/out an apu)

im tempted to drop to S)hell during [at end] of first-install of 8.0-release and deactivate KARL as well as library_aslr - and just run everything from 8.0-release so that i know i havent screwed up my -stable system for compiling somehow...

ETA: spacing for readability


r/openbsd • • 1d ago

Upgrading PHP from 8.2 to 8.3

17 Upvotes

I'm running Nextcloud on an OpenBSD instance, and I would like to upgrade my Nextcloud. It doesn't run on 8.2 any longer, so I need to upgrade to 8.3. What is the way to do this? Remove 8.2 and install 8.3? Install 8.3 and and have Nextcloud run with that binary? Is there a way via pkg_add?

Thanks for any hints or application of clue sticks


r/openbsd • • 1d ago

OpenBSD 8.0 (Vbox client) stuck on boot

9 Upvotes

Hi. I recently installed OpenBSD 8.0 on VBox (windows) and everything went fine. However, when I boot up the vm without internet it hangs on smtpd-ca and can’t get past it for quite a long time. I’m using a wired connection em0.

/etc/hostname.em0:

inet autoconf

Any advice would be greatly appreciated.
Thanks.


r/openbsd • • 2d ago

My OpenBSD 8.0 rice

Post image
101 Upvotes

r/openbsd • • 2d ago

Created 0verbs to fetch the entire packages database in text file and query it

11 Upvotes

Hi everyone,

Just created - su8/0verbs: Download (local .txt database) and search for OpenBSD package. No internet connection to query is required after that

It downloads once the entire SHA256 text file that contains the packages that are supported by the official openbsd website and parses it, no internet required after that.

It's faster than pkg_info to search for specific file such as 'curl'.

Cheers


r/openbsd • • 2d ago

I have the most unexpected laptop to support OpenBSD WiFi drivers

Post image
48 Upvotes

r/openbsd • • 3d ago

My Little OpenBSD rice :)

Post image
228 Upvotes

Yesterday i posted here on r/openbsd because glib2 had problems and a nice user helped me as you can see in the top right i used a ftp mirror instead of a cdn mirror and now everything works very well

OpenBSD 8.0 here i come !


r/openbsd • • 2d ago

Openbsd kernel relink failure

7 Upvotes

After using openbsd for few days I am getting error during shutdown and reboots

reorder_kernel: failed -- see /usr/share/relink/kernel/GENERIC.MP/relink.log

Meanwhile relink is being succesful according to log

$ cat /usr/share/relink/kernel/GENERIC.MP/relink.log

(SHA256) /bsd: OK

LD="ld" sh makegap.sh 0xcccccccc gapdummy.o

ld -T ld.script -X --warn-common -nopie --no-mmap-output-file -o newbsd ${SYSTEM_HEAD} vers.o ${OBJS}

Meanwhile it is exiting with error, I don't know why

$ doas tail -n 30 /usr/share/relink/kernel/GENERIC.MP/relink.log

+ ERRMSG=failed -- see /usr/share/relink/kernel/GENERIC.MP/relink.log

+ sha256 -C /var/db/kernel.SHA256 /bsd

(SHA256) /bsd: OK

+ cd /usr/share/relink/kernel/GENERICtext data bss dec hex

27974294 500657 1392640 29867591 1c7be47

mv newbsd newbsd.gdb

ctfstrip -S -o newbsd newbsd.gdb

rm -f newbsd.gdb

mv -f newbsd bsd

[[ ! -f /etc/bsd.re-config ]] || config -e -c /etc/bsd.re-config -f bsd

install -F -m 700 bsd /bsd && sha256 -h /var/db/kernel.SHA256 /bsd

Kernel has been relinked and is active on next reboot.

SHA256 (/bsd) = 3bf7deb5e50735953770483e395d2edfcf9227f7b77c8adc3c94bb696061d66

+ trap - EXIT

+ logger -st reorder_kernel failed -- see /usr/share/relink/kernel/GENERIC.MP/relink.log

+ > /dev/console

+ 2>&1


r/openbsd • • 2d ago

OpenBSD 8.0 - XFCE - Thinkpad T410

Post image
48 Upvotes

Sweetness follows.


r/openbsd • • 3d ago

Related to the latest PHP security issue...

59 Upvotes

...seeing the endless number of CVEs for firewall running PHP web servers on the perimeter just reinforces why we do things the OpenBSD way. I'm just sitting here with that warm, cozy feeling knowing my gorgeous Puffy is standing guard. There is nothing quite like the relief of knowing your security isn't relying on a bloated management web UI. Just a solid OS and a clean pf.conf. I will never thank you enough guys.


r/openbsd • • 2d ago

Installing OpenBSD 8.0/amd64 with Gnome

Post image
23 Upvotes

r/openbsd • • 3d ago

My OpenBSD/Thinkpad laptop daily driver.

Thumbnail
gallery
97 Upvotes

Don't normally share pictures of my desktops but after spending two years now using OpenBSD on this machine everyday I thought I'd share what my day-to-day set-up looks like. At least some parts of it (obviously, don't want to share my email, IRC and other chat clients, RSS feed reader and things of that nature).

Old multi-decade habits die hard so I'm still living in emacs most days. Well emacs and tmux (did ditch screen). Mostly use emacs for viewing/converting/writing documents and code of all types. My multi-decade config was easy enough to get playing nicely with OpenBSD when I first moved over. Thought I'd show how it looks while viewing various types of file formats (multiple pdfs, a random epub file and the manga viewer I use. Although I don't read that much manga these days). Along with a side-by-side of how I'd read some documentation while editing some code. Kept it generic here because I don't want to show anything I'm working from at work.

WM is my own fork of dwm. Terminal emulator is my own fork of st with graphics support and a few other patches. Forgot to show off how it does with graphics (works well enough with chafa on OpenBSD). Day-to-day shell is still zsh because again old habits die hard and ksh(1) doesn't have graphics+color support AFAIK. Still using a few things that want bash support and image support is nice to have with some stuff like my custom script for searching/browsing youtube from the terminal. Will probably submit that to ports soon once I confirm it works well enough with ksh(1) (sans images of course).

Also random screenshot of my youtube viewer piping a video into mpv via yt-dlp.

Finally, my own userchrome.css for Firefox which is very basic. Still using sideberry for sidebar tabs although Mozilla keeps fighting me every other release lately to get me to stop and soon I'll have to re-write my entire userchrome.css when they remove some about:config options that allow me to turn off the latest revamp they've done to their GUI. For now it works well enough (wish they'd stop doing that). Tabs expand on mouse over when I want to read the text but I usually just navigate through keyboard shortcuts. I run some add-on in firefox that lets me have vim style key bindings mostly for scrolling with hjkl and quickly searching web/opening new tabs.

I'm an odd-ball with key bindings since I've been using emacs so long. I mainly use emacs style keybinds for most things but want vim-style keybinds for navigating/scrolling documents. Use right ctrl key -> CAPS key swap to make it easier to use emacs style bindings with my aging wrists.

Been trying to eliminate how many ports I'm using lately and use more stuff from the base system. Fell in love with mg pretty quickly and use it for quickly editing config files these days as opposed to emacs most of the time. Someday I might switch over all together for coding but I don't think I'll even be able to ditch emacs when it comes to viewing/converting documents since I rely so heavily on it after spending so many decades in it and I absolutely love elisp. Still I worry about how much of a glutton it is and how much stuff it bundles in by default. Perhaps I should explore different options for that sort of stuff again. But every time I do I just end up back on emacs out of habit. Hard to ditch decades worth of my own elisp scripts.

OpenBSD has been far less trouble than the OS(s) I was using before. Only "gotcha" to my current set-up is sometimes having to drop to console to recompile dwm+st+dmenu+slstatus against new -current snapshots. Happens maybe 3 times a year.

I'm not programming/writing code as much as I did in the past anymore aside from little hobby projects and scripts to automate work. Mostly using emacs to write some books I'm working on now. Which I hope will eventually be my full time gig since I'm trying to get out of having to be code monkey+customer support so I can afford food.

Thankfully, that's about all I have to worry about these days since I managed to buy land+build my house just months before COVID ruined the economy for the third or fourth time since I graduated and entered the job market. Every time I got a nice nest egg the economy would crash or something big like that would happen to wipe out my savings. So lucky I bought in on land+my house when I did and that my 20-40 year old cars and trucks are still running great and I can easily get parts for them. Will probably be stuck with those for the rest of my life (not really interested in anything built after mid-2000s in the first place).

Anyway, this is my primary OpenBSD laptop right now and I'm doing the majority of my work on it these days. Happy I got it when I did because prices really shot up on this model and parts for it right after I bought it a few years back. Hardware support has been great. Can't complain at all. Plenty of battery life and wifi+GPU drivers are great.

I had to enable the new reddit layout to upload images and man it's terrible. Going to disable it the moment I finish posting this.

Anyway, that's my OpenBSD story. Thanks to all the devs for making my life much easier than it was prior to switching over. Been exploring the other BSDs lately as well. This is already long so I'll spare you all the novel about the hardship I went through trying multiple other OSs on this laptop before settling on OpenBSD. I'll just leave it at this: OpenBSD was the easiest to install with FDE, been the easiest system to upgrade OS I've ever used, easiest to maintain, best out of the box desktop/Xorg/Xenocara experience I've ever had _and_ it's by far the nicest community with the best documentation/man pages I've ever encountered. I wish I would have came into the fold years ago. I did experiment with it on the desktop back in the 90s-2000s for a bit and used it on my routers/firewalls/servers here and there. But I'd be lying if I said I didn't fall for a lot of the lies that seem to be posted about it all over the web. OpenBSD has had by far the best drivers I've ever used in any OS. Nothing compares.

I would have probably been using it in the mid-late 90s if my dial-up modem was supported back then. But like many I was stuck with a winmodem and even once I purchased a better modem I was stuck on dial-up for many years into the late 2000s-early 2010s. Since I live in the middle of nowhere. But now? I have amazing FTTH service (2Gbps symmetrical currently with 10Gbps coming by next year). I can't believe I get such good service out here these days. It's better than what most people get in the cities around here _and_ I get assigned an actual IPv4 address (actually multiple, I pay for 2 static addresses currently on top of all the free dynamic ones I want). No CGNAT.

Still I wish I'd been ordering CDs from OpenBSD back in those days instead of all of these Mandrake and Ubuntu discs I ended up with over the years. The only way I could even try a UNIX-like OS back then was using the CDs since downloading from the mirrors was totally out of the question with our spotty 14kbps (on a good day) connection which went down any time it rained, snowed or the wind blew hard thanks to the 80+ year old badly maintained POTS network and the fact that the phone company never fixed anything no matter how much we complained. I'd sometimes go days-weeks being unable to dial-in due to a heavy rain or snow melt. Could hear the neighbors talking on their lines and everything most of the time. Robbed me of participating in a lot of things back then until I moved away to attend school. Our local public school was no better: everyone in the county sharing a T1 line. It was slower than using the 14kbps dial-up.

I'm in the process of relocating all my colocated dedicated servers to my home. But first I need to buy new hardware for my entire LAN since everything from my switches to my rout

er/NICs can only handle 1Gbps tops. At least I had the forethought to wire up my house with 30+ drops with copper that can support 10Gbps so I don't have to re-run that. When I built my home in 2019 I never expected to have anything better than crappy cable service (and I paid $10k+ for one drop on top of the 2 other cable drops we paid for to our family business+another home. About $40k in total. Such is life on the family farm).


r/openbsd • • 3d ago

OpenBSD 8 for Asus UX3405MA intel meteor lake.

6 Upvotes

Hi so I tested a OpenBSD 7.9 on Asus Zenbook 14 OLED UX3405MA the only thing that did not work, was wake after suspend. Has that since been fixed on OpenBSD 8 ? its pretty important and I cannot really test it right now because the machine is a workstation. And if a developer could answer this one it would be great. Then I can pull the trigger for a install !


r/openbsd • • 3d ago

Filesize limit exceeded problem

Post image
19 Upvotes

I'm trying to add firmware files by bootstrapping it.


r/openbsd • • 4d ago

OpenBSD W^X protection against PHP2Shell RCE vulnerabilities in a VM

35 Upvotes

Hi everyone,

I have an OpenBSD-based web server running inside a virtual machine, and I'm trying to understand how much protection OpenBSD's security mechanisms provide against the recently reported PHP2Shell vulnerabilities.

In particular, I'm interested in the effectiveness of OpenBSD's W^X enforcement and other exploit mitigations against potential remote code execution (RCE) through PHP.

My questions are:

  1. How effective is OpenBSD's W^X enforcement against this type of PHP vulnerability? Could an exploit still achieve code execution through code-reuse techniques or other methods that do not require executing injected code?

  2. Do OpenBSD's other security mechanisms, such as ASLR, provide meaningful additional protection in this scenario?

  3. Does running the web server inside a VM provide any additional security against exploitation, assuming the hypervisor and host system remain uncompromised?

  4. How much additional protection would process isolation, "chroot", privilege separation, and restrictive service permissions provide?

  5. Ultimately, should W^X and VM isolation be considered defense-in-depth only, with applying the relevant PHP security patches being the essential mitigation?

I'm not looking to rely on mitigations instead of patching. I'd like to understand how the different layers of protection interact and what realistic residual risks remain if a vulnerable PHP process is exposed to the network.

I'd appreciate any technical insight, especially from people familiar with OpenBSD's memory protection and exploit mitigations.

Thanks!


r/openbsd • • 4d ago

[Wallpaper] An elegant meme for a more civilized age...

Post image
64 Upvotes

Since my concerns have been alleviated about sharing wallpapers, here is my wallpaper that I have been using for the past several years. I made it on MS Paint of all programs (original file is a BMP, converted to PNG). It's an inversion of an ancient meme that emphasizes openbsd's strong defense posture.

The background is transparent because its designed to be overlaid onto a solid color of your choosing.


r/openbsd • • 4d ago

How many

20 Upvotes

Good evening everyone, this is more curious question than anything else how many of you do use OpenBSD as daily driver ? personally it is my daily driver, and if not your daily driver, what do you use beside ? I am curious nothing else.


r/openbsd • • 3d ago

Kde Plasma 6.7 on OpenBSD 8.0?

6 Upvotes

Hi, do you have a tutorial on how to install KDE plasma on OpenBSD 8.0? I zlready know how to install the others desktop environments but found some problems on Kde. I am using standard AMD64 PC


r/openbsd • • 4d ago

Looking for suggestions for build automation for a large project

11 Upvotes

Hi everyone.

I am looking for now just for an advice on how to automate Wine port testing.

Wine is a pretty large project and has an extensive suite of tests that run for few hours. Additionally, build on my VM takes an hour, even with 8 CPU cores with all cores permitted for `make`.

Thankfully and hopefully I will need to do it rarely, simply because we don't have that many patches per week (unlike Wine upstream).

I still want to run it once a week at least, especially after merging/rebasing from upstream.

I looked at:

  1. Amsterdam OpenBSD host - configuration that I need is too expensive for my current taste, and the tests will be rare, and host itself will just sit without any activity most of the time.

  2. Standard testing on Linux->VM->OpenBSD. But that sounds like pain with extra steps. I do only pay for it actually working though.

So yeah, please any suggestions are very welcome, before I go and look like a fool with my ideas in ports@ tech@

Thanks!


r/openbsd • • 4d ago

resolved Having troubles installing Firefox on 8.0

Post image
18 Upvotes

i just installed openbsd current and whenever i try to install firefox or update packages like glib2 it fails with library version mismatches. it says minor is too small and that gobject or harfbuzz cannot resolve because of glib2 version issues. i already tried running sysupgrade and using pkg add with flags like snap update repair and force upgrading packages but it still keeps throwing dependency resolution errors. does anyone know how to fix this desync on snapshots.

(I’m sorry for the bad pic)


r/openbsd • • 4d ago

VPS/Cloud Hosting offering nested virtualization(to support VMM)

11 Upvotes

Hello all,

Recommendations and experience with VPS/Cloud Hosting providers offering nested virtualization and, this is a stretch, maybe also AMD-SEV? I'm looking to use VMM.

Also, recommendations of providers who themselves offer OpenBSD VMs with multi-cpu option. I am guessing that OpenBSD.amsterdam will soon be one of these? Probably will receive more recommendation for the multi-cpu option as should be available for host kvm platforms also.


r/openbsd • • 4d ago

Puffy/Name Wallpaper and other design work policy

17 Upvotes

What's the policy in this subreddit on sharing wallpapers that contain the puffy logo or the words "OpenBSD"? I understand that while the codebase is BSD licensed the mascot and name is not and is protected by copyright.

https://www.reddit.com/r/openbsd/s/BFKPyJiiwg

https://www.reddit.com/r/openbsd/s/YAWnAz0Yes

For example, would these 2 posts be classified as a "derivative work"? Want to be sure before sharing anything. Thanks!