OpenBSD 8.0

(openbsd.org)

419 points | by privong 13 hours ago

20 comments

  • ctolsen 6 hours ago
    I've used OpenBSD the last year or so (as a bastion/jump host for a few systems) after using *BSD systems very little for probably the past decade, and... good lord I love it so much.

    Say what you want about the benefits of systemd or the usefulness of other parts of what is now unavoidable with Linux, and I won't argue with many of them, but OpenBSD just feels like a *nix system is supposed to. `ps aux` is like 10 entries at first. `pf` makes so much sense. `man` pages are consistently incredible. The security/cryptography focus, managing services, pledge/unveil... so many things about it is just *chef's kiss*.

    It's not and will probably never be a daily driver for me and it may not fit your use case for anything, but I highly recommend playing with it.

    • deltarholamda 2 hours ago
      >`man` pages are consistently incredible

      I love this part of OpenBSD so much. FreeBSD is very good as well on this front. Sometimes the terseness of the man pages gets to me, but it's all there.

      I used OpenBSD as a daily driver way back, somewhere around v3.5, on a somewhat elderly Thinkpad. It was perfectly adequate. I still use it for various systems that I pretty much just set and forget. Extremely reliable, and pf is top tier.

      • bananamogul 1 hour ago
        OpenBSD man pages are the Sistine Chapel ceiling of man pages. Just glorious.
    • bcvvvy 5 hours ago
      I’ve used it on and off since about 1999. It certainly feels more like Unix than anything else.
    • pjmlp 2 hours ago
      It is kind of ironic the whole Linus vs Tanenbaum argument, given the amount of processes running on any modern Linux distribution.
  • k310 12 hours ago
    I am not on board with the graphic, whatever the heck it is.

    https://www.openbsd.org/images/blowfishonbike-s.gif

    • rektlessness 12 hours ago
      Forget the artwork and check out the accompanying song and lyrics for the new release. I think it's one of the funnier ones so far. https://www.openbsd.org/lyrics.html#80
      • DASD 4 hours ago
        Nice! Think there was a gap in release-accompanying songs from 7.4 to 7.8 or I missed them. Seems they are back on track now.
      • ChrisRR 7 hours ago
        Just as cringeworthy as the QT4 dance
        • kvuj 3 hours ago
          To me that cringiness is oh so wonderful. Everyone is so weirdly afraid of their image, of how others think of them.

          We've become sterile; caricatures of ourselves so that we can adhere to the groupthink. It's refreshing to see people unashamed to be themselves, with all of their weird parts.

      • rustyhancock 9 hours ago
        Is it a pun?

        The Simps on AI

        The Simpson AI?

        And then the 3 eyes fish makes a reference to Blinky

        https://simpsons.fandom.com/wiki/Two_Cars_in_Every_Garage_an...

      • torcete 6 hours ago
        It lost one eye, but that's ok, it still has two left.
      • Bankq 11 hours ago
        “Back in my day we didn't have artificial intelligence, we had real stupidity - and we liked it.”
        • mehmetd46 10 hours ago
          Real stupidity is still available, you just have to opt in. Yesterday I spent an evening writing Game of Life in Prolog for no good reason, and it gave me 941 live cells instead of 18,885 because my neighbour rule counted diagonals twice. Finding that bug by hand was more fun than anything an agent did for me that day. The pointless tinkering didn't go away, we just have to choose it now.
          • JohnKemeny 3 hours ago
            Now implement Prolog in your Game of Life and observe the Universe fold in on itself.
    • so-cal-schemer 6 hours ago

           ACHTUNG!  ALLES LOOKENSPEEPERS!
      
      Alles touristen und non-technischen looken peepers! Das computermachine ist nicht fuer gefingerpoken und mittengrabben. Ist easy schnappen der springenwerk, blowenfusen und poppencorken mit spitzensparken. Ist nicht fuer gewerken bei das dumpkopfen. Das rubbernecken sichtseeren keepen das cotten-pickenen hans in das pockets muss;

      relaxen und watchen das blinkenlichten.

      • BoppreH 6 hours ago
        Man, I love the spirit of the blinkenlights warning, but the "cotten-pickenen hans" bit makes it hard to use the original for anything.
        • so-cal-schemer 5 hours ago
          Yeah.. the last line is enough for the reference.
    • somat 12 hours ago
      I suspect it is social commentary on the dangers of letting the machine do all your thinking for you.
    • Guestmodinfo 12 hours ago
      I really like OpenBSD. I have used it for years. I feel the folks there are very helpful and awesome but I also do not like that graphic.
      • somat 11 hours ago
        You are not supposed to, it is intended to represent(and probably is) a machine generated image.

        I have not really formalized my thoughts on the matter, but it boils down to. It feels great to get the machine to generate a thing for you but it feels terrible to receive a thing from somebody that is machine generated.

        The worse part is the paranoia, Now I am seeing "tells" of machine generated content, and it may or may not be. But I have already lost interest.

        The real irony would be that it is a hand drawn image carefully animated to feel machine generated.

        • sroerick 11 hours ago
          Credit is given to yvaneht nioj and clanker
          • TheAmazingRace 8 hours ago
            Yeah. To me, I feel like Theo de Raadt is being a comedian here, and the joke probably went over some heads.
            • sroerick 34 minutes ago
              I thought it was hilarious
            • account42 5 hours ago
              If your joke is to smear your face with shit, don't be surprised when people aren't laughing with you.
      • samtheprogram 11 hours ago
        To be fair, I'm reading it as satire of AI. So not liking it is kind of the point.
      • k310 9 hours ago
        I mainly don't like the self-destructive aspect. Even if it's a spoof.

        Especially when I see all the self-destructive goings-on in the world, based on senselessly divisive beliefs or just the power-seeking that generates them to divide and conquer.

        I once met Ken Bering, "The Wheelchair Guy" whose foundation provided wheelchairs for people who could not afford them. The wheels weren't spiked, nor were they like a Seinfeld episode, where George donates a cheap wheelchair with poor brakes that sends its occupant down a steep hill.

        Oh well.

      • dylanz 1 hour ago
        It's satire
      • jart 11 hours ago
        They're just showing humility. Give them a break.
      • GalaxyNova 11 hours ago
        that's the point
    • weitzj 10 hours ago
      I would guess it is the pelican on a bicycle reimagined ;)
      • cavoirom 1 hour ago
        We need to find out which LLM was used to generate this benchmark image, it is the frontier now!
      • Cthulhu_ 9 hours ago
        And a reference to a meme of someone sticking a pipe into their own bike and complaining about someone else.
    • xnorswap 5 hours ago
      I don't like it being 8MB and taking 53 seconds to download from this server!

      It's rare to even see a "real" gif rather than webm or other optimised format, I don't know if that choice is part of the commentary or not.

    • exhilaration 11 hours ago
      I would just like to say that the Simpsons Already Did It: https://simpsons.fandom.com/wiki/Blinky
      • zote 10 hours ago
        The theme this time is from The Simpsons, so yeah that is where they got it from. https://www.openbsd.org/lyrics.html
      • bentley 11 hours ago
        Wow, that’s a weird coincidence.
        • GeorgeWBasic 11 hours ago
          It's not a coincidence. The song is called "The Simps on AI". They're definitely referencing Blinky.
          • ChrisRR 7 hours ago
            Sometimes I'm genuinely surprised that people can't recognise such obvious sarcasm
            • avadodin 6 hours ago
              Earth was created six thousand years ago and we were running short on souls so we had to borrow a few chips from xAI.
          • messe 10 hours ago
            The art is credited to yvaneht nioj, another simpsons reference.
    • enriquto 9 hours ago
      > I am not on board with the graphic, whatever the heck it is.

      They are purposefully iconoclast with whatever aesthetics are "socially acceptable" for mainstream nerds. For example, their use of comic-sans in official presentations. Here they use ridiculous slop in front of an audience of conservative unix hackers. You can find it funny with the right mindset.

      The upgrade mechanism from 7.9 to 8.0 is still gloriously simple, and exactly the same as it has been for many years :

          ssh myopenbsdbox    # log-in to your machine
          doas sysupgrade     # will log you out, go drink some coffee
          ssh myopenbsdbox    # log-in to the upgraded machine
      
          doas sysmerge       # (optional) solve merge conflicts of your cfg files
          doas pkg_add -u     # (optional) upgrade local packages
      • nanolith 9 hours ago
        Don't forget: doas syspatch. They tend to find some minor issues rather quickly after release.

        Since I maintain my own custom patch set under OpenBSD, this is also usually when I need to vendor in the new release and update all of my patches.

        • gigatexal 7 hours ago
          Yup. I have heard the siren call. I’ll be putting it on an old fanless sbc router I have that is just sitting around since I upgraded.

          What window managers is everyone running? I’m thinking i3 or dwm

          • enriquto 2 hours ago
            > What window managers is everyone running? I’m thinking i3 or dwm

            everyone is running different managers... I use evilwm on linux and cwm on openbsd. They are very similar (keyboard-driven, floating windows with no frames) with different default keybindings.

          • nanolith 7 hours ago
            I use a custom dwm.
      • sidkshatriya 9 hours ago
        > The upgrade mechanism from 7.9 to 8.0 is still gloriously simple, and exactly the same as it has been for many years

        The upgrade mechanism on a typical Linux distribution is _even more_ gloriously simple, and exactly the same as it has been for many years.

          # Fedora/RHEL
          $ sudo dnf upgrade -y
        
          # Debian/Ubuntu
          $ sudo apt update && sudo apt upgrade -y
        
          # Arch Linux
          $ sudo pacman -Syu
        
        
        The false distinction between the OS packages and user local (/usr/local) packages during upgrade causes much unneeded complexity. FreeBSD is making this go away which is welcome.
        • enriquto 8 hours ago

              # Debian/Ubuntu
              $ sudo apt update && sudo apt upgrade -y
          
          But this is equivalent to syspatch && pkg_add -u , this does not upgrade the computer from one version of the OS to the next.
          • sidkshatriya 7 hours ago
            For a rolling release like Arch Linux you just always use pacman -Syu.

            But yes you are correct, if you want to upgrade a Ubuntu distribution like 26.04 you do need to issue a command like `sudo apt dist-upgrade` which is admittedly an additional command. But then you could run 26.04 for many years. In OpenBSD anytime the base system/kernel is upgraded for a security fix or point release you need to do a slightly more complex dance.

        • Perz1val 8 hours ago
          I'm pretty sure it takes more to move debian 11 to debian 12 and Arch doesn't even have versions
          • miah_ 2 hours ago
            Arch upgrades are really fun if you don't run pacman for a year or more. It rarely works in your favor to not run pacman on a extremely frequent schedule.
        • so-cal-schemer 6 hours ago
          Hey, you'd love this one:

            guix pull && guix system reconfigure
          
          To undo, it's:

            guix roll-back
          
          (now, where is guix-bsd?..)

          https://guix.gnu.org/manual/1.5.0/en/html_node/Upgrading-Gui...

        • tylerius 6 hours ago
          And don't forget to cross your fingers so the upgrade does not break your system... like what happened to me when systemd came out.
        • IslandRebel 7 hours ago
          A typical Debian upgrade process is more involved than that.
    • dylanz 1 hour ago
      It's satire
    • Cordiali 11 hours ago
      It's a reference to your basic 'Baton Roue' meme.

      I assume it's meant to represent the perspective of pro-AI people, but it's ambiguous.

    • jamal-kumar 11 hours ago
      Puffy's always looked kind of weird. I remember when they gave the damn fish human lips a few times and it always put me off
    • benrutter 10 hours ago
      This is an amazing image, I am fully on board with whatever it is.

      Is the animation comically slow for anyone else?

      • 10729287 5 hours ago
        I love it too. It's nice to be able to enjoy some art with personality when everything out there is inoffensive and bland art.
      • Perz1val 8 hours ago
        that's the gif loading, it should be fast once it's done
    • vladde 9 hours ago
      similar on the front page https://www.openbsd.org/index.html , "UNDSREA LREER"

      it seems very much like social commentary.

    • st_goliath 9 hours ago
      OpenLSD, bicycle day edition?
    • jeffrallen 10 hours ago
      It's like a pelican on a bicycle, but with social commentary.
    • larodi 5 hours ago
      Tell me tis not AI, cause it sure as hell looks like one.
    • j3th9n 8 hours ago
      It is clearly AI generated and that’s the message.
    • Razengan 9 hours ago
      It's literally in the name
    • ant0ni 5 hours ago
      it's a parody of LLM generated images, referencing the pelican benchmark. I suppose the image itself is hand -drawn and stylized for genAI slop
    • imwally 12 hours ago
      [dead]
    • IncRnd 11 hours ago
      [flagged]
    • colesantiago 11 hours ago
      And so it begins.

      SlopenBSD.

      Disappointing OpenBSD is and all of software is descending into slop.

      Don't care if it is satire or not.

      • account42 5 hours ago
        Agreed. Lowering yourself to the level of the AI drones is the first step to becoming one of them.
    • sippingabonedry 11 hours ago
      Before they were anti-AI edgelords, they were anti-VM edgelords.

      Now they ship their own hypervisor in the base system.

      • bentley 11 hours ago
        I don’t think the theme is “anti‐AI.” I think what it’s trying to express is something along the lines of “take responsibility for your code,” where one’s code is the code one unleashes upon the world.

        But that’s just my interpretation.

      • QwenGlazer9000 10 hours ago
        It's not that they were anti VM, they just didn't think it was a proper security boundary.
        • tosti 9 hours ago
          And they've been proven correct. Even the "secure" variety with hardware level encryption turned out to be vulnerable.
          • iamnothere 3 hours ago
            Even Xen (VM used by Qubes) periodically has CVEs, although they don’t always affect Qubes due to additional layers of defense and/or limited hardware targets.
  • nanolith 9 hours ago
    I've used OpenBSD as a laptop daily driver for nearly 20 years. It's small. It remains mostly consistent between updates. In fact, it's so stable that I barely notice changes when I upgrade until I go hunting for them.

    The Lenovo laptop I use as my travel laptop and console display is a 2012. It still runs OpenBSD just fine.

    • abc123abc123 6 hours ago
      Is it possible to get a modern filesystem with openbsd or are they still stuck in the past? Also, is it possible to run openbsd without jumping through hoops on a laptop from 2025 including suspend, graphics, web browser?

      I want this to be the case, because the more Linux petrifies, the more a free BSD option is needed.

      • tylerius 6 hours ago
        GeFS is in the works. I hope it gets into the tree some day:

        https://undeadly.org/cgi?action=article;sid=20260918115729

      • nanolith 6 hours ago
        By default, OpenBSD uses FFS / FFS2. There is an effort in place to port GeFS (from 9front) to OpenBSD. It's unlikely that ZFS will be ported to OpenBSD, due to licensing incompatibilities. For the same reason, btrfs is also unlikely. That's why I run FreeBSD on my big server, and OpenBSD on my laptop and other edge devices. I don't really have any issues running FFS on a laptop; it seems overkill to run anything more advanced than that.

        I'd recommend taking a look on forums to see what other folks are running. If it's a modern Lenovo with integrated graphics or an AMD GPU, it will be supported before others. OpenBSD folks tend to use Lenovos. My best recommendation is to pick a laptop that a core maintainer is using, unless you feel comfortable making your own patches. They have AMD GPU support via DRM from Linux. Intel graphics typically works alright.

        OpenBSD works well with relatively recent versions of Chromium and Firefox. That being said, they are on a six month release cycle. The Chromium port can fall behind if you stick to -stable or releases. Building Chromium or Firefox from source is... well, I have a 2012 laptop, so that's not something I am going to do. Regardless, you'd need to be pretty comfortable with applying OpenBSD specific patches to one of these browsers, which isn't always obvious, especially since they are moving targets.

        If you're used to being on a rolling release Linux, this will be a bit disorienting. But, in my opinion, it's significantly more stable and better thought out.

        • ninjin 4 hours ago
          > OpenBSD works well with relatively recent versions of Chromium and Firefox. That being said, they are on a six month release cycle. The Chromium port can fall behind if you stick to -stable or releases.

          Just to clarify here, security patches are backported to -stable. So it is not like you stick to the same browser release for six months.

          Personally, I run www/firefox-esr. In part because the ESR moves more slowly in general and in part because it is maintained by someone working for Mozilla.

        • abc123abc123 2 hours ago
          Excellent answer. Thank you very much. I will keep this in mind when the next life cycling of my current laptop happens. I will keep an eye on the core teams laptop experiments as well if there's anything about that available. Will search the mailinglists.
      • t-3 2 hours ago
        OpenBSD usually has far fewer hoops than Linux on laptops - IME, either it works or it doesn't. Pretty much any x86 machine that isn't bleeding edge is going to work.
  • gucci-on-fleek 11 hours ago
    Does the version number going from v7.X->v8.0 mean that this is a larger update than v7.8->v7.9, or does the numbering just automatically roll over to the next major version when it reaches vX.9?
    • synack 11 hours ago
      No, the major number has no special significance to OpenBSD. 8.0 is just what comes after 7.9.
    • himata4113 11 hours ago
      as linus torvalds puts it: big numbers confuse me, so the next kernel version will be 7.0
      • tosti 9 hours ago
        He ran out of fingers and toes to count on. (Wait, what comes after 19.19, or 20.19, 20.20, then what?)
        • creshal 9 hours ago
          By that point medicine will be sufficiently advanced that we can graft new fingers on him, obviously. That'll also make him more productive, given he's an emacs user.
        • JohnKemeny 3 hours ago
          Linux Vice City and then Linux San Andreas.
      • Razengan 9 hours ago
        Did they ever have a Linux 6.9?
        • GJim 6 hours ago
          A sixty-nine interupted by a period?
        • yonatan8070 9 hours ago
          Yes, all the way up to 6.19 in fact!
  • zdw 12 hours ago
    In recent past releases there was a noticeable improvement to SMP related networking bits.

    Does anyone have benchmarks between 8.0 and previous releases in that department?

    • ninjin 4 hours ago
      I run -current these days on most desktops. What I can say is that since 7.9, I have experienced smoother audio playback and system load overall on my decade-old laptop. So, it is likely that others will experience similar things when moving to 8.0.
    • somat 9 hours ago
    • ksec 10 hours ago
      Phoronix do test BSDs from time to time. But for different reasons I think OpenBSd missed twice. I hope to see the performance gap being close enough we can stop thinking it is very slow.
  • idatum 10 hours ago
    I have a Lenovo laptop running OpenBSD 8.0.

    What I really appreciate about it is I started with OpenBSD 7.6. Using sysupgrade, I went through every release (and syspatch) and just now successfully upgraded to 8.0. It still works great!

    • asimovDev 9 hours ago
      I agree that it's great but as an anecdote, I have an arch linux laptop i upgrade 1-2 times a year and it still works too, been that way since 2019 so went through major kernel upgrades without a hitch. Only thing that ever broke were nvidia drivers sometimes because it's an shudders OPTIMUS laptop. Last time I updated it, vibe coding wasn't widespread yet so I am wondering if new package versions will finally kill it if I were to upgrade it now
    • prmoustache 9 hours ago
      I like OpenBSD, but I don't think this is a specific reason to appreciate it as any decent OS these days has been upgradeable release upon release safely for more than 2 decades, regardless if it is a linux distro, an Open/Net/FreeBSD system, a macOS or Windows system.
      • idatum 53 minutes ago
        Zero configuration conflicts/issues the whole time?
      • regularfry 6 hours ago
        That's pushing the timelines a bit. I had more than one early Ubuntu completely hose itself on dist-upgrade pre 16.04, despite it being based on Debian for which such things have never been a problem for me. Until 22.04->24.04 my rule was always to reinstall as a result.
    • somat 10 hours ago
      I have an old(mutters to self don't look at date then I will feel old... Oh god it's from 2012) lenovo laptop that is my daily driver for portable ops. I run openbsd on it and... well it's perfect. sleeps perfectly, radio works well, I understand the OS. I will be very sad when it dies.

      I did just re do the heatsink compound, so hopefully it has many years left, but I worry about the fan.

    • kombine 7 hours ago
      Well, I've used Fedora since 2024 on my laptop and it went through four or five major upgrades, never had an issue.
    • stackghost 7 hours ago
      >What I really appreciate about it is I started with OpenBSD 7.6. Using sysupgrade, I went through every release (and syspatch) and just now successfully upgraded to 8.0. It still works great!

      This is table stakes. Debian has had this since, IIRC, 1999.

  • bemtevi 2 hours ago
    It would be cool if we could run this thing on Apple Silicon macs. I'm getting tired of MacOS and would love an alternative to Linux.
  • elric 7 hours ago
    The release song is a banger, as always.

    https://www.openbsd.org/lyrics.html#80

  • wg0 17 minutes ago
    Has anyone good luck with OpenBSD on Intel Macs?
  • rootnod3 7 hours ago
    MP support for VMM/VMD is huuuuge.
  • volkadav 1 hour ago
    The upgrade from 7.9 to 8.0 went completely smooth on a bastion host I have running with openbsd; from start to finish it took about ten minutes. Kudos to the team!

    https://www.openbsd.org/faq/upgrade80.html

    tl;dr - doas sysupgrade, system updates itself and reboots, doas sysmerge, doas pkg_add -u.

  • hollowonepl 8 hours ago
    Good job and much clearer release notes than the ones I was reading about recent Linux release by the way.. much more informative and better organised to understand the impact in practical terms. #BSD_hellyeah
  • robalni 7 hours ago
    I find it quite annoying that I have to have a monitor plugged in for the upgrade to work. Otherwise it reboots into the old version after downloading. Is this a common problem?
    • dontdoxxme 3 hours ago
      I have seen it, upgrades use a cut down kernel (bsd.rd) which doesn’t have the same graphics drivers.

      You may find setting the console to serial works around it (set tty com0 in /etc/boot.conf).

  • MycroftJones 11 hours ago
    When I read the Changelog I had to check if it was April Fools day. Is this a real OpenBSD release? Feels early. Also, many of those changes don't sound like real OpenBSD changes.
  • kstrauser 10 hours ago
    Anyone managed to get this running on a 2018 (Intel) Mac Mini? I tried 7.8 or 7.9, I forget which, not long ago and was flummoxed.
    • jon128 10 hours ago
      Have you tried

        http://www.rodsbooks.com/refind/using.html
      
      ?
  • diskinsight 11 hours ago
    [dead]
  • jan_m_savage 10 hours ago
    like a virus, slop will infect the techsphere, and it will become a real pain in the bollocks to siftt thru the mountains of semi-slop just to get to the real, reliable and human-made stuff.
    • reliablehuman 10 hours ago
      Reliable human stuff? Holy shit, I want whatever you are smoking.
      • brunorro 6 hours ago
        I'm smoking natural gas to move the turbine that generates electricity so an overpriced GPU filled up with overpriced memory can give an interesting answer to this post :)
      • unsungNovelty 5 hours ago
        Wait... I thought you were one??!!!
    • Razengan 9 hours ago
      > Reliable human-made stuff

      My guy.......

      • jan_m_savage 7 hours ago
        Humans make predictable mistakes, AI makes unpredictable mistakes. Hallucination occurs where you least expected for ANY reason. Can you say the same about humans? Unless the human in question is mentally ill.

        The loudmouths who think I'm wrong are simply not sophisticated enough to realize how LLMs actually work. It's just pattern-matching and heuristics-based at that. The day AI produces a painting like a famous human painter, I'd be impressed. Until then, it's meh.

        • Zambyte 4 hours ago
          > The day AI produces a painting like a famous human painter, I'd be impressed.

          What does "like" mean to you here?

        • Razengan 5 hours ago
          > "I'm sophisticated enough to realize how LLMs actually work"

          > "AI is unpredictable"

          *thumbs up emoji*

  • grommz 5 hours ago
    >Switched ssh(1) from supercop ed25519 to libsodium

    Lol. Casually switching crypto implementation somewhere in the footnotes.

    • blodorn 2 hours ago
      https://www.openwall.com/lists/oss-security/2026/10/06/2

      > * All: switch the fallback implementation of the ed25519 signature algorithm used when libcrypto is disabled from SUPERCOP ed25519 to libsodium. The libsodium implementation includes a number of strictness checks over the original reference implementation we have used to this point and a more ergonomic API.