Published : 2010-02-07

Introduction

What is OpenBSD?

The OpenBSD project provides a multi-platform UNIX-like operating system derived from 4.4BSD. Our goals focus on correctness, security, standards compliance and portability.

This FAQ specifically covers the then-current OpenBSD release (5.0 in the original document).

Which systems does OpenBSD run on?

OpenBSD 5.0 runs on the following platforms (availability varies by release):

  • alpha — download only
  • amd64 — available on CD
  • armish — download only
  • hp300 — download only
  • hppa — download only
  • i386 — available on CD
  • landisk — download only
  • loongson — download only
  • macppc — available on CD
  • mac68k — download only
  • mvme68k — download only
  • mvme88k — download only
  • sgi — download only
  • socppc — download only
  • sparc — download only
  • sparc64 — available on CD
  • vax — download only
  • zaurus — download only

“Available on CD” indicates that the official CD set includes that platform and many packages for it. Base-system ISO images are also available for most other platforms; these are not the same as the official distribution CDs.

More information about supported platforms is available on the OpenBSD platforms page.

Support for many architectures exists simply because maintainers volunteer to support them. Supporting multiple platforms helps surface portability and design issues early; OpenBSD supports a wide variety of CPU architectures and endianness models which improves overall code quality.

Why would I use OpenBSD?

New users often ask whether OpenBSD is “better” than other free UNIX-like systems; that’s a subjective debate. The reasons we consider OpenBSD useful include:

  • OpenBSD runs on many hardware platforms.
  • OpenBSD is widely regarded by security professionals as one of the most secure UNIX-like systems due to frequent code auditing.
  • OpenBSD is a complete UNIX system available with source.
  • OpenBSD includes modern tools for firewalling and VPNs and supports cryptographic hardware acceleration in many cases.
  • Active, continuous development across many areas provides a platform for working with emerging technologies and an international developer community.
  • OpenBSD aims to minimize the need for local customization; for most users it “just works” on their hardware and is intentionally conservative about encouraging customization.

Whether OpenBSD is useful for you depends on your needs.

Is OpenBSD really free?

OpenBSD is entirely free. The binaries are free, the source is free, and every part of OpenBSD uses licensing terms that allow redistribution. That includes reusing most OpenBSD source code for personal or commercial purposes. OpenBSD imposes no restrictions beyond those in the original BSD license. Software distributed under overly restrictive licenses cannot be included in the standard OpenBSD distribution because the project wants to preserve OpenBSD’s freedom of use.

That means OpenBSD can be used freely for personal projects, education, government, nonprofits, and commercial organizations. It can also be incorporated in whole or in part into commercial products.

People sometimes ask whether it is frustrating to see OpenBSD code used in commercial products. The project position has long been that it is better for good code to be widely used than for vendors to rewrite poor, incompatible alternatives to solve problems that are already solved. SSH is a good example: its broad adoption is tied directly to the freedom of OpenSSH.

That does not mean the project rejects donations or hardware support. On the contrary, it survives largely through the time, equipment, and connectivity provided by developers and supporters.

Who maintains OpenBSD?

OpenBSD is maintained by a development team spread across many countries. The project is coordinated by Theo de Raadt in Canada.

When is the next OpenBSD release expected?

The OpenBSD team publishes a new release every six months, traditionally in May and November.

What software is included with OpenBSD?

OpenBSD ships with a substantial set of third-party software, typically with local fixes for security, portability, or correctness. Examples from the original 5.0-era list include:

  • X.Org 7.6 with local patches
  • GCC 2.95.3, 3.3.5, and 4.2.1 depending on platform
  • Perl 5.12.2
  • A hardened Apache 1.3.29 with chroot, privilege revocation, and SSL/DSO support
  • OpenSSL 1.0.0a
  • Sendmail 8.14.5 with libmilter
  • BIND 9.4.2-P2 with security improvements
  • Lynx 2.8.7rel.2 with HTTPS and IPv6 support
  • Sudo 1.7.2p8
  • Ncurses 5.7
  • KAME IPv6
  • Heimdal 0.7.2
  • Arla 0.35.7
  • Binutils 2.15
  • gdb 6.3
  • OpenSSH 5.9
  • OpenNTPD
  • OpenBGPD and OpenOSPFD

The OpenBSD team frequently patches third-party components to improve security or code quality. Sometimes those changes are invisible to users; sometimes they affect behavior. It is worth remembering that replacing the base version blindly with another upstream build may trade away security hardening for a newer version number.

Additional software can of course be installed through the packages and ports system.

What is new in OpenBSD 5.0?

The complete change list from OpenBSD 4.9 to 5.0 is available in the official changelog, but a few notable points highlighted by the project at the time were:

  • System daemons moved under /etc/rc.d, not just packages.
  • The mac68k platform returned.
  • bce(4) was enabled by default.
  • Base and Xenocara manual pages were installed as source, improving grep(1) usefulness in the man tree.
  • Big-memory support was enabled on more architectures, including sparc64 and amd64.