News: 1721896152

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

OpenBSD enthusiast cooks up guide for the technically timid

(2024/07/25)


French BSD enthusiast Joel Carnat has written a how-to guide on setting up a laptop with OpenBSD for general use. It's worth a go for the Unix-curious.

[1]Carnat calls his guide " [2]OpenBSD Workstation for the People ," and says:

This is an attempt at building an OpenBSD desktop that could be used by newcomers or by people that don't care about tinkering with computers and just want a working daily driver for general tasks.

That strikes us as a noble goal. There are dozens, maybe hundreds, of Linux distros that share this aspiration, but outside of the most mainstream of FOSS OSes, such goals are rarer.

The guide uses its author's Thinkpad X280 as the target. The Register [3]reviewed that model in 2018 and at the time noted that it doesn't have a standard 8P8C connector – or RJ-45, as everyone calls them. Carnat uses a USB Ethernet adapter to install the OS and fetch Wi-Fi firmware, after which wireless connectivity is available. (But not Bluetooth, which OpenBSD shuns.)

He also assumes that OpenBSD will be the sole OS on the machine. OpenBSD 7.5 came out in April and [4]we looked at it soon afterwards . We can attest that the partitioner is about as user-friendly as a cornered rat. Others might well respond that it " is user-friendly; it's just picky about who its friends are," as one classic quote put it. Either way, Carnat is right: Don't even try dual-booting it.

[5]

He covers adding a desktop, focusing on Xfce, which is an excellent choice: It's lightweight and works well on OpenBSD. It's what this vulture's OpenBSD box runs. If you prefer KDE, [6]OpenBSD 7.5 includes Plasma 5.27 .

[7]

[8]

In a few months, OpenBSD 7.6 [9]should contain Plasma 6 , thanks to the [10]efforts of the same developer, Rafael Sadowski. He also seems to be the main developer of the [11]shiny new hardware-accelerated video encoding and decoding. This uses [12]Intel's VA-API , but will work on other GPUs as well. This addition was [13]recently reported by Bryan Steele on Twitter:

Hardware accelerated video decode/encode (VA-API) support is beginning to land [14]#OpenBSD -current. 🥳 libva has been integrated into xenocara with Intel userland drivers in ports. AMD requires Mesa support, hence the inclusion in base. [15]https://t.co/nuhpG1wYdK HT [16]@sizeofvoid — Bryan Steele 🦋 ( @canadianbryan ) [17]July 19, 2024

[18]Linux kernel 6.10 arrives with punched-up hardware support

[19]Fancy climbing the peaks of Alpine Linux? 3.20 is out

[20]Miracle-WM tiling window manager for Mir hits 0.2.0

[21]NetBSD 10 proves old tech can still kick apps and take names three decades later

Carnat's guide also covers common apps and tools, localization – obviously, aiming at French, so some edits there will be necessary for Anglophones and others – themes, and more. He calls out the project's documentation and recommends studying it, but if you just want to follow a simple step-by-step guide, this is the best we've seen. You'll need to keep your wits about you, interpret, and not type blindly. Many choices, from locales to user and network names, must be changed. If you're not able to handle that, though, this isn't the OS for you.

If you're tired of all the shenanigans in the Linux world in recent years, from fancy file systems to elaborate cross-platform packaging schemes and of course the [22]ever-controversial systemd , OpenBSD is perhaps the smallest, cleanest, simplest, and most comprehensible of the BSD family. If you can dedicate a machine to it, it's worth a try. ®

Get our [23]Tech Resources



[1] https://www.tumfatig.net/about/

[2] https://www.tumfatig.net/2024/openbsd-workstation-for-the-people/

[3] https://www.theregister.com/2018/09/13/lenovo_thinkpad_x280/

[4] https://www.theregister.com/2024/04/12/openbsd_75_disk_encryption/

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZqIiRwAb60NhoTjbYU2g6gAAANg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[6] https://www.theregister.com/2024/01/15/kde_6_kde_5_openbsd/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZqIiRwAb60NhoTjbYU2g6gAAANg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZqIiRwAb60NhoTjbYU2g6gAAANg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[9] https://www.undeadly.org/cgi?action=article;sid=20240520114826

[10] https://rsadowski.de/posts/2024-05-20-kde6-on-openbsd/

[11] https://www.undeadly.org/cgi?action=article;sid=20240520114826

[12] http://intel.github.io/libva/

[13] https://x.com/canadianbryan/status/1814311997028122661

[14] https://twitter.com/hashtag/OpenBSD?src=hash&ref_src=twsrc%5Etfw

[15] https://t.co/nuhpG1wYdK

[16] https://twitter.com/sizeofvoid?ref_src=twsrc%5Etfw

[17] https://twitter.com/canadianbryan/status/1814311997028122661?ref_src=twsrc%5Etfw

[18] https://www.theregister.com/2024/07/15/linux_kernel_610_is_out/

[19] https://www.theregister.com/2024/05/29/alpine_linux_320_released/

[20] https://www.theregister.com/2024/04/23/miracle_wm_020/

[21] https://www.theregister.com/2024/04/17/30yo_netbsd_releases_v10/

[22] https://www.theregister.com/2024/06/13/version_256_systemd/

[23] https://whitepapers.theregister.com/



Thank you Carnat

wolfetone

I'm currently configuring an OpenBSD server which will be used for VPN connections, and while there is a learning curve (even coming from Linux) it's quite satisfying to use. So much so I'm considering switching the other Linux servers I look after to use OpenBSD. In amongst all of this, I set up a FreeBSD VM on my laptop and every other day I open it up and do a days work in it.

But there is a learning curve, and anything like this that can smooth out that curve for us all is welcome. Have a pint!

Re: Thank you Carnat

AJ MacLeod

I won't use it on servers due to the ridiculously short life cycle of each version (6 months IIRC) - I also seem to recall reading that upgrading between versions was discouraged at one time.

Either way, the thought of performing upgrades to a new OS version every six months on a server does not appeal at all. It's a shame really as otherwise I like the OpenBSD ethos - though last time I gave it a go I did find it dog slow in comparison to several different Linux distros I tried on the same machine which surprised me a little.

OpenBSD jumpbox

mahan

In my company I have initiated a project to replace all incoming SSH connections to our clusters via OpenBSD servers. We are not looking to replace our Linux infrastructure but to secure the entrance and then "jump" from there.

OpenBSD has a fantastic track record for being unaffected by remote exploits. Even when exploits are discovered the rigid security consciousness in OpenBSD very often make the exploits not practical to attempt to abuse in an OpenBSD system.

Example: During the installation process of OpenBSD your kernel is personalized by being re-linked with randomization of addresses in such a way that trying to exploit buffer overflows and "guessing" jump vectors becomes almost impossible.

Bluetooth

Kurt Mosiejczuk

> "(But not Bluetooth, which OpenBSD shuns.)"

There's not Bluetooth support, but the project doesn't shun it really. It's just the implementation that was removed was broken and unmaintained. No one has stepped up to implement Bluetooth for OpenBSD since then. Probably since there are a lot of other things that can be worked on that will have more benefits for OpenBSD folks.

The whole world is a scab. The point is to pick it constructively.
-- Peter Beard