OpenBSD 4.4 发行版本:

发布于2008年11月1日
版权 1997-2008，Theo de Raadt。
ISBN 978-0-9784475-2-6
4.4 主题歌:“Trial of the BSD Knights”

新特性
如何安装
如何升级
使用 ports 的方法
购买 CD

获得此版本的文件:

• 从我们的订购系统购买 CDROM。
• 从镜像站点的 FTP 页面中选择合适的镜像。
• 进入镜像站点的 pub/OpenBSD/4.4/ 目录。
• 简要阅读本文档的剩余部分。
• 阅读 4.4 勘误表获得问题列表和解决方案。
• 阅读 4.3 与 4.4 之间的详细修改记录。

新特性

以下是 OpenBSD 4.4 中新特性和新系统功能的部分列表。 完整的列表位于 4.4 的修改记录中。

• 新增/扩展的构架平台:
  • OpenBSD/sparc64
    支持更多的平台。现在支持使用 UltraSPARC IV/T1/T2 和富士通 SPARC64-V/VI/VII 的机器。
  • OpenBSD/socppc
    基于 Freescale MPC8349E System-on-Chip (SoC) 平台，使用 Das U-Boot 引导加载器的机器。
  • OpenBSD/landisk
    增加对共享库的支持。

• 更新了硬件支持, 包括:
  • 几个新增/升级的传感器驱动，包括:
    • New fins(4) driver for Fintek F71805F LPC Super I/O Hardware Monitor.
    • New andl(4) driver for Andigilog aSC7611 Hardware Monitor.
    • New kate(4) driver for AMD K8 embedded temperature sensor.
    • New sdtemp(4) driver for JEDEC JC-42.4 memory module thermal sensors.
    • New adtfsm(4) driver for Analog Devices ADT7462.
    • New km(4) driver for AMD K10 (Phenom, Opteron Barcelona et alia) embedded temperature sensor.
    • The it(4) driver now has better probing procedure.
    • The lmtemp(4) driver now support LM76.
  • 在 agp(4) 中支持 Intel G33 和 G35 芯片组。
  • 新增 Attansic L2 10/100 以太网卡的驱动 lii(4)。
  • 初步支持 UVC USB 网络摄影机: uvideo(4) 和 video(4)。
  • 对于 VIA 显卡，使用 X.Org 驱动openchrome(4)。
  • 新增 AMD Geode 显卡针对 X.Org 的驱动。
  • 新增 vmt(4) 驱动，实现 VMware 工具箱。
  • New auglx(4) driver for AMD Geode LX CS5536 integrated AC'97 audio.
  • New ix(4) driver for Intel 82598 PCI Express 10Gb Ethernet.
  • New acpithinkpad(4) driver provides additional ACPI support for IBM/Lenovo ThinkPad laptops.
  • New acpiasus(4) driver provides additional ACPI support for ASUS laptops, including the EeePC.
  • New gecko(4) driver supporting the GeckoBOA BC GSC+ port found on some hppa systems.
  • New tsec(4) driver supporting the Freescale Triple Speed Ethernet Controller.
  • The re(4) driver now supports RTL8102E and RTL8168 devices.
  • The cas(4) driver now supports National Semiconductor Saturn devices.
  • The pccom(4) driver has been removed; all platforms use com(4) now.
  • cardbus(4) and pcmcia(4) now work on most sparc64 machines.
  • The udcf(4) driver now supports mouseCLOCK USB II devices.
  • The msk(4) driver now supports 88E8040T devices.
  • The ath(4) driver now supports many more Atheros wireless devices.
  • The ciss(4) driver now supports HP Smart Array P212, P410, P411, P411i and P812 devices.
  • The uftdi(4) driver now supports ELV Elektronik and FTDI 2232L devices.
  • The umsm(4) driver now supports Option GlobeTrotter 3G+, Huawei E220 and more HSDPA MSM devices.
  • The ubsa(4) driver now supports ZTE CMDMA MSM devices.
  • The axe(4) driver now supports Apple USB A1277 devices.
  • The puc(4) driver now supports more Netmos devices.
  • The mgx(4) driver now supports 2D acceleration on selected boards.
  • The isp(4) driver firmware for some controllers has been updated.
  • The isp(4) driver no longer hangs during probe on some machines.
  • The bge(4) driver has better support for BCM5704 chipsets in fiber mode which helps with some blade servers.
  • The bge(4) driver has better support for the BCM5906 chipset on some systems.
  • The bge(4) driver has much better support for PCI Express chipsets resulting in much faster transmit performance.
  • The bge(4) driver has support for the BCM5714/5715/5780 chipsets using fiber interfaces.
  • The bnx(4) driver has support for the BCM5706/5708 chipsets using fiber interfaces.
  • The ral(4) driver now supports Ralink Technology RT2700 devices.
  • Serial ports other than com0 can now be used for console on amd64.
  • The serial console on i386 and amd64 has improved compatibility with server management cards.

• 新工具:
  • rpc.statd(8), the host status monitoring daemon for use with the NFS file locking daemon.
  • Initial import of ypldap(8), a drop-in replacement for ypserv to glue in an LDAP directory for get{pw,gr}ent family of functions.
  • Deprecated slattach(8) and nmeaattach(8) in favor of ldattach(8).
  • Import of tcpbench(1), a small TCP benchmarking tool.

• 新功能:
  • aucat(1) is now able to play and record audio in full-duplex, mix unlimited number of streams, handle up to 16 channels, resample streams on the fly, support various 24-bit and 32-bit encodings and does format conversions on the fly.
  • httpd(8) now supports IPv6.
  • dhcpd(8) now supports basic synchronization of the /var/db/dhcpd.leases file to allow running multiple instances for redundancy.
  • WPA/WPA2-PSK support for several models of wireless cards.
  • rpc.lockd(8) now supports NLMv4 and does actually do locking.
  • ftp(1) now supports recursive mget transfers.
  • ftp(1) now uses keep alive packets by default.
  • ftp(1) now accepts empty passwords in URLs.
  • locate(1) now supports -b flag to perform search only on the last component of the path.
  • Allow cdio(1) in TAO mode to set the write speed.
  • cdio(1) no longer blanks media twice.
  • Add ability in cdio(1) to determine media capabilities and make it figure out if media supports TAO or blanking.
  • Initial version of softraid(4) crypto support.
  • dhcpd(8) now groks options tftp-config-file and auto-proxy-script in dhcpd.conf(5).
  • dhclient(8) option handling much more resistant to abuse.
  • dhclient(8) now aware of interface link state and reacts to changes.
  • DIOCRLDINFO, DIOCGPDINFO, and DIOCGPART support added to block devices previously lacking it.
  • disklabel(8) no longer supports the '-r' option, and obtains all disklabel information via ioctl's.
  • disklabel(8) no longer suggests offsets and sizes that would result in partitions starting or ending outside the OpenBSD section of the disk.
  • disklabel(8) now correctly reads back the 'vendor' field from text disklabels.
  • disklabel(8) editor mode '?' and 'p' commands are more compact and the 'l' command has been added to produce previous verbose output.
  • I/O's outside the bounds of the RAW_PART are now prevented, allowing proper detection of invalid I/O's.
  • USB floppies now have a valid cylinder count calculated, rather than 0.
  • newfs(8) can now create filesystems on devices with sector sizes other than 512, although such filesystems cannot yet be read.
  • rtadvd(8) now revokes its privileges and runs as its own user _rtadvd.
  • scsi(4) probing displays less useless verbiage and fewer spurious error messages.
  • st(4) devices can now be detached.
  • ATAPI devices are now identified as such, rather than as SCSIn devices.
  • SATA tape drives now work.
  • scsi(4) probing now displays the ID of the initiator on the bus.
  • scsi(4) debug capabilities improved to show commands and input or output data as appropriate.
  • scsi(4) probing makes better use of the TEST UNIT READY command to clear errors and allow successful attachments.
  • scsi(4) probing can now find more fibre channel attached devices.
  • Several mbuf pool cache corruption issues were fixed.
  • identd(8) now supports IPv6 in standalone mode.
  • cal(1) now shows week numbers too.
  • In pf(4), implement a sloppy tcpstate tracker which does not look at sequence numbers at all.
  • pf(4) rule accounting now has a counter to record how many states in total have been created by a rule.
  • The kill states feature in pfctl(8) now supports two additional match targets: Kill by rule label or state ID.
  • Make relayd(8) use sloppy pf(4) state keeping for routed sessions (Direct Server Return).
  • Added support in relayd(8) for transparent L7 forwarding in relays.
  • Added support for dynamic IPv6-to-IPv4 or IPv4-to-IPv6 TCP relays in relayd(8).
  • Improved the DNS mode and use OpenBSD's Id shuffle code from named(8). in relayd(8).
  • Extend awk(1) with bitwise operations.
  • Updated the display code for systat(1) which adds views for pf(4) states, rules and queues.
  • Imported initial support for IEEE 802.3ad/LACP in trunk(4).

• 各种改进和代码清理:
  • A greatly changed buffer cache subsystem which maps cache pages only when in use, resulting in improved filesystem performance, and allowing for the effective use of a much larger buffer cache.
  • A greatly improved implementation of malloc(3), the general purpose memory allocator, which catches more mistakes, reduces address space fragmentation, and is faster.
  • The statfs(2) system call has been enhanced to support large filesystems.
  • The strtof(3) function has been added to libc.
  • A lot of work has been done on libm to add several functions towards more C99 compliance.
  • Lots of features have been implemented in OpenCVS, which can now be used to do some real work.
  • New APIs for arc4random(3), one to fill a buffer with random numbers and the other to return a uniformly distributed random number without bias.

• 对安装/升级过程的修改:
  • A new tool sysmerge(8), derived from the old mergemaster port, makes it easier to merge configuration files changes during an upgrade.
  • Fully support OpenBSD inside extended partitions on i386 and amd64.
  • During installation 'dhcp' is now the initial default answer during network configuration.
  • Fetching sets via FTP more reliable due to automatic use of keep alive.
  • Fetching sets via NFS no longer hangs retrying a non-functional mount.
  • Installation ensures hostname.* files are installed with mode 600.
  • Serial console configuration now automatically detects speed.
  • Serial console support extended to all architectures.
  • Partition size display no longer limited to 32 bit sizes.
  • Partition sizes now scaled and formatted to use human readable units.
  • ntpd(8) configuration questions improved.
  • Sparc miniroot root disk detection fixed.
  • Invocations of disklabel(8) by the scripts are now less verbose.

• OpenSSH 5.1:
  • New experimental fingerprint ASCII art visualisation system for easier verification of remote keys.
  • Added chroot(2) support for sshd(8).
  • Added an extended test mode (-T) to sshd(8).
  • Make ssh(1) support negation of groups in a "Match group" block.
  • Increased the ephemeral key size in protocol1 from 768 to 1024 bits.
  • Better tests of primes in /etc/moduli
  • Refuse to read .shosts or authorized_keys files that are not regular files.
  • Enable ~ escapes for multiplex slave sessions.
  • Support CIDR address matching in Match blocks and authorized_keys from="..." stanzas.
  • Make port forwarding code try additional addresses when connecting to a destination whose DNS name resolves to more than one address.
  • Make the maximum number of ssh(1) sessions run-time controllable via MaxSessions in ssh_config(5).
  • ssh-keyscan(1) now defaults to RSA protocol 2 keys, instead of RSA1.
  • Added an extension to sftp protocol to implement statvfs(3)-like operations and add a df command to sftp(1).
  • Disable execution of ~/.ssh/rc for sessions where a command has been forced by the sshd_config ForceCommand directive.
  • And several bug fixes and performance enhancements.

• 超过 5205 个 ports，package 工具的健壮性有所改进。
• 每种架构都有许多预先构建的包:

  i386: 5033 sparc64: 4862 alpha: 4852

  sh: 1285 amd64: 4940 powerpc: 4466

  sparc: 3381 arm: 4018 hppa: 1595

  vax: 1954 mips64: 3099

  一些精彩程序:
  • Gnome 2.20.3.
  • GNUstep 1.14.2.
  • KDE 3.5.9.
  • Mozilla Firefox 2.0.0.16 and 3.0.1.
  • Mozilla Thunderbird 2.0.0.16.
  • MySQL 5.0.51a
  • OpenMotif 2.3.0.
  • OpenOffice.org 2.4.1.
  • PostgreSQL 8.3.3.
  • Xfce 4.4.2.

• 按照惯例，手册或其它文档也有相应补充和修改。

• 以下是系统包含的外部提供的重要程序:
  • Xenocara (based on X.Org 7.3 + patches, freetype 2.3.5, fontconfig 2.4.2, Mesa 7.0.3, xterm 234 and more)
  • Gcc 2.95.3 (+ patches) and 3.3.5 (+ patches)
  • Perl 5.8.8 (+ patches)
  • Our improved and secured version of Apache 1.3, with SSL/TLS and DSO support
  • OpenSSL 0.9.7j (+ patches)
  • Groff 1.15
  • Sendmail 8.14.3, with libmilter
  • Bind 9.4.2-P2 (+ patches)
  • Lynx 2.8.5rel.4 with HTTPS and IPv6 support (+ patches)
  • Sudo 1.6.9p17
  • Ncurses 5.2
  • Latest KAME IPv6
  • Heimdal 0.7.2 (+ patches)
  • Arla 0.35.7
  • Binutils 2.15 (+ patches)
  • Gdb 6.3 (+ patches)

如何安装

如果通过购买的 CD 安装，请按照下述指令操作。使用 FTP(或其它安装方式)安装与之类似；CDROM 中的安装是自治的， 它会让你知道如果使用购买的 CD 安装是多么方便。

• CD1:4.4/i386/INSTALL.i386

• CD2:4.4/amd64/INSTALL.amd64
• CD2:4.4/macppc/INSTALL.macppc

• CD3:4.4/sparc64/INSTALL.sparc64

• FTP:.../OpenBSD/4.4/alpha/INSTALL.alpha
• FTP:.../OpenBSD/4.4/armish/INSTALL.armish
• FTP:.../OpenBSD/4.4/hp300/INSTALL.hp300
• FTP:.../OpenBSD/4.4/hppa/INSTALL.hppa
• FTP:.../OpenBSD/4.4/landisk/INSTALL.landisk
• FTP:.../OpenBSD/4.4/mac68k/INSTALL.mac68k
• FTP:.../OpenBSD/4.4/mvme68k/INSTALL.mvme68k
• FTP:.../OpenBSD/4.4/mvme88k/INSTALL.mvme88k
• FTP:.../OpenBSD/4.4/sgi/INSTALL.sgi
• FTP:.../OpenBSD/4.4/sparc/INSTALL.sparc
• FTP:.../OpenBSD/4.4/vax/INSTALL.vax
• FTP:.../OpenBSD/4.4/zaurus/INSTALL.zaurus

快速安装仅适合熟悉 OpenBSD 和“disklabel -E”命令用法的人。如果你根本不懂安装 OpenBSD，请参阅上面罗列的相应 INSTALL.* 文件!

OpenBSD/i386:

设置 BIOS 可以从 CD 启动。OpenBSD/i386 发行版本在 CD1 中。如果你的 BIOS 不支持从 CD 启动，就可能需要制作启动软盘。将 CD1:4.4/i386/floppy44.fs 写入软盘来制作启动软盘，通过软盘驱动器启动。

使用 CD1:4.4/i386/floppyB44.fs 来制作引导软盘，可以获得更好的 SCSI 支持，或者使用 CD1:4.4/i386/floppyC44.fs 来制作引导软盘， 获得更好的笔记本电脑支持。

如果你不能从 CD 或软盘启动的话，还可以用 PXE 通过网络安装，请参阅 INSTALL.i386 文件。

如果计划让 OpenBSD 与另一操作系统共存，双重启动，请参阅 INSTALL.i386 文件。

在 MS-DOS 环境制作启动软盘，请使用位于 CD1:4.4/tools/rawrite.exe 的"rawrite"工具。在 Unix OS 环境制作启动软盘，请使用 dd(1) 工具。下面是使用 dd(1) 的例子，"device"可以是"floppy"，"rfd0c"，或"rfd0a"。

# dd if=<file> of=/dev/<device> bs=32k

请确保你的软盘无坏道，已经正确格式化。否则很可能会安装失败。 有关制作启动软盘和安装 OpenBSD/i386 的信息请参阅 FAQ 4.3.1。

OpenBSD/amd64:

OpenBSD/amd64 的 4.4 版本在 CD2 中。设置 BIOS 可以从 CD 启动，然后用 CD 启动，开始安装。 如果不能从 CD 启动，可以通过制作启动软盘来安装。用 CD2:4.4/amd64/floppy44.fs 来制作启动软盘，然后用软驱来启动。

如果不能从 CD 或软盘启动，可以用 PXE 通过网络来安装，有关信息请参阅 INSTALL.amd64 文件。

如果计划让 OpenBSD 与另一个操作系统共存，双重启动，请参阅 INSTALL.amd64。

OpenBSD/macppc:

将 CD2 放入 CDROM，开机后一直按着 C 键，直到显示器显示 OpenBSD/macppc boot 。

或者在出现 Open Firmware 提示时，输入 boot cd:,ofwboot /4.4/macppc/bsd.rd 。

OpenBSD/sparc64:

将 CD3 放入 CDROM，输入 boot cdrom 。

如果这个没用，或没有光驱，你可以把 CD3:4.4/sparc64/floppy44.fs 或 CD3:4.4/sparc64/floppyB44.fs (依赖于你的机器)写入软盘，用它作为启动盘，输入 boot floppy 来启动。详细内容参阅 INSTALL.sparc64。

请确保你的软盘无坏道，已经正确格式化。否则很可能会安装失败。

你也可以将 CD3:4.4/sparc64/miniroot44.fs 写入磁盘中的 swap 分区， 然后在启动时输入 boot disk:b 。

如果以上都不行，你可以按照 INSTALL.sparc64 中的描述通过网络来启动安装。

OpenBSD/alpha:

将 FTP:4.4/alpha/floppy44.fs 或 FTP:4.4/alpha/floppyB44.fs (依赖于你的机器)写入软盘，用它作为启动盘，输入 boot dva0来启动。详细内容参阅 INSTALL.alpha。

请确保你的软盘无坏道，已经正确格式化。否则很可能会安装失败。

OpenBSD/armish:

连接串口之后，Thecus 能直接通过网络用 tftp 或 http 启动。使用 fconfig 配置网络，重置之后，加载 bsd.rd，详细信息请参阅 INSTALL.armish 。 IOData HDL-G 只能从 EXT2 格式分区启动。进入 linux，复制"boot"和"bsd.rd"到第一个分区 wd0(hda1)， 然后加载和运行 bsd.rd，保留 wd0i(hda1) 上的 EXT2 分区。请参阅 INSTALL.armish 以获得更多信息。

OpenBSD/hp300:

按照 INSTALL.hp300 的相关说明通过网络来启动安装。

OpenBSD/hppa:

按照 INSTALL.hppa 或 hppa 平台的相关说明通过网络来启动安装。

OpenBSD/landisk:

将 miniroot44.fs 写入 CF 卡或磁盘的开始，正常启动后安装。

OpenBSD/mac68k:

正常启动 MacOS，将 FTP:4.4/mac68k/utils 下的程序 “BSD/Mac68k Booter” 解压到硬盘。用 bsd.rd 内核文件的位置配置 “BSD/Mac68k Booter”，启动后进入安装程序。更多相关信息请参阅 INSTALL.mac68k 。

OpenBSD/mvme68k:

可以制作启动磁带或通过网络来安装。
网络启动需要支持 NIOT 和 NBO 调试命令的 MVME68K BUG 版本。 更多相关信息请参阅 INSTALL.mvme68k 。

OpenBSD/mvme88k:

可以制作启动磁带或通过网络来安装。
网络启动需要支持 NIOT 和 NBO 调试命令的 MVME88K BUG 版本。 更多相关信息请参阅 INSTALL.mvme88k。

OpenBSD/sparc:

从提供的 ISO 安装文件引导，根据你所用的 ROM 版本， 需用到下面两个命令中的一个。

ok boot cdrom 4.4/sparc/bsd.rd
或
> b sd(0,6,0)4.4/sparc/bsd.rd

如果你的 SPARC 系统没有 CD 驱动器，可以通过将 floppy44.fs 写入软盘， 使用软盘来启动安装。更多的信息请参阅 FAQ 4.3.1。根据 ROM 版本的不同， 从软盘启动安装需要下面两个命令中的一个。

ok boot floppy
或
> b fd()

请确保你的软盘无坏道，已经正确格式化。否则很可能会安装失败。

如果你的 SPARC 系统没有软驱和 CD，你可以制作可启动磁带， 或者通过网络来安装。相关内容在 INSTALL.sparc 中。

OpenBSD/sgi:

将 cd44.iso 刻录到光盘，将其放入光驱中，从系统维护菜单中选择 Install System Software 进行安装。

如果没有光驱，可以通过 DHCP 或 tftp 连接到网络服务器的话，用 bootp()/bsd.rd 来引导启动安装。更多相关信息请参阅 INSTALL.sgi。

OpenBSD/vax:

用 mopbooting 通过网络启动来安装，相关信息请参阅 INSTALL.vax。

OpenBSD/zaurus:

用 Linux 内置的图形化安装程序 ipkg 来安装 openbsd44_arm.ipk 包。 重启之后，即可运行。更多信息请参阅 INSTALL.zaurus。

关于源代码的说明:

src.tar.gz 包含的源代码文件开始路径是 /usr/src。 该文件包括除了内核代码之外的所有源代码，内核代码位于单独的档案文件中。 解压方法:

# mkdir -p /usr/src
# cd /usr/src
# tar xvfz /tmp/src.tar.gz

sys.tar.gz 包含的源代码文件路径开始是 /usr/src/sys。 该文件包括了重建内核需要的所有源代码。解压方法:

# mkdir -p /usr/src/sys
# cd /usr/src
# tar xvfz /tmp/sys.tar.gz

这些文件是 CVS 检出格式。可以使用匿名 CVS 服务器基于它们获得最新的版本。基于这些文件更新，比完全重新从 CVS 检出的速度要快得多。

如何升级

如果你已经安装了OpenBSD 4.3，不想重新安装，可以在升级指南中找到升级方法和忠告。

使用 ports 的方法

也提供了 ports 的档案文件。解压方法:

# cd /usr
# tar xvfz /tmp/ports.tar.gz
# cd ports

ports/ 子目录是 OpenBSD ports 版本库的检出副本。假如你不了解 ports， 请浏览 ports 页面。该文件并非是如何使用 ports 的手册， 它只是 OpenBSD ports 系统用户的初级读本。

The ports/ 目录是我们从 CVS(如果你不熟悉 CVS，请参阅手册 cvs(1)) 检出的 ports 副本。与我们的代码一样，ports 也可以通过匿名 CVS 服务器更新。因此，为了确保版本是最新的，必须使 ports/ 在可读写的介质中， 更新的命令是:

# cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_4_4

[当然，在实际操作时需要将本地目录和服务器名称替换成你的 ports 所在位置和较近的匿名 CVS 服务器。]

注意大部分的 ports 可以通过 FTP 获得预先编译的二进制包。如果发现问题，会为 4.4 版本发布升级包。

如果你有兴趣观察 ports 的变动信息，或者帮助我们，或者只是想获得更多的信息， 请加入邮件列表 ports@openbsd.org 。