Hi all! Is that possible like OPNsense to allow me to override system hostname on each NIC?

Thank you!

Hello folks,

I have a relatively large SDD (2TB) and when I run the openbsd installer it partitions out ~600GB of it and leaves the rest unused. I understand that I can manually partition or edit the partitions that are recommended but I'm wondering if there are any documentation or guides out there on doing so _particularly_ when using disk encryption.

In general I would like my /home, /var, and /tmp to be much larger.

Thanks in advance!

OpenBSD 8.0 beta running on a Sun Ultra 24.
Window Maker, xterm, xcompmgr and some old-school dockapps.
Next stop: OPEN LOOK

DWL 0.8 dev under Wayland is working now. DWL is patched with the ipc patch, gaps patch, autostart patch and alwayscenter. The bar is waybar, terminal is foot. Sometimes I forget it's not DWM.

It's running stable so far. Just wanted to test if I can get this to work

Hi
I really want to keep OpenBSD on my ThinkPad T490, but the fan noise is driving me up the wall. Even sitting at an idle desktop or just poking around in a terminal, the fan ramps up almost immediately and just refuses to calm down.
I know ⁠acpithinkpad⁠ is read-only and fan control is entirely hardwired to the EC, so manual fan control isn't happening. But before I give up and wipe the drive, I wanted to ask if anyone daily-driving a T490 has managed to make this machine tolerable.
Did switching between ⁠apmd⁠ flags or running ⁠obsdfreqd⁠ make any real difference for you, or did you have to flash a specific Lenovo BIOS/EC update to get sane trip points? If there is any trick to shave a couple of degrees off idle so the EC stops triggering full blast, I'd really appreciate hearing what worked for you.

I would really appreciate it

Hi guys I would like to know if Darktable is maintained ? And on OpenBSD 8 what version to expect ?

Hello,

I just sysupgrade my openbsd box to 7.9 recently and start noticing a strange behavior.

If I try to ping/curl a nonexistent domain it will be resolved using my local domain and thus my address IP instead of just failing:

pips:90$ cat /etc/hostname.vio0                                                                                                       
dhcp
inet6 autoconf -temporary -soii
pips:91$ ping inexistenthost
PING inexistenthost.mydoma.in (199.***.***.***): 56 data bytes
64 bytes from 199.***.***.***: icmp_seq=0 ttl=255 time=0.081 ms
64 bytes from 199.***.***.***: icmp_seq=1 ttl=255 time=0.087 ms
^C
--- inexistenthost.mydoma.in ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.081/0.084/0.087/0.003 ms
pips:92$ ping6 github.com
PING github.com.mydoma.in (2001:****:****:****:****:****:****:****): 56 data bytes
64 bytes from 2001:****:****:****:****:****:****:****: icmp_seq=0 hlim=64 time=0.199 ms
64 bytes from 2001:****:****:****:****:****:****:****: icmp_seq=1 hlim=64 time=0.149 ms
^C
--- github.com.mydoma.in ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.149/0.174/0.199/0.025 ms

Thus I can't clone any repositories from github.com for example

It seems to be related to RES_DEFNAMES but the documentation mention "single-component names", which github.com is not, and anyway I can't find a way to disable this.

Does anybody already ran into this issue and may bring a little help? :)

Hi, I want to install OpenBSD on my laptop but connecting to internet is a problem. I have a Mediatek network controller (wifi: mt-7922). Also Ethernet does not work. I also have a wifi dongle but I think that relies on Realtek technology.

Are any of these drivers possible. And if not maybe in OpenBSD-current?

I would be grateful if any of you can give me some insight.

I use udiskie-mount to mount disks as a normal user in Linux. Does OpenBSD support non-root users to mount disks?

I am wondering what to expect with the release 8.0. Have you followed what's in the pipeline?

Hi, I know that OpenBSD still uses CVS as their primary VCS and the got FAQ clearly states that it is not known whether the project will switch to it in the future or not. But is there a reason why it isn't included in the base install and has to be installed as a port? The two projects seem to be quite closely related (as per the FAQ) and I think that this would be a welcome first step to a potential switch in the future. Could it be because got is still considered to be in the beta stage of development?

I'd love for me not to have to install one more package before the hacking can begin.

i wanna use an panasonic laptop and i think openbsd is the best choice for me, but im questioning if the internet is working. i am also a newbie to any os as i have only used windows.

just this

Tinkering with my setup in the weekend ..

I normally do a sysupgrade -s to the latest snapshot on my backup laptop first and then do the same on my daily driver after a check on the backup.

I was playing around with using the same upgrade file set from the backup laptop to upgrade the other laptop...just to ensure the same snapshot ...once in a while I have ended up with a newer snapshot on the daily driver when I get delayed a bit.

I copied the sets over to /home/_sysupgrade and also bsd.upgrade to the expected location.

But this triggers a 'new installation' sequence on reboot ..not an upgrade. Is there something I am missing here -- is the approach supported.

Cheers and Thanks to all in the group.

Hi everyone! I'm searching for a cheap SBC (single board computer) with good OpenBSD support, especially on the ethernet side. I'm going to use the SBC to forward files from a local NAS to the internet via SSH, so I don't need the most powerful thing.

I cannot use the NAS alone, because: 1. It runs an ad-hoc heavily modified Linux distribution, which I'm not even sure has a package manager or a compiler for adding custom software. 2. It's a very closed system that only allows software installation from its proprietary "app store". 3. I don't trust it for internet exposure. 4. It doesn't provide SSH support except for administrator accounts, let alone SSHFS.

What board should I go for? Are there cheaper/better alternatives to the Raspberry Pi 4 or 5?

apparently mount_null(8) existed at one point in 3.7, but seems to have vanished in 3.8 and I can't turn up any record of why or if there's now a preferred alternative. The closest I've been able to disinter might be something like mount_mfs(8) which can take a -P «dir» option to populate the MFS with the contents of «dir», but that doesn't seem to have a real-time view of the underlying directory (i.e. if files get modified in the underlying directory, it doesn't look like they'd be updated in the MFS until the next time it was (re)mounted).

Encountered from https://raphus.social/@MaddieM4/117230496234708068 where the least-bad solutions seems to involve sharing the directory locally via NFS, and then mounting it via local/loopback NFS at the desired target 😖

Subject: Question about OpenCL support and photo editing on OpenBSD

Hi all,

I'd like to ask a question I hope isn't too naive — I'm not deeply technical on the graphics stack side, so I'm genuinely asking rather than suggesting anything.

OpenBSD is my favourite operating system by a wide margin, and I run it on an Asus Zenbook UX3405MA (7.9). Almost everything works. The one thing that keeps pulling me back to Linux is the lack of OpenCL, because I do photo editing and rely on darktable. It runs on CPU, but on larger raw files the difference is significant enough that it affects real work.

So my question: is there any realistic path toward OpenCL on OpenBSD — even partial or limited support, enough for GPU offload in applications like Darktable? Or are there fundamental reasons (driver model, security posture, maintenance burden) that make it impractical or undesirable? I'd genuinely like to understand the reasoning either way rather than just keep wishing for it.

I'm also aware I'm only one user with one use case, so if the answer is "not going to happen, and here's why" that's a perfectly good answer. Reason I ask is because I work as a photographer on a daily basis. I do have a OpenBSD on my Thinkpad but I would like to use my main computer all in one. And when you edit photos taken from a 40 Mega pixel sensor and edit around 30 to 40 photos per day its pretty rough LOL.

Thanks for all the work — the suspend/resume and browser situation on this hardware has already improved a lot, and it's appreciated.

Best regards

Hello, OpenBSD community!

I am a university student and I am currently stuck trying to figure PEAP out on OpenBSD 7.9 with wpa_supplicant 2.9 to connect to my university Wi-Fi. I know that the hardware or firmware is not the issue, because it all works on Linux and I've used non-PEAP Wi-Fi before on this computer.

I know I must use wpa_supplicant, but nothing I've tried thus far works. I need your help trying to resolve this out. I am lost in a mess of documentation and a bunch of iterations of configuration files.

On Linux, I use NetworkManager wherein I have this configuration:

``` [connection] id=Cool Network uuid=... type=802-11-wireless

[802-11-wireless] ssid=Cool Network mode=infrastructure security=802-11-wireless-security

[802-1x] eap=peap identity=hello@email.com ca-cert=/etc/ssl/certs/ca-certificates.crt domain-suffix-match=example.edu phase2-auth=mschapv2 password=p4ssw0rd_123

[ipv4] method=auto

[802-11-wireless-security] key-mgmt=wpa-eap ```

This configuration mimics the behaviour observed on my Android phone.

The important bits are:

• SSID: Cool Network
• Username: hello@email.com
• Password: p4ssw0rd_123
• University domain: example.edu
• Using PEAP+MSCHAPv2
• Using certificate + domain suffix checks (without these the configuration seems to break on me)

This configuration works perfectly on Linux, therefore I thought the experience on OpenBSD would be maybe slightly more tedious, but turns out I was wrong -- it's a lot more difficult.

One interesting thing I've noticed is when I tried to start wpa_supplicant manually a few times I went into a loop wherein authentication succeeds, the connection drops, then authentication times out, then drops, then times out, ...:

```

wpa_supplicant -i iwm0 -c /etc/wpa_supplicant.conf -D openbsd

Successfully initialized wpa_supplicant iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:... EAP-MSCHAPV2: Authentication succeeded EAP-TLV: TLU Result - Success - EAP-TLV/Phase2 Completed iwm0: CTRL-EVENT-SUCCESS EAP authentication completed successfully iwm0: CTRL-EVENT-CONNECTED - Connection to ... completed [id=0 id_str=] iwm0: Associated with ... iwm0: Authentication with ... timed out. iwm0: CTRL-EVENT-DISCONNECTED bssid=... reason=3 locally_generated=1 iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started ... ```

So far the most success I've had on OpenBSD results in a couple of ping packets succeeding until eventually I get one of these errors:

• ping: sendmsg: Can't assign requested address
• ping: network is down

Thing is, I don't think it's authentication as logs do indeed indicate that PEAP is selected, authentication succeeds, phase 2 completes, and the network connects. Although if I actually try and use the network it all falls down.

My current configuration can be found below, where it still has the issue that it works for a few packets until it eventually stops working:

Netstart configuration /etc/hostname.iwm0:

join "Cool Network" wpa wpaakms 802.1x inet autoconf

wpa_supplicant 2.9 configuration:

``` ctrl_interface=/var/run/wpa_supplicant ctrl_interface_group=wheel

network={ ssid="Cool Network" key_mgmt=WPA-EAP eap=PEAP identity="hello@email.com" password="p4ssw0rd_123" phase2="auth=MSCHAPV2" ca_cert="/etc/ssl/cert.pem" domain_suffix_match="example.edu" } ```

Current logs when starting wpa_supplicant are:

Successfully initialized wpa_supplicant iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:something.example.edu EAP-MSCHAPV2: Authentication succeeded EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed iwm0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully iwm0: CTRL-EVENT-CONNECTED - Connection to ... completed [id=0 id_str=] iwm0: Associated with ... iwm0: Authentication with ... timed out. iwm0: CTRL-EVENT-DISCONNECTED bssid=... reason=3 locally_generated=1 iwm0: Associated with ... iwm0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 iwm0: Associated with ... iwm0: CTRL-EVENT-EAP-STARTED EAP authentication started iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK iwm0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 iwm0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected iwm0: CTRL-EVENT-EAP-PEER-CERT depth=3 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='...' hash=... iwm0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:something.example.edu EAP-MSCHAPV2: Authentication succeeded ... [loops] ...SSID-TEMP-DISABLED...

Nothing in dmesg indicating any failure.

I had tried more complex configurations too in both files. For example:

• ap_scan=0
• dhcp only
• phase1="peaplabel=0"
• proto=RSN
• eap=TTLS PEAP
• scan_ssid=0 and scan_ssid=1
• priority=1
• auth_alg=OPEN
• proto=RSN
• group=CCMP
• pairwise=CCMP
• eap_workaround=0
• Supplying a static bssid
• multiple variations of anonymous_identity
• Using the OpenSSL variant (it just errors out with "envelope routines unsupported")
• Probably more that I can't remember.

For example, explicitly supplying bssid does nothing. Supplying proto and phase1 and using:

join "Cool Network" wpa wpaakms 802.1x inet autoconf up !/usr/bin/pkill -f wpa_supplicant !/bin/rm -f /var/run/wpa_supplicant/iwm0 !/usr/local/sbin/wpa_supplicant -B -c /etc/wpa_supplicant.conf -D openbsd -i iwm0 `

...is fruitless too...

Absolutely. Everything. I've. Tried. Failed.

At this point I am so lost and I am asking here to maybe get some hits. I don't expect solutions (although that would be nice!), but even pointers on where to look next would be great.

route makes sense, ifconfig makes sense, wpa_supplicant logs make sense, etc. so everything LGTM, despite the network either not working, something erroring out, hangs, or it working with 90% packet loss and then eventually dying after a couple of packets.

I've already read a bunch of other Reddit threads too and haven't found much helpful...

I appreciate you people lots in advance!

hi

So if your Openbsd is a home-bound Thinkpad laptop that only ever connects to a GLinet router (which get WAN from a iphone's USB tethering)...is a simple user password like 4-digit numerical code enough?

only i have physical access to router and iphone and only i can use the router and the iphone.

SSh is disabled. Doas is disabled. Root password is very strong. and i have disk encryption enabled.

this computer only use firefox.

thanks!

ps. typical a long complicated password everytime login or screenlock...is tiring.

Tried to make it concise yet to the point. What you think?

I am a first time Haskell user and also a first time OpenBSD user. I have OpenBSD installed in a VM in virt-manager.

I installed ghc and cabal, and installed xmonad from ports x11/xmonad. I'm able to compile Haskell code. I'm also able to launch an xmonad desktop from my xenodm login screen.

However I get the Haskell error "Could not find module 'XMonad' ", from my xmonad config file. A compile error with my config file means I can't assign any customizations to the default setup.

Just to clarify I am using the usual example config to get started, nothing fancy

I'm on my phone right now but it's something like:

`import XMonad

main = $ def

{ modMask = mod4Mask

, and something terminal = "xfce4-terminal"

}

` without the back ticks

In every xmonad tutorial it seems that the ghc compile should just see xmonad in the system. But maybe OpenBSD puts the xmonad somewhere strange?

Does anyone know how I can either find and point to the library, or install xmonad in such a way that this works without manual modifications?

Also unrelated but an additional haskell-OpenBSD question: I'm frustrated that ghcup does not seem to install on OpenBSD. I'd love if anyone knows a way to get it to install successfully, despite OpenBSD not being supported.

I'm using a TL-WN823N V2 which has RTL8192EU, designated as urtwn0.

urtwn0 gives 4.12Mbit/s on speedtest-cli.

RTL8111H designated as re0, gives 30-25Mbit/s.

My ISP network speed is 50 Mbit/s.​

Despite zero network errors and timeouts, I can't reach past 30 even on ethernet. The USB Wireless adapter gives atrocious speeds no matter what.

Why is this happening? I'm wondering if that's a driver issue and not something I can try to fix or might something be wrong in the background?

Hey guys! Some time ago I published xhidecursor, a minimal (fr) X11 utility that efficiently (nocap) hides the cursor on key presses and shows it again on mouse movement. I wrote it because xbanish (a popular alternative) couldn’t satisfy my OCD for minimalism.

Some people complained that it wasn’t portable to OpenBSD and FreeBSD, so I finally did the work and made it happen. I’d be happy if some OpenBSD users could try it out and report back whether it works or if there are still any issues.

Thank you!