OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.

I’ve been using vi like forever. I was never an Emacs guy and I can’t stand nano and alike. The only other editors I use are Mousepad and Vim.

As previously reported, Ori Bernstein is working on GEFS, the "Good Enough File System" imported to OpenBSD, and his EuroBSDCon 2026 presentation was very well received. In fact, the video is among the most frequently played from the conference.

I have recently switched to OpenBSD from Linux. I am pleased to say that almost everything works as it should, and I've smoothed over the few issues I noticed in the beginning. However, one problem I still have is that of NetBird.

I am a member of the infrastructure dept. of a student society, in which we use NetBird to restrict access to some of our services (e.g. SSH into the servers). I don't like it, but it's what we're stuck with.

I noticed that the client software is available on FreeBSD, but not on OpenBSD or NetBSD. Just in case it was simpler than it seemed, I cloned the source and attempted to build it. However, I got the following error output:

# github.com/netbirdio/netbird/client/system
system/info.go:186:16: undefined: checkFileAndProcess
system/info.go:192:10: undefined: GetInfo
system/info.go:235:11: undefined: GetInfo
system/info_source.go:151:10: undefined: GetInfo
# github.com/netbirdio/netbird/client/iface
iface/iface.go:31:34: undefined: configurer.WgInterfaceDefault
iface/iface_new.go:20:16: undefined: device.NewTunDevice
# github.com/netbirdio/netbird/client/internal/routemanager/systemops
internal/routemanager/systemops/routeflags_bsd.go:17:64: undefined: unix.RTF_WASCLONED
internal/routemanager/systemops/routeflags_bsd.go:61:16: undefined: unix.RTF_WASCLONED
internal/routemanager/systemops/systemops_bsd.go:159:19: undefined: syscall.RTF_LOCAL

I do not know Go, so I am clueless as to how this could be patched. Can anybody shed any light?

If it's simply impossible, there are workarounds; but it would be awesome if I could have it running natively on my machine.

A bit of a surprise, really, Wine is making its way to OpenBSD. An experimental port has been submitted, and early testing shows it can already run dozens of 64-bit Windows apps (including quite a few games).

The announcement comes from OpenBSD developer Thomas Frohwein, who made the proposed port public on the OpenBSD mailing list and describes it as possibly the most surprising port proposal of the year.

As Frohwein makes clear, getting Wine to work on OpenBSD has been a team effort with the bulk of the work being done by Andrii and Fabien. The biggest hurdle has been the %gs segment register. Wine needs this, but OpenBSD doesn’t allow applications to set GSBASE directly.

The breakthrough was a software workaround which uses the %gs prefix to generate the instructions, circumventing a major compatibility issue which had previously made getting Wine onto the OS so difficult.

The results are already very impressive. The dev team has successfully tested a good number of 64-bit Windows apps, and most run quite nicely. Even more surprisingly, a recent remaster of The Witcher 3 appears to run quite well (though again you do need to install vkd3d-proton to get the D3D12 via Vulkan to work).

Frohwein also posted links to screenshots and gameplay recordings to show off the progress. He pointed out that the gameplay in the recordings may look a bit less smooth than it actually is, as they were recorded directly from the system using FFmpeg.

Of course, there are still limitations. The biggest one is that WoW64 (Wine’s compatibility layer for running 32-bit Windows apps in a 64-bit environment) doesn’t currently work. The OpenBSD port is therefore limited to 64-bit Windows software.

The built-in Wine test suite is also disabled for now. Some of the tests need access to the X server, and some just hang (though the developers have not seen this in their own real-world testing with a large number of games).

For anyone wanting to play around with the port, Frohwein recommends starting with the 64-bit version of Notepad++ (a fairly light Windows app). He also suggests running Wine under a separate unprivileged user account until additional security restrictions can be implemented.

Importantly, Wine has not yet been officially accepted into the OpenBSD ports collection. The current submission is a work in progress which is being proposed for testing, feedback and review by the OpenBSD developers.

Still, given OpenBSD’s very strict security model and the technical difficulties of the task, getting Wine to run modern Windows apps and indeed some of the more demanding games is a significant accomplishment. If it does eventually make it into the official collection, it would go some way toward extending the range of software available to OpenBSD users.

For more details, see Frohwein’s announcement.

Proposed port brings 64-bit Windows apps within reach

Big fish. Small counter. Root shell.

In a move that hints strongly that the new OpenBSD release is about to drop soon, the LibreSSL project have announced the new stable releases.

We have to admit that even users of a well rounded operation system like OpenBSD sometimes encounter hardware that is not quite supported yet.

In their usual, unassuming fashion, the OpenSSH project have released a new version, release 10.6.

In a move that hints strongly that the new OpenBSD release is about to drop soon, the LibreSSL project have announced the new stable releases.

In Part 1 of this series, I laid out the foundational OpenBSD and Unbound architecture used to reclaim network sovereignty from an LG Smart TV. In Part 2, we saw how the OS holds the App Store hostage. In Part 3, I documented a stateful TCP kill switch that actively terminates Netflix streams if telemetry is blocked.

As I mentioned in my Dead Software Walking: The ongoing evolution of relayd(8) and httpd(8) post, development of relayd(8) and httpd(8) was revived.

I wanted to run Ubuntu 26.04 Server inside an OpenBSD vmm(4) guest. OpenBSD’s VM console is serial only, and the Ubuntu Server ISO does not boot correctly on a serial console out of the box. This post shows how to rebuild the Ubuntu ISO with the right kernel and GRUB options so it installs cleanly through vmctl console.

Filesystems on OpenBSD have come in two varieties, UFS1 or UFS2. Ori Bernstein has set out to possibly introduce a new option, the "Good Enough File System", which Ori describes as

Making your access logs cleaner by restricting who can connect to your VPS

In the late 1970s and the 1980s, the best choice for high-performance, high-capacity storage was so-called SMD disks.

It's a big day for routing security aficionados. The OpenBGPD project (a sub-project of the OpenBSD project) have announced version 9.9 of rpki-client(8), with various improvements, enhancements and fixes.