In some cases, the current dhcpd(8) is not quite as reliable as one would want in providing the requested data to the actual requestor. After some rounds of discussion and experimentation, David Gwynne (dlg@) is circulating a diff on tech@ that switches the daemon to use UDP sockets instead of bpf.

The motivation is summarized as,

tl;dr this replaces bpf with udp sockets in dhcpd, mostly to make it
better at replying with the ip that requests were sent to.

and the full message, with the subject dhcpd(8): use UDP sockets instead of BPF reads,

List:       openbsd-tech
Subject:    dhcpd(8): use UDP sockets instead of BPF
From:       David Gwynne <david () gwynne ! id ! au>
Date:       2025-06-13 3:29:20

tl;dr this replaces bpf with udp sockets in dhcpd, mostly to make it
better at replying with the ip that requests were sent to.

ive been hacking on this because of a problem at work, which i want to
solve by setting up a bunch of "anycast" dhcp servers. ie, i want to
have multiple dhcpd on separate servers with the same IP assigned
as an alias on all of them.

In a long series of commits, Robert Nagy (robert@) updated clang(1)/llvm/lld(1) in -current to version 19.1.7 (from version 16.0.6):

CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2025/06/11 06:54:56

Log message:
    import of llvm from LLVM 19.1.7
    
    Status:
    
    Vendor Tag:	LLVM
    Release Tags:	LLVM_19_1_7
    
    U src/gnu/llvm/llvm/.clang-format
[…]

Those building from source should follow the instructions in Following -current and using snapshots before making the leap.

Kristaps Dzonsons (known for mandoc(1), rpki-client(8), and much more) has written an article, Source code sandboxing, on sandboxing from the perspective of developers. It compares the facilities available under several operating systems, and requests relevant contributions.

As Undeadly readers might expect, OpenBSD's pledge(2) and unveil(2) receive favourable appraisal.

Kristaps' article refers to Sandboxing Adoption in Open Source Ecosystems, an academic article published on the subject.

[In 2016, Undeadly published Kristaps Dzonsons on pledge(2).]

Following a discussion on tech@ [initiated by a post with patch from Ted Unangst (tedu@)], the "TearFree" option has been backported to the xenocara modesetting(4) driver in -current:

CVSROOT:	/cvs
Module name:	xenocara
Changes by:	[email protected]	2025/06/09 12:18:36

Modified files:
	xserver/dix    : pixmap.c 
	xserver/hw/xfree86/common: xf86Mode.c 
	xserver/hw/xfree86/drivers/modesetting: dri2.c driver.c driver.h 
	                                        drmmode_display.c 
	                                        drmmode_display.h 
	                                        dumb_bo.c meson.build 
	                                        modesetting.man 
	                                        pageflip.c present.c 
	                                        vblank.c 
	xserver/hw/xfree86/modes: xf86Crtc.h xf86Rotate.c 
	xserver/include: displaymode.h pixmap.h 
	xserver/present: present.h present_screen.c 

Log message:
Backport TearFree page flips for the modesetting driver from X.Org maaster.

Work done by tedu@ based on previous diffs by jcs@ and stsp@.
One bug fix in master by me. tested and ok tb@. commit on behalf of tedu@

The option is on by default, so users of the relevant hardware can expect smooth(er) scrolling ahead.

Rafael Sadowski (rsadowski@), OpenBSD developer and prolific blogger, has been looking into file system performance optimizations on our favorite operating system, and is now sharing his tips and tricks in FFS optimizations with dirhash on his blog.

He leads in with a TL;DR:

tl;dr

Consider playing with sysctl vfs.ffs.dirhash_maxmem to increase the maximum dirhash cache.

That said, it is worth your time to read the whole thing!

Version 0.113 of Game of Trees has been released (and the port updated):

• tweak 'got status' and 'got add' ignores handling for better git compatibility
• improve redundant pack detection during 'gotadmin cleanup'
• gotwebd: do not forget to initialize *ngroups argument for getgrouplist()
• fix default access for root and _gotd when gotsysd runs without config file
• fix bogus "unexpected privsep message" from gotsh during 'got send'
• fix a race in gotd notification processing causing notify process to exit

In a multi-part article, kraileth reviews the installers of various BSD operating systems.

Part 2 covers OpenBSD:

https://eerielinux.wordpress.com/2025/04/27/installing-bsd-in-2025-part-2-a-critical-look-at-openbsds-installer/

That's how it looks from the outside coming in, folks!

Fresh from the just concluded j2k25 hackathon in Nara, Japan, Rafael Sadowski (rsadowski@) has published his report on his blog:

Week 2: The j2k25 Japan Hackathon

We arrived in Nara during the late afternoon. After checking into our hotel, goda@, my wife and I headed straight to the hack room. My initial thought was to finally do some ports hacking to warm up and create a plan for the upcoming week. I hadn't had much opportunity for focused thinking during our busy week in Tokyo.

As soon as I booted OpenBSD, kn@ appeared. I was genuinely happy to see him again, and we spent the first half hour catching up. Then he mentioned we were about to head to the team event. This completely derailed my planned "first day" approach - instead of keyboard and OpenBSD work, the evening was filled with excellent food, beer, and funny conversations.

Reining in file system access is hard to get right, even for OpenBSD developers.

In a message to tech@ titled openat(2) is mostly useless, sadly Theo de Raadt (deraadt@) describes how the openat(2) family of system calls has failed to live up to expectations in practice, and he proposes changes that may improve the situation.

Theo writes,

List:       openbsd-tech
Subject:    openat(2) is mostly useless, sadly
From:       "Theo de Raadt" <deraadt () openbsd ! org>
Date:       2025-05-28 14:03:29

The family of system calls related to openat(2) are mostly useless in
practice, rarely used. When they are used it is often ineffectively or
even with performance-reducing results.

     int
     openat(int fd, const char *path, int flags, ...);

These are the others: