你(仍然)在使用OpenBSD吗?
Why use OpenBSD?

原始链接: https://www.tumfatig.net/2025/why-are-you-still-using-openbsd/

## OpenBSD:摘要 OpenBSD是一个自由的、类UNIX操作系统,于1995年从NetBSD分叉而来,优先考虑**可移植性和安全性**。它支持超过10种硬件架构,并拥有强大的开发流程,从而产生了OpenSSH和LibreSSL等在其他地方广泛使用的软件。 为什么选择OpenBSD? 除了仅仅能够选择之外,它**功能丰富、易于使用,并提供大量的预构建二进制软件包**(对于amd64大约有12,000个),涵盖了服务器(Apache、PostgreSQL)和工作站(Firefox、LibreOffice)的需求。 跨平台的安装非常简单,拥有出色的文档和清晰的文件系统组织。系统管理通过`rcctl(8)`统一,软件包管理通过`pkg_info`、`pkg_add`和`pkg_delete`处理。安全性至关重要,具有特权分离等创新以及`pledge(2)`和`unveil(2)`等工具。 最终,OpenBSD为愿意探索不同方法的人们提供了一个安全、稳定且文档完善的操作系统。

## 为什么使用OpenBSD? - 摘要 这个Hacker News讨论探讨了选择OpenBSD的原因,强调了它与Linux相比的优势和劣势。许多用户报告了在OpenBSD上建立公司和运行服务器的积极经验,称赞其**默认安全**方法(一切禁用直到明确启用),易于理解整个系统,以及出色的防火墙配置(pf)。**Pledge和Unveil**等功能因限制进程能力、增强安全性而受到赞扬。升级通常被认为可靠。 然而,人们对性能表示担忧——OpenBSD在某些工作负载下可能比Linux慢,并且可能存在硬件支持的限制。一些用户指出,与Linux相比,学习曲线更陡峭,社区支持不够广泛。 讨论还涉及BSD许可证与GPL、文档质量以及灵活性与安全性之间的权衡。虽然Linux提供更广泛的硬件兼容性和更大的用户群,但OpenBSD吸引了那些优先考虑安全、文档完善且概念清晰的操作系统的人,即使这意味着牺牲一些性能或便利性。 许多用户强调它适用于特定用例,例如安全性至关重要的防火墙和服务器。
相关文章

原文

       784 words, 4 minutes

Last week-end, I was invited to the UNIX Social Camp in Dijon, France to talk about the reasons I still use OpenBSD these days and why should others do so; or at least, have a look at OpenBSD .

This post is an English transcription of the original French slides that are available here .


OpenBSD is a free UNIX©-like operating system.
It has been forked from NetBSD in 1995.

The development process concentrates on portability and security.
There are about 10+ supported hardware architecture.

Some of the software (OpenSSH, LibreSSL, pf…) developed for OpenBSD are widely used in other free and proprietary software.

The official OpenBSD website is https://www.openbsd.org .


The code is open and the sources freely available: OpenBSD CVSweb .

The installation media can be freely downloaded from OpenBSD CDN .

The system works on various hardware platforms: OpenBSD supported platform list .

The system is compatible with most virtualisation platforms: Qemu, KVM, Virtualbox, VMware, bhyve, vmd…


It is developed and maintained with security in mind .
It ships with loads of security innovations : privilege separation and revocation, stack protector, randomization,
pledge(2) , unveil(2) , etc…

Here are a few server-based options:

It can also be used as a workstation thanks to integrated software like:

And many more…


A whole set of Free and OpenSource Software is available as binary packages for every supported architecture.

  • amd64: ~12000
  • arm64: ~12000
  • powerpc: ~8000
  • risc64: ~10000
  • sparc64: ~9000
  • etc …

Server-oriented highlighted software for OpenBSD 7.7 include Apache, Asterisk, Go, OpenJDK, MariaDB, Node.js, OpenLDAP, PHP, Postfix, PostgreSQL, Ruby, Rust, …

Workstation-oriented highlighted software for OpenBSD 7.7 include Chromium, ffmpeg, Gnome, KDE, Krita, LibreOffice, Mozilla Firefox, Mozilla Thunderbird, (Neo)Mutt, Python, Shotcut, TeX, (neo)vim, Xfce, …


The text-mode installation wizard works the same way on the various architecture and connection type (COM0, VGA, HDMI, KVM-IP…).

The documentation man(1) is complete and a welcome message pointing to afterboot(8) helps you start with using OpenBSD. The overall filesystem organisation is described in hier(7) .

Service management configuration is locate in /etc/rc.conf.local.
Service management is available using a single rcctl(8) command.

The OS material is installed throughout /.
Third-party material is installed under /usr/local.

The system configuration examples are located inside /etc/examples/.
All software configuration defaults to /etc/.

The dedicated fw_update(8) command manages non-free firmwares.

Binary packages management includes dealing with dependencies and options .
Three main commands deal with package management: pkg_info(1) , pkg_add(1) , pkg_delete(1) .

Security patches are managed using the syspatch(8) command.
System upgrades are driven by the sysupgrade(8) commands.


Strength lies in differences, not in similarities.

– Stephen Covey


RTFM! As in “do your homework before asking”.

Self-advertising, if you liked this content:

Here are a couple of bookmarks I gathered:

Note that those content may not have been updated recently. That said, the content is probably still pretty accurate.


Thanks again to the UCS for inviting me.

And if you wonder how the slideware was produced, I used the remark slideshow generator, the Atkinson Hyperlegible Next Medium and the Comic Code Ligatures Medium fonts. Because not everything is Google Docs and Arial! 😈

联系我们 contact @ memedata.com