xref: /openbsd/etc/root/root.mail (revision 5fa58d18)

From deraadt@do-not-reply.openbsd.org Tue Dec  1 04:50:00 MDT 1999
Return-Path: root
Date: Tue Dec  1 04:50:00 MDT 1999
From: deraadt@do-not-reply.openbsd.org (Theo de Raadt)
To: root
Subject: Welcome to OpenBSD 2.6!  Secure by Default!

This message attempts to describe the most basic initial questions that a
system administrator of an OpenBSD box might have.  You are urged to save
this message for later reference.

For more information on how to setup your OpenBSD system, refer to the
"afterboot" man page (ie. after you exit the mail subsystem, type
"man afterboot" ).  If you are not familiar with how to read man pages, type
"man man" at a shell prompt and read the entire thing.  Pay specific
attention to the "man -k keyword" option, which will permit you to find the
man page you are looking for easier.  The GNU "info" subsystem is also
installed with further documentation resources; to read info pages type "info".
(The info subsystem behaves like the popular emacs editor).

If you have installed the X11 packages during the install process, you can find
further information regarding configuration in the file /usr/X11R6/README.

Several popular binary packages (pre-compiled applications) are available
for most architectures.  If you installed from a CD-ROM the packages
are on the same CD-ROM you installed from in the directory 2.6/packages.

CD-ROM Space permitted us to include the following packages for the most common
architectures:

    Xaw3d-1.5.tgz	    aalib-1.2.tgz	autoconf-2.13.tgz
    bash-2.03.tgz	    bison-1.27.tgz	bzip2-0.9.5d.tgz
    compface-1.0.tgz	    emacs-20.3.tgz	enscript-1.6.1.tgz
    ethereal-0.7.4.tgz	    fetchmail-5.1.0.tgz	gettext-0.10.35.tgz
    ghostscript-5.10.tgz    gimp-1.1.9.tgz	glib-1.2.4.tgz
    gmake-3.77.tgz	    gnuplot-3.7.tgz	gtk+-1.2.4.tgz
    gv-3.5.8.tgz	    id-utils-3.2d.tgz	iozone-3.9.tgz
    jpeg-6b.tgz		    m4-1.4.tgz		ircii-2.8.2-epic3.004.tgz
    metamail-2.7.tgz	    mm-1.0.11.tgz	mpeg_lib-1.2.1.tgz
    nmh-1.0.tgz		    pine-4.10.tgz	netpipes-4.1.1-export.tgz
    png-1.0.3.tgz	    screen-3.7.6.tgz	sharutils-4.2.tgz
    sniffit-0.3.5.tgz	    tar-1.13.tgz	tcl-8.0.5.tgz
    tcsh-6.09.00.tgz	    tiff-3.4b37.tgz	tk-8.0.5.tgz
    unzip-5.40.tgz	    wget-1.5.3.tgz	xcolors-1.3.tgz
    xntp3-5.93e-export.tgz

These and many other packages are also available via ftp at
	ftp://ftp.openbsd.org/pub/OpenBSD/2.6/packages/
If you do not find a package you want on the CD, please go look at your
nearest FTP mirror site.

Select your architecture and download the tarballs of your choice.  For example
to install the emacs package for i386, execute
  # mount /dev/cd0a /cdrom
  # pkg_add /cdrom/2.6/packages/i386/emacs-20.3.tgz
or alternatively install them via FTP thus
  # pkg_add ftp://ftp.openbsd.org/pub/OpenBSD/2.6/packages/i386/emacs-20.3.tgz

Other important packages which are not permitted on the CD (due to patents) are
available on our FTP servers (as described above).  In particular, we provide
the USA and international versions of PGP.  The filenames are:
	pgp-intl-2.6.3-tgz
	pgp-usa-2.6.3-tgz

Two OpenBSD libraries (libssl and libcrypto, based on OpenSSL) implement many
cryptographic functions which are used by OpenBSD programs like ssh, httpd, and
isakmpd.  Due to patent licensing reasons, full versions of those libraries may
not be included on the CD -- instead the base distribution contains libraries
which have had a few troublesome routines removed -- the programs listed above
will not be fully functional as a result.  Libraries which _include_ the
troublesome routines are available and can be FTP installed, as long as you meet
the follow (legal) criteria:
  (1) Outside the USA, no restrictions apply. Use ssl26.tar.gz.
  (2) Inside the USA, non-commercial entities may install sslUSA26.tar.gz.
  (3) Commercial entities in the USA are left in the cold, due to how the
      licences work.  (This is how the USA crypto export policy feels to the
      rest of the world.)
If you did not install the ssl package yet, it is easily installed at any time
(see the afterboot(8) and ssl(8) manual pages).

You are STRONGLY urged to use ssh instead of telnet, rlogin, or rsh!

ssh is included in OpenBSD systems which have shared libraries (i386, sparc,
mips, m68k), and relies on the ssl26.tar.gz package, which contains the
patented RSA code.  This package is available on all our FTP servers, but NOT
included on the CD. During the system install, this package was probably
already installed (use pkg_info(1) to see if ssl26 or sslUSA26 are installed).

On non-shared library systems (powerpc, m88k, alpha) you should install one
of the ssh packages provided on the FTP sites:
	ssh-intl-1.2.27.tgz
	ssh-usa-1.2.27.tgz

Significant efforts were made to centralize all system configuration in the
/etc directory.  You should be able to find each of the configuration files
you seek there, lightly documented.  In particular, much of the configuration
has been centralized in the file /etc/rc.conf.  You should not need to ever
edit the file /etc/rc.   The files /etc/rc.securelevel and /etc/rc.local exist
for this purpose; the first is run before the system has gone into secure
mode; the second is run afterwards (if in doubt, add your tools to rc.local).

Please refer to our web pages for any other questions you might have.
	http://www.OpenBSD.org

OpenBSD is free software.  You can do with it as you like, subject to very few
conditions (described at www.OpenBSD.org/policy.html).  But free software isn't
written without money.  Network links, hardware costs, release engineering
and testing work; all these things take money and significant effort on the
part of those who have made this OpenBSD release what it is.  Please reward the
developers who have made OpenBSD what it is, and thus make it possible for this
wonderful process to continue.  For more information on how you can help,
please see www.OpenBSD.org/goals.html and visit www.OpenBSD.org/donations.html
to see a list of those who have donated money, equipment, or other resources
to ensure OpenBSD continues.  (Thus far, most of those who have donated have
been developers themselves).

If you wish to ensure that OpenBSD runs better on your machines, please do us
a favor (after you have your mail system setup!) and type something like:
    dmesg | mail -s "Sony VIAO 505R laptop, apm works OK" dmesg@openbsd.org
so that we can see what kinds of configurations people are running.  As shown,
including a bit of information about your machine in the subject or the body
can help us even further.  We will use this information to improve device driver
support in future releases.  (Please do this using the supplied GENERIC kernel,
not for a custom compiled kernel, unless you're unable to boot the GENERIC
kernel).  The device driver  information we get from this helps us fix existing
drivers. Thank you!

(If you used 'mail' to read this message and it scrolled by too quickly,
type "more ."  If you wish to save it, use the "x" command.)