OpenBSD 8.0 Brings Expanded Hardware Support, Security Enhancements, and Virtualization Improvements

OpenBSD 8.0 is a substantial upgrade bringing broader hardware compatibility, enhanced security, an expanded virtual address space, and support for modern architectures, including Intel Arc A-Series graphics support, ARM64 hibernation, RISC-V improvements, and enhanced virtual machine support.

Key hardware and virtualization improvements in OpenBSD 8.0 include a larger virtual address space for the AMD64 kernel, expanded from 4 GB to 512 GB, enabling it to map graphics cards with more than 4 GB of VRAM; support for multi-processor virtual machines through

vmm

/

vmd

, with up to 64 virtual CPUs per guest and improvements to virtual hardware and guest compatibility; expanded RISC-V support, including the 'V' vector extension and Advanced Interrupt Architecture, improving compatibility with newer processors and platforms; and arm64 hibernation support, alongside faster swap encryption using AES instructions.

Although OpenBSD 8.0 introduces support for the Intel Arc A-Series GPUs, based on the DG2/Alchemist architecture, NVIDIA GPUs remain unsupported, partially due to the fact that NVIDIA does not provide proprietary binary drivers for OpenBSD, unlike Linux and FreeBSD.

OpenBSD 8.0 also expands peripheral support, including the riscv64 K3 PCIe/USB3 combo PHY, the SpacemiT K3 SoC and PCIe controller, as well as the Intel E610 and Panther Lake and Wildcat Lake Ethernet devices. New drivers are now available for Samsung Advanced BIOS Interface (SABI), Rockchip OTP memory, and Samsung laptop battery monitor. Wireless adapters support has been significantly expanded as well, including support for the Qualcomm Technologies WCN7850 wireless network in the qwz driver.

The

httpd

daemon in OpenBSD 8.0 has received several enhancements, including support for custom HTTP headers, header block/drop rules for request filtering, improved default crypto methods for HTTPS, and cache control for static files.

On the security front, OpenBSD 8.0 continues to emphasize security as a defining priority with an outstanding track record:

We remain proud of OpenBSD's record of more than thirty years with only two remote holes in the default install.

The new release incorporates LibreSSL 4.4.0, which introduces numerous compatibility-layer fixes for AIX, FreeBSD, macOS, MinGW, NetBSD, and especially Windows, alongside various internal improvements. It also brings OpenSSH 10.6, which disables SSH Compression using LZ77 and rejects

$

and

\

characters in command-line usernames to mitigate potential shell injection vulnerabilities, among other enhancements.

A Hacker News thread about the new release highlighted several important aspects of OpenBSD. User ctolsen emphasized the system's simplicity and its adherence to traditional Unix philosophy:

OpenBSD just feels like a *nix system is supposed to.

ps aux

is like 10 entries at first.

pf

makes so much sense.

man

pages are consistently incredible. The security/cryptography focus, managing services, pledge/unveil...

Longtime OpenBSD user nanolith, who has used the system for nearly 20 years, praised its stability and consistency across upgrades, noting that "it's so stable that I barely notice changes when I upgrade until I go hunting for them". However, he also points out that OpenBSD might not be the best choice for large servers, given its lack of support for advanced filesystems like ZFS, Btrfs, or GeFS.