OpenBSD 8.0 Released With Linux 6.18 DRM Drivers and SMP Virtualization Support
The new OpenBSD release brings updated graphics drivers, expanded virtualization capabilities, and Clang as the default compiler for all supported architectures.
Key points
- OpenBSD 8.0 includes DRM graphics drivers updated to Linux kernel version 6.18.53.
- The vmm virtualization system now supports up to 64 virtual CPUs per guest.
- Clang/LLVM 22 serves as the base compiler for all architectures, including sparc64.
OpenBSD version 8.0 has been officially released, introducing significant updates to its graphics stack, virtualization capabilities, and development toolchain. This release marks the completion of a cycle that included an Edmonton hackathon, resulting in enhanced hardware support and performance improvements across multiple platforms.
The most prominent addition involves the Direct Rendering Manager graphics drivers. Developer Jonathan Gray updated the inteldrm, radeondrm, and amdgpu drivers to align with Linux kernel version 6.18.53. This update adds support for Intel Arc A-Series graphics cards, specifically the DG2 and Alchemist architectures. The release also increases kernel virtual addresses on amd64 systems to 512 gigabytes, enabling the mapping of more than 4 gigabytes of video memory for GPU compute tasks.
Virtualization and Toolchain Updates
Virtualization capabilities have been significantly expanded through work by Mike Larkin and Dave Voutila. The vmm and vmd(8) subsystems now support symmetric multiprocessing guests with up to 64 virtual CPUs per virtual machine. This enhancement allows for more complex and resource-intensive virtualized environments within the OpenBSD operating system.
The development toolchain has been standardized across all supported architectures. Clang/LLVM 22 is now the default base compiler, replacing previous versions. This includes updated support libraries such as libc++, compiler-rt, and libunwind. Notably, OpenBSD/sparc64 has switched to Clang by default, making it the last significant architecture to make this transition. This change establishes OpenBSD as the only operating system supporting sparc64 with a modern toolchain.
Hardware and Network Enhancements
Several new hardware drivers have been added to improve device compatibility. The qwz(4) driver provides support for Qualcomm WCN7850 "ath12k" WiFi devices. Additionally, the sambat(4) driver enables battery status monitoring, including cycle count and charge information, for Samsung Galaxy Book4 Edge machines running on Snapdragon arm64 processors.
Network and security features have also seen improvements. The httpd(8) web server now supports blocking and filtering rules based on received HTTP headers, such as User-Agent strings. Swap encryption on amd64 and arm64 platforms has been accelerated by utilizing AES CPU instructions. Furthermore, OpenBSD/arm64 and OpenBSD/riscv64 boards can now use blinking LEDs to indicate system load averages.
What should you do?
Security and technology professionals should review the release notes for OpenBSD 8.0 to assess the impact of the new graphics drivers and virtualization features on their infrastructure. Users of Intel Arc A-Series cards or Qualcomm WCN7850 WiFi devices should test the new qwz(4) and DRM drivers in non-production environments. Administrators relying on httpd(8) should evaluate the new header-based filtering rules for potential security enhancements.
What to do and how to stay safe: OpenBSD
- Verify that your current hardware, particularly Intel Arc graphics and Qualcomm WiFi cards, is compatible with the new drivers before upgrading.
- Test the increased virtual CPU limits in vmm/vmd(8) to ensure your virtualization workloads can benefit from the expanded SMP support.
- Review your httpd(8) configurations to implement or adjust header-based filtering rules for improved web server security.
- Monitor system performance on amd64 and arm64 platforms to observe the impact of accelerated swap encryption using AES CPU instructions.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Which graphics cards are newly supported in OpenBSD 8.0?
The release adds driver support for Intel Arc A-Series cards, specifically the DG2 and Alchemist architectures, through updated DRM drivers.
What is the maximum number of virtual CPUs supported per VM?
The vmm/vmd(8) virtualization system now supports symmetric multiprocessing guests with up to 64 virtual CPUs per virtual machine.
Did the compiler toolchain change for all architectures?
Yes, Clang/LLVM 22 is now the base compiler for all architectures, including the recent switch for OpenBSD/sparc64.
