OpenBSD 5.8 is officially released!

[ocicat]

Theo made the public announcement earlier today:

http://marc.info/?l=openbsd-misc&m=144518039211050&w=2

Awesome CD's, posters, t-shirts, & other swag can be ordered from the OpenBSD Store.

Enjoy!

[jggimi]

I upgraded my servers to 5.8-stable yesterday.

Though I've had doas(8) available to me on -current for many months, I have not yet converted to doas(8) from sudo on any system. While doas() is simpler, I like sudoedit and I sometimes use sudo -i instead of sudo -s. These are features which, to my knowledge, are not planned for doas().

I know of one developer who reported that after switching to doas() he had to add a shell alias, his muscle memory kept typing s-u-d-o instead.

[blackhole]

I expected sudo to be among the post upgrade removals, but not the case: http://www.openbsd.org/faq/upgrade58.html#before

(perhaps left for the reasons stated?)

I suppose manual removal and either doas or sudo from ports is the right way to go.

[jggimi]

Correct. Your administrative choice is the built-in doas(8), or the security/sudo package. If you choose the latter, you may need to revise /etc/sudoers as default settings changed.

[ocicat]

With respect to discussion on security/sudo, readers may be interested in the following thread today on misc@:

http://marc.info/?t=144524339100001&r=1&w=2

In particular,

Things that are out-right replaced (i.e., sudo) should be actively
deleted. Even if it still works after upgrade, some day it is going to
break, and you should be pushed to use the new application (or the
package of the old application).

[jggimi]

To be clear, the upgrade guide explicitly directs the removal of sudo(8) library, executable, man pages, and configuration file after the sysmerge(8) step. Ocicat's referenced thread was in regards to other applications that have been removed, such as tip(1), where the files are considered safe to leave in place.

[hitest]

ocicat,

Thanks for the heads-up regarding sudo. I quite like doas. OpenBSD 5.8 up and running and patched.

[blackhole]

Originally Posted by jggimi

To be clear, the upgrade guide explicitly directs the removal of sudo(8) library, executable, man pages, and configuration file after the sysmerge(8) step. Ocicat's referenced thread was in regards to other applications that have been removed, such as tip(1), where the files are considered safe to leave in place.

You're right, how did I miss it...

[jggimi]

There's a lot in those upgrade guides, and pre/post guidance can easily be missed.

---

There's been an update to the guide since -- the configuration file /etc/sudoers is no longer among the files to be deleted. Per the change log, it does no harm once sudo(8) is removed, and may be helpful to people switching to security/sudo rather than switching to doas().