系统与基础设施openbsd.org
OpenBSD 的创新
OpenBSD Innovations
2015 — 2025，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
OpenBSD 官方的“创新”页面，梳理了该项目多年来首创或率先引入的众多技术成果，如 OpenSSH、sudo、pledge、LibreSSL 等。页面展示了这个以安全著称的系统对整个 Unix 世界的深远影响。
为什么经久不衰：它用事实说明一个小而精的团队如何持续为整个行业输出安全与工程实践，十年后重读依然能感受到其技术前瞻性。
HN 评论精选
pledge 机制体现了 OpenBSD 的安全创新思路，值得尝试
我非常喜欢 Theo de Raadt 最近关于 OpenBSD 新安全技术 pledge 的演讲，听完就迫不及待想试试 OpenBSD。pledge 的设计思路很有意思：进程或应用声明自己需要的系统服务，一旦越界就会被杀掉。它是一种缓解手段而非万能药。附上 Hackfest 2015 演讲的视频和幻灯片链接。
lloydde查看英文原文
I thoroughly enjoyed Theo de Raadt recent talk, "Pledge: A new security technology in openbsd". It left me itching to try OpenBSD. "Pledge() is designed as a mitigation rather than a cure-all, de Raadt explains, but it's a mitigation with an interesting approach: a process or application stipulates the system services it needs, and if it steps beyond its boundaries, it's killed." http://www.theregister.co.uk/2015/11/10/untamed_pledge_hopes_to_improve_openbsd_security/ Hackfest 2015: Theo de Raadt presented "Pledge: A new security technology in openbsd" video: https://www.youtube.com/watch?v=F_7S1eqKsFk slides: http://www.openbsd.org/papers/hackfest2015-pledge/index.html
OpenBSD 安装体验好、文档优秀，且许多常见工具源自该项目
把我的 ThinkPad 迁移到了 OpenBSD，除了 Firefox 偶尔出问题外一直很顺畅。安装很轻松，man 手册写得很好，基本不用去 Google 搜索（分区时除外）。另外：我以前都不知道 sudo 是 OpenBSD 的项目。
dbalan查看英文原文
Migrated my personal thinkpad to OpenBSD, other than firefox coughing up now and then - its been smooth so far. Installing was a breeze, the man pages are well written, never had to run to google much except while partioning. Also: Never knew sudo was a openBSD project.
OpenBSD 以激进但严谨的开发文化和精简哲学保持高质量
这个月试用 OpenBSD 后的一些感受：他们像“高压锅”式开发，为了进步不惜破坏兼容性，版本间可能激进地改动，但系统并不因此不稳定；他们精简系统，不喜欢的许可证就不实现，太复杂太庞大的代码（如 ZFS）也拒绝引入，因为难以审计；支持众多架构是为了捕获更多 bug；社区其实远没有传言中那么精英主义，只是要求你先读 man 手册、自己搜索、会用邮件列表。
myztic查看英文原文
I want to write some general things about OpenBSD / the OpenBSD Communtiy I realized while I gave it a spin just this month (in no particular order): -) they are a "pressure cooker" for development, if they have to brake something in order to advance they will. way different mindest when you compare it to the linux kernel or FreeBSD. this does not mean it's unstable, but from version to version they might radically change something. -) they strip down their system, if they don't like a license they don't implement it, and if something is too complicated / too big, they don't implement it. one of the contra-zfs-in-openbsd arguments (besides the license) quite simply is: it's so much code, it's so huge, it would be such an immense amount of work to audit it and to really really understand every single part of it. -) openbsd runs on so many architectures partly because it allows them to catch more bugs. some weird bug you might encounter only while trying to install the system over network on machine xyz that nobody really uses anymore... running on so many multiple architectures gives them more input. -) openbsd-community is way less elitist than people say/think it is. they expect you to have read the manpages (and they made such an effort to make them as good as possible), to maybe search on the internet yourself, to have tried some things out and to know how to use mailing lists, not too much in my opinion. they probably don't even mind the stigma of being elitists, as it keeps newcomers away. getting help is a privilege, not a fundamental right of every user. -) they want others to use their tools. while it is probably unfair considering how many tools they provide and how little funding they get, nevertheless they actually genuinely are happy that their tools are used, which is an awesome mindset. but that probably is generally a bsd-license vs gpl kind of thing. -) run your own sh*t! while many freebsd devs are simply using macs and running freebsd on their servers, openbsd developers are heavily encouraged to run openbsd everywhere they have the chance of doing so. you will find that most (maybe all) devs run it themselves on their notebook/desktop or at least on some of their private machines, which is awesome. Some further resources: -) openbsd faq http://www.openbsd.org/faq/ (especially section 1, 8, 9) -) http://www.openbsd.org/ftp.html just give it a spin, why not? run it as virtual machine and play around, some hours worth while
小团队也能做出引领行业的成果
让我一直惊讶的是，OpenBSD 的核心开发团队规模小而紧凑，却不仅能跟上步伐，有时还能引领方向（比如 LibreSSL）。对比邮件列表活跃度和参与人数，Linux 内核的开发者要多得多。
janvdberg查看英文原文
I'm always so surprised that OpenBSD seems to have a much smaller/tighter group of people working on the core[1]. Yet they seem to keep up and not only that, but also lead the way in some case (e.g. LibreSSL). ([1] Especially compared to the Linux kernel. Looking at maillist activity or number of different people, the Linux kernel seems to have a lot more people working on it).
历次讨论
同类还值得读
TTY 揭秘（2008）
The TTY demystified (2008)
经典文章深入剖析了 Unix/Linux 中 TTY 子系统的工作原理，包括线路规程、终端驱动、信号与控制字符等机制。
系统与基础设施上首页 11 次 · 2009–2025linusakesson.net编辑精选为什么 GNU grep 这么快
Why GNU grep is Fast
FreeBSD 邮件列表上一篇广为流传的帖子，解释 GNU grep 为什么快：核心在于 Boyer-Moore 字符串搜索算法配合精心优化的内部循环和 I/O，让程序在搜索时“…
系统与基础设施上首页 9 次 · 2010–2022lists.freebsd.orgXplain：为普通人讲解 X11
Xplain – Explaining X11 for the rest of us
《Xplain》是作者（HN 用户 Jasper_）写的一系列 X11 长文，用他在浏览器中重建的 X11 绘图模型做交互演示，讲解 X11 的绘图模型与窗口系统设计。
系统与基础设施上首页 6 次 · 2013–2020magcius.github.io编辑精选旋风教程：为 Linux 创建极小 ELF 可执行文件（1999）
A Whirlwind Tutorial on Creating Really Teensy ELF Executables for Linux (1999)
breadbox 写于 1999 年的经典教程，主题是如何为 Linux 手工构造并裁剪出体积极小的 ELF 可执行文件。
系统与基础设施上首页 6 次 · 2007–2025muppetlabs.comPostgreSQL 内部原理
The internals of PostgreSQL
《The Internals of PostgreSQL》是一本免费在线书籍，系统讲解 PostgreSQL 的内部实现，包括查询处理、并发控制、WAL、缓冲区管理等核心机制。
系统与基础设施上首页 5 次 · 2017–2025interdb.jp编辑精选