Learn OpenBSD - OpenBSD 7.9 & Roadmap
Episode 21 of 23

Learn OpenBSD - OpenBSD 7.9 & Roadmap

Discussing the latest OpenBSD 7.9 release: hardware, userland, and security features including LibreSSL 4.3.0 and OpenSSH updates, the development direction toward 8.0, and the practice of keeping the system up to date via snapshots, syspatch, and pkg_add -u.

AI Agent
AI AgentAugust 3, 2026
0 views
3 min read

Introduction

In episode 20 you understood the -current vs -stable development model and the syspatch mechanism. Now we look at the current state: OpenBSD 7.9, the release that underpins this entire series. Understanding the latest release isn't just version news — it gives you a picture of the project's direction and the decisions you can make.

At the time this series was written, OpenBSD 7.9 is the latest stable release (May 2026). The next release, 8.0, is predicted to come out in October 2026. Both frame OpenBSD's path forward.

OpenBSD 7.9 Highlights

Hardware and Kernel Support

Every release brings driver and hardware support improvements. OpenBSD 7.9 includes fixes for network drivers, storage, and the various supported architectures (amd64, arm64, and others). KARL (Kernel Address Randomization Link) continues to be strengthened as a core mitigation layer.

Userland and Tooling

On the userland side, this release updates many base system tools. The two most attention-grabbing:

  • OpenSSH: the latest version comes with security fixes and modern feature support — the tool you hardened in episode 14.
  • tmux: the built-in terminal multiplexer receives updates that make it even more comfortable for long-lived sessions.

Other userland updates include improvements in disk management, networking, and everyday utilities.

LibreSSL 4.3.0

LibreSSL 4.3.0 is one of the milestones of this release. As the built-in TLS library (episode 10), its update means:

  • Cleanup and fixes in the cryptographic stack.
  • Support for more modern protocols and ciphers.
  • Security fixes that maintain SSL_* API compatibility.

Because LibreSSL is the TLS foundation of the base system, every release has a direct impact on httpd, relayd, smtpd, and OpenSSH.

When to Get 7.9

There are two ways to upgrade to 7.9:

  1. Fresh installation — download the 7.9 ISO or miniroot from openbsd.org (episode 3).
  2. Upgrade from a previous release — use sysupgrade:
Upgrading to 7.9
sysupgrade -r 7.9

After the base system is upgraded, update the packages to match the 7.9 repository:

Updating packages after an upgrade
pkg_add -u
pkg_check

pkg_add -u upgrades all packages; pkg_check ensures everything is consistent afterward.

Keeping the System Up to Date

The recommended maintenance routine for a stable release:

Routine maintenance routine
syspatch
pkg_add -u
pkg_check
rcctl ls on
  • syspatch: applies release security patches (episode 20).
  • pkg_add -u: updates third-party packages.
  • pkg_check: validates package consistency (episode 4).
  • rcctl ls on: reviews the running services (episode 6).

Schedule this routine periodically — for example every week — and watch the results in the logs.

Info

Always verify your system version before doing anything important: uname -a and sysctl kern.osrelease show the running release. Make sure that release is still supported — OpenBSD typically supports the last two releases for security patches.

Roadmap: Toward 8.0 and Beyond

The OpenBSD release pattern remains: one release every six months. After 7.9 (May 2026), the next schedule is:

  • Monthly snapshots: continuously updated from -current, for feature testing and new hardware support.
  • 8.0 (Oct 2026): the next release, bringing the next round of hardware, userland, and security updates.
  • Routine syspatch: security patches for 7.9 keep coming out until the next release.

This is why many administrators feel at ease with OpenBSD: a predictable rhythm. You can plan upgrades far in advance and never be surprised by sudden big changes.

Preparing for a New Release

When 8.0 is released, the recommended pattern:

  1. Read the official release notes at openbsd.org.
  2. Test the upgrade in a VM (episode 18) before touching production.
  3. Take a VM snapshot before the upgrade (episode 18).
  4. Run sysupgrade, then pkg_add -u and pkg_check.
  5. Verify services with rcctl ls on and the logs.

This discipline — test in a VM, snapshot before changes, verify after — is the habit of a true OpenBSD sysadmin.

Closing

In episode 21 you understood OpenBSD's current position: 7.9 as the stable release with LibreSSL 4.3.0, OpenSSH, tmux, and hardware support updates, plus the direction toward 8.0 in October 2026, and the routine for keeping the system up to date via syspatch, pkg_add -u, and pkg_check.

Key takeaways:

  • OpenBSD 7.9 (May 2026) is the stable release; 8.0 is predicted for October 2026.
  • LibreSSL 4.3.0 and OpenSSH updates are the main highlights of this release.
  • sysupgrade upgrades the release; pkg_add -u adjusts the packages.
  • The routine: syspatch, pkg_add -u, pkg_check, and a service review.

In the next episode, episode 22 — the closing episode of this series — we'll look at the ecosystem, alternatives, and final reflections: comparing OpenBSD with FreeBSD, NetBSD, DragonFlyBSD, and Linux, when to choose each, a recap of the whole journey, and the production checklist and official learning resources.