OpenBSD 6.7 Install Guide

This is a quick install guide for OpenBSD 6.7.

NOTE: This guide is no substitute for reading the OpenBSD FAQ. In particular, you should read the Installation Guide

  1. First, you'll want to boot up from the install ISO. Please consult the BuyVM and VMM install guides.
  2. At bootup, type boot then press enter. Or wait a few seconds to boot automatically.
  3. NOTE: At any time during the installation, if you make a mistake, you can type ctrl+c to cancel the install process. Then, press ctrl+d to bring back the installation options.
  4. Type i for install
    Attach:install67-1.png
  5. Press enter to use the default keyboard layout.
  6. Your system hostname is probably a fruit.
    Attach:install67-2.png
  7. Configure the vio0 interface (vio is short for VirtIO). If you lack vio0 and have some other interface (like em0), you may want to change the networking drivers in BuyVM's web panel.
  8. Don't use DHCP. Instead, check BuyVM's web panel for the IPv4 address and enter it manually. Don't worry if you chose DHCP by accident, though. It is always possible to later reconfigure the VPS to use static networking. The benefit of using static networking is that your IPs are guaranteed not to change. DHCP allocates the IP addresses dynamically and sometimes routers can change your addresses during a reboot, causing your users to be unable to connect.
  9. Leave the netmask? as 255.255.255.0
  10. Don't use autoconf. Instead, manually type in your IPv6 addresses.
  11. BuyVM's IPv6 prefix length is 48, not 64. Coconut's is 64.
    Attach:install67-3.png
  12. BuyVM's default IPv4 route is just the same as your IPv4 address but the last number replaced with 1. So for example, if you had the IP address 192.168.0.14, the default gateway would be 192.168.0.1. For coconut, the default gateway has the last number replaced with 129.
  13. For BuyVM, the default router for subnets inside 2605:6400:0010/48 is 2605:6400:0010::1. For coconut, it is 2001:550:3402:1::1.
  14. Press enter when done.
    Attach:install67-4.png
  15. DNS domain name will be either ircnow.org or the domain you purchased.
  16. DNS nameservers: You can use 8.8.8.8 from Google or OpenNIC servers or 127.0.0.1 if you configure unbound right after installation. NOTE: If you use 127.0.0.1, you will not be able to download packages for installation without using the trick described below.
  17. Type in your root password twice.
  18. Type enter, you want to start sshd by default (or else you would be unable to log in).
  19. No, you not want to run X Windows by default. You will install the X packages but enabling X windows is a security risk given that you are working on a headless (no GUI) server.
  20. Enter your username, type in a name, then type the password twice.
    Attach:install67-5.png
  21. Don't allow root ssh login. Press enter.
  22. Set the timezone (matching the server's physical location).
  23. Press ? to see information about available disks.
  24. Select the correct disk. WARNING: Be very careful! Selecting the wrong disk may erase data forever!
    Attach:install67-6.png
  25. You may want to read up on fdisk and disklabel. For a simple install, type W to use the (W)hole Disk.
    Attach:install67-6b.png
  26. For a simple install, type enter to use (A)uto layout. If you have special needs, read up on disklabel.
    Attach:install67-6c.png
  27. Once you are done formatting disks, press enter for done.
    Attach:install67-6d.png
  28. Installing the sets
    1. OpenBSD has a concept of base sets, which includes the default software with each install.
    2. If you used a CD-ROM ISO, select cd0.
    3. If you used a flash drive, select disk.
    4. If you want to download from the internet, select http.
    5. NOTE: If you download from the internet, sometimes DNS will not work properly. There is a trick -- instead of using a hostname like ftp4.usa.openbsd.org, use its IPv4 address 66.111.2.37.
  29. The pathname to the sets should be 6.7/amd64. Nothing to change so just press enter.
  30. Install all the sets. Do not skip the X sets because they are often needed even if you run headless (without a GUI). If you skip it now, you may eventually have to reboot the server and install it later -- a huge waste of time with no benefit. The X packages are only a few hundred megabytes and present no security risk so long as X is disabled.
  31. If you're using CD, hopefully you verified the ISO before you installed. You can continue without verification. If you are using HTTP, you must verify the sets to be safe. Do not use unverified sets over HTTP.
    Attach:install67-7.png
  32. Type enter for done.
  33. Type enter to reboot.
    Attach:install67-8.png
  34. Power off the VPS and make sure to boot from the hard drive. You may need to go to BuyVM's web panel to fix this.