OpenBSD 8.0 landed October 20, 2026, marking the project's 61st release and continuing its cadence of shipping every six months without fail since 1996. Led by Theo de Raadt, the release demonstrates what happens when an operating system treats correctness and security as structural commitments rather than feature-list items. No AI copilot, no subscription tier, no telemetry — just a disciplined engineering organization shipping audited code on schedule. The headline platform changes are substantial. On amd64, kernel virtual address space jumps from 4GB to 512GB, a move that directly enables mapping more than 4GB of GPU VRAM — critical for the new Intel Arc A-Series (DG2/Alchemist) graphics support in inteldrm(4), which itself tracks Linux DRM 6.18.53. The pmap direct map is now placed at a random location, a characteristic OpenBSD move: take something deterministic that attackers can rely on and randomize it. Swap encryption gets hardware AES acceleration on both amd64 and arm64. ARM64 gains hibernate support, a deceptively complex feature that requires saving and restoring the entire machine state through encrypted disk images. The hibernate/suspend work across the release is meticulous: validation of chunk sizes against integer overflow, prevention of disk image overreads, framebuffer cleanup after unhibernate. This is the kind of defensive coding that prevents the CVEs other projects announce years later. RISC-V64 gets kernel vector extension support, advanced interrupt architecture drivers (imsic/aplic), and bounce buffers — OpenBSD is investing seriously in RISC-V as a first-class platform. The VMM/VMD improvements are the release's most forward-looking work. Guest VMs now support up to 64 VCPUs with x2APIC mode, MSI/MSI-X virtio interrupts, checksum offload, and proper i82093aa IOAPIC plus i82489dx LAPIC emulation. This is OpenBSD building a credible lightweight hypervisor stack — not competing with KVM on feature count, but offering a minimal, auditable alternative where every line of code has been reviewed. The 32-bit Linux guest fix and split-virtqueue support show real-world usage driving development. The qwx(4) and qwz(4) wireless driver work is staggering in volume: over 25 individual fixes addressing race conditions, DMA map allocation failures, stale pointer crashes, firmware state management, and roaming between access points, plus 802.11n support with 40MHz channels. This is the brutal reality of hardware driver development — each fix represents a crash or hang that someone tracked down through opaque firmware interfaces. The project also added Panther Lake and Wildcat Lake Ethernet support to em(4), Intel E610 to ix(4), and Samsung-specific drivers (samsabi, sambat) for laptop BIOS and battery interfaces. Notably, OpenBSD retired the loongson architecture because it doesn't work with Clang 22, and sparc64 switched entirely to LLVM toolchain. The project continues its migration away from GCC — a long-term bet on LLVM that reduces dependency on a single compiler ecosystem. The installer, pkg-tools, and fwupdate hardening (stricter validation, download size limits, harmonized installurl handling) reflect the project's conviction that every input boundary is an attack surface. The release song, "The Simps on AI," is OpenBSD's characteristic cultural commentary delivered through its tradition of themed release artwork and music. In a tech ecosystem where every product announcement genuflects to AI, OpenBSD ships an operating system that does the boring, critical work of making computers correct. The 30-year track record speaks: two remote holes in the default install, a release every six months, and a codebase that prioritizes the user over the vendor.
