OpenBSD for macOS Users

This guide maps common macOS administration tasks to OpenBSD tools and configuration files. It assumes an installed OpenBSD 8.0 system with command-line access.

Shells #

On OpenBSD, the default shell for both root and regular users is the Korn shell, ksh(1) . On modern macOS systems, new user accounts default to zsh. OpenBSD’s ksh(1) implements a superset of the traditional Bourne shell language.

Alternative shells (e.g., Bash, Zsh) are available as packages; see pkg_add(1) and chsh(1) .

Recommendation: Do not change root’s shell to a package-provided shell. Non-base shells live under /usr/local/bin, which may be unavailable in a limited-recovery scenario. The base ksh(1) resides in /bin.

# Install common alternative shells (from a regular account via doas(1))
doas pkg_add bash zsh  # Install Bash and Zsh
chsh -s /usr/local/bin/zsh  # Change your login shell to Zsh

Privilege escalation: doas (instead of macOS sudo) #

OpenBSD provides doas(1) in the base system for privilege escalation (macOS ships sudo). Configure OpenBSD’s tool via doas.conf(5) . A documented example exists in /etc/examples/.

For first-time setup, use the root-shell procedure in Create an Administrative Account . Preserve and review any existing policy before changing it.

By default, each command prompts for a password. To cache authentication similarly to many sudo configurations, add persist:

permit persist :wheel

A sudo package is available if required; see sudo(8).

Software management #

Unlike macOS, where third-party package managers such as Homebrew or MacPorts are common, OpenBSD provides an official, integrated binary package system. Prefer prebuilt packages; see packages(7) . Building from ports is documented in ports(7) .

Installing and removing packages #

Install prebuilt packages with pkg_add(1) :

doas pkg_add nginx  # Install Nginx

Remove packages with pkg_delete(1) :

doas pkg_delete nginx  # Remove Nginx

List installed packages with pkg_info(1) :

pkg_info  # List installed packages

Updating (same release) #

OpenBSD ships binary patches for the base system via syspatch(8) . This is broadly analogous to macOS Software Update for the operating system, not third-party software.

doas syspatch -c  # Show available base patches
doas syspatch     # Apply base patches (reboot if required)

Update installed packages to the latest for your release:

doas pkg_add -Uu  # Upgrade all packages within the current release

Upgrading (to a new release) #

Use sysupgrade(8) to fetch and perform a release upgrade. After the reboot, complete any configuration merges with sysmerge(8) if prompted, then update packages.

doas sysupgrade  # Upgrade base to the next OpenBSD release
doas pkg_add -Uu # Update packages after the base upgrade

Networking #

On macOS, interfaces often appear as en0, en1, and so on. OpenBSD names interfaces by driver, for example em0 (Intel), re0 (Realtek), and bge0 (Broadcom). See ifconfig(8) for details.

Interface configuration with hostname.if #

Per-interface configuration lives in hostname.if(5) , where if is the interface name (e.g., /etc/hostname.em0). This replaces macOS command-line tools such as networksetup and scutil for persistent settings.

Static IPv4:

inet 10.0.0.100 255.255.255.0

Static IPv6:

inet6 2001:db8:6000:9344::154 64

DHCP:

inet autoconf

Apply configuration from files using netstart(8) :

doas sh /etc/netstart      # Reload all interfaces
doas sh /etc/netstart em0  # Reload a single interface

Temporary, runtime changes can be made with ifconfig(8) :

doas ifconfig em0 10.0.0.100 255.255.255.0  # Set a temporary IPv4 address

Hostname #

Set the system’s fully qualified domain name in myname(5) (/etc/myname). This replaces scutil --set HostName on macOS.

host.example.com

At boot, the system reads its hostname from /etc/myname. To change it now, use hostname(1) :

doas hostname host.example.com

Running sh /etc/netstart reloads interfaces and routes; it does not change the hostname.

Default gateway #

Set the default gateway(s) in mygate(5) (/etc/mygate). One address per line; the first of each family is used.

10.0.0.1
2001:db8:6000:9344::1

Reload networking with sh /etc/netstart.

DNS resolvers #

resolvd(8) combines dynamic DNS proposals with user-edited lines in /etc/resolv.conf. Do not make that file immutable. Configure DHCP/SLAAC proposal policy when static DNS must take precedence.

Configure resolvers in resolv.conf(5) , rather than using scutil --dns or the System Settings UI:

nameserver 192.0.2.1
lookup file bind

Reload networking with sh /etc/netstart.

Daemons and startup #

macOS uses launchd and launchctl for service management. OpenBSD uses the traditional BSD init and rc system; see init(8) , rc(8) , and rc.conf(8) . System defaults are in /etc/rc.conf. Do not edit it directly; override and localize settings in /etc/rc.conf.local.

Control and enable daemons with rcctl(8) . For example, to manage the base web server, httpd(8) :

doas rcctl start httpd    # Start httpd now (analogous to `launchctl kickstart`)
doas rcctl stop httpd     # Stop httpd (analogous to unloading a launchd service)
doas rcctl reload httpd   # Reload httpd configuration
doas rcctl enable httpd   # Enable start at boot (persistent)
doas rcctl disable httpd  # Disable start at boot

Common equivalents #

For further details, consult the referenced manual pages on this site.