OpenBSD Hackathon

OpenBSD Hackathon
Name	OpenBSD Hackathon
Date	Various
Frequency	Irregular / periodic
Location	Various cities, universities, conferences
Participants	Developers, porters, sysadmins
Organized	OpenBSD Project

OpenBSD Hackathon The OpenBSD Hackathon is a recurring development gathering associated with the OpenBSD project, attracting contributors from a broad range of computing communities including NetBSD, FreeBSD, DragonFly BSD, Linux kernel, X.Org, LLVM Project, Clang (compiler), Portable C Compiler, pkgsrc, Debian, Ubuntu, Gentoo, Arch Linux, Red Hat, Canonical (company), SUSE, Oracle Corporation, Microsoft, GitHub, GitLab, Bitbucket, FLOSS, Software Freedom Conservancy, Electronic Frontier Foundation, Open Source Initiative, and other open source organizations. The event emphasizes code development, security auditing, porting, documentation, and cooperative problem solving among members of established projects such as OpenSSH, LibreSSL, Xen (software), QEMU, Netcat, pf (firewall), LibreSSL forks, and contributors connected to academic institutions like MIT, Harvard University, University of California, Berkeley, and École Polytechnique.

History

The origins trace to ad hoc meetups among developers involved in OpenBSD and predecessor projects like NetBSD and 4.4BSD, influenced by the collaborative culture of events such as Beerware parties and the more formal DebConf and FOSDEM hacker gatherings. Early gatherings followed traditions from the FreeBSD Developer Summit and drew participation from contributors to tools like OpenSSH and pf (firewall), with cross-pollination from OpenSSL contributors and later the LibreSSL fork. Over time the gatherings evolved alongside major milestones including releases driven by the stewardship of developers associated with Theo de Raadt and peers who participated in projects such as CycloneDX, CVS concurrency efforts, and version control shifts influenced by Git. The hackathons have mirrored the broader open source timeline punctuated by events like the Heartbleed Bug response and coordinated security hardening efforts that involved CERT Coordination Center and independent auditors from places like NCC Group.

Purpose and Goals

Primary goals include improving OpenBSD base system components such as networking stack code shared with pfSense users, maintenance of portable toolchains exemplified by Clang (compiler) and GCC, and enhancing utilities commonly used by distributions including pkgsrc maintainers and pkg_add authors. Secondary objectives target audits motivated by incidents such as the Heartbleed Bug in OpenSSL and encourage migration strategies analogous to the LibreSSL initiative. The event fosters cooperation with projects like X.Org for display toolchains, Wayland contributors, virtual machine maintainers from QEMU and Xen (software), and security researchers aligned with Open Crypto Audit Project and CERT/CC to perform source audits, regression testing, and benchmark comparisons with NetBSD and FreeBSD.

Organization and Participants

Organization is informal yet coordinated by longstanding members of the OpenBSD community, often involving committers, porters, contributors to OpenSSH, maintainers of pkgsrc, and people affiliated with universities such as UC Berkeley who have historical ties to the BSD family. Participants include privacy and security experts from groups like the Electronic Frontier Foundation, corporate engineers from companies such as Google, Cloudflare, Amazon Web Services, and Facebook, and independent developers who have worked on projects like LibreSSL, OpenSMTPD, relayd, doas, smtpd, rc (BSD) shell and maintainers of ports to platforms including ARM, x86, RISC-V, PowerPC, and MIPS. Logistics sometimes involve collaboration with event hosts drawn from institutions like University of Cambridge, University of Oxford, and municipal incubators connected to technology hubs such as Silicon Valley and Cambridge, Massachusetts.

Typical Activities and Projects

Typical activities include pair programming, code sprints, porting sessions between architectures like ARM64 and x86_64, continuous integration configuration with systems similar to Jenkins and GitHub Actions, and focused audits of cryptographic code related to LibreSSL and OpenSSH. Participants also work on networking subsystems influenced by developments in pf (firewall), driver updates for hardware families represented by Intel Corporation and Broadcom, build toolchain tuning for Clang (compiler) and assembler compatibility with LLVM Project, and packaging enhancements similar to efforts in pkgsrc and ports collection style systems. Documentation sprints produce improvements for manuals such as man page collections and tutorials used by distributions like Debian and FreeBSD. Community outreach often mirrors activities at conferences like USENIX Security Symposium and BSDCan.

Notable Outcomes and Contributions

Outcomes include security patches and hardening work that have been integrated into stable releases of OpenBSD and shared with projects such as OpenSSH, LibreSSL, and upstream kernels used by NetBSD and FreeBSD. Contributions have influenced cryptographic defaults and inspired forks and audits by entities including The OpenSSL Project, Open Crypto Audit Project, and academic security groups at Carnegie Mellon University and Stanford University. The hackathons have facilitated successful ports to architectures championed by companies like Ampere Computing and research groups working on RISC-V implementations, and have seeded tools adopted by infrastructures at Cloudflare and Fastly.

Location, Frequency, and Logistics

Locations vary: past gatherings have used university lecture halls, hotel conference rooms, and community spaces in cities such as Berkeley, California, Boston, San Francisco, Toronto, London, Amsterdam, and Paris. Frequency is irregular and responsive to release cycles and security incidents, with sessions organized around major conferences such as BSDCan, FOSDEM, and USENIX, or timed to coincide with academic sabbaticals at institutions like MIT and UC Berkeley. Logistics are typically coordinated through mailing lists and repositories hosted on platforms including GitHub and GitLab, with travel support occasionally provided by sponsor organizations like The Linux Foundation or corporate participants.

Category:OpenBSD Category:Free and open-source software events