UPDATING revision 189597
11541SrgrimesUpdating Information for FreeBSD current users
21541Srgrimes
31541SrgrimesThis file is maintained and copyrighted by M. Warner Losh
41541Srgrimes<imp@village.org>.  See end of file for further details.  For commonly
51541Srgrimesdone items, please see the COMMON ITEMS: section later in the file.
61541Srgrimes
71541SrgrimesItems affecting the ports and packages system can be found in
81541Srgrimes/usr/ports/UPDATING.  Please read that file before running
91541Srgrimesportupgrade.
101541Srgrimes
111541SrgrimesNOTE TO PEOPLE WHO THINK THAT FreeBSD 8.x IS SLOW:
121541Srgrimes	FreeBSD 8.x has many debugging features turned on, in
131541Srgrimes	both the kernel and userland.  These features attempt to detect
141541Srgrimes	incorrect use of system primitives, and encourage loud failure
151541Srgrimes	through extra sanity checking and fail stop semantics.  They
161541Srgrimes	also substantially impact system performance.  If you want to
171541Srgrimes	do performance measurement, benchmarking, and optimization,
181541Srgrimes	you'll want to turn them off.  This includes various WITNESS-
191541Srgrimes	related kernel options, INVARIANTS, malloc debugging flags
201541Srgrimes	in userland, and various verbose features in the kernel.  Many
211541Srgrimes	developers choose to disable these features on build machines
221541Srgrimes	to maximize performance.  (To disable malloc debugging, run
231541Srgrimes	ln -s aj /etc/malloc.conf.)
241541Srgrimes
251541Srgrimes20090309:
261541Srgrimes	IGMPv3 and Source-Specific Multicast (SSM) have been merged
271541Srgrimes	to the IPv4 stack. VIMAGE hooks are in but not yet used.
281541Srgrimes
291541Srgrimes	For kernel developers, the most important changes are that the
301541Srgrimes	ip_output() and ip_input() paths no longer take the IN_MULTI_LOCK(),
311541Srgrimes	and this lock has been downgraded to a non-recursive mutex.
321541Srgrimes
331541Srgrimes	Transport protocols (UDP, Raw IP) are now responsible for filtering
341541Srgrimes	inbound multicast traffic according to group membership and source
351541Srgrimes	filters. The imo_multicast_filter() KPI exists for this purpose.
361541Srgrimes	Transports which do not use multicast (SCTP, TCP) already reject
371541Srgrimes	multicast by default. Forwarding and receive performance may improve
3814508Shsu	as a mutex acquisition is no longer needed in the ip_input()
3929509Sbde	low-level input path.  in_addmulti() and in_delmulti() are shimmed
401541Srgrimes	to new KPIs which exist to support SSM in-kernel.
411541Srgrimes
422165Spaul	For application developers, it is recommended that loopback of
432865Sbde	multicast datagrams be disabled for best performance, as this
442165Spaul	will still cause the lock to be taken for each looped-back
451549Srgrimes	datagram transmission. The net.inet.ip.mcast.loop sysctl may
461549Srgrimes	be tuned to 0 to disable loopback by default; it defaults to 1
4718883Sbde	to preserve the existing behaviour.
487090Sbde
497090Sbde	For systems administrators, to obtain best performance with
501541Srgrimes	multicast reception and multiple groups, it is always recommended
511541Srgrimes	that a card with a suitably precise hash filter is used. Hash
521541Srgrimes	collisions will still result in the lock being taken within the
531541Srgrimes	transport protocol input path to check group membership.
541541Srgrimes
551541Srgrimes	If deploying FreeBSD in an environment with IGMP snooping switches,
561541Srgrimes	it is recommended that the net.inet.igmp.sendlocal sysctl remain
571541Srgrimes	enabled; this forces 224.0.0.0/24 group membership to be announced
581541Srgrimes	via IGMP.
591541Srgrimes
601541Srgrimes	The size of 'struct igmpstat' has changed; netstat needs to be
611541Srgrimes	recompiled to reflect this.
621541Srgrimes	Bump __FreeBSD_version to 800070.
631541Srgrimes
641541Srgrimes20090309:
651541Srgrimes	libusb20.so.1 is now installed as libusb.so.1 and the ports system
661541Srgrimes	updated to use it. This requires a buildworld/installworld in order to
671541Srgrimes	update the library and dependencies (usbconfig, etc). Its advisable to
681541Srgrimes	rebuild all ports which uses libusb. More specific directions are given
691541Srgrimes	in the ports collection UPDATING file.
7029208Sbde
711541Srgrimes20090302:
721541Srgrimes	A workaround is committed to allow the creation of System V shared
7315113Sbde	memory segment of size > 2 GB on the 64-bit architectures.
741541Srgrimes	Due to a limitation of the existing ABI, the shm_segsz member
751541Srgrimes	of the struct shmid_ds, returned by shmctl(IPC_STAT) call is
761541Srgrimes	wrong for large segments. Note that limits must be explicitely
771541Srgrimes	raised to allow such segments to be created.
7816875Sbde
791541Srgrimes20090301:
801541Srgrimes	The layout of struct ifnet has changed, requiring a rebuild of all
8114508Shsu	network device driver modules.
821541Srgrimes
833304Sphk20090227:
841541Srgrimes	The /dev handling for the new USB stack has changed, a
857612Sdg	buildworld/installworld is required for libusb20.
861541Srgrimes
8718277Sbde20090223:
8818277Sbde	The new USB2 stack has now been permanently moved in and all kernel and
8917975Sbde	module names reverted to their previous values (eg, usb, ehci, ohci,
901541Srgrimes	ums, ...).  The old usb stack can be compiled in by prefixing the name
9115680Sgpalmer	with the letter 'o', the old usb modules have been removed.
9218556Sbde	Updating entry 20090216 for xorg and 20090215 for libmap may still
9318556Sbde	apply.
941541Srgrimes
9529509Sbde20090217:
9613697Sgibbs	The rc.conf(5) option if_up_delay has been renamed to
9713446Sphk	defaultroute_delay to better reflect its purpose. If you have
982112Swollman	customized this setting in /etc/rc.conf you need to update it to
9918556Sbde	use the new name.
1001541Srgrimes
1011541Srgrimes20090216:
1028215Sdg	xorg 7.4 wants to configure its input devices via hald which does not
1038215Sdg	yet work with USB2. If the keyboard/mouse does not work in xorg then
10413414Sphk	add
1051541Srgrimes		Option "AllowEmptyInput" "off"
1068215Sdg	to your ServerLayout section.  This will cause X to use the configured
1078215Sdg	kbd and mouse sections from your xorg.conf.
10813456Sbde
10913456Sbde20090215:
11013456Sbde	The GENERIC kernels for all architectures now default to the new USB2
11113456Sbde	stack. No kernel config options or code have been removed so if a
11213456Sbde	problem arises please report it and optionally revert to the old USB
11313456Sbde	stack. If you are loading USB kernel modules or have a custom kernel
1141541Srgrimes	that includes GENERIC then ensure that usb names are also changed over,
11513456Sbde	eg uftdi -> usb2_serial_ftdi.
1161541Srgrimes
1171541Srgrimes	Older programs linked against the ports libusb 0.1 need to be
11813456Sbde	redirected to the new stack's libusb20.  /etc/libmap.conf can
1191541Srgrimes	be used for this:
12027993Sdyson		# Map old usb library to new one for usb2 stack
1216358Sphk		libusb-0.1.so.8	libusb20.so.1
1221541Srgrimes
12326259Speter20090203:
1241541Srgrimes	The ichsmb(4) driver has been changed to require SMBus slave
1251541Srgrimes	addresses be left-justified (xxxxxxx0b) rather than right-justified.
1261541Srgrimes	All of the other SMBus controller drivers require left-justified
1271541Srgrimes	slave addresses, so this change makes all the drivers provide the
1281541Srgrimes	same interface.
1291541Srgrimes
1301541Srgrimes20090201:
1311541Srgrimes	INET6 statistics (struct ip6stat) was updated.
1321541Srgrimes	netstat(1) needs to be recompiled.
1331541Srgrimes
1341541Srgrimes20090119:
1351541Srgrimes	NTFS has been removed from GENERIC kernel on amd64 to match
1363484Sphk	GENERIC on i386. Should not cause any issues since mount_ntfs(8)
13721101Sjhay	will load ntfs.ko module automatically when NTFS support is
13821101Sjhay	actually needed, unless ntfs.ko is not installed or security
1397109Sphk	level prohibits loading kernel modules. If either is the case,
1402112Swollman	"options NTFS" has to be added into kernel config.
1412112Swollman
14229509Sbde20090115:
14329509Sbde	TCP Appropriate Byte Counting (RFC 3465) support added to kernel.
14429509Sbde	New field in struct tcpcb breaks ABI, so bump __FreeBSD_version to
14529509Sbde	800061. User space tools that rely on the size of struct tcpcb in
14629509Sbde	tcp_var.h (e.g. sockstat) need to be recompiled.
1472112Swollman
1487090Sbde20081225:
1497090Sbde	ng_tty(4) module updated to match the new TTY subsystem.
1507090Sbde	Due to API change, user-level applications must be updated.
1517090Sbde	New API support added to mpd5 CVS and expected to be present
1527090Sbde	in next mpd5.3 release.
1537090Sbde
1547090Sbde20081219:
1557090Sbde	With __FreeBSD_version 800060 the makefs tool is part of
1567090Sbde	the base system (it was a port).
1577090Sbde
1582112Swollman20081216:
15929509Sbde	The afdata and ifnet locks have been changed from mutexes to
1602112Swollman	rwlocks, network modules will need to be re-compiled.
16129509Sbde
16229509Sbde20081214:
1632165Spaul	__FreeBSD_version 800059 incorporates the new arp-v2 rewrite.
16426312Speter	RTF_CLONING, RTF_LLINFO and RTF_WASCLONED flags are eliminated.
16526312Speter	The new code reduced struct rtentry{} by 16 bytes on 32-bit
16626312Speter	architecture and 40 bytes on 64-bit architecture. The userland
16726312Speter	applications "arp" and "ndp" have been updated accordingly.
16826312Speter	The output from "netstat -r" shows only routing entries and
16926312Speter	none of the L2 information.
17026312Speter
17126312Speter20081130:
17226312Speter	__FreeBSD_version 800057 marks the switchover from the
17326312Speter	binary ath hal to source code. Users must add the line:
17426312Speter
17526312Speter	options	AH_SUPPORT_AR5416
17626312Speter
17726312Speter	to their kernel config files when specifying:
17826312Speter
17928440Sfsmp	device	ath_hal
18028440Sfsmp
18128440Sfsmp	The ath_hal module no longer exists; the code is now compiled
18226312Speter	together with the driver in the ath module.  It is now
18326312Speter	possible to tailor chip support (i.e. reduce the set of chips
18426312Speter	and thereby the code size); consult ath_hal(4) for details.
18526312Speter
18626312Speter20081121:
18726312Speter	__FreeBSD_version 800054 adds memory barriers to
18826312Speter	<machine/atomic.h>, new interfaces to ifnet to facilitate
18926312Speter	multiple hardware transmit queues for cards that support
19026312Speter	them, and a lock-less ring-buffer implementation to
19126312Speter	enable drivers to more efficiently manage queueing of
19226312Speter	packets.
19326312Speter
19426312Speter20081117:
19526312Speter	A new version of ZFS (version 13) has been merged to -HEAD.
19626312Speter	This version has zpool attribute "listsnapshots" off by
19726312Speter	default, which means "zfs list" does not show snapshots,
19826312Speter	and is the same as Solaris behavior.
19926312Speter
20026312Speter20081028:
20126312Speter	dummynet(4) ABI has changed. ipfw(8) needs to be recompiled.
20227585Sbde
20326312Speter20081009:
20426312Speter	The uhci, ohci, ehci and slhci USB Host controller drivers have
20526312Speter	been put into separate modules. If you load the usb module
20629509Sbde	separately through loader.conf you will need to load the
20729509Sbde	appropriate *hci module as well. E.g. for a UHCI-based USB 2.0
20829509Sbde	controller add the following to loader.conf:
20917658Sjulian
21029509Sbde		uhci_load="YES"
21129509Sbde		ehci_load="YES"
21217658Sjulian
21329509Sbde20081009:
21429509Sbde	The ABI used by the PMC toolset has changed.  Please keep
21517658Sjulian	userland (libpmc(3)) and the kernel module (hwpmc(4)) in
21629509Sbde	sync.
21729509Sbde
21829509Sbde20080820:
21927997Sjulian	The TTY subsystem of the kernel has been replaced by a new
22029509Sbde	implementation, which provides better scalability and an
22129509Sbde	improved driver model. Most common drivers have been migrated to
22227997Sjulian	the new TTY subsystem, while others have not. The following
22329509Sbde	drivers have not yet been ported to the new TTY layer:
22429509Sbde
22529509Sbde	PCI/ISA:
22629509Sbde		cy, digi, rc, rp, sio
22729509Sbde
22829509Sbde	USB:
22929509Sbde		ubser, ucycom
23029509Sbde
23129509Sbde	Line disciplines:
23229509Sbde		ng_h4, ng_tty, ppp, sl, snp
23329509Sbde
23429509Sbde	Adding these drivers to your kernel configuration file shall
23529509Sbde	cause compilation to fail.
23629509Sbde
23729509Sbde20080818:
23829509Sbde	ntpd has been upgraded to 4.2.4p5.
23929509Sbde
24029509Sbde20080801:
24129509Sbde	OpenSSH has been upgraded to 5.1p1.
24229509Sbde
24318884Sbde	For many years, FreeBSD's version of OpenSSH preferred DSA
24418884Sbde	over RSA for host and user authentication keys.  With this
24518884Sbde	upgrade, we've switched to the vendor's default of RSA over
24618884Sbde	DSA.  This may cause upgraded clients to warn about unknown
24718884Sbde	host keys even for previously known hosts.  Users should
24818884Sbde	follow the usual procedure for verifying host keys before
24918884Sbde	accepting the RSA key.
2502865Sbde
251	This can be circumvented by setting the "HostKeyAlgorithms"
252	option to "ssh-dss,ssh-rsa" in ~/.ssh/config or on the ssh
253	command line.
254
255	Please note that the sequence of keys offered for
256	authentication has been changed as well.  You may want to
257	specify IdentityFile in a different order to revert this
258	behavior.
259
26020080713:
261	The sio(4) driver has been removed from the i386 and amd64
262	kernel configuration files. This means uart(4) is now the
263	default serial port driver on those platforms as well.
264
265	To prevent collisions with the sio(4) driver, the uart(4) driver
266	uses different names for its device nodes. This means the
267	onboard serial port will now most likely be called "ttyu0"
268	instead of "ttyd0". You may need to reconfigure applications to
269	use the new device names.
270
271	When using the serial port as a boot console, be sure to update
272	/boot/device.hints and /etc/ttys before booting the new kernel.
273	If you forget to do so, you can still manually specify the hints
274	at the loader prompt:
275
276		set hint.uart.0.at="isa"
277		set hint.uart.0.port="0x3F8"
278		set hint.uart.0.flags="0x10"
279		set hint.uart.0.irq="4"
280		boot -s
281
28220080609:
283	The gpt(8) utility has been removed. Use gpart(8) to partition
284	disks instead.
285
28620080603:
287	The version that Linuxulator emulates was changed from 2.4.2
288	to 2.6.16. If you experience any problems with Linux binaries
289	please try to set sysctl compat.linux.osrelease to 2.4.2 and
290	if it fixes the problem contact emulation mailing list.
291
29220080525:
293	ISDN4BSD (I4B) was removed from the src tree. You may need to
294	update a your kernel configuration and remove relevant entries.
295
29620080509:
297	I have checked in code to support multiple routing tables.
298	See the man pages setfib(1) and setfib(2).
299	This is a hopefully backwards compatible version,
300	but to make use of it you need to compile your kernel
301	with options ROUTETABLES=2 (or more up to 16).
302
30320080420:
304	The 802.11 wireless support was redone to enable multi-bss
305	operation on devices that are capable.  The underlying device
306	is no longer used directly but instead wlanX devices are
307	cloned with ifconfig.  This requires changes to rc.conf files.
308	For example, change:
309		ifconfig_ath0="WPA DHCP"
310	to
311		wlans_ath0=wlan0
312		ifconfig_wlan0="WPA DHCP"
313	see rc.conf(5) for more details.  In addition, mergemaster of
314	/etc/rc.d is highly recommended.  Simultaneous update of userland
315	and kernel wouldn't hurt either.
316
317	As part of the multi-bss changes the wlan_scan_ap and wlan_scan_sta
318	modules were merged into the base wlan module.  All references
319	to these modules (e.g. in kernel config files) must be removed.
320
32120080408:
322	psm(4) has gained write(2) support in native operation level.
323	Arbitrary commands can be written to /dev/psm%d and status can
324	be read back from it.  Therefore, an application is responsible
325	for status validation and error recovery.  It is a no-op in
326	other operation levels.
327
32820080312:
329	Support for KSE threading has been removed from the kernel.  To
330	run legacy applications linked against KSE libmap.conf may
331	be used.  The following libmap.conf may be used to ensure
332	compatibility with any prior release:
333
334	libpthread.so.1 libthr.so.1
335	libpthread.so.2 libthr.so.2
336	libkse.so.3 libthr.so.3
337
33820080301:
339	The layout of struct vmspace has changed. This affects libkvm
340	and any executables that link against libkvm and use the
341	kvm_getprocs() function. In particular, but not exclusively,
342	it affects ps(1), fstat(1), pkill(1), systat(1), top(1) and w(1).
343	The effects are minimal, but it's advisable to upgrade world
344	nonetheless.
345
34620080229:
347	The latest em driver no longer has support in it for the
348	82575 adapter, this is now moved to the igb driver. The
349	split was done to make new features that are incompatible
350	with older hardware easier to do.
351
35220080220:
353	The new geom_lvm(4) geom class has been renamed to geom_linux_lvm(4),
354	likewise the kernel option is now GEOM_LINUX_LVM.
355
35620080211:
357	The default NFS mount mode has changed from UDP to TCP for
358	increased reliability.  If you rely on (insecurely) NFS
359	mounting across a firewall you may need to update your
360	firewall rules.
361
36220080208:
363	Belatedly note the addition of m_collapse for compacting
364	mbuf chains.
365
36620080126:
367	The fts(3) structures have been changed to use adequate
368	integer types for their members and so to be able to cope
369	with huge file trees.  The old fts(3) ABI is preserved
370	through symbol versioning in libc, so third-party binaries
371	using fts(3) should still work, although they will not take
372	advantage of the extended types.  At the same time, some
373	third-party software might fail to build after this change
374	due to unportable assumptions made in its source code about
375	fts(3) structure members.  Such software should be fixed
376	by its vendor or, in the worst case, in the ports tree.
377	FreeBSD_version 800015 marks this change for the unlikely
378	case that a portable fix is impossible.
379
38020080123:
381	To upgrade to -current after this date, you must be running
382	FreeBSD not older than 6.0-RELEASE.  Upgrading to -current
383	from 5.x now requires a stop over at RELENG_6 or RELENG_7 systems.
384
38520071128:
386	The ADAPTIVE_GIANT kernel option has been retired because its
387	functionality is the default now.
388
38920071118:
390	The AT keyboard emulation of sunkbd(4) has been turned on
391	by default. In order to make the special symbols of the Sun
392	keyboards driven by sunkbd(4) work under X these now have
393	to be configured the same way as Sun USB keyboards driven
394	by ukbd(4) (which also does AT keyboard emulation), f.e.:
395
396	Option	"XkbLayout" "us"
397	Option	"XkbRules" "xorg"
398	Option	"XkbSymbols" "pc(pc105)+sun_vndr/usb(sun_usb)+us"
399
40020071024:
401	It has been decided that it is desirable to provide ABI
402	backwards compatibility to the FreeBSD 4/5/6 versions of the
403	PCIOCGETCONF, PCIOCREAD and PCIOCWRITE IOCTLs, which was
404	broken with the introduction of PCI domain support (see the
405	20070930 entry). Unfortunately, this required the ABI of
406	PCIOCGETCONF to be broken again in order to be able to
407	provide backwards compatibility to the old version of that
408	IOCTL. Thus consumers of PCIOCGETCONF have to be recompiled
409	again. As for prominent ports this affects neither pciutils
410	nor xorg-server this time, the hal port needs to be rebuilt
411	however.
412
41320071020:
414	The misnamed kthread_create() and friends have been renamed
415	to kproc_create() etc. Many of the callers already
416	used kproc_start()..
417	I will return kthread_create() and friends in a while
418	with implementations that actually create threads, not procs.
419	Renaming corresponds with version 800002.
420
42120071010:
422	RELENG_7 branched.
423
42420071009:
425	Setting WITHOUT_LIBPTHREAD now means WITHOUT_LIBKSE and
426	WITHOUT_LIBTHR are set.
427
42820070930:
429	The PCI code has been made aware of PCI domains. This means that
430	the location strings as used by pciconf(8) etc are now in the
431	following format: pci<domain>:<bus>:<device>[:<function>]. It
432	also means that consumers of <sys/pciio.h> potentially need to
433	be recompiled; this includes the hal and xorg-server ports.
434
43520070928:
436	The caching daemon (cached) was renamed to nscd. nscd.conf
437	configuration file should be used instead of cached.conf and
438	nscd_enable, nscd_pidfile and nscd_flags options should be used
439	instead of cached_enable, cached_pidfile and cached_flags in
440	rc.conf.
441
44220070921:
443	The getfacl(1) utility now prints owning user and group name
444	instead of owning uid and gid in the three line comment header.
445	This is the same behavior as getfacl(1) on Solaris and Linux.
446
44720070704:
448	The new IPsec code is now compiled in using the IPSEC option.  The
449	IPSEC option now requires "device crypto" be defined in your kernel
450	configuration.  The FAST_IPSEC kernel option is now deprecated.
451
45220070702:
453	The packet filter (pf) code has been updated to OpenBSD 4.1 Please
454	note the changed syntax - keep state is now on by default.  Also
455	note the fact that ftp-proxy(8) has been changed from bottom up and
456	has been moved from libexec to usr/sbin.  Changes in the ALTQ
457	handling also affect users of IPFW's ALTQ capabilities.
458
45920070701:
460	Remove KAME IPsec in favor of FAST_IPSEC, which is now the
461	only IPsec supported by FreeBSD.  The new IPsec stack
462	supports both IPv4 and IPv6. The kernel option will change
463	after the code changes have settled in.  For now the kernel
464	option IPSEC is deprecated and FAST_IPSEC is the only option, that
465	will change after some settling time.
466
46720070701:
468	The wicontrol(8) utility has been removed from the base system. wi(4)
469	cards should be configured using ifconfig(8), see the man page for more
470	information.
471
47220070612:
473	The i386/amd64 GENERIC kernel now defaults to the nfe(4) driver
474	instead of the nve(4) driver. Please update your configuration
475	accordingly.
476
47720070612:
478	By default, /etc/rc.d/sendmail no longer rebuilds the aliases
479	database if it is missing or older than the aliases file.  If
480	desired, set the new rc.conf option sendmail_rebuild_aliases
481	to "YES" to restore that functionality.
482
48320070612:
484	The IPv4 multicast socket code has been considerably modified, and
485	moved to the file sys/netinet/in_mcast.c. Initial support for the
486	RFC 3678 Source-Specific Multicast Socket API has been added to
487	the IPv4 network stack.
488
489	Strict multicast and broadcast reception is now the default for
490	UDP/IPv4 sockets; the net.inet.udp.strict_mcast_mship sysctl variable
491	has now been removed.
492
493	The RFC 1724 hack for interface selection has been removed; the use
494	of the Linux-derived ip_mreqn structure with IP_MULTICAST_IF has
495	been added to replace it. Consumers such as routed will soon be
496	updated to reflect this.
497
498	These changes affect users who are running routed(8) or rdisc(8)
499	from the FreeBSD base system on point-to-point or unnumbered
500	interfaces.
501
50220070610:
503	The net80211 layer has changed significantly and all wireless
504	drivers that depend on it need to be recompiled.  Further these
505	changes require that any program that interacts with the wireless
506	support in the kernel be recompiled; this includes: ifconfig,
507	wpa_supplicant, hostapd, and wlanstats.  Users must also, for
508	the moment, kldload the wlan_scan_sta and/or wlan_scan_ap modules
509	if they use modules for wireless support.  These modules implement
510	scanning support for station and ap modes, respectively.  Failure
511	to load the appropriate module before marking a wireless interface
512	up will result in a message to the console and the device not
513	operating properly.
514
51520070610:
516	The pam_nologin(8) module ceases to provide an authentication
517	function and starts providing an account management function.
518	Consequent changes to /etc/pam.d should be brought in using
519	mergemaster(8).  Third-party files in /usr/local/etc/pam.d may
520	need manual editing as follows.  Locate this line (or similar):
521
522		auth	required	pam_nologin.so	no_warn
523
524	and change it according to this example:
525
526		account	required	pam_nologin.so	no_warn
527
528	That is, the first word needs to be changed from "auth" to
529	"account".  The new line can be moved to the account section
530	within the file for clarity.  Not updating pam.conf(5) files
531	will result in nologin(5) ignored by the respective services.
532
53320070529:
534	The ether_ioctl() function has been synchronized with ioctl(2)
535	and ifnet.if_ioctl.  Due to that, the size of one of its arguments
536	has changed on 64-bit architectures.  All kernel modules using
537	ether_ioctl() need to be rebuilt on such architectures.
538
53920070516:
540	Improved INCLUDE_CONFIG_FILE support has been introduced to the
541	config(8) utility. In order to take advantage of this new
542	functionality, you are expected to recompile and install
543	src/usr.sbin/config. If you don't rebuild config(8), and your
544	kernel configuration depends on INCLUDE_CONFIG_FILE, the kernel
545	build will be broken because of a missing "kernconfstring"
546	symbol.
547
54820070513:
549	Symbol versioning is enabled by default.  To disable it, use
550	option WITHOUT_SYMVER.  It is not advisable to attempt to
551	disable symbol versioning once it is enabled; your installworld
552	will break because a symbol version-less libc will get installed
553	before the install tools.  As a result, the old install tools,
554	which previously had symbol dependencies to FBSD_1.0, will fail
555	because the freshly installed libc will not have them.
556
557	The default threading library (providing "libpthread") has been
558	changed to libthr.  If you wish to have libkse as your default,
559	use option DEFAULT_THREAD_LIB=libkse for the buildworld.
560
56120070423:
562	The ABI breakage in sendmail(8)'s libmilter has been repaired
563	so it is no longer necessary to recompile mail filters (aka,
564	milters).  If you recompiled mail filters after the 20070408
565	note, it is not necessary to recompile them again.
566
56720070417:
568	The new trunk(4) driver has been renamed to lagg(4) as it better
569	reflects its purpose. ifconfig will need to be recompiled.
570
57120070408:
572	sendmail(8) has been updated to version 8.14.1.  Mail filters
573	(aka, milters) compiled against the libmilter included in the
574	base operating system should be recompiled.
575
57620070302:
577	Firmwares for ipw(4) and iwi(4) are now included in the base tree.
578	In order to use them one must agree to the respective LICENSE in
579	share/doc/legal and define legal.intel_<name>.license_ack=1 via
580	loader.conf(5) or kenv(1).  Make sure to deinstall the now
581	deprecated modules from the respective firmware ports.
582
58320070228:
584	The name resolution/mapping functions addr2ascii(3) and ascii2addr(3)
585	were removed from FreeBSD's libc. These originally came from INRIA
586	IPv6. Nothing in FreeBSD ever used them. They may be regarded as
587	deprecated in previous releases.
588	The AF_LINK support for getnameinfo(3) was merged from NetBSD to
589	replace it as a more portable (and re-entrant) API.
590
59120070224:
592	To support interrupt filtering a modification to the newbus API
593	has occurred, ABI was broken and __FreeBSD_version was bumped
594	to 700031. Please make sure that your kernel and modules are in
595	sync. For more info:
596	http://docs.freebsd.org/cgi/mid.cgi?20070221233124.GA13941
597
59820070224:
599	The IPv6 multicast forwarding code may now be loaded into GENERIC
600	kernels by loading the ip_mroute.ko module. This is built into the
601	module unless WITHOUT_INET6 or WITHOUT_INET6_SUPPORT options are
602	set; see src.conf(5) for more information.
603
60420070214:
605	The output of netstat -r has changed. Without -n, we now only
606	print a "network name" without the prefix length if the network
607	address and mask exactly match a Class A/B/C network, and an entry
608	exists in the nsswitch "networks" map.
609	With -n, we print the full unabbreviated CIDR network prefix in
610	the form "a.b.c.d/p". 0.0.0.0/0 is always printed as "default".
611	This change is in preparation for changes such as equal-cost
612	multipath, and to more generally assist operational deployment
613	of FreeBSD as a modern IPv4 router.
614
61520070210:
616	PIM has been turned on by default in the IPv4 multicast
617	routing code. The kernel option 'PIM' has now been removed.
618	PIM is now built by default if option 'MROUTING' is specified.
619	It may now be loaded into GENERIC kernels by loading the
620	ip_mroute.ko module.
621
62220070207:
623	Support for IPIP tunnels (VIFF_TUNNEL) in IPv4 multicast routing
624	has been removed. Its functionality may be achieved by explicitly
625	configuring gif(4) interfaces and using the 'phyint' keyword in
626	mrouted.conf.
627	XORP does not support source-routed IPv4 multicast tunnels nor the
628	integrated IPIP tunneling, therefore it is not affected by this
629	change. The __FreeBSD_version macro has been bumped to 700030.
630
63120061221:
632	Support for PCI Message Signalled Interrupts has been
633	re-enabled in the bge driver, only for those chips which are
634	believed to support it properly.  If there are any problems,
635	MSI can be disabled completely by setting the
636	'hw.pci.enable_msi' and 'hw.pci.enable_msix' tunables to 0
637	in the loader.
638
63920061214:
640	Support for PCI Message Signalled Interrupts has been
641	disabled again in the bge driver.  Many revisions of the
642	hardware fail to support it properly.  Support can be
643	re-enabled by removing the #define of BGE_DISABLE_MSI in
644	"src/sys/dev/bge/if_bge.c".
645
64620061214:
647	Support for PCI Message Signalled Interrupts has been added
648	to the bge driver.  If there are any problems, MSI can be
649	disabled completely by setting the 'hw.pci.enable_msi' and
650	'hw.pci.enable_msix' tunables to 0 in the loader.
651
65220061205:
653	The removal of several facets of the experimental Threading
654	system from the kernel means that the proc and thread structures
655	have changed quite a bit. I suggest all kernel modules that might
656	reference these structures be recompiled.. Especially the
657	linux module.
658
65920061126:
660	Sound infrastructure has been updated with various fixes and
661	improvements. Most of the changes are pretty much transparent,
662	with exceptions of followings:
663	1) All sound driver specific sysctls (hw.snd.pcm%d.*) have been
664	   moved to their own dev sysctl nodes, for example:
665		hw.snd.pcm0.vchans -> dev.pcm.0.vchans
666	2) /dev/dspr%d.%d has been deprecated. Each channel now has its
667	   own chardev in the form of "dsp%d.<function>%d", where <function>
668	   is p = playback, r = record and v = virtual, respectively. Users
669	   are encouraged to use these devs instead of (old) "/dev/dsp%d.%d".
670	   This does not affect those who are using "/dev/dsp".
671
67220061122:
673	geom(4)'s gmirror(8) class metadata structure has been
674	rev'd from v3 to v4. If you update across this point and
675	your metadata is converted for you, you will not be easily
676	able to downgrade since the /boot/kernel.old/geom_mirror.ko
677	kernel module will be unable to read the v4 metadata.  You
678	can resolve this by doing from the loader(8) prompt:
679
680		set vfs.root.mountfrom="ufs:/dev/XXX"
681
682	where XXX is the root slice of one of the disks that composed
683	the mirror (i.e.: /dev/ad0s1a). You can then rebuild
684	the array the same way you built it originally.
685
68620061122:
687	The following binaries have been disconnected from the build:
688	mount_devfs, mount_ext2fs, mount_fdescfs, mount_procfs, mount_linprocfs,
689	and mount_std.  The functionality of these programs has been
690	moved into the mount program.  For example, to mount a devfs
691	filesystem, instead of using mount_devfs, use: "mount -t devfs".
692	This does not affect entries in /etc/fstab, since entries in
693	/etc/fstab are always processed with "mount -t fstype".
694
69520061113:
696	Support for PCI Message Signalled Interrupts on i386 and amd64
697	has been added to the kernel and various drivers will soon be
698	updated to use MSI when it is available.  If there are any problems,
699	MSI can be disabled completely by setting the 'hw.pci.enable_msi'
700	and 'hw.pci.enable_msix' tunables to 0 in the loader.
701
70220061110:
703	The MUTEX_PROFILING option has been renamed to LOCK_PROFILING.
704	The lockmgr object layout has been changed as a result of having
705	a lock_object embedded in it. As a consequence all file system
706	kernel modules must be re-compiled. The mutex profiling man page
707	has not yet been updated to reflect this change.
708
70920061026:
710	KSE in the kernel has now been made optional and turned on by
711	default. Use 'nooption KSE' in your kernel config to turn it
712	off. All kernel modules *must* be recompiled after this change.
713	There-after, modules from a KSE kernel should be compatible with
714	modules from a NOKSE kernel due to the temporary padding fields
715	added to 'struct proc'.
716
71720060929:
718	mrouted and its utilities have been removed from the base system.
719
72020060927:
721	Some ioctl(2) command codes have changed.  Full backward ABI
722	compatibility is provided if the "options COMPAT_FREEBSD6" is
723	present in the kernel configuration file.  Make sure to add
724	this option to your kernel config file, or recompile X.Org
725	and the rest of ports; otherwise they may refuse to work.
726
72720060924:
728	tcpslice has been removed from the base system.
729
73020060913:
731	The sizes of struct tcpcb (and struct xtcpcb) have changed due to
732	the rewrite of TCP syncookies.  Tools like netstat, sockstat, and
733	systat needs to be rebuilt.
734
73520060903:
736	libpcap updated to v0.9.4 and tcpdump to v3.9.4
737
73820060816:
739	The IPFIREWALL_FORWARD_EXTENDED option is gone and the behaviour
740	for IPFIREWALL_FORWARD is now as it was before when it was first
741	committed and for years after. The behaviour is now ON.
742
74320060725:
744	enigma(1)/crypt(1) utility has been changed on 64 bit architectures.
745	Now it can decrypt files created from different architectures.
746	Unfortunately, it is no longer able to decrypt a cipher text
747	generated with an older version on 64 bit architectures.
748	If you have such a file, you need old utility to decrypt it.
749
75020060709:
751	The interface version of the i4b kernel part has changed. So
752	after updating the kernel sources and compiling a new kernel,
753	the i4b user space tools in "/usr/src/usr.sbin/i4b" must also
754	be rebuilt, and vice versa.
755
75620060627:
757	The XBOX kernel now defaults to the nfe(4) driver instead of
758	the nve(4) driver. Please update your configuration
759	accordingly.
760
76120060514:
762	The i386-only lnc(4) driver for the AMD Am7900 LANCE and Am79C9xx
763	PCnet family of NICs has been removed. The new le(4) driver serves
764	as an equivalent but cross-platform replacement with the pcn(4)
765	driver still providing performance-optimized support for the subset
766	of AMD Am79C971 PCnet-FAST and greater chips as before.
767
76820060511:
769	The machdep.* sysctls and the adjkerntz utility have been
770	modified a bit.  The new adjkerntz utility uses the new
771	sysctl names and sysctlbyname() calls, so it may be impossible
772	to run an old /sbin/adjkerntz utility in single-user mode
773	with a new kernel.  Replace the `adjkerntz -i' step before
774	`make installworld' with:
775
776	    /usr/obj/usr/src/sbin/adjkerntz/adjkerntz -i
777
778	and proceed as usual with the rest of the installworld-stage
779	steps.  Otherwise, you risk installing binaries with their
780	timestamp set several hours in the future, especially if
781	you are running with local time set to GMT+X hours.
782
78320060412:
784	The ip6fw utility has been removed.  The behavior provided by
785	ip6fw has been in ipfw2 for a good while and the rc.d scripts
786	have been updated to deal with it.  There are some rules that
787	might not migrate cleanly.  Use rc.firewall6 as a template to
788	rewrite rules.
789
79020060428:
791	The puc(4) driver has been overhauled. The ebus(4) and sbus(4)
792	attachments have been removed. Make sure to configure scc(4)
793	on sparc64. Note also that by default puc(4) will use uart(4)
794	and not sio(4) for serial ports because interrupt handling has
795	been optimized for multi-port serial cards and only uart(4)
796	implements the interface to support it.
797
79820060330:
799	The scc(4) driver replaces puc(4) for Serial Communications
800	Controllers (SCCs) like the Siemens SAB82532 and the Zilog
801	Z8530. On sparc64, it is advised to add scc(4) to the kernel
802	configuration to make sure that the serial ports remain
803	functional.
804
80520060317:
806	Most world/kernel related NO_* build options changed names.
807	New knobs have common prefixes WITHOUT_*/WITH_* (modelled
808	after FreeBSD ports) and should be set in /etc/src.conf
809	(the src.conf(5) manpage is provided).  Full backwards
810	compatibility is maintained for the time being though it's
811	highly recommended to start moving old options out of the
812	system-wide /etc/make.conf file into the new /etc/src.conf
813	while also properly renaming them.  More conversions will
814	likely follow.  Posting to current@:
815
816	http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
817
81820060305:
819	The NETSMBCRYPTO kernel option has been retired because its
820	functionality is always included in NETSMB and smbfs.ko now.
821
82220060303:
823	The TDFX_LINUX kernel option was retired and replaced by the
824	tdfx_linux device.  The latter can be loaded as the 3dfx_linux.ko
825	kernel module.  Loading it alone should suffice to get 3dfx support
826	for Linux apps because it will pull in 3dfx.ko and linux.ko through
827	its dependencies.
828
82920060204:
830	The 'audit' group was added to support the new auditing functionality
831	in the base system.  Be sure to follow the directions for updating,
832	including the requirement to run mergemaster -p.
833
83420060201:
835	The kernel ABI to file system modules was changed on i386.
836	Please make sure that your kernel and modules are in sync.
837
83820060118:
839	This actually occured some time ago, but installing the kernel
840	now also installs a bunch of symbol files for the kernel modules.
841	This increases the size of /boot/kernel to about 67Mbytes. You
842	will need twice this if you will eventually back this up to kernel.old
843	on your next install.
844	If you have a shortage of room in your root partition, you should add
845	-DINSTALL_NODEBUG to your make arguments or add INSTALL_NODEBUG="yes"
846	to your /etc/make.conf.
847
84820060113:
849	libc's malloc implementation has been replaced.  This change has the
850	potential to uncover application bugs that previously went unnoticed.
851	See the malloc(3) manual page for more details.
852
85320060112:
854	The generic netgraph(4) cookie has been changed. If you upgrade
855	kernel passing this point, you also need to upgrade userland
856	and netgraph(4) utilities like ports/net/mpd or ports/net/mpd4.
857
85820060106:
859	si(4)'s device files now contain the unit number.
860	Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
861
86220060106:
863	The kernel ABI was mostly destroyed due to a change in the size
864	of struct lock_object which is nested in other structures such
865	as mutexes which are nested in all sorts of other structures.
866	Make sure your kernel and modules are in sync.
867
86820051231:
869	The page coloring algorithm in the VM subsystem was converted
870	from tuning with kernel options to autotuning. Please remove
871	any PQ_* option except PQ_NOOPT from your kernel config.
872
87320051211:
874	The net80211-related tools in the tools/tools/ath directory
875	have been moved to tools/tools/net80211 and renamed with a
876	"wlan" prefix.  Scripts that use them should be adjusted
877	accordingly.
878
87920051202:
880	Scripts in the local_startup directories (as defined in
881	/etc/defaults/rc.conf) that have the new rc.d semantics will
882	now be run as part of the base system rcorder. If there are
883	errors or problems with one of these local scripts, it could
884	cause boot problems. If you encounter such problems, boot in
885	single user mode, remove that script from the */rc.d directory.
886	Please report the problem to the port's maintainer, and the
887	freebsd-ports@freebsd.org mailing list.
888
88920051129:
890	The nodev mount option was deprecated in RELENG_6 (where it
891	was a no-op), and is now unsupported.  If you have nodev or dev listed
892	in /etc/fstab, remove it, otherwise it will result in a mount error.
893
89420051129:
895	ABI between ipfw(4) and ipfw(8) has been changed. You need
896	to rebuild ipfw(8) when rebuilding kernel.
897
89820051108:
899	rp(4)'s device files now contain the unit number.
900	Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
901
90220051029:
903	/etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
904	Its /etc/rc.conf.d configuration file has been `ppp' from
905	the beginning, and hence there is no need to touch it.
906
90720051014:
908	Now most modules get their build-time options from the kernel
909	configuration file.  A few modules still have fixed options
910	due to their non-conformant implementation, but they will be
911	corrected eventually.  You may need to review the options of
912	the modules in use, explicitly specify the non-default options
913	in the kernel configuration file, and rebuild the kernel and
914	modules afterwards.
915
91620051001:
917	kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
918	to turn polling(4) on your interfaces.
919
92020050927:
921	The old bridge(4) implementation was retired.  The new
922	if_bridge(4) serves as a full functional replacement.
923
92420050722:
925	The ai_addrlen of a struct addrinfo was changed to a socklen_t
926	to conform to POSIX-2001.  This change broke an ABI
927	compatibility on 64 bit architecture.  You have to recompile
928	userland programs that use getaddrinfo(3) on 64 bit
929	architecture.
930
93120050711:
932	RELENG_6 branched here.
933
93420050629:
935	The pccard_ifconfig rc.conf variable has been removed and a new
936	variable, ifconfig_DEFAULT has been introduced.  Unlike
937	pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
938	do not have ifconfig_ifn entries rather than just those in
939	removable_interfaces.
940
94120050616:
942	Some previous versions of PAM have permitted the use of
943	non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
944	to third party PAM modules in /usr/local/lib.  A change has been
945	made to require the use of absolute paths in order to avoid
946	ambiguity and dependence on library path configuration, which may
947	affect existing configurations.
948
94920050610:
950	Major changes to network interface API.  All drivers must be
951	recompiled.  Drivers not in the base system will need to be
952	updated to the new APIs.
953
95420050609:
955	Changes were made to kinfo_proc in sys/user.h.  Please recompile
956	userland, or commands like `fstat', `pkill', `ps', `top' and `w'
957	will not behave correctly.
958
959	The API and ABI for hwpmc(4) have changed with the addition
960	of sampling support.  Please recompile lib/libpmc(3) and
961	usr.sbin/{pmcstat,pmccontrol}.
962
96320050606:
964	The OpenBSD dhclient was imported in place of the ISC dhclient
965	and the network interface configuration scripts were updated
966	accordingly.  If you use DHCP to configure your interfaces, you
967	must now run devd.  Also, DNS updating was lost so you will need
968	to find a workaround if you use this feature.
969
970	The '_dhcp' user was added to support the OpenBSD dhclient.  Be
971	sure to run mergemaster -p (like you are supposed to do every time
972	anyway).
973
97420050605:
975	if_bridge was added to the tree. This has changed struct ifnet.
976	Please recompile userland and all network related modules.
977
97820050603:
979	The n_net of a struct netent was changed to an uint32_t, and
980	1st argument of getnetbyaddr() was changed to an uint32_t, to
981	conform to POSIX-2001.  These changes broke an ABI
982	compatibility on 64 bit architecture.  With these changes,
983	shlib major of libpcap was bumped.  You have to recompile
984	userland programs that use getnetbyaddr(3), getnetbyname(3),
985	getnetent(3) and/or libpcap on 64 bit architecture.
986
98720050528:
988	Kernel parsing of extra options on '#!' first lines of shell
989	scripts has changed.  Lines with multiple options likely will
990	fail after this date.  For full details, please see
991		http://people.freebsd.org/~gad/Updating-20050528.txt
992
99320050503:
994	The packet filter (pf) code has been updated to OpenBSD 3.7
995	Please note the changed anchor syntax and the fact that
996	authpf(8) now needs a mounted fdescfs(5) to function.
997
99820050415:
999	The NO_MIXED_MODE kernel option has been removed from the i386
1000	amd64 platforms as its use has been superceded by the new local
1001	APIC timer code.  Any kernel config files containing this option
1002	should be updated.
1003
100420050227:
1005	The on-disk format of LC_CTYPE files was changed to be machine
1006	independent.  Please make sure NOT to use NO_CLEAN buildworld
1007	when crossing this point. Crossing this point also requires
1008	recompile or reinstall of all locale depended packages.
1009
101020050225:
1011	The ifi_epoch member of struct if_data has been changed to
1012	contain the uptime at which the interface was created or the
1013	statistics zeroed rather then the wall clock time because
1014	wallclock time may go backwards.  This should have no impact
1015	unless an snmp implementation is using this value (I know of
1016	none at this point.)
1017
101820050224:
1019	The acpi_perf and acpi_throttle drivers are now part of the
1020	acpi(4) main module.  They are no longer built separately.
1021
102220050223:
1023	The layout of struct image_params has changed. You have to
1024	recompile all compatibility modules (linux, svr4, etc) for use
1025	with the new kernel.
1026
102720050223:
1028	The p4tcc driver has been merged into cpufreq(4).  This makes
1029	"options CPU_ENABLE_TCC" obsolete.  Please load cpufreq.ko or
1030	compile in "device cpufreq" to restore this functionality.
1031
103220050220:
1033	The responsibility of recomputing the file system summary of
1034	a SoftUpdates-enabled dirty volume has been transferred to the
1035	background fsck.  A rebuild of fsck(8) utility is recommended
1036	if you have updated the kernel.
1037
1038	To get the old behavior (recompute file system summary at mount
1039	time), you can set vfs.ffs.compute_summary_at_mount=1 before
1040	mounting the new volume.
1041
104220050206:
1043	The cpufreq import is complete.  As part of this, the sysctls for
1044	acpi(4) throttling have been removed.  The power_profile script
1045	has been updated, so you can use performance/economy_cpu_freq in
1046	rc.conf(5) to set AC on/offline cpu frequencies.
1047
104820050206:
1049	NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
1050	requires recompiling libnetgraph and userland netgraph utilities.
1051
105220050114:
1053	Support for abbreviated forms of a number of ipfw options is
1054	now deprecated.  Warnings are printed to stderr indicating the
1055	correct full form when a match occurs.  Some abbreviations may
1056	be supported at a later date based on user feedback.  To be
1057	considered for support, abbreviations must be in use prior to
1058	this commit and unlikely to be confused with current key words.
1059
106020041221:
1061	By a popular demand, a lot of NOFOO options were renamed
1062	to NO_FOO (see bsd.compat.mk for a full list).  The old
1063	spellings are still supported, but will cause annoying
1064	warnings on stderr.  Make sure you upgrade properly (see
1065	the COMMON ITEMS: section later in this file).
1066
106720041219:
1068	Auto-loading of ancillary wlan modules such as wlan_wep has
1069	been temporarily disabled; you need to statically configure
1070	the modules you need into your kernel or explicitly load them
1071	prior to use.  Specifically, if you intend to use WEP encryption
1072	with an 802.11 device load/configure wlan_wep; if you want to
1073	use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
1074	and wlan_xauth as required.
1075
107620041213:
1077	The behaviour of ppp(8) has changed slightly.  If lqr is enabled
1078	(``enable lqr''), older versions would revert to LCP ECHO mode on
1079	negotiation failure.  Now, ``enable echo'' is required for this
1080	behaviour.  The ppp version number has been bumped to 3.4.2 to
1081	reflect the change.
1082
108320041201:
1084	The wlan support has been updated to split the crypto support
1085	into separate modules.  For static WEP you must configure the
1086	wlan_wep module in your system or build and install the module
1087	in place where it can be loaded (the kernel will auto-load
1088	the module when a wep key is configured).
1089
109020041201:
1091	The ath driver has been updated to split the tx rate control
1092	algorithm into a separate module.  You need to include either
1093	ath_rate_onoe or ath_rate_amrr when configuring the kernel.
1094
109520041116:
1096	Support for systems with an 80386 CPU has been removed.  Please
1097	use FreeBSD 5.x or earlier on systems with an 80386.
1098
109920041110:
1100	We have had a hack which would mount the root filesystem
1101	R/W if the device were named 'md*'.  As part of the vnode
1102	work I'm doing I have had to remove this hack.  People
1103	building systems which use preloaded MD root filesystems
1104	may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
1105	their /etc/rc scripts.
1106
110720041104:
1108	FreeBSD 5.3 shipped here.
1109
111020041102:
1111	The size of struct tcpcb has changed again due to the removal
1112	of RFC1644 T/TCP.  You have to recompile userland programs that
1113	read kmem for tcp sockets directly (netstat, sockstat, etc.)
1114
111520041022:
1116	The size of struct tcpcb has changed.  You have to recompile
1117	userland programs that read kmem for tcp sockets directly
1118	(netstat, sockstat, etc.)
1119
112020041016:
1121	RELENG_5 branched here.  For older entries, please see updating
1122	in the RELENG_5 branch.
1123
1124COMMON ITEMS:
1125
1126	General Notes
1127	-------------
1128	Avoid using make -j when upgrading.  From time to time in the
1129	past there have been problems using -j with buildworld and/or
1130	installworld.  This is especially true when upgrading between
1131	"distant" versions (eg one that cross a major release boundary
1132	or several minor releases, or when several months have passed
1133	on the -current branch).
1134
1135	Sometimes, obscure build problems are the result of environment
1136	poisoning.  This can happen because the make utility reads its
1137	environment when searching for values for global variables.
1138	To run your build attempts in an "environmental clean room",
1139	prefix all make commands with 'env -i '.  See the env(1) manual
1140	page for more details.
1141
1142	When upgrading from one major version to another it is generally
1143	best to upgrade to the latest code in the currently installed branch
1144	first, then do an upgrade to the new branch. This is the best-tested
1145	upgrade path, and has the highest probability of being successful.
1146	Please try this approach before reporting problems with a major
1147	version upgrade.
1148
1149	To build a kernel
1150	-----------------
1151	If you are updating from a prior version of FreeBSD (even one just
1152	a few days old), you should follow this procedure.  It is the most
1153	failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
1154
1155	make kernel-toolchain
1156	make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1157	make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1158
1159	To test a kernel once
1160	---------------------
1161	If you just want to boot a kernel once (because you are not sure
1162	if it works, or if you want to boot a known bad kernel to provide
1163	debugging information) run
1164	make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
1165	nextboot -k testkernel
1166
1167	To just build a kernel when you know that it won't mess you up
1168	--------------------------------------------------------------
1169	This assumes you are already running a 5.X system.  Replace
1170	${arch} with the architecture of your machine (e.g. "i386",
1171	"alpha", "amd64", "ia64", "pc98", "sparc64", etc).
1172
1173	cd src/sys/${arch}/conf
1174	config KERNEL_NAME_HERE
1175	cd ../compile/KERNEL_NAME_HERE
1176	make depend
1177	make
1178	make install
1179
1180	If this fails, go to the "To build a kernel" section.
1181
1182	To rebuild everything and install it on the current system.
1183	-----------------------------------------------------------
1184	# Note: sometimes if you are running current you gotta do more than
1185	# is listed here if you are upgrading from a really old current.
1186
1187	<make sure you have good level 0 dumps>
1188	make buildworld
1189	make kernel KERNCONF=YOUR_KERNEL_HERE
1190							[1]
1191	<reboot in single user>				[3]
1192	mergemaster -p					[5]
1193	make installworld
1194	make delete-old
1195	mergemaster					[4]
1196	<reboot>
1197
1198
1199	To cross-install current onto a separate partition
1200	--------------------------------------------------
1201	# In this approach we use a separate partition to hold
1202	# current's root, 'usr', and 'var' directories.   A partition
1203	# holding "/", "/usr" and "/var" should be about 2GB in
1204	# size.
1205
1206	<make sure you have good level 0 dumps>
1207	<boot into -stable>
1208	make buildworld
1209	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1210	<maybe newfs current's root partition>
1211	<mount current's root partition on directory ${CURRENT_ROOT}>
1212	make installworld DESTDIR=${CURRENT_ROOT}
1213	make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1214	make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1215	cp /etc/fstab ${CURRENT_ROOT}/etc/fstab 		   # if newfs'd
1216	<edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1217	<reboot into current>
1218	<do a "native" rebuild/install as described in the previous section>
1219	<maybe install compatibility libraries from ports/misc/compat*>
1220	<reboot>
1221
1222
1223	To upgrade in-place from 5.x-stable to current
1224	----------------------------------------------
1225	<make sure you have good level 0 dumps>
1226	make buildworld					[9]
1227	make kernel KERNCONF=YOUR_KERNEL_HERE		[8]
1228							[1]
1229	<reboot in single user>				[3]
1230	mergemaster -p					[5]
1231	make installworld
1232	make delete-old
1233	mergemaster -i					[4]
1234	<reboot>
1235
1236	Make sure that you've read the UPDATING file to understand the
1237	tweaks to various things you need.  At this point in the life
1238	cycle of current, things change often and you are on your own
1239	to cope.  The defaults can also change, so please read ALL of
1240	the UPDATING entries.
1241
1242	Also, if you are tracking -current, you must be subscribed to
1243	freebsd-current@freebsd.org.  Make sure that before you update
1244	your sources that you have read and understood all the recent
1245	messages there.  If in doubt, please track -stable which has
1246	much fewer pitfalls.
1247
1248	[1] If you have third party modules, such as vmware, you
1249	should disable them at this point so they don't crash your
1250	system on reboot.
1251
1252	[3] From the bootblocks, boot -s, and then do
1253		fsck -p
1254		mount -u /
1255		mount -a
1256		cd src
1257		adjkerntz -i		# if CMOS is wall time
1258	Also, when doing a major release upgrade, it is required that
1259	you boot into single user mode to do the installworld.
1260
1261	[4] Note: This step is non-optional.  Failure to do this step
1262	can result in a significant reduction in the functionality of the
1263	system.  Attempting to do it by hand is not recommended and those
1264	that pursue this avenue should read this file carefully, as well
1265	as the archives of freebsd-current and freebsd-hackers mailing lists
1266	for potential gotchas.
1267
1268	[5] Usually this step is a noop.  However, from time to time
1269	you may need to do this if you get unknown user in the following
1270	step.  It never hurts to do it all the time.  You may need to
1271	install a new mergemaster (cd src/usr.sbin/mergemaster && make
1272	install) after the buildworld before this step if you last updated
1273	from current before 20020224 or from -stable before 20020408.
1274
1275	[8] In order to have a kernel that can run the 4.x binaries
1276	needed to do an installworld, you must include the COMPAT_FREEBSD4
1277	option in your kernel.  Failure to do so may leave you with a system
1278	that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1279	is required to run the 5.x binaries on more recent kernels.
1280
1281	Make sure that you merge any new devices from GENERIC since the
1282	last time you updated your kernel config file.
1283
1284	[9] When checking out sources, you must include the -P flag to have
1285	cvs prune empty directories.
1286
1287	If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1288	"?=" instead of the "=" assignment operator, so that buildworld can
1289	override the CPUTYPE if it needs to.
1290
1291	MAKEOBJDIRPREFIX must be defined in an environment variable, and
1292	not on the command line, or in /etc/make.conf.  buildworld will
1293	warn if it is improperly defined.
1294FORMAT:
1295
1296This file contains a list, in reverse chronological order, of major
1297breakages in tracking -current.  Not all things will be listed here,
1298and it only starts on October 16, 2004.  Updating files can found in
1299previous releases if your system is older than this.
1300
1301Copyright information:
1302
1303Copyright 1998-2005 M. Warner Losh.  All Rights Reserved.
1304
1305Redistribution, publication, translation and use, with or without
1306modification, in full or in part, in any form or format of this
1307document are permitted without further permission from the author.
1308
1309THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1310IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1311WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1312DISCLAIMED.  IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1313INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1314(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1315SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1316HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1317STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1318IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1319POSSIBILITY OF SUCH DAMAGE.
1320
1321If you find this document useful, and you want to, you may buy the
1322author a beer.
1323
1324Contact Warner Losh if you have any questions about your use of
1325this document.
1326
1327$FreeBSD: head/UPDATING 189597 2009-03-09 19:56:37Z stas $
1328