UPDATING revision 130953
1Updating Information for FreeBSD current users
2
3This file is maintained and copyrighted by M. Warner Losh
4<imp@village.org>.  See end of file for further details.  For commonly
5done items, please see the COMMON ITEMS: section later in the file.
6
7NOTE TO PEOPLE WHO THINK THAT FreeBSD 5.x IS SLOW:
8	FreeBSD 5.x has many debugging features turned on, in
9	both the kernel and userland.  These features attempt to detect
10	incorrect use of system primitives, and encourage loud failure
11	through extra sanity checking and fail stop semantics.  They
12	also substantially impact system performance.  If you want to
13	do performance measurement, benchmarking, and optimization,
14	you'll want to turn them off.  This includes various WITNESS-
15	related kernel options, INVARIANTS, malloc debugging flags
16	in userland, and various verbose features in the kernel.  Many
17	developers choose to disable these features on build machines
18	to maximize performance.
19
2020040623:
21	pf was updated to OpenBSD-stable 3.5 and pflogd(8) is priviledge
22	separated now. It uses the newly created "_pflogd" user/group
23	combination. If you plan to use pflogd(8) make sure to run
24	mergemaster -p or install the "_pflogd" user and group manually.
25
2620040622:
27	Network interface cloning has been overhauled.  This change will
28	require a recompile of modules using cloning and modification of
29	external ones to the new API.  __FreeBSD_version has been bumped
30	to 502119 to mark this change.  Additionally, users creating
31	stf(4) interfaces via "ifconfig stf" will need to update their
32	scripts as this will create an interface named "stf" instead of
33	"stf0" and ifconfig will not print "stf0" to stdout.
34
3520040621:
36	On 20040524, the /etc/rc.d/nsswitch script was modified to
37	automatically create /etc/nsswitch.conf on startup if it did
38	not already exist.  Unfortunately, an error in the man page
39	was carried over to the script, resulting in incorrect
40	nsswitch settings.  The simplest remedy is to remove both
41	/etc/nsswitch.conf and /etc/host.conf; they will be recreated
42	during the next reboot.
43
4420040614:
45	The return value of sema_timedwait(9) has been changed to
46	make it consistent with cv_timedwait(9).  Be sure to recompile
47	the ips module and any third-party modules which call
48	sema_timedwait.
49
5020040613:
51	ALTQ is now linked to the build. This breaks ABI for struct ifnet.
52	Make sure to recompile modules and any userland that makes use of
53	sizeof(struct ifnet). In order to get the altq headers in place
54	please recompile and reinstall world.
55
5620040607:
57	Splitting kern_thread.c into 2 files (adding kern_kse.c)
58	requires that you re-run config after updating your tree.
59
6020040601:
61	The MIDI drivers have been removed. Until the new module-friendly
62	ones are merged, remove or comment out midi and seq from your
63	kernel configuration.
64
6520040423:
66	Due to a new option in ipfw (versrcreach) the ipfw(8) command
67	needs to be recompiled.  Normal accept/reject rules without
68	options are not affected but those with options may break until
69	ipfw(8) is recompiled.
70
7120040420:
72	Due to changes in the callout ABI, kernels compiled after this
73	date may be incompatible with kernel modules compiled prior to
74	20040406.
75
7620040414:
77	The PCI bus power state stuff has been turned on.  If this causes
78	problems for your system, please disable it using the tunable
79	hw.pci.do_powerstate=0.
80
8120040412:
82	The bulk of the pci problems have been fixed, although the floppy
83	drive is still broken.
84
8520040410:
86	A substantial update to the pci bus resource and power management
87	have been committed.  Expect a bumpy ride for a few days until
88	the unanticipated problems have been resolved.
89
9020040409:
91        Due to changes in the the Yarrow initialization process,
92        /dev/random needs to be fed before operations requiring
93        temp files can succeed in single user mode.  This includes
94        running "make installworld". /dev/random may be fed by running
95        "/etc/rc.d/initrandom start" or with 20040415 source by running
96        "/etc/rc.d/preseedrandom".
97
9820040322:
99	The debug.mpsafenet tunable controls whether the kernel Giant
100	lock is held across the lower levels of the network stack, and
101	by default is turned off.  In the few days following 20040322,
102	the behavior of debug.mpsafenet will change such that this
103	tunable controls Giant over all levels of the network stack.
104	If you are currently setting debug.mpsafenet to 1, you should
105	set it back to 0 (the default) again during the change-over.
106	An additional note will be added to UPDATING when sufficient
107	locking is merged to permit this to take place.
108
10920040310:
110	The FreeBSD/sparc64 platform is changing time_t from 32-bits to
111	64-bits.  This is a very major incompatible change, so people
112	using FreeBSD/sparc64 *must* read the UPDATING.64BTT file for
113	detailed instructions on how to make this upgrade.  People
114	upgrading FreeBSD on other platforms can ignore this event.
115
11620040308:
117	The packet filter (pf) is now installed with the base system. Make
118	sure to run mergemaster -p before installworld to create required
119	user account ("proxy"). If you do not want to build pf with your
120	system you can use the NO_PF knob in make.conf.
121	Also note that pf requires "options PFIL_HOOKS" in the kernel. The
122	pf system consists of the following three devices:
123	device		pf		# required
124	device		pflog		# optional
125	device		pfsync		# optional
126
12720040303:
128	If you are having trouble with the libc_r -> libpthread transition
129	(see the 20040130 entry), place the following lines at the top of
130	/etc/libmap.conf:
131
132	libc_r.so.5		libpthread.so.1
133	libc_r.so		libpthread.so
134
135	This will cause all programs and libraries linked against libc_r
136	to use libpthread instead.
137
13820040226:
139	Some sshd configuration defaults have changed: protocol version 1
140	is no longer enabled by default, and password authentication is
141	disabled by default if PAM is enabled (which it is by default).
142	OpenSSH clients should not be affected by this; other clients may
143	have to be reconfigured, upgraded or replaced.
144
14520040225:
146	The ABIs defined in <resolv.h> and <netdb.h> have been updated
147	to support improved reentrancy.  Multi-threaded programs that
148	reference the "_res" or "h_errno" symbols may experience some
149	problems if they are not recompiled.  Single-threaded programs
150	should remain unaffected.
151
15220040225:
153	routed has been updated in the base system from the vendor
154	sources, routed v2.27, from rhyolite.com. This change means that
155	for users who use RIP's MD5 authentication feature, FreeBSD
156	-CURRENT's routed is now incompatible with previous versions
157	of FreeBSD; however it is now compatible with implementations
158	from Sun, Cisco and other vendors.
159
16020040224:
161	The tcpcb structure has changed and makes a recompile of libkvm
162	and related userland network utilities neccessary.
163
16420040222:
165	The cdevsw structure has changed in two externally visible ways.
166	First, the sense of the D_GIANT flag has changed to D_NEEDSGIANT.
167	Second, the d_version field must be filled in with D_VERSION.
168	Drivers outside the tree will need to be updated.
169
17020040207:
171	The /etc/rc.d/ttys script has been removed. It is no longer
172	necessary since devfs has been mandatory for some time.
173
17420040130:
175	libkse has been renamed back to libpthread and is now the
176	default threads library.  The gcc -pthread option has also
177	been changed to link to libpthread instead of libc_r.  For
178	alpha and sparc64 machines, libkse is not renamed and links
179	are installed so that libpthread points to libc_r.  Until
180	the ports system is updated to handle this change, it is
181	recommended that folks install an /etc/libmap.conf(5) that
182	maps libc_r to libpthread.  If you have any binaries or
183	libraries linked to libkse, then it is also recommended
184	that you map libkse to libpthread.  Anyone that is using
185	nvidia supplied drivers and libraries should use a libmap.conf
186	that maps libpthread to libc_r since their drivers/libraries
187	do not work with libpthread.
188
18920040125:
190	ULE has entered into its probationary period as the default scheduler
191	in GENERIC.  For the average user, interactivity is reported to be
192	better in many cases.  On SMP machines ULE will be able to make more
193	efficient use of the available parallel resources.  If you are not
194	running it now, please switch over, replacing the kernel option
195	SCHED_4BSD with SCHED_ULE.
196
19720040125:
198	Move LongRun support out of identcpu.c, where it hardly
199	belongs, into its own file and make it opt-in, not mandatory,
200	depending on CPU_ENABLE_LONGRUN config(8) option.
201
20220031213:
203	src/lib/libc/gen/initgroups.c:1.8 now causes logins to fail
204	if the login process is unable to successfully set the
205	process credentials to include all groups defined for the
206	user.  The current kernel limit is 16 groups; administrators
207	may wish to check that users do not have over 16 groups
208	defined, or they will be unable to log in.
209
21020031203:
211	The ACPI module has been reactivated.  It is no longer required
212	to compile ACPI support into kernels statically.
213
21420031112:
215	The statfs structure has been updated with 64-bit fields to
216	allow accurate reporting of multi-terabyte filesystem
217	sizes. You should build world, then build and boot the new kernel
218	BEFORE doing a `installworld' as the new kernel will know about
219	binaries using the old statfs structure, but an old kernel will
220	not know about the new system calls that support the new statfs
221	structure.
222	Note that the backwards compatibility is only present when the
223	kernel is configured with the COMPAT_FREEBSD4 option. Since
224	even /bin/sh will not run with a new kernel without said option
225	you're pretty much dead in the water without it. Make sure you
226	have COMPAT_FREEBSD4!
227	Running an old kernel after a `make world' will cause programs
228	such as `df' that do a statfs system call to fail with a bad
229	system call. Marco Wertejuk <wertejuk@mwcis.com> also reports
230	that cfsd (ports/security/cfs) needs to be recompiled after
231	these changes are installed.
232
233	****************************DANGER*******************************
234
235	DO NOT make installworld after the buildworld w/o building and
236	installing a new kernel FIRST.  You will be unable to build a
237	new kernel otherwise on a system with new binaries and an old
238	kernel.
239
24020031112:
241	Some netgraph string length constants have been changed. This
242	change requires the netgraph kernel modules and all netgraph
243	userland components to be in sync. Especially users who require
244	netgraph to boot need to make sure to have world and kernel in
245	sync before rebooting.
246
24720031111:
248	Hyperthreading logical CPU's are no longer probed by default
249	when using the MP Table.  If ACPI is being used, then logical
250	CPUs will be probed if hyperthreading is enabled in the BIOS.
251	If ACPI is not being used and hyperthreading is enabled in the
252	BIOS, logical CPUs can be enabled by building a custom kernel
253	with the option MPTABLE_FORCE_HTT enabled.
254
25520031103:
256	The i386 APIC_IO kernel option has been replaced by
257	'device apic'.  The ACPI module has also been temporarily
258	disabled, so ACPI must be statically compiled into your
259	kernel using 'device acpi' if you wish to use the ACPI driver.
260
26120031031:
262	The API and ABI of struct ifnet have been changed by removing
263	the if_name and if_unit members and replacing them with
264	if_xname, if_dname, and if_dunit.  All network drivers and most
265	userland programs which include net/if_var.h must be updated
266	and recompiled.  __FreeBSD_version has been bumped to 501113 to
267	reflect this change.
268
26920030928:
270	Changes to the cdevsw default functions have been made to remove
271	the need to specify nullopen() and nullclose() explicitly.
272	__FreeBSD_version bumpted to 501110.
273
27420030926:
275	kiconv(3) has been added. mount_msdosfs(8), mount_ntfs(8) and
276	mount_cd9660(8) need to be in sync with kernel.
277
27820030925:
279	Configuring a system to use IPFILTER now requires that PFIL_HOOKS
280	also be explicitly configured.  Previously this dependency was
281	magically handled through some cruft in net/pfil.h; but that has
282	been removed.  Building a kernel with IPFILTER but not PFIL_HOOKS
283	will fail with obtuse errors in ip_fil.c.
284
28520030923:
286	Fix a bug in arplookup(), whereby a hostile party on a locally
287	attached network could exhaust kernel memory, and cause a system
288	panic, by sending a flood of spoofed ARP requests. See
289	FreeBSD-SA-03:14.arp.
290
29120030915:
292	A change to /etc/defaults/rc.conf now causes inetd to be started
293	with `-C 60' if it is not overridden in /etc/rc.conf.  This
294	causes inetd to stop accepting connections from an IP address
295	that exceeds the rate of 60 connections per minute.
296
29720030829:
298	The following rc.d scripts have been removed and should be
299	deleted from your installation: atm2.sh atm3.sh devdb
300	localdaemons network1 network2 network3. Depending on when
301	you last updated world and used mergemaster(8) you may or
302	may not have problems during the rc boot sequence. The simplest
303	solution is an 'rm -rf /etc/rc.d/*' and then 'mergemaster -i'.
304	The atm2.sh atm3.sh and devdb scripts were removed some time
305	ago, so depending on when you installed -CURRENT these scripts
306	may or may not exist on your system.
307
30820030824:
309	ATAng has been committed. You need to build world as sys/ata.h
310	has changed, and userland atacontrol depends on it.
311	If you use ATA SW raids you need "device ataraid" in your
312	kernel config file, as it is no longer pulled in automatically.
313
31420030819:
315	The OFW_NEWPCI option has been turned on in the Sparc64 GENERIC kernel.
316	Among other things, this changes the device enumeration to be
317	closer to Solaris.  Be aware that, this can even cause the machine
318	to not boot without manual intervention before the fstab is adjusted.
319
32020030728:
321	All current USB and Firewire quirks in da(4) have been deprecated
322	and will be removed for 5.2.  If this causes failure for your
323	umass(4) devices, enable "options DA_OLD_QUIRKS" in your kernel
324	and send the output of "camcontrol inquiry da0" to scsi@freebsd.org
325	so the quirk can be re-enabled.
326
32720030724:
328	Problems with entry 20030714 have been corrected and no known issues
329	with /rescue and -j exist for host systems after this point in time.
330
33120030722:
332	FPU-less support has been removed from FreeBSD.  Chances are you won't
333	notice.  386+387 support should still work after this change, but
334	it is now a minimum requirement for the i386 port that you have real
335	FPU hardware.
336
33720030714:
338	Some people are having problems with changes related to /rescue.
339	If you are building -j N, you will need to define NO_RESCUE.  Others
340	will need to define it if /rescue has issues with their environment.
341	People should report those issues to current@.
342
34320030711:
344	gcc was upgraded to 3.3.  You are advised to not build -DNOCLEAN
345	across this point.  Further, it might be a good idea to remove
346	/usr/obj.
347
34820030610:
349	Remove deprecated locale names and transition period code
350	for them, finishing switching to the new scheme. Check your
351	LANG environment variable.
352
35320030609:
354	CCD has been changed to be a fully GEOMified class.  Kernel
355	and ccdconfig(8) needs to be in sync, this is particularly
356	important to remember beforehand if your source tree is on
357	a ccd device.  Consider making a copy of the old ccdconfig
358	into /boot/kernel.good or wherever you keep your backup
359	kernel.
360
36120030605:
362	There was a small window in which sed(1) was broken.  If you
363	happen to have sed(1) installed during that window, which is
364	evidenced by an inability to build world with the failure
365	given below, you need to manually build and install sed(1)
366	(and only sed(1)) before doing anything else. This is a one-
367	time snafu. Typical failure mode:
368
369	In file included from /usr/src/contrib/binutils/bfd/targets.c:1092:
370	targmatch.h:7:1: null character(s) ignored
371	targmatch.h:12:1: null character(s) ignored
372	targmatch.h:16:1: null character(s) ignored
373		:
374
375	The window of "sed(1)-uction" is from Wed Jun 4 15:31:55 2003 UTC
376	to Thu Jun 5 12:10:19 2003 UTC (from rev 1.30 to rev 1.31 of
377	usr.bin/sed/process.c).
378
37920030505:
380	Kerberos 5 (Heimdal) is now built by default. Setting
381	MAKE_KERBEROS5 no longer has any effect. If you do NOT
382	want the "base" Kerberos 5, you need to set NO_KERBEROS.
383
38420030502:
385	groff has been updated.  If you try to do a buildworld and
386	get an infinite loop in troff, update to May 4th or newer.  If you
387	have a newer kernel than userland, you may need to set the OSRELDATE
388	to 500110 in your environment before starting a buildworld.
389
39020030501:
391	The old rc system has been removed.  Please report any problems
392	to freebsd-rc@yahoogroups.com, and/or freebsd-current@freebsd.org.
393	Your personal versions of these files will not be removed, so you can
394	continue to use them. However, you should take great care when updating,
395	especially when using mergemaster, since the compatibility code that
396	utilizes these old scripts has also been removed.
397
39820030423:
399	A bug has been fixed in /dev/devctl which would cause devd
400	to hang on boot, were it not for a workaround in devd.  The
401	work around in devd will be removed around 20030507.  You
402	have until then to upgrade your kernel before updating
403	userland.  In general, you should have a userland and
404	kernel that's in sync with each other.  However, given the
405	effects of this bug (hang on boot when starting devd), some
406	allowances are made.
407
40820030329:
409	Alphas with libc from between 20030312 and 20030329 exhibit
410	floating point exceptions (FPEs), most notably in awk(1)
411	while upgrading the system through a buildworld.
412
413	So, to successfully upgrade your Alpha, you must either
414	downgrade your libc.so to a pre-20030312 version, or update
415	/usr/share/mk/bsd.cpu.mk to revision 1.26 which adds -mieee
416	to CFLAGS, then forcibly rebuild and install libc:
417
418	cd /usr/src/lib/libc && \
419	    make cleandir && make obj && \
420	    make -DNOMAN -DNOPROFILE all && \
421	    make -DNOMAN -DNOPROFILE install
422
42320030208:
424	sendmail 8.12.7 has been imported.  It has one important
425	change for IPv6 users.  The default submit.mc now uses
426	'[127.0.0.1]' instead of 'localhost' meaning only IPv4 is
427	used to connect to the MTA.  Users on IPv6-only machines
428	will need to edit /etc/mail/submit.mc appropriately.
429
43020030128:
431	NODEVFS option has been removed and DEVFS thereby made standard.
432	This makes all references to MAKEDEV obsolete, and they should
433	be removed when convenient.
434
43520030126:
436	The name of the device for the ofw console has changed, sparc64 users
437	must run mergemaster to update their installed /etc/ttys.
438
43920030125:
440	The scheduler framework has grown a second scheduler and consequently
441	you must specify one and only one scheduler in your kernel config.
442	The cvs config files have been updated to use the old scheduler
443	which may be selected via 'options SCHED_4BSD'.  If you would like
444	to try the new, much more experimental, scheduler please try
445	'options SCHED_ULE' and contribute to the arch@ discussion.
446
44720030115:
448	A new version of the wi driver has been imported into the tree.
449	One now must have device wlan in the config file for it to operate
450	properly.
451
452	In addition, there have been some changes to how wi devices are
453	configured for point to point links to bring it more in line
454	with the former way of doing things, as well as compatibility
455	with NetBSD.
456
45720021222:
458 	For a period after the GCC 3.2.1 import (from 12/04 to 12/22), GCC
459 	used an incompatible form of ABI for returning structures and unions
460 	which FreeBSD's GCC maintainers were not aware of relative to previous
461 	versions of FreeBSD.  We have gone back to the ABI for now, and any
462 	code compiled which is required to interoperate with other code (not
463 	built at the same time) returning structs or unions should be
464	rebuilt.
465
46620021216:
467	A name change in /etc/netconfig has been reverted to stay
468	compatible with suns TIRPC and also with NetBSD. You need
469	to run mergemaster after make world. A new libc does still work
470	with an outdated /etc/netconfig for some time, but you'll get
471	a warning. This warning will be removed in 20030301.
472
47320021202:
474	The recent binutils upgrade marks a kernel flag day on
475	sparc64: modules built with the old binutils will not work
476	with new kernels and vice versa. Mismatches will result in
477	panics.  Make sure your kernel and modules are in sync.
478
47920021029:
480	The value of IPPROTO_DIVERT has changed.  Make sure to keep
481	your kernel, netstat, natd and any third-party DIVERT
482	consumers in sync.
483
48420021024:
485	Old, compatibility slices have been removed in GEOM kernels.
486	This means that you will have to update your /etc/fstab to
487	not use disk devices of the form /dev/ad0a.  Instead, you
488	now must specify /dev/ad0s1a, or whatever slice your FreeBSD
489	partition really is on.  The old device names have gone
490	away, so if you use them anywhere else, you must also adjust
491	those uses.  (This doesn't affect the disks formatted in
492	the ``dangerously-dedicated'' mode.)
493
49420021023:
495	Alphas with kernels from between 20020830 and 20021023 and/or
496	rtld (ld-elf.so.1) older than 20021023 may experience problems
497	with groff while doing a buildworld (kernel: "out of memory",
498	fixed in rev 1.129 of kern/imgact_elf.c; rtld: "too few PT_LOAD
499	segments", fixed in rev 1.8 of libexec/rtld-elf/map_object.c).
500
501	So, to successfully upgrade your Alpha, you must either
502	upgrade your kernel and rtld first (which might be a bit
503	tricky), or avoid running the bootstrapped groff during the
504	"transitional" buildworld.  To avoid running groff during the
505	transitional upgrade run make buildworld with -DNOMAN,
506	-DNO_SHAREDOCS, and -DNO_LPR.
507
50820020831:
509	gcc has been upgraded to 3.2.  It is not all binary compatible
510	with earlier versions of gcc for c++ programs.  All c++
511	programs and libraries need to be recompiled.
512
513	Also, if you encounter g++ issues, rm /usr/include/g++/* before
514	doing an installworld to make sure that stale files are removed.
515
51620020827:
517	Our /etc/termcap now has all the entries from the XFree86 xterm
518	almost unchanged. This means xterm now supports color by default.
519	If you used TERM=xterm-color in the past you now should use
520	TERM=xterm. (xterm-color will lead to benign warnings).
521
52220020815:
523	A "bug" in gcc(1) that was hiding warning in system headers was
524	fixed.  It's probably time to add -DNO_WERROR to your make line
525	again.
526
52720020729:
528	COPY is being deprecated.  The 20010530 change was reverted, as
529	it causes far more pain than was expected, and to always compare
530	before installing, please use INSTALL="install -C" again.  The
531	-C option is now silently ignored when used with the -d option.
532
53320020702:
534	Problems with libc_r clients like KDE and GNOME have been resolved.
535	There are still some minor problems with some signals but the
536	system is stable enough for general use again. SMP is less so than UP
537	but each can successfully complete multiple buildworlds.
538	Libkvm needs to be recompiled due to KSE.
539
54020020701:
541	Now would be a bad time to upgrade.  Something in or near the
542	KSE commit totally broke programs using libc_r like KDE and
543	GNOME.
544
54520020511:
546	The k5su utility installed as part of Kerberos 5 is no longer
547	installed with the set-user-ID bit set by default.  Add
548	ENABLE_SUID_K5SU=yes to /etc/make.conf to have it installed
549	with the set-user-ID bit set.
550
55120020510:
552	Gcc 3.1 debugging format (cc -g) has changed from STABS to DWARF2.
553	Unfortunately our native GDB (at version 4.18) does not understand
554	the DWARF2 debugging format.  Thus you must use `gcc -gstabs+' to
555	generated debugging information for our native GDB.
556
55720020510:
558	Due to the way CVS works, it may not properly update src/contrib/gcc
559	to the 3.1 sources.  The easiest fix is to `rm -rf' src/contrib/gcc
560	and then do a cvs update.
561
56220020421:
563	When exec'ing set[ug]id executables, the kernel now ensures that the
564	stdio file descriptors (0..2) are open.  See FreeBSD-SA-02:23.stdio.
565
56620020404:
567	New sendmail startup scripts have been installed to make it
568	easier to use alternative MTAs with FreeBSD.  Setting the rc.conf
569	variable sendmail_enable to "NO" no longer prevents any sendmail
570	daemons from starting.  Instead, either set sendmail_enable to
571	"NONE" or change mta_start_script to a script for starting
572	an alternative MTA.  Setting mta_start_script to "" will
573	also prevent any MTA from being started at boot.
574
57520020403:
576	UCONSOLE is no longer a valid kernel option.
577
57820020315:
579	FreeBSD 5.0 DP-1 was basically branched today.
580
58120020225:
582	Warnings are now errors in the kernel.  Unless you are a developer,
583	you should add -DNO_WERROR to your make line.
584
58520020217:
586	sendmail 8.12.2 has been imported.  The sendmail binary is no
587	longer a set-user-ID root binary and the infrastructure to support
588	command line mail submission has changed.  Be sure to run
589	mergemaster (especially for updating /etc/rc, /etc/defaults/rc.conf,
590	and /etc/mail) and read /etc/mail/README for more details.
591
592	Due to the import of sendmail 8.12.2, a new user and group are
593	required in order for sendmail to run as a set-group-ID
594	binary.  A 'make installworld' will use the new user and group
595	to set the owner and group of /var/spool/clientmqueue and will
596	fail if the new user and group do not exist.  The 'smmsp' user
597	and group must be merged from src/etc/group and
598	src/etc/master.passwd before using 'make installworld'.
599	'mergemaster -p' will do this.  You may need to install
600	mergemaster before this will work if you are updating from a
601	very old version of current.  The updating recipe has changed
602	as of this date.
603
60420020112:
605	The preferred configuration method for PAM is now /etc/pam.d/
606	rather than /etc/pam.conf.  If you have an unmodified
607	pam.conf, just delete it after your next mergemaster run.  If
608	you have local modifications, you can use
609	/usr/src/etc/pam.d/convert.pl to incorporate them into your
610	/etc/pam.d.
611
612	Please see the following url for more details:
613http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<xzp6667fyoa.fsf@flood.ping.uio.no>
61420011229:
615	If anyone here is already using the new rc.conf(5) variable
616	networkfs_types, please note that it has changed
617http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<9744.1009655556@axl.seasidesoftware.co.za>
618
61920011220:
620	sys/i4b/driver/i4b_ispppsubr.c has been retired.  This file
621	started out its life in the ISDN4BSD project as an offspring
622	from sys/net/if_spppsubr.c, which eventually got a life of its
623	own.  All the accumulated features and bugfixes of the i4b
624	version have now been merged back into the base system's
625	version now.  The only user-visible change resulting from this
626	is that i4b's sppp(4) interfaces are to be managed with
627	spppcontrol(8) again, since ispppcontrol(8) has been retired
628	as well.  (There has never been rc file support for
629	ispppcontrol in -current, but only in -stable.  That will be
630	reverted by the time the changes are MFCed.)
631
63220011215:
633	The fdc(4) driver has been updated and now automatically
634	recognizes media in `standard' formats (like 1440 KB and
635	720 KB for a 3.5" high-density drive) when accessing the
636	default device node (e. g. /dev/fd0).  The old variety of
637	floppy device nodes /dev/fd*.* is no longer present by
638	default, devices can be created (in DEVFS) on demand.  They
639	will need to be customized then for `odd' densities using
640	fdcontrol(8).
641
64220011209:
643	The bugs in procfs' debugging support code have been fixed,
644	and truss(1) now works again.
645
64620011207:
647	Daily security checks have been split out to use the periodic(8)
648	scripts.  Some change in configuration may be necessary.  Please
649	see
650http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<20011207155805.R8975@blossom.cjclark.org>
651	for details.
652
65320011204:
654	sos added VCD/SVCD support to ata driver and that needs the
655	kernel and burncd to be in sync.
656
65720011203:
658	The procfs pseudo-filesystem has now been converted to use the
659	pseudofs framework.  If you have 'options PROCFS' in your
660	kernel config, you'll need to add 'options PSEUDOFS' if it's
661	not there already.
662
663	This change temporarily breaks truss(1); use ktrace(1) instead
664	until the issue has been resolved.
665
66620011202:
667	A security hole in OpenSSH involving `UseLogin yes' has been
668	patched.
669
67020011126:
671	You need to remove /usr/obj/.../usr.bin/tip before rebuilding
672	after this date.  You need to do this only once.
673
67420011103:
675	Most of the awk issues have been resolved.  Some rough
676	edges may be left, but for the most part things should be
677	back to "normal." For CURRENT's usual definition of "normal."
678
67920011030:
680	Awk has been upgraded to the one true awk from bell labs.  Expect
681	choppy waves in the upgrade process.
682
68320011030:
684	The asr driver problem has been resolved.
685
68620011027:
687	Due to changes in other parts of the system, the asr driver
688	now causes the system to panic on boot.  Do not use it pending
689	correction.  Comment it out of any kernel config file that you
690	try to use from this date forward.
691
69220011025:
693	When crossbuilding, use TARGET=xxx where you used to use
694	MACHINE=xxx.  You don't need to set TARGET_ARCH and TARGET,
695	unless you are changing both of them.  To cross build pc98 on
696	an alpha, for example, you need to set TARGET=pc98 and
697	TARGET_ARCH=i386.
698
69920011001:
700	The kernel interface that burncd depends on has changed.
701	You must recompile both the kernel and userland applications
702	at the same time.
703
70420010929:
705	When crossbuilding, please set TARGET_ARCH rather than
706	MACHINE_ARCH to indicate the target.  In the future, one will
707	set TARGET_MACHINE where you set MACHINE now.  At the moment,
708	setting MACHINE alone for same MACHINE_ARCH machines works
709	(eg, you can build pc98 on an i386 machine and vice versa).
710
71120010927:
712	Some weird problems result from using ACPI on some machines.
713	To disable ACPI you can add
714		hint.acpi.0.disabled="1"
715	to /boot/loader.conf (or by putting set X=Y at the boot
716	loader "ok" prompt).
717
718	Alternatively, you can remove it from /boot/kernel/acpi.ko
719	or use the MODULES_OVERRIDE function in your kernel config
720	file and not list acpi in that list.
721
72220010924:
723	The buildworld has been fixed.  You may need to install
724	the 4.x compatibility libraries for some old binaries
725	to work.  Add COMPAT4X=true to your /etc/make.conf to
726	get them installed on every installworld, or execute the
727	following to get them installed only once:
728		cd src/lib/compat/compat4x.<arch>
729		make all install
730	You will see ``__stdoutp undefined'' until you do this.
731
73220010919:
733	There's a bug in the world build process.  The cross-tools
734	are build with the NEW headers, but the OLD libc.a.  This
735	leads to all kinds of problems with the new libc.  A temporary
736	workaround is to add
737		CFLAGS="-O -pipe -D_OLD_STDIO"
738	before building world when upgrading from 4.x to current.  This
739	can be removed afterwards.
740
741	A proper fix to the buildworld target is needed.
742
74320010918:
744	Peter has committed his new kthread nfs client/server code.
745	NFS may be unstable after this date.
746
74720010912:
748	KSE has hit the tree.  Lots of things are now different in
749	the kernel.  While a few problems were introduced in the
750	initial commit, most of the major ones have been found and
751	corrected.
752
75320010901:
754	In OLDCARD, CardBus bridges appear to be stable.  The work
755	arounds described in the 20010604 entry are now no longer
756	necessary and will be ignored.  Most insert/remove problems
757	have been rectified around this date.
758
75920010823:
760 	named now runs as user bind and group bind rather than as
761 	root.  If named_enable is set to YES in /etc/rc.conf, ensure
762 	that user bind is available in /etc/passwd (using vipw(8))
763 	and that group bind is available in /etc/group.  Also make
764 	sure that user or group bind has read (and not write)
765 	permission for your name server configuration and that it
766 	has read and write permission for your slave zone files and
767 	directory.
768
769 	If you wish to continue to run named as root (a less secure
770 	alternative), add a line to /etc/rc.conf saying
771
772 		named_flags=
773
77420010709:
775	The PAM libraries have had an API upgrade that is beyond
776	the ability of the shared library major number to handle.
777	It is manifested by PAM-using ports dumping core. The
778	solution is to rebuild those ports.
779
78020010628:
781	The kernel compile module has moved from src/sys/compile/FOO
782	to src/sys/${MACHINE}/compile/FOO.
783
78420010625:
785	The pccard modem issue from 20010613 has been corrected.
786	OLDCARD support is still a little weak in -current.  slot 1 is
787	known not to work on some TI based cardbus bridges.  Some
788	cardbus bridges do not properly detect insert/removal events.
789	IRQ configuration needs more safety belts.
790
79120010617:
792	Softupdates problems have been corrected.
793
79420010614:
795	Peter ripped out the linkerset support.  You must, as always,
796	rerun config after you cvsup if you are using the traditional
797	kernel building methods.
798
79920010613:
800	pccard modems may not work with current after 20010604 date.  Some
801	do, others result in panics.  *MAKE*SURE* that you update your
802	config and /etc/rc.conf ala the 20010604 entry, or you will have
803	problems (this issue will be fixed, it just hasn't been yet).
804
80520010613:
806	SOFTUPDATES seem to be broken since the middle of May or so.  Do not
807	use them in current.  You can disable softupdates on all mounted
808	partitions, or remove SOFTUPDATES the kernel config file.
809
81020010612:
811	After Peter's commits to the hints code, people have been noticing
812	that certain devices are attached (or try to) twice.  This is due
813	to having both static hints as well as a /boot/device.hints.  To
814	work around this issue, please use only one or the other mechanism
815	until this bug is fixed.
816
817	Please note that a feature of config is that if you have config
818	file FOO and FOO.hints, it automatically adds FOO.hints to the
819	hints.c file, whether you want it to or not.
820
82120010610:
822	Locale names have changed to match other systems better.
823
82420010604:
825	pccard support for pci cards has been committed.  You must change
826	your /etc/pccard.conf irq lines.  It must match the irq used by
827	pcic device.  Interrupt storms may result if you fail to do this.
828	Interrupt storms look a lot like a hang.
829
830	You must also install a new pccardd, otherwise you will get an
831	interrupt storm at card reset time (just after it tells you what
832	it is).
833
834	pccardd_flags="-I" is necessary for the time being.  It tells pccardd
835	not to ask the kernel if the interrupt is really free or not before
836	using it.  You can either change the /etc/pccard.conf irq lines to
837	match pcic, or add "-i X" to the pccardd_flags.
838
83920010530:
840	INSTALL=install -C is being deprecated.  If you want to do this,
841	use COPY=-C instead.  The former method will be supported for only
842	a limited time.  If you see
843
844install: warning: the -d and -C options may not be specified together
845
846	in your makeworld, then you need to migrate towards using
847	COPY=-C.
848
84920010525:
850	It appears that vm is now stable enough to use again.  However,
851	there may be other problems, so caution is still urged.  alpha
852	definitely is in bad shape.
853
85420010521:
855	Minor repo damage has happened.  This may cause problems
856	with cvsup of ports.  If you get errors, please see
857	http://www.FreeBSD.org/cgi/query-pr.cgi?pr=27495
858	at the bottom for details on a workaround.  The error message
859	is
860Updater failed: Cannot delete "/usr/ports/www/jakarta-tomcat/files": Directory not empty
861
86220010520:
863	Vm and/or swapping are busted on -current.  Please be patient.
864
86520010519:
866	pccard has had much reorganizational work done to it over
867	the past few days.  Everything should still work, but if
868	not, please contact imp@freebsd.org.
869
87020010517:
871	ata ioctl changed.  Make sure to recompile both kernel and
872	userland at the same time.
873
87420010517:
875	New ncurses imported.
876
87720010512:
878	DEVFS is now opt out, not opt in.  Barring major problems, this
879	will be the only way to go starting July 1.
880
88120010504:
882	OpenSSH has been updated to 2.9.  Some defaults are different,
883	including RhostsRSAAuthentication, which changes from yes to no.
884
88520010502:
886	Perl breakage in 20010501 was corrected at 14:18:33 PDT.
887
88820010501:
889	Building perl was broken at 02:25:25 PDT.
890
89120010430:
892	The bug in 20010429 was corrected at 07:35:37 PDT.  It is safe to
893	go back in the water.
894
89520010429:
896	A bad bug was committed at 04:48:42 PDT.  Don't use kernels after
897	this date, but before the correction date.
898
89920010423:
900	old fsck and new kernel interactions appear to have been fixed.
901
90220010411:
903	fsck and the kernel were changed to handle some optimizations
904	to directory layout.  This breaks backward compatibility.
905	Update only if you understand that you must not use the old
906	fsck with the new kernel ever.
907
90820010330:
909	fsck has changed the meaning of the pass column in /etc/fstab.
910	Please see the cvs commit to fsck.8 or the fsck.8 man page for
911	details.  It is unclear if changes to /etc/fstab are necessary.
912
91320010319:
914	portmap had changed name to rpcbind for maximum POLA in your
915	current world.  /etc/hosts.{allow,deny} needs changes.  nfs and
916	other rpc based programs that rely on portmapper will not work
917	without updates to /etc/hosts.{allow,deny} and /etc/netconfig.
918
91920010315:
920	ata subsystem changes.  ATA_ENABLE_ATAPI_DMA, ATA_ENABLE_WC
921	and ATA_ENABLE_TAGS are no longer kernel options.  They have
922	been replaced by tunables.  See ata.4 for details.
923
92420010312:
925	The fxp driver was converted to use miibus.  If you compile
926	fxp into your kernel statically, you will need to add miibus.
927
92820010312:
929	The wi device now defaults to BSS (infrastructure) mode
930	instead of ad-hoc.
931
93220010310:
933	/dev/urandom should be a symbolic link to /dev/random now.
934	Users of current not using DEVFS need to run MAKEDEV std.
935	ssh might not work if you don't.
936
93720010303:
938	The ed driver has been updated.  It now allows mii attachments,
939	which means that you must include the miibus in your kernel if
940	you use the ed driver.
941
94220010220:
943	The problems with libc have been corrected.  It is now mostly
944	safe to go back into the water.
945
94620010211:
947	The size of FILE was changed.  This breaks upgrading.  If
948	you must upgrade, be prepared for pain.  It also breaks almost
949	all binaries that you've compiled on -current.  You are warned
950	that before upgrading would be a good time to do a level 0
951	dump of your system.  No, really, I mean it this time.
952
953	To get to the new system, you'll need to use the following
954	workaround.  Hopefully this can be sorted out so that we
955	don't have to move this to the updating section.
956
957	To get around the installworld problem, do:
958		# cd /usr/src/usr.bin/sed
959		# make install
960		# cd /usr/src
961		# make installworld
962	If that doesn't work, then try:
963		# make -k installworld
964		# make installworld
965
96620010207:
967	DEVFS is now the default.  If you use vinum, make sure that you
968	do not include devfs in your kernel as problems result.
969
97020010205:
971	FFS_ROOT and CD9660_ROOT have been removed or deprecated.
972	Remove them from your config.
973
97420010122:
975	****************************** WARNING ******************************
976			buildkernel has been changed slightly
977	****************************** WARNING ******************************
978	KERNCONF replaces the variable KERNEL for buildkernel.  You
979	should update your scripts and make.conf accordingly.
980
98120010119:
982	config has changed to allow DEV_FOO as a replacement for NFOO.
983	This requires a new config to build correctly.
984
98520010116:
986	The kernel option I386_CPU is now mutually exclusive with the
987	other cpu types. If you have an i386 system, be sure that it
988	only had this line.  Remove it for all other configurations.
989
99020010110:
991	Changes to the kernel require it and burncd be in sync.
992
99320010102:
994	Everyone who has hw.sndunit set to something in
995	/etc/sysctl.conf, it is now hw.snd.unit.
996
99720010101:
998	ex and vi were broken by some changes to sys/queue.h.  If you
999	have a bad vi, you will see make buildworld fail with a core
1000	dump while building termcap.  You can work around this problem
1001	by adding -k to your make buildworld.  This will cause the
1002	build to complete and install a new vi.  Once that's done, you
1003	can rebuild again without the -k to pick up anything that
1004	might have been ignored by the -k option.
1005
1006	Others have suggested that you can just rebuild libc if your
1007	vi/ex is dynamically linked, but I've not received any reports
1008	of this working.
1009
101020001228:
1011	There have been some changes to libcrypt in -current.  The
1012	libscrypt/libdescrypt symlink silliness is gone and the installed
1013	libcrypt is fully functional.  Be aware of this.
1014
101520001218:
1016	Linksys Fast Ethernet PCCARD cards supported by the ed driver
1017	now require the addition of flag 0x80000 to their config line
1018	in pccard.conf(5).  This flag is not optional.  These Linksys
1019	cards will not be recognized without it.
1020
102120001205:
1022	Important new FreeBSD-version stuff: PAM support has been worked
1023	in, partially from the "Unix" OpenSSH version.  This requires
1024	adding the following in pam.conf:
1025
1026	sshd    auth    sufficient      pam_skey.so
1027	sshd    auth    required        pam_unix.so         try_first_pass
1028	sshd    session required        pam_permit.so
1029
103020001031:
1031	cvs updated to 1.11.
1032
103320001020:
1034	The random device needs more entropy, so you need to make sure
1035	that you've run mergemaster to get a /etc/rc which will seed
1036	/dev/random.  If you don't and the system hangs after ldconfig,
1037	then banging on the keyboard randomly until it unhangs is one
1038	workaround.
1039
104020001010:
1041	****************************** WARNING ******************************
1042				Sendmail has been updated.
1043	****************************** WARNING ******************************
1044	o mail.local(8) is no longer installed as a set-user-id binary.
1045	o sendmail(8) is now built with STARTTLS support unless NO_OPENSSL
1046	  is set.
1047	o The default /etc/mail/sendmail.cf disables the SMTP EXPN and VRFY
1048	  commands.
1049	o Now using sendmail's version of vacation(1).
1050	o The sendmail cf building tools (contrib/sendmail/cf) are installed
1051	  in /usr/share/sendmail/cf.
1052	o sendmail.cw changed to local-host-names
1053
1054	More details can be found at
1055		http://people.freebsd.org/~imp/UPDATING/sendmail-20001010
1056
105720001009:
1058	The ports tree's new layout is in place.  Be sure to update
1059	your entire ports tree, or you will have problems.
1060
106120001006:
1062	The perl build procedure no longer installs miniperl, nor uses
1063	the installed miniperl.  It is recommended that you delete
1064	/usr/bin/miniperl.
1065
106620001005:
1067	This weekend the ports tree will be updated to a new layout.
1068	It will be in an inconsistent state until noted in the UPDATING
1069	file, or with asami-san's message to the relevant mailing
1070	lists.  With this new layout, you'll need to update the whole
1071	tree for anything to work.
1072
107320000928:
1074	There was a change in the passwd format.  Need more information.
1075
107620000916:
1077	/boot/kernel/kernel.ko -> /boot/kernel/kernel change has taken
1078	place.  Please update boot loader (not the boot blocks) at the
1079	same time as your kernel.
1080
108120000914:
1082	The new pmtimer device is necessary for laptops.  Failure to
1083	include the device will cause suspended laptops losing time
1084	when they resume.  Include
1085		device		pmtimer
1086	in your config file and
1087		hint.pmtimer.0.at="isa"
1088	to your /boot/device.hints file.
1089
109020000911:
1091	The random device has been turned into a (pseudo-)device,
1092	rather than an option. The supplied kernel config files have
1093	been updated. You will need to do something similar in your
1094	own kernel config file.
1095	Remove:
1096		options		RANDOMDEV
1097	Add:
1098		device		random
1099	If you prefer to load the loadable module, you need to do
1100	nothing.
1101
110220000909:
1103	The random device module has been renamed from randomdev.ko to
1104	random.ko. You will need to edit your /boot/loader.conf to
1105	reflect this if you load this module at boot time.
1106	The line should read:
1107		random_load="YES"
1108
110920000907:
1110	The SMPNG commit has happened.  It should work, but if it
1111	doesn't, fallback to the PRE_SMPNG CVS tag.  There are likely
1112	to be a variety of minor issues.  Please see 20000905 to make
1113	sure you don't have model loading problems which might at
1114	first blush appear related to SMP.
1115
111620000906:
1117	nsswitch has been imported from NetBSD.  Among other things,
1118	this means that /etc/host.conf is no longer used.  See
1119	nsswitch.conf(5) instead.  Note that at boot time rc.network
1120	will attempt to produce a new nsswitch.conf file for you if you
1121	don't have one, and you have host.conf.
1122
112320000905:
1124	The ucred structure changed size.  This breaks the interface
1125	that mountd uses.  Trying to use an older mountd with a newer
1126	kernel guarantees a panic.  This means that you need to use
1127	kernels newer than today only with matching mountd, but you
1128	needed to do that anyway with the boot loader changes.
1129
113020000905:
1131	The boot loader has been updated.  The new default kernel is
1132	now /boot/kernel/kernel.ko.  The new default module location
1133	is /boot/kernel.
1134
1135	You *MUST* upgrade your boot loader and kernel at the same time.
1136	The easiest way to do this is to do the buildworld/buildkernel/
1137	installkernel/installworld dance.
1138
1139	Furthermore, you are urged to delete your old /modules directory
1140	before booting the new kernel, since kldload will find stale
1141	modules in that directory instead of finding them in the correct
1142	path, /boot/kernel.  The most common complaint that this cures
1143	is that the linux module crashes your machine after the update.
1144
1145	if [ ! -d /boot/kernel.old ]; then
1146		mv /modules.old /boot/kernel.old
1147		chflags noschg /kernel.old
1148		mv /kernel.old /boot/kernel.old/kernel.ko
1149		chflags schg /boot/kernel.old/kernel.ko
1150	fi
1151
115220000904:
1153	A new issue with the sendmail upgrade has come to light.
1154	/etc/aliases has moved to /etc/mail/aliases.  Mergemaster will
1155	incorrectly install the default aliases in /etc/mail rather than
1156	move the old one from /etc.  So you'll need to manually move the
1157	file, create a symbolic link, remove the old /etc/aliases.db and
1158	run newaliases.  For safety sake, you should stop sendmail
1159	while doing this and run the upgrade when locally sourced email
1160	is not likely to be generated.
1161
116220000825:
1163	/boot/device.hints is now required for installkernel to
1164	succeed.  You should copy GENERIC.hints for your architecture
1165	into /boot/device.hints.  If and only if you compile hints
1166	into your kernel, then this file may be empty.  Please note,
1167	if you have an empty or missing /boot/device.hints file and
1168	you neglected to compile hints into your kernel, no boot
1169	messages will appear after the boot loader tries to start the
1170	kernel.
1171
117220000821:
1173	If you do NOT have ``options RANDOMDEV'' in your kernel and
1174	you DO want the random device then add randomdev_load="YES" to
1175	/boot/loader.conf.
1176
117720000812:
1178	suidperl is now always built and installed on the system, but
1179	with permissions of 511.  If you have applications that use
1180	this program, you are now required to add ENABLE_SUIDPERL=true
1181	to /etc/make.conf.  If you forget to do this,
1182		chmod 4511 /usr/bin/suidperl
1183	will fix this until the next build.
1184
118520000812:
1186	sendmail has been updated from 8.9.3 to 8.11.0.  Some of the more
1187	visible changes that may immediately affect your configuration
1188	include:
1189	- New default file locations from src/contrib/sendmail/cf/README
1190	- newaliases limited to root and trusted users
1191	- MSA port (587) turned on by default
1192	- New queue file naming system so can't go from 8.11 -> 8.9
1193	- FEATURE(`rbl') renamed to FEATURE(`dnsbl')
1194	- FEATURE(`nullclient') is more full featured
1195	- FEATURE(`nouucp') requires an argument: `reject' or `nospecial'
1196	- mail.local FreeBSD-only -b option changed to -B
1197	- See src/contrib/sendmail/RELEASE_NOTES for more info
1198
119920000810:
1200	suidperl (aka sperl) is no longer build by default.  You must
1201	specifically define BUILD_SUIDPERL to "true" for it to be build.
1202	Furthermore, we recommend that you remove /usr/bin/sperl* and
1203	/usr/bin/suidperl files from your system unless you have a
1204	specific use for it.
1205
120620000729:
1207	Networking defaults have been tightened.  Anybody upgrading
1208	/etc/defaults/rc.conf needs to add the following lines to
1209	/etc/rc.conf if they want to have the same setup
1210	afterwards (unless the variables already are set, of course):
1211		# Enable network daemons for user convenience.
1212		inetd_enable="YES"
1213		portmap_enable="YES"
1214		sendmail_enable="YES"
1215
121620000728:
1217	If you have null_load="YES" in your /boot/loader.conf, you
1218	will need to change that to nullfs_load="YES".
1219
122020000728:
1221	The "installkernel" target has changed slightly. Now even if
1222	you override KERNEL e.g. 'make installkernel KERNEL=MYKERNEL'
1223	it will install the MYKERNEL file (built with the buildkernel
1224	target) as /kernel rather than /MYKERNEL. Those who have
1225	updated their /boot/loader.conf files to point to /MYKERNEL
1226	should remove that entry or perform manual rename of /kernel
1227	to /MYKERNEL.
1228
122920000711:
1230	If you use CVSUP or CTM to get CVS trees, AND you used to get
1231	the old crypto files from internat.freebsd.org AND you check
1232	out files from the CVS tree with the cvs command, please read
1233		http://people.freebsd.org/~imp/internat.txt
1234	for details on potential problems that you might have and how
1235	to get around them.
1236
1237	If you are merely a mirror, or don't answer yes to each of the
1238	clauses above, you needn't worry.
1239
124020000711:
1241	/etc/security has been updated to print the inode number of
1242	setuid programs that have changed.  You will see a large spike
1243	in the number of changed programs the first time when you run
1244	mergemaster to get a new /etc/security.
1245
124620000710:
1247	/dev/random now has good entropy collection (from the keyboard
1248	and sysmouse drivers). Please ensure that either `options
1249	RANDOMDEV' is present in your kernel config file or that
1250	`randomdev_load="YES"' is in your /boot/loader.conf. If you do
1251	not have the /dev/random driver, OpenSSL (and consequently
1252	lots of crypto tools (like SSH)) will fail with strange
1253	errors. (see below, 20000624).
1254
1255	FreeBSD-current is safe again to run Crypto.
1256
125720000709:
1258	phk made the malloc default options AJ.  This may slow things
1259	down and uncover other latent bugs in the code.  If you need to
1260	run at full speed, you can disable this by doing the following:
1261		ln -s aj /etc/malloc.conf
1262
126320000706:
1264	libftpio's version was accidentally bumped a few days ago.  This
1265	has been corrected.  You may need to remove /usr/lib/libftpio.so.6
1266	before doing your next buildworld/installworld pair.  It certainly
1267	won't hurt to remove it before the update procedure.  It will
1268	break fetch until a new one is built, but ftp can be used in the
1269	interim if needed.
1270
127120000705:
1272	The crypto packages have changed for the cvsup.  This has been done
1273	in a backward compatible way, but the old packages will go away at
1274	some point in the future.  Look at /usr/share/examples/cvsup for
1275	details.
1276
127720000704:
1278	With the new sys/modules/sound/drivers/*, you will need to
1279	set SYSDIR until you do an installworld after July 7th.
1280
128120000704:
1282	rc.shutdown and rc will now call the rc.d scripts with start
1283	or stop.  This may cause some harmless warnings from older
1284	rc.d scripts that haven't been updated.
1285
128620000630:
1287	The libfetch based version of fetch has gone into the tree.
1288	Minor problems may result on some of the less popular sites,
1289	which should be reported to des@freebsd.org.
1290
129120000625:
1292	From approximately this date forward, one must have the crypto
1293	system installed in order to build the system and kernel.
1294	While not technically strictly true, one should treat it as
1295	required and grab the crypto bits.  If you are grabbing CVS
1296	trees, src-all and cvs-crypto should be treated as if they
1297	were required.  You should check with the latest collections
1298	to make sure that these haven't changed.
1299
130020000624:
1301	Mark Murray just committed the first parts of a cleanup of
1302	/dev/zero, et al.  This is also cleaning up /dev/random.
1303	The entropy is disconnected, so DO NOT USE VERSIONS OF FREEBSD
1304	-CURRENT FROM THIS POINT to 2000710 for cryptographic services
1305	until Mark can merge in the fixes to this work in progress.
1306	openssh and openssl should not be used to generate keys from this
1307	date to the completion of the work.
1308
1309	If you must operate at this reduced level of security, add '
1310	options RANDOMDEV' to your kernel or modload the randomdev
1311	module.  You may also need to copy a new MAKEDEV to /dev and
1312	recreate the random and urandom devices.
1313
131420000622:
1315	The license on the softupdates is now a standard 2 clause
1316	BSD license.  You may need to remove your symbolic links
1317	that used to be required when updating.
1318
131920000621:
1320	Scott Flatman <sf@aracnet.com> sent in a decent write-up on
1321	the config file update procedure.
1322		http://people.freebsd.org/~imp/config-upd.html
1323	NOTE: LINT is gone.  It has been replaced with NOTES.  NOTES
1324	isn't buildable.  However, you can generate a LINT file:
1325		cd /sys/<ARCH>/conf && make LINT
1326
132720000620:
1328	Binutils 2.10 have hit the tree, or will shortly.  As soon
1329	as they do, the problem noted in 20000522 will be resolved and
1330	that workaround will no longer be required.
1331
133220000615:
1333	phk removed the compatibility creation of wd devices in the
1334	ad driver.  If you haven't done so already, you must update
1335	your fstab, etc to use the ad devices instead of the wd
1336	devices.
1337
1338	In addition, you'll need to update your boot blocks to a
1339	more modern version, if you haven't already done so.  Modern
1340	here means 4.0 release or newer (although older releases
1341	may work).
1342
134320000612:
1344	Peter took an axe to config(8).  Be sure that you read his mail
1345	on the topic before even thinking about updating.  You will
1346	need to create a /boot/device.hints or add a hints directive
1347	to your config file to compile them in statically.  The format
1348	of the config file has changed as well.  Please see GENERIC or
1349	NEWCARD for examples of the new format.
1350
1351	Indirectly, this also breaks USERCONFIG.  Unless a newer entry
1352	says that it has been fixed, assume that must use the hints mechanism
1353	in the loader if you need to use a machine with very old ISA cards
1354	in it.
1355
135620000522:
1357	A new set of binutils went into the tree today.  Anybody
1358	building a kernel after this point is advised that they need
1359	to rebuild their binutils (or better yet do a
1360	buildworld/installworld) before building a new kernel.
1361
1362	Due to bugs in binutils, using malloc options (eg /etc/malloc.conf
1363	or MALLOC_OPTIONS env var) J will cause ld to dump core.  It
1364	is recommended that you don't set this option until the problem
1365	is resolved.
1366
136720000513:
1368	The ethernet drivers were all updated to clean up the BPF handling.
1369
137020000510:
1371	The problems with boot blocks on the alphas have been corrected.
1372	This will require some care in updating alphas.  A new libstand
1373	is requires for the boot blocks to build properly.
1374
137520000503:
1376	Recompile all kld modules.  Proper version dependency info
1377	is now available.
1378
137920000502:
1380	Modules have been disconnected from the buildworld tree and
1381	connected to the kernel building instead.
1382
138320000427:
1384	You may need to build gperf
1385		cd /usr/src/gnu/usr.bin/gperf && make depend all install
1386	when upgrading from 4.0 -> current.  The build system now uses
1387	an option only in -current.
1388
138920000417:
1390	The method that we brand ELF binaries has changed to be more
1391	acceptable to the binutils maintainers.  You will need to
1392	rebrand your ELF binaries that aren't native.  One problem
1393	binary is the Linux ldconfig.  After your make world, but
1394	before you reboot, you'll need to issue:
1395		brandelf -t Linux /compat/linux/sbin/ldconfig
1396	if you have Linux compatibility enabled on your machine.
1397
139820000320:
1399	If you have really bad/marginal IDE drives, you may find they
1400	don't work well.  Use pio mode instead.  The easiest way to
1401	cope if you have a problem combination is to add:
1402		/sbin/sysctl hw.ata.ata_dma=0
1403	to the start of /etc/rc.conf.
1404
140520000319:
1406	The ISA and PCI compatibility shims have been connected to the
1407	options COMPAT_OLDISA and COMPAT_OLDPCI.  If you are using old
1408	style PCI or ISA drivers (i.e. tx, voxware, etc.) you must
1409	include the appropriate option in your kernel config.  Drivers
1410	using the shims should be updated or they won't ship with
1411	5.0-RELEASE, targeted for 2001.
1412
141320000318:
1414	We've entered the traditional post release dumping party.
1415	Large kernel changes are being committed and are in the
1416	works.  It is important to keep the systems' klds and kernel
1417	in sync as kernel interfaces and structures are changing.
1418	Before reporting kernel panics, make sure that all modules
1419	that you are loading are up to date.
1420
142120000315:
1422	If you are upgrading from an older version of FreeBSD, you
1423	need to update your boot blocks as well.  'disklabel -B ad0'
1424	will do the trick.  This isn't critical until you remove your
1425	wd device entries in /dev, at which point your system will not
1426	boot.
1427
142820000315:
1429	4.0 RELEASE shipped.  Please see the 4.0 UPDATING file for how
1430	to upgrade to 4.0 from 3.x.
1431
1432COMMON ITEMS:
1433
1434	General Notes
1435	-------------
1436	Avoid using make -j when upgrading.  From time to time in the
1437	past there have been problems using -j with buildworld and/or
1438	installworld.  This is especially true when upgrading between
1439	"distant" versions (eg one that cross a major release boundary
1440	or several minor releases, or when several months have passed
1441	on the -current branch).
1442
1443	Sometimes, obscure build problems are the result of environment
1444	poisoning.  This can happen because the make utility reads its
1445	environment when searching for values for global variables.
1446	To run your build attempts in an "environmental clean room",
1447	prefix all make commands with 'env -i '.  See the env(1) manual
1448	page for more details.
1449
1450	To build a kernel
1451	-----------------
1452	If you are updating from a prior version of FreeBSD (even one just
1453	a few days old), you should follow this procedure. With a
1454	/usr/obj tree with a fresh buildworld,
1455	make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1456	make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1457
1458	To just build a kernel when you know that it won't mess you up
1459	--------------------------------------------------------------
1460	This assumes you are already running a 5.X system.  Replace
1461	${arch} with the architecture of your machine (e.g. "i386",
1462	"alpha", "amd64", "ia64", "pc98", "sparc64", etc).
1463
1464	cd src/sys/${arch}/conf
1465	config KERNEL_NAME_HERE
1466	cd ../compile/KERNEL_NAME_HERE
1467	make depend
1468	make
1469	make install
1470
1471	If this fails, go to the "To build a kernel" section.
1472
1473	To rebuild everything and install it on the current system.
1474	-----------------------------------------------------------
1475	# Note: sometimes if you are running current you gotta do more than
1476	# is listed here if you are upgrading from a really old current.
1477
1478	<make sure you have good level 0 dumps>
1479	<maybe fix /etc/fstab>				[7]
1480	make buildworld
1481	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1482	make installkernel KERNCONF=YOUR_KERNEL_HERE
1483							[1]
1484	<reboot in single user>				[3]
1485	/etc/rc.d/preseedrandom				[10]
1486	mergemaster -p					[5]
1487	make installworld
1488	mergemaster					[4]
1489	<reboot>
1490
1491
1492	To cross-install current onto a separate partition
1493	--------------------------------------------------
1494	# In this approach we use a separate partition to hold
1495	# current's root, 'usr', and 'var' directories.   A partition
1496	# holding "/", "/usr" and "/var" should be about 2GB in
1497	# size.
1498
1499	<make sure you have good level 0 dumps>
1500	<boot into -stable>
1501	make buildworld
1502	<maybe newfs current's root partition>
1503	<mount current's root partition on directory ${CURRENT_ROOT}>
1504	make installworld DESTDIR=${CURRENT_ROOT}
1505	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1506	cp /usr/src/sys/${ARCH}/conf/GENERIC.hints \
1507		${CURRENT_ROOT}/boot/device.hints	# as needed
1508	make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1509	cd /usr/src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1510	cp /etc/fstab ${CURRENT_ROOT}/etc/fstab 		   # if newfs'd
1511	<edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1512	<reboot into current>
1513	<do a "native" rebuild/install as described in the previous section>
1514	<maybe install compatibility libraries from /usr/src/lib/compat>
1515 	<reboot>
1516
1517
1518	To upgrade in-place from 4.x-stable to current
1519	----------------------------------------------
1520	# 5.x uses more space than 4.x.  Also, the location of kernel
1521	# modules has changed.  If you are installing 5.0 onto a 4.x
1522	# system, you'll need about 30MB of free disk space on your /
1523	# partition.  If you have less than this, you may encounter difficult
1524	# to back out of problems with this procedure.  If /tmp is on
1525	# the / partition, you may want to completely remove all its content
1526	# before upgrading, as this can be a common source of shortage of
1527	# space on /.
1528
1529	<make sure you have good level 0 dumps>
1530	<maybe fix /etc/fstab>				[7]
1531	make buildworld					[9]
1532	make buildkernel KERNCONF=YOUR_KERNEL_HERE	[8]
1533	cp src/sys/${MACHINE}/conf/GENERIC.hints /boot/device.hints [2]
1534	make installkernel KERNCONF=YOUR_KERNEL_HERE
1535	cd src/sys/boot ; make install			[6]
1536							[1]
1537	<reboot in single user>				[3]
1538	/etc/rc.d/preseedrandom				[10]
1539	mergemaster -p					[5]
1540	rm -rf /usr/include/g++
1541	make installworld
1542	mergemaster					[4]
1543	<reboot>
1544
1545	Make sure that you've read the UPDATING file to understand the
1546	tweaks to various things you need.  At this point in the life
1547	cycle of current, things change often and you are on your own
1548	to cope.  The defaults can also change, so please read ALL of
1549	the UPDATING entries.
1550
1551	Also, if you are tracking -current, you must be subscribed to
1552	freebsd-current@freebsd.org.  Make sure that before you update
1553	your sources that you have read and understood all the recent
1554	messages there.  If in doubt, please track -stable which has
1555	much fewer pitfalls.
1556
1557	[1] If you have third party modules, such as vmware, you
1558	should disable them at this point so they don't crash your
1559	system on reboot.
1560
1561	[2] If you have legacy ISA devices, you may need to create
1562	your own device.hints to reflect your unique hardware
1563	configuration.
1564
1565	[3] From the bootblocks, boot -s, and then do
1566		fsck -p
1567		mount -u /
1568		mount -a
1569		cd /usr/src
1570		adjkerntz -i		# if CMOS is wall time
1571	Also, when doing a major release upgrade, it is required that
1572	you boot into single user mode to do the installworld.
1573	For the 4.x -> 5.0 upgrade, you will also see many messages about
1574	needing to recompile your userland.  These are harmless and can
1575	be ignored while you proceed to the next step.
1576
1577	[4] Note: This step is non-optional.  Failure to do this step
1578	can result in a significant reduction in the functionality of the
1579	system.  Attempting to do it by hand is not recommended and those
1580	that pursue this avenue should read this file carefully, as well
1581	as the archives of freebsd-current and freebsd-hackers mailing lists
1582	for potential gotchas.
1583
1584	[5] Usually this step is a noop.  However, from time to time
1585	you may need to do this if you get unknown user in the following
1586	step.  It never hurts to do it all the time.  You may need to
1587	install a new mergemaster (cd src/usr.sbin/mergemaster && make
1588	install) after the buildworld before this step if you last updated
1589	from current before 20020224 or from -stable before 20020408.
1590
1591	[6] 4.x boot loader can be used to boot a 5.x system, however
1592	it is difficult to do that at best.  If you wish to try, then
1593	you should interrupt the boot and at the ok prompt type:
1594		ok unload
1595		ok boot /boot/kernel/kernel
1596	If this fails to work, you must install a new boot loader as
1597	described here.
1598
1599	[7] Before you upgrade, please make sure that you are not using
1600	compatibility slices.  These are device names of the form, on i386
1601	and other architectures that use MBR slicing, /dev/ad0a without the
1602	actual slice name.  Chances are excellent that these will break.
1603	You generally must update these entries to use the post FreeBSD
1604	2.x form of /dev/ad0s1a.
1605
1606	[8] In order to have a kernel that can run the 4.x binaries
1607	needed to do an installworld, you must include the COMPAT_FREEBSD4
1608	option in your kernel.  Failure to do so may leave you with a system
1609	that is hard to boot to recover.
1610
1611	[9] When checking out sources, you must include the -P flag to have
1612	cvs prune empty directories.
1613
1614	[10] In order to create temporary files, /dev/random must be
1615	initialized by feeding data into it.  /etc/rc.d/preseedrandom
1616	takes care of this.
1617FORMAT:
1618
1619This file contains a list, in reverse chronological order, of major
1620breakages in tracking -current.  Not all things will be listed here,
1621and it only starts on March 15, 2000.  Updating files can found in
1622previous releases if your system is older than this.
1623
1624Copyright information:
1625
1626Copyright 1998, 2002 M. Warner Losh.  All Rights Reserved.
1627
1628Redistribution, publication, translation and use, with or without
1629modification, in full or in part, in any form or format of this
1630document are permitted without further permission from the author.
1631
1632THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1633IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1634WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1635DISCLAIMED.  IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1636INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1637(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1638SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1639HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1640STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1641IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1642POSSIBILITY OF SUCH DAMAGE.
1643
1644If you find this document useful, and you want to, you may buy the
1645author a beer.
1646
1647Contact Warner Losh if you have any questions about your use of
1648this document.
1649
1650$FreeBSD: head/UPDATING 130953 2004-06-23 01:32:28Z mlaier $
1651