UPDATING revision 290496
1Updating Information for FreeBSD current users. 2 3This file is maintained and copyrighted by M. Warner Losh <imp@freebsd.org>. 4See end of file for further details. For commonly done items, please see the 5COMMON ITEMS: section later in the file. These instructions assume that you 6basically know what you are doing. If not, then please consult the FreeBSD 7handbook: 8 9 http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html 10 11Items affecting the ports and packages system can be found in 12/usr/ports/UPDATING. Please read that file before running portupgrade. 13 14NOTE: FreeBSD has switched from gcc to clang. If you have trouble bootstrapping 15from older versions of FreeBSD, try WITHOUT_CLANG and WITH_GCC to bootstrap to 16the tip of head, and then rebuild without this option. The bootstrap process 17from older version of current across the gcc/clang cutover is a bit fragile. 18 19NOTE TO PEOPLE WHO THINK THAT FreeBSD 11.x IS SLOW: 20 FreeBSD 11.x has many debugging features turned on, in both the kernel 21 and userland. These features attempt to detect incorrect use of 22 system primitives, and encourage loud failure through extra sanity 23 checking and fail stop semantics. They also substantially impact 24 system performance. If you want to do performance measurement, 25 benchmarking, and optimization, you'll want to turn them off. This 26 includes various WITNESS- related kernel options, INVARIANTS, malloc 27 debugging flags in userland, and various verbose features in the 28 kernel. Many developers choose to disable these features on build 29 machines to maximize performance. (To completely disable malloc 30 debugging, define MALLOC_PRODUCTION in /etc/make.conf, or to merely 31 disable the most expensive debugging functionality run 32 "ln -s 'abort:false,junk:false' /etc/malloc.conf".) 33 3420151108: 35 Add support for unicode collation strings leads to a change of 36 order of files listed by ls(1) for example. To get back to the old 37 behaviour, set LC_COLLATE environment variable to "C". 38 3920151030: 40 The OpenSSL has been upgraded to 1.0.2d. Any binaries requiring 41 libcrypto.so.7 or libssl.so.7 must be recompiled. 42 4320151020: 44 Qlogic 24xx/25xx firmware images were updated from 5.5.0 to 7.3.0. 45 Kernel modules isp_2400_multi and isp_2500_multi were removed and 46 should be replaced with isp_2400 and isp_2500 modules respectively. 47 4820151017: 49 The build previously allowed using 'make -n' to not recurse into 50 sub-directories while showing what commands would be executed, and 51 'make -n -n' to recursively show commands. Now 'make -n' will recurse 52 and 'make -N' will not. 53 5420151012: 55 If you specify SENDMAIL_MC or SENDMAIL_CF in make.conf, mergemaster 56 and etcupdate will now use this file. A custom sendmail.cf is now 57 updated via this mechanism rather than via installworld. If you had 58 excluded sendmail.cf in mergemaster.rc or etcupdate.conf, you may 59 want to remove the exclusion or change it to "always install". 60 /etc/mail/sendmail.cf is now managed the same way regardless of 61 whether SENDMAIL_MC/SENDMAIL_CF is used. If you are not using 62 SENDMAIL_MC/SENDMAIL_CF there should be no change in behavior. 63 6420151011: 65 Compatibility shims for legacy ATA device names have been removed. 66 It includes ATA_STATIC_ID kernel option, kern.cam.ada.legacy_aliases 67 and kern.geom.raid.legacy_aliases loader tunables, kern.devalias.* 68 environment variables, /dev/ad* and /dev/ar* symbolic links. 69 7020151006: 71 Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 3.7.0. 72 Please see the 20141231 entry below for information about prerequisites 73 and upgrading, if you are not already using clang 3.5.0 or higher. 74 7520150924: 76 Kernel debug files have been moved to /usr/lib/debug/boot/kernel/, 77 and renamed from .symbols to .debug. This reduces the size requirements 78 on the boot partition or file system and provides consistency with 79 userland debug files. 80 81 When using the supported kernel installation method the 82 /usr/lib/debug/boot/kernel directory will be renamed (to kernel.old) 83 as is done with /boot/kernel. 84 85 Developers wishing to maintain the historical behavior of installing 86 debug files in /boot/kernel/ can set KERN_DEBUGDIR="" in src.conf(5). 87 8820150827: 89 The wireless drivers had undergone changes that remove the 'parent 90 interface' from the ifconfig -l output. The rc.d network scripts 91 used to check presence of a parent interface in the list, so old 92 scripts would fail to start wireless networking. Thus, etcupdate(3) 93 or mergemaster(8) run is required after kernel update, to update your 94 rc.d scripts in /etc. 95 9620150827: 97 pf no longer supports 'scrub fragment crop' or 'scrub fragment drop-ovl' 98 These configurations are now automatically interpreted as 99 'scrub fragment reassemble'. 100 10120150817: 102 Kernel-loadable modules for the random(4) device are back. To use 103 them, the kernel must have 104 105 device random 106 options RANDOM_LOADABLE 107 108 kldload(8) can then be used to load random_fortuna.ko 109 or random_yarrow.ko. Please note that due to the indirect 110 function calls that the loadable modules need to provide, 111 the build-in variants will be slightly more efficient. 112 113 The random(4) kernel option RANDOM_DUMMY has been retired due to 114 unpopularity. It was not all that useful anyway. 115 11620150813: 117 The WITHOUT_ELFTOOLCHAIN_TOOLS src.conf(5) knob has been retired. 118 Control over building the ELF Tool Chain tools is now provided by 119 the WITHOUT_TOOLCHAIN knob. 120 12120150810: 122 The polarity of Pulse Per Second (PPS) capture events with the 123 uart(4) driver has been corrected. Prior to this change the PPS 124 "assert" event corresponded to the trailing edge of a positive PPS 125 pulse and the "clear" event was the leading edge of the next pulse. 126 127 As the width of a PPS pulse in a typical GPS receiver is on the 128 order of 1 millisecond, most users will not notice any significant 129 difference with this change. 130 131 Anyone who has compensated for the historical polarity reversal by 132 configuring a negative offset equal to the pulse width will need to 133 remove that workaround. 134 13520150809: 136 The default group assigned to /dev/dri entries has been changed 137 from 'wheel' to 'video' with the id of '44'. If you want to have 138 access to the dri devices please add yourself to the video group 139 with: 140 141 # pw groupmod video -m $USER 142 14320150806: 144 The menu.rc and loader.rc files will now be replaced during 145 upgrades. Please migrate local changes to menu.rc.local and 146 loader.rc.local instead. 147 14820150805: 149 GNU Binutils versions of addr2line, c++filt, nm, readelf, size, 150 strings and strip have been removed. The src.conf(5) knob 151 WITHOUT_ELFTOOLCHAIN_TOOLS no longer provides the binutils tools. 152 15320150728: 154 As ZFS requires more kernel stack pages than is the default on some 155 architectures e.g. i386, it now warns if KSTACK_PAGES is less than 156 ZFS_MIN_KSTACK_PAGES (which is 4 at the time of writing). 157 158 Please consider using 'options KSTACK_PAGES=X' where X is greater 159 than or equal to ZFS_MIN_KSTACK_PAGES i.e. 4 in such configurations. 160 16120150706: 162 sendmail has been updated to 8.15.2. Starting with FreeBSD 11.0 163 and sendmail 8.15, sendmail uses uncompressed IPv6 addresses by 164 default, i.e., they will not contain "::". For example, instead 165 of ::1, it will be 0:0:0:0:0:0:0:1. This permits a zero subnet 166 to have a more specific match, such as different map entries for 167 IPv6:0:0 vs IPv6:0. This change requires that configuration 168 data (including maps, files, classes, custom ruleset, etc.) must 169 use the same format, so make certain such configuration data is 170 upgrading. As a very simple check search for patterns like 171 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. To return to the old 172 behavior, set the m4 option confUSE_COMPRESSED_IPV6_ADDRESSES or 173 the cf option UseCompressedIPv6Addresses. 174 17520150630: 176 The default kernel entropy-processing algorithm is now 177 Fortuna, replacing Yarrow. 178 179 Assuming you have 'device random' in your kernel config 180 file, the configurations allow a kernel option to override 181 this default. You may choose *ONE* of: 182 183 options RANDOM_YARROW # Legacy /dev/random algorithm. 184 options RANDOM_DUMMY # Blocking-only driver. 185 186 If you have neither, you get Fortuna. For most people, 187 read no further, Fortuna will give a /dev/random that works 188 like it always used to, and the difference will be irrelevant. 189 190 If you remove 'device random', you get *NO* kernel-processed 191 entopy at all. This may be acceptable to folks building 192 embedded systems, but has complications. Carry on reading, 193 and it is assumed you know what you need. 194 195 *PLEASE* read random(4) and random(9) if you are in the 196 habit of tweeking kernel configs, and/or if you are a member 197 of the embedded community, wanting specific and not-usual 198 behaviour from your security subsystems. 199 200 NOTE!! If you use RANDOM_DUMMY and/or have no 'device 201 random', you will NOT have a functioning /dev/random, and 202 many cryptographic features will not work, including SSH. 203 You may also find strange behaviour from the random(3) set 204 of library functions, in particular sranddev(3), srandomdev(3) 205 and arc4random(3). The reason for this is that the KERN_ARND 206 sysctl only returns entropy if it thinks it has some to 207 share, and with RANDOM_DUMMY or no 'device random' this 208 will never happen. 209 21020150623: 211 An additional fix for the issue described in the 20150614 sendmail 212 entry below has been been committed in revision 284717. 213 21420150616: 215 FreeBSD's old make (fmake) has been removed from the system. It is 216 available as the devel/fmake port or via pkg install fmake. 217 21820150615: 219 The fix for the issue described in the 20150614 sendmail entry 220 below has been been committed in revision 284436. The work 221 around described in that entry is no longer needed unless the 222 default setting is overridden by a confDH_PARAMETERS configuration 223 setting of '5' or pointing to a 512 bit DH parameter file. 224 22520150614: 226 ALLOW_DEPRECATED_ATF_TOOLS/ATFFILE support has been removed from 227 atf.test.mk (included from bsd.test.mk). Please upgrade devel/atf 228 and devel/kyua to version 0.20+ and adjust any calling code to work 229 with Kyuafile and kyua. 230 23120150614: 232 The import of openssl to address the FreeBSD-SA-15:10.openssl 233 security advisory includes a change which rejects handshakes 234 with DH parameters below 768 bits. sendmail releases prior 235 to 8.15.2 (not yet released), defaulted to a 512 bit 236 DH parameter setting for client connections. To work around 237 this interoperability, sendmail can be configured to use a 238 2048 bit DH parameter by: 239 240 1. Edit /etc/mail/`hostname`.mc 241 2. If a setting for confDH_PARAMETERS does not exist or 242 exists and is set to a string beginning with '5', 243 replace it with '2'. 244 3. If a setting for confDH_PARAMETERS exists and is set to 245 a file path, create a new file with: 246 openssl dhparam -out /path/to/file 2048 247 4. Rebuild the .cf file: 248 cd /etc/mail/; make; make install 249 5. Restart sendmail: 250 cd /etc/mail/; make restart 251 252 A sendmail patch is coming, at which time this file will be 253 updated. 254 25520150604: 256 Generation of legacy formatted entries have been disabled by default 257 in pwd_mkdb(8), as all base system consumers of the legacy formatted 258 entries were converted to use the new format by default when the new, 259 machine independent format have been added and supported since FreeBSD 260 5.x. 261 262 Please see the pwd_mkdb(8) manual page for further details. 263 26420150525: 265 Clang and llvm have been upgraded to 3.6.1 release. Please see the 266 20141231 entry below for information about prerequisites and upgrading, 267 if you are not already using 3.5.0 or higher. 268 26920150521: 270 TI platform code switched to using vendor DTS files and this update 271 may break existing systems running on Beaglebone, Beaglebone Black, 272 and Pandaboard: 273 274 - dtb files should be regenerated/reinstalled. Filenames are the 275 same but content is different now 276 - GPIO addressing was changed, now each GPIO bank (32 pins per bank) 277 has its own /dev/gpiocX device, e.g. pin 121 on /dev/gpioc0 in old 278 addressing scheme is now pin 25 on /dev/gpioc3. 279 - Pandaboard: /etc/ttys should be updated, serial console device is 280 now /dev/ttyu2, not /dev/ttyu0 281 28220150501: 283 soelim(1) from gnu/usr.bin/groff has been replaced by usr.bin/soelim. 284 If you need the GNU extension from groff soelim(1), install groff 285 from package: pkg install groff, or via ports: textproc/groff. 286 28720150423: 288 chmod, chflags, chown and chgrp now affect symlinks in -R mode as 289 defined in symlink(7); previously symlinks were silently ignored. 290 29120150415: 292 The const qualifier has been removed from iconv(3) to comply with 293 POSIX. The ports tree is aware of this from r384038 onwards. 294 29520150416: 296 Libraries specified by LIBADD in Makefiles must have a corresponding 297 DPADD_<lib> variable to ensure correct dependencies. This is now 298 enforced in src.libnames.mk. 299 30020150324: 301 From legacy ata(4) driver was removed support for SATA controllers 302 supported by more functional drivers ahci(4), siis(4) and mvs(4). 303 Kernel modules ataahci and ataadaptec were removed completely, 304 replaced by ahci and mvs modules respectively. 305 30620150315: 307 Clang, llvm and lldb have been upgraded to 3.6.0 release. Please see 308 the 20141231 entry below for information about prerequisites and 309 upgrading, if you are not already using 3.5.0 or higher. 310 31120150307: 312 The 32-bit PowerPC kernel has been changed to a position-independent 313 executable. This can only be booted with a version of loader(8) 314 newer than January 31, 2015, so make sure to update both world and 315 kernel before rebooting. 316 31720150217: 318 If you are running a -CURRENT kernel since r273872 (Oct 30th, 2014), 319 but before r278950, the RNG was not seeded properly. Immediately 320 upgrade the kernel to r278950 or later and regenerate any keys (e.g. 321 ssh keys or openssl keys) that were generated w/ a kernel from that 322 range. This does not affect programs that directly used /dev/random 323 or /dev/urandom. All userland uses of arc4random(3) are affected. 324 32520150210: 326 The autofs(4) ABI was changed in order to restore binary compatibility 327 with 10.1-RELEASE. The automountd(8) daemon needs to be rebuilt to work 328 with the new kernel. 329 33020150131: 331 The powerpc64 kernel has been changed to a position-independent 332 executable. This can only be booted with a new version of loader(8), 333 so make sure to update both world and kernel before rebooting. 334 33520150118: 336 Clang and llvm have been upgraded to 3.5.1 release. This is a bugfix 337 only release, no new features have been added. Please see the 20141231 338 entry below for information about prerequisites and upgrading, if you 339 are not already using 3.5.0. 340 34120150107: 342 ELF tools addr2line, elfcopy (strip), nm, size, and strings are now 343 taken from the ELF Tool Chain project rather than GNU binutils. They 344 should be drop-in replacements, with the addition of arm64 support. 345 The WITHOUT_ELFTOOLCHAIN_TOOLS= knob may be used to obtain the 346 binutils tools, if necessary. See 20150805 for updated information. 347 34820150105: 349 The default Unbound configuration now enables remote control 350 using a local socket. Users who have already enabled the 351 local_unbound service should regenerate their configuration 352 by running "service local_unbound setup" as root. 353 35420150102: 355 The GNU texinfo and GNU info pages have been removed. 356 To be able to view GNU info pages please install texinfo from ports. 357 35820141231: 359 Clang, llvm and lldb have been upgraded to 3.5.0 release. 360 361 As of this release, a prerequisite for building clang, llvm and lldb is 362 a C++11 capable compiler and C++11 standard library. This means that to 363 be able to successfully build the cross-tools stage of buildworld, with 364 clang as the bootstrap compiler, your system compiler or cross compiler 365 should either be clang 3.3 or later, or gcc 4.8 or later, and your 366 system C++ library should be libc++, or libdstdc++ from gcc 4.8 or 367 later. 368 369 On any standard FreeBSD 10.x or 11.x installation, where clang and 370 libc++ are on by default (that is, on x86 or arm), this should work out 371 of the box. 372 373 On 9.x installations where clang is enabled by default, e.g. on x86 and 374 powerpc, libc++ will not be enabled by default, so libc++ should be 375 built (with clang) and installed first. If both clang and libc++ are 376 missing, build clang first, then use it to build libc++. 377 378 On 8.x and earlier installations, upgrade to 9.x first, and then follow 379 the instructions for 9.x above. 380 381 Sparc64 and mips users are unaffected, as they still use gcc 4.2.1 by 382 default, and do not build clang. 383 384 Many embedded systems are resource constrained, and will not be able to 385 build clang in a reasonable time, or in some cases at all. In those 386 cases, cross building bootable systems on amd64 is a workaround. 387 388 This new version of clang introduces a number of new warnings, of which 389 the following are most likely to appear: 390 391 -Wabsolute-value 392 393 This warns in two cases, for both C and C++: 394 * When the code is trying to take the absolute value of an unsigned 395 quantity, which is effectively a no-op, and almost never what was 396 intended. The code should be fixed, if at all possible. If you are 397 sure that the unsigned quantity can be safely cast to signed, without 398 loss of information or undefined behavior, you can add an explicit 399 cast, or disable the warning. 400 401 * When the code is trying to take an absolute value, but the called 402 abs() variant is for the wrong type, which can lead to truncation. 403 If you want to disable the warning instead of fixing the code, please 404 make sure that truncation will not occur, or it might lead to unwanted 405 side-effects. 406 407 -Wtautological-undefined-compare and 408 -Wundefined-bool-conversion 409 410 These warn when C++ code is trying to compare 'this' against NULL, while 411 'this' should never be NULL in well-defined C++ code. However, there is 412 some legacy (pre C++11) code out there, which actively abuses this 413 feature, which was less strictly defined in previous C++ versions. 414 415 Squid and openjdk do this, for example. The warning can be turned off 416 for C++98 and earlier, but compiling the code in C++11 mode might result 417 in unexpected behavior; for example, the parts of the program that are 418 unreachable could be optimized away. 419 42020141222: 421 The old NFS client and server (kernel options NFSCLIENT, NFSSERVER) 422 kernel sources have been removed. The .h files remain, since some 423 utilities include them. This will need to be fixed later. 424 If "mount -t oldnfs ..." is attempted, it will fail. 425 If the "-o" option on mountd(8), nfsd(8) or nfsstat(1) is used, 426 the utilities will report errors. 427 42820141121: 429 The handling of LOCAL_LIB_DIRS has been altered to skip addition of 430 directories to top level SUBDIR variable when their parent 431 directory is included in LOCAL_DIRS. Users with build systems with 432 such hierarchies and without SUBDIR entries in the parent 433 directory Makefiles should add them or add the directories to 434 LOCAL_DIRS. 435 43620141109: 437 faith(4) and faithd(8) have been removed from the base system. Faith 438 has been obsolete for a very long time. 439 44020141104: 441 vt(4), the new console driver, is enabled by default. It brings 442 support for Unicode and double-width characters, as well as 443 support for UEFI and integration with the KMS kernel video 444 drivers. 445 446 You may need to update your console settings in /etc/rc.conf, 447 most probably the keymap. During boot, /etc/rc.d/syscons will 448 indicate what you need to do. 449 450 vt(4) still has issues and lacks some features compared to 451 syscons(4). See the wiki for up-to-date information: 452 https://wiki.freebsd.org/Newcons 453 454 If you want to keep using syscons(4), you can do so by adding 455 the following line to /boot/loader.conf: 456 kern.vty=sc 457 45820141102: 459 pjdfstest has been integrated into kyua as an opt-in test suite. 460 Please see share/doc/pjdfstest/README for more details on how to 461 execute it. 462 46320141009: 464 gperf has been removed from the base system for architectures 465 that use clang. Ports that require gperf will obtain it from the 466 devel/gperf port. 467 46820140923: 469 pjdfstest has been moved from tools/regression/pjdfstest to 470 contrib/pjdfstest . 471 47220140922: 473 At svn r271982, The default linux compat kernel ABI has been adjusted 474 to 2.6.18 in support of the linux-c6 compat ports infrastructure 475 update. If you wish to continue using the linux-f10 compat ports, 476 add compat.linux.osrelease=2.6.16 to your local sysctl.conf. Users are 477 encouraged to update their linux-compat packages to linux-c6 during 478 their next update cycle. 479 48020140729: 481 The ofwfb driver, used to provide a graphics console on PowerPC when 482 using vt(4), no longer allows mmap() of all physical memory. This 483 will prevent Xorg on PowerPC with some ATI graphics cards from 484 initializing properly unless x11-servers/xorg-server is updated to 485 1.12.4_8 or newer. 486 48720140723: 488 The xdev targets have been converted to using TARGET and 489 TARGET_ARCH instead of XDEV and XDEV_ARCH. 490 49120140719: 492 The default unbound configuration has been modified to address 493 issues with reverse lookups on networks that use private 494 address ranges. If you use the local_unbound service, run 495 "service local_unbound setup" as root to regenerate your 496 configuration, then "service local_unbound reload" to load the 497 new configuration. 498 49920140709: 500 The GNU texinfo and GNU info pages are not built and installed 501 anymore, WITH_INFO knob has been added to allow to built and install 502 them again. 503 UPDATE: see 20150102 entry on texinfo's removal 504 50520140708: 506 The GNU readline library is now an INTERNALLIB - that is, it is 507 statically linked into consumers (GDB and variants) in the base 508 system, and the shared library is no longer installed. The 509 devel/readline port is available for third party software that 510 requires readline. 511 51220140702: 513 The Itanium architecture (ia64) has been removed from the list of 514 known architectures. This is the first step in the removal of the 515 architecture. 516 51720140701: 518 Commit r268115 has added NFSv4.1 server support, merged from 519 projects/nfsv4.1-server. Since this includes changes to the 520 internal interfaces between the NFS related modules, a full 521 build of the kernel and modules will be necessary. 522 __FreeBSD_version has been bumped. 523 52420140629: 525 The WITHOUT_VT_SUPPORT kernel config knob has been renamed 526 WITHOUT_VT. (The other _SUPPORT knobs have a consistent meaning 527 which differs from the behaviour controlled by this knob.) 528 52920140619: 530 Maximal length of the serial number in CTL was increased from 16 to 531 64 chars, that breaks ABI. All CTL-related tools, such as ctladm 532 and ctld, need to be rebuilt to work with a new kernel. 533 53420140606: 535 The libatf-c and libatf-c++ major versions were downgraded to 0 and 536 1 respectively to match the upstream numbers. They were out of 537 sync because, when they were originally added to FreeBSD, the 538 upstream versions were not respected. These libraries are private 539 and not yet built by default, so renumbering them should be a 540 non-issue. However, unclean source trees will yield broken test 541 programs once the operator executes "make delete-old-libs" after a 542 "make installworld". 543 544 Additionally, the atf-sh binary was made private by moving it into 545 /usr/libexec/. Already-built shell test programs will keep the 546 path to the old binary so they will break after "make delete-old" 547 is run. 548 549 If you are using WITH_TESTS=yes (not the default), wipe the object 550 tree and rebuild from scratch to prevent spurious test failures. 551 This is only needed once: the misnumbered libraries and misplaced 552 binaries have been added to OptionalObsoleteFiles.inc so they will 553 be removed during a clean upgrade. 554 55520140512: 556 Clang and llvm have been upgraded to 3.4.1 release. 557 55820140508: 559 We bogusly installed src.opts.mk in /usr/share/mk. This file should 560 be removed to avoid issues in the future (and has been added to 561 ObsoleteFiles.inc). 562 56320140505: 564 /etc/src.conf now affects only builds of the FreeBSD src tree. In the 565 past, it affected all builds that used the bsd.*.mk files. The old 566 behavior was a bug, but people may have relied upon it. To get this 567 behavior back, you can .include /etc/src.conf from /etc/make.conf 568 (which is still global and isn't changed). This also changes the 569 behavior of incremental builds inside the tree of individual 570 directories. Set MAKESYSPATH to ".../share/mk" to do that. 571 Although this has survived make universe and some upgrade scenarios, 572 other upgrade scenarios may have broken. At least one form of 573 temporary breakage was fixed with MAKESYSPATH settings for buildworld 574 as well... In cases where MAKESYSPATH isn't working with this 575 setting, you'll need to set it to the full path to your tree. 576 577 One side effect of all this cleaning up is that bsd.compiler.mk 578 is no longer implicitly included by bsd.own.mk. If you wish to 579 use COMPILER_TYPE, you must now explicitly include bsd.compiler.mk 580 as well. 581 58220140430: 583 The lindev device has been removed since /dev/full has been made a 584 standard device. __FreeBSD_version has been bumped. 585 58620140424: 587 The knob WITHOUT_VI was added to the base system, which controls 588 building ex(1), vi(1), etc. Older releases of FreeBSD required ex(1) 589 in order to reorder files share/termcap and didn't build ex(1) as a 590 build tool, so building/installing with WITH_VI is highly advised for 591 build hosts for older releases. 592 593 This issue has been fixed in stable/9 and stable/10 in r277022 and 594 r276991, respectively. 595 59620140418: 597 The YES_HESIOD knob has been removed. It has been obsolete for 598 a decade. Please move to using WITH_HESIOD instead or your builds 599 will silently lack HESIOD. 600 60120140405: 602 The uart(4) driver has been changed with respect to its handling 603 of the low-level console. Previously the uart(4) driver prevented 604 any process from changing the baudrate or the CLOCAL and HUPCL 605 control flags. By removing the restrictions, operators can make 606 changes to the serial console port without having to reboot. 607 However, when getty(8) is started on the serial device that is 608 associated with the low-level console, a misconfigured terminal 609 line in /etc/ttys will now have a real impact. 610 Before upgrading the kernel, make sure that /etc/ttys has the 611 serial console device configured as 3wire without baudrate to 612 preserve the previous behaviour. E.g: 613 ttyu0 "/usr/libexec/getty 3wire" vt100 on secure 614 61520140306: 616 Support for libwrap (TCP wrappers) in rpcbind was disabled by default 617 to improve performance. To re-enable it, if needed, run rpcbind 618 with command line option -W. 619 62020140226: 621 Switched back to the GPL dtc compiler due to updates in the upstream 622 dts files not being supported by the BSDL dtc compiler. You will need 623 to rebuild your kernel toolchain to pick up the new compiler. Core dumps 624 may result while building dtb files during a kernel build if you fail 625 to do so. Set WITHOUT_GPL_DTC if you require the BSDL compiler. 626 62720140216: 628 Clang and llvm have been upgraded to 3.4 release. 629 63020140216: 631 The nve(4) driver has been removed. Please use the nfe(4) driver 632 for NVIDIA nForce MCP Ethernet adapters instead. 633 63420140212: 635 An ABI incompatibility crept into the libc++ 3.4 import in r261283. 636 This could cause certain C++ applications using shared libraries built 637 against the previous version of libc++ to crash. The incompatibility 638 has now been fixed, but any C++ applications or shared libraries built 639 between r261283 and r261801 should be recompiled. 640 64120140204: 642 OpenSSH will now ignore errors caused by kernel lacking of Capsicum 643 capability mode support. Please note that enabling the feature in 644 kernel is still highly recommended. 645 64620140131: 647 OpenSSH is now built with sandbox support, and will use sandbox as 648 the default privilege separation method. This requires Capsicum 649 capability mode support in kernel. 650 65120140128: 652 The libelf and libdwarf libraries have been updated to newer 653 versions from upstream. Shared library version numbers for 654 these two libraries were bumped. Any ports or binaries 655 requiring these two libraries should be recompiled. 656 __FreeBSD_version is bumped to 1100006. 657 65820140110: 659 If a Makefile in a tests/ directory was auto-generating a Kyuafile 660 instead of providing an explicit one, this would prevent such 661 Makefile from providing its own Kyuafile in the future during 662 NO_CLEAN builds. This has been fixed in the Makefiles but manual 663 intervention is needed to clean an objdir if you use NO_CLEAN: 664 # find /usr/obj -name Kyuafile | xargs rm -f 665 66620131213: 667 The behavior of gss_pseudo_random() for the krb5 mechanism 668 has changed, for applications requesting a longer random string 669 than produced by the underlying enctype's pseudo-random() function. 670 In particular, the random string produced from a session key of 671 enctype aes256-cts-hmac-sha1-96 or aes256-cts-hmac-sha1-96 will 672 be different at the 17th octet and later, after this change. 673 The counter used in the PRF+ construction is now encoded as a 674 big-endian integer in accordance with RFC 4402. 675 __FreeBSD_version is bumped to 1100004. 676 67720131108: 678 The WITHOUT_ATF build knob has been removed and its functionality 679 has been subsumed into the more generic WITHOUT_TESTS. If you were 680 using the former to disable the build of the ATF libraries, you 681 should change your settings to use the latter. 682 68320131025: 684 The default version of mtree is nmtree which is obtained from 685 NetBSD. The output is generally the same, but may vary 686 slightly. If you found you need identical output adding 687 "-F freebsd9" to the command line should do the trick. For the 688 time being, the old mtree is available as fmtree. 689 69020131014: 691 libbsdyml has been renamed to libyaml and moved to /usr/lib/private. 692 This will break ports-mgmt/pkg. Rebuild the port, or upgrade to pkg 693 1.1.4_8 and verify bsdyml not linked in, before running "make 694 delete-old-libs": 695 # make -C /usr/ports/ports-mgmt/pkg build deinstall install clean 696 or 697 # pkg install pkg; ldd /usr/local/sbin/pkg | grep bsdyml 698 69920131010: 700 The stable/10 branch has been created in subversion from head 701 revision r256279. 702 70320131010: 704 The rc.d/jail script has been updated to support jail(8) 705 configuration file. The "jail_<jname>_*" rc.conf(5) variables 706 for per-jail configuration are automatically converted to 707 /var/run/jail.<jname>.conf before the jail(8) utility is invoked. 708 This is transparently backward compatible. See below about some 709 incompatibilities and rc.conf(5) manual page for more details. 710 711 These variables are now deprecated in favor of jail(8) configuration 712 file. One can use "rc.d/jail config <jname>" command to generate 713 a jail(8) configuration file in /var/run/jail.<jname>.conf without 714 running the jail(8) utility. The default pathname of the 715 configuration file is /etc/jail.conf and can be specified by 716 using $jail_conf or $jail_<jname>_conf variables. 717 718 Please note that jail_devfs_ruleset accepts an integer at 719 this moment. Please consider to rewrite the ruleset name 720 with an integer. 721 72220130930: 723 BIND has been removed from the base system. If all you need 724 is a local resolver, simply enable and start the local_unbound 725 service instead. Otherwise, several versions of BIND are 726 available in the ports tree. The dns/bind99 port is one example. 727 728 With this change, nslookup(1) and dig(1) are no longer in the base 729 system. Users should instead use host(1) and drill(1) which are 730 in the base system. Alternatively, nslookup and dig can 731 be obtained by installing the dns/bind-tools port. 732 73320130916: 734 With the addition of unbound(8), a new unbound user is now 735 required during installworld. "mergemaster -p" can be used to 736 add the user prior to installworld, as documented in the handbook. 737 73820130911: 739 OpenSSH is now built with DNSSEC support, and will by default 740 silently trust signed SSHFP records. This can be controlled with 741 the VerifyHostKeyDNS client configuration setting. DNSSEC support 742 can be disabled entirely with the WITHOUT_LDNS option in src.conf. 743 74420130906: 745 The GNU Compiler Collection and C++ standard library (libstdc++) 746 are no longer built by default on platforms where clang is the system 747 compiler. You can enable them with the WITH_GCC and WITH_GNUCXX 748 options in src.conf. 749 75020130905: 751 The PROCDESC kernel option is now part of the GENERIC kernel 752 configuration and is required for the rwhod(8) to work. 753 If you are using custom kernel configuration, you should include 754 'options PROCDESC'. 755 75620130905: 757 The API and ABI related to the Capsicum framework was modified 758 in backward incompatible way. The userland libraries and programs 759 have to be recompiled to work with the new kernel. This includes the 760 following libraries and programs, but the whole buildworld is 761 advised: libc, libprocstat, dhclient, tcpdump, hastd, hastctl, 762 kdump, procstat, rwho, rwhod, uniq. 763 76420130903: 765 AES-NI intrinsic support has been added to gcc. The AES-NI module 766 has been updated to use this support. A new gcc is required to build 767 the aesni module on both i386 and amd64. 768 76920130821: 770 The PADLOCK_RNG and RDRAND_RNG kernel options are now devices. 771 Thus "device padlock_rng" and "device rdrand_rng" should be 772 used instead of "options PADLOCK_RNG" & "options RDRAND_RNG". 773 77420130813: 775 WITH_ICONV has been split into two feature sets. WITH_ICONV now 776 enables just the iconv* functionality and is now on by default. 777 WITH_LIBICONV_COMPAT enables the libiconv api and link time 778 compatability. Set WITHOUT_ICONV to build the old way. 779 If you have been using WITH_ICONV before, you will very likely 780 need to turn on WITH_LIBICONV_COMPAT. 781 78220130806: 783 INVARIANTS option now enables DEBUG for code with OpenSolaris and 784 Illumos origin, including ZFS. If you have INVARIANTS in your 785 kernel configuration, then there is no need to set DEBUG or ZFS_DEBUG 786 explicitly. 787 DEBUG used to enable witness(9) tracking of OpenSolaris (mostly ZFS) 788 locks if WITNESS option was set. Because that generated a lot of 789 witness(9) reports and all of them were believed to be false 790 positives, this is no longer done. New option OPENSOLARIS_WITNESS 791 can be used to achieve the previous behavior. 792 79320130806: 794 Timer values in IPv6 data structures now use time_uptime instead 795 of time_second. Although this is not a user-visible functional 796 change, userland utilities which directly use them---ndp(8), 797 rtadvd(8), and rtsold(8) in the base system---need to be updated 798 to r253970 or later. 799 80020130802: 801 find -delete can now delete the pathnames given as arguments, 802 instead of only files found below them or if the pathname did 803 not contain any slashes. Formerly, the following error message 804 would result: 805 806 find: -delete: <path>: relative path potentially not safe 807 808 Deleting the pathnames given as arguments can be prevented 809 without error messages using -mindepth 1 or by changing 810 directory and passing "." as argument to find. This works in the 811 old as well as the new version of find. 812 81320130726: 814 Behavior of devfs rules path matching has been changed. 815 Pattern is now always matched against fully qualified devfs 816 path and slash characters must be explicitly matched by 817 slashes in pattern (FNM_PATHNAME). Rulesets involving devfs 818 subdirectories must be reviewed. 819 82020130716: 821 The default ARM ABI has changed to the ARM EABI. The old ABI is 822 incompatible with the ARM EABI and all programs and modules will 823 need to be rebuilt to work with a new kernel. 824 825 To keep using the old ABI ensure the WITHOUT_ARM_EABI knob is set. 826 827 NOTE: Support for the old ABI will be removed in the future and 828 users are advised to upgrade. 829 83020130709: 831 pkg_install has been disconnected from the build if you really need it 832 you should add WITH_PKGTOOLS in your src.conf(5). 833 83420130709: 835 Most of network statistics structures were changed to be able 836 keep 64-bits counters. Thus all tools, that work with networking 837 statistics, must be rebuilt (netstat(1), bsnmpd(1), etc.) 838 83920130629: 840 Fix targets that run multiple make's to use && rather than ; 841 so that subsequent steps depend on success of previous. 842 843 NOTE: if building 'universe' with -j* on stable/8 or stable/9 844 it would be better to start the build using bmake, to avoid 845 overloading the machine. 846 84720130618: 848 Fix a bug that allowed a tracing process (e.g. gdb) to write 849 to a memory-mapped file in the traced process's address space 850 even if neither the traced process nor the tracing process had 851 write access to that file. 852 85320130615: 854 CVS has been removed from the base system. An exact copy 855 of the code is available from the devel/cvs port. 856 85720130613: 858 Some people report the following error after the switch to bmake: 859 860 make: illegal option -- J 861 usage: make [-BPSXeiknpqrstv] [-C directory] [-D variable] 862 ... 863 *** [buildworld] Error code 2 864 865 this likely due to an old instance of make in 866 ${MAKEPATH} (${MAKEOBJDIRPREFIX}${.CURDIR}/make.${MACHINE}) 867 which src/Makefile will use that blindly, if it exists, so if 868 you see the above error: 869 870 rm -rf `make -V MAKEPATH` 871 872 should resolve it. 873 87420130516: 875 Use bmake by default. 876 Whereas before one could choose to build with bmake via 877 -DWITH_BMAKE one must now use -DWITHOUT_BMAKE to use the old 878 make. The goal is to remove these knobs for 10-RELEASE. 879 880 It is worth noting that bmake (like gmake) treats the command 881 line as the unit of failure, rather than statements within the 882 command line. Thus '(cd some/where && dosomething)' is safer 883 than 'cd some/where; dosomething'. The '()' allows consistent 884 behavior in parallel build. 885 88620130429: 887 Fix a bug that allows NFS clients to issue READDIR on files. 888 88920130426: 890 The WITHOUT_IDEA option has been removed because 891 the IDEA patent expired. 892 89320130426: 894 The sysctl which controls TRIM support under ZFS has been renamed 895 from vfs.zfs.trim_disable -> vfs.zfs.trim.enabled and has been 896 enabled by default. 897 89820130425: 899 The mergemaster command now uses the default MAKEOBJDIRPREFIX 900 rather than creating it's own in the temporary directory in 901 order allow access to bootstrapped versions of tools such as 902 install and mtree. When upgrading from version of FreeBSD where 903 the install command does not support -l, you will need to 904 install a new mergemaster command if mergemaster -p is required. 905 This can be accomplished with the command (cd src/usr.sbin/mergemaster 906 && make install). 907 90820130404: 909 Legacy ATA stack, disabled and replaced by new CAM-based one since 910 FreeBSD 9.0, completely removed from the sources. Kernel modules 911 atadisk and atapi*, user-level tools atacontrol and burncd are 912 removed. Kernel option `options ATA_CAM` is now permanently enabled 913 and removed. 914 91520130319: 916 SOCK_CLOEXEC and SOCK_NONBLOCK flags have been added to socket(2) 917 and socketpair(2). Software, in particular Kerberos, may 918 automatically detect and use these during building. The resulting 919 binaries will not work on older kernels. 920 92120130308: 922 CTL_DISABLE has also been added to the sparc64 GENERIC (for further 923 information, see the respective 20130304 entry). 924 92520130304: 926 Recent commits to callout(9) changed the size of struct callout, 927 so the KBI is probably heavily disturbed. Also, some functions 928 in callout(9)/sleep(9)/sleepqueue(9)/condvar(9) KPIs were replaced 929 by macros. Every kernel module using it won't load, so rebuild 930 is requested. 931 932 The ctl device has been re-enabled in GENERIC for i386 and amd64, 933 but does not initialize by default (because of the new CTL_DISABLE 934 option) to save memory. To re-enable it, remove the CTL_DISABLE 935 option from the kernel config file or set kern.cam.ctl.disable=0 936 in /boot/loader.conf. 937 93820130301: 939 The ctl device has been disabled in GENERIC for i386 and amd64. 940 This was done due to the extra memory being allocated at system 941 initialisation time by the ctl driver which was only used if 942 a CAM target device was created. This makes a FreeBSD system 943 unusable on 128MB or less of RAM. 944 94520130208: 946 A new compression method (lz4) has been merged to -HEAD. Please 947 refer to zpool-features(7) for more information. 948 949 Please refer to the "ZFS notes" section of this file for information 950 on upgrading boot ZFS pools. 951 95220130129: 953 A BSD-licensed patch(1) variant has been added and is installed 954 as bsdpatch, being the GNU version the default patch. 955 To inverse the logic and use the BSD-licensed one as default, 956 while having the GNU version installed as gnupatch, rebuild 957 and install world with the WITH_BSD_PATCH knob set. 958 95920130121: 960 Due to the use of the new -l option to install(1) during build 961 and install, you must take care not to directly set the INSTALL 962 make variable in your /etc/make.conf, /etc/src.conf, or on the 963 command line. If you wish to use the -C flag for all installs 964 you may be able to add INSTALL+=-C to /etc/make.conf or 965 /etc/src.conf. 966 96720130118: 968 The install(1) option -M has changed meaning and now takes an 969 argument that is a file or path to append logs to. In the 970 unlikely event that -M was the last option on the command line 971 and the command line contained at least two files and a target 972 directory the first file will have logs appended to it. The -M 973 option served little practical purpose in the last decade so its 974 use is expected to be extremely rare. 975 97620121223: 977 After switching to Clang as the default compiler some users of ZFS 978 on i386 systems started to experience stack overflow kernel panics. 979 Please consider using 'options KSTACK_PAGES=4' in such configurations. 980 98120121222: 982 GEOM_LABEL now mangles label names read from file system metadata. 983 Mangling affect labels containing spaces, non-printable characters, 984 '%' or '"'. Device names in /etc/fstab and other places may need to 985 be updated. 986 98720121217: 988 By default, only the 10 most recent kernel dumps will be saved. To 989 restore the previous behaviour (no limit on the number of kernel dumps 990 stored in the dump directory) add the following line to /etc/rc.conf: 991 992 savecore_flags="" 993 99420121201: 995 With the addition of auditdistd(8), a new auditdistd user is now 996 required during installworld. "mergemaster -p" can be used to 997 add the user prior to installworld, as documented in the handbook. 998 99920121117: 1000 The sin6_scope_id member variable in struct sockaddr_in6 is now 1001 filled by the kernel before passing the structure to the userland via 1002 sysctl or routing socket. This means the KAME-specific embedded scope 1003 id in sin6_addr.s6_addr[2] is always cleared in userland application. 1004 This behavior can be controlled by net.inet6.ip6.deembed_scopeid. 1005 __FreeBSD_version is bumped to 1000025. 1006 100720121105: 1008 On i386 and amd64 systems WITH_CLANG_IS_CC is now the default. 1009 This means that the world and kernel will be compiled with clang 1010 and that clang will be installed as /usr/bin/cc, /usr/bin/c++, 1011 and /usr/bin/cpp. To disable this behavior and revert to building 1012 with gcc, compile with WITHOUT_CLANG_IS_CC. Really old versions 1013 of current may need to bootstrap WITHOUT_CLANG first if the clang 1014 build fails (its compatibility window doesn't extend to the 9 stable 1015 branch point). 1016 101720121102: 1018 The IPFIREWALL_FORWARD kernel option has been removed. Its 1019 functionality now turned on by default. 1020 102120121023: 1022 The ZERO_COPY_SOCKET kernel option has been removed and 1023 split into SOCKET_SEND_COW and SOCKET_RECV_PFLIP. 1024 NB: SOCKET_SEND_COW uses the VM page based copy-on-write 1025 mechanism which is not safe and may result in kernel crashes. 1026 NB: The SOCKET_RECV_PFLIP mechanism is useless as no current 1027 driver supports disposeable external page sized mbuf storage. 1028 Proper replacements for both zero-copy mechanisms are under 1029 consideration and will eventually lead to complete removal 1030 of the two kernel options. 1031 103220121023: 1033 The IPv4 network stack has been converted to network byte 1034 order. The following modules need to be recompiled together 1035 with kernel: carp(4), divert(4), gif(4), siftr(4), gre(4), 1036 pf(4), ipfw(4), ng_ipfw(4), stf(4). 1037 103820121022: 1039 Support for non-MPSAFE filesystems was removed from VFS. The 1040 VFS_VERSION was bumped, all filesystem modules shall be 1041 recompiled. 1042 104320121018: 1044 All the non-MPSAFE filesystems have been disconnected from 1045 the build. The full list includes: codafs, hpfs, ntfs, nwfs, 1046 portalfs, smbfs, xfs. 1047 104820121016: 1049 The interface cloning API and ABI has changed. The following 1050 modules need to be recompiled together with kernel: 1051 ipfw(4), pfsync(4), pflog(4), usb(4), wlan(4), stf(4), 1052 vlan(4), disc(4), edsc(4), if_bridge(4), gif(4), tap(4), 1053 faith(4), epair(4), enc(4), tun(4), if_lagg(4), gre(4). 1054 105520121015: 1056 The sdhci driver was split in two parts: sdhci (generic SD Host 1057 Controller logic) and sdhci_pci (actual hardware driver). 1058 No kernel config modifications are required, but if you 1059 load sdhc as a module you must switch to sdhci_pci instead. 1060 106120121014: 1062 Import the FUSE kernel and userland support into base system. 1063 106420121013: 1065 The GNU sort(1) program has been removed since the BSD-licensed 1066 sort(1) has been the default for quite some time and no serious 1067 problems have been reported. The corresponding WITH_GNU_SORT 1068 knob has also gone. 1069 107020121006: 1071 The pfil(9) API/ABI for AF_INET family has been changed. Packet 1072 filtering modules: pf(4), ipfw(4), ipfilter(4) need to be recompiled 1073 with new kernel. 1074 107520121001: 1076 The net80211(4) ABI has been changed to allow for improved driver 1077 PS-POLL and power-save support. All wireless drivers need to be 1078 recompiled to work with the new kernel. 1079 108020120913: 1081 The random(4) support for the VIA hardware random number 1082 generator (`PADLOCK') is no longer enabled unconditionally. 1083 Add the padlock_rng device in the custom kernel config if 1084 needed. The GENERIC kernels on i386 and amd64 do include the 1085 device, so the change only affects the custom kernel 1086 configurations. 1087 108820120908: 1089 The pf(4) packet filter ABI has been changed. pfctl(8) and 1090 snmp_pf module need to be recompiled to work with new kernel. 1091 109220120828: 1093 A new ZFS feature flag "com.delphix:empty_bpobj" has been merged 1094 to -HEAD. Pools that have empty_bpobj in active state can not be 1095 imported read-write with ZFS implementations that do not support 1096 this feature. For more information read the zpool-features(5) 1097 manual page. 1098 109920120727: 1100 The sparc64 ZFS loader has been changed to no longer try to auto- 1101 detect ZFS providers based on diskN aliases but now requires these 1102 to be explicitly listed in the OFW boot-device environment variable. 1103 110420120712: 1105 The OpenSSL has been upgraded to 1.0.1c. Any binaries requiring 1106 libcrypto.so.6 or libssl.so.6 must be recompiled. Also, there are 1107 configuration changes. Make sure to merge /etc/ssl/openssl.cnf. 1108 110920120712: 1110 The following sysctls and tunables have been renamed for consistency 1111 with other variables: 1112 kern.cam.da.da_send_ordered -> kern.cam.da.send_ordered 1113 kern.cam.ada.ada_send_ordered -> kern.cam.ada.send_ordered 1114 111520120628: 1116 The sort utility has been replaced with BSD sort. For now, GNU sort 1117 is also available as "gnusort" or the default can be set back to 1118 GNU sort by setting WITH_GNU_SORT. In this case, BSD sort will be 1119 installed as "bsdsort". 1120 112120120611: 1122 A new version of ZFS (pool version 5000) has been merged to -HEAD. 1123 Starting with this version the old system of ZFS pool versioning 1124 is superseded by "feature flags". This concept enables forward 1125 compatibility against certain future changes in functionality of ZFS 1126 pools. The first read-only compatible "feature flag" for ZFS pools 1127 is named "com.delphix:async_destroy". For more information 1128 read the new zpool-features(5) manual page. 1129 Please refer to the "ZFS notes" section of this file for information 1130 on upgrading boot ZFS pools. 1131 113220120417: 1133 The malloc(3) implementation embedded in libc now uses sources imported 1134 as contrib/jemalloc. The most disruptive API change is to 1135 /etc/malloc.conf. If your system has an old-style /etc/malloc.conf, 1136 delete it prior to installworld, and optionally re-create it using the 1137 new format after rebooting. See malloc.conf(5) for details 1138 (specifically the TUNING section and the "opt.*" entries in the MALLCTL 1139 NAMESPACE section). 1140 114120120328: 1142 Big-endian MIPS TARGET_ARCH values no longer end in "eb". mips64eb 1143 is now spelled mips64. mipsn32eb is now spelled mipsn32. mipseb is 1144 now spelled mips. This is to aid compatibility with third-party 1145 software that expects this naming scheme in uname(3). Little-endian 1146 settings are unchanged. If you are updating a big-endian mips64 machine 1147 from before this change, you may need to set MACHINE_ARCH=mips64 in 1148 your environment before the new build system will recognize your machine. 1149 115020120306: 1151 Disable by default the option VFS_ALLOW_NONMPSAFE for all supported 1152 platforms. 1153 115420120229: 1155 Now unix domain sockets behave "as expected" on nullfs(5). Previously 1156 nullfs(5) did not pass through all behaviours to the underlying layer, 1157 as a result if we bound to a socket on the lower layer we could connect 1158 only to the lower path; if we bound to the upper layer we could connect 1159 only to the upper path. The new behavior is one can connect to both the 1160 lower and the upper paths regardless what layer path one binds to. 1161 116220120211: 1163 The getifaddrs upgrade path broken with 20111215 has been restored. 1164 If you have upgraded in between 20111215 and 20120209 you need to 1165 recompile libc again with your kernel. You still need to recompile 1166 world to be able to configure CARP but this restriction already 1167 comes from 20111215. 1168 116920120114: 1170 The set_rcvar() function has been removed from /etc/rc.subr. All 1171 base and ports rc.d scripts have been updated, so if you have a 1172 port installed with a script in /usr/local/etc/rc.d you can either 1173 hand-edit the rcvar= line, or reinstall the port. 1174 1175 An easy way to handle the mass-update of /etc/rc.d: 1176 rm /etc/rc.d/* && mergemaster -i 1177 117820120109: 1179 panic(9) now stops other CPUs in the SMP systems, disables interrupts 1180 on the current CPU and prevents other threads from running. 1181 This behavior can be reverted using the kern.stop_scheduler_on_panic 1182 tunable/sysctl. 1183 The new behavior can be incompatible with kern.sync_on_panic. 1184 118520111215: 1186 The carp(4) facility has been changed significantly. Configuration 1187 of the CARP protocol via ifconfig(8) has changed, as well as format 1188 of CARP events submitted to devd(8) has changed. See manual pages 1189 for more information. The arpbalance feature of carp(4) is currently 1190 not supported anymore. 1191 1192 Size of struct in_aliasreq, struct in6_aliasreq has changed. User 1193 utilities using SIOCAIFADDR, SIOCAIFADDR_IN6, e.g. ifconfig(8), 1194 need to be recompiled. 1195 119620111122: 1197 The acpi_wmi(4) status device /dev/wmistat has been renamed to 1198 /dev/wmistat0. 1199 120020111108: 1201 The option VFS_ALLOW_NONMPSAFE option has been added in order to 1202 explicitely support non-MPSAFE filesystems. 1203 It is on by default for all supported platform at this present 1204 time. 1205 120620111101: 1207 The broken amd(4) driver has been replaced with esp(4) in the amd64, 1208 i386 and pc98 GENERIC kernel configuration files. 1209 121020110930: 1211 sysinstall has been removed 1212 121320110923: 1214 The stable/9 branch created in subversion. This corresponds to the 1215 RELENG_9 branch in CVS. 1216 1217COMMON ITEMS: 1218 1219 General Notes 1220 ------------- 1221 Avoid using make -j when upgrading. While generally safe, there are 1222 sometimes problems using -j to upgrade. If your upgrade fails with 1223 -j, please try again without -j. From time to time in the past there 1224 have been problems using -j with buildworld and/or installworld. This 1225 is especially true when upgrading between "distant" versions (eg one 1226 that cross a major release boundary or several minor releases, or when 1227 several months have passed on the -current branch). 1228 1229 Sometimes, obscure build problems are the result of environment 1230 poisoning. This can happen because the make utility reads its 1231 environment when searching for values for global variables. To run 1232 your build attempts in an "environmental clean room", prefix all make 1233 commands with 'env -i '. See the env(1) manual page for more details. 1234 1235 When upgrading from one major version to another it is generally best 1236 to upgrade to the latest code in the currently installed branch first, 1237 then do an upgrade to the new branch. This is the best-tested upgrade 1238 path, and has the highest probability of being successful. Please try 1239 this approach before reporting problems with a major version upgrade. 1240 1241 When upgrading a live system, having a root shell around before 1242 installing anything can help undo problems. Not having a root shell 1243 around can lead to problems if pam has changed too much from your 1244 starting point to allow continued authentication after the upgrade. 1245 1246 This file should be read as a log of events. When a later event changes 1247 information of a prior event, the prior event should not be deleted. 1248 Instead, a pointer to the entry with the new information should be 1249 placed in the old entry. Readers of this file should also sanity check 1250 older entries before relying on them blindly. Authors of new entries 1251 should write them with this in mind. 1252 1253 ZFS notes 1254 --------- 1255 When upgrading the boot ZFS pool to a new version, always follow 1256 these two steps: 1257 1258 1.) recompile and reinstall the ZFS boot loader and boot block 1259 (this is part of "make buildworld" and "make installworld") 1260 1261 2.) update the ZFS boot block on your boot drive 1262 1263 The following example updates the ZFS boot block on the first 1264 partition (freebsd-boot) of a GPT partitioned drive ada0: 1265 "gpart bootcode -p /boot/gptzfsboot -i 1 ada0" 1266 1267 Non-boot pools do not need these updates. 1268 1269 To build a kernel 1270 ----------------- 1271 If you are updating from a prior version of FreeBSD (even one just 1272 a few days old), you should follow this procedure. It is the most 1273 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld, 1274 1275 make kernel-toolchain 1276 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE 1277 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE 1278 1279 To test a kernel once 1280 --------------------- 1281 If you just want to boot a kernel once (because you are not sure 1282 if it works, or if you want to boot a known bad kernel to provide 1283 debugging information) run 1284 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel 1285 nextboot -k testkernel 1286 1287 To just build a kernel when you know that it won't mess you up 1288 -------------------------------------------------------------- 1289 This assumes you are already running a CURRENT system. Replace 1290 ${arch} with the architecture of your machine (e.g. "i386", 1291 "arm", "amd64", "ia64", "pc98", "sparc64", "powerpc", "mips", etc). 1292 1293 cd src/sys/${arch}/conf 1294 config KERNEL_NAME_HERE 1295 cd ../compile/KERNEL_NAME_HERE 1296 make depend 1297 make 1298 make install 1299 1300 If this fails, go to the "To build a kernel" section. 1301 1302 To rebuild everything and install it on the current system. 1303 ----------------------------------------------------------- 1304 # Note: sometimes if you are running current you gotta do more than 1305 # is listed here if you are upgrading from a really old current. 1306 1307 <make sure you have good level 0 dumps> 1308 make buildworld 1309 make kernel KERNCONF=YOUR_KERNEL_HERE 1310 [1] 1311 <reboot in single user> [3] 1312 mergemaster -Fp [5] 1313 make installworld 1314 mergemaster -Fi [4] 1315 make delete-old [6] 1316 <reboot> 1317 1318 To cross-install current onto a separate partition 1319 -------------------------------------------------- 1320 # In this approach we use a separate partition to hold 1321 # current's root, 'usr', and 'var' directories. A partition 1322 # holding "/", "/usr" and "/var" should be about 2GB in 1323 # size. 1324 1325 <make sure you have good level 0 dumps> 1326 <boot into -stable> 1327 make buildworld 1328 make buildkernel KERNCONF=YOUR_KERNEL_HERE 1329 <maybe newfs current's root partition> 1330 <mount current's root partition on directory ${CURRENT_ROOT}> 1331 make installworld DESTDIR=${CURRENT_ROOT} -DDB_FROM_SRC 1332 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd 1333 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT} 1334 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd 1335 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition> 1336 <reboot into current> 1337 <do a "native" rebuild/install as described in the previous section> 1338 <maybe install compatibility libraries from ports/misc/compat*> 1339 <reboot> 1340 1341 1342 To upgrade in-place from stable to current 1343 ---------------------------------------------- 1344 <make sure you have good level 0 dumps> 1345 make buildworld [9] 1346 make kernel KERNCONF=YOUR_KERNEL_HERE [8] 1347 [1] 1348 <reboot in single user> [3] 1349 mergemaster -Fp [5] 1350 make installworld 1351 mergemaster -Fi [4] 1352 make delete-old [6] 1353 <reboot> 1354 1355 Make sure that you've read the UPDATING file to understand the 1356 tweaks to various things you need. At this point in the life 1357 cycle of current, things change often and you are on your own 1358 to cope. The defaults can also change, so please read ALL of 1359 the UPDATING entries. 1360 1361 Also, if you are tracking -current, you must be subscribed to 1362 freebsd-current@freebsd.org. Make sure that before you update 1363 your sources that you have read and understood all the recent 1364 messages there. If in doubt, please track -stable which has 1365 much fewer pitfalls. 1366 1367 [1] If you have third party modules, such as vmware, you 1368 should disable them at this point so they don't crash your 1369 system on reboot. 1370 1371 [3] From the bootblocks, boot -s, and then do 1372 fsck -p 1373 mount -u / 1374 mount -a 1375 cd src 1376 adjkerntz -i # if CMOS is wall time 1377 Also, when doing a major release upgrade, it is required that 1378 you boot into single user mode to do the installworld. 1379 1380 [4] Note: This step is non-optional. Failure to do this step 1381 can result in a significant reduction in the functionality of the 1382 system. Attempting to do it by hand is not recommended and those 1383 that pursue this avenue should read this file carefully, as well 1384 as the archives of freebsd-current and freebsd-hackers mailing lists 1385 for potential gotchas. The -U option is also useful to consider. 1386 See mergemaster(8) for more information. 1387 1388 [5] Usually this step is a noop. However, from time to time 1389 you may need to do this if you get unknown user in the following 1390 step. It never hurts to do it all the time. You may need to 1391 install a new mergemaster (cd src/usr.sbin/mergemaster && make 1392 install) after the buildworld before this step if you last updated 1393 from current before 20130425 or from -stable before 20130430. 1394 1395 [6] This only deletes old files and directories. Old libraries 1396 can be deleted by "make delete-old-libs", but you have to make 1397 sure that no program is using those libraries anymore. 1398 1399 [8] In order to have a kernel that can run the 4.x binaries needed to 1400 do an installworld, you must include the COMPAT_FREEBSD4 option in 1401 your kernel. Failure to do so may leave you with a system that is 1402 hard to boot to recover. A similar kernel option COMPAT_FREEBSD5 is 1403 required to run the 5.x binaries on more recent kernels. And so on 1404 for COMPAT_FREEBSD6 and COMPAT_FREEBSD7. 1405 1406 Make sure that you merge any new devices from GENERIC since the 1407 last time you updated your kernel config file. 1408 1409 [9] When checking out sources, you must include the -P flag to have 1410 cvs prune empty directories. 1411 1412 If CPUTYPE is defined in your /etc/make.conf, make sure to use the 1413 "?=" instead of the "=" assignment operator, so that buildworld can 1414 override the CPUTYPE if it needs to. 1415 1416 MAKEOBJDIRPREFIX must be defined in an environment variable, and 1417 not on the command line, or in /etc/make.conf. buildworld will 1418 warn if it is improperly defined. 1419FORMAT: 1420 1421This file contains a list, in reverse chronological order, of major 1422breakages in tracking -current. It is not guaranteed to be a complete 1423list of such breakages, and only contains entries since September 23, 2011. 1424If you need to see UPDATING entries from before that date, you will need 1425to fetch an UPDATING file from an older FreeBSD release. 1426 1427Copyright information: 1428 1429Copyright 1998-2009 M. Warner Losh. All Rights Reserved. 1430 1431Redistribution, publication, translation and use, with or without 1432modification, in full or in part, in any form or format of this 1433document are permitted without further permission from the author. 1434 1435THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR 1436IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 1437WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 1438DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT, 1439INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 1440(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 1441SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 1442HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 1443STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 1444IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 1445POSSIBILITY OF SUCH DAMAGE. 1446 1447Contact Warner Losh if you have any questions about your use of 1448this document. 1449 1450$FreeBSD: head/UPDATING 290496 2015-11-07 12:48:29Z bapt $ 1451