1a53ce3fcSGlen BarberRelease notes for FreeBSD 14.0. 28dbc2b6eSMark Johnston 38dbc2b6eSMark JohnstonThis file describes new user-visible features, changes and updates relevant to 48dbc2b6eSMark Johnstonusers of binary FreeBSD releases. Each entry should describe the change in no 58dbc2b6eSMark Johnstonmore than several sentences and should reference manual pages where an 68dbc2b6eSMark Johnstoninterested user can find more information. Entries should wrap after 80 78dbc2b6eSMark Johnstoncolumns. Each entry should begin with one or more commit IDs on one line, 8cda1f88dSWarner Loshspecified as a comma separated list and/or range, followed by a colon and a 9cda1f88dSWarner Loshnewline. Entries should be separated by a newline. 108dbc2b6eSMark Johnston 118dbc2b6eSMark JohnstonChanges to this file should not be MFCed. 128dbc2b6eSMark Johnston 13*8d0ed566SMike Karels4a30d7bb373c,d670a8f7c596,af01b4722577,4e240e55d818: 14*8d0ed566SMike Karels The growfs(7) script can now add a swap partition at the end of 15*8d0ed566SMike Karels the expansion area, and does so by default if there is no existing 16*8d0ed566SMike Karels swap. See growfs(7). 17*8d0ed566SMike Karels 18f1628146SEd Maste86edb11e7491: 19f1628146SEd Maste llvm-objump is now always installed as objdump. 20f1628146SEd Maste 21882fc6daSBaptiste Daroussin616f32ea6da7: 22882fc6daSBaptiste Daroussin mta_start_script along with othermta rc.d script has been retired. 23882fc6daSBaptiste Daroussin 244d184bd4SBaptiste Daroussina67b925ff3e5: 254d184bd4SBaptiste Daroussin The default mail transport agent is now dma(8) replacing sendmail. 264d184bd4SBaptiste Daroussin 273c62f0f6SKristof Provost22893e584032: 283c62f0f6SKristof Provost L3 filtering on if_bridge will do surprising things which aren't 293c62f0f6SKristof Provost fail-safe, so net.link.bridge.pfil_member and 303c62f0f6SKristof Provost net.link.bridge.pfil_bridge now default to zero. 313c62f0f6SKristof Provost 322e5699fbSMark Johnstonf0bc4ed144fc: 332e5699fbSMark Johnston A new DTrace provider, kinst, is introduced and documented in 342e5699fbSMark Johnston dtrace_kinst(4). The provider allows kernel instructions to be traced, 352e5699fbSMark Johnston similar to the FBT (function boundary tracing) provider except that all 362e5699fbSMark Johnston instructions may be probed instead of logical entry and return 372e5699fbSMark Johnston instructions. The provider is currently amd64-only. 382e5699fbSMark Johnston 399bbed3f6SBrooks Davis0eea46fb1f83: 409bbed3f6SBrooks Davis Removed telnetd. 419bbed3f6SBrooks Davis 42e7d9290fSRick Macklem981ef32230b2,33721eb991d8: 43e7d9290fSRick Macklem These commits make the use of NFSv4.1/4.2 mounts with the "intr" 44e7d9290fSRick Macklem mount option fairly usable, although not 100% correct, so long as 45e7d9290fSRick Macklem the "nolockd" mount option is used as well. See the mount_nfs(8) 46e7d9290fSRick Macklem manual page for more information. 47e7d9290fSRick Macklem 4885c11f80SRick Macklemb875d4f5ddcb,0685c73cfe88: 4985c11f80SRick Macklem The NFSv4.1/4.2 client and server will now generate console messages 5085c11f80SRick Macklem if sessions are broken, suggesting that users check to ensure 5185c11f80SRick Macklem that the /etc/hostid strings are unique for all NFSv4.1/4.2 clients. 5285c11f80SRick Macklem 53c39eecd8SMark Johnston240afd8c1fcc: 54c39eecd8SMark Johnston makefs(8) has ZFS support; it can create a ZFS pool, backed by a 55c39eecd8SMark Johnston single disk vdev, containing one or more datasets populated from 56c39eecd8SMark Johnston the staging directory. 57c39eecd8SMark Johnston 584cb0d41cSMark Johnston78ee8d1c4cda,f4f56ff43dbd: 594cb0d41cSMark Johnston The in-tree qat(4) driver has been replaced with Intel's QAT driver. 604cb0d41cSMark Johnston The new version provides additional interfaces to the chipset's 614cb0d41cSMark Johnston cryptographic and compression offload functionality. 624cb0d41cSMark Johnston 634cb0d41cSMark Johnston This will have no visible change for most users; however, the new 644cb0d41cSMark Johnston driver does not support Atom C2000 chipsets. To preserve support for 654cb0d41cSMark Johnston those chipsets, the old driver has been renamed to qat_c2xxx and kept 664cb0d41cSMark Johnston in the tree. Users of qat(4) on C2000 hardware will thus need to 674cb0d41cSMark Johnston ensure that qat_c2xxx(4) is loaded instead of qat(4). 684cb0d41cSMark Johnston 69c71a534eSMateusz Piotrowskida5b7e90e740,5a8fceb3bd9f,7b0a665d72c0,13ec1e3155c7,318d0db5fe8a,1ae2c59bcf21: 70c71a534eSMateusz Piotrowski Boottrace is a new kernel-userspace interface for capturing trace 71c71a534eSMateusz Piotrowski events during system boot and shutdown. Event annotations are 72c71a534eSMateusz Piotrowski present in: 73c71a534eSMateusz Piotrowski 74c71a534eSMateusz Piotrowski - The boot and shutdown paths in the kernel 75c71a534eSMateusz Piotrowski - Some key system utilities (init(8), shutdown(8), reboot(8)) 76c71a534eSMateusz Piotrowski - rc(8) scripts (via boottrace(8)) 77c71a534eSMateusz Piotrowski 78c71a534eSMateusz Piotrowski In contrast to other existing boot-time tracing facilities like TSLOG, 79c71a534eSMateusz Piotrowski Boottrace focuses on the ease of use and is aimed primarily at system 80c71a534eSMateusz Piotrowski administrators. 81c71a534eSMateusz Piotrowski 82c71a534eSMateusz Piotrowski It is available in the default GENERIC kernel and can be enabled by 83c71a534eSMateusz Piotrowski toggling a single sysctl(8) variable. 84c71a534eSMateusz Piotrowski 85c71a534eSMateusz Piotrowski See boottrace(4) for more details. 86c71a534eSMateusz Piotrowski 87253ecb38SJohn Baldwin05a1d0f5d7ac: 88253ecb38SJohn Baldwin Kernel TLS offload now supports receive-side offload of TLS 1.3. 89253ecb38SJohn Baldwin 9076fe9df7SKristof Provost19dc64451179: 9176fe9df7SKristof Provost if_stf now supports 6rd (RFC5969). 9276fe9df7SKristof Provost 93e383c423SCy Schubertc1d255d3ffdb, 3968b47cd974, bd452dcbede6: 94e383c423SCy Schubert Add WiFi 6 support to wpa. 95e383c423SCy Schubert 9622b1cbecSCy Schubertba48d52ca6c8,4ac3d08a9693,2533eca1c2b9: 9722b1cbecSCy Schubert The default bell tone is now 800Hz. It may be set with kbdcontrol 9822b1cbecSCy Schubert again. There's devd integration for people wishing to use their sound 9922b1cbecSCy Schubert cards for the beep. 100aa80581cSWarner Losh 101b788a226SGleb Smirnoff92b3e07229ba: 102b788a226SGleb Smirnoff net.inet.tcp.nolocaltimewait enabled by default. It prevents 103b788a226SGleb Smirnoff creation of timewait entries for TCP connections that were 104b788a226SGleb Smirnoff terminated locally. 105b788a226SGleb Smirnoff 106cfd8fda1SElliott Mitchelld410b585b6f0: 1071fca3dcaSBaptiste Daroussin sh(1) is now the default shell for the root user. 1081fca3dcaSBaptiste Daroussin 109cfd8fda1SElliott Mitchell396851c20aeb: 1105aeb2600SBaptiste Daroussin libncursesw has been split into libtinfow and libncursesw, linker 1115aeb2600SBaptiste Daroussin scripts should make it transparent for consumers. pkg-config files 1125aeb2600SBaptiste Daroussin are also now installed to ease ports detecting the ncurses setup from 1135aeb2600SBaptiste Daroussin base. 1145aeb2600SBaptiste Daroussin 115cfd8fda1SElliott Mitchella422084abbda: 11605eba8e0SMark Johnston LLVM's MemorySanitizer can now be used in amd64 kernels. See the 11705eba8e0SMark Johnston kmsan(9) manual page for more information. 11805eba8e0SMark Johnston 11905eba8e0SMark Johnston38da497a4dfc: 12005eba8e0SMark Johnston LLVM's AddressSanitizer can now be used in amd64 kernels. See the 12105eba8e0SMark Johnston kasan(9) manual page for more information. 12205eba8e0SMark Johnston 123818edf67SWarner Loshf39dd6a97844,23f24377b1a9,628bd30ab5a4: 12459b83c47SWarner Losh One True Awk has been updated to the latest from upstream 125818edf67SWarner Losh (20210727). All the FreeBSD patches, but one, have now been 12659b83c47SWarner Losh either up streamed or discarded. Notable changes include: 12759b83c47SWarner Losh o Locale is no longer used for ranges 12859b83c47SWarner Losh o Various bugs fixed 12959b83c47SWarner Losh o Better compatibility with gawk and mawk 13059b83c47SWarner Losh 13159b83c47SWarner Losh The one FreeBSD change, likely to be removed in FreeBSD 14, is that 13259b83c47SWarner Losh we still allow hex numbers, prefixed with 0x, to be parsed and 13359b83c47SWarner Losh interpreted as hex numbers while all other awks (including one 13459b83c47SWarner Losh true awk now) interpret them as 0 in line with awk's historic 13559b83c47SWarner Losh behavior. 13659b83c47SWarner Losh 137818edf67SWarner Losh A second change, less likely to be noticed, is the historic wart 138818edf67SWarner Losh if -Ft meaning to use hard tab characters as the field separator 139818edf67SWarner Losh is deprecated and will likely be removed in FreeBSD 14. 140818edf67SWarner Losh 141cda1f88dSWarner Loshee29e6f31111: 142be7c6470SRick Macklem Commit ee29e6f31111 added a new sysctl called vfs.nfsd.srvmaxio 143be7c6470SRick Macklem that can be used to increase the maximum I/O size for the NFS 144be7c6470SRick Macklem server to any power of 2 up to 1Mbyte while the nfsd(8) is not running. 145be7c6470SRick Macklem The FreeBSD NFS client can now be set to use a 1Mbyte I/O size 146be7c6470SRick Macklem via the vfs.maxbcachebuf tunable and the Linux NFS client 147be7c6470SRick Macklem can also do 1Mbyte I/O. 148be7c6470SRick Macklem kern.ipc.maxsockbuf will need to be increased. A console 149be7c6470SRick Macklem message will suggest a setting for it. 150be7c6470SRick Macklem 151cda1f88dSWarner Loshd575e81fbcfa: 152df4e9787SWarner Losh gconcat(8) has added support for appending devices to the device 153df4e9787SWarner Losh not present at creation time. 154dd3fd6b8SWarner Losh 155cda1f88dSWarner Losh76681661be28: 1561f64f32aSJohn Baldwin Remove support for asymmetric cryptographic operations from 15706cdfe2dSJohn Baldwin the kernel open cryptographic framework (OCF). 158b49ba74dSRick Macklem 159cda1f88dSWarner Losha145cf3f73c7: 160b49ba74dSRick Macklem The NFSv4 client now uses the highest minor version of NFSv4 161b49ba74dSRick Macklem supported by the NFSv4 server by default instead of minor version 0, 162b49ba74dSRick Macklem for NFSv4 mounts. 163b49ba74dSRick Macklem The "minorversion" mount option may be used to override this default. 164