1Release notes for FreeBSD 14.0. 2 3This file describes new user-visible features, changes and updates relevant to 4users of binary FreeBSD releases. Each entry should describe the change in no 5more than several sentences and should reference manual pages where an 6interested user can find more information. Entries should wrap after 80 7columns. Each entry should begin with one or more commit IDs on one line, 8specified as a comma separated list and/or range, followed by a colon and a 9newline. Entries should be separated by a newline. 10 11Changes to this file should not be MFCed. 12 1322893e584032: 14 L3 filtering on if_bridge will do surprising things which aren't 15 fail-safe, so net.link.bridge.pfil_member and 16 net.link.bridge.pfil_bridge now default to zero. 17 18f0bc4ed144fc: 19 A new DTrace provider, kinst, is introduced and documented in 20 dtrace_kinst(4). The provider allows kernel instructions to be traced, 21 similar to the FBT (function boundary tracing) provider except that all 22 instructions may be probed instead of logical entry and return 23 instructions. The provider is currently amd64-only. 24 250eea46fb1f83: 26 Removed telnetd. 27 28981ef32230b2,33721eb991d8: 29 These commits make the use of NFSv4.1/4.2 mounts with the "intr" 30 mount option fairly usable, although not 100% correct, so long as 31 the "nolockd" mount option is used as well. See the mount_nfs(8) 32 manual page for more information. 33 34b875d4f5ddcb,0685c73cfe88: 35 The NFSv4.1/4.2 client and server will now generate console messages 36 if sessions are broken, suggesting that users check to ensure 37 that the /etc/hostid strings are unique for all NFSv4.1/4.2 clients. 38 39240afd8c1fcc: 40 makefs(8) has ZFS support; it can create a ZFS pool, backed by a 41 single disk vdev, containing one or more datasets populated from 42 the staging directory. 43 4478ee8d1c4cda,f4f56ff43dbd: 45 The in-tree qat(4) driver has been replaced with Intel's QAT driver. 46 The new version provides additional interfaces to the chipset's 47 cryptographic and compression offload functionality. 48 49 This will have no visible change for most users; however, the new 50 driver does not support Atom C2000 chipsets. To preserve support for 51 those chipsets, the old driver has been renamed to qat_c2xxx and kept 52 in the tree. Users of qat(4) on C2000 hardware will thus need to 53 ensure that qat_c2xxx(4) is loaded instead of qat(4). 54 55da5b7e90e740,5a8fceb3bd9f,7b0a665d72c0,13ec1e3155c7,318d0db5fe8a,1ae2c59bcf21: 56 Boottrace is a new kernel-userspace interface for capturing trace 57 events during system boot and shutdown. Event annotations are 58 present in: 59 60 - The boot and shutdown paths in the kernel 61 - Some key system utilities (init(8), shutdown(8), reboot(8)) 62 - rc(8) scripts (via boottrace(8)) 63 64 In contrast to other existing boot-time tracing facilities like TSLOG, 65 Boottrace focuses on the ease of use and is aimed primarily at system 66 administrators. 67 68 It is available in the default GENERIC kernel and can be enabled by 69 toggling a single sysctl(8) variable. 70 71 See boottrace(4) for more details. 72 7305a1d0f5d7ac: 74 Kernel TLS offload now supports receive-side offload of TLS 1.3. 75 7619dc64451179: 77 if_stf now supports 6rd (RFC5969). 78 79c1d255d3ffdb, 3968b47cd974, bd452dcbede6: 80 Add WiFi 6 support to wpa. 81 82ba48d52ca6c8,4ac3d08a9693,2533eca1c2b9: 83 The default bell tone is now 800Hz. It may be set with kbdcontrol 84 again. There's devd integration for people wishing to use their sound 85 cards for the beep. 86 8792b3e07229ba: 88 net.inet.tcp.nolocaltimewait enabled by default. It prevents 89 creation of timewait entries for TCP connections that were 90 terminated locally. 91 92d410b585b6f0: 93 sh(1) is now the default shell for the root user. 94 95396851c20aeb: 96 libncursesw has been split into libtinfow and libncursesw, linker 97 scripts should make it transparent for consumers. pkg-config files 98 are also now installed to ease ports detecting the ncurses setup from 99 base. 100 101a422084abbda: 102 LLVM's MemorySanitizer can now be used in amd64 kernels. See the 103 kmsan(9) manual page for more information. 104 10538da497a4dfc: 106 LLVM's AddressSanitizer can now be used in amd64 kernels. See the 107 kasan(9) manual page for more information. 108 109f39dd6a97844,23f24377b1a9,628bd30ab5a4: 110 One True Awk has been updated to the latest from upstream 111 (20210727). All the FreeBSD patches, but one, have now been 112 either up streamed or discarded. Notable changes include: 113 o Locale is no longer used for ranges 114 o Various bugs fixed 115 o Better compatibility with gawk and mawk 116 117 The one FreeBSD change, likely to be removed in FreeBSD 14, is that 118 we still allow hex numbers, prefixed with 0x, to be parsed and 119 interpreted as hex numbers while all other awks (including one 120 true awk now) interpret them as 0 in line with awk's historic 121 behavior. 122 123 A second change, less likely to be noticed, is the historic wart 124 if -Ft meaning to use hard tab characters as the field separator 125 is deprecated and will likely be removed in FreeBSD 14. 126 127ee29e6f31111: 128 Commit ee29e6f31111 added a new sysctl called vfs.nfsd.srvmaxio 129 that can be used to increase the maximum I/O size for the NFS 130 server to any power of 2 up to 1Mbyte while the nfsd(8) is not running. 131 The FreeBSD NFS client can now be set to use a 1Mbyte I/O size 132 via the vfs.maxbcachebuf tunable and the Linux NFS client 133 can also do 1Mbyte I/O. 134 kern.ipc.maxsockbuf will need to be increased. A console 135 message will suggest a setting for it. 136 137d575e81fbcfa: 138 gconcat(8) has added support for appending devices to the device 139 not present at creation time. 140 14176681661be28: 142 Remove support for asymmetric cryptographic operations from 143 the kernel open cryptographic framework (OCF). 144 145a145cf3f73c7: 146 The NFSv4 client now uses the highest minor version of NFSv4 147 supported by the NFSv4 server by default instead of minor version 0, 148 for NFSv4 mounts. 149 The "minorversion" mount option may be used to override this default. 150