xref: /freebsd/RELNOTES (revision e32221a15f089282e5dfe18891c5312b26cbe3ba)
1Release notes for FreeBSD 14.0.
2
3This file describes new user-visible features, changes and updates relevant to
4users of binary FreeBSD releases.  Each entry should describe the change in no
5more than several sentences and should reference manual pages where an
6interested user can find more information.  Entries should wrap after 80
7columns.  Each entry should begin with one or more commit IDs on one line,
8specified as a comma separated list and/or range, followed by a colon and a
9newline.  Entries should be separated by a newline.
10
11Changes to this file should not be MFCed.
12
13bbb2d2ce4220:
14	Change pw (hence bsdinstall) not to move /home to /usr/home.
15	Previously, when creating the path to home directories, pw
16	would move any path in the root directory under /usr, creating
17	a symlink in root.  In particular, the default /home would become
18	/usr/home.  Now /home is at the top level by default.  /usr/home
19	can be used explicitly.
20
213416e102c4e9:
22	Remove TI code from armv7 GENERIC kernel.
23	This code doesn't cope with newer DTS and hasn't in a long time so
24	support for TI armv7 platform (like BeagleBone and Pandaboard) is now
25	removed from GENERIC.
26
27d198b8774d2c:
28	Add a new "fwget" utility.
29	The goal of this utility is to inspect the system for peripherals
30	that needs firmware and install the appropriate packages for them.
31	For now only pci subsystem is supported and only firmwares for Intel
32	and AMD GPUs are known.
33
34896516e54a8c:
35	Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts.
36	Without this patch, a Kerberized NFSv4.1/4.2 mount must provide
37	a Kerberos credential for the client at mount time.
38	This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which
39	allows the state maintenance operations to be performed by any
40	authentication mechanism, so that these operations may be done via
41	AUTH_SYS instead of RPCSEC_GSS (KerberosV).  As such, no Kerberos
42	credential is required at mount time.
43	See mount_nfs(8).
44
45330aa8acdec7,ff2f1f691cdb:
46	Adds support for the SP4_MACH_CRED case for the
47	NFSv4.1/4.2 ExchangeID operation since the Linux
48	NFSv4.1/4.2 client is now using this for Kerberized mounts.
49	This change should only affect Kerberized NFSv4.1/4.2 mounts.
50	The Linux Kerberized NFSv4.1/4.2 mounts currently work without
51	support for this because Linux will fall back to SP4_NONE,
52	but there is no guarantee this fallback will work forever.
53
547344856e3a6d and many others:
55	Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8)
56	and rpc.tlsservd(8) can be run in an appropriately configured
57	vnet prison.  The vnet prison must be on its own file system,
58	have the "allow.nfsd" jail parameter set on it and enforce_statfs
59	cannot be set to "0".  Use of UDP and pNFS server configurations
60	are not permitted.  (ie. The nfsd command line options "-u", "-p"
61	and "-m" are not supported.)
62	See jail(8), nfsd(8) and mountd(8).
63
642fb4f839f3fc,d89513ed2050,3413ee88c39d,f97a19ecb985,021562c5020d,431d2a81d421:
65	sendmail has been updated to the latest upstream version (8.17.1).
66
674a30d7bb373c,d670a8f7c596,af01b4722577,4e240e55d818:
68	The growfs(7) script can now add a swap partition at the end of
69	the expansion area, and does so by default if there is no existing
70	swap.  See growfs(7).
71
7286edb11e7491:
73	llvm-objump is now always installed as objdump.
74
75616f32ea6da7:
76	mta_start_script along with othermta rc.d script has been retired.
77
78a67b925ff3e5:
79	The default mail transport agent is now dma(8) replacing sendmail.
80
8122893e584032:
82	L3 filtering on if_bridge will do surprising things which aren't
83	fail-safe, so net.link.bridge.pfil_member and
84	net.link.bridge.pfil_bridge now default to zero.
85
86f0bc4ed144fc:
87	A new DTrace provider, kinst, is introduced and documented in
88	dtrace_kinst(4).  The provider allows kernel instructions to be traced,
89	similar to the FBT (function boundary tracing) provider except that all
90	instructions may be probed instead of logical entry and return
91	instructions.  The provider is currently amd64-only.
92
930eea46fb1f83:
94	Removed telnetd.
95
96981ef32230b2,33721eb991d8:
97	These commits make the use of NFSv4.1/4.2 mounts with the "intr"
98	mount option fairly usable, although not 100% correct, so long as
99	the "nolockd" mount option is used as well.  See the mount_nfs(8)
100	manual page for more information.
101
102b875d4f5ddcb,0685c73cfe88:
103	The NFSv4.1/4.2 client and server will now generate console messages
104	if sessions are broken, suggesting that users check to ensure
105	that the /etc/hostid strings are unique for all NFSv4.1/4.2 clients.
106
107240afd8c1fcc:
108	makefs(8) has ZFS support; it can create a ZFS pool, backed by a
109	single disk vdev, containing one or more datasets populated from
110	the staging directory.
111
11278ee8d1c4cda,f4f56ff43dbd:
113	The in-tree qat(4) driver has been replaced with Intel's QAT driver.
114	The new version provides additional interfaces to the chipset's
115	cryptographic and compression offload functionality.
116
117	This will have no visible change for most users; however, the new
118	driver does not support Atom C2000 chipsets.  To preserve support for
119	those chipsets, the old driver has been renamed to qat_c2xxx and kept
120	in the tree.  Users of qat(4) on C2000 hardware will thus need to
121	ensure that qat_c2xxx(4) is loaded instead of qat(4).
122
123da5b7e90e740,5a8fceb3bd9f,7b0a665d72c0,13ec1e3155c7,318d0db5fe8a,1ae2c59bcf21:
124	Boottrace is a new kernel-userspace interface for capturing trace
125	events during system boot and shutdown. Event annotations are
126	present in:
127
128	- The boot and shutdown paths in the kernel
129	- Some key system utilities (init(8), shutdown(8), reboot(8))
130	- rc(8) scripts (via boottrace(8))
131
132	In contrast to other existing boot-time tracing facilities like TSLOG,
133	Boottrace focuses on the ease of use and is aimed primarily at system
134	administrators.
135
136	It is available in the default GENERIC kernel and can be enabled by
137	toggling a single sysctl(8) variable.
138
139	See boottrace(4) for more details.
140
14105a1d0f5d7ac:
142	Kernel TLS offload now supports receive-side offload of TLS 1.3.
143
14419dc64451179:
145	if_stf now supports 6rd (RFC5969).
146
147c1d255d3ffdb, 3968b47cd974, bd452dcbede6:
148	Add WiFi 6 support to wpa.
149
150ba48d52ca6c8,4ac3d08a9693,2533eca1c2b9:
151	The default bell tone is now 800Hz. It may be set with kbdcontrol
152	again. There's devd integration for people wishing to use their sound
153	cards for the beep.
154
15592b3e07229ba:
156	net.inet.tcp.nolocaltimewait enabled by default.  It prevents
157	creation of timewait entries for TCP connections that were
158	terminated locally.
159
160d410b585b6f0:
161	sh(1) is now the default shell for the root user.
162
163396851c20aeb:
164	libncursesw has been split into libtinfow and libncursesw, linker
165	scripts should make it transparent for consumers. pkg-config files
166	are also now installed to ease ports detecting the ncurses setup from
167	base.
168
169a422084abbda:
170	LLVM's MemorySanitizer can now be used in amd64 kernels.  See the
171	kmsan(9) manual page for more information.
172
17338da497a4dfc:
174	LLVM's AddressSanitizer can now be used in amd64 kernels.  See the
175	kasan(9) manual page for more information.
176
177f39dd6a97844,23f24377b1a9,628bd30ab5a4:
178	One True Awk has been updated to the latest from upstream
179	(20210727). All the FreeBSD patches, but one, have now been
180	either up streamed or discarded.  Notable changes include:
181		o Locale is no longer used for ranges
182		o Various bugs fixed
183		o Better compatibility with gawk and mawk
184
185	The one FreeBSD change, likely to be removed in FreeBSD 14, is that
186	we still allow hex numbers, prefixed with 0x, to be parsed and
187	interpreted as hex numbers while all other awks (including one
188	true awk now) interpret them as 0 in line with awk's historic
189	behavior.
190
191	A second change, less likely to be noticed, is the historic wart
192	if -Ft meaning to use hard tab characters as the field separator
193	is deprecated and will likely be removed in FreeBSD 14.
194
195ee29e6f31111:
196	Commit ee29e6f31111 added a new sysctl called vfs.nfsd.srvmaxio
197	that can be used to increase the maximum I/O size for the NFS
198	server to any power of 2 up to 1Mbyte while the nfsd(8) is not running.
199	The FreeBSD NFS client can now be set to use a 1Mbyte I/O size
200	via the vfs.maxbcachebuf tunable and the Linux NFS client
201	can also do 1Mbyte I/O.
202	kern.ipc.maxsockbuf will need to be increased.  A console
203	message will suggest a setting for it.
204
205d575e81fbcfa:
206	gconcat(8) has added support for appending devices to the device
207	not present at creation time.
208
20976681661be28:
210	Remove support for asymmetric cryptographic operations from
211	the kernel open cryptographic framework (OCF).
212
213a145cf3f73c7:
214	The NFSv4 client now uses the highest minor version of NFSv4
215	supported by the NFSv4 server by default instead of minor version 0,
216	for NFSv4 mounts.
217	The "minorversion" mount option may be used to override this default.
218