xref: /freebsd/UPDATING (revision 957fc42533398c49d6a69bdee5389d9eee013d6e)
112f22a78SPeter WemmUpdating Information for FreeBSD current users.
253dfde79SWarner Losh
3456b5dd8SWarner LoshThis file is maintained and copyrighted by M. Warner Losh <imp@freebsd.org>.
4456b5dd8SWarner LoshSee end of file for further details.  For commonly done items, please see the
5456b5dd8SWarner LoshCOMMON ITEMS: section later in the file.  These instructions assume that you
6456b5dd8SWarner Loshbasically know what you are doing.  If not, then please consult the FreeBSD
7e0fb6dc3SRobert Watsonhandbook:
8e0fb6dc3SRobert Watson
9e0fb6dc3SRobert Watson    http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
10e72fd46aSWarner Losh
112c724730SWarner LoshItems affecting the ports and packages system can be found in
12456b5dd8SWarner Losh/usr/ports/UPDATING.  Please read that file before running portupgrade.
132c724730SWarner Losh
144f1def68SWarner LoshNOTE: FreeBSD has switched from gcc to clang. If you have trouble bootstrapping
15a46954e2SWarner Loshfrom older versions of FreeBSD, try WITHOUT_CLANG and WITH_GCC to bootstrap to
16a8f2a2b9SEd Mastethe tip of head, and then rebuild without this option. The bootstrap process
17a8f2a2b9SEd Mastefrom older version of current across the gcc/clang cutover is a bit fragile.
184f1def68SWarner Losh
19006a42a9SGlen BarberNOTE TO PEOPLE WHO THINK THAT FreeBSD 11.x IS SLOW:
20006a42a9SGlen Barber	FreeBSD 11.x has many debugging features turned on, in both the kernel
21456b5dd8SWarner Losh	and userland.  These features attempt to detect incorrect use of
22456b5dd8SWarner Losh	system primitives, and encourage loud failure through extra sanity
23456b5dd8SWarner Losh	checking and fail stop semantics.  They also substantially impact
24456b5dd8SWarner Losh	system performance.  If you want to do performance measurement,
25456b5dd8SWarner Losh	benchmarking, and optimization, you'll want to turn them off.  This
26456b5dd8SWarner Losh	includes various WITNESS- related kernel options, INVARIANTS, malloc
27456b5dd8SWarner Losh	debugging flags in userland, and various verbose features in the
28456b5dd8SWarner Losh	kernel.  Many developers choose to disable these features on build
2999e449f2SJason Evans	machines to maximize performance.  (To completely disable malloc
3099e449f2SJason Evans	debugging, define MALLOC_PRODUCTION in /etc/make.conf, or to merely
3199e449f2SJason Evans	disable the most expensive debugging functionality run
3299e449f2SJason Evans	"ln -s 'abort:false,junk:false' /etc/malloc.conf".)
33efc06131SSam Leffler
3494098ab7SAndrew Turner20160520:
3594098ab7SAndrew Turner	The brk and sbrk functions have been removed from libc on arm64.
3694098ab7SAndrew Turner	Binutils from ports has been updated to not link to these
3794098ab7SAndrew Turner	functions and should be updated to the latest version before
3894098ab7SAndrew Turner	installing a new libc.
3994098ab7SAndrew Turner
402c0e9e2aSWarner Losh20160517:
412c0e9e2aSWarner Losh	The armv6 port now defaults to hard float ABI. Limited support
422c0e9e2aSWarner Losh	for running both hardfloat and soft float on the same system
432c0e9e2aSWarner Losh	is available using the libraries installed with -DWITH_LIBSOFT.
442c0e9e2aSWarner Losh	This has only been tested as an upgrade path for installworld
452c0e9e2aSWarner Losh	and packages may fail or need manual intervention to run. New
462c0e9e2aSWarner Losh	packages will be needed.
472c0e9e2aSWarner Losh
48*957fc425SIan Lepore	To update an existing self-hosted armv6hf system, you must add
49*957fc425SIan Lepore	TARGET_ARCH=armv6 on the make command line for both the build
50*957fc425SIan Lepore	and the install steps.
51*957fc425SIan Lepore
525f0263c1SJohn Baldwin20160510:
535f0263c1SJohn Baldwin	Kernel modules compiled outside of a kernel build now default to
545f0263c1SJohn Baldwin	installing to /boot/modules instead of /boot/kernel.  Many kernel
555f0263c1SJohn Baldwin	modules built this way (such as those in ports) already overrode
565f0263c1SJohn Baldwin	KMODDIR explicitly to install into /boot/modules.  However,
575f0263c1SJohn Baldwin	manually building and installing a module from /sys/modules will
585f0263c1SJohn Baldwin	now install to /boot/modules instead of /boot/kernel.
595f0263c1SJohn Baldwin
6013694b35SWarner Losh20160414:
61a1743365SWarner Losh	The CAM I/O scheduler has been committed to the kernel. There should be
62a1743365SWarner Losh	no user visible impact. This does enable NCQ Trim on ada SSDs. While the
63a1743365SWarner Losh	list of known rogues that claim support for this but actually corrupt
64a1743365SWarner Losh	data is believed to be complete, be on the lookout for data
65a1743365SWarner Losh	corruption. The known rogue list is believed to be complete:
66a1743365SWarner Losh
67a1743365SWarner Losh		o Crucial MX100, M550 drives with MU01 firmware.
68a1743365SWarner Losh		o Micron M510 and M550 drives with MU01 firmware.
69a1743365SWarner Losh		o Micron M500 prior to MU07 firmware
70a1743365SWarner Losh		o Samsung 830, 840, and 850 all firmwares
71a1743365SWarner Losh		o FCCT M500 all firmwares
72a1743365SWarner Losh
73a1743365SWarner Losh	Crucial has firmware http://www.crucial.com/usa/en/support-ssd-firmware
74a1743365SWarner Losh	with working NCQ TRIM. For Micron branded drives, see your sales rep for
75a1743365SWarner Losh	updated firmware. Black listed drives will work correctly because these
76a1743365SWarner Losh	drives work correctly so long as no NCQ TRIMs are sent to them. Given
77a1743365SWarner Losh	this list is the same as found in Linux, it's believed there are no
78a1743365SWarner Losh	other rogues in the market place. All other models from the above
79a1743365SWarner Losh	vendors work.
80a1743365SWarner Losh
81a1743365SWarner Losh	To be safe, if you are at all concerned, you can quirk each of your
82a1743365SWarner Losh	drives to prevent NCQ from being sent by setting:
83a1743365SWarner Losh		kern.cam.ada.X.quirks="0x2"
84a1743365SWarner Losh	in loader.conf. If the drive requires the 4k sector quirk, set the
85a1743365SWarner Losh	quirks entry to 0x3.
8613694b35SWarner Losh
87497e8091SBryan Drewery20160330:
88497e8091SBryan Drewery	The FAST_DEPEND build option has been removed and its functionality is
89497e8091SBryan Drewery	now the one true way.  The old mkdep(1) style of 'make depend' has
90497e8091SBryan Drewery	been removed.  See 20160311 for further details.
91497e8091SBryan Drewery
92da1b038aSJustin Hibbits20160317:
93da1b038aSJustin Hibbits	Resource range types have grown from unsigned long to uintmax_t.  All
94da1b038aSJustin Hibbits	drivers, and anything using libdevinfo, need to be recompiled.
95da1b038aSJustin Hibbits
96d783b170SBryan Drewery20160311:
97d783b170SBryan Drewery	WITH_FAST_DEPEND is now enabled by default for in-tree and out-of-tree
98d783b170SBryan Drewery	builds.  It no longer runs mkdep(1) during 'make depend', and the
99d783b170SBryan Drewery	'make depend' stage can safely be skipped now as it is auto ran
100d783b170SBryan Drewery	when building 'make all' and will generate all SRCS and DPSRCS before
101d783b170SBryan Drewery	building anything else.  Dependencies are gathered at compile time with
102d783b170SBryan Drewery	-MF flags kept in separate .depend files per object file.  Users should
103d783b170SBryan Drewery	run 'make cleandepend' once if using -DNO_CLEAN to clean out older
104d783b170SBryan Drewery	stale .depend files.
105d783b170SBryan Drewery
106c834228bSDimitry Andric20160306:
107c834228bSDimitry Andric	On amd64, clang 3.8.0 can now insert sections of type AMD64_UNWIND into
108c834228bSDimitry Andric	kernel modules.  Therefore, if you load any kernel modules at boot time,
109c834228bSDimitry Andric	please install the boot loaders after you install the kernel, but before
110c834228bSDimitry Andric	rebooting, e.g.:
111c834228bSDimitry Andric
112c834228bSDimitry Andric	make buildworld
113c834228bSDimitry Andric	make kernel KERNCONF=YOUR_KERNEL_HERE
114c834228bSDimitry Andric	make -C sys/boot install
115c834228bSDimitry Andric	<reboot in single user>
116c834228bSDimitry Andric
117c834228bSDimitry Andric	Then follow the usual steps, described in the General Notes section,
118c834228bSDimitry Andric	below.
119c834228bSDimitry Andric
120e74e149fSDimitry Andric20160305:
121e74e149fSDimitry Andric	Clang, llvm, lldb and compiler-rt have been upgraded to 3.8.0.  Please
122e74e149fSDimitry Andric	see the 20141231 entry below for information about prerequisites and
123e74e149fSDimitry Andric	upgrading, if you are not already using clang 3.5.0 or higher.
124e74e149fSDimitry Andric
1258b66d3d3SJohn Baldwin20160301:
1268b66d3d3SJohn Baldwin	The AIO subsystem is now a standard part of the kernel.  The
1278b66d3d3SJohn Baldwin	VFS_AIO kernel option and aio.ko kernel module have been removed.
1288b66d3d3SJohn Baldwin	Due to stability concerns, asynchronous I/O requests are only
1298b66d3d3SJohn Baldwin	permitted on sockets and raw disks by default.  To enable
1308b66d3d3SJohn Baldwin	asynchronous I/O requests on all file types, set the
1318b66d3d3SJohn Baldwin	vfs.aio.enable_unsafe sysctl to a non-zero value.
1328b66d3d3SJohn Baldwin
133de463b29SEd Maste20160226:
134ca8b902aSEd Maste	The ELF object manipulation tool objcopy is now provided by the
135ca8b902aSEd Maste	ELF Tool Chain project rather than by GNU binutils. It should be a
136ca8b902aSEd Maste	drop-in replacement, with the addition of arm64 support. The
137ca8b902aSEd Maste	(temporary) src.conf knob WITHOUT_ELFCOPY_AS_OBJCOPY knob may be set
138ca8b902aSEd Maste	to obtain the GNU version if necessary.
139ca8b902aSEd Maste
140d4b9233aSAlan Somers20160129:
141d4b9233aSAlan Somers	Building ZFS pools on top of zvols is prohibited by default.  That
142d4b9233aSAlan Somers	feature has never worked safely; it's always been prone to deadlocks.
143d4b9233aSAlan Somers	Using a zvol as the backing store for a VM guest's virtual disk will
144d4b9233aSAlan Somers	still work, even if the guest is using ZFS.  Legacy behavior can be
145d4b9233aSAlan Somers	restored by setting vfs.zfs.vol.recursive=1.
146d4b9233aSAlan Somers
14760c59fadSDag-Erling Smørgrav20160119:
14860c59fadSDag-Erling Smørgrav	The NONE and HPN patches has been removed from OpenSSH.  They are
14960c59fadSDag-Erling Smørgrav	still available in the security/openssh-portable port.
15060c59fadSDag-Erling Smørgrav
1513bf7d9a6SMarcelo Araujo20160113:
1523bf7d9a6SMarcelo Araujo	With the addition of ypldap(8), a new _ypldap user is now required
1533bf7d9a6SMarcelo Araujo	during installworld. "mergemaster -p" can be used to add the user
1543bf7d9a6SMarcelo Araujo	prior to installworld, as documented in the handbook.
1553bf7d9a6SMarcelo Araujo
1564d6ab32fSBaptiste Daroussin20151216:
1574d6ab32fSBaptiste Daroussin	The tftp loader (pxeboot) now uses the option root-path directive. As a
1584d6ab32fSBaptiste Daroussin	consequence it no longer looks for a pxeboot.4th file on the tftp
1594d6ab32fSBaptiste Daroussin	server. Instead it uses the regular /boot infrastructure as with the
1604d6ab32fSBaptiste Daroussin	other loaders.
1614d6ab32fSBaptiste Daroussin
162ca7e5285SWarner Losh20151211:
163ca7e5285SWarner Losh	The code to start recording plug and play data into the modules has
164ca7e5285SWarner Losh	been committed. While the old tools will properly build a new kernel,
165ca7e5285SWarner Losh	a number of warnings about "unknown metadata record 4" will be produced
166ca7e5285SWarner Losh	for an older kldxref. To avoid such warnings, make sure to rebuild
167ca7e5285SWarner Losh	the kernel toolchain (or world). Make sure that you have r292078 or
168ca7e5285SWarner Losh	later when trying to build 292077 or later before rebuilding.
169ca7e5285SWarner Losh
170015dfda6SEd Maste20151207:
171015dfda6SEd Maste	Debug data files are now built by default with 'make buildworld' and
172015dfda6SEd Maste	installed with 'make installworld'. This facilitates debugging but
173015dfda6SEd Maste	requires more disk space both during the build and for the installed
174015dfda6SEd Maste	world. Debug files may be disabled by setting WITHOUT_DEBUG_FILES=yes
175015dfda6SEd Maste	in src.conf(5).
176015dfda6SEd Maste
17733ba1088SRick Macklem20151130:
17833ba1088SRick Macklem	r291527 changed the internal interface between the nfsd.ko and
17933ba1088SRick Macklem	nfscommon.ko modules. As such, they must both be upgraded to-gether.
18033ba1088SRick Macklem	__FreeBSD_version has been bumped because of this.
18133ba1088SRick Macklem
182af1d74f0SBaptiste Daroussin20151108:
183af1d74f0SBaptiste Daroussin	Add support for unicode collation strings leads to a change of
184af1d74f0SBaptiste Daroussin	order of files listed by ls(1) for example. To get back to the old
185af1d74f0SBaptiste Daroussin	behaviour, set LC_COLLATE environment variable to "C".
186af1d74f0SBaptiste Daroussin
1870492a14fSBaptiste Daroussin	Databases administrators will need to reindex their databases given
1880492a14fSBaptiste Daroussin	collation results will be different.
1890492a14fSBaptiste Daroussin
19010b5202eSBaptiste Daroussin	Due to a bug in install(1) it is recommended to remove the ancient
1911300d6f1SBaptiste Daroussin	locales before running make installworld.
19201bedb0cSBaptiste Daroussin
1931300d6f1SBaptiste Daroussin	rm -rf /usr/share/locale/*
19401bedb0cSBaptiste Daroussin
1957bded2dbSJung-uk Kim20151030:
1967bded2dbSJung-uk Kim	The OpenSSL has been upgraded to 1.0.2d.  Any binaries requiring
1977bded2dbSJung-uk Kim	libcrypto.so.7 or libssl.so.7 must be recompiled.
1987bded2dbSJung-uk Kim
199ebda5173SAlexander Motin20151020:
200ebda5173SAlexander Motin	Qlogic 24xx/25xx firmware images were updated from 5.5.0 to 7.3.0.
201ebda5173SAlexander Motin	Kernel modules isp_2400_multi and isp_2500_multi were removed and
202ebda5173SAlexander Motin	should be replaced with isp_2400 and isp_2500 modules respectively.
203ebda5173SAlexander Motin
20456585ab5SBryan Drewery20151017:
20556585ab5SBryan Drewery	The build previously allowed using 'make -n' to not recurse into
20656585ab5SBryan Drewery	sub-directories while showing what commands would be executed, and
20756585ab5SBryan Drewery	'make -n -n' to recursively show commands.  Now 'make -n' will recurse
20856585ab5SBryan Drewery	and 'make -N' will not.
20956585ab5SBryan Drewery
210ff446b05SPeter Wemm20151012:
211ff446b05SPeter Wemm	If you specify SENDMAIL_MC or SENDMAIL_CF in make.conf, mergemaster
212ff446b05SPeter Wemm	and etcupdate will now use this file. A custom sendmail.cf is now
213ff446b05SPeter Wemm	updated via this mechanism rather than via installworld.  If you had
214ff446b05SPeter Wemm	excluded sendmail.cf in mergemaster.rc or etcupdate.conf, you may
215ff446b05SPeter Wemm	want to remove the exclusion or change it to "always install".
216ff446b05SPeter Wemm	/etc/mail/sendmail.cf is now managed the same way regardless of
217ff446b05SPeter Wemm	whether SENDMAIL_MC/SENDMAIL_CF is used.  If you are not using
218ff446b05SPeter Wemm	SENDMAIL_MC/SENDMAIL_CF there should be no change in behavior.
219ff446b05SPeter Wemm
2204a3760baSAlexander Motin20151011:
2214a3760baSAlexander Motin	Compatibility shims for legacy ATA device names have been removed.
2224a3760baSAlexander Motin	It includes ATA_STATIC_ID kernel option, kern.cam.ada.legacy_aliases
2234a3760baSAlexander Motin	and kern.geom.raid.legacy_aliases loader tunables, kern.devalias.*
2244a3760baSAlexander Motin	environment variables, /dev/ad* and /dev/ar* symbolic links.
2254a3760baSAlexander Motin
226d31de548SDimitry Andric20151006:
2274f01407bSDimitry Andric	Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 3.7.0.
2284f01407bSDimitry Andric	Please see the 20141231 entry below for information about prerequisites
2294f01407bSDimitry Andric	and upgrading, if you are not already using clang 3.5.0 or higher.
230ebeff3f9SDimitry Andric
2315882166bSEd Maste20150924:
23205117b57SEd Maste	Kernel debug files have been moved to /usr/lib/debug/boot/kernel/,
23305117b57SEd Maste	and renamed from .symbols to .debug. This reduces the size requirements
23405117b57SEd Maste	on the boot partition or file system and provides consistency with
23505117b57SEd Maste	userland debug files.
23605117b57SEd Maste
23705117b57SEd Maste	When using the supported kernel installation method the
23805117b57SEd Maste	/usr/lib/debug/boot/kernel directory will be renamed (to kernel.old)
23905117b57SEd Maste	as is done with /boot/kernel.
24005117b57SEd Maste
24105117b57SEd Maste	Developers wishing to maintain the historical behavior of installing
24205117b57SEd Maste	debug files in /boot/kernel/ can set KERN_DEBUGDIR="" in src.conf(5).
24305117b57SEd Maste
24464b3b4d6SKristof Provost20150827:
2458ed69220SGleb Smirnoff	The wireless drivers had undergone changes that remove the 'parent
2468ed69220SGleb Smirnoff	interface' from the ifconfig -l output. The rc.d network scripts
2478ed69220SGleb Smirnoff	used to check presence of a parent interface in the list, so old
2488ed69220SGleb Smirnoff	scripts would fail to start wireless networking. Thus, etcupdate(3)
2498ed69220SGleb Smirnoff	or mergemaster(8) run is required after kernel update, to update your
2508ed69220SGleb Smirnoff	rc.d scripts in /etc.
2518ed69220SGleb Smirnoff
2528ed69220SGleb Smirnoff20150827:
25364b3b4d6SKristof Provost	pf no longer supports 'scrub fragment crop' or 'scrub fragment drop-ovl'
25464b3b4d6SKristof Provost	These configurations are now automatically interpreted as
25564b3b4d6SKristof Provost	'scrub fragment reassemble'.
25664b3b4d6SKristof Provost
257646041a8SMark Murray20150817:
258646041a8SMark Murray	Kernel-loadable modules for the random(4) device are back. To use
259646041a8SMark Murray	them, the kernel must have
260646041a8SMark Murray
261646041a8SMark Murray	device	random
262646041a8SMark Murray	options	RANDOM_LOADABLE
263646041a8SMark Murray
264646041a8SMark Murray	kldload(8) can then be used to load random_fortuna.ko
265646041a8SMark Murray	or random_yarrow.ko. Please note that due to the indirect
266646041a8SMark Murray	function calls that the loadable modules need to provide,
267646041a8SMark Murray	the build-in variants will be slightly more efficient.
268646041a8SMark Murray
269646041a8SMark Murray	The random(4) kernel option RANDOM_DUMMY has been retired due to
270646041a8SMark Murray	unpopularity. It was not all that useful anyway.
271646041a8SMark Murray
2721bc28ffcSEd Maste20150813:
2731bc28ffcSEd Maste	The WITHOUT_ELFTOOLCHAIN_TOOLS src.conf(5) knob has been retired.
2741bc28ffcSEd Maste	Control over building the ELF Tool Chain tools is now provided by
2751bc28ffcSEd Maste	the WITHOUT_TOOLCHAIN knob.
2761bc28ffcSEd Maste
277e7dbaf58SIan Lepore20150810:
278e7dbaf58SIan Lepore	The polarity of Pulse Per Second (PPS) capture events with the
279e7dbaf58SIan Lepore	uart(4) driver has been corrected.  Prior to this change the PPS
280e7dbaf58SIan Lepore	"assert" event corresponded to the trailing edge of a positive PPS
281e7dbaf58SIan Lepore	pulse and the "clear" event was the leading edge of the next pulse.
282e7dbaf58SIan Lepore
283e7dbaf58SIan Lepore	As the width of a PPS pulse in a typical GPS receiver is on the
284e7dbaf58SIan Lepore	order of 1 millisecond, most users will not notice any significant
285e7dbaf58SIan Lepore	difference with this change.
286e7dbaf58SIan Lepore
287e7dbaf58SIan Lepore	Anyone who has compensated for the historical polarity reversal by
288e7dbaf58SIan Lepore	configuring a negative offset equal to the pulse width will need to
289e7dbaf58SIan Lepore	remove that workaround.
290e7dbaf58SIan Lepore
29134c7eb57SKoop Mast20150809:
29234c7eb57SKoop Mast	The default group assigned to /dev/dri entries has been changed
29334c7eb57SKoop Mast	from 'wheel' to 'video' with the id of '44'. If you want to have
29434c7eb57SKoop Mast	access to the dri devices please add yourself to the video group
29534c7eb57SKoop Mast	with:
29634c7eb57SKoop Mast
29734c7eb57SKoop Mast	# pw groupmod video -m $USER
29834c7eb57SKoop Mast
2999322ac3fSAllan Jude20150806:
3009322ac3fSAllan Jude	The menu.rc and loader.rc files will now be replaced during
3019322ac3fSAllan Jude	upgrades. Please migrate local changes to menu.rc.local and
3029322ac3fSAllan Jude	loader.rc.local instead.
3039322ac3fSAllan Jude
304f97aa232SEd Maste20150805:
305f97aa232SEd Maste	GNU Binutils versions of addr2line, c++filt, nm, readelf, size,
306f97aa232SEd Maste	strings and strip have been removed. The src.conf(5) knob
307f97aa232SEd Maste	WITHOUT_ELFTOOLCHAIN_TOOLS no longer provides the binutils tools.
308f97aa232SEd Maste
3091635369eSSteven Hartland20150728:
31068d5f492SSteven Hartland	As ZFS requires more kernel stack pages than is the default on some
3111635369eSSteven Hartland	architectures e.g. i386, it now warns if KSTACK_PAGES is less than
3121635369eSSteven Hartland	ZFS_MIN_KSTACK_PAGES (which is 4 at the time of writing).
3131635369eSSteven Hartland
3141635369eSSteven Hartland	Please consider using 'options KSTACK_PAGES=X' where X is greater
3151635369eSSteven Hartland	than or equal to ZFS_MIN_KSTACK_PAGES i.e. 4 in such configurations.
3161635369eSSteven Hartland
317ab1f4a42SGregory Neil Shapiro20150706:
318ab1f4a42SGregory Neil Shapiro	sendmail has been updated to 8.15.2.  Starting with FreeBSD 11.0
319ab1f4a42SGregory Neil Shapiro	and sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
320ab1f4a42SGregory Neil Shapiro	default, i.e., they will not contain "::".  For example, instead
321ab1f4a42SGregory Neil Shapiro	of ::1, it will be 0:0:0:0:0:0:0:1.  This permits a zero subnet
322ab1f4a42SGregory Neil Shapiro	to have a more specific match, such as different map entries for
323ab1f4a42SGregory Neil Shapiro	IPv6:0:0 vs IPv6:0.  This change requires that configuration
324ab1f4a42SGregory Neil Shapiro	data (including maps, files, classes, custom ruleset, etc.) must
325ab1f4a42SGregory Neil Shapiro	use the same format, so make certain such configuration data is
326ab1f4a42SGregory Neil Shapiro	upgrading.  As a very simple check search for patterns like
327ab1f4a42SGregory Neil Shapiro	'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.  To return to the old
328ab1f4a42SGregory Neil Shapiro	behavior, set the m4 option confUSE_COMPRESSED_IPV6_ADDRESSES or
329ab1f4a42SGregory Neil Shapiro	the cf option UseCompressedIPv6Addresses.
330ab1f4a42SGregory Neil Shapiro
331d1b06863SMark Murray20150630:
332d1b06863SMark Murray	The default kernel entropy-processing algorithm is now
333d1b06863SMark Murray	Fortuna, replacing Yarrow.
3346f78e390SSimon J. Gerraty
335d1b06863SMark Murray	Assuming you have 'device random' in your kernel config
336d1b06863SMark Murray	file, the configurations allow a kernel option to override
337d1b06863SMark Murray	this default. You may choose *ONE* of:
3386f78e390SSimon J. Gerraty
339d1b06863SMark Murray	options	RANDOM_YARROW	# Legacy /dev/random algorithm.
340d1b06863SMark Murray	options	RANDOM_DUMMY	# Blocking-only driver.
3416f78e390SSimon J. Gerraty
342d1b06863SMark Murray	If you have neither, you get Fortuna.  For most people,
343d1b06863SMark Murray	read no further, Fortuna will give a /dev/random that works
344d1b06863SMark Murray	like it always used to, and the difference will be irrelevant.
3456f78e390SSimon J. Gerraty
346d1b06863SMark Murray	If you remove 'device random', you get *NO* kernel-processed
34702dcb6e0SEitan Adler	entropy at all. This may be acceptable to folks building
348d1b06863SMark Murray	embedded systems, but has complications. Carry on reading,
349d1b06863SMark Murray	and it is assumed you know what you need.
350d1b06863SMark Murray
351d1b06863SMark Murray	*PLEASE* read random(4) and random(9) if you are in the
35202dcb6e0SEitan Adler	habit of tweaking kernel configs, and/or if you are a member
353d1b06863SMark Murray	of the embedded community, wanting specific and not-usual
354d1b06863SMark Murray	behaviour from your security subsystems.
355d1b06863SMark Murray
356d1b06863SMark Murray	NOTE!! If you use RANDOM_DUMMY and/or have no 'device
357d1b06863SMark Murray	random', you will NOT have a functioning /dev/random, and
358d1b06863SMark Murray	many cryptographic features will not work, including SSH.
359d1b06863SMark Murray	You may also find strange behaviour from the random(3) set
360d1b06863SMark Murray	of library functions, in particular sranddev(3), srandomdev(3)
361d1b06863SMark Murray	and arc4random(3). The reason for this is that the KERN_ARND
362d1b06863SMark Murray	sysctl only returns entropy if it thinks it has some to
363d1b06863SMark Murray	share, and with RANDOM_DUMMY or no 'device random' this
364d1b06863SMark Murray	will never happen.
365d1b06863SMark Murray
366e44053b7SGregory Neil Shapiro20150623:
367e44053b7SGregory Neil Shapiro	An additional fix for the issue described in the 20150614 sendmail
368e44053b7SGregory Neil Shapiro	entry below has been been committed in revision 284717.
3696f78e390SSimon J. Gerraty
3706f78e390SSimon J. Gerraty20150616:
37132c88b52SWarner Losh	FreeBSD's old make (fmake) has been removed from the system. It is
37232c88b52SWarner Losh	available as the devel/fmake port or via pkg install fmake.
37332c88b52SWarner Losh
3749c5682edSGregory Neil Shapiro20150615:
3759c5682edSGregory Neil Shapiro	The fix for the issue described in the 20150614 sendmail entry
3769c5682edSGregory Neil Shapiro	below has been been committed in revision 284436.  The work
3779c5682edSGregory Neil Shapiro	around described in that entry is no longer needed unless the
3789c5682edSGregory Neil Shapiro	default setting is overridden by a confDH_PARAMETERS configuration
3799c5682edSGregory Neil Shapiro	setting of '5' or pointing to a 512 bit DH parameter file.
3809c5682edSGregory Neil Shapiro
38122596424SGregory Neil Shapiro20150614:
38261099d9aSEnji Cooper	ALLOW_DEPRECATED_ATF_TOOLS/ATFFILE support has been removed from
38361099d9aSEnji Cooper	atf.test.mk (included from bsd.test.mk). Please upgrade devel/atf
38461099d9aSEnji Cooper	and devel/kyua to version 0.20+ and adjust any calling code to work
38561099d9aSEnji Cooper	with Kyuafile and kyua.
38661099d9aSEnji Cooper
38761099d9aSEnji Cooper20150614:
38822596424SGregory Neil Shapiro	The import of openssl to address the FreeBSD-SA-15:10.openssl
38922596424SGregory Neil Shapiro	security advisory includes a change which rejects handshakes
39022596424SGregory Neil Shapiro	with DH parameters below 768 bits.  sendmail releases prior
39122596424SGregory Neil Shapiro	to 8.15.2 (not yet released), defaulted to a 512 bit
39222596424SGregory Neil Shapiro	DH parameter setting for client connections.  To work around
39322596424SGregory Neil Shapiro	this interoperability, sendmail can be configured to use a
39422596424SGregory Neil Shapiro	2048 bit DH parameter by:
39522596424SGregory Neil Shapiro
39622596424SGregory Neil Shapiro	1. Edit /etc/mail/`hostname`.mc
39722596424SGregory Neil Shapiro	2. If a setting for confDH_PARAMETERS does not exist or
39822596424SGregory Neil Shapiro	   exists and is set to a string beginning with '5',
39922596424SGregory Neil Shapiro	   replace it with '2'.
40022596424SGregory Neil Shapiro	3. If a setting for confDH_PARAMETERS exists and is set to
40122596424SGregory Neil Shapiro	   a file path, create a new file with:
40222596424SGregory Neil Shapiro		openssl dhparam -out /path/to/file 2048
40322596424SGregory Neil Shapiro	4. Rebuild the .cf file:
40422596424SGregory Neil Shapiro		cd /etc/mail/; make; make install
40522596424SGregory Neil Shapiro	5. Restart sendmail:
40622596424SGregory Neil Shapiro		cd /etc/mail/; make restart
40722596424SGregory Neil Shapiro
40822596424SGregory Neil Shapiro	A sendmail patch is coming, at which time this file will be
40922596424SGregory Neil Shapiro	updated.
41022596424SGregory Neil Shapiro
411b8d08379SXin LI20150604:
412b8d08379SXin LI	Generation of legacy formatted entries have been disabled by default
413b8d08379SXin LI	in pwd_mkdb(8), as all base system consumers of the legacy formatted
414b8d08379SXin LI	entries were converted to use the new format by default when the new,
415b8d08379SXin LI	machine independent format have been added and supported since FreeBSD
416b8d08379SXin LI	5.x.
417b8d08379SXin LI
418b8d08379SXin LI	Please see the pwd_mkdb(8) manual page for further details.
419b8d08379SXin LI
420ef6fa9e2SDimitry Andric20150525:
421ef6fa9e2SDimitry Andric	Clang and llvm have been upgraded to 3.6.1 release.  Please see the
422ef6fa9e2SDimitry Andric	20141231 entry below for information about prerequisites and upgrading,
423ef6fa9e2SDimitry Andric	if you are not already using 3.5.0 or higher.
424ef6fa9e2SDimitry Andric
4255b03aba6SOleksandr Tymoshenko20150521:
4265b03aba6SOleksandr Tymoshenko	TI platform code switched to using vendor DTS files and this update
4275b03aba6SOleksandr Tymoshenko	may break existing systems running on Beaglebone, Beaglebone Black,
4285b03aba6SOleksandr Tymoshenko	and Pandaboard:
4295b03aba6SOleksandr Tymoshenko
4305b03aba6SOleksandr Tymoshenko	- dtb files should be regenerated/reinstalled. Filenames are the
4315b03aba6SOleksandr Tymoshenko	  same but content is different now
4325b03aba6SOleksandr Tymoshenko	- GPIO addressing was changed, now each GPIO bank (32 pins per bank)
4335b03aba6SOleksandr Tymoshenko	  has its own /dev/gpiocX device, e.g. pin 121 on /dev/gpioc0 in old
4345b03aba6SOleksandr Tymoshenko	  addressing scheme is now pin 25 on /dev/gpioc3.
4355b03aba6SOleksandr Tymoshenko	- Pandaboard: /etc/ttys should be updated, serial console device is
4365b03aba6SOleksandr Tymoshenko	  now /dev/ttyu2, not /dev/ttyu0
4375b03aba6SOleksandr Tymoshenko
43821fcca66SBaptiste Daroussin20150501:
43921fcca66SBaptiste Daroussin	soelim(1) from gnu/usr.bin/groff has been replaced by usr.bin/soelim.
44021fcca66SBaptiste Daroussin	If you need the GNU extension from groff soelim(1), install groff
44121fcca66SBaptiste Daroussin	from package: pkg install groff, or via ports: textproc/groff.
44221fcca66SBaptiste Daroussin
443eee7269fSSteven Hartland20150423:
444ad34caceSSteven Hartland	chmod, chflags, chown and chgrp now affect symlinks in -R mode as
445ad34caceSSteven Hartland	defined in symlink(7); previously symlinks were silently ignored.
446ad34caceSSteven Hartland
4471243a98eSTijl Coosemans20150415:
4481243a98eSTijl Coosemans	The const qualifier has been removed from iconv(3) to comply with
4491243a98eSTijl Coosemans	POSIX.  The ports tree is aware of this from r384038 onwards.
4501243a98eSTijl Coosemans
451757a876fSBrooks Davis20150416:
452757a876fSBrooks Davis	Libraries specified by LIBADD in Makefiles must have a corresponding
453757a876fSBrooks Davis	DPADD_<lib> variable to ensure correct dependencies.  This is now
454757a876fSBrooks Davis	enforced in src.libnames.mk.
455757a876fSBrooks Davis
456cdc58367SAlexander Motin20150324:
457cdc58367SAlexander Motin	From legacy ata(4) driver was removed support for SATA controllers
458cdc58367SAlexander Motin	supported by more functional drivers ahci(4), siis(4) and mvs(4).
459cdc58367SAlexander Motin	Kernel modules ataahci and ataadaptec were removed completely,
460cdc58367SAlexander Motin	replaced by ahci and mvs modules respectively.
461cdc58367SAlexander Motin
462302cd48aSDimitry Andric20150315:
46370aad3bfSDimitry Andric	Clang, llvm and lldb have been upgraded to 3.6.0 release.  Please see
46470aad3bfSDimitry Andric	the 20141231 entry below for information about prerequisites and
46570aad3bfSDimitry Andric	upgrading, if you are not already using 3.5.0 or higher.
4666ce3ca64SDimitry Andric
4675c845fdeSNathan Whitehorn20150307:
4685c845fdeSNathan Whitehorn	The 32-bit PowerPC kernel has been changed to a position-independent
4695c845fdeSNathan Whitehorn	executable. This can only be booted with a version of loader(8)
4705c845fdeSNathan Whitehorn	newer than January 31, 2015, so make sure to update both world and
4715c845fdeSNathan Whitehorn	kernel before rebooting.
4725c845fdeSNathan Whitehorn
473997707f4SJohn-Mark Gurney20150217:
474997707f4SJohn-Mark Gurney	If you are running a -CURRENT kernel since r273872 (Oct 30th, 2014),
47519442b85SXin LI	but before r278950, the RNG was not seeded properly.  Immediately
47619442b85SXin LI	upgrade the kernel to r278950 or later and regenerate any keys (e.g.
477997707f4SJohn-Mark Gurney	ssh keys or openssl keys) that were generated w/ a kernel from that
4784c25bba7SGavin Atkinson	range.  This does not affect programs that directly used /dev/random
4793a25555cSGlen Barber	or /dev/urandom.  All userland uses of arc4random(3) are affected.
480997707f4SJohn-Mark Gurney
48109cfaa45SEdward Tomasz Napierala20150210:
48209cfaa45SEdward Tomasz Napierala	The autofs(4) ABI was changed in order to restore binary compatibility
48309cfaa45SEdward Tomasz Napierala	with 10.1-RELEASE.  The automountd(8) daemon needs to be rebuilt to work
48409cfaa45SEdward Tomasz Napierala	with the new kernel.
48509cfaa45SEdward Tomasz Napierala
4860fa22505SNathan Whitehorn20150131:
4870fa22505SNathan Whitehorn	The powerpc64 kernel has been changed to a position-independent
4880fa22505SNathan Whitehorn	executable. This can only be booted with a new version of loader(8),
4890fa22505SNathan Whitehorn	so make sure to update both world and kernel before rebooting.
4900fa22505SNathan Whitehorn
4919cac79b3SDimitry Andric20150118:
4929cac79b3SDimitry Andric	Clang and llvm have been upgraded to 3.5.1 release.  This is a bugfix
4939cac79b3SDimitry Andric	only release, no new features have been added.  Please see the 20141231
4949cac79b3SDimitry Andric	entry below for information about prerequisites and upgrading, if you
4959cac79b3SDimitry Andric	are not already using 3.5.0.
4969cac79b3SDimitry Andric
497968d62e1SEd Maste20150107:
498968d62e1SEd Maste	ELF tools addr2line, elfcopy (strip), nm, size, and strings are now
499968d62e1SEd Maste	taken from the ELF Tool Chain project rather than GNU binutils. They
500968d62e1SEd Maste	should be drop-in replacements, with the addition of arm64 support.
501968d62e1SEd Maste	The WITHOUT_ELFTOOLCHAIN_TOOLS= knob may be used to obtain the
502f97aa232SEd Maste	binutils tools, if necessary. See 20150805 for updated information.
503968d62e1SEd Maste
504f1b3840cSDag-Erling Smørgrav20150105:
505f1b3840cSDag-Erling Smørgrav	The default Unbound configuration now enables remote control
506f1b3840cSDag-Erling Smørgrav	using a local socket.  Users who have already enabled the
507f1b3840cSDag-Erling Smørgrav	local_unbound service should regenerate their configuration
508f1b3840cSDag-Erling Smørgrav	by running "service local_unbound setup" as root.
509f1b3840cSDag-Erling Smørgrav
5102d281361SBaptiste Daroussin20150102:
5112d281361SBaptiste Daroussin	The GNU texinfo and GNU info pages have been removed.
5122d281361SBaptiste Daroussin	To be able to view GNU info pages please install texinfo from ports.
5132d281361SBaptiste Daroussin
514143c11b4SDimitry Andric20141231:
515143c11b4SDimitry Andric	Clang, llvm and lldb have been upgraded to 3.5.0 release.
516143c11b4SDimitry Andric
5170ac2c3d1SDimitry Andric	As of this release, a prerequisite for building clang, llvm and lldb is
5180ac2c3d1SDimitry Andric	a C++11 capable compiler and C++11 standard library.  This means that to
519143c11b4SDimitry Andric	be able to successfully build the cross-tools stage of buildworld, with
520143c11b4SDimitry Andric	clang as the bootstrap compiler, your system compiler or cross compiler
521143c11b4SDimitry Andric	should either be clang 3.3 or later, or gcc 4.8 or later, and your
522143c11b4SDimitry Andric	system C++ library should be libc++, or libdstdc++ from gcc 4.8 or
523143c11b4SDimitry Andric	later.
524143c11b4SDimitry Andric
5250ac2c3d1SDimitry Andric	On any standard FreeBSD 10.x or 11.x installation, where clang and
5260ac2c3d1SDimitry Andric	libc++ are on by default (that is, on x86 or arm), this should work out
5270ac2c3d1SDimitry Andric	of the box.
528143c11b4SDimitry Andric
529143c11b4SDimitry Andric	On 9.x installations where clang is enabled by default, e.g. on x86 and
530143c11b4SDimitry Andric	powerpc, libc++ will not be enabled by default, so libc++ should be
531143c11b4SDimitry Andric	built (with clang) and installed first.  If both clang and libc++ are
532143c11b4SDimitry Andric	missing, build clang first, then use it to build libc++.
533143c11b4SDimitry Andric
534143c11b4SDimitry Andric	On 8.x and earlier installations, upgrade to 9.x first, and then follow
535143c11b4SDimitry Andric	the instructions for 9.x above.
536143c11b4SDimitry Andric
5370ac2c3d1SDimitry Andric	Sparc64 and mips users are unaffected, as they still use gcc 4.2.1 by
5380ac2c3d1SDimitry Andric	default, and do not build clang.
5390ac2c3d1SDimitry Andric
5400ac2c3d1SDimitry Andric	Many embedded systems are resource constrained, and will not be able to
5410ac2c3d1SDimitry Andric	build clang in a reasonable time, or in some cases at all.  In those
5420ac2c3d1SDimitry Andric	cases, cross building bootable systems on amd64 is a workaround.
5430ac2c3d1SDimitry Andric
544143c11b4SDimitry Andric	This new version of clang introduces a number of new warnings, of which
545143c11b4SDimitry Andric	the following are most likely to appear:
546143c11b4SDimitry Andric
547143c11b4SDimitry Andric	-Wabsolute-value
548143c11b4SDimitry Andric
549143c11b4SDimitry Andric	This warns in two cases, for both C and C++:
550143c11b4SDimitry Andric	* When the code is trying to take the absolute value of an unsigned
551143c11b4SDimitry Andric	  quantity, which is effectively a no-op, and almost never what was
552143c11b4SDimitry Andric	  intended.  The code should be fixed, if at all possible.  If you are
553143c11b4SDimitry Andric	  sure that the unsigned quantity can be safely cast to signed, without
554143c11b4SDimitry Andric	  loss of information or undefined behavior, you can add an explicit
555143c11b4SDimitry Andric	  cast, or disable the warning.
556143c11b4SDimitry Andric
557143c11b4SDimitry Andric	* When the code is trying to take an absolute value, but the called
558143c11b4SDimitry Andric	  abs() variant is for the wrong type, which can lead to truncation.
559143c11b4SDimitry Andric	  If you want to disable the warning instead of fixing the code, please
560143c11b4SDimitry Andric	  make sure that truncation will not occur, or it might lead to unwanted
561143c11b4SDimitry Andric	  side-effects.
562143c11b4SDimitry Andric
563143c11b4SDimitry Andric	-Wtautological-undefined-compare and
564143c11b4SDimitry Andric	-Wundefined-bool-conversion
565143c11b4SDimitry Andric
566143c11b4SDimitry Andric	These warn when C++ code is trying to compare 'this' against NULL, while
567143c11b4SDimitry Andric	'this' should never be NULL in well-defined C++ code.  However, there is
568143c11b4SDimitry Andric	some legacy (pre C++11) code out there, which actively abuses this
569143c11b4SDimitry Andric	feature, which was less strictly defined in previous C++ versions.
570143c11b4SDimitry Andric
571143c11b4SDimitry Andric	Squid and openjdk do this, for example.  The warning can be turned off
572143c11b4SDimitry Andric	for C++98 and earlier, but compiling the code in C++11 mode might result
573143c11b4SDimitry Andric	in unexpected behavior; for example, the parts of the program that are
574143c11b4SDimitry Andric	unreachable could be optimized away.
575143c11b4SDimitry Andric
5760b327b63SRick Macklem20141222:
5770b327b63SRick Macklem	The old NFS client and server (kernel options NFSCLIENT, NFSSERVER)
5780b327b63SRick Macklem	kernel sources have been removed. The .h files remain, since some
5790b327b63SRick Macklem	utilities include them. This will need to be fixed later.
5800b327b63SRick Macklem	If "mount -t oldnfs ..." is attempted, it will fail.
5810b327b63SRick Macklem	If the "-o" option on mountd(8), nfsd(8) or nfsstat(1) is used,
5820b327b63SRick Macklem	the utilities will report errors.
5830b327b63SRick Macklem
5845f25ee9cSBrooks Davis20141121:
5855f25ee9cSBrooks Davis	The handling of LOCAL_LIB_DIRS has been altered to skip addition of
5865f25ee9cSBrooks Davis	directories to top level SUBDIR variable when their parent
5875f25ee9cSBrooks Davis	directory is included in LOCAL_DIRS.  Users with build systems with
5885f25ee9cSBrooks Davis	such hierarchies and without SUBDIR entries in the parent
5895f25ee9cSBrooks Davis	directory Makefiles should add them or add the directories to
5905f25ee9cSBrooks Davis	LOCAL_DIRS.
5915f25ee9cSBrooks Davis
592603eaf79SAlexander V. Chernikov20141109:
59374342541SChristian Brueffer	faith(4) and faithd(8) have been removed from the base system. Faith
594603eaf79SAlexander V. Chernikov	has been obsolete for a very long time.
595603eaf79SAlexander V. Chernikov
5962d6f6d63SJean-Sébastien Pédron20141104:
5972d6f6d63SJean-Sébastien Pédron	vt(4), the new console driver, is enabled by default. It brings
5982d6f6d63SJean-Sébastien Pédron	support for Unicode and double-width characters, as well as
5992d6f6d63SJean-Sébastien Pédron	support for UEFI and integration with the KMS kernel video
6002d6f6d63SJean-Sébastien Pédron	drivers.
6012d6f6d63SJean-Sébastien Pédron
6022d6f6d63SJean-Sébastien Pédron	You may need to update your console settings in /etc/rc.conf,
6032d6f6d63SJean-Sébastien Pédron	most probably the keymap. During boot, /etc/rc.d/syscons will
6042d6f6d63SJean-Sébastien Pédron	indicate what you need to do.
6052d6f6d63SJean-Sébastien Pédron
6062d6f6d63SJean-Sébastien Pédron	vt(4) still has issues and lacks some features compared to
6072d6f6d63SJean-Sébastien Pédron	syscons(4). See the wiki for up-to-date information:
6082d6f6d63SJean-Sébastien Pédron	  https://wiki.freebsd.org/Newcons
6092d6f6d63SJean-Sébastien Pédron
6102d6f6d63SJean-Sébastien Pédron	If you want to keep using syscons(4), you can do so by adding
6112d6f6d63SJean-Sébastien Pédron	the following line to /boot/loader.conf:
6122d6f6d63SJean-Sébastien Pédron	  kern.vty=sc
6132d6f6d63SJean-Sébastien Pédron
614fa809347SEnji Cooper20141102:
615fa809347SEnji Cooper	pjdfstest has been integrated into kyua as an opt-in test suite.
61674342541SChristian Brueffer	Please see share/doc/pjdfstest/README for more details on how to
617fa809347SEnji Cooper	execute it.
618fa809347SEnji Cooper
619ddd96d23SEd Maste20141009:
620ddd96d23SEd Maste	gperf has been removed from the base system for architectures
621ddd96d23SEd Maste	that use clang. Ports that require gperf will obtain it from the
622ddd96d23SEd Maste	devel/gperf port.
623ddd96d23SEd Maste
62440a8ac8fSEnji Cooper20140923:
62540a8ac8fSEnji Cooper	pjdfstest has been moved from tools/regression/pjdfstest to
62640a8ac8fSEnji Cooper	contrib/pjdfstest .
62740a8ac8fSEnji Cooper
628243d6a50SSean Bruno20140922:
629243d6a50SSean Bruno	At svn r271982, The default linux compat kernel ABI has been adjusted
630243d6a50SSean Bruno	to 2.6.18 in support of the linux-c6 compat ports infrastructure
631243d6a50SSean Bruno	update.  If you wish to continue using the linux-f10 compat ports,
632243d6a50SSean Bruno	add compat.linux.osrelease=2.6.16 to your local sysctl.conf.  Users are
633243d6a50SSean Bruno	encouraged to update their linux-compat packages to linux-c6 during
634243d6a50SSean Bruno	their next update cycle.
635243d6a50SSean Bruno
636232490c6SNathan Whitehorn20140729:
637232490c6SNathan Whitehorn	The ofwfb driver, used to provide a graphics console on PowerPC when
63874342541SChristian Brueffer	using vt(4), no longer allows mmap() of all physical memory. This
639232490c6SNathan Whitehorn	will prevent Xorg on PowerPC with some ATI graphics cards from
640232490c6SNathan Whitehorn	initializing properly unless x11-servers/xorg-server is updated to
641232490c6SNathan Whitehorn	1.12.4_8 or newer.
642232490c6SNathan Whitehorn
6430aafd404SWarner Losh20140723:
6440aafd404SWarner Losh	The xdev targets have been converted to using TARGET and
6450aafd404SWarner Losh	TARGET_ARCH instead of XDEV and XDEV_ARCH.
6460aafd404SWarner Losh
6470d0485e2SDag-Erling Smørgrav20140719:
6480d0485e2SDag-Erling Smørgrav	The default unbound configuration has been modified to address
6490d0485e2SDag-Erling Smørgrav	issues with reverse lookups on networks that use private
6500d0485e2SDag-Erling Smørgrav	address ranges.  If you use the local_unbound service, run
6510d0485e2SDag-Erling Smørgrav	"service local_unbound setup" as root to regenerate your
6520d0485e2SDag-Erling Smørgrav	configuration, then "service local_unbound reload" to load the
6530d0485e2SDag-Erling Smørgrav	new configuration.
6540d0485e2SDag-Erling Smørgrav
655f4717209SBaptiste Daroussin20140709:
656f4717209SBaptiste Daroussin	The GNU texinfo and GNU info pages are not built and installed
657f4717209SBaptiste Daroussin	anymore, WITH_INFO knob has been added to allow to built and install
658f4717209SBaptiste Daroussin	them again.
6592d281361SBaptiste Daroussin	UPDATE: see 20150102 entry on texinfo's removal
660f4717209SBaptiste Daroussin
6618a833bdaSBaptiste Daroussin20140708:
6628a833bdaSBaptiste Daroussin	The GNU readline library is now an INTERNALLIB - that is, it is
6638a833bdaSBaptiste Daroussin	statically linked into consumers (GDB and variants) in the base
6648a833bdaSBaptiste Daroussin	system, and the shared library is no longer installed.  The
6658a833bdaSBaptiste Daroussin	devel/readline port is available for third party software that
6668a833bdaSBaptiste Daroussin	requires readline.
6678a833bdaSBaptiste Daroussin
66850f73640SMarcel Moolenaar20140702:
66950f73640SMarcel Moolenaar	The Itanium architecture (ia64) has been removed from the list of
67050f73640SMarcel Moolenaar	known architectures. This is the first step in the removal of the
67150f73640SMarcel Moolenaar	architecture.
67250f73640SMarcel Moolenaar
67318aa7fccSRick Macklem20140701:
67418aa7fccSRick Macklem	Commit r268115 has added NFSv4.1 server support, merged from
67518aa7fccSRick Macklem	projects/nfsv4.1-server.  Since this includes changes to the
67618aa7fccSRick Macklem	internal interfaces between the NFS related modules, a full
67718aa7fccSRick Macklem	build of the kernel and modules will be necessary.
67818aa7fccSRick Macklem	__FreeBSD_version has been bumped.
67918aa7fccSRick Macklem
680824a9093SEd Maste20140629:
681824a9093SEd Maste	The WITHOUT_VT_SUPPORT kernel config knob has been renamed
682824a9093SEd Maste	WITHOUT_VT.  (The other _SUPPORT knobs have a consistent meaning
683824a9093SEd Maste	which differs from the behaviour controlled by this knob.)
684824a9093SEd Maste
68538b72f8cSAlexander Motin20140619:
68638b72f8cSAlexander Motin	Maximal length of the serial number in CTL was increased from 16 to
68738b72f8cSAlexander Motin	64 chars, that breaks ABI.  All CTL-related tools, such as ctladm
68838b72f8cSAlexander Motin	and ctld, need to be rebuilt to work with a new kernel.
68938b72f8cSAlexander Motin
690727a7ce8SJulio Merino20140606:
691727a7ce8SJulio Merino	The libatf-c and libatf-c++ major versions were downgraded to 0 and
692727a7ce8SJulio Merino	1 respectively to match the upstream numbers.  They were out of
693727a7ce8SJulio Merino	sync because, when they were originally added to FreeBSD, the
694727a7ce8SJulio Merino	upstream versions were not respected.  These libraries are private
695727a7ce8SJulio Merino	and not yet built by default, so renumbering them should be a
696727a7ce8SJulio Merino	non-issue.  However, unclean source trees will yield broken test
697727a7ce8SJulio Merino	programs once the operator executes "make delete-old-libs" after a
698727a7ce8SJulio Merino	"make installworld".
699727a7ce8SJulio Merino
7008c7ec47aSJulio Merino	Additionally, the atf-sh binary was made private by moving it into
7018c7ec47aSJulio Merino	/usr/libexec/.  Already-built shell test programs will keep the
7028c7ec47aSJulio Merino	path to the old binary so they will break after "make delete-old"
7038c7ec47aSJulio Merino	is run.
7048c7ec47aSJulio Merino
705727a7ce8SJulio Merino	If you are using WITH_TESTS=yes (not the default), wipe the object
706727a7ce8SJulio Merino	tree and rebuild from scratch to prevent spurious test failures.
7078c7ec47aSJulio Merino	This is only needed once: the misnumbered libraries and misplaced
7088c7ec47aSJulio Merino	binaries have been added to OptionalObsoleteFiles.inc so they will
7098c7ec47aSJulio Merino	be removed during a clean upgrade.
710727a7ce8SJulio Merino
71185d60e68SDimitry Andric20140512:
71285d60e68SDimitry Andric	Clang and llvm have been upgraded to 3.4.1 release.
71385d60e68SDimitry Andric
714fa114234SWarner Losh20140508:
715fa114234SWarner Losh	We bogusly installed src.opts.mk in /usr/share/mk. This file should
716fa114234SWarner Losh	be removed to avoid issues in the future (and has been added to
717fa114234SWarner Losh	ObsoleteFiles.inc).
718fa114234SWarner Losh
719a46954e2SWarner Losh20140505:
720a46954e2SWarner Losh	/etc/src.conf now affects only builds of the FreeBSD src tree. In the
721a46954e2SWarner Losh	past, it affected all builds that used the bsd.*.mk files. The old
722a46954e2SWarner Losh	behavior was a bug, but people may have relied upon it. To get this
723a46954e2SWarner Losh	behavior back, you can .include /etc/src.conf from /etc/make.conf
724a46954e2SWarner Losh	(which is still global and isn't changed). This also changes the
725a46954e2SWarner Losh	behavior of incremental builds inside the tree of individual
72659a24370SWarner Losh	directories. Set MAKESYSPATH to ".../share/mk" to do that.
727a46954e2SWarner Losh	Although this has survived make universe and some upgrade scenarios,
72855b76981SWarner Losh	other upgrade scenarios may have broken. At least one form of
72955b76981SWarner Losh	temporary breakage was fixed with MAKESYSPATH settings for buildworld
73059a24370SWarner Losh	as well... In cases where MAKESYSPATH isn't working with this
73159a24370SWarner Losh	setting, you'll need to set it to the full path to your tree.
732a46954e2SWarner Losh
733bd871f14SWarner Losh	One side effect of all this cleaning up is that bsd.compiler.mk
734bd871f14SWarner Losh	is no longer implicitly included by bsd.own.mk. If you wish to
735bd871f14SWarner Losh	use COMPILER_TYPE, you must now explicitly include bsd.compiler.mk
736bd871f14SWarner Losh	as well.
737bd871f14SWarner Losh
738461dbce2SEitan Adler20140430:
739461dbce2SEitan Adler	The lindev device has been removed since /dev/full has been made a
740461dbce2SEitan Adler	standard device.  __FreeBSD_version has been bumped.
741461dbce2SEitan Adler
742e9aba509SEnji Cooper20140424:
743e9aba509SEnji Cooper	The knob WITHOUT_VI was added to the base system, which controls
744e9aba509SEnji Cooper	building ex(1), vi(1), etc. Older releases of FreeBSD required ex(1)
745e9aba509SEnji Cooper	in order to reorder files share/termcap and didn't build ex(1) as a
746e9aba509SEnji Cooper	build tool, so building/installing with WITH_VI is highly advised for
747e9aba509SEnji Cooper	build hosts for older releases.
748e9aba509SEnji Cooper
749e9aba509SEnji Cooper	This issue has been fixed in stable/9 and stable/10 in r277022 and
750e9aba509SEnji Cooper	r276991, respectively.
751e9aba509SEnji Cooper
7522bb08298SWarner Losh20140418:
7532bb08298SWarner Losh	The YES_HESIOD knob has been removed. It has been obsolete for
7542bb08298SWarner Losh	a decade. Please move to using WITH_HESIOD instead or your builds
7552bb08298SWarner Losh	will silently lack HESIOD.
7562bb08298SWarner Losh
7574c710b67SMarcel Moolenaar20140405:
7584c710b67SMarcel Moolenaar	The uart(4) driver has been changed with respect to its handling
7594c710b67SMarcel Moolenaar	of the low-level console. Previously the uart(4) driver prevented
7604c710b67SMarcel Moolenaar	any process from changing the baudrate or the CLOCAL and HUPCL
7614c710b67SMarcel Moolenaar	control flags. By removing the restrictions, operators can make
7624c710b67SMarcel Moolenaar	changes to the serial console port without having to reboot.
7634c710b67SMarcel Moolenaar	However, when getty(8) is started on the serial device that is
7644c710b67SMarcel Moolenaar	associated with the low-level console, a misconfigured terminal
7654c710b67SMarcel Moolenaar	line in /etc/ttys will now have a real impact.
7664c710b67SMarcel Moolenaar	Before upgrading the kernel, make sure that /etc/ttys has the
7674c710b67SMarcel Moolenaar	serial console device configured as 3wire without baudrate to
768086036aaSMarcel Moolenaar	preserve the previous behaviour. E.g:
7694c710b67SMarcel Moolenaar	    ttyu0  "/usr/libexec/getty 3wire"  vt100  on  secure
7704c710b67SMarcel Moolenaar
771ea9ed3d8SAlexander Motin20140306:
772ea9ed3d8SAlexander Motin	Support for libwrap (TCP wrappers) in rpcbind was disabled by default
773ea9ed3d8SAlexander Motin	to improve performance.  To re-enable it, if needed, run rpcbind
774ea9ed3d8SAlexander Motin	with command line option -W.
775ea9ed3d8SAlexander Motin
776a9fd2218SWarner Losh20140226:
777a9fd2218SWarner Losh	Switched back to the GPL dtc compiler due to updates in the upstream
778a9fd2218SWarner Losh	dts files not being supported by the BSDL dtc compiler. You will need
779a9fd2218SWarner Losh	to rebuild your kernel toolchain to pick up the new compiler. Core dumps
780a9fd2218SWarner Losh	may result while building dtb files during a kernel build if you fail
781a9fd2218SWarner Losh	to do so. Set WITHOUT_GPL_DTC if you require the BSDL compiler.
782a9fd2218SWarner Losh
7838de08345SChristian Brueffer20140216:
7843ad1a091SWarner Losh	Clang and llvm have been upgraded to 3.4 release.
7853ad1a091SWarner Losh
786f785676fSDimitry Andric20140216:
7878de08345SChristian Brueffer	The nve(4) driver has been removed.  Please use the nfe(4) driver
7888de08345SChristian Brueffer	for NVIDIA nForce MCP Ethernet adapters instead.
7898de08345SChristian Brueffer
7909f23d19aSDimitry Andric20140212:
7919f23d19aSDimitry Andric	An ABI incompatibility crept into the libc++ 3.4 import in r261283.
7929f23d19aSDimitry Andric	This could cause certain C++ applications using shared libraries built
7939f23d19aSDimitry Andric	against the previous version of libc++ to crash.  The incompatibility
7949f23d19aSDimitry Andric	has now been fixed, but any C++ applications or shared libraries built
7959f23d19aSDimitry Andric	between r261283 and r261801 should be recompiled.
7969f23d19aSDimitry Andric
7975e4b8b0dSXin LI20140204:
7985e4b8b0dSXin LI	OpenSSH will now ignore errors caused by kernel lacking of Capsicum
7995e4b8b0dSXin LI	capability mode support.  Please note that enabling the feature in
8005e4b8b0dSXin LI	kernel is still highly recommended.
8015e4b8b0dSXin LI
8025e4b8b0dSXin LI20140131:
8035e4b8b0dSXin LI	OpenSSH is now built with sandbox support, and will use sandbox as
8045e4b8b0dSXin LI	the default privilege separation method.  This requires Capsicum
8055e4b8b0dSXin LI	capability mode support in kernel.
8065e4b8b0dSXin LI
807d1166b82SKai Wang20140128:
8082e503d34SKai Wang	The libelf and libdwarf libraries have been updated to newer
8092e503d34SKai Wang	versions from upstream. Shared library version numbers for
8102e503d34SKai Wang	these two libraries were bumped. Any ports or binaries
8112e503d34SKai Wang	requiring these two libraries should be recompiled.
8122e503d34SKai Wang	__FreeBSD_version is bumped to 1100006.
8132e503d34SKai Wang
814d7efee23SJulio Merino20140110:
815d7efee23SJulio Merino	If a Makefile in a tests/ directory was auto-generating a Kyuafile
816d7efee23SJulio Merino	instead of providing an explicit one, this would prevent such
817d7efee23SJulio Merino	Makefile from providing its own Kyuafile in the future during
818d7efee23SJulio Merino	NO_CLEAN builds.  This has been fixed in the Makefiles but manual
819d7efee23SJulio Merino	intervention is needed to clean an objdir if you use NO_CLEAN:
820d7efee23SJulio Merino	  # find /usr/obj -name Kyuafile | xargs rm -f
821d7efee23SJulio Merino
8222773bfa9SBenjamin Kaduk20131213:
8232773bfa9SBenjamin Kaduk	The behavior of gss_pseudo_random() for the krb5 mechanism
8242773bfa9SBenjamin Kaduk	has changed, for applications requesting a longer random string
8252773bfa9SBenjamin Kaduk	than produced by the underlying enctype's pseudo-random() function.
8262773bfa9SBenjamin Kaduk	In particular, the random string produced from a session key of
8272773bfa9SBenjamin Kaduk	enctype aes256-cts-hmac-sha1-96 or aes256-cts-hmac-sha1-96 will
8282773bfa9SBenjamin Kaduk	be different at the 17th octet and later, after this change.
8292773bfa9SBenjamin Kaduk	The counter used in the PRF+ construction is now encoded as a
8302773bfa9SBenjamin Kaduk	big-endian integer in accordance with RFC 4402.
8312773bfa9SBenjamin Kaduk	__FreeBSD_version is bumped to 1100004.
8322773bfa9SBenjamin Kaduk
833e01d128aSJulio Merino20131108:
834e01d128aSJulio Merino	The WITHOUT_ATF build knob has been removed and its functionality
835e01d128aSJulio Merino	has been subsumed into the more generic WITHOUT_TESTS.  If you were
836e01d128aSJulio Merino	using the former to disable the build of the ATF libraries, you
837e01d128aSJulio Merino	should change your settings to use the latter.
838e01d128aSJulio Merino
839b9cd6b0aSBrooks Davis20131025:
840b9cd6b0aSBrooks Davis	The default version of mtree is nmtree which is obtained from
841b9cd6b0aSBrooks Davis	NetBSD.  The output is generally the same, but may vary
842b9cd6b0aSBrooks Davis	slightly.  If you found you need identical output adding
843b9cd6b0aSBrooks Davis	"-F freebsd9" to the command line should do the trick.  For the
844b9cd6b0aSBrooks Davis	time being, the old mtree is available as fmtree.
845b9cd6b0aSBrooks Davis
846e3ededfaSBryan Drewery20131014:
847e3ededfaSBryan Drewery	libbsdyml has been renamed to libyaml and moved to /usr/lib/private.
848e3ededfaSBryan Drewery	This will break ports-mgmt/pkg. Rebuild the port, or upgrade to pkg
849e3ededfaSBryan Drewery	1.1.4_8 and verify bsdyml not linked in, before running "make
850e3ededfaSBryan Drewery	delete-old-libs":
851e3ededfaSBryan Drewery	  # make -C /usr/ports/ports-mgmt/pkg build deinstall install clean
852e3ededfaSBryan Drewery	  or
853e3ededfaSBryan Drewery	  # pkg install pkg; ldd /usr/local/sbin/pkg | grep bsdyml
854e3ededfaSBryan Drewery
85584b354cbSHiroki Sato20131010:
8569c80b8aaSWarner Losh	The stable/10 branch has been created in subversion from head
8579c80b8aaSWarner Losh	revision r256279.
8589c80b8aaSWarner Losh
8599c80b8aaSWarner Losh20131010:
86084b354cbSHiroki Sato	The rc.d/jail script has been updated to support jail(8)
86184b354cbSHiroki Sato	configuration file.  The "jail_<jname>_*" rc.conf(5) variables
86284b354cbSHiroki Sato	for per-jail configuration are automatically converted to
86384b354cbSHiroki Sato	/var/run/jail.<jname>.conf before the jail(8) utility is invoked.
86484b354cbSHiroki Sato	This is transparently backward compatible.  See below about some
86584b354cbSHiroki Sato	incompatibilities and rc.conf(5) manual page for more details.
86684b354cbSHiroki Sato
86784b354cbSHiroki Sato	These variables are now deprecated in favor of jail(8) configuration
86884b354cbSHiroki Sato	file.  One can use "rc.d/jail config <jname>" command to generate
86984b354cbSHiroki Sato	a jail(8) configuration file in /var/run/jail.<jname>.conf without
87084b354cbSHiroki Sato	running the jail(8) utility.   The default pathname of the
87184b354cbSHiroki Sato	configuration file is /etc/jail.conf and can be specified by
87284b354cbSHiroki Sato	using $jail_conf or $jail_<jname>_conf variables.
87384b354cbSHiroki Sato
87484b354cbSHiroki Sato	Please note that jail_devfs_ruleset accepts an integer at
87584b354cbSHiroki Sato	this moment.  Please consider to rewrite the ruleset name
87684b354cbSHiroki Sato	with an integer.
87784b354cbSHiroki Sato
8782d69252aSDag-Erling Smørgrav20130930:
8792d69252aSDag-Erling Smørgrav	BIND has been removed from the base system.  If all you need
8802d69252aSDag-Erling Smørgrav	is a local resolver, simply enable and start the local_unbound
8812d69252aSDag-Erling Smørgrav	service instead.  Otherwise, several versions of BIND are
8828a65c0b9SCraig Rodrigues	available in the ports tree.   The dns/bind99 port is one example.
8838a65c0b9SCraig Rodrigues
8848a65c0b9SCraig Rodrigues	With this change, nslookup(1) and dig(1) are no longer in the base
885edc144a1SCraig Rodrigues	system.  Users should instead use host(1) and drill(1) which are
8868a65c0b9SCraig Rodrigues	in the base system.  Alternatively, nslookup and dig can
8878a65c0b9SCraig Rodrigues	be obtained by installing the dns/bind-tools port.
8882d69252aSDag-Erling Smørgrav
889665751ecSGlen Barber20130916:
890665751ecSGlen Barber	With the addition of unbound(8), a new unbound user is now
891665751ecSGlen Barber	required during installworld.  "mergemaster -p" can be used to
892665751ecSGlen Barber	add the user prior to installworld, as documented in the handbook.
893665751ecSGlen Barber
894bd8277b4SDag-Erling Smørgrav20130911:
895bd8277b4SDag-Erling Smørgrav	OpenSSH is now built with DNSSEC support, and will by default
896bd8277b4SDag-Erling Smørgrav	silently trust signed SSHFP records.  This can be controlled with
897bd8277b4SDag-Erling Smørgrav	the VerifyHostKeyDNS client configuration setting.  DNSSEC support
898bd8277b4SDag-Erling Smørgrav	can be disabled entirely with the WITHOUT_LDNS option in src.conf.
899bd8277b4SDag-Erling Smørgrav
900d6d3e03eSDavid Chisnall20130906:
901d6d3e03eSDavid Chisnall	The GNU Compiler Collection and C++ standard library (libstdc++)
902d6d3e03eSDavid Chisnall	are no longer built by default on platforms where clang is the system
903d6d3e03eSDavid Chisnall	compiler.  You can enable them with the WITH_GCC and WITH_GNUCXX
904d6d3e03eSDavid Chisnall	options in src.conf.
905d6d3e03eSDavid Chisnall
9064877522eSPawel Jakub Dawidek20130905:
9072057b58bSPawel Jakub Dawidek	The PROCDESC kernel option is now part of the GENERIC kernel
9082057b58bSPawel Jakub Dawidek	configuration and is required for the rwhod(8) to work.
9092057b58bSPawel Jakub Dawidek	If you are using custom kernel configuration, you should include
9102057b58bSPawel Jakub Dawidek	'options PROCDESC'.
9112057b58bSPawel Jakub Dawidek
9122057b58bSPawel Jakub Dawidek20130905:
9134877522eSPawel Jakub Dawidek	The API and ABI related to the Capsicum framework was modified
9144877522eSPawel Jakub Dawidek	in backward incompatible way. The userland libraries and programs
9154877522eSPawel Jakub Dawidek	have to be recompiled to work with the new kernel. This includes the
9164877522eSPawel Jakub Dawidek	following libraries and programs, but the whole buildworld is
9174877522eSPawel Jakub Dawidek	advised: libc, libprocstat, dhclient, tcpdump, hastd, hastctl,
9184877522eSPawel Jakub Dawidek	kdump, procstat, rwho, rwhod, uniq.
9194877522eSPawel Jakub Dawidek
920c8a84c2aSJohn-Mark Gurney20130903:
921c8a84c2aSJohn-Mark Gurney	AES-NI intrinsic support has been added to gcc.  The AES-NI module
922c8a84c2aSJohn-Mark Gurney	has been updated to use this support.  A new gcc is required to build
923c8a84c2aSJohn-Mark Gurney	the aesni module on both i386 and amd64.
924c8a84c2aSJohn-Mark Gurney
92546be218dSDavid E. O'Brien20130821:
92646be218dSDavid E. O'Brien	The PADLOCK_RNG and RDRAND_RNG kernel options are now devices.
92746be218dSDavid E. O'Brien	Thus "device padlock_rng" and "device rdrand_rng" should be
92846be218dSDavid E. O'Brien	used instead of "options PADLOCK_RNG" & "options RDRAND_RNG".
92946be218dSDavid E. O'Brien
9300ff204bbSPeter Wemm20130813:
9310ff204bbSPeter Wemm	WITH_ICONV has been split into two feature sets.  WITH_ICONV now
9320ff204bbSPeter Wemm	enables just the iconv* functionality and is now on by default.
9330ff204bbSPeter Wemm	WITH_LIBICONV_COMPAT enables the libiconv api and link time
934a1ff7af0SPedro F. Giffuni	compatibility.  Set WITHOUT_ICONV to build the old way.
9350dc59c0fSPeter Wemm	If you have been using WITH_ICONV before, you will very likely
9360dc59c0fSPeter Wemm	need to turn on WITH_LIBICONV_COMPAT.
9370ff204bbSPeter Wemm
938ccc88f7bSHiroki Sato20130806:
939c319ea15SAndriy Gapon	INVARIANTS option now enables DEBUG for code with OpenSolaris and
940c319ea15SAndriy Gapon	Illumos origin, including ZFS.  If you have INVARIANTS in your
941c319ea15SAndriy Gapon	kernel configuration, then there is no need to set DEBUG or ZFS_DEBUG
942c319ea15SAndriy Gapon	explicitly.
943c319ea15SAndriy Gapon	DEBUG used to enable witness(9) tracking of OpenSolaris (mostly ZFS)
944c319ea15SAndriy Gapon	locks if WITNESS option was set.  Because that generated a lot of
945c319ea15SAndriy Gapon	witness(9) reports and all of them were believed to be false
946c319ea15SAndriy Gapon	positives, this is no longer done.  New option OPENSOLARIS_WITNESS
947c319ea15SAndriy Gapon	can be used to achieve the previous behavior.
948c319ea15SAndriy Gapon
949c319ea15SAndriy Gapon20130806:
950ccc88f7bSHiroki Sato	Timer values in IPv6 data structures now use time_uptime instead
951ccc88f7bSHiroki Sato	of time_second.  Although this is not a user-visible functional
952ccc88f7bSHiroki Sato	change, userland utilities which directly use them---ndp(8),
953ccc88f7bSHiroki Sato	rtadvd(8), and rtsold(8) in the base system---need to be updated
954ccc88f7bSHiroki Sato	to r253970 or later.
955ccc88f7bSHiroki Sato
9569d6d5a71SJilles Tjoelker20130802:
9579d6d5a71SJilles Tjoelker	find -delete can now delete the pathnames given as arguments,
9589d6d5a71SJilles Tjoelker	instead of only files found below them or if the pathname did
9599d6d5a71SJilles Tjoelker	not contain any slashes. Formerly, the following error message
9609d6d5a71SJilles Tjoelker	would result:
9619d6d5a71SJilles Tjoelker
9629d6d5a71SJilles Tjoelker	find: -delete: <path>: relative path potentially not safe
9639d6d5a71SJilles Tjoelker
9649d6d5a71SJilles Tjoelker	Deleting the pathnames given as arguments can be prevented
9659d6d5a71SJilles Tjoelker	without error messages using -mindepth 1 or by changing
9669d6d5a71SJilles Tjoelker	directory and passing "." as argument to find. This works in the
9679d6d5a71SJilles Tjoelker	old as well as the new version of find.
9689d6d5a71SJilles Tjoelker
969663dea3dSAndriy Gapon20130726:
970663dea3dSAndriy Gapon	Behavior of devfs rules path matching has been changed.
971663dea3dSAndriy Gapon	Pattern is now always matched against fully qualified devfs
972663dea3dSAndriy Gapon	path and slash characters must be explicitly matched by
973663dea3dSAndriy Gapon	slashes in pattern (FNM_PATHNAME). Rulesets involving devfs
974663dea3dSAndriy Gapon	subdirectories must be reviewed.
975663dea3dSAndriy Gapon
97646e95f64SAndrew Turner20130716:
97746e95f64SAndrew Turner	The default ARM ABI has changed to the ARM EABI. The old ABI is
97846e95f64SAndrew Turner	incompatible with the ARM EABI and all programs and modules will
97946e95f64SAndrew Turner	need to be rebuilt to work with a new kernel.
98046e95f64SAndrew Turner
98146e95f64SAndrew Turner	To keep using the old ABI ensure the WITHOUT_ARM_EABI knob is set.
98246e95f64SAndrew Turner
98346e95f64SAndrew Turner	NOTE: Support for the old ABI will be removed in the future and
98446e95f64SAndrew Turner	users are advised to upgrade.
98546e95f64SAndrew Turner
986b40e2b6dSAndrey V. Elsukov20130709:
9879b953f2cSBaptiste Daroussin	pkg_install has been disconnected from the build if you really need it
9889b953f2cSBaptiste Daroussin	you should add WITH_PKGTOOLS in your src.conf(5).
9899b953f2cSBaptiste Daroussin
9909b953f2cSBaptiste Daroussin20130709:
991b40e2b6dSAndrey V. Elsukov	Most of network statistics structures were changed to be able
992b40e2b6dSAndrey V. Elsukov	keep 64-bits counters. Thus all tools, that work with networking
993aa011413SRui Paulo	statistics, must be rebuilt (netstat(1), bsnmpd(1), etc.)
994b40e2b6dSAndrey V. Elsukov
9955b3e0257SDag-Erling Smørgrav20130618:
9965b3e0257SDag-Erling Smørgrav	Fix a bug that allowed a tracing process (e.g. gdb) to write
9975b3e0257SDag-Erling Smørgrav	to a memory-mapped file in the traced process's address space
9985b3e0257SDag-Erling Smørgrav	even if neither the traced process nor the tracing process had
9995b3e0257SDag-Erling Smørgrav	write access to that file.
10005b3e0257SDag-Erling Smørgrav
10011cbff2a9SEitan Adler20130615:
10021cbff2a9SEitan Adler	CVS has been removed from the base system.  An exact copy
10031cbff2a9SEitan Adler	of the code is available from the devel/cvs port.
10041cbff2a9SEitan Adler
1005ba10b444SSimon J. Gerraty20130613:
1006ba10b444SSimon J. Gerraty	Some people report the following error after the switch to bmake:
1007ba10b444SSimon J. Gerraty
1008ba10b444SSimon J. Gerraty		make: illegal option -- J
1009ba10b444SSimon J. Gerraty		usage: make [-BPSXeiknpqrstv] [-C directory] [-D variable]
1010ba10b444SSimon J. Gerraty			...
1011ba10b444SSimon J. Gerraty		*** [buildworld] Error code 2
1012ba10b444SSimon J. Gerraty
1013ba10b444SSimon J. Gerraty	this likely due to an old instance of make in
1014ba10b444SSimon J. Gerraty	${MAKEPATH} (${MAKEOBJDIRPREFIX}${.CURDIR}/make.${MACHINE})
1015ba10b444SSimon J. Gerraty	which src/Makefile will use that blindly, if it exists, so if
1016ba10b444SSimon J. Gerraty	you see the above error:
1017ba10b444SSimon J. Gerraty
1018ba10b444SSimon J. Gerraty		rm -rf `make -V MAKEPATH`
1019ba10b444SSimon J. Gerraty
1020ba10b444SSimon J. Gerraty	should resolve it.
1021ba10b444SSimon J. Gerraty
1022ff8d4375SSimon J. Gerraty20130516:
1023ff8d4375SSimon J. Gerraty	Use bmake by default.
1024ff8d4375SSimon J. Gerraty	Whereas before one could choose to build with bmake via
1025ff8d4375SSimon J. Gerraty	-DWITH_BMAKE one must now use -DWITHOUT_BMAKE to use the old
1026ff8d4375SSimon J. Gerraty	make. The goal is to remove these knobs for 10-RELEASE.
1027ff8d4375SSimon J. Gerraty
1028ff8d4375SSimon J. Gerraty	It is worth noting that bmake (like gmake) treats the command
1029ff8d4375SSimon J. Gerraty	line as the unit of failure, rather than statements within the
1030ff8d4375SSimon J. Gerraty	command line.  Thus '(cd some/where && dosomething)' is safer
1031ff8d4375SSimon J. Gerraty	than 'cd some/where; dosomething'. The '()' allows consistent
1032ff8d4375SSimon J. Gerraty	behavior in parallel build.
1033ff8d4375SSimon J. Gerraty
103432164d53SDag-Erling Smørgrav20130429:
103532164d53SDag-Erling Smørgrav        Fix a bug that allows NFS clients to issue READDIR on files.
103632164d53SDag-Erling Smørgrav
1037562a9d58SSteven Hartland20130426:
1038850163e4SEitan Adler	The WITHOUT_IDEA option has been removed because
1039850163e4SEitan Adler	the IDEA patent expired.
1040850163e4SEitan Adler
1041850163e4SEitan Adler20130426:
1042562a9d58SSteven Hartland	The sysctl which controls TRIM support under ZFS has been renamed
1043562a9d58SSteven Hartland	from vfs.zfs.trim_disable -> vfs.zfs.trim.enabled and has been
1044562a9d58SSteven Hartland	enabled by default.
1045562a9d58SSteven Hartland
104620e0cc0aSBrooks Davis20130425:
104720e0cc0aSBrooks Davis	The mergemaster command now uses the default MAKEOBJDIRPREFIX
104820e0cc0aSBrooks Davis	rather than creating it's own in the temporary directory in
104920e0cc0aSBrooks Davis	order allow access to bootstrapped versions of tools such as
105020e0cc0aSBrooks Davis	install and mtree.  When upgrading from version of FreeBSD where
105120e0cc0aSBrooks Davis	the install command does not support -l, you will need to
105220e0cc0aSBrooks Davis	install a new mergemaster command if mergemaster -p is required.
105320e0cc0aSBrooks Davis	This can be accomplished with the command (cd src/usr.sbin/mergemaster
105420e0cc0aSBrooks Davis	&& make install).
105520e0cc0aSBrooks Davis
10569a95a7caSAlexander Motin20130404:
10579a95a7caSAlexander Motin	Legacy ATA stack, disabled and replaced by new CAM-based one since
10589a95a7caSAlexander Motin	FreeBSD 9.0, completely removed from the sources.  Kernel modules
10599a95a7caSAlexander Motin	atadisk and atapi*, user-level tools atacontrol and burncd are
10609a95a7caSAlexander Motin	removed.  Kernel option `options ATA_CAM` is now permanently enabled
10619a95a7caSAlexander Motin	and removed.
10629a95a7caSAlexander Motin
10635ad7e649SJilles Tjoelker20130319:
10645ad7e649SJilles Tjoelker	SOCK_CLOEXEC and SOCK_NONBLOCK flags have been added to socket(2)
10655ad7e649SJilles Tjoelker	and socketpair(2). Software, in particular Kerberos, may
10665ad7e649SJilles Tjoelker	automatically detect and use these during building. The resulting
10675ad7e649SJilles Tjoelker	binaries will not work on older kernels.
10685ad7e649SJilles Tjoelker
1069105421ffSMarius Strobl20130308:
1070105421ffSMarius Strobl	CTL_DISABLE has also been added to the sparc64 GENERIC (for further
1071105421ffSMarius Strobl	information, see the respective 20130304 entry).
1072105421ffSMarius Strobl
10733a45b478SKenneth D. Merry20130304:
107423d44ab5SDavide Italiano	Recent commits to callout(9) changed the size of struct callout,
107523d44ab5SDavide Italiano	so the KBI is probably heavily disturbed. Also, some functions
107623d44ab5SDavide Italiano	in callout(9)/sleep(9)/sleepqueue(9)/condvar(9) KPIs were replaced
107723d44ab5SDavide Italiano	by macros. Every kernel module using it won't load, so rebuild
107823d44ab5SDavide Italiano	is requested.
107923d44ab5SDavide Italiano
10803a45b478SKenneth D. Merry	The ctl device has been re-enabled in GENERIC for i386 and amd64,
10813a45b478SKenneth D. Merry	but does not initialize by default (because of the new CTL_DISABLE
10823a45b478SKenneth D. Merry	option) to save memory.  To re-enable it, remove the CTL_DISABLE
10833a45b478SKenneth D. Merry	option from the kernel config file or set kern.cam.ctl.disable=0
10843a45b478SKenneth D. Merry	in /boot/loader.conf.
10853a45b478SKenneth D. Merry
1086fe138cc2SAdrian Chadd20130301:
1087fe138cc2SAdrian Chadd	The ctl device has been disabled in GENERIC for i386 and amd64.
1088fe138cc2SAdrian Chadd	This was done due to the extra memory being allocated at system
1089fe138cc2SAdrian Chadd	initialisation time by the ctl driver which was only used if
1090fe138cc2SAdrian Chadd	a CAM target device was created.  This makes a FreeBSD system
1091fe138cc2SAdrian Chadd	unusable on 128MB or less of RAM.
1092fe138cc2SAdrian Chadd
109320a011d5SXin LI20130208:
109420a011d5SXin LI	A new compression method (lz4) has been merged to -HEAD.  Please
109520a011d5SXin LI	refer to zpool-features(7) for more information.
109620a011d5SXin LI
109720a011d5SXin LI	Please refer to the "ZFS notes" section of this file for information
109820a011d5SXin LI	on upgrading boot ZFS pools.
109920a011d5SXin LI
11002dd076b8SGabor Kovesdan20130129:
11012dd076b8SGabor Kovesdan	A BSD-licensed patch(1) variant has been added and is installed
11022dd076b8SGabor Kovesdan	as bsdpatch, being the GNU version the default patch.
11032dd076b8SGabor Kovesdan	To inverse the logic and use the BSD-licensed one as default,
11042dd076b8SGabor Kovesdan	while having the GNU version installed as gnupatch, rebuild
11052d329593SGabor Kovesdan	and install world with the WITH_BSD_PATCH knob set.
11062dd076b8SGabor Kovesdan
1107fe06cae7SBrooks Davis20130121:
1108fe06cae7SBrooks Davis	Due to the use of the new -l option to install(1) during build
1109fe06cae7SBrooks Davis	and install, you must take care not to directly set the INSTALL
1110fe06cae7SBrooks Davis	make variable in your /etc/make.conf, /etc/src.conf, or on the
11118c5836c3SEitan Adler	command line.  If you wish to use the -C flag for all installs
1112fe06cae7SBrooks Davis	you may be able to add INSTALL+=-C to /etc/make.conf or
1113fe06cae7SBrooks Davis	/etc/src.conf.
1114fe06cae7SBrooks Davis
1115f2b19f9eSBrooks Davis20130118:
1116f2b19f9eSBrooks Davis	The install(1) option -M has changed meaning and now takes an
1117f2b19f9eSBrooks Davis	argument that is a file or path to append logs to.  In the
1118f2b19f9eSBrooks Davis	unlikely event that -M was the last option on the command line
1119f2b19f9eSBrooks Davis	and the command line contained at least two files and a target
1120f2b19f9eSBrooks Davis	directory the first file will have logs appended to it.  The -M
11214cf5de80SGlen Barber	option served little practical purpose in the last decade so its
11224cf5de80SGlen Barber	use is expected to be extremely rare.
1123f2b19f9eSBrooks Davis
11243fea4e6bSAndriy Gapon20121223:
11253fea4e6bSAndriy Gapon	After switching to Clang as the default compiler some users of ZFS
11263fea4e6bSAndriy Gapon	on i386 systems started to experience stack overflow kernel panics.
11273fea4e6bSAndriy Gapon	Please consider using 'options KSTACK_PAGES=4' in such configurations.
11283fea4e6bSAndriy Gapon
1129efec959cSJaakko Heinonen20121222:
1130efec959cSJaakko Heinonen	GEOM_LABEL now mangles label names read from file system metadata.
1131efec959cSJaakko Heinonen	Mangling affect labels containing spaces, non-printable characters,
1132efec959cSJaakko Heinonen	'%' or '"'. Device names in /etc/fstab and other places may need to
1133efec959cSJaakko Heinonen	be updated.
1134efec959cSJaakko Heinonen
113511631ad0SPawel Jakub Dawidek20121217:
113611631ad0SPawel Jakub Dawidek	By default, only the 10 most recent kernel dumps will be saved.  To
113711631ad0SPawel Jakub Dawidek	restore the previous behaviour (no limit on the number of kernel dumps
113811631ad0SPawel Jakub Dawidek	stored in the dump directory) add the following line to /etc/rc.conf:
113911631ad0SPawel Jakub Dawidek
114011631ad0SPawel Jakub Dawidek		savecore_flags=""
114111631ad0SPawel Jakub Dawidek
1142e0fb6dc3SRobert Watson20121201:
1143e0fb6dc3SRobert Watson	With the addition of auditdistd(8), a new auditdistd user is now
11440312d1caSGlen Barber	required during installworld.  "mergemaster -p" can be used to
11450312d1caSGlen Barber	add the user prior to installworld, as documented in the handbook.
1146e0fb6dc3SRobert Watson
1147b91dc775SHiroki Sato20121117:
1148b91dc775SHiroki Sato	The sin6_scope_id member variable in struct sockaddr_in6 is now
1149b91dc775SHiroki Sato	filled by the kernel before passing the structure to the userland via
1150b91dc775SHiroki Sato	sysctl or routing socket.  This means the KAME-specific embedded scope
1151b91dc775SHiroki Sato	id in sin6_addr.s6_addr[2] is always cleared in userland application.
1152b91dc775SHiroki Sato	This behavior can be controlled by net.inet6.ip6.deembed_scopeid.
1153b91dc775SHiroki Sato	__FreeBSD_version is bumped to 1000025.
1154b91dc775SHiroki Sato
11555b6478b0SBrooks Davis20121105:
11565b6478b0SBrooks Davis	On i386 and amd64 systems WITH_CLANG_IS_CC is now the default.
11575b6478b0SBrooks Davis	This means that the world and kernel will be compiled with clang
11585b6478b0SBrooks Davis	and that clang will be installed as /usr/bin/cc, /usr/bin/c++,
11595b6478b0SBrooks Davis	and /usr/bin/cpp.  To disable this behavior and revert to building
1160da0e842aSWarner Losh	with gcc, compile with WITHOUT_CLANG_IS_CC. Really old versions
1161da0e842aSWarner Losh	of current may need to bootstrap WITHOUT_CLANG first if the clang
1162da0e842aSWarner Losh	build fails (its compatibility window doesn't extend to the 9 stable
1163da0e842aSWarner Losh	branch point).
11645b6478b0SBrooks Davis
1165ffdbf9daSAndrey V. Elsukov20121102:
1166a971b547SAndrey V. Elsukov	The IPFIREWALL_FORWARD kernel option has been removed. Its
1167ffdbf9daSAndrey V. Elsukov	functionality now turned on by default.
1168a971b547SAndrey V. Elsukov
11698f134647SGleb Smirnoff20121023:
1170cb69178dSAndre Oppermann	The ZERO_COPY_SOCKET kernel option has been removed and
1171cb69178dSAndre Oppermann	split into SOCKET_SEND_COW and SOCKET_RECV_PFLIP.
1172cb69178dSAndre Oppermann	NB: SOCKET_SEND_COW uses the VM page based copy-on-write
1173cb69178dSAndre Oppermann	mechanism which is not safe and may result in kernel crashes.
1174cb69178dSAndre Oppermann	NB: The SOCKET_RECV_PFLIP mechanism is useless as no current
1175cb69178dSAndre Oppermann	driver supports disposeable external page sized mbuf storage.
1176cb69178dSAndre Oppermann	Proper replacements for both zero-copy mechanisms are under
1177cb69178dSAndre Oppermann	consideration and will eventually lead to complete removal
1178cb69178dSAndre Oppermann	of the two kernel options.
1179cb69178dSAndre Oppermann
1180cb69178dSAndre Oppermann20121023:
11818f134647SGleb Smirnoff	The IPv4 network stack has been converted to network byte
11828f134647SGleb Smirnoff	order. The following modules need to be recompiled together
11838f134647SGleb Smirnoff	with kernel: carp(4), divert(4), gif(4), siftr(4), gre(4),
11848f134647SGleb Smirnoff	pf(4), ipfw(4), ng_ipfw(4), stf(4).
11858f134647SGleb Smirnoff
11868859ec84SKonstantin Belousov20121022:
11878859ec84SKonstantin Belousov	Support for non-MPSAFE filesystems was removed from VFS. The
11888859ec84SKonstantin Belousov	VFS_VERSION was bumped, all filesystem modules shall be
11898859ec84SKonstantin Belousov	recompiled.
11908859ec84SKonstantin Belousov
1191e053ead0SAttilio Rao20121018:
1192e053ead0SAttilio Rao	All the non-MPSAFE filesystems have been disconnected from
1193e053ead0SAttilio Rao	the build. The full list includes: codafs, hpfs, ntfs, nwfs,
1194e053ead0SAttilio Rao	portalfs, smbfs, xfs.
1195e053ead0SAttilio Rao
119642a58907SGleb Smirnoff20121016:
119742a58907SGleb Smirnoff	The interface cloning API and ABI has changed. The following
119842a58907SGleb Smirnoff	modules need to be recompiled together with kernel:
119942a58907SGleb Smirnoff	ipfw(4), pfsync(4), pflog(4), usb(4), wlan(4), stf(4),
120042a58907SGleb Smirnoff	vlan(4), disc(4), edsc(4), if_bridge(4), gif(4), tap(4),
120142a58907SGleb Smirnoff	faith(4), epair(4), enc(4), tun(4), if_lagg(4), gre(4).
120242a58907SGleb Smirnoff
1203d6b3aaf8SOleksandr Tymoshenko20121015:
1204d6b3aaf8SOleksandr Tymoshenko	The sdhci driver was split in two parts: sdhci (generic SD Host
1205d6b3aaf8SOleksandr Tymoshenko	Controller logic) and sdhci_pci (actual hardware driver).
1206d6b3aaf8SOleksandr Tymoshenko	No kernel config modifications are required, but if you
1207d6b3aaf8SOleksandr Tymoshenko	load sdhc as a module you must switch to sdhci_pci instead.
1208d6b3aaf8SOleksandr Tymoshenko
12095fe58019SAttilio Rao20121014:
12105fe58019SAttilio Rao	Import the FUSE kernel and userland support into base system.
12115fe58019SAttilio Rao
1212d38ae94bSGabor Kovesdan20121013:
1213d38ae94bSGabor Kovesdan	The GNU sort(1) program has been removed since the BSD-licensed
1214d38ae94bSGabor Kovesdan	sort(1) has been the default for quite some time and no serious
1215d38ae94bSGabor Kovesdan	problems have been reported.  The corresponding WITH_GNU_SORT
121658b6d9a2SGabor Kovesdan	knob has also gone.
1217d38ae94bSGabor Kovesdan
121821d172a3SGleb Smirnoff20121006:
121921d172a3SGleb Smirnoff	The pfil(9) API/ABI for AF_INET family has been changed. Packet
122021d172a3SGleb Smirnoff	filtering modules: pf(4), ipfw(4), ipfilter(4) need to be recompiled
122121d172a3SGleb Smirnoff	with new kernel.
122221d172a3SGleb Smirnoff
12237b81c83cSAdrian Chadd20121001:
12247b81c83cSAdrian Chadd	The net80211(4) ABI has been changed to allow for improved driver
12257b81c83cSAdrian Chadd	PS-POLL and power-save support.  All wireless drivers need to be
12267b81c83cSAdrian Chadd	recompiled to work with the new kernel.
12277b81c83cSAdrian Chadd
1228d65043bcSKonstantin Belousov20120913:
1229d65043bcSKonstantin Belousov	The random(4) support for the VIA hardware random number
1230d65043bcSKonstantin Belousov	generator (`PADLOCK') is no longer enabled unconditionally.
123146be218dSDavid E. O'Brien	Add the padlock_rng device in the custom kernel config if
1232d65043bcSKonstantin Belousov	needed.  The GENERIC kernels on i386 and amd64 do include the
123346be218dSDavid E. O'Brien	device, so the change only affects the custom kernel
1234d65043bcSKonstantin Belousov	configurations.
1235d65043bcSKonstantin Belousov
1236d6d3f01eSGleb Smirnoff20120908:
1237d6d3f01eSGleb Smirnoff	The pf(4) packet filter ABI has been changed. pfctl(8) and
1238d6d3f01eSGleb Smirnoff	snmp_pf module need to be recompiled to work with new kernel.
1239d6d3f01eSGleb Smirnoff
12406e767defSMartin Matuska20120828:
12416e767defSMartin Matuska	A new ZFS feature flag "com.delphix:empty_bpobj" has been merged
12426e767defSMartin Matuska	to -HEAD. Pools that have empty_bpobj in active state can not be
12436e767defSMartin Matuska	imported read-write with ZFS implementations that do not support
12446e767defSMartin Matuska	this feature. For more information read the zpool-features(5)
12456e767defSMartin Matuska	manual page.
12466e767defSMartin Matuska
1247614e3098SMarius Strobl20120727:
1248614e3098SMarius Strobl	The sparc64 ZFS loader has been changed to no longer try to auto-
1249614e3098SMarius Strobl	detect ZFS providers based on diskN aliases but now requires these
1250614e3098SMarius Strobl	to be explicitly listed in the OFW boot-device environment variable.
1251614e3098SMarius Strobl
12527e003b0aSChristian Brueffer20120712:
12531f13597dSJung-uk Kim	The OpenSSL has been upgraded to 1.0.1c.  Any binaries requiring
12541f13597dSJung-uk Kim	libcrypto.so.6 or libssl.so.6 must be recompiled.  Also, there are
12551f13597dSJung-uk Kim	configuration changes.  Make sure to merge /etc/ssl/openssl.cnf.
12561f13597dSJung-uk Kim
12571f13597dSJung-uk Kim20120712:
12587e003b0aSChristian Brueffer	The following sysctls and tunables have been renamed for consistency
12597e003b0aSChristian Brueffer	with other variables:
12607e003b0aSChristian Brueffer	  kern.cam.da.da_send_ordered   -> kern.cam.da.send_ordered
12617e003b0aSChristian Brueffer	  kern.cam.ada.ada_send_ordered -> kern.cam.ada.send_ordered
12627e003b0aSChristian Brueffer
1263d22c63acSGabor Kovesdan20120628:
1264d22c63acSGabor Kovesdan	The sort utility has been replaced with BSD sort.  For now, GNU sort
1265d22c63acSGabor Kovesdan	is also available as "gnusort" or the default can be set back to
1266d22c63acSGabor Kovesdan	GNU sort by setting WITH_GNU_SORT.  In this case, BSD sort will be
1267d22c63acSGabor Kovesdan	installed as "bsdsort".
1268d22c63acSGabor Kovesdan
12692d9cf57eSMartin Matuska20120611:
12702d9cf57eSMartin Matuska	A new version of ZFS (pool version 5000) has been merged to -HEAD.
12712d9cf57eSMartin Matuska	Starting with this version the old system of ZFS pool versioning
12722d9cf57eSMartin Matuska	is superseded by "feature flags". This concept enables forward
12732d9cf57eSMartin Matuska	compatibility against certain future changes in functionality of ZFS
12742d9cf57eSMartin Matuska	pools. The first read-only compatible "feature flag" for ZFS pools
12752d9cf57eSMartin Matuska	is named "com.delphix:async_destroy". For more information
12762d9cf57eSMartin Matuska	read the new zpool-features(5) manual page.
12772d9cf57eSMartin Matuska	Please refer to the "ZFS notes" section of this file for information
12782d9cf57eSMartin Matuska	on upgrading boot ZFS pools.
12792d9cf57eSMartin Matuska
1280d1675e38SJason Evans20120417:
1281d1675e38SJason Evans	The malloc(3) implementation embedded in libc now uses sources imported
1282d1675e38SJason Evans	as contrib/jemalloc.  The most disruptive API change is to
1283d1675e38SJason Evans	/etc/malloc.conf.  If your system has an old-style /etc/malloc.conf,
1284d1675e38SJason Evans	delete it prior to installworld, and optionally re-create it using the
1285d1675e38SJason Evans	new format after rebooting.  See malloc.conf(5) for details
1286d1675e38SJason Evans	(specifically the TUNING section and the "opt.*" entries in the MALLCTL
1287d1675e38SJason Evans	NAMESPACE section).
1288d1675e38SJason Evans
128984db023eSJuli Mallett20120328:
129084db023eSJuli Mallett	Big-endian MIPS TARGET_ARCH values no longer end in "eb".  mips64eb
129184db023eSJuli Mallett	is now spelled mips64.  mipsn32eb is now spelled mipsn32.  mipseb is
129284db023eSJuli Mallett	now spelled mips.  This is to aid compatibility with third-party
129384db023eSJuli Mallett	software that expects this naming scheme in uname(3).  Little-endian
1294474dbfb7SWarner Losh	settings are unchanged. If you are updating a big-endian mips64 machine
1295474dbfb7SWarner Losh	from before this change, you may need to set MACHINE_ARCH=mips64 in
1296474dbfb7SWarner Losh	your environment before the new build system will recognize your machine.
129784db023eSJuli Mallett
12989c170fd1SAttilio Rao20120306:
12999c170fd1SAttilio Rao	Disable by default the option VFS_ALLOW_NONMPSAFE for all supported
13009c170fd1SAttilio Rao	platforms.
13019c170fd1SAttilio Rao
1302c7e41c8bSMikolaj Golub20120229:
1303c7e41c8bSMikolaj Golub	Now unix domain sockets behave "as expected" on	nullfs(5). Previously
1304c7e41c8bSMikolaj Golub	nullfs(5) did not pass through all behaviours to the underlying layer,
1305c7e41c8bSMikolaj Golub	as a result if we bound to a socket on the lower layer we could connect
1306c7e41c8bSMikolaj Golub	only to the lower path; if we bound to the upper layer we could connect
1307c7e41c8bSMikolaj Golub	only to	the upper path. The new behavior is one can connect to both the
1308c7e41c8bSMikolaj Golub	lower and the upper paths regardless what layer path one binds to.
1309c7e41c8bSMikolaj Golub
1310ca1672daSBjoern A. Zeeb20120211:
1311ca1672daSBjoern A. Zeeb	The getifaddrs upgrade path broken with 20111215 has been restored.
1312ca1672daSBjoern A. Zeeb	If you have upgraded in between 20111215 and 20120209 you need to
1313ca1672daSBjoern A. Zeeb	recompile libc again with your kernel.  You still need to recompile
1314ca1672daSBjoern A. Zeeb	world to be able to configure CARP but this restriction already
1315ca1672daSBjoern A. Zeeb	comes from 20111215.
1316ca1672daSBjoern A. Zeeb
1317e0e0f25bSDoug Barton20120114:
1318e0e0f25bSDoug Barton	The set_rcvar() function has been removed from /etc/rc.subr.  All
1319e0e0f25bSDoug Barton	base and ports rc.d scripts have been updated, so if you have a
1320e0e0f25bSDoug Barton	port installed with a script in /usr/local/etc/rc.d you can either
1321e0e0f25bSDoug Barton	hand-edit the rcvar= line, or reinstall the port.
1322e0e0f25bSDoug Barton
13235d482324SDoug Barton	An easy way to handle the mass-update of /etc/rc.d:
13245d482324SDoug Barton	rm /etc/rc.d/* && mergemaster -i
13255d482324SDoug Barton
132690d82653SAndriy Gapon20120109:
132790d82653SAndriy Gapon	panic(9) now stops other CPUs in the SMP systems, disables interrupts
132890d82653SAndriy Gapon	on the current CPU and prevents other threads from running.
132990d82653SAndriy Gapon	This behavior can be reverted using the kern.stop_scheduler_on_panic
133090d82653SAndriy Gapon	tunable/sysctl.
133190d82653SAndriy Gapon	The new behavior can be incompatible with kern.sync_on_panic.
133290d82653SAndriy Gapon
133308b68b0eSGleb Smirnoff20111215:
133408b68b0eSGleb Smirnoff	The carp(4) facility has been changed significantly. Configuration
133508b68b0eSGleb Smirnoff	of the CARP protocol via ifconfig(8) has changed, as well as format
133608b68b0eSGleb Smirnoff	of CARP events submitted to devd(8) has changed. See manual pages
133708b68b0eSGleb Smirnoff	for more information. The arpbalance feature of carp(4) is currently
133808b68b0eSGleb Smirnoff	not supported anymore.
133908b68b0eSGleb Smirnoff
134008b68b0eSGleb Smirnoff	Size of struct in_aliasreq, struct in6_aliasreq has changed. User
134108b68b0eSGleb Smirnoff	utilities using SIOCAIFADDR, SIOCAIFADDR_IN6, e.g. ifconfig(8),
134208b68b0eSGleb Smirnoff	need to be recompiled.
134308b68b0eSGleb Smirnoff
1344d5d131eeSJaakko Heinonen20111122:
1345d5d131eeSJaakko Heinonen	The acpi_wmi(4) status device /dev/wmistat has been renamed to
1346d5d131eeSJaakko Heinonen	/dev/wmistat0.
1347d5d131eeSJaakko Heinonen
1348ed1f6dc2SAttilio Rao20111108:
1349ed1f6dc2SAttilio Rao	The option VFS_ALLOW_NONMPSAFE option has been added in order to
1350ed1f6dc2SAttilio Rao	explicitely support non-MPSAFE filesystems.
1351ed1f6dc2SAttilio Rao	It is on by default for all supported platform at this present
1352ed1f6dc2SAttilio Rao	time.
1353ed1f6dc2SAttilio Rao
1354a9ab459bSMarius Strobl20111101:
1355a9ab459bSMarius Strobl	The broken amd(4) driver has been replaced with esp(4) in the amd64,
1356a9ab459bSMarius Strobl	i386 and pc98 GENERIC kernel configuration files.
1357a9ab459bSMarius Strobl
1358e59e2d8eSNathan Whitehorn20110930:
1359e59e2d8eSNathan Whitehorn	sysinstall has been removed
1360e59e2d8eSNathan Whitehorn
13618a3b6cc1SKen Smith20110923:
13628a3b6cc1SKen Smith	The stable/9 branch created in subversion.  This corresponds to the
13638a3b6cc1SKen Smith	RELENG_9 branch in CVS.
13648a3b6cc1SKen Smith
1365dc0dbf5cSWarner LoshCOMMON ITEMS:
1366dc0dbf5cSWarner Losh
1367a24eff53SWarner Losh	General Notes
1368a24eff53SWarner Losh	-------------
1369456b5dd8SWarner Losh	Avoid using make -j when upgrading.  While generally safe, there are
1370456b5dd8SWarner Losh	sometimes problems using -j to upgrade.  If your upgrade fails with
13711733d35cSRuslan Ermilov	-j, please try again without -j.  From time to time in the past there
1372456b5dd8SWarner Losh	have been problems using -j with buildworld and/or installworld.  This
1373456b5dd8SWarner Losh	is especially true when upgrading between "distant" versions (eg one
1374456b5dd8SWarner Losh	that cross a major release boundary or several minor releases, or when
1375456b5dd8SWarner Losh	several months have passed on the -current branch).
1376a24eff53SWarner Losh
13775780f3baSWarner Losh	Sometimes, obscure build problems are the result of environment
13785780f3baSWarner Losh	poisoning.  This can happen because the make utility reads its
1379456b5dd8SWarner Losh	environment when searching for values for global variables.  To run
1380456b5dd8SWarner Losh	your build attempts in an "environmental clean room", prefix all make
1381456b5dd8SWarner Losh	commands with 'env -i '.  See the env(1) manual page for more details.
13825780f3baSWarner Losh
1383456b5dd8SWarner Losh	When upgrading from one major version to another it is generally best
1384456b5dd8SWarner Losh	to upgrade to the latest code in the currently installed branch first,
1385456b5dd8SWarner Losh	then do an upgrade to the new branch. This is the best-tested upgrade
1386456b5dd8SWarner Losh	path, and has the highest probability of being successful.  Please try
1387456b5dd8SWarner Losh	this approach before reporting problems with a major version upgrade.
1388081ff8acSDoug Barton
13896eeab389SWarner Losh	When upgrading a live system, having a root shell around before
1390da0e842aSWarner Losh	installing anything can help undo problems. Not having a root shell
1391da0e842aSWarner Losh	around can lead to problems if pam has changed too much from your
1392da0e842aSWarner Losh	starting point to allow continued authentication after the upgrade.
1393da0e842aSWarner Losh
13949c80b8aaSWarner Losh	This file should be read as a log of events. When a later event changes
13959c80b8aaSWarner Losh	information of a prior event, the prior event should not be deleted.
13969c80b8aaSWarner Losh	Instead, a pointer to the entry with the new information should be
13979c80b8aaSWarner Losh	placed in the old entry. Readers of this file should also sanity check
13989c80b8aaSWarner Losh	older entries before relying on them blindly. Authors of new entries
13999c80b8aaSWarner Losh	should write them with this in mind.
14009c80b8aaSWarner Losh
14018fc25799SMartin Matuska	ZFS notes
14028fc25799SMartin Matuska	---------
14038fc25799SMartin Matuska	When upgrading the boot ZFS pool to a new version, always follow
14048fc25799SMartin Matuska	these two steps:
14058fc25799SMartin Matuska
14068fc25799SMartin Matuska	1.) recompile and reinstall the ZFS boot loader and boot block
14078fc25799SMartin Matuska	(this is part of "make buildworld" and "make installworld")
14088fc25799SMartin Matuska
14098fc25799SMartin Matuska	2.) update the ZFS boot block on your boot drive
14108fc25799SMartin Matuska
14118fc25799SMartin Matuska	The following example updates the ZFS boot block on the first
141272ce7f29SAlexander Leidinger	partition (freebsd-boot) of a GPT partitioned drive ada0:
141372ce7f29SAlexander Leidinger	"gpart bootcode -p /boot/gptzfsboot -i 1 ada0"
14148fc25799SMartin Matuska
14158fc25799SMartin Matuska	Non-boot pools do not need these updates.
14168fc25799SMartin Matuska
1417dc0dbf5cSWarner Losh	To build a kernel
1418dc0dbf5cSWarner Losh	-----------------
1419ba01eb20SWarner Losh	If you are updating from a prior version of FreeBSD (even one just
14201cf0ef11SDavid E. O'Brien	a few days old), you should follow this procedure.  It is the most
14211cf0ef11SDavid E. O'Brien	failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
14221cf0ef11SDavid E. O'Brien
14231cf0ef11SDavid E. O'Brien	make kernel-toolchain
1424282e0f01SRuslan Ermilov	make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1425282e0f01SRuslan Ermilov	make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1426dc0dbf5cSWarner Losh
14272e937dd6SAlexander Leidinger	To test a kernel once
14282e937dd6SAlexander Leidinger	---------------------
14292e937dd6SAlexander Leidinger	If you just want to boot a kernel once (because you are not sure
14302e937dd6SAlexander Leidinger	if it works, or if you want to boot a known bad kernel to provide
14312e937dd6SAlexander Leidinger	debugging information) run
14322e937dd6SAlexander Leidinger	make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
14332e937dd6SAlexander Leidinger	nextboot -k testkernel
14342e937dd6SAlexander Leidinger
1435ba01eb20SWarner Losh	To just build a kernel when you know that it won't mess you up
1436ba01eb20SWarner Losh	--------------------------------------------------------------
1437456b5dd8SWarner Losh	This assumes you are already running a CURRENT system.  Replace
14380fbd2da9SKen Smith	${arch} with the architecture of your machine (e.g. "i386",
1439456b5dd8SWarner Losh	"arm", "amd64", "ia64", "pc98", "sparc64", "powerpc", "mips", etc).
14400fbd2da9SKen Smith
14410fbd2da9SKen Smith	cd src/sys/${arch}/conf
144247d0d01fSWarner Losh	config KERNEL_NAME_HERE
14430fbd2da9SKen Smith	cd ../compile/KERNEL_NAME_HERE
1444ba01eb20SWarner Losh	make depend
1445ba01eb20SWarner Losh	make
1446ba01eb20SWarner Losh	make install
1447ba01eb20SWarner Losh
1448ba01eb20SWarner Losh	If this fails, go to the "To build a kernel" section.
1449ba01eb20SWarner Losh
1450ba01eb20SWarner Losh	To rebuild everything and install it on the current system.
1451ba01eb20SWarner Losh	-----------------------------------------------------------
145263cb445eSWarner Losh	# Note: sometimes if you are running current you gotta do more than
145363cb445eSWarner Losh	# is listed here if you are upgrading from a really old current.
145463cb445eSWarner Losh
1455f643de42SWarner Losh	<make sure you have good level 0 dumps>
145663cb445eSWarner Losh	make buildworld
14576586253aSWarner Losh	make kernel KERNCONF=YOUR_KERNEL_HERE
145863cb445eSWarner Losh							[1]
145963cb445eSWarner Losh	<reboot in single user>				[3]
146005940036SJohn-Mark Gurney	mergemaster -Fp					[5]
146163cb445eSWarner Losh	make installworld
146205940036SJohn-Mark Gurney	mergemaster -Fi					[4]
146394877c06SAlexander Leidinger	make delete-old					[6]
146463cb445eSWarner Losh	<reboot>
146563cb445eSWarner Losh
1466f27b1fceSJoseph Koshy	To cross-install current onto a separate partition
1467f27b1fceSJoseph Koshy	--------------------------------------------------
1468f27b1fceSJoseph Koshy	# In this approach we use a separate partition to hold
1469f27b1fceSJoseph Koshy	# current's root, 'usr', and 'var' directories.   A partition
1470f27b1fceSJoseph Koshy	# holding "/", "/usr" and "/var" should be about 2GB in
1471f27b1fceSJoseph Koshy	# size.
1472f27b1fceSJoseph Koshy
1473f27b1fceSJoseph Koshy	<make sure you have good level 0 dumps>
1474f27b1fceSJoseph Koshy	<boot into -stable>
1475f27b1fceSJoseph Koshy	make buildworld
14763ecf3bddSRuslan Ermilov	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1477f27b1fceSJoseph Koshy	<maybe newfs current's root partition>
1478f27b1fceSJoseph Koshy	<mount current's root partition on directory ${CURRENT_ROOT}>
1479af34024aSJohn-Mark Gurney	make installworld DESTDIR=${CURRENT_ROOT} -DDB_FROM_SRC
14802d5cde04SRuslan Ermilov	make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
14813ecf3bddSRuslan Ermilov	make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1482f27b1fceSJoseph Koshy	cp /etc/fstab ${CURRENT_ROOT}/etc/fstab 		   # if newfs'd
1483f27b1fceSJoseph Koshy	<edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1484f27b1fceSJoseph Koshy	<reboot into current>
1485f27b1fceSJoseph Koshy	<do a "native" rebuild/install as described in the previous section>
1486737d990aSXin LI	<maybe install compatibility libraries from ports/misc/compat*>
1487f27b1fceSJoseph Koshy	<reboot>
1488f27b1fceSJoseph Koshy
1489f27b1fceSJoseph Koshy
149015974d55SGavin Atkinson	To upgrade in-place from stable to current
1491f27b1fceSJoseph Koshy	----------------------------------------------
1492f643de42SWarner Losh	<make sure you have good level 0 dumps>
149321c075eaSWarner Losh	make buildworld					[9]
1494e5dc5f61SWarner Losh	make kernel KERNCONF=YOUR_KERNEL_HERE		[8]
1495fc8c157fSWarner Losh							[1]
1496fc8c157fSWarner Losh	<reboot in single user>				[3]
149705940036SJohn-Mark Gurney	mergemaster -Fp					[5]
1498ba26da8eSWarner Losh	make installworld
149905940036SJohn-Mark Gurney	mergemaster -Fi					[4]
150094877c06SAlexander Leidinger	make delete-old					[6]
1501ba26da8eSWarner Losh	<reboot>
1502ba26da8eSWarner Losh
1503fdb9f54dSWarner Losh	Make sure that you've read the UPDATING file to understand the
1504fdb9f54dSWarner Losh	tweaks to various things you need.  At this point in the life
1505fdb9f54dSWarner Losh	cycle of current, things change often and you are on your own
1506fdb9f54dSWarner Losh	to cope.  The defaults can also change, so please read ALL of
1507fdb9f54dSWarner Losh	the UPDATING entries.
1508ba26da8eSWarner Losh
15091dece4a9SWarner Losh	Also, if you are tracking -current, you must be subscribed to
15101dece4a9SWarner Losh	freebsd-current@freebsd.org.  Make sure that before you update
15111dece4a9SWarner Losh	your sources that you have read and understood all the recent
15121dece4a9SWarner Losh	messages there.  If in doubt, please track -stable which has
15131dece4a9SWarner Losh	much fewer pitfalls.
15141dece4a9SWarner Losh
1515134d2e86SWarner Losh	[1] If you have third party modules, such as vmware, you
1516134d2e86SWarner Losh	should disable them at this point so they don't crash your
1517134d2e86SWarner Losh	system on reboot.
1518134d2e86SWarner Losh
1519ee6e1fc3SWarner Losh	[3] From the bootblocks, boot -s, and then do
1520ee6e1fc3SWarner Losh		fsck -p
1521ee6e1fc3SWarner Losh		mount -u /
1522ee6e1fc3SWarner Losh		mount -a
15236586253aSWarner Losh		cd src
152447d0d01fSWarner Losh		adjkerntz -i		# if CMOS is wall time
1525f6a0ef01SWarner Losh	Also, when doing a major release upgrade, it is required that
1526f6a0ef01SWarner Losh	you boot into single user mode to do the installworld.
1527ee6e1fc3SWarner Losh
1528a6cd4f9dSWarner Losh	[4] Note: This step is non-optional.  Failure to do this step
1529a6cd4f9dSWarner Losh	can result in a significant reduction in the functionality of the
1530a6cd4f9dSWarner Losh	system.  Attempting to do it by hand is not recommended and those
1531a6cd4f9dSWarner Losh	that pursue this avenue should read this file carefully, as well
1532a6cd4f9dSWarner Losh	as the archives of freebsd-current and freebsd-hackers mailing lists
153350e8eca6SDoug Barton	for potential gotchas.  The -U option is also useful to consider.
153450e8eca6SDoug Barton	See mergemaster(8) for more information.
1535a6cd4f9dSWarner Losh
1536835284beSWarner Losh	[5] Usually this step is a noop.  However, from time to time
1537835284beSWarner Losh	you may need to do this if you get unknown user in the following
1538835284beSWarner Losh	step.  It never hurts to do it all the time.  You may need to
1539835284beSWarner Losh	install a new mergemaster (cd src/usr.sbin/mergemaster && make
1540835284beSWarner Losh	install) after the buildworld before this step if you last updated
154120e0cc0aSBrooks Davis	from current before 20130425 or from -stable before 20130430.
1542835284beSWarner Losh
154394877c06SAlexander Leidinger	[6] This only deletes old files and directories. Old libraries
154494877c06SAlexander Leidinger	can be deleted by "make delete-old-libs", but you have to make
154594877c06SAlexander Leidinger	sure that no program is using those libraries anymore.
154694877c06SAlexander Leidinger
1547456b5dd8SWarner Losh	[8] In order to have a kernel that can run the 4.x binaries needed to
1548456b5dd8SWarner Losh	do an installworld, you must include the COMPAT_FREEBSD4 option in
1549456b5dd8SWarner Losh	your kernel.  Failure to do so may leave you with a system that is
1550456b5dd8SWarner Losh	hard to boot to recover. A similar kernel option COMPAT_FREEBSD5 is
1551456b5dd8SWarner Losh	required to run the 5.x binaries on more recent kernels.  And so on
1552456b5dd8SWarner Losh	for COMPAT_FREEBSD6 and COMPAT_FREEBSD7.
1553c74fe6afSWarner Losh
1554e5dc5f61SWarner Losh	Make sure that you merge any new devices from GENERIC since the
1555e5dc5f61SWarner Losh	last time you updated your kernel config file.
1556e5dc5f61SWarner Losh
155721c075eaSWarner Losh	[9] When checking out sources, you must include the -P flag to have
1558e5dc5f61SWarner Losh	cvs prune empty directories.
1559e5dc5f61SWarner Losh
1560e5dc5f61SWarner Losh	If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1561e5dc5f61SWarner Losh	"?=" instead of the "=" assignment operator, so that buildworld can
1562e5dc5f61SWarner Losh	override the CPUTYPE if it needs to.
1563e5dc5f61SWarner Losh
1564e5dc5f61SWarner Losh	MAKEOBJDIRPREFIX must be defined in an environment variable, and
1565e5dc5f61SWarner Losh	not on the command line, or in /etc/make.conf.  buildworld will
1566e5dc5f61SWarner Losh	warn if it is improperly defined.
1567dc0dbf5cSWarner LoshFORMAT:
1568dc0dbf5cSWarner Losh
1569f699bbbbSMark OvensThis file contains a list, in reverse chronological order, of major
1570630f2154SGlen Barberbreakages in tracking -current.  It is not guaranteed to be a complete
15719c80b8aaSWarner Loshlist of such breakages, and only contains entries since September 23, 2011.
1572630f2154SGlen BarberIf you need to see UPDATING entries from before that date, you will need
1573630f2154SGlen Barberto fetch an UPDATING file from an older FreeBSD release.
15741fc1a0dcSWarner Losh
1575e72fd46aSWarner LoshCopyright information:
1576e72fd46aSWarner Losh
1577456b5dd8SWarner LoshCopyright 1998-2009 M. Warner Losh.  All Rights Reserved.
1578e72fd46aSWarner Losh
1579772730c7SWarner LoshRedistribution, publication, translation and use, with or without
1580772730c7SWarner Loshmodification, in full or in part, in any form or format of this
15819698f2c0SWarner Loshdocument are permitted without further permission from the author.
1582e72fd46aSWarner Losh
1583e72fd46aSWarner LoshTHIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1584e72fd46aSWarner LoshIMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1585e72fd46aSWarner LoshWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1586e72fd46aSWarner LoshDISCLAIMED.  IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1587e72fd46aSWarner LoshINDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1588e72fd46aSWarner Losh(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1589e72fd46aSWarner LoshSERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1590e72fd46aSWarner LoshHOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1591e72fd46aSWarner LoshSTRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1592e72fd46aSWarner LoshIN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1593e72fd46aSWarner LoshPOSSIBILITY OF SUCH DAMAGE.
1594e72fd46aSWarner Losh
159522306abcSWarner LoshContact Warner Losh if you have any questions about your use of
1596772730c7SWarner Loshthis document.
1597772730c7SWarner Losh
159897d92980SPeter Wemm$FreeBSD$
1599