1Updating Information for FreeBSD current users 2 3This file is maintained and copyrighted by M. Warner Losh 4<imp@village.org>. See end of file for further details. For commonly 5done items, please see the COMMON ITEMS: section later in the file. 6 7NOTE TO PEOPLE WHO THINK THAT 5.0-CURRENT IS SLOW: 8 FreeBSD 5.0-CURRENT has many debugging features turned on, in 9 both the kernel and userland. These features attempt to detect 10 incorrect use of system primitives, and encourage loud failure 11 through extra sanity checking and fail stop semantics. They 12 also substantially impact system performance. If you want to 13 do performance measurement, benchmarking, and optimization, 14 you'll want to turn them off. This includes various WITNESS- 15 related kernel options, INVARIANTS, malloc debugging flags 16 in userland, and various verbose features in the kernel. Many 17 developers choose to disable these features on build machines 18 to maximize performance. 19 20 In addition, IDE write caching is currently disabled by default 21 due to on-going concerns about disk write order and file system 22 integrity. Re-enabling write caching can substantially improve 23 performance. 24 2520020520: 26 Due to a compiler upgrade, the set of warnings has changed, 27 resulting in new compile failures when -Werror is set 28 inappropriately. While the set of warnings is adjusted and 29 fixed, it is recommended that you place "NO_WERROR=yes" on 30 the make line for buildworld/buildkernel, or in /etc/make.conf 31 if appropriate. 32 3320020511: 34 The k5su utility installed as part of Kerberos 5 is no longer 35 installed with the set-user-ID bit set by default. Add 36 ENABLE_SUID_K5SU=yes to /etc/make.conf to have it installed 37 with the set-user-ID bit set. 38 3920020510: 40 Due to the way CVS works, it may not properly update src/contrib/gcc 41 to the 3.1 sources. The easiest fix is to `rm -rf' src/contrib/gcc 42 and then do a cvs update. 43 4420020421: 45 When exec'ing set[ug]id executables, the kernel now ensures that the 46 stdio file descriptors (0..2) are open. See FreeBSD-SA-02:23.stdio. 47 4820020404: 49 New sendmail startup scripts have been installed to make it 50 easier to use alternative MTAs with FreeBSD. Setting the rc.conf 51 variable sendmail_enable to "NO" no longer prevents any sendmail 52 daemons from starting. Instead, either set sendmail_enable to 53 "NONE" or change mta_start_script to a script for starting 54 an alternative MTA. Setting mta_start_script to "" will 55 also prevent any MTA from being started at boot. 56 5720020403: 58 UCONSOLE is no longer a valid kernel option. 59 6020020315: 61 FreeBSD 5.0 DP-1 was basically branched today. 62 6320020225: 64 Warnings are now errors in the kernel. Unless you are a developer, 65 you should add -DNO_WERROR to your make line. 66 6720020217: 68 sendmail 8.12.2 has been imported. The sendmail binary is no 69 longer a set-user-ID root binary and the infrastructure to support 70 command line mail submission has changed. Be sure to run 71 mergemaster (especially for updating /etc/rc, /etc/defaults/rc.conf, 72 and /etc/mail) and read /etc/mail/README for more details. 73 74 Due to the import of sendmail 8.12.2, a new user and group are 75 required in order for sendmail to run as a set-group-ID 76 binary. A 'make installworld' will use the new user and group 77 to set the owner and group of /var/spool/clientmqueue and will 78 fail if the new user and group do not exist. The 'smmsp' user 79 and group must be merged from src/etc/group and 80 src/etc/master.passwd before using 'make installworld'. 81 'mergemaster -p' will do this. You may need to install 82 mergemaster before this will work if you are updating from a 83 very old version of current. The updating recipe has changed 84 as of this date. 85 8620020112: 87 The preferred configuration method for PAM is now /etc/pam.d/ 88 rather than /etc/pam.conf. If you have an unmodified 89 pam.conf, just delete it after your next mergemaster run. If 90 you have local modifications, you can use 91 /usr/src/etc/pam.d/convert.pl to incorporate them into your 92 /etc/pam.d. 93 94 Please see the following url for more details: 95http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<xzp6667fyoa.fsf@flood.ping.uio.no> 9620011229: 97 If anyone here is already using the new rc.conf(5) variable 98 networkfs_types, please note that it has changed 99http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<9744.1009655556@axl.seasidesoftware.co.za> 100 10120011220: 102 sys/i4b/driver/i4b_ispppsubr.c has been retired. This file 103 started out its life in the ISDN4BSD project as an offspring 104 from sys/net/if_spppsubr.c, which eventually got a life of its 105 own. All the accumulated features and bugfixes of the i4b 106 version have now been merged back into the base system's 107 version now. The only user-visible change resulting from this 108 is that i4b's sppp(4) interfaces are to be managed with 109 spppcontrol(8) again, since ispppcontrol(8) has been retired 110 as well. (There has never been rc file support for 111 ispppcontrol in -current, but only in -stable. That will be 112 reverted by the time the changes are MFCed.) 113 11420011215: 115 The fdc(4) driver has been updated and now automatically 116 recognizes media in `standard' formats (like 1440 KB and 117 720 KB for a 3.5" high-density drive) when accessing the 118 default device node (e. g. /dev/fd0). The old variety of 119 floppy device nodes /dev/fd*.* is no longer present by 120 default, devices can be created (in DEVFS) on demand. They 121 will need to be customized then for `odd' densities using 122 fdcontrol(8). 123 12420011209: 125 The bugs in procfs' debugging support code have been fixed, 126 and truss(1) now works again. 127 12820011207: 129 Daily security checks have been split out to use the periodic(8) 130 scripts. Some change in configuration may be necessary. Please 131 see 132http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<20011207155805.R8975@blossom.cjclark.org> 133 for details. 134 13520011204: 136 sos added VCD/SVCD support to ata driver and that needs the 137 kernel and burncd to be in sync. 138 13920011203: 140 The procfs pseudo-filesystem has now been converted to use the 141 pseudofs framework. If you have 'options PROCFS' in your 142 kernel config, you'll need to add 'options PSEUDOFS' if it's 143 not there already. 144 145 This change temporarily breaks truss(1); use ktrace(1) instead 146 until the issue has been resolved. 147 14820011202: 149 A security hole in OpenSSH involving `UseLogin yes' has been 150 patched. 151 15220011126: 153 You need to remove /usr/obj/.../usr.bin/tip before rebuilding 154 after this date. You need to do this only once. 155 15620011103: 157 Most of the awk issues have been resolved. Some rough 158 edges may be left, but for the most part things should be 159 back to "normal." For CURRENT's usual definition of "normal." 160 16120011030: 162 Awk has been upgraded to the one true awk from bell labs. Expect 163 choppy waves in the upgrade process. 164 16520011030: 166 The asr driver problem has been resolved. 167 16820011027: 169 Due to changes in other parts of the system, the asr driver 170 now causes the system to panic on boot. Do not use it pending 171 correction. Comment it out of any kernel config file that you 172 try to use from this date forward. 173 17420011025: 175 When crossbuilding, use TARGET=xxx where you used to use 176 MACHINE=xxx. You don't need to set TARGET_ARCH and TARGET, 177 unless you are changing both of them. To cross build pc98 on 178 an alpha, for example, you need to set TARGET=pc98 and 179 TARGET_ARCH=i386. 180 18120011001: 182 The kernel interface that burncd depends on has changed. 183 You must recompile both the kernel and userland applications 184 at the same time. 185 18620010929: 187 When crossbuilding, please set TARGET_ARCH rather than 188 MACHINE_ARCH to indicate the target. In the future, one will 189 set TARGET_MACHINE where you set MACHINE now. At the moment, 190 setting MACHINE alone for same MACHINE_ARCH machines works 191 (eg, you can build pc98 on a i386 machine and vice versa). 192 19320010927: 194 Some weird problems result from using ACPI on some machines. 195 To disable ACPI you can add 196 hint.acpi.0.disable="1" 197 to /boot/loader.conf (or by putting set X=Y at the boot 198 loader "ok" prompt). 199 200 Alternatively, you can remove it from /boot/kernel/acpi.ko 201 or use the MODULES_OVERRIDE function in your kernel config 202 file and not list acpi in that list. 203 20420010924: 205 The buildworld has been fixed. You may need to install 206 the 4.x compatibility libraries for some old binaries 207 to work. Add COMPAT4X=true to your /etc/make.conf to 208 get them installed on every installworld, or execute the 209 following to get them installed only once: 210 cd src/lib/compat/compat4x.<arch> 211 make all install 212 You will see ``__stdoutp undefined'' until you do this. 213 21420010919: 215 There's a bug in the world build process. The cross-tools 216 are build with the NEW headers, but the OLD libc.a. This 217 leads to all kinds of problems with the new libc. A temporary 218 workaround is to add 219 CFLAGS="-O -pipe -D_OLD_STDIO" 220 before building world when upgrading from 4.x to current. This 221 can be removed afterwards. 222 223 A proper fix to the buildworld target is needed. 224 22520010918: 226 Peter has committed his new kthread nfs client/server code. 227 NFS may be unstable after this date. 228 22920010912: 230 KSE has hit the tree. Lots of things are now different in 231 the kernel. While a few problems were introduced in the 232 initial commit, most of the major ones have been found and 233 corrected. 234 23520010901: 236 In OLDCARD, CardBus bridges appear to be stable. The work 237 arounds described in the 20010604 entry are now no longer 238 necessary and will be ignored. Most insert/remove problems 239 have been rectified around this date. 240 24120010823: 242 named now runs as user bind and group bind rather than as 243 root. If named_enable is set to YES in /etc/rc.conf, ensure 244 that user bind is available in /etc/passwd (using vipw(8)) 245 and that group bind is available in /etc/group. Also make 246 sure that user or group bind has read (and not write) 247 permission for your name server configuration and that it 248 has read and write permission for your slave zone files and 249 directory. 250 251 If you wish to continue to run named as root (a less secure 252 alternative), add a line to /etc/rc.conf saying 253 254 named_flags= 255 25620010709: 257 The PAM libraries have had an API upgrade that is beyond 258 the ability of the shared library major number to handle. 259 It is manifested by PAM-using ports dumping core. The 260 solution is to rebuild those ports. 261 26220010628: 263 The kernel compile module has moved from src/sys/compile/FOO 264 to src/sys/${MACHINE}/compile/FOO. 265 26620010625: 267 The pccard modem issue from 20010613 has been corrected. 268 OLDCARD support is still a little weak in -current. slot 1 is 269 known not to work on some TI based cardbus bridges. Some 270 cardbus bridges do not properly detect insert/removal events. 271 IRQ configuration needs more safety belts. 272 27320010617: 274 Softupdates problems have been corrected. 275 27620010614: 277 Peter ripped out the linkerset support. You must, as always, 278 rerun config after you cvsup if you are using the traditional 279 kernel building methods. 280 28120010613: 282 pccard modems may not work with current after 20010604 date. Some 283 do, others result in panics. *MAKE*SURE* that you update your 284 config and /etc/rc.conf ala the 20010604 entry, or you will have 285 problems (this issue will be fixed, it just hasn't been yet). 286 28720010613: 288 SOFTUPDATES seem to be broken since the middle of May or so. Do not 289 use them in current. You can disable softupdates on all mounted 290 partitions, or remove SOFTUPDATES the kernel config file. 291 29220010612: 293 After Peter's commits to the hints code, people have been noticing 294 that certain devices are attached (or try to) twice. This is due 295 to having both static hints as well as a /boot/device.hints. To 296 work around this issue, please use only one or the other mechanism 297 until this bug is fixed. 298 299 Please note that a feature of config is that if you have config 300 file FOO and FOO.hints, it automatically adds FOO.hints to the 301 hints.c file, wheather you want it to or not. 302 30320010610: 304 Locale names have changed to match other systems better. 305 30620010604: 307 pccard support for pci cards has been committed. You must change 308 your /etc/pccard.conf irq lines. It must match the irq used by 309 pcic device. Interrupt storms may result if you fail to do this. 310 Interrupt storms look a lot like a hang. 311 312 You must also install a new pccardd, otherwise you will get an 313 interrupt storm at card reset time (just after it tells you what 314 it is). 315 316 pccardd_flags="-I" is necessary for the time being. It tells pccardd 317 not to ask the kernel if the interrupt is really free or not before 318 using it. You can either change the /etc/pccard.conf irq lines to 319 match pcic, or add "-i X" to the pccardd_flags. 320 32120010530: 322 INSTALL=install -C is being deprecated. If you want to do this, 323 use COPY=-C instead. The former method will be supported for only 324 a limited time. If you see 325 326install: warning: the -d and -C options may not be specified together 327 328 in your makeworld, then you need to migrate towards using 329 COPY=-C. 330 33120010525: 332 It appears that vm is now stable enough to use again. However, 333 there may be other problems, so caution is still urged. alpha 334 definitely is in bad shape. 335 33620010521: 337 Minor repo damange has happened. This may cause problems 338 with cvsup of ports. If you get errors, please see 339 http://www.FreeBSD.org/cgi/query-pr.cgi?pr=27495 340 at the bottom for details on a workaround. The error message 341 is 342Updater failed: Cannot delete "/usr/ports/www/jakarta-tomcat/files": Directory not empty 343 34420010520: 345 Vm and/or swapping are busted on -current. Please be patient. 346 34720010519: 348 pccard has had much reorganizational work done to it over 349 the past few days. Everything should still work, but if 350 not, please contact imp@freebsd.org. 351 35220010517: 353 ata ioctl changed. Make sure to recompile both kernel and 354 userland at the same time. 355 35620010517: 357 New ncurses imported. 358 35920010512: 360 DEVFS is now opt out, not opt in. Barring major problems, this 361 will be the only way to go starting July 1. 362 36320010504: 364 OpenSSH has been updated to 2.9. Some defaults are different, 365 including RhostsRSAAuthentication, which changes from yes to no. 366 36720010502: 368 Perl breakage in 20010501 was corrected at 14:18:33 PDT. 369 37020010501: 371 Building perl was broken at 02:25:25 PDT. 372 37320010430: 374 The bug in 20010429 was corrected at 07:35:37 PDT. It is safe to 375 go back in the water. 376 37720010429: 378 A bad bug was committed at 04:48:42 PDT. Don't use kernels after 379 this date, but before the correction date. 380 38120010423: 382 old fsck and new kernel interactions appear to have been fixed. 383 38420010411: 385 fsck and the kernel were changed to handle some optimizations 386 to directory layout. This breaks backward compatibility. 387 Update only if you understand that you must not use the old 388 fsck with the new kernel ever. 389 39020010330: 391 fsck has changed the meaning of the pass column in /etc/fstab. 392 Please see the cvs commit to fsck.8 or the fsck.8 man page for 393 details. It is unclear if changes to /etc/fstab are necessary. 394 39520010319: 396 portmap had changed name to rpcbind for maximum POLA in your 397 current world. /etc/hosts.{allow,deny} needs changes. nfs and 398 other rpc based programs that rely on portmapper will not work 399 without updates to /etc/hosts.{allow,deny} and /etc/netconfig. 400 40120010315: 402 ata subsystem changes. ATA_ENABLE_ATAPI_DMA, ATA_ENABLE_WC 403 and ATA_ENABEL_TAGS are no longer kernel options. They have 404 been replaced by tunables. See ata.4 for details. 405 40620010312: 407 The fxp driver was converted to use miibus. If you compile 408 fxp into your kernel statically, you will need to add miibus. 409 41020010312: 411 The wi device now defaults to BSS (infrastructure) mode 412 instead of ad-hoc. 413 41420010310: 415 /dev/urandom should be a symbolic link to /dev/random now. 416 Users of current not using DEVFS need to run MAKEDEV std. 417 ssh might not work if you don't. 418 41920010303: 420 The ed driver has been updated. It now allows mii attachments, 421 which means that you must include the miibus in your kernel if 422 you use the ed driver. 423 42420010220: 425 The problems with libc have been corrected. It is now mostly 426 safe to go back into the water. 427 42820010211: 429 The size of FILE was changed. This breaks upgrading. If 430 you must upgrade, be prepared for pain. It also breaks almost 431 all binaries that you've compiled on -current. You are warned 432 that before upgrading would be a good time to do a level 0 433 dump of your system. No, really, I mean it this time. 434 435 To get to the new system, you'll need to use the following 436 workaround. Hopefully this can be sorted out so that we 437 don't have to move this to the updating section. 438 439 To get around the installworld problem, do: 440 # cd /usr/src/usr.bin/sed 441 # make install 442 # cd /usr/src 443 # make installworld 444 If that doesn't work, then try: 445 # make -k installworld 446 # make installworld 447 44820010207: 449 DEVFS is now the default. If you use vinum, make sure that you 450 do not include devfs in your kernel as problems result. 451 45220010205: 453 FFS_ROOT and CD9660_ROOT have been removed or deprecated. 454 Remove them from your config. 455 45620010122: 457 ****************************** WARNING ****************************** 458 buildkernel has been changed slightly 459 ****************************** WARNING ****************************** 460 KERNCONF replaces the variable KERNEL for buildkernel. You 461 should update your scripts and make.conf accordingly. 462 46320010119: 464 config has changed to allow DEV_FOO as a replacement for NFOO. 465 This requires a new config to build correctly. 466 46720010116: 468 The kerrnel option I386_CPU is now mutually exclusive with the 469 other cpu types. If you have an i386 system, be sure that it 470 only had this line. Remove it for all other configurations. 471 47220010110: 473 Changes to the kernel require it and burncd be in sync. 474 47520010102: 476 Everyone who has hw.sndunit set to something in 477 /etc/sysctl.conf, it is now hw.snd.unit. 478 47920010101: 480 ex and vi were broken by some changes to sys/queue.h. If you 481 have a bad vi, you will see make buildworld fail with a core 482 dump while building termcap. You can work around this problem 483 by adding -k to your make buildworld. This will cause the 484 build to complete and install a new vi. Once that's done, you 485 can rebuild again without the -k to pick up anything that 486 might have been ignored by the -k option. 487 488 Others have suggested that you can just rebuild libc if your 489 vi/ex is dynamically linked, but I've not received any reports 490 of this working. 491 49220001228: 493 There have been some changes to libcrypt in -current. The 494 libscrypt/libdescrypt symlink sillyness is gone and the installed 495 libcrypt is fully functional. Be aware of this. 496 49720001218: 498 Linksys Fast Ethernet PCCARD cards supported by the ed driver 499 now require the addition of flag 0x80000 to their config line 500 in pccard.conf(5). This flag is not optional. These Linksys 501 cards will not be recognized without it. 502 50320001205: 504 Important new FreeBSD-version stuff: PAM support has been worked 505 in, partially from the "Unix" OpenSSH version. This requires 506 adding the following in pam.conf: 507 508 sshd auth sufficient pam_skey.so 509 sshd auth required pam_unix.so try_first_pass 510 sshd session required pam_permit.so 511 51220001031: 513 cvs updated to 1.11. 514 51520001020: 516 The random device needs more entropy, so you need to make sure 517 that you've run mergemaster to get a /etc/rc which will seed 518 /dev/random. If you don't and the system hangs after ldconfig, 519 then banging on the keyboard randomly until it unhangs is one 520 workaround. 521 52220001010: 523 ****************************** WARNING ****************************** 524 Sendmail has been updated. 525 ****************************** WARNING ****************************** 526 o mail.local(8) is no longer installed as a set-user-id binary. 527 o sendmail(8) is now built with STARTTLS support unless NO_OPENSSL 528 is set. 529 o The default /etc/mail/sendmail.cf disables the SMTP EXPN and VRFY 530 commands. 531 o Now using sendmail's version of vacation(1). 532 o The sendmail cf building tools (contrib/sendmail/cf) are installed 533 in /usr/share/sendmail/cf. 534 o sendmail.cw changed to local-host-names 535 536 More details can be found at 537 http://people.freebsd.org/~imp/UPDATING/sendmail-20001010 538 53920001009: 540 The ports tree's new layout is in place. Be sure to update 541 your entire ports tree, or you will have problems. 542 54320001006: 544 The perl build procedure no longer installs miniperl, nor uses 545 the installed miniperl. It is recommended that you delete 546 /usr/bin/miniperl. 547 54820001005: 549 This weekend the ports tree will be updated to a new layout. 550 It will be in an inconsistent state until noted in the UPDATING 551 file, or with asami-san's message to the relevant mailing 552 lists. With this new layout, you'll need to update the whole 553 tree for anything to work. 554 55520000928: 556 There was a change in the passwd format. Need more information. 557 55820000916: 559 /boot/kernel/kernel.ko -> /boot/kernel/kernel change has taken 560 place. Please update boot loader (not the boot blocks) at the 561 same time as your kernel. 562 56320000914: 564 The new pmtimer device is necessary for laptops. Failure to 565 include the device will cause suspended laptops losing time 566 when they resume. Include 567 device pmtimer 568 in your config file and 569 hint.pmtimer.0.at="isa" 570 to your /boot/device.hints file. 571 57220000911: 573 The random device has been turned into a (pseudo-)device, 574 rather than an option. The supplied kernel config files have 575 been updated. You will need to do something similar in your 576 own kernel config file. 577 Remove: 578 options RANDOMDEV 579 Add: 580 device random 581 If you prefer to load the loadable module, you need to do 582 nothing. 583 58420000909: 585 The random device module has been renamed from randomdev.ko to 586 random.ko. You will need to edit your /boot/loader.conf to 587 reflect this if you load this module at boot time. 588 The line should read: 589 random_load="YES" 590 59120000907: 592 The SMPNG commit has happened. It should work, but if it 593 doesn't, fallback to the PRE_SMPNG CVS tag. There are likely 594 to be a variety of minor issues. Please see 20000905 to make 595 sure you don't have model loading problems which might at 596 first blush appear related to SMP. 597 59820000906: 599 nsswitch has been imported from NetBSD. Among other things, 600 this means that /etc/host.conf is no longer used. See 601 nsswitch.conf(5) instead. Note that at boot time rc.network 602 will attempt to produce a new nsswitch.conf file for you if you 603 don't have one, and you have host.conf. 604 60520000905: 606 The ucred structure changed size. This breaks the interface 607 that mountd uses. Trying to use an older mountd with a newer 608 kernel guarantees a panic. This means that you need to use 609 kernels newer than today only with matching mountd, but you 610 needed to do that anyway with the boot loader changes. 611 61220000905: 613 The boot loader has been updated. The new default kernel is 614 now /boot/kernel/kernel.ko. The new default module location 615 is /boot/kernel. 616 617 You *MUST* upgrade your boot loader and kernel at the same time. 618 The easiest way to do this is to do the buildworld/buildkernel/ 619 installkernel/installworld dance. 620 621 Furthermore, you are urged to delete your old /modules directory 622 before booting the new kernel, since kldload will find stale 623 modules in that directory instead of finding them in the correct 624 path, /boot/kernel. The most common complaint that this cures 625 is that the linux module crashes your machine after the update. 626 627 if [ ! -d /boot/kernel.old ]; then 628 mv /modules.old /boot/kernel.old 629 chflags noschg /kernel.old 630 mv /kernel.old /boot/kernel.old/kernel.ko 631 chflags schg /boot/kernel.old/kernel.ko 632 fi 633 63420000904: 635 A new issue with the sendmail upgrade has come to light. 636 /etc/aliases has moved to /etc/mail/aliases. Mergemaster will 637 incorrectly install the default aliases in /etc/mail rather than 638 move the old one from /etc. So you'll need to manually move the 639 file, create a symbolic link, remove the old /etc/aliases.db and 640 run newaliases. For safety sake, you should stop sendmail 641 while doing this and run the upgrade when locally sourced email 642 is not likely to be generated. 643 64420000825: 645 /boot/device.hints is now required for installkernel to 646 succeed. You should copy GENERIC.hints for your architecture 647 into /boot/device.hints. If and only if you compile hints 648 into your kernel, then this file may be empty. Please note, 649 if you have an empty or missing /boot/device.hints file and 650 you neglected to compile hints into your kernel, no boot 651 messages will appear after the boot loader tries to start the 652 kernel. 653 65420000821: 655 If you do NOT have ``options RANDOMDEV'' in your kernel and 656 you DO want the random device then add randomdev_load="YES" to 657 /boot/loader.conf. 658 65920000812: 660 suidperl is now always built and installed on the system, but 661 with permissions of 511. If you have applications that use 662 this program, you are now required to add ENABLE_SUIDPERL=true 663 to /etc/make.conf. If you forget to do this, 664 chmod 4511 /usr/bin/suidperl 665 will fix this until the next build. 666 66720000812: 668 sendmail has been updated from 8.9.3 to 8.11.0. Some of the more 669 visible changes that may immediately affect your configuration 670 include: 671 - New default file locations from src/contrib/sendmail/cf/README 672 - newaliases limited to root and trusted users 673 - MSA port (587) turned on by default 674 - New queue file naming system so can't go from 8.11 -> 8.9 675 - FEATURE(`rbl') renamed to FEATURE(`dnsbl') 676 - FEATURE(`nullclient') is more full featured 677 - FEATURE(`nouucp') requires an argument: `reject' or `nospecial' 678 - mail.local FreeBSD-only -b option changed to -B 679 - See src/contrib/sendmail/RELEASE_NOTES for more info 680 68120000810: 682 suidperl (aka sperl) is no longer build by default. You must 683 specifically define BUILD_SUIDPERL to "true" for it to be build. 684 Furthermore, we recommend that you remove /usr/bin/sperl* and 685 /usr/bin/suidperl files from your system unless you have a 686 specific use for it. 687 68820000729: 689 Networking defaults have been tightened. Anybody upgrading 690 /etc/defaults/rc.conf needs to add the following lines to 691 /etc/rc.conf if they want to have the same setup 692 afterwards (unless the variables already are set, of course): 693 # Enable network daemons for user convenience. 694 inetd_enable="YES" 695 portmap_enable="YES" 696 sendmail_enable="YES" 697 69820000728: 699 If you have null_load="YES" in your /boot/loader.conf, you 700 will need to change that to nullfs_load="YES". 701 70220000728: 703 The "installkernel" target has changed slightly. Now even if 704 you override KERNEL e.g. 'make installkernel KERNEL=MYKERNEL' 705 it will install the MYKERNEL file (built with the buildkernel 706 target) as /kernel rather than /MYKERNEL. Those who have 707 updated their /boot/loader.conf files to point to /MYKERNEL 708 should remove that entry or perform manual rename of /kernel 709 to /MYKERNEL. 710 71120000711: 712 If you use CVSUP or CTM to get CVS trees, AND you used to get 713 the old crypto files from internat.freebsd.org AND you check 714 out files from the CVS tree with the cvs command, please read 715 http://people.freebsd.org/~imp/internat.txt 716 for details on potential problems that you might have and how 717 to get around them. 718 719 If you are merely a mirror, or don't answer yes to each of the 720 clauses above, you needn't worry. 721 72220000711: 723 /etc/security has been updated to print the inode number of 724 setuid programs that have changed. You will see a large spike 725 in the number of changed programs the first time when you run 726 mergemaster to get a new /etc/security. 727 72820000710: 729 /dev/random now has good entropy collection (from the keyboard 730 and sysmouse drivers). Please ensure that either `options 731 RANDOMDEV' is present in your kernel config file or that 732 `randomdev_load="YES"' is in your /boot/loader.conf. If you do 733 not have the /dev/random driver, OpenSSL (and consequently 734 lots of crypto tools (like SSH)) will fail with strange 735 errors. (see below, 20000624). 736 737 FreeBSD-current is safe again to run Crypto. 738 73920000709: 740 phk made the malloc default options AJ. This may slow things 741 down and uncover other latent bugs in the code. If you need to 742 run at full speed, you can disable this by doing the following: 743 ln -s aj /etc/malloc.conf 744 74520000706: 746 libftpio's version was accidentally bumped a few days ago. This 747 has been corrected. You may need to remove /usr/lib/libftpio.so.6 748 before doing your next buildworld/installworld pair. It certainly 749 won't hurt to remove it before the update procedure. It will 750 break fetch until a new one is built, but ftp can be used in the 751 interim if needed. 752 75320000705: 754 The crypto packages have changed for the cvsup. This has been done 755 in a backward compatible way, but the old packages will go away at 756 some point in the future. Look at /usr/share/examples/cvsup for 757 details. 758 75920000704: 760 With the new sys/modules/sound/drivers/*, you will need to 761 set SYSDIR until you do an installworld after July 7th. 762 76320000704: 764 rc.shutdown and rc will now call the rc.d scripts with start 765 or stop. This may cause some harmless warnings from older 766 rc.d scripts that haven't been updated. 767 76820000630: 769 The libfetch based version of fetch has gone into the tree. 770 Minor problems may result on some of the less popular sites, 771 which should be reported to des@freebsd.org. 772 77320000625: 774 From approximately this date forward, one must have the crypto 775 system installed in order to build the system and kernel. 776 While not technically strictly true, one should treat it as 777 required and grab the crypto bits. If you are grabbing CVS 778 trees, src-all and cvs-crypto should be treated as if they 779 were required. You should check with the latest collections 780 to make sure that these haven't changed. 781 78220000624: 783 Mark Murray just committed the first parts of a cleanup of 784 /dev/zero, et al. This is also cleaning up /dev/random. 785 The entropy is disconnected, so DO NOT USE VERSIONS OF FREEBSD 786 -CURRENT FROM THIS POINT to 2000710 for cryptographic services 787 until Mark can merge in the fixes to this work in progress. 788 openssh and openssl should not be used to generate keys from this 789 date to the completion of the work. 790 791 If you must operate at this reduced level of security, add ' 792 options RANDOMDEV' to your kernel or modload the randomdev 793 module. You may also need to copy a new MAKEDEV to /dev and 794 recreate the random and urandom devices. 795 79620000622: 797 The license on the softupdates is now a standard 2 clause 798 BSD license. You may need to remove your symbolic links 799 that used to be required when updating. 800 80120000621: 802 Scott Flatman <sf@aracnet.com> sent in a decent write-up on 803 the config file update procedure. 804 http://people.freebsd.org/~imp/config-upd.html 805 NOTE: LINT is gone. It has been replaced with NOTES. NOTES 806 isn't buildable. However, you can generate a LINT file. 807 80820000620: 809 Binutils 2.10 have hit the tree, or will shortly. As soon 810 as they do, the problem noted in 20000522 will be resolved and 811 that workaround will no longer be required. 812 81320000615: 814 phk removed the compatibility creation of wd devices in the 815 ad driver. If you haven't done so already, you must update 816 your fstab, etc to use the ad devices instead of the wd 817 devices. 818 819 In addition, you'll need to update your boot blocks to a 820 more modern version, if you haven't already done so. Modern 821 here means 4.0 release or newer (although older releases 822 may work). 823 82420000612: 825 Peter took an axe to config(8). Be sure that you read his mail 826 on the topic before even thinking about updating. You will 827 need to create a /boot/device.hints or add a hints directive 828 to your config file to compile them in statically. The format 829 of the config file has changed as well. Please see GENERIC or 830 NEWCARD for examples of the new format. 831 832 Indirectly, this also breaks USERCONFIG. Unless a newer entry 833 says that it has been fixed, assume that must use the hints mechanism 834 in the loader if you need to use a machine with very old ISA cards 835 in it. 836 83720000522: 838 A new set of binutils went into the tree today. Anybody 839 building a kernel after this point is advised that they need 840 to rebuild their binutils (or better yet do a 841 buildworld/installworld) before building a new kernel. 842 843 Due to bugs in binutils, using malloc options (eg /etc/malloc.conf 844 or MALLOC_OPTIONS env var) J will cause ld to dump core. It 845 is recommended that you don't set this option until the problem 846 is resolved. 847 84820000513: 849 The ethernet drivers were all updated to clean up the BPF handling. 850 85120000510: 852 The problems with boot blocks on the alphas have been corrected. 853 This will require some care in updating alphas. A new libstand 854 is requires for the boot blocks to build properly. 855 85620000503: 857 Recompile all kld modules. Proper version dependency info 858 is now available. 859 86020000502: 861 Modules have been disconnected from the buildworld tree and 862 connected to the kernel building instead. 863 86420000427: 865 You may need to build gperf 866 cd /usr/src/gnu/usr.bin/gperf && make depend all install 867 when upgrading from 4.0 -> current. The build system now uses 868 an option only in -current. 869 87020000417: 871 The method that we brand ELF binaries has changed to be more 872 acceptable to the binutils maintainers. You will need to 873 rebrand your ELF binaries that aren't native. One problem 874 binary is the Linux ldconfig. After your make world, but 875 before you reboot, you'll need to issue: 876 brandelf -t Linux /compat/linux/sbin/ldconfig 877 if you have Linux compatibility enabled on your machine. 878 87920000320: 880 If you have really bad/marginal IDE drives, you may find they 881 don't work well. Use pio mode instead. The easiest way to 882 cope if you have a problem combination is to add: 883 /sbin/sysctl hw.ata.ata_dma=0 884 to the start of /etc/rc.conf. 885 88620000319: 887 The ISA and PCI compatibility shims have been connected to the 888 options COMPAT_OLDISA and COMPAT_OLDPCI. If you are using old 889 style PCI or ISA drivers (i.e. tx, voxware, etc.) you must 890 include the appropriate option in your kernel config. Drivers 891 using the shims should be updated or they won't ship with 892 5.0-RELEASE, targeted for 2001. 893 89420000318: 895 We've entered the traditional post release dumping party. 896 Large kernel changes are being committed and are in the 897 works. It is important to keep the systems' klds and kernel 898 in sync as kernel interfaces and structures are changing. 899 Before reporting kernel panics, make sure that all modules 900 that you are loading are up to date. 901 90220000315: 903 If you are upgrading from an older version of FreeBSD, you 904 need to update your boot blocks as well. 'disklabel -B ad0' 905 will do the trick. This isn't critical until you remove your 906 wd device entries in /dev, at which point your system will not 907 boot. 908 90920000315: 910 4.0 RELEASE shipped. Please see the 4.0 UPDATING file for how 911 to upgrade to 4.0 from 3.x. 912 913COMMON ITEMS: 914 915 General Notes 916 ------------- 917 Avoid using make -j when upgrading. From time to time in the 918 past there have been problems using -j with buildworld and/or 919 installworld. This is especially true when upgrading between 920 "distant" versions (eg one that cross a major release boundary 921 or several minor releases, or when several months have passed 922 on the -current branch). 923 924 Sometimes, obscure build problems are the result of environment 925 poisoning. This can happen because the make utility reads its 926 environment when searching for values for global variables. 927 To run your build attempts in an "environmental clean room", 928 prefix all make commands with 'env -i '. See the env(1) manual 929 page for more details. 930 931 To build a kernel 932 ----------------- 933 If you are updating from a prior version of FreeBSD (even one just 934 a few days old), you should follow this procedure. With a 935 /usr/obj tree with a fresh buildworld, 936 make buildkernel KERNCONF=YOUR_KERNEL_HERE 937 make installkernel KERNCONF=YOUR_KERNEL_HERE 938 939 To just build a kernel when you know that it won't mess you up 940 -------------------------------------------------------------- 941 cd src/sys/{i386,alpha}/conf 942 config KERNEL_NAME_HERE 943 cd ../../compile/KERNEL_NAME_HERE 944 make depend 945 make 946 make install 947 948 If this fails, go to the "To build a kernel" section. 949 950 To rebuild everything and install it on the current system. 951 ----------------------------------------------------------- 952 make world 953 Build a new kernel, see above. 954 955 To upgrade from 4.x-stable to current 956 ------------------------------------- 957 make buildworld 958 make buildkernel KERNCONF=YOUR_KERNEL_HERE 959 cp src/sys/${MACHINE_ARCH}/conf/GENERIC.hints /boot/device.hints [2] 960 make installkernel KERNCONF=YOUR_KERNEL_HERE 961 reboot in single user [3] 962 mergemaster -p [5] 963 make installworld 964 mergemaster [4] 965 [1] 966 <reboot> 967 968 Make sure that you've read the UPDATING file to understand the 969 tweaks to various things you need. At this point in the life 970 cycle of current, things change often and you are on your own 971 to cope. The defaults can also change, so please read ALL of 972 the UPDATING entries. 973 974 Also, if you are tracking -current, you must be subscribed to 975 freebsd-current@freebsd.org. Make sure that before you update 976 your sources that you have read and understood all the recent 977 messages there. If in doubt, please track -stable which has 978 much fewer pitfalls. 979 980 [1] If you have third party modules, such as vmware, you 981 should disable them at this point so they don't crash your 982 system on reboot. 983 984 [2] If you have legacy ISA devices, you may need to create 985 your own device.hints to reflect your unique hardware 986 configuration. 987 988 [3] From the bootblocks, boot -s, and then do 989 fsck -p 990 mount -u / 991 mount -a 992 cd /usr/src 993 adjkerntz -i # if CMOS is wall time 994 Also, when doing a major release upgrade, it is required that 995 you boot into single user mode to do the installworld. 996 997 [4] Note: This step is non-optional. Failure to do this step 998 can result in a significant reduction in the functionality of the 999 system. Attempting to do it by hand is not recommended and those 1000 that pursue this avenue should read this file carefully, as well 1001 as the archives of freebsd-current and freebsd-hackers mailing lists 1002 for potential gotchas. 1003 1004 [5] Usually this step is a noop. However, from time to time 1005 you may need to do this if you get unknown user in the following 1006 step. It never hurts to do it all the time. You may need to 1007 install a new mergemaster (cd src/usr.sbin/mergemaster && make 1008 install) after the buildworld before this step if you last updated 1009 from current before 20020224 or from -stable before 20020408. 1010 1011FORMAT: 1012 1013This file contains a list, in reverse chronological order, of major 1014breakages in tracking -current. Not all things will be listed here, 1015and it only starts on March 15, 2000. Updating files can found in 1016previous releases if your system is older than this. 1017 1018Copyright information: 1019 1020Copyright 1998, 2002 M. Warner Losh. All Rights Reserved. 1021 1022Redistribution, publication, translation and use, with or without 1023modification, in full or in part, in any form or format of this 1024document are permitted without further permission from the author. 1025 1026THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR 1027IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 1028WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 1029DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT, 1030INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 1031(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 1032SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 1033HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 1034STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 1035IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 1036POSSIBILITY OF SUCH DAMAGE. 1037 1038If you find this document useful, and you want to, you may buy the 1039author a beer. 1040 1041Contact Warner Losh if you have any questions about your use of 1042this document. 1043 1044$FreeBSD$ 1045