1Updating Information for users of FreeBSD-CURRENT. 2 3This file is maintained and copyrighted by M. Warner Losh <imp@freebsd.org>. 4See end of file for further details. For commonly done items, please see the 5COMMON ITEMS: section later in the file. These instructions assume that you 6basically know what you are doing. If not, then please consult the FreeBSD 7handbook: 8 9 https://docs.freebsd.org/en/books/handbook/cutting-edge/#makeworld 10 11Items affecting the ports and packages system can be found in 12/usr/ports/UPDATING. Please read that file before updating system packages 13and/or ports. 14 15NOTE TO PEOPLE WHO THINK THAT FreeBSD 15.x IS SLOW: 16 FreeBSD 15.x has many debugging features turned on, in both the kernel 17 and userland. These features attempt to detect incorrect use of 18 system primitives, and encourage loud failure through extra sanity 19 checking and fail stop semantics. They also substantially impact 20 system performance. If you want to do performance measurement, 21 benchmarking, and optimization, you'll want to turn them off. This 22 includes various WITNESS- related kernel options, INVARIANTS, malloc 23 debugging flags in userland, and various verbose features in the 24 kernel. Many developers choose to disable these features on build 25 machines to maximize performance. (To completely disable malloc 26 debugging, define WITH_MALLOC_PRODUCTION in /etc/src.conf and rebuild 27 world, or to merely disable the most expensive debugging functionality 28 at runtime, run "ln -s 'abort:false,junk:false' /etc/malloc.conf".) 29 3020250827: 31 The names of pkg repositories defined in /etc/pkg/FreeBSD.conf have 32 changed: "FreeBSD" is now "FreeBSD-ports", and "FreeBSD-kmods" is now 33 "FreeBSD-ports-kmods". Users with /usr/local/etc/pkg/repos files 34 which override these will need to adjust their configuration to match 35 the new names. 36 3720250823: 38 The set of pkgbase packages for Kerberos and OpenSSL has changed. 39 After updating past 250e77d4f0a5, you should check 'pkg orphans' 40 and remove any orphaned packages, then examine the output of 41 'pkg install -r base -g FreeBSD-openssl\* FreeBSD-kerberos\*' 42 and install any new packages you need. 43 4420250823: 45 To restore bridge(4)'s ABI compatibility with ifconfig from 14.x or 46 earlier, the size of struct ifbreq has changed, so you must update 47 the kernel and /sbin/ifconfig at the same time or you will not be 48 able to add interfaces to bridge. This is particularly important 49 if you require bridge for network access during boot, in which case 50 you should install the new kernel and the new /sbin/ifconfig prior 51 to rebooting. 52 5320250820: 54 The WITHOUT_GSSAPI src.conf knob has been removed. This was already 55 a no-op for MIT Kerberos, so this only affects builds which set 56 WITHOUT_MITKRB5=1, in which case you now always get libgssapi. 57 58 Also, Heimdal's compile_et and libcom_err are now controlled by 59 WITHOUT_KERBEROS, not WITHOUT_KERBEROS_SUPPORT. This matches 60 the behaviour of the MIT Kerberos versions. 61 6220250820: 63 Commits 08c7dd2fbe4f and a4197ea47777 have changed the ABI between 64 libvmmapi and the vmm device. If using a custom kernel configuration, 65 please ensure that the COMPAT_FREEBSD14 option is included so older 66 versions of libvmmapi continue working as expected. 67 6820250819: 69 The CLEAN option has been switched back from default-on to default-off. 70 This reverts the 20250808 change below, which had reverted the 20240729 71 change before it. Note that some src.conf(5) options are known to break 72 ABI or compatibility in ways that may require a clean build initially 73 when switched. 74 7520250816: 76 Sendmail's libmilter has been moved to its own package. If you want 77 to compile applications that use libmilter, you should install the 78 FreeBSD-libmilter* packages. 79 80 If you only have FreeBSD-sendmail installed for applications that 81 require libmilter, you can now remove it. 82 8320250815: 84 The [gs]etgroups(2)syscalls have changed. To maintain backwards 85 compatibility with existing programs, you need COMPAT_FREEBSD14 in 86 your kernel config until all applications which use this are 87 rebuild/reinstalled. 88 8920250815: 90 jemalloc 5.3.0 has been committed to the tree. 91 9220250815: 93 The removal of Secure RPC DES authentication noted in 20250810 94 has been reverted. (However, it is still non-functional.) 95 9620250813: 97 Commit cce64f2e6851 changed the internal KAPI between the NFS 98 modules. As such, all of them need to be rebuilt from sources. 99 __FreeBSD_version has been bumped to 1500060 already today, 100 so I will not bump it again for this. 101 10220250813: 103 The gpiobus_attach_bus() function has been removed. Drivers should now 104 use the gpiobus_add_bus() function instead. The difference being that 105 gpiobus_add_bus() doesn't call bus_attach_children(), calling it will 106 be the responsibility of the caller now. 107 10820250810: 109 Support for Secure RPC DES authentication has been removed. 110 The keyserv(8) daemon was already removed, but support for it in libc 111 has also been removed, so if you somehow still had keyserv installed, 112 it will now stop working. There is no workaround for this. Removing 113 DES is considered a feature. 114 11520250808: 116 The CLEAN option has been switched back from default-off to 117 default-on. This reverts the 20240729 change below. 118 11920250807: 120 routed(8) and route6d(8) have moved to the FreeBSD-rip package. 121 If you use either of these, you should install the new package. 122 12320250806: 124 if_epair(4) now uses ether_gen_addr(9) to generate a stable MAC 125 address. 126 To keep using the random address, set the loader tunable 127 net.link.epair.ether_gen_addr=0. 128 12920250804: 130 bsdconfig (including sysrc(8)) has moved to the new bsdconfig 131 package. If you use pkgbase and wish to use bsdconfig, you should 132 install FreeBSD-bsdconfig. 133 13420250730: 135 The usbhid(4) USB HID driver is now enabled by default, and will be 136 used in preference to other USB HID drivers like ukbd(4), ums(4), and 137 uhid(4). Work on a FIDO/U2F driver and moused(8) is in progress. 138 The default is being switched now so that we can find and fix any 139 additional issues prior to FreeBSD 15.0. 140 141 To revert to the previous USB HID driver behavior, set the loader 142 tunable hw.usb.usbhid.enable=0. 143 14420250727: 145 bmake (i.e., /usr/bin/make and /usr/share/mk) has moved to a new 146 package, FreeBSD-bmake. If you use pkgbase and you need make, you 147 should install this package. 148 14920250726: 150 amd64 kernel configurations must contain "options SMP". 151 15220250725: 153 gssd(8) has been moved to a new package, FreeBSD-gssd. If you use 154 pkgbase and you need gssd, you should install this package. 155 15620250724: 157 The Kerberos packages which are built when WITH_MITKRB5 is enabled 158 have been renamed from FreeBSD-krb5* to FreeBSD-kerberos*. This 159 affects pkgbase users who manually enabled WITH_MITKRB5, *or* use 160 the default value of WITH_MITKRB5 and updated past c7da9fb90b0b 161 (20250721) which made WITH_MITKRB5 the default. 162 163 In either case, if you have FreeBSD-krb5* packages installed, you 164 should remove them and (re)install the equivalent FreeBSD-kerberos* 165 packages instead. 166 16720250721: 168 WITH_MITKRB5 is now enabled by default. MIT KRB5 has replaced 169 Heimdal in base. Ports that use USES=gssapi must be rebuilt. 170 A clean buildworld is required. 171 17220250719: 173 Commits 392a82b225 and c00baac0ab both changed the 174 internal API between the NFS modules. As such, all 175 these modules need to be rebuilt from sources. 176 __FreeBSD_version was bumped to 1500053 for this. 177 17820250710: 179 The shar(1) utility has been removed from base. The 180 sysutils/freebsd-shar port was created to maintain this version of 181 shar(1) past its removal from base. 182 18320250704: 184 LinuxKPI device.h and acpi changes effecting drivers and drm-kmod. 185 Bump __FreeBSD_version 1500050 to be able to detect these changes. 186 18720250630: 188 Commits 171f66b0c2ca and 8e2a90ac8089 changed the internal 189 api between nfscommon.ko and the other nfs modules. 190 Bump __FreeBSD_version to 1500049 for this. 191 All NFS related modules must be rebuilt from up-to-date 192 sources. 193 19420250625: 195 "make delete-old" will now remove the Forth bootloader entirely 196 if the system is built with WITHOUT_FORTH. 197 19820250614: 199 MIT KRB5 (MIT Kerberos5) has been imported into 15-CURRENT. To 200 and install MIT KRB5, add WITH_MITKRB5=yes to /etc/src.conf. This 201 will build and install MIT KRB5 1.21.3. And it will remove Heimdal 202 1.5.2 when delete-old and delete-old-libs are run. To revert back 203 simply buildworld/installworld again with delete-old-libs and 204 delete-old. 205 206 At the moment we only know of a couple of ports that might be 207 affected. Adjusting libmap.conf does not circumvent runtime issues. 208 The few affected ports must be rebuilt. A successful exp-run will be 209 run before MIT KRB5 becomes default. 210 211 Those using the KDC in FreeBSD base may wish to wait. The Heimdal 212 HDB is incompatible with the MIT KRB5 KDC. The migration procedure 213 is a little involved. 214 21520250603: 216 LinuxKPI dma-mapping.h were pulled into the tree from drm-kmod. 217 Bump _FreeBSD_version to 1500045 to be able to detect this change. 218 21920250527: 220 pf changed extension header handling. It now treats AH headers on IPv4 just 221 like AH headers on IPv6 and skips over them, allowing filtering on the inner 222 protocol. 223 22420250527: 225 pf now blocks IPv6 packets with a hop-by-hop or destination options header by 226 default. Such packets can be passed by adding "allow-opts" to the rule. IPv6 227 options are now handled just like their IPv4 counterparts. 228 22920250527: 230 The CAM target layer userland, i.e. ctld(8), ctladm(8) and ctlstat(8), 231 has moved to the new FreeBSD-ctl package. If you use pkgbase and you 232 need the CAM Target Layer, you should install the new package. 233 234 Development-related tools (e.g. ar and nm) have moved to the new 235 "FreeBSD-toolchain" package, which subsumes and obsoletes the 236 existing "FreeBSD-elftoolchain" package. If you use pkgbase and 237 need to compile software, you should install the new package and 238 ensure the old FreeBSD-elftoolchain* packages are completely removed. 239 24020250521: 241 Commit e64fe5ad3a23 removed in6_maxmtu and its setter in6_setmaxmtu(). 242 in6_maxmtu is used to store the max IPv6 MTU of all interfaces, 243 however it does not have any in-tree consumers since the introduction 244 from the KAME project. The removal should have little impact, and the 245 max IPv6 MTU can be easily retrieved by iterating over all the attached 246 interface if 3rd party modules need it. 247 24820250515: 249 Commit 772258c89f28 changed the internal API between the nfscommon 250 and nfscl modules. Both need to be built from updated sources. 251 25220250513: 253 The bridge(4) sysctl net.link.bridge.member_ifaddrs now defaults to 0, 254 meaning that interfaces added to a bridge may not have IP addresses 255 assigned. Refer to bridge(4) for more information. 256 25720250507: 258 UMASS quirks and auto-quirk probing has been overhauled. CAM now won't 259 send SYNCHRONIZE CACHE unless MODE PAGE 8 is present and valid. This 260 should allow more devices to work (since the auto quirk code was updated 261 in 14 and broke several e-readers and the like). Please send imp@freebsd.org 262 any regression reports. 263 26420250504: 265 Commit 9419e086e1a3 changed the internal API between the nfscommon 266 and nfscl modules. Both need to be built from updated sources. 267 26820250412: 269 LinuxKPI alloc routines were changed to return physically contiguous 270 memory where expected. These changes may require out-of-tree drivers 271 to be recompiled. 272 Bump __FreeBSD_version to 1500037 to be able to detect this change. 273 27420250409: 275 Intel iwlwifi firmware has been removed from the src repository. 276 Before updating their system, users of iwlwifi(4) or iwx(4) must 277 install the appropriate firmware for their chipset using fwget(8) or 278 building it from ports. 279 28020250314: 281 We now use LLVM's binary utilities (nm, objcopy, etc.) by default. 282 The WITHOUT_LLVM_BINUTILS src.conf(5) knob can be used to revert to 283 ELF Tool Chain tools if desired. 284 28520250303: 286 Commit 4a77657cbc01 changed the ABI between ipfw(8) and ipfw(4). 287 Please note that the old ipfw(8) binary will not work with the new 288 ipfw(4) module. Therefore, it is recommended to disable ipfw during 289 the upgrade, otherwise the host system may become inaccessible because 290 ipfw rules cannot be installed with the old binary. 291 29220250214: 293 Commit 4517fbfd4251 modified the internal API between the 294 nfscommon and nfscl modules. As such, both of these modules 295 need to be rebuilt from sources. 296 29720250201: 298 The NFS related daemons, that provide RPC services to the kernel: 299 gssd(8), rpcbind(8), rpc.tlsservd(8) and rpc.tlsclntd(8), now use a 300 different transport - netlink(4) socket instead of unix(4). Users of 301 NFS need to upgrade both kernel and world (binaries and libc) at once. 302 Also, any revision between 88cd1e17a7d8 and 99e5a70046da should be 303 avoided. 304 30520250129: 306 Defer the January 19, 2038 date limit in UFS1 filesystems to 307 February 7, 2106. This affects only UFS1 format filesystems. 308 See commit message 1111a44301da for details. 309 31020250127: 311 The Allwinner a10_timer driver has been renamed to aw_driver. If you 312 have a custom kernel configuration including the line 'device 313 a10_timer', it must be adjusted to 'device aw_timer'. The same applies 314 for device exclusions with 'nodevice'. 315 31620250106: 317 A new SOC_ROCKCHIP options appeared, so if you have a custom kernel configuration 318 targetting Rockchip SoC you need to add it so shared and mandatory drivers for 319 this SoC familly will be selected. 320 Also a new rk8xx device was added, this select the base driver for Rockchip PMIC. 321 32220241223: 323 The layout of NFS file handles for the tarfs, tmpfs, cd9660, and ext2fs 324 file systems has changed. An NFS server that exports any of these file 325 systems will need its clients to unmount and remount the exports. 326 32720241216: 328 The iwm(4) firmwares are no longer compiled as kernel modules but instead 329 shipped as raw files. For pkgbase users if you use iwm(4) you will need 330 to install the FreeBSD-firmware-iwm package. 331 33220241124: 333 The OpenBSD derived bc and dc implementations and the WITHOUT_GH_BC 334 option that allowed building them instead of the advanced version 335 imported more than 4 years ago have been removed. 336 33720241107: 338 The ng_ubt(4) driver now requires firmwares to be loaded on Realtek 339 adaptors with rtlbtfw(8) utility. It no longer attaches to devices 340 standing in bootloader mode. Firmware files are available in the 341 comms/rtlbt-firmware port. 342 34320241025: 344 The support for the rc_fast_and_loose variable has been removed from 345 rc.subr(8). Users setting rc_fast_and_loose on their systems are 346 advised to make sure their customizations to rc service scripts 347 do not depend on having a single shell environment shared across 348 all the rc service scripts during booting and shutdown. 349 35020241013: 351 The ciss driver was updated to cope better with hotplug events that 352 caused it to panic before, and to support more than 48 drives attached 353 to the card. These changes were made w/o benefit of hardware for testing 354 and ciss(4) users should be on the lookout for regressions. 355 35620240729: 357 The build now defaults to WITHOUT_CLEAN - i.e., no automatic clean 358 is performed at the beginning of buildworld or buildkernel. The 359 WITH_CLEAN src.conf(5) knob can be used to restore the previous 360 behaviour. 361 362 If you encounter incremental build issues, please report them to the 363 freebsd-current mailing list so that a special-case dependency can be 364 added, if necessary. 365 36620240715: 367 We now lean more heavily on ACPI enumeration for some traditional 368 devices. uart has moved from isa to acpi so the hints act as wiring 369 instead of device enumeration. Hints for parallel port, floppy, etc 370 have been removed. Before upgrading, grep your dmesg for lines like: 371 uart1: non-PNP ISA device will be removed from GENERIC in FreeBSD 15. 372 to see if you need to start including hints for the device on isa 373 in your loader.conf or device.hints file. APU1 (but not APU2) boards 374 are known to be affected, but there may be others. 375 37620240712: 377 Support for armv6 has been disconnected and is being removed. 378 37920240617: 380 ifconfig now treats IPv4 addresses without a width or mask as an error. 381 Specify the desired mask or width along with the IP address on the 382 ifconfig command line and in rc.conf. 383 38420240428: 385 OpenBSM auditing runtime (auditd, etc.) has been moved into the new 386 package FreeBSD-audit. If you use OpenBSM auditing and pkgbase, you 387 should install FreeBSD-audit. 388 38920240424: 390 cron, lpr, and ntpd have been moved from FreeBSD-utilities into their 391 own packages. If you use pkgbase, you should install the relevant 392 packages: FreeBSD-cron, FreeBSD-lp, or FreeBSD-ntp. 393 39420240406: 395 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 396 been upgraded to 18.1.6. It is important that you run `make delete-old` 397 as described in the COMMON ITEMS section, otherwise several libc++ 398 headers that are obsolete and need to be removed can cause compilation 399 errors in C++ programs. 400 40120240205: 402 For dynamically linked programs, system calls are now made from 403 libsys rather than libc. No change in linkage is required as 404 libsys is an auxiliary filter for libc. People building custom 405 images must ensure that libsys.so.7 is included. 406 40720240202: 408 Loader now also read configuration files listed in local_loader_conf_files. 409 Files listed here are the last ones read. And /boot/loader.conf.local was 410 moved from loader_conf_files to local_loader_conf_files leaving only 411 loader.conf and device.hints in loader_conf_files by default. 412 413 The following sequencing is applied: 414 415 1. Bootstrap: 416 /boot/defaults/loader.conf 417 418 2. Read loader_conf_files files: 419 /boot/device.hints 420 /boot/loader.conf 421 422 3. Read loader_conf_dirs files: 423 /boot/loader.conf.d/*.conf 424 425 4. And finally, rread local_loader_conf_files files: 426 /boot/loader.conf.local 427 42820240201: 429 sendmail 8.18.1 has been imported and merged. This version enforces 430 stricter RFC compliance by default, especially with respect to line 431 endings. This may cause issues with receiving messages from 432 non-compliant MTAs; please see the first 8.18.1 release note in 433 contrib/sendmail/RELEASE_NOTES for mitigations. 434 43520240111: 436 Commit cc760de2183f changed the internal interface between 437 the nfscommon and nfscl modules. As such, both need to be 438 rebuilt from sources. Therefore, __FreeBSD_version was 439 bumped to 1500010. 440 44120231120: 442 If you have an arm64 system that uses ACPI, you will need to update your 443 loader.efi in the ESP when you update past this point. Detection of ACPI 444 was moved earlier in the binary so the scripts could use it, but old 445 binaries don't have this, so we default to 'no ACPI' in this case. You can 446 undisable ACPI by doing 447 OK unset hint.acpi.0.disabled 448 This can also be used to recover any other system that was updated in the 449 small window where amd64 was also broken. 450 45120231113: 452 The WITHOUT_LLD_IS_LD option has been removed. When LLD is enabled 453 it is always installed as /usr/bin/ld. 454 45520231027: 456 Forward compatibility (running the new code on old kernels) for the 457 "ino64" project have been removed. The need for it has passed long ago. 458 45920231018: 460 Commit 57ce37f9dcd0 changed the internal KAPI between the 461 nfscommon and nfscl modules. Both must be rebuilt from sources. 462 46320231010: 464 dialog(1) has been replaced in base by bsddialog(1), while most of the 465 time replacing a dialog(1) call by a bsddialog(1) call works out of the 466 box, bsddialog(1) is not considered as a drop-in replacement for 467 dialog(1). 468 469 If you do depend on dialog(1) functionality, please install cdialog 470 from ports: 471 472 pkg install cdialog 473 47420230927: 475 The EARLY_AP_STARTUP kernel option is mandatory on x86. The option 476 has been added to DEFAULTS, so it should automatically be included in 477 custom kernel configurations without any additional change. 478 47920230922: 480 A new loader tunable net.pf.default_to_drop allows pf(4)’s default 481 behaviour to be changed from pass to drop. Previously this required 482 recompiling the kernel with the option PF_DEFAULT_TO_DROP. 483 48420230914: 485 Enable splitting out pkgbase manpages into separate packages by 486 default. To disable this, set WITHOUT_MANSPLITPKG=yes in src.conf. 487 48820230911: 489 Move standard include files to the clibs-dev package and move clang 490 internal libraries and headers to clang and clang-dev. Upgrading systems 491 installed using pkgbase past this change involves extra steps to allow 492 for these file moves: 493 494 pkg upgrade -y FreeBSD-utilities 495 pkg upgrade -y FreeBSD-utilities-dev 496 pkg upgrade -y 497 49820230909: 499 Enable vnet sysctl variables to be loader tunable. SYSCTLs which 500 belongs to VNETs can be initialized during early boot or module 501 loading if they are marked with CTLFLAG_TUN and there are 502 corresponding kernel environment variables. 503 50420230901: 505 The WITH_INIT_ALL_PATTERN and WITH_INIT_ALL_ZERO build options have 506 been replaced by INIT_ALL=pattern and INIT_ALL=zero respectively. 507 50820230824: 509 FreeBSD 15.0-CURRENT. 510 51120230817: 512 Serial communication (in boot loaders, kernel, and userland) has 513 been changed to default to 115200 bps, in line with common industry 514 practice and typcial firmware serial console redirection 515 configuration. 516 517 Note that the early x86 BIOS bootloader (i.e., boot0sio) does not 518 support rates above 9600 bps and is not changed. boot0sio users may 519 set BOOT_COMCONSOLE_SPEED=9600 to use 9600 for all of the boot 520 components, or use the standard boot0 and have the boot2 stage start 521 with the serial port at 115200. 522 52320230807: 524 Following the general removal of MIPS support, the ath(4) AHB bus- 525 frontend has been removed, too, and building of the PCI support is 526 integrated with the ath(4) main module again. As a result, there's 527 no longer a need for if_ath_pci_load="YES" in /boot/loader.conf or 528 "device ath_pci" in the kernel configuration. 529 53020230803: 531 MAXCPU has been increased to 1024 in the amd64 GENERIC kernel config. 532 Out-of-tree kernel modules will need to be rebuilt. 533 53420230724: 535 CAM has been mechanically updated s/u_int(64|32|16|8)_t/uint\1_t/g 536 to move to the standard uintXX_t types from the old, traditional 537 BSD u_intXX_t types. This should be a NOP, but may cause problems 538 for out of tree changes. The SIMs were not updated since most of 539 the old u_intXX_t uses weren't due to CAM interfaces. 540 54120230713: 542 stable/14 branch created. 543 54420230629: 545 The heuristic for detecting old chromebooks with an EC bug that requires 546 atkbdc driver workarounds has changed. There should be no functional 547 change, but if your old chromebook's keyboard stops working, please 548 file a PR and assign it to imp. 549 55020230623: 551 OpenSSL has been updated to version 3.0, including changes throughout 552 the base system. It is important to rebuild third-party software 553 after upgrading. 554 55520230619: 556 To enable pf rdr rules for connections initiated from the host, pf 557 filter rules can be optionally enabled for packets delivered 558 locally. This can change the behavior of rules which match packets 559 delivered to lo0. To enable this feature: 560 561 sysctl net.pf.filter_local=1 562 service pf restart 563 564 When enabled, its best to ensure that packets delivered locally are not 565 filtered, e.g. by adding a 'skip on lo' rule. 566 56720230613: 568 Improvements to libtacplus(8) mean that tacplus.conf(5) now 569 follows POSIX shell syntax rules. This may cause TACACS+ 570 authentication to fail if the shared secret contains a single 571 quote, double quote, or backslash character which isn't 572 already properly quoted or escaped. 573 57420230612: 575 Belatedly switch the default nvme block device on x86 from nvd to nda. 576 nda created nvd compatibility links by default, so this should be a 577 nop. If this causes problems for your application, set hw.nvme.use_nvd=1 578 in your loader.conf or add `options NVME_USE_NVD=1` to your kernel 579 config. To disable the nvd compatibility aliases, add 580 kern.cam.nda.nvd_compat=0 to loader.conf. The default has been nda on 581 all non-x86 platforms for some time now. If you need to fall back, 582 please email imp@freebsd.org about why. 583 584 Encrypted swap partitions need to be changed from nvd to nda if you 585 migrate, or you need to use the above to switch back to nvd. 586 58720230422: 588 Remove portsnap(8). Users are encouraged to obtain the ports tree 589 using git instead. 590 59120230420: 592 Add jobs.mk to save typing. Enables -j${JOB_MAX} and logging 593 eg. 594 make buildworld-jobs 595 runs 596 make -j${JOB_MAX} buildworld > ../buildworld.log 2>&1 597 598 where JOB_MAX is derrived from ncpus in local.sys.mk if not set in env. 599 60020230316: 601 Video related devices for some arm devices have been renamed. 602 If you have a custom kernel config and want to use hdmi output on 603 IMX6 board you need to add "device dwc_hdmi" "device imx6_hdmi" and 604 "device imx6_ipu" to it. 605 If you have a custom kernel config and want to use hdmi output on 606 TI AM335X board you need to add "device tda19988" to it. 607 If you add "device hdmi" in it you need to remove it as it doesn't 608 exist anymore. 609 61020230221: 611 Introduce new kernel options KBD_DELAY1 and KBD_DELAY2. See atkbdc(4) 612 for details. 613 61420230206: 615 sshd now defaults to having X11Forwarding disabled, following upstream. 616 Administrators who wish to enable X11Forwarding should add 617 `X11Forwarding yes` to /etc/ssh/sshd_config. 618 61920230204: 620 Since commit 75d41cb6967 Huawei 3G/4G LTE Mobile Devices do not default 621 to ECM, but NCM mode and need u3g and ucom modules loaded. See cdce(4). 622 62320230130: 624 As of commit 7c40e2d5f685, the dependency on netlink(4) has been added 625 to the linux_common(4) module. Users relying on linux_common may need 626 to complile netlink(4) module if it is not present in their kernel. 627 62820230126: 629 The WITHOUT_CXX option has been removed. C++ components in the base 630 system are now built unconditionally. 631 63220230113: 633 LinuxKPI pci.h changes may require out-of-tree drivers to be recompiled. 634 Bump _FreeBSD_version to 1400078 to be able to detect this change. 635 63620221212: 637 llvm-objump is now always installed as objdump. Previously there was 638 no /usr/bin/objdump unless the WITH_LLVM_BINUTILS knob was used. 639 640 Some LLVM objdump options have a different output format compared to 641 GNU objdump; readelf is available for inspecting ELF files, and GNU 642 objdump is available from the devel/binutils port or package. 643 64420221205: 645 dma(8) has replaced sendmail(8) as the default mta. For people willing 646 to reenable sendmail(8): 647 648 $ cp /usr/share/examples/sendmail/mailer.conf /etc/mail/mailer.conf 649 650 and add sendmail_enable="YES" to rc.conf. 651 65220221204: 653 hw.bus.disable_failed_devices has changed from 'false' to 'true' by 654 default. Now if newbus succeeds in probing a device, but fails to attach 655 the device, we'll disable the device. In the past, we'd keep retrying 656 the device on each new driver loaded. To get that behavior now, one 657 needs to use devctl to re-enable the device, and reprobe it (or set 658 the sysctl/tunable hw.bus.disable_failed_devices=false). 659 660 NOTE: This was reverted 20221205 due to unexpected compatibility issues 661 66220221122: 663 pf no longer accepts 'scrub fragment crop' or 'scrub fragment drop-ovl'. 664 These configurations are no longer automatically reinterpreted as 665 'scrub fragment reassemble'. 666 66720221121: 668 The WITHOUT_CLANG_IS_CC option has been removed. When Clang is enabled 669 it is always installed as /usr/bin/cc (and c++, cpp). 670 67120221026: 672 Some programs have been moved into separate packages. It is recommended 673 for pkgbase users to do: 674 675 pkg install FreeBSD-dhclient FreeBSD-geom FreeBSD-resolvconf \ 676 FreeBSD-devd FreeBSD-devmatch 677 678 after upgrading to restore all the component that were previously 679 installed. 680 68120221002: 682 OPIE has been removed from the base system. If needed, it can 683 be installed from ports (security/opie) or packages (opie). 684 Otherwise, make sure that your PAM policies do not reference 685 pam_opie or pam_opieaccess. 686 68720220610: 688 LinuxKPI pm.h changes require an update to the latest drm-kmod version 689 before re-compiling to avoid errors. 690 69120211230: 692 The macros provided for the manipulation of CPU sets (e.g. CPU_AND) 693 have been modified to take 2 source arguments instead of only 1. 694 Externally maintained sources that use these macros will have to 695 be adapted. The FreeBSD version has been bumped to 1400046 to 696 reflect this change. 697 69820211214: 699 A number of the kernel include files are able to be included by 700 themselves. A test has been added to buildworld to enforce this. 701 70220211209: 703 Remove mips as a recognized target. This starts the decommissioning of 704 mips support in FreeBSD. mips related items will be removed wholesale in 705 the coming days and weeks. 706 707 This broke the NO_CLEAN build for some people. Either do a clean build 708 or touch 709 lib/clang/include/llvm/Config/Targets.def 710 lib/clang/include/llvm/Config/AsmParsers.def 711 lib/clang/include/llvm/Config/Disassemblers.def 712 lib/clang/include/llvm/Config/AsmPrinters.def 713 before the build to force everything to rebuild that needs to. 714 71520211202: 716 Unbound support for RFC8375: The special-use domain 'home.arpa' is 717 by default blocked. To unblock it use a local-zone nodefault 718 statement in unbound.conf: 719 local-zone: "home.arpa." nodefault 720 721 Or use another type of local-zone to override with your choice. 722 723 The reason for this is discussed in Section 6.1 of RFC8375: 724 Because 'home.arpa.' is not globally scoped and cannot be secured 725 using DNSSEC based on the root domain's trust anchor, there is no way 726 to tell, using a standard DNS query, in which homenet scope an answer 727 belongs. Consequently, users may experience surprising results with 728 such names when roaming to different homenets. 729 73020211110: 731 Commit b8d60729deef changed the TCP congestion control framework so 732 that any of the included congestion control modules could be 733 the single module built into the kernel. Previously newreno 734 was automatically built in through direct reference. As of 735 this commit you are required to declare at least one congestion 736 control module (e.g. 'options CC_NEWRENO') and to also declare a 737 default using the CC_DEFAULT option (e.g. options CC_DEFAULT="newreno\"). 738 The GENERIC configuration includes CC_NEWRENO and defines newreno 739 as the default. If no congestion control option is built into the 740 kernel and you are including networking, the kernel compile will 741 fail. Also if no default is declared the kernel compile will fail. 742 74320211118: 744 Mips has been removed from universe builds. It will be removed from the 745 tree shortly. 746 74720211106: 748 Commit f0c9847a6c47 changed the arguments for VOP_ALLOCATE. 749 The NFS modules must be rebuilt from sources and any out 750 of tree file systems that implement their own VOP_ALLOCATE 751 may need to be modified. 752 75320211022: 754 The synchronous PPP kernel driver sppp(4) has been removed. 755 The cp(4) and ce(4) drivers are now always compiled with netgraph(4) 756 support, formerly enabled by NETGRAPH_CRONYX option. 757 75820211020: 759 sh(1) is now the default shell for the root user. To force root to use 760 the csh shell, please run the following command as root: 761 762 # chsh -s csh 763 76420211004: 765 Ncurses distribution has been split between libtinfow and libncurses 766 with libncurses.so becoming a linker (ld) script to seamlessly link 767 to libtinfow as needed. Bump _FreeBSD_version to 1400035 to reflect 768 this change. 769 77020210923: 771 As of commit 8160a0f62be6, the dummynet module no longer depends on the 772 ipfw module. Dummynet can now be used by pf as well as ipfw. As such 773 users who relied on this dependency may need to include ipfw in the 774 list of modules to load on their systems. 775 77620210922: 777 As of commit 903873ce1560, the mixer(8) utility has got a slightly 778 new syntax. Please refer to the mixer(8) manual page for more 779 information. The old mixer utility can be installed from ports: 780 audio/freebsd-13-mixer 781 78220210911: 783 As of commit 55089ef4f8bb, the global variable nfs_maxcopyrange has 784 been deleted from the nfscommon.ko. As such, nfsd.ko must be built 785 from up to date sources to avoid an undefined reference when 786 being loaded. 787 78820210817: 789 As of commit 62ca9fc1ad56 OpenSSL no longer enables kernel TLS 790 by default. Users can enable kernel TLS via the "KTLS" SSL 791 option. This can be enabled globally by using a custom 792 OpenSSL config file via OPENSSL_CONF or via an 793 application-specific configuration option for applications 794 which permit setting SSL options via SSL_CONF_cmd(3). 795 79620210811: 797 Commit 3ad1e1c1ce20 changed the internal KAPI between the NFS 798 modules. Therefore, all need to be rebuilt from sources. 799 80020210730: 801 Commit b69019c14cd8 removes pf's DIOCGETSTATESNV ioctl. 802 As of be70c7a50d32 it is no longer used by userspace, but it does mean 803 users may not be able to enumerate pf states if they update the kernel 804 past b69019c14cd8 without first updating userspace past be70c7a50d32. 805 80620210729: 807 As of commit 01ad0c007964 if_bridge member interfaces can no longer 808 change their MTU. Changing the MTU of the bridge itself will change the 809 MTU on all member interfaces instead. 810 81120210716: 812 Commit ee29e6f31111 changed the internal KAPI between the nfscommon 813 and nfsd modules. Therefore, both need to be rebuilt from sources. 814 Bump __FreeBSD_version to 1400026 for this KAPI change. 815 81620210715: 817 The 20210707 awk update brought in a change in behavior. This has 818 been corrected as of d4d252c49976. Between these dates, if you 819 installed a new awk binary, you may not be able to build a new 820 kernel because the change in behavior affected the genoffset 821 script used to build the kernel. If you did update, the fix is 822 to update your sources past the above hash and do 823 % cd usr.bin/awk 824 % make clean all 825 % sudo -E make install 826 to enable building kernels again. 827 82820210708: 829 Commit 1e0a518d6548 changed the internal KAPI between the NFS 830 modules. They all need to be rebuilt from sources. I did not 831 bump __FreeBSD_version, since it was bumped recently. 832 83320210707: 834 awk has been updated to the latest one-true-awk version 20210215. 835 This contains a number of minor bug fixes. 836 83720210624: 838 The NFSv4 client now uses the highest minor version of NFSv4 839 supported by the NFSv4 server by default instead of minor version 0, 840 for NFSv4 mounts. 841 The "minorversion" mount option may be used to override this default. 842 84320210618: 844 Bump __FreeBSD_version to 1400024 for LinuxKPI changes. 845 Most notably netdev.h can change now as the (last) dependencies 846 (mlx4/ofed) are now using struct ifnet directly, but also for PCI 847 additions and others. 848 84920210618: 850 The directory "blacklisted" under /usr/share/certs/ has been 851 renamed to "untrusted". 852 85320210611: 854 svnlite has been removed from base. Should you need svn for any reason 855 please install the svn package or port. 856 85720210611: 858 Commit e1a907a25cfa changed the internal KAPI between the krpc 859 and nfsserver. As such, both modules must be rebuilt from 860 sources. Bump __FreeBSD_version to 1400022. 861 86220210610: 863 The an(4) driver has been removed from FreeBSD. 864 86520210608: 866 The vendor/openzfs branch was renamed to vendor/openzfs/legacy to 867 start tracking OpenZFS upstream more closely. Please see 868https://lists.freebsd.org/archives/freebsd-current/2021-June/000153.html 869 for details on how to correct any errors that might result. The 870 short version is that you need to remove the old branch locally: 871 git update-ref -d refs/remotes/freebsd/vendor/openzfs 872 (assuming your upstream origin is named 'freebsd'). 873 87420210525: 875 Commits 17accc08ae15 and de102f870501 add new files to LinuxKPI 876 which break drm-kmod. In addition various other additions where 877 committed. Bump __FreeBSD_version to 1400015 to be able to 878 detect this. 879 88020210513: 881 Commit ca179c4d74f2 changed the package in which the OpenSSL 882 libraries and utilities are packaged. 883 It is recommended for pkgbase user to do: 884 pkg install -f FreeBSD-openssl 885 before pkg upgrade otherwise some dependencies might not be met 886 and pkg will stop working as libssl will not be present anymore 887 on the system. 888 88920210426: 890 Commit 875977314881 changed the internal KAPI between 891 the nfsd and nfscommon modules. As such these modules 892 need to be rebuilt from sources. 893 Without this patch in your NFSv4.1/4.2 server, enabling 894 delegations by setting vfs.nfsd.issue_delegations non-zero 895 is not recommended. 896 89720210411: 898 Commit 7763814fc9c2 changed the internal KAPI between 899 the krpc and NFS. As such, the krpc, nfscommon and 900 nfscl modules must all be rebuilt from sources. 901 Without this patch, NFSv4.1/4.2 mounts should not 902 be done with the nfscbd(8) daemon running, to avoid 903 needing a working back channel for server->client RPCs. 904 90520210330: 906 Commit 01ae8969a9ee fixed the NFSv4.1/4.2 server so that it 907 handles binding of the back channel as required by RFC5661. 908 Until this patch is in your server, avoid use of the "nconnects" 909 mount option for Linux NFSv4.1/4.2 mounts. 910 91120210225: 912 For 64-bit architectures the base system is now built with Position 913 Independent Executable (PIE) support enabled by default. It may be 914 disabled using the WITHOUT_PIE knob. A clean build is required. 915 91620210128: 917 Various LinuxKPI functionality was added which conflicts with DRM. 918 Please update your drm-kmod port to after the __FreeBSD_version 1400003 919 update. 920 92120210121: 922 stable/13 branch created. 923 92420210108: 925 PC Card attachments for all devices have been removed. In the case of 926 wi and cmx, the entire drivers were removed because they were only 927 PC Card devices. FreeBSD_version 1300134 should be used for this 928 since it was bumped so recently. 929 93020210107: 931 Transport-independent parts of HID support have been split off the USB 932 code in to separate subsystem. Kernel configs which include one of 933 ums, ukbd, uhid, atp, wsp, wmt, uaudio, ugold or ucycom drivers should 934 be updated with adding of "device hid" line. 935 93620210105: 937 ncurses installation has been modified to only keep the widechar 938 enabled version. Incremental build is broken for that change, so it 939 requires a clean build. 940 94120201223: 942 The FreeBSD project has migrated from Subversion to Git. Temporary 943 instructions can be found at 944 https://github.com/bsdimp/freebsd-git-docs/blob/main/src-cvt.md 945 and other documents in that repo. 946 94720201216: 948 The services database has been updated to cover more of the basic 949 services expected in a modern system. The database is big enough 950 that it will cause issues in mergemaster in Releases previous to 951 12.2 and 11.3, or in very old current systems from before r358154. 952 95320201215: 954 Obsolete in-tree GDB 6.1.1 has been removed. GDB (including kgdb) 955 may be installed from ports or packages. 956 95720201124: 958 ping6 has been merged into ping. It can now be called as "ping -6". 959 See ping(8) for details. 960 96120201108: 962 Default value of net.add_addr_allfibs has been changed to 0. 963 If you have multi-fib configuration and rely on existence of all 964 interface routes in every fib, you need to set the above sysctl to 1. 965 96620201030: 967 The internal pre-processor in the calendar(1) program has been 968 extended to support more C pre-processor commands (e.g. #ifdef, #else, 969 and #undef) and to detect unbalanced conditional statements. 970 Error messages have been extended to include the filename and line 971 number if processing stops to help fixing malformed data files. 972 97320201026: 974 All the data files for the calendar(1) program, except calendar.freebsd, 975 have been moved to the deskutils/calendar-data port, much like the 976 jewish calendar entries were moved to deskutils/hebcal years ago. After 977 make delete-old-files, you need to install it to retain full 978 functionality. calendar(1) will issue a reminder for files it can't 979 find. 980 98120200923: 982 LINT files are no longer generated. We now include the relevant NOTES 983 files. Note: This may cause conflicts with updating in some cases. 984 find sys -name LINT\* -delete 985 is suggested across this commit to remove the generated LINT files. 986 987 If you have tried to update with generated files there, the svn 988 command you want to un-auger the tree is 989 cd sys/amd64/conf 990 svn revert -R . 991 and then do the above find from the top level. Substitute 'amd64' 992 above with where the error message indicates a conflict. 993 99420200824: 995 OpenZFS support has been integrated. Do not upgrade root pools until 996 the loader is updated to support zstd. Furthermore, we caution against 997 'zpool upgrade' for the next few weeks. The change should be transparent 998 unless you want to use new features. 999 1000 Not all "NO_CLEAN" build scenarios work across these changes. Many 1001 scenarios have been tested and fixed, but rebuilding kernels without 1002 rebuilding world may fail. 1003 1004 The ZFS cache file has moved from /boot to /etc to match the OpenZFS 1005 upstream default. A fallback to /boot has been added for mountroot. 1006 1007 Pool auto import behavior at boot has been moved from the kernel module 1008 to an explicit "zpool import -a" in one of the rc scripts enabled by 1009 zfs_enable=YES. This means your non-root zpools won't auto import until 1010 you upgrade your /etc/rc.d files. 1011 101220200824: 1013 The resume code now notifies devd with the 'kernel' system 1014 rather than the old 'kern' subsystem to be consistent with 1015 other use. The old notification will be created as well, but 1016 will be removed prior to FreeBSD 14.0. 1017 101820200821: 1019 r362275 changed the internal API between the kernel RPC and the 1020 NFS modules. As such, all the modules must be recompiled from 1021 sources. 1022 102320200817: 1024 r364330 modified the internal API used between the NFS modules. 1025 As such, all the NFS modules must be re-compiled from sources. 1026 102720200816: 1028 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1029 been upgraded to 11.0.0. Please see the 20141231 entry below for 1030 information about prerequisites and upgrading, if you are not already 1031 using clang 3.5.0 or higher. 1032 103320200810: 1034 r364092 modified the internal ABI used between the kernel NFS 1035 modules. As such, all of these modules need to be rebuilt 1036 from sources, so a version bump was done. 1037 103820200807: 1039 Makefile.inc has been updated to work around the issue documented in 1040 20200729. It was a case where the optimization of using symbolic links 1041 to point to binaries created a situation where we'd run new binaries 1042 with old libraries starting midway through the installworld process. 1043 104420200729: 1045 r363679 has redefined some undefined behavior in regcomp(3); notably, 1046 extraneous escapes of most ordinary characters will no longer be 1047 accepted. An exp-run has identified all of the problems with this in 1048 ports, but other non-ports software may need extra escapes removed to 1049 continue to function. 1050 1051 Because of this change, installworld may encounter the following error 1052 from rtld: Undefined symbol "regcomp@FBSD_1.6" -- It is imperative that 1053 you do not halt installworld. Instead, let it run to completion (whether 1054 successful or not) and run installworld once more. 1055 105620200627: 1057 A new implementation of bc and dc has been imported in r362681. This 1058 implementation corrects non-conformant behavior of the previous bc 1059 and adds GNU bc compatible options. It offers a number of extensions, 1060 is much faster on large values, and has support for message catalogs 1061 (a number of languages are already supported, contributions of further 1062 languages welcome). The option WITHOUT_GH_BC can be used to build the 1063 world with the previous versions of bc and dc. 1064 106520200625: 1066 r362639 changed the internal API used between the NFS kernel modules. 1067 As such, they all need to be rebuilt from sources. 1068 106920200613: 1070 r362158 changed the arguments for VFS_CHECKEXP(). As such, any 1071 out of tree file systems need to be modified and rebuilt. 1072 Also, any file systems that are modules must be rebuilt. 1073 107420200604: 1075 read(2) of a directory fd is now rejected by default. root may 1076 re-enable it for system root only on non-ZFS filesystems with the 1077 security.bsd.allow_read_dir sysctl(8) MIB if 1078 security.bsd.suser_enabled=1. 1079 1080 It may be advised to setup aliases for grep to default to `-d skip` if 1081 commonly non-recursively grepping a list that includes directories and 1082 the potential for the resulting stderr output is not tolerable. Example 1083 aliases are now installed, commented out, in /root/.cshrc and 1084 /root/.shrc. 1085 108620200523: 1087 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1088 been upgraded to 10.0.1. Please see the 20141231 entry below for 1089 information about prerequisites and upgrading, if you are not already 1090 using clang 3.5.0 or higher. 1091 109220200512: 1093 Support for obsolete compilers has been removed from the build system. 1094 Clang 6 and GCC 6.4 are the minimum supported versions. 1095 109620200424: 1097 closefrom(2) has been moved under COMPAT12, and replaced in libc with a 1098 stub that calls close_range(2). If using a custom kernel configuration, 1099 you may want to ensure that the COMPAT_FREEBSD12 option is included, as 1100 a slightly older -CURRENT userland and older FreeBSD userlands may not 1101 be functional without closefrom(2). 1102 110320200414: 1104 Upstream DTS from Linux 5.6 was merged and they now have the SID 1105 and THS (Secure ID controller and THermal Sensor) node present. 1106 The DTB overlays have now been removed from the tree for the H3/H5 and 1107 A64 SoCs and the aw_sid and aw_thermal driver have been updated to 1108 deal with upstream DTS. If you are using those overlays you need to 1109 remove them from loader.conf and update the DTBs on the FAT partition. 1110 111120200310: 1112 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1113 been upgraded to 10.0.0. Please see the 20141231 entry below for 1114 information about prerequisites and upgrading, if you are not already 1115 using clang 3.5.0 or higher. 1116 111720200309: 1118 The amd(8) automount daemon has been removed from the source tree. 1119 As of FreeBSD 10.1 autofs(5) is the preferred tool for automounting. 1120 amd is still available in the sysutils/am-utils port. 1121 112220200301: 1123 Removed brooktree driver (bktr.4) from the tree. 1124 112520200229: 1126 The WITH_GPL_DTC option has been removed. The BSD-licenced device tree 1127 compiler in usr.bin/dtc is used on all architectures which use dtc, and 1128 the GPL dtc is available (if needed) from the sysutils/dtc port. 1129 113020200229: 1131 The WITHOUT_LLVM_LIBUNWIND option has been removed. LLVM's libunwind 1132 is used by all supported CPU architectures. 1133 113420200229: 1135 GCC 4.2.1 has been removed from the tree. The WITH_GCC, 1136 WITH_GCC_BOOTSTRAP, and WITH_GNUCXX options are no longer available. 1137 Users who wish to build FreeBSD with GCC must use the external toolchain 1138 ports or packages. 1139 114020200220: 1141 ncurses has been updated to a newer version (6.2-20200215). Given the ABI 1142 has changed, users will have to rebuild all the ports that are linked to 1143 ncurses. 1144 114520200217: 1146 The size of struct vnet and the magic cookie have changed. 1147 Users need to recompile libkvm and all modules using VIMAGE 1148 together with their new kernel. 1149 115020200212: 1151 Defining the long deprecated NO_CTF, NO_DEBUG_FILES, NO_INSTALLLIB, 1152 NO_MAN, NO_PROFILE, and NO_WARNS variables is now an error. Update 1153 your Makefiles and scripts to define MK_<var>=no instead as required. 1154 1155 One exception to this is that program or library Makefiles should 1156 define MAN to empty rather than setting MK_MAN=no. 1157 115820200108: 1159 Clang/LLVM is now the default compiler and LLD the default 1160 linker for riscv64. 1161 116220200107: 1163 make universe no longer uses GCC 4.2.1 on any architectures. 1164 Architectures not supported by in-tree Clang/LLVM require an 1165 external toolchain package. 1166 116720200104: 1168 GCC 4.2.1 is now not built by default, as part of the GCC 4.2.1 1169 retirement plan. Specifically, the GCC, GCC_BOOTSTRAP, and GNUCXX 1170 options default to off for all supported CPU architectures. As a 1171 short-term transition aid they may be enabled via WITH_* options. 1172 GCC 4.2.1 is expected to be removed from the tree on 2020-03-31. 1173 117420200102: 1175 Support for armv5 has been disconnected and is being removed. The 1176 machine combination MACHINE=arm MACHINE_ARCH=arm is no longer valid. 1177 You must now use a MACHINE_ARCH of armv6 or armv7. The default 1178 MACHINE_ARCH for MACHINE=arm is now armv7. 1179 118020191226: 1181 Clang/LLVM is now the default compiler for all powerpc architectures. 1182 LLD is now the default linker for powerpc64. The change for powerpc64 1183 also includes a change to the ELFv2 ABI, incompatible with the existing 1184 ABI. 1185 118620191226: 1187 Kernel-loadable random(4) modules are no longer unloadable. 1188 118920191222: 1190 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1191 been upgraded to 9.0.1. Please see the 20141231 entry below for 1192 information about prerequisites and upgrading, if you are not already 1193 using clang 3.5.0 or higher. 1194 119520191212: 1196 r355677 has modified the internal interface used between the 1197 NFS modules in the kernel. As such, they must all be upgraded 1198 simultaneously. I will do a version bump for this. 1199 120020191205: 1201 The root certificates of the Mozilla CA Certificate Store have been 1202 imported into the base system and can be managed with the certctl(8) 1203 utility. If you have installed the security/ca_root_nss port or package 1204 with the ETCSYMLINK option (the default), be advised that there may be 1205 differences between those included in the port and those included in 1206 base due to differences in nss branch used as well as general update 1207 frequency. Note also that certctl(8) cannot manage certs in the 1208 format used by the security/ca_root_nss port. 1209 121020191120: 1211 The amd(8) automount daemon has been disabled by default, and will be 1212 removed in the future. As of FreeBSD 10.1 the autofs(5) is available 1213 for automounting. 1214 121520191107: 1216 The nctgpio and wbwd drivers have been moved to the superio bus. 1217 If you have one of these drivers in a kernel configuration, then 1218 you should add device superio to it. If you use one of these drivers 1219 as a module and you compile a custom set of modules, then you should 1220 add superio to the set. 1221 122220191021: 1223 KPIs for network drivers to access interface addresses have changed. 1224 Users need to recompile NIC driver modules together with kernel. 1225 122620191021: 1227 The net.link.tap.user_open sysctl no longer prevents user opening of 1228 already created /dev/tapNN devices. Access is still controlled by 1229 node permissions, just like tun devices. The net.link.tap.user_open 1230 sysctl is now used only to allow users to perform devfs cloning of 1231 tap devices, and the subsequent open may not succeed if the user is not 1232 in the appropriate group. This sysctl may be deprecated/removed 1233 completely in the future. 1234 123520191009: 1236 mips, powerpc, and sparc64 are no longer built as part of 1237 universe / tinderbox unless MAKE_OBSOLETE_GCC is defined. If 1238 not defined, mips, powerpc, and sparc64 builds will look for 1239 the xtoolchain binaries and if installed use them for universe 1240 builds. As llvm 9.0 becomes vetted for these architectures, they 1241 will be removed from the list. 1242 124320191009: 1244 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1245 been upgraded to 9.0.0. Please see the 20141231 entry below for 1246 information about prerequisites and upgrading, if you are not already 1247 using clang 3.5.0 or higher. 1248 124920191003: 1250 The hpt27xx, hptmv, hptnr, and hptrr drivers have been removed from 1251 GENERIC. They are available as modules and can be loaded by adding 1252 to /boot/loader.conf hpt27xx_load="YES", hptmv_load="YES", 1253 hptnr_load="YES", or hptrr_load="YES", respectively. 1254 125520190913: 1256 ntpd no longer by default locks its pages in memory, allowing them 1257 to be paged out by the kernel. Use rlimit memlock to restore 1258 historic BSD behaviour. For example, add "rlimit memlock 32" 1259 to ntp.conf to lock up to 32 MB of ntpd address space in memory. 1260 126120190823: 1262 Several of ping6's options have been renamed for better consistency 1263 with ping. If you use any of -ARWXaghmrtwx, you must update your 1264 scripts. See ping6(8) for details. 1265 126620190727: 1267 The vfs.fusefs.sync_unmount and vfs.fusefs.init_backgrounded sysctls 1268 and the "-o sync_unmount" and "-o init_backgrounded" mount options have 1269 been removed from mount_fusefs(8). You can safely remove them from 1270 your scripts, because they had no effect. 1271 1272 The vfs.fusefs.fix_broken_io, vfs.fusefs.sync_resize, 1273 vfs.fusefs.refresh_size, vfs.fusefs.mmap_enable, 1274 vfs.fusefs.reclaim_revoked, and vfs.fusefs.data_cache_invalidate 1275 sysctls have been removed. If you felt the need to set any of them to 1276 a non-default value, please tell asomers@FreeBSD.org why. 1277 127820190713: 1279 Default permissions on the /var/account/acct file (and copies of it 1280 rotated by periodic daily scripts) are changed from 0644 to 0640 1281 because the file contains sensitive information that should not be 1282 world-readable. If the /var/account directory must be created by 1283 rc.d/accounting, the mode used is now 0750. Admins who use the 1284 accounting feature are encouraged to change the mode of an existing 1285 /var/account directory to 0750 or 0700. 1286 128720190620: 1288 Entropy collection and the /dev/random device are no longer optional 1289 components. The "device random" option has been removed. 1290 Implementations of distilling algorithms can still be made loadable 1291 with "options RANDOM_LOADABLE" (e.g., random_fortuna.ko). 1292 129320190612: 1294 Clang, llvm, lld, lldb, compiler-rt, libc++, libunwind and openmp have 1295 been upgraded to 8.0.1. Please see the 20141231 entry below for 1296 information about prerequisites and upgrading, if you are not already 1297 using clang 3.5.0 or higher. 1298 129920190608: 1300 A fix was applied to i386 kernel modules to avoid panics with 1301 dpcpu or vnet. Users need to recompile i386 kernel modules 1302 having pcpu or vnet sections or they will refuse to load. 1303 130420190513: 1305 User-wired pages now have their own counter, 1306 vm.stats.vm.v_user_wire_count. The vm.max_wired sysctl was renamed 1307 to vm.max_user_wired and changed from an unsigned int to an unsigned 1308 long. bhyve VMs wired with the -S are now subject to the user 1309 wiring limit; the vm.max_user_wired sysctl may need to be tuned to 1310 avoid running into the limit. 1311 131220190507: 1313 The IPSEC option has been removed from GENERIC. Users requiring 1314 ipsec(4) must now load the ipsec(4) kernel module. 1315 131620190507: 1317 The tap(4) driver has been folded into tun(4), and the module has been 1318 renamed to tuntap. You should update any kld_list="if_tap" or 1319 kld_list="if_tun" entries in /etc/rc.conf, if_tap_load="YES" or 1320 if_tun_load="YES" entries in /boot/loader.conf to load the if_tuntap 1321 module instead, and "device tap" or "device tun" entries in kernel 1322 config files to select the tuntap device instead. 1323 132420190418: 1325 The following knobs have been added related to tradeoffs between 1326 safe use of the random device and availability in the absence of 1327 entropy: 1328 1329 kern.random.initial_seeding.bypass_before_seeding: tunable; set 1330 non-zero to bypass the random device prior to seeding, or zero to 1331 block random requests until the random device is initially seeded. 1332 For now, set to 1 (unsafe) by default to restore pre-r346250 boot 1333 availability properties. 1334 1335 kern.random.initial_seeding.read_random_bypassed_before_seeding: 1336 read-only diagnostic sysctl that is set when bypass is enabled and 1337 read_random(9) is bypassed, to enable programmatic handling of this 1338 initial condition, if desired. 1339 1340 kern.random.initial_seeding.arc4random_bypassed_before_seeding: 1341 Similar to the above, but for arc4random(9) initial seeding. 1342 1343 kern.random.initial_seeding.disable_bypass_warnings: tunable; set 1344 non-zero to disable warnings in dmesg when the same conditions are 1345 met as for the diagnostic sysctls above. Defaults to zero, i.e., 1346 produce warnings in dmesg when the conditions are met. 1347 134820190416: 1349 The loadable random module KPI has changed; the random_infra_init() 1350 routine now requires a 3rd function pointer for a bool (*)(void) 1351 method that returns true if the random device is seeded (and 1352 therefore unblocked). 1353 135420190404: 1355 r345895 reverts r320698. This implies that an nfsuserd(8) daemon 1356 built from head sources between r320757 (July 6, 2017) and 1357 r338192 (Aug. 22, 2018) will not work unless the "-use-udpsock" 1358 is added to the command line. 1359 nfsuserd daemons built from head sources that are post-r338192 are 1360 not affected and should continue to work. 1361 136220190320: 1363 The fuse(4) module has been renamed to fusefs(4) for consistency with 1364 other filesystems. You should update any kld_load="fuse" entries in 1365 /etc/rc.conf, fuse_load="YES" entries in /boot/loader.conf, and 1366 "options FUSE" entries in kernel config files. 1367 136820190304: 1369 Clang, llvm, lld, lldb, compiler-rt and libc++ have been upgraded to 1370 8.0.0. Please see the 20141231 entry below for information about 1371 prerequisites and upgrading, if you are not already using clang 3.5.0 1372 or higher. 1373 137420190226: 1375 geom_uzip(4) depends on the new module xz. If geom_uzip is statically 1376 compiled into your custom kernel, add 'device xz' statement to the 1377 kernel config. 1378 137920190219: 1380 drm and drm2 have been removed from the tree. Please see 1381 https://wiki.freebsd.org/Graphics for the latest information on 1382 migrating to the drm ports. 1383 138420190131: 1385 Iflib is no longer unconditionally compiled into the kernel. Drivers 1386 using iflib and statically compiled into the kernel, now require 1387 the 'device iflib' config option. For the same drivers loaded as 1388 modules on kernels not having 'device iflib', the iflib.ko module 1389 is loaded automatically. 1390 139120190125: 1392 The IEEE80211_AMPDU_AGE and AH_SUPPORT_AR5416 kernel configuration 1393 options no longer exist since r343219 and r343427 respectively; 1394 nothing uses them, so they should be just removed from custom 1395 kernel config files. 1396 139720181230: 1398 r342635 changes the way efibootmgr(8) works by requiring users to add 1399 the -b (bootnum) parameter for commands where the bootnum was previously 1400 specified with each option. For example 'efibootmgr -B 0001' is now 1401 'efibootmgr -B -b 0001'. 1402 140320181220: 1404 r342286 modifies the NFSv4 server so that it obeys vfs.nfsd.nfs_privport 1405 in the same as it is applied to NFSv2 and 3. This implies that NFSv4 1406 servers that have vfs.nfsd.nfs_privport set will only allow mounts 1407 from clients using a reserved port. Since both the FreeBSD and Linux 1408 NFSv4 clients use reserved ports by default, this should not affect 1409 most NFSv4 mounts. 1410 141120181219: 1412 The XLP config has been removed. We can't support 64-bit atomics in this 1413 kernel because it is running in 32-bit mode. XLP users must transition 1414 to running a 64-bit kernel (XLP64 or XLPN32). 1415 1416 The mips GXEMUL support has been removed from FreeBSD. MALTA* + qemu is 1417 the preferred emulator today and we don't need two different ones. 1418 1419 The old sibyte / swarm / Broadcom BCM1250 support has been 1420 removed from the mips port. 1421 142220181211: 1423 Clang, llvm, lld, lldb, compiler-rt and libc++ have been upgraded to 1424 7.0.1. Please see the 20141231 entry below for information about 1425 prerequisites and upgrading, if you are not already using clang 3.5.0 1426 or higher. 1427 142820181211: 1429 Remove the timed and netdate programs from the base tree. Setting 1430 the time with these daemons has been obsolete for over a decade. 1431 143220181126: 1433 On amd64, arm64 and armv7 (architectures that install LLVM's ld.lld 1434 linker as /usr/bin/ld) GNU ld is no longer installed as ld.bfd, as 1435 it produces broken binaries when ifuncs are in use. Users needing 1436 GNU ld should install the binutils port or package. 1437 143820181123: 1439 The BSD crtbegin and crtend code has been enabled by default. It has 1440 had extensive testing on amd64, arm64, and i386. It can be disabled 1441 by building a world with -DWITHOUT_BSD_CRTBEGIN. 1442 144320181115: 1444 The set of CTM commands (ctm, ctm_smail, ctm_rmail, ctm_dequeue) 1445 has been converted to a port (misc/ctm) and will be removed from 1446 FreeBSD-13. It is available as a package (ctm) for all supported 1447 FreeBSD versions. 1448 144920181110: 1450 The default newsyslog.conf(5) file has been changed to only include 1451 files in /etc/newsyslog.conf.d/ and /usr/local/etc/newsyslog.conf.d/ if 1452 the filenames end in '.conf' and do not begin with a '.'. 1453 1454 You should check the configuration files in these two directories match 1455 this naming convention. You can verify which configuration files are 1456 being included using the command: 1457 $ newsyslog -Nrv 1458 145920181019: 1460 Stable/12 was branched created. 1461 146220181015: 1463 Ports for the DRM modules have been simplified. Now, amd64 users should 1464 just install the drm-kmod port. All others should install 1465 drm-legacy-kmod. 1466 1467 Graphics hardware that's newer than about 2010 usually works with 1468 drm-kmod. For hardware older than 2013, however, some users will need 1469 to use drm-legacy-kmod if drm-kmod doesn't work for them. Hardware older 1470 than 2008 usually only works in drm-legacy-kmod. The graphics team can 1471 only commit to hardware made since 2013 due to the complexity of the 1472 market and difficulty to test all the older cards effectively. If you 1473 have hardware supported by drm-kmod, you are strongly encouraged to use 1474 that as you will get better support. 1475 1476 Other than KPI chasing, drm-legacy-kmod will not be updated. As outlined 1477 elsewhere, the drm and drm2 modules will be eliminated from the src base 1478 soon (with a limited exception for arm). Please update to the package 1479 asap and report any issues to x11@freebsd.org. 1480 1481 Generally, anybody using the drm*-kmod packages should add 1482 WITHOUT_DRM_MODULE=t and WITHOUT_DRM2_MODULE=t to avoid nasty 1483 cross-threading surprises, especially with automatic driver 1484 loading from X11 startup. These will become the defaults in 13-current 1485 shortly. 1486 148720181012: 1488 The ixlv(4) driver has been renamed to iavf(4). As a consequence, 1489 custom kernel and module loading configuration files must be updated 1490 accordingly. Moreover, interfaces previous presented as ixlvN to the 1491 system are now exposed as iavfN and network configuration files must 1492 be adjusted as necessary. 1493 149420181009: 1495 OpenSSL has been updated to version 1.1.1. This update included 1496 additional various API changes throughout the base system. It is 1497 important to rebuild third-party software after upgrading. The value 1498 of __FreeBSD_version has been bumped accordingly. 1499 150020181006: 1501 The legacy DRM modules and drivers have now been added to the loader's 1502 module blacklist, in favor of loading them with kld_list in rc.conf(5). 1503 The module blacklist may be overridden with the loader.conf(5) 1504 'module_blacklist' variable, but loading them via rc.conf(5) is strongly 1505 encouraged. 1506 150720181002: 1508 The cam(4) based nda(4) driver will be used over nvd(4) by default on 1509 powerpc64. You may set 'options NVME_USE_NVD=1' in your kernel conf or 1510 loader tunable 'hw.nvme.use_nvd=1' if you wish to use the existing 1511 driver. Make sure to edit /boot/etc/kboot.conf and fstab to use the 1512 nda device name. 1513 151420180913: 1515 Reproducible build mode is now on by default, in preparation for 1516 FreeBSD 12.0. This eliminates build metadata such as the user, 1517 host, and time from the kernel (and uname), unless the working tree 1518 corresponds to a modified checkout from a version control system. 1519 The previous behavior can be obtained by setting the /etc/src.conf 1520 knob WITHOUT_REPRODUCIBLE_BUILD. 1521 152220180826: 1523 The Yarrow CSPRNG has been removed from the kernel as it has not been 1524 supported by its designers since at least 2003. Fortuna has been the 1525 default since FreeBSD-11. 1526 152720180822: 1528 devctl freeze/thaw have gone into the tree, the rc scripts have been 1529 updated to use them and devmatch has been changed. You should update 1530 kernel, userland and rc scripts all at the same time. 1531 153220180818: 1533 The default interpreter has been switched from 4th to Lua. 1534 LOADER_DEFAULT_INTERP, documented in build(7), will override the default 1535 interpreter. If you have custom FORTH code you will need to set 1536 LOADER_DEFAULT_INTERP=4th (valid values are 4th, lua or simp) in 1537 src.conf for the build. This will create default hard links between 1538 loader and loader_4th instead of loader and loader_lua, the new default. 1539 If you are using UEFI it will create the proper hard link to loader.efi. 1540 1541 bhyve uses userboot.so. It remains 4th-only until some issues are solved 1542 regarding coexisting with multiple versions of FreeBSD are resolved. 1543 154420180815: 1545 ls(1) now respects the COLORTERM environment variable used in other 1546 systems and software to indicate that a colored terminal is both 1547 supported and desired. If ls(1) is suddenly emitting colors, they may 1548 be disabled again by either removing the unwanted COLORTERM from your 1549 environment, or using `ls --color=never`. The ls(1) specific CLICOLOR 1550 may not be observed in a future release. 1551 155220180808: 1553 The default pager for most commands has been changed to "less". To 1554 restore the old behavior, set PAGER="more" and MANPAGER="more -s" in 1555 your environment. 1556 155720180731: 1558 The jedec_ts(4) driver has been removed. A superset of its functionality 1559 is available in the jedec_dimm(4) driver, and the manpage for that 1560 driver includes migration instructions. If you have "device jedec_ts" 1561 in your kernel configuration file, it must be removed. 1562 156320180730: 1564 amd64/GENERIC now has EFI runtime services, EFIRT, enabled by default. 1565 This should have no effect if the kernel is booted via BIOS/legacy boot. 1566 EFIRT may be disabled via a loader tunable, efi.rt.disabled, if a system 1567 has a buggy firmware that prevents a successful boot due to use of 1568 runtime services. 1569 157020180727: 1571 Atmel AT91RM9200 and AT91SAM9, Cavium CNS 11xx and XScale 1572 support has been removed from the tree. These ports were 1573 obsolete and/or known to be broken for many years. 1574 157520180723: 1576 loader.efi has been augmented to participate more fully in the 1577 UEFI boot manager protocol. loader.efi will now look at the 1578 BootXXXX environment variable to determine if a specific kernel 1579 or root partition was specified. XXXX is derived from BootCurrent. 1580 efibootmgr(8) manages these standard UEFI variables. 1581 158220180720: 1583 zfsloader's functionality has now been folded into loader. 1584 zfsloader is no longer necessary once you've updated your 1585 boot blocks. For a transition period, we will install a 1586 hardlink for zfsloader to loader to allow a smooth transition 1587 until the boot blocks can be updated (hard link because old 1588 zfs boot blocks don't understand symlinks). 1589 159020180719: 1591 ARM64 now have efifb support, if you want to have serial console 1592 on your arm64 board when an screen is connected and the bootloader 1593 setup a frame buffer for us to use, just add : 1594 boot_serial=YES 1595 boot_multicons=YES 1596 in /boot/loader.conf 1597 For Raspberry Pi 3 (RPI) users, this is needed even if you don't have 1598 an screen connected as the firmware will setup a frame buffer are that 1599 u-boot will expose as an EFI frame buffer. 1600 160120180719: 1602 New uid:gid added, ntpd:ntpd (123:123). Be sure to run mergemaster 1603 or take steps to update /etc/passwd before doing installworld on 1604 existing systems. Do not skip the "mergemaster -Fp" step before 1605 installworld, as described in the update procedures near the bottom 1606 of this document. Also, rc.d/ntpd now starts ntpd(8) as user ntpd 1607 if the new mac_ntpd(4) policy is available, unless ntpd_flags or 1608 the ntp config file contain options that change file/dir locations. 1609 When such options (e.g., "statsdir" or "crypto") are used, ntpd can 1610 still be run as non-root by setting ntpd_user=ntpd in rc.conf, after 1611 taking steps to ensure that all required files/dirs are accessible 1612 by the ntpd user. 1613 161420180717: 1615 Big endian arm support has been removed. 1616 161720180711: 1618 The static environment setup in kernel configs is no longer mutually 1619 exclusive with the loader(8) environment by default. In order to 1620 restore the previous default behavior of disabling the loader(8) 1621 environment if a static environment is present, you must specify 1622 loader_env.disabled=1 in the static environment. 1623 162420180705: 1625 The ABI of syscalls used by management tools like sockstat and 1626 netstat has been broken to allow 32-bit binaries to work on 1627 64-bit kernels without modification. These programs will need 1628 to match the kernel in order to function. External programs may 1629 require minor modifications to accommodate a change of type in 1630 structures from pointers to 64-bit virtual addresses. 1631 163220180702: 1633 On i386 and amd64 atomics are now inlined. Out of tree modules using 1634 atomics will need to be rebuilt. 1635 163620180701: 1637 The '%I' format in the kern.corefile sysctl limits the number of 1638 core files that a process can generate to the number stored in the 1639 debug.ncores sysctl. The '%I' format is replaced by the single digit 1640 index. Previously, if all indexes were taken the kernel would overwrite 1641 only a core file with the highest index in a filename. 1642 Currently the system will create a new core file if there is a free 1643 index or if all slots are taken it will overwrite the oldest one. 1644 164520180630: 1646 Clang, llvm, lld, lldb, compiler-rt and libc++ have been upgraded to 1647 6.0.1. Please see the 20141231 entry below for information about 1648 prerequisites and upgrading, if you are not already using clang 3.5.0 1649 or higher. 1650 165120180628: 1652 r335753 introduced a new quoting method. However, etc/devd/devmatch.conf 1653 needed to be changed to work with it. This change was made with r335763 1654 and requires a mergemaster / etcupdate / etc to update the installed 1655 file. 1656 165720180612: 1658 r334930 changed the interface between the NFS modules, so they all 1659 need to be rebuilt. r335018 did a __FreeBSD_version bump for this. 1660 166120180530: 1662 As of r334391 lld is the default amd64 system linker; it is installed 1663 as /usr/bin/ld. Kernel build workarounds (see 20180510 entry) are no 1664 longer necessary. 1665 166620180530: 1667 The kernel / userland interface for devinfo changed, so you'll 1668 need a new kernel and userland as a pair for it to work (rebuilding 1669 lib/libdevinfo is all that's required). devinfo and devmatch will 1670 not work, but everything else will when there's a mismatch. 1671 167220180523: 1673 The on-disk format for hwpmc callchain records has changed to include 1674 threadid corresponding to a given record. This changes the field offsets 1675 and thus requires that libpmcstat be rebuilt before using a kernel 1676 later than r334108. 1677 167820180517: 1679 The vxge(4) driver has been removed. This driver was introduced into 1680 HEAD one week before the Exar left the Ethernet market and is not 1681 known to be used. If you have device vxge in your kernel config file 1682 it must be removed. 1683 168420180510: 1685 The amd64 kernel now requires a ld that supports ifunc to produce a 1686 working kernel, either lld or a newer binutils. lld is built by default 1687 on amd64, and the 'buildkernel' target uses it automatically. However, 1688 it is not the default linker, so building the kernel the traditional 1689 way requires LD=ld.lld on the command line (or LD=/usr/local/bin/ld for 1690 binutils port/package). lld will soon be default, and this requirement 1691 will go away. 1692 1693 NOTE: As of r334391 lld is the default system linker on amd64, and no 1694 workaround is necessary. 1695 169620180508: 1697 The nxge(4) driver has been removed. This driver was for PCI-X 10g 1698 cards made by s2io/Neterion. The company was acquired by Exar and 1699 no longer sells or supports Ethernet products. If you have device 1700 nxge in your kernel config file it must be removed. 1701 170220180504: 1703 The tz database (tzdb) has been updated to 2018e. This version more 1704 correctly models time stamps in time zones with negative DST such as 1705 Europe/Dublin (from 1971 on), Europe/Prague (1946/7), and 1706 Africa/Windhoek (1994/2017). This does not affect the UT offsets, only 1707 time zone abbreviations and the tm_isdst flag. 1708 170920180502: 1710 The ixgb(4) driver has been removed. This driver was for an early and 1711 uncommon legacy PCI 10GbE for a single ASIC, Intel 82597EX. Intel 1712 quickly shifted to the long lived ixgbe family. If you have device 1713 ixgb in your kernel config file it must be removed. 1714 171520180501: 1716 The lmc(4) driver has been removed. This was a WAN interface 1717 card that was already reportedly rare in 2003, and had an ambiguous 1718 license. If you have device lmc in your kernel config file it must 1719 be removed. 1720 172120180413: 1722 Support for Arcnet networks has been removed. If you have device 1723 arcnet or device cm in your kernel config file they must be 1724 removed. 1725 172620180411: 1727 Support for FDDI networks has been removed. If you have device 1728 fddi or device fpa in your kernel config file they must be 1729 removed. 1730 173120180406: 1732 In addition to supporting RFC 3164 formatted messages, the 1733 syslogd(8) service is now capable of parsing RFC 5424 formatted 1734 log messages. The main benefit of using RFC 5424 is that clients 1735 may now send log messages with timestamps containing year numbers, 1736 microseconds and time zone offsets. 1737 1738 Similarly, the syslog(3) C library function has been altered to 1739 send RFC 5424 formatted messages to the local system logging 1740 daemon. On systems using syslogd(8), this change should have no 1741 negative impact, as long as syslogd(8) and the C library are 1742 updated at the same time. On systems using a different system 1743 logging daemon, it may be necessary to make configuration 1744 adjustments, depending on the software used. 1745 1746 When using syslog-ng, add the 'syslog-protocol' flag to local 1747 input sources to enable parsing of RFC 5424 formatted messages: 1748 1749 source src { 1750 unix-dgram("/var/run/log" flags(syslog-protocol)); 1751 } 1752 1753 When using rsyslog, disable the 'SysSock.UseSpecialParser' option 1754 of the 'imuxsock' module to let messages be processed by the 1755 regular RFC 3164/5424 parsing pipeline: 1756 1757 module(load="imuxsock" SysSock.UseSpecialParser="off") 1758 1759 Do note that these changes only affect communication between local 1760 applications and syslogd(8). The format that syslogd(8) uses to 1761 store messages on disk or forward messages to other systems 1762 remains unchanged. syslogd(8) still uses RFC 3164 for these 1763 purposes. Options to customize this behaviour will be added in the 1764 future. Utilities that process log files stored in /var/log are 1765 thus expected to continue to function as before. 1766 1767 __FreeBSD_version has been incremented to 1200061 to denote this 1768 change. 1769 177020180328: 1771 Support for token ring networks has been removed. If you 1772 have "device token" in your kernel config you should remove 1773 it. No device drivers supported token ring. 1774 177520180323: 1776 makefs was modified to be able to tag ISO9660 El Torito boot catalog 1777 entries as EFI instead of overloading the i386 tag as done previously. 1778 The amd64 mkisoimages.sh script used to build amd64 ISO images for 1779 release was updated to use this. This may mean that makefs must be 1780 updated before "make cdrom" can be run in the release directory. This 1781 should be as simple as: 1782 1783 $ cd $SRCDIR/usr.sbin/makefs 1784 $ make depend all install 1785 178620180212: 1787 FreeBSD boot loader enhanced with Lua scripting. It's purely opt-in for 1788 now by building WITH_LOADER_LUA and WITHOUT_FORTH in /etc/src.conf. 1789 Co-existence for the transition period will come shortly. Booting is a 1790 complex environment and test coverage for Lua-enabled loaders has been 1791 thin, so it would be prudent to assume it might not work and make 1792 provisions for backup boot methods. 1793 179420180211: 1795 devmatch functionality has been turned on in devd. It will automatically 1796 load drivers for unattached devices. This may cause unexpected drivers 1797 to be loaded. Please report any problems to current@ and 1798 imp@freebsd.org. 1799 180020180114: 1801 Clang, llvm, lld, lldb, compiler-rt and libc++ have been upgraded to 1802 6.0.0. Please see the 20141231 entry below for information about 1803 prerequisites and upgrading, if you are not already using clang 3.5.0 1804 or higher. 1805 180620180110: 1807 LLVM's lld linker is now used as the FreeBSD/amd64 bootstrap linker. 1808 This means it is used to link the kernel and userland libraries and 1809 executables, but is not yet installed as /usr/bin/ld by default. 1810 1811 To revert to ld.bfd as the bootstrap linker, in /etc/src.conf set 1812 WITHOUT_LLD_BOOTSTRAP=yes 1813 181420180110: 1815 On i386, pmtimer has been removed. Its functionality has been folded 1816 into apm. It was a no-op on ACPI in current for a while now (but was 1817 still needed on i386 in FreeBSD 11 and earlier). Users may need to 1818 remove it from kernel config files. 1819 182020180104: 1821 The use of RSS hash from the network card aka flowid has been 1822 disabled by default for lagg(4) as it's currently incompatible with 1823 the lacp and loadbalance protocols. 1824 1825 This can be re-enabled by setting the following in loader.conf: 1826 net.link.lagg.default_use_flowid="1" 1827 182820180102: 1829 The SW_WATCHDOG option is no longer necessary to enable the 1830 hardclock-based software watchdog if no hardware watchdog is 1831 configured. As before, SW_WATCHDOG will cause the software 1832 watchdog to be enabled even if a hardware watchdog is configured. 1833 183420171215: 1835 r326887 fixes the issue described in the 20171214 UPDATING entry. 1836 r326888 flips the switch back to building GELI support always. 1837 183820171214: 1839 r362593 broke ZFS + GELI support for reasons unknown. However, 1840 it also broke ZFS support generally, so GELI has been turned off 1841 by default as the lesser evil in r326857. If you boot off ZFS and/or 1842 GELI, it might not be a good time to update. 1843 184420171125: 1845 PowerPC users must update loader(8) by rebuilding world before 1846 installing a new kernel, as the protocol connecting them has 1847 changed. Without the update, loader metadata will not be passed 1848 successfully to the kernel and users will have to enter their 1849 root partition at the kernel mountroot prompt to continue booting. 1850 Newer versions of loader can boot old kernels without issue. 1851 185220171110: 1853 The LOADER_FIREWIRE_SUPPORT build variable has been renamed to 1854 WITH/OUT_LOADER_FIREWIRE. LOADER_{NO_,}GELI_SUPPORT has been renamed 1855 to WITH/OUT_LOADER_GELI. 1856 185720171106: 1858 The naive and non-compliant support of posix_fallocate(2) in ZFS 1859 has been removed as of r325320. The system call now returns EINVAL 1860 when used on a ZFS file. Although the new behavior complies with the 1861 standard, some consumers are not prepared to cope with it. 1862 One known victim is lld prior to r325420. 1863 186420171102: 1865 Building in a FreeBSD src checkout will automatically create object 1866 directories now rather than store files in the current directory if 1867 'make obj' was not ran. Calling 'make obj' is no longer necessary. 1868 This feature can be disabled by setting WITHOUT_AUTO_OBJ=yes in 1869 /etc/src-env.conf (not /etc/src.conf), or passing the option in the 1870 environment. 1871 187220171101: 1873 The default MAKEOBJDIR has changed from /usr/obj/<srcdir> for native 1874 builds, and /usr/obj/<arch>/<srcdir> for cross-builds, to a unified 1875 /usr/obj/<srcdir>/<arch>. This behavior can be changed to the old 1876 format by setting WITHOUT_UNIFIED_OBJDIR=yes in /etc/src-env.conf, 1877 the environment, or with -DWITHOUT_UNIFIED_OBJDIR when building. 1878 The UNIFIED_OBJDIR option is a transitional feature that will be 1879 removed for 12.0 release; please migrate to the new format for any 1880 tools by looking up the OBJDIR used by 'make -V .OBJDIR' means rather 1881 than hardcoding paths. 1882 188320171028: 1884 The native-xtools target no longer installs the files by default to the 1885 OBJDIR. Use the native-xtools-install target with a DESTDIR to install 1886 to ${DESTDIR}/${NXTP} where NXTP defaults to /nxb-bin. 1887 188820171021: 1889 As part of the boot loader infrastructure cleanup, LOADER_*_SUPPORT 1890 options are changing from controlling the build if defined / undefined 1891 to controlling the build with explicit 'yes' or 'no' values. They will 1892 shift to WITH/WITHOUT options to match other options in the system. 1893 189420171010: 1895 libstand has turned into a private library for sys/boot use only. 1896 It is no longer supported as a public interface outside of sys/boot. 1897 189820171005: 1899 The arm port has split armv6 into armv6 and armv7. armv7 is now 1900 a valid TARGET_ARCH/MACHINE_ARCH setting. If you have an armv7 system 1901 and are running a kernel from before r324363, you will need to add 1902 MACHINE_ARCH=armv7 to 'make buildworld' to do a native build. 1903 190420171003: 1905 When building multiple kernels using KERNCONF, non-existent KERNCONF 1906 files will produce an error and buildkernel will fail. Previously 1907 missing KERNCONF files silently failed giving no indication as to 1908 why, only to subsequently discover during installkernel that the 1909 desired kernel was never built in the first place. 1910 191120170912: 1912 The default serial number format for CTL LUNs has changed. This will 1913 affect users who use /dev/diskid/* device nodes, or whose FibreChannel 1914 or iSCSI clients care about their LUNs' serial numbers. Users who 1915 require serial number stability should hardcode serial numbers in 1916 /etc/ctl.conf . 1917 191820170912: 1919 For 32-bit arm compiled for hard-float support, soft-floating point 1920 binaries now always get their shared libraries from 1921 LD_SOFT_LIBRARY_PATH (in the past, this was only used if 1922 /usr/libsoft also existed). Only users with a hard-float ld.so, but 1923 soft-float everything else should be affected. 1924 192520170826: 1926 The geli password typed at boot is now hidden. To restore the previous 1927 behavior, see geli(8) for configuration options. 1928 192920170825: 1930 Move PMTUD blackhole counters to TCPSTATS and remove them from bare 1931 sysctl values. Minor nit, but requires a rebuild of both world/kernel 1932 to complete. 1933 193420170814: 1935 "make check" behavior (made in ^/head@r295380) has been changed to 1936 execute from a limited sandbox, as opposed to executing from 1937 ${TESTSDIR}. 1938 1939 Behavioral changes: 1940 - The "beforecheck" and "aftercheck" targets are now specified. 1941 - ${CHECKDIR} (added in commit noted above) has been removed. 1942 - Legacy behavior can be enabled by setting 1943 WITHOUT_MAKE_CHECK_USE_SANDBOX in src.conf(5) or the environment. 1944 1945 If the limited sandbox mode is enabled, "make check" will execute 1946 "make distribution", then install, execute the tests, and clean up the 1947 sandbox if successful. 1948 1949 The "make distribution" and "make install" targets are typically run as 1950 root to set appropriate permissions and ownership at installation time. 1951 The end-user should set "WITH_INSTALL_AS_USER" in src.conf(5) or the 1952 environment if executing "make check" with limited sandbox mode using 1953 an unprivileged user. 1954 195520170808: 1956 Since the switch to GPT disk labels, fsck for UFS/FFS has been 1957 unable to automatically find alternate superblocks. As of r322297, 1958 the information needed to find alternate superblocks has been 1959 moved to the end of the area reserved for the boot block. 1960 Filesystems created with a newfs of this vintage or later 1961 will create the recovery information. If you have a filesystem 1962 created prior to this change and wish to have a recovery block 1963 created for your filesystem, you can do so by running fsck in 1964 foreground mode (i.e., do not use the -p or -y options). As it 1965 starts, fsck will ask ``SAVE DATA TO FIND ALTERNATE SUPERBLOCKS'' 1966 to which you should answer yes. 1967 196820170728: 1969 As of r321665, an NFSv4 server configuration that services 1970 Kerberos mounts or clients that do not support the uid/gid in 1971 owner/owner_group string capability, must explicitly enable 1972 the nfsuserd daemon by adding nfsuserd_enable="YES" to the 1973 machine's /etc/rc.conf file. 1974 197520170722: 1976 Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 5.0.0. 1977 Please see the 20141231 entry below for information about prerequisites 1978 and upgrading, if you are not already using clang 3.5.0 or higher. 1979 198020170701: 1981 WITHOUT_RCMDS is now the default. Set WITH_RCMDS if you need the 1982 r-commands (rlogin, rsh, etc.) to be built with the base system. 1983 198420170625: 1985 The FreeBSD/powerpc platform now uses a 64-bit type for time_t. This is 1986 a very major ABI incompatible change, so users of FreeBSD/powerpc must 1987 be careful when performing source upgrades. It is best to run 1988 'make installworld' from an alternate root system, either a live 1989 CD/memory stick, or a temporary root partition. Additionally, all ports 1990 must be recompiled. powerpc64 is largely unaffected, except in the case 1991 of 32-bit compatibility. All 32-bit binaries will be affected. 1992 199320170623: 1994 Forward compatibility for the "ino64" project have been committed. This 1995 will allow most new binaries to run on older kernels in a limited 1996 fashion. This prevents many of the common foot-shooting actions in the 1997 upgrade as well as the limited ability to roll back the kernel across 1998 the ino64 upgrade. Complicated use cases may not work properly, though 1999 enough simpler ones work to allow recovery in most situations. 2000 200120170620: 2002 Switch back to the BSDL dtc (Device Tree Compiler). Set WITH_GPL_DTC 2003 if you require the GPL compiler. 2004 200520170619: 2006 Forward compatibility for the "ino64" project have been committed. This 2007 will allow most new binaries to run on older kernels in a limited 2008 fashion. This prevents many of the common foot-shooting actions in the 2009 upgrade as well as the limited ability to roll back the kernel across 2010 the ino64 upgrade. Complicated use cases may not work properly, though 2011 enough simpler ones work to allow recovery in most situations. 2012 201320170618: 2014 The internal ABI used for communication between the NFS kernel modules 2015 was changed by r320085, so __FreeBSD_version was bumped to 2016 ensure all the NFS related modules are updated together. 2017 201820170617: 2019 The ABI of struct event was changed by extending the data 2020 member to 64bit and adding ext fields. For upgrade, same 2021 precautions as for the entry 20170523 "ino64" must be 2022 followed. 2023 202420170531: 2025 The GNU roff toolchain has been removed from base. To render manpages 2026 which are not supported by mandoc(1), man(1) can fallback on GNU roff 2027 from ports (and recommends to install it). 2028 To render roff(7) documents, consider using GNU roff from ports or the 2029 heirloom doctools roff toolchain from ports via pkg install groff or 2030 via pkg install heirloom-doctools. 2031 203220170524: 2033 The ath(4) and ath_hal(4) modules now build piecemeal to allow for 2034 smaller runtime footprint builds. This is useful for embedded systems 2035 which only require one chipset support. 2036 2037 If you load it as a module, make sure this is in /boot/loader.conf: 2038 2039 if_ath_load="YES" 2040 2041 This will load the HAL, all chip/RF backends and if_ath_pci. 2042 If you have if_ath_pci in /boot/loader.conf, ensure it is after 2043 if_ath or it will not load any HAL chipset support. 2044 2045 If you want to selectively load things (eg on cheaper ARM/MIPS 2046 platforms where RAM is at a premium) you should: 2047 2048 * load ath_hal 2049 * load the chip modules in question 2050 * load ath_rate, ath_dfs 2051 * load ath_main 2052 * load if_ath_pci and/or if_ath_ahb depending upon your particular 2053 bus bind type - this is where probe/attach is done. 2054 2055 For further comments/feedback, poke adrian@ . 2056 205720170523: 2058 The "ino64" 64-bit inode project has been committed, which extends 2059 a number of types to 64 bits. Upgrading in place requires care and 2060 adherence to the documented upgrade procedure. 2061 2062 If using a custom kernel configuration ensure that the 2063 COMPAT_FREEBSD11 option is included (as during the upgrade the 2064 system will be running the ino64 kernel with the existing world). 2065 2066 For the safest in-place upgrade begin by removing previous build 2067 artifacts via "rm -rf /usr/obj/*". Then, carefully follow the full 2068 procedure documented below under the heading "To rebuild everything and 2069 install it on the current system." Specifically, a reboot is required 2070 after installing the new kernel before installing world. While an 2071 installworld normally works by accident from multiuser after rebooting 2072 the proper kernel, there are many cases where this will fail across this 2073 upgrade and installworld from single user is required. 2074 207520170424: 2076 The NATM framework including the en(4), fatm(4), hatm(4), and 2077 patm(4) devices has been removed. Consumers should plan a 2078 migration before the end-of-life date for FreeBSD 11. 2079 208020170420: 2081 GNU diff has been replaced by a BSD licensed diff. Some features of GNU 2082 diff has not been implemented, if those are needed a newer version of 2083 GNU diff is available via the diffutils package under the gdiff name. 2084 208520170413: 2086 As of r316810 for ipfilter, keep frags is no longer assumed when 2087 keep state is specified in a rule. r316810 aligns ipfilter with 2088 documentation in man pages separating keep frags from keep state. 2089 This allows keep state to be specified without forcing keep frags 2090 and allows keep frags to be specified independently of keep state. 2091 To maintain previous behaviour, also specify keep frags with 2092 keep state (as documented in ipf.conf.5). 2093 209420170407: 2095 arm64 builds now use the base system LLD 4.0.0 linker by default, 2096 instead of requiring that the aarch64-binutils port or package be 2097 installed. To continue using aarch64-binutils, set 2098 CROSS_BINUTILS_PREFIX=/usr/local/aarch64-freebsd/bin . 2099 210020170405: 2101 The UDP optimization in entry 20160818 that added the sysctl 2102 net.inet.udp.require_l2_bcast has been reverted. L2 broadcast 2103 packets will no longer be treated as L3 broadcast packets. 2104 210520170331: 2106 Binds and sends to the loopback addresses, IPv6 and IPv4, will now 2107 use any explicitly assigned loopback address available in the jail 2108 instead of using the first assigned address of the jail. 2109 211020170329: 2111 The ctl.ko module no longer implements the iSCSI target frontend: 2112 cfiscsi.ko does instead. 2113 2114 If building cfiscsi.ko as a kernel module, the module can be loaded 2115 via one of the following methods: 2116 - `cfiscsi_load="YES"` in loader.conf(5). 2117 - Add `cfiscsi` to `$kld_list` in rc.conf(5). 2118 - ctladm(8)/ctld(8), when compiled with iSCSI support 2119 (`WITH_ISCSI=yes` in src.conf(5)) 2120 2121 Please see cfiscsi(4) for more details. 2122 212320170316: 2124 The mmcsd.ko module now additionally depends on geom_flashmap.ko. 2125 Also, mmc.ko and mmcsd.ko need to be a matching pair built from the 2126 same source (previously, the dependency of mmcsd.ko on mmc.ko was 2127 missing, but mmcsd.ko now will refuse to load if it is incompatible 2128 with mmc.ko). 2129 213020170315: 2131 The syntax of ipfw(8) named states was changed to avoid ambiguity. 2132 If you have used named states in the firewall rules, you need to modify 2133 them after installworld and before rebooting. Now named states must 2134 be prefixed with colon. 2135 213620170311: 2137 The old drm (sys/dev/drm/) drivers for i915 and radeon have been 2138 removed as the userland we provide cannot use them. The KMS version 2139 (sys/dev/drm2) supports the same hardware. 2140 214120170302: 2142 Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 4.0.0. 2143 Please see the 20141231 entry below for information about prerequisites 2144 and upgrading, if you are not already using clang 3.5.0 or higher. 2145 214620170221: 2147 The code that provides support for ZFS .zfs/ directory functionality 2148 has been reimplemented. It's not possible now to create a snapshot 2149 by mkdir under .zfs/snapshot/. That should be the only user visible 2150 change. 2151 215220170216: 2153 EISA bus support has been removed. The WITH_EISA option is no longer 2154 valid. 2155 215620170215: 2157 MCA bus support has been removed. 2158 215920170127: 2160 The WITH_LLD_AS_LD / WITHOUT_LLD_AS_LD build knobs have been renamed 2161 WITH_LLD_IS_LD / WITHOUT_LLD_IS_LD, for consistency with CLANG_IS_CC. 2162 216320170112: 2164 The EM_MULTIQUEUE kernel configuration option is deprecated now that 2165 the em(4) driver conforms to iflib specifications. 2166 216720170109: 2168 The igb(4), em(4) and lem(4) ethernet drivers are now implemented via 2169 IFLIB. If you have a custom kernel configuration that excludes em(4) 2170 but you use igb(4), you need to re-add em(4) to your custom 2171 configuration. 2172 217320161217: 2174 Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 3.9.1. 2175 Please see the 20141231 entry below for information about prerequisites 2176 and upgrading, if you are not already using clang 3.5.0 or higher. 2177 217820161124: 2179 Clang, llvm, lldb, compiler-rt and libc++ have been upgraded to 3.9.0. 2180 Please see the 20141231 entry below for information about prerequisites 2181 and upgrading, if you are not already using clang 3.5.0 or higher. 2182 218320161119: 2184 The layout of the pmap structure has changed for powerpc to put the pmap 2185 statistics at the front for all CPU variations. libkvm(3) and all tools 2186 that link against it need to be recompiled. 2187 218820161030: 2189 isl(4) and cyapa(4) drivers now require a new driver, 2190 chromebook_platform(4), to work properly on Chromebook-class hardware. 2191 On other types of hardware the drivers may need to be configured using 2192 device hints. Please see the corresponding manual pages for details. 2193 219420161017: 2195 The urtwn(4) driver was merged into rtwn(4) and now consists of 2196 rtwn(4) main module + rtwn_usb(4) and rtwn_pci(4) bus-specific 2197 parts. 2198 Also, firmware for RTL8188CE was renamed due to possible name 2199 conflict (rtwnrtl8192cU(B) -> rtwnrtl8192cE(B)) 2200 220120161015: 2202 GNU rcs has been removed from base. It is available as packages: 2203 - rcs: Latest GPLv3 GNU rcs version. 2204 - rcs57: Copy of the latest version of GNU rcs (GPLv2) before it was 2205 removed from base. 2206 220720161008: 2208 Use of the cc_cdg, cc_chd, cc_hd, or cc_vegas congestion control 2209 modules now requires that the kernel configuration contain the 2210 TCP_HHOOK option. (This option is included in the GENERIC kernel.) 2211 221220161003: 2213 The WITHOUT_ELFCOPY_AS_OBJCOPY src.conf(5) knob has been retired. 2214 ELF Tool Chain's elfcopy is always installed as /usr/bin/objcopy. 2215 221620160924: 2217 Relocatable object files with the extension of .So have been renamed 2218 to use an extension of .pico instead. The purpose of this change is 2219 to avoid a name clash with shared libraries on case-insensitive file 2220 systems. On those file systems, foo.So is the same file as foo.so. 2221 222220160918: 2223 GNU rcs has been turned off by default. It can (temporarily) be built 2224 again by adding WITH_RCS knob in src.conf. 2225 Otherwise, GNU rcs is available from packages: 2226 - rcs: Latest GPLv3 GNU rcs version. 2227 - rcs57: Copy of the latest version of GNU rcs (GPLv2) from base. 2228 222920160918: 2230 The backup_uses_rcs functionality has been removed from rc.subr. 2231 223220160908: 2233 The queue(3) debugging macro, QUEUE_MACRO_DEBUG, has been split into 2234 two separate components, QUEUE_MACRO_DEBUG_TRACE and 2235 QUEUE_MACRO_DEBUG_TRASH. Define both for the original 2236 QUEUE_MACRO_DEBUG behavior. 2237 223820160824: 2239 r304787 changed some ioctl interfaces between the iSCSI userspace 2240 programs and the kernel. ctladm, ctld, iscsictl, and iscsid must be 2241 rebuilt to work with new kernels. __FreeBSD_version has been bumped 2242 to 1200005. 2243 224420160818: 2245 The UDP receive code has been updated to only treat incoming UDP 2246 packets that were addressed to an L2 broadcast address as L3 2247 broadcast packets. It is not expected that this will affect any 2248 standards-conforming UDP application. The new behaviour can be 2249 disabled by setting the sysctl net.inet.udp.require_l2_bcast to 2250 0. 2251 225220160818: 2253 Remove the openbsd_poll system call. 2254 __FreeBSD_version has been bumped because of this. 2255 225620160708: 2257 The stable/11 branch has been created from head@r302406. 2258 2259After branch N is created, entries older than the N-2 branch point are removed 2260from this file. After stable/14 is branched and current becomes FreeBSD 15, 2261entries older than stable/12 branch point will be removed from current's 2262UPDATING file. 2263 2264COMMON ITEMS: 2265 2266 General Notes 2267 ------------- 2268 Sometimes, obscure build problems are the result of environment 2269 poisoning. This can happen because the make utility reads its 2270 environment when searching for values for global variables. To run 2271 your build attempts in an "environmental clean room", prefix all make 2272 commands with 'env -i '. See the env(1) manual page for more details. 2273 Occasionally a build failure will occur with "make -j" due to a race 2274 condition. If this happens try building again without -j, and please 2275 report a bug if it happens consistently. 2276 2277 When upgrading from one major version to another it is generally best to 2278 upgrade to the latest code in the currently installed branch first, then 2279 do an upgrade to the new branch. This is the best-tested upgrade path, 2280 and has the highest probability of being successful. Please try this 2281 approach if you encounter problems with a major version upgrade. Since 2282 the stable 4.x branch point, one has generally been able to upgrade from 2283 anywhere in the most recent stable branch to head / current (or even the 2284 last couple of stable branches). See the top of this file when there's 2285 an exception. 2286 2287 The update process will emit an error on an attempt to perform a build 2288 or install from a FreeBSD version below the earliest supported version. 2289 When updating from an older version the update should be performed one 2290 major release at a time, including running `make delete-old` at each 2291 step. 2292 2293 When upgrading a live system, having a root shell around before 2294 installing anything can help undo problems. Not having a root shell 2295 around can lead to problems if pam has changed too much from your 2296 starting point to allow continued authentication after the upgrade. 2297 2298 This file should be read as a log of events. When a later event changes 2299 information of a prior event, the prior event should not be deleted. 2300 Instead, a pointer to the entry with the new information should be 2301 placed in the old entry. Readers of this file should also sanity check 2302 older entries before relying on them blindly. Authors of new entries 2303 should write them with this in mind. 2304 2305 ZFS notes 2306 --------- 2307 When upgrading the boot ZFS pool to a new version (via zpool upgrade), 2308 always follow these three steps: 2309 2310 1) recompile and reinstall the ZFS boot loader and boot block 2311 (this is part of "make buildworld" and "make installworld") 2312 2313 2) update the ZFS boot block on your boot drive (only required when 2314 doing a zpool upgrade): 2315 2316 When booting on x86 via BIOS, use the following to update the ZFS boot 2317 block on the freebsd-boot partition of a GPT partitioned drive ada0: 2318 gpart bootcode -p /boot/gptzfsboot -i $N ada0 2319 The value $N will typically be 1. For EFI booting, see EFI notes. 2320 2321 3) zpool upgrade the root pool. New bootblocks will work with old 2322 pools, but not vice versa, so they need to be updated before any 2323 zpool upgrade. 2324 2325 Non-boot pools do not need these updates. 2326 2327 EFI notes 2328 --------- 2329 2330 There are two locations the boot loader can be installed into. The 2331 current location (and the default) is \efi\freebsd\loader.efi and using 2332 efibootmgr(8) to configure it. The old location, that must be used on 2333 deficient systems that don't honor efibootmgr(8) protocols, is the 2334 fallback location of \EFI\BOOT\BOOTxxx.EFI. Generally, you will copy 2335 /boot/loader.efi to this location, but on systems installed a long time 2336 ago the ESP may be too small and /boot/boot1.efi may be needed unless 2337 the ESP has been expanded in the meantime. 2338 2339 Recent systems will have the ESP mounted on /boot/efi, but older ones 2340 may not have it mounted at all, or mounted in a different 2341 location. Older arm SD images with MBR used /boot/msdos as the 2342 mountpoint. The ESP is a MSDOS filesystem. 2343 2344 The EFI boot loader rarely needs to be updated. For ZFS booting, 2345 however, you must update loader.efi before you do 'zpool upgrade' the 2346 root zpool, otherwise the old loader.efi may reject the upgraded zpool 2347 since it does not automatically understand some new features. 2348 2349 See loader.efi(8) and uefi(8) for more details. 2350 2351 To build a kernel 2352 ----------------- 2353 If you are updating from a prior version of FreeBSD (even one just 2354 a few days old), you should follow this procedure. It is the most 2355 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld, 2356 2357 make kernel-toolchain 2358 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE 2359 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE 2360 2361 If you are running kernel modules from ports, see FOOTNOTE [1]. 2362 2363 To test a kernel once 2364 --------------------- 2365 If you just want to boot a kernel once (because you are not sure 2366 if it works, or if you want to boot a known bad kernel to provide 2367 debugging information) run 2368 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel 2369 nextboot -k testkernel 2370 2371 To rebuild everything and install it on the current system. 2372 ----------------------------------------------------------- 2373 # Note: sometimes if you are running current you gotta do more than 2374 # is listed here if you are upgrading from a really old current. 2375 2376 <make sure you have good level 0 dumps> [2] 2377 make buildworld 2378 <make sure any needed PORTS_MODULES are set> [1] 2379 make buildkernel KERNCONF=YOUR_KERNEL_HERE 2380 make installkernel KERNCONF=YOUR_KERNEL_HERE 2381 <reboot in single user> [3] 2382 etcupdate -p [5] 2383 make installworld 2384 etcupdate -B [4] 2385 make delete-old [6] 2386 <reboot> 2387 2388 To cross-install current onto a separate partition 2389 -------------------------------------------------- 2390 # In this approach we use a separate partition to hold 2391 # current's root, 'usr', and 'var' directories. A partition 2392 # holding "/", "/usr" and "/var" should be about 2GB in 2393 # size. 2394 2395 <make sure you have good level 0 dumps> 2396 <boot into -stable> 2397 make buildworld 2398 make buildkernel KERNCONF=YOUR_KERNEL_HERE [1] 2399 <maybe newfs current's root partition> 2400 <mount current's root partition on directory ${CURRENT_ROOT}> 2401 make installworld DESTDIR=${CURRENT_ROOT} -DDB_FROM_SRC 2402 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd 2403 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT} 2404 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd 2405 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition> 2406 <reboot into current> 2407 <do a "native" rebuild/install as described in the previous section> 2408 <maybe install compatibility libraries from ports/misc/compat*> 2409 <reboot> 2410 2411 2412 To upgrade in-place from stable to current 2413 ---------------------------------------------- 2414 <make sure you have good level 0 dumps> [2] 2415 make buildworld [9] 2416 <make sure any needed PORTS_MODULES are set> [1] 2417 make buildkernel KERNCONF=YOUR_KERNEL_HERE [8] 2418 make installkernel KERNCONF=YOUR_KERNEL_HERE 2419 <reboot in single user> [3] 2420 etcupdate -p [5] 2421 make installworld 2422 etcupdate -B [4] 2423 make delete-old [6] 2424 <reboot> 2425 2426 Make sure that you've read the UPDATING file to understand the 2427 tweaks to various things you need. At this point in the life 2428 cycle of current, things change often and you are on your own 2429 to cope. The defaults can also change, so please read ALL of 2430 the UPDATING entries. 2431 2432 Also, if you are tracking -current, you must be subscribed to 2433 freebsd-current@freebsd.org. Make sure that before you update 2434 your sources that you have read and understood all the recent 2435 messages there. If in doubt, please track -stable which has 2436 much fewer pitfalls. 2437 2438FOOTNOTES: 2439 2440 [1] If you have third party modules, such as drm-kmod or vmware, you 2441 should disable them at this point so they don't crash your system on 2442 reboot. Alternatively, you should rebuild all the modules you have in 2443 your system and install them as well. If you are running -current, you 2444 should seriously consider placing all sources to all the modules for 2445 your system (or symlinks to them) in /usr/local/sys/modules so this 2446 happens automatically. If all your modules come from ports, then adding 2447 the port origin directories to PORTS_MODULES instead is also automatic 2448 and effective, eg: 2449 PORTS_MODULES+=graphics/drm-kmod graphics/nvidia-drm-kmod 2450 2451 [2] To make complete dumps on zfs(4), use bectl(8), which 2452 creates bootable snapshots of configurable depth that are 2453 selectable via the bootloader. For ufs(4), use dump(8) and 2454 restore(8). 2455 2456 [3] From the bootblocks, boot -s, and then do 2457 fsck -p 2458 mount -u / 2459 mount -a 2460 sh /etc/rc.d/zfs start # mount zfs filesystem, if needed 2461 cd src # full path to source 2462 adjkerntz -i # if CMOS is wall time 2463 Also, when doing a major release upgrade, it is required that you boot 2464 into single user mode to do the installworld. 2465 2466 [4] Note: This step is non-optional. Failure to do this step 2467 can result in a significant reduction in the functionality of the 2468 system. Attempting to do it by hand is not recommended and those 2469 that pursue this avenue should read this file carefully, as well 2470 as the archives of freebsd-current and freebsd-hackers mailing lists 2471 for potential gotchas. See etcupdate(8) for more information. 2472 2473 [5] Usually this step is a no-op. However, from time to time 2474 you may need to do this if you get unknown user in the following 2475 step. 2476 2477 [6] This only deletes old files and directories. Old libraries 2478 can be deleted by "make delete-old-libs", but you have to make 2479 sure that no program is using those libraries anymore. 2480 2481 [8] The new kernel must be able to run existing binaries used by an 2482 installworld. When upgrading across major versions, the new kernel's 2483 configuration must include the correct COMPAT_FREEBSD<n> option for 2484 existing binaries (e.g. COMPAT_FREEBSD11 to run 11.x binaries). Failure 2485 to do so may leave you with a system that is hard to boot to recover. A 2486 GENERIC kernel will include suitable compatibility options to run 2487 binaries from older branches. Note that the ability to run binaries 2488 from unsupported branches is not guaranteed. 2489 2490 Make sure that you merge any new devices from GENERIC since the 2491 last time you updated your kernel config file. Options also 2492 change over time, so you may need to adjust your custom kernels 2493 for these as well. 2494 2495 [9] If CPUTYPE is defined in your /etc/make.conf, make sure to use the 2496 "?=" instead of the "=" assignment operator, so that buildworld can 2497 override the CPUTYPE if it needs to. 2498 2499 MAKEOBJDIRPREFIX must be defined in an environment variable, and 2500 not on the command line, or in /etc/make.conf. buildworld will 2501 warn if it is improperly defined. 2502FORMAT: 2503 2504This file contains a list, in reverse chronological order, of major 2505breakages in tracking -current. It is not guaranteed to be a complete 2506list of such breakages, and only contains entries since September 23, 2011. 2507If you need to see UPDATING entries from before that date, you will need 2508to fetch an UPDATING file from an older FreeBSD release. 2509 2510Copyright information: 2511 2512Copyright 1998-2009 M. Warner Losh <imp@FreeBSD.org> 2513 2514Redistribution, publication, translation and use, with or without 2515modification, in full or in part, in any form or format of this 2516document are permitted without further permission from the author. 2517 2518THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR 2519IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 2520WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 2521DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT, 2522INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 2523(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 2524SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 2525HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 2526STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 2527IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 2528POSSIBILITY OF SUCH DAMAGE. 2529 2530Contact Warner Losh if you have any questions about your use of 2531this document. 2532