1 Updating Information for FreeBSD STABLE users
3 This file is maintained and copyrighted by M. Warner Losh
4 <imp@village.org>. See end of file for further details. For commonly
5 done items, please see the COMMON ITEMS: section later in the file.
7 Items affecting the ports and packages system can be found in
8 /usr/ports/UPDATING. Please read that file before running
11 20090729: p3 FreeBSD-SA-09:12.bind
12 Fix BIND named(8) dynamic update message remote DoS.
14 20090624: p2 FreeBSD-EN-09:02.bce, FreeBSD-EN-09:03.fxp,
16 Fix packet length calculation in bce(4). [EN-09:02]
18 Correctly set IP packet length for TSO in fxp(4). [EN-09:03]
20 Fix a lock order reversal bug that could cause deadlock during
23 20090610: p1 FreeBSD-SA-09:09.pipe, FreeBSD-SA-09:10.ipv6,
25 Prevent integer overflow in direct pipe write code from circumventing
26 virtual-to-physical page lookups. [09:09]
28 Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10]
30 Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11]
35 20090422: FreeBSD-SA-09:07.libc, FreeBSD-SA-09:08.openssl
36 Don't leak information via uninitialized space in db(3) records.
39 Sanity-check string lengths in order to stop OpenSSL crashing
40 when printing corrupt BMPString or UniversalString objects. [09:08]
43 Following bug-fixes to TCP connection state flags, netstat, systat,
44 and sockstat will need to be rebuilt in order to properly print
45 connections in the TIMEWAIT state.
48 Change IPv6 ephemeral port allocation from sequential to
49 random allocation, like IPv4 has done for more than four years.
50 The implementation shares infrastructure with IPv4. This
51 means that there is only one set of sysctls to control both
52 IPv4 and IPv6. See ip(4) man page for details.
55 A workaround is committed to allow the creation of System V shared
56 memory segment of size > 2 GB on the 64-bit architectures.
57 Due to a limitation of the existing ABI, the shm_segsz member
58 of the struct shmid_ds, returned by shmctl(IPC_STAT) call is
59 wrong for large segments. Note that limits must be explicitely
60 raised to allow such segments to be created.
62 The management interface that is used by ipcs(1) has to be changed
63 in incompatible way. Rebuild the ipcs(1) utility with the new
64 headers after the update. Buildworld/installworld takes care
65 of this issue automatically.
68 The open-source Atheros HAL has been merged from HEAD
70 The kernel compile-time option AH_SUPPORT_AR5416 has been
71 added to support certain newer Atheros parts, particularly
73 The following modules are no longer available, and should be
74 removed from MODULES_OVERRIDE and/or loader.conf:-
75 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
78 ZFS users on amd64 machines with 4GB or more of RAM should
79 reevaluate their need for setting vm.kmem_size_max and
80 vm.kmem_size manually. In fact, after recent changes to the
81 kernel, the default value of vm.kmem_size is larger than the
82 suggested manual setting in most ZFS/FreeBSD tuning guides.
85 Multi-IPv4/v6/no-IP jail support was merged to STABLE.
86 You need to rebuild jls(8) and to use the new features
87 jail(8), jexec(8) and cpuset(1) with a new kernel.
88 __FreeBSD_version was bumped to 701103.
91 NTFS has been removed from GENERIC kernel on amd64 to match
92 GENERIC on i386. Should not cause any issues since mount_ntfs(8)
93 will load ntfs.ko module automatically when NTFS support is
94 actually needed, unless ntfs.ko is not installed or security
95 level prohibits loading kernel modules. If either is the case,
96 "options NTFS" has to be added into kernel config.
99 powerd(8) was updated to get better SMP support.
100 Meanings of the -i and -r command line options were changed.
103 snd_hda(4) driver was updated to version 20081226_0122.
105 Due to added HDMI audio and logical audio devices support, updated
106 driver often provides several PCM devices. In some cases it can make
107 system default audio device no longer correspond to the users's
108 habbitual audio connectors. In such cases wanted device can be
109 specified in audio application setup or defined globally via
110 hw.snd.default_unit sysctl according to sound(4) and snd_hda(4)
117 ntpd has been upgraded to 4.2.4p5.
120 OpenSSH has been upgraded to 5.1p1.
123 DTrace support was merged to STABLE today. In the best
124 tradition of "the dog ate my homework", subversion decided
125 that the commit message was too large and opted not to send
126 it. It was a stealth commit!
128 A 'make buildkernel' will now default to build the kernel
129 and modules with both DTrace kernel hooks and CTF data ready
132 After you have installed both world and the kernel, and
133 rebooted, you can 'kldload dtraceall' to load all the DTrace
134 kernel modules and then you're set to run the 'dtrace'
137 For DTrace documentation, refer to:
138 <http://wikis.sun.com/display/DTrace/Documentation>
140 We are limited to kernel tracing at the moment, so the pid
141 provider is not available.
143 For the syscall provider, note that the arguments to the
144 return probes are the same as for the entry probes.
147 Today STABLE got a reorganization of the Intel E1000
148 driver code. In order to better support our new adapters
149 there is a new driver, igb, that is now to be used for
150 either the 82575 or 82576 adapters. The source however,
151 is all now in sys/dev/e1000, both em and igb drivers are
152 built from that common directory if you configure them
153 in the kernel. Making loadable drivers still happens in
154 the same place: sys/modules/[em, igb].
156 The important thing to note is that the 82575 adapters
157 were supported in the em driver in 7.0, but now needed
158 to be moved into igb, so if you have the effected cards
159 be sure and make any script changes to follow the name
162 There are only 3 PCI ID's effected in this change:
163 0x10A7, 0x10A9, and 0x10D6
164 So you can know ahead of time if they will be effected,
165 these will now be supported in the igb driver. That
166 driver will also support the new 82576 followon.
168 The driver reorg in STABLE is inconvenient but it really
169 was necessary for Intel to do this, and I figured it was
170 better to have this small admin type issue than not to
171 have support for this new hardware for a whole release
175 I have MFC'd in code to support multiple routing tables.
176 see the man pages setfib(1) and setfib(2).
177 This is a backwards compatible version,
178 but to make use of it you need to compile your kernel
179 with options ROUTETABLES=2 (or more up to 16).
185 Note the addition of m_collapse for compacting mbuf chains.
188 The AT keyboard emulation of sunkbd(4) has been turned on
189 by default. In order to make the special symbols of the Sun
190 keyboards driven by sunkbd(4) work under X these now have
191 to be configured the same way as Sun USB keyboards driven
192 by ukbd(4) (which also does AT keyboard emulation), f.e.:
194 Option "XkbLayout" "us"
195 Option "XkbRules" "xorg"
196 Option "XkbSymbols" "pc(pc105)+sun_vndr/usb(sun_usb)+us"
199 It has been decided that it is desirable to provide ABI
200 backwards compatibility to the FreeBSD 4/5/6 versions of the
201 PCIOCGETCONF, PCIOCREAD and PCIOCWRITE IOCTLs, which was
202 broken with the introduction of PCI domain support (see the
203 20070930 entry). Unfortunately, this required the ABI of
204 PCIOCGETCONF to be broken again in order to be able to
205 provide backwards compatibility to the old version of that
206 IOCTL. Thus consumers of PCIOCGETCONF have to be recompiled
207 again. As for prominent ports this affects neither pciutils
208 nor xorg-server this time, the hal port needs to be rebuilt
215 Setting WITHOUT_LIBPTHREAD now means WITHOUT_LIBKSE and
216 WITHOUT_LIBTHR are set.
219 The PCI code has been made aware of PCI domains. This means that
220 the location strings as used by pciconf(8) etc are now in the
221 following format: pci<domain>:<bus>:<device>[:<function>]. It
222 also means that consumers of <sys/pciio.h> potentially need to
223 be recompiled; this includes the hal and xorg-server ports.
226 The caching daemon (cached) was renamed to nscd. nscd.conf
227 configuration file should be used instead of cached.conf and
228 nscd_enable, nscd_pidfile and nscd_flags options should be used
229 instead of cached_enable, cached_pidfile and cached_flags in
233 The new IPsec code is now compiled in using the IPSEC option. The
234 IPSEC option now requires "device crypto" be defined in your kernel
235 configuration. The FAST_IPSEC kernel option is now deprecated.
238 The packet filter (pf) code has been updated to OpenBSD 4.1 Please
239 note the changed syntax - keep state is now on by default. Also
240 note the fact that ftp-proxy(8) has been changed from bottom up and
241 has been moved from libexec to usr/sbin. Changes in the ALTQ
242 handling also affect users of IPFW's ALTQ capabilities.
245 Remove KAME IPsec in favor of FAST_IPSEC, which is now the
246 only IPsec supported by FreeBSD. The new IPsec stack
247 supports both IPv4 and IPv6. The kernel option will change
248 after the code changes have settled in. For now the kernel
249 option IPSEC is deprecated and FAST_IPSEC is the only option, that
250 will change after some settling time.
253 The wicontrol(8) utility has been removed from the base system. wi(4)
254 cards should be configured using ifconfig(8), see the man page for more
258 The i386/amd64 GENERIC kernel now defaults to the nfe(4) driver
259 instead of the nve(4) driver. Please update your configuration
263 By default, /etc/rc.d/sendmail no longer rebuilds the aliases
264 database if it is missing or older than the aliases file. If
265 desired, set the new rc.conf option sendmail_rebuild_aliases
266 to "YES" to restore that functionality.
269 The IPv4 multicast socket code has been considerably modified, and
270 moved to the file sys/netinet/in_mcast.c. Initial support for the
271 RFC 3678 Source-Specific Multicast Socket API has been added to
272 the IPv4 network stack.
274 Strict multicast and broadcast reception is now the default for
275 UDP/IPv4 sockets; the net.inet.udp.strict_mcast_mship sysctl variable
276 has now been removed.
278 The RFC 1724 hack for interface selection has been removed; the use
279 of the Linux-derived ip_mreqn structure with IP_MULTICAST_IF has
280 been added to replace it. Consumers such as routed will soon be
281 updated to reflect this.
283 These changes affect users who are running routed(8) or rdisc(8)
284 from the FreeBSD base system on point-to-point or unnumbered
288 The net80211 layer has changed significantly and all wireless
289 drivers that depend on it need to be recompiled. Further these
290 changes require that any program that interacts with the wireless
291 support in the kernel be recompiled; this includes: ifconfig,
292 wpa_supplicant, hostapd, and wlanstats. Users must also, for
293 the moment, kldload the wlan_scan_sta and/or wlan_scan_ap modules
294 if they use modules for wireless support. These modules implement
295 scanning support for station and ap modes, respectively. Failure
296 to load the appropriate module before marking a wireless interface
297 up will result in a message to the console and the device not
301 The pam_nologin(8) module ceases to provide an authentication
302 function and starts providing an account management function.
303 Consequent changes to /etc/pam.d should be brought in using
304 mergemaster(8). Third-party files in /usr/local/etc/pam.d may
305 need manual editing as follows. Locate this line (or similar):
307 auth required pam_nologin.so no_warn
309 and change it according to this example:
311 account required pam_nologin.so no_warn
313 That is, the first word needs to be changed from "auth" to
314 "account". The new line can be moved to the account section
315 within the file for clarity. Not updating pam.conf(5) files
316 will result in nologin(5) ignored by the respective services.
319 The ether_ioctl() function has been synchronized with ioctl(2)
320 and ifnet.if_ioctl. Due to that, the size of one of its arguments
321 has changed on 64-bit architectures. All kernel modules using
322 ether_ioctl() need to be rebuilt on such architectures.
325 Improved INCLUDE_CONFIG_FILE support has been introduced to the
326 config(8) utility. In order to take advantage of this new
327 functionality, you are expected to recompile and install
328 src/usr.sbin/config. If you don't rebuild config(8), and your
329 kernel configuration depends on INCLUDE_CONFIG_FILE, the kernel
330 build will be broken because of a missing "kernconfstring"
334 Symbol versioning is enabled by default. To disable it, use
335 option WITHOUT_SYMVER. It is not advisable to attempt to
336 disable symbol versioning once it is enabled; your installworld
337 will break because a symbol version-less libc will get installed
338 before the install tools. As a result, the old install tools,
339 which previously had symbol dependencies to FBSD_1.0, will fail
340 because the freshly installed libc will not have them.
342 The default threading library (providing "libpthread") has been
343 changed to libthr. If you wish to have libkse as your default,
344 use option DEFAULT_THREAD_LIB=libkse for the buildworld.
347 The ABI breakage in sendmail(8)'s libmilter has been repaired
348 so it is no longer necessary to recompile mail filters (aka,
349 milters). If you recompiled mail filters after the 20070408
350 note, it is not necessary to recompile them again.
353 The new trunk(4) driver has been renamed to lagg(4) as it better
354 reflects its purpose. ifconfig will need to be recompiled.
357 sendmail(8) has been updated to version 8.14.1. Mail filters
358 (aka, milters) compiled against the libmilter included in the
359 base operating system should be recompiled.
362 Firmwares for ipw(4) and iwi(4) are now included in the base tree.
363 In order to use them one must agree to the respective LICENSE in
364 share/doc/legal and define legal.intel_<name>.license_ack=1 via
365 loader.conf(5) or kenv(1). Make sure to deinstall the now
366 deprecated modules from the respective firmware ports.
369 The name resolution/mapping functions addr2ascii(3) and ascii2addr(3)
370 were removed from FreeBSD's libc. These originally came from INRIA
371 IPv6. Nothing in FreeBSD ever used them. They may be regarded as
372 deprecated in previous releases.
373 The AF_LINK support for getnameinfo(3) was merged from NetBSD to
374 replace it as a more portable (and re-entrant) API.
377 To support interrupt filtering a modification to the newbus API
378 has occurred, ABI was broken and __FreeBSD_version was bumped
379 to 700031. Please make sure that your kernel and modules are in
381 http://docs.freebsd.org/cgi/mid.cgi?20070221233124.GA13941
384 The IPv6 multicast forwarding code may now be loaded into GENERIC
385 kernels by loading the ip_mroute.ko module. This is built into the
386 module unless WITHOUT_INET6 or WITHOUT_INET6_SUPPORT options are
387 set; see src.conf(5) for more information.
390 The output of netstat -r has changed. Without -n, we now only
391 print a "network name" without the prefix length if the network
392 address and mask exactly match a Class A/B/C network, and an entry
393 exists in the nsswitch "networks" map.
394 With -n, we print the full unabbreviated CIDR network prefix in
395 the form "a.b.c.d/p". 0.0.0.0/0 is always printed as "default".
396 This change is in preparation for changes such as equal-cost
397 multipath, and to more generally assist operational deployment
398 of FreeBSD as a modern IPv4 router.
401 PIM has been turned on by default in the IPv4 multicast
402 routing code. The kernel option 'PIM' has now been removed.
403 PIM is now built by default if option 'MROUTING' is specified.
404 It may now be loaded into GENERIC kernels by loading the
408 Support for IPIP tunnels (VIFF_TUNNEL) in IPv4 multicast routing
409 has been removed. Its functionality may be achieved by explicitly
410 configuring gif(4) interfaces and using the 'phyint' keyword in
412 XORP does not support source-routed IPv4 multicast tunnels nor the
413 integrated IPIP tunneling, therefore it is not affected by this
414 change. The __FreeBSD_version macro has been bumped to 700030.
417 Support for PCI Message Signalled Interrupts has been
418 re-enabled in the bge driver, only for those chips which are
419 believed to support it properly. If there are any problems,
420 MSI can be disabled completely by setting the
421 'hw.pci.enable_msi' and 'hw.pci.enable_msix' tunables to 0
425 Support for PCI Message Signalled Interrupts has been
426 disabled again in the bge driver. Many revisions of the
427 hardware fail to support it properly. Support can be
428 re-enabled by removing the #define of BGE_DISABLE_MSI in
429 "src/sys/dev/bge/if_bge.c".
432 Support for PCI Message Signalled Interrupts has been added
433 to the bge driver. If there are any problems, MSI can be
434 disabled completely by setting the 'hw.pci.enable_msi' and
435 'hw.pci.enable_msix' tunables to 0 in the loader.
438 The removal of several facets of the experimental Threading
439 system from the kernel means that the proc and thread structures
440 have changed quite a bit. I suggest all kernel modules that might
441 reference these structures be recompiled.. Especially the
445 Sound infrastructure has been updated with various fixes and
446 improvements. Most of the changes are pretty much transparent,
447 with exceptions of followings:
448 1) All sound driver specific sysctls (hw.snd.pcm%d.*) have been
449 moved to their own dev sysctl nodes, for example:
450 hw.snd.pcm0.vchans -> dev.pcm.0.vchans
451 2) /dev/dspr%d.%d has been deprecated. Each channel now has its
452 own chardev in the form of "dsp%d.<function>%d", where <function>
453 is p = playback, r = record and v = virtual, respectively. Users
454 are encouraged to use these devs instead of (old) "/dev/dsp%d.%d".
455 This does not affect those who are using "/dev/dsp".
458 geom(4)'s gmirror(8) class metadata structure has been
459 rev'd from v3 to v4. If you update across this point and
460 your metadata is converted for you, you will not be easily
461 able to downgrade since the /boot/kernel.old/geom_mirror.ko
462 kernel module will be unable to read the v4 metadata. You
463 can resolve this by doing from the loader(8) prompt:
465 set vfs.root.mountfrom="ufs:/dev/XXX"
467 where XXX is the root slice of one of the disks that composed
468 the mirror (i.e.: /dev/ad0s1a). You can then rebuild
469 the array the same way you built it originally.
472 The following binaries have been disconnected from the build:
473 mount_devfs, mount_ext2fs, mount_fdescfs, mount_procfs, mount_linprocfs,
474 and mount_std. The functionality of these programs has been
475 moved into the mount program. For example, to mount a devfs
476 filesystem, instead of using mount_devfs, use: "mount -t devfs".
477 This does not affect entries in /etc/fstab, since entries in
478 /etc/fstab are always processed with "mount -t fstype".
481 Support for PCI Message Signalled Interrupts on i386 and amd64
482 has been added to the kernel and various drivers will soon be
483 updated to use MSI when it is available. If there are any problems,
484 MSI can be disabled completely by setting the 'hw.pci.enable_msi'
485 and 'hw.pci.enable_msix' tunables to 0 in the loader.
488 The MUTEX_PROFILING option has been renamed to LOCK_PROFILING.
489 The lockmgr object layout has been changed as a result of having
490 a lock_object embedded in it. As a consequence all file system
491 kernel modules must be re-compiled. The mutex profiling man page
492 has not yet been updated to reflect this change.
495 KSE in the kernel has now been made optional and turned on by
496 default. Use 'nooption KSE' in your kernel config to turn it
497 off. All kernel modules *must* be recompiled after this change.
498 There-after, modules from a KSE kernel should be compatible with
499 modules from a NOKSE kernel due to the temporary padding fields
500 added to 'struct proc'.
503 mrouted and its utilities have been removed from the base system.
506 Some ioctl(2) command codes have changed. Full backward ABI
507 compatibility is provided if the "options COMPAT_FREEBSD6" is
508 present in the kernel configuration file. Make sure to add
509 this option to your kernel config file, or recompile X.Org
510 and the rest of ports; otherwise they may refuse to work.
513 tcpslice has been removed from the base system.
516 The sizes of struct tcpcb (and struct xtcpcb) have changed due to
517 the rewrite of TCP syncookies. Tools like netstat, sockstat, and
518 systat needs to be rebuilt.
521 libpcap updated to v0.9.4 and tcpdump to v3.9.4
524 The IPFIREWALL_FORWARD_EXTENDED option is gone and the behaviour
525 for IPFIREWALL_FORWARD is now as it was before when it was first
526 committed and for years after. The behaviour is now ON.
529 enigma(1)/crypt(1) utility has been changed on 64 bit architectures.
530 Now it can decrypt files created from different architectures.
531 Unfortunately, it is no longer able to decrypt a cipher text
532 generated with an older version on 64 bit architectures.
533 If you have such a file, you need old utility to decrypt it.
536 The interface version of the i4b kernel part has changed. So
537 after updating the kernel sources and compiling a new kernel,
538 the i4b user space tools in "/usr/src/usr.sbin/i4b" must also
539 be rebuilt, and vice versa.
542 The XBOX kernel now defaults to the nfe(4) driver instead of
543 the nve(4) driver. Please update your configuration
547 The i386-only lnc(4) driver for the AMD Am7900 LANCE and Am79C9xx
548 PCnet family of NICs has been removed. The new le(4) driver serves
549 as an equivalent but cross-platform replacement with the pcn(4)
550 driver still providing performance-optimized support for the subset
551 of AMD Am79C971 PCnet-FAST and greater chips as before.
554 The machdep.* sysctls and the adjkerntz utility have been
555 modified a bit. The new adjkerntz utility uses the new
556 sysctl names and sysctlbyname() calls, so it may be impossible
557 to run an old /sbin/adjkerntz utility in single-user mode
558 with a new kernel. Replace the `adjkerntz -i' step before
559 `make installworld' with:
561 /usr/obj/usr/src/sbin/adjkerntz/adjkerntz -i
563 and proceed as usual with the rest of the installworld-stage
564 steps. Otherwise, you risk installing binaries with their
565 timestamp set several hours in the future, especially if
566 you are running with local time set to GMT+X hours.
569 The ip6fw utility has been removed. The behavior provided by
570 ip6fw has been in ipfw2 for a good while and the rc.d scripts
571 have been updated to deal with it. There are some rules that
572 might not migrate cleanly. Use rc.firewall6 as a template to
576 The puc(4) driver has been overhauled. The ebus(4) and sbus(4)
577 attachments have been removed. Make sure to configure scc(4)
578 on sparc64. Note also that by default puc(4) will use uart(4)
579 and not sio(4) for serial ports because interrupt handling has
580 been optimized for multi-port serial cards and only uart(4)
581 implements the interface to support it.
584 The scc(4) driver replaces puc(4) for Serial Communications
585 Controllers (SCCs) like the Siemens SAB82532 and the Zilog
586 Z8530. On sparc64, it is advised to add scc(4) to the kernel
587 configuration to make sure that the serial ports remain
591 Most world/kernel related NO_* build options changed names.
592 New knobs have common prefixes WITHOUT_*/WITH_* (modelled
593 after FreeBSD ports) and should be set in /etc/src.conf
594 (the src.conf(5) manpage is provided). Full backwards
595 compatibility is maintained for the time being though it's
596 highly recommended to start moving old options out of the
597 system-wide /etc/make.conf file into the new /etc/src.conf
598 while also properly renaming them. More conversions will
599 likely follow. Posting to current@:
601 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
604 The NETSMBCRYPTO kernel option has been retired because its
605 functionality is always included in NETSMB and smbfs.ko now.
608 The TDFX_LINUX kernel option was retired and replaced by the
609 tdfx_linux device. The latter can be loaded as the 3dfx_linux.ko
610 kernel module. Loading it alone should suffice to get 3dfx support
611 for Linux apps because it will pull in 3dfx.ko and linux.ko through
615 The 'audit' group was added to support the new auditing functionality
616 in the base system. Be sure to follow the directions for updating,
617 including the requirement to run mergemaster -p.
620 The kernel ABI to file system modules was changed on i386.
621 Please make sure that your kernel and modules are in sync.
624 This actually occured some time ago, but installing the kernel
625 now also installs a bunch of symbol files for the kernel modules.
626 This increases the size of /boot/kernel to about 67Mbytes. You
627 will need twice this if you will eventually back this up to kernel.old
628 on your next install.
629 If you have a shortage of room in your root partition, you should add
630 -DINSTALL_NODEBUG to your make arguments or add INSTALL_NODEBUG="yes"
631 to your /etc/make.conf.
634 libc's malloc implementation has been replaced. This change has the
635 potential to uncover application bugs that previously went unnoticed.
636 See the malloc(3) manual page for more details.
639 The generic netgraph(4) cookie has been changed. If you upgrade
640 kernel passing this point, you also need to upgrade userland
641 and netgraph(4) utilities like ports/net/mpd or ports/net/mpd4.
644 si(4)'s device files now contain the unit number.
645 Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
648 The kernel ABI was mostly destroyed due to a change in the size
649 of struct lock_object which is nested in other structures such
650 as mutexes which are nested in all sorts of other structures.
651 Make sure your kernel and modules are in sync.
654 The page coloring algorithm in the VM subsystem was converted
655 from tuning with kernel options to autotuning. Please remove
656 any PQ_* option except PQ_NOOPT from your kernel config.
659 The net80211-related tools in the tools/tools/ath directory
660 have been moved to tools/tools/net80211 and renamed with a
661 "wlan" prefix. Scripts that use them should be adjusted
665 Scripts in the local_startup directories (as defined in
666 /etc/defaults/rc.conf) that have the new rc.d semantics will
667 now be run as part of the base system rcorder. If there are
668 errors or problems with one of these local scripts, it could
669 cause boot problems. If you encounter such problems, boot in
670 single user mode, remove that script from the */rc.d directory.
671 Please report the problem to the port's maintainer, and the
672 freebsd-ports@freebsd.org mailing list.
675 The nodev mount option was deprecated in RELENG_6 (where it
676 was a no-op), and is now unsupported. If you have nodev or dev listed
677 in /etc/fstab, remove it, otherwise it will result in a mount error.
680 ABI between ipfw(4) and ipfw(8) has been changed. You need
681 to rebuild ipfw(8) when rebuilding kernel.
684 rp(4)'s device files now contain the unit number.
685 Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
688 /etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
689 Its /etc/rc.conf.d configuration file has been `ppp' from
690 the beginning, and hence there is no need to touch it.
693 Now most modules get their build-time options from the kernel
694 configuration file. A few modules still have fixed options
695 due to their non-conformant implementation, but they will be
696 corrected eventually. You may need to review the options of
697 the modules in use, explicitly specify the non-default options
698 in the kernel configuration file, and rebuild the kernel and
702 kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
703 to turn polling(4) on your interfaces.
706 The old bridge(4) implementation was retired. The new
707 if_bridge(4) serves as a full functional replacement.
710 The ai_addrlen of a struct addrinfo was changed to a socklen_t
711 to conform to POSIX-2001. This change broke an ABI
712 compatibility on 64 bit architecture. You have to recompile
713 userland programs that use getaddrinfo(3) on 64 bit
717 RELENG_6 branched here.
720 The pccard_ifconfig rc.conf variable has been removed and a new
721 variable, ifconfig_DEFAULT has been introduced. Unlike
722 pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
723 do not have ifconfig_ifn entries rather than just those in
724 removable_interfaces.
727 Some previous versions of PAM have permitted the use of
728 non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
729 to third party PAM modules in /usr/local/lib. A change has been
730 made to require the use of absolute paths in order to avoid
731 ambiguity and dependence on library path configuration, which may
732 affect existing configurations.
735 Major changes to network interface API. All drivers must be
736 recompiled. Drivers not in the base system will need to be
737 updated to the new APIs.
740 Changes were made to kinfo_proc in sys/user.h. Please recompile
741 userland, or commands like `fstat', `pkill', `ps', `top' and `w'
742 will not behave correctly.
744 The API and ABI for hwpmc(4) have changed with the addition
745 of sampling support. Please recompile lib/libpmc(3) and
746 usr.sbin/{pmcstat,pmccontrol}.
749 The OpenBSD dhclient was imported in place of the ISC dhclient
750 and the network interface configuration scripts were updated
751 accordingly. If you use DHCP to configure your interfaces, you
752 must now run devd. Also, DNS updating was lost so you will need
753 to find a workaround if you use this feature.
755 The '_dhcp' user was added to support the OpenBSD dhclient. Be
756 sure to run mergemaster -p (like you are supposed to do every time
760 if_bridge was added to the tree. This has changed struct ifnet.
761 Please recompile userland and all network related modules.
764 The n_net of a struct netent was changed to an uint32_t, and
765 1st argument of getnetbyaddr() was changed to an uint32_t, to
766 conform to POSIX-2001. These changes broke an ABI
767 compatibility on 64 bit architecture. With these changes,
768 shlib major of libpcap was bumped. You have to recompile
769 userland programs that use getnetbyaddr(3), getnetbyname(3),
770 getnetent(3) and/or libpcap on 64 bit architecture.
773 Kernel parsing of extra options on '#!' first lines of shell
774 scripts has changed. Lines with multiple options likely will
775 fail after this date. For full details, please see
776 http://people.freebsd.org/~gad/Updating-20050528.txt
779 The packet filter (pf) code has been updated to OpenBSD 3.7
780 Please note the changed anchor syntax and the fact that
781 authpf(8) now needs a mounted fdescfs(5) to function.
784 The NO_MIXED_MODE kernel option has been removed from the i386
785 amd64 platforms as its use has been superceded by the new local
786 APIC timer code. Any kernel config files containing this option
790 The on-disk format of LC_CTYPE files was changed to be machine
791 independent. Please make sure NOT to use NO_CLEAN buildworld
792 when crossing this point. Crossing this point also requires
793 recompile or reinstall of all locale depended packages.
796 The ifi_epoch member of struct if_data has been changed to
797 contain the uptime at which the interface was created or the
798 statistics zeroed rather then the wall clock time because
799 wallclock time may go backwards. This should have no impact
800 unless an snmp implementation is using this value (I know of
804 The acpi_perf and acpi_throttle drivers are now part of the
805 acpi(4) main module. They are no longer built separately.
808 The layout of struct image_params has changed. You have to
809 recompile all compatibility modules (linux, svr4, etc) for use
813 The p4tcc driver has been merged into cpufreq(4). This makes
814 "options CPU_ENABLE_TCC" obsolete. Please load cpufreq.ko or
815 compile in "device cpufreq" to restore this functionality.
818 The responsibility of recomputing the file system summary of
819 a SoftUpdates-enabled dirty volume has been transferred to the
820 background fsck. A rebuild of fsck(8) utility is recommended
821 if you have updated the kernel.
823 To get the old behavior (recompute file system summary at mount
824 time), you can set vfs.ffs.compute_summary_at_mount=1 before
825 mounting the new volume.
828 The cpufreq import is complete. As part of this, the sysctls for
829 acpi(4) throttling have been removed. The power_profile script
830 has been updated, so you can use performance/economy_cpu_freq in
831 rc.conf(5) to set AC on/offline cpu frequencies.
834 NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
835 requires recompiling libnetgraph and userland netgraph utilities.
838 Support for abbreviated forms of a number of ipfw options is
839 now deprecated. Warnings are printed to stderr indicating the
840 correct full form when a match occurs. Some abbreviations may
841 be supported at a later date based on user feedback. To be
842 considered for support, abbreviations must be in use prior to
843 this commit and unlikely to be confused with current key words.
846 By a popular demand, a lot of NOFOO options were renamed
847 to NO_FOO (see bsd.compat.mk for a full list). The old
848 spellings are still supported, but will cause annoying
849 warnings on stderr. Make sure you upgrade properly (see
850 the COMMON ITEMS: section later in this file).
853 Auto-loading of ancillary wlan modules such as wlan_wep has
854 been temporarily disabled; you need to statically configure
855 the modules you need into your kernel or explicitly load them
856 prior to use. Specifically, if you intend to use WEP encryption
857 with an 802.11 device load/configure wlan_wep; if you want to
858 use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
859 and wlan_xauth as required.
862 The behaviour of ppp(8) has changed slightly. If lqr is enabled
863 (``enable lqr''), older versions would revert to LCP ECHO mode on
864 negotiation failure. Now, ``enable echo'' is required for this
865 behaviour. The ppp version number has been bumped to 3.4.2 to
869 The wlan support has been updated to split the crypto support
870 into separate modules. For static WEP you must configure the
871 wlan_wep module in your system or build and install the module
872 in place where it can be loaded (the kernel will auto-load
873 the module when a wep key is configured).
876 The ath driver has been updated to split the tx rate control
877 algorithm into a separate module. You need to include either
878 ath_rate_onoe or ath_rate_amrr when configuring the kernel.
881 Support for systems with an 80386 CPU has been removed. Please
882 use FreeBSD 5.x or earlier on systems with an 80386.
885 We have had a hack which would mount the root filesystem
886 R/W if the device were named 'md*'. As part of the vnode
887 work I'm doing I have had to remove this hack. People
888 building systems which use preloaded MD root filesystems
889 may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
890 their /etc/rc scripts.
893 FreeBSD 5.3 shipped here.
896 The size of struct tcpcb has changed again due to the removal
897 of RFC1644 T/TCP. You have to recompile userland programs that
898 read kmem for tcp sockets directly (netstat, sockstat, etc.)
901 The size of struct tcpcb has changed. You have to recompile
902 userland programs that read kmem for tcp sockets directly
903 (netstat, sockstat, etc.)
906 RELENG_5 branched here. For older entries, please see updating
907 in the RELENG_5 branch.
913 Avoid using make -j when upgrading. From time to time in the
914 past there have been problems using -j with buildworld and/or
915 installworld. This is especially true when upgrading between
916 "distant" versions (eg one that cross a major release boundary
917 or several minor releases, or when several months have passed
918 on the -current branch).
920 Sometimes, obscure build problems are the result of environment
921 poisoning. This can happen because the make utility reads its
922 environment when searching for values for global variables.
923 To run your build attempts in an "environmental clean room",
924 prefix all make commands with 'env -i '. See the env(1) manual
925 page for more details.
927 When upgrading from one major version to another it is generally
928 best to upgrade to the latest code in the currently installed branch
929 first, then do an upgrade to the new branch. This is the best-tested
930 upgrade path, and has the highest probability of being successful.
931 Please try this approach before reporting problems with a major
936 If you are updating from a prior version of FreeBSD (even one just
937 a few days old), you should follow this procedure. It is the most
938 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
940 make kernel-toolchain
941 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
942 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
944 To test a kernel once
945 ---------------------
946 If you just want to boot a kernel once (because you are not sure
947 if it works, or if you want to boot a known bad kernel to provide
948 debugging information) run
949 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
950 nextboot -k testkernel
952 To just build a kernel when you know that it won't mess you up
953 --------------------------------------------------------------
954 This assumes you are already running a 5.X system. Replace
955 ${arch} with the architecture of your machine (e.g. "i386",
956 "alpha", "amd64", "ia64", "pc98", "sparc64", etc).
958 cd src/sys/${arch}/conf
959 config KERNEL_NAME_HERE
960 cd ../compile/KERNEL_NAME_HERE
965 If this fails, go to the "To build a kernel" section.
967 To rebuild everything and install it on the current system.
968 -----------------------------------------------------------
969 # Note: sometimes if you are running current you gotta do more than
970 # is listed here if you are upgrading from a really old current.
972 <make sure you have good level 0 dumps>
974 make kernel KERNCONF=YOUR_KERNEL_HERE
976 <reboot in single user> [3]
984 To cross-install current onto a separate partition
985 --------------------------------------------------
986 # In this approach we use a separate partition to hold
987 # current's root, 'usr', and 'var' directories. A partition
988 # holding "/", "/usr" and "/var" should be about 2GB in
991 <make sure you have good level 0 dumps>
994 make buildkernel KERNCONF=YOUR_KERNEL_HERE
995 <maybe newfs current's root partition>
996 <mount current's root partition on directory ${CURRENT_ROOT}>
997 make installworld DESTDIR=${CURRENT_ROOT}
998 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
999 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1000 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1001 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1002 <reboot into current>
1003 <do a "native" rebuild/install as described in the previous section>
1004 <maybe install compatibility libraries from src/lib/compat>
1008 To upgrade in-place from 5.x-stable to current
1009 ----------------------------------------------
1010 <make sure you have good level 0 dumps>
1012 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1014 <reboot in single user> [3]
1021 Make sure that you've read the UPDATING file to understand the
1022 tweaks to various things you need. At this point in the life
1023 cycle of current, things change often and you are on your own
1024 to cope. The defaults can also change, so please read ALL of
1025 the UPDATING entries.
1027 Also, if you are tracking -current, you must be subscribed to
1028 freebsd-current@freebsd.org. Make sure that before you update
1029 your sources that you have read and understood all the recent
1030 messages there. If in doubt, please track -stable which has
1031 much fewer pitfalls.
1033 [1] If you have third party modules, such as vmware, you
1034 should disable them at this point so they don't crash your
1037 [3] From the bootblocks, boot -s, and then do
1042 adjkerntz -i # if CMOS is wall time
1043 Also, when doing a major release upgrade, it is required that
1044 you boot into single user mode to do the installworld.
1046 [4] Note: This step is non-optional. Failure to do this step
1047 can result in a significant reduction in the functionality of the
1048 system. Attempting to do it by hand is not recommended and those
1049 that pursue this avenue should read this file carefully, as well
1050 as the archives of freebsd-current and freebsd-hackers mailing lists
1051 for potential gotchas.
1053 [5] Usually this step is a noop. However, from time to time
1054 you may need to do this if you get unknown user in the following
1055 step. It never hurts to do it all the time. You may need to
1056 install a new mergemaster (cd src/usr.sbin/mergemaster && make
1057 install) after the buildworld before this step if you last updated
1058 from current before 20020224 or from -stable before 20020408.
1060 [8] In order to have a kernel that can run the 4.x binaries
1061 needed to do an installworld, you must include the COMPAT_FREEBSD4
1062 option in your kernel. Failure to do so may leave you with a system
1063 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1064 is required to run the 5.x binaries on more recent kernels.
1066 Make sure that you merge any new devices from GENERIC since the
1067 last time you updated your kernel config file.
1069 [9] When checking out sources, you must include the -P flag to have
1070 cvs prune empty directories.
1072 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1073 "?=" instead of the "=" assignment operator, so that buildworld can
1074 override the CPUTYPE if it needs to.
1076 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1077 not on the command line, or in /etc/make.conf. buildworld will
1078 warn if it is improperly defined.
1081 This file contains a list, in reverse chronological order, of major
1082 breakages in tracking -current. Not all things will be listed here,
1083 and it only starts on October 16, 2004. Updating files can found in
1084 previous releases if your system is older than this.
1086 Copyright information:
1088 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1090 Redistribution, publication, translation and use, with or without
1091 modification, in full or in part, in any form or format of this
1092 document are permitted without further permission from the author.
1094 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1095 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1096 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1097 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1098 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1099 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1100 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1101 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1102 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1103 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1104 POSSIBILITY OF SUCH DAMAGE.
1106 If you find this document useful, and you want to, you may buy the
1109 Contact Warner Losh if you have any questions about your use of