1 Updating Information for FreeBSD STABLE users
3 This file is maintained and copyrighted by M. Warner Losh
4 <imp@village.org>. See end of file for further details. For commonly
5 done items, please see the COMMON ITEMS: section later in the file.
7 Items affecting the ports and packages system can be found in
8 /usr/ports/UPDATING. Please read that file before running
11 20100227: p7 FreeBSD-EN-10:02.sched_ule
12 Fix a deadlock in the ULE scheduler.
14 20100106: p6 FreeBSD-SA-10:01.bind, FreeBSD-SA-10:02.ntpd,
16 Fix BIND named(8) cache poisoning with DNSSEC validation.
19 Fix ntpd mode 7 denial of service. [SA-10:02]
21 Fix ZFS ZIL playback with insecure permissions. [SA-10:03]
23 20091203: p5 FreeBSD-SA-09:15.ssl, FreeBSD-SA-09:16.rtld,
24 FreeBSD-SA-09:17.freebsd-update
25 Disable SSL renegotiation in order to protect against a serious
26 protocol flaw. [09:15]
28 Correctly handle failures from unsetenv resulting from a corrupt
29 environment in rtld-elf. [09:16]
31 Fix permissions in freebsd-update in order to prevent leakage of
32 sensitive files. [09:17]
34 20091002: p4 FreeBSD-SA-09:14.devfs FreeBSD-EN-09:05.null
35 Fix devfs / VFS NULL pointer race condition. [SA-09:14]
37 Add no zero mapping feature. [EN-09:05]
39 20090729: p3 FreeBSD-SA-09:12.bind
40 Fix BIND named(8) dynamic update message remote DoS.
42 20090624: p2 FreeBSD-EN-09:02.bce, FreeBSD-EN-09:03.fxp,
44 Fix packet length calculation in bce(4). [EN-09:02]
46 Correctly set IP packet length for TSO in fxp(4). [EN-09:03]
48 Fix a lock order reversal bug that could cause deadlock during
51 20090610: p1 FreeBSD-SA-09:09.pipe, FreeBSD-SA-09:10.ipv6,
53 Prevent integer overflow in direct pipe write code from circumventing
54 virtual-to-physical page lookups. [09:09]
56 Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10]
58 Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11]
63 20090422: FreeBSD-SA-09:07.libc, FreeBSD-SA-09:08.openssl
64 Don't leak information via uninitialized space in db(3) records.
67 Sanity-check string lengths in order to stop OpenSSL crashing
68 when printing corrupt BMPString or UniversalString objects. [09:08]
71 Following bug-fixes to TCP connection state flags, netstat, systat,
72 and sockstat will need to be rebuilt in order to properly print
73 connections in the TIMEWAIT state.
76 Change IPv6 ephemeral port allocation from sequential to
77 random allocation, like IPv4 has done for more than four years.
78 The implementation shares infrastructure with IPv4. This
79 means that there is only one set of sysctls to control both
80 IPv4 and IPv6. See ip(4) man page for details.
83 A workaround is committed to allow the creation of System V shared
84 memory segment of size > 2 GB on the 64-bit architectures.
85 Due to a limitation of the existing ABI, the shm_segsz member
86 of the struct shmid_ds, returned by shmctl(IPC_STAT) call is
87 wrong for large segments. Note that limits must be explicitely
88 raised to allow such segments to be created.
90 The management interface that is used by ipcs(1) has to be changed
91 in incompatible way. Rebuild the ipcs(1) utility with the new
92 headers after the update. Buildworld/installworld takes care
93 of this issue automatically.
96 The open-source Atheros HAL has been merged from HEAD
98 The kernel compile-time option AH_SUPPORT_AR5416 has been
99 added to support certain newer Atheros parts, particularly
100 PCI-Express chipsets.
101 The following modules are no longer available, and should be
102 removed from MODULES_OVERRIDE and/or loader.conf:-
103 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
106 ZFS users on amd64 machines with 4GB or more of RAM should
107 reevaluate their need for setting vm.kmem_size_max and
108 vm.kmem_size manually. In fact, after recent changes to the
109 kernel, the default value of vm.kmem_size is larger than the
110 suggested manual setting in most ZFS/FreeBSD tuning guides.
113 Multi-IPv4/v6/no-IP jail support was merged to STABLE.
114 You need to rebuild jls(8) and to use the new features
115 jail(8), jexec(8) and cpuset(1) with a new kernel.
116 __FreeBSD_version was bumped to 701103.
119 NTFS has been removed from GENERIC kernel on amd64 to match
120 GENERIC on i386. Should not cause any issues since mount_ntfs(8)
121 will load ntfs.ko module automatically when NTFS support is
122 actually needed, unless ntfs.ko is not installed or security
123 level prohibits loading kernel modules. If either is the case,
124 "options NTFS" has to be added into kernel config.
127 powerd(8) was updated to get better SMP support.
128 Meanings of the -i and -r command line options were changed.
131 snd_hda(4) driver was updated to version 20081226_0122.
133 Due to added HDMI audio and logical audio devices support, updated
134 driver often provides several PCM devices. In some cases it can make
135 system default audio device no longer correspond to the users's
136 habbitual audio connectors. In such cases wanted device can be
137 specified in audio application setup or defined globally via
138 hw.snd.default_unit sysctl according to sound(4) and snd_hda(4)
145 ntpd has been upgraded to 4.2.4p5.
148 OpenSSH has been upgraded to 5.1p1.
151 DTrace support was merged to STABLE today. In the best
152 tradition of "the dog ate my homework", subversion decided
153 that the commit message was too large and opted not to send
154 it. It was a stealth commit!
156 A 'make buildkernel' will now default to build the kernel
157 and modules with both DTrace kernel hooks and CTF data ready
160 After you have installed both world and the kernel, and
161 rebooted, you can 'kldload dtraceall' to load all the DTrace
162 kernel modules and then you're set to run the 'dtrace'
165 For DTrace documentation, refer to:
166 <http://wikis.sun.com/display/DTrace/Documentation>
168 We are limited to kernel tracing at the moment, so the pid
169 provider is not available.
171 For the syscall provider, note that the arguments to the
172 return probes are the same as for the entry probes.
175 Today STABLE got a reorganization of the Intel E1000
176 driver code. In order to better support our new adapters
177 there is a new driver, igb, that is now to be used for
178 either the 82575 or 82576 adapters. The source however,
179 is all now in sys/dev/e1000, both em and igb drivers are
180 built from that common directory if you configure them
181 in the kernel. Making loadable drivers still happens in
182 the same place: sys/modules/[em, igb].
184 The important thing to note is that the 82575 adapters
185 were supported in the em driver in 7.0, but now needed
186 to be moved into igb, so if you have the effected cards
187 be sure and make any script changes to follow the name
190 There are only 3 PCI ID's effected in this change:
191 0x10A7, 0x10A9, and 0x10D6
192 So you can know ahead of time if they will be effected,
193 these will now be supported in the igb driver. That
194 driver will also support the new 82576 followon.
196 The driver reorg in STABLE is inconvenient but it really
197 was necessary for Intel to do this, and I figured it was
198 better to have this small admin type issue than not to
199 have support for this new hardware for a whole release
203 I have MFC'd in code to support multiple routing tables.
204 see the man pages setfib(1) and setfib(2).
205 This is a backwards compatible version,
206 but to make use of it you need to compile your kernel
207 with options ROUTETABLES=2 (or more up to 16).
213 Note the addition of m_collapse for compacting mbuf chains.
216 The AT keyboard emulation of sunkbd(4) has been turned on
217 by default. In order to make the special symbols of the Sun
218 keyboards driven by sunkbd(4) work under X these now have
219 to be configured the same way as Sun USB keyboards driven
220 by ukbd(4) (which also does AT keyboard emulation), f.e.:
222 Option "XkbLayout" "us"
223 Option "XkbRules" "xorg"
224 Option "XkbSymbols" "pc(pc105)+sun_vndr/usb(sun_usb)+us"
227 It has been decided that it is desirable to provide ABI
228 backwards compatibility to the FreeBSD 4/5/6 versions of the
229 PCIOCGETCONF, PCIOCREAD and PCIOCWRITE IOCTLs, which was
230 broken with the introduction of PCI domain support (see the
231 20070930 entry). Unfortunately, this required the ABI of
232 PCIOCGETCONF to be broken again in order to be able to
233 provide backwards compatibility to the old version of that
234 IOCTL. Thus consumers of PCIOCGETCONF have to be recompiled
235 again. As for prominent ports this affects neither pciutils
236 nor xorg-server this time, the hal port needs to be rebuilt
243 Setting WITHOUT_LIBPTHREAD now means WITHOUT_LIBKSE and
244 WITHOUT_LIBTHR are set.
247 The PCI code has been made aware of PCI domains. This means that
248 the location strings as used by pciconf(8) etc are now in the
249 following format: pci<domain>:<bus>:<device>[:<function>]. It
250 also means that consumers of <sys/pciio.h> potentially need to
251 be recompiled; this includes the hal and xorg-server ports.
254 The caching daemon (cached) was renamed to nscd. nscd.conf
255 configuration file should be used instead of cached.conf and
256 nscd_enable, nscd_pidfile and nscd_flags options should be used
257 instead of cached_enable, cached_pidfile and cached_flags in
261 The new IPsec code is now compiled in using the IPSEC option. The
262 IPSEC option now requires "device crypto" be defined in your kernel
263 configuration. The FAST_IPSEC kernel option is now deprecated.
266 The packet filter (pf) code has been updated to OpenBSD 4.1 Please
267 note the changed syntax - keep state is now on by default. Also
268 note the fact that ftp-proxy(8) has been changed from bottom up and
269 has been moved from libexec to usr/sbin. Changes in the ALTQ
270 handling also affect users of IPFW's ALTQ capabilities.
273 Remove KAME IPsec in favor of FAST_IPSEC, which is now the
274 only IPsec supported by FreeBSD. The new IPsec stack
275 supports both IPv4 and IPv6. The kernel option will change
276 after the code changes have settled in. For now the kernel
277 option IPSEC is deprecated and FAST_IPSEC is the only option, that
278 will change after some settling time.
281 The wicontrol(8) utility has been removed from the base system. wi(4)
282 cards should be configured using ifconfig(8), see the man page for more
286 The i386/amd64 GENERIC kernel now defaults to the nfe(4) driver
287 instead of the nve(4) driver. Please update your configuration
291 By default, /etc/rc.d/sendmail no longer rebuilds the aliases
292 database if it is missing or older than the aliases file. If
293 desired, set the new rc.conf option sendmail_rebuild_aliases
294 to "YES" to restore that functionality.
297 The IPv4 multicast socket code has been considerably modified, and
298 moved to the file sys/netinet/in_mcast.c. Initial support for the
299 RFC 3678 Source-Specific Multicast Socket API has been added to
300 the IPv4 network stack.
302 Strict multicast and broadcast reception is now the default for
303 UDP/IPv4 sockets; the net.inet.udp.strict_mcast_mship sysctl variable
304 has now been removed.
306 The RFC 1724 hack for interface selection has been removed; the use
307 of the Linux-derived ip_mreqn structure with IP_MULTICAST_IF has
308 been added to replace it. Consumers such as routed will soon be
309 updated to reflect this.
311 These changes affect users who are running routed(8) or rdisc(8)
312 from the FreeBSD base system on point-to-point or unnumbered
316 The net80211 layer has changed significantly and all wireless
317 drivers that depend on it need to be recompiled. Further these
318 changes require that any program that interacts with the wireless
319 support in the kernel be recompiled; this includes: ifconfig,
320 wpa_supplicant, hostapd, and wlanstats. Users must also, for
321 the moment, kldload the wlan_scan_sta and/or wlan_scan_ap modules
322 if they use modules for wireless support. These modules implement
323 scanning support for station and ap modes, respectively. Failure
324 to load the appropriate module before marking a wireless interface
325 up will result in a message to the console and the device not
329 The pam_nologin(8) module ceases to provide an authentication
330 function and starts providing an account management function.
331 Consequent changes to /etc/pam.d should be brought in using
332 mergemaster(8). Third-party files in /usr/local/etc/pam.d may
333 need manual editing as follows. Locate this line (or similar):
335 auth required pam_nologin.so no_warn
337 and change it according to this example:
339 account required pam_nologin.so no_warn
341 That is, the first word needs to be changed from "auth" to
342 "account". The new line can be moved to the account section
343 within the file for clarity. Not updating pam.conf(5) files
344 will result in nologin(5) ignored by the respective services.
347 The ether_ioctl() function has been synchronized with ioctl(2)
348 and ifnet.if_ioctl. Due to that, the size of one of its arguments
349 has changed on 64-bit architectures. All kernel modules using
350 ether_ioctl() need to be rebuilt on such architectures.
353 Improved INCLUDE_CONFIG_FILE support has been introduced to the
354 config(8) utility. In order to take advantage of this new
355 functionality, you are expected to recompile and install
356 src/usr.sbin/config. If you don't rebuild config(8), and your
357 kernel configuration depends on INCLUDE_CONFIG_FILE, the kernel
358 build will be broken because of a missing "kernconfstring"
362 Symbol versioning is enabled by default. To disable it, use
363 option WITHOUT_SYMVER. It is not advisable to attempt to
364 disable symbol versioning once it is enabled; your installworld
365 will break because a symbol version-less libc will get installed
366 before the install tools. As a result, the old install tools,
367 which previously had symbol dependencies to FBSD_1.0, will fail
368 because the freshly installed libc will not have them.
370 The default threading library (providing "libpthread") has been
371 changed to libthr. If you wish to have libkse as your default,
372 use option DEFAULT_THREAD_LIB=libkse for the buildworld.
375 The ABI breakage in sendmail(8)'s libmilter has been repaired
376 so it is no longer necessary to recompile mail filters (aka,
377 milters). If you recompiled mail filters after the 20070408
378 note, it is not necessary to recompile them again.
381 The new trunk(4) driver has been renamed to lagg(4) as it better
382 reflects its purpose. ifconfig will need to be recompiled.
385 sendmail(8) has been updated to version 8.14.1. Mail filters
386 (aka, milters) compiled against the libmilter included in the
387 base operating system should be recompiled.
390 Firmwares for ipw(4) and iwi(4) are now included in the base tree.
391 In order to use them one must agree to the respective LICENSE in
392 share/doc/legal and define legal.intel_<name>.license_ack=1 via
393 loader.conf(5) or kenv(1). Make sure to deinstall the now
394 deprecated modules from the respective firmware ports.
397 The name resolution/mapping functions addr2ascii(3) and ascii2addr(3)
398 were removed from FreeBSD's libc. These originally came from INRIA
399 IPv6. Nothing in FreeBSD ever used them. They may be regarded as
400 deprecated in previous releases.
401 The AF_LINK support for getnameinfo(3) was merged from NetBSD to
402 replace it as a more portable (and re-entrant) API.
405 To support interrupt filtering a modification to the newbus API
406 has occurred, ABI was broken and __FreeBSD_version was bumped
407 to 700031. Please make sure that your kernel and modules are in
409 http://docs.freebsd.org/cgi/mid.cgi?20070221233124.GA13941
412 The IPv6 multicast forwarding code may now be loaded into GENERIC
413 kernels by loading the ip_mroute.ko module. This is built into the
414 module unless WITHOUT_INET6 or WITHOUT_INET6_SUPPORT options are
415 set; see src.conf(5) for more information.
418 The output of netstat -r has changed. Without -n, we now only
419 print a "network name" without the prefix length if the network
420 address and mask exactly match a Class A/B/C network, and an entry
421 exists in the nsswitch "networks" map.
422 With -n, we print the full unabbreviated CIDR network prefix in
423 the form "a.b.c.d/p". 0.0.0.0/0 is always printed as "default".
424 This change is in preparation for changes such as equal-cost
425 multipath, and to more generally assist operational deployment
426 of FreeBSD as a modern IPv4 router.
429 PIM has been turned on by default in the IPv4 multicast
430 routing code. The kernel option 'PIM' has now been removed.
431 PIM is now built by default if option 'MROUTING' is specified.
432 It may now be loaded into GENERIC kernels by loading the
436 Support for IPIP tunnels (VIFF_TUNNEL) in IPv4 multicast routing
437 has been removed. Its functionality may be achieved by explicitly
438 configuring gif(4) interfaces and using the 'phyint' keyword in
440 XORP does not support source-routed IPv4 multicast tunnels nor the
441 integrated IPIP tunneling, therefore it is not affected by this
442 change. The __FreeBSD_version macro has been bumped to 700030.
445 Support for PCI Message Signalled Interrupts has been
446 re-enabled in the bge driver, only for those chips which are
447 believed to support it properly. If there are any problems,
448 MSI can be disabled completely by setting the
449 'hw.pci.enable_msi' and 'hw.pci.enable_msix' tunables to 0
453 Support for PCI Message Signalled Interrupts has been
454 disabled again in the bge driver. Many revisions of the
455 hardware fail to support it properly. Support can be
456 re-enabled by removing the #define of BGE_DISABLE_MSI in
457 "src/sys/dev/bge/if_bge.c".
460 Support for PCI Message Signalled Interrupts has been added
461 to the bge driver. If there are any problems, MSI can be
462 disabled completely by setting the 'hw.pci.enable_msi' and
463 'hw.pci.enable_msix' tunables to 0 in the loader.
466 The removal of several facets of the experimental Threading
467 system from the kernel means that the proc and thread structures
468 have changed quite a bit. I suggest all kernel modules that might
469 reference these structures be recompiled.. Especially the
473 Sound infrastructure has been updated with various fixes and
474 improvements. Most of the changes are pretty much transparent,
475 with exceptions of followings:
476 1) All sound driver specific sysctls (hw.snd.pcm%d.*) have been
477 moved to their own dev sysctl nodes, for example:
478 hw.snd.pcm0.vchans -> dev.pcm.0.vchans
479 2) /dev/dspr%d.%d has been deprecated. Each channel now has its
480 own chardev in the form of "dsp%d.<function>%d", where <function>
481 is p = playback, r = record and v = virtual, respectively. Users
482 are encouraged to use these devs instead of (old) "/dev/dsp%d.%d".
483 This does not affect those who are using "/dev/dsp".
486 geom(4)'s gmirror(8) class metadata structure has been
487 rev'd from v3 to v4. If you update across this point and
488 your metadata is converted for you, you will not be easily
489 able to downgrade since the /boot/kernel.old/geom_mirror.ko
490 kernel module will be unable to read the v4 metadata. You
491 can resolve this by doing from the loader(8) prompt:
493 set vfs.root.mountfrom="ufs:/dev/XXX"
495 where XXX is the root slice of one of the disks that composed
496 the mirror (i.e.: /dev/ad0s1a). You can then rebuild
497 the array the same way you built it originally.
500 The following binaries have been disconnected from the build:
501 mount_devfs, mount_ext2fs, mount_fdescfs, mount_procfs, mount_linprocfs,
502 and mount_std. The functionality of these programs has been
503 moved into the mount program. For example, to mount a devfs
504 filesystem, instead of using mount_devfs, use: "mount -t devfs".
505 This does not affect entries in /etc/fstab, since entries in
506 /etc/fstab are always processed with "mount -t fstype".
509 Support for PCI Message Signalled Interrupts on i386 and amd64
510 has been added to the kernel and various drivers will soon be
511 updated to use MSI when it is available. If there are any problems,
512 MSI can be disabled completely by setting the 'hw.pci.enable_msi'
513 and 'hw.pci.enable_msix' tunables to 0 in the loader.
516 The MUTEX_PROFILING option has been renamed to LOCK_PROFILING.
517 The lockmgr object layout has been changed as a result of having
518 a lock_object embedded in it. As a consequence all file system
519 kernel modules must be re-compiled. The mutex profiling man page
520 has not yet been updated to reflect this change.
523 KSE in the kernel has now been made optional and turned on by
524 default. Use 'nooption KSE' in your kernel config to turn it
525 off. All kernel modules *must* be recompiled after this change.
526 There-after, modules from a KSE kernel should be compatible with
527 modules from a NOKSE kernel due to the temporary padding fields
528 added to 'struct proc'.
531 mrouted and its utilities have been removed from the base system.
534 Some ioctl(2) command codes have changed. Full backward ABI
535 compatibility is provided if the "options COMPAT_FREEBSD6" is
536 present in the kernel configuration file. Make sure to add
537 this option to your kernel config file, or recompile X.Org
538 and the rest of ports; otherwise they may refuse to work.
541 tcpslice has been removed from the base system.
544 The sizes of struct tcpcb (and struct xtcpcb) have changed due to
545 the rewrite of TCP syncookies. Tools like netstat, sockstat, and
546 systat needs to be rebuilt.
549 libpcap updated to v0.9.4 and tcpdump to v3.9.4
552 The IPFIREWALL_FORWARD_EXTENDED option is gone and the behaviour
553 for IPFIREWALL_FORWARD is now as it was before when it was first
554 committed and for years after. The behaviour is now ON.
557 enigma(1)/crypt(1) utility has been changed on 64 bit architectures.
558 Now it can decrypt files created from different architectures.
559 Unfortunately, it is no longer able to decrypt a cipher text
560 generated with an older version on 64 bit architectures.
561 If you have such a file, you need old utility to decrypt it.
564 The interface version of the i4b kernel part has changed. So
565 after updating the kernel sources and compiling a new kernel,
566 the i4b user space tools in "/usr/src/usr.sbin/i4b" must also
567 be rebuilt, and vice versa.
570 The XBOX kernel now defaults to the nfe(4) driver instead of
571 the nve(4) driver. Please update your configuration
575 The i386-only lnc(4) driver for the AMD Am7900 LANCE and Am79C9xx
576 PCnet family of NICs has been removed. The new le(4) driver serves
577 as an equivalent but cross-platform replacement with the pcn(4)
578 driver still providing performance-optimized support for the subset
579 of AMD Am79C971 PCnet-FAST and greater chips as before.
582 The machdep.* sysctls and the adjkerntz utility have been
583 modified a bit. The new adjkerntz utility uses the new
584 sysctl names and sysctlbyname() calls, so it may be impossible
585 to run an old /sbin/adjkerntz utility in single-user mode
586 with a new kernel. Replace the `adjkerntz -i' step before
587 `make installworld' with:
589 /usr/obj/usr/src/sbin/adjkerntz/adjkerntz -i
591 and proceed as usual with the rest of the installworld-stage
592 steps. Otherwise, you risk installing binaries with their
593 timestamp set several hours in the future, especially if
594 you are running with local time set to GMT+X hours.
597 The ip6fw utility has been removed. The behavior provided by
598 ip6fw has been in ipfw2 for a good while and the rc.d scripts
599 have been updated to deal with it. There are some rules that
600 might not migrate cleanly. Use rc.firewall6 as a template to
604 The puc(4) driver has been overhauled. The ebus(4) and sbus(4)
605 attachments have been removed. Make sure to configure scc(4)
606 on sparc64. Note also that by default puc(4) will use uart(4)
607 and not sio(4) for serial ports because interrupt handling has
608 been optimized for multi-port serial cards and only uart(4)
609 implements the interface to support it.
612 The scc(4) driver replaces puc(4) for Serial Communications
613 Controllers (SCCs) like the Siemens SAB82532 and the Zilog
614 Z8530. On sparc64, it is advised to add scc(4) to the kernel
615 configuration to make sure that the serial ports remain
619 Most world/kernel related NO_* build options changed names.
620 New knobs have common prefixes WITHOUT_*/WITH_* (modelled
621 after FreeBSD ports) and should be set in /etc/src.conf
622 (the src.conf(5) manpage is provided). Full backwards
623 compatibility is maintained for the time being though it's
624 highly recommended to start moving old options out of the
625 system-wide /etc/make.conf file into the new /etc/src.conf
626 while also properly renaming them. More conversions will
627 likely follow. Posting to current@:
629 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
632 The NETSMBCRYPTO kernel option has been retired because its
633 functionality is always included in NETSMB and smbfs.ko now.
636 The TDFX_LINUX kernel option was retired and replaced by the
637 tdfx_linux device. The latter can be loaded as the 3dfx_linux.ko
638 kernel module. Loading it alone should suffice to get 3dfx support
639 for Linux apps because it will pull in 3dfx.ko and linux.ko through
643 The 'audit' group was added to support the new auditing functionality
644 in the base system. Be sure to follow the directions for updating,
645 including the requirement to run mergemaster -p.
648 The kernel ABI to file system modules was changed on i386.
649 Please make sure that your kernel and modules are in sync.
652 This actually occured some time ago, but installing the kernel
653 now also installs a bunch of symbol files for the kernel modules.
654 This increases the size of /boot/kernel to about 67Mbytes. You
655 will need twice this if you will eventually back this up to kernel.old
656 on your next install.
657 If you have a shortage of room in your root partition, you should add
658 -DINSTALL_NODEBUG to your make arguments or add INSTALL_NODEBUG="yes"
659 to your /etc/make.conf.
662 libc's malloc implementation has been replaced. This change has the
663 potential to uncover application bugs that previously went unnoticed.
664 See the malloc(3) manual page for more details.
667 The generic netgraph(4) cookie has been changed. If you upgrade
668 kernel passing this point, you also need to upgrade userland
669 and netgraph(4) utilities like ports/net/mpd or ports/net/mpd4.
672 si(4)'s device files now contain the unit number.
673 Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
676 The kernel ABI was mostly destroyed due to a change in the size
677 of struct lock_object which is nested in other structures such
678 as mutexes which are nested in all sorts of other structures.
679 Make sure your kernel and modules are in sync.
682 The page coloring algorithm in the VM subsystem was converted
683 from tuning with kernel options to autotuning. Please remove
684 any PQ_* option except PQ_NOOPT from your kernel config.
687 The net80211-related tools in the tools/tools/ath directory
688 have been moved to tools/tools/net80211 and renamed with a
689 "wlan" prefix. Scripts that use them should be adjusted
693 Scripts in the local_startup directories (as defined in
694 /etc/defaults/rc.conf) that have the new rc.d semantics will
695 now be run as part of the base system rcorder. If there are
696 errors or problems with one of these local scripts, it could
697 cause boot problems. If you encounter such problems, boot in
698 single user mode, remove that script from the */rc.d directory.
699 Please report the problem to the port's maintainer, and the
700 freebsd-ports@freebsd.org mailing list.
703 The nodev mount option was deprecated in RELENG_6 (where it
704 was a no-op), and is now unsupported. If you have nodev or dev listed
705 in /etc/fstab, remove it, otherwise it will result in a mount error.
708 ABI between ipfw(4) and ipfw(8) has been changed. You need
709 to rebuild ipfw(8) when rebuilding kernel.
712 rp(4)'s device files now contain the unit number.
713 Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
716 /etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
717 Its /etc/rc.conf.d configuration file has been `ppp' from
718 the beginning, and hence there is no need to touch it.
721 Now most modules get their build-time options from the kernel
722 configuration file. A few modules still have fixed options
723 due to their non-conformant implementation, but they will be
724 corrected eventually. You may need to review the options of
725 the modules in use, explicitly specify the non-default options
726 in the kernel configuration file, and rebuild the kernel and
730 kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
731 to turn polling(4) on your interfaces.
734 The old bridge(4) implementation was retired. The new
735 if_bridge(4) serves as a full functional replacement.
738 The ai_addrlen of a struct addrinfo was changed to a socklen_t
739 to conform to POSIX-2001. This change broke an ABI
740 compatibility on 64 bit architecture. You have to recompile
741 userland programs that use getaddrinfo(3) on 64 bit
745 RELENG_6 branched here.
748 The pccard_ifconfig rc.conf variable has been removed and a new
749 variable, ifconfig_DEFAULT has been introduced. Unlike
750 pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
751 do not have ifconfig_ifn entries rather than just those in
752 removable_interfaces.
755 Some previous versions of PAM have permitted the use of
756 non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
757 to third party PAM modules in /usr/local/lib. A change has been
758 made to require the use of absolute paths in order to avoid
759 ambiguity and dependence on library path configuration, which may
760 affect existing configurations.
763 Major changes to network interface API. All drivers must be
764 recompiled. Drivers not in the base system will need to be
765 updated to the new APIs.
768 Changes were made to kinfo_proc in sys/user.h. Please recompile
769 userland, or commands like `fstat', `pkill', `ps', `top' and `w'
770 will not behave correctly.
772 The API and ABI for hwpmc(4) have changed with the addition
773 of sampling support. Please recompile lib/libpmc(3) and
774 usr.sbin/{pmcstat,pmccontrol}.
777 The OpenBSD dhclient was imported in place of the ISC dhclient
778 and the network interface configuration scripts were updated
779 accordingly. If you use DHCP to configure your interfaces, you
780 must now run devd. Also, DNS updating was lost so you will need
781 to find a workaround if you use this feature.
783 The '_dhcp' user was added to support the OpenBSD dhclient. Be
784 sure to run mergemaster -p (like you are supposed to do every time
788 if_bridge was added to the tree. This has changed struct ifnet.
789 Please recompile userland and all network related modules.
792 The n_net of a struct netent was changed to an uint32_t, and
793 1st argument of getnetbyaddr() was changed to an uint32_t, to
794 conform to POSIX-2001. These changes broke an ABI
795 compatibility on 64 bit architecture. With these changes,
796 shlib major of libpcap was bumped. You have to recompile
797 userland programs that use getnetbyaddr(3), getnetbyname(3),
798 getnetent(3) and/or libpcap on 64 bit architecture.
801 Kernel parsing of extra options on '#!' first lines of shell
802 scripts has changed. Lines with multiple options likely will
803 fail after this date. For full details, please see
804 http://people.freebsd.org/~gad/Updating-20050528.txt
807 The packet filter (pf) code has been updated to OpenBSD 3.7
808 Please note the changed anchor syntax and the fact that
809 authpf(8) now needs a mounted fdescfs(5) to function.
812 The NO_MIXED_MODE kernel option has been removed from the i386
813 amd64 platforms as its use has been superceded by the new local
814 APIC timer code. Any kernel config files containing this option
818 The on-disk format of LC_CTYPE files was changed to be machine
819 independent. Please make sure NOT to use NO_CLEAN buildworld
820 when crossing this point. Crossing this point also requires
821 recompile or reinstall of all locale depended packages.
824 The ifi_epoch member of struct if_data has been changed to
825 contain the uptime at which the interface was created or the
826 statistics zeroed rather then the wall clock time because
827 wallclock time may go backwards. This should have no impact
828 unless an snmp implementation is using this value (I know of
832 The acpi_perf and acpi_throttle drivers are now part of the
833 acpi(4) main module. They are no longer built separately.
836 The layout of struct image_params has changed. You have to
837 recompile all compatibility modules (linux, svr4, etc) for use
841 The p4tcc driver has been merged into cpufreq(4). This makes
842 "options CPU_ENABLE_TCC" obsolete. Please load cpufreq.ko or
843 compile in "device cpufreq" to restore this functionality.
846 The responsibility of recomputing the file system summary of
847 a SoftUpdates-enabled dirty volume has been transferred to the
848 background fsck. A rebuild of fsck(8) utility is recommended
849 if you have updated the kernel.
851 To get the old behavior (recompute file system summary at mount
852 time), you can set vfs.ffs.compute_summary_at_mount=1 before
853 mounting the new volume.
856 The cpufreq import is complete. As part of this, the sysctls for
857 acpi(4) throttling have been removed. The power_profile script
858 has been updated, so you can use performance/economy_cpu_freq in
859 rc.conf(5) to set AC on/offline cpu frequencies.
862 NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
863 requires recompiling libnetgraph and userland netgraph utilities.
866 Support for abbreviated forms of a number of ipfw options is
867 now deprecated. Warnings are printed to stderr indicating the
868 correct full form when a match occurs. Some abbreviations may
869 be supported at a later date based on user feedback. To be
870 considered for support, abbreviations must be in use prior to
871 this commit and unlikely to be confused with current key words.
874 By a popular demand, a lot of NOFOO options were renamed
875 to NO_FOO (see bsd.compat.mk for a full list). The old
876 spellings are still supported, but will cause annoying
877 warnings on stderr. Make sure you upgrade properly (see
878 the COMMON ITEMS: section later in this file).
881 Auto-loading of ancillary wlan modules such as wlan_wep has
882 been temporarily disabled; you need to statically configure
883 the modules you need into your kernel or explicitly load them
884 prior to use. Specifically, if you intend to use WEP encryption
885 with an 802.11 device load/configure wlan_wep; if you want to
886 use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
887 and wlan_xauth as required.
890 The behaviour of ppp(8) has changed slightly. If lqr is enabled
891 (``enable lqr''), older versions would revert to LCP ECHO mode on
892 negotiation failure. Now, ``enable echo'' is required for this
893 behaviour. The ppp version number has been bumped to 3.4.2 to
897 The wlan support has been updated to split the crypto support
898 into separate modules. For static WEP you must configure the
899 wlan_wep module in your system or build and install the module
900 in place where it can be loaded (the kernel will auto-load
901 the module when a wep key is configured).
904 The ath driver has been updated to split the tx rate control
905 algorithm into a separate module. You need to include either
906 ath_rate_onoe or ath_rate_amrr when configuring the kernel.
909 Support for systems with an 80386 CPU has been removed. Please
910 use FreeBSD 5.x or earlier on systems with an 80386.
913 We have had a hack which would mount the root filesystem
914 R/W if the device were named 'md*'. As part of the vnode
915 work I'm doing I have had to remove this hack. People
916 building systems which use preloaded MD root filesystems
917 may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
918 their /etc/rc scripts.
921 FreeBSD 5.3 shipped here.
924 The size of struct tcpcb has changed again due to the removal
925 of RFC1644 T/TCP. You have to recompile userland programs that
926 read kmem for tcp sockets directly (netstat, sockstat, etc.)
929 The size of struct tcpcb has changed. You have to recompile
930 userland programs that read kmem for tcp sockets directly
931 (netstat, sockstat, etc.)
934 RELENG_5 branched here. For older entries, please see updating
935 in the RELENG_5 branch.
941 Avoid using make -j when upgrading. From time to time in the
942 past there have been problems using -j with buildworld and/or
943 installworld. This is especially true when upgrading between
944 "distant" versions (eg one that cross a major release boundary
945 or several minor releases, or when several months have passed
946 on the -current branch).
948 Sometimes, obscure build problems are the result of environment
949 poisoning. This can happen because the make utility reads its
950 environment when searching for values for global variables.
951 To run your build attempts in an "environmental clean room",
952 prefix all make commands with 'env -i '. See the env(1) manual
953 page for more details.
955 When upgrading from one major version to another it is generally
956 best to upgrade to the latest code in the currently installed branch
957 first, then do an upgrade to the new branch. This is the best-tested
958 upgrade path, and has the highest probability of being successful.
959 Please try this approach before reporting problems with a major
964 If you are updating from a prior version of FreeBSD (even one just
965 a few days old), you should follow this procedure. It is the most
966 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
968 make kernel-toolchain
969 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
970 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
972 To test a kernel once
973 ---------------------
974 If you just want to boot a kernel once (because you are not sure
975 if it works, or if you want to boot a known bad kernel to provide
976 debugging information) run
977 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
978 nextboot -k testkernel
980 To just build a kernel when you know that it won't mess you up
981 --------------------------------------------------------------
982 This assumes you are already running a 5.X system. Replace
983 ${arch} with the architecture of your machine (e.g. "i386",
984 "alpha", "amd64", "ia64", "pc98", "sparc64", etc).
986 cd src/sys/${arch}/conf
987 config KERNEL_NAME_HERE
988 cd ../compile/KERNEL_NAME_HERE
993 If this fails, go to the "To build a kernel" section.
995 To rebuild everything and install it on the current system.
996 -----------------------------------------------------------
997 # Note: sometimes if you are running current you gotta do more than
998 # is listed here if you are upgrading from a really old current.
1000 <make sure you have good level 0 dumps>
1002 make kernel KERNCONF=YOUR_KERNEL_HERE
1004 <reboot in single user> [3]
1012 To cross-install current onto a separate partition
1013 --------------------------------------------------
1014 # In this approach we use a separate partition to hold
1015 # current's root, 'usr', and 'var' directories. A partition
1016 # holding "/", "/usr" and "/var" should be about 2GB in
1019 <make sure you have good level 0 dumps>
1022 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1023 <maybe newfs current's root partition>
1024 <mount current's root partition on directory ${CURRENT_ROOT}>
1025 make installworld DESTDIR=${CURRENT_ROOT}
1026 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1027 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1028 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1029 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1030 <reboot into current>
1031 <do a "native" rebuild/install as described in the previous section>
1032 <maybe install compatibility libraries from src/lib/compat>
1036 To upgrade in-place from 5.x-stable to current
1037 ----------------------------------------------
1038 <make sure you have good level 0 dumps>
1040 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1042 <reboot in single user> [3]
1049 Make sure that you've read the UPDATING file to understand the
1050 tweaks to various things you need. At this point in the life
1051 cycle of current, things change often and you are on your own
1052 to cope. The defaults can also change, so please read ALL of
1053 the UPDATING entries.
1055 Also, if you are tracking -current, you must be subscribed to
1056 freebsd-current@freebsd.org. Make sure that before you update
1057 your sources that you have read and understood all the recent
1058 messages there. If in doubt, please track -stable which has
1059 much fewer pitfalls.
1061 [1] If you have third party modules, such as vmware, you
1062 should disable them at this point so they don't crash your
1065 [3] From the bootblocks, boot -s, and then do
1070 adjkerntz -i # if CMOS is wall time
1071 Also, when doing a major release upgrade, it is required that
1072 you boot into single user mode to do the installworld.
1074 [4] Note: This step is non-optional. Failure to do this step
1075 can result in a significant reduction in the functionality of the
1076 system. Attempting to do it by hand is not recommended and those
1077 that pursue this avenue should read this file carefully, as well
1078 as the archives of freebsd-current and freebsd-hackers mailing lists
1079 for potential gotchas.
1081 [5] Usually this step is a noop. However, from time to time
1082 you may need to do this if you get unknown user in the following
1083 step. It never hurts to do it all the time. You may need to
1084 install a new mergemaster (cd src/usr.sbin/mergemaster && make
1085 install) after the buildworld before this step if you last updated
1086 from current before 20020224 or from -stable before 20020408.
1088 [8] In order to have a kernel that can run the 4.x binaries
1089 needed to do an installworld, you must include the COMPAT_FREEBSD4
1090 option in your kernel. Failure to do so may leave you with a system
1091 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1092 is required to run the 5.x binaries on more recent kernels.
1094 Make sure that you merge any new devices from GENERIC since the
1095 last time you updated your kernel config file.
1097 [9] When checking out sources, you must include the -P flag to have
1098 cvs prune empty directories.
1100 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1101 "?=" instead of the "=" assignment operator, so that buildworld can
1102 override the CPUTYPE if it needs to.
1104 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1105 not on the command line, or in /etc/make.conf. buildworld will
1106 warn if it is improperly defined.
1109 This file contains a list, in reverse chronological order, of major
1110 breakages in tracking -current. Not all things will be listed here,
1111 and it only starts on October 16, 2004. Updating files can found in
1112 previous releases if your system is older than this.
1114 Copyright information:
1116 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1118 Redistribution, publication, translation and use, with or without
1119 modification, in full or in part, in any form or format of this
1120 document are permitted without further permission from the author.
1122 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1123 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1124 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1125 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1126 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1127 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1128 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1129 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1130 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1131 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1132 POSSIBILITY OF SUCH DAMAGE.
1134 If you find this document useful, and you want to, you may buy the
1137 Contact Warner Losh if you have any questions about your use of