1 Updating Information for FreeBSD STABLE users
3 This file is maintained and copyrighted by M. Warner Losh
4 <imp@village.org>. See end of file for further details. For commonly
5 done items, please see the COMMON ITEMS: section later in the file.
7 Items affecting the ports and packages system can be found in
8 /usr/ports/UPDATING. Please read that file before running
11 20091002: p4 FreeBSD-SA-09:14.devfs FreeBSD-EN-09:05.null
12 Fix devfs / VFS NULL pointer race condition. [SA-09:14]
14 Add no zero mapping feature. [EN-09:05]
16 20090729: p3 FreeBSD-SA-09:12.bind
17 Fix BIND named(8) dynamic update message remote DoS.
19 20090624: p2 FreeBSD-EN-09:02.bce, FreeBSD-EN-09:03.fxp,
21 Fix packet length calculation in bce(4). [EN-09:02]
23 Correctly set IP packet length for TSO in fxp(4). [EN-09:03]
25 Fix a lock order reversal bug that could cause deadlock during
28 20090610: p1 FreeBSD-SA-09:09.pipe, FreeBSD-SA-09:10.ipv6,
30 Prevent integer overflow in direct pipe write code from circumventing
31 virtual-to-physical page lookups. [09:09]
33 Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10]
35 Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11]
40 20090422: FreeBSD-SA-09:07.libc, FreeBSD-SA-09:08.openssl
41 Don't leak information via uninitialized space in db(3) records.
44 Sanity-check string lengths in order to stop OpenSSL crashing
45 when printing corrupt BMPString or UniversalString objects. [09:08]
48 Following bug-fixes to TCP connection state flags, netstat, systat,
49 and sockstat will need to be rebuilt in order to properly print
50 connections in the TIMEWAIT state.
53 Change IPv6 ephemeral port allocation from sequential to
54 random allocation, like IPv4 has done for more than four years.
55 The implementation shares infrastructure with IPv4. This
56 means that there is only one set of sysctls to control both
57 IPv4 and IPv6. See ip(4) man page for details.
60 A workaround is committed to allow the creation of System V shared
61 memory segment of size > 2 GB on the 64-bit architectures.
62 Due to a limitation of the existing ABI, the shm_segsz member
63 of the struct shmid_ds, returned by shmctl(IPC_STAT) call is
64 wrong for large segments. Note that limits must be explicitely
65 raised to allow such segments to be created.
67 The management interface that is used by ipcs(1) has to be changed
68 in incompatible way. Rebuild the ipcs(1) utility with the new
69 headers after the update. Buildworld/installworld takes care
70 of this issue automatically.
73 The open-source Atheros HAL has been merged from HEAD
75 The kernel compile-time option AH_SUPPORT_AR5416 has been
76 added to support certain newer Atheros parts, particularly
78 The following modules are no longer available, and should be
79 removed from MODULES_OVERRIDE and/or loader.conf:-
80 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
83 ZFS users on amd64 machines with 4GB or more of RAM should
84 reevaluate their need for setting vm.kmem_size_max and
85 vm.kmem_size manually. In fact, after recent changes to the
86 kernel, the default value of vm.kmem_size is larger than the
87 suggested manual setting in most ZFS/FreeBSD tuning guides.
90 Multi-IPv4/v6/no-IP jail support was merged to STABLE.
91 You need to rebuild jls(8) and to use the new features
92 jail(8), jexec(8) and cpuset(1) with a new kernel.
93 __FreeBSD_version was bumped to 701103.
96 NTFS has been removed from GENERIC kernel on amd64 to match
97 GENERIC on i386. Should not cause any issues since mount_ntfs(8)
98 will load ntfs.ko module automatically when NTFS support is
99 actually needed, unless ntfs.ko is not installed or security
100 level prohibits loading kernel modules. If either is the case,
101 "options NTFS" has to be added into kernel config.
104 powerd(8) was updated to get better SMP support.
105 Meanings of the -i and -r command line options were changed.
108 snd_hda(4) driver was updated to version 20081226_0122.
110 Due to added HDMI audio and logical audio devices support, updated
111 driver often provides several PCM devices. In some cases it can make
112 system default audio device no longer correspond to the users's
113 habbitual audio connectors. In such cases wanted device can be
114 specified in audio application setup or defined globally via
115 hw.snd.default_unit sysctl according to sound(4) and snd_hda(4)
122 ntpd has been upgraded to 4.2.4p5.
125 OpenSSH has been upgraded to 5.1p1.
128 DTrace support was merged to STABLE today. In the best
129 tradition of "the dog ate my homework", subversion decided
130 that the commit message was too large and opted not to send
131 it. It was a stealth commit!
133 A 'make buildkernel' will now default to build the kernel
134 and modules with both DTrace kernel hooks and CTF data ready
137 After you have installed both world and the kernel, and
138 rebooted, you can 'kldload dtraceall' to load all the DTrace
139 kernel modules and then you're set to run the 'dtrace'
142 For DTrace documentation, refer to:
143 <http://wikis.sun.com/display/DTrace/Documentation>
145 We are limited to kernel tracing at the moment, so the pid
146 provider is not available.
148 For the syscall provider, note that the arguments to the
149 return probes are the same as for the entry probes.
152 Today STABLE got a reorganization of the Intel E1000
153 driver code. In order to better support our new adapters
154 there is a new driver, igb, that is now to be used for
155 either the 82575 or 82576 adapters. The source however,
156 is all now in sys/dev/e1000, both em and igb drivers are
157 built from that common directory if you configure them
158 in the kernel. Making loadable drivers still happens in
159 the same place: sys/modules/[em, igb].
161 The important thing to note is that the 82575 adapters
162 were supported in the em driver in 7.0, but now needed
163 to be moved into igb, so if you have the effected cards
164 be sure and make any script changes to follow the name
167 There are only 3 PCI ID's effected in this change:
168 0x10A7, 0x10A9, and 0x10D6
169 So you can know ahead of time if they will be effected,
170 these will now be supported in the igb driver. That
171 driver will also support the new 82576 followon.
173 The driver reorg in STABLE is inconvenient but it really
174 was necessary for Intel to do this, and I figured it was
175 better to have this small admin type issue than not to
176 have support for this new hardware for a whole release
180 I have MFC'd in code to support multiple routing tables.
181 see the man pages setfib(1) and setfib(2).
182 This is a backwards compatible version,
183 but to make use of it you need to compile your kernel
184 with options ROUTETABLES=2 (or more up to 16).
190 Note the addition of m_collapse for compacting mbuf chains.
193 The AT keyboard emulation of sunkbd(4) has been turned on
194 by default. In order to make the special symbols of the Sun
195 keyboards driven by sunkbd(4) work under X these now have
196 to be configured the same way as Sun USB keyboards driven
197 by ukbd(4) (which also does AT keyboard emulation), f.e.:
199 Option "XkbLayout" "us"
200 Option "XkbRules" "xorg"
201 Option "XkbSymbols" "pc(pc105)+sun_vndr/usb(sun_usb)+us"
204 It has been decided that it is desirable to provide ABI
205 backwards compatibility to the FreeBSD 4/5/6 versions of the
206 PCIOCGETCONF, PCIOCREAD and PCIOCWRITE IOCTLs, which was
207 broken with the introduction of PCI domain support (see the
208 20070930 entry). Unfortunately, this required the ABI of
209 PCIOCGETCONF to be broken again in order to be able to
210 provide backwards compatibility to the old version of that
211 IOCTL. Thus consumers of PCIOCGETCONF have to be recompiled
212 again. As for prominent ports this affects neither pciutils
213 nor xorg-server this time, the hal port needs to be rebuilt
220 Setting WITHOUT_LIBPTHREAD now means WITHOUT_LIBKSE and
221 WITHOUT_LIBTHR are set.
224 The PCI code has been made aware of PCI domains. This means that
225 the location strings as used by pciconf(8) etc are now in the
226 following format: pci<domain>:<bus>:<device>[:<function>]. It
227 also means that consumers of <sys/pciio.h> potentially need to
228 be recompiled; this includes the hal and xorg-server ports.
231 The caching daemon (cached) was renamed to nscd. nscd.conf
232 configuration file should be used instead of cached.conf and
233 nscd_enable, nscd_pidfile and nscd_flags options should be used
234 instead of cached_enable, cached_pidfile and cached_flags in
238 The new IPsec code is now compiled in using the IPSEC option. The
239 IPSEC option now requires "device crypto" be defined in your kernel
240 configuration. The FAST_IPSEC kernel option is now deprecated.
243 The packet filter (pf) code has been updated to OpenBSD 4.1 Please
244 note the changed syntax - keep state is now on by default. Also
245 note the fact that ftp-proxy(8) has been changed from bottom up and
246 has been moved from libexec to usr/sbin. Changes in the ALTQ
247 handling also affect users of IPFW's ALTQ capabilities.
250 Remove KAME IPsec in favor of FAST_IPSEC, which is now the
251 only IPsec supported by FreeBSD. The new IPsec stack
252 supports both IPv4 and IPv6. The kernel option will change
253 after the code changes have settled in. For now the kernel
254 option IPSEC is deprecated and FAST_IPSEC is the only option, that
255 will change after some settling time.
258 The wicontrol(8) utility has been removed from the base system. wi(4)
259 cards should be configured using ifconfig(8), see the man page for more
263 The i386/amd64 GENERIC kernel now defaults to the nfe(4) driver
264 instead of the nve(4) driver. Please update your configuration
268 By default, /etc/rc.d/sendmail no longer rebuilds the aliases
269 database if it is missing or older than the aliases file. If
270 desired, set the new rc.conf option sendmail_rebuild_aliases
271 to "YES" to restore that functionality.
274 The IPv4 multicast socket code has been considerably modified, and
275 moved to the file sys/netinet/in_mcast.c. Initial support for the
276 RFC 3678 Source-Specific Multicast Socket API has been added to
277 the IPv4 network stack.
279 Strict multicast and broadcast reception is now the default for
280 UDP/IPv4 sockets; the net.inet.udp.strict_mcast_mship sysctl variable
281 has now been removed.
283 The RFC 1724 hack for interface selection has been removed; the use
284 of the Linux-derived ip_mreqn structure with IP_MULTICAST_IF has
285 been added to replace it. Consumers such as routed will soon be
286 updated to reflect this.
288 These changes affect users who are running routed(8) or rdisc(8)
289 from the FreeBSD base system on point-to-point or unnumbered
293 The net80211 layer has changed significantly and all wireless
294 drivers that depend on it need to be recompiled. Further these
295 changes require that any program that interacts with the wireless
296 support in the kernel be recompiled; this includes: ifconfig,
297 wpa_supplicant, hostapd, and wlanstats. Users must also, for
298 the moment, kldload the wlan_scan_sta and/or wlan_scan_ap modules
299 if they use modules for wireless support. These modules implement
300 scanning support for station and ap modes, respectively. Failure
301 to load the appropriate module before marking a wireless interface
302 up will result in a message to the console and the device not
306 The pam_nologin(8) module ceases to provide an authentication
307 function and starts providing an account management function.
308 Consequent changes to /etc/pam.d should be brought in using
309 mergemaster(8). Third-party files in /usr/local/etc/pam.d may
310 need manual editing as follows. Locate this line (or similar):
312 auth required pam_nologin.so no_warn
314 and change it according to this example:
316 account required pam_nologin.so no_warn
318 That is, the first word needs to be changed from "auth" to
319 "account". The new line can be moved to the account section
320 within the file for clarity. Not updating pam.conf(5) files
321 will result in nologin(5) ignored by the respective services.
324 The ether_ioctl() function has been synchronized with ioctl(2)
325 and ifnet.if_ioctl. Due to that, the size of one of its arguments
326 has changed on 64-bit architectures. All kernel modules using
327 ether_ioctl() need to be rebuilt on such architectures.
330 Improved INCLUDE_CONFIG_FILE support has been introduced to the
331 config(8) utility. In order to take advantage of this new
332 functionality, you are expected to recompile and install
333 src/usr.sbin/config. If you don't rebuild config(8), and your
334 kernel configuration depends on INCLUDE_CONFIG_FILE, the kernel
335 build will be broken because of a missing "kernconfstring"
339 Symbol versioning is enabled by default. To disable it, use
340 option WITHOUT_SYMVER. It is not advisable to attempt to
341 disable symbol versioning once it is enabled; your installworld
342 will break because a symbol version-less libc will get installed
343 before the install tools. As a result, the old install tools,
344 which previously had symbol dependencies to FBSD_1.0, will fail
345 because the freshly installed libc will not have them.
347 The default threading library (providing "libpthread") has been
348 changed to libthr. If you wish to have libkse as your default,
349 use option DEFAULT_THREAD_LIB=libkse for the buildworld.
352 The ABI breakage in sendmail(8)'s libmilter has been repaired
353 so it is no longer necessary to recompile mail filters (aka,
354 milters). If you recompiled mail filters after the 20070408
355 note, it is not necessary to recompile them again.
358 The new trunk(4) driver has been renamed to lagg(4) as it better
359 reflects its purpose. ifconfig will need to be recompiled.
362 sendmail(8) has been updated to version 8.14.1. Mail filters
363 (aka, milters) compiled against the libmilter included in the
364 base operating system should be recompiled.
367 Firmwares for ipw(4) and iwi(4) are now included in the base tree.
368 In order to use them one must agree to the respective LICENSE in
369 share/doc/legal and define legal.intel_<name>.license_ack=1 via
370 loader.conf(5) or kenv(1). Make sure to deinstall the now
371 deprecated modules from the respective firmware ports.
374 The name resolution/mapping functions addr2ascii(3) and ascii2addr(3)
375 were removed from FreeBSD's libc. These originally came from INRIA
376 IPv6. Nothing in FreeBSD ever used them. They may be regarded as
377 deprecated in previous releases.
378 The AF_LINK support for getnameinfo(3) was merged from NetBSD to
379 replace it as a more portable (and re-entrant) API.
382 To support interrupt filtering a modification to the newbus API
383 has occurred, ABI was broken and __FreeBSD_version was bumped
384 to 700031. Please make sure that your kernel and modules are in
386 http://docs.freebsd.org/cgi/mid.cgi?20070221233124.GA13941
389 The IPv6 multicast forwarding code may now be loaded into GENERIC
390 kernels by loading the ip_mroute.ko module. This is built into the
391 module unless WITHOUT_INET6 or WITHOUT_INET6_SUPPORT options are
392 set; see src.conf(5) for more information.
395 The output of netstat -r has changed. Without -n, we now only
396 print a "network name" without the prefix length if the network
397 address and mask exactly match a Class A/B/C network, and an entry
398 exists in the nsswitch "networks" map.
399 With -n, we print the full unabbreviated CIDR network prefix in
400 the form "a.b.c.d/p". 0.0.0.0/0 is always printed as "default".
401 This change is in preparation for changes such as equal-cost
402 multipath, and to more generally assist operational deployment
403 of FreeBSD as a modern IPv4 router.
406 PIM has been turned on by default in the IPv4 multicast
407 routing code. The kernel option 'PIM' has now been removed.
408 PIM is now built by default if option 'MROUTING' is specified.
409 It may now be loaded into GENERIC kernels by loading the
413 Support for IPIP tunnels (VIFF_TUNNEL) in IPv4 multicast routing
414 has been removed. Its functionality may be achieved by explicitly
415 configuring gif(4) interfaces and using the 'phyint' keyword in
417 XORP does not support source-routed IPv4 multicast tunnels nor the
418 integrated IPIP tunneling, therefore it is not affected by this
419 change. The __FreeBSD_version macro has been bumped to 700030.
422 Support for PCI Message Signalled Interrupts has been
423 re-enabled in the bge driver, only for those chips which are
424 believed to support it properly. If there are any problems,
425 MSI can be disabled completely by setting the
426 'hw.pci.enable_msi' and 'hw.pci.enable_msix' tunables to 0
430 Support for PCI Message Signalled Interrupts has been
431 disabled again in the bge driver. Many revisions of the
432 hardware fail to support it properly. Support can be
433 re-enabled by removing the #define of BGE_DISABLE_MSI in
434 "src/sys/dev/bge/if_bge.c".
437 Support for PCI Message Signalled Interrupts has been added
438 to the bge driver. If there are any problems, MSI can be
439 disabled completely by setting the 'hw.pci.enable_msi' and
440 'hw.pci.enable_msix' tunables to 0 in the loader.
443 The removal of several facets of the experimental Threading
444 system from the kernel means that the proc and thread structures
445 have changed quite a bit. I suggest all kernel modules that might
446 reference these structures be recompiled.. Especially the
450 Sound infrastructure has been updated with various fixes and
451 improvements. Most of the changes are pretty much transparent,
452 with exceptions of followings:
453 1) All sound driver specific sysctls (hw.snd.pcm%d.*) have been
454 moved to their own dev sysctl nodes, for example:
455 hw.snd.pcm0.vchans -> dev.pcm.0.vchans
456 2) /dev/dspr%d.%d has been deprecated. Each channel now has its
457 own chardev in the form of "dsp%d.<function>%d", where <function>
458 is p = playback, r = record and v = virtual, respectively. Users
459 are encouraged to use these devs instead of (old) "/dev/dsp%d.%d".
460 This does not affect those who are using "/dev/dsp".
463 geom(4)'s gmirror(8) class metadata structure has been
464 rev'd from v3 to v4. If you update across this point and
465 your metadata is converted for you, you will not be easily
466 able to downgrade since the /boot/kernel.old/geom_mirror.ko
467 kernel module will be unable to read the v4 metadata. You
468 can resolve this by doing from the loader(8) prompt:
470 set vfs.root.mountfrom="ufs:/dev/XXX"
472 where XXX is the root slice of one of the disks that composed
473 the mirror (i.e.: /dev/ad0s1a). You can then rebuild
474 the array the same way you built it originally.
477 The following binaries have been disconnected from the build:
478 mount_devfs, mount_ext2fs, mount_fdescfs, mount_procfs, mount_linprocfs,
479 and mount_std. The functionality of these programs has been
480 moved into the mount program. For example, to mount a devfs
481 filesystem, instead of using mount_devfs, use: "mount -t devfs".
482 This does not affect entries in /etc/fstab, since entries in
483 /etc/fstab are always processed with "mount -t fstype".
486 Support for PCI Message Signalled Interrupts on i386 and amd64
487 has been added to the kernel and various drivers will soon be
488 updated to use MSI when it is available. If there are any problems,
489 MSI can be disabled completely by setting the 'hw.pci.enable_msi'
490 and 'hw.pci.enable_msix' tunables to 0 in the loader.
493 The MUTEX_PROFILING option has been renamed to LOCK_PROFILING.
494 The lockmgr object layout has been changed as a result of having
495 a lock_object embedded in it. As a consequence all file system
496 kernel modules must be re-compiled. The mutex profiling man page
497 has not yet been updated to reflect this change.
500 KSE in the kernel has now been made optional and turned on by
501 default. Use 'nooption KSE' in your kernel config to turn it
502 off. All kernel modules *must* be recompiled after this change.
503 There-after, modules from a KSE kernel should be compatible with
504 modules from a NOKSE kernel due to the temporary padding fields
505 added to 'struct proc'.
508 mrouted and its utilities have been removed from the base system.
511 Some ioctl(2) command codes have changed. Full backward ABI
512 compatibility is provided if the "options COMPAT_FREEBSD6" is
513 present in the kernel configuration file. Make sure to add
514 this option to your kernel config file, or recompile X.Org
515 and the rest of ports; otherwise they may refuse to work.
518 tcpslice has been removed from the base system.
521 The sizes of struct tcpcb (and struct xtcpcb) have changed due to
522 the rewrite of TCP syncookies. Tools like netstat, sockstat, and
523 systat needs to be rebuilt.
526 libpcap updated to v0.9.4 and tcpdump to v3.9.4
529 The IPFIREWALL_FORWARD_EXTENDED option is gone and the behaviour
530 for IPFIREWALL_FORWARD is now as it was before when it was first
531 committed and for years after. The behaviour is now ON.
534 enigma(1)/crypt(1) utility has been changed on 64 bit architectures.
535 Now it can decrypt files created from different architectures.
536 Unfortunately, it is no longer able to decrypt a cipher text
537 generated with an older version on 64 bit architectures.
538 If you have such a file, you need old utility to decrypt it.
541 The interface version of the i4b kernel part has changed. So
542 after updating the kernel sources and compiling a new kernel,
543 the i4b user space tools in "/usr/src/usr.sbin/i4b" must also
544 be rebuilt, and vice versa.
547 The XBOX kernel now defaults to the nfe(4) driver instead of
548 the nve(4) driver. Please update your configuration
552 The i386-only lnc(4) driver for the AMD Am7900 LANCE and Am79C9xx
553 PCnet family of NICs has been removed. The new le(4) driver serves
554 as an equivalent but cross-platform replacement with the pcn(4)
555 driver still providing performance-optimized support for the subset
556 of AMD Am79C971 PCnet-FAST and greater chips as before.
559 The machdep.* sysctls and the adjkerntz utility have been
560 modified a bit. The new adjkerntz utility uses the new
561 sysctl names and sysctlbyname() calls, so it may be impossible
562 to run an old /sbin/adjkerntz utility in single-user mode
563 with a new kernel. Replace the `adjkerntz -i' step before
564 `make installworld' with:
566 /usr/obj/usr/src/sbin/adjkerntz/adjkerntz -i
568 and proceed as usual with the rest of the installworld-stage
569 steps. Otherwise, you risk installing binaries with their
570 timestamp set several hours in the future, especially if
571 you are running with local time set to GMT+X hours.
574 The ip6fw utility has been removed. The behavior provided by
575 ip6fw has been in ipfw2 for a good while and the rc.d scripts
576 have been updated to deal with it. There are some rules that
577 might not migrate cleanly. Use rc.firewall6 as a template to
581 The puc(4) driver has been overhauled. The ebus(4) and sbus(4)
582 attachments have been removed. Make sure to configure scc(4)
583 on sparc64. Note also that by default puc(4) will use uart(4)
584 and not sio(4) for serial ports because interrupt handling has
585 been optimized for multi-port serial cards and only uart(4)
586 implements the interface to support it.
589 The scc(4) driver replaces puc(4) for Serial Communications
590 Controllers (SCCs) like the Siemens SAB82532 and the Zilog
591 Z8530. On sparc64, it is advised to add scc(4) to the kernel
592 configuration to make sure that the serial ports remain
596 Most world/kernel related NO_* build options changed names.
597 New knobs have common prefixes WITHOUT_*/WITH_* (modelled
598 after FreeBSD ports) and should be set in /etc/src.conf
599 (the src.conf(5) manpage is provided). Full backwards
600 compatibility is maintained for the time being though it's
601 highly recommended to start moving old options out of the
602 system-wide /etc/make.conf file into the new /etc/src.conf
603 while also properly renaming them. More conversions will
604 likely follow. Posting to current@:
606 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
609 The NETSMBCRYPTO kernel option has been retired because its
610 functionality is always included in NETSMB and smbfs.ko now.
613 The TDFX_LINUX kernel option was retired and replaced by the
614 tdfx_linux device. The latter can be loaded as the 3dfx_linux.ko
615 kernel module. Loading it alone should suffice to get 3dfx support
616 for Linux apps because it will pull in 3dfx.ko and linux.ko through
620 The 'audit' group was added to support the new auditing functionality
621 in the base system. Be sure to follow the directions for updating,
622 including the requirement to run mergemaster -p.
625 The kernel ABI to file system modules was changed on i386.
626 Please make sure that your kernel and modules are in sync.
629 This actually occured some time ago, but installing the kernel
630 now also installs a bunch of symbol files for the kernel modules.
631 This increases the size of /boot/kernel to about 67Mbytes. You
632 will need twice this if you will eventually back this up to kernel.old
633 on your next install.
634 If you have a shortage of room in your root partition, you should add
635 -DINSTALL_NODEBUG to your make arguments or add INSTALL_NODEBUG="yes"
636 to your /etc/make.conf.
639 libc's malloc implementation has been replaced. This change has the
640 potential to uncover application bugs that previously went unnoticed.
641 See the malloc(3) manual page for more details.
644 The generic netgraph(4) cookie has been changed. If you upgrade
645 kernel passing this point, you also need to upgrade userland
646 and netgraph(4) utilities like ports/net/mpd or ports/net/mpd4.
649 si(4)'s device files now contain the unit number.
650 Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
653 The kernel ABI was mostly destroyed due to a change in the size
654 of struct lock_object which is nested in other structures such
655 as mutexes which are nested in all sorts of other structures.
656 Make sure your kernel and modules are in sync.
659 The page coloring algorithm in the VM subsystem was converted
660 from tuning with kernel options to autotuning. Please remove
661 any PQ_* option except PQ_NOOPT from your kernel config.
664 The net80211-related tools in the tools/tools/ath directory
665 have been moved to tools/tools/net80211 and renamed with a
666 "wlan" prefix. Scripts that use them should be adjusted
670 Scripts in the local_startup directories (as defined in
671 /etc/defaults/rc.conf) that have the new rc.d semantics will
672 now be run as part of the base system rcorder. If there are
673 errors or problems with one of these local scripts, it could
674 cause boot problems. If you encounter such problems, boot in
675 single user mode, remove that script from the */rc.d directory.
676 Please report the problem to the port's maintainer, and the
677 freebsd-ports@freebsd.org mailing list.
680 The nodev mount option was deprecated in RELENG_6 (where it
681 was a no-op), and is now unsupported. If you have nodev or dev listed
682 in /etc/fstab, remove it, otherwise it will result in a mount error.
685 ABI between ipfw(4) and ipfw(8) has been changed. You need
686 to rebuild ipfw(8) when rebuilding kernel.
689 rp(4)'s device files now contain the unit number.
690 Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
693 /etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
694 Its /etc/rc.conf.d configuration file has been `ppp' from
695 the beginning, and hence there is no need to touch it.
698 Now most modules get their build-time options from the kernel
699 configuration file. A few modules still have fixed options
700 due to their non-conformant implementation, but they will be
701 corrected eventually. You may need to review the options of
702 the modules in use, explicitly specify the non-default options
703 in the kernel configuration file, and rebuild the kernel and
707 kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
708 to turn polling(4) on your interfaces.
711 The old bridge(4) implementation was retired. The new
712 if_bridge(4) serves as a full functional replacement.
715 The ai_addrlen of a struct addrinfo was changed to a socklen_t
716 to conform to POSIX-2001. This change broke an ABI
717 compatibility on 64 bit architecture. You have to recompile
718 userland programs that use getaddrinfo(3) on 64 bit
722 RELENG_6 branched here.
725 The pccard_ifconfig rc.conf variable has been removed and a new
726 variable, ifconfig_DEFAULT has been introduced. Unlike
727 pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
728 do not have ifconfig_ifn entries rather than just those in
729 removable_interfaces.
732 Some previous versions of PAM have permitted the use of
733 non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
734 to third party PAM modules in /usr/local/lib. A change has been
735 made to require the use of absolute paths in order to avoid
736 ambiguity and dependence on library path configuration, which may
737 affect existing configurations.
740 Major changes to network interface API. All drivers must be
741 recompiled. Drivers not in the base system will need to be
742 updated to the new APIs.
745 Changes were made to kinfo_proc in sys/user.h. Please recompile
746 userland, or commands like `fstat', `pkill', `ps', `top' and `w'
747 will not behave correctly.
749 The API and ABI for hwpmc(4) have changed with the addition
750 of sampling support. Please recompile lib/libpmc(3) and
751 usr.sbin/{pmcstat,pmccontrol}.
754 The OpenBSD dhclient was imported in place of the ISC dhclient
755 and the network interface configuration scripts were updated
756 accordingly. If you use DHCP to configure your interfaces, you
757 must now run devd. Also, DNS updating was lost so you will need
758 to find a workaround if you use this feature.
760 The '_dhcp' user was added to support the OpenBSD dhclient. Be
761 sure to run mergemaster -p (like you are supposed to do every time
765 if_bridge was added to the tree. This has changed struct ifnet.
766 Please recompile userland and all network related modules.
769 The n_net of a struct netent was changed to an uint32_t, and
770 1st argument of getnetbyaddr() was changed to an uint32_t, to
771 conform to POSIX-2001. These changes broke an ABI
772 compatibility on 64 bit architecture. With these changes,
773 shlib major of libpcap was bumped. You have to recompile
774 userland programs that use getnetbyaddr(3), getnetbyname(3),
775 getnetent(3) and/or libpcap on 64 bit architecture.
778 Kernel parsing of extra options on '#!' first lines of shell
779 scripts has changed. Lines with multiple options likely will
780 fail after this date. For full details, please see
781 http://people.freebsd.org/~gad/Updating-20050528.txt
784 The packet filter (pf) code has been updated to OpenBSD 3.7
785 Please note the changed anchor syntax and the fact that
786 authpf(8) now needs a mounted fdescfs(5) to function.
789 The NO_MIXED_MODE kernel option has been removed from the i386
790 amd64 platforms as its use has been superceded by the new local
791 APIC timer code. Any kernel config files containing this option
795 The on-disk format of LC_CTYPE files was changed to be machine
796 independent. Please make sure NOT to use NO_CLEAN buildworld
797 when crossing this point. Crossing this point also requires
798 recompile or reinstall of all locale depended packages.
801 The ifi_epoch member of struct if_data has been changed to
802 contain the uptime at which the interface was created or the
803 statistics zeroed rather then the wall clock time because
804 wallclock time may go backwards. This should have no impact
805 unless an snmp implementation is using this value (I know of
809 The acpi_perf and acpi_throttle drivers are now part of the
810 acpi(4) main module. They are no longer built separately.
813 The layout of struct image_params has changed. You have to
814 recompile all compatibility modules (linux, svr4, etc) for use
818 The p4tcc driver has been merged into cpufreq(4). This makes
819 "options CPU_ENABLE_TCC" obsolete. Please load cpufreq.ko or
820 compile in "device cpufreq" to restore this functionality.
823 The responsibility of recomputing the file system summary of
824 a SoftUpdates-enabled dirty volume has been transferred to the
825 background fsck. A rebuild of fsck(8) utility is recommended
826 if you have updated the kernel.
828 To get the old behavior (recompute file system summary at mount
829 time), you can set vfs.ffs.compute_summary_at_mount=1 before
830 mounting the new volume.
833 The cpufreq import is complete. As part of this, the sysctls for
834 acpi(4) throttling have been removed. The power_profile script
835 has been updated, so you can use performance/economy_cpu_freq in
836 rc.conf(5) to set AC on/offline cpu frequencies.
839 NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
840 requires recompiling libnetgraph and userland netgraph utilities.
843 Support for abbreviated forms of a number of ipfw options is
844 now deprecated. Warnings are printed to stderr indicating the
845 correct full form when a match occurs. Some abbreviations may
846 be supported at a later date based on user feedback. To be
847 considered for support, abbreviations must be in use prior to
848 this commit and unlikely to be confused with current key words.
851 By a popular demand, a lot of NOFOO options were renamed
852 to NO_FOO (see bsd.compat.mk for a full list). The old
853 spellings are still supported, but will cause annoying
854 warnings on stderr. Make sure you upgrade properly (see
855 the COMMON ITEMS: section later in this file).
858 Auto-loading of ancillary wlan modules such as wlan_wep has
859 been temporarily disabled; you need to statically configure
860 the modules you need into your kernel or explicitly load them
861 prior to use. Specifically, if you intend to use WEP encryption
862 with an 802.11 device load/configure wlan_wep; if you want to
863 use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
864 and wlan_xauth as required.
867 The behaviour of ppp(8) has changed slightly. If lqr is enabled
868 (``enable lqr''), older versions would revert to LCP ECHO mode on
869 negotiation failure. Now, ``enable echo'' is required for this
870 behaviour. The ppp version number has been bumped to 3.4.2 to
874 The wlan support has been updated to split the crypto support
875 into separate modules. For static WEP you must configure the
876 wlan_wep module in your system or build and install the module
877 in place where it can be loaded (the kernel will auto-load
878 the module when a wep key is configured).
881 The ath driver has been updated to split the tx rate control
882 algorithm into a separate module. You need to include either
883 ath_rate_onoe or ath_rate_amrr when configuring the kernel.
886 Support for systems with an 80386 CPU has been removed. Please
887 use FreeBSD 5.x or earlier on systems with an 80386.
890 We have had a hack which would mount the root filesystem
891 R/W if the device were named 'md*'. As part of the vnode
892 work I'm doing I have had to remove this hack. People
893 building systems which use preloaded MD root filesystems
894 may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
895 their /etc/rc scripts.
898 FreeBSD 5.3 shipped here.
901 The size of struct tcpcb has changed again due to the removal
902 of RFC1644 T/TCP. You have to recompile userland programs that
903 read kmem for tcp sockets directly (netstat, sockstat, etc.)
906 The size of struct tcpcb has changed. You have to recompile
907 userland programs that read kmem for tcp sockets directly
908 (netstat, sockstat, etc.)
911 RELENG_5 branched here. For older entries, please see updating
912 in the RELENG_5 branch.
918 Avoid using make -j when upgrading. From time to time in the
919 past there have been problems using -j with buildworld and/or
920 installworld. This is especially true when upgrading between
921 "distant" versions (eg one that cross a major release boundary
922 or several minor releases, or when several months have passed
923 on the -current branch).
925 Sometimes, obscure build problems are the result of environment
926 poisoning. This can happen because the make utility reads its
927 environment when searching for values for global variables.
928 To run your build attempts in an "environmental clean room",
929 prefix all make commands with 'env -i '. See the env(1) manual
930 page for more details.
932 When upgrading from one major version to another it is generally
933 best to upgrade to the latest code in the currently installed branch
934 first, then do an upgrade to the new branch. This is the best-tested
935 upgrade path, and has the highest probability of being successful.
936 Please try this approach before reporting problems with a major
941 If you are updating from a prior version of FreeBSD (even one just
942 a few days old), you should follow this procedure. It is the most
943 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
945 make kernel-toolchain
946 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
947 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
949 To test a kernel once
950 ---------------------
951 If you just want to boot a kernel once (because you are not sure
952 if it works, or if you want to boot a known bad kernel to provide
953 debugging information) run
954 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
955 nextboot -k testkernel
957 To just build a kernel when you know that it won't mess you up
958 --------------------------------------------------------------
959 This assumes you are already running a 5.X system. Replace
960 ${arch} with the architecture of your machine (e.g. "i386",
961 "alpha", "amd64", "ia64", "pc98", "sparc64", etc).
963 cd src/sys/${arch}/conf
964 config KERNEL_NAME_HERE
965 cd ../compile/KERNEL_NAME_HERE
970 If this fails, go to the "To build a kernel" section.
972 To rebuild everything and install it on the current system.
973 -----------------------------------------------------------
974 # Note: sometimes if you are running current you gotta do more than
975 # is listed here if you are upgrading from a really old current.
977 <make sure you have good level 0 dumps>
979 make kernel KERNCONF=YOUR_KERNEL_HERE
981 <reboot in single user> [3]
989 To cross-install current onto a separate partition
990 --------------------------------------------------
991 # In this approach we use a separate partition to hold
992 # current's root, 'usr', and 'var' directories. A partition
993 # holding "/", "/usr" and "/var" should be about 2GB in
996 <make sure you have good level 0 dumps>
999 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1000 <maybe newfs current's root partition>
1001 <mount current's root partition on directory ${CURRENT_ROOT}>
1002 make installworld DESTDIR=${CURRENT_ROOT}
1003 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1004 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1005 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1006 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1007 <reboot into current>
1008 <do a "native" rebuild/install as described in the previous section>
1009 <maybe install compatibility libraries from src/lib/compat>
1013 To upgrade in-place from 5.x-stable to current
1014 ----------------------------------------------
1015 <make sure you have good level 0 dumps>
1017 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1019 <reboot in single user> [3]
1026 Make sure that you've read the UPDATING file to understand the
1027 tweaks to various things you need. At this point in the life
1028 cycle of current, things change often and you are on your own
1029 to cope. The defaults can also change, so please read ALL of
1030 the UPDATING entries.
1032 Also, if you are tracking -current, you must be subscribed to
1033 freebsd-current@freebsd.org. Make sure that before you update
1034 your sources that you have read and understood all the recent
1035 messages there. If in doubt, please track -stable which has
1036 much fewer pitfalls.
1038 [1] If you have third party modules, such as vmware, you
1039 should disable them at this point so they don't crash your
1042 [3] From the bootblocks, boot -s, and then do
1047 adjkerntz -i # if CMOS is wall time
1048 Also, when doing a major release upgrade, it is required that
1049 you boot into single user mode to do the installworld.
1051 [4] Note: This step is non-optional. Failure to do this step
1052 can result in a significant reduction in the functionality of the
1053 system. Attempting to do it by hand is not recommended and those
1054 that pursue this avenue should read this file carefully, as well
1055 as the archives of freebsd-current and freebsd-hackers mailing lists
1056 for potential gotchas.
1058 [5] Usually this step is a noop. However, from time to time
1059 you may need to do this if you get unknown user in the following
1060 step. It never hurts to do it all the time. You may need to
1061 install a new mergemaster (cd src/usr.sbin/mergemaster && make
1062 install) after the buildworld before this step if you last updated
1063 from current before 20020224 or from -stable before 20020408.
1065 [8] In order to have a kernel that can run the 4.x binaries
1066 needed to do an installworld, you must include the COMPAT_FREEBSD4
1067 option in your kernel. Failure to do so may leave you with a system
1068 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1069 is required to run the 5.x binaries on more recent kernels.
1071 Make sure that you merge any new devices from GENERIC since the
1072 last time you updated your kernel config file.
1074 [9] When checking out sources, you must include the -P flag to have
1075 cvs prune empty directories.
1077 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1078 "?=" instead of the "=" assignment operator, so that buildworld can
1079 override the CPUTYPE if it needs to.
1081 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1082 not on the command line, or in /etc/make.conf. buildworld will
1083 warn if it is improperly defined.
1086 This file contains a list, in reverse chronological order, of major
1087 breakages in tracking -current. Not all things will be listed here,
1088 and it only starts on October 16, 2004. Updating files can found in
1089 previous releases if your system is older than this.
1091 Copyright information:
1093 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1095 Redistribution, publication, translation and use, with or without
1096 modification, in full or in part, in any form or format of this
1097 document are permitted without further permission from the author.
1099 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1100 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1101 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1102 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1103 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1104 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1105 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1106 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1107 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1108 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1109 POSSIBILITY OF SUCH DAMAGE.
1111 If you find this document useful, and you want to, you may buy the
1114 Contact Warner Losh if you have any questions about your use of