1 Updating Information for FreeBSD current users
3 This file is maintained and copyrighted by M. Warner Losh
4 <imp@village.org>. See end of file for further details. For commonly
5 done items, please see the COMMON ITEMS: section later in the file.
7 Items affecting the ports and packages system can be found in
8 /usr/ports/UPDATING. Please read that file before running
11 NOTE TO PEOPLE WHO THINK THAT FreeBSD 8.x IS SLOW ON IA64 OR SUN4V:
12 For ia64 the INVARIANTS and INVARIANT_SUPPORT kernel options
13 were left in the GENERIC kernel because the kernel does not
14 work properly without them. For sun4v all of the normal kernel
15 debugging tools present in HEAD were left in place because
16 sun4v support still needs work to become production ready.
18 20120612: p11 FreeBSD-SA-12:03.bind
19 FreeBSD-SA-12:04.sysret
20 FreeBSD-EN-12:02.ipv6refcount
21 Fix a problem where zero-length RDATA fields can cause named to crash.
24 Correct a privilege escalation when returning from kernel if
25 running FreeBSD/amd64 on non-AMD processors. [12:04]
27 Fix reference count errors in IPv6 code. [EN-12:02]
29 20120530: p10 FreeBSD-SA-12:01.openssl (revised),
30 FreeBSD-SA-12:02.crypt
31 Update the previous openssl fix. [12:01]
33 Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02]
35 20120503: p9 FreeBSD-SA-12:01.openssl
36 Fix multiple OpenSSL vulnerabilities.
38 20120104: p8 FreeBSD-EN-12:01.freebsd-update
39 Extend the character set accepted by freebsd-update(8) in file
40 names in order to allow upgrades to FreeBSD 9.0-RELEASE.
42 20111223: p7 FreeBSD-SA-11:06.bind, FreeBSD-SA-11:07.chroot
43 FreeBSD-SA-11:08.telnetd, FreeBSD-SA-11:09.pam_ssh
45 Fix a problem whereby a corrupt DNS record can cause named to crash.
48 Add an API for alerting internal libc routines to the presence of
49 "unsafe" paths post-chroot, and use it in ftpd. [11:07]
51 Fix a buffer overflow in telnetd. [11:08]
53 Make pam_ssh ignore unpassphrased keys unless the "nullok" option is
56 Add sanity checking of service names in pam_start. [11:10]
58 20111004: p6 FreeBSD-SA-11:05.unix (revised)
59 Fix a bug in UNIX socket handling in the linux emulator which was
60 exposed by the security fix in FreeBSD-SA-11:05.unix.
62 20110928: p5 FreeBSD-SA-11:04.compress, FreeBSD-SA-11:05.unix
63 Fix handling of corrupt compress(1)ed data. [11:04]
65 Add missing length checks on unix socket addresses. [11:05]
67 20110528: p4 FreeBSD-SA-11:02.bind
68 Fix BIND remote DoS with large RRSIG RRsets and negative
71 20110420: p3 FreeBSD-SA-11:01.mountd
72 Fix CIDR parsing bug in mountd ACLs.
74 20101129: p2 FreeBSD-SA-10:10.openssl
75 Fix OpenSSL multiple vulnerabilities.
77 20100920: p1 FreeBSD-SA-10:08.bzip2
78 Fix an integer overflow in RLE length parsing when decompressing
84 20100713: FreeBSD-SA-10:07.mbuf
85 Correctly copy the M_RDONLY flag when duplicating a reference
86 to an mbuf external buffer.
89 The config(8) command has been updated to maintain compatibility
90 with config files from 8.0-RELEASE. You will need a new version
91 of config to build kernels (this version can be used from 8.0-RELEASE
92 forward). The buildworld target will generate it, so following
93 the instructions in this file for updating will work glitch-free.
94 Merely doing a make buildkernel without first doing a make buildworld
95 (or kernel-toolchain), or attempting to build a kernel using
96 traidtional methods will generate a config version warning, indicating
100 The rc.firewall and rc.firewall6 were unified, and
101 rc.firewall6 and rc.d/ip6fw were removed.
102 According to the removal of rc.d/ip6fw, ipv6_firewall_* rc
103 variables are obsoleted. Instead, the following new rc
104 variables are added to rc.d/ipfw:
106 firewall_client_net_ipv6, firewall_simple_iif_ipv6,
107 firewall_simple_inet_ipv6, firewall_simple_oif_ipv6,
108 firewall_simple_onet_ipv6
110 The meanings correspond to the relevant IPv4 variables.
113 COMPAT_IA32 has been added as an alias for COMPAT_FREEBSD32. A new
114 version of config(8) is required. The error message when you hit this
115 condition is confusing (COMPAT_FREEBSD32 duplicate option), when it
116 should really say "your config is too old to compile this new kernel."
119 The kernel option COMPAT_IA32 has been replaced with COMPAT_FREEBSD32
120 to allow 32-bit compatibility on non-x86 platforms. All kernel
121 configurations on amd64 and ia64 platforms using these options must
122 be modified accordingly.
125 Introduce the kernel thread "deadlock resolver" (which can be enabled
126 via the DEADLKRES option, see NOTES for more details) and the
127 sleepq_type() function for sleepqueues.
133 802.11s D3.03 support was committed. This is incompatible with
134 the previous code, which was based on D3.0.
137 ZFS snapshots are now mounted with MNT_IGNORE flag. Use -v option for
138 mount(8) and -a option for df(1) to see them.
141 Remove the option STOP_NMI. The default action is now to use NMI
142 only for KDB via the newly introduced function stop_cpus_hard()
143 and maintain stop_cpus() to just use a normal IPI_STOP on ia32
150 Bump the shared library version numbers for all libraries that
151 do not use symbol versioning as part of the 8.0-RELEASE cycle.
152 Bump __FreeBSD_version to 800105.
155 Due to changes in the implementation of virtual network stack
156 support, all network-related kernel modules must be recompiled.
157 As this change breaks the ABI, bump __FreeBSD_version to 800104.
160 The TOE interface to the TCP syncache has been modified to remove struct
161 tcpopt (<netinet/tcp_var.h>) from the ABI of the network stack. The
162 cxgb driver is the only TOE consumer affected by this change, and needs
163 to be recompiled along with the kernel. As this change breaks the ABI,
164 bump __FreeBSD_version to 800103.
167 Padding has been added to struct tcpcb, sackhint and tcpstat in
168 <netinet/tcp_var.h> to facilitate future MFCs and bug fixes whilst
169 maintainig the ABI. However, this change breaks the ABI, so bump
170 __FreeBSD_version to 800102. User space tools that rely on the size of
171 any of these structs (e.g. sockstat) need to be recompiled.
174 The NFS_LEGACYRPC option has been removed along with the old
175 kernel RPC implementation that this option selected. Kernel
176 configurations may need to be adjusted.
179 The network interface device nodes at /dev/net/<interface> have
180 been removed. All ioctl operations can be performed the normal
181 way using routing sockets. The kqueue functionality can
182 generally be replaced with routing sockets.
185 The documentation from the FreeBSD Documentation Project
186 (Handbook, FAQ, etc.) is now installed via packages by
187 sysinstall(8) and under the /usr/local/share/doc/freebsd
188 directory instead of /usr/share/doc.
191 The ABI of various structures related to the SYSV IPC API have
192 been changed. As a result, the COMPAT_FREEBSD[456] and COMPAT_43
193 kernel options now all require COMPAT_FREEBSD7.
194 Bump __FreeBSD_version to 800100.
197 Layout of struct vnet has changed as routing related variables
198 were moved to their own Vimage module. Modules need to be
199 recompiled. Bump __FreeBSD_version to 800099.
202 NGROUPS_MAX and NGROUPS have been increased from 16 to 1023
203 and 1024 respectively. As long as no more than 16 groups per
204 process are used, no changes should be visible. When more
205 than 16 groups are used, old binaries may fail if they call
206 getgroups() or getgrouplist() with statically sized storage.
207 Recompiling will work around this, but applications should be
208 modified to use dynamically allocated storage for group arrays
209 as POSIX.1-2008 does not cap an implementation's number of
210 supported groups at NGROUPS_MAX+1 as previous versions did.
212 NFS and portalfs mounts may also be affected as the list of
213 groups is truncated to 16. Users of NFS who use more than 16
214 groups, should take care that negative group permissions are not
215 used on the exported file systems as they will not be reliable
216 unless a GSSAPI based authentication method is used.
219 The compiling option ADAPTIVE_LOCKMGRS has been introduced.
220 This option compiles in the support for adaptive spinning for lockmgrs
221 which want to enable it. The lockinit() function now accepts the
222 flag LK_ADAPTIVE in order to make the lock object subject to
223 adaptive spinning when both held in write and read mode.
226 The layout of the structure returned by IEEE80211_IOC_STA_INFO
227 has changed. User applications that use this ioctl need to be
231 The layout of struct thread has changed. Kernel and modules
235 The layout of structs ifnet, domain, protosw and vnet_net has
236 changed. Kernel modules need to be rebuilt.
237 Bump __FreeBSD_version to 800097.
240 window(1) has been removed from the base system. It can now be
241 installed from ports. The port is called misc/window.
244 The way we are storing and accessing `routing table' entries
245 has changed. Programs reading the FIB, like netstat, need to
249 A new netisr implementation has been added for FreeBSD 8. Network
250 file system modules, such as igmp, ipdivert, and others, should be
252 Bump __FreeBSD_version to 800096.
255 Remove the tunable/sysctl debug.mpsafevfs as its initial purpose
259 Add VOP_ACCESSX(9). File system modules need to be rebuilt.
260 Bump __FreeBSD_version to 800094.
263 Add mnt_xflag field to 'struct mount'. File system modules
265 Bump __FreeBSD_version to 800093.
268 The compiling option ADAPTIVE_SX has been retired while it has been
269 introduced the option NO_ADAPTIVE_SX which handles the reversed logic.
270 The KPI for sx_init_flags() changes as accepting flags:
271 SX_ADAPTIVESPIN flag has been retired while the SX_NOADAPTIVE flag
272 has been introduced in order to handle the reversed logic.
273 Bump __FreeBSD_version to 800092.
276 Add support for hierarchical jails. Remove global securelevel.
277 Bump __FreeBSD_version to 800091.
280 The layout of struct vnet_net has changed, therefore modules
282 Bump __FreeBSD_version to 800090.
285 The newly imported zic(8) produces a new format in the
286 output. Please run tzsetup(8) to install the newly created
287 data to /etc/localtime.
290 The sysctl tree for the usb stack has renamed from hw.usb2.* to
291 hw.usb.* and is now consistent again with previous releases.
294 802.11 monitor mode support was revised and driver api's
295 were changed. Drivers dependent on net80211 now support
296 DLT_IEEE802_11_RADIO instead of DLT_IEEE802_11. No
297 user-visible data structures were changed but applications
298 that use DLT_IEEE802_11 may require changes.
299 Bump __FreeBSD_version to 800088.
302 The layout of the following structs has changed: sysctl_oid,
303 socket, ifnet, inpcbinfo, tcpcb, syncache_head, vnet_inet,
304 vnet_inet6 and vnet_ipfw. Most modules need to be rebuild or
305 panics may be experienced. World rebuild is required for
306 correctly checking networking state from userland.
307 Bump __FreeBSD_version to 800085.
310 MLDv2 and Source-Specific Multicast (SSM) have been merged
311 to the IPv6 stack. VIMAGE hooks are in but not yet used.
312 The implementation of SSM within FreeBSD's IPv6 stack closely
313 follows the IPv4 implementation.
315 For kernel developers:
317 * The most important changes are that the ip6_output() and
318 ip6_input() paths no longer take the IN6_MULTI_LOCK,
319 and this lock has been downgraded to a non-recursive mutex.
321 * As with the changes to the IPv4 stack to support SSM, filtering
322 of inbound multicast traffic must now be performed by transport
323 protocols within the IPv6 stack. This does not apply to TCP and
324 SCTP, however, it does apply to UDP in IPv6 and raw IPv6.
326 * The KPIs used by IPv6 multicast are similar to those used by
327 the IPv4 stack, with the following differences:
328 * im6o_mc_filter() is analogous to imo_multicast_filter().
329 * The legacy KAME entry points in6_joingroup and in6_leavegroup()
330 are shimmed to in6_mc_join() and in6_mc_leave() respectively.
331 * IN6_LOOKUP_MULTI() has been deprecated and removed.
332 * IPv6 relies on MLD for the DAD mechanism. KAME's internal KPIs
333 for MLDv1 have an additional 'timer' argument which is used to
334 jitter the initial membership report for the solicited-node
335 multicast membership on-link.
336 * This is not strictly needed for MLDv2, which already jitters
337 its report transmissions. However, the 'timer' argument is
338 preserved in case MLDv1 is active on the interface.
340 * The KAME linked-list based IPv6 membership implementation has
341 been refactored to use a vector similar to that used by the IPv4
343 Code which maintains a list of its own multicast memberships
344 internally, e.g. carp, has been updated to reflect the new
347 * There is a known Lock Order Reversal (LOR) due to in6_setscope()
348 acquiring the IF_AFDATA_LOCK and being called within ip6_output().
349 Whilst MLDv2 tries to avoid this otherwise benign LOR, it is an
350 implementation constraint which needs to be addressed in HEAD.
352 For application developers:
354 * The changes are broadly similar to those made for the IPv4
357 * The use of IPv4 and IPv6 multicast socket options on the same
358 socket, using mapped addresses, HAS NOT been tested or supported.
360 * There are a number of issues with the implementation of various
361 IPv6 multicast APIs which need to be resolved in the API surface
362 before the implementation is fully compatible with KAME userland
363 use, and these are mostly to do with interface index treatment.
365 * The literature available discusses the use of either the delta / ASM
366 API with setsockopt(2)/getsockopt(2), or the full-state / ASM API
367 using setsourcefilter(3)/getsourcefilter(3). For more information
368 please refer to RFC 3768, 'Socket Interface Extensions for
369 Multicast Source Filters'.
371 * Applications which use the published RFC 3678 APIs should be fine.
373 For systems administrators:
375 * The mtest(8) utility has been refactored to support IPv6, in
376 addition to IPv4. Interface addresses are no longer accepted
377 as arguments, their names must be used instead. The utility
378 will map the interface name to its first IPv4 address as
379 returned by getifaddrs(3).
381 * The ifmcstat(8) utility has also been updated to print the MLDv2
382 endpoint state and source filter lists via sysctl(3).
384 * The net.inet6.ip6.mcast.loop sysctl may be tuned to 0 to disable
385 loopback of IPv6 multicast datagrams by default; it defaults to 1
386 to preserve the existing behaviour. Disabling multicast loopback is
387 recommended for optimal system performance.
389 * The IPv6 MROUTING code has been changed to examine this sysctl
390 instead of attempting to perform a group lookup before looping
391 back forwarded datagrams.
393 Bump __FreeBSD_version to 800084.
396 Implement low-level Bluetooth HCI API.
397 Bump __FreeBSD_version to 800083.
400 The layout of struct malloc_type, used by modules to register new
401 memory allocation types, has changed. Most modules will need to
402 be rebuilt or panics may be experienced.
403 Bump __FreeBSD_version to 800081.
406 Anticipate overflowing inp_flags - add inp_flags2.
407 This changes most offsets in inpcb, so checking v4 connection
408 state will require a world rebuild.
409 Bump __FreeBSD_version to 800080.
412 Add an llentry to struct route and struct route_in6. Modules
413 embedding a struct route will need to be recompiled.
414 Bump __FreeBSD_version to 800079.
417 The size of rt_metrics_lite and by extension rtentry has changed.
418 Networking administration apps will need to be recompiled.
419 The route command now supports show as an alias for get, weighting
420 of routes, sticky and nostick flags to alter the behavior of stateful
422 Bump __FreeBSD_version to 800078.
425 Do not use Giant for kbdmux(4) locking. This is wrong and
426 apparently causing more problems than it solves. This will
427 re-open the issue where interrupt handlers may race with
428 kbdmux(4) in polling mode. Typical symptoms include (but
429 not limited to) duplicated and/or missing characters when
430 low level console functions (such as gets) are used while
431 interrupts are enabled (for example geli password prompt,
432 mountroot prompt etc.). Disabling kbdmux(4) may help.
435 The size of structs vnet_net, vnet_inet and vnet_ipfw has changed;
436 kernel modules referencing any of the above need to be recompiled.
437 Bump __FreeBSD_version to 800075.
440 GEOM_PART has become the default partition slicer for storage devices,
441 replacing GEOM_MBR, GEOM_BSD, GEOM_PC98 and GEOM_GPT slicers. It
442 introduces some changes:
444 MSDOS/EBR: the devices created from MSDOS extended partition entries
445 (EBR) can be named differently than with GEOM_MBR and are now symlinks
446 to devices with offset-based names. fstabs may need to be modified.
448 BSD: the "geometry does not match label" warning is harmless in most
449 cases but it points to problems in file system misalignment with
450 disk geometry. The "c" partition is now implicit, covers the whole
451 top-level drive and cannot be (mis)used by users.
453 General: Kernel dumps are now not allowed to be written to devices
454 whose partition types indicate they are meant to be used for file
455 systems (or, in case of MSDOS partitions, as something else than
458 Most of these changes date approximately from 200812.
461 The uscanner(4) driver has been removed from the kernel. This follows
462 Linux removing theirs in 2.6 and making libusb the default interface
466 The multicast forwarding code has been cleaned up. netstat(1)
467 only relies on KVM now for printing bandwidth upcall meters.
468 The IPv4 and IPv6 modules are split into ip_mroute_mod and
469 ip6_mroute_mod respectively. The config(5) options for statically
470 compiling this code remain the same, i.e. 'options MROUTING'.
473 Support for the IFF_NEEDSGIANT network interface flag has been
474 removed, which means that non-MPSAFE network device drivers are no
475 longer supported. In particular, if_ar, if_sr, and network device
476 drivers from the old (legacy) USB stack can no longer be built or
480 POSIX.1 Native Language Support (NLS) has been enabled in libc and
481 a bunch of new language catalog files have also been added.
482 This means that some common libc messages are now localized and
483 they depend on the LC_MESSAGES environmental variable.
486 The k8temp(4) driver has been renamed to amdtemp(4) since
487 support for K10 and K11 CPU families was added.
490 IGMPv3 and Source-Specific Multicast (SSM) have been merged
491 to the IPv4 stack. VIMAGE hooks are in but not yet used.
493 For kernel developers, the most important changes are that the
494 ip_output() and ip_input() paths no longer take the IN_MULTI_LOCK(),
495 and this lock has been downgraded to a non-recursive mutex.
497 Transport protocols (UDP, Raw IP) are now responsible for filtering
498 inbound multicast traffic according to group membership and source
499 filters. The imo_multicast_filter() KPI exists for this purpose.
500 Transports which do not use multicast (SCTP, TCP) already reject
501 multicast by default. Forwarding and receive performance may improve
502 as a mutex acquisition is no longer needed in the ip_input()
503 low-level input path. in_addmulti() and in_delmulti() are shimmed
504 to new KPIs which exist to support SSM in-kernel.
506 For application developers, it is recommended that loopback of
507 multicast datagrams be disabled for best performance, as this
508 will still cause the lock to be taken for each looped-back
509 datagram transmission. The net.inet.ip.mcast.loop sysctl may
510 be tuned to 0 to disable loopback by default; it defaults to 1
511 to preserve the existing behaviour.
513 For systems administrators, to obtain best performance with
514 multicast reception and multiple groups, it is always recommended
515 that a card with a suitably precise hash filter is used. Hash
516 collisions will still result in the lock being taken within the
517 transport protocol input path to check group membership.
519 If deploying FreeBSD in an environment with IGMP snooping switches,
520 it is recommended that the net.inet.igmp.sendlocal sysctl remain
521 enabled; this forces 224.0.0.0/24 group membership to be announced
524 The size of 'struct igmpstat' has changed; netstat needs to be
525 recompiled to reflect this.
526 Bump __FreeBSD_version to 800070.
529 libusb20.so.1 is now installed as libusb.so.1 and the ports system
530 updated to use it. This requires a buildworld/installworld in order to
531 update the library and dependencies (usbconfig, etc). Its advisable to
532 rebuild all ports which uses libusb. More specific directions are given
533 in the ports collection UPDATING file. Any /etc/libmap.conf entries for
534 libusb are no longer required and can be removed.
537 A workaround is committed to allow the creation of System V shared
538 memory segment of size > 2 GB on the 64-bit architectures.
539 Due to a limitation of the existing ABI, the shm_segsz member
540 of the struct shmid_ds, returned by shmctl(IPC_STAT) call is
541 wrong for large segments. Note that limits must be explicitly
542 raised to allow such segments to be created.
545 The layout of struct ifnet has changed, requiring a rebuild of all
546 network device driver modules.
549 The /dev handling for the new USB stack has changed, a
550 buildworld/installworld is required for libusb20.
553 The new USB2 stack has now been permanently moved in and all kernel and
554 module names reverted to their previous values (eg, usb, ehci, ohci,
555 ums, ...). The old usb stack can be compiled in by prefixing the name
556 with the letter 'o', the old usb modules have been removed.
557 Updating entry 20090216 for xorg and 20090215 for libmap may still
561 The rc.conf(5) option if_up_delay has been renamed to
562 defaultroute_delay to better reflect its purpose. If you have
563 customized this setting in /etc/rc.conf you need to update it to
567 xorg 7.4 wants to configure its input devices via hald which does not
568 yet work with USB2. If the keyboard/mouse does not work in xorg then
570 Option "AllowEmptyInput" "off"
571 to your ServerLayout section. This will cause X to use the configured
572 kbd and mouse sections from your xorg.conf.
575 The GENERIC kernels for all architectures now default to the new USB2
576 stack. No kernel config options or code have been removed so if a
577 problem arises please report it and optionally revert to the old USB
578 stack. If you are loading USB kernel modules or have a custom kernel
579 that includes GENERIC then ensure that usb names are also changed over,
580 eg uftdi -> usb2_serial_ftdi.
582 Older programs linked against the ports libusb 0.1 need to be
583 redirected to the new stack's libusb20. /etc/libmap.conf can
585 # Map old usb library to new one for usb2 stack
586 libusb-0.1.so.8 libusb20.so.1
589 All USB ethernet devices now attach as interfaces under the name ueN
590 (eg. ue0). This is to provide a predictable name as vendors often
591 change usb chipsets in a product without notice.
594 The ichsmb(4) driver has been changed to require SMBus slave
595 addresses be left-justified (xxxxxxx0b) rather than right-justified.
596 All of the other SMBus controller drivers require left-justified
597 slave addresses, so this change makes all the drivers provide the
601 INET6 statistics (struct ip6stat) was updated.
602 netstat(1) needs to be recompiled.
605 NTFS has been removed from GENERIC kernel on amd64 to match
606 GENERIC on i386. Should not cause any issues since mount_ntfs(8)
607 will load ntfs.ko module automatically when NTFS support is
608 actually needed, unless ntfs.ko is not installed or security
609 level prohibits loading kernel modules. If either is the case,
610 "options NTFS" has to be added into kernel config.
613 TCP Appropriate Byte Counting (RFC 3465) support added to kernel.
614 New field in struct tcpcb breaks ABI, so bump __FreeBSD_version to
615 800061. User space tools that rely on the size of struct tcpcb in
616 tcp_var.h (e.g. sockstat) need to be recompiled.
619 ng_tty(4) module updated to match the new TTY subsystem.
620 Due to API change, user-level applications must be updated.
621 New API support added to mpd5 CVS and expected to be present
622 in next mpd5.3 release.
625 With __FreeBSD_version 800060 the makefs tool is part of
626 the base system (it was a port).
629 The afdata and ifnet locks have been changed from mutexes to
630 rwlocks, network modules will need to be re-compiled.
633 __FreeBSD_version 800059 incorporates the new arp-v2 rewrite.
634 RTF_CLONING, RTF_LLINFO and RTF_WASCLONED flags are eliminated.
635 The new code reduced struct rtentry{} by 16 bytes on 32-bit
636 architecture and 40 bytes on 64-bit architecture. The userland
637 applications "arp" and "ndp" have been updated accordingly.
638 The output from "netstat -r" shows only routing entries and
639 none of the L2 information.
642 __FreeBSD_version 800057 marks the switchover from the
643 binary ath hal to source code. Users must add the line:
645 options AH_SUPPORT_AR5416
647 to their kernel config files when specifying:
651 The ath_hal module no longer exists; the code is now compiled
652 together with the driver in the ath module. It is now
653 possible to tailor chip support (i.e. reduce the set of chips
654 and thereby the code size); consult ath_hal(4) for details.
657 __FreeBSD_version 800054 adds memory barriers to
658 <machine/atomic.h>, new interfaces to ifnet to facilitate
659 multiple hardware transmit queues for cards that support
660 them, and a lock-less ring-buffer implementation to
661 enable drivers to more efficiently manage queueing of
665 A new version of ZFS (version 13) has been merged to -HEAD.
666 This version has zpool attribute "listsnapshots" off by
667 default, which means "zfs list" does not show snapshots,
668 and is the same as Solaris behavior.
671 dummynet(4) ABI has changed. ipfw(8) needs to be recompiled.
674 The uhci, ohci, ehci and slhci USB Host controller drivers have
675 been put into separate modules. If you load the usb module
676 separately through loader.conf you will need to load the
677 appropriate *hci module as well. E.g. for a UHCI-based USB 2.0
678 controller add the following to loader.conf:
684 The ABI used by the PMC toolset has changed. Please keep
685 userland (libpmc(3)) and the kernel module (hwpmc(4)) in
689 atapci kernel module now includes only generic PCI ATA
690 driver. AHCI driver moved to ataahci kernel module.
691 All vendor-specific code moved into separate kernel modules:
692 ataacard, ataacerlabs, ataadaptec, ataamd, ataati, atacenatek,
693 atacypress, atacyrix, atahighpoint, ataintel, ataite, atajmicron,
694 atamarvell, atamicron, atanational, atanetcell, atanvidia,
695 atapromise, ataserverworks, atasiliconimage, atasis, atavia
698 The TTY subsystem of the kernel has been replaced by a new
699 implementation, which provides better scalability and an
700 improved driver model. Most common drivers have been migrated to
701 the new TTY subsystem, while others have not. The following
702 drivers have not yet been ported to the new TTY layer:
705 cy, digi, rc, rp, sio
711 ng_h4, ng_tty, ppp, sl, snp
713 Adding these drivers to your kernel configuration file shall
714 cause compilation to fail.
717 ntpd has been upgraded to 4.2.4p5.
720 OpenSSH has been upgraded to 5.1p1.
722 For many years, FreeBSD's version of OpenSSH preferred DSA
723 over RSA for host and user authentication keys. With this
724 upgrade, we've switched to the vendor's default of RSA over
725 DSA. This may cause upgraded clients to warn about unknown
726 host keys even for previously known hosts. Users should
727 follow the usual procedure for verifying host keys before
728 accepting the RSA key.
730 This can be circumvented by setting the "HostKeyAlgorithms"
731 option to "ssh-dss,ssh-rsa" in ~/.ssh/config or on the ssh
734 Please note that the sequence of keys offered for
735 authentication has been changed as well. You may want to
736 specify IdentityFile in a different order to revert this
740 The sio(4) driver has been removed from the i386 and amd64
741 kernel configuration files. This means uart(4) is now the
742 default serial port driver on those platforms as well.
744 To prevent collisions with the sio(4) driver, the uart(4) driver
745 uses different names for its device nodes. This means the
746 onboard serial port will now most likely be called "ttyu0"
747 instead of "ttyd0". You may need to reconfigure applications to
748 use the new device names.
750 When using the serial port as a boot console, be sure to update
751 /boot/device.hints and /etc/ttys before booting the new kernel.
752 If you forget to do so, you can still manually specify the hints
753 at the loader prompt:
755 set hint.uart.0.at="isa"
756 set hint.uart.0.port="0x3F8"
757 set hint.uart.0.flags="0x10"
758 set hint.uart.0.irq="4"
762 The gpt(8) utility has been removed. Use gpart(8) to partition
766 The version that Linuxulator emulates was changed from 2.4.2
767 to 2.6.16. If you experience any problems with Linux binaries
768 please try to set sysctl compat.linux.osrelease to 2.4.2 and
769 if it fixes the problem contact emulation mailing list.
772 ISDN4BSD (I4B) was removed from the src tree. You may need to
773 update a your kernel configuration and remove relevant entries.
776 I have checked in code to support multiple routing tables.
777 See the man pages setfib(1) and setfib(2).
778 This is a hopefully backwards compatible version,
779 but to make use of it you need to compile your kernel
780 with options ROUTETABLES=2 (or more up to 16).
783 The 802.11 wireless support was redone to enable multi-bss
784 operation on devices that are capable. The underlying device
785 is no longer used directly but instead wlanX devices are
786 cloned with ifconfig. This requires changes to rc.conf files.
788 ifconfig_ath0="WPA DHCP"
791 ifconfig_wlan0="WPA DHCP"
792 see rc.conf(5) for more details. In addition, mergemaster of
793 /etc/rc.d is highly recommended. Simultaneous update of userland
794 and kernel wouldn't hurt either.
796 As part of the multi-bss changes the wlan_scan_ap and wlan_scan_sta
797 modules were merged into the base wlan module. All references
798 to these modules (e.g. in kernel config files) must be removed.
801 psm(4) has gained write(2) support in native operation level.
802 Arbitrary commands can be written to /dev/psm%d and status can
803 be read back from it. Therefore, an application is responsible
804 for status validation and error recovery. It is a no-op in
805 other operation levels.
808 Support for KSE threading has been removed from the kernel. To
809 run legacy applications linked against KSE libmap.conf may
810 be used. The following libmap.conf may be used to ensure
811 compatibility with any prior release:
813 libpthread.so.1 libthr.so.1
814 libpthread.so.2 libthr.so.2
815 libkse.so.3 libthr.so.3
818 The layout of struct vmspace has changed. This affects libkvm
819 and any executables that link against libkvm and use the
820 kvm_getprocs() function. In particular, but not exclusively,
821 it affects ps(1), fstat(1), pkill(1), systat(1), top(1) and w(1).
822 The effects are minimal, but it's advisable to upgrade world
826 The latest em driver no longer has support in it for the
827 82575 adapter, this is now moved to the igb driver. The
828 split was done to make new features that are incompatible
829 with older hardware easier to do.
832 The new geom_lvm(4) geom class has been renamed to geom_linux_lvm(4),
833 likewise the kernel option is now GEOM_LINUX_LVM.
836 The default NFS mount mode has changed from UDP to TCP for
837 increased reliability. If you rely on (insecurely) NFS
838 mounting across a firewall you may need to update your
842 Belatedly note the addition of m_collapse for compacting
846 The fts(3) structures have been changed to use adequate
847 integer types for their members and so to be able to cope
848 with huge file trees. The old fts(3) ABI is preserved
849 through symbol versioning in libc, so third-party binaries
850 using fts(3) should still work, although they will not take
851 advantage of the extended types. At the same time, some
852 third-party software might fail to build after this change
853 due to unportable assumptions made in its source code about
854 fts(3) structure members. Such software should be fixed
855 by its vendor or, in the worst case, in the ports tree.
856 FreeBSD_version 800015 marks this change for the unlikely
857 case that a portable fix is impossible.
860 To upgrade to -current after this date, you must be running
861 FreeBSD not older than 6.0-RELEASE. Upgrading to -current
862 from 5.x now requires a stop over at RELENG_6 or RELENG_7 systems.
865 The ADAPTIVE_GIANT kernel option has been retired because its
866 functionality is the default now.
869 The AT keyboard emulation of sunkbd(4) has been turned on
870 by default. In order to make the special symbols of the Sun
871 keyboards driven by sunkbd(4) work under X these now have
872 to be configured the same way as Sun USB keyboards driven
873 by ukbd(4) (which also does AT keyboard emulation), f.e.:
875 Option "XkbLayout" "us"
876 Option "XkbRules" "xorg"
877 Option "XkbSymbols" "pc(pc105)+sun_vndr/usb(sun_usb)+us"
880 It has been decided that it is desirable to provide ABI
881 backwards compatibility to the FreeBSD 4/5/6 versions of the
882 PCIOCGETCONF, PCIOCREAD and PCIOCWRITE IOCTLs, which was
883 broken with the introduction of PCI domain support (see the
884 20070930 entry). Unfortunately, this required the ABI of
885 PCIOCGETCONF to be broken again in order to be able to
886 provide backwards compatibility to the old version of that
887 IOCTL. Thus consumers of PCIOCGETCONF have to be recompiled
888 again. As for prominent ports this affects neither pciutils
889 nor xorg-server this time, the hal port needs to be rebuilt
893 The misnamed kthread_create() and friends have been renamed
894 to kproc_create() etc. Many of the callers already
896 I will return kthread_create() and friends in a while
897 with implementations that actually create threads, not procs.
898 Renaming corresponds with version 800002.
904 Setting WITHOUT_LIBPTHREAD now means WITHOUT_LIBKSE and
905 WITHOUT_LIBTHR are set.
908 The PCI code has been made aware of PCI domains. This means that
909 the location strings as used by pciconf(8) etc are now in the
910 following format: pci<domain>:<bus>:<device>[:<function>]. It
911 also means that consumers of <sys/pciio.h> potentially need to
912 be recompiled; this includes the hal and xorg-server ports.
915 The caching daemon (cached) was renamed to nscd. nscd.conf
916 configuration file should be used instead of cached.conf and
917 nscd_enable, nscd_pidfile and nscd_flags options should be used
918 instead of cached_enable, cached_pidfile and cached_flags in
922 The getfacl(1) utility now prints owning user and group name
923 instead of owning uid and gid in the three line comment header.
924 This is the same behavior as getfacl(1) on Solaris and Linux.
927 The new IPsec code is now compiled in using the IPSEC option. The
928 IPSEC option now requires "device crypto" be defined in your kernel
929 configuration. The FAST_IPSEC kernel option is now deprecated.
932 The packet filter (pf) code has been updated to OpenBSD 4.1 Please
933 note the changed syntax - keep state is now on by default. Also
934 note the fact that ftp-proxy(8) has been changed from bottom up and
935 has been moved from libexec to usr/sbin. Changes in the ALTQ
936 handling also affect users of IPFW's ALTQ capabilities.
939 Remove KAME IPsec in favor of FAST_IPSEC, which is now the
940 only IPsec supported by FreeBSD. The new IPsec stack
941 supports both IPv4 and IPv6. The kernel option will change
942 after the code changes have settled in. For now the kernel
943 option IPSEC is deprecated and FAST_IPSEC is the only option, that
944 will change after some settling time.
947 The wicontrol(8) utility has been removed from the base system. wi(4)
948 cards should be configured using ifconfig(8), see the man page for more
952 The i386/amd64 GENERIC kernel now defaults to the nfe(4) driver
953 instead of the nve(4) driver. Please update your configuration
957 By default, /etc/rc.d/sendmail no longer rebuilds the aliases
958 database if it is missing or older than the aliases file. If
959 desired, set the new rc.conf option sendmail_rebuild_aliases
960 to "YES" to restore that functionality.
963 The IPv4 multicast socket code has been considerably modified, and
964 moved to the file sys/netinet/in_mcast.c. Initial support for the
965 RFC 3678 Source-Specific Multicast Socket API has been added to
966 the IPv4 network stack.
968 Strict multicast and broadcast reception is now the default for
969 UDP/IPv4 sockets; the net.inet.udp.strict_mcast_mship sysctl variable
970 has now been removed.
972 The RFC 1724 hack for interface selection has been removed; the use
973 of the Linux-derived ip_mreqn structure with IP_MULTICAST_IF has
974 been added to replace it. Consumers such as routed will soon be
975 updated to reflect this.
977 These changes affect users who are running routed(8) or rdisc(8)
978 from the FreeBSD base system on point-to-point or unnumbered
982 The net80211 layer has changed significantly and all wireless
983 drivers that depend on it need to be recompiled. Further these
984 changes require that any program that interacts with the wireless
985 support in the kernel be recompiled; this includes: ifconfig,
986 wpa_supplicant, hostapd, and wlanstats. Users must also, for
987 the moment, kldload the wlan_scan_sta and/or wlan_scan_ap modules
988 if they use modules for wireless support. These modules implement
989 scanning support for station and ap modes, respectively. Failure
990 to load the appropriate module before marking a wireless interface
991 up will result in a message to the console and the device not
995 The pam_nologin(8) module ceases to provide an authentication
996 function and starts providing an account management function.
997 Consequent changes to /etc/pam.d should be brought in using
998 mergemaster(8). Third-party files in /usr/local/etc/pam.d may
999 need manual editing as follows. Locate this line (or similar):
1001 auth required pam_nologin.so no_warn
1003 and change it according to this example:
1005 account required pam_nologin.so no_warn
1007 That is, the first word needs to be changed from "auth" to
1008 "account". The new line can be moved to the account section
1009 within the file for clarity. Not updating pam.conf(5) files
1010 will result in nologin(5) ignored by the respective services.
1013 The ether_ioctl() function has been synchronized with ioctl(2)
1014 and ifnet.if_ioctl. Due to that, the size of one of its arguments
1015 has changed on 64-bit architectures. All kernel modules using
1016 ether_ioctl() need to be rebuilt on such architectures.
1019 Improved INCLUDE_CONFIG_FILE support has been introduced to the
1020 config(8) utility. In order to take advantage of this new
1021 functionality, you are expected to recompile and install
1022 src/usr.sbin/config. If you don't rebuild config(8), and your
1023 kernel configuration depends on INCLUDE_CONFIG_FILE, the kernel
1024 build will be broken because of a missing "kernconfstring"
1028 Symbol versioning is enabled by default. To disable it, use
1029 option WITHOUT_SYMVER. It is not advisable to attempt to
1030 disable symbol versioning once it is enabled; your installworld
1031 will break because a symbol version-less libc will get installed
1032 before the install tools. As a result, the old install tools,
1033 which previously had symbol dependencies to FBSD_1.0, will fail
1034 because the freshly installed libc will not have them.
1036 The default threading library (providing "libpthread") has been
1037 changed to libthr. If you wish to have libkse as your default,
1038 use option DEFAULT_THREAD_LIB=libkse for the buildworld.
1041 The ABI breakage in sendmail(8)'s libmilter has been repaired
1042 so it is no longer necessary to recompile mail filters (aka,
1043 milters). If you recompiled mail filters after the 20070408
1044 note, it is not necessary to recompile them again.
1047 The new trunk(4) driver has been renamed to lagg(4) as it better
1048 reflects its purpose. ifconfig will need to be recompiled.
1051 sendmail(8) has been updated to version 8.14.1. Mail filters
1052 (aka, milters) compiled against the libmilter included in the
1053 base operating system should be recompiled.
1056 Firmwares for ipw(4) and iwi(4) are now included in the base tree.
1057 In order to use them one must agree to the respective LICENSE in
1058 share/doc/legal and define legal.intel_<name>.license_ack=1 via
1059 loader.conf(5) or kenv(1). Make sure to deinstall the now
1060 deprecated modules from the respective firmware ports.
1063 The name resolution/mapping functions addr2ascii(3) and ascii2addr(3)
1064 were removed from FreeBSD's libc. These originally came from INRIA
1065 IPv6. Nothing in FreeBSD ever used them. They may be regarded as
1066 deprecated in previous releases.
1067 The AF_LINK support for getnameinfo(3) was merged from NetBSD to
1068 replace it as a more portable (and re-entrant) API.
1071 To support interrupt filtering a modification to the newbus API
1072 has occurred, ABI was broken and __FreeBSD_version was bumped
1073 to 700031. Please make sure that your kernel and modules are in
1074 sync. For more info:
1075 http://docs.freebsd.org/cgi/mid.cgi?20070221233124.GA13941
1078 The IPv6 multicast forwarding code may now be loaded into GENERIC
1079 kernels by loading the ip_mroute.ko module. This is built into the
1080 module unless WITHOUT_INET6 or WITHOUT_INET6_SUPPORT options are
1081 set; see src.conf(5) for more information.
1084 The output of netstat -r has changed. Without -n, we now only
1085 print a "network name" without the prefix length if the network
1086 address and mask exactly match a Class A/B/C network, and an entry
1087 exists in the nsswitch "networks" map.
1088 With -n, we print the full unabbreviated CIDR network prefix in
1089 the form "a.b.c.d/p". 0.0.0.0/0 is always printed as "default".
1090 This change is in preparation for changes such as equal-cost
1091 multipath, and to more generally assist operational deployment
1092 of FreeBSD as a modern IPv4 router.
1095 PIM has been turned on by default in the IPv4 multicast
1096 routing code. The kernel option 'PIM' has now been removed.
1097 PIM is now built by default if option 'MROUTING' is specified.
1098 It may now be loaded into GENERIC kernels by loading the
1099 ip_mroute.ko module.
1102 Support for IPIP tunnels (VIFF_TUNNEL) in IPv4 multicast routing
1103 has been removed. Its functionality may be achieved by explicitly
1104 configuring gif(4) interfaces and using the 'phyint' keyword in
1106 XORP does not support source-routed IPv4 multicast tunnels nor the
1107 integrated IPIP tunneling, therefore it is not affected by this
1108 change. The __FreeBSD_version macro has been bumped to 700030.
1111 Support for PCI Message Signalled Interrupts has been
1112 re-enabled in the bge driver, only for those chips which are
1113 believed to support it properly. If there are any problems,
1114 MSI can be disabled completely by setting the
1115 'hw.pci.enable_msi' and 'hw.pci.enable_msix' tunables to 0
1119 Support for PCI Message Signalled Interrupts has been
1120 disabled again in the bge driver. Many revisions of the
1121 hardware fail to support it properly. Support can be
1122 re-enabled by removing the #define of BGE_DISABLE_MSI in
1123 "src/sys/dev/bge/if_bge.c".
1126 Support for PCI Message Signalled Interrupts has been added
1127 to the bge driver. If there are any problems, MSI can be
1128 disabled completely by setting the 'hw.pci.enable_msi' and
1129 'hw.pci.enable_msix' tunables to 0 in the loader.
1132 The removal of several facets of the experimental Threading
1133 system from the kernel means that the proc and thread structures
1134 have changed quite a bit. I suggest all kernel modules that might
1135 reference these structures be recompiled.. Especially the
1139 Sound infrastructure has been updated with various fixes and
1140 improvements. Most of the changes are pretty much transparent,
1141 with exceptions of followings:
1142 1) All sound driver specific sysctls (hw.snd.pcm%d.*) have been
1143 moved to their own dev sysctl nodes, for example:
1144 hw.snd.pcm0.vchans -> dev.pcm.0.vchans
1145 2) /dev/dspr%d.%d has been deprecated. Each channel now has its
1146 own chardev in the form of "dsp%d.<function>%d", where <function>
1147 is p = playback, r = record and v = virtual, respectively. Users
1148 are encouraged to use these devs instead of (old) "/dev/dsp%d.%d".
1149 This does not affect those who are using "/dev/dsp".
1152 geom(4)'s gmirror(8) class metadata structure has been
1153 rev'd from v3 to v4. If you update across this point and
1154 your metadata is converted for you, you will not be easily
1155 able to downgrade since the /boot/kernel.old/geom_mirror.ko
1156 kernel module will be unable to read the v4 metadata. You
1157 can resolve this by doing from the loader(8) prompt:
1159 set vfs.root.mountfrom="ufs:/dev/XXX"
1161 where XXX is the root slice of one of the disks that composed
1162 the mirror (i.e.: /dev/ad0s1a). You can then rebuild
1163 the array the same way you built it originally.
1166 The following binaries have been disconnected from the build:
1167 mount_devfs, mount_ext2fs, mount_fdescfs, mount_procfs, mount_linprocfs,
1168 and mount_std. The functionality of these programs has been
1169 moved into the mount program. For example, to mount a devfs
1170 filesystem, instead of using mount_devfs, use: "mount -t devfs".
1171 This does not affect entries in /etc/fstab, since entries in
1172 /etc/fstab are always processed with "mount -t fstype".
1175 Support for PCI Message Signalled Interrupts on i386 and amd64
1176 has been added to the kernel and various drivers will soon be
1177 updated to use MSI when it is available. If there are any problems,
1178 MSI can be disabled completely by setting the 'hw.pci.enable_msi'
1179 and 'hw.pci.enable_msix' tunables to 0 in the loader.
1182 The MUTEX_PROFILING option has been renamed to LOCK_PROFILING.
1183 The lockmgr object layout has been changed as a result of having
1184 a lock_object embedded in it. As a consequence all file system
1185 kernel modules must be re-compiled. The mutex profiling man page
1186 has not yet been updated to reflect this change.
1189 KSE in the kernel has now been made optional and turned on by
1190 default. Use 'nooption KSE' in your kernel config to turn it
1191 off. All kernel modules *must* be recompiled after this change.
1192 There-after, modules from a KSE kernel should be compatible with
1193 modules from a NOKSE kernel due to the temporary padding fields
1194 added to 'struct proc'.
1197 mrouted and its utilities have been removed from the base system.
1200 Some ioctl(2) command codes have changed. Full backward ABI
1201 compatibility is provided if the "options COMPAT_FREEBSD6" is
1202 present in the kernel configuration file. Make sure to add
1203 this option to your kernel config file, or recompile X.Org
1204 and the rest of ports; otherwise they may refuse to work.
1207 tcpslice has been removed from the base system.
1210 The sizes of struct tcpcb (and struct xtcpcb) have changed due to
1211 the rewrite of TCP syncookies. Tools like netstat, sockstat, and
1212 systat needs to be rebuilt.
1215 libpcap updated to v0.9.4 and tcpdump to v3.9.4
1218 The IPFIREWALL_FORWARD_EXTENDED option is gone and the behaviour
1219 for IPFIREWALL_FORWARD is now as it was before when it was first
1220 committed and for years after. The behaviour is now ON.
1223 enigma(1)/crypt(1) utility has been changed on 64 bit architectures.
1224 Now it can decrypt files created from different architectures.
1225 Unfortunately, it is no longer able to decrypt a cipher text
1226 generated with an older version on 64 bit architectures.
1227 If you have such a file, you need old utility to decrypt it.
1230 The interface version of the i4b kernel part has changed. So
1231 after updating the kernel sources and compiling a new kernel,
1232 the i4b user space tools in "/usr/src/usr.sbin/i4b" must also
1233 be rebuilt, and vice versa.
1236 The XBOX kernel now defaults to the nfe(4) driver instead of
1237 the nve(4) driver. Please update your configuration
1241 The i386-only lnc(4) driver for the AMD Am7900 LANCE and Am79C9xx
1242 PCnet family of NICs has been removed. The new le(4) driver serves
1243 as an equivalent but cross-platform replacement with the pcn(4)
1244 driver still providing performance-optimized support for the subset
1245 of AMD Am79C971 PCnet-FAST and greater chips as before.
1248 The machdep.* sysctls and the adjkerntz utility have been
1249 modified a bit. The new adjkerntz utility uses the new
1250 sysctl names and sysctlbyname() calls, so it may be impossible
1251 to run an old /sbin/adjkerntz utility in single-user mode
1252 with a new kernel. Replace the `adjkerntz -i' step before
1253 `make installworld' with:
1255 /usr/obj/usr/src/sbin/adjkerntz/adjkerntz -i
1257 and proceed as usual with the rest of the installworld-stage
1258 steps. Otherwise, you risk installing binaries with their
1259 timestamp set several hours in the future, especially if
1260 you are running with local time set to GMT+X hours.
1263 The ip6fw utility has been removed. The behavior provided by
1264 ip6fw has been in ipfw2 for a good while and the rc.d scripts
1265 have been updated to deal with it. There are some rules that
1266 might not migrate cleanly. Use rc.firewall6 as a template to
1270 The puc(4) driver has been overhauled. The ebus(4) and sbus(4)
1271 attachments have been removed. Make sure to configure scc(4)
1272 on sparc64. Note also that by default puc(4) will use uart(4)
1273 and not sio(4) for serial ports because interrupt handling has
1274 been optimized for multi-port serial cards and only uart(4)
1275 implements the interface to support it.
1278 The scc(4) driver replaces puc(4) for Serial Communications
1279 Controllers (SCCs) like the Siemens SAB82532 and the Zilog
1280 Z8530. On sparc64, it is advised to add scc(4) to the kernel
1281 configuration to make sure that the serial ports remain
1285 Most world/kernel related NO_* build options changed names.
1286 New knobs have common prefixes WITHOUT_*/WITH_* (modelled
1287 after FreeBSD ports) and should be set in /etc/src.conf
1288 (the src.conf(5) manpage is provided). Full backwards
1289 compatibility is maintained for the time being though it's
1290 highly recommended to start moving old options out of the
1291 system-wide /etc/make.conf file into the new /etc/src.conf
1292 while also properly renaming them. More conversions will
1293 likely follow. Posting to current@:
1295 http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html
1298 The NETSMBCRYPTO kernel option has been retired because its
1299 functionality is always included in NETSMB and smbfs.ko now.
1302 The TDFX_LINUX kernel option was retired and replaced by the
1303 tdfx_linux device. The latter can be loaded as the 3dfx_linux.ko
1304 kernel module. Loading it alone should suffice to get 3dfx support
1305 for Linux apps because it will pull in 3dfx.ko and linux.ko through
1309 The 'audit' group was added to support the new auditing functionality
1310 in the base system. Be sure to follow the directions for updating,
1311 including the requirement to run mergemaster -p.
1314 The kernel ABI to file system modules was changed on i386.
1315 Please make sure that your kernel and modules are in sync.
1318 This actually occured some time ago, but installing the kernel
1319 now also installs a bunch of symbol files for the kernel modules.
1320 This increases the size of /boot/kernel to about 67Mbytes. You
1321 will need twice this if you will eventually back this up to kernel.old
1322 on your next install.
1323 If you have a shortage of room in your root partition, you should add
1324 -DINSTALL_NODEBUG to your make arguments or add INSTALL_NODEBUG="yes"
1325 to your /etc/make.conf.
1328 libc's malloc implementation has been replaced. This change has the
1329 potential to uncover application bugs that previously went unnoticed.
1330 See the malloc(3) manual page for more details.
1333 The generic netgraph(4) cookie has been changed. If you upgrade
1334 kernel passing this point, you also need to upgrade userland
1335 and netgraph(4) utilities like ports/net/mpd or ports/net/mpd4.
1338 si(4)'s device files now contain the unit number.
1339 Uses of {cua,tty}A[0-9a-f] should be replaced by {cua,tty}A0[0-9a-f].
1342 The kernel ABI was mostly destroyed due to a change in the size
1343 of struct lock_object which is nested in other structures such
1344 as mutexes which are nested in all sorts of other structures.
1345 Make sure your kernel and modules are in sync.
1348 The page coloring algorithm in the VM subsystem was converted
1349 from tuning with kernel options to autotuning. Please remove
1350 any PQ_* option except PQ_NOOPT from your kernel config.
1353 The net80211-related tools in the tools/tools/ath directory
1354 have been moved to tools/tools/net80211 and renamed with a
1355 "wlan" prefix. Scripts that use them should be adjusted
1359 Scripts in the local_startup directories (as defined in
1360 /etc/defaults/rc.conf) that have the new rc.d semantics will
1361 now be run as part of the base system rcorder. If there are
1362 errors or problems with one of these local scripts, it could
1363 cause boot problems. If you encounter such problems, boot in
1364 single user mode, remove that script from the */rc.d directory.
1365 Please report the problem to the port's maintainer, and the
1366 freebsd-ports@freebsd.org mailing list.
1369 The nodev mount option was deprecated in RELENG_6 (where it
1370 was a no-op), and is now unsupported. If you have nodev or dev listed
1371 in /etc/fstab, remove it, otherwise it will result in a mount error.
1374 ABI between ipfw(4) and ipfw(8) has been changed. You need
1375 to rebuild ipfw(8) when rebuilding kernel.
1378 rp(4)'s device files now contain the unit number.
1379 Uses of {cua,tty}R[0-9a-f] should be replaced by {cua,tty}R0[0-9a-f].
1382 /etc/rc.d/ppp-user has been renamed to /etc/rc.d/ppp.
1383 Its /etc/rc.conf.d configuration file has been `ppp' from
1384 the beginning, and hence there is no need to touch it.
1387 Now most modules get their build-time options from the kernel
1388 configuration file. A few modules still have fixed options
1389 due to their non-conformant implementation, but they will be
1390 corrected eventually. You may need to review the options of
1391 the modules in use, explicitly specify the non-default options
1392 in the kernel configuration file, and rebuild the kernel and
1396 kern.polling.enable sysctl MIB is now deprecated. Use ifconfig(8)
1397 to turn polling(4) on your interfaces.
1400 The old bridge(4) implementation was retired. The new
1401 if_bridge(4) serves as a full functional replacement.
1404 The ai_addrlen of a struct addrinfo was changed to a socklen_t
1405 to conform to POSIX-2001. This change broke an ABI
1406 compatibility on 64 bit architecture. You have to recompile
1407 userland programs that use getaddrinfo(3) on 64 bit
1411 RELENG_6 branched here.
1414 The pccard_ifconfig rc.conf variable has been removed and a new
1415 variable, ifconfig_DEFAULT has been introduced. Unlike
1416 pccard_ifconfig, ifconfig_DEFAULT applies to ALL interfaces that
1417 do not have ifconfig_ifn entries rather than just those in
1418 removable_interfaces.
1421 Some previous versions of PAM have permitted the use of
1422 non-absolute paths in /etc/pam.conf or /etc/pam.d/* when referring
1423 to third party PAM modules in /usr/local/lib. A change has been
1424 made to require the use of absolute paths in order to avoid
1425 ambiguity and dependence on library path configuration, which may
1426 affect existing configurations.
1429 Major changes to network interface API. All drivers must be
1430 recompiled. Drivers not in the base system will need to be
1431 updated to the new APIs.
1434 Changes were made to kinfo_proc in sys/user.h. Please recompile
1435 userland, or commands like `fstat', `pkill', `ps', `top' and `w'
1436 will not behave correctly.
1438 The API and ABI for hwpmc(4) have changed with the addition
1439 of sampling support. Please recompile lib/libpmc(3) and
1440 usr.sbin/{pmcstat,pmccontrol}.
1443 The OpenBSD dhclient was imported in place of the ISC dhclient
1444 and the network interface configuration scripts were updated
1445 accordingly. If you use DHCP to configure your interfaces, you
1446 must now run devd. Also, DNS updating was lost so you will need
1447 to find a workaround if you use this feature.
1449 The '_dhcp' user was added to support the OpenBSD dhclient. Be
1450 sure to run mergemaster -p (like you are supposed to do every time
1454 if_bridge was added to the tree. This has changed struct ifnet.
1455 Please recompile userland and all network related modules.
1458 The n_net of a struct netent was changed to an uint32_t, and
1459 1st argument of getnetbyaddr() was changed to an uint32_t, to
1460 conform to POSIX-2001. These changes broke an ABI
1461 compatibility on 64 bit architecture. With these changes,
1462 shlib major of libpcap was bumped. You have to recompile
1463 userland programs that use getnetbyaddr(3), getnetbyname(3),
1464 getnetent(3) and/or libpcap on 64 bit architecture.
1467 Kernel parsing of extra options on '#!' first lines of shell
1468 scripts has changed. Lines with multiple options likely will
1469 fail after this date. For full details, please see
1470 http://people.freebsd.org/~gad/Updating-20050528.txt
1473 The packet filter (pf) code has been updated to OpenBSD 3.7
1474 Please note the changed anchor syntax and the fact that
1475 authpf(8) now needs a mounted fdescfs(5) to function.
1478 The NO_MIXED_MODE kernel option has been removed from the i386
1479 amd64 platforms as its use has been superceded by the new local
1480 APIC timer code. Any kernel config files containing this option
1484 The on-disk format of LC_CTYPE files was changed to be machine
1485 independent. Please make sure NOT to use NO_CLEAN buildworld
1486 when crossing this point. Crossing this point also requires
1487 recompile or reinstall of all locale depended packages.
1490 The ifi_epoch member of struct if_data has been changed to
1491 contain the uptime at which the interface was created or the
1492 statistics zeroed rather then the wall clock time because
1493 wallclock time may go backwards. This should have no impact
1494 unless an snmp implementation is using this value (I know of
1495 none at this point.)
1498 The acpi_perf and acpi_throttle drivers are now part of the
1499 acpi(4) main module. They are no longer built separately.
1502 The layout of struct image_params has changed. You have to
1503 recompile all compatibility modules (linux, svr4, etc) for use
1504 with the new kernel.
1507 The p4tcc driver has been merged into cpufreq(4). This makes
1508 "options CPU_ENABLE_TCC" obsolete. Please load cpufreq.ko or
1509 compile in "device cpufreq" to restore this functionality.
1512 The responsibility of recomputing the file system summary of
1513 a SoftUpdates-enabled dirty volume has been transferred to the
1514 background fsck. A rebuild of fsck(8) utility is recommended
1515 if you have updated the kernel.
1517 To get the old behavior (recompute file system summary at mount
1518 time), you can set vfs.ffs.compute_summary_at_mount=1 before
1519 mounting the new volume.
1522 The cpufreq import is complete. As part of this, the sysctls for
1523 acpi(4) throttling have been removed. The power_profile script
1524 has been updated, so you can use performance/economy_cpu_freq in
1525 rc.conf(5) to set AC on/offline cpu frequencies.
1528 NG_VERSION has been increased. Recompiling kernel (or ng_socket.ko)
1529 requires recompiling libnetgraph and userland netgraph utilities.
1532 Support for abbreviated forms of a number of ipfw options is
1533 now deprecated. Warnings are printed to stderr indicating the
1534 correct full form when a match occurs. Some abbreviations may
1535 be supported at a later date based on user feedback. To be
1536 considered for support, abbreviations must be in use prior to
1537 this commit and unlikely to be confused with current key words.
1540 By a popular demand, a lot of NOFOO options were renamed
1541 to NO_FOO (see bsd.compat.mk for a full list). The old
1542 spellings are still supported, but will cause annoying
1543 warnings on stderr. Make sure you upgrade properly (see
1544 the COMMON ITEMS: section later in this file).
1547 Auto-loading of ancillary wlan modules such as wlan_wep has
1548 been temporarily disabled; you need to statically configure
1549 the modules you need into your kernel or explicitly load them
1550 prior to use. Specifically, if you intend to use WEP encryption
1551 with an 802.11 device load/configure wlan_wep; if you want to
1552 use WPA with the ath driver load/configure wlan_tkip, wlan_ccmp,
1553 and wlan_xauth as required.
1556 The behaviour of ppp(8) has changed slightly. If lqr is enabled
1557 (``enable lqr''), older versions would revert to LCP ECHO mode on
1558 negotiation failure. Now, ``enable echo'' is required for this
1559 behaviour. The ppp version number has been bumped to 3.4.2 to
1563 The wlan support has been updated to split the crypto support
1564 into separate modules. For static WEP you must configure the
1565 wlan_wep module in your system or build and install the module
1566 in place where it can be loaded (the kernel will auto-load
1567 the module when a wep key is configured).
1570 The ath driver has been updated to split the tx rate control
1571 algorithm into a separate module. You need to include either
1572 ath_rate_onoe or ath_rate_amrr when configuring the kernel.
1575 Support for systems with an 80386 CPU has been removed. Please
1576 use FreeBSD 5.x or earlier on systems with an 80386.
1579 We have had a hack which would mount the root filesystem
1580 R/W if the device were named 'md*'. As part of the vnode
1581 work I'm doing I have had to remove this hack. People
1582 building systems which use preloaded MD root filesystems
1583 may need to insert a "/sbin/mount -u -o rw /dev/md0 /" in
1584 their /etc/rc scripts.
1587 FreeBSD 5.3 shipped here.
1590 The size of struct tcpcb has changed again due to the removal
1591 of RFC1644 T/TCP. You have to recompile userland programs that
1592 read kmem for tcp sockets directly (netstat, sockstat, etc.)
1595 The size of struct tcpcb has changed. You have to recompile
1596 userland programs that read kmem for tcp sockets directly
1597 (netstat, sockstat, etc.)
1600 RELENG_5 branched here. For older entries, please see updating
1601 in the RELENG_5 branch.
1607 Avoid using make -j when upgrading. From time to time in the
1608 past there have been problems using -j with buildworld and/or
1609 installworld. This is especially true when upgrading between
1610 "distant" versions (eg one that cross a major release boundary
1611 or several minor releases, or when several months have passed
1612 on the -current branch).
1614 Sometimes, obscure build problems are the result of environment
1615 poisoning. This can happen because the make utility reads its
1616 environment when searching for values for global variables.
1617 To run your build attempts in an "environmental clean room",
1618 prefix all make commands with 'env -i '. See the env(1) manual
1619 page for more details.
1621 When upgrading from one major version to another it is generally
1622 best to upgrade to the latest code in the currently installed branch
1623 first, then do an upgrade to the new branch. This is the best-tested
1624 upgrade path, and has the highest probability of being successful.
1625 Please try this approach before reporting problems with a major
1630 If you are updating from a prior version of FreeBSD (even one just
1631 a few days old), you should follow this procedure. It is the most
1632 failsafe as it uses a /usr/obj tree with a fresh mini-buildworld,
1634 make kernel-toolchain
1635 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1636 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1638 To test a kernel once
1639 ---------------------
1640 If you just want to boot a kernel once (because you are not sure
1641 if it works, or if you want to boot a known bad kernel to provide
1642 debugging information) run
1643 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
1644 nextboot -k testkernel
1646 To just build a kernel when you know that it won't mess you up
1647 --------------------------------------------------------------
1648 This assumes you are already running a 5.X system. Replace
1649 ${arch} with the architecture of your machine (e.g. "i386",
1650 "alpha", "amd64", "ia64", "pc98", "sparc64", etc).
1652 cd src/sys/${arch}/conf
1653 config KERNEL_NAME_HERE
1654 cd ../compile/KERNEL_NAME_HERE
1659 If this fails, go to the "To build a kernel" section.
1661 To rebuild everything and install it on the current system.
1662 -----------------------------------------------------------
1663 # Note: sometimes if you are running current you gotta do more than
1664 # is listed here if you are upgrading from a really old current.
1666 <make sure you have good level 0 dumps>
1668 make kernel KERNCONF=YOUR_KERNEL_HERE
1670 <reboot in single user> [3]
1678 To cross-install current onto a separate partition
1679 --------------------------------------------------
1680 # In this approach we use a separate partition to hold
1681 # current's root, 'usr', and 'var' directories. A partition
1682 # holding "/", "/usr" and "/var" should be about 2GB in
1685 <make sure you have good level 0 dumps>
1688 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1689 <maybe newfs current's root partition>
1690 <mount current's root partition on directory ${CURRENT_ROOT}>
1691 make installworld DESTDIR=${CURRENT_ROOT}
1692 make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1693 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1694 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1695 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1696 <reboot into current>
1697 <do a "native" rebuild/install as described in the previous section>
1698 <maybe install compatibility libraries from ports/misc/compat*>
1702 To upgrade in-place from 5.x-stable to current
1703 ----------------------------------------------
1704 <make sure you have good level 0 dumps>
1706 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1708 <reboot in single user> [3]
1715 Make sure that you've read the UPDATING file to understand the
1716 tweaks to various things you need. At this point in the life
1717 cycle of current, things change often and you are on your own
1718 to cope. The defaults can also change, so please read ALL of
1719 the UPDATING entries.
1721 Also, if you are tracking -current, you must be subscribed to
1722 freebsd-current@freebsd.org. Make sure that before you update
1723 your sources that you have read and understood all the recent
1724 messages there. If in doubt, please track -stable which has
1725 much fewer pitfalls.
1727 [1] If you have third party modules, such as vmware, you
1728 should disable them at this point so they don't crash your
1731 [3] From the bootblocks, boot -s, and then do
1736 adjkerntz -i # if CMOS is wall time
1737 Also, when doing a major release upgrade, it is required that
1738 you boot into single user mode to do the installworld.
1740 [4] Note: This step is non-optional. Failure to do this step
1741 can result in a significant reduction in the functionality of the
1742 system. Attempting to do it by hand is not recommended and those
1743 that pursue this avenue should read this file carefully, as well
1744 as the archives of freebsd-current and freebsd-hackers mailing lists
1745 for potential gotchas.
1747 [5] Usually this step is a noop. However, from time to time
1748 you may need to do this if you get unknown user in the following
1749 step. It never hurts to do it all the time. You may need to
1750 install a new mergemaster (cd src/usr.sbin/mergemaster && make
1751 install) after the buildworld before this step if you last updated
1752 from current before 20020224 or from -stable before 20020408.
1754 [8] In order to have a kernel that can run the 4.x binaries
1755 needed to do an installworld, you must include the COMPAT_FREEBSD4
1756 option in your kernel. Failure to do so may leave you with a system
1757 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1758 is required to run the 5.x binaries on more recent kernels.
1760 Make sure that you merge any new devices from GENERIC since the
1761 last time you updated your kernel config file.
1763 [9] When checking out sources, you must include the -P flag to have
1764 cvs prune empty directories.
1766 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1767 "?=" instead of the "=" assignment operator, so that buildworld can
1768 override the CPUTYPE if it needs to.
1770 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1771 not on the command line, or in /etc/make.conf. buildworld will
1772 warn if it is improperly defined.
1775 This file contains a list, in reverse chronological order, of major
1776 breakages in tracking -current. Not all things will be listed here,
1777 and it only starts on October 16, 2004. Updating files can found in
1778 previous releases if your system is older than this.
1780 Copyright information:
1782 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1784 Redistribution, publication, translation and use, with or without
1785 modification, in full or in part, in any form or format of this
1786 document are permitted without further permission from the author.
1788 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1789 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1790 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1791 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1792 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1793 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1794 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1795 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1796 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1797 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1798 POSSIBILITY OF SUCH DAMAGE.
1800 If you find this document useful, and you want to, you may buy the
1803 Contact Warner Losh if you have any questions about your use of