UPDATING: note new sets

Nix /var/run/named entry from set lists.

Normally we don't do this, but /var/run/named is

(a) used by running daemons, so postinstall should not delete it, and
(b) deleted at boot-time anyway by /etc/rc.d/mountcritlocal, so
there's no sense in having it checked by mtree.

However, this means that update builds need manual intervention to
delete $DESTDIR/var/run/named or else checkflist will fail, so add a
note to UPDATING about this.

Do the same with /var/run/lwresd just in case.

PR misc/57877

fix spelling mistakes, mainly in comments and log messages.

UPDATING: fix a couple of spelling mistakes

certctl(8): Avoid clobbering prepopulated /etc/openssl/certs.

Also avoid clobbering some other edge cases like symlinks or
non-directories there.

This way, we have the following transitions on system updates:

- If /etc/openssl/certs is empty (as in default NetBSD<10 installs):
quietly populated on rehash.

- If /etc/openssl/certs is nonempty (you've added things to it,
e.g. by hand or with mozilla-rootcerts) and has never been managed
by certctl(8): left alone on rehash, with an error message to
explain what you need to do.

- If /etc/openssl/certs has been managed by certctl(8): quietly
updated on rehash.

Note: This means current installations made since certctl(8) was
added will be treated like /etc/openssl/certs is nonempty and has
never been managed by certctl(8). To work around this, you can just
delete /etc/openssl/certs and rerun `certctl rehash'.

Warn to clean gcc objectdirs for updated compiler.

build.sh: use mk.conf (if present) as MAKECONF

Set MAKECONF to mk.conf in the same directory as build.sh
(i.e., the top of the source tree) if mk.conf is present.
This means unprivileged users can benefit from mk.conf(5)
semantics without write privileges to /etc/mk.conf, and
also simplifies per-source-directory configuration.

Fail early if $MAKECONF is empty, since build.sh will fail
anyway after rebuilding nbmake.

Ensure that the computed MAKECONF isn't empty, and then
always set MAKECONF in the makewrapper (nbmake-$MACHINE).

Improve some formatting consistency in BUILDING.mdoc,
(even if BUILDING is generated without markup).

Belatedly add an entry for the openssl version switch - it may cause
subtle test failures after update builds (files with same installed
name created from different sources depending on openssl version).

Note kernel build lossage in an unsupported build configuration

ctfmerge tool fixes might need a clean tools build

add a note about how to fix missing ./usr/lib/libisns* files.

Note dependency of new binutils on new ld.elf_so for unsupported
DESTDIR=/ builds.

Restore backward compatibility of UFS2 with previous NetBSD releases by
disabling support in UFS2 for extended attributes (including ACLs).
Add a new variant of UFS2 called "UFS2ea" that does support extended attributes.
Add new fsck_ffs operations "-c ea" and "-c no-ea" to convert file systems
from UFS2 to UFS2ea and vice-versa (both of which delete all existing extended
attributes in the process).

updates for libdrm 2.4.114.

unfortunately, the i915 ioctls are no longer handled by kdump/ktruss
as the new one conflicts with base. this needs a clean build in these
dirs (and rescue). the radeon ioctls have been enabled instead.

UPDATING: More details on bootloader update needed for >=9.99.100.

UPDATING: a couple of pedantic edits

Note bootloader changes needed for 9.99.100.

UPDATING: extsrc deprecated

add a note about xorg-server possibly breaking builds.

Note that src/games/robots now nees a clean rebuild.

s/dissallow/disallow/

fix various typos, mainly in comments.

Fix typo. Pointed out by bch - thanks!

Note that USE_FORT changes for xorg require a clean build.

UPDATING: note dts update causing things to be renumbered

aarch64 needs a clean build after MKRELRO default has changed.

Change the default for ACLs to be posix1e instead of nfsv4 to match FreeBSD.
Requested by chuq.

s/helt/held+s/eroneously/erroneously/+s/splitted/split/+s/recommented/recommended/

note that new GMP may require some cleaning.

add a note about potential GCC 9->10 build failures

UPDATING: lint1/ops.c may require OBJDIR to be cleaned

https://mail-index.netbsd.org/source-changes-d/2021/01/09/msg013098.html

note about mips kernel modules breaking update builds

note mpfr needs a cleaning.

switch to GCC 9 on arm and x86.

note GCC 8.3, 8.4 and 9.3 import dates. add an UPDATING entry.

switch mips to binutils 2.34.

update the latest note to talk about all 3 potential ways that
failure can occur now (1 still upcoming.)

20200811:
GCC updates may require cleaning the objdir.

blocklist migration has been automated.

mention blacklist -> blocklist rename

Mention cleaning needed in LIBISPRIVATE directories

note GCC 8.4 may need some cleaning.

catch-up with more ports switched to gcc-8
fix typos, consistent whitespace

Mention LLVM fallout

Add note for GCC 8 builds (see PR 54644)

add a note about GCC 8.3 import probably needing cleaning.

Add UPDATING note about radeon firmware image mistake.

Note update hickup build issue for uefi boot.

Add a note to rebuild jemalloc w/o debugging

add a quick note about gcc 7 likely causing update build failures.

Note that we need to clean objdir for the OpenSSL update.

Document aarch64 ABI break.

Entry for MKSTATICPIE fallout in /rescue build.

branches: 1.295.2;
Re-add files that were accidentally deleted in my previous commit.

Synch with HEAD

Add a note about potential tools build failure due to yesterday's
binutils sources juggling.

20180311:
bdftopcf was updated and may need cleaning in the
src/external/mit/xorg/tools/bdftopcf subdirectory if there are
link errors.

branches: 1.291.2;
note that openssl and GCC may upset your builds.

Minor tweak to the vadvise entry.

build without -u does not work because of the dependencies and the stale
files. Be more explicit with instructions.

Note build fallout from vadvise removal.

Note possible need to clean objdir (or depends at least) for
external/bsd/acpica/bin/iasl after build structure change a few days ago.

note GMP 6.1.2 release and the build issues that may occur.

add a note about MPC/MPFR updates breaking some types of update builds.

New dhcpcd does not like update builds from previous versions.

Remove entry for "TRAP_HWWPT renamed to TRAP_DBREG" from UPDATING

Suggested by K.R.Elz

Note TRAP_HWWPT -> TRAP_DBREG rename manual steps for build.sh -u

Note a new tic tool is required for the new terminfo database.

Time waro (thanks Kamil)

Ammend previous, mention compat/amd64/i386/lib/libc as well.

Note libc update build issue after change from arch/exect.S to exect.c
(The build system really should be able to cope with changes like this
one without obj dir fiddling or clean builds)

branches: 1.277.2;
xinput update build hint

Not flex update build issue

note that the OpenSSL import requires some objdir cleanup

Note that dhcpcd objdir needs to be cleaned for update builds.

switch amd64, i386, shark, ofppc and macppc to xorg-server 1.18.

add a note to UPDATING about needing a clean objdir and destdir.

branches: 1.272.2;
Note that i386 needs a PIE-related cleandir. Should avoid having PR 51174
happen to anyone else. :-/

be more specific about what needs to be cleaned for libedit.

mention libedit

Note that deleting objdirs (not just cleandir) may be necessary for the
gcc update.

Add a note about PIE for amd64 requiring clean objdir.

add a simple note about GCC 5.3.

bump date for entry about using NetBSD's regex, now that it works

mention that the recent addition of the NetBSD implementation of regexps
to libnbcompat may lead to crashes in tools using them on non-NetBSD hosts
if these are not rebuilt from scratch.

Note that update builds are broken if MKDTRACE got enabled for your
platform.

add note about the most recent acpica update

mention yacc requirement for acpica

Note required cleandir for lint changes

Add a note about recent arm openssl update.

Fix typo.

Add an entry for recent pppd modules mishap.

More general advice about "cvs [update aborted]... No such file
or directory".

Also invent a "Cause:" keyword for use in "Symptom:/Cause:/Fix" sections.

Also add a note near the top of the file saying that there are
several sections marked by "^^^".

How to deal with src/external/mit/lua/src: No such file or directory

Add note about the eARM flag day for C++.

branches: 1.254.2;
Improve the compiler_rt entry slightly

Advise a clean build for the compiler-rt migration.

Add a letter, fix a word.

Add a note for the libc/compile_rt changes requiring a partial clean.

mention visible changes

add a note about GMP i wrote but forgot to commit a few days ago.

add a note about MPC and MPFR potentially upsetting the update build.

add hints about FAST_IPSEC no longer being around

Note manual removal of internal freetype headers.

add a specific note about an xdm.man failure mode

add a note about xsrc updates.

more

add netiso caveat

- Capitalization fixes (``OpenSSL'', not ``openssl'');
- change single to double space in between sentences;
- remove trailing white space.

From Bug Hunting.

Strengthen the entry about the openssl update, to clarify and emphasize
that just doing a non-update build isn't enough; you really do have to
nuke $DESTDIR.

Fix typo, noticed by stu314 on freenode.

branches: 1.238.2;
Add note about cleaning required by last month's openssl update.
Closes PR 46816.

Mention that you should run makemandb -f, or wait for the weekly script.

add note about SYMTAB_SPACE.

Extend entry to makemandb permission issue.

branches: 1.234.2;
fix typo/braino

Add note about new apropos and mandoc for formatting. Document failing
update builds due to the cat page removal.

mention pam unbump.

Mention that "pseudo-device rnd" should be removed from custom kernel
configs. Thanks to Julio for pointing this out.

First step of random number subsystem rework described in
<20111022023242.BA26F14A158@mail.netbsd.org>. This change includes
the following:

An initial cleanup and minor reorganization of the entropy pool
code in sys/dev/rnd.c and sys/dev/rndpool.c. Several bugs are
fixed. Some effort is made to accumulate entropy more quickly at
boot time.

A generic interface, "rndsink", is added, for stream generators to
request that they be re-keyed with good quality entropy from the pool
as soon as it is available.

The arc4random()/arc4randbytes() implementation in libkern is
adjusted to use the rndsink interface for rekeying, which helps
address the problem of low-quality keys at boot time.

An implementation of the FIPS 140-2 statistical tests for random
number generator quality is provided (libkern/rngtest.c). This
is based on Greg Rose's implementation from Qualcomm.

A new random stream generator, nist_ctr_drbg, is provided. It is
based on an implementation of the NIST SP800-90 CTR_DRBG by
Henric Jungheim. This generator users AES in a modified counter
mode to generate a backtracking-resistant random stream.

An abstraction layer, "cprng", is provided for in-kernel consumers
of randomness. The arc4random/arc4randbytes API is deprecated for
in-kernel use. It is replaced by "cprng_strong". The current
cprng_fast implementation wraps the existing arc4random
implementation. The current cprng_strong implementation wraps the
new CTR_DRBG implementation. Both interfaces are rekeyed from
the entropy pool automatically at intervals justifiable from best
current cryptographic practice.

In some quick tests, cprng_fast() is about the same speed as
the old arc4randbytes(), and cprng_strong() is about 20% faster
than rnd_extract_data(). Performance is expected to improve.

The AES code in src/crypto/rijndael is no longer an optional
kernel component, as it is required by cprng_strong, which is
not an optional kernel component.

The entropy pool output is subjected to the rngtest tests at
startup time; if it fails, the system will reboot. There is
approximately a 3/10000 chance of a false positive from these
tests. Entropy pool _input_ from hardware random numbers is
subjected to the rngtest tests at attach time, as well as the
FIPS continuous-output test, to detect bad or stuck hardware
RNGs; if any are detected, they are detached, but the system
continues to run.

A problem with rndctl(8) is fixed -- datastructures with
pointers in arrays are no longer passed to userspace (this
was not a security problem, but rather a major issue for
compat32). A new kernel will require a new rndctl.

The sysctl kern.arandom() and kern.urandom() nodes are hooked
up to the new generators, but the /dev/*random pseudodevices
are not, yet.

Manual pages for the new kernel interfaces are forthcoming.

branches: 1.229.2;
Inform that the prop_{array,dictionary}_send_syscall(3) change breaks
backward compatibility with old quota2 binaries, so ensure that you
update both (proplib + quota2 executables) simultaneously when updating
a -current installation.

switch sparc to GCC 4.5.3.

i386 and amd64 are on GCC 4.5 too now.

add a note about cleaning the tree for GCC 4.5.

Note changes to xz require cleaning of a directory by hand.

Update this weekend's note on cleaning gcc: you need to clean binutils too.

Add a generic note about GCC's error on changed variables and a specific
entry for the sysroot related changes breaking MKUPDATE.

Building the Xorg binary was moved into a subdirectory to fix
ordering issues with "make all". It may be necessary to remove
the OBJDIR for external/mit/xorg/server/xorg-server/hw/xfree86
if your update build fails, as the "Xorg" entry there is now a
directory.

fix typo in "-traditional-cpp"

Switch remaining platforms to modern CPP for assembler.

branches: 1.219.2;
Move SPARC and SPARC64 to modern CPP. Update UPDATING note for this and
Alpha.

Add entry about -tradition-cpp change for people not using build.sh.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Mention setenv lossage.

add a note about xorg updates

minor clarification

atf 0.9 includes a backwards incompatible change that requires rebuilding
the sh tests. Add a note to tell users to clean up the old files, as
otherwise the rebuilds will not be triggered.

note about xsrc update build issues.

ctype.h was splitted, so you have to make cleandir tools/mklocale.

mention compiled xkb move.

Note shared objects extension change, and stalled files.

Document termcap database removal.

Fold long lines.

Note briefly that new amd64 kernels don't build with old binutils.

fix typo in previous

Mention that 'build.sh -u' may also break while building lex.

Mention that build.sh -u may get hung up building yacc.

add a note about accidental compiled/xkb symlinks appearing

Presence of index.o in existing libc.a causes duplicate symbol now that
strchr.[cS] provides its definition.

Add an entry for last summer's libpthread compat fix, since it
apparently never got listed (only posted on current-users) and came up
again recently.

Thanks to Martin Husemann, Matthias Drochner, and Geoff Wing for info
(any errors are mine).

As per http://mail-index.netbsd.org/current-users/2008/08/05/msg003880.html.

Fix a garbled old entry that I happened upon just now.

note that update builds might again fail for new xorg

add a note about native xorg updates

Add note about Postgres WRT the time_t change.

note a new failure mode thanks to the new string functions
requested by mrg

add a note about needing to rebuild i386 toolchain

branches: 1.193.2;
s/posix_fadvise/__posix_fadvise50/ in last.

posix_fadvise needs help again.

Add recommendation to rebuild the pkgdb cache after an update.

Try to clarify the situation for utmp/utmpx/wtmpx/account files after
the time_t and dev_t changes. I am not sure that this is accurate,
and there's no mention of the wtmp file.

Make it clearer how link time failures in packages can be fixed
OK'd by christos

provide more details.

fix typo

mentioned files that need changing.

add whitespace

mention how to deal with christos-time_t

Add a note concerning this morning's changes to config(1).

amd64 GENERIC still has compat and file-system options
so it doesn't require installed modules yet.

Mention that /etc/rc.d/x{dm,fs} moved to xetc and will thus appear as extra
files for MKX11=no update builds.

Improve grammar.

Mention that i386 and amd64 GENERIC kernels now require
installed kernel modules and the latest bootloader.

branches: 1.178.2;
Add an entry for the "libc lint problem", mostly taken
from Matthias Drochner <drochner>'s post:
http://mail-index.netbsd.org/current-users/2008/08/28/msg004193.html

mention stale libfoo_g.a fix.

Note in WAPBL entry that the super block needs to be in UFS2 format.

Add a note about WAPBL and backwards compatibility.

Add entries for WARNS>0 enabling fatal warnings in the linker & assembler.

Change DRVSUSPENDDEV ioctl number. Fixes PR kern/38740.

entry for MKPRIVATELIB rename to LIBISPRIVATE

Explain how to get out of the problem related to the kernel modules
directory in an unprivileged UPDATE build.

branches: 1.170.4; 1.170.6;
mention posix_fadvise lossage.

Fix typo.

Belatedly add a note about acpiec changes from the jmcneill-pm merge.

Fix a few typos.

Rename it(4) to itesio(4) to accomodate for the following changes:

- The driver now uses the Super I/O address port as port argument in
the configuration file. The Environmental Controller base address is
fetched by the Super I/O EC LDN configuration registers.

- Invalidate voltage sensors if data returned is 0xff.

- Use the Super I/O Global Configuration Registers Chip ID[12] and Device
Revision to store/print the correct information.

- Use only the Fan Extended Tachometer registers on IT871[68]F for now;
this gives us correct data for IT8705/IT8712F again.

Inspired by the smsc(4) driver. The UPDATING file has been updated to
reflect the rename.

Note the removal of pccons(4) from NetBSD/shark.

At pooka@'s request, add hints about the recent
dhcp/racoon/SIOCGIFCONF lossage:

20070913:
A latent bug in dhclient/dhcpd that caused it to be unable to
enumerate interfaces was fixed. The bug began to cause
problems after 20070911 when the kernel's SIOCGIFCONF
implementation was repaired. From 20070529 to 20070911 racoon
could not enumerate interfaces. (These are noted because
normal kernel/userspace version matching hygiene is not
sufficient to avoid this problem.) Ensure that both kernel
and userland are from after 20070913.

branches: 1.163.4;
Add a note that tools have to be re-installed.

Nuke most of 2000-2006, but keep 1 year worth of changes.

Add a note about the way absolute symlinks inside the emulated root are now
handeld.

Note sgimips IP32 pckbc replacement with macekbc

Note libc Makefile problems and give advice to make cleandir in libc
and ld.elf_so. Suggested by Ryo HAYASAKA on current-users@.

note src/sys/sys/{sa.h,savar.h} removal and workaround

kernel after newlock2 needs libpthread after newlock2.
Text reviewed by martin.

Note also that the distrib/ install images need cleaning to excise
references to the now-removed stat-flags.h file.

The rescue/ directory also needs cleaninng.

Add a note documenting which directories needs to be cleaned out
before doing an UPDATE build after the move of string_to_flags()
and flags_to_string() to libutil.

Fix some typos. I had this in my tree for a long time.
Hopefully, okay to change these old history ...

branches: 1.152.2; 1.152.6;
mention needing gcc rebuild for ssp.

Mention removal of net.inet.tcp.newreno.

Mention acorn32 console changes, since they'll break builds with custom
kernel configs.

Mention ACPI PCI interrupt changes (original code from FreeBSD)

document where and why the socket syscall changed.

more details.

document that a recent linker is needed to link the i386 and xen kernels
after the changes to the ldscript.

Note new sparc64 bootloader requirement.

note about conf/std.
(forgot to commit with conf/std.)

Don't mark /etc/namedb/named.conf as "obsolete" since that will cause
a file that has end-user configuration to be unconditionally removed.
Instead, remove the entry from the set list, and add a note to UPDATING
reminding users of MKUPDATE=yes to manually rectify the problem in
their DESTDIR.

The "named" fix in postinstall(8) will migrate /etc/namedb/named.conf
to /etc/named.conf if the latter doesn't exist.
(The need for these style of migrations was why I implemented postinstall(8)
in the first place.)

mention recent kernel config change,
being here, usr.sbin/config -> usr.bin/config where appropriate,
and remove references to egcs

It's genassym(1) not genassym(8), and it's in /usr/bin not /usr/sbin.

note about kernfs fix and xentools.

Add an entry for genassym.

Tweaks for the move of postinstall from /etc to /usr/sbin

Add a note into 20050325 entry that the speaker might not even play any
sound if you don't add an attimer(4) device, as pointed out by Steven M.
Bellovin.

Add a note about pcppi -> pcppi+attimer.

branches: 1.135.2;
Note that configure in some places (binutils is what got me) will abort if
the new environment is different than the original configured one (i.e. for
UPDATE=1)

Mention /etc/pam.d requirement.

mention make lossage

Drop duplicate word.

Only delete /dev/bpf[0-9]*, not /dev/bpf too :).

Mention /dev/bpfX -> /dev/bpf

Note the breakage w. 1.35 of var.c in /bin/sh and the need to update /bin/sh
before attempting a build

Complete the list of victims of the IPF relocation by adding ftp-proxy.

say what breaks now that we've moved ipf out of netinet.

postinstall currently does not migrate /usr/X11R6/lib/X11/* -> /etc/X11/*

Note the sendmail auto-start change, add a note about the ath
reworking, and fix a little spacing and unnecessary abbreviation.

Include notes about purging most of tools/* before building to get correctly
generated yacc/lex output files from new bsd.hostprog.mk

Add suggested wording from PR#24654 to reference BUILDING and build.sh as
the first place one should go when building.

sysctl update: describe failure case.

src/x11 stuff after the /etc/X11 change

You also need a new libc for the new sysctl binary to work.

Note the change to the sysctl machinery, and how to rebootstrap
yourself if both your boots appear to have fallen off.

mention the fixsb script and updated information on botched superblock
upgrade issues

Typo police

be more specific about what to cleanup.

Mention statvfs pitfalls.

branches: 1.114.2; 1.114.4;
Note need for latest bsd.files.mk now wrt athhal-elf.o

Note cgd blowfish changes, see comments in sys/dev/cgd.c 1.15 for more
details.

s/netbsd.org/NetBSD.org/

Use tabs consistently at the start of lines.

update information about the botched superblock messages

update information about the botched superblock messages

Mention required kernel config change caused by death of busmouse(4)
on acorn32.

It wasn't stated that with the superblock problems that were fixed before
it is also needed to update fsck_ffs or it will keep on bugging.

Mention removal of "beep" alongside "sysbeep".

Mention acorn32 sysbeep removal, since it needs a kernel config file change.

change the updating note to say you may need fsck_ffs -b 32 -c 4'

change fsck to fsck_ffs in 20040109 updating note

add fsck compatibility notes
20040109:
Compatibility for old ffs superblock layouts has been
added, and the restrictive fsck checks have been reenabled
when using those layouts. If you have been using -current
since 20030402, you may find that fsck again signals fatal
superblock mismatches. To work around, you can use
fsck -b 32 to restore an alternate superblock.

Fix typo.

Typo: dependancies -> dependencies.

note binutils/cxxfilt dependancies issues

Add a paragraph about mkdep.

Overhaul MBR handling (part 1):

<sys/bootblock.h>:
* Added definitions for the Master Boot Record (MBR) used by
a variety of systems (primarily i386), including the format
of the BIOS Parameter Block (BPB).
This information was cribbed from a variety of sources
including <sys/disklabel_mbr.h> which this is a superset of.

As part of this, some data structure elements and #defines
were renamed to be more "namespace friendly" and consistent
with other bootblocks and MBR documentation.
Update all uses of the old names to the new names.

<sys/disklabel_mbr.h>:
* Deprecated in favor of <sys/bootblock.h> (the latter is more
"host tool" friendly).

amd64 & i386:
* Renamed /usr/mdec/bootxx_dosfs to /usr/mdec/bootxx_msdos, to
be consistent with the naming convention of the msdosfs tools.

* Removed /usr/mdec/bootxx_ufs, as it's equivalent to bootxx_ffsv1
and it's confusing to have two functionally equivalent bootblocks,
especially given that "ufs" has multiple meanings (it could be
a synonym for "ffs", or the group of ffs/lfs/ext2fs file systems).

* Rework pbr.S (the first sector of bootxx_*):
+ Ensure that BPB (bytes 11..89) and the partition table
(bytes 446..509) do not contain code.
+ Add support for booting from FAT partitions if BOOT_FROM_FAT
is defined. (Only set for bootxx_msdos).
+ Remove "dummy" partition 3; if people want to installboot(8)
these to the start of the disk they can use fdisk(8) to
create a real MBR partition table...
+ Compile with TERSE_ERROR so it fits because of the above.
Whilst this is less user friendly, I feel it's important
to have a valid partition table and BPB in the MBR/PBR.

* Renamed /usr/mdec/biosboot to /usr/mdec/boot, to be consistent
with other platforms.

* Enable SUPPORT_DOSFS in /usr/mdec/boot (stage2), so that
we can boot off FAT partitions.

* Crank version of /usr/mdec/boot to 3.1, and fix some of the other
entries in the version file.

installboot(8) (i386):
* Read the existing MBR of the filesystem and retain the BIOS
Parameter Block (BPB) in bytes 11..89 and the MBR partition
table in bytes 446..509. (Previously installboot(8) would
trash those two sections of the MBR.)

mbrlabel(8):
* Use sys/lib/libkern/xlat_mbr_fstype.c instead of homegrown code
to map the MBR partition type to the NetBSD disklabel type.


Test built "make release" for i386, and new bootblocks verified to work
(even off FAT!).

mention that you *need* COMPAT_16 before building.

It is openssl, not openssh, and fix another typo.

Mention how to fix libdes lossage.

netbsd.org->NetBSD.org

Add paragraph for texinfo-4.6.

Note that you need to update share/mk too.

Add (untested) paragraph about groff update.

mention export lossage

put a not on 2002/12/19 cvs repository layout change.

Mention nasty interactions between new FFS superblock layout and old
fsck_ffs, using a heavily-abridged version of fvdl's original announcement.

Since we mention __assert13, add __unsetenv13 here as well.

Mention the import of the new version of sendmail, describe what's
needed of people when updating, and point them at some of the sendmail
documentation so that they can easily find more information.

add entry for smmsp user/group.

fixes PR misc/17513 from Geoff C. Wing.

fix typo. USETOOLS, not USE_TOOLS.

Note texinfo-4.3 update and how to make it work if one wants to avoid build.sh.

METALOG format tweak

the recently added -N option of install(1) is now used by default

Some typo and grammar fixes. Begin new sentences with upper case letters.

fparseln issues

bye bye SYS_INCLUDE=symlinks

Note that libtool needs to be rebuilt after updating to a
crti/crtn-using C run-time.

Note the ARM ELF "softvfp" object marking change, and the resulting
(somewhat minor) flag-day.

Add a short blurb explaining that after the merge of the i386mp branch
people will need 'cpu* at mainbus?'.

kernel update requires userland systrace recompile.

Yet Another config(8) Hazard.

mmm, bullding

Note new attribute dependency syntax in config(8).

Note that a new config is needed after the autoconfiguration overhaul.

MKDYNAMICROOT=yes; care needs to be taken if "make build" is not used

USE_NEW_TOOLCHAIN has been replaced

Merge the gehenna-devsw branch into the trunk.

/rescue/*, and a new crunchgen to ensure /rescue/* is statically linked

Revise 20010803 since i386 gas is no longer built where that entry
said it was.

Sync the sshd entry with etc/master.passwd.

/var/chroot/sshd is used instead of /var/empty

turn on privilege separation, as 3.2.1 default do.
requires sshd uid/gid as well as /var/empty directory.

Correct BUGS in BUILDING.mdoc now that most ports are USE_NEW_TOOLCHAIN

Obsolete NBUILDJOBS; build.sh just passes -jN through to make(1),
which inherits it cooperatively through the build tree. Fix
documentation so that it's shown to be deprecated.

If you use build -jN, please save full build logs so that errors due
to missing dependancies can be analyzed and corrected.

add postinstall info

s/BSDSRCDIR/NETBSDSRCDIR/

install(1) is at usr.bin/xinstall, which is not obvious

<bsd.lib.mk> needs a new install(1)

strict sa_len/family checking on raw ip6 socket

move sshd config files to /etc/ssh

Tell VAX people to update their gas so they can assemble -current sources.

Typo and grammar fixes.

libstdc++, not libstc++

note addition of ntpd user/group. checked w/lukem

Add note about how to work around reloc problems in groff now that the toolchain
fixes are commited.

Forgot a word

Provide writeup and install steps for getting a working awk before building
on sparc64

Note that a new config(8) is required in order to build a kernel.

note wcstod.c needs new lint.
pointed by Bernd Ernesti.

- Describe BUILDING documentation.
- Remove old references to new toolchain system in favor of reference to
BUILDING.
- Remove old reference to MKCRYPTO being added; new .mk files are used
at the top level automatically.
- Clean up vertical space.

note build.sh

1) Note that install has been fixed and will need to be upated for
src/etc/Makefile to work properly.
2) Note that users of the new toolchain are often able to avoid the
UPDATING hell.

Describe another workaround for i386-'fxsave' kernel build problem.

mtree update needed

Note crunchgen changes

Fix a typo in last entry.

Fixed a typo.

Document need to set TOOLDIR on i386 now, as well as optional USETOOLS=no
for building subtrees without using the separate toolchain.

Add text describing what to do if make complains about a missing
uvm_vnode.h

Fix typo.

it seems that TOODIR change is yet to be reach the tree. i guess i leave
it to tv@netbsd...

mention TOOLDIR change (8/14).

Since the new makeinfo is necessary to build grep.info, advertize to install
it.

Advise to build and install -current gas to build -current kernel
successfully.

Mention my recent loadfile/ELF hacks.

update texinfo bootstrap with simpler method (based on text from
itojun)

add blurb about bootstrapping new texinfo

Before you change a perfectly valid construct in uvm_page.h,
please make sure your lint(1) binary is up-to-date. Thanks.

Note a problem that can occur when upgrading crt0, and how to
work around it.

Add the following to help in the "lint needs new libc, libc needs new lint"
case.
Symptom:lint does not understand the '-X' option
Fix: May need to build & install libs with NOLINT=1 before rebuilding lint

Fix incorrect source directory of "make".

Extend note to mention named user as well

Add note about named group needing to be hand added or make build will fail.

Add note about mdsetimage

add some more entries related to getprogname/setprogname

Add notes about getprogname and hostprog builds

Add examples of how to rebuild make, including a failsafe method that doesn't
use make when rebuilding it.

Fix typo.

mention that we need to rebuild yacc now.

for the "Complaints involving a Makefile" symptom, reverse the order
of suggested fixes.

I see many people who think they have to go to -current, then run into a
problem, and update share/mk. After that they see they need make(1) updated
as well, but that doesn't work any more with the new share/mk file.

note that undefined __assert13 refs are fixed by rebuilding lib/libc

mklocale necessary during share/locale/ctype

add usr.bin/xlint as a possible program to upgrade

mention that we need to build make first.

mention fixed bsd.subdir.mk bug.

Mention the SUBDIR .WAIT change

lsu -> ld, by popular request.

ca -> lsu

add a case for menuc-updating

changes to libcrypto (RC5/IDEA/RSA make symbols are obsoleted).
an update tip (obsolete intermediate file)

crypto-* is no longer there.
refer usr.bin/compile_et.
remove reference to make_cmds (add it if i'm wrong about this)

fix a few things; expand a few as well.

Initial cut of an 'UPDATING' file, intended to help those tracking -current.
Most of this taken directly from Eric Haszlakiewicz's README.
It is the hope that developers will update this as they make changes that
break 'make build' from an earlier version of the tree.

fix spelling mistakes, mainly in comments and log messages.

UPDATING: fix a couple of spelling mistakes

certctl(8): Avoid clobbering prepopulated /etc/openssl/certs.

Also avoid clobbering some other edge cases like symlinks or
non-directories there.

This way, we have the following transitions on system updates:

- If /etc/openssl/certs is empty (as in default NetBSD<10 installs):
quietly populated on rehash.

- If /etc/openssl/certs is nonempty (you've added things to it,
e.g. by hand or with mozilla-rootcerts) and has never been managed
by certctl(8): left alone on rehash, with an error message to
explain what you need to do.

- If /etc/openssl/certs has been managed by certctl(8): quietly
updated on rehash.

Note: This means current installations made since certctl(8) was
added will be treated like /etc/openssl/certs is nonempty and has
never been managed by certctl(8). To work around this, you can just
delete /etc/openssl/certs and rerun `certctl rehash'.

Warn to clean gcc objectdirs for updated compiler.

build.sh: use mk.conf (if present) as MAKECONF

Set MAKECONF to mk.conf in the same directory as build.sh
(i.e., the top of the source tree) if mk.conf is present.
This means unprivileged users can benefit from mk.conf(5)
semantics without write privileges to /etc/mk.conf, and
also simplifies per-source-directory configuration.

Fail early if $MAKECONF is empty, since build.sh will fail
anyway after rebuilding nbmake.

Ensure that the computed MAKECONF isn't empty, and then
always set MAKECONF in the makewrapper (nbmake-$MACHINE).

Improve some formatting consistency in BUILDING.mdoc,
(even if BUILDING is generated without markup).

Belatedly add an entry for the openssl version switch - it may cause
subtle test failures after update builds (files with same installed
name created from different sources depending on openssl version).

Note kernel build lossage in an unsupported build configuration

ctfmerge tool fixes might need a clean tools build

add a note about how to fix missing ./usr/lib/libisns* files.

Note dependency of new binutils on new ld.elf_so for unsupported
DESTDIR=/ builds.

Restore backward compatibility of UFS2 with previous NetBSD releases by
disabling support in UFS2 for extended attributes (including ACLs).
Add a new variant of UFS2 called "UFS2ea" that does support extended attributes.
Add new fsck_ffs operations "-c ea" and "-c no-ea" to convert file systems
from UFS2 to UFS2ea and vice-versa (both of which delete all existing extended
attributes in the process).

updates for libdrm 2.4.114.

unfortunately, the i915 ioctls are no longer handled by kdump/ktruss
as the new one conflicts with base. this needs a clean build in these
dirs (and rescue). the radeon ioctls have been enabled instead.

UPDATING: More details on bootloader update needed for >=9.99.100.

UPDATING: a couple of pedantic edits

Note bootloader changes needed for 9.99.100.

UPDATING: extsrc deprecated

add a note about xorg-server possibly breaking builds.

Note that src/games/robots now nees a clean rebuild.

s/dissallow/disallow/

fix various typos, mainly in comments.

Fix typo. Pointed out by bch - thanks!

Note that USE_FORT changes for xorg require a clean build.

UPDATING: note dts update causing things to be renumbered

aarch64 needs a clean build after MKRELRO default has changed.

Change the default for ACLs to be posix1e instead of nfsv4 to match FreeBSD.
Requested by chuq.

s/helt/held+s/eroneously/erroneously/+s/splitted/split/+s/recommented/recommended/

note that new GMP may require some cleaning.

add a note about potential GCC 9->10 build failures

UPDATING: lint1/ops.c may require OBJDIR to be cleaned

https://mail-index.netbsd.org/source-changes-d/2021/01/09/msg013098.html

note about mips kernel modules breaking update builds

note mpfr needs a cleaning.

switch to GCC 9 on arm and x86.

note GCC 8.3, 8.4 and 9.3 import dates. add an UPDATING entry.

switch mips to binutils 2.34.

update the latest note to talk about all 3 potential ways that
failure can occur now (1 still upcoming.)

20200811:
GCC updates may require cleaning the objdir.

blocklist migration has been automated.

mention blacklist -> blocklist rename

Mention cleaning needed in LIBISPRIVATE directories

note GCC 8.4 may need some cleaning.

catch-up with more ports switched to gcc-8
fix typos, consistent whitespace

Mention LLVM fallout

Add note for GCC 8 builds (see PR 54644)

add a note about GCC 8.3 import probably needing cleaning.

Add UPDATING note about radeon firmware image mistake.

Note update hickup build issue for uefi boot.

Add a note to rebuild jemalloc w/o debugging

add a quick note about gcc 7 likely causing update build failures.

Note that we need to clean objdir for the OpenSSL update.

Document aarch64 ABI break.

Entry for MKSTATICPIE fallout in /rescue build.

branches: 1.295.2;
Re-add files that were accidentally deleted in my previous commit.

Synch with HEAD

Add a note about potential tools build failure due to yesterday's
binutils sources juggling.

20180311:
bdftopcf was updated and may need cleaning in the
src/external/mit/xorg/tools/bdftopcf subdirectory if there are
link errors.

branches: 1.291.2;
note that openssl and GCC may upset your builds.

Minor tweak to the vadvise entry.

build without -u does not work because of the dependencies and the stale
files. Be more explicit with instructions.

Note build fallout from vadvise removal.

Note possible need to clean objdir (or depends at least) for
external/bsd/acpica/bin/iasl after build structure change a few days ago.

note GMP 6.1.2 release and the build issues that may occur.

add a note about MPC/MPFR updates breaking some types of update builds.

New dhcpcd does not like update builds from previous versions.

Remove entry for "TRAP_HWWPT renamed to TRAP_DBREG" from UPDATING

Suggested by K.R.Elz

Note TRAP_HWWPT -> TRAP_DBREG rename manual steps for build.sh -u

Note a new tic tool is required for the new terminfo database.

Time waro (thanks Kamil)

Ammend previous, mention compat/amd64/i386/lib/libc as well.

Note libc update build issue after change from arch/exect.S to exect.c
(The build system really should be able to cope with changes like this
one without obj dir fiddling or clean builds)

branches: 1.277.2;
xinput update build hint

Not flex update build issue

note that the OpenSSL import requires some objdir cleanup

Note that dhcpcd objdir needs to be cleaned for update builds.

switch amd64, i386, shark, ofppc and macppc to xorg-server 1.18.

add a note to UPDATING about needing a clean objdir and destdir.

branches: 1.272.2;
Note that i386 needs a PIE-related cleandir. Should avoid having PR 51174
happen to anyone else. :-/

be more specific about what needs to be cleaned for libedit.

mention libedit

Note that deleting objdirs (not just cleandir) may be necessary for the
gcc update.

Add a note about PIE for amd64 requiring clean objdir.

add a simple note about GCC 5.3.

bump date for entry about using NetBSD's regex, now that it works

mention that the recent addition of the NetBSD implementation of regexps
to libnbcompat may lead to crashes in tools using them on non-NetBSD hosts
if these are not rebuilt from scratch.

Note that update builds are broken if MKDTRACE got enabled for your
platform.

add note about the most recent acpica update

mention yacc requirement for acpica

Note required cleandir for lint changes

Add a note about recent arm openssl update.

Fix typo.

Add an entry for recent pppd modules mishap.

More general advice about "cvs [update aborted]... No such file
or directory".

Also invent a "Cause:" keyword for use in "Symptom:/Cause:/Fix" sections.

Also add a note near the top of the file saying that there are
several sections marked by "^^^".

How to deal with src/external/mit/lua/src: No such file or directory

Add note about the eARM flag day for C++.

branches: 1.254.2;
Improve the compiler_rt entry slightly

Advise a clean build for the compiler-rt migration.

Add a letter, fix a word.

Add a note for the libc/compile_rt changes requiring a partial clean.

mention visible changes

add a note about GMP i wrote but forgot to commit a few days ago.

add a note about MPC and MPFR potentially upsetting the update build.

add hints about FAST_IPSEC no longer being around

Note manual removal of internal freetype headers.

add a specific note about an xdm.man failure mode

add a note about xsrc updates.

more

add netiso caveat

- Capitalization fixes (``OpenSSL'', not ``openssl'');
- change single to double space in between sentences;
- remove trailing white space.

From Bug Hunting.

Strengthen the entry about the openssl update, to clarify and emphasize
that just doing a non-update build isn't enough; you really do have to
nuke $DESTDIR.

Fix typo, noticed by stu314 on freenode.

branches: 1.238.2;
Add note about cleaning required by last month's openssl update.
Closes PR 46816.

Mention that you should run makemandb -f, or wait for the weekly script.

add note about SYMTAB_SPACE.

Extend entry to makemandb permission issue.

branches: 1.234.2;
fix typo/braino

Add note about new apropos and mandoc for formatting. Document failing
update builds due to the cat page removal.

mention pam unbump.

Mention that "pseudo-device rnd" should be removed from custom kernel
configs. Thanks to Julio for pointing this out.

First step of random number subsystem rework described in
<20111022023242.BA26F14A158@mail.netbsd.org>. This change includes
the following:

An initial cleanup and minor reorganization of the entropy pool
code in sys/dev/rnd.c and sys/dev/rndpool.c. Several bugs are
fixed. Some effort is made to accumulate entropy more quickly at
boot time.

A generic interface, "rndsink", is added, for stream generators to
request that they be re-keyed with good quality entropy from the pool
as soon as it is available.

The arc4random()/arc4randbytes() implementation in libkern is
adjusted to use the rndsink interface for rekeying, which helps
address the problem of low-quality keys at boot time.

An implementation of the FIPS 140-2 statistical tests for random
number generator quality is provided (libkern/rngtest.c). This
is based on Greg Rose's implementation from Qualcomm.

A new random stream generator, nist_ctr_drbg, is provided. It is
based on an implementation of the NIST SP800-90 CTR_DRBG by
Henric Jungheim. This generator users AES in a modified counter
mode to generate a backtracking-resistant random stream.

An abstraction layer, "cprng", is provided for in-kernel consumers
of randomness. The arc4random/arc4randbytes API is deprecated for
in-kernel use. It is replaced by "cprng_strong". The current
cprng_fast implementation wraps the existing arc4random
implementation. The current cprng_strong implementation wraps the
new CTR_DRBG implementation. Both interfaces are rekeyed from
the entropy pool automatically at intervals justifiable from best
current cryptographic practice.

In some quick tests, cprng_fast() is about the same speed as
the old arc4randbytes(), and cprng_strong() is about 20% faster
than rnd_extract_data(). Performance is expected to improve.

The AES code in src/crypto/rijndael is no longer an optional
kernel component, as it is required by cprng_strong, which is
not an optional kernel component.

The entropy pool output is subjected to the rngtest tests at
startup time; if it fails, the system will reboot. There is
approximately a 3/10000 chance of a false positive from these
tests. Entropy pool _input_ from hardware random numbers is
subjected to the rngtest tests at attach time, as well as the
FIPS continuous-output test, to detect bad or stuck hardware
RNGs; if any are detected, they are detached, but the system
continues to run.

A problem with rndctl(8) is fixed -- datastructures with
pointers in arrays are no longer passed to userspace (this
was not a security problem, but rather a major issue for
compat32). A new kernel will require a new rndctl.

The sysctl kern.arandom() and kern.urandom() nodes are hooked
up to the new generators, but the /dev/*random pseudodevices
are not, yet.

Manual pages for the new kernel interfaces are forthcoming.

branches: 1.229.2;
Inform that the prop_{array,dictionary}_send_syscall(3) change breaks
backward compatibility with old quota2 binaries, so ensure that you
update both (proplib + quota2 executables) simultaneously when updating
a -current installation.

switch sparc to GCC 4.5.3.

i386 and amd64 are on GCC 4.5 too now.

add a note about cleaning the tree for GCC 4.5.

Note changes to xz require cleaning of a directory by hand.

Update this weekend's note on cleaning gcc: you need to clean binutils too.

Add a generic note about GCC's error on changed variables and a specific
entry for the sysroot related changes breaking MKUPDATE.

Building the Xorg binary was moved into a subdirectory to fix
ordering issues with "make all". It may be necessary to remove
the OBJDIR for external/mit/xorg/server/xorg-server/hw/xfree86
if your update build fails, as the "Xorg" entry there is now a
directory.

fix typo in "-traditional-cpp"

Switch remaining platforms to modern CPP for assembler.

branches: 1.219.2;
Move SPARC and SPARC64 to modern CPP. Update UPDATING note for this and
Alpha.