PR/58200: Kouichi Hashikawa: ./makeobsolete uses platform's sed

Add missing backslash (Jan-Benedict Glaw)

add umask for kernel creation consistency

certctl(8): New tool for managing OpenSSL CA certificates.

Same command-line syntax as FreeBSD, clearer semantics about which
parts are config and which parts are cache.

branches: 1.466.2;
Deprecate extsrc/, EXTSRCSRCDIR, MKEXTSRC

Remove support for building extsrc/:
1. Makefile: remove do-extsrc target.
2. build.sh: remove options -y and -Y extsrcdir.
3. distrib/sets: remove support for extsrc in various tools
including the options -L ext and -y, and the extsrc sets.
4. doc/BUILDING.mdoc: remove docs for extsrc/, EXTSRCSRCDIR, MKEXTSRC (etc)
5. bsd.own.mk and various Makefiles: remove support for extsrc/,
EXTSRCSRCDIR, MKEXTSRC.

As proposed on tech-kern and tech-userlevel on 2022-01-07
and followed up on 2022-08-21.

build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

Introduce libc_aligned.so for evbppc-powerpc32, which provides
strictly-aligned versions of memcmp(3), bcopy(3), memcpy(3), and
memmove(3).

This is used for 403 by ld.so.conf with machdep.no_unaligned variable.

With this library, unaligned memory accesses are significantly reduced
for 403 (from several hundreds to few tens per sec under heavy load);
only ld.elf_so (typically few times per fork) and statically-linked
binaries do such access.

mk: Add MKFINGER, MKTALK flags for not building
talk, talkd, finger, fingerd.

Fix typo. Hopefully this didn't break anyone's build, sorry.

mk: Add MKNTP, MKTCPDUMP knobs.

mk: Rename the MKMBONE option to MKMROUTING for greater accuracy and
to match the related kernel config option.

mk: Allow building base without the MBONE applications by setting
MKMBONE=no in mk.conf

Install the missing sh syntax element in the MKDEBUGKERNEL = no test, so
that "continue" is a command as intended, and not an invalid last arg to
the '[' command (the last arg is required to be ']').

Sometime the proverbial someone should go through this and remove all the
obsolete test -o and -a operators, and probably do something with test's
usage of ! as well. Not today, or not by me anyway.

Create empty files for the "extra" kernels. Grr I should fix this properly
(run checkflists after building the kernels)

Enable split-debug files for kernels. Enabled by default with MKDEBUG=yes.

Put back the code to add DEBUG=-g in config and to add the debug kernels
in the kernel sets. Having the .gdb kernels in the EXTRA_KERNELS does not
work, since we only walk through the standard kernels in the Makefile. Also
doing DEBUG=-g in config twice does not hurt.

Revert previous, not needed MKKDEBUG does it.

PR/55557: Andreas Gustafsson" Introduce a new variable MKDEBUGKERNEL which
as the name implies, includes a netbsd.gdb inside each kernel set:
$ tar -tzvf kern-GENERIC.tgz
-rwxr-xr-x 0 root wheel 29398264 Dec 19 12:50 ./netbsd
-rwxr-xr-x 0 root wheel 208125880 Dec 19 12:50 ./netbsd.gdb

Restore MKNOUVEAUFIRMWARE and MKRADEONFIRMWARE and make gpufw set unconditional

Simplifies logic.
(Second commit - first one was partial)

Restoring MK* requested by mrg on tech-kern discussion
https://mail-index.netbsd.org/tech-kern/2021/09/25/msg027695.html

Move DRM-driver firmware from base to its own set, gpufw

This set is only installed on amd64,i386,evbarm.
This set is installed on minimal installs and on install media, in
case someone needs it for basic driver functionality.

Comments:
Switched to a single MK tunable for it - that is probably unneeded.

An upcoming DRM update will include even fatter firmware, and we'd
like to minimize the impact of it.

use the date tool

branches: 1.449.2;
If MKX11 and MKDEBUG, add the xdebug set to the obsolete file handling.

Get rid of 'sync' after each kernel build. It adds a noticeable delay to
builds on modern systems and seems to have been added as a workaround for
some 2004-era Linux NFS bug. Guessing that the issue has been sorted out
in the meantime.

Treat aarch64 and aarch64eb identically with regard to ld.so.conf

Use the default motd for stable builds

Separate devicetree .dts -> .dtb building from kernel builds. They are now
part of a separate set, "dtb.tgz", and only built when MKDTB=yes. This
defaults to yes for earmv[67]* and aarch64, and no everywhere else.

It is KERNEL_DIR

us and them, then!

Infrastructure for putting kernel+modules in /netbsd/kernel and
/netbsd/modules respectively instead of /netbsd and
/stand/<arch>/<version>/modules. This is only supported for x86,
and is turned off by default. To try it, add KERNEL_DIR=yes in your
/mk.conf and install a system from that build.

Split out /rescue to its own set and adapt installers/images to add it.

This is meant to make updates safer: if something goes wrong with updating
base, we still have the old, standalone /rescue to recover from.

Don't mix tabs and spaces

PR kern/53590: remove -U DEBUG from config(1) invocation (that is:
revert r1.413). DTrace needs the full symbol information.

branches: 1.438.2;
Install /etc/wpa_supplicant.conf

Redo xz vs. gzip selection via conditional make expressions, suggested
by joerg.

Clarify comment, pointed out by maya: we do not expect bootloaders
to understand xz compression, so the kernel.gz stay as they are, only
the sets are moving to .tar.xz.

Only test USE_XZ_SETS if it is defined. This is probably not the
correct fix, so someone else please do it correctly - either this is
the wrong word, or it should be given a default value elsewhere.

Prepare for .tar.xz sets

branches: 1.433.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.432.2;
Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet

use -v to get the expanded variable.

no need for debug printing.

put the dtb files with their kernels.

branches: 1.428.2;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Use make -C instead of cd && make; this is done to preserve the logical path
for debugging info DW_AT_comp_dir

branches: 1.426.2; 1.426.4;
give the kernel pax invocating the MKREPRO_TIMESTAMP treatment.

Freeze the BUILDER and the BUILD_DATE for repeatable builds

Exclude duplicate kernel config names in set generation. Suppress warnings
of defining duplicate make(1) targets.

remove the xfree86 reachover makefiles and the vast majority of
the support in the rest of the source tree.

X11 sets could use some cleaning up perhaps (just deletion, as
we've never really marked the old X11R6 as obsolete for native
xorg using platforms so far either.)

Add a new build make variable, CONFIGOPTS, which is passed to config(1)
when building kernels. Revert "mkernel=*" and "mkernels" in favor of
this option.

Diff posted on source-changes-d@, approved by (null).

Changes to existing files to enable building AARCH64 userland.
evbarm64-el
This is clang only. While gcc4.8 supports aarch64, no netbsd support has
been written for aarch64 with gcc4.8.

To make pax use ${TOOL_GZIP}, we need to pass "--use-compress-program
${TOOL_GZIP}" on the command line, and refrain from passing "-z". If
passed "-z", pax will use plain "gzip", ignoring --use-compress-program.

Introduce and use GZIP_FLAGS variable, to fix a quoting error
in the way we tried to use GZIP="-9 ${GZIP_N_FLAG}".
For consistency, also use GZIP_FLAGS elesehere in this file.

Pass GZIP="-9 ${GZIP_N_FLAG}" instead of GZIP=-9n
in the environmentto commands that invoke ${TOOL_GZIP}.
This will allow them to use -nT instead of just -n with pigz.

Use ${TOOL_GZIP_N} instead of ${TOOL_GZIP} -n, and similarly
use ${TOOL_GZIP_N} -9 instead of ${TOOL_GZIP} -9n, etc.

This will pass -nT instead of just -n if the gzip program is
actually pigz.

BUILDINFO part 3: Add BUILDINFO to RELEASEVARS and /etc/release

The BUILDINFO string will appear nearthe top of /etc/release,
indented by 8 spaces and with a blank line above and below it,
but without a heading. The BUILDINFO string is expected to
be self-explanatory.

Also change some other headings near the top of /etc/release.

Undo the mac68k specific previous change and instead move all mkisofs-based
images into ${RELEASEDIR}/images (just like the makefs ones).

Print BUILDID near the top of /etc/release.

Use the new -U option for config to avoid generating kernel debug info
during release builds. This should save quite some space in the evbarm
build, where makeoptions DEBUG is heavily used.

branches: 1.412.2;
Pass the -n flag to gzip invocations.

This prevents it from embedding a timestamp in the output. We pass
"-n" unconditionally, not conditional on MKREPRO, because many other
invocations of gzip already passed the -n flag unconditionally.

eliminate use of bsd.sys.mk from Makefiles

if softfloat, Install a ld.so.conf to use libc_vfp.so if there is a VFP on
evbarm (no other arm ports a CPU supporting VFP).

Fix typo in previous

Install pkgpath.conf in /etc - part of fix for misc PR/47645

Don't print warning even if mkisofs is not found.

Install a kyua.conf file that sets unprivileged_user to _tests.

Only include debug set obsolete set if MKDEBUG is not no

Add debug to the list of OBSOLETE_FILES

spwd.db should be 0600 (Brooks Davis)

Support a release build restricted to ALL_KERNELS. This file was missed
by the first commit.

Add src/etc/Makefile.params, containing the definition of the
RELEASEVARS variable, and commands related to printing the values of
the variables whose names are in RELEASEVARS.

Add an awk script to remove noise printed by "make -j" or high levels
of MAKEVERBOSE, so we get only the variables names and values. The
values are escaped so that variables containing embedded newlines,
quotation marks, and backslashes, are passed through safely.

Adapt src/etc/Makefile and src/Makefile to use the new ${PRINT_PARAMS}
command defined in src/etc/Makefile.params.

Now ${DESTDIR}/etc/release and the params file in the top-level
.OBJDIR should never contain unwanted noise, even after a build with
MAKEVERBOSE=4.

motd needs to be re-generated when DISTRIBVER changes, so change he
Makefile to use the new ${_NETBSD_VERSION_DEPENDS} mechanism defined in
bsd.own.mk.

Rename the default motd file in the source tree from "motd" to
"motd.default", because otherwise it would conflict with the motd file
that is now created in the .OBJDIR.

Add DISTRIBVER to the list of variables under RELEASEVARS.

branches: 1.398.2;
Install live images and install images into ${RELEASEDIR}/images by
default, to keep all the large files (such as ISOs) together.

MKCRYPTO_{IDEA,MDC2} is no more

branches: 1.396.2;
Add "live-image" and "install-image" target support to build.sh.

"live-image" target builds pre-installed disk images that can be used on
emulators or boot from USB memory sticks to try NetBSD without installation.
Currently amd64, i386, pmax, sparc, sparc64, sun2, sun3, and vax
(which have working emulators and don't require extra tools like preparing
msdosfs or partitioning MD label structures) support this target.

"install-image" target builds an bootable installation disk image that can
be used as an install CD but burned into USB memory sticks etc.
Current only amd64 and i386 (which would support USB boot) have this target.

For more details (and known issue) see following posts on netbsd-bugs@:
http://mail-index.NetBSD.org/netbsd-bugs/2011/08/06/msg023639.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/09/23/msg024207.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/12/07/msg025166.html
http://mail-index.NetBSD.org/netbsd-bugs/2011/12/08/msg025178.html

No particular comments about implementation, and
"go ahead" comments from mrg@, riz@ and christos@.

Closes PR toolchain/45153 and PR misc/45155.

Now that the name of the ISO image is no longer stable, rename the
variable to make it possible to overwrite the default with
build.sh -V CDROM_IMAGE=...

PR# install/44593: Please give release ISO's more meaningful names

Change release ISO filenames, what was once 'i386cd.iso' will now look
like 'NetBSD-5.99.60-i386.iso'.

ok snj@

update RELEASEVARS

branches: 1.392.2;
Modify etc/defaults/Makefile so that architectures can specify an additional
rc.conf file. This one should reside under etc/etc.${MACHINE}/, and will
get automatically appended to etc/defaults/rc.conf at build time if present.

This is used by i386 and amd64 to append a small MD rc.conf(5) configuration
at the end of the defaults/rc.conf file, so that powerd(8) can be started
by default when we are running in a Xen environment. This is needed to support
save/restore functions for domains.

From all the alternatives proposed to fix that issue (from /etc/rc.conf
parsing in postinstall to etc/defaults/rc.conf arch-hooks) I believe
this one will appease everyone because it:
- does not touch etc/defaults/rc.conf template file,
- patches it at build time for MD hooks only when required,
- does not need to parse/modify a user-specified file like /etc/rc.conf (which
is a complex, error-prone operation),
- only enables powerd(8) by default when conditions are met (Xen environment)
while still allowing root to shoot himself in the foot if he wants to
override this manually in /etc/rc.conf.

See also http://mail-index.netbsd.org/tech-userlevel/2011/07/25/msg005246.html

Add COMPRESS_PROGRAM=${TOOL_GZIP:Q} for pax.
Replace gzip with ${TOOL_GZIP}

Get rid of var/chroot/tcpdump/etc

Ooops, fix source path for the "protocols" file

When run as root, tcpdump will chroot to /var/run/tcpdump - but it can
not look up /etc/protcols in there. So install a copy of /etc/protocols
into the chroot area.
Fixes PR bin/44721.

Install "obsolete" files only when necessary.

Generate MAKEDEV only when really necessary. Write dependency correctly.

To install 0-sized files, check if the destination already has one.
This avoids unnecessary updates (== timestamp changes in METALOG).

branches: 1.384.2;
`` -> $()

Make tests set generation optional, skipped for MKATF=no build.

Change distribution filename for KERNEL_SETS kernels with KERNEL_SUFFIXES
in ${RELEASEDIR}/${RELEASEMACHINEDIR}/binary/kernel/
from "netbsd.aout-GENERIC.gz" to "netbsd-GENERIC.aout.gz" or so
as src/distrib/common/Makefile.mdset does for mdroot ramdisk kernels.

Import NPF - a packet filter. Some features:

- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
supporting generic RISC-like and specific CISC-like instructions for
common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual.

- Convenient userland utility npfctl(8) with npf.conf(8).

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

Thanks a lot to Matt Thomas for various useful comments and code review.
Aye by: board@

Move the emergancy terminfo database from /root to /rescue.

Install a minimal .terminfo and .terminfo.db in /root.
This allows terminfo to be used when /usr is not available.
Fixes PR misc/6879.

Fix previous: use correct mode as well as owner/group.
My bad. PR misc/41544.

Fix installation permissions of /var/db/locate.database as per PR misc/41544.

Move the test for evbppc out of sets.subr and into bsd.own.mk, to
decide whether to make kernel modules: set MKKMOD to no for evbppc.
Use this in etc/Makefile to decide whether to do the "modules"
obsolete sets. Move the ./var/db/obsolete/modules entry from the
"mi" to the "module.mi" file set.

Fixes the build for evbppc.

Discussed with uebayasi@

Install obsolete lists for modules.

Support "extsrc", externally added programs and libraries. Users can write
their own reach-overs, cross-build, install, and get set files just like base
and X11 / X.org. (These sets are not included as TNF releases.)

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Rename MKBFD to MKBINUTILS and support HAVE_BINUTILS for set lists. This
makes {MK,HAVE_}BINUTILS consistent with {MK,HAVE_}{GCC,GDB}.

Allow MKBFD to defines MKBINUTILS as a backwards compatibility hook.

Update the sets lists and add conditionals for lib{bfd,opcodes}.

- do not create X11 subdirs always anymore

- we now only create them when building X11, and only create the ones
we need (X11R6 xor X11R7)

- all these subdirs are now in the xbase set

- move the logic for running mtree into etc/mtree/Makefile

- split NetBSD.dist into 3 files, and have the build and postinstall handle
creating a possibly merged one. we still have a single installed file
called "NetBSD.dist".

Document recent gpio(4) changes and introduce a new config file for GPIO.
Integrate with the startup scripts in /etc/rc.d. Introduce new variable
"gpio" for /etc/rc.conf.

what was usr.bin/ssh is now openssh/bin, not openssh/bin/ssh.

enter the right bin/ssh subdir for "configinstall".

HI CHRISTOS!

Switch to building Postfix 2.6.2 via "external/ibm-public/postfix".

Create DESTDIR using HOST_INSTALL_DIR, not INSTALL_DIR, because
INSTALL_DIR would want to write to the metalog, and it can't do that
if the metalog is inside DESTDIR but DESTDIR doesn't yet exist.
This allows some XXX comments to be removed.

Retire audit-packages.conf, it has been obsoleted by the merge of
pkg_install-20090201.

Use awk and grep host tools where required. 'build.sh release' now works
on Solaris (but only with HOST_CC=/usr/sfw/bin/gcc for now).

branches: 1.363.2;
Remove ATF 0.5 from dist/atf and all of the reachover Makefiles used to
build it. 0.6 is going to be imported in external/bsd/atf, with all the
necessary Makefiles in that same hierarchy.

Let the build descend in rc.d during "build" and not just use it for
"distribution".

Remove LKMs and switch to the module framework, pass 1.

Proposed on tech-kern@.

- retire MKXORG from public use
- introduce X11FLAVOUR to choose src/x11 vs src/external/mit/xorg
for the X11 to build if MKX11=yes is set. it takes the values
of either Xorg or XFree86.
- default to Xorg on alpha, i386, macppc, shark, sparc and sparc64
- remove MKXORG_WITH_XSRC_XSERVER, unused and never useful

branches: 1.359.2;
Use ${TOOL_AWK} instead of ${AWK} or plain "awk" in make commands.
Pass AWK=${TOOL_AWK:Q} to shell scripts that use awk.

Improve support for MKXORG!=no to enable builds into external/mit/xorg.
This will be mutually exclusive to MKX11!=no.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

Add MKNVI to RELEASEVARS. Thanks lukem@.

Hook dhcpcd into build.

Sort variables.

MKLDAP, USE_LDAP

Remove gzipped kernel file just before running gzip >, avoiding
permission errors in unprivileged builds using a pre-existing
releasedir.

branches: 1.351.2;
Give i386 and amd64 a default boot.cfg.

branches: 1.350.2;
add USE_* to params

show RELEASEMACHINEDIR in params

branches: 1.348.4; 1.348.6; 1.348.8;
Add tests to the obsolete files list to be installed.

Remove MKUUCP from RELEASEVARS. It is no longer used in src.

Add the atf configuration files

This change adds the directory used by atf to look for its configuration
files.

branches: 1.345.4;
Add a default audit-packages configuration file for audit-packages
(part of pkg_install-20070714)

Forgot to add envsys.conf.

Sync ISO target directory and name with distrib/common/Makefile.bootcd:
target directory is ${RELEASEDIR}/iso/, named ${MACHINE}cd.iso by
default.

Recent versions of mkisofs (I've tested starting with cdrtools-2.01.01a20)
can't find the el-torito boot image with the old syntax. This can be
fixed by removed the leading "i386/" from the -b argument, but then
the mkisofs from the current cdrtools-2.01 package won't find the boot image.

Change the graf-point specifications so that a trailing / terminates
the grafted directories. This way both versions of mkisofs can find the
boot loader.

Make iso-image do nothing for all but mac68k, which still
relies on mkisofs to create bootable ISO image. macppc should also be there,
but it seems the code to make an iso bootable never got added in etc.macppc/

Remove MAKEDEV.subr. This removes the risk of third party scripts (or
human procedures) breaking because they assume it's enough to copy
MAKEDEV fom one place to another.

Let MAKEDEV return after defining shell functions but before doing any
real work, if MAKEDEV_AS_LIBRARY is set.

Let MAKEDEV.local load MAKEDEV as a function library via
"MAKEDEV_AS_LIBRARY=1 . MAKEDEV".

Provide a new MAKEDEV.subr file containing utility functions for
use by both MAKEDEV and MAKEDEV.local. This allows MAKEDEV.local
to accept the same command line arguments as MAKEDEV.

The installed MAKEDEV.subr is generated from MAKEDEV.subr.tmpl.

Replace the licence on MAKEDEV.local with a NetBSD licence, since I
rewrote the entire file.

Reviewed by christos and agc

Add login.conf.

branches: 1.337.2;
Remove last traces of /var/log/aculog
OK'd by perry@

Factor out common settings from /root/.shrc and /etc/skel/.shrc to a
new file /etc/shrc.

As proposed on tech-userlevel.

Add a "how to report bugs" message for STABLE branches too, as they really
are development snapshots (although not as "bleeding edge" as current).
Per tron@'s suggestion.

This way we get consistent messages along the development process. Otherwise,
STABLE could carry no message while a RC could, disappearing again after the
real formal release. With this change only formal releases do not carry any
special message in motd.

branches: 1.334.2;
When using a development version of the system (be it current, a beta or
a release candidate), tell the user that he might expect problems and how
to effectively report them to the developers.

No objections in tech-userlevel@; only positive responses.

document MKDEBUG MKDEBUGLIB in /etc/release

add HAVE_GCC and HAVE_GDB to etc/release

Use -publisher instead of -P, since mkisofs 2.01 whines about the latter.

PR/33837: Bucky Katz: crossbuild of release fails because $MAKE not passed

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

Don't create "/etc/mail/local-host-names" anymore after "sendmail"
has been removed from the base distribution.

Don't install "/etc/mail/aliases" if "MKPOSTFIX" is set to "no".

Remove sendmail (approved by core)

Goodbye KerberosIV

A version of etc/Makefile that doesn't contain the word WAIT.
Only slightly dissimilar to the one Chuck Silvers posted to tech-toolchain.
Builds are now likely to proceed as far as running out of space in the
install media.

Add some more .MAKE so that we don't run multiple parallel makes.

Remove the dependencies against 'check_DESTDIR' and 'check_RELEASEDIR' from
snap_pre so that make will execute it before building the kernels.
This is all because .WAIT doesn't recursively apply to dependencies.
Add some .PHONY and .MAKE so that child makes use the same job pipe.

Add distribution entries and supporting files for the iSCSI target.

mkisofs is in pkgsrc/sysutils/cdrtools now, not pkgsrc/sysutils/cdrecord.
Reported by Jukka Salmi.

Explicitly include ${.OBJDIR} in the definition of CDROM.dir
and CDROM.pathlist. This probably makes no difference,
but is less confusing.

Until someone fixes .WAIT (see PR/32594) add a .NOTPARALLEL so that we
don't try to build the kernel sets before the kernel itself is built.

After running ${TOOL_MTREE} to create directories from the
specification in .../mtree/NetBSD.dist, run ${TOOL_MTREE} again with
different args to register the new directories in the metalog.
Previously, these directories were not mentioned at all
in the metalog.

Reviewed by agc

Fix comment: "Below", variables are assigned with += not =

After building sets, make sure and checksum the kern-* files in binary/sets.

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

Consistently use 0664 root:utmp for /var/log/{lastlog,wtmp}{,x}.
Rest of PR 18670.

Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).

Install all obsolete X11 sets (even empty ones).

We must check for "${MACHINE}" and not "${MACHINE_ARCH}" of course to
decide about port specific obsolete lists.

Checking for the file "xserver" in "${OBSOLETE.dir}" doesn't work because
the check will be done before the target which is used to create that file.
So simply add "xserver" to "${OBSOLETE.file}" based on the architecture.

Make var/db/obsolete/xserver optional.

Add support for handling obsolete X11 files and directories.

branches: 1.306.2;
Remove ${MACHINE} from the volume name of iso images - our new naming sheme
makes the field overflow even on archs where ${MACHINE} is pretty short.

Also rearange MKISOFS_FLAGS so that they default to -quiet unless the
user explicitly asks for -v. Add -hide-joliet-trans-tbl to get rid of
the TRANS.TBL files on modern OSs.

Add lastlogx to the list of files created.

Only install postfix config if ${MKPOSTFIX} != "no".
Based on PR misc/29341 by Takeshi Nakayama <nakayama@NetBSD.org>

Add MKIPFILTER; if set to no, don't build and install the ipf(4) programs,
headers and LKM.

Add MKPF; if set to no, don't build and install the pf(4) programs,
headers, LKM and spamd.

Both options default to yes, so nothing changed in the default build.

Reviewed by lukem.

Permit a "README", "SOURCE_DATE", and "source" at the top-level to be
added to the CD-ROM (only if they exist), as proposed on tech-install
and tech-toolchain without objections. Note, this will "bloat" the CD-ROM
image if you have done a "./build.sh sourcesets". If you don't want that,
just move "source" out of ${RELEASEDIR} for the "make iso-image".

add MKINET6 to etc/release

install-etc-files: also descend into "pam.d" for configinstall

add MKPAM

Add ${.CURDIR}.

Use the ttys file from etc.${MACHINE} directly.

Don't leave the stray reference to etc.${MACHINE}/ behind in the ttys
file installation command.

Don't append ptys to the ttys file. It is not needed anymore as ttyslot
will DTRT.

install PF configs.

merge after importing pf from openbsd 3.6. (userland part)

some files were imported to the different places from the previous version.
v3_5:
etc/pf.conf
etc/pf.os
etc/spamd.conf
share/man/man4/pf.4
share/man/man4/pflog.4
share/man/man5/pf.conf.5
share/man/man5/pf.os.5
share/man/man5/spamd.conf.5
v3_6:
dist/pf/etc/pf.conf
dist/pf/etc/pf.os
dist/pf/etc/spamd.conf
dist/pf/share/man/man4/pf.4
dist/pf/share/man/man4/pflog.4
dist/pf/share/man/man5/pf.conf.5
dist/pf/share/man/man5/pf.os.5
dist/pf/share/man/man5/spamd.conf.5

Now that one can choose boot image for i386 to produce a slightly
different cd-rom image (e.g. using the INSTALL_LAPTOP-derived boot
image), make it possible to add a string to the cd-rom image name
by setting the optional environment variable CDROM_NAME_ADD.

Overhaul install-etc-files so that
* most files are installed with CONFIGFILES (from bsd.files.mk)
* empty files are created in a cleaner fashion
* MAKEVERBOSE is supported for the remaining custom items

install pf related files to /etc

remove ad-hok list of pty's from port tty files, and auto-generate it so
that it is consistent, and in the proper order.

Move '${MAKEDIRTARGET} x11 distribution' from Makefile::distribution to
etc/Makefile::distribution, and only perform if ${MKX11}!=no.
Should fix a problem experienced by Alistair whilst doing a "make release".

Consistently use CONFIGFILES & CONFIGLINKS (which enable the 'configinstall'
target) instead of using home-grown 'distribution' targets or using
FILES with the 'install' target.
Add some etc/ subdir Makefiles where appropriate.

XXX: some of etc/Makefile install-etc-files could be converted to CONFIGFILES.

``build.sh -m xen-i386 release'' now builds a release for NetBSD/xen
for i386. The resulting release consists of:
- NetBSD/xen for i386 kernel, loader and docuemntation
- NetBSD/i386 userland sets

Convert lines of the form
(cd ${.CURDIR}/somedir && ${MAKE} AVAR=value atarget)
to
${MAKEDIRTARGET} somedir atarget AVAR=value
which results in a "prettier" display of these operations

branches: 1.284.2;
sync after building kernels. on some host systems (Linux) on NFS
have been seen to fail with the error:
pax: File ./netbsd was modified during copy to archive
and this avoids it.

Allow CKSUM to be overridden.

Disable parallel build when doing make params so that `---- params ----'
won't be emitted into /etc/release.

Move the 'build date' & 'built by' stuff to the "build settings" section.

Add /etc/locate.conf

in etc-release, put the builder on a separate line to the date

Run "cd ../distrib/sets && make makesetfiles" at the end of "distribution"

When using obj directories, the make proces cd's to the obj directory.
Therefore, we need to cd to ${.CURDIR} before re-invoking ${MAKE} so
that it can find the Makefile.
Also, pass ${MFLAGS} to ${MAKE} so that we pick up the source tree's
makefile fragment, not the host system's fragments, so that this
works properly on older NetBSD host systems, as well in other
cross-compile contexts.

Add to RELEASEVARS:
NETBSDSRCDIR OBJMACHINE USR_OBJMACHINE X11SRCDIR

Add 'params' separate to 'etc-release', and use the former as part of
the latter.

Apply .PHONY appropriately.
Use .EXEC when we always want to create ${.TARGET}, rather than
perform an non-file-based operation (.PHONY is for the latter).

Install default ssh_known_hosts file with public keys for Project servers.
Hopefully I didn't make too much of a hash of the postinstall support for
this; it currently installs the file if there's none in the destination,
and elsewise notes if the CVS version differs (or is missing) but doesn't
try to fix that.

Add the following to the list of variables displayed in etc/release
MKBFD MKCRYPTO_IDEA MKCRYPTO_MDC2 MKCRYPTO_RC5 MKCVS
MKDYNAMICROOT MKGCC MKGCCCMDS MKGDB MKHESIOD MKHTML MKIEEEFP
MKKERBEROS4 MKKERBEROS MKLINKLIB MKMANZ MKPICLIB MKPOSTFIX
MKSENDMAIL MKSKEY MKSOFTFLOAT MKSTATICLIB MKUUCP MKX11 MKYP

rename release-info to etc-release
rename install-release-info to install-etc-release

remove superfluous .endif accidentally introduced in previous

deprecate NO_SENDMAIL and consistently test MKSENDMAIL

Get the copyright info for etc/release from sys/conf/copyright.
Idea from Simon Burge.

install-release-info does not need DESTDIR. [toolchain/23982]

Rename /etc/release-info to /etc/release, to be consistent with other
implementations and Hubert's original intent.

Add "release-info", to create the file of that name containing
information about the build, and "install-release-info" to install it.
(The latter will be invoked by src/Makefile)

Based on work by Hubert Feyrer <hubertf@> and the "params" target in
src/Makefile.

display path of created iso-image

* Match the source code to the comments, and use $NETBSDSRCDIR
instead of -v ETCDIR.
* Parse $NETBSDSRCDIR/etc/{master.passwd,group} to build a list of
user->uid and group->gid mappings, and replace %uid_XXX% and %gid_XXX%
appropriately.
* Whitespace & regex tweaks.

MAKEVERBOSE-ify MAKEDEV creation

explicitly pass MACHINE and MACHINE_ARCH to MAKEDEV.awk via environment,
so that this works as expected when not invoked via build.sh

now that MAKEDEV is generate, install it from ${.OBJDIR}

Use ${HOST_SH} instead of `sh'.

If necessary, pull in <bsd.sys.mk> to get the definition of HOST_SH;
Makefiles that pull in one of (most of) <bsd.*.mk> will get this anyway.

Add the -T etc_pkg arg back to the MAKEDEV install.

Now that MAKEDEV is generated, just do an ordinary ${INSTALL_FILE} instead
of going back to the source dir (and losing) with ${ETC_INSTALL_FILE}

switch over to unified MAKEDEV

Optimise DISTRIBUTION_DONE= KERNELS_DONE= nbmake snapshot
- If DISTRIBUTION_DONE is defined, don't add the 'root' directory to METALOG.
(maybe install -M shouldn't write to the METALOG file if it doesn't install
the file either)
- Don't re-compress the kernels if the compressed file is newer than the
kernel.
Useful if all you want to do is rebuild the ramdisk image.

Add MKUNPRIVED; if not no has the same semantics as if UNPRIVED was defined.
Replace defined(UNPRIVED) tests with ${MKUNPRIVED} != "no"

Add MKUPDATE; if not no has the same semantics as if UPDATE was defined.
Replace defined(UPDATE) tests with ${MKUPDATE} != "no"

Improve documentation for these and other make flags.

Rename a large chunk of the make(1) variables which refer to a
program/tool from "FOO" to "TOOL_FOO". The new variables are:
TOOL_ASN1_COMPILE TOOL_CAP_MKDB TOOL_CAT TOOL_CKSUM TOOL_COMPILE_ET
TOOL_CONFIG TOOL_CRUNCHGEN TOOL_CTAGS TOOL_DB TOOL_EQN TOOL_FGEN
TOOL_GENCAT TOOL_GROFF TOOL_HEXDUMP TOOL_INDXBIB TOOL_INSTALLBOOT
TOOL_INSTALL_INFO TOOL_M4 TOOL_MAKEFS TOOL_MAKEINFO TOOL_MAKEWHATIS
TOOL_MDSETIMAGE TOOL_MENUC TOOL_MKCSMAPPER TOOL_MKESDB
TOOL_MKLOCALE TOOL_MKMAGIC TOOL_MKTEMP TOOL_MSGC TOOL_MTREE
TOOL_PAX TOOL_PIC TOOL_PREPMKBOOTIMAGE TOOL_PWD_MKDB TOOL_REFER
TOOL_ROFF_ASCII TOOL_ROFF_DVI TOOL_ROFF_HTML TOOL_ROFF_PS
TOOL_ROFF_RAW TOOL_RPCGEN TOOL_SOELIM TOOL_SUNLABEL TOOL_TBL
TOOL_UUDECODE TOOL_VGRIND TOOL_ZIC

For each, provide default in <bsd.sys.mk> of the form:
TOOL_FOO?= foo
and for the ${USETOOLS}=="yes" case in <bsd.own.mk>, provide override:
TOOL_FOO= ${TOOLDIR}/bin/${_TOOL_PREFIX}foo

Document all of these in bsd.README.

This cleans up a chunk of potential (and actual) namespace collision
within our build infrastructure, as well as improves consistency in
the share/mk documentation and provision of appropriate defaults for
each of these variables.

Invoke makeobsolete with ${HOST_SH} and pass in ${MAKE}.
Fixes FreeBSD cross-build problem noted by Valeriy E. Ushakov <uwe@>

* Always include <bsd.endian.mk>, and include it much earlier so that
it's available for the MD etc.${MACHINE}/Makefile.inc
* Set PWD_MKDB_ENDIAN to the cap_mkdb(8) endian flag, rather than
overriding TARGET_ENDIANNESS.

Install powerd(8) scripts when installing etc files.

For consistency and simplicity, move the default location for cron logs
from /var/cron/log to /var/log/cron

atc uses /var/games/atc_score, not atc_scores
Problem pointed out and fix supplied in PR install/20709 by Kazuhito Tsuburaya

- rename 'iso-image_*' -> 'iso-image-*'
- run MAKESUMS in iso-image, *after* the MD iso-image-md-post has run,
since the latter might actually modify the generated image...

all:
Use /var/db/obsolete instead of /etc/obsolete

etc/Makefile:
Create separate target "install-obsolete-files" to populate
/var/db/obsolete, instead of using "install-etc-files".

Makefile:
Add do-obsolete target, to run "cd etc && make install-obsolete-files",
and add this to BUILDTARGETS.
This moves the "obsolete files" creation from "distribution" to "build".


Per discussion with Andrew Brown.

etc/postinstall
* Improve message display in find_file_in_dirlist()
* do_obsolete(): instead of running distrib/sets/makeobsolete to
temporarily generate the obsolete sets lists, look for them in
${SRC_DIR}/etc/obsolete/* or ${DEST_DIR}/etc/obsolete/*.
The obsolete check now works for "extracted etc.tgz" as the source dir.

etc/Makefile (install-etc-files), distrib/sets/lists/*
* Install obsolete set lists into /etc/obsolete/
* Tweak how pwd_mkdb files are added to METALOG

distrib/sets/makeobsolete
* Don't bother with "_obsolete" suffix on generated file names.

be more obvious about the requirement on mkisofs 2.0

allow NO_SENDMAIL to equal "no"

Missed a 'cd ${.CURDIR}' when adding the OBJDIR support here,
causing "make distribution" to fail on "install-etc-files".
(oops!)

- Enable OBJ support for etc/; a scratch dir is needed for iso-image.
- Add ${.CURDIR} to various rules.
- Remove the ${KERNOBJDIR} (sys/arch/${MACHINE}/compile) objdir creation
from here.
- Rework iso-image to copy temporary files (such as kernels or boot files)
into a temporary directory instead of stomping over ${RELEASEDIR}, and
use mkisofs -graft-points to merge the temporary directory and
${RELEASEDIR}/${MACHINE}.
NOTE: mkisofs 2.0 is highly recommended for functioning -graft-points
- Add some more comments

Install release files under "${RELEASEDIR}/${MACHINE}/..." instead of
"${RELEASEDIR}/...".

${RELEASEDIR} is never cleaned , and ${RELEASEDIR}/${MACHINE} is only
cleaned if UPDATE is not defined.

Don't remove ${RELEASEDIR} if UPDATE is defined.

Rework METALOG manipulation:
- add '-D ${DESTDIR}' to INSTPRIV, so install(8) removes the leading
${DESTDIR} from the metalogged path
- provide ${METADB.add} variable (for "${CAT} -l >> ${METALOG}"), to make
it easier to replace manual metalog manipulation in the future.
- with manual metalog additions, don't add the leading ${DESTDIR} in the path
- in maketars, use "mtree -C ..." instead of
"mtree -D ... | sed -e 's,\(.*\) \(\..*\),\2 \1,";

Benefits:
- maketars "Parsing METALOG" step speeds up from 29 seconds to 1.2 seconds
on a P3-600.
(This also benefits "make installworld" at the top level.)
- ${DESTDIR}/METALOG is easier to read without the leading "${DESTDIR}"
on all the pathnames, and it's smaller as well.

Invoke ${PAX} with '-O' so that various errors don't hang the make
or the command with an interactive question. (This also prevents
weird problems if a directory element of '-f path' is missing and
'make -j N' is being used).

Remove /sys -> /usr/src/sys symlink.

use single minimal default disktab file for most archs, replacing
MD disktab where possible (everything but vax)
the MD disktab was often either empty, or contained entries even for disks
which support geometry autodetection (SCSI), and/or non-interesting/long
obsolete entries

the old records are still available in example disktab in
/usr/share/examples/disktab/disktab in case anyone would need them

Always invoke mtree & pax with "-N ${NETBSDSRCDIR}/etc" so that user & group
lookups occur from there rather than from the host system.

ttyaction is ${MACHINE}-specific, not per ${MACHINE_ARCH}
remove special ttyaction hook from etc/etc.sun[23]/Makefile.inc, it's no longer
needed
ld.so.conf is ${MACHINE}-specific, the code happened to work for i386 and sparc
only because ${MACHINE} == ${MACHINE_ARCH} there
remove basesrc/etc/ld.so.conf and its special vax/ns32k/m68k hook in Makefile -
vax & m68k are ELF now, and ns32k doesn't need to be handled here

- add snap_post, which makes "clean depend all release" in ../distrib/
for all platforms.
- remove now unnecessary replicated code in the various snap_md_post targets
- remove snap_md_pre; nothing uses it any more
- use ${NETBSDSRCDIR} and ${KERNSRCDIR} as appropriate

Separate snap_kern into three targets, to allow finer control over
which bits to build, and to allow "make -j N" actually do something in
parallel:
- build_kernels: for each of ${ALL_KERNELS}, create kern-${NAME} target
which configures & builds the kernel ${NAME}.
- build_kernsets: for each of ${KERNEL_SETS}, create kernset-${NAME} target
to create ${RELEASEDIR}/binary/sets/kern-${NAME}.tgz
- build_releasekernels: for each of ${KERNEL_SETS} ${EXTRA_KERNELS}, create
${RELEASEDIR}/binary/kernel/netbsd-${NAME}.gz (et al)
(The latter two .WAIT until build_kernels has completed)

Add hackdir/perm and hackdir/record
move larn files into alphabetical order

add code to include (primitive) package tag names

XXX This file has gotten big and ugly enough that a bit of a rewrite
is likely in order.

Set
ALL_KERNELS ?= ${KERNEL_SETS} ${EXTRA_KERNELS} ${BUILD_KERNELS}
and use ALL_KERNELS instead of the latter three in the loop to configure
& build kernels. This allows ALL_KERNELS to be overridden in make(1)'s
environment or on make(1)'s command line... (I got sick of waiting for
all eleven i386 kernels to rebuild when I was only testing one)

create /etc/mail/local-host-names, required by sendmail(8).

Make utmp and utmpx group utmp, not group wheel. This gets masked by
the fact that rc.d sets it to group utmp anyway, but it was certainly
wrong in principle.

Create wtmpx, just as wtmp is created.

Add /var/run/utmpx, requested by soren.

Set the volume ID on CDs produced my "make iso-image" to something meaningful,
rather than the default of "CDROM". The volume ID now looks like
"NETBSD_ACORN26_16D".

Removed ftpwelcome from BIN1; it was removed.

use ` | ${CAT} -l >> ${METALOG} ' to serialise writes to the metalog

have bsd.endian.mk, which detects target endian.
generate *.db in target endian. (see tech-userlevel for discussions)

set TARGET_ENDIANNESS appropriately.

branches: 1.219.2;
Move the sample fstab files to /usr/share/examples/fstab/. Duplicates
or very similar configs removed.

Correct BUGS in BUILDING.mdoc now that most ports are USE_NEW_TOOLCHAIN

Obsolete NBUILDJOBS; build.sh just passes -jN through to make(1),
which inherits it cooperatively through the build tree. Fix
documentation so that it's shown to be deprecated.

If you use build -jN, please save full build logs so that errors due
to missing dependancies can be analyzed and corrected.

- consistency cleanup
- ensure INSTALLATION_DIRS contains the appropriate extra directories
for a given platform

s/_SRC_TOP_/NETBSDSRCDIR/

install postinstall

When building kernel .tgz sets, take advantage of pax's new ability to
not store optional directory entries when copying from a specfile.

add default passwd.conf file

if UNPRIVED, call ${PAX} with -N ${_SRC_TOP}/etc

now <bsd.kernobj.mk> defines KERNSRCDIR correctly, pull it in earlier
and clean up related goop

When building kern-*.tgz, output an mtree specfile to pipe into
${PAX} -M so that the contents get the appropriate ownership.
Fixes [toolchain/16161] from Ben Harris <bjh21@netbsd.org>

Don't install pcs750.bin in here anymore.

arm32 is not a valid MACHINE_ARCH anymore.

When doing a "for" loop over a potentially-empty list
(${KERNEL_SUFFIXES}), put the list in a shell variable and use that.
Both bash (before 2.05a) and Solaris /usr/xpg4/bin/sh report a syntax
error otherwise.

Add a MAKESUMS variable which invokes makesums with CKSUM in its environment.
Use this whenever we want to invoke makesums.

Change pcs750.bin processing so it works UNPRIVED=. XXX this needs to be
moved to someplace with an objdir.

provide check_DESTDIR and check_RELEASEDIR targets in <bsd.own.mk>
and use those rather than local versions

copy kernels to the releasedir even when KERNELS_DONE is defined
(i.e. only skip building the kernels). fix some comments while I'm here.

- add check_destdir and check_releasedir targets, and use appropriately
(easier to read that large nested .if's
- use INSTALL_FILE, INSTALL_LINK and INSTALL_SYMLINK instead of INSTALL
- when creating release directories, don't bother setting owner and group

- replace "tar -cf - ... | gzip -9 > foo" with "GZIP=-9 ${PAX} -zwf foo ... "
- more comment hacking

- add the following targets to the DESTDIR=="" check:
install-etc-files iso_image_mi iso-image_md_pre iso-image_md_post snap_kern
- add the following targets to the RELEASEDIR=="" check:
iso_image_mi iso-image_md_pre iso-image_md_post snap_kern
- improve comments around make .flow control statements (including adding
some helper # { ... # } comments around large .if statements for (ab)use
with vi showmatch mode)
- clean up whitespace

MKfoo=no -> NOfoo=

Make pwd_mkdb a conditional set so bsd.own.mk can override it

Add support for specifying extra kernel name suffixes to search for
when building the kernel sets and placing gzip'd kernels in binary/kernels.
For example, if KERNEL_SUFFIXES were set to "ecoff srec", then the kernel
set would include:

netbsd
netbsd.ecoff (only if it exists in the kernel compile directory)
netbsd.srec (only if it exists in the kernel compile directory)

This is useful for packaging kernel sets for platforms which have
extra special requirements for loading the kernel.

Change the way kernel sets are specified, and make them
more consistent. To quote the comment in etc/Makefile
that describes how it's done:

# This target builds the kernels specified by each port. A port may
# specify the following kernels:
#
# KERNEL_SETS The list of kernels that will be
# packaged into sets, named
# kern-${kernel}.tgz. These kernels
# are also placed in the binary/kernels
# area of the release package as
# netbsd-${kernel}.gz.
#
# EXTRA_KERNELS Additional kernels to place in the
# binary/kernels area of the release
# package as netbsd-${kernel}.gz, but
# which are not placed into sets. This
# allows a port to provide e.g. a netbootable
# installation kernel containing a ramdisk.
#
# BUILD_KERNELS Additional kernels to build which are
# not placed into sets nor into the
# binary/kernels area of the release
# package. These are typically kernels
# that are built for inclusion only in
# installation disk/CD-ROM/tape images.
#

Fix oversight in the addition of install-etc-files target; move the
.endif for DISTRIBUTION_DONE to the right place.

Synthetically generate metadata entries for passwd, spwd.db, pwd.db.
XXX Note that it can easily be argued that these should be generated by
the installer, not shipped in the tar files, but that's for another day.

Split the "distribution" target into "distribution" and "install-etc-files",
the latter being called by the "distribution" target. This allows the
various /etc/... files to be installed manually in a convenient way, if
desired.

NOTE: It is INTENTIONAL that this target is not named "install".

UNPRIVILEGED->UNPRIVED

Make the TARGET_ENDIANNESS check only valid when making release, snapshot,
or distribution.

Also, clean up the check and include <sys/endian.h> instead -- some platforms'
<machine/endian_machdep.h> pull in the definitions of _BIG_ENDIAN and
_LITTLE_ENDIAN, invalidating the test; this makes the check values uniformly
"4321" and "1234" respectively.

Don't run rules unless DESTDIR is set *and* contains a value. Fixes PR 14410

Add rm's before symlink and hard link commands.
Shouldn't be needed, but install has no other good way to deal with
this.

Pointed out by Rob Windsor in PR 14394 -- I committed his patch plus
one for something he didn't hit yet.

Now that it will actually work, replace instances of ln with install.

Change defaults for kernel compiles. Default all to USETOOLS?=no and have
the etc Makefile override that by putting USETOOLS into $.MAKEOVERRIDES
This way the default for kernel compiles is still to use the installed
toolchain instead of depending on $TOOLDIR. $TOOLDIR can be used by
simply adding USETOOLS=yes to the command line as usual.

Adjust each ports template to set the default no setting and also pull in
bsd.own.mk if they weren't already to ensure they'll build correctly
with the new toolchain setup.

Since <bsd.prog.mk> is included, we already have a full list of default
build rules for all standard targets. Remove the manually-created list
of empty rules.

Do not run MAKEDEV on "make distribution". The device nodes are not part
of the resultant tarballs; only the MAKEDEV script itself is. Running
MAKEDEV here can futz with cross build hosts.

A few more changes, from more discussions with Andrew Brown.
- Resurrect /etc/changelist, even if it's an "empty" file by default,
because it's easier to use than /etc/mtree/special.local for adding
a couple of simple files. Back by popular demand (hi @@@! :-)
- Add /etc/rc.d/* to the list of "dynamic" files; this notices changes
in user-added scripts
- Only calculate the mtree -I nomail list once, and re-use
- Use "cat foo | while read file" instead of "for file in `cat foo`" ;
handles whitespace better...

Major overhaul, with help from Andrew Brown <atatat@netbsd.org>.

Features:
- Add a bunch of stuff to /etc/mtree/special to enable removal of
/etc/changelist:
- files which we want to monitor for changes but don't want to
see the diffs of (master.passwd, ssh_host_key, ...) are
tagged with "nomail"
- files which we don't want to monitor are tagged with "exclude"
(such as netgroup.db, kvm.db, ...)
- monitor /etc/mtree/special.local, /root/.ssh/*
- remove /etc/changelist, and a bunch of XXX comments
- use mtree(8)'s -D, -I, and -E to generate lists of files to
actually do the changelist stuff on.
- support /etc/mtree/special.local as an optional user-provided
version of /etc/mtree/special (effectively, an enhanced
/etc/changelist)
- Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/*
including support for these files being added and removed at will.
- If /sbin/fdisk exists, backup the output of "fdisk $disk" for all
the active disk drives as part of $check_disklabels
- Check permissions on: ~/.ssh/* ~/.shosts

Details:
- Reorder initialisation of defaults
- Remove special case for /etc/master.passwd "monitor but don't email diffs"
with general case for other similar files.
- Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...)
in "$backup_dir/work", to minimise name clashes.
- Add migrate_file(old, new) to do the hard work of migrating files
from the old `top level' /var/backups mechanism to the `full path'
mechanism recently added. Use this appropriately.
- Add backup_and_diff(file, printdiffs), to the hard work of backing-up
and diff-ing files.
- Cleanup use of shell redirects
- /bin/sh supports ~root globbing, so use it.
- Improve umask checking; use awk regex rather than awk math

skip "distribution" step if DISTRIBUTION_DONE is set.

Make mtree a host tool and use it when appropriate.

Append / to ${DESTDIR} in distrib-dirs rule; fixes PR bin/14080.

support kernel configs called `../../sparc64/conf/GENERIC32', and the like,
by stripping the dirname off by using ${configfile:C/.*\///} where necessary.

Fix botched commit (a conflict was committed).

Use "mtree -U" instead of "mtree -u" on making distrib-dirs
to ignore file hierarchy unmatches and check exit status of mtree
to detect actual errors on it (like "unknown user/group" etc).

do not try to install rtadvd.conf

more dup target fixes... snap_md_post should be fixed in etc.i386
Makefile.inc not to work if $RELEASEDIR or $DESTDIR is not defined.

protect against multiple target definition for parse_md_post

Only need to "make distribution" in usr.bin/ssh once.

Correct comment for KERNOBJDIR.

Get the TARGET_ENDIANNESS by running ${CC} -E over
<machine/endian_machdep.h>. Fixes problems where
<machine/endian_machdep.h> just includes another file
without defining _BYTE_ORDER itself.

Call pwd_mkdb with proper flag, so that it creates database in same
endianness as compile target. This is primarily for cross compiles.
Hopefully this method (looking into
${DESTDIR}/usr/include/machine/endian_machdep.h) is okay.

Patch sent by Andrew Brown in bin/11454.

Just nuke the "build aliases.db" stuff from here. It's not
necessary, as /etc/rc.d/sendmail will already rebuild DB files
automatically if necessary, and doing aliases.db here just
totally breaks cross-compiling.

Moved comment about rm out of shell command area. (typo)

Ignore errors from the rm in snap_pre. RELEASEDIR could be a mountpoint and
rm complains because it can't actually nuke the mount point. Anything serious
like permissions or I/O errors will get caught in the install's after this
anyways.

When building kernels for a release (snap_kern) use "distclean" instead of
"clean" to get rid of any .depend files that might be lying about in the
kernel build directory.

cd to skel during "make distribution".

Part of fix for PR bin/10985.

Fix typo in iso-image target that led to the cdrom-directory not being
excluded in the iso image (nothing harmful).

Do the `distribution' target for usr.bin/ssh, too.

move default config files from /etc/default -> /etc/defaults, to be
consistent with what FreeBSD uses /etc/defaults for, and since SVR4
uses /etc/default for another purpose.
as discussed on tech-userlevel, and no objections were made.

Add standalone "iso-image" target that can be run with DESTDIR and RELEASEDIR
set in src/etc after a "make release" in both "src" and "xsrc", to create a
ISO-image of the release in $RELEASEDIR/installation/cdrom.

Hook for architecture dependent pre/post-processing in etc/etc.*/Makefile.inc
are available as 'iso-image_md_post' and 'iso-image_md_pre', see
etc/etc.i386/Makefile.inc as an example. Might be useful for setting up
bootable CDs on alpha, sparc, ...

Reviewed by Todd Whitesel and Thomas Klausner.

As .ifndef RELEASEDIR checks for targets:
snap_pre snap_md_pre snap_md_post
so should .ifndef DESTDIR

- install files in etc/default/
- migrate rc.wscons to (already existing) rc.d/ wscons

Do not create the binary/security directory, there is no seperate
security set anymore.

As discussed with Hubert Feyrer in private mail, install UTC as the default
time zone; while amounting to the same offset, the time zone 'name' of
Factory violates the prinicple of least surprise.

Change default timezone from US/Pacific to Factory:

Before:
Wed Aug 2 06:53:04 PDT 2000

After:
Wed Aug 2 13:52:52 Local time zone must be set--see zic manual page 2000

Also do ../usr.bin/ssh for the `distribution' target.

branches: 1.154.2;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

Loosen sendmail's permission checks for building the aliases.db file
even further. Particularly, allow ${DESTDIR} to be within a world writable
directory, such as /var/tmp.

install ttyaction if it exists

* Portmap is now called rpcbind.
* Add IPv6 RPC entries to inetd.conf (commented out by default, as the others)
* Add netconfig file, needed for TI-RPC code.

branches: 1.150.2;
remove netstart

Added an obj target to ensure that KERNOBJDIR exists - in case
we are using MAKEOBJDIRPREFIX.
Fixed the comment about why we grab ../Makefile.inc

correct typo (sendmail upgrade)

sync with sendmail upgrade.
- sendmail configuration files are in /etc/mail, not /etc.
- src/etc/aliases will be installed into /etc/mail/aliases (confusing)
- rc.d/sendmail warns if /etc/sendmail.cf exists.

remove/change missleading comments

Use bsd.kernobj.mk
Also if KERNELS_DONE is defined skip building kernels. Handy if re-spinning
due to errors in distrib later on.

Install the localhost namedb file.

Add "make distribution" for Postfix.

The file /etc/sysctl.conf is now run with sysctl -f at boot time.
This replaces the previous /etc/rc.d/sysctl. Also, the variables are now
set earlier, between ipf/ipnat and the network coming up.

The rc.conf defcorename and securelevel variables are no more. You can
set them directly in sysctl.conf now.

Use distrib/sets/Makefile in the release: and new cryptoset: targets.

install rc.d scripts

explicitly allow writable directories when rebuilding the alias
database, otherwise this will fail if any directory in ${DESTDIR} is
g+w.

sync with etc/namedb change (IPv6 loopback reverse database file)

Install a blank sendmail.st here.

Always checksum binary/kernel, now that there is at least one file in it.

Always install GENERIC in the kernels directory.

Check for CRYPTOPATH variable instead of "../domestic" when deciding to build the secr set.

"sendmail" is in "src/gnu/usr.sbin/sendmail" now.

Install correct ld.so.conf if etc.${MACHINE}/ld.so.conf exists.

Install named/0000:0000:0000:0000:0000:0000:000 and ntp.conf to fix the
damage in distrib/lists.

We don't have a bind4.

Pick up a machine dependent ld.so.conf

branches: 1.128.2;
Install root's .shrc.

Add an at.deny file by default, so that (by default) users can use at
and batch (as is historic practice, and as was our practice before
last year.) If someone wants to disable such use, they can just remove
the file.

Use sendmail.cf from $DESTDIR/etc instead of /etc for building the
aliases.db since that fails if we have a sendmail.cf installed that
has no MAILER(local) like nullclient.

branches: 1.125.2;
Use ${CONFIG} rather than config so cross-builds can correctly select which one to use.

Use ${INSTPRIV} with ${INSTALL}.

Provide a script to compute the distribution set checksums.
Make the Makefile use it, instead of calling cksum manually.

Make an aliases.db file when we install the aliases file.

sparc and i386 do not have ld.so.conf anymore now that they're switched
(or about to switch) to ELF.

rtadvd: advertise IPv6 prefix info via router advertisement.
(to be run on routers)

Document BUILD_KERNELS.

The snap_kern target is not sufficiently flexible.
Allow Makefile.in to provide its own.

+ Put directories to create in ${RELEASEDIR} into a variable that
port-specific Makefiles can add to.
+ Separate snap_md into snap_md_pre and snap_md_post that are depended
on before and after snap_kern.
+ Build all kernels listing in ${BUILD_KERNELS}, but don't put them in
${RELEASEDIR}.

OK, adjust the kernel finder one more time to handle the case of a config
file that just does "include" GENERIC, and therefore has no "config" line.
It's simplest to assume that "netbsd" will be the result in that case.
Rather than duplicate config(8)'s parser in awk (or something), we should
adjust config to parse the config file and spit out the kernel names, and
then use that to replace this awk script thing.

Slight tweak to the EXTRA_KERNELS build commands to work around a shell
parsing wierdness.

NetBSD's very clever kernel build system can make more than one
kernel per config file and the resulting kernel need not be named
"netbsd"; therefore paw through the config file after the kernel
builds are done, find them all, and put them where they belong per
release(7). This all done with some clever awk/sh scripting, from
PR 7180 by David Forbes.

Create /var/log/aculog with appropriate permissions, per PR 6675

branches: 1.112.2;
NO_POSTFIX should have been BUILD_POSTFIX with reversed sense.

Add a NO_POSTFIX check to allow \'make distribution\' to work.

postfix support.

install wscons.conf

introduce a "wscons" rc.conf flag and run /etc/rc.wscons from /etc/rc
if it is set

Make the includes and install targets consistent, and shove the
ugly hack into the etc/Makefile distribution target instead of
the top-level build target. Problem noted by Mycroft.

Add comment that release is a synonym for snapshot, and make release
present everywhere snapshot is.

Only install ld.so.conf on machines where we install ld.aout_so.

Make "make release" work without US domestic source
and with more than one extra kernels.

The "secr" set is not made by default by maketars; add stuff to
make it unless EXPORTABLE_SYSTEM is set.

Remove "tar" command from EXTRA_KERNELS section; those files are
expected to be ".gz" not ".tgz"

convert from NOxxx= to MKxxx=no.
include <bsd.own.mk> if testing a MKxxx variable.

Use slightly cleaner syntax for release/snapshot target.

Add a `release' target, which is a synonym for `snapshot.'

Change a BUILD to an UPDATE that I missed in the last commit.

.ifndef BUILD should be .ifndef UPDATE (to avoid `make clean').

Update all this crap so that `make snapshot' makes snapshots in release(7)
format, rather than in some unknown format. Also clean up the code a bit,
remove some code duplication, and add documentation to the Makefile.

Make the default named configuration more ... sane.

install sample nsswitch.conf

Install /etc/skeykeys 600 - from PR6519 by andrew@untraceable.net, tested OK.

add mailer.conf, and leave a bit more room in the BIN1 lines for the future

BIND 8 is the default now.

Pay attention to NO_SENDMAIL and USE_BIND8

A basic /etc/rc.shutdown. Bails out if do_rcshutdown!=YES in /etc/rc.conf
(default is YES). Kills xdm and waits for it to terminate if it was enabled
in rc.conf (based on a code snippet from Ignatios).

distclean is a synonym for cleandir

Add a variable, INSTALL_DONE, that indicates that a make install was
already done (say, by "make build"). This is often of help when
building releases.

back out last change, /etc/aliases.db now auto-rebuilt by default sendmail.cf

build $DESTDIR/etc/aliases.db in distribution: target

add an ld.so.conf for all ports

create etc/mtree/Makefile and let it deal with what files are installed.

cribloo -> criblog

install empty games data files with the correct perms for a distribution.

Allow etc.{$MACHINE_ARCH}/Makefile.inc to add files to BIN1, BIN2, BIN3.

fix typeo in prev commit

branches: 1.78.2;
Install BSD.pkg.dist in ${DESTDIR}/etc/mtree
(used from within bsd.port.mk)

Add a BIN3 for files installed with mode 0600 (e.g. hosts.equiv).

f before t...

Nuke myname.

Add rc.subr to BIN1

add a default minfree file (requested by David Brownlee, pr-1577)

add sample /etc/profile, cribbed shamelessly from csh.login. consists
solely of comments.

Back out BUILDDIR and NOINSTALL changes.

branches: 1.70.2;
These updates to the build allow building against include files
and libs in the object tree, if you use a separate object tree,
while maintaining backward compatability with other build methods.
See the notes in src/share/mk/bsd.README for full details. Note
that the `make includes' target now only installs the include files
in the build directory (if you use one--otherwise they go in DESTDIR
just like before); `make install' will install include files in
DESTDIR.

Add /var/log/authlog and /var/log/xferlog.
The permissions and especially ownerships of all the /var/log files
should be re-examined -- bin:bin really isn't right for these files.

remove chroot on pwd_mkdb -- use -d option instead

mtree/4.4BSD.dist -> mtree/NetBSD.dist

merge in 4.4BSD-Lite2 changes. only SCCS IDs were changed, since all
of the lite1-lite2 differences were either already present or
inappropriate.

merge lite-1 changes (ftpwelcome, .klogin perms).
also eliminate redundant copy of motd.

Missing `)'.

install namedb files from subshell so distribution target will work
with -j; from PR misc/3116

mail.rc now installed by 'make distribution' -- fixes pr-3015

Add missing "\".

add files related to the new rc world order.

add floppy formatting table

- send authpriv to /var/log/secure only (not to console or /var/log/messages)
(closed [misc/574])
- send ftp to /var/log/xferlog
- prevent anything that goes to a restricted file (e.g., /var/cron/log)
ending up in /var/log/messages
- rotate /var/lgo/secure
- install the default logs with permissions consistant with those
set by newsyslog.conf (and commonsense)

Move vax-specific microcode install stuff into etc.vax.

Use ${INSTALL}.

add a comment documenting what the NOOBJ variable is here for.

remove md tahoe conditionals -- we don't need them.

add a no-op 'includes' target for completeness. make 'make distribution'
do a 'make includes' as well as install, so that distribution trees will
contain includes.

install mrouted.conf, networks and rbootd.conf. pr#2288

branches: 1.51.4;
Include `usr/libdata' in snapshot (from Arne Juul; PR#1711).

New-style RCS id.

branches: 1.49.2;
distribution target should run MAKEDEV; it's both harmless for tar distributions and useful for making bootable distribution media

in the name of compatibility, link /etc/rmt -> /usr/sbin/rmt, since
"/etc/rmt" is hardcoded into many old rmt-using programs.

update for new mtree, and a bit or paranoia!

motd defaults to 664 root:wheel, and the mode is not changed every reboot

update to new security script

create skey password file

move bootpd from othersrc to libexec. add bootptab file

add default ftpchroot (with bogus entry) for the latest ftpd mods

add 'snapshot' target, including machine-dependent targets

daily, montly, weekly no longer special

msgs stuff

dtrt with /var/cron/log

make DESTDIR in distrib-dirs if it doesn't already exist.

slight consistency

install a prototype sendmail.cf

fix jtc's recent Makefile.inc change, and be paranoid about 'make distribution'

pull ttys out of ${MACHINE}

Include etc.${MACHINE}/Makefile.inc if it exists.
This will allow us to separate machine dependant and machine independant
install stuff/make targets/etc.

Use mtree to install ${DESTDIR}/usr

Use mtree to install ${DESTDIR}/var

Have to create ${DESTDIR} before mtree can do its thing.

Remove lots of mkdirs/chmods/chowns and enable root "mtree".

Added mtree commands to distrib-dirs target.
(Currently commented out until mtree files are updated)

Add at(1) directories to distrib-dirs.

Create /var/msgs.

Add RCS identifiers.

do the right thing with TZDIR

fix stupid vi typo

fix makefile for new f***ing cron, once and for all.

adjust owner/group for new cron security checking