Attach tradcpp to the build.

build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

mk: Add a MKPPP flag to exclude pppd(8) and related utilities from
the build

mk: Add MKNTP, MKTCPDUMP knobs.

Avoid duplicate directory traversals when building Elftoolchain sources.

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

mk: Add a MKPPP flag to exclude pppd(8) and related utilities from
the build

mk: Add MKNTP, MKTCPDUMP knobs.

Avoid duplicate directory traversals when building Elftoolchain sources.

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

mk: Add a MKPPP flag to exclude pppd(8) and related utilities from
the build

mk: Add MKNTP, MKTCPDUMP knobs.

Avoid duplicate directory traversals when building Elftoolchain sources.

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

mk: Add MKNTP, MKTCPDUMP knobs.

Avoid duplicate directory traversals when building Elftoolchain sources.

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

Avoid duplicate directory traversals when building Elftoolchain sources.

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

Rename blacklist -> blocklist

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

Enhance MKSANITIZER support

Add i386 support for LLVM sanitizers.

Add new build phases do-sanitizer-* for building LLVM sanitizers after libs
and before other programs. This phase is important as sanitizers need
to link with libs and sanitized programs must link with sanitizer runtimes.

Add LLVM sanitizers in the MKLLVM=yes build

Enable in all the supported variations for NetBSD/amd64:

- Address Sanitizer
- Thread Sanitizer
- Memory Sanitizer
- Undefined Behavior Sanitizer
- SafeStack
- libFuzzer
- XRay

This change enables the features on amd64 for start.

branches: 1.63.2;
Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

descend into jemalloc too.

add libnv build glue

unhook bind

branches: 1.59.2;
moved dhcp to mpl

branches: 1.58.8;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Enable bc.

branches: 1.56.2;
Add nsd

unbound additions

branches: 1.54.2;
neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace support, since
many archs are not supported.

libproc and librtld_db build fine without CTF and should always be available.

librtld_db depends on libproc, so conditionalize it as well

Conditionalize libproc here as well (why is it entered twice anyway?)

Hook up libproc and librtld_db into the build

hook into blacklist

branches: 1.47.2;
Add ekermit to the build.
It will replace gkermit, as proposed in tech-userlevel on 7 Aug 2014.

branches: 1.46.2;
Add smbfs

hook ppp

switch to new nvi

Typo

Optionally recurse into libc++.

hook in the new dhcp code

move pdisk

Descend into kyua-atf-compat when MKKYUA!=no.

Descend into kyua-cli when MKKYUA!=no.

Enable the build of kyua-testers and register its files and directories.
This is conditional on MKKYUA.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

This has no business going to the crypto tree and building it.

Add elftosb tools to evbarm userland and toolchain.
Elftosb is used to create a digitaly signed "secure boot" file.
This sb file can be booted by the first stage boot loader found in
Freescale i.MX23 and i.MX28 application processors.

Copyright (c) 2004-2010 Freescale Semiconductor, Inc.

Style fix: keep lists of names sorted.

Reviewed by: christos

branches: 1.32.2;
Engage ipf

Hook in tree

branches: 1.30.2;
Build the new version of "less".

Enable the build of tmux and add the necessary directory and file entries.

Switch the build to use the new location of ACPICA.

Add LLVM and clang build system. It is enabled by MKLLVM=yes.
Upstream sources can be fetched by running "make checkout" in
src/external/bsd/llvm, they will be properly imported once the
integration and missing features are sorted out.

branches: 1.26.2;
hook tcpdump and libpcap

hook in ntp 4.2.6 reachover build (new location in external/bsd/ntp)

Hook wpa stuff 0.7.2

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

unhook old cron, hook new one.

Plug liblzf into build. Liblzf is a small (3504 byte shared library on i386),
very very fast, 2-clause BSD-licensed compressor. We provide the LZF_STATE
version of the API, which is not the default for generic liblzf.

Hook openresolv into build.

switch build to use libevent-1.4.12-stable from external

give yacc's proper name

add yacc

re-add flex.

unhook flex for now

add new flex

Hook up mdocml.

Switch over to building iscsi library, target and initiator from the
external framework.

branches: 1.11.2; 1.11.4;
hook file

hook bind

branches: 1.9.2;
Add the build glue and sets information for the libopenpgpsdk library, and
the openpgp binary.

Enable the build of ATF.

branches: 1.7.2; 1.7.4; 1.7.10;
Hook up libfetch and pkg_install update.

Switch to libarchive in src/external/bsd.

Hook am-utils

branches: 1.4.2;
Add pcc build framework.

Update build glue for dhcpcd 4.0.0rc3 and move it to
src/external/dhcpcd.

Make dhcpcd quiet by default when run from rc.

more Makefile glue

branches: 1.1.2; 1.1.4;
Descend into openldap

remove SMBFS and nsmb/netsmb - userland part

Remove trailing " from pam-u2f subdir name

conditionalize on mkpam

Add libfido2 and pam-u2f