revert previous - it doesn't mean what i thought and some builds broke.

skip sanitizers if MKSANITIZER "no".

lib: Handle various external lib directories with build_install.

This way, update builds track shlib major bumps correctly.

For example, suppose you had built Heimdal's libkrb5.so.27 and
libgssapi.so.11 linked against it, and then you updated past the recent
shlib major bump raising them to libkrb5.so.28 and libgssapi.so.12.

Without this change, the build will make the following sequence of
targets (interleaved with some others):

1. make dependall in libkrb5
2. make dependall in libgssapi
3. make install in libkrb5
4. make install in libgssapi

The existing .WAIT tags in SUBDIR ensure that (1) happens before (2)
and (3) happens before (4). Unfortunately, this sequence is wrong,
because it will produce the following effect:

1. make dependall in libkrb5 builds libkrb5.so.28
2. make dependall in libgssapi builds libgssapi.so.12, linked against
libkrb5.so.27
3. make install in libkrb5 installs libkrb5.so.28
4. make install in libgssapi installs libgssapi.so.12

Why the out-of-date libkrb5.so.27 in step (2)? Because we just pass
-L${DESTDIR}/usr/lib -lkrb5 to the linker (or the equivalent with
--sysroot and implied -L/usr/lib), and ${DESTDIR}/usr/lib still has
only libkrb5.so.27 by the time of step (2), not libkrb5.so.28.

Now any applications that link against libkrb5.so _and_ libgssapi.so
will get libkrb5.so.28 and libgssapi.so.12 -- but transitively, via
libgssapi.so.12, they will also get libkrb5.so.27, which is a recipe
for disaster.

Splicing the Heimdal library subdirectories into lib/Makefile, as
this does, ensures that we run make dependall _and_ make install in
libkrb5 _before_ make dependall in libgssapi, giving the following
correct sequence:

1. make dependall in libkrb5 builds libkrb5.so.28
2. make install in libkrb5 installs libkrb5.so.28
3. make dependall in libgssapi builds libgssapi.so.12, linked against
libkrb5.so.28
4. make install in libgssapi installs libgssapi.so.12

Note that LIBDPLIBS isn't enough here, as implemented. LIBDPLIBS
ensures that the incremental build will remake libgssapi.so. But it
doesn't ensure that the new libkrb5.so.28 is available before then,
so it doesn't prevent this problem.

We use the same mechanism for crypto/external/bsd/openssl/lib
already; this just extends it to other external library collections.

As an alternative, in principle perhaps we could teach LIBDPLIBS to
ensure that libkrb5.so comes out of the libkrb5 objdir, and not out
of ${DESTDIR}/usr/lib. But that requires some work to make happen,
and make it reliable, whereas this approach we've already confirmed
works without other adverse consequences (besides leaving
grody-looking mechanism lying around) for the libcrypto major bump
already. We need to get this pulled up to the branch so all the
other major bumps it required are handled correctly by update builds.

XXX pullup-10

lib/Makefile: Hook libgmp also for MKGDB=yes build

Now, gdb 13 can be built by clang, at least on amd64.

Include the OpenSSL Makefile fragment so that build_install works on each
OpenSSL subdirectory.

branches: 1.294.2;
Introduce libc_aligned.so for evbppc-powerpc32, which provides
strictly-aligned versions of memcmp(3), bcopy(3), memcpy(3), and
memmove(3).

This is used for 403 by ld.so.conf with machdep.no_unaligned variable.

With this library, unaligned memory accesses are significantly reduced
for 403 (from several hundreds to few tens per sec under heavy load);
only ld.elf_so (typically few times per fork) and statically-linked
binaries do such access.

cgdconfig(8): Add an argon2id password-based key generation method

This provides an extra level of side-channel and cracking resistance
compared to the pre-existing pkcs5_pbkdf2/sha1 method used for
password-based disk encryption.

Several new keygen parameters are supported:

memory (integer, in kilobytes)
parallelism (integer, usually the number of CPU cores)
version (integer, usually 19...)

We do our best to calibrate these automatically when the paramsfile
is initially generated.

lgtm riastradh@

Use ${MACHINE_MIPS64}

Avoid duplicate directory traversals when building Elftoolchain sources.

Redo r1.288: traverse the complete imported Elftoolchain tree during a build.

Attempt to unbreak the build by reverting r1.288.

Traverse the complete imported Elftoolchain tree during a build.

Add blocklist support to libwrap which enables all programs using libwrap
to block access from hosts we deny. (libwrap support from Greg A. Woods)

lib: Move sqlite, since it depends on libm

Add HAVE_NVMM and use it to control the build of NVMM related components.
Defined to "yes" on amd64, "no" everywhere else.

Rename blacklist -> blocklist

Add libuv

remove smbfs

libp2k still needs to be under MKRUMP

pam and tpm have nothing to do with rump, so limit them to the libraries that
need MKRUMP. (from Tobias Nygren)

move the pam module after the trench where pam is being build

Comment that libpam depends on libssh.

Move libpam to the next trench since it depends on ssh

Remove unfinished hack I accidentally committed in 2017.

This caused make to unconditionally take ages running useless
submakes in every subdirectory. Accidentally committed during the
MKCRYPTO option removal when I was presumably experimenting with
automating library dependency generation in lib.

Should shave a few seconds at least off every build!

Add libcbor, libfido2

move file/lib after xz

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

fix MKCXX=no:
- don't build GDB
- don't build sanitizers
- don't build GCC commands
- fix some set lists

branches: 1.271.2;
Don't build compat LLVM PIC libraries since it is unused if MKCOMPATX11 == "no".

Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

add libjemalloc for the non-standard jemalloc symbols.

revert previous.

This breaks 64bit builds, it attempts to build a compat library too
and it fails to find headers for it.

Traverse into external/bsd/llvm/lib when building libraries.

This allows things that occur after lib (like do-x11) to depend on llvm
libraries already existing.

We need libexecinfo, so adding llvm after the 2nd library barrier.

move sqlite earlier in its section. my build often sits with only 3
processes active here for quite some time otherwise.

Too much magic involved - revert previous.

Move conditionals for libnvmm to subdir makefile, requested boy mrg.

Do not build a compat i386 version of libnvmm.

Add libnvmm, NetBSD's new virtualization API. It provides a way for VMM
software to effortlessly create and manage virtual machines via NVMM.

It is mostly complete, only nvmm_assist_mem needs to be filled -- I have
a draft for that, but it needs some more care. This Mem Assist should
not be needed when emulating a system in x2apic mode, so theoretically
the current form of libnvmm is sufficient to emulate a whole class of
systems.

Generally speaking, there are so many modes in x86 that it is difficult
to handle each corner case without introducing a ton of checks that just
slow down the common-case execution. Currently we check a limited number
of things; we may add more checks in the future if they turn out to be
needed, but that's rather low priority.

Libnvmm is compiled and installed only on amd64. A man page (reviewed by
wiz@) is provided.

Add libnv

switch to the new bind.

Retire libpmc. It uses the legacy PMC interface in the kernel, which has
support for only one ARM CPU. It used to have x86 support, but it was broken
and I removed it. The legacy PMC interface will be removed from the kernel
too. Sent on tech-kern@ yesterday, thorpej was fine.

branches: 1.258.2;
put back lsan

merge a new version of the CDDL dtrace and ZFS code.
this changes the upstream vendor from OpenSolaris to FreeBSD,
and this version is based on FreeBSD svn r315983.

in addition to the 10 years of improvements from upstream,
this version also has these NetBSD-specific enhancements:
- dtrace FBT probes can now be placed in kernel modules.
- ZFS now supports mmap().

Hello libbozohttpd(3)
Enabling as it is a dependency for bozohttpd(3lua).

Add the netpgp lua bindings so that the compat build can build them.

branches: 1.254.2;
switch everyone to openssl.old

Add a library for the rump resolver interception code so that it will become
easier to hide resolver internals later.

don't build gmp/mpfr/mpc if we're not building GCC commands (MKGCCCMDS==no.)

branches: 1.251.2;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

GC deprecated logic. GCC 4.8 is not in tree any more.

libpthread_dbg(3) deletion from the base distribution

libpthread_dbg(3) is a remnant library from the M:N thread model
(pre-NetBSD-5.0) API to introspect threads within a process and for use
of debuggers.

Currently in the 1:1 model it's not used in GDB neither in LLDB and it's
not either planned to be used. It's current function to read pthread_t
structures is realizable within a regular debugger capable to
instrospect objects within a tracee (GDB, LLDB...).

Remaining users of this API can still use this library from
pkgsrc/devel/libpthread_dbg.

Sponsored by <The NetBSD Foundation>

branches: 1.248.2;
build libc_fp only on mips64*

build and install libc_fp on mips
use with LD_PRELOAD=/lib/libc_fp.so for FPU use via softfloat

unbound additions

branches: 1.245.2;
conditionalize

add ubsan

sanitizer for all.

Asan is back

don't build libmudflap* for GCC 5.3.

also, disable libasan here as well (for now).

Skip libctf if MKCTF=no irrespective of MKDTRACE, for real.

Apparently this logic is copied in lib/Makefile and in
external/cddl/osnet/lib/Makefile. Is the latter even used?

use EXTERNAL_BINUTILS_SUBDIR

switch to the external version of libmalloc

Move blacklistd later now that it depends on libpthread (From Rin Okuyama)

Plug-in libpanel(3): Z-order for curses windows

Neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace since many
archs are not supported.

we always build librtld_db and libproc.

librtld_db depends on libproc, so conditionalize it as well

libproc depends on libctf, so conditionalize it with the same condition

make dtrace follow libproc.

Hook up libproc and librtld_db into the build

Restrict libc_vfp to NetBSD/arm. It doesn't make sense for aarch64.

move libctf after the barrier since it depends on libz

Possibly build libc_vfp if MACHINE_CPU is aarch64 too.
Use AFLAGS to pass -mfpu=vfp

Add DTRACE and CTF libraries

Add libraries created by MKZFS != "no"

Build external/gpl3/lib/libmudpath{,th} so that MKCOMPAT picks it up

libasan depends on libstdc++ so move it under the wait barrier.

xz/lib depends upon pthread so move it to the 1st dependancy point.
libarchive/lib depends upon xz, so move to the 2nd.

hook into blacklist

Try to future-proof this. Can libasan be built by clang?

HAVE_GCC might not be defined at all...

Only visit libasan if ${HAVE_GCC} == "48"

add asan to the libraries we build.

branches: 1.215.2;
remove the build support for GCC 4.1, and any hacks i found for it.

there could still be more -- i only looked for lines matching
both "HAVE_GCC" and "4" as words (grep -w.)

Move libsjjit and libbpfjit to the pre-dependency section and remove
the unnecessary .WAIT. They are both marked LIBISPRIVATE, which does
mean no link is performed, and there are no dependencies.

Retire USE_COMPILERCRTSTUFF=yes.

branches: 1.212.2;
switch to the elftoolchain code.

prepare for moving GCC 4.5 into gcc.old:

- convert to using ${EXTERNAL_GCC_SUBDIR}
- define base-external-gpl3-gcc* subdir as GCC_SUBDIR
- use <bsd.init.mk> over <bsd.own.mk> for a bunch of places; mostly
because it arranges for ../Makefile.inc to be included earlier, and
don't bother including the latter if the former is already included.
- move all .PATH: settings after <bsd.{own,lib}.mk> so that all
valid variables are set before it is evaluated
- rename mknative-gcc* to match their subdir name.

XXX the relationship between the Makefile.inc/Makefile.gcc_path files
is kind of sketchy, it would be great if this was fixed.

add smbfs library

update to MPC 1.0.1.

move netpgp, lua and npf libraries to depenancy points after the
libraries they depend upon. netpgp wants libz, lua wants libm,
and npf wants libnpf.

If a library needs a symbol from another library, pull that library in
explicitly, even if the DT_NEEDED closure would normally already ensure
the presence.

Don't build compat versions libkern.a

Build libkern

libbind now depends on heimdal, so push it after the third barrier.

Introduce MKLIBSTDCXX, defaulting to yes.

Add build glue for libc++.

Detect earm*hf* in a cleaner manner

Build libc_vfp on earm as well. Fix the sets.

build libevent later.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

Enable building/installing libc_vfp for MACHINE_ARCH arm/armeb

descend into libnetpgpverify so that the compat entries are picked up

Move the build_install logic from lib/Makefile into share/mk and re-use
it for tools. The existing logic broke for the LLVM build with the
recent .ORDER changes in make.

Add libbpfjit library.

Build sljit test when MKSLJIT != no and set MKSLJIT to yes on amd64 and i386.

put a wait barrier between trousers and tpm-tools

fix typo

hook in TPM

Implement dynamic NPF extensions interface. An extension consists of
dynamically loaded module (.so) supplementing npfctl(8) and a kernel
module. Move normalisation and logging functionality into their own
extensions. More improvements to come.

branches: 1.188.2;
Implement build_install in src/lib/Makefile, which traverses the
subdirectories and invokes dependall/install. Do this in groups
delimited by .WAIT to ensure that depending libraries can use the
installed versions and don't need to know the locations in the source
tree.

Use this new target in src/Makefile to replace most of the adhoc library
logic with two special cases, src/lib and src/compat. Adjust
sys/Makefile to include the module directory when building them. Add
some necessary .WAITs in src/lib/Makefile to reflect the dependencies
from src/Makefile and also add the rump libraries here.

exclude rump libraries if MKRUMP = no

don't mention the indirect libm dependency.

move atf down to fix the build

Place SUBDIR+= libexecinfo properly based on its dependency on libelf.

hook in libexecinfo

Move "libexpat" from X11 into base which fixes PR lib/40346.
This change was approved by the Core Group.

branches: 1.181.2;
Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.

hook in tre

branches: 1.179.2;
Hook up SQLite into the build

Descent into lua.

add libgomp to this list of libs; so compat finds it properly.

Build and install ppath(3), property-list paths library.

sort, and move some things up the list after heimdal was moved
to its own directory. removes one dependency barrier.

only build libgmp, libmpfr and libmpc when (MKGCC != no) and
they can be together since only the .a is built, with no
other dependencies

build GMP, MPFR and MPC as private libraries just for GCC. don't
install the headers or librarys into the system.

someone who really cares could make them shlibs again and have them
installed into eg, /usr/lib/gcc. not convinced it is worth it.

Distribute libmpfr and libmpc across the dependency barriers so that
additional .WAITs are not needed.

add .WAIT's between libgmp and libmpfr, and between libmpfr and libmpc.

re-enable the gcc 4.5 crtstuff/libgcc builders now that they work.
also build the gmp, mpfr and mpc libraries in this case.

fix the paths for GCC 4.5. don't build the non-tools gmp/mpfr/mpc libs
yet since we don't have them fully working. XXX.

add HAVE_GCC=45 support.

branches: 1.167.2;
Enable the build of perfused and libperfuse

Upgrade Heimdal to 1.5pre1 by switching the build from crypto/dist/heimdal
to crypto/external/bsd/heimdal. The latter was just imported as the head
of the Heimdal tree as of a few days ago.

Add a new libquota library, which contains some blocks to build and/or
parse quota plists; as well as a getfsquota() function to retrieve quotas
for a single id from a single filesystem (whatever filesystem this is:
a local quota-enabled fs or NFS). This is build on functions getufsquota()
(for local filesystems with UFS-like quotas) and getnfsquota();
which are also available to userland programs.
move functions from quota2_subr.c to libquota or libprop as appropriate,
and ajust in-tree quota tools.
move some declarations from kernel headers to either sys/quota.h or
quota/quota.h as appropriate. ufs/ufs/quota.h still installed because
it's needed by other installed ufs headers.
ufs/ufs/quota1.h still installed as a quick&dirty way to get a code
using the old quotactl() to compile (just include ufs/ufs/quota1.h instead of
ufs/ufs/quota.h - old code won't compile without this change and this is
on purpose).
Discussed on tech-kern@ and tech-net@ (long thread, but not much about
libquota itself ...)

Need to build libsaslc

Make liblzf and the lvm2 libraries during the library stage. This also makes
them get built for MKCOMPAT.

Initial import of libdm and dmctl to tree. libdm library can be used
to access, manage and manipulate device-mapper driver. Which opens us bunch
of new possibilities like

dm-multipath device target
dm-crypt device target
dm-ccd compatibility layer

With this import I'm bringing in dmctl tool for working with dm driver ,too.
I plan to replace gpl2 licensed dmsetup command with our dmctl tool in near
feature. It can also by placed to /rescue where we was not able to put
dmsetup because of licensing problems.

With libdm in tree we can now write RUMP atf test suite for dm driver to
ensure LVM subsystem stability as time goes.

Reviewed by: blymn@ and rmind@
Oked: by no objections on tech-userlevel@

NPF checkpoint:
- Add libnpf(3) - a library to control NPF (configuration, ruleset, etc).
- Add NPF support for ftp-proxy(8).
- Add rc.d script for NPF.
- Convert npfctl(8) to use libnpf(3) and thus make it less depressive.
Note: next clean-up step should be a parser, once dholland@ will finish it.
- Add more documentation.
- Various fixes.

branches: 1.160.2;
hook librumphijack to the build

Hook libisns into the build, and modify the set lists accordingly.

Note the addition of iSNS protocol support in doc/CHANGES

With thanks to Wasabi Systems for contributing the code.

rearrange libraries to reduce the number of .WAITs (14 -> 6)
during that, fix some outdated comments & list dependents

rumpcrypto should never have been its own faction, so finally make
it a component under kern, i.e. rumpcrypto -> rumpkern_crypto.

hook new libpcap

Remove the do-external-lib and do-gnu-lib targets, along with
external/lib/Makefile and crypto/external/lib/Makefile, replacing
them all with SUBDIRs directly from lib/Makefile.

compat/compatsubdirs.mk becomes simpler now, as everything is built
from lib/Makefile, meaning all the libraries will now be built under
compat so update the set lists to account for that.

build the ldap libraries; am-utils needs them.

Add library for rump syscall client stubs.

Link Lua to the build and add the resulting files to the distribution sets.
Document the addition of Lua and the change we made to the default settings.

Add a .WAIT statement after libmj, should fix a transient problem observed
by moof.

fix the build; we need libmj installed before compiling netpgp binaries.

Userland now builds and uses terminfo instead of termcap.

OK: core@, jdc@

avoid some subdirs that need -lcrypto, for MKCRYPTO=no.

switch build to use libevent-1.4.12-stable from external

hook the new flex.

back to old lex

hook the new flex library

Build & install rumpdev, a device component for rump. It currently
supports autoconf and is required for example by pseudo-device rump
components.

install librumpcrypto component: kernel crypto routines

OpenSSL moved to crypto/external

Switch over to building iscsi library, target and initiator from the
external framework.

build libnetpgp and libssh earlier.
look for libssh in the right place.

Disconnect ssh

remove libsdp as improved functionality has been enabled in libbluetooth.

unhook libmagic

External stuff does not belong here. It is handled by external/lib when
descending to external from the top level. At least this is the theory
as I understand it.

unhook bind libraries

branches: 1.133.2;
put back the atf libraries in here, but find them in external.
fixes compat builds.


XXX: src/Makefile do-compat-external-lib not be necessary now.

Remove ATF 0.5 from dist/atf and all of the reachover Makefiles used to
build it. 0.6 is going to be imported in external/bsd/atf, with all the
necessary Makefiles in that same hierarchy.

LIBDPLIBS on librumpvfs

Split vfs out of rumpkern into rumpvfs. Non-fs rumps no longer
include the file system code. File system rumps explicitly need
to include rumpvfs from now on.

Now that MKPUFFS is default, kill it as advertised.
While there, give puffs and refuse files sensible syspkg entries.

branches: 1.128.2;
build librumpnet

Switch to libarchive in src/external/bsd.

Install rump libraries and utilities to the base system and remove the
private non-installed build infrastructure from sys/rump.

breakdown of commit:
* install relevant headers into /usr/include/rump
* build sys/rump/librump/rumpuser and sys/rump/librump/rumpkern
from src/lib and install as librumpuser and librump, respectively
+ this retains the ability to test a librump build with just the
kernel sources at hand
* move sys/rump/fs/lib/libukfs and sys/rump/fs/lib/libp2k to src/lib
for general consumption, they are not kernel-space dwellers anyway
* build and install sys/rump/fs/lib/lib$fs as librumpfs_$fs
* add chapter 3 manual pages for rump, rumpuser, ukfs and p2k
* build and install userspace kernel file system daemons if MKPUFFS=yes
is spexified
* retire fsconsole for now, it will make a comeback with an actually
implemented version shortly

Test MKATF variable to compile ATF libs.

Tie in ../external/lib after the "2nd" dependency barrier.
Move libpam to after a "3rd" dependency barrier, since PAM modules
may depend upon external/lib libraries such as libldap.

branches: 1.123.2;
Remove the libatf library and add libatf-c and libatf-c++; per import of
atf-0.5.

branches: 1.122.2;
Import Heimdal-1.1

libform and libmenu need libcurses.

branches: 1.120.4;
Add the libatf library

This adds reachover Makefiles to build the libatf library and enables it in
the parent Makefile.

Things to review in this change:

* Add proper version numbers in the shlib_version files.

* Is libatf properly listed in lib/Makefile? It theoretically needs
libstdc++, but the resulting binary library is not linked against it.

Describe libpthread dependency correctly and put bind libs in list of
dependent libs after .WAIT barrier in lib/Makefile. Fixed build lossage
pointed out by smb.

Remove MKPRIVATELIB from BIND libraries; move library reachover
directories and Makefiles from src/usr.sbin/bind to src/lib; make
BIND libraries build shared. Saves about 1MB-1.5MB per installed
executable, about 5MB for a base+etc minimal installation of NetBSD.

branches: 1.117.4; 1.117.6;
Add build glue for libarchive and update the various sets.

Move FORTIFY_SOURCE implementation from the somewhat ill-named "libssp"
(what other systems keep in libssp, we already have in libc) into libc
to match what other systems with FORTIFY_SOURCE do. Goodbye, libssp
dependency in libraries and executables. Discussed with christos and
mrg; Christos will merge the headers to get us the rest of the way to a
FORTIFY_SOURCE implementation that works as others' code expects.

Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

insert .WAIT between libcom_err and libasn1.

descend into librefuse if building with MKPUFFS

libpam also depends on libkafs now, so .WAIT before building it.

branches: 1.111.2;
fix typo.

Add libssp.

add libpuffs - the userspace programming interface for puffs

This work was initially started and completed for Google SoC 2005
and tweaked to work a bit better in the past few weeks. While
being far from complete, it is functional enough to be able and
stable to host a fairly general-purpose in-memory file system in
userspace. Even so, puffs should be considered experimental and
no binary compatibility for interfaces or crash-freedom or zero
security implications should be relied upon just yet.

The GSoC project was mentored by William Studenmund and the final
review for the code was done by Christos.

Make sure "libmagic" gets built after "libz".

.WAIT before libroken.

add support for MKISCSI=no.

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

Support for building proplib in userspace.

do not build or install libcdk as a part of base anymore
cdk source still lives in dist however

approved by core@

Goodbye KerberosIV

libkadm5srv and libkadm5clnt uses libhdb, add a .WAIT.

Add proper DT_NEEDED dependencies. From Jukka Salmi

Reachover support for the library version of the iSCSI target.

move libradius to build after libcrypto.

Provide the minimum set of .WAIT barriers, adding explanatory comments.
From Patrick Welche, many thanks.

Libedit depends on libterm. From Patrick Welche

branches: 1.95.2; 1.95.4; 1.95.6;
Build libradius, imported from FreeBSD

Don't build libpam and associated bits if the target platform doesn't
support shared libraries (sun2 and evbsh5 at it would seem), or if the
user has specified MKPIC=no. Also introduce a new tag to the set lists
("pam"), so that the non-shlib ports can once again complete a release
build.

Discussed with christos and lukem.

Implement libssh as a public library, as pam_ssh needs it.

Move libpam until after everything that it depends upon.
Fixes build that starts with empty OBJ and DEST dirs.

Build libpam last because the modules need to access other libraries.

Descend into libpam.

Implement DEPLIBS (in Makefile.inc for now), which adds all the listed
libraries to LDADD & DPADD for the current library, using -L OBJDIR-of-DEPLIB
so that the current library can link with the DEPLIB library built but
not installed.

Set DEPLIBS appropriately, rather than explictly adding LDADD/DPADD
for various libraries.

Reorder library build order so that libraries that depend upon any
other library are built at the end.


Whilst this change could be done in a more generic manner (and I
intend to work on that), it does remove the need to implement
top-level build targets such as "do-lib-des" (etc).

Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no)
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist
complained of missing files.

* move kerberos- and kerberos 4-only files into new flists,
distrib/sets/lists/*/krb.*

* make the flist generators grok MKKERBEROS{,4} variables

* fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no.
9 out of 10 experts agree that it is ludicrous to build w/
KERBEROS4 and w/o KERBEROS5.

* fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no.

* omit some Kerberos-only subdirectories from the build as
MKKERBEROS{,4} indicate

(I acknowledge the sentiment that flists are the wrong way to go,
and that the makefiles should produce the metalog directly. That
sounds to me like the right way to go, but I am not prepared to do
revamp all the makefiles. While my approach is expedient, it fits
painlessly within the current build architecture until we are
delivered from flist purgatory, and it does not postpone our
delivery. Fair enough?)

libkafs is needed for both krb4 and krb5. lha

go down to libdes

enable building the library and the regression test

Turn on the building and installing of libbsdmalloc.

descend into libmagic

Add librt, which provides POSIX 1003.1b Real-time extensions not
present in libc. Currently includes 1003.1b semaphores.

put libpthread back. I don't think that it will cause ABI issues.

disable pthread support for now, as there will be abi changes.

Descend into libpthread and libpthread_dbg.

visit libcrypto_mdc2 if MKCRYPTO_MDC2 is defined

Build libpmc.

branches: 1.76.2;
Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

refine i18n stuffs.
- add libc/citrus directory.
this directory contains the common stuffs not only for locale
but also other facilities relating to i18n (e.g. iconv).
- To keep the binary compatibility for the ctype modules easily,
the interface between libc and the modules is simplified.
- For the future integrated extension, module pool is renamed
from "/usr/lib/runemodule" to "/usr/lib/i18n".
In the future, this directory will contain the modules for "iconv",
"collation", etc.
- some cosmetic changes.
- Bug fix for runetype.h; __attribute__((__packed__)) is placed at
the wrong position and it is invalid unintentionally.
But, the all members of the structures seem well-aligned. Thus,
this bug causes no problem, hopefully.

HEADS UP:
- /usr/lib/rumemodule is obsoleted. If you use the multibyte locales,
you need to install /usr/lib/i18n/* from sys/lib/i18n_module .
- The binary compatibility of /usr/share/locale/*/LC_CTYPE is probably kept.
Perhaps, the bug fix about __packed__ mentioned above breaks the
compatibility... Be careful especially on 64bit platforms.

s/usb/usbhid/

Build libc (and its lint libraries) before all other libs, as llib-lc.ln
is needed in order to build useful lint libraries for the rest.

Build libpci.

remove libkadm5 - it is not being used for anything useful

build multibyte locale modules. installed into /usr/lib/runemodule and
dynamically loaded at runtime.

Added libform.

Enable the build of libcdk

always build libintl (don't check MKNLS).
MKSHARE=no turns off MKNLS (sets it into "no") and /usr/src/Makefile builds
src/lib with MKSHARE=no.
From: Juergen Hannken-Illjes <hannken@eis.cs.tu-bs.de>

do not build libintl if MKNLS=no

enable lib/libintl.

repair openssl (libcrypto) for non-32bit architecture.
don't use unsigned long where 32bit unsigned variable is asked for.
use u_int32_t. (not sure if uint32_t is better or not, but anyway,
u_int32_t <-> uint32_t should not raise binary compatibility issue)
PR10921.

TODO: have arch-dependent Makefiles where we supply -DFOO for optimization.
(do not change size of variable though)

XXX: we should actually nuke all other #ifdef in /usr/include/openssl/*.h,
however, that needs a lot of work and will make future openssl upgrade harder.

remove RC5 and IDEA by default. build them separately as
libcrypto_{rc5,idea}.a. put dummy function, which is "warning to stderr
and exit(1)". NOCRYPTO_{RC5,IDEA} are obsoleted.
PR10883.

update build infrastructure for heimdal 0.3a, including new shlib versions

Add MK... variables to enable/disable various aspects of building
crypto support into the system. See share/mk/bsd.README for more
a full description.

branches: 1.61.2;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

Build libcrypto and libssl.

branches: 1.59.2;
Don't build libntp anymore.

Remove unused libahdi.
It will be replaced in the future with a more generic libdisklabel.

Add libahdi entry.

Added the libmenu library.

branches: 1.55.4;
optionally include CRYPTOPATH Makefile.frag files.

Use bsd.crypto.mk.

ipsec support library.
mainly for debugging, and policy text->binary conversion. NO crypto code
is included so it is export safe.

Treat crypto-us like domestic.

Don't forget to build libusb.

Always descend on `make obj', too, to allow developers to switch between
defined and undefined EXPORTABLE_SYSTEM without rerunning `make obj'.

Descend into libbz2.

distclean is a synonym for cleandir

libkvm.old is dead.

Simplify libkvm.old test ... MACHINE_ARCH == "mips"

The i386 port uses libkvm, not libkvm.old now.

NetBSD/x68k now use libkvm instead of libkvm.old

Add libossaudio.

Switch from libkvm.old to libkvm for the arm32 port.

Please update your repository before you do a commit.

s/else/endif/ and remove the endif line for make(clean) || make(cleandir).

move man pages into share/man.

Fix a spelling error in a comment.

Exchange the test for libkvm and libkvm.old. This makes it easier to see
which port still use the old libkvm.

Vax now uses new libkvm.

Add libposix.

mvme68k uses new crash dump format now.

mac68k uses new libkvm, now.

Add libntp

hp300 uses new libkvm now

descend unconditionally for clean and cleandir targets

Build libkvm on the PowerPC.

Add sun3x to the list of those using the (new) libkvm.

The pc532 port now uses the new libkvm.

add libwrap.

sparc: libkvm.old => libkvm

Fix spelling error, add alpha to list of ports that use new libkvm

add libz

Build librmt.

include bsd.own.mk at the top, so checks of EXPORTABLE_SYSTEM work as
intended.

branches: 1.20.4;
The amiga now does kernel crash dumps using the new libkvm and savecore.

The sun3 now does kernel crash dumps using the new libkvm and savecore.

New libkvm/savecore implementation. With the following differences:
1) savecore will not access the dump or live-kernel directly. It
will always use the kvm-functions. Allowing it to work on kernels
that don't have a 1-1 PA-VA mapping.
2) the kvm-lib has some additional functions to accomplish 1
- kvm_dump_mkheader()
- kvm_dump_wrtheader()
- kvm_dump_inval()
3) the file formats of the dump generated by the kernel and the dump
generated by savecore have been changed. The file format now looks
like the format produced for 'normal' core dumps.
Ports not yet supporting the new kvm-format will be using libkvm.old/
savecore.old for the time being.

Only build exportable telnet/libtelnet if the domestic version doesn't
exist in the source tree or defined(EXPORTABLE_SYSTEM). This works around
the fact that telnet(1) will break during a "make build" because the
exportable libtelnet will get installed while the domestic telnet(1) binary
is still in place. (XXX)

Make libpcap.

alphabetize

add libskey

add libedit

add libl

add libkvm

"There will be NO librpc tomorrow!"

Build libarch

Add RCS identifiers.

Build librpcsvc

move csu.${MACHINE} into a "csu" subdirectory.

moved libg++ into /usr/gnulib

added "libcrypt" to list of subdirs.

subdir is librpc; somebody was a moron...

added libcompat for compatibility routines, like ftime, etc.

branches: 1.1.1;
Initial revision

revert previous - it doesn't mean what i thought and some builds broke.

skip sanitizers if MKSANITIZER "no".

lib: Handle various external lib directories with build_install.

This way, update builds track shlib major bumps correctly.

For example, suppose you had built Heimdal's libkrb5.so.27 and
libgssapi.so.11 linked against it, and then you updated past the recent
shlib major bump raising them to libkrb5.so.28 and libgssapi.so.12.

Without this change, the build will make the following sequence of
targets (interleaved with some others):

1. make dependall in libkrb5
2. make dependall in libgssapi
3. make install in libkrb5
4. make install in libgssapi

The existing .WAIT tags in SUBDIR ensure that (1) happens before (2)
and (3) happens before (4). Unfortunately, this sequence is wrong,
because it will produce the following effect:

1. make dependall in libkrb5 builds libkrb5.so.28
2. make dependall in libgssapi builds libgssapi.so.12, linked against
libkrb5.so.27
3. make install in libkrb5 installs libkrb5.so.28
4. make install in libgssapi installs libgssapi.so.12

Why the out-of-date libkrb5.so.27 in step (2)? Because we just pass
-L${DESTDIR}/usr/lib -lkrb5 to the linker (or the equivalent with
--sysroot and implied -L/usr/lib), and ${DESTDIR}/usr/lib still has
only libkrb5.so.27 by the time of step (2), not libkrb5.so.28.

Now any applications that link against libkrb5.so _and_ libgssapi.so
will get libkrb5.so.28 and libgssapi.so.12 -- but transitively, via
libgssapi.so.12, they will also get libkrb5.so.27, which is a recipe
for disaster.

Splicing the Heimdal library subdirectories into lib/Makefile, as
this does, ensures that we run make dependall _and_ make install in
libkrb5 _before_ make dependall in libgssapi, giving the following
correct sequence:

1. make dependall in libkrb5 builds libkrb5.so.28
2. make install in libkrb5 installs libkrb5.so.28
3. make dependall in libgssapi builds libgssapi.so.12, linked against
libkrb5.so.28
4. make install in libgssapi installs libgssapi.so.12

Note that LIBDPLIBS isn't enough here, as implemented. LIBDPLIBS
ensures that the incremental build will remake libgssapi.so. But it
doesn't ensure that the new libkrb5.so.28 is available before then,
so it doesn't prevent this problem.

We use the same mechanism for crypto/external/bsd/openssl/lib
already; this just extends it to other external library collections.

As an alternative, in principle perhaps we could teach LIBDPLIBS to
ensure that libkrb5.so comes out of the libkrb5 objdir, and not out
of ${DESTDIR}/usr/lib. But that requires some work to make happen,
and make it reliable, whereas this approach we've already confirmed
works without other adverse consequences (besides leaving
grody-looking mechanism lying around) for the libcrypto major bump
already. We need to get this pulled up to the branch so all the
other major bumps it required are handled correctly by update builds.

XXX pullup-10

lib/Makefile: Hook libgmp also for MKGDB=yes build

Now, gdb 13 can be built by clang, at least on amd64.

Include the OpenSSL Makefile fragment so that build_install works on each
OpenSSL subdirectory.

branches: 1.294.2;
Introduce libc_aligned.so for evbppc-powerpc32, which provides
strictly-aligned versions of memcmp(3), bcopy(3), memcpy(3), and
memmove(3).

This is used for 403 by ld.so.conf with machdep.no_unaligned variable.

With this library, unaligned memory accesses are significantly reduced
for 403 (from several hundreds to few tens per sec under heavy load);
only ld.elf_so (typically few times per fork) and statically-linked
binaries do such access.

cgdconfig(8): Add an argon2id password-based key generation method

This provides an extra level of side-channel and cracking resistance
compared to the pre-existing pkcs5_pbkdf2/sha1 method used for
password-based disk encryption.

Several new keygen parameters are supported:

memory (integer, in kilobytes)
parallelism (integer, usually the number of CPU cores)
version (integer, usually 19...)

We do our best to calibrate these automatically when the paramsfile
is initially generated.

lgtm riastradh@

Use ${MACHINE_MIPS64}

Avoid duplicate directory traversals when building Elftoolchain sources.

Redo r1.288: traverse the complete imported Elftoolchain tree during a build.

Attempt to unbreak the build by reverting r1.288.

Traverse the complete imported Elftoolchain tree during a build.

Add blocklist support to libwrap which enables all programs using libwrap
to block access from hosts we deny. (libwrap support from Greg A. Woods)

lib: Move sqlite, since it depends on libm

Add HAVE_NVMM and use it to control the build of NVMM related components.
Defined to "yes" on amd64, "no" everywhere else.

Rename blacklist -> blocklist

Add libuv

remove smbfs

libp2k still needs to be under MKRUMP

pam and tpm have nothing to do with rump, so limit them to the libraries that
need MKRUMP. (from Tobias Nygren)

move the pam module after the trench where pam is being build

Comment that libpam depends on libssh.

Move libpam to the next trench since it depends on ssh

Remove unfinished hack I accidentally committed in 2017.

This caused make to unconditionally take ages running useless
submakes in every subdirectory. Accidentally committed during the
MKCRYPTO option removal when I was presumably experimenting with
automating library dependency generation in lib.

Should shave a few seconds at least off every build!

Add libcbor, libfido2

move file/lib after xz

Update LLVM to 10.0.0git (01f3a59fb3e2542fce74c768718f594d0debd0da)

fix MKCXX=no:
- don't build GDB
- don't build sanitizers
- don't build GCC commands
- fix some set lists

branches: 1.271.2;
Don't build compat LLVM PIC libraries since it is unused if MKCOMPATX11 == "no".

Add MKLLVMRT to build a subset of the LLVM stack for JIT purposes.
Hook up AMDGPU backend for clang.

add libjemalloc for the non-standard jemalloc symbols.

revert previous.

This breaks 64bit builds, it attempts to build a compat library too
and it fails to find headers for it.

Traverse into external/bsd/llvm/lib when building libraries.

This allows things that occur after lib (like do-x11) to depend on llvm
libraries already existing.

We need libexecinfo, so adding llvm after the 2nd library barrier.

move sqlite earlier in its section. my build often sits with only 3
processes active here for quite some time otherwise.

Too much magic involved - revert previous.

Move conditionals for libnvmm to subdir makefile, requested boy mrg.

Do not build a compat i386 version of libnvmm.

Add libnvmm, NetBSD's new virtualization API. It provides a way for VMM
software to effortlessly create and manage virtual machines via NVMM.

It is mostly complete, only nvmm_assist_mem needs to be filled -- I have
a draft for that, but it needs some more care. This Mem Assist should
not be needed when emulating a system in x2apic mode, so theoretically
the current form of libnvmm is sufficient to emulate a whole class of
systems.

Generally speaking, there are so many modes in x86 that it is difficult
to handle each corner case without introducing a ton of checks that just
slow down the common-case execution. Currently we check a limited number
of things; we may add more checks in the future if they turn out to be
needed, but that's rather low priority.

Libnvmm is compiled and installed only on amd64. A man page (reviewed by
wiz@) is provided.

Add libnv

switch to the new bind.

Retire libpmc. It uses the legacy PMC interface in the kernel, which has
support for only one ARM CPU. It used to have x86 support, but it was broken
and I removed it. The legacy PMC interface will be removed from the kernel
too. Sent on tech-kern@ yesterday, thorpej was fine.

branches: 1.258.2;
put back lsan

merge a new version of the CDDL dtrace and ZFS code.
this changes the upstream vendor from OpenSolaris to FreeBSD,
and this version is based on FreeBSD svn r315983.

in addition to the 10 years of improvements from upstream,
this version also has these NetBSD-specific enhancements:
- dtrace FBT probes can now be placed in kernel modules.
- ZFS now supports mmap().

Hello libbozohttpd(3)
Enabling as it is a dependency for bozohttpd(3lua).

Add the netpgp lua bindings so that the compat build can build them.

branches: 1.254.2;
switch everyone to openssl.old

Add a library for the rump resolver interception code so that it will become
easier to hide resolver internals later.

don't build gmp/mpfr/mpc if we're not building GCC commands (MKGCCCMDS==no.)

branches: 1.251.2;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

GC deprecated logic. GCC 4.8 is not in tree any more.

libpthread_dbg(3) deletion from the base distribution

libpthread_dbg(3) is a remnant library from the M:N thread model
(pre-NetBSD-5.0) API to introspect threads within a process and for use
of debuggers.

Currently in the 1:1 model it's not used in GDB neither in LLDB and it's
not either planned to be used. It's current function to read pthread_t
structures is realizable within a regular debugger capable to
instrospect objects within a tracee (GDB, LLDB...).

Remaining users of this API can still use this library from
pkgsrc/devel/libpthread_dbg.

Sponsored by <The NetBSD Foundation>

branches: 1.248.2;
build libc_fp only on mips64*

build and install libc_fp on mips
use with LD_PRELOAD=/lib/libc_fp.so for FPU use via softfloat

unbound additions

branches: 1.245.2;
conditionalize

add ubsan

sanitizer for all.

Asan is back

don't build libmudflap* for GCC 5.3.

also, disable libasan here as well (for now).

Skip libctf if MKCTF=no irrespective of MKDTRACE, for real.

Apparently this logic is copied in lib/Makefile and in
external/cddl/osnet/lib/Makefile. Is the latter even used?

use EXTERNAL_BINUTILS_SUBDIR

switch to the external version of libmalloc

Move blacklistd later now that it depends on libpthread (From Rin Okuyama)

Plug-in libpanel(3): Z-order for curses windows

Neither libproc or librtld_db require CTF

Restore previous: only build libproc and librtld_db for dtrace since many
archs are not supported.

we always build librtld_db and libproc.

librtld_db depends on libproc, so conditionalize it as well

libproc depends on libctf, so conditionalize it with the same condition

make dtrace follow libproc.

Hook up libproc and librtld_db into the build

Restrict libc_vfp to NetBSD/arm. It doesn't make sense for aarch64.

move libctf after the barrier since it depends on libz

Possibly build libc_vfp if MACHINE_CPU is aarch64 too.
Use AFLAGS to pass -mfpu=vfp

Add DTRACE and CTF libraries

Add libraries created by MKZFS != "no"

Build external/gpl3/lib/libmudpath{,th} so that MKCOMPAT picks it up

libasan depends on libstdc++ so move it under the wait barrier.

xz/lib depends upon pthread so move it to the 1st dependancy point.
libarchive/lib depends upon xz, so move to the 2nd.

hook into blacklist

Try to future-proof this. Can libasan be built by clang?

HAVE_GCC might not be defined at all...

Only visit libasan if ${HAVE_GCC} == "48"

add asan to the libraries we build.

branches: 1.215.2;
remove the build support for GCC 4.1, and any hacks i found for it.

there could still be more -- i only looked for lines matching
both "HAVE_GCC" and "4" as words (grep -w.)

Move libsjjit and libbpfjit to the pre-dependency section and remove
the unnecessary .WAIT. They are both marked LIBISPRIVATE, which does
mean no link is performed, and there are no dependencies.

Retire USE_COMPILERCRTSTUFF=yes.

branches: 1.212.2;
switch to the elftoolchain code.

prepare for moving GCC 4.5 into gcc.old:

- convert to using ${EXTERNAL_GCC_SUBDIR}
- define base-external-gpl3-gcc* subdir as GCC_SUBDIR
- use <bsd.init.mk> over <bsd.own.mk> for a bunch of places; mostly
because it arranges for ../Makefile.inc to be included earlier, and
don't bother including the latter if the former is already included.
- move all .PATH: settings after <bsd.{own,lib}.mk> so that all
valid variables are set before it is evaluated
- rename mknative-gcc* to match their subdir name.

XXX the relationship between the Makefile.inc/Makefile.gcc_path files
is kind of sketchy, it would be great if this was fixed.

add smbfs library

update to MPC 1.0.1.

move netpgp, lua and npf libraries to depenancy points after the
libraries they depend upon. netpgp wants libz, lua wants libm,
and npf wants libnpf.

If a library needs a symbol from another library, pull that library in
explicitly, even if the DT_NEEDED closure would normally already ensure
the presence.

Don't build compat versions libkern.a

Build libkern

libbind now depends on heimdal, so push it after the third barrier.

Introduce MKLIBSTDCXX, defaulting to yes.

Add build glue for libc++.

Detect earm*hf* in a cleaner manner

Build libc_vfp on earm as well. Fix the sets.

build libevent later.

Hook Lutok into the build. This is all protected by the MKKYUA guard.

Enable building/installing libc_vfp for MACHINE_ARCH arm/armeb

descend into libnetpgpverify so that the compat entries are picked up

Move the build_install logic from lib/Makefile into share/mk and re-use
it for tools. The existing logic broke for the LLVM build with the
recent .ORDER changes in make.

Add libbpfjit library.

Build sljit test when MKSLJIT != no and set MKSLJIT to yes on amd64 and i386.

put a wait barrier between trousers and tpm-tools

fix typo

hook in TPM

Implement dynamic NPF extensions interface. An extension consists of
dynamically loaded module (.so) supplementing npfctl(8) and a kernel
module. Move normalisation and logging functionality into their own
extensions. More improvements to come.

branches: 1.188.2;
Implement build_install in src/lib/Makefile, which traverses the
subdirectories and invokes dependall/install. Do this in groups
delimited by .WAIT to ensure that depending libraries can use the
installed versions and don't need to know the locations in the source
tree.

Use this new target in src/Makefile to replace most of the adhoc library
logic with two special cases, src/lib and src/compat. Adjust
sys/Makefile to include the module directory when building them. Add
some necessary .WAITs in src/lib/Makefile to reflect the dependencies
from src/Makefile and also add the rump libraries here.

exclude rump libraries if MKRUMP = no

don't mention the indirect libm dependency.

move atf down to fix the build

Place SUBDIR+= libexecinfo properly based on its dependency on libelf.

hook in libexecinfo

Move "libexpat" from X11 into base which fixes PR lib/40346.
This change was approved by the Core Group.

branches: 1.181.2;
Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.

hook in tre

branches: 1.179.2;
Hook up SQLite into the build

Descent into lua.

add libgomp to this list of libs; so compat finds it properly.

Build and install ppath(3), property-list paths library.

sort, and move some things up the list after heimdal was moved
to its own directory. removes one dependency barrier.

only build libgmp, libmpfr and libmpc when (MKGCC != no) and
they can be together since only the .a is built, with no
other dependencies

build GMP, MPFR and MPC as private libraries just for GCC. don't
install the headers or librarys into the system.

someone who really cares could make them shlibs again and have them
installed into eg, /usr/lib/gcc. not convinced it is worth it.

Distribute libmpfr and libmpc across the dependency barriers so that
additional .WAITs are not needed.

add .WAIT's between libgmp and libmpfr, and between libmpfr and libmpc.

re-enable the gcc 4.5 crtstuff/libgcc builders now that they work.
also build the gmp, mpfr and mpc libraries in this case.

fix the paths for GCC 4.5. don't build the non-tools gmp/mpfr/mpc libs
yet since we don't have them fully working. XXX.

add HAVE_GCC=45 support.

branches: 1.167.2;
Enable the build of perfused and libperfuse

Upgrade Heimdal to 1.5pre1 by switching the build from crypto/dist/heimdal
to crypto/external/bsd/heimdal. The latter was just imported as the head
of the Heimdal tree as of a few days ago.

Add a new libquota library, which contains some blocks to build and/or
parse quota plists; as well as a getfsquota() function to retrieve quotas
for a single id from a single filesystem (whatever filesystem this is:
a local quota-enabled fs or NFS). This is build on functions getufsquota()
(for local filesystems with UFS-like quotas) and getnfsquota();
which are also available to userland programs.
move functions from quota2_subr.c to libquota or libprop as appropriate,
and ajust in-tree quota tools.
move some declarations from kernel headers to either sys/quota.h or
quota/quota.h as appropriate. ufs/ufs/quota.h still installed because
it's needed by other installed ufs headers.
ufs/ufs/quota1.h still installed as a quick&dirty way to get a code
using the old quotactl() to compile (just include ufs/ufs/quota1.h instead of
ufs/ufs/quota.h - old code won't compile without this change and this is
on purpose).
Discussed on tech-kern@ and tech-net@ (long thread, but not much about
libquota itself ...)

Need to build libsaslc

Make liblzf and the lvm2 libraries during the library stage. This also makes
them get built for MKCOMPAT.

Initial import of libdm and dmctl to tree. libdm library can be used
to access, manage and manipulate device-mapper driver. Which opens us bunch
of new possibilities like

dm-multipath device target
dm-crypt device target
dm-ccd compatibility layer

With this import I'm bringing in dmctl tool for working with dm driver ,too.
I plan to replace gpl2 licensed dmsetup command with our dmctl tool in near
feature. It can also by placed to /rescue where we was not able to put
dmsetup because of licensing problems.

With libdm in tree we can now write RUMP atf test suite for dm driver to
ensure LVM subsystem stability as time goes.

Reviewed by: blymn@ and rmind@
Oked: by no objections on tech-userlevel@

NPF checkpoint:
- Add libnpf(3) - a library to control NPF (configuration, ruleset, etc).
- Add NPF support for ftp-proxy(8).
- Add rc.d script for NPF.
- Convert npfctl(8) to use libnpf(3) and thus make it less depressive.
Note: next clean-up step should be a parser, once dholland@ will finish it.
- Add more documentation.
- Various fixes.

branches: 1.160.2;
hook librumphijack to the build

Hook libisns into the build, and modify the set lists accordingly.

Note the addition of iSNS protocol support in doc/CHANGES

With thanks to Wasabi Systems for contributing the code.

rearrange libraries to reduce the number of .WAITs (14 -> 6)
during that, fix some outdated comments & list dependents

rumpcrypto should never have been its own faction, so finally make
it a component under kern, i.e. rumpcrypto -> rumpkern_crypto.

hook new libpcap

Remove the do-external-lib and do-gnu-lib targets, along with
external/lib/Makefile and crypto/external/lib/Makefile, replacing
them all with SUBDIRs directly from lib/Makefile.

compat/compatsubdirs.mk becomes simpler now, as everything is built
from lib/Makefile, meaning all the libraries will now be built under
compat so update the set lists to account for that.