UPDATING revision 131361
1Updating Information for FreeBSD current users
2
3This file is maintained and copyrighted by M. Warner Losh
4<imp@village.org>.  See end of file for further details.  For commonly
5done items, please see the COMMON ITEMS: section later in the file.
6
7NOTE TO PEOPLE WHO THINK THAT FreeBSD 5.x IS SLOW:
8	FreeBSD 5.x has many debugging features turned on, in
9	both the kernel and userland.  These features attempt to detect
10	incorrect use of system primitives, and encourage loud failure
11	through extra sanity checking and fail stop semantics.  They
12	also substantially impact system performance.  If you want to
13	do performance measurement, benchmarking, and optimization,
14	you'll want to turn them off.  This includes various WITNESS-
15	related kernel options, INVARIANTS, malloc debugging flags
16	in userland, and various verbose features in the kernel.  Many
17	developers choose to disable these features on build machines
18	to maximize performance.
19
2020040630:
21	ACPI has been updated to disable known-bad BIOS revisions.  A message
22	will be printed on console indicating that ACPI has been disabled
23	automatically and that the user should use a newer BIOS, if possible.
24	If you think ACPI does work on your system and want to override
25	this (i.e., for testing), set hint.acpi.0.disabled="0" at the
26	loader prompt.
27
2820040623:
29	pf was updated to OpenBSD-stable 3.5 and pflogd(8) is priviledge
30	separated now. It uses the newly created "_pflogd" user/group
31	combination. If you plan to use pflogd(8) make sure to run
32	mergemaster -p or install the "_pflogd" user and group manually.
33
3420040622:
35	Network interface cloning has been overhauled.  This change will
36	require a recompile of modules using cloning and modification of
37	external ones to the new API.  __FreeBSD_version has been bumped
38	to 502119 to mark this change.  Additionally, users creating
39	stf(4) interfaces via "ifconfig stf" will need to update their
40	scripts as this will create an interface named "stf" instead of
41	"stf0" and ifconfig will not print "stf0" to stdout.
42
4320040621:
44	On 20040524, the /etc/rc.d/nsswitch script was modified to
45	automatically create /etc/nsswitch.conf on startup if it did
46	not already exist.  Unfortunately, an error in the man page
47	was carried over to the script, resulting in incorrect
48	nsswitch settings.  The simplest remedy is to remove both
49	/etc/nsswitch.conf and /etc/host.conf; they will be recreated
50	during the next reboot.
51
5220040614:
53	The return value of sema_timedwait(9) has been changed to
54	make it consistent with cv_timedwait(9).  Be sure to recompile
55	the ips module and any third-party modules which call
56	sema_timedwait.
57
5820040613:
59	ALTQ is now linked to the build. This breaks ABI for struct ifnet.
60	Make sure to recompile modules and any userland that makes use of
61	sizeof(struct ifnet). In order to get the altq headers in place
62	please recompile and reinstall world.
63
6420040607:
65	Splitting kern_thread.c into 2 files (adding kern_kse.c)
66	requires that you re-run config after updating your tree.
67
6820040601:
69	The MIDI drivers have been removed. Until the new module-friendly
70	ones are merged, remove or comment out midi and seq from your
71	kernel configuration.
72
7320040423:
74	Due to a new option in ipfw (versrcreach) the ipfw(8) command
75	needs to be recompiled.  Normal accept/reject rules without
76	options are not affected but those with options may break until
77	ipfw(8) is recompiled.
78
7920040420:
80	Due to changes in the callout ABI, kernels compiled after this
81	date may be incompatible with kernel modules compiled prior to
82	20040406.
83
8420040414:
85	The PCI bus power state stuff has been turned on.  If this causes
86	problems for your system, please disable it using the tunable
87	hw.pci.do_powerstate=0.
88
8920040412:
90	The bulk of the pci problems have been fixed, although the floppy
91	drive is still broken.
92
9320040410:
94	A substantial update to the pci bus resource and power management
95	have been committed.  Expect a bumpy ride for a few days until
96	the unanticipated problems have been resolved.
97
9820040409:
99        Due to changes in the the Yarrow initialization process,
100        /dev/random needs to be fed before operations requiring
101        temp files can succeed in single user mode.  This includes
102        running "make installworld". /dev/random may be fed by running
103        "/etc/rc.d/initrandom start" or with 20040415 source by running
104        "/etc/rc.d/preseedrandom".
105
10620040322:
107	The debug.mpsafenet tunable controls whether the kernel Giant
108	lock is held across the lower levels of the network stack, and
109	by default is turned off.  In the few days following 20040322,
110	the behavior of debug.mpsafenet will change such that this
111	tunable controls Giant over all levels of the network stack.
112	If you are currently setting debug.mpsafenet to 1, you should
113	set it back to 0 (the default) again during the change-over.
114	An additional note will be added to UPDATING when sufficient
115	locking is merged to permit this to take place.
116
11720040310:
118	The FreeBSD/sparc64 platform is changing time_t from 32-bits to
119	64-bits.  This is a very major incompatible change, so people
120	using FreeBSD/sparc64 *must* read the UPDATING.64BTT file for
121	detailed instructions on how to make this upgrade.  People
122	upgrading FreeBSD on other platforms can ignore this event.
123
12420040308:
125	The packet filter (pf) is now installed with the base system. Make
126	sure to run mergemaster -p before installworld to create required
127	user account ("proxy"). If you do not want to build pf with your
128	system you can use the NO_PF knob in make.conf.
129	Also note that pf requires "options PFIL_HOOKS" in the kernel. The
130	pf system consists of the following three devices:
131	device		pf		# required
132	device		pflog		# optional
133	device		pfsync		# optional
134
13520040303:
136	If you are having trouble with the libc_r -> libpthread transition
137	(see the 20040130 entry), place the following lines at the top of
138	/etc/libmap.conf:
139
140	libc_r.so.5		libpthread.so.1
141	libc_r.so		libpthread.so
142
143	This will cause all programs and libraries linked against libc_r
144	to use libpthread instead.
145
14620040226:
147	Some sshd configuration defaults have changed: protocol version 1
148	is no longer enabled by default, and password authentication is
149	disabled by default if PAM is enabled (which it is by default).
150	OpenSSH clients should not be affected by this; other clients may
151	have to be reconfigured, upgraded or replaced.
152
15320040225:
154	The ABIs defined in <resolv.h> and <netdb.h> have been updated
155	to support improved reentrancy.  Multi-threaded programs that
156	reference the "_res" or "h_errno" symbols may experience some
157	problems if they are not recompiled.  Single-threaded programs
158	should remain unaffected.
159
16020040225:
161	routed has been updated in the base system from the vendor
162	sources, routed v2.27, from rhyolite.com. This change means that
163	for users who use RIP's MD5 authentication feature, FreeBSD
164	-CURRENT's routed is now incompatible with previous versions
165	of FreeBSD; however it is now compatible with implementations
166	from Sun, Cisco and other vendors.
167
16820040224:
169	The tcpcb structure has changed and makes a recompile of libkvm
170	and related userland network utilities neccessary.
171
17220040222:
173	The cdevsw structure has changed in two externally visible ways.
174	First, the sense of the D_GIANT flag has changed to D_NEEDSGIANT.
175	Second, the d_version field must be filled in with D_VERSION.
176	Drivers outside the tree will need to be updated.
177
17820040207:
179	The /etc/rc.d/ttys script has been removed. It is no longer
180	necessary since devfs has been mandatory for some time.
181
18220040130:
183	libkse has been renamed back to libpthread and is now the
184	default threads library.  The gcc -pthread option has also
185	been changed to link to libpthread instead of libc_r.  For
186	alpha and sparc64 machines, libkse is not renamed and links
187	are installed so that libpthread points to libc_r.  Until
188	the ports system is updated to handle this change, it is
189	recommended that folks install an /etc/libmap.conf(5) that
190	maps libc_r to libpthread.  If you have any binaries or
191	libraries linked to libkse, then it is also recommended
192	that you map libkse to libpthread.  Anyone that is using
193	nvidia supplied drivers and libraries should use a libmap.conf
194	that maps libpthread to libc_r since their drivers/libraries
195	do not work with libpthread.
196
19720040125:
198	ULE has entered into its probationary period as the default scheduler
199	in GENERIC.  For the average user, interactivity is reported to be
200	better in many cases.  On SMP machines ULE will be able to make more
201	efficient use of the available parallel resources.  If you are not
202	running it now, please switch over, replacing the kernel option
203	SCHED_4BSD with SCHED_ULE.
204
20520040125:
206	Move LongRun support out of identcpu.c, where it hardly
207	belongs, into its own file and make it opt-in, not mandatory,
208	depending on CPU_ENABLE_LONGRUN config(8) option.
209
21020031213:
211	src/lib/libc/gen/initgroups.c:1.8 now causes logins to fail
212	if the login process is unable to successfully set the
213	process credentials to include all groups defined for the
214	user.  The current kernel limit is 16 groups; administrators
215	may wish to check that users do not have over 16 groups
216	defined, or they will be unable to log in.
217
21820031203:
219	The ACPI module has been reactivated.  It is no longer required
220	to compile ACPI support into kernels statically.
221
22220031112:
223	The statfs structure has been updated with 64-bit fields to
224	allow accurate reporting of multi-terabyte filesystem
225	sizes. You should build world, then build and boot the new kernel
226	BEFORE doing a `installworld' as the new kernel will know about
227	binaries using the old statfs structure, but an old kernel will
228	not know about the new system calls that support the new statfs
229	structure.
230	Note that the backwards compatibility is only present when the
231	kernel is configured with the COMPAT_FREEBSD4 option. Since
232	even /bin/sh will not run with a new kernel without said option
233	you're pretty much dead in the water without it. Make sure you
234	have COMPAT_FREEBSD4!
235	Running an old kernel after a `make world' will cause programs
236	such as `df' that do a statfs system call to fail with a bad
237	system call. Marco Wertejuk <wertejuk@mwcis.com> also reports
238	that cfsd (ports/security/cfs) needs to be recompiled after
239	these changes are installed.
240
241	****************************DANGER*******************************
242
243	DO NOT make installworld after the buildworld w/o building and
244	installing a new kernel FIRST.  You will be unable to build a
245	new kernel otherwise on a system with new binaries and an old
246	kernel.
247
24820031112:
249	Some netgraph string length constants have been changed. This
250	change requires the netgraph kernel modules and all netgraph
251	userland components to be in sync. Especially users who require
252	netgraph to boot need to make sure to have world and kernel in
253	sync before rebooting.
254
25520031111:
256	Hyperthreading logical CPU's are no longer probed by default
257	when using the MP Table.  If ACPI is being used, then logical
258	CPUs will be probed if hyperthreading is enabled in the BIOS.
259	If ACPI is not being used and hyperthreading is enabled in the
260	BIOS, logical CPUs can be enabled by building a custom kernel
261	with the option MPTABLE_FORCE_HTT enabled.
262
26320031103:
264	The i386 APIC_IO kernel option has been replaced by
265	'device apic'.  The ACPI module has also been temporarily
266	disabled, so ACPI must be statically compiled into your
267	kernel using 'device acpi' if you wish to use the ACPI driver.
268
26920031031:
270	The API and ABI of struct ifnet have been changed by removing
271	the if_name and if_unit members and replacing them with
272	if_xname, if_dname, and if_dunit.  All network drivers and most
273	userland programs which include net/if_var.h must be updated
274	and recompiled.  __FreeBSD_version has been bumped to 501113 to
275	reflect this change.
276
27720030928:
278	Changes to the cdevsw default functions have been made to remove
279	the need to specify nullopen() and nullclose() explicitly.
280	__FreeBSD_version bumpted to 501110.
281
28220030926:
283	kiconv(3) has been added. mount_msdosfs(8), mount_ntfs(8) and
284	mount_cd9660(8) need to be in sync with kernel.
285
28620030925:
287	Configuring a system to use IPFILTER now requires that PFIL_HOOKS
288	also be explicitly configured.  Previously this dependency was
289	magically handled through some cruft in net/pfil.h; but that has
290	been removed.  Building a kernel with IPFILTER but not PFIL_HOOKS
291	will fail with obtuse errors in ip_fil.c.
292
29320030923:
294	Fix a bug in arplookup(), whereby a hostile party on a locally
295	attached network could exhaust kernel memory, and cause a system
296	panic, by sending a flood of spoofed ARP requests. See
297	FreeBSD-SA-03:14.arp.
298
29920030915:
300	A change to /etc/defaults/rc.conf now causes inetd to be started
301	with `-C 60' if it is not overridden in /etc/rc.conf.  This
302	causes inetd to stop accepting connections from an IP address
303	that exceeds the rate of 60 connections per minute.
304
30520030829:
306	The following rc.d scripts have been removed and should be
307	deleted from your installation: atm2.sh atm3.sh devdb
308	localdaemons network1 network2 network3. Depending on when
309	you last updated world and used mergemaster(8) you may or
310	may not have problems during the rc boot sequence. The simplest
311	solution is an 'rm -rf /etc/rc.d/*' and then 'mergemaster -i'.
312	The atm2.sh atm3.sh and devdb scripts were removed some time
313	ago, so depending on when you installed -CURRENT these scripts
314	may or may not exist on your system.
315
31620030824:
317	ATAng has been committed. You need to build world as sys/ata.h
318	has changed, and userland atacontrol depends on it.
319	If you use ATA SW raids you need "device ataraid" in your
320	kernel config file, as it is no longer pulled in automatically.
321
32220030819:
323	The OFW_NEWPCI option has been turned on in the Sparc64 GENERIC kernel.
324	Among other things, this changes the device enumeration to be
325	closer to Solaris.  Be aware that, this can even cause the machine
326	to not boot without manual intervention before the fstab is adjusted.
327
32820030728:
329	All current USB and Firewire quirks in da(4) have been deprecated
330	and will be removed for 5.2.  If this causes failure for your
331	umass(4) devices, enable "options DA_OLD_QUIRKS" in your kernel
332	and send the output of "camcontrol inquiry da0" to scsi@freebsd.org
333	so the quirk can be re-enabled.
334
33520030724:
336	Problems with entry 20030714 have been corrected and no known issues
337	with /rescue and -j exist for host systems after this point in time.
338
33920030722:
340	FPU-less support has been removed from FreeBSD.  Chances are you won't
341	notice.  386+387 support should still work after this change, but
342	it is now a minimum requirement for the i386 port that you have real
343	FPU hardware.
344
34520030714:
346	Some people are having problems with changes related to /rescue.
347	If you are building -j N, you will need to define NO_RESCUE.  Others
348	will need to define it if /rescue has issues with their environment.
349	People should report those issues to current@.
350
35120030711:
352	gcc was upgraded to 3.3.  You are advised to not build -DNOCLEAN
353	across this point.  Further, it might be a good idea to remove
354	/usr/obj.
355
35620030610:
357	Remove deprecated locale names and transition period code
358	for them, finishing switching to the new scheme. Check your
359	LANG environment variable.
360
36120030609:
362	CCD has been changed to be a fully GEOMified class.  Kernel
363	and ccdconfig(8) needs to be in sync, this is particularly
364	important to remember beforehand if your source tree is on
365	a ccd device.  Consider making a copy of the old ccdconfig
366	into /boot/kernel.good or wherever you keep your backup
367	kernel.
368
36920030605:
370	There was a small window in which sed(1) was broken.  If you
371	happen to have sed(1) installed during that window, which is
372	evidenced by an inability to build world with the failure
373	given below, you need to manually build and install sed(1)
374	(and only sed(1)) before doing anything else. This is a one-
375	time snafu. Typical failure mode:
376
377	In file included from /usr/src/contrib/binutils/bfd/targets.c:1092:
378	targmatch.h:7:1: null character(s) ignored
379	targmatch.h:12:1: null character(s) ignored
380	targmatch.h:16:1: null character(s) ignored
381		:
382
383	The window of "sed(1)-uction" is from Wed Jun 4 15:31:55 2003 UTC
384	to Thu Jun 5 12:10:19 2003 UTC (from rev 1.30 to rev 1.31 of
385	usr.bin/sed/process.c).
386
38720030505:
388	Kerberos 5 (Heimdal) is now built by default. Setting
389	MAKE_KERBEROS5 no longer has any effect. If you do NOT
390	want the "base" Kerberos 5, you need to set NO_KERBEROS.
391
39220030502:
393	groff has been updated.  If you try to do a buildworld and
394	get an infinite loop in troff, update to May 4th or newer.  If you
395	have a newer kernel than userland, you may need to set the OSRELDATE
396	to 500110 in your environment before starting a buildworld.
397
39820030501:
399	The old rc system has been removed.  Please report any problems
400	to freebsd-rc@yahoogroups.com, and/or freebsd-current@freebsd.org.
401	Your personal versions of these files will not be removed, so you can
402	continue to use them. However, you should take great care when updating,
403	especially when using mergemaster, since the compatibility code that
404	utilizes these old scripts has also been removed.
405
40620030423:
407	A bug has been fixed in /dev/devctl which would cause devd
408	to hang on boot, were it not for a workaround in devd.  The
409	work around in devd will be removed around 20030507.  You
410	have until then to upgrade your kernel before updating
411	userland.  In general, you should have a userland and
412	kernel that's in sync with each other.  However, given the
413	effects of this bug (hang on boot when starting devd), some
414	allowances are made.
415
41620030329:
417	Alphas with libc from between 20030312 and 20030329 exhibit
418	floating point exceptions (FPEs), most notably in awk(1)
419	while upgrading the system through a buildworld.
420
421	So, to successfully upgrade your Alpha, you must either
422	downgrade your libc.so to a pre-20030312 version, or update
423	/usr/share/mk/bsd.cpu.mk to revision 1.26 which adds -mieee
424	to CFLAGS, then forcibly rebuild and install libc:
425
426	cd /usr/src/lib/libc && \
427	    make cleandir && make obj && \
428	    make -DNOMAN -DNOPROFILE all && \
429	    make -DNOMAN -DNOPROFILE install
430
43120030208:
432	sendmail 8.12.7 has been imported.  It has one important
433	change for IPv6 users.  The default submit.mc now uses
434	'[127.0.0.1]' instead of 'localhost' meaning only IPv4 is
435	used to connect to the MTA.  Users on IPv6-only machines
436	will need to edit /etc/mail/submit.mc appropriately.
437
43820030128:
439	NODEVFS option has been removed and DEVFS thereby made standard.
440	This makes all references to MAKEDEV obsolete, and they should
441	be removed when convenient.
442
44320030126:
444	The name of the device for the ofw console has changed, sparc64 users
445	must run mergemaster to update their installed /etc/ttys.
446
44720030125:
448	The scheduler framework has grown a second scheduler and consequently
449	you must specify one and only one scheduler in your kernel config.
450	The cvs config files have been updated to use the old scheduler
451	which may be selected via 'options SCHED_4BSD'.  If you would like
452	to try the new, much more experimental, scheduler please try
453	'options SCHED_ULE' and contribute to the arch@ discussion.
454
45520030115:
456	A new version of the wi driver has been imported into the tree.
457	One now must have device wlan in the config file for it to operate
458	properly.
459
460	In addition, there have been some changes to how wi devices are
461	configured for point to point links to bring it more in line
462	with the former way of doing things, as well as compatibility
463	with NetBSD.
464
46520021222:
466 	For a period after the GCC 3.2.1 import (from 12/04 to 12/22), GCC
467 	used an incompatible form of ABI for returning structures and unions
468 	which FreeBSD's GCC maintainers were not aware of relative to previous
469 	versions of FreeBSD.  We have gone back to the ABI for now, and any
470 	code compiled which is required to interoperate with other code (not
471 	built at the same time) returning structs or unions should be
472	rebuilt.
473
47420021216:
475	A name change in /etc/netconfig has been reverted to stay
476	compatible with suns TIRPC and also with NetBSD. You need
477	to run mergemaster after make world. A new libc does still work
478	with an outdated /etc/netconfig for some time, but you'll get
479	a warning. This warning will be removed in 20030301.
480
48120021202:
482	The recent binutils upgrade marks a kernel flag day on
483	sparc64: modules built with the old binutils will not work
484	with new kernels and vice versa. Mismatches will result in
485	panics.  Make sure your kernel and modules are in sync.
486
48720021029:
488	The value of IPPROTO_DIVERT has changed.  Make sure to keep
489	your kernel, netstat, natd and any third-party DIVERT
490	consumers in sync.
491
49220021024:
493	Old, compatibility slices have been removed in GEOM kernels.
494	This means that you will have to update your /etc/fstab to
495	not use disk devices of the form /dev/ad0a.  Instead, you
496	now must specify /dev/ad0s1a, or whatever slice your FreeBSD
497	partition really is on.  The old device names have gone
498	away, so if you use them anywhere else, you must also adjust
499	those uses.  (This doesn't affect the disks formatted in
500	the ``dangerously-dedicated'' mode.)
501
50220021023:
503	Alphas with kernels from between 20020830 and 20021023 and/or
504	rtld (ld-elf.so.1) older than 20021023 may experience problems
505	with groff while doing a buildworld (kernel: "out of memory",
506	fixed in rev 1.129 of kern/imgact_elf.c; rtld: "too few PT_LOAD
507	segments", fixed in rev 1.8 of libexec/rtld-elf/map_object.c).
508
509	So, to successfully upgrade your Alpha, you must either
510	upgrade your kernel and rtld first (which might be a bit
511	tricky), or avoid running the bootstrapped groff during the
512	"transitional" buildworld.  To avoid running groff during the
513	transitional upgrade run make buildworld with -DNOMAN,
514	-DNO_SHAREDOCS, and -DNO_LPR.
515
51620020831:
517	gcc has been upgraded to 3.2.  It is not all binary compatible
518	with earlier versions of gcc for c++ programs.  All c++
519	programs and libraries need to be recompiled.
520
521	Also, if you encounter g++ issues, rm /usr/include/g++/* before
522	doing an installworld to make sure that stale files are removed.
523
52420020827:
525	Our /etc/termcap now has all the entries from the XFree86 xterm
526	almost unchanged. This means xterm now supports color by default.
527	If you used TERM=xterm-color in the past you now should use
528	TERM=xterm. (xterm-color will lead to benign warnings).
529
53020020815:
531	A "bug" in gcc(1) that was hiding warning in system headers was
532	fixed.  It's probably time to add -DNO_WERROR to your make line
533	again.
534
53520020729:
536	COPY is being deprecated.  The 20010530 change was reverted, as
537	it causes far more pain than was expected, and to always compare
538	before installing, please use INSTALL="install -C" again.  The
539	-C option is now silently ignored when used with the -d option.
540
54120020702:
542	Problems with libc_r clients like KDE and GNOME have been resolved.
543	There are still some minor problems with some signals but the
544	system is stable enough for general use again. SMP is less so than UP
545	but each can successfully complete multiple buildworlds.
546	Libkvm needs to be recompiled due to KSE.
547
54820020701:
549	Now would be a bad time to upgrade.  Something in or near the
550	KSE commit totally broke programs using libc_r like KDE and
551	GNOME.
552
55320020511:
554	The k5su utility installed as part of Kerberos 5 is no longer
555	installed with the set-user-ID bit set by default.  Add
556	ENABLE_SUID_K5SU=yes to /etc/make.conf to have it installed
557	with the set-user-ID bit set.
558
55920020510:
560	Gcc 3.1 debugging format (cc -g) has changed from STABS to DWARF2.
561	Unfortunately our native GDB (at version 4.18) does not understand
562	the DWARF2 debugging format.  Thus you must use `gcc -gstabs+' to
563	generated debugging information for our native GDB.
564
56520020510:
566	Due to the way CVS works, it may not properly update src/contrib/gcc
567	to the 3.1 sources.  The easiest fix is to `rm -rf' src/contrib/gcc
568	and then do a cvs update.
569
57020020421:
571	When exec'ing set[ug]id executables, the kernel now ensures that the
572	stdio file descriptors (0..2) are open.  See FreeBSD-SA-02:23.stdio.
573
57420020404:
575	New sendmail startup scripts have been installed to make it
576	easier to use alternative MTAs with FreeBSD.  Setting the rc.conf
577	variable sendmail_enable to "NO" no longer prevents any sendmail
578	daemons from starting.  Instead, either set sendmail_enable to
579	"NONE" or change mta_start_script to a script for starting
580	an alternative MTA.  Setting mta_start_script to "" will
581	also prevent any MTA from being started at boot.
582
58320020403:
584	UCONSOLE is no longer a valid kernel option.
585
58620020315:
587	FreeBSD 5.0 DP-1 was basically branched today.
588
58920020225:
590	Warnings are now errors in the kernel.  Unless you are a developer,
591	you should add -DNO_WERROR to your make line.
592
59320020217:
594	sendmail 8.12.2 has been imported.  The sendmail binary is no
595	longer a set-user-ID root binary and the infrastructure to support
596	command line mail submission has changed.  Be sure to run
597	mergemaster (especially for updating /etc/rc, /etc/defaults/rc.conf,
598	and /etc/mail) and read /etc/mail/README for more details.
599
600	Due to the import of sendmail 8.12.2, a new user and group are
601	required in order for sendmail to run as a set-group-ID
602	binary.  A 'make installworld' will use the new user and group
603	to set the owner and group of /var/spool/clientmqueue and will
604	fail if the new user and group do not exist.  The 'smmsp' user
605	and group must be merged from src/etc/group and
606	src/etc/master.passwd before using 'make installworld'.
607	'mergemaster -p' will do this.  You may need to install
608	mergemaster before this will work if you are updating from a
609	very old version of current.  The updating recipe has changed
610	as of this date.
611
61220020112:
613	The preferred configuration method for PAM is now /etc/pam.d/
614	rather than /etc/pam.conf.  If you have an unmodified
615	pam.conf, just delete it after your next mergemaster run.  If
616	you have local modifications, you can use
617	/usr/src/etc/pam.d/convert.pl to incorporate them into your
618	/etc/pam.d.
619
620	Please see the following url for more details:
621http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<xzp6667fyoa.fsf@flood.ping.uio.no>
62220011229:
623	If anyone here is already using the new rc.conf(5) variable
624	networkfs_types, please note that it has changed
625http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<9744.1009655556@axl.seasidesoftware.co.za>
626
62720011220:
628	sys/i4b/driver/i4b_ispppsubr.c has been retired.  This file
629	started out its life in the ISDN4BSD project as an offspring
630	from sys/net/if_spppsubr.c, which eventually got a life of its
631	own.  All the accumulated features and bugfixes of the i4b
632	version have now been merged back into the base system's
633	version now.  The only user-visible change resulting from this
634	is that i4b's sppp(4) interfaces are to be managed with
635	spppcontrol(8) again, since ispppcontrol(8) has been retired
636	as well.  (There has never been rc file support for
637	ispppcontrol in -current, but only in -stable.  That will be
638	reverted by the time the changes are MFCed.)
639
64020011215:
641	The fdc(4) driver has been updated and now automatically
642	recognizes media in `standard' formats (like 1440 KB and
643	720 KB for a 3.5" high-density drive) when accessing the
644	default device node (e. g. /dev/fd0).  The old variety of
645	floppy device nodes /dev/fd*.* is no longer present by
646	default, devices can be created (in DEVFS) on demand.  They
647	will need to be customized then for `odd' densities using
648	fdcontrol(8).
649
65020011209:
651	The bugs in procfs' debugging support code have been fixed,
652	and truss(1) now works again.
653
65420011207:
655	Daily security checks have been split out to use the periodic(8)
656	scripts.  Some change in configuration may be necessary.  Please
657	see
658http://www.freebsd.org/cgi/mid.cgi?db=mid&id=<20011207155805.R8975@blossom.cjclark.org>
659	for details.
660
66120011204:
662	sos added VCD/SVCD support to ata driver and that needs the
663	kernel and burncd to be in sync.
664
66520011203:
666	The procfs pseudo-filesystem has now been converted to use the
667	pseudofs framework.  If you have 'options PROCFS' in your
668	kernel config, you'll need to add 'options PSEUDOFS' if it's
669	not there already.
670
671	This change temporarily breaks truss(1); use ktrace(1) instead
672	until the issue has been resolved.
673
67420011202:
675	A security hole in OpenSSH involving `UseLogin yes' has been
676	patched.
677
67820011126:
679	You need to remove /usr/obj/.../usr.bin/tip before rebuilding
680	after this date.  You need to do this only once.
681
68220011103:
683	Most of the awk issues have been resolved.  Some rough
684	edges may be left, but for the most part things should be
685	back to "normal." For CURRENT's usual definition of "normal."
686
68720011030:
688	Awk has been upgraded to the one true awk from bell labs.  Expect
689	choppy waves in the upgrade process.
690
69120011030:
692	The asr driver problem has been resolved.
693
69420011027:
695	Due to changes in other parts of the system, the asr driver
696	now causes the system to panic on boot.  Do not use it pending
697	correction.  Comment it out of any kernel config file that you
698	try to use from this date forward.
699
70020011025:
701	When crossbuilding, use TARGET=xxx where you used to use
702	MACHINE=xxx.  You don't need to set TARGET_ARCH and TARGET,
703	unless you are changing both of them.  To cross build pc98 on
704	an alpha, for example, you need to set TARGET=pc98 and
705	TARGET_ARCH=i386.
706
70720011001:
708	The kernel interface that burncd depends on has changed.
709	You must recompile both the kernel and userland applications
710	at the same time.
711
71220010929:
713	When crossbuilding, please set TARGET_ARCH rather than
714	MACHINE_ARCH to indicate the target.  In the future, one will
715	set TARGET_MACHINE where you set MACHINE now.  At the moment,
716	setting MACHINE alone for same MACHINE_ARCH machines works
717	(eg, you can build pc98 on an i386 machine and vice versa).
718
71920010927:
720	Some weird problems result from using ACPI on some machines.
721	To disable ACPI you can add
722		hint.acpi.0.disabled="1"
723	to /boot/loader.conf (or by putting set X=Y at the boot
724	loader "ok" prompt).
725
726	Alternatively, you can remove it from /boot/kernel/acpi.ko
727	or use the MODULES_OVERRIDE function in your kernel config
728	file and not list acpi in that list.
729
73020010924:
731	The buildworld has been fixed.  You may need to install
732	the 4.x compatibility libraries for some old binaries
733	to work.  Add COMPAT4X=true to your /etc/make.conf to
734	get them installed on every installworld, or execute the
735	following to get them installed only once:
736		cd src/lib/compat/compat4x.<arch>
737		make all install
738	You will see ``__stdoutp undefined'' until you do this.
739
74020010919:
741	There's a bug in the world build process.  The cross-tools
742	are build with the NEW headers, but the OLD libc.a.  This
743	leads to all kinds of problems with the new libc.  A temporary
744	workaround is to add
745		CFLAGS="-O -pipe -D_OLD_STDIO"
746	before building world when upgrading from 4.x to current.  This
747	can be removed afterwards.
748
749	A proper fix to the buildworld target is needed.
750
75120010918:
752	Peter has committed his new kthread nfs client/server code.
753	NFS may be unstable after this date.
754
75520010912:
756	KSE has hit the tree.  Lots of things are now different in
757	the kernel.  While a few problems were introduced in the
758	initial commit, most of the major ones have been found and
759	corrected.
760
76120010901:
762	In OLDCARD, CardBus bridges appear to be stable.  The work
763	arounds described in the 20010604 entry are now no longer
764	necessary and will be ignored.  Most insert/remove problems
765	have been rectified around this date.
766
76720010823:
768 	named now runs as user bind and group bind rather than as
769 	root.  If named_enable is set to YES in /etc/rc.conf, ensure
770 	that user bind is available in /etc/passwd (using vipw(8))
771 	and that group bind is available in /etc/group.  Also make
772 	sure that user or group bind has read (and not write)
773 	permission for your name server configuration and that it
774 	has read and write permission for your slave zone files and
775 	directory.
776
777 	If you wish to continue to run named as root (a less secure
778 	alternative), add a line to /etc/rc.conf saying
779
780 		named_flags=
781
78220010709:
783	The PAM libraries have had an API upgrade that is beyond
784	the ability of the shared library major number to handle.
785	It is manifested by PAM-using ports dumping core. The
786	solution is to rebuild those ports.
787
78820010628:
789	The kernel compile module has moved from src/sys/compile/FOO
790	to src/sys/${MACHINE}/compile/FOO.
791
79220010625:
793	The pccard modem issue from 20010613 has been corrected.
794	OLDCARD support is still a little weak in -current.  slot 1 is
795	known not to work on some TI based cardbus bridges.  Some
796	cardbus bridges do not properly detect insert/removal events.
797	IRQ configuration needs more safety belts.
798
79920010617:
800	Softupdates problems have been corrected.
801
80220010614:
803	Peter ripped out the linkerset support.  You must, as always,
804	rerun config after you cvsup if you are using the traditional
805	kernel building methods.
806
80720010613:
808	pccard modems may not work with current after 20010604 date.  Some
809	do, others result in panics.  *MAKE*SURE* that you update your
810	config and /etc/rc.conf ala the 20010604 entry, or you will have
811	problems (this issue will be fixed, it just hasn't been yet).
812
81320010613:
814	SOFTUPDATES seem to be broken since the middle of May or so.  Do not
815	use them in current.  You can disable softupdates on all mounted
816	partitions, or remove SOFTUPDATES the kernel config file.
817
81820010612:
819	After Peter's commits to the hints code, people have been noticing
820	that certain devices are attached (or try to) twice.  This is due
821	to having both static hints as well as a /boot/device.hints.  To
822	work around this issue, please use only one or the other mechanism
823	until this bug is fixed.
824
825	Please note that a feature of config is that if you have config
826	file FOO and FOO.hints, it automatically adds FOO.hints to the
827	hints.c file, whether you want it to or not.
828
82920010610:
830	Locale names have changed to match other systems better.
831
83220010604:
833	pccard support for pci cards has been committed.  You must change
834	your /etc/pccard.conf irq lines.  It must match the irq used by
835	pcic device.  Interrupt storms may result if you fail to do this.
836	Interrupt storms look a lot like a hang.
837
838	You must also install a new pccardd, otherwise you will get an
839	interrupt storm at card reset time (just after it tells you what
840	it is).
841
842	pccardd_flags="-I" is necessary for the time being.  It tells pccardd
843	not to ask the kernel if the interrupt is really free or not before
844	using it.  You can either change the /etc/pccard.conf irq lines to
845	match pcic, or add "-i X" to the pccardd_flags.
846
84720010530:
848	INSTALL=install -C is being deprecated.  If you want to do this,
849	use COPY=-C instead.  The former method will be supported for only
850	a limited time.  If you see
851
852install: warning: the -d and -C options may not be specified together
853
854	in your makeworld, then you need to migrate towards using
855	COPY=-C.
856
85720010525:
858	It appears that vm is now stable enough to use again.  However,
859	there may be other problems, so caution is still urged.  alpha
860	definitely is in bad shape.
861
86220010521:
863	Minor repo damage has happened.  This may cause problems
864	with cvsup of ports.  If you get errors, please see
865	http://www.FreeBSD.org/cgi/query-pr.cgi?pr=27495
866	at the bottom for details on a workaround.  The error message
867	is
868Updater failed: Cannot delete "/usr/ports/www/jakarta-tomcat/files": Directory not empty
869
87020010520:
871	Vm and/or swapping are busted on -current.  Please be patient.
872
87320010519:
874	pccard has had much reorganizational work done to it over
875	the past few days.  Everything should still work, but if
876	not, please contact imp@freebsd.org.
877
87820010517:
879	ata ioctl changed.  Make sure to recompile both kernel and
880	userland at the same time.
881
88220010517:
883	New ncurses imported.
884
88520010512:
886	DEVFS is now opt out, not opt in.  Barring major problems, this
887	will be the only way to go starting July 1.
888
88920010504:
890	OpenSSH has been updated to 2.9.  Some defaults are different,
891	including RhostsRSAAuthentication, which changes from yes to no.
892
89320010502:
894	Perl breakage in 20010501 was corrected at 14:18:33 PDT.
895
89620010501:
897	Building perl was broken at 02:25:25 PDT.
898
89920010430:
900	The bug in 20010429 was corrected at 07:35:37 PDT.  It is safe to
901	go back in the water.
902
90320010429:
904	A bad bug was committed at 04:48:42 PDT.  Don't use kernels after
905	this date, but before the correction date.
906
90720010423:
908	old fsck and new kernel interactions appear to have been fixed.
909
91020010411:
911	fsck and the kernel were changed to handle some optimizations
912	to directory layout.  This breaks backward compatibility.
913	Update only if you understand that you must not use the old
914	fsck with the new kernel ever.
915
91620010330:
917	fsck has changed the meaning of the pass column in /etc/fstab.
918	Please see the cvs commit to fsck.8 or the fsck.8 man page for
919	details.  It is unclear if changes to /etc/fstab are necessary.
920
92120010319:
922	portmap had changed name to rpcbind for maximum POLA in your
923	current world.  /etc/hosts.{allow,deny} needs changes.  nfs and
924	other rpc based programs that rely on portmapper will not work
925	without updates to /etc/hosts.{allow,deny} and /etc/netconfig.
926
92720010315:
928	ata subsystem changes.  ATA_ENABLE_ATAPI_DMA, ATA_ENABLE_WC
929	and ATA_ENABLE_TAGS are no longer kernel options.  They have
930	been replaced by tunables.  See ata.4 for details.
931
93220010312:
933	The fxp driver was converted to use miibus.  If you compile
934	fxp into your kernel statically, you will need to add miibus.
935
93620010312:
937	The wi device now defaults to BSS (infrastructure) mode
938	instead of ad-hoc.
939
94020010310:
941	/dev/urandom should be a symbolic link to /dev/random now.
942	Users of current not using DEVFS need to run MAKEDEV std.
943	ssh might not work if you don't.
944
94520010303:
946	The ed driver has been updated.  It now allows mii attachments,
947	which means that you must include the miibus in your kernel if
948	you use the ed driver.
949
95020010220:
951	The problems with libc have been corrected.  It is now mostly
952	safe to go back into the water.
953
95420010211:
955	The size of FILE was changed.  This breaks upgrading.  If
956	you must upgrade, be prepared for pain.  It also breaks almost
957	all binaries that you've compiled on -current.  You are warned
958	that before upgrading would be a good time to do a level 0
959	dump of your system.  No, really, I mean it this time.
960
961	To get to the new system, you'll need to use the following
962	workaround.  Hopefully this can be sorted out so that we
963	don't have to move this to the updating section.
964
965	To get around the installworld problem, do:
966		# cd /usr/src/usr.bin/sed
967		# make install
968		# cd /usr/src
969		# make installworld
970	If that doesn't work, then try:
971		# make -k installworld
972		# make installworld
973
97420010207:
975	DEVFS is now the default.  If you use vinum, make sure that you
976	do not include devfs in your kernel as problems result.
977
97820010205:
979	FFS_ROOT and CD9660_ROOT have been removed or deprecated.
980	Remove them from your config.
981
98220010122:
983	****************************** WARNING ******************************
984			buildkernel has been changed slightly
985	****************************** WARNING ******************************
986	KERNCONF replaces the variable KERNEL for buildkernel.  You
987	should update your scripts and make.conf accordingly.
988
98920010119:
990	config has changed to allow DEV_FOO as a replacement for NFOO.
991	This requires a new config to build correctly.
992
99320010116:
994	The kernel option I386_CPU is now mutually exclusive with the
995	other cpu types. If you have an i386 system, be sure that it
996	only had this line.  Remove it for all other configurations.
997
99820010110:
999	Changes to the kernel require it and burncd be in sync.
1000
100120010102:
1002	Everyone who has hw.sndunit set to something in
1003	/etc/sysctl.conf, it is now hw.snd.unit.
1004
100520010101:
1006	ex and vi were broken by some changes to sys/queue.h.  If you
1007	have a bad vi, you will see make buildworld fail with a core
1008	dump while building termcap.  You can work around this problem
1009	by adding -k to your make buildworld.  This will cause the
1010	build to complete and install a new vi.  Once that's done, you
1011	can rebuild again without the -k to pick up anything that
1012	might have been ignored by the -k option.
1013
1014	Others have suggested that you can just rebuild libc if your
1015	vi/ex is dynamically linked, but I've not received any reports
1016	of this working.
1017
101820001228:
1019	There have been some changes to libcrypt in -current.  The
1020	libscrypt/libdescrypt symlink silliness is gone and the installed
1021	libcrypt is fully functional.  Be aware of this.
1022
102320001218:
1024	Linksys Fast Ethernet PCCARD cards supported by the ed driver
1025	now require the addition of flag 0x80000 to their config line
1026	in pccard.conf(5).  This flag is not optional.  These Linksys
1027	cards will not be recognized without it.
1028
102920001205:
1030	Important new FreeBSD-version stuff: PAM support has been worked
1031	in, partially from the "Unix" OpenSSH version.  This requires
1032	adding the following in pam.conf:
1033
1034	sshd    auth    sufficient      pam_skey.so
1035	sshd    auth    required        pam_unix.so         try_first_pass
1036	sshd    session required        pam_permit.so
1037
103820001031:
1039	cvs updated to 1.11.
1040
104120001020:
1042	The random device needs more entropy, so you need to make sure
1043	that you've run mergemaster to get a /etc/rc which will seed
1044	/dev/random.  If you don't and the system hangs after ldconfig,
1045	then banging on the keyboard randomly until it unhangs is one
1046	workaround.
1047
104820001010:
1049	****************************** WARNING ******************************
1050				Sendmail has been updated.
1051	****************************** WARNING ******************************
1052	o mail.local(8) is no longer installed as a set-user-id binary.
1053	o sendmail(8) is now built with STARTTLS support unless NO_OPENSSL
1054	  is set.
1055	o The default /etc/mail/sendmail.cf disables the SMTP EXPN and VRFY
1056	  commands.
1057	o Now using sendmail's version of vacation(1).
1058	o The sendmail cf building tools (contrib/sendmail/cf) are installed
1059	  in /usr/share/sendmail/cf.
1060	o sendmail.cw changed to local-host-names
1061
1062	More details can be found at
1063		http://people.freebsd.org/~imp/UPDATING/sendmail-20001010
1064
106520001009:
1066	The ports tree's new layout is in place.  Be sure to update
1067	your entire ports tree, or you will have problems.
1068
106920001006:
1070	The perl build procedure no longer installs miniperl, nor uses
1071	the installed miniperl.  It is recommended that you delete
1072	/usr/bin/miniperl.
1073
107420001005:
1075	This weekend the ports tree will be updated to a new layout.
1076	It will be in an inconsistent state until noted in the UPDATING
1077	file, or with asami-san's message to the relevant mailing
1078	lists.  With this new layout, you'll need to update the whole
1079	tree for anything to work.
1080
108120000928:
1082	There was a change in the passwd format.  Need more information.
1083
108420000916:
1085	/boot/kernel/kernel.ko -> /boot/kernel/kernel change has taken
1086	place.  Please update boot loader (not the boot blocks) at the
1087	same time as your kernel.
1088
108920000914:
1090	The new pmtimer device is necessary for laptops.  Failure to
1091	include the device will cause suspended laptops losing time
1092	when they resume.  Include
1093		device		pmtimer
1094	in your config file and
1095		hint.pmtimer.0.at="isa"
1096	to your /boot/device.hints file.
1097
109820000911:
1099	The random device has been turned into a (pseudo-)device,
1100	rather than an option. The supplied kernel config files have
1101	been updated. You will need to do something similar in your
1102	own kernel config file.
1103	Remove:
1104		options		RANDOMDEV
1105	Add:
1106		device		random
1107	If you prefer to load the loadable module, you need to do
1108	nothing.
1109
111020000909:
1111	The random device module has been renamed from randomdev.ko to
1112	random.ko. You will need to edit your /boot/loader.conf to
1113	reflect this if you load this module at boot time.
1114	The line should read:
1115		random_load="YES"
1116
111720000907:
1118	The SMPNG commit has happened.  It should work, but if it
1119	doesn't, fallback to the PRE_SMPNG CVS tag.  There are likely
1120	to be a variety of minor issues.  Please see 20000905 to make
1121	sure you don't have model loading problems which might at
1122	first blush appear related to SMP.
1123
112420000906:
1125	nsswitch has been imported from NetBSD.  Among other things,
1126	this means that /etc/host.conf is no longer used.  See
1127	nsswitch.conf(5) instead.  Note that at boot time rc.network
1128	will attempt to produce a new nsswitch.conf file for you if you
1129	don't have one, and you have host.conf.
1130
113120000905:
1132	The ucred structure changed size.  This breaks the interface
1133	that mountd uses.  Trying to use an older mountd with a newer
1134	kernel guarantees a panic.  This means that you need to use
1135	kernels newer than today only with matching mountd, but you
1136	needed to do that anyway with the boot loader changes.
1137
113820000905:
1139	The boot loader has been updated.  The new default kernel is
1140	now /boot/kernel/kernel.ko.  The new default module location
1141	is /boot/kernel.
1142
1143	You *MUST* upgrade your boot loader and kernel at the same time.
1144	The easiest way to do this is to do the buildworld/buildkernel/
1145	installkernel/installworld dance.
1146
1147	Furthermore, you are urged to delete your old /modules directory
1148	before booting the new kernel, since kldload will find stale
1149	modules in that directory instead of finding them in the correct
1150	path, /boot/kernel.  The most common complaint that this cures
1151	is that the linux module crashes your machine after the update.
1152
1153	if [ ! -d /boot/kernel.old ]; then
1154		mv /modules.old /boot/kernel.old
1155		chflags noschg /kernel.old
1156		mv /kernel.old /boot/kernel.old/kernel.ko
1157		chflags schg /boot/kernel.old/kernel.ko
1158	fi
1159
116020000904:
1161	A new issue with the sendmail upgrade has come to light.
1162	/etc/aliases has moved to /etc/mail/aliases.  Mergemaster will
1163	incorrectly install the default aliases in /etc/mail rather than
1164	move the old one from /etc.  So you'll need to manually move the
1165	file, create a symbolic link, remove the old /etc/aliases.db and
1166	run newaliases.  For safety sake, you should stop sendmail
1167	while doing this and run the upgrade when locally sourced email
1168	is not likely to be generated.
1169
117020000825:
1171	/boot/device.hints is now required for installkernel to
1172	succeed.  You should copy GENERIC.hints for your architecture
1173	into /boot/device.hints.  If and only if you compile hints
1174	into your kernel, then this file may be empty.  Please note,
1175	if you have an empty or missing /boot/device.hints file and
1176	you neglected to compile hints into your kernel, no boot
1177	messages will appear after the boot loader tries to start the
1178	kernel.
1179
118020000821:
1181	If you do NOT have ``options RANDOMDEV'' in your kernel and
1182	you DO want the random device then add randomdev_load="YES" to
1183	/boot/loader.conf.
1184
118520000812:
1186	suidperl is now always built and installed on the system, but
1187	with permissions of 511.  If you have applications that use
1188	this program, you are now required to add ENABLE_SUIDPERL=true
1189	to /etc/make.conf.  If you forget to do this,
1190		chmod 4511 /usr/bin/suidperl
1191	will fix this until the next build.
1192
119320000812:
1194	sendmail has been updated from 8.9.3 to 8.11.0.  Some of the more
1195	visible changes that may immediately affect your configuration
1196	include:
1197	- New default file locations from src/contrib/sendmail/cf/README
1198	- newaliases limited to root and trusted users
1199	- MSA port (587) turned on by default
1200	- New queue file naming system so can't go from 8.11 -> 8.9
1201	- FEATURE(`rbl') renamed to FEATURE(`dnsbl')
1202	- FEATURE(`nullclient') is more full featured
1203	- FEATURE(`nouucp') requires an argument: `reject' or `nospecial'
1204	- mail.local FreeBSD-only -b option changed to -B
1205	- See src/contrib/sendmail/RELEASE_NOTES for more info
1206
120720000810:
1208	suidperl (aka sperl) is no longer build by default.  You must
1209	specifically define BUILD_SUIDPERL to "true" for it to be build.
1210	Furthermore, we recommend that you remove /usr/bin/sperl* and
1211	/usr/bin/suidperl files from your system unless you have a
1212	specific use for it.
1213
121420000729:
1215	Networking defaults have been tightened.  Anybody upgrading
1216	/etc/defaults/rc.conf needs to add the following lines to
1217	/etc/rc.conf if they want to have the same setup
1218	afterwards (unless the variables already are set, of course):
1219		# Enable network daemons for user convenience.
1220		inetd_enable="YES"
1221		portmap_enable="YES"
1222		sendmail_enable="YES"
1223
122420000728:
1225	If you have null_load="YES" in your /boot/loader.conf, you
1226	will need to change that to nullfs_load="YES".
1227
122820000728:
1229	The "installkernel" target has changed slightly. Now even if
1230	you override KERNEL e.g. 'make installkernel KERNEL=MYKERNEL'
1231	it will install the MYKERNEL file (built with the buildkernel
1232	target) as /kernel rather than /MYKERNEL. Those who have
1233	updated their /boot/loader.conf files to point to /MYKERNEL
1234	should remove that entry or perform manual rename of /kernel
1235	to /MYKERNEL.
1236
123720000711:
1238	If you use CVSUP or CTM to get CVS trees, AND you used to get
1239	the old crypto files from internat.freebsd.org AND you check
1240	out files from the CVS tree with the cvs command, please read
1241		http://people.freebsd.org/~imp/internat.txt
1242	for details on potential problems that you might have and how
1243	to get around them.
1244
1245	If you are merely a mirror, or don't answer yes to each of the
1246	clauses above, you needn't worry.
1247
124820000711:
1249	/etc/security has been updated to print the inode number of
1250	setuid programs that have changed.  You will see a large spike
1251	in the number of changed programs the first time when you run
1252	mergemaster to get a new /etc/security.
1253
125420000710:
1255	/dev/random now has good entropy collection (from the keyboard
1256	and sysmouse drivers). Please ensure that either `options
1257	RANDOMDEV' is present in your kernel config file or that
1258	`randomdev_load="YES"' is in your /boot/loader.conf. If you do
1259	not have the /dev/random driver, OpenSSL (and consequently
1260	lots of crypto tools (like SSH)) will fail with strange
1261	errors. (see below, 20000624).
1262
1263	FreeBSD-current is safe again to run Crypto.
1264
126520000709:
1266	phk made the malloc default options AJ.  This may slow things
1267	down and uncover other latent bugs in the code.  If you need to
1268	run at full speed, you can disable this by doing the following:
1269		ln -s aj /etc/malloc.conf
1270
127120000706:
1272	libftpio's version was accidentally bumped a few days ago.  This
1273	has been corrected.  You may need to remove /usr/lib/libftpio.so.6
1274	before doing your next buildworld/installworld pair.  It certainly
1275	won't hurt to remove it before the update procedure.  It will
1276	break fetch until a new one is built, but ftp can be used in the
1277	interim if needed.
1278
127920000705:
1280	The crypto packages have changed for the cvsup.  This has been done
1281	in a backward compatible way, but the old packages will go away at
1282	some point in the future.  Look at /usr/share/examples/cvsup for
1283	details.
1284
128520000704:
1286	With the new sys/modules/sound/drivers/*, you will need to
1287	set SYSDIR until you do an installworld after July 7th.
1288
128920000704:
1290	rc.shutdown and rc will now call the rc.d scripts with start
1291	or stop.  This may cause some harmless warnings from older
1292	rc.d scripts that haven't been updated.
1293
129420000630:
1295	The libfetch based version of fetch has gone into the tree.
1296	Minor problems may result on some of the less popular sites,
1297	which should be reported to des@freebsd.org.
1298
129920000625:
1300	From approximately this date forward, one must have the crypto
1301	system installed in order to build the system and kernel.
1302	While not technically strictly true, one should treat it as
1303	required and grab the crypto bits.  If you are grabbing CVS
1304	trees, src-all and cvs-crypto should be treated as if they
1305	were required.  You should check with the latest collections
1306	to make sure that these haven't changed.
1307
130820000624:
1309	Mark Murray just committed the first parts of a cleanup of
1310	/dev/zero, et al.  This is also cleaning up /dev/random.
1311	The entropy is disconnected, so DO NOT USE VERSIONS OF FREEBSD
1312	-CURRENT FROM THIS POINT to 2000710 for cryptographic services
1313	until Mark can merge in the fixes to this work in progress.
1314	openssh and openssl should not be used to generate keys from this
1315	date to the completion of the work.
1316
1317	If you must operate at this reduced level of security, add '
1318	options RANDOMDEV' to your kernel or modload the randomdev
1319	module.  You may also need to copy a new MAKEDEV to /dev and
1320	recreate the random and urandom devices.
1321
132220000622:
1323	The license on the softupdates is now a standard 2 clause
1324	BSD license.  You may need to remove your symbolic links
1325	that used to be required when updating.
1326
132720000621:
1328	Scott Flatman <sf@aracnet.com> sent in a decent write-up on
1329	the config file update procedure.
1330		http://people.freebsd.org/~imp/config-upd.html
1331	NOTE: LINT is gone.  It has been replaced with NOTES.  NOTES
1332	isn't buildable.  However, you can generate a LINT file:
1333		cd /sys/<ARCH>/conf && make LINT
1334
133520000620:
1336	Binutils 2.10 have hit the tree, or will shortly.  As soon
1337	as they do, the problem noted in 20000522 will be resolved and
1338	that workaround will no longer be required.
1339
134020000615:
1341	phk removed the compatibility creation of wd devices in the
1342	ad driver.  If you haven't done so already, you must update
1343	your fstab, etc to use the ad devices instead of the wd
1344	devices.
1345
1346	In addition, you'll need to update your boot blocks to a
1347	more modern version, if you haven't already done so.  Modern
1348	here means 4.0 release or newer (although older releases
1349	may work).
1350
135120000612:
1352	Peter took an axe to config(8).  Be sure that you read his mail
1353	on the topic before even thinking about updating.  You will
1354	need to create a /boot/device.hints or add a hints directive
1355	to your config file to compile them in statically.  The format
1356	of the config file has changed as well.  Please see GENERIC or
1357	NEWCARD for examples of the new format.
1358
1359	Indirectly, this also breaks USERCONFIG.  Unless a newer entry
1360	says that it has been fixed, assume that must use the hints mechanism
1361	in the loader if you need to use a machine with very old ISA cards
1362	in it.
1363
136420000522:
1365	A new set of binutils went into the tree today.  Anybody
1366	building a kernel after this point is advised that they need
1367	to rebuild their binutils (or better yet do a
1368	buildworld/installworld) before building a new kernel.
1369
1370	Due to bugs in binutils, using malloc options (eg /etc/malloc.conf
1371	or MALLOC_OPTIONS env var) J will cause ld to dump core.  It
1372	is recommended that you don't set this option until the problem
1373	is resolved.
1374
137520000513:
1376	The ethernet drivers were all updated to clean up the BPF handling.
1377
137820000510:
1379	The problems with boot blocks on the alphas have been corrected.
1380	This will require some care in updating alphas.  A new libstand
1381	is requires for the boot blocks to build properly.
1382
138320000503:
1384	Recompile all kld modules.  Proper version dependency info
1385	is now available.
1386
138720000502:
1388	Modules have been disconnected from the buildworld tree and
1389	connected to the kernel building instead.
1390
139120000427:
1392	You may need to build gperf
1393		cd /usr/src/gnu/usr.bin/gperf && make depend all install
1394	when upgrading from 4.0 -> current.  The build system now uses
1395	an option only in -current.
1396
139720000417:
1398	The method that we brand ELF binaries has changed to be more
1399	acceptable to the binutils maintainers.  You will need to
1400	rebrand your ELF binaries that aren't native.  One problem
1401	binary is the Linux ldconfig.  After your make world, but
1402	before you reboot, you'll need to issue:
1403		brandelf -t Linux /compat/linux/sbin/ldconfig
1404	if you have Linux compatibility enabled on your machine.
1405
140620000320:
1407	If you have really bad/marginal IDE drives, you may find they
1408	don't work well.  Use pio mode instead.  The easiest way to
1409	cope if you have a problem combination is to add:
1410		/sbin/sysctl hw.ata.ata_dma=0
1411	to the start of /etc/rc.conf.
1412
141320000319:
1414	The ISA and PCI compatibility shims have been connected to the
1415	options COMPAT_OLDISA and COMPAT_OLDPCI.  If you are using old
1416	style PCI or ISA drivers (i.e. tx, voxware, etc.) you must
1417	include the appropriate option in your kernel config.  Drivers
1418	using the shims should be updated or they won't ship with
1419	5.0-RELEASE, targeted for 2001.
1420
142120000318:
1422	We've entered the traditional post release dumping party.
1423	Large kernel changes are being committed and are in the
1424	works.  It is important to keep the systems' klds and kernel
1425	in sync as kernel interfaces and structures are changing.
1426	Before reporting kernel panics, make sure that all modules
1427	that you are loading are up to date.
1428
142920000315:
1430	If you are upgrading from an older version of FreeBSD, you
1431	need to update your boot blocks as well.  'disklabel -B ad0'
1432	will do the trick.  This isn't critical until you remove your
1433	wd device entries in /dev, at which point your system will not
1434	boot.
1435
143620000315:
1437	4.0 RELEASE shipped.  Please see the 4.0 UPDATING file for how
1438	to upgrade to 4.0 from 3.x.
1439
1440COMMON ITEMS:
1441
1442	General Notes
1443	-------------
1444	Avoid using make -j when upgrading.  From time to time in the
1445	past there have been problems using -j with buildworld and/or
1446	installworld.  This is especially true when upgrading between
1447	"distant" versions (eg one that cross a major release boundary
1448	or several minor releases, or when several months have passed
1449	on the -current branch).
1450
1451	Sometimes, obscure build problems are the result of environment
1452	poisoning.  This can happen because the make utility reads its
1453	environment when searching for values for global variables.
1454	To run your build attempts in an "environmental clean room",
1455	prefix all make commands with 'env -i '.  See the env(1) manual
1456	page for more details.
1457
1458	To build a kernel
1459	-----------------
1460	If you are updating from a prior version of FreeBSD (even one just
1461	a few days old), you should follow this procedure. With a
1462	/usr/obj tree with a fresh buildworld,
1463	make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1464	make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1465
1466	To just build a kernel when you know that it won't mess you up
1467	--------------------------------------------------------------
1468	This assumes you are already running a 5.X system.  Replace
1469	${arch} with the architecture of your machine (e.g. "i386",
1470	"alpha", "amd64", "ia64", "pc98", "sparc64", etc).
1471
1472	cd src/sys/${arch}/conf
1473	config KERNEL_NAME_HERE
1474	cd ../compile/KERNEL_NAME_HERE
1475	make depend
1476	make
1477	make install
1478
1479	If this fails, go to the "To build a kernel" section.
1480
1481	To rebuild everything and install it on the current system.
1482	-----------------------------------------------------------
1483	# Note: sometimes if you are running current you gotta do more than
1484	# is listed here if you are upgrading from a really old current.
1485
1486	<make sure you have good level 0 dumps>
1487	<maybe fix /etc/fstab>				[7]
1488	make buildworld
1489	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1490	make installkernel KERNCONF=YOUR_KERNEL_HERE
1491							[1]
1492	<reboot in single user>				[3]
1493	/etc/rc.d/preseedrandom				[10]
1494	mergemaster -p					[5]
1495	make installworld
1496	mergemaster					[4]
1497	<reboot>
1498
1499
1500	To cross-install current onto a separate partition
1501	--------------------------------------------------
1502	# In this approach we use a separate partition to hold
1503	# current's root, 'usr', and 'var' directories.   A partition
1504	# holding "/", "/usr" and "/var" should be about 2GB in
1505	# size.
1506
1507	<make sure you have good level 0 dumps>
1508	<boot into -stable>
1509	make buildworld
1510	<maybe newfs current's root partition>
1511	<mount current's root partition on directory ${CURRENT_ROOT}>
1512	make installworld DESTDIR=${CURRENT_ROOT}
1513	make buildkernel KERNCONF=YOUR_KERNEL_HERE
1514	cp /usr/src/sys/${ARCH}/conf/GENERIC.hints \
1515		${CURRENT_ROOT}/boot/device.hints	# as needed
1516	make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1517	cd /usr/src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1518	cp /etc/fstab ${CURRENT_ROOT}/etc/fstab 		   # if newfs'd
1519	<edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1520	<reboot into current>
1521	<do a "native" rebuild/install as described in the previous section>
1522	<maybe install compatibility libraries from /usr/src/lib/compat>
1523 	<reboot>
1524
1525
1526	To upgrade in-place from 4.x-stable to current
1527	----------------------------------------------
1528	# 5.x uses more space than 4.x.  Also, the location of kernel
1529	# modules has changed.  If you are installing 5.0 onto a 4.x
1530	# system, you'll need about 30MB of free disk space on your /
1531	# partition.  If you have less than this, you may encounter difficult
1532	# to back out of problems with this procedure.  If /tmp is on
1533	# the / partition, you may want to completely remove all its content
1534	# before upgrading, as this can be a common source of shortage of
1535	# space on /.
1536
1537	<make sure you have good level 0 dumps>
1538	<maybe fix /etc/fstab>				[7]
1539	make buildworld					[9]
1540	make buildkernel KERNCONF=YOUR_KERNEL_HERE	[8]
1541	cp sys/${MACHINE}/conf/GENERIC.hints /boot/device.hints [2]
1542	make installkernel KERNCONF=YOUR_KERNEL_HERE
1543	cd sys/boot ; make STRIP="" install			[6]
1544							[1]
1545	<reboot in single user>				[3]
1546	/usr/src/etc/rc.d/preseedrandom				[10]
1547	mergemaster -p					[5]
1548	rm -rf /usr/include/g++
1549	make installworld
1550	mergemaster -i					[4]
1551	<reboot>
1552
1553	Make sure that you've read the UPDATING file to understand the
1554	tweaks to various things you need.  At this point in the life
1555	cycle of current, things change often and you are on your own
1556	to cope.  The defaults can also change, so please read ALL of
1557	the UPDATING entries.
1558
1559	Also, if you are tracking -current, you must be subscribed to
1560	freebsd-current@freebsd.org.  Make sure that before you update
1561	your sources that you have read and understood all the recent
1562	messages there.  If in doubt, please track -stable which has
1563	much fewer pitfalls.
1564
1565	[1] If you have third party modules, such as vmware, you
1566	should disable them at this point so they don't crash your
1567	system on reboot.
1568
1569	[2] If you have legacy ISA devices, you may need to create
1570	your own device.hints to reflect your unique hardware
1571	configuration.
1572
1573	[3] From the bootblocks, boot -s, and then do
1574		fsck -p
1575		mount -u /
1576		mount -a
1577		cd /usr/src
1578		adjkerntz -i		# if CMOS is wall time
1579	Also, when doing a major release upgrade, it is required that
1580	you boot into single user mode to do the installworld.
1581	For the 4.x -> 5.0 upgrade, you will also see many messages about
1582	needing to recompile your userland.  These are harmless and can
1583	be ignored while you proceed to the next step.
1584
1585	[4] Note: This step is non-optional.  Failure to do this step
1586	can result in a significant reduction in the functionality of the
1587	system.  Attempting to do it by hand is not recommended and those
1588	that pursue this avenue should read this file carefully, as well
1589	as the archives of freebsd-current and freebsd-hackers mailing lists
1590	for potential gotchas.
1591
1592	[5] Usually this step is a noop.  However, from time to time
1593	you may need to do this if you get unknown user in the following
1594	step.  It never hurts to do it all the time.  You may need to
1595	install a new mergemaster (cd src/usr.sbin/mergemaster && make
1596	install) after the buildworld before this step if you last updated
1597	from current before 20020224 or from -stable before 20020408.
1598
1599	[6] 4.x boot loader can be used to boot a 5.x system, however
1600	it is difficult to do that at best.  If you wish to try, then
1601	you should interrupt the boot and at the ok prompt type:
1602		ok unload
1603		ok boot /boot/kernel/kernel
1604	If this fails to work, you must install a new boot loader as
1605	described here.
1606
1607	[7] Before you upgrade, please make sure that you are not using
1608	compatibility slices.  These are device names of the form, on i386
1609	and other architectures that use MBR slicing, /dev/ad0a without the
1610	actual slice name.  Chances are excellent that these will break.
1611	You generally must update these entries to use the post FreeBSD
1612	2.x form of /dev/ad0s1a.
1613
1614	[8] In order to have a kernel that can run the 4.x binaries
1615	needed to do an installworld, you must include the COMPAT_FREEBSD4
1616	option in your kernel.  Failure to do so may leave you with a system
1617	that is hard to boot to recover.
1618
1619	[9] When checking out sources, you must include the -P flag to have
1620	cvs prune empty directories. Also, if CPUTYPE is defined in your
1621	/etc/make.conf, make sure to use the "?=" instead of the "=" assignment
1622	operator, so that buildworld can override the CPUTYPE if it needs to.
1623	In case you would like to avoid installing new packages of everything,
1624	you might want to uncomment the "COMPAT4X=	YES" entry, so that 4.x
1625	compatibility libraries are build which should allow you to continue
1626	using your existing software for a while.
1627
1628	[10] In order to create temporary files, /dev/random must be
1629	initialized by feeding data into it.  /etc/rc.d/preseedrandom
1630	takes care of this.
1631FORMAT:
1632
1633This file contains a list, in reverse chronological order, of major
1634breakages in tracking -current.  Not all things will be listed here,
1635and it only starts on March 15, 2000.  Updating files can found in
1636previous releases if your system is older than this.
1637
1638Copyright information:
1639
1640Copyright 1998, 2002 M. Warner Losh.  All Rights Reserved.
1641
1642Redistribution, publication, translation and use, with or without
1643modification, in full or in part, in any form or format of this
1644document are permitted without further permission from the author.
1645
1646THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1647IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1648WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1649DISCLAIMED.  IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1650INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1651(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1652SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1653HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1654STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1655IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1656POSSIBILITY OF SUCH DAMAGE.
1657
1658If you find this document useful, and you want to, you may buy the
1659author a beer.
1660
1661Contact Warner Losh if you have any questions about your use of
1662this document.
1663
1664$FreeBSD: head/UPDATING 131361 2004-06-30 19:52:40Z njl $
1665