ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
Revision: 3483
Committed: Thu Sep 2 12:58:27 2010 UTC (13 years, 9 months ago) by laffer1
File size: 26556 byte(s)
Log Message:
Document security update.

File Contents

# Content
1 Updating Information for MidnightBSD users
2
3 20100902:
4 Fix a security issue with libutil that allows users to bypass cpu limits in
5 login.conf in some cases. This combined with OpenSSH for example can allow
6 the user to get more resources than they're allowed.
7
8 20100822:
9 Import Apple's mDNSResponder (mdnsd).
10
11 20100814:
12 libdispatch added to MidnightBSD. This provides functionality found in
13 Mac OS X's GCD. We do not have blocks support yet. As this code is
14 licensed under Apache 2, we create a new MK_APACHE option so that
15 it's not required for all users to run code under a license they
16 may not like.
17
18 20100713:
19 mbuf readonly fix related to sendfile(2) data corruption.
20
21 20100704:
22 brainfuck(1) imported from MirBSD.
23
24 20100505:
25 zlib 1.2.5
26
27 20100430:
28 Sudo 1.7.2p6 imported
29
30 20100321:
31 Update zlib to 1.2.4
32
33 20100319:
34 Removed i586 from default i386 generic kernel.
35
36 20100317:
37 Update to tzdata2010e (time zones). This includes changes in
38 Mexico.
39
40 Add support for several newer sound cards via hda including
41 ATI and Realtek chipsets.
42
43 20100313:
44 CPU detection has been changed. VIA Padlock detection added.
45
46 20100312:
47 Fix a number of bugs and compiler warnings in libmport. Handle
48 plus signs in paths for mport.check-fake
49
50 20100311:
51 mksh R39c
52
53 20100309:
54 Sudo 1.7.2p5
55
56 sqlite3 3.6.23
57
58 mksh R39b
59
60 libffi (ffi) 3.0.9
61
62 20100206:
63 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
64 properly pass arguments to ld.
65
66 re(4) and rl(4) have been updated to support several new
67 realtek chipsets. Performance has been improved on re(4).
68
69 20100204:
70 Fix a bug cropping up on AMD64 MidnightBSD with sftp
71 segfaulting.
72
73 20100116:
74 Import ash changes from FreeBSD (bin/sh) 8-Stable.
75
76 BIND 9.6.1-P2
77
78 20100110:
79 Import Sendmail 8.14.4. Fix for SSL vulnerability.
80
81 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
82 install libc before doing a full buildworld when upating from 0.2 or
83 older current systems.
84
85 kqueue(2) was modified to support portions of libdispatch functionality.
86
87 20100106:
88 Bind security update. Fix a bug with DNSSEC that causes negative
89 cache entries and thus a possible DNS cache poisoning attack.
90
91 Fix a bug in ZFS that can reset permissions on system crashes.
92
93 20091228:
94 amdtemp(4) was added. It allows one to monitor to the temperature
95 of an AMD CPU such as a Phenom.
96
97 20091205:
98 OpenSSL security fix
99
100 The SSL version 3 and TLS protocols support session renegotiation without
101 cryptographically tying the new session parameters to the old parameters.
102
103 20091128:
104 OpenBSD sensors framework imported including sensorsd(8)
105
106 20091126:
107 OpenNTPD 4.4 import
108
109 Update OpenSSH to 5.3p1
110
111 mksh R39
112
113 20091124:
114 cpdup updated from DragonFly to 1.15
115
116 tzdata2009s updated with latest timezone data for November 2009.
117
118 20091010:
119 amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
120 to test current.
121
122 Revert unicode filename fixes from ntfs code. This was causing chaos
123 on amd64 systems.
124
125 20091006:
126 Update timezone data with tzdata2009n with the Pakistan and
127 Argentina changes.
128
129 Sync several userland utilities with versions from FreeBSD 7.0 in
130 sbin and usr.sbin.
131
132 20090919:
133 Update timezone data with tzdate2009m from September 2009.
134
135 20090729:
136 Patch for Bind 9 security vulnerability. a dynmaic update packet
137 can trigger an assertion and cause named to exit
138
139 20090606:
140 Remove PCC from the base system. This compiler will not work
141 as a system compiler for us as we've got some userland investment
142 in C++ code and may have Objective-C in the future. We're stuck
143 with a solution that supports these three languages at a minimum.
144
145 I had wanted to keep it as an optional compiler because it is
146 fast, however too many users want to try to use it for the base
147 system which makes no sense.
148
149 A hack was added for Cypress based usb hard drive enclosures to
150 the kernel. This should cut down on commands it claims to support
151 but does not (at the cam layer). Found while testing ZFS on
152 an external device.
153
154 20090520:
155 The powerd daemon no longer starts automatically to improve
156 compatibility with many systems. However, there is a new
157 installer option in the startup section to enable it. This
158 makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
159 out my new Phenom too.
160
161 20090502:
162 OpenSSH 5.2p1 import
163
164 ale(4) connected to the build. (kernel module only)
165
166 20090501:
167 Imported makefs utility from NetBSD/FreeBSD
168
169 20090422:
170 OpenSSL security update
171
172 The function ASN1_STRING_print_ex does not properly validate the lengths
173 of BMPString or UniversalString objects before attempting to print them.
174
175 20090415:
176 Created a Symbol.map for libc/ohash symbols
177
178 Updated several usr/bin usr/sbin utilities.
179
180 Corrected a bug with Makefile.inc1 causing the bootstrap
181 tools to fail.
182
183 20090405:
184 xorg 7.4 wants to configure its input devices via hald which does not
185 yet work with USB. If the keyboard/mouse does not work in xorg then
186 add
187 Option "AllowEmptyInput" "off"
188 to your ServerLayout section. This will cause X to use the configured
189 kbd and mouse sections from your xorg.conf
190
191 20090403:
192 mksh was disconnected a few day ago do to bugs with
193 buildworld and mports. Now, connect it back
194 for use as /bin/sh with a conditional called
195 MK_ASH. By default, ash is the standard /bin/sh
196 but we may change this later. This will allow further
197 testing by users and developers of mksh without
198 causing an unpleasant default experience. In the
199 long run, we need to fix mksh compatibility.
200
201 20090328:
202 Bring in mksh R37 from CVS. The dot.mkshrc files for root
203 and skel were changed. mksh(1) now replaces ash aka sh(1)
204 as the default /bin/sh. Please report bugs with
205 ports, etc. The ash code will remain in the repo for awhile
206 as I decide if we'll add something like MK_SHELL_ASH as
207 an optional build parameter.
208
209 ahd was disconnected from the lint environment until
210 the compiler bug is sorted (by updating gcc?)
211
212 Remove freebsd-tips from fortune files and change the
213 default for login and profile.
214
215 20090327:
216 Update libarchive to 2.5.5, tar, and add bsdcpio.
217
218 Also previously, ctriv has been connecting Perl 5.10
219 to the build (part of os). This will have an impact
220 on mports.
221
222 20090325:
223 Update Bind to 9.4.3-P1
224
225 Update mksh to R36b
226
227 Update tcpdump to 3.9.8, fix libpcap to work with current.
228
229 Update pnpinfo, sync with FreeBSD.
230
231 20090115:
232 Fix a problem with DNSSEC and BIND.
233
234 20090110:
235 For applications using OpenSSL for SSL connections, an invalid SSL
236 certificate may be interpreted as valid. This could for example be
237 used by an attacker to perform a man-in-the-middle attack.
238
239 Other applications which use the OpenSSL EVP API may similarly be
240 affected.
241
242 Stop cross site request forgery attacks in lukemftpd
243
244 20090104:
245 Import GNU libreadline 5.2
246
247 20090101:
248 Update time zone data to 2008i.
249
250 20081231:
251 Correct a problem where bluetooth and netgraph sockets are not
252 properly initialized.
253
254 Happy 2009.
255
256 20081206:
257 Due to the massive change in the underlying system under way,
258 we're naming the next release 1.0. The sys/sys/param.h was
259 changed accordingly. ipfilter and ncurses were corrected
260 using __MidnightBSD__ tests in the code.
261
262 The GENERIC kernel config was caught up on i386 today. Consider
263 i386 still broken, but amd64 is running again.
264
265 mdoc.local was updated with the new MidnightBSD version info.
266
267 batt(1) was rewritten in C. It now supports several flags and
268 runs about 8 times faster on my laptop. The default output
269 shows the number of minutes of battery life remaining and the
270 percentage. You can use -u to display the number of batteries or
271 -c to get script friendly output. Consult the man page for more.
272
273 20081204:
274 Work has completed on importing ZFS, jemalloc, several
275 new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
276 support, improved locking for file desc., audit (openbsm),
277 openssl .98e, nfe, imporved intel high def audio, midi, updated
278 intel gigabit (em), support for several wifi cards (intel), ...
279
280 Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
281 data from param.h instead of the FreeBSD version. This means
282 testing is now possible in the ports tree for the version
283 and that any ports or code relying on the FreeBSD version from
284 sys/sys/param.h will need to be fixed.
285
286 20080905:
287 update nve(4) to support new hardware.
288
289 20080801:
290 Import OpenBSM 1.0
291
292 Modify src/release to create 3 isos instead of 2 for packages.
293
294 etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
295
296 Many ia64, alpha, powerpc items were removed.
297
298 The recent diffutils 2.8.7 import was fixed.
299
300 20080703:
301 pcc was not installed properly when setting DESTDIR for live cds,
302 or posibly jails.
303
304 20080627:
305 Add firmware(9), WEP, CCMP, TKIP to GENERIC.
306
307 Add glabel to GENERIC.
308
309 Intel ICH8 mobile chipset used on some iMacs included with ata.
310
311 pcc connected to the build on i386. (alternative compiler)
312
313 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
314
315 20080528:
316 Sendmail 8.14.3
317
318 20080516:
319 ssh-vulnkey allows you to look for vulnerable ssh keys that
320 were generated on Debian and Ubuntu hosts over the last
321 few years. sshd can block offending keys with a configuration
322 option.
323
324 The elf note on binaries is now set to MidnightBSD.
325
326 20080514:
327 Fixed a number of problems with pcc. It is not yet connected
328 to the build, but usable on i386 hosts. You may use it
329 by make; make install in /usr/src/usr.bin/pcc. It will
330 install in /usr/local as some of the files conflict with
331 GCC versions. __MidnightBSD__ is defined in PCC as well.
332
333 System headers were fixed to allow pcc to compile many binaries
334 on MidnightBSD. bin/cp will work now for instance.
335
336 20080430:
337 __MidnightBSD__ is now defined via gcc. This can be tested
338 to determine we're running on MidnightBSD in the preprocessor.
339
340 20080429:
341 Import bind 9.4.2 with threading
342
343 libpthread (KSE) and libthr are built earlier
344
345 pcvt(4) removed!
346
347 Alias added for core2 cpus.
348
349 Alpha and PC98 only utilities removed from usr/sbin
350
351 syslogd, adduser, rmuser, mergemaster and mailwrapper have been
352 improved. See the man pages for info.
353
354 periodic scripts will not send emails with empty message bodies.
355 See mailwrapper fix.
356
357 20080410:
358 Sync cpdup with DragonFly. Add parallel transaction support and
359 -l flag to line-buffer stdout and stderr.
360
361 20080406:
362 Import bzip2 1.05
363 Import OpenSSH 4.9p1
364
365 20080322:
366 The default umask was changed to 022.
367
368 /usr/X11R6 paths were removed from several config files.
369
370 .mkshrc files are now installed for root.
371
372 20080316:
373 FIx a problem with gif0 tunnels and neighbors with IPV6.
374
375 20080312:
376 Add lndir from X.org. This aides in the porting of MirPorts.
377
378 New OS versions were added to the mapage code (groff)
379
380 20080310:
381 Correct a buffer overflow in ppp.
382
383 20080308:
384 Remove /usr/X11R6 from manpath config.
385
386 20080307:
387 Atheros driver no longer has several options set
388 which corrects building in tinderbox on all three platforms.
389
390 Added a new macro to sx.h which returns true if the current
391 thread holds an exclusive lock on a specifix sx.
392
393 Removed OS/2's HPFS file system. It's not maintained and
394 I don't know anyone using OS/2 or ecomstation these days.
395 My copy is in the closet collecting dust.
396
397 20080306:
398 Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
399 Developers can now use it to check src builds.
400
401 20080303:
402 Add mksh to /etc/shells, made some adjustments to options
403 for mksh builds per suggestion upstream.
404
405 USB HID table updated with modern hardware list.
406
407 Updated BSD family true (we're not in there yet)
408
409 iso3166 file updated and import of tzdata2007k for
410 new time zones.
411
412 Updated mksh to latest version R33.
413
414 20080228:
415 Remplaced the random IP id generation code with a new
416 version by Amit Klein.
417
418 20080221:
419 Sendfile write only permissions fix.
420
421 Removed some HPFS and PC98 code.
422
423 iso639 file sycned with DragonFly.
424
425 20080128:
426 Changed NTP configuration so that ips aren't cached
427 so multiple servers are used.
428
429 Fix an issue with fork() in libpthread.
430
431 20080121:
432 Add virtualization detection to set the HZ rate
433 according to a VM present. VMWare and Parallels
434 should work better like this.
435
436 Change to full x11 install in sysinstall. Add
437 xorg 7 support.
438
439 20080115:
440 Fix the handling of PTY's. CVE-2008-0216
441
442 20080105:
443 mport delete code added, USE_MPORT_TOOLS knob aded.
444
445 20080101:
446 Happy New Year
447
448 20071123:
449 Update sendmail to 8.14.2
450
451 20071120:
452 Update system compiler to gcc 3.4.6.
453
454 20071023:
455 Updated mksh to R31d.
456
457 20070911:
458 Updated mksh to version R31b.
459
460 Fixed stderr output in libpthread. Previously it was
461 written to stdout.
462
463 20070831:
464 Added dot.mkshrc file to support the recent change to
465 mksh from OpenBSD's ksh derived from pdksh.
466
467 Added new firewall configuration. ipfw is enabled by default
468 with a "desktop" configuration. Consult /etc/rc.firewall
469 or ipfw show to see the ruleset used. You can disable
470 ipfw by setting firewall_enable="NO" in /etc/rc.conf This
471 change only effects IPv4. IPv6 does not have a firewall
472 enabled by default.
473
474 20070814:
475 Removed GNU tar source. We've been using BSD tar
476 for awhile.
477
478 20070806:
479 Finished removing umapfs and autofs from the tree.
480
481 20070804:
482 BIND and Tcpdump have been patched for recent vulnerabilities.
483
484 We switched to BSD cpio (pax).
485
486 20070719:
487 Imported cpdup from DragonFly as /bin/cpdup
488
489 20070716:
490 Update GNU cpio to 2.8.
491
492 20070410:
493 cvs was updated to 1.12.13. cvsbug was removed.
494 cvs now behaves similarly to DragonFly's cvs with
495 most of their local changes.
496
497 20070409:
498 RELENG_0_1 was created. More aggresive changes will
499 continue here.
500
501 20070406:
502 Back out propolice. propolice caused several problems
503 with our threading libraries libthr and libpthread.
504 curthread was often NULL after the patch and many
505 multithreaded applications would crash. We plan to
506 work on either bringing in gcc 4.1 or developing a new
507 patch which also corrects our threading issues later.
508
509 It is more important to have a stable system for our
510 mport work and other projects at this time.
511
512 This is not a clean removal. It is recommended that you
513 have a recently SNAP CD handy. You can either reinstall
514 or perform a make buildworld and make buildkernel and
515 make installkernel. Reboot on the cd and copy the contents
516 of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
517 /usr/lib, and /usr/libexec to the respective directories on
518 your disk. Then you should be able to boot into single user
519 mode and run make installworld. You will need to run
520 chflags noschg on some of the files if you can't overwrite
521 them.
522
523 You will get __guard missing errors since we had to remove
524 this from libc.
525
526 You will need to rebuild any ports built while propolice was
527 installed.
528
529 20070401:
530 Importing propolice into MidnightBSD. Propolice is going to
531 provide us with much greater security and stability in the
532 long run. If upgrading from a pre-propolice system, please
533 follow the these instructions:
534
535 cd /usr/src/lib/libc && make obj && make && make install
536 cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
537 cd /usr/src/lib/libpthread && make obj && make && make install
538 cd /usr/src/lib/libthr && make obj && make && make install
539 buildworld and kernel
540
541 It is adviced that any mports which were installed and/or built
542 prior to the propolice update also be updated. If any errors
543 or issue are encounted, please contact security@midnightbsd.org
544 and we will be sure to investigate and come up with an expeditious
545 fix.
546
547 20070314:
548 Remove send-pr from src.
549
550 Switch to NetBSD's gzip.
551
552 Bump MBSD minor revision.
553
554 20070313:
555 Imported OpenSSH 4.6p1.
556
557 Imported FreeBSD's libarchive and updated tar to work with it.
558
559 Disabled debug statements cluttering up /var/log/messages for
560 the tcp autobuf patch applied previously.
561
562 20070312:
563 Synced several audio changes from FreeBSD 6.1. Removed the
564 BSD Daemon files from src/share.
565
566 20070308:
567 Added mfi which supports LSI Logic MegaRAID SAS devices including
568 the Dell perc5i.
569
570 20070206:
571 Imported OpenBSD's sudo into source. Please install
572 /usr/src/usr.bin/sudo/lib first before building.
573
574 Those who install from a snapshot after this date
575 will not be effected.
576
577 20070119:
578 Added audit group. Be sure to add audit to your /etc/group file
579 before installing world.
580
581 hostapd was updated to 0.4.8.
582
583 An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
584 unbreak world.
585
586 wpa_supplicant was updated.
587
588 For stability and compatibility reasons, it was decided that MidnightBSD
589 sync with FreeBSD 6.1 Release. Nearly every change between the original
590 fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
591 2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
592 will not sync every little change with FreeBSD.
593
594 20061231:
595 Updated COPYRIGHT for 2007.
596
597 Updated and bumped libutil after importing NetBSD efun(3) functions.
598
599 Added MidnightBSD_version and bumped the FreeBSD version as we've
600 synced all commits between the fork and that version. It is now safe
601 to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
602 Feb 26, 2006.
603
604 Added spell(1) and deroff(1) from NetBSD. Also added additional
605 dict files to work with it. /usr/share/dict/american,
606 /usr/share/dict/british and /usr/share/dict/special/math
607
608 Numerous man page and bug fixes.
609
610 20061226:
611 Setup /usr/share/examples/cvsup SUPfiles for the new
612 MidnightBSD CVSup server.
613
614 Fix a bug in burncd where it would continue forever while
615 erasing CDRW media.
616
617 Add csup to /usr/bin. csup is a CVSup replacement written
618 in C.
619
620 Fixed a bug with bsnmpd build from Oct 30.
621
622 Corrected some race conditions and fixed a few bugs in
623 geom. Imported changes from FreeBSD RELENG_6.
624
625 20061225:
626 Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
627 that caused long double to long and long long
628 conversion of negative numbers to always result in -1.
629
630 20061221:
631 Fixed acpi_battery.c to not report an ERROR if no
632 batteries are present.
633
634 Performed some minor updates on the RL and RE NIC drivers.
635 RL should no longer panic when trying to print errors.
636
637 Corrected a bug with TTY.
638
639 20061218:
640 Corrected a bug with libpthread where newly created suspended
641 threads don't get scheduled.
642
643 20061206:
644 Fixed a typo with the firewire security patch.
645
646 20061129:
647 Minor cleanups to utilities in bin.
648
649 Fixed msdos file system short file name behavior to match
650 FreeBSD.
651
652 20061031:
653 Updated man pages in section 7.
654
655 20061030:
656 Updated sys/dev/drm to support intel 915 and radeon
657 r300 cards properly.
658
659 Synced snmpd with FreeBSD-stable.
660
661 Fixed a bug in rm which could cause data loss.
662
663 20061027:
664 Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
665 random, kbdmux, atkbd, and usb were updated. Changes
666 to clearing registers on SSE enabled processors (i386)
667 commited.
668
669 lukemftpd updated.
670
671 openssh rc script was altered which effects initial
672 seeding.
673
674 20061014:
675 Workaround for em driver problem on shared IRQ.
676
677 Started removal of alpha support.
678
679 20061013:
680 ATA driver was updated. USB/USB1/USB2 types added.
681
682 20061010:
683 OpenSSH was updated to 4.4p1.
684
685 20060909:
686 OpenNTPD was added to MidnightBSD. Run make delete-old to remove
687 the old ntpd daemon.
688
689 cat has a new option -D which allows you to timestamp output
690 on a per line basis.
691
692 The kernel has a keyboard mux which allows you to have multiple
693 keyboard connected simultaneously. USB keyboard support was also
694 improved with this patch.
695
696 The Intel em driver was updated. Network performance was greatly
697 increased on many systems. Additional models are supported.
698
699 The ATA driver was patched to fix a potential deadlock.
700
701 Bind was patched to fix a potential denial of service condition.
702
703 20060817:
704 ksh has been added to the base system. If you previously had
705 the port installed, it will be overwritten on the next buildworld.
706
707
708
709 To build a kernel
710 -----------------
711 If you are updating from a prior version of MidnightBSD (even one just
712 a few days old), you should follow this procedure. With a
713 /usr/obj tree with a fresh buildworld,
714 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
715 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
716
717 To test a kernel once
718 ---------------------
719 If you just want to boot a kernel once (because you are not sure
720 if it works, or if you want to boot a known bad kernel to provide
721 debugging information) run
722 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
723 nextboot -k testkernel
724
725 To just build a kernel when you know that it won't mess you up
726 --------------------------------------------------------------
727 This assumes you are already running a 6.X system. Replace
728 ${arch} with the architecture of your machine (e.g. "i386",
729 "amd64", "ia64", "pc98", "sparc64", etc).
730
731 cd src/sys/${arch}/conf
732 config KERNEL_NAME_HERE
733 cd ../compile/KERNEL_NAME_HERE
734 make depend
735 make
736 make install
737
738 If this fails, go to the "To build a kernel" section.
739
740 To rebuild everything and install it on the current system.
741 -----------------------------------------------------------
742 # Note: sometimes if you are running current you gotta do more than
743 # is listed here if you are upgrading from a really old current.
744
745 <make sure you have good level 0 dumps>
746 make buildworld
747 make kernel KERNCONF=YOUR_KERNEL_HERE
748 [1]
749 <reboot in single user> [3]
750 mergemaster -p [5]
751 make installworld
752 make delete-old
753 mergemaster [4]
754 <reboot>
755
756
757 To cross-install current onto a separate partition
758 --------------------------------------------------
759 # In this approach we use a separate partition to hold
760 # current's root, 'usr', and 'var' directories. A partition
761 # holding "/", "/usr" and "/var" should be about 2GB in
762 # size.
763
764 <make sure you have good level 0 dumps>
765 <boot into -stable>
766 make buildworld
767 make buildkernel KERNCONF=YOUR_KERNEL_HERE
768 <maybe newfs current's root partition>
769 <mount current's root partition on directory ${CURRENT_ROOT}>
770 make installworld DESTDIR=${CURRENT_ROOT}
771 cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
772 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
773 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
774 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
775 <reboot into current>
776 <do a "native" rebuild/install as described in the previous section>
777 <maybe install compatibility libraries from src/lib/compat>
778 <reboot>
779
780
781 To upgrade in-place from 5.x-stable or higher to 6.x-stable
782 -----------------------------------------------------------
783 <make sure you have good level 0 dumps>
784 make buildworld [9]
785 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
786 [1]
787 <reboot in single user> [3]
788 mergemaster -p [5]
789 make installworld
790 make delete-old
791 mergemaster -i [4]
792 <reboot>
793
794 Make sure that you've read the UPDATING file to understand the
795 tweaks to various things you need. At this point in the life
796 cycle of current, things change often and you are on your own
797 to cope. The defaults can also change, so please read ALL of
798 the UPDATING entries.
799
800 Also, if you are tracking -current, you must be subscribed to
801 freebsd-current@freebsd.org. Make sure that before you update
802 your sources that you have read and understood all the recent
803 messages there. If in doubt, please track -stable which has
804 much fewer pitfalls.
805
806 [1] If you have third party modules, such as vmware, you
807 should disable them at this point so they don't crash your
808 system on reboot.
809
810 [3] From the bootblocks, boot -s, and then do
811 fsck -p
812 mount -u /
813 mount -a
814 cd src
815 adjkerntz -i # if CMOS is wall time
816 Also, when doing a major release upgrade, it is required that
817 you boot into single user mode to do the installworld.
818
819 [4] Note: This step is non-optional. Failure to do this step
820 can result in a significant reduction in the functionality of the
821 system. Attempting to do it by hand is not recommended and those
822 that pursue this avenue should read this file carefully, as well
823 as the archives of freebsd-current and freebsd-hackers mailing lists
824 for potential gotchas.
825
826 [5] Usually this step is a noop. However, from time to time
827 you may need to do this if you get unknown user in the following
828 step. It never hurts to do it all the time.
829
830 [8] In order to have a kernel that can run the 5.x binaries
831 needed to do an installworld, you must include the COMPAT_FREEBSD5
832 option in your kernel. Failure to do so may leave you with a system
833 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
834 is required to run the 5.x binaries on more recent kernels.
835
836 Make sure that you merge any new devices from GENERIC since the
837 last time you updated your kernel config file.
838
839 [9] When checking out sources, you must include the -P flag to have
840 cvs prune empty directories.
841
842 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
843 "?=" instead of the "=" assignment operator, so that buildworld can
844 override the CPUTYPE if it needs to.
845
846 MAKEOBJDIRPREFIX must be defined in an environment variable, and
847 not on the command line, or in /etc/make.conf. buildworld will
848 warn if it is improperly defined.
849
850 Copyright information:
851
852 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
853
854 Redistribution, publication, translation and use, with or without
855 modification, in full or in part, in any form or format of this
856 document are permitted without further permission from the author.
857
858 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
859 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
860 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
861 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
862 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
863 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
864 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
865 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
866 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
867 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
868 POSSIBILITY OF SUCH DAMAGE.
869
870 If you find this document useful, and you want to, you may buy the
871 author a beer.
872
873 Contact Warner Losh if you have any questions about your use of
874 this document.
875
876 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
877 $MidnightBSD: src/UPDATING,v 1.93 2010/08/22 22:19:05 laffer1 Exp $

Properties

Name Value
cvs2svn:cvs-rev 1.94