ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
Revision: 3681
Committed: Fri Feb 4 01:56:17 2011 UTC (13 years, 3 months ago) by laffer1
File size: 28090 byte(s)
Log Message:
Document openssl update.

File Contents

# Content
1 Updating Information for MidnightBSD users
2
3 20110203:
4 one true awk 20100523 imported
5
6 sqlite 3.7.5
7
8 OpenSSL 0.9.8q
9
10 20110202:
11 tcsh 6.17.00
12
13 file 5.05
14
15 20110122:
16 Import it(4) and lm(4), with support for Super I/O hardware monitors. This
17 uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
18
19 20110120:
20 BIND 9.6.2-P3
21
22 sudo 1.7.4-p6
23
24 20110115:
25 Add experimental jme(4) for Jmicron ethernet devices.
26
27 20101130:
28 A double free exists in the SSL client ECDH handling code, when
29 processing specially crafted public keys with invalid prime
30 numbers. [CVE-2010-2939]
31
32 20101120:
33 Several portions of the kernel and userland code related to UFS file
34 systems (and UFS2) cannot properly handle inode counts above 2^31 due
35 to use of int types. Based on a patch from FreeBSD, I've modified
36 our UFS2 implementation to handle unsigned values for inode counts
37 which should allow for file systems greater than 16TB.
38
39 newfs and growfs was also modified.
40
41 20101110:
42 Fix a security issue with pseudofs which could result in running code in kernel
43 context or a kernel panic depending on system configuration. This affects file
44 systems such as procfs for instance.
45
46 20101021:
47 sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
48 This is similar to functions present in many linux distros. The utility was
49 written by Devin Teske for FreeBSD.
50
51 20100920:
52 bzip2 security patch for integer overflow.
53
54 20100905:
55 MidnightBSD RELENG_0_3 branch created. Aggressive development continues here
56 for 0.4.
57
58 20100902:
59 Fix a security issue with libutil that allows users to bypass cpu limits in
60 login.conf in some cases. This combined with OpenSSH for example can allow
61 the user to get more resources than they're allowed.
62
63 20100822:
64 Import Apple's mDNSResponder (mdnsd).
65
66 20100814:
67 libdispatch added to MidnightBSD. This provides functionality found in
68 Mac OS X's GCD. We do not have blocks support yet. As this code is
69 licensed under Apache 2, we create a new MK_APACHE option so that
70 it's not required for all users to run code under a license they
71 may not like.
72
73 20100713:
74 mbuf readonly fix related to sendfile(2) data corruption.
75
76 20100704:
77 brainfuck(1) imported from MirBSD.
78
79 20100505:
80 zlib 1.2.5
81
82 20100430:
83 Sudo 1.7.2p6 imported
84
85 20100321:
86 Update zlib to 1.2.4
87
88 20100319:
89 Removed i586 from default i386 generic kernel.
90
91 20100317:
92 Update to tzdata2010e (time zones). This includes changes in
93 Mexico.
94
95 Add support for several newer sound cards via hda including
96 ATI and Realtek chipsets.
97
98 20100313:
99 CPU detection has been changed. VIA Padlock detection added.
100
101 20100312:
102 Fix a number of bugs and compiler warnings in libmport. Handle
103 plus signs in paths for mport.check-fake
104
105 20100311:
106 mksh R39c
107
108 20100309:
109 Sudo 1.7.2p5
110
111 sqlite3 3.6.23
112
113 mksh R39b
114
115 libffi (ffi) 3.0.9
116
117 20100206:
118 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
119 properly pass arguments to ld.
120
121 re(4) and rl(4) have been updated to support several new
122 realtek chipsets. Performance has been improved on re(4).
123
124 20100204:
125 Fix a bug cropping up on AMD64 MidnightBSD with sftp
126 segfaulting.
127
128 20100116:
129 Import ash changes from FreeBSD (bin/sh) 8-Stable.
130
131 BIND 9.6.1-P2
132
133 20100110:
134 Import Sendmail 8.14.4. Fix for SSL vulnerability.
135
136 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
137 install libc before doing a full buildworld when upating from 0.2 or
138 older current systems.
139
140 kqueue(2) was modified to support portions of libdispatch functionality.
141
142 20100106:
143 Bind security update. Fix a bug with DNSSEC that causes negative
144 cache entries and thus a possible DNS cache poisoning attack.
145
146 Fix a bug in ZFS that can reset permissions on system crashes.
147
148 20091228:
149 amdtemp(4) was added. It allows one to monitor to the temperature
150 of an AMD CPU such as a Phenom.
151
152 20091205:
153 OpenSSL security fix
154
155 The SSL version 3 and TLS protocols support session renegotiation without
156 cryptographically tying the new session parameters to the old parameters.
157
158 20091128:
159 OpenBSD sensors framework imported including sensorsd(8)
160
161 20091126:
162 OpenNTPD 4.4 import
163
164 Update OpenSSH to 5.3p1
165
166 mksh R39
167
168 20091124:
169 cpdup updated from DragonFly to 1.15
170
171 tzdata2009s updated with latest timezone data for November 2009.
172
173 20091010:
174 amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
175 to test current.
176
177 Revert unicode filename fixes from ntfs code. This was causing chaos
178 on amd64 systems.
179
180 20091006:
181 Update timezone data with tzdata2009n with the Pakistan and
182 Argentina changes.
183
184 Sync several userland utilities with versions from FreeBSD 7.0 in
185 sbin and usr.sbin.
186
187 20090919:
188 Update timezone data with tzdate2009m from September 2009.
189
190 20090729:
191 Patch for Bind 9 security vulnerability. a dynmaic update packet
192 can trigger an assertion and cause named to exit
193
194 20090606:
195 Remove PCC from the base system. This compiler will not work
196 as a system compiler for us as we've got some userland investment
197 in C++ code and may have Objective-C in the future. We're stuck
198 with a solution that supports these three languages at a minimum.
199
200 I had wanted to keep it as an optional compiler because it is
201 fast, however too many users want to try to use it for the base
202 system which makes no sense.
203
204 A hack was added for Cypress based usb hard drive enclosures to
205 the kernel. This should cut down on commands it claims to support
206 but does not (at the cam layer). Found while testing ZFS on
207 an external device.
208
209 20090520:
210 The powerd daemon no longer starts automatically to improve
211 compatibility with many systems. However, there is a new
212 installer option in the startup section to enable it. This
213 makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
214 out my new Phenom too.
215
216 20090502:
217 OpenSSH 5.2p1 import
218
219 ale(4) connected to the build. (kernel module only)
220
221 20090501:
222 Imported makefs utility from NetBSD/FreeBSD
223
224 20090422:
225 OpenSSL security update
226
227 The function ASN1_STRING_print_ex does not properly validate the lengths
228 of BMPString or UniversalString objects before attempting to print them.
229
230 20090415:
231 Created a Symbol.map for libc/ohash symbols
232
233 Updated several usr/bin usr/sbin utilities.
234
235 Corrected a bug with Makefile.inc1 causing the bootstrap
236 tools to fail.
237
238 20090405:
239 xorg 7.4 wants to configure its input devices via hald which does not
240 yet work with USB. If the keyboard/mouse does not work in xorg then
241 add
242 Option "AllowEmptyInput" "off"
243 to your ServerLayout section. This will cause X to use the configured
244 kbd and mouse sections from your xorg.conf
245
246 20090403:
247 mksh was disconnected a few day ago do to bugs with
248 buildworld and mports. Now, connect it back
249 for use as /bin/sh with a conditional called
250 MK_ASH. By default, ash is the standard /bin/sh
251 but we may change this later. This will allow further
252 testing by users and developers of mksh without
253 causing an unpleasant default experience. In the
254 long run, we need to fix mksh compatibility.
255
256 20090328:
257 Bring in mksh R37 from CVS. The dot.mkshrc files for root
258 and skel were changed. mksh(1) now replaces ash aka sh(1)
259 as the default /bin/sh. Please report bugs with
260 ports, etc. The ash code will remain in the repo for awhile
261 as I decide if we'll add something like MK_SHELL_ASH as
262 an optional build parameter.
263
264 ahd was disconnected from the lint environment until
265 the compiler bug is sorted (by updating gcc?)
266
267 Remove freebsd-tips from fortune files and change the
268 default for login and profile.
269
270 20090327:
271 Update libarchive to 2.5.5, tar, and add bsdcpio.
272
273 Also previously, ctriv has been connecting Perl 5.10
274 to the build (part of os). This will have an impact
275 on mports.
276
277 20090325:
278 Update Bind to 9.4.3-P1
279
280 Update mksh to R36b
281
282 Update tcpdump to 3.9.8, fix libpcap to work with current.
283
284 Update pnpinfo, sync with FreeBSD.
285
286 20090115:
287 Fix a problem with DNSSEC and BIND.
288
289 20090110:
290 For applications using OpenSSL for SSL connections, an invalid SSL
291 certificate may be interpreted as valid. This could for example be
292 used by an attacker to perform a man-in-the-middle attack.
293
294 Other applications which use the OpenSSL EVP API may similarly be
295 affected.
296
297 Stop cross site request forgery attacks in lukemftpd
298
299 20090104:
300 Import GNU libreadline 5.2
301
302 20090101:
303 Update time zone data to 2008i.
304
305 20081231:
306 Correct a problem where bluetooth and netgraph sockets are not
307 properly initialized.
308
309 Happy 2009.
310
311 20081206:
312 Due to the massive change in the underlying system under way,
313 we're naming the next release 1.0. The sys/sys/param.h was
314 changed accordingly. ipfilter and ncurses were corrected
315 using __MidnightBSD__ tests in the code.
316
317 The GENERIC kernel config was caught up on i386 today. Consider
318 i386 still broken, but amd64 is running again.
319
320 mdoc.local was updated with the new MidnightBSD version info.
321
322 batt(1) was rewritten in C. It now supports several flags and
323 runs about 8 times faster on my laptop. The default output
324 shows the number of minutes of battery life remaining and the
325 percentage. You can use -u to display the number of batteries or
326 -c to get script friendly output. Consult the man page for more.
327
328 20081204:
329 Work has completed on importing ZFS, jemalloc, several
330 new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
331 support, improved locking for file desc., audit (openbsm),
332 openssl .98e, nfe, imporved intel high def audio, midi, updated
333 intel gigabit (em), support for several wifi cards (intel), ...
334
335 Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
336 data from param.h instead of the FreeBSD version. This means
337 testing is now possible in the ports tree for the version
338 and that any ports or code relying on the FreeBSD version from
339 sys/sys/param.h will need to be fixed.
340
341 20080905:
342 update nve(4) to support new hardware.
343
344 20080801:
345 Import OpenBSM 1.0
346
347 Modify src/release to create 3 isos instead of 2 for packages.
348
349 etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
350
351 Many ia64, alpha, powerpc items were removed.
352
353 The recent diffutils 2.8.7 import was fixed.
354
355 20080703:
356 pcc was not installed properly when setting DESTDIR for live cds,
357 or posibly jails.
358
359 20080627:
360 Add firmware(9), WEP, CCMP, TKIP to GENERIC.
361
362 Add glabel to GENERIC.
363
364 Intel ICH8 mobile chipset used on some iMacs included with ata.
365
366 pcc connected to the build on i386. (alternative compiler)
367
368 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
369
370 20080528:
371 Sendmail 8.14.3
372
373 20080516:
374 ssh-vulnkey allows you to look for vulnerable ssh keys that
375 were generated on Debian and Ubuntu hosts over the last
376 few years. sshd can block offending keys with a configuration
377 option.
378
379 The elf note on binaries is now set to MidnightBSD.
380
381 20080514:
382 Fixed a number of problems with pcc. It is not yet connected
383 to the build, but usable on i386 hosts. You may use it
384 by make; make install in /usr/src/usr.bin/pcc. It will
385 install in /usr/local as some of the files conflict with
386 GCC versions. __MidnightBSD__ is defined in PCC as well.
387
388 System headers were fixed to allow pcc to compile many binaries
389 on MidnightBSD. bin/cp will work now for instance.
390
391 20080430:
392 __MidnightBSD__ is now defined via gcc. This can be tested
393 to determine we're running on MidnightBSD in the preprocessor.
394
395 20080429:
396 Import bind 9.4.2 with threading
397
398 libpthread (KSE) and libthr are built earlier
399
400 pcvt(4) removed!
401
402 Alias added for core2 cpus.
403
404 Alpha and PC98 only utilities removed from usr/sbin
405
406 syslogd, adduser, rmuser, mergemaster and mailwrapper have been
407 improved. See the man pages for info.
408
409 periodic scripts will not send emails with empty message bodies.
410 See mailwrapper fix.
411
412 20080410:
413 Sync cpdup with DragonFly. Add parallel transaction support and
414 -l flag to line-buffer stdout and stderr.
415
416 20080406:
417 Import bzip2 1.05
418 Import OpenSSH 4.9p1
419
420 20080322:
421 The default umask was changed to 022.
422
423 /usr/X11R6 paths were removed from several config files.
424
425 .mkshrc files are now installed for root.
426
427 20080316:
428 FIx a problem with gif0 tunnels and neighbors with IPV6.
429
430 20080312:
431 Add lndir from X.org. This aides in the porting of MirPorts.
432
433 New OS versions were added to the mapage code (groff)
434
435 20080310:
436 Correct a buffer overflow in ppp.
437
438 20080308:
439 Remove /usr/X11R6 from manpath config.
440
441 20080307:
442 Atheros driver no longer has several options set
443 which corrects building in tinderbox on all three platforms.
444
445 Added a new macro to sx.h which returns true if the current
446 thread holds an exclusive lock on a specifix sx.
447
448 Removed OS/2's HPFS file system. It's not maintained and
449 I don't know anyone using OS/2 or ecomstation these days.
450 My copy is in the closet collecting dust.
451
452 20080306:
453 Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
454 Developers can now use it to check src builds.
455
456 20080303:
457 Add mksh to /etc/shells, made some adjustments to options
458 for mksh builds per suggestion upstream.
459
460 USB HID table updated with modern hardware list.
461
462 Updated BSD family true (we're not in there yet)
463
464 iso3166 file updated and import of tzdata2007k for
465 new time zones.
466
467 Updated mksh to latest version R33.
468
469 20080228:
470 Remplaced the random IP id generation code with a new
471 version by Amit Klein.
472
473 20080221:
474 Sendfile write only permissions fix.
475
476 Removed some HPFS and PC98 code.
477
478 iso639 file sycned with DragonFly.
479
480 20080128:
481 Changed NTP configuration so that ips aren't cached
482 so multiple servers are used.
483
484 Fix an issue with fork() in libpthread.
485
486 20080121:
487 Add virtualization detection to set the HZ rate
488 according to a VM present. VMWare and Parallels
489 should work better like this.
490
491 Change to full x11 install in sysinstall. Add
492 xorg 7 support.
493
494 20080115:
495 Fix the handling of PTY's. CVE-2008-0216
496
497 20080105:
498 mport delete code added, USE_MPORT_TOOLS knob aded.
499
500 20080101:
501 Happy New Year
502
503 20071123:
504 Update sendmail to 8.14.2
505
506 20071120:
507 Update system compiler to gcc 3.4.6.
508
509 20071023:
510 Updated mksh to R31d.
511
512 20070911:
513 Updated mksh to version R31b.
514
515 Fixed stderr output in libpthread. Previously it was
516 written to stdout.
517
518 20070831:
519 Added dot.mkshrc file to support the recent change to
520 mksh from OpenBSD's ksh derived from pdksh.
521
522 Added new firewall configuration. ipfw is enabled by default
523 with a "desktop" configuration. Consult /etc/rc.firewall
524 or ipfw show to see the ruleset used. You can disable
525 ipfw by setting firewall_enable="NO" in /etc/rc.conf This
526 change only effects IPv4. IPv6 does not have a firewall
527 enabled by default.
528
529 20070814:
530 Removed GNU tar source. We've been using BSD tar
531 for awhile.
532
533 20070806:
534 Finished removing umapfs and autofs from the tree.
535
536 20070804:
537 BIND and Tcpdump have been patched for recent vulnerabilities.
538
539 We switched to BSD cpio (pax).
540
541 20070719:
542 Imported cpdup from DragonFly as /bin/cpdup
543
544 20070716:
545 Update GNU cpio to 2.8.
546
547 20070410:
548 cvs was updated to 1.12.13. cvsbug was removed.
549 cvs now behaves similarly to DragonFly's cvs with
550 most of their local changes.
551
552 20070409:
553 RELENG_0_1 was created. More aggresive changes will
554 continue here.
555
556 20070406:
557 Back out propolice. propolice caused several problems
558 with our threading libraries libthr and libpthread.
559 curthread was often NULL after the patch and many
560 multithreaded applications would crash. We plan to
561 work on either bringing in gcc 4.1 or developing a new
562 patch which also corrects our threading issues later.
563
564 It is more important to have a stable system for our
565 mport work and other projects at this time.
566
567 This is not a clean removal. It is recommended that you
568 have a recently SNAP CD handy. You can either reinstall
569 or perform a make buildworld and make buildkernel and
570 make installkernel. Reboot on the cd and copy the contents
571 of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
572 /usr/lib, and /usr/libexec to the respective directories on
573 your disk. Then you should be able to boot into single user
574 mode and run make installworld. You will need to run
575 chflags noschg on some of the files if you can't overwrite
576 them.
577
578 You will get __guard missing errors since we had to remove
579 this from libc.
580
581 You will need to rebuild any ports built while propolice was
582 installed.
583
584 20070401:
585 Importing propolice into MidnightBSD. Propolice is going to
586 provide us with much greater security and stability in the
587 long run. If upgrading from a pre-propolice system, please
588 follow the these instructions:
589
590 cd /usr/src/lib/libc && make obj && make && make install
591 cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
592 cd /usr/src/lib/libpthread && make obj && make && make install
593 cd /usr/src/lib/libthr && make obj && make && make install
594 buildworld and kernel
595
596 It is adviced that any mports which were installed and/or built
597 prior to the propolice update also be updated. If any errors
598 or issue are encounted, please contact security@midnightbsd.org
599 and we will be sure to investigate and come up with an expeditious
600 fix.
601
602 20070314:
603 Remove send-pr from src.
604
605 Switch to NetBSD's gzip.
606
607 Bump MBSD minor revision.
608
609 20070313:
610 Imported OpenSSH 4.6p1.
611
612 Imported FreeBSD's libarchive and updated tar to work with it.
613
614 Disabled debug statements cluttering up /var/log/messages for
615 the tcp autobuf patch applied previously.
616
617 20070312:
618 Synced several audio changes from FreeBSD 6.1. Removed the
619 BSD Daemon files from src/share.
620
621 20070308:
622 Added mfi which supports LSI Logic MegaRAID SAS devices including
623 the Dell perc5i.
624
625 20070206:
626 Imported OpenBSD's sudo into source. Please install
627 /usr/src/usr.bin/sudo/lib first before building.
628
629 Those who install from a snapshot after this date
630 will not be effected.
631
632 20070119:
633 Added audit group. Be sure to add audit to your /etc/group file
634 before installing world.
635
636 hostapd was updated to 0.4.8.
637
638 An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
639 unbreak world.
640
641 wpa_supplicant was updated.
642
643 For stability and compatibility reasons, it was decided that MidnightBSD
644 sync with FreeBSD 6.1 Release. Nearly every change between the original
645 fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
646 2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
647 will not sync every little change with FreeBSD.
648
649 20061231:
650 Updated COPYRIGHT for 2007.
651
652 Updated and bumped libutil after importing NetBSD efun(3) functions.
653
654 Added MidnightBSD_version and bumped the FreeBSD version as we've
655 synced all commits between the fork and that version. It is now safe
656 to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
657 Feb 26, 2006.
658
659 Added spell(1) and deroff(1) from NetBSD. Also added additional
660 dict files to work with it. /usr/share/dict/american,
661 /usr/share/dict/british and /usr/share/dict/special/math
662
663 Numerous man page and bug fixes.
664
665 20061226:
666 Setup /usr/share/examples/cvsup SUPfiles for the new
667 MidnightBSD CVSup server.
668
669 Fix a bug in burncd where it would continue forever while
670 erasing CDRW media.
671
672 Add csup to /usr/bin. csup is a CVSup replacement written
673 in C.
674
675 Fixed a bug with bsnmpd build from Oct 30.
676
677 Corrected some race conditions and fixed a few bugs in
678 geom. Imported changes from FreeBSD RELENG_6.
679
680 20061225:
681 Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
682 that caused long double to long and long long
683 conversion of negative numbers to always result in -1.
684
685 20061221:
686 Fixed acpi_battery.c to not report an ERROR if no
687 batteries are present.
688
689 Performed some minor updates on the RL and RE NIC drivers.
690 RL should no longer panic when trying to print errors.
691
692 Corrected a bug with TTY.
693
694 20061218:
695 Corrected a bug with libpthread where newly created suspended
696 threads don't get scheduled.
697
698 20061206:
699 Fixed a typo with the firewire security patch.
700
701 20061129:
702 Minor cleanups to utilities in bin.
703
704 Fixed msdos file system short file name behavior to match
705 FreeBSD.
706
707 20061031:
708 Updated man pages in section 7.
709
710 20061030:
711 Updated sys/dev/drm to support intel 915 and radeon
712 r300 cards properly.
713
714 Synced snmpd with FreeBSD-stable.
715
716 Fixed a bug in rm which could cause data loss.
717
718 20061027:
719 Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
720 random, kbdmux, atkbd, and usb were updated. Changes
721 to clearing registers on SSE enabled processors (i386)
722 commited.
723
724 lukemftpd updated.
725
726 openssh rc script was altered which effects initial
727 seeding.
728
729 20061014:
730 Workaround for em driver problem on shared IRQ.
731
732 Started removal of alpha support.
733
734 20061013:
735 ATA driver was updated. USB/USB1/USB2 types added.
736
737 20061010:
738 OpenSSH was updated to 4.4p1.
739
740 20060909:
741 OpenNTPD was added to MidnightBSD. Run make delete-old to remove
742 the old ntpd daemon.
743
744 cat has a new option -D which allows you to timestamp output
745 on a per line basis.
746
747 The kernel has a keyboard mux which allows you to have multiple
748 keyboard connected simultaneously. USB keyboard support was also
749 improved with this patch.
750
751 The Intel em driver was updated. Network performance was greatly
752 increased on many systems. Additional models are supported.
753
754 The ATA driver was patched to fix a potential deadlock.
755
756 Bind was patched to fix a potential denial of service condition.
757
758 20060817:
759 ksh has been added to the base system. If you previously had
760 the port installed, it will be overwritten on the next buildworld.
761
762
763
764 To build a kernel
765 -----------------
766 If you are updating from a prior version of MidnightBSD (even one just
767 a few days old), you should follow this procedure. With a
768 /usr/obj tree with a fresh buildworld,
769 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
770 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
771
772 To test a kernel once
773 ---------------------
774 If you just want to boot a kernel once (because you are not sure
775 if it works, or if you want to boot a known bad kernel to provide
776 debugging information) run
777 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
778 nextboot -k testkernel
779
780 To just build a kernel when you know that it won't mess you up
781 --------------------------------------------------------------
782 This assumes you are already running a 6.X system. Replace
783 ${arch} with the architecture of your machine (e.g. "i386",
784 "amd64", "ia64", "pc98", "sparc64", etc).
785
786 cd src/sys/${arch}/conf
787 config KERNEL_NAME_HERE
788 cd ../compile/KERNEL_NAME_HERE
789 make depend
790 make
791 make install
792
793 If this fails, go to the "To build a kernel" section.
794
795 To rebuild everything and install it on the current system.
796 -----------------------------------------------------------
797 # Note: sometimes if you are running current you gotta do more than
798 # is listed here if you are upgrading from a really old current.
799
800 <make sure you have good level 0 dumps>
801 make buildworld
802 make kernel KERNCONF=YOUR_KERNEL_HERE
803 [1]
804 <reboot in single user> [3]
805 mergemaster -p [5]
806 make installworld
807 make delete-old
808 mergemaster [4]
809 <reboot>
810
811
812 To cross-install current onto a separate partition
813 --------------------------------------------------
814 # In this approach we use a separate partition to hold
815 # current's root, 'usr', and 'var' directories. A partition
816 # holding "/", "/usr" and "/var" should be about 2GB in
817 # size.
818
819 <make sure you have good level 0 dumps>
820 <boot into -stable>
821 make buildworld
822 make buildkernel KERNCONF=YOUR_KERNEL_HERE
823 <maybe newfs current's root partition>
824 <mount current's root partition on directory ${CURRENT_ROOT}>
825 make installworld DESTDIR=${CURRENT_ROOT}
826 cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
827 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
828 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
829 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
830 <reboot into current>
831 <do a "native" rebuild/install as described in the previous section>
832 <maybe install compatibility libraries from src/lib/compat>
833 <reboot>
834
835
836 To upgrade in-place from 5.x-stable or higher to 6.x-stable
837 -----------------------------------------------------------
838 <make sure you have good level 0 dumps>
839 make buildworld [9]
840 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
841 [1]
842 <reboot in single user> [3]
843 mergemaster -p [5]
844 make installworld
845 make delete-old
846 mergemaster -i [4]
847 <reboot>
848
849 Make sure that you've read the UPDATING file to understand the
850 tweaks to various things you need. At this point in the life
851 cycle of current, things change often and you are on your own
852 to cope. The defaults can also change, so please read ALL of
853 the UPDATING entries.
854
855 Also, if you are tracking -current, you must be subscribed to
856 freebsd-current@freebsd.org. Make sure that before you update
857 your sources that you have read and understood all the recent
858 messages there. If in doubt, please track -stable which has
859 much fewer pitfalls.
860
861 [1] If you have third party modules, such as vmware, you
862 should disable them at this point so they don't crash your
863 system on reboot.
864
865 [3] From the bootblocks, boot -s, and then do
866 fsck -p
867 mount -u /
868 mount -a
869 cd src
870 adjkerntz -i # if CMOS is wall time
871 Also, when doing a major release upgrade, it is required that
872 you boot into single user mode to do the installworld.
873
874 [4] Note: This step is non-optional. Failure to do this step
875 can result in a significant reduction in the functionality of the
876 system. Attempting to do it by hand is not recommended and those
877 that pursue this avenue should read this file carefully, as well
878 as the archives of freebsd-current and freebsd-hackers mailing lists
879 for potential gotchas.
880
881 [5] Usually this step is a noop. However, from time to time
882 you may need to do this if you get unknown user in the following
883 step. It never hurts to do it all the time.
884
885 [8] In order to have a kernel that can run the 5.x binaries
886 needed to do an installworld, you must include the COMPAT_FREEBSD5
887 option in your kernel. Failure to do so may leave you with a system
888 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
889 is required to run the 5.x binaries on more recent kernels.
890
891 Make sure that you merge any new devices from GENERIC since the
892 last time you updated your kernel config file.
893
894 [9] When checking out sources, you must include the -P flag to have
895 cvs prune empty directories.
896
897 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
898 "?=" instead of the "=" assignment operator, so that buildworld can
899 override the CPUTYPE if it needs to.
900
901 MAKEOBJDIRPREFIX must be defined in an environment variable, and
902 not on the command line, or in /etc/make.conf. buildworld will
903 warn if it is improperly defined.
904
905 Copyright information:
906
907 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
908
909 Redistribution, publication, translation and use, with or without
910 modification, in full or in part, in any form or format of this
911 document are permitted without further permission from the author.
912
913 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
914 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
915 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
916 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
917 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
918 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
919 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
920 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
921 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
922 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
923 POSSIBILITY OF SUCH DAMAGE.
924
925 If you find this document useful, and you want to, you may buy the
926 author a beer.
927
928 Contact Warner Losh if you have any questions about your use of
929 this document.
930
931 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
932 $MidnightBSD: src/UPDATING,v 1.108 2011/02/03 14:31:14 laffer1 Exp $

Properties

Name Value
cvs2svn:cvs-rev 1.109