Following -current

Introduction
2009/03/04 - new user and group for smtpd
2009/03/16 - makemap(8) now run through mailwrapper(8)
2009/03/24 - "redistribute default" behaviour change in ospfd(8) and ripd(8)
2009/04/06 - incompatible changes to pf(4)
2009/04/07 - fragment reassembly on by default
2009/04/26 - require-order off by default in pfctl(8)
2009/05/20 - new user and group for rpc.rwalld
2009/05/25 - update of daily(8), weekly, monthly, security(8)
2009/05/31 - pf enabled by default
2009/06/02 - tmux(1) moved from ports to base
2009/06/03 - httpd ABI change
2009/06/26 - updated lynx(1)
2009/07/03 - updated bnx(4) driver

Introduction

This document is for people who wish to follow -current. It contains information about changes from 4.5-release to -current, and should NOT be used by anyone upgrading from 4.4 or earlier, or people wishing to follow -stable.

If you wish to update to 4.5-release or 4.5-stable from previous versions, see the upgrade guide.

Make sure you have read and understood FAQ 5 - Building the System from Source before using -current and the instructions below.

You should ALWAYS use a snapshot as the starting point for running -current. Upgrading by compiling your own source code is not supported.

If you wish to see upgrade information for earlier versions of OpenBSD, see upgrade-old.html. This is provided as a historical record -- it should NOT be used as an upgrade procedure guide.

2009/03/04 - new user and group for smtpd

The following needs to be run:

useradd -u 95 -g =uid -c "SMTP Daemon" -d /var/empty -s /sbin/nologin _smtpd

2009/03/16 - makemap(8) now run through mailwrapper(8)

Since the connection of smtpd(8) to the build, makemap(8) is run through mailwrapper(8) to avoid conflict between sendmail and smtpd version of the binary. For this to work, one has to manually add the following line to /etc/mailer.conf:

makemap		/usr/libexec/sendmail/makemap

2009/03/24 - "redistribute default" behaviour change in ospfd(8) and ripd(8)

"redistribute default", set in ospfd.conf(5) and ripd.conf(5) configuration files, require now the presence of a default route in the kernel routing table otherwise no route will be announced by ospfd(8) and ripd(8).

2009/04/06 - incompatible changes to pf(4)

Packet normalization ("scrubbing") has been integrated with the main ruleset. This is now specified by adding the "scrub (options)" parameter to rules. For example:

        scrub in all no-df max-mss 1440

can be replaced with a rule using the new "match" action:

        match in all scrub (no-df max-mss 1440)

Since ruleset ordering is enforced by default, this will either have to be moved to the main ruleset (before "pass quick" rules), or ruleset order checking must be disabled:

        set require-order no

Packet reassembly has been simplified. "Crop" and "drop-ovl" have been removed; only full reassembly remains. It's enabled like this:

        set reassemble yes|no [no-df]

If "no-df" is given, fragments (and only fragments!) with the df bit set have it cleared before entering the fragment cache, and thus the reassembled packet doesn't have df set either. Non-fragmented packets are unaffected by no-df.

2009/04/07 - fragment reassembly on by default in pf(4)

Since there is little to no reason not to use fragment reassembly, pf(4) was changed so that it is now enabled by default.

2009/04/26 - require-order off by default in pfctl(8)

pfctl(8) was changed so that "set require-order" is now disabled by default. This is advisory only, no configuration change is necessary.

2009/05/20 - new user and group for rpc.rwalld

The following needs to be run:

useradd -u 96 -g =uid -c "rpc.rwalld" -d /var/empty -s /sbin/nologin _rwalld

2009/05/25 - update of daily(8), weekly, monthly, security(8)

When updating your periodic maintenance scripts to the latest versions, pay attention to the following changes:

The scripts daily, weekly, and monthly now all use the PATH variable from the root crontab(5), which is /bin:/sbin:/usr/bin:/usr/sbin by default. The daily(8) PATH no longer includes /usr/local/bin, the weekly(8) PATH no longer includes /usr/libexec. In daily.local, weekly.local and monthly.local, you can still add additional directories to the PATH.
All four scripts now suppress section headers when there is no content to follow. When a script produces no output whatsoever, it does not send mail to root any more. This may require adjustment of your parser scripts.
The security(8) script now uses some shell functions from daily(8), so it cannot run stand-alone. Use "sudo /bin/sh /etc/daily" in case you need to run it manually.

2009/05/31 - pf enabled by default

pf(4) is now enabled by default in rc.conf.

2009/06/02 - tmux(1) moved from ports to base

tmux(1) has moved from ports to base. If you installed it from ports, please remove it with pkg_delete.

2009/06/03 - httpd ABI change

httpd(8) was fixed to report correct size of big files, this introduced a change to its ABI. Because of this some third party modules will have to be rebuilt or packages updated.

2009/06/26 - lynx(1) update

lynx(1) has been updated to 2.8.6rel.5. Some directives of configuration file /etc/lynx.cfg have changed therefore you have to update it:

# cd /tmp
# ftp ftp://mirror/path/to/snapshots/arch/etc46.tgz
# tar xzpf etc46.tgz ./etc/lynx.cfg
# mv etc/lynx.cfg /etc

Merge your local changes afterwards.

2009/07/03 - updated bnx(4) driver

The bnx(4) driver has been updated to support new controllers. This includes a change in the way firmware handling is done. Users with bnx must create the new firmware files before booting a new kernel:

# cd /sys/dev/microcode/bnx 
# make obj clean
# make 
# make install

Alternatively, if upgrading from a binary snapshot on a running system (rather than via the installer), be sure to extract base46.tgz before rebooting onto the new kernel.

www@openbsd.org
$OpenBSD: current.html,v 1.159 2009/07/03 13:49:50 sthen Exp $