From nobody Mon Aug 25 20:27:47 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c9j6G4GqKz65bFZ for ; Mon, 25 Aug 2025 20:28:06 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Received: from mail-ed1-x534.google.com (mail-ed1-x534.google.com [IPv6:2a00:1450:4864:20::534]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c9j6G1JSLz3KVN; Mon, 25 Aug 2025 20:28:06 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-ed1-x534.google.com with SMTP id 4fb4d7f45d1cf-61c325a4d83so3486138a12.0; Mon, 25 Aug 2025 13:28:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1756153680; x=1756758480; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=O9IeRQe1zzsk0WGxDE7UW6K8G/oBN72+Emmx5m6T6Qw=; b=VyoDeg8sF9cpKCYQ7gDmIBSka6Onrd9hIZOgT3N9LaXN/pMF1gmMIFa3I0au5qaAn2 Xoa9eG/AZt7v20MltkSxUpndCcpGuvJEmtqNlnpx+MpyMt77rw9qJMPBe0SOMEbbIdx7 ewpJ6P4jlNAino7xbraPTYfNQ7coI+eC8fm6dOf/HTkFnv7WWTdy+XbcNTARfhkl78KX 16KPSBzaGBurdhMxkyd/82hmNW6roJcYtP0/tbe9iCWxulc9tfLG6czueT+mAuXVhC/d 251KlWPCt7jiyhxSIMBL+Hf8jMbuzYQ+YHofMYa1dZf+04vgJeS1WCMU0jUB4baNXSjt eqkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756153680; x=1756758480; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=O9IeRQe1zzsk0WGxDE7UW6K8G/oBN72+Emmx5m6T6Qw=; b=AHxEJvXaMt8uRHyb86wZkuoR10IS6aTUDtqExRbrgHkXQpFpG380u9mG6kqs00iBPB 1mkUOFgRxFLt897Xz81Yp2PQsZrXi87qEYatDCUFhkx5K8pF14EP4JdaSrQeDdBjflYm 8tawUdFdqJIR7c349W2/p46gCTKsCWSCkikOhWA8mlgF/A4p2Q3kyPuP6hv/kU0YbU/z wvnl6R0BAq95+ePjuCj7COFVAlxOYkJAlKjoS7MmjO+YM2XpTbvRzOnKpIrepS7FqcbN WXG3LUIsAWYc7dfiDSosNI92TfAm0B5Xagt91qK95dTXH8iNtXmTS/p6PG5cvn8e38od sq7A== X-Forwarded-Encrypted: i=1; AJvYcCXB+sO26GgLOVhADwUWD7zpBo+o9EhNTAgHhXABM7GyTHNIIk4xAJeR3/5AKGkWNgL6aPVQfa2LrqqxxwdISQE=@freebsd.org, AJvYcCXU97XpGmFtxjMH+YnclnGPyvI0h81eSkYoNrExluVQzXufL3xVNIreFWcpIUEgcI5wTbsNqa/wgvKbyspOqwE=@freebsd.org X-Gm-Message-State: AOJu0YxDvdNgpphuyqRzQSI+O8pKGGQnIX/nGOUP1RKrNZRorLaqvneT bANx80rhH+B0DB3zYYrWWAOp6TNvVmOJkEH2pZY4woq5aBjR5DzrluAl3PimwIZ+1L5d/JErT/8 NKuckFjEODjdodHGqZKGZiE9geE1lPv4M X-Gm-Gg: ASbGncu337SU/6i/EA05d3qzMbwsl4tvrB6+IMFNCtzyjDthQ/2FzF3w/9SL/A0KRld ASZBmKSAPur+Mj8K/v2pJs1UR2R5nOiWpdARRlhoBeCCO7QD1i4ryvmCDBPlYHdmeAPY/Ehfk8Z ut8JHfDYtTVvV43c/b4c0b27bjQwmO7HHWYexClrHChseaLgxBcpY7YLkbd5mvBIvjc4Z5YIf7x RbGhcuEJwUMrbN/H5LK55iBHs60AXglScPpg8Q= X-Google-Smtp-Source: AGHT+IHzvQP61YVfAdiWYwXsO2bpHR51eyL2VUlZrzo9jApM8hR0zAoPRe1Xa43nQGw5sAm99Cs00hCmH9SaHmqi/qk= X-Received: by 2002:a05:6402:5c8:b0:615:957f:416b with SMTP id 4fb4d7f45d1cf-61c1b3b93e2mr11200312a12.6.1756153679476; Mon, 25 Aug 2025 13:27:59 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 References: <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> In-Reply-To: <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> From: Rick Macklem Date: Mon, 25 Aug 2025 13:27:47 -0700 X-Gm-Features: Ac12FXwZP8zAwStKMCGa-pMN1fT9LCVYOVEzYmLviDwx_7o5u8LXfDdtGJHw4lo Message-ID: Subject: Re: August 2025 stabilization week To: Kyle Evans Cc: Gleb Smirnoff , freebsd-current@freebsd.org, src-committers@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Rspamd-Queue-Id: 4c9j6G1JSLz3KVN On Mon, Aug 25, 2025 at 9:09=E2=80=AFAM Kyle Evans wro= te: > > CAUTION: This email originated from outside of the University of Guelph. = Do not click links or open attachments unless you recognize the sender and = know the content is safe. If in doubt, forward suspicious emails to IThelp@= uoguelph.ca. > > On 8/25/25 07:53, Gleb Smirnoff wrote: > > Hi, > > > > On Mon, Aug 25, 2025 at 01:00:07AM -0700, Gleb Smirnoff wrote: > > T> This is an automated email to inform you that the August 2025 stabil= ization week > > T> started with FreeBSD/main at main-n279838-6c45a5dad0a0, which was ta= gged as > > T> main-stabweek-2025-Aug. > > > > This stabilization cycle is expected to be more bumpy than usually. > > > > 1) We got major upgrade - OpenSSL 3.5.1. One known issue is that the le= gacy > > provider is broken. I believe that KTLS support isn't yet enabled for it? (If so, NFS over TLS wo't work.) > > > > 2) The default Kerberos now is MIT. We have already checked that a Ker= berized > > NFS client can migrate from Heimdal to MIT. We did not check Kerberize= d NFS > > server, but should be fine. I tested the server a couple of days ago and it was fine. > There is no yet an official way to migrate kdc > > from Heimdal to MIT. Yea. One possibility is to install Heimdal-7.8 from ports/packages and then use it to dump the KDC's database in MIT format. (Although Cy seemed to find it didn't work, doing this with the "--decrypt" option might retain th= e passwords.) I'll give this a try and report back if it worked for me. rick > So, if you are upgrading a machine that is kdc, you need > > WITHOUT_MITKRB5=3D"yes" in your src.conf. > > > > 3) The official pkg repo is now almost empty, see email from Colin [1].= So, do > > not rush with 'make delete-old-libs', unless you are ready to build a l= ot of > > packages yourself. > > > > 4) The unfortunate coincidence with 3) is ABI breakage in the > > setgroups(2)/getgroups(2) syscalls compared to the July stabilization p= oint. > > Some packages would dump core. These packages need to be rebuilt. > > > > This should be mitigated if you have COMPAT_FREEBSD14 enabled? Old packa= ges would > reference the old compat symbol versions in libc, which should use the CO= MPAT_FREEBSD14 > variants of setgroups/getgroups. If you have a pointer to scenarios wher= e that isn't > the case, that'd be helpful- old packages should be fine in the GENERIC c= ase. > > Thanks, > > Kyle Evans