From nobody Tue Aug 26 09:44:19 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cB2pV0FJ0z65KdR for ; Tue, 26 Aug 2025 09:45:38 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Received: from mailgate.Leidinger.net (bastille.leidinger.net [89.238.82.207]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (prime256v1)) (Client CN "mailgate.leidinger.net", Issuer "E5" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cB2pT5Pdmz3rfX; Tue, 26 Aug 2025 09:45:37 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Authentication-Results: mx1.freebsd.org; none List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leidinger.net; s=outgoing-alex; t=1756201506; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=3ofiNo4kPUrKzvIm9G9+ByN6v7iP/a6Pv1Y1OuJp5lI=; b=gbor54T2hz3sUDB8wzFJFJ6HNT+ra04ywSufvORjwfLIf11o+1w0AiwMs6tX9T9fL9OwU2 VHJM1nb4zolC/4BlG3TnzxdchNcoG8umS4cGVEG26qTs/KEYqabiG0lIPh9KYOBsGcWw6t kIB1eKa0eNkbLqb9X2pahfwvHzaxT+CEKBcT2BREzBsNDlQ0b/sUoKIXVQBMwbWQXC1wL6 S6ooIpSxPf37JVq8f1MwWOpzirUcoHFyL0Mc39POWJcRaUHU/d6nDjUtLHwMgrhRu6RaKj ewcyLIEHS46ZxjqEmL5CO3AuGpQdJlptHN2pL6f5Gaj5O/vdGKokeN1ofCWPbQ== Date: Tue, 26 Aug 2025 11:44:19 +0200 From: Alexander Leidinger To: Gleb Smirnoff Cc: freebsd-current@freebsd.org, src-committers@freebsd.org Subject: Re: August 2025 stabilization week In-Reply-To: References: Message-ID: <3fc8a77ac961de040dc35a7fb5562319@Leidinger.net> Organization: No organization, this is a private message. Content-Type: multipart/signed; protocol="application/pgp-signature"; boundary="=_d4a54e7de09950634487834fe8330e42"; micalg=pgp-sha256 X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:34240, ipnet:89.238.64.0/18, country:DE] X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Rspamd-Queue-Id: 4cB2pT5Pdmz3rfX This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --=_d4a54e7de09950634487834fe8330e42 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Am 2025-08-25 14:53, schrieb Gleb Smirnoff: > Hi, > > On Mon, Aug 25, 2025 at 01:00:07AM -0700, Gleb Smirnoff wrote: > T> This is an automated email to inform you that the August 2025 > stabilization week > T> started with FreeBSD/main at main-n279838-6c45a5dad0a0, which was > tagged as > T> main-stabweek-2025-Aug. > > This stabilization cycle is expected to be more bumpy than usually. > > 1) We got major upgrade - OpenSSL 3.5.1. One known issue is that the > legacy > provider is broken. > > 2) The default Kerberos now is MIT. We have already checked that a > Kerberized > NFS client can migrate from Heimdal to MIT. We did not check > Kerberized NFS > server, but should be fine. There is no yet an official way to migrate > kdc > from Heimdal to MIT. So, if you are upgrading a machine that is kdc, > you need > WITHOUT_MITKRB5="yes" in your src.conf. > > 3) The official pkg repo is now almost empty, see email from Colin [1]. > So, do > not rush with 'make delete-old-libs', unless you are ready to build a > lot of > packages yourself. > > 4) The unfortunate coincidence with 3) is ABI breakage in the > setgroups(2)/getgroups(2) syscalls compared to the July stabilization > point. > Some packages would dump core. These packages need to be rebuilt. In my local poudriere builds I had to switch to ports-mit-krb for p5-GSSAPI. The normal build with base-krb failed with: ---snip--- Searching krb5-config command... using krb5-config command '/bin/krb5-config'. ---------------------------------------------------------- using GSSAPI implementation /bin/krb5-config does not respond libconf! at ./Makefile.PL line 116. ---snip--- krb5-config is in /usr/bin... This is with -current as of 2025-08-21-223348 and an up-to-date ports tree. Bye, Alexander. -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_d4a54e7de09950634487834fe8330e42 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc; size=833 Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEER9UlYXp1PSd08nWXEg2wmwP42IYFAmitggEACgkQEg2wmwP4 2IZi3RAAq6db1CLr8yvJORN/6IFxsfRLBQFmqlqed7ERkkBBpu84MUOiXA6YDrZx /EPhhkekcXTKv1Uo2PZ571ASYrwr5M6gtgXDfv2C7spK1qh8ziPs28Z2xgtoxQUe hjmGJEgDx3y7Mw5tX3XTYjoQbnGgxaWzgIuhP2xduRIo7hj1eBlgEeR/0A41E4ln m1ChO0yVOJChXfmOCRp1qRV/wLGH4rwzWbEGvhL55yMrhDq4NdowyqdMlGsLZ8sV RUE6T2WNKNucaN5WeHzhfJeusA9+MUyy5lFL5LCIDEVpkvoAsTsElg9UsRLC8rpQ qFRZvdc6/eg2xTJdpZbvSYoIsp0UkaFlSTX1QOzdCp5+pCQ8Fd1a9/juK+MR2yP/ +fHxUxKgBEfV9IBn9KSPi+P4xblgbT+L5MIlUhvjg1uI4G9pMZsjdMTxdrKwGy1p 2KxI4NcU9nHIaQ5PWbQVtZf6ojvl/Dsn0aMkZWj6AMfgsQb5pE1f+9rxLp+LPPz5 y36fcM5xn+LYXZR4g50T4sEGFUU6m5MxQX0rZzp/0qQaPARWT742ncpXbXry353p mLkeGaLXbFSZzCxhgXUk++d8FSM0kqxoF9S9ePAwCRGNxgQ6uZsEqgTkN6J9r364 gLFWGznHH3Hof8gSNjL6nnX67D1biOYeqOQ3AGC+I4FGaNPw6lw= =17hx -----END PGP SIGNATURE----- --=_d4a54e7de09950634487834fe8330e42--