Re: Why is my base tree not updating?

On Wed, 06 Aug 2025 12:58:02 +0200, Dan Mahoney wrote:
> > On Aug 6, 2025, at 3:15 AM, Herbert J. Skuhra wrote:
> > 
> > On Wed, 06 Aug 2025 11:46:56 +0200, "Dan Mahoney (Ports)" wrote:
> >> 
> >> Hey there all, 
> >> 
> >> I'm hitting an issue with apache's mod_md: 
> >> 
> >> httpd: Syntax error on line 46 of
> >> /usr/local/etc/apache24/httpd.conf: Syntax error on line 1 of
> >> /usr/local/etc/apache24/Modules/md.load: Cannot load
> >> /usr/local/libexec/apache24/mod_md.so <http://mod_md.so/> into server: Shared object
> >> "libk5crypto.so <http://libk5crypto.so/>.121" not found, required by "libcurl.so <http://libcurl.so/>.4"
> > 
> > Have you tried to rebuild the port ftp/curl? Run 'pkg check -d' to see
> > if you need to rebuild other ports.
> > 
> >> (Clearly relating to the changes on 20250724 in /usr/src/updating) 
> >> 
> >> I'm running pkgbase on 15-CURRENT AMD64 I'm using the repo that claims (per https://wiki.freebsd.org/PkgBase) there are builds twice a day:
> >> 
> >> https://pkg.freebsd.org/${ABI}/base_latest 
> >> 
> >> And yet, when I try to update, I'm often told that I'm up to date, even after days or weeks, despite seeing changes in the git tree. 
> >> 
> >> My latest FreeBSD-src repos are a couple weeks old: 
> >> 
> >> FreeBSD-src-15.snap20250721134219 System userland source code 
> >> FreeBSD-src-sys-15.snap20250721123655 System kernel source code 
> > 
> >> And if I run pkg info | grep 202508 I see nothing. 
> >> 
> >> When I reinstall pkg, I get a warning about my userland being out of date, but I can't seem to get anything newer from pkgbase. 
> >> 
> >> Is there something I'm missing here? What am I doing wrong? 
> > 
> > I don't know the reason, but there are no newer packages available. Check:
> > 
> > https://pkg.freebsd.org/FreeBSD:15:amd64/base_latest/
> > 
> > But updated pkgbase packages won't resolve the Apache issue.
> 
> I think they will.  I think that missing library is the result of
> building packages against a base tree that has MIT kerberos in place
> instead of Heimdal.  Did you see the UPDATING entry I referenced?
> 
> And, after a little more reading, it looks like something in
> production broke the ability for pkgbase trees to be built, and the
> only person who can fix it is on vacation.  (No criticism, it's a
> volunteer project, life happens, whatever).
> 
> Of course, what I could do now is update the system via git,
> but....same exact error.

There are two relevant commits:

1. Switch from Heimdal to MIT KRB5:
<https://cgit.freebsd.org/src/commit/?id=c7da9fb90b0b6385e99bb7747476359b712993fa>

2. Version bump of MIT KRB5 libraries (121 -> 122):
<https://cgit.freebsd.org/src/commit/?id=dd0ec030f8fddfd109b860ae8df2b29fa0c60f23>

The available pkgbase packages were built before commit #1 and ship
Heimdal, e.g: libkrb5.so.11

Latest main (that includes commit #2) ships MIT KRB5,
e.g. libkrb5.so.122

The ports packages were built between the two commits and the curl
package on your system wants libkrb5.so.121.

So rebuilding ports (e.g: ftp/curl) should resolve the Apache issue.

main-n279346-62e5a3629483:

$ ldd `which curl` |grep libkrb5.so
	libkrb5.so.122 => /usr/lib/libkrb5.so.122 (0x87c71c20000)