/usr/src/Updating

[Ian Moore]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 9 Nov 2004 22:12, Daniel Bye wrote:
> > Hi,
> > I'm just about to upgrade my 5.2.1-RELEASE system to 5.3-RELEASE.
> > I thought this would be a good opportunity to ask some questions I've
> > been wondering about for quite some time re the info in Updating.
> >
> > Firstly, I assume (always risky!) that stuff like:
> > > 20041003:
> > > The pfil API has gained an additional argument to pass an inpcb.You
> > > should
> >
> > rebuild all pfil consuming modules: ipfw, ipfilter and pf.
> >
> > will be rebuilt when I run make buildworld & you only have to worry about
> > building it specifically if you selectively build certain parts of the
> > source rather than the world?
>
> Yes - they should be rebuilt (as part of the kernel build, in fact, I
> believe) unless you have set MODULES_OVERRIDE in /etc/make.conf.

Good, that makes sense.

>
> One thing to bear in mind, and that has bitten me three times now (I
> /will/ learn, soon...) is that after the installkernel, some of your
> firewall rules will not work with the old world.  The best bet is to
> boot to single user, do the installworld and mergemaster, then reboot.
> Your firewall rules should now function as before.
>
> Oh, and if you use ipfw instead of pf, set NO_PF=true in /etc/make.conf
> - without this, and if you don't add the appropriate users and groups
> before installworld, the installworld will puke.
>
> I'm sure will have other caveats.  These are the ones that keep getting
> me, though.

Thanks for the tips - I do use ipfw so I'll make sure I do all that.

Cheers,
- -- 
Ian

GPG Key: http://homepages.picknowl.com.au/imoore/imoore.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (FreeBSD)

iD8DBQFBke3LfITqkXhImmIRAsqcAJ4461aMQij/aI8/ZgZh9EQAr7W5CwCfWWD8
vO3sg51kQm8V2M/uSATZu6Q=
=nnt+
-----END PGP SIGNATURE-----