1Release notes for FreeBSD 14.0. 2 3This file describes new user-visible features, changes and updates relevant to 4users of binary FreeBSD releases. Each entry should describe the change in no 5more than several sentences and should reference manual pages where an 6interested user can find more information. Entries should wrap after 80 7columns. Each entry should begin with one or more commit IDs on one line, 8specified as a comma separated list and/or range, followed by a colon and a 9newline. Entries should be separated by a newline. 10 11Changes to this file should not be MFCed. 12 133416e102c4e9 14 Remove TI code from armv7 GENERIC kernel. 15 This code doesn't cope with newer DTS and hasn't in a long time so 16 support for TI armv7 platform (like BeagleBone and Pandaboard) is now 17 removed from GENERIC. 18 19d198b8774d2c 20 Add a new "fwget" utility. 21 The goal of this utility is to inspect the system for peripherals 22 that needs firmware and install the appropriate packages for them. 23 For now only pci subsystem is supported and only firmwares for Intel 24 and AMD GPUs are known. 25 26896516e54a8c 27 Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts. 28 Without this patch, a Kerberized NFSv4.1/4.2 mount must provide 29 a Kerberos credential for the client at mount time. 30 This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which 31 allows the state maintenance operations to be performed by any 32 authentication mechanism, so that these operations may be done via 33 AUTH_SYS instead of RPCSEC_GSS (KerberosV). As such, no Kerberos 34 credential is required at mount time. 35 See mount_nfs(8). 36 37330aa8acdec7,ff2f1f691cdb 38 Adds support for the SP4_MACH_CRED case for the 39 NFSv4.1/4.2 ExchangeID operation since the Linux 40 NFSv4.1/4.2 client is now using this for Kerberized mounts. 41 This change should only affect Kerberized NFSv4.1/4.2 mounts. 42 The Linux Kerberized NFSv4.1/4.2 mounts currently work without 43 support for this because Linux will fall back to SP4_NONE, 44 but there is no guarantee this fallback will work forever. 45 467344856e3a6d and many others: 47 Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8) 48 and rpc.tlsservd(8) can be run in an appropriately configured 49 vnet prison. The vnet prison must be on its own file system, 50 have the "allow.nfsd" jail parameter set on it and enforce_statfs 51 cannot be set to "0". Use of UDP and pNFS server configurations 52 are not permitted. (ie. The nfsd command line options "-u", "-p" 53 and "-m" are not supported.) 54 See jail(8), nfsd(8) and mountd(8). 55 562fb4f839f3fc,d89513ed2050,3413ee88c39d,f97a19ecb985,021562c5020d,431d2a81d421: 57 sendmail has been updated to the latest upstream version (8.17.1). 58 594a30d7bb373c,d670a8f7c596,af01b4722577,4e240e55d818: 60 The growfs(7) script can now add a swap partition at the end of 61 the expansion area, and does so by default if there is no existing 62 swap. See growfs(7). 63 6486edb11e7491: 65 llvm-objump is now always installed as objdump. 66 67616f32ea6da7: 68 mta_start_script along with othermta rc.d script has been retired. 69 70a67b925ff3e5: 71 The default mail transport agent is now dma(8) replacing sendmail. 72 7322893e584032: 74 L3 filtering on if_bridge will do surprising things which aren't 75 fail-safe, so net.link.bridge.pfil_member and 76 net.link.bridge.pfil_bridge now default to zero. 77 78f0bc4ed144fc: 79 A new DTrace provider, kinst, is introduced and documented in 80 dtrace_kinst(4). The provider allows kernel instructions to be traced, 81 similar to the FBT (function boundary tracing) provider except that all 82 instructions may be probed instead of logical entry and return 83 instructions. The provider is currently amd64-only. 84 850eea46fb1f83: 86 Removed telnetd. 87 88981ef32230b2,33721eb991d8: 89 These commits make the use of NFSv4.1/4.2 mounts with the "intr" 90 mount option fairly usable, although not 100% correct, so long as 91 the "nolockd" mount option is used as well. See the mount_nfs(8) 92 manual page for more information. 93 94b875d4f5ddcb,0685c73cfe88: 95 The NFSv4.1/4.2 client and server will now generate console messages 96 if sessions are broken, suggesting that users check to ensure 97 that the /etc/hostid strings are unique for all NFSv4.1/4.2 clients. 98 99240afd8c1fcc: 100 makefs(8) has ZFS support; it can create a ZFS pool, backed by a 101 single disk vdev, containing one or more datasets populated from 102 the staging directory. 103 10478ee8d1c4cda,f4f56ff43dbd: 105 The in-tree qat(4) driver has been replaced with Intel's QAT driver. 106 The new version provides additional interfaces to the chipset's 107 cryptographic and compression offload functionality. 108 109 This will have no visible change for most users; however, the new 110 driver does not support Atom C2000 chipsets. To preserve support for 111 those chipsets, the old driver has been renamed to qat_c2xxx and kept 112 in the tree. Users of qat(4) on C2000 hardware will thus need to 113 ensure that qat_c2xxx(4) is loaded instead of qat(4). 114 115da5b7e90e740,5a8fceb3bd9f,7b0a665d72c0,13ec1e3155c7,318d0db5fe8a,1ae2c59bcf21: 116 Boottrace is a new kernel-userspace interface for capturing trace 117 events during system boot and shutdown. Event annotations are 118 present in: 119 120 - The boot and shutdown paths in the kernel 121 - Some key system utilities (init(8), shutdown(8), reboot(8)) 122 - rc(8) scripts (via boottrace(8)) 123 124 In contrast to other existing boot-time tracing facilities like TSLOG, 125 Boottrace focuses on the ease of use and is aimed primarily at system 126 administrators. 127 128 It is available in the default GENERIC kernel and can be enabled by 129 toggling a single sysctl(8) variable. 130 131 See boottrace(4) for more details. 132 13305a1d0f5d7ac: 134 Kernel TLS offload now supports receive-side offload of TLS 1.3. 135 13619dc64451179: 137 if_stf now supports 6rd (RFC5969). 138 139c1d255d3ffdb, 3968b47cd974, bd452dcbede6: 140 Add WiFi 6 support to wpa. 141 142ba48d52ca6c8,4ac3d08a9693,2533eca1c2b9: 143 The default bell tone is now 800Hz. It may be set with kbdcontrol 144 again. There's devd integration for people wishing to use their sound 145 cards for the beep. 146 14792b3e07229ba: 148 net.inet.tcp.nolocaltimewait enabled by default. It prevents 149 creation of timewait entries for TCP connections that were 150 terminated locally. 151 152d410b585b6f0: 153 sh(1) is now the default shell for the root user. 154 155396851c20aeb: 156 libncursesw has been split into libtinfow and libncursesw, linker 157 scripts should make it transparent for consumers. pkg-config files 158 are also now installed to ease ports detecting the ncurses setup from 159 base. 160 161a422084abbda: 162 LLVM's MemorySanitizer can now be used in amd64 kernels. See the 163 kmsan(9) manual page for more information. 164 16538da497a4dfc: 166 LLVM's AddressSanitizer can now be used in amd64 kernels. See the 167 kasan(9) manual page for more information. 168 169f39dd6a97844,23f24377b1a9,628bd30ab5a4: 170 One True Awk has been updated to the latest from upstream 171 (20210727). All the FreeBSD patches, but one, have now been 172 either up streamed or discarded. Notable changes include: 173 o Locale is no longer used for ranges 174 o Various bugs fixed 175 o Better compatibility with gawk and mawk 176 177 The one FreeBSD change, likely to be removed in FreeBSD 14, is that 178 we still allow hex numbers, prefixed with 0x, to be parsed and 179 interpreted as hex numbers while all other awks (including one 180 true awk now) interpret them as 0 in line with awk's historic 181 behavior. 182 183 A second change, less likely to be noticed, is the historic wart 184 if -Ft meaning to use hard tab characters as the field separator 185 is deprecated and will likely be removed in FreeBSD 14. 186 187ee29e6f31111: 188 Commit ee29e6f31111 added a new sysctl called vfs.nfsd.srvmaxio 189 that can be used to increase the maximum I/O size for the NFS 190 server to any power of 2 up to 1Mbyte while the nfsd(8) is not running. 191 The FreeBSD NFS client can now be set to use a 1Mbyte I/O size 192 via the vfs.maxbcachebuf tunable and the Linux NFS client 193 can also do 1Mbyte I/O. 194 kern.ipc.maxsockbuf will need to be increased. A console 195 message will suggest a setting for it. 196 197d575e81fbcfa: 198 gconcat(8) has added support for appending devices to the device 199 not present at creation time. 200 20176681661be28: 202 Remove support for asymmetric cryptographic operations from 203 the kernel open cryptographic framework (OCF). 204 205a145cf3f73c7: 206 The NFSv4 client now uses the highest minor version of NFSv4 207 supported by the NFSv4 server by default instead of minor version 0, 208 for NFSv4 mounts. 209 The "minorversion" mount option may be used to override this default. 210