From owner-freebsd-current@freebsd.org Sat Oct 27 17:49:16 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8B0D210CDD89; Sat, 27 Oct 2018 17:49:16 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 447C074361; Sat, 27 Oct 2018 17:49:16 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from FreeBSD.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by freefall.freebsd.org (Postfix) with ESMTPS id EA3171156F; Sat, 27 Oct 2018 17:49:15 +0000 (UTC) (envelope-from gjb@freebsd.org) Date: Sat, 27 Oct 2018 17:49:13 +0000 From: Glen Barber To: freebsd-current@freebsd.org, freebsd-stable@freebsd.org Cc: FreeBSD Release Engineering Team Subject: Re: FreeBSD 12.0-BETA2 Now Available Message-ID: <20181027174913.GO61572@FreeBSD.org> Reply-To: FreeBSD Release Engineering Team References: <20181027170348.GN61572@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed In-Reply-To: <20181027170348.GN61572@FreeBSD.org> User-Agent: Mutt/1.10.1 (2018-07-13) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Oct 2018 17:49:16 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 One minor correction: On Sat, Oct 27, 2018 at 05:03:48PM +0000, Glen Barber wrote: > === SPECIAL NOTE === > This only affects systems that employ geli(4)-backed encrypted > filesystems and currently running 11.x or 10.x. Upgrades from > 12.0-BETA1, either via source-based upgrades or binary patches > via freebsd-update(8), are unaffected. > > An issue affecting backwards compatibility with geli(4)-backed > filesystems and an updated geli(8) binary after r332361 prevents > mounting encrypted filesystems with an older geli(8) binary from 11.x > and 10.x. For example, if /usr/src and /usr/obj are mount points on an > encrypted filesystem, the geli(8) binary that exists from 11.x or 10.x > after rebooting the system after 'installworld' will fail to attach the ^^^^^^^^^^^^ This should have stated 'installkernel' instead of 'installworld.' > encrypted filesystems when performing a source-based upgrade following > the documented upgrade path in UPDATING. > > For binary upgrades using freebsd-update(8) from 11.x and 10.x, the > recommended upgrade flow is to install the kernel patches, reboot, > install the userland patches, reboot, remove old libraries after > rebuilding third-party software. In this case, the initial reboot after > the kernel patches are applied can cause the same scenario where the old > geli(8) binary cannot attach the geli(4)-backed filesystem. > > A fix had been committed to head as r339804, and is expected to be > included in BETA3. For those without remote console access and do not > wish to upgrade via sources, it is advised to wait for BETA3 to upgrade > from 11.x and 10.x. > === END SPECIAL NOTE === > Glen -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEjRJAPC5sqwhs9k2jAxRYpUeP4pMFAlvUpRkACgkQAxRYpUeP 4pPRWA//agHzejU7vcrGfq65EcHyghnZtZI8Wl8ZRlWD6uBf34glFmqdj7GwuXeD QlqbFC+KXwjoCgR6rYU8UfPQkAD3RSXweODOGO95bRglK9zYRH53K5vvxG26fMdb 5IOgMFCRmZh8HGoJoQ6ckV8Nc83ETP7Sym+9nXDar0Dea7rhXnrZcc31HMGVWZDC 1Tj0Rm0HbESLqAUOA9HffAOl8gLO5WPnfOcYnNXGfYz0RSmjPbLKRe2wEeedZP6c hC4pspmMQeSge0KPDHgK8rf3/1mieyvfMGKFHKNzROOtw5hc0DFv+lnPQx7b8JcK S9dRKKQJWyvb7A4VgHGa9Rh/FXhf1gg/47TqQ+IrAYAf/zMBkKRgaEY1WajwAPCP QE3AE8ksGeGMImqkFVDUxrgCDTlJBKjYynfPuqe62mqhPdu3+WvlPmdEtgWEk54B Ad0RJjoSLe01usJ4p2g6HiYr9nwqDlLay+z8ZJFYeMHWcibTKKAY/pSflXv+mFhI t7U4bTzxwBBOMjUscd3UTAkEE7rfBU3DjfR6vTtvq0EfkXL13P0jdcvRRW38gAmV RsKmOhFBmzBsC+AqhDkqjIgmulnhw0dZ/IgmAEUOrRTzJUYrG6sXs7u0WSx0S79+ KIFChoa8RncTWYuM6o76MyjahPYrOhscCwAwiWMVqEFv8MQt0ic= =DEys -----END PGP SIGNATURE-----