From nobody Sat Mar 21 15:23:16 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fdNVl008pz6Vb40 for ; Sat, 21 Mar 2026 15:23:26 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fdNVk6ZT5z3TTv for ; Sat, 21 Mar 2026 15:23:26 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Authentication-Results: mx1.freebsd.org; none Received: by mail-ot1-x32b.google.com with SMTP id 46e09a7af769-7d75371d873so1774637a34.3 for ; Sat, 21 Mar 2026 08:23:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; t=1774106596; x=1774711396; darn=freebsd.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=Rbr5Udu8tMyebcZfdnh54T5i5Z7jkU0zEXUMSfSBU6Y=; b=j4sQs4Q/KwXSL5OFxm+qKEsxwBR+WxX40Eei3OQR6w7xXNLy4sYJrlzlG0WzgX3zr9 iEf+HcLn87rVEsWdJDLav9vGXtcg0XpqLTesfD4AIZnUpUF85hiavPUwQSxlJ/13LL84 ivnY30XHSKws3l5SnxVZYjbgfLh+8g/Iozor/3wponv8Urzlt1FvaIfjCIKdPxri34X5 U9lva1Yup+Qv1ZxBxpUt6rJ7l7oxx/UgQWjQuVwnerGOuooi1JrAOFognaX1cCBaiWwl sza2mkxqkfRde3eXq5yQ5FmLJiONMBUa9IePN9fGlfBHnPAXjf/WYye+xH37d0BOz6Ln 27+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774106596; x=1774711396; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Rbr5Udu8tMyebcZfdnh54T5i5Z7jkU0zEXUMSfSBU6Y=; b=X0HE++bePRptstNvDxEy/ACgL4l9B95saNz04jkReIYHtwpgS2GN7tOmtwFqiVpJsT G9FsGGd5WO3GzSbBnJ7Et8EZpprG40EpqaeyTaqgo0f9cdxlY7U43UOBKXLrbPQPpal+ 0gELdbzDFeey/bwSb/p6qtGaULPcbC4FrAddDAtmE4yKdbA1g+f5/QcU0DAXmrrJ5ioZ K/jIDQ6XE5QYffy7aFontRmiJJSaeMe4cw8jumsHZeQFDxcZ2WXfU8M6JWGHaI8vspOI kCsbK0k3EeH//RdEaWdvrB3gC5un0trCp3yrm3lnFs/RZBqat9CubbVO8zeabAn9I0CI g0sA== X-Forwarded-Encrypted: i=1; AJvYcCVAWTI+iqKw0xlqAEP+x7qqwbrtHOKIW1SMruIOlXF7FF+V+N0slKrlBeLpQkHf7EULSxASThPNry5aQIZ5eA3TAXXj@freebsd.org X-Gm-Message-State: AOJu0YwllLDfC17+Knwhx86tb585XHWrucVVaJ7i5cBLmwbPARPl6WXf EcDPytZN3B7Ua6DmvjmkwZXUC4N52ASOYuIS0SpKjo4ErnGOOqtdi9LJkB6jKDPLZ/E= X-Gm-Gg: ATEYQzx4sdk9B3zwEmGnZ1DbGR9sLND69COwrGwjeIG8GAYDKtW7c3jDc/uMViQXDvU g/S1FamkKlSCccqU2bWbnWFRIuwv0IkNHIP3whUQg7f+RxEK7e229l3+7vTakU3C8z+8G1f8Kk3 b1v8Q0Rm7tiaI+62gz9n+OyQ83eiOcr2GbeoZg7MIRsIyoEkQipcr7v6Qz4A0hfVQs/w6KI4L6E WtYANImmkc8ZsWJNT4TcwLKZTY7IQXvd3JBWZPAonTv10gW7mWxVMEZBDTPb+2WsJ9XOoksOPg+ pxyaLgtPYZQtS1odsi4+ajREA9gT+SY4+vjmv/Hfn1Wd4zeL76dp1evSMLOtZ9VHKP1mM7YrE9Z dGC+WQKM0KQFsZNm/Az/07Crtd7KBVHZudr4yCkj/hN5121fCCInPZItbxJR7P53kBLGfYydrul Vnpyax X-Received: by 2002:a05:6830:67c6:b0:7d9:b023:cb7a with SMTP id 46e09a7af769-7d9b023d18amr124305a34.17.1774106596115; Sat, 21 Mar 2026 08:23:16 -0700 (PDT) Received: from mutt-hbsd ([2001:470:4001:1::95]) by smtp.gmail.com with ESMTPSA id 46e09a7af769-7d7eaa025dcsm5178143a34.0.2026.03.21.08.23.15 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 21 Mar 2026 08:23:15 -0700 (PDT) Date: Sat, 21 Mar 2026 15:23:16 +0000 From: Shawn Webb To: Warner Losh Cc: A FreeBSD User , Charlie Li , Martin Matuska , src-committers , "" , "" Subject: Re: git: 8a62a2a5659d - main - zfs: merge openzfs/zfs@f8e5af53e Message-ID: <5eaaokkdmmkcojky7362jvkandaard6eu26n77f5z5q7lqutu5@kywp5prvxozj> X-Operating-System: FreeBSD mutt-hbsd 15.0-STABLE-HBSD FreeBSD 15.0-STABLE-HBSD HARDENEDBSD amd64 X-PGP-Key: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/blob/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc References: <69b561ff.39ea9.b797d91@gitrepo.freebsd.org> <2jb2vg6baofimu5xkxf62o5ogaq7fu5pk4o3vzhpegy446bppf@fzwtj6wtwk53> <20260321090444.6f81da15@thor.sb211.local> List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="igc35i2f35lrvdar" Content-Disposition: inline In-Reply-To: X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Queue-Id: 4fdNVk6ZT5z3TTv X-Spamd-Bar: ---- --igc35i2f35lrvdar Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Subject: Re: git: 8a62a2a5659d - main - zfs: merge openzfs/zfs@f8e5af53e MIME-Version: 1.0 On Sat, Mar 21, 2026 at 09:18:20AM -0600, Warner Losh wrote: > On Sat, Mar 21, 2026, 9:08=E2=80=AFAM Shawn Webb wrote: >=20 > > On Sat, Mar 21, 2026 at 09:04:17AM +0100, A FreeBSD User wrote: > > > Am Tage des Herren Fri, 20 Mar 2026 23:27:20 -0400 > > > Charlie Li schrieb: > > > > > > > Shawn Webb wrote: > > > > > On Tue, Mar 17, 2026 at 04:52:16PM +0000, Shawn Webb wrote: > > > > >> On Tue, Mar 17, 2026 at 10:44:59AM -0600, Warner Losh wrote: > > > > >>> On Tue, Mar 17, 2026 at 10:36=E2=80=AFAM Shawn Webb < > > shawn.webb@hardenedbsd.org> > > > > >>> wrote: > > > > >>> > > > > >>>> Hey Martin, > > > > >>>> > > > > >>>> On Sat, Mar 14, 2026 at 01:26:23PM +0000, Martin Matuska wrote: > > > > >>>>> The branch main has been updated by mm: > > > > >>>>> > > > > >>>>> URL: > > > > >>>> > > https://cgit.FreeBSD.org/src/commit/?id=3D8a62a2a5659d1839d8799b4274c04= 469d7f17c78 > > > > > > >>>>> > > > > >>>>> commit 8a62a2a5659d1839d8799b4274c04469d7f17c78 > > > > >>>>> Merge: f91464171d61 f8e5af53e92f > > > > >>>>> Author: Martin Matuska > > > > >>>>> AuthorDate: 2026-03-14 12:14:56 +0000 > > > > >>>>> Commit: Martin Matuska > > > > >>>>> CommitDate: 2026-03-14 12:14:56 +0000 > > > > >>>>> > > > > >>>>> [snip for brevity] > > > > >>>>> > > > > >>>>> Obtained from: OpenZFS > > > > >>>>> OpenZFS commit: f8e5af53e92fa7c03393fbd4922cb9c1d0c15920 > > > > >>>> > > > > >>>> This commit seems to cause issues when building boot loader > > related > > > > >>>> code: > > > > >>>> > > > > >>>> =3D=3D=3D=3D BEGIN LOG =3D=3D=3D=3D > > > > >>>> 114232 bytes available > > > > >>>> btxld -v -f aout -e 0x200000 -o loader_simp -l > > > > >>>> /usr/obj/usr/src/amd64.amd64/stand/i386/btx/btxldr/btxldr -b > > > > >>>> /usr/obj/usr/src/amd64.amd64/stand/i386/btx/btx/btx > > loader_simp.bin > > > > >>>> kernel: ver=3D1.02 size=3D690 load=3D9000 entry=3D9010 map=3D1= 6M pgctl=3D0:58 > > > > >>>> client: fmt=3Delf size=3D5e2e8 text=3D57930 data=3D514c bss=3D= 7470 entry=3D0 > > > > >>>> output: fmt=3Daout size=3D61000 text=3D1000 data=3D5f000 org= =3D200000 > > entry=3D200000 > > > > >>>> =3D=3D=3D> stand/i386/pxeldr (all) > > > > >>>> -560 bytes available > > > > >>>> *** Error code 1 > > > > >>>> > > > > >>> > > > > >>> What all do you have enabled? The defaults aren't even close to > > running out > > > > >>> of space (though I've not looked at this). > > > > >> > > > > >> Hey Warner, > > > > >> > > > > >> Thanks for reaching out! I've uploaded `make showconfig` here: > > > > >> https://hardenedbsd.org/~shawn/2026-03-17_srcconf-r01.txt > > > > >> > > > > >> The following options are specific to HardenedBSD (in no particu= lar > > > > >> order): > > > > >> > > > > >> 1. MK_HBSD_UPDATE > > > > >> 2. MK_HBSDCONTROL > > > > >> 3. MK_PIE > > > > >> 4. MK_RELRO > > > > >> 5. MK_SHLIBRANDOM > > > > >> 6. MK_ZERO_REGS > > > > >> 7. MK_SPECTREV1_FIX > > > > >> 8. MK_SAFESTACK > > > > >> 9. MK_RETPOLINE > > > > >> 10. MK_LTOLIB > > > > >> 11. MK_CFI > > > > > > > > > > MK_RETPOLINE was the culprit. Something about this ZFS commit cau= ses > > > > > LLVM to emit more retpoline entries than before--too many for a > > little > > > > > bootloader. That might be something to investigate later, but onl= y to > > > > > satisfy a curious mind, not to actuall fix anything (since nothin= g's > > > > > actually broken.) > > > > > > > > > > Since it doesn't really make sense to apply speculative execution > > > > > mitigations to a bootloader, I disabled retpoline for a components > > > > > in stand/. > > > > > > > > > > Good to go. > > > > > > > > > Also just got bit by this, albeit during the lua loader, since I ha= ve > > > > WITH_RETPOLINE in my src.conf. > > > > > > > > > > Hello, > > > > > > I do not have WITH_RETPOLINE in my /etc/src.conf, but since I got this > > mysterious error about > > > not enough bytes left, I use WITHOUT_LOADER_PXEBOOT=3D YES (due to is= sues > > with WITH_BEARSSL=3DYES > > > also used). > > > Despite not using any WITH_RETPOLINE I also catch the error ... > > > > Something about this ZFS commit causes the boot laoder to be too big. > > I guess the first sign of trouble was with retpolines, but there seem > > to now be additional signs. > > > > What's the process for filing a bug report against OpenzFS for > > something like this? (Not asking you directly, just a general question > > for the thread.) > > >=20 > That's a good question. We are rapidly aporoaching the day we will have to > freeze the set of zfs feature that we can boot with the BIOS path. There's > only so much space. >=20 > Right now, there's little to no bootloader testing, let alone analysis > done and that will need to change. Another question might also be: is it worth the time and effort? Are people really using a ZFS-enabled traditional MBR BIOS bootloader on FreeBSD 16-CURRENT (or eventual 16.0-RELEASE)? From my rather naive (and ignorant, since I don't know FreeBSD's userbase well), it seems like folks use either loader.efi or u-boot (or both!) Not a question I can answer, of course, because everyone likely has a different take on what "worth the time and effort" means to them. :-) Thanks, --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A= 4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc --igc35i2f35lrvdar Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmm+t90ACgkQ/y5nonf4 4fq8TQ/9FTM3wi0et89csLdMMHjaZ2oUOOwKChDrtfPMLygF/xCsntAQnvOw1h5W jT6l5sZ7rhbG4sqTFCgRH81ft6RAWX7b5NCAVNvLfZiM4eVNEUlAVNvEJaXxVMi5 1yqedKk7+Y5SxHN8PR2RTbVGKyarSyaJMRIJmI/lslRLE0Llx5HzXDhKMM/9VJsx iuYqmSN7WfSPLRwXLToBfFp7hd/nnOIicFMuWGbx64WT++30+hARwogTOVvQms3d HvjYMznk+he+aa2PQI0PWSmrZhYHvAImtf8F7l+idhET8pC7D5a/b+5FuMVSThIm upJMYm/Wh8aQrWRY82g1gsEnLHugq2cNIz6iFX+aq+EY3kXgVzHycV3O6pSY2c+V 9r+fGrMJ/gQRpsS2uWntb7vLLKJO/y6/IRZFPVzbMX9JXTmtQPK+VqVshQTgezM1 pjmgPNxcB9GdlbjaI5IBdlRtLNM8U9g+01SXD+ZkqKEvIOuCObH6pqM3GeuEd64X mcHWOVpJNhqmSMB77VJBrKg0cLCM/R17ukMW3T4VTJCRDQffVRMcVHymNnBHmgQP aorp1SZREumz60PimWNTlT4Tvx4CMfj27MxfBp0VUA+kWIHAuxliph9KysPKwSqG FQen09KZtaQhf4zvI2e5SgNAXGxUcLNEL7O3JBPxuhFXutrnQsc= =uUe5 -----END PGP SIGNATURE----- --igc35i2f35lrvdar--