From nobody Tue Aug 26 04:25:47 2025 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c9vjl3vhFz66Bnt for ; Tue, 26 Aug 2025 04:26:03 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c9vjk4qwTz3Fd3; Tue, 26 Aug 2025 04:26:02 +0000 (UTC) (envelope-from rick.macklem@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=eIJ5Ncun; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of rick.macklem@gmail.com designates 2a00:1450:4864:20::52a as permitted sender) smtp.mailfrom=rick.macklem@gmail.com Received: by mail-ed1-x52a.google.com with SMTP id 4fb4d7f45d1cf-61c22dceb25so5872159a12.2; Mon, 25 Aug 2025 21:26:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1756182360; x=1756787160; darn=freebsd.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=scBMHkSXOAYtlqzF1XT8s89W+eFH6MCB9woY3pk+/rQ=; b=eIJ5NcunM6yh+nAoiPN4QPIGNX2yaFJGRyBvCaOcScoRW47DV1p8EOqQVqKG+ONf5J GtmSW28FhTZKmqebZ+b9YQmJ9+iQUKGkR1Ak9wos22HbIaS+uyzMUTL0qwB5hoxrniqQ bvXUp1jlIXbk33YMm5aRaO5F3/bf8fqIyEx8m9qldfGmwHzy3kqJPFXDAgR3SFNeCcOY dzK9s4PB7JoUxdU2ctA8gIHM4kNcHRcTiJOXTN9cNyExYDaoXD6eLzljhX87m4t4Xj53 NnoDGKtaqDFLm+PjF+x4ixuOx+9t4Xll3owy6aT2HYadE8cpG5KJ6jRLPHELv2YtuZId EQQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756182360; x=1756787160; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=scBMHkSXOAYtlqzF1XT8s89W+eFH6MCB9woY3pk+/rQ=; b=olTLH/KLgpgqX9B9wQsCUYJeWmo9DgrILvc41HEdTpqqq3G1hFobVgFE9HEsOkYsqC GTvfv3vQoS9Be+T6ragb+CbeWbkGo68HKAyEc2IurR8It/kRCMhotXbS3vREkBvPWb4L GWKBBbithssH/9fmTZ2NNsHf4/UL7GXm81HCvTg6e1JJPHdsCoUm0zPxwcNKAK51hfsC Fwgykc4h2qZe4Z74WHZrS4lnMXGmPFHGJDwQ1LiINhk9BSkDYpbW5GAga9Jv80JADV39 yEOxKJzOT7krWMPVMduyP3b/rYuyCAiafJYphbGYA0fIcQFSz62wdPWVwEaM30BmdLpN XGyw== X-Forwarded-Encrypted: i=1; AJvYcCUoJ6rfvj6WOuKunY3xkpXVW76v7cCD1wUIo8V5ZNxp0zBW0P2paHYd7W1Aly+IhsTIEtPcyANQnGDIU4X/Huw=@freebsd.org, AJvYcCWzYuBHhC1e9vSDCZvmWUCRtPgBMhDkqxjCY/dAa7alOmEwaNj98bKZHVr6i4fYONUOC2YRXikOfjn8t2gAZ94=@freebsd.org X-Gm-Message-State: AOJu0YwNGjcFKD6rLtdebJ1nMAbKJCBBwBL4pA+XounabQ7BPJuodku9 KFL56OPZIhe0QsXVnAPyyNuSHoTIaxN8ONM+vw0G8JAni2cPMbxoXY3IXvtoXqm7dWzzyQFRQ/Q yioL7sBfVy304EzcPuZ0NJqPFEFQ9wsEM X-Gm-Gg: ASbGncv1No+a3fH1fk69kDsh8B3c/KgNjBGNSG/ubzr/ZhFDV35DUIdUBez9DKnvZh4 ymaNpMsgrPxT41gIx9Tbd8odWEoNJFGLxLRu/FwvZHaxQhhtxhBIF5drzd160J9/iJ5+vkJJrBX APM4I7pIc52GZ2gpd+mcIuX1HILs+urZC3tJCuFjyRUziOJy5RgPImCL8DyHF1lZ2EorakBUvZk f9LN88I/TOlghPH5Lz/68lJarLRKmPQLjr7YUw= X-Google-Smtp-Source: AGHT+IEJlXTWoeQAkWkyQWhtjzTcl/zGps4kO1B4hlctFcpGB8+BP1oxGD50X7RBROoWLZd7GamWhLNPg5mvgbkGoZ0= X-Received: by 2002:a05:6402:13d4:b0:61c:4436:a0eb with SMTP id 4fb4d7f45d1cf-61c4437049dmr8639745a12.26.1756182359888; Mon, 25 Aug 2025 21:25:59 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 References: <56dd78c6-a53a-4c4c-989a-335cc5fed405@FreeBSD.org> In-Reply-To: From: Rick Macklem Date: Mon, 25 Aug 2025 21:25:47 -0700 X-Gm-Features: Ac12FXxMttSn3riFiqPC5gZnesGZoDRnSi_eTbP9g0bO_HTc8_pHbZ5fuikLS5k Message-ID: Subject: Re: August 2025 stabilization week To: Kyle Evans Cc: Gleb Smirnoff , freebsd-current@freebsd.org, src-committers@freebsd.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: --- X-Spamd-Result: default: False [-4.00 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; MIME_GOOD(-0.10)[text/plain]; ARC_NA(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; FREEMAIL_FROM(0.00)[gmail.com]; TAGGED_FROM(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::52a:from]; MID_RHS_MATCH_FROMTLD(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MISSING_XM_UA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com] X-Rspamd-Queue-Id: 4c9vjk4qwTz3Fd3 On Mon, Aug 25, 2025 at 1:27=E2=80=AFPM Rick Macklem wrote: > > On Mon, Aug 25, 2025 at 9:09=E2=80=AFAM Kyle Evans w= rote: > > > > CAUTION: This email originated from outside of the University of Guelph= . Do not click links or open attachments unless you recognize the sender an= d know the content is safe. If in doubt, forward suspicious emails to IThel= p@uoguelph.ca. > > > > On 8/25/25 07:53, Gleb Smirnoff wrote: > > > Hi, > > > > > > On Mon, Aug 25, 2025 at 01:00:07AM -0700, Gleb Smirnoff wrote: > > > T> This is an automated email to inform you that the August 2025 stab= ilization week > > > T> started with FreeBSD/main at main-n279838-6c45a5dad0a0, which was = tagged as > > > T> main-stabweek-2025-Aug. > > > > > > This stabilization cycle is expected to be more bumpy than usually. > > > > > > 1) We got major upgrade - OpenSSL 3.5.1. One known issue is that the = legacy > > > provider is broken. > I believe that KTLS support isn't yet enabled for it? > (If so, NFS over TLS wo't work.) > > > > > > > 2) The default Kerberos now is MIT. We have already checked that a K= erberized > > > NFS client can migrate from Heimdal to MIT. We did not check Kerberi= zed NFS > > > server, but should be fine. > I tested the server a couple of days ago and it was fine. > > > There is no yet an official way to migrate kdc > > > from Heimdal to MIT. > Yea. One possibility is to install Heimdal-7.8 from ports/packages and th= en > use it to dump the KDC's database in MIT format. (Although Cy seemed to > find it didn't work, doing this with the "--decrypt" option might retain = the > passwords.) > > I'll give this a try and report back if it worked for me. Well, I'm not having any luck. Every time I try and use Heimdal-7.8 to load the database from Heimdal-1.5.= 2, "kadmin -l" throws this error and exits. kadmin: rc4 8: EVP_CipherInit_ex einit I need the Heimdal-7.8 kadmin to work to try and convert the database to MIT format. So, does anyone know the trick to fixing this? rick > > rick > > > So, if you are upgrading a machine that is kdc, you need > > > WITHOUT_MITKRB5=3D"yes" in your src.conf. > > > > > > 3) The official pkg repo is now almost empty, see email from Colin [1= ]. So, do > > > not rush with 'make delete-old-libs', unless you are ready to build a= lot of > > > packages yourself. > > > > > > 4) The unfortunate coincidence with 3) is ABI breakage in the > > > setgroups(2)/getgroups(2) syscalls compared to the July stabilization= point. > > > Some packages would dump core. These packages need to be rebuilt. > > > > > > > This should be mitigated if you have COMPAT_FREEBSD14 enabled? Old pac= kages would > > reference the old compat symbol versions in libc, which should use the = COMPAT_FREEBSD14 > > variants of setgroups/getgroups. If you have a pointer to scenarios wh= ere that isn't > > the case, that'd be helpful- old packages should be fine in the GENERIC= case. > > > > Thanks, > > > > Kyle Evans