From nobody Mon Dec 1 22:38:46 2025 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dKzMp1KFYz6Hqdx for ; Mon, 01 Dec 2025 22:38:46 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dKzMp0lQHz3Q36 for ; Mon, 01 Dec 2025 22:38:46 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764628726; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3nhhvLILROqOXv29ng5fGn1hdndK0g6wll2M3qY1+go=; b=rdl2nhQJv4gt9PHoaOIFvt5xzv3rRsNeyhvTRge3M4stEvh6aEt8Rd+VM9ApXQxIP6ltxU uReAVs1XhVsgVcGRzlvRISW6T5u58lu4qJyRFi0bd2533AdvCjBjlrWjhhKsXH8cy4hH6k fm8QoWSCtQ0PfdpTzEwCdGFJkRy8Z9eCN98qZpCp3DIj/KV0RMHVGh/MtIW5RD2z2jPduA D1yDG0wMGNdKFKawOC+VflrKUkQj+5ASAaIvUrmzSqcQ0xe7VJvfzlC2pNpUv6VhiFpBsk owS+wREs/PhpCm89B3PVY0mtrb4Eaj6egoAXntWZWq+JR6rK1Bpkoao1A52qxg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764628726; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3nhhvLILROqOXv29ng5fGn1hdndK0g6wll2M3qY1+go=; b=sRRin6l7aTINU+uvG8m4TaCUwG830ZRzIDqakyZFV0eTe3+CRAdnhc3Ge2bhaF/arCiVIo u9n8t/BrDUdHWiNhv4Yh6u/EBgYNIkZtL5XjzmFMhxzi5Ab5BdKGfo5OqyhdXFxFWNovZU d337fp7OXNS8JRfJho3xS2+NWr3uWX0DcaosVK5gUq7woHLwc199I7KE0Wt+dVC8hOwIKx 3fZBxZoqU9YEqaHjDmodwjFKlhc/kVoyvk4SIcdpHaP6c/EU9qsjBpb5pu+sotRFbDAQno reBksiqQezpMszDENX6tRxQDETaoQshh7QwHYQImJNZz8ENIi6Nrhq8U89pnxg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1764628726; a=rsa-sha256; cv=none; b=b3N1e3EeiAhAgSRrLZcN6+w2obYEE1SYrQQvmC12CosOqhsrH8U4DM2AP8aIOt+NqUqkTX NGFFBgHb9e+91TLHOewF/uYKVegLO+GbRIzhp3EOFchdDA0r1GdESUVJZcvgsohISIN+ZU jwxlCSy7+42PjcOzh8b1atahEZ3h7OBK22se1FZLwF4D5wJ46tv2F1N+rkIVRF+2l9iBy9 A9WqcsWuV4CVzNYyDfelJzsFNgDbSrvtR5/PWJqGX8R2rBSl7bvexg6CFvEjMlcJ6gkHtL 7hMSYzQZmODgHlYtQH7ersZH7efA+6qgXNAy6ID38J3yBvaHXkJNVp9fEUar/Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4dKzMp099yzgRj for ; Mon, 01 Dec 2025 22:38:46 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3c203 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 01 Dec 2025 22:38:46 +0000 To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Dave Cottlehuber Subject: git: c2b197a211 - main - releases/15.0R/relnotes: document how to fetch new signing keys for BETA/RC users List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: dch X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: c2b197a211d5e80d2647fc86b501ef8f1806cc0c Auto-Submitted: auto-generated Date: Mon, 01 Dec 2025 22:38:46 +0000 Message-Id: <692e18f6.3c203.30dff8ad@gitrepo.freebsd.org> The branch main has been updated by dch: URL: https://cgit.FreeBSD.org/doc/commit/?id=c2b197a211d5e80d2647fc86b501ef8f1806cc0c commit c2b197a211d5e80d2647fc86b501ef8f1806cc0c Author: Dave Cottlehuber AuthorDate: 2025-12-01 22:37:50 +0000 Commit: Dave Cottlehuber CommitDate: 2025-12-01 22:37:50 +0000 releases/15.0R/relnotes: document how to fetch new signing keys for BETA/RC users Reviewed by: cperciva, zaiee Approved by: zaiee Sponsored by: SkunkWerks, GmbH --- website/content/en/releases/15.0R/relnotes.adoc | 34 +++++++++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/website/content/en/releases/15.0R/relnotes.adoc b/website/content/en/releases/15.0R/relnotes.adoc index ff73972a40..622aaee6ae 100644 --- a/website/content/en/releases/15.0R/relnotes.adoc +++ b/website/content/en/releases/15.0R/relnotes.adoc @@ -65,6 +65,40 @@ Source-based upgrades (those based on recompiling the FreeBSD base system from s Upgrading FreeBSD should only be attempted after backing up _all_ data and configuration files. ==== +[[upgrade-rc]] +== Upgrading from Existing Pre-Release Base System Package Installs +[IMPORTANT] +==== +For users of PRERELEASE, ALPHA, and BETA builds of FreeBSD 15.0, due to late-breaking changes in FreeBSD.org infrastructure, it is not possible to upgrade directly using the man:pkg-upgrade[8] utility. +==== + +Users should either manually copy the required files from a source tree checkout of `15.0-RELEASE` tag, or a later commit in `STABLE` or `CURRENT` branches, or alternatively, force-install the `FreeBSD-pkg-bootstrap` package from the official release base system packages. + +The recommended, and most secure approach, is using the source tree checkout of any of head, stable/15, or releng/15.0 branches after 2025-11-27 22:00 UTC. + +.... +# cp /usr/src/usr.sbin/pkg/FreeBSD.conf.quarterly-release \ + /etc/pkg/FreeBSD.conf +# cp -R /usr/src/share/keys/pkgbase-15 /usr/share/keys/pkgbase-15 +.... + +Users who do not have up to date sources installed may use a less secure, but simpler approach, validating the checksums after installation. As these are architecture-independent files, the checksums will match on all platforms. + +.... +# pkg add -f https://pkg.freebsd.org/FreeBSD:15:(uname -p)/base_release_0/FreeBSD-pkg-bootstrap-15.0.pkg +# sha256 -r /etc/pkg/FreeBSD.conf /usr/share/keys/pkg/trusted/pkg.freebsd.org.2013102301 \ + /usr/share/keys/pkgbase-15/trusted/awskms-15 /usr/share/keys/pkgbase-15/trusted/backup-signing-15 +ab261a3b84ffc11654ac0bafbb7d6b3f1b6afc30bfabab3bcff64259678eac26 /etc/pkg/FreeBSD.conf +036ae4f9c441a3febb41734bbb37227ec3374edd3c6c687e5cb70d580efbea30 /usr/share/keys/pkg/trusted/pkg.freebsd.org.2013102301 +529c79e85a6ca152faa9d57ead85fe0111ffada8d0a0fa2f11fc510999fa50df /usr/share/keys/pkgbase-15/trusted/awskms-15 +c368ec8d05654bdaad34742c1d75b9b150bfc3892838cef32f6e5b036b0c0605 /usr/share/keys/pkgbase-15/trusted/backup-signing-15 +.... + +[IMPORTANT] +==== +Upgrading FreeBSD should only be attempted after backing up _all_ data and configuration files. +==== + [[security-errata]] == Included Security Fixes and Errata Patches