From nobody Tue Dec 2 16:11:53 2025 X-Original-To: freebsd-pkgbase@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4dLQl26JD2z6Hhhn for ; Tue, 02 Dec 2025 16:11:58 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4dLQl205Nsz3DYx for ; Tue, 02 Dec 2025 16:11:58 +0000 (UTC) (envelope-from matthew@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764691918; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5btiACAdoA2cbGOR2hxOPqCd6TrfcTvSH2EtGKr7mXo=; b=Ub1pKlx1mxbZ2zZGazEBGzn2Lz59T8VzKDitnX09vSxgKCzU9LneVKNc6nd/v9aA3nA/Dh 8gE2kZnSkPdoD+hPRjteEAMYj8S8ETdzxsM/km79t+yBibur9v2IsYbPBgKukaEbEdWych m4IFEm3JyKDUdOJ/xQAnRMX6C9O5obzgMCQFWG58r3AftNhzVR25Zq2HVkZS1mNkvjayHM TMBScTSOkIv0ud4CR4GmizloYwlSmMmJn3Gp7cEEIteyjsVuXP12NKpr7ajWrWA5I8duNA afY8mTjQeS3Wkw1c8Rw5etx51qAxx/Sg987E+jasxT5uws5Y1scsXtI3MYtg2g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1764691918; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=5btiACAdoA2cbGOR2hxOPqCd6TrfcTvSH2EtGKr7mXo=; b=ITzmbuCYjKL4HHIBxqhwdEoRWQwGBqS5WVdRxqVjFo//RLkmt5Xkq+fT0KvtNv9OvQl22w Y06nkQITIacF+kTyhThsq/Cb2bccc03XV12BtEgCP674dK1tKkD0d/tVJ1+nEZEmmDJ20B ZGu18PDMikPoJn4wplsrQy5Qb9Tft39cvWtOhdStEV393XP3ooBHvThXvAypznB8hkNPyI 2Qpy3pnUmw0tM/mCFXMjAfK0EzShA/tWlydRES+c4EkctMsAfp0Z13f1dwvh6gBl2KmLCe Rzzpvev5KVIe+JMtK3yJ2n2+Y2VSHueQlwKTfpSDOUM0UhFUu/tfjTZSYG5shw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1764691918; a=rsa-sha256; cv=none; b=XAGvJSJw1/cZqgVySkjNOMXyufGaHvLOOKaBQqiKITU/56K30xQ+GYwtxCbMPh4+u/yyT3 31Uu1vw92vTG/43CwiccX7Ctq0piwRDJuLH+HSCBCLQWNZ2nI0lJj5Xu22A0lBr/C9ljZj hIDVtioZTblEg51M9XLW5av7u7vKByeYZcge9VN5jD7kmgw8BGBPF3XJCPecG8oPkbLtFJ LrRp4kaojegddYG5U5wr4md3plN8RcpmKWXqcMyOE98gUkY4KB6gZzxggfp90RcZgqtuGs 0mj6ktoeRqmF0V4xbpRcCU+BcZi3P5Ej89xukgIuDkY1RYxIY0KGoqYeGbi9qw== ARC-Authentication-Results: i=1; smtp.infracaninophile.co.uk; dmarc=fail (p=none dis=none) header.from=FreeBSD.org Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: matthew/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4dLQl16CFxzx5N for ; Tue, 02 Dec 2025 16:11:57 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from [IPV6:2001:8b0:151:1:fc87:9f08:885f:bfab] (unknown [IPv6:2001:8b0:151:1:fc87:9f08:885f:bfab]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id 55BBE104C5 for ; Tue, 02 Dec 2025 16:11:54 +0000 (GMT) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=fail (p=none dis=none) header.from=FreeBSD.org Message-ID: <5250f4eb-0849-473f-89ff-aa46a67a3fef@FreeBSD.org> Date: Tue, 2 Dec 2025 16:11:53 +0000 List-Id: Packaging the FreeBSD base system List-Archive: https://lists.freebsd.org/archives/freebsd-pkgbase List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pkgbase@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: pkgbase upgrade from 14.3-RELEASE-p6 to 15.0-RELEASE Content-Language: en-GB To: freebsd-pkgbase@freebsd.org References: From: Matthew Seaman In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 02/12/2025 14:53, Darren Henderson wrote: > I'm missing something... > > On a basified 14.3-RELEASE-p6 system I end up seeing a pkg error relating > to not being able to find a trusted key but the needed keys are there and > readable. This is pointing at base_relase_0 (and maybe that's the problem? > Do we start counting at 0 for the initial release?) using an ABI of > FreeBSD:15:amd64 > > The problem appears to be related to an issue evident on pkg.frrebsd.org. > If you go to https://pkg.freebsd.org/, click on FreeBSD:15:amd64 and then > click on base_release_0 you get an error message of "AccessDenied". Also a > message about XML file does not appear to have style information. The same > happens if you look under FreeBSD:15:aarch64. Again maybe that is because > 15-RELEASE-p0 doesn't exist yet? It does, as of this morning. Although it's just '15.0-RELEASE' until the first patch sets happen. > I can move from 14.3-RELEASE-p6 to 15.0-STABLE just fine if I use url: > "pkg+https://pkg.FreeBSD.org/${ABI}/base_latest" but I'm not seeing how to > get from 14.3-RELEASE-p6 to 15-RELEASE. > > Apologies if I'm missing something basic here. Upgrades accrose different major versions or between -STABLE and -RELEASE streams are all conceptually the same with pkgbase * Set up pkg.conf to use packages from the OS version you want, typically involving overriding '${ABI}' in pkg URLs and ${OSVERSION}. * Do a `pkg upgrade` possibly involving several stages of upgrading different classes of software -- kernel vs. vital shared OS components like libraries vs. end user software packages and possibly in several steps via intermediate versions. That's the high level description. Normally you'ld break that second step down into smaller pieces with levels of testing between each so you could perform the upgrade confident of your system still working or decide to abort and back-out in the middle without having to exercise the nuclear option of recovering from backup. For me, that boils down to 'create a new boot environment, boot into the new BE; if it doesn't work, revert to the original BE and think again.' The RE team has stated that there will be different pkg signing keys for each OS major version or branch, so you'll need to look up the appropriate keys for the version you want to upgrade to and add them to your pkg.conf. I don't think there's a resource I could point you to documenting all that (yet) but you can pull the information out of git. Eg. these are the keys used for 15.0-RELEASE packages: https://github.com/freebsd/freebsd-src/tree/release/15.0.0/share/keys/pkgbase-15/trusted Cheers, Matthew