![[OpenBSD]](../images/smalltitle.gif){kind=small}
If you wish to upgrade to 5.5-release or 5.5-stable from previous versions, see the upgrade guide.
Make sure you have read and understood FAQ 5 - Building the System from Source before using -current and the instructions below.
You should ALWAYS use a snapshot as the starting point for running -current. Upgrading by compiling your own source code is not supported.
Most of these changes will have to be performed as root.
crontab -e
vi /etc/mailer.conf
vi /etc/rc.conf
vi /etc/rc.conf.local
newaliases
rm -f /usr/sbin/spray
rm -f /usr/libexec/rpc.sprayd
rm -f /usr/share/man/man8/{,rpc.}spray{,d}.8
vi /etc/inetd.conf
_smtpq:*:103:103::0:0:SMTP Daemon:/var/empty:/sbin/nologin
Add the following line to /etc/group.
_smtpq:*:103:
If you have previously started smtpd, you will need to change the owner of
the queue subdirectories.
cd /var/spool/smtpd
chown -R _smtpq corrupt incoming purge queue temporary
rm -rf /usr/lib/apache
rm -rf /usr/share/doc/html/httpd
rm -f /usr/bin/{dbmmanage,htdigest}
rm -f /usr/sbin/{apachectl,apxs,httpd,logresolve,rotatelogs,suexec}
rm -f /usr/share/man/man1/{dbmmanage.1,htdigest.1}
rm -f /usr/share/man/man8/{apachectl.8,apxs.8,httpd.8,logresolve.8}
rm -f /usr/share/man/man8/{rotatelogs.8,suexec.8}
rm -f /etc/rc.d/httpd
The following files are associated with httpd(8) and can be deleted in some
cases, but may have been replaced with user content or configuration.
Warning: On systems which currently or have previously used any http daemon,
care must be taken and files analyzed case by case to avoid accidental deletion
of user content or important configuration files.
In particular, users moving to apache-httpd-openbsd will want to keep many
of these files.
rm -rf /var/www/icons
rmdir /var/www/conf/{modules,modules.sample}
rmdir /var/www/users
rm -f /var/www/cgi-bin/{printenv,test-cgi}
rm -f /var/www/conf/{httpd.conf,magic,mime.types}
rm -f /var/www/htdocs/{apache_pb.gif,blowfish.jpg,bsd_small.gif,index.html}
rm -f /var/www/htdocs/{lock.gif,logo23.jpg,logo24.jpg,mod_ssl_sb.gif}
rm -f /var/www/htdocs/{openbsd_pb.gif,openbsdpower.gif,openssl_ics.gif}
rm -f /var/www/htdocs/smalltitle.gif
Many PHP applications will work under nginx with few or minimal changes;
in most cases php-fpm is the preferred method of running PHP under nginx.
If the package is installed, remove it before upgrading to avoid a conflict in /etc/rc.d/unbound, and edit rc.conf.local to remove "unbound" from "pkg_scripts=..." lines, and add "unbound_flags=" instead.
pkg_delete unbound
vi /etc/rc.conf.local
The following applies only to those updating from source, or updating from a
snapshot without using sysmerge: The _unbound user should be added using vipw
(or the UID should be modified if you were previously using Unbound from
ports).
_unbound:*:53:53::0:0:Unbound Daemon:/var/unbound:/sbin/nologin
And _unbound group.
_unbound:*:53:
On or before March 19, sysmerge(8) was unable to do the /etc/group
crossing automatically if updating from source. Manual intervention will
be required in those situations.
rm -f /usr/include/sys/agpio.h
rm -f /etc/ppp/ppp.{conf,linkdown,linkup,secret}.sample
rm -f /usr/sbin/ppp /usr/share/man/man8/ppp.8
rm -f /usr/sbin/pppctl /usr/share/man/man8/pppctl.8
rm -f /usr/sbin/pppoe /usr/share/man/man8/pppoe.8
Many users will be able to migrate to the kernel implementations:
pppoe(4)
(for PPPoE),
ppp(4)
and its associated control program
pppd(8)
(for modems, mobile data, and some use with userland programs via a pipe).Another option for some users is npppd(8) which supports L2TP, PPTP and PPPoE (currently server-side, IPv4 only).
rm -f /bin/rcp /usr/share/man/man1/rcp.1
First, make sure you are running an up-to-date kernel. Second, install the new system Makefiles with the change to PIE_ARCH in bsd.own.mk:
cd /usr/src/share/mk && make install
cd /usr/src/gnu/usr.bin/binutils
make -f Makefile.bsd-wrapper clean && make -f Makefile.bsd-wrapper obj && \
make -f Makefile.bsd-wrapper depend && make -f Makefile.bsd-wrapper
cd /usr/src/gnu/usr.bin/cc
make clean && make obj && make depend && make && make install
cd /usr/src/gnu/usr.bin/binutils && make -f Makefile.bsd-wrapper install
rm -f /usr/lib/librt{,_p}.a
rm -f /usr/include/bm.h
rm -f /usr/include/md4.h
rm -f /usr/lib/libwrap{,_p}.*
rm -f /usr/libexec/tcpd
rm -f /usr/include/tcpd.h
rm -f /usr/sbin/tcpd{chk,match}
rm -f /usr/share/man/man3/hosts_access.3
rm -f /usr/share/man/man5/hosts.{allow,deny}.5
rm -f /usr/share/man/man5/hosts_{access,options}.5
rm -f /usr/share/man/man8/tcpd{,chk,match}.8
rm -f /etc/hosts.{allow,deny}
rm -f /bin/rmail
rm -f /usr/share/man/man8/rmail.8
rm -f /usr/libexec/uucpd
rm -f /usr/share/man/man8/uucpd.8
Users of these programs should install the rmail and uucpd packages instead.
# listen for AgentX connections
socket "/var/run/agentx.sock" agentx
relayd.conf(5) syntax has changed, from "send trap" to "snmp trap":
# used to be "send trap"
snmp trap "/var/run/agentx.sock"
rm -rf /usr/include/altq
rm -rf /etc/kerberosV/
rm -f /etc/rc.d/{kadmind,kdc,kpasswdd,ipropd_master,ipropd_slave}
rm -f /usr/bin/asn1_compile
rm -f /usr/bin/compile_et
rm -f /usr/bin/kcc
rm -f /usr/bin/kdestroy
rm -f /usr/bin/kf
rm -f /usr/bin/kgetcred
rm -f /usr/bin/kinit
rm -f /usr/bin/klist
rm -f /usr/bin/krb5-config
rm -f /usr/bin/slc
rm -f /usr/bin/string2key
rm -f /usr/bin/verify_krb5_conf
rm -rf /usr/include/kerberosV/
rm -f /usr/lib/libasn1{,_p}.*
rm -f /usr/lib/libcom_err{,_p}.*
rm -f /usr/lib/libgssapi{,_p}.*
rm -f /usr/lib/libhdb{,_p}.*
rm -f /usr/lib/libheimbase{,_p}.*
rm -f /usr/lib/libkadm5clnt{,_p}.*
rm -f /usr/lib/libkadm5srv{,_p}.*
rm -f /usr/lib/libkafs{,_p}.*
rm -f /usr/lib/libkdc{,_p}.*
rm -f /usr/lib/libkrb5{,_p}.*
rm -f /usr/lib/libroken{,_p}.*
rm -f /usr/lib/libwind{,_p}.*
rm -rf /usr/libdata/perl5/site_perl/*-openbsd/kerberosV/
rm -f /usr/libexec/auth/login_krb5{,-or-pwd}
rm -f /usr/libexec/hprop{,d}
rm -f /usr/libexec/ipropd-{master,slave}
rm -f /usr/libexec/kadmind
rm -f /usr/libexec/kdc
rm -f /usr/libexec/kfd
rm -f /usr/libexec/kpasswdd
rm -f /usr/sbin/iprop-log
rm -f /usr/sbin/kadmin
rm -f /usr/sbin/kimpersonate
rm -f /usr/sbin/kstash
rm -f /usr/sbin/ktutil
rm -f /usr/share/info/heimdal.info
rm -f /usr/share/man/man1/kdestroy.1
rm -f /usr/share/man/man1/kf.1
rm -f /usr/share/man/man1/kgetcred.1
rm -f /usr/share/man/man1/kinit.1
rm -f /usr/share/man/man1/klist.1
rm -f /usr/share/man/man1/krb5-config.1
rm -f /usr/share/man/man1/kswitch.1
rm -f /usr/share/man/man3/ecalloc.3
rm -f /usr/share/man/man3/getarg.3
rm -f /usr/share/man/man3/{gss,krb5,krb}_*.3
rm -f /usr/share/man/man3/gssapi.3
rm -f /usr/share/man/man3/gsskrb5_extract_authz_data_from_sec_context.3
rm -f /usr/share/man/man3/gsskrb5_register_acceptor_identity.3
rm -f /usr/share/man/man3/k_afs_cell_of_file.3
rm -f /usr/share/man/man3/k_hasafs.3
rm -f /usr/share/man/man3/k_hasafs_recheck.3
rm -f /usr/share/man/man3/k_pioctl.3
rm -f /usr/share/man/man3/k_setpag.3
rm -f /usr/share/man/man3/k_unlog.3
rm -f /usr/share/man/man3/kadm5_pwcheck.3
rm -f /usr/share/man/man3/kafs*.3
rm -f /usr/share/man/man3/krb524_*.3
rm -f /usr/share/man/man3/parse_time.3
rm -f /usr/share/man/man3/rtbl.3
rm -f /usr/share/man/man5/krb5.conf.5
rm -f /usr/share/man/man5/mech.5
rm -f /usr/share/man/man8/hprop{,d}.8
rm -f /usr/share/man/man8/iprop{,-log}.8
rm -f /usr/share/man/man8/ipropd-{master,slave}.8
rm -f /usr/share/man/man8/kadmin{,d}.8
rm -f /usr/share/man/man8/kdc.8
rm -f /usr/share/man/man8/kerberos.8
rm -f /usr/share/man/man8/kfd.8
rm -f /usr/share/man/man8/kimpersonate.8
rm -f /usr/share/man/man8/kpasswdd.8
rm -f /usr/share/man/man8/kstash.8
rm -f /usr/share/man/man8/ktutil.8
rm -f /usr/share/man/man8/login_krb5{,-or-pwd}.8
rm -f /usr/share/man/man8/string2key.8
rm -f /usr/share/man/man8/verify_krb5_conf.8
Remaining users of kerberosV should download and install the software
manually or use the kerberos packages when they become available.
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1
error_log syslog:server=unix:/dev/log,severity=notice; access_log syslog:server=unix:/dev/log,severity=notice main;
The port sysutils/relayd-updateconf is provided to convert the old configuration directives to the new filter grammar. It is provided as a convenience, but the resulting file must be inspected for correctness.
ifconfig: SIOCG80211ALLNODES: Inappropriate ioctl for deviceUpgrading from snapshots is recommended. When upgrading from source, ifconfig should be recompiled with new net80211 headers after upgrading the kernel:
cd /usr/src make includes cd /usr/src/sbin/ifconfig make clean make obj make depend make make install
This is set automatically on a given interface where rtsol/rtsold is used, so for typical use cases no changes will be needed, however rare configurations which do not use rtsol but just rely on the periodic announcements will need to manually set this flag.
If you upgrade from source and depend on rtsol for network access to work after rebooting the new kernel, then install new headers, rebuild rtsol/rtsold/ifconfig and apply revision 1.141 to /etc/netstart before the reboot.
A kernel containing the system call is required perhaps even for getting single user; so use of upgrades is recommended.
rm -f /usr/bin/lynx rm -f /usr/share/man/man1/lynx.1 rm -rf /usr/share/doc/html/lynx_help rm -f /etc/lynx.cfgTo install Lynx from packages:
pkg_add lynx
Some files which may have local modifications, notably /etc/rc and /etc/netstart, have been moved from the etc*.tgz file set to the base*.tgz file set. If you are reliant on services started from modified versions of these files to login, you will need to take action before upgrading.
The installation instructions with many ports have suggested using the following method to add to the "pkg_scripts" or "syslogd_flags" variables:
pkg_scripts="${pkg_scripts} somescript"
This is no longer supported.
You must replace these with one long pkg_scripts line - continuation lines
are not possible.
Recent changes to the syslog(3) function calls have removed the need for
additional log sockets in most cases, so in general lines like this can be
removed:
syslogd_flags="${syslogd_flags} -a /path/to/dev/log"
After upgrading the apache-httpd-openbsd package, you'll also have to bring the rc script of the base http, which pkg_add(1) has moved out of the way, and you should remove partial package probably left around:
mv -i /etc/rc.d/httpd.* /etc/rc.d/httpd pkg_delete partial-apache-httpd-openbsd