On Sat, Nov 15, 2025 at 04:31:49PM +0000, Sad Clouds wrote: > OK thanks, so this is quite similar to how etcupdate works then. I would > normally run etcupdate on upgrades, but didn't think anything like this > was needed for a new install.
It isn't, but running "certctl rehash" is one of the steps required after manual set extraction, just as running "sh MAKEDEV all" in /dev is. There was a thread about manual installations that assembled a list of these kind of things recently on this list, see https://mail-index.netbsd.org/netbsd-users/2025/10/02/msg033213.html (and I think there was a followup that added a few more things) Martin
