Re: ABI changes within stable branch

2017-09-19 Thread Aristedes Maniatis
On 20/9/17 11:33AM, Warner Losh wrote:
> FreeBSD has always had a policy of backwards compatibility. By that 
> definition we are stable. What we don't promise is full forwards 
> compatibility, which is what you are asking for. 

Correct. Within the stable branch I'd always assumed forward compatibility was 
the case and haven't been bitten by this since my days of FreeBSD 3.0.

But even if this is no longer the case (or was never a goal), I'm still 
confused by versioning packages like this: http://pkg.FreeBSD.org/${ABI}/ which 
is clearly not correct. There is just no way for me to discover which package 
is compatible with which OS version.

Anyhow, thanks for listening. This is putting a dent in my adoption of the 
accelerated EOL of minor releases. At the very least I need to remember to keep 
poudriere on the x.0 release even after it is EOL, until every one of my 
servers has been upgraded (which is rarely before the new accelerated EOL for 
machines that don't face the internet).

Ari


-- 
-->
Aristedes Maniatis
CEO, ish
https://www.ish.com.au
GPG fingerprint CBFB 84B4 738D 4E87 5E5C  5EFA EF6A 7D2E 3E49 102A
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"

Re: ABI changes within stable branch

2017-09-19 Thread Warner Losh
On Sep 19, 2017 6:05 PM, "Aristedes Maniatis"  wrote:

Matthew Seaman wrote:
>
> Ports are still being built according to the same policy -- on the
> earliest still-supported release of each major branch.
>
> It's just that now, for 11.x and subsequent, 11.0 goes out of support a
> month or so after 11.1-RELEASE comes out.  You're meant to have upgraded
> by now.  The 11.0 -> 11.1 upgrade is intended to be a pretty routine
> thing that you can do about as freely as you can apply a security patch
> or other update within the 11.0 series.

I'm afraid this hasn't made things clearer for me at all.

1. What does the "stable" branch mean if the ABI is no longer stable


FreeBSD has always had a policy of backwards compatibility. By that
definition we are stable. What we don't promise is full forwards
compatibility, which is what you are asking for.


2. This policy of changing the ABI means that upgrading from 11.0 to 11.1
is now less routine than it used to be in the old days. Each minor update
is more like the effort involved in upgrading 10 -> 11. So I'll be doing it
less often, not more often.


How so? All the old binaries work. It's running new binaries on old systems
that's a problem.

3. Packages are located in a namespace like this: https://pkg.freebsd.org/
freebsd:11:x86:64  But now I don't know which release this is actually
pointing to or which packages will work.

4. /etc/pkg/repos/FreeBSD.conf points to url: "pkg+http://pkg.FreeBSD.org/${
ABI}/quarterly" However this is now wrong. If I am delayed in upgrading my
system, downloading packages from there will sometimes break things. And I
will not know until runtime.

5. The package MANIFEST contains information about system compatibility.
That is just the major version, but we need the minor release version now
too.


Here are some possible solutions from where I'm sitting on the edges:

a. Go back to 'stable' meaning the ABI doesn't change. Not just the kernel,
but the whole OS.


The definition hasn't changed in a decade.

b. Since there is no different in breakage and effort when going from 11.0
-> 11.1 or when going from 11.0 -> 12.0, just get rid of the point releases
entirely. Then the existing packaging system still works.

c. Add point releases to the package manifest. We've have something like
https://pkg.freebsd.org/freebsd:11.0:x86:64

d. Wait for some new base packaging magic to solve things.


Have I summarised this effectively?


Apart from the whole forwards backwards thing, which is sadly critical...

Warner

Ari


--
-->
Aristedes Maniatis
CEO, ish
https://www.ish.com.au
GPG fingerprint CBFB 84B4 738D 4E87 5E5C  5EFA EF6A 7D2E 3E49 102A
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ABI changes within stable branch

2017-09-19 Thread Aristedes Maniatis
Matthew Seaman wrote:
> 
> Ports are still being built according to the same policy -- on the
> earliest still-supported release of each major branch.
> 
> It's just that now, for 11.x and subsequent, 11.0 goes out of support a
> month or so after 11.1-RELEASE comes out.  You're meant to have upgraded
> by now.  The 11.0 -> 11.1 upgrade is intended to be a pretty routine
> thing that you can do about as freely as you can apply a security patch
> or other update within the 11.0 series.

I'm afraid this hasn't made things clearer for me at all.

1. What does the "stable" branch mean if the ABI is no longer stable

2. This policy of changing the ABI means that upgrading from 11.0 to 11.1 is 
now less routine than it used to be in the old days. Each minor update is more 
like the effort involved in upgrading 10 -> 11. So I'll be doing it less often, 
not more often.

3. Packages are located in a namespace like this: 
https://pkg.freebsd.org/freebsd:11:x86:64  But now I don't know which release 
this is actually pointing to or which packages will work.

4. /etc/pkg/repos/FreeBSD.conf points to url: 
"pkg+http://pkg.FreeBSD.org/${ABI}/quarterly"; However this is now wrong. If I 
am delayed in upgrading my system, downloading packages from there will 
sometimes break things. And I will not know until runtime.

5. The package MANIFEST contains information about system compatibility. That 
is just the major version, but we need the minor release version now too.


Here are some possible solutions from where I'm sitting on the edges:

a. Go back to 'stable' meaning the ABI doesn't change. Not just the kernel, but 
the whole OS.

b. Since there is no different in breakage and effort when going from 11.0 -> 
11.1 or when going from 11.0 -> 12.0, just get rid of the point releases 
entirely. Then the existing packaging system still works.

c. Add point releases to the package manifest. We've have something like  
https://pkg.freebsd.org/freebsd:11.0:x86:64

d. Wait for some new base packaging magic to solve things.


Have I summarised this effectively?

Ari


-- 
-->
Aristedes Maniatis
CEO, ish
https://www.ish.com.au
GPG fingerprint CBFB 84B4 738D 4E87 5E5C  5EFA EF6A 7D2E 3E49 102A
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


[Bug 183817] [patch] [mac] [panic] kernel compiled with options INVARIANTS and MAC_PORTACL panices if loader loads mac_portacl.ko too

2017-09-19 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=183817

Eugene Grosbein  changed:

   What|Removed |Added

   Assignee|freebsd-b...@freebsd.org|eu...@freebsd.org
 CC||eu...@freebsd.org

--- Comment #4 from Eugene Grosbein  ---
My PR.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: [Asterisk-bsd] Asterisk13 coredump on freebsd 11.1

2017-09-19 Thread Guido Falsi
On 09/19/2017 01:57, Tao Zhou wrote:
> On 18/9/17 5:40 pm, Hans Petter Selasky wrote:
> 
>> There is a known issue with the latest version of Asterisk 13.xxx
>> crashing. I don't know the root cause. Try downgrading the Asterisk
>> version. You probably should compile all code with debug flags enabled
>> if you want to find the root cause of this. 
> 
> In our environment the crash happen almost always within two minutes. No
> calls or other activity are needed to make the crash happen.
> 
> 
> Things that didn't help:
> 
> * downgrading asterisk13 to 13.17 or 13.16
> * downgrading gcc5 or upgrading it to gcc6
> * disabling all modules
> * compiling asterisk13 with GCC or CLANG
> * upgrading the poudriere build environment from 11.0 to 11.1
> 
> Thing that helped
> 
> * installing astersisk 13.16 from https://pkg.freebsd.org
> (All our previous attempts were with software which was compiled locally
> on poudriere under FreeBSD 11.1 or 11.0)
> 
> 
> Not sure if it relevant, but our make environment looks like this:
> 
> WITH_PKGNG=yes
> WITHOUT_X11=yes
> 
> JAVA_PORT=java/openjdk8
> JAVA_VERSION=1.8
> 
> apache22-worker-mpm_SET+=PROXY_AJP PROXY_BALANCER PROXY_CONNECT
> PROXY_FTP PROXY_HTTP PROXY_SCGI
> WITH_BDB_VER=5
> 
> DEFAULT_VERSIONS+=  php=7.1
> DEFAULT_VERSIONS+=  apache=2.4
> DEFAULT_VERSIONS+=  ssl=openssl
> 
> WITH_MYSQL_VER=102m
> 
> # This is needed when using openssl from ports
> OPTIONS_UNSET+= GSSAPI_BASE
> OPTIONS_SET+=   GSSAPI_MIT
> 

This last detail could be the cause of the failures.

Depending on the options with which you compiled the asterisk port it is
possible for it to not play well with this one.

Could you send me in a private email the output of "make showconfig"
from the asterisk port?

To use ports provided SSL and GSS/Kerberos with asterisk special care
should be taken, some indications are present in UPDATING entries
20150506 and 20150323.

-- 
Guido Falsi 
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"

Re: ABI changes within stable branch

2017-09-19 Thread Patrick M. Hausen
Hi all,

> Am 19.09.2017 um 10:32 schrieb Aristedes Maniatis :
> Then we have a problem since 
> https://pkg.freebsd.org/freebsd:11:x86:64/latest/All/ has been built on 11.1, 
> not on 11.0 (I just tested it with csync2 which I know fails). Packages there 
> may fail to run on 11.0, but there is no clear indication, just random 
> failures at runtime.
> 
> Maybe we'd need specific 11.0, 11.1, 11.2 releases instead of quarterly 
> releases?

This is precisely what we do on our own poudriere - build the quarterly ports 
branches
on various FreeBSD release versions.

Patrick


signature.asc
Description: Message signed with OpenPGP


Re: ABI changes within stable branch

2017-09-19 Thread Matthew Seaman
On 19/09/2017 09:32, Aristedes Maniatis wrote:
> On 19/9/17 6:15PM, Kurt Jaeger wrote:
>> Hi!
>>
>>> Now that we are on a faster upgrade policy for minor branches, it is 
>>> expected that we'll upgrade from 11.0 to 11.1 to 11.2 much faster than in 
>>> the old days. I can cope with that, but it appears that functional changes 
>>> are also being made within the stable branch as seen here:
>>>
>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221672
>>>
>>> A new fdatasync()  method is available in 11.1 but not in 11.0 which means 
>>> that I now need to maintain separate ports trees for each minor update. 
>>> I've never done this before, assuming (correctly for me until now) that all 
>>> ports build on the latest minor release within the stable branch would work 
>>> on older releases until I was ready to upgrade them.
>>
>> I think it was the other way around: All ports build on the .0 of
>> a RELEASE work on all later .x of that RELEASE. Which makes it a bit
>> difficult, if a .0 is no longer supported/patched by the secteam.
>>
>> A pointer to the official policy would be nice 8-}
> 
> Then we have a problem since 
> https://pkg.freebsd.org/freebsd:11:x86:64/latest/All/ has been built on 11.1, 
> not on 11.0 (I just tested it with csync2 which I know fails). Packages there 
> may fail to run on 11.0, but there is no clear indication, just random 
> failures at runtime.
> 
> Maybe we'd need specific 11.0, 11.1, 11.2 releases instead of quarterly 
> releases?

Ports are still being built according to the same policy -- on the
earliest still-supported release of each major branch.

It's just that now, for 11.x and subsequent, 11.0 goes out of support a
month or so after 11.1-RELEASE comes out.  You're meant to have upgraded
by now.  The 11.0 -> 11.1 upgrade is intended to be a pretty routine
thing that you can do about as freely as you can apply a security patch
or other update within the 11.0 series.

Yes, there should be some sort of warning about your system being older
than what the package was built for.  Ideally it would be intelligent
enough to understand about things like the new fdatasync meaning libc
was incompatible.

Once we do finally get base system packages this problem should largely
disappear, as the normal pkg(8) dependency handling should pull in an
updated libc as a dependnecy of anything expecting the new fdatasync().

Cheers,

Matthew



___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ABI changes within stable branch

2017-09-19 Thread Aristedes Maniatis
On 19/9/17 6:15PM, Kurt Jaeger wrote:
> Hi!
> 
>> Now that we are on a faster upgrade policy for minor branches, it is 
>> expected that we'll upgrade from 11.0 to 11.1 to 11.2 much faster than in 
>> the old days. I can cope with that, but it appears that functional changes 
>> are also being made within the stable branch as seen here:
>>
>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221672
>>
>> A new fdatasync()  method is available in 11.1 but not in 11.0 which means 
>> that I now need to maintain separate ports trees for each minor update. I've 
>> never done this before, assuming (correctly for me until now) that all ports 
>> build on the latest minor release within the stable branch would work on 
>> older releases until I was ready to upgrade them.
> 
> I think it was the other way around: All ports build on the .0 of
> a RELEASE work on all later .x of that RELEASE. Which makes it a bit
> difficult, if a .0 is no longer supported/patched by the secteam.
> 
> A pointer to the official policy would be nice 8-}

Then we have a problem since 
https://pkg.freebsd.org/freebsd:11:x86:64/latest/All/ has been built on 11.1, 
not on 11.0 (I just tested it with csync2 which I know fails). Packages there 
may fail to run on 11.0, but there is no clear indication, just random failures 
at runtime.

Maybe we'd need specific 11.0, 11.1, 11.2 releases instead of quarterly 
releases?

Ari



-- 
-->
Aristedes Maniatis
CEO, ish
https://www.ish.com.au
GPG fingerprint CBFB 84B4 738D 4E87 5E5C  5EFA EF6A 7D2E 3E49 102A
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ABI changes within stable branch

2017-09-19 Thread Kurt Jaeger
Hi!

> Now that we are on a faster upgrade policy for minor branches, it is expected 
> that we'll upgrade from 11.0 to 11.1 to 11.2 much faster than in the old 
> days. I can cope with that, but it appears that functional changes are also 
> being made within the stable branch as seen here:
> 
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221672
> 
> A new fdatasync()  method is available in 11.1 but not in 11.0 which means 
> that I now need to maintain separate ports trees for each minor update. I've 
> never done this before, assuming (correctly for me until now) that all ports 
> build on the latest minor release within the stable branch would work on 
> older releases until I was ready to upgrade them.

I think it was the other way around: All ports build on the .0 of
a RELEASE work on all later .x of that RELEASE. Which makes it a bit
difficult, if a .0 is no longer supported/patched by the secteam.

A pointer to the official policy would be nice 8-}

-- 
p...@opsec.eu+49 171 3101372 3 years to go !
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


ABI changes within stable branch

2017-09-19 Thread Aristedes Maniatis
Now that we are on a faster upgrade policy for minor branches, it is expected 
that we'll upgrade from 11.0 to 11.1 to 11.2 much faster than in the old days. 
I can cope with that, but it appears that functional changes are also being 
made within the stable branch as seen here:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221672

A new fdatasync()  method is available in 11.1 but not in 11.0 which means that 
I now need to maintain separate ports trees for each minor update. I've never 
done this before, assuming (correctly for me until now) that all ports build on 
the latest minor release within the stable branch would work on older releases 
until I was ready to upgrade them.

Is this instance a mistake or am I misunderstanding the new policy?

If I need to treat each release within the stable branch as a whole new 
platform for ports, that means a bunch of extra testing and maintenance work 
for me.

Cheers
Ari


-- 
-->
Aristedes Maniatis
CEO, ish
https://www.ish.com.au
GPG fingerprint CBFB 84B4 738D 4E87 5E5C  5EFA EF6A 7D2E 3E49 102A
___
freebsd-stable@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"