FreeBSD 10 发布

发行注记：http://www.freebsd.org/releases/10.0R/relnotes.html

下文翻译中。。。

主要有安全问题修复、新的驱动与硬件支持、新的命名/选项、主要bug修复、软件升级。

The use of unmapped VMIO buffers eliminates the need to perform TLB shootdown for mapping on buffer creation and reuse, greatly reducing the amount of ipIs for shootdown on big-SMP machines and eliminating up to 25-30% of the system time on i/o intensive workloads.[r248508]

[amd64] 内存寻址最大支持从1TB到了4TB.[r254466]

Theddb(4)内核调试器具有了输出捕获的能力。

Theddb(4)调试器支持简单的脚本编程

[amd64,i386] 支持新的Intel on-CPUBull Mountain随机数生成器

[amd64] BSD Hypervisor,bhyve(8)包含进了FreeBSD

virtio(4)加入支持

[amd64,i386] 导入了准虚拟化驱动 - 支持Microsoft Hyper-V，并且是amd64 GENERIC kernel的一部分. i386, 需要手动添加/boot/loader.conf

hv_ata_pci_disengage_load="YES"hv_netsvc_load="YES"hv_utils_load="YES"hv_vmbus_load="YES"

Thevmx(4)驱动引入

[amd64,i386] Xen PVHVM 虚拟化成为 GENERIC kernel的一部分

Raspberry PI support has been added. Refer to thesesetup instructionsand thisquick start guide.[r239922]

The default ABI on ARM is now the ARM EABI. This brings a number of imPRovements and allows future support for VFP and Thumb-2.[r253396]

ARM support has been greatly improved, including support for ARMv6 and ARMv7, SMP and thread-local storage (TLS). Additionally support for some newer SoC like the MV78x60 and OMAP4 was added. See theannouncementfor further details.[r239268]

Superpages support on ARM has been added. Superpages support provides improved performance and scalability by allowing TLB translations to dynamically cover large physical memory regions. All ARMv6 and ARMv7-based platforms can take advantage of this feature. See theARM Superpages statuspage for further details.[r254918]

Support for version 2.0 of the USB Audio reference design has been added. New devices should support higher bandwidth, increased sampling frequency and wider dynamic range.[r240609]

The firmware for themxge(4)driver has been to 1.4.55.[r236212]

There(4)driver has been overhauled to fix a number of issues. This driver now has Wake On LAN (WOL) support.

Thevr(4)driver has been overhauled to fix a number of outstanding issues. It also now works on all architectures.

[amd64,i386] Thewpi(4)driver has been updated to include a number of stability fixes.

Thecxgbe(4)driver has been updated to support 40G/10G Ethernet NICs based on Chelsio's Terminator 5 (T5) ASIC.[r248925]

The iw_cxgbe driver has been added. This is an experimental iWARP/RDMA driver (kernel verbs only) for Chelsio's T4 and T5 based cards.[r256694]

The Open Fabrics Enterprise Distribution (OFED) and OFED Infiniband core has been updated to the same version as supplied by linux version 3.7[r255932]

The Mellanox Infiniband driver has been updated to firmware version 2.30.3200 for ConnectX3 NICs. Support has been added for ConnectX3 VPI NICs, where each port can be used as Infiniband 56 GB/s or Ethernet 40 GB/s. Support has been added for dynamically loading kernel modules for Infiniband core (ibcore) and IP over Infiniband (ipoib).[r255932]

netmap(4)has been added.netmap(4)is a framework for high-performance direct-to-hardware packet IO, offering low latency and high PPS rates to userland applications while bypassing any kernel-side packet processing. Withnetmap(4)it is trivially possible to fully saturate a 10 Gbps network interface with minimal packet sizes. For more information, see:Netmap Project.[r227614]

carp(4)has been rewritten to make addresses more sane from the viewpoint of routing daemons such as quagga/zebra. It also brings support for a single redundant address on the subnet (carpdev), switching state withifconfig(8), better locking and using modern kernel interfaces to allocate multicast memberships. Configuration of the CARP protocol viaifconfig(8)has changed, as well as the format of CARP events submitted todevd(8). Seecarp(4)for more information. The arpbalance feature ofcarp(4)is currently not supported anymore.[r228571]

Thepf(4)firewall now supports fine-grain locking and better utilization on multi-CPU machines, resulting in significant improvements in performance.[r240233]

Support for up to 65536 routing tables has been introduced.[r250700]

Support for setting/matching differentiated services codepoints (DSCP) in IP header has been added toipfw(8).[r248552]

Theaac(4)driver now supports volumes larger than 2TB in size.

Theata(4)driver now supports a spindown command for disks; after a configurable amount of time, if no requests have been received for a disk, the disk will be spun down until the next request. Theatacontrol(8)utility now supports aspindowncommand to configure this feature.

Thehptrr(4)driver has been updated to version 1.2 from Highpoint.

nvme(4)has been added and provides NVM Express support. NVM Express is an optimized register interface, command set and feature set of PCI Express (PCIe)-based Solid-State Drives (SSDs). For more information, seenvmexpress.org.[r240616]

A new kernel-based iSCSI target and initiator has been added.[r255570]

UFS filesystems can now be enlarged withgrowfs(8)while mounted read-write. This is especially useful for virtual machines, allowing the addition of more harddrive space without interruption of service.[r243246]

A state of the art FUSE implementation is now part of the base system. It allows the use of nearly all fusefs file systems.[r241519]

bsdinstall(8)now supports installing ZFS on the root file system. It includes a single configuration menu that allows you to select all of the required details, including which drives to use, what ZFS RAID level to use (taking into consideration the selected number of drives), GPT or MBR, GELI encryption, forcing 4K sectors, pool name, etc.[r256361]

Support for L2ARC compression has been added to ZFS.[r252140]

The zio nop-write improvement from Illumos was imported into FreeBSD. To reduce I/O, nop-write skips overwriting data if the (cryptographically secure) checksum of new data matches the checksum of existing data. It also saves space if snapshots are in use. This improvement only works on datasets with enabled compression, disabled deduplication and sha256 checksums. ZFS will now compare the checksums of incoming writes to the checksum of the existing on-disk data and avoid issuing any write I/O for data that has not changed. This will reduce I/O as well as space usage because if the old block is referenced by a snapshot, both copies of the block are kept even though both contain the same data.[r243524]

On platforms whereclang(1)is the default system compiler (such as i386, amd64, arm), GCC and GNU libstdc++ are no longer built by default.clang(1)and libc++ from LLVM are used on these platforms by instead. GCC 4.2.1 and libstdc++ are still built and used by default on pc98 and all other platforms whereclang(1)is not the default system compiler.[r255321]

clang(1)and llvm have been updated to version 3.3 release. Please refer toClang 3.3 Release Notes.[r251662]

BINDhas been removed from the base system.unbound(8), which is maintained by NLnet Labs, has been imported to support local DNS resolution functionality with DNSSEC. Note that it is not a replacement ofBINDand the latest versions ofBINDis still available in the Ports Collection. With this change, nslookup and dig are no longer a part of the base system. Users should instead usehost(1)anddrill(1)Alternatively, nslookup and dig can be obtained by installingdns/bind-toolsport.[r255949]

sysinstall has been removed from the base system. Auxiliary libraries and tools used by sysinstall such as libdisk, libftpio, and sade have also been removed. sysinstall has been replaced bybsdinstall(8)andbsdconfig(8).[r225937]

freebsd-version(1)has been added. This tool makes a best effort to determine the version and patch level of the installed kernel and userland.[r256106]

GNU patch has been removed from the base system, and replaced by a BSD-licensedpatch(1)program.[r255191]

GNU sort has been removed from the base system, and replaced by a BSD-licensedsort(1)program.[r241511]

Berkeley yacc (byacc) has been imported frominvisible island. This brings bison compatibilities toyacc(1)while preserving full backwards compatibility with previous version ofyacc(1).[r235723]

lex(1)has been replaced by flex 2.5.37.[r250881]

make(1)has been replaced with the“Portable”BSD make tool (bmake) from NetBSD.[r250699]

Support for usernames up to 32 characters.[r243023]

Theadduser(8)utility now supports a-Moption to set the mode of a new user's home directory.

BSD-licensed versions ofar(1)andranlib(1), based onlibarchive(3), have replaced the GNU Binutils versions of these utilities.

BSD-licensed versions ofbc(1)anddc(1)have replaced their GNU counterparts.

chflags(1)now supports a-vflag for verbose output and a-fflag to ignore errors with the same semantics as (for example)chmod(1).

For compatibility with other implementations,cp(1)now supports a-aflag, which is equivalent to specifying the-RrPflags.

BSD-licensed version ofcpio(1)based onlibarchive(3), has replaced the GNU cpio. Note that the GNU cpio is still installed asgcpio.

Theenv(1)program now supports-unamewhich will completely unset the given variablenameby removing it from the environment, instead of just setting it to a null value.

Thefdopendir(3)library function has been added.

Thefetch(3)library now supports HTTP 1.1 If-Modified-Since behavior. Thefetch(1)program now supports-ifilenamewhich will only download the specified HTTP URL if the content is newer thanfilename.

find(1)has been enhanced by the addition of a number of primaries that were present in GNU find but not FreeBSDfind(1).

kgdb(1)now supports a newadd-kldcommand to make it easier to debug crash dumps with kernel modules.

Thels(1)program now supports a-Doption to specify a date format string to be used with the long format (-l) output.

nc(1)now supports a-Oswitch to disable the use of TCP options.

nc(1)'s-oswitch has been deprecated. It will be removed in a future release.

Theping6(8)utility now returns2when the packet transmission was successful but no responses were received (this is the same behavior asping(8)). It returned a non-zero value before this change.

Therealpath(1)utility now supports a-qflag to suppress warnings; it now also accepts multiple paths on its command line.

sh(1)has many bug fixes, some new features, and will now refuse to parse some invalid scripts. Additionally, it now has filename completion and defaults to the“emacs”editing mode.

Thesplit(1)utility now supports a-nflag to split a file into a certain number of chunks.

Thetar(1)utility now supports a-Zflag to enablecompress(1)-style compression/decompression.

Thetar(1)utility now supports a--numeric-ownerflag to ignore user/group names on create and extract.

Thetar(1)utility now supports the-Sflag to sparsify files on extraction.

Thetar(1)utility now supports a-sflag to substitute filenames based on the specified regular expression.

Thetcgetsid(3)library function has been added to return the process group ID for the session leader for the controlling terminal. It is defined in IEEE Std 1003.1-2001 (POSIX).

top(1)now supports a-Pflag to provide per-CPU usage statistics.

zdump(8)is now working properly on 64-bit architectures.

traceroute(8)now has the ability to print the AS number for each hop with the new-aswitch; a new-Aoption allows selecting a particular WHOIS server.

traceroute6(8)now supports a-Uflag to send probe packets with no upper-layer protocol, rather than the usual UDP probe packets.

rc.d/sendmailnow generates and uses an SSL certificate by default whensendmail_enable="YES". This will allow remote MTA to use STARTTLS to encrypt incoming email. The certification is signed with a key that is thrown away and is not a substitute for generating your own properly if you need to use STARTTLS authentication. Options to control the certificate generation is documented inrc.d/sendmail.[r256773]

The followoingrc(8)scripts have been added:

The followingrc(8)scripts have been removed:

jemalloc(3)has been updated to 3.4.0. Seethis linkfor more details.[r251300]

AMDhas been updated from 6.0.10 to 6.1.5.

awkhas been to the 20121220 release.

CVShas been removed from the base system, but is still available from Ports Collection.[r251794]

Subversion has been imported into the base system and is installed assvnlite.svnliteshould only be used for checking out the FreeBSD source trees and committing, and does not replace the full Subversion port.[r251886]

filehas been updated to 5.11.[r234449]

hostapdhas been updated from 0.5.8 to 0.5.10.[r252726]

IPFilterhas been updated to 5.1.2.

lesshas been updated to v458.[r250592]

ncurseshas been updated to 5.7-20081102.

OpenSSHhas been updated to 6.4.

OpenPAMhas been updated to the Micrampelis release.[r236109]

sendmailhas been updated from 8.14.1 to 8.14.7.

The timezone database has been updated from thetzdata2008hrelease to thetzdata2009mrelease.

The stdtime part of libc,zdump(8)andzic(8)have been updated from thetzcode2004arelease to thetzcode2009hrelease. If you have upgraded from source or via thefreebsd-update(8), then please runtzsetup(8)to install a new/etc/localtime.

WPA Supplicanthas been updated to 2.0.[r252726]

xzhas been updated from snapshot as of 12 April 2010 to 5.0.0.

nvi(1)has been updated to 2.1.2.[r258231]

nvi(1)supports wide-character locales.[r254225]

The pkg_add, pkg_create, pkg_delete, pkg_info, pkg_updating, and pkg_version utilities have been removed.pkg(7)must now be used to install binary packages.pkg(7)is the next generation FreeBSD package manager, also referred to as“pkgng”.[r257444]

The supported version of theGNOMEdesktop environment (x11/gnome2) has been updated from 2.20.1 to 2.22.

[amd64,i386] Beginning with FreeBSD 6.2-RELEASE, binary upgrades between RELEASE versions (and snapshots of the various security branches) are supported using thefreebsd-update(8)utility. The binary upgrade procedure will update unmodified userland utilities, as well as unmodified GENERIC or SMP kernels distributed as a part of an official FreeBSD release. Thefreebsd-update(8)utility requires that the host being upgraded have Internet connectivity.

Source-based upgrades (those based on recompiling the FreeBSD base system from source code) from previous versions are supported, according to the instructions in/usr/src/UPDATING.

Upgrading FreeBSD should, of course, only be attempted after backing upalldata and configuration files.