LibreSSL not just available but default

Remember I posted that LibreSSL is in base DragonFly, but not default?  Well, it’s default now.  You can have a system without OpenSSL at all, by rebuilding DragonFly-current and using up-to-date dports.

Update: see John’s comments for clarification: LibreSSL is default; the change is that OpenSSL isn’t even built any more.  The result is still the same good news: you can have an OpenSSL-free DragonFly system now.

In Other BSDs for 2016/08/27

I don’t know how I ended up with 3 pfSense items to lead with – it just happened.

 

OpenSSH, OpenSSL updates

Because this always happens just after I create a DragonFly release, there’s a new version of OpenSSL.  However, this is for version 1.0.2.  1.0.1 is what’s in the release, and it’s supported through the end of the year.

OpenSSH has a major version bump in DragonFly, to 7.3p1.  This means some features – specifically patches for High Performance Networking – are no longer there, and you’ll get an error if your config file requires them.  Either remove the options from your config, or install OpenSSH from dports.

Default shells and library changes

I see this bite people irregularly over the years: if your default shell on login can’t run, what do you do?  I’ve seen it happen because of a missing /usr/lib, and it can happen with out-of-date library references, too.   There’s several different ways to deal with it:

That last one may be useful if your dports setup gets mangled, somehow – though ‘pkg upgrade’ has always worked for me.

Privatization means rebuilds

That’s a pretty cryptic headline, isn’t it?  John Marino has ‘privatized’ several libraries in DragonFly, so that they can’t get included involuntarily as part of a port build.  That may mean you will need to perform a full rebuild of your system if you are tracking DragonFly-current.

(This is the way to fix ‘system’ languages like Perl was in FreeBSD 4.x – keep them clearly separate from the port version.  It’s about a decade too late for that idea to work out, though.)

Binary dports for DragonFly 4.5 users

Since DragonFly 4.4 has been branched, bleeding-edge DragonFly is now at version 4.5.  As John Marino detailed in his post, that means pkg on 4.5 systems will look in a new place for downloads.  (“dragonfly:4.6:x86:64”, since it always uses even numbers)   To cover for this, set ABI to point at DragonFly 4.4 packages in pkg.conf for now.  They’re freshly built and functionally the same, anyway.  Once there’s a 4.6 download path, that ABI setting can be removed.  Packages for DragonFly-current are available now and probably at the mirrors by the time this posts.

Update: as John Marino pointed out to me, anyone on DragonFly-master who upgrades now will be at version 4.5.  This means pkg will get the new (4.5) packages on the next pkg upgrade.  That means a mix of old and new packages unless you either reinstall anything (pkg update -f) or hardcode the 4.4 download path until you are ready to switch everything.

So: DragonFly-current users should either hardcode the 4.4 path for now or force an pkg upgrade for everything.  DragonFly 4.2-release users are unaffected.

 

DragonFly 4.0 users should upgrade

If you happen to still be running DragonFly 4.0 – that’s two releases ago and not supported – you may be noticing less ports are building.  There’s been enough significant changes in DragonFly since that release that it’s reducing the number of buildable ports.

DragonFly 4.0 to 4.2 is not a difficult jump, so jump when you can.  The converse of this, of course, is that there’s even more building on 4.2 and DragonFly-current.