OpenBSD Upgrade Guide: 7.0 to 7.1

[FAQ Index] | [6.9 -> 7.0] [7.1 -> 7.2]

Upgrades are only supported from one release to the release immediately following.

Read through and understand this process before attempting it. For critical or physically remote machines, test it on an identical, local system first.

Before using any upgrade method

• Check available disk space in /usr. Verify that the /usr partition has a size of at least 1.1G. With less space the upgrade may fail and you should consider reinstalling the system instead.

• Read configuration and syntax changes and the package upgrade instructions. There were several configuration changes and changes in packages that may require planning before starting the upgrade.

Upgrade Methods

• Unattended Upgrade: The easiest method is an unattended upgrade using sysupgrade(8). The program will download all the install sets, verify their signatures, and reboot to perform the upgrade automatically. Once the unattended upgrade has completed, continue below.

• Interactive Upgrade: If you insist on leaving out some of the install sets, you will want to perform an interactive upgrade. (sysupgrade upgrades with all install sets.)

• Manual Upgrade: The final option is using the manual upgrade process. (This is not recommended as it is the most error-prone method.)

Interactive Upgrade

• Get and verify bsd.rd. Download the ramdisk kernel and the cryptographically-signed checksum file for your architecture.

  bsd.rd

  [alpha] [amd64] [arm64] [armv7] [hppa] [i386] [landisk] [luna88k] [macppc] [octeon] [powerpc64] [sparc64]

  SHA256.sig

  [alpha] [amd64] [arm64] [armv7] [hppa] [i386] [landisk] [luna88k] [macppc] [octeon] [powerpc64] [sparc64]

  Verify bsd.rd and SHA256.sig using signify(1):

  $ signify -C -p /etc/signify/openbsd-71-base.pub -x SHA256.sig bsd.rd
  Signature Verified
  bsd.rd: OK

• Next, boot from the install kernel, bsd.rd, retrieved in the previous step. Place it in the root of your filesystem and instruct the boot loader to boot this kernel. Once this kernel is booted, choose the (U)pgrade option and follow the prompts.

• After the filesets have been installed, the system will reboot with the upgraded kernel. Now continue with the next step:

After the Upgrade

After upgrading the sets, the system will reboot with the upgraded kernel and run sysmerge(8) during boot. In some cases, configuration files cannot be modified automatically. Run

 # sysmerge

Next remove the old files. Finish up by upgrading the packages using pkg_add -u.

You may wish to check the errata page for any post-release fixes.

Manual Upgrade (without the install kernel)

Sometimes, you need to perform an upgrade of a machine for which the normal unattended or interactive upgrade process is not possible.

Preparation

• Place install files in a good location. Make sure you have sufficient space! Running out of space on a remote upgrade could be...unfortunate. Note that using softdeps can exacerbate the situation as deleted and overwritten files do not release their space immediately. Consider disabling the softdep mount option in /etc/fstab and rebooting before undertaking a manual upgrade. Having at least 500MB free on /usr would be recommended.

• Become root. While using doas(1) before each command is generally a good practice, the command will likely be broken by the last steps, so you should become root before starting this process. It might be good to verify your access to root using a method other than doas at this point, i.e., direct login or using su(1).

• Stop and/or disable any appropriate applications. During this process, all the userland applications will be replaced but may not be runnable, and strange things may happen as a result. You may also have issues with DNS resolution during the first reboot, so PF rules and NFS mounts dependent upon DNS may cause boot-up problems. There may be other applications which you wish to keep from running immediately after the upgrade; stop and disable them as well.

• Install new boot blocks. This should actually be done at the end of any upgrade. If this has been neglected, then failure to do this now may break serial console or other things, depending on your platform. Use installboot(8), assuming sd0 is your boot disk:

  # installboot sd0

Upgrading manually

• Install new kernels. The extra steps for copying over the primary kernel are done to ensure that there is always a valid kernel on the disk.

  If using the multiprocessor kernel:

  # cd /usr/rel    # where you put the release files
  # ln -f /bsd /obsd && cp bsd.mp /nbsd && mv /nbsd /bsd
  # cp bsd.rd /
  # cp bsd /bsd.sp

  If using the single processor kernel:

  # cd /usr/rel    # where you put the release files
  # ln -f /bsd /obsd && cp bsd /nbsd && mv /nbsd /bsd
  # cp bsd.rd bsd.mp /    # may give a harmless warning

• Enable KARL. Store the kernel's checksum:

  # sha256 -h /var/db/kernel.SHA256 /bsd 

• Install new userland. Save a copy of reboot(8), extract and install the release tarballs, reboot. Install base71.tgz last, because the new base system, in particular tar(1), gzip(1) and reboot(8), will not work with the old kernel. Either untar the needed filesets manually:

  # cp /sbin/reboot /sbin/oreboot
  # tar -C / -xzphf xshare71.tgz
  # tar -C / -xzphf xserv71.tgz
  # tar -C / -xzphf xfont71.tgz
  # tar -C / -xzphf xbase71.tgz
  # tar -C / -xzphf man71.tgz
  # tar -C / -xzphf game71.tgz
  # tar -C / -xzphf comp71.tgz
  # tar -C / -xzphf base71.tgz    # Install last!
  # /sbin/oreboot

  or, if you use ksh(1), you can do:

  # cp /sbin/reboot /sbin/oreboot
  # for _f in [!b]*71.tgz base71.tgz; do tar -C / -xzphf "$_f" || break; done
  # /sbin/oreboot

  Note that tar(1) can expand only one archive per invocation, so a simple glob won't work.

• After reboot, update /dev. Run MAKEDEV(8):

  # cd /dev
  # ./MAKEDEV all

• Update the boot loader. Still assuming sd0 is your boot disk:

  # installboot sd0

• Update system configuration files. Run sysmerge(8):

  # sysmerge

• Update firmware. There may be new firmware for your system. Update it with fw_update(1):

  # fw_update

• Finish up. Review the console output from boot (using dmesg -s) and correct any failures as necessary. All the steps following configuration changes below also apply to manual upgrades. Finally, remove /sbin/oreboot and update packages: pkg_add -u. Reboot once more to make sure you use the newest firmware files and run on your own kernel generated by KARL.

Configuration and syntax changes

• sndio(7). The descriptor format has changed.

  If you explicitly pass audio device descriptors to programs (through program options or through the AUDIODEVICE environment variable), then the descriptors might need to be updated as follows. Otherwise, skip this section.

  Audio devices exposed by sndiod(8) are not bound to physical audio devices anymore, so the physical audio device number component of sndio(7) descriptors was removed. For instance, if the server is started with:

  # sndiod -f rsnd/0 -s foo -f rsnd/1 -s bar

  then programs will need to use "snd/foo" and "snd/bar" (instead of "snd/0.foo" and "snd/1.bar").

  By default programs will try to use "snd/default" (instead of "snd/0"). Unless -s default option is used, "snd/default" is automatically created and attached to the first physical audio device specified on the command line (i.e. first -f or -F option). If needed, this setting may be changed at run-time with the server.device control exposed by sndioctl(1).

  For each physical device managed by the server (i.e. each -f or -F option) the server also exposes a "snd/<number>" descriptor bound to the physical device of the same number. Consequently, "snd/0", "snd/1", ... still can be used to refer to specific physical devices.

• xterm(1). Mouse support has been disabled by default. It can be re-enabled by adding the following to .Xresources:

  xterm*allowMouseOps: true

• login.conf(5). When looking for settings for a login class, /etc/login.conf.d/$class is now checked and, if available, used in preference to /etc/login.conf. If you have changed settings for software in packages, you may find that it is now overridden by a file in /etc/login.conf.d and will need to make your changes there instead.

Files to remove

• No files need to be cleaned up for this release.

Special packages

• lang/python. The default Python 3.x flavor has changed to Python 3.9.

  Python 3.8 and 3.10 packages now include pip since the py3-pip package only supports Python 3.9.

  Python 3.8 is planned to be removed prior to the 7.2 release.

• games/multimc. The new blockgame package (games/blockgame) is what folks wanting to play minecraft will want to use as it includes Microsoft Account support. New requirements around using the multimc name made a new port necessary.

[FAQ Index] | [6.9 -> 7.0] [7.1 -> 7.2]