releases/15.0R/relnotes: document how to fetch new signing keys for BETA/RC users

Reviewed by:	cperciva, zaiee
Approved by:	zaiee
Sponsored by:	SkunkWerks, GmbH
This commit is contained in:
Dave Cottlehuber 2025-12-01 22:37:50 +00:00
parent bbac46ce80
commit c2b197a211
1 changed files with 34 additions and 0 deletions

View File

@ -65,6 +65,40 @@ Source-based upgrades (those based on recompiling the FreeBSD base system from s
Upgrading FreeBSD should only be attempted after backing up _all_ data and configuration files.
====
[[upgrade-rc]]
== Upgrading from Existing Pre-Release Base System Package Installs
[IMPORTANT]
====
For users of PRERELEASE, ALPHA, and BETA builds of FreeBSD 15.0, due to late-breaking changes in FreeBSD.org infrastructure, it is not possible to upgrade directly using the man:pkg-upgrade[8] utility.
====
Users should either manually copy the required files from a source tree checkout of `15.0-RELEASE` tag, or a later commit in `STABLE` or `CURRENT` branches, or alternatively, force-install the `FreeBSD-pkg-bootstrap` package from the official release base system packages.
The recommended, and most secure approach, is using the source tree checkout of any of head, stable/15, or releng/15.0 branches after 2025-11-27 22:00 UTC.
....
# cp /usr/src/usr.sbin/pkg/FreeBSD.conf.quarterly-release \
/etc/pkg/FreeBSD.conf
# cp -R /usr/src/share/keys/pkgbase-15 /usr/share/keys/pkgbase-15
....
Users who do not have up to date sources installed may use a less secure, but simpler approach, validating the checksums after installation. As these are architecture-independent files, the checksums will match on all platforms.
....
# pkg add -f https://pkg.freebsd.org/FreeBSD:15:(uname -p)/base_release_0/FreeBSD-pkg-bootstrap-15.0.pkg
# sha256 -r /etc/pkg/FreeBSD.conf /usr/share/keys/pkg/trusted/pkg.freebsd.org.2013102301 \
/usr/share/keys/pkgbase-15/trusted/awskms-15 /usr/share/keys/pkgbase-15/trusted/backup-signing-15
ab261a3b84ffc11654ac0bafbb7d6b3f1b6afc30bfabab3bcff64259678eac26 /etc/pkg/FreeBSD.conf
036ae4f9c441a3febb41734bbb37227ec3374edd3c6c687e5cb70d580efbea30 /usr/share/keys/pkg/trusted/pkg.freebsd.org.2013102301
529c79e85a6ca152faa9d57ead85fe0111ffada8d0a0fa2f11fc510999fa50df /usr/share/keys/pkgbase-15/trusted/awskms-15
c368ec8d05654bdaad34742c1d75b9b150bfc3892838cef32f6e5b036b0c0605 /usr/share/keys/pkgbase-15/trusted/backup-signing-15
....
[IMPORTANT]
====
Upgrading FreeBSD should only be attempted after backing up _all_ data and configuration files.
====
[[security-errata]]
== Included Security Fixes and Errata Patches