A first-time upgrade of an amd64 NetBSD machine from 11.0 to 11.1 is presented as a straightforward in-place process, with one issue requiring manual repair. The account contrasts NetBSD’s two upgrade options: booting installation media and using sysinst, or running sysupgrade within the existing system. Based on the author’s research, sysinst is generally preferable for major version jumps, while sysupgrade is a convenient choice for smaller releases. The upgrade uses sysupgrade’s automatic mode, pointed at the NetBSD 11.1 directory for the machine’s architecture. It downloads and unpacks the kernel and system sets, then asks the administrator to review configuration changes. Only a handful of files, including passwd and sshd_config, needed attention; the displayed old-versus-new differences made merging manageable.
The main hiccup was a failed post-installation check for OpenSSL certificate rehashing. The fix was to remove the old certificate cache under /etc/openssl/certs, run certctl to rebuild the certificates, and confirm that the directory was populated. The author then reran the targeted post-installation repair, verified that the check passed, cleaned up upgrade files, and rebooted into NetBSD 11.1. One additional step is needed for package management: update pkgin’s repository configuration to use the 11.1 repositories. Overall, the experience offers a practical sequence of commands and a specific remedy for a certificate-cache problem that may arise during this upgrade path.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.