Changes in 2.7.4 (2026-06-22)
* The speed of expireover has been greatly improved by the
implementation of a Bloom filter (a probabilistic data structure used
to efficiently test whether an element is a member of a set, without
any false negative). Instead of checking every article in the
overview database against the history file to detect orphaned entries,
expireover now sequentially reads the history file at startup to build
a Bloom filter, and makes its checks in that optimized data structure.
On large news spools of billions of articles, expireover could take
several weeks to complete; it now runs in a few minutes! This feature
is activated by default and controlled by the new expirebloomfp
parameter in inn.conf. Many thanks to Kevin Bowling for this
improvement.
* The speed of expire has also been drastically improved for large news
spools thanks to the recording of every cancellation alongside the
existing storage and overview deletions, so that expire can just drop
matching history entries without doing per-article retrieval system
calls, thus saving a good amount of time at billion-article scale.
This feature contributed by Kevin Bowling is not enabled by default.
See the documentation of expiretombstone in inn.conf for more
details, as well as nnrpdcheckart which also makes use of the cancel
tombstone log file.
* Added four new parameters to ovsqlite.conf for the ovsqlite overview
method: mmapsize to have SQLite read data via mmap instead of
copying into its own page cache, readercachesize to set the SQLite
in-memory page cache size for each nnrpd reader process, walmode to
enable SQLite's Write-Ahead Logging journal mode and improve read
performance when multiple nnrpd processes access the overview
database simultaneously, and walcheckpointthreshold to parameterize
when to perform checkpoints. See the ovsqlite(5) manual page for
more details. Thanks to Kevin Bowling for all these enhancements!
* When laxmid is set in the syntaxchecks parameter in inn.conf,
Message-IDs without any "@" character are now accepted by innd.
* Fixed very infrequent errors of memory mapping when updating the
active file or using the tradindexed overview method, as well as when
updating the history file with nfswriter set to true. Thanks to
Chris Knipe for the bug report and to Richard Kettlewell for the
patch.
* Fixed the rotation of the perl-nocem.log file generated when syslog
is not available or the -l flag used with perl-nocem: the contents of
this log file was mistakenly appended to news.notice by scanlogs.
* Fixed makehistory so that malformed input does not insert a bogus
overview entry. Thanks to Kevin Bowling for the patch.
* Following upstream rename from blacklist to blocklist, the
--with-blacklist configure flag is renamed --with-blocklist for
blocklistd support in FreeBSD 15 and NetBSD 10. For backward
compatibility, both blacklist and blocklist libraries will be
searched by the new --with-blocklist flag. Thanks to Jose Luis
Duran for the information.
* Added support for the ALPN TLS extension in nnrpd. Thanks to Roman
Donchenko for this feature.
* In consequence of the changes in the libinn(3) and libinnstorage(3)
interfaces for the Bloom filter and overview improvements, both of
these libraries have their SONAME bump in this release.
* Various other minor bug fixes and documentation improvements.
nnrpd supports priv drop internal, but it also supports innbind
escalation. Since the docs show 'su news', prefer the innbind path when
we need a privileged port number.
While inn typically registers port 119 and handles spawning nnrpd for
reader connections, it is customary to run TLS-only nnrpd on port 563:
https://www.eyrie.org/~eagle/software/inn/docs/nnrpd.html#S4
Provide an nnrpd rc.d script for this purpose. This requires innd for
start but is otherwise decoupled. The admin should be aware that i.e.
stopping innd will disrupt posting.
Use Jose's find/sed approach to handle the blocklist rename
across FreeBSD versions. My attepmt was not broad enough.
INN 2.8 source uses "blocklist" so on
FreeBSD < 15.0 we sed it back to "blacklist". INN 2.7 source uses
"blacklist" so on FreeBSD >= 15.0 we sed it to "blocklist".
Co-Authored-By: Jose Luis Duran <jlduran@FreeBSD.org>
Update inn-current snapshot from 20260121 to 20260419. Rename the
BLACKLISTD option to BLOCKLISTD to match the upstream and FreeBSD 15+
rename. Add version-conditional logic to fall back to the old blacklist
API names on FreeBSD < 15.0 for the 2.8 branch.
Co-Authored-By: Jose Luis Duran <jlduran@FreeBSD.org>
Update to modern ports practices while retaining same functionality.
- Option helpers
- GNU_CONFIGURE with overrides for existing filesystem layout
- USES gssapi for krb5, clean up ac_cv_ hacks
- Fix setuid for SETGID_INEWS and UUCP_RNEWS
- Add newer config files as @sample: inn-radius.conf, inn-secrets.conf
- Install all filter scripts as @sample
- Remove ex script and install empty history as @sample
- Use find to run bin/.so strip list instead of manual list
- Clean up inn-current slave port
- portclippy
Mk/Uses/alias.mk was an attempt for compat with DPorts, but has rotted.
This feature was never documented in the PHB, so there is no work to
be done by the docs@ team.
Nothing against DragonFly, but if DPorts still needs FreeBSD 9
support, they really should work that out with upstream projects.
Ultimately, we don't need to keep carrying this outdated feature that
doesn't affect us.
Recent versions of gettext no longer install m4 files in
PREFIX/share/aclocal. They have to be installed in the work
directory by autopoint for aclocal to find them.
Patch devel/autoconf so autoreconf runs autopoint when gettext related
macros are used in configure.ac (e.g. AM_ICONV). Previously it only
ran autopoint when AM_GNU_GETTEXT_(REQUIRE_)VERSION was used.
The following ports now require autopoint (i.e. USES=gettext-tools):
benchmarks/sysbench, devel/libhtp, editors/fxite, filesystems/rar2fs,
graphics/gd, net/ucarp, news/fidogate, sysutils/cdrdao
Other fixes:
emulators/mednafen, misc/lifelines: Use older version of gettext macros.
ftp/axel: Patch Makefile.am and configure.ac to get gettext working and
add NLS option.
ftp/wzdftpd: Use autoreconf 2.72.
mail/sympa: Remove hack from configure.ac.
multimedia/dvdauthor: Use ports autoreconf.
net/asterisk-chan_sccp: Drop autoreconf and gettext-tools dependencies.
security/pam_pkcs11: Patch configure.ac so autoreconf can find the
custom directory with m4 files.
sysutils/grub2-efi, sysutils/grub2-pcbsd: Add patch to run autoreconf
with -f flag so it updates all files.
www/wget2: Patch configure.ac to what autopoint expects.
PR: 287167
Exp-run by: antoine
Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml (now at version 6.0.1)
To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.
Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.
PR: 289491
Approved by: Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
crees, madpilot, delphij, marcus, nivit, kai,
skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
0mp, Eric Camachat <eric@camachat.org>
Kevin Bowling
Rafe Sadler
Kousuke Kannagi
Florian Smeets
Vladimir Druzenko
Alexandre Levy
Ronald Klop
Jason E. Hale
Tijl Coosemans
Ben Wilber
Nicholas Kirby
Dima Panov
Sergey Anokhin
Hiroki Tagato
Po-Chuan Hsieh
Eric Turgeon