The kea package has moved all services to run as a dedicated kea user (instead of root) for improved security. This change requires permission updates to the runtime files created by the kea services.
Users upgrading from an existing kea installation should therefore run the following commands after the upgrade:
chown kea: /var/lib/kea/* /var/log/kea/* /run/lock/kea/logger_lockfile
systemctl try-restart kea-ctrl-agent.service kea-dhcp{4,6,-ddns}.service
Accounts that need to interact with kea services files (e.g. lease files under /var/lib/kea, log files under /var/log/kea or configuration files under /etc/kea) should be added to the kea group.
The old iptables-nft package name is replaced by iptables, and the
legacy backend is available as iptables-legacy.
When switching packages (among iptables-nft, iptables, iptables-legacy),
check for .pacsave files in /etc/iptables/ and restore your rules if needed:
- /etc/iptables/iptables.rules.pacsave
- /etc/iptables/ip6tables.rules.pacsave
Most setups should work unchanged, but users relying on uncommon xtables
extensions or legacy-only behavior should test carefully and use
iptables-legacy if required.
If you get:
warning: libarchive-3.8.1-1.1 is up to date -- reinstalling
warning: openssh-9.8p1-1.1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...
:: zlib-ng-compat-2.3.2-1.0 and zlib-1:1.3.1-2.0 are in conflict. Remove zlib? [y/N]
Do an update with the conflicting packages first:
pacman -Syu zlib-ng-compat libarchive openssh
Then update normally
This might be necessary to be done for more than the packages above, depending on how much you installed, e.g.
pacman -Syu zlib-ng-compat libarchive openssh ffmpeg ffmpeg4.4
With the update to driver version 590, the NVIDIA driver no longer supports Pascal (GTX 10xx) GPUs or older. We will replace the nvidia package with nvidia-open, nvidia-dkms with nvidia-open-dkms, and nvidia-lts with nvidia-lts-open.
Impact: Updating the NVIDIA packages on systems with Pascal, Maxwell, or older cards will fail to load the driver, which may result in a broken graphical environment.
Intervention required for Pascal/older users: Users with GTX 10xx series and older cards must switch to the legacy proprietary branch to maintain support:
- Uninstall the official
nvidia, nvidia-lts, or nvidia-dkms packages.
- Install
nvidia-580xx-dkms from the AUR
Users with Turing (20xx and GTX 1650 series) and newer GPUs will automatically transition to the open kernel modules on upgrade and require no manual intervention.
