I paste e-mail from Garrett, which constitutes a flag day for everyone building illumos nightly. Please, read it carefully, as it explains itself nicely:
With my integration of "6 Need open kcfd", there is actually no more
kcfd or signed crypto tarballs. (The necessary code for thread
management is in the kernel kcf. You'll notice new kernel LWPs called
"kcfpoold" in ps -eLf output.) Also, all vestiges of FIPS-140 support
This represents a flag day for everyone building illumos.
You must do a full nightly across thsi flag day -- incrementals *will*
You must not have a crypto tarball. (One less thing to download from
You *MUST* use the version of nightly in the latest source. It is a
syntax error to try to use the old nightly -- it won't work unless you
have the old crypto tarball, and if you do, the result will not be
* remove crypto tarball if present.
* use nightly from source tree
* do a full clobber build.
How to build illumos guide has been updated to follow this change. Enjoy!