pkgng allows signed binary packages on FreeBSD and poudriere makes
maintaining a repo stupidly simple if that helps.
https://glenbarber.us/2012/06/11/Maintaining-Your-Own-pkgng-Repository.html


Vince

On 15/10/2013 11:08, Jim Thompson wrote:
> Once upon a time I was the CTO of Wayport. 
>
> We put a few ten thousand Debian machines in the world, all remote, acting as 
> access controllers.  
>
> Some of the other people involved now also work at Netgate. 
>
> Let's just say:
> 1) We are more than familiar 
>
> 2) there are severe security issues with the Debian model 
>
> 3) never again. :-)
>
> There are ... somewhat similar ideas under internal consideration, 
> potentially using either/both Linux and FreeBSD as a base, but the time is 
> not yet come to more fully expose same. 
>
> -- Jim
>
>> On Oct 14, 2013, at 12:34, Adrian Zaugg <[email protected]> wrote:
>>
>>
>>
>>> On 10/13/13 7:03 PM, Jim Thompson wrote:
>>> One possible solution:  signed packages, and there was a bit of 
>>> infrastructure put in-place just prior to the 2.1 release.
>>> We’ve yet to accomplish the rest of this, but.. it’s coming.
>>>
>>> As always, if you have ideas(*), bring them forward.
>> I already hear everybody shouting, when bringing in the following idea:
>> Base pfsense on Debian GNU/kFreeBSD. Debian has some great features,
>> like it's packaging system and it's build infrastructure. I could
>> imaginge to have a virtual package pfsense, which depends on all
>> official Debian kFreeBSD packages that pfsense needs to run plus the
>> ones which are unique to pfsense provided by a pfsense repository (or on
>> a long term get even incorporated into Debian). Debian has package
>> signing and does a lot to have a working, secure system. I could imagine
>> many tasks that pfsense developers do, would be done by Debian, also
>> pfsense could profit from Debian's infrastructure. You could concentrate
>> on pfsense and could get the distribution type of work done.
>>
>> If you like to flame me for this, my private mail box is open ...:-)
>>
>> Regards, Adrian.
>>
>>
>> _______________________________________________
>> List mailing list
>> [email protected]
>> http://lists.pfsense.org/mailman/listinfo/list
> _______________________________________________
> List mailing list
> [email protected]
> http://lists.pfsense.org/mailman/listinfo/list
>

_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to