Re: packages and base jails
Eugene Grosbein wrote on 2018/11/27 00:42:
27.11.2018 3:24, Michael W. Lucas wrote:
Hi,
I'm writing a book on jails and am looking for BCP. I'd like to
present either "This is the approved solution and should work" or
"these are the gotchas with any of these, choose your pain."
Folks want base jails to include packages, but also want to install
additional packages--which won't happen if /usr/local is mounted
read-only in the base jail. Trawling around the Net I see a couple
options. Both involve the primary jail using a different package
repo. The overlay jail uses the standard package repo.
1) primary jail uses a repo with PREFIX=/usr/pkg or /opt. Works in my
simple use cases once I set ldconfig directories in rc.conf, but I'm
told programs like pkgconfig can go sideways.
2) base jail repo uses with PREFIX=/. Utterly violates separation of
base and pkg, but everything should find everything out of the
box. Again, seems to work in my wimpy use cases.
Is there an option that should work? Or is a matter of choosing
between horrors?
Not sure I understand the problem which I don't have using sysutils/ezjail
that uses base jail situated in /usr/local/j/basejail in my case.
For each distinct jail instance, it null-mounts it read-only
to /usr/local/j/${JAILNAME}/basejail and /usr/local/j/${JAILNAME} it jail's
root.
Inside this root, /bin is symlink to /basejail/bin, and /boot, /libexec, /rescue
and /sbin are similar symlinks, so are
/usr/{bin|include|lib|lib32|libdata|libexec|ports|sbin|share}
all symlinks to corresponding directories inside ro-mounted /basejail/usr/...
But not /usr/local nor /usr/{src|obj}, if that matters. So each jail have its
own
set of packages or even ports if I choose to null-mount host's /usr/ports
readonly
to /usr/local/j/${JAILNAME}/basejail/usr/ports and write to jail's
/etc/make.conf:
I guess Michael wants to have some packages installed in shared basejail
(packages common to all jails) and some packages later installed
separately in jails. And this is something that I would never do. :)
But you can try some union fs overlay on top of shared /usr/local. But
again - I will not do this in production environment.
Miroslav Lachman
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
FreeBSD ports you maintain which are out of date
Dear port maintainer, The portscout new distfile checker has detected that one or more of your ports appears to be out of date. Please take the opportunity to check each of the ports listed below, and if possible and appropriate, submit/commit an update. If any ports have already been updated, you can safely ignore the entry. You will not be e-mailed again for any of the port/version combinations below. Full details can be found at the following URL: http://portscout.freebsd.org/po...@freebsd.org.html Port| Current version | New version +-+ graphics/opencollada| 1.6.67 | v1.6.68 +-+ textproc/libextractor | 1.7 | 1.8 +-+ If any of the above results are invalid, please check the following page for details on how to improve portscout's detection and selection of distfiles on a per-port basis: http://portscout.freebsd.org/info/portscout-portconfig.txt Thanks. ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: Acme-client (Let's Encrypt)and OpenSSL
Am 26.11.18 um 19:58 schrieb Xavier: > On 10/11/2018 17:27, Xavier wrote: >> Hi, >> >> Following the upgrade fom 11-STABLE to 12-STABLE, I updated OpenSSL from >> 1.0.1 to 1.1.1, since it seemd mandatory for pkg to work >> >> But when I check pacakages with pkg check -Bd, I've an error : >>> acme-client is missing a required shared library: libssl.so.46 >> >> Trying to rebuild acme-client, it insists to install libressl, which >> obvously fails. > > I fixed the problem by force upgrading acme-client using binaries (pkg > upgrade -f acme-client) > > But build problem from source is still present : > > -- > [root@numenor acme-client]# grep openssl /etc/make.conf > DEFAULT_VERSIONS+=ssl=openssl111 > > [root@numenor acme-client]# openssl version > OpenSSL 1.1.1a-freebsd 20 Nov 2018 > > [root@numenor acme-client]# svn info > Path: . > Working Copy Root Path: /usr/ports > URL: svn://svn.freebsd.org/ports/head/security/acme-client > Relative URL: ^/head/security/acme-client > Repository Root: svn://svn.freebsd.org/ports > Repository UUID: 35697150-7ecd-e111-bb59-0022644237b5 > Revision: 485950 > Node Kind: directory > Schedule: normal > Last Changed Author: tobik > Last Changed Rev: 476218 > Last Changed Date: 2018-08-02 07:33:16 +0200 (Thu, 02 Aug 2018) > > [root@numenor acme-client]# make config > ===> No options to configure > > [root@numenor acme-client]# make all > ===> License ISCL accepted by the user > ===> acme-client-0.1.16_4 depends on file: /usr/local/sbin/pkg - found > ===> Fetching all distfiles required by acme-client-0.1.16_4 for building > > ===> libressl-2.8.2 conflicts with installed package(s): > openssl111-1.1.1a > > They install files into the same place. > You may want to stop build with Ctrl + C. > -- Other ports overcome this problem by using a dependency of the form "security/libressl:stage" and then linking against the static lib in the stage directory. Since libressl is not installed in that case, there is no install conflict to care about ... Regards, STefan ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: FreeBSD Port: devel/love
* Serpent7776 (serpent7...@gmail.com) wrote: > Could you please update devel/love port? > It's outdated v0.10 and current version is 11.1 Done. -- Dmitry Marakasov . 55B5 0596 FF1E 8D84 5F56 9510 D35A 80DD F9D2 F77D amd...@amdmi3.ru ..: https://github.com/AMDmi3 ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
bash-static now builds on FreeBSD 13 current amd64
Bash static now builds on amd64 Current: ===> Staging for bash-static-4.4.23_1 ===> bash-static-4.4.23_1 depends on executable: indexinfo - found ===> Generating temporary packing list *** * * * GNU bash, version 4.4.23(1)-release (amd64-portbld-freebsd13.0) * * *** Manfred ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: bash-static now builds on FreeBSD 13 current amd64
On 11/27/18 6:39 PM, Manfred Antar wrote: > Bash static now builds on amd64 Current: > > ===> Staging for bash-static-4.4.23_1 > ===> bash-static-4.4.23_1 depends on executable: indexinfo - found > ===> Generating temporary packing list > > *** > * * > * GNU bash, version 4.4.23(1)-release (amd64-portbld-freebsd13.0) > * * > *** > > Manfred > Thank you for the feedback. Do you know what caused the failure or rather what fixed it? I still have one PR open that reported it for 12-STABLE to fail: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233472 Emanuel ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Commit required
Hello, everybody! Would some kind committer, please, take a look on my patch and commit the www/payara port update? Here is the url: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233573 -- Dmytro Bilokha dmy...@posteo.net ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: Commit required
Hi! > Would some kind committer, please, take a look on my patch > and commit the www/payara port update? > > Here is the url: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233573 Will be committed shortly. I had a look at https://docs.payara.fish/security/security-fix-list.html and found that this update fixes two security vulnerabilities. It would be helpful if we had a VuXML entry for those. Can you look into this URL https://www.freebsd.org/doc/en/books/porters-handbook/security-notify.html and maybe provide a VuXML-entry by submitting a patch to security/vuxml to the PR 233573 ? -- p...@freebsd.org +49 171 3101372 2 years to go ! ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: Commit required
On Tue, Nov 27, 2018 at 08:19:27PM +0100, Kurt Jaeger wrote: Hi! Would some kind committer, please, take a look on my patch and commit the www/payara port update? Here is the url: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233573 Will be committed shortly. Thank you! I had a look at https://docs.payara.fish/security/security-fix-list.html and found that this update fixes two security vulnerabilities. It would be helpful if we had a VuXML entry for those. Can you look into this URL https://www.freebsd.org/doc/en/books/porters-handbook/security-notify.html and maybe provide a VuXML-entry by submitting a patch to security/vuxml to the PR 233573 ? I'll read the handbook link and provide a patch to security/vuxml in few days. -- Dmytro Bilokha dmy...@posteo.net ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: www/nginx-full build failed (13.0-CURRENT/r484802)
At Fri, 23 Nov 2018 22:18:13 +0900, 私 wrote: > > At Mon, 19 Nov 2018 13:50:13 +0900, > 私 wrote: > > > > At Fri, 16 Nov 2018 04:27:35 +0100, > > Walter Schwarzenfeld wrote: > > > > > > there is a newer update > > > > > > https://svnweb.freebsd.org/ports?view=revision&revision=485016 > > > > I've updated to r485224, but failed (Complete log in [1]) : > > > > cc -c -fPIC -I/usr/local/include/luajit-2.0 > > -DNGX_CLOJURE_BE_SILENT_WITHOUT_JVM -I/usr/local/openjdk8/include > > -I/usr/local/openjdk8/include/freebsd -O2 -pipe -g -I/usr/local/include > > -DLIBICONV_PLUG -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing > > -I /usr/local/include/fastdfs -I /usr/local/include/fastcommon > > -DMONGO_HAVE_STDINT -Isrc -D_LARGEFILE_SOURCE -DBUILDING_NGINX > > -DNDK_SET_VAR -Wno-deprecated-declarations -DNDK_SET_VAR > > -D_FILE_OFFSET_BITS=64 -DFDFS_OUTPUT_CHUNK_SIZE='256*1024' > > -DFDFS_MOD_CONF_FILENAME='"/usr/local/etc/fdfs/mod_fastdfs.conf"' > > -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR > > -DNDK_UPSTREAM_LIST -I/usr/local/include/ImageMagick-6 > > -DMAGICKCORE_HDRI_ENABLE=0 -DMAGICKCORE_QUANTUM_DEPTH=16 -I src/core -I > > src/event -I src/event/modules -I src/os/unix -I src/http/modules/perl > > -I /var/ports/work/usr/ports/www/nginx-full/work/nginx_ajp_module-bf6cd93 > > -I /usr/local/include -I /var/ports/work/usr/ports/www/nginx-full/work! /n! > gi! > > nx-push-stream-module-0.5.4/src -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-push-stream-module-0.5.4/include > > -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx_upstream_check_module-9aecf15 > > -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-video-thumbextractor-module-0.9.0/src > > -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-video-thumbextractor-module-0.9.0/include > > -I /usr/local/include -I > > /var/ports/work/usr/ports/www/nginx-full/work/ngx_devel_kit-0.3.0/objs -I > > objs/addon/ndk -I > > /var/ports/work/usr/ports/www/nginx-full/work/ngx_devel_kit-0.3.0/src -I > > /var/ports/work/usr/ports/www/nginx-full/work/ngx_devel_kit-0.3.0/objs -I > > objs/addon/ndk -I /usr/local/include -I /usr/local/include -I > > %%GSSAPINCDIR%% -I > > /var/ports/work/usr/ports/www/nginx-full/work/nchan-1.1.14/src -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx_upstream_module-1278ee5/src > > -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx_upstream_module-1278ee5/thi! rd! > _p! > > arty -I /usr/local/include/msgpuck -I /usr/local/include/yajl -I > > /var/ports/work/usr/ports/www/nginx-full/work/lua-nginx-module-0.10.13/src/api > > -I /usr/local/include/luajit-2.0 -I > > /var/ports/work/usr/ports/www/nginx-full/work/njs-992e93d/nginx/../nxt -I > > /var/ports/work/usr/ports/www/nginx-full/work/njs-992e93d/nginx/../njs -I > > /var/ports/work/usr/ports/www/nginx-full/work/njs-992e93d/nginx/../nxt -I > > /var/ports/work/usr/ports/www/nginx-full/work/njs-992e93d/nginx/../njs -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-rtmp-module-1.2.1 -I > > /var/ports/work/usr/ports/www/nginx-full/work/passenger-5.3.5/src -I > > /usr/local/include/libxml2 -I /usr/local/include -I objs -I src/http -I > > src/http/modules -I src/http/v2 -I > > /var/ports/work/usr/ports/www/nginx-full/work/ngx_devel_kit-0.3.0/src -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-clojure-0.4.5/src/c -I > > src/mail -I src/stream -o > > objs/addon/nginx-upload-module-72ec037/ngx_http_upload_module.o ! /! > var/ports/w > > ork/usr/ports/www/nginx-full/work/nginx-upload-module-72ec037/! > > ngx_http_upload_module.c > > --- > > objs/addon/nginx-upload-progress-module-afb2d31/ngx_http_uploadprogress_module.o > > --- > > cc -c -fPIC -I/usr/local/include/luajit-2.0 > > -DNGX_CLOJURE_BE_SILENT_WITHOUT_JVM -I/usr/local/openjdk8/include > > -I/usr/local/openjdk8/include/freebsd -O2 -pipe -g -I/usr/local/include > > -DLIBICONV_PLUG -fstack-protector -DLDAP_DEPRECATED -fno-strict-aliasing > > -I /usr/local/include/fastdfs -I /usr/local/include/fastcommon > > -DMONGO_HAVE_STDINT -Isrc -D_LARGEFILE_SOURCE -DBUILDING_NGINX > > -DNDK_SET_VAR -Wno-deprecated-declarations -DNDK_SET_VAR > > -D_FILE_OFFSET_BITS=64 -DFDFS_OUTPUT_CHUNK_SIZE='256*1024' > > -DFDFS_MOD_CONF_FILENAME='"/usr/local/etc/fdfs/mod_fastdfs.conf"' > > -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR -DNDK_SET_VAR > > -DNDK_UPSTREAM_LIST -I/usr/local/include/ImageMagick-6 > > -DMAGICKCORE_HDRI_ENABLE=0 -DMAGICKCORE_QUANTUM_DEPTH=16 -I src/core -I > > src/event -I src/event/modules -I src/os/unix -I src/http/modules/perl > > -I /var/ports/work/usr/ports/www/nginx-full/work/nginx_ajp_module-bf6cd93 > > -I /usr/local/include -I /var/ports/work/usr/ports/www/nginx-full/work! /n! > gi! > > nx-push-stream-module-0.5.4/src -I > > /var/ports/work/usr/ports/www/nginx-full/work/nginx-push-stream-module
Can't compile sysutils/u-boot-rpi3 on rpi3
In trying to compile sysutils/u-boot-rpi3 natively the compilation stops with many errors caused by rsa-sign.c /usr/bin/ld: error: undefined symbol: OPENSSL_init_ssl >>> referenced by rsa-sign.c >>> tools/lib/rsa/rsa-sign.o:(rsa_sign) /usr/bin/ld: error: undefined symbol: EVP_MD_CTX_new >>> referenced by rsa-sign.c >>> tools/lib/rsa/rsa-sign.o:(rsa_sign) and so on. The system is at r341083, ports are at 486064. Buildworld and buildkernel both work, so the basics are ok. I'd like to try updating u-boot to see if it fixes Timeout poll on interrupt endpoint messages that seem to interfere with hands-off rebooting. Thanks for reading, bob prohaska ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
multimedia/tvheadend: merge request
Hi,
Please merge attached two patches fixing FreeBSD-related issues. All they
are mainlined, but not included in v4.2.7.
The first one is slightly modified from original patch to be applied to
v4.2.7.
Thanks.
From 411f957733222e24df4ead9fb15332dcb2c116da Mon Sep 17 00:00:00 2001
From: Jongsung Kim
Date: Tue, 29 May 2018 03:42:04 +0900
Subject: [PATCH 1/2] webui: fix http_serve_file() for FreeBSD
This patch fixes two major problems of FreeBSD port of tvheadend:
1. very high CPU usage while streaming a recored program
2. unable to stream the recorded program beyond 128MB.
Unlike Linux sendfile(), FreeBSD sendfile() requires an explicit
file offset, and return value must be checked to catch any error
occurred. (i.e., closed connection)
Patch tested with the latest FreeBSD port of tvheadend-4.2.6.
---
src/webui/webui.c | 24 +---
1 file changed, 17 insertions(+), 7 deletions(-)
diff --git a/src/webui/webui.c b/src/webui/webui.c
index 12b965230..331d998e9 100644
--- a/src/webui/webui.c
+++ b/src/webui/webui.c
@@ -1570,7 +1570,7 @@ http_serve_file(http_connection_t *hc, const char *fname,
#if defined(PLATFORM_LINUX)
ssize_t r;
#elif defined(PLATFORM_FREEBSD) || defined(PLATFORM_DARWIN)
- off_t r;
+ off_t o, r;
#endif
if (fconv) {
@@ -1631,11 +1631,15 @@ http_serve_file(http_connection_t *hc, const char *fname,
sprintf(range_buf, "bytes %jd-%jd/%jd",
file_start, file_end, (intmax_t)st.st_size);
+#if defined(PLATFORM_LINUX)
if(file_start > 0)
if (lseek(fd, file_start, SEEK_SET) != file_start) {
close(fd);
return HTTP_STATUS_INTERNAL;
}
+#elif defined(PLATFORM_FREEBSD) || defined(PLATFORM_DARWIN)
+ o = file_start;
+#endif
if (preop) {
ret = preop(hc, file_start, content_len, opaque);
@@ -1656,16 +1660,22 @@ http_serve_file(http_connection_t *hc, const char *fname,
chunk = MIN(1024 * ((stats ? 128 : 1024) * 1024), content_len);
#if defined(PLATFORM_LINUX)
r = sendfile(hc->hc_fd, fd, NULL, chunk);
+ if (r < 0) {
+ret = -1;
+break;
+ }
#elif defined(PLATFORM_FREEBSD)
- sendfile(fd, hc->hc_fd, 0, chunk, NULL, &r, 0);
+ ret = sendfile(fd, hc->hc_fd, o, chunk, NULL, &r, 0);
+ if (ret < 0)
+break;
+ o += r;
#elif defined(PLATFORM_DARWIN)
r = chunk;
- sendfile(fd, hc->hc_fd, 0, &r, NULL, 0);
-#endif
- if(r < 0) {
-ret = -1;
+ ret = sendfile(fd, hc->hc_fd, o, &r, NULL, 0);
+ if (ret < 0)
break;
- }
+ o += r;
+#endif
content_len -= r;
if (stats)
stats(hc, r, opaque);
--
2.19.1
From 5363fb5cefbf8f9f0f4d38f81252ce93942665e4 Mon Sep 17 00:00:00 2001
From: Jongsung Kim
Date: Tue, 20 Nov 2018 17:36:10 +0900
Subject: [PATCH 2/2] webui: epg: fix compatibility issue for FreeBSD
The EPG screen serviced by FreeBSD port of tvheadend has two abnormal control
behaviors:
Reset All button makes the list empty
Typing and then deleting any search string also makes the list empty.
This patch fixes the symptoms above.
Patch tested with the latest FreeBSD port of tvheadend-4.2.7.
Changes since v1:
- call reset only if required
---
src/webui/static/app/epg.js | 9 +
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/src/webui/static/app/epg.js b/src/webui/static/app/epg.js
index 2c8b914b2..7337177ef 100644
--- a/src/webui/static/app/epg.js
+++ b/src/webui/static/app/epg.js
@@ -902,10 +902,11 @@ tvheadend.epg = function() {
epgFilterTitle.on('valid', function(c) {
var value = c.getValue();
-if (value.length < 1)
-value = null;
-
-if (epgStore.baseParams.title !== value) {
+if (value.length < 1) {
+delete epgStore.baseParams.title;
+epgView.reset();
+}
+else if (epgStore.baseParams.title !== value) {
epgStore.baseParams.title = value;
epgView.reset();
}
--
2.19.1
___
freebsd-ports@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: Can't compile sysutils/u-boot-rpi3 on rpi3
At Tue, 27 Nov 2018 18:06:59 -0800, bob prohaska wrote: > > In trying to compile sysutils/u-boot-rpi3 natively the compilation > stops with many errors caused by rsa-sign.c > > /usr/bin/ld: error: undefined symbol: OPENSSL_init_ssl > >>> referenced by rsa-sign.c > >>> tools/lib/rsa/rsa-sign.o:(rsa_sign) > > /usr/bin/ld: error: undefined symbol: EVP_MD_CTX_new > >>> referenced by rsa-sign.c > >>> tools/lib/rsa/rsa-sign.o:(rsa_sign) > > and so on. Maybe OpenSSL 1.1 API problems [1]. > > The system is at r341083, ports are at 486064. > > Buildworld and buildkernel both work, so the basics are ok. > > I'd like to try updating u-boot to see if it fixes > Timeout poll on interrupt endpoint > messages that seem to interfere with hands-off rebooting. > > Thanks for reading, > > bob prohaska > > > ___ > freebsd-ports@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-ports > To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org" > [1] https://wiki.freebsd.org/OpenSSL/1.1.0 --- KIRIYAMA Kazuhiko ___ freebsd-ports@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
