From owner-freebsd-pkg@FreeBSD.ORG Tue Sep 17 08:49:55 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id E62104FD; Tue, 17 Sep 2013 08:49:54 +0000 (UTC) (envelope-from demelier.david@gmail.com) Received: from mail-bk0-x22e.google.com (mail-bk0-x22e.google.com [IPv6:2a00:1450:4008:c01::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 067CB25F8; Tue, 17 Sep 2013 08:49:53 +0000 (UTC) Received: by mail-bk0-f46.google.com with SMTP id 6so1953227bkj.19 for ; Tue, 17 Sep 2013 01:49:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=7LxWgUfyCUS3+E6IAG/7J96MU2GYsgdgrro8wD+m9Oo=; b=k5TnPJQOp2p7RfrL8001dxFyxT218SJR1uLogyU2LY7mL++vlAF7ywR3YS8ecEPJgS tBogAXpt/9igekXI2AuZ/VWbM8HURIH4lxuYBrrEiBCEMxn/wlmbFEy8SX/aZcKhwvJO FrnXD91ANTjADta1QbeTzvfmABxwO9c63UbsX3g4Y5ItkJWQV6yzgceVB+5hsBLlTzAx IxQatdK3EUr+1lDgakct7WwN1WOtV7JIX1fK6tc8TLhCHvea8miH1RXbK8urYciVF/V7 ro6P4QGaUKBAE88Ez/l2w0C4PfMYMB26jqm7SQR6j8qKLfOdZ45VbN7go3wMhfQLYxI7 +Oiw== X-Received: by 10.204.63.7 with SMTP id z7mr28052087bkh.23.1379407792290; Tue, 17 Sep 2013 01:49:52 -0700 (PDT) Received: from [192.168.0.10] (13.66.91.91.rev.sfr.net. [91.91.66.13]) by mx.google.com with ESMTPSA id zl3sm9377101bkb.4.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 17 Sep 2013 01:49:51 -0700 (PDT) Message-ID: <523817A5.9000203@gmail.com> Date: Tue, 17 Sep 2013 10:49:41 +0200 From: David Demelier User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:17.0) Gecko/20130830 Thunderbird/17.0.8 MIME-Version: 1.0 To: Daniel Braniss Subject: Re: python 2 and 3 modules References: <51F62DAC.3000003@FreeBSD.org> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: ports@freebsd.org, koobs@FreeBSD.org, python@FreeBSD.org, freebsd-pkg@freebsd.org X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 08:49:55 -0000 On 17.09.2013 08:59, Daniel Braniss wrote: >> On 29/07/2013 5:46 PM, David Demelier wrote: >>> 2013/7/28 Daniel Braniss : >>>> Hi, >>>> I need to be able to have both (2.7 and 3.2) modules. >>>> setting PYTHON_VERSION=3.2 in /etc/make.conf compiles properly, >>>> but make install, insists that that the 2.7 version is installed! >>>> after deinstalling, it will install the 3.2 version in the correct directory: >>>> /usr/local/lib/python3.2/site-path >>>> but now I lost the 2.7 version. >>>> >>>> the same happens if I try to install the 2.7 version, it will complain >>>> that the 3,2 version is installed. >>>> >>>> BTW, the comments in ports/Mk/bsd.python.mk are very confusing and >>>> some are wrong: >>>> # PYTHON_VERSION - Version of the python binary in your ${PATH}, in the >>>> # format "python2.0". Set this in your >>>> makefile in case you >>>> # want to build extensions with an >>>> older binary. >>>> # default: depends on the version of >>>> your python binary >>>> >>>> setting it to "python3.2" produces errors in the make, while 3.2 is ok >>>> >>>> is there any fix? >>>> >>>> thanks, >>>> danny >>>> >>> >>> For the moment its pretty difficult to install python 2.7 and 3.3 at >>> the same time. However, if you plan to install python 3.3, you need to >>> set PYTHON_DEFAULT_VERSION to "python3.3" and not PYTHON_VERSION. >>> >>> Cheers, >>> >> >> David, >> >> python@ would love to get a better idea (ideally a list) of where and >> what the choke-points & hurdles users are coming across trying to >> achieving this. >> >> Id be happy to document these in the wiki as we start looking forward to >> best-practice FreeBSD/Python packaging for when the >> setuptools/distribute merge commotion settles down >> >> The FreeBSD Python team can be found on FreeNode IRC (#freebsd-python) >> if anyone wants to get the ball rolling. >> >> koobs > > hi all, > is there any progress? > > Hello, It has been committed, it's now possible to install python 2 and 3 interpreter without checking for which repository it has been compiled :-). However there is bug in pkgng that does not allow to install a python 2 and python 3 module because it relies on the origin which is devel/py-foo and not the port name py27-foo | py33-foo. I've posted an issue on the FreeBSD pkgng github repository [1]. Also, know I would like to get in touch to the ruby team so they do the exact wrapper of the ruby interpreters :-). [1] https://github.com/freebsd/pkg/issues/582 Regards, From owner-freebsd-pkg@FreeBSD.ORG Tue Sep 17 13:17:29 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id D923F3C1 for ; Tue, 17 Sep 2013 13:17:29 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id A46D32538 for ; Tue, 17 Sep 2013 13:17:29 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r8HDHTiK088217 for ; Tue, 17 Sep 2013 13:17:29 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r8HDHTu4088215 for freebsd-pkg@freebsd.org; Tue, 17 Sep 2013 13:17:29 GMT (envelope-from bdrewery) Received: (qmail 70851 invoked from network); 17 Sep 2013 08:17:28 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 17 Sep 2013 08:17:28 -0500 Message-ID: <52385662.6070000@FreeBSD.org> Date: Tue, 17 Sep 2013 08:17:22 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Justin Hibbits Subject: Re: Poudriere on powerpc64 References: In-Reply-To: X-Enigmail-Version: 1.5.2 OpenPGP: id=3C9B0CF9; url=http://www.shatow.net/bryan/bryan.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Ni9SIMaSEa5U06ADdlk9tMiAkl92n3cdQ" Cc: freebsd-pkg@freebsd.org X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 13:17:29 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Ni9SIMaSEa5U06ADdlk9tMiAkl92n3cdQ Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 9/11/2013 12:30 PM, Justin Hibbits wrote: > I just tried filing a ticket in the poudriere fossil, but hit a 'read-o= nly > database' error, so next best would be this list. >=20 > The text of the ticket is (copy and paste): >=20 > When configuring a 'native' poudriere jail on powerpc64, it gets config= ured > for powerpc.powerpc. The PowerPC FreeBSD port is different from most > others, because it has a target.target_arch, so it's powerpc.powerpc64 > (target.target_arch), but poudriere misses the target_arch, and treats = it > as powerpc.powerpc. >=20 > Tied with this, the '-a' argument, to specify a target architecture, er= rors > with 'only supported on amd64', and with a change for this ticket, it > should be expanded to support powerpc64 as well. >=20 > - Justin Thanks, I'll take a look. --=20 Regards, Bryan Drewery --Ni9SIMaSEa5U06ADdlk9tMiAkl92n3cdQ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSOFZiAAoJEG54KsA8mwz5T8QP/0em7/4IlXHo8eb+cImilI9r 7j/jiSUb/md6hK7H9NUgrYa+ldeXYsy1zC0vDY9UUq5Rxu90v/V+qDYIJuVEFb7y t+U/rPwI2AtvhtLyb31N7hA5daKsHGgF+qaKDWh2UDS0sB5DN+j1TXav+Fx1gdDH a35rMH64Ib/zeQC82k/4Fgh7Y4NHUvB3ZqMnSHwOiugcZ+kBhbJLDeRaWc7RvQQx HrqxZxNf8DE1a4v36/ZQHPj5EE7q4R9zMxo2Rd2v9GFby6WWtHDRIt+oBRbnJVsV FX/qxsUViMm+BpK+aZqlVVOQ68sk3DR0W2K01oG2nMabHXW+it/Z/7go7R1XAyR+ VkGH0cIrLLg9DRN6To8GoLlm8p4EqmVQHfmISEAwhdyWj3fjTNAIRnPUOVW+EHGD GjOEQ+vxFb2km0XZz3cHmkdmajUzZIuGmmHQ60VtMopO/GHoN3c56V495EiZ/zru +s0DGqFw4MRtUErYX4JqAbK342q/qXP2VPCH33XxmyChov5LDJMtAvMiTIkEMxdw bIy4bPTuN55UJbRdezXW9SK925icQ+pL+7MMoFCiM5elSWmhK25yjQH715kqVSh9 bwc9+x3ruWgf01T0kLx0Z9/zwrmz2pwu1QizqujvSLui0bwhw6QmVb/tr+qMeVbl Fu/8exxniRi7LPhZC40w =y5tw -----END PGP SIGNATURE----- --Ni9SIMaSEa5U06ADdlk9tMiAkl92n3cdQ-- From owner-freebsd-pkg@FreeBSD.ORG Tue Sep 17 14:30:16 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id ED765F76; Tue, 17 Sep 2013 14:30:15 +0000 (UTC) (envelope-from danny@cs.huji.ac.il) Received: from kabab.cs.huji.ac.il (kabab.cs.huji.ac.il [132.65.16.84]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 9DA5A28E4; Tue, 17 Sep 2013 14:30:15 +0000 (UTC) Received: from pampa.cs.huji.ac.il ([132.65.80.32]) by kabab.cs.huji.ac.il with esmtp id 1VLwI8-000HUY-1G; Tue, 17 Sep 2013 17:30:12 +0300 X-Mailer: exmh version 2.7.2 01/07/2005 with nmh-1.3 To: David Demelier Subject: Re: python 2 and 3 modules In-reply-to: <523817A5.9000203@gmail.com> References: <51F62DAC.3000003@FreeBSD.org> <523817A5.9000203@gmail.com> Comments: In-reply-to David Demelier message dated "Tue, 17 Sep 2013 10:49:41 +0200." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 17 Sep 2013 17:30:11 +0300 From: Daniel Braniss Message-ID: Cc: ports@freebsd.org, koobs@FreeBSD.org, python@FreeBSD.org, freebsd-pkg@freebsd.org X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 14:30:16 -0000 > On 17.09.2013 08:59, Daniel Braniss wrote: > >> On 29/07/2013 5:46 PM, David Demelier wrote: > >>> 2013/7/28 Daniel Braniss : > >>>> Hi, > >>>> I need to be able to have both (2.7 and 3.2) modules. > >>>> setting PYTHON_VERSION=3.2 in /etc/make.conf compiles properly, > >>>> but make install, insists that that the 2.7 version is installed! > >>>> after deinstalling, it will install the 3.2 version in the correct directory: > >>>> /usr/local/lib/python3.2/site-path > >>>> but now I lost the 2.7 version. > >>>> > >>>> the same happens if I try to install the 2.7 version, it will complain > >>>> that the 3,2 version is installed. > >>>> > >>>> BTW, the comments in ports/Mk/bsd.python.mk are very confusing and > >>>> some are wrong: > >>>> # PYTHON_VERSION - Version of the python binary in your ${PATH}, in the > >>>> # format "python2.0". Set this in your > >>>> makefile in case you > >>>> # want to build extensions with an > >>>> older binary. > >>>> # default: depends on the version of > >>>> your python binary > >>>> > >>>> setting it to "python3.2" produces errors in the make, while 3.2 is ok > >>>> > >>>> is there any fix? > >>>> > >>>> thanks, > >>>> danny > >>>> > >>> > >>> For the moment its pretty difficult to install python 2.7 and 3.3 at > >>> the same time. However, if you plan to install python 3.3, you need to > >>> set PYTHON_DEFAULT_VERSION to "python3.3" and not PYTHON_VERSION. > >>> > >>> Cheers, > >>> > >> > >> David, > >> > >> python@ would love to get a better idea (ideally a list) of where and > >> what the choke-points & hurdles users are coming across trying to > >> achieving this. > >> > >> Id be happy to document these in the wiki as we start looking forward to > >> best-practice FreeBSD/Python packaging for when the > >> setuptools/distribute merge commotion settles down > >> > >> The FreeBSD Python team can be found on FreeNode IRC (#freebsd-python) > >> if anyone wants to get the ball rolling. > >> > >> koobs > > > > hi all, > > is there any progress? > > > > > > Hello, > > It has been committed, it's now possible to install python 2 and 3 > interpreter without checking for which repository it has been compiled :-). > > However there is bug in pkgng that does not allow to install a python 2 > and python 3 module because it relies on the origin which is > devel/py-foo and not the port name py27-foo | py33-foo. > > I've posted an issue on the FreeBSD pkgng github repository [1]. > > Also, know I would like to get in touch to the ruby team so they do the > exact wrapper of the ruby interpreters :-). > > [1] https://github.com/freebsd/pkg/issues/582 > > Regards, thanks, could you please expand on 'has been committed', and unless I misread, the subject: RE: python 2 and 3 modules has not been fixed, true? cheers, danny From owner-freebsd-pkg@FreeBSD.ORG Wed Sep 18 23:18:21 2013 Return-Path: Delivered-To: pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 43BE223C for ; Wed, 18 Sep 2013 23:18:21 +0000 (UTC) (envelope-from bsd-src@helfman.org) Received: from mail-pa0-f45.google.com (mail-pa0-f45.google.com [209.85.220.45]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 1DA5C2C65 for ; Wed, 18 Sep 2013 23:18:17 +0000 (UTC) Received: by mail-pa0-f45.google.com with SMTP id bg4so8870503pad.4 for ; Wed, 18 Sep 2013 16:18:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to:content-type; bh=w2wuG9cOJhHIuDVibJaAZpXzpJyAxqRyvkxreLfW+DQ=; b=e9mQ8XK0NTht7GbOdQma0Gr/SfyM+b09ACAB/U7nASmL0kyebB317Z0pnpXsteSNCh dJ5L6vAxqGc7H8+lgsc6vVXPPE52azYNV3LgvoLIvsp6z/cVHDd3/erm9TWDc5KQWQ0O Sv0OXnxxupQwmIgqLQE6RrcxIT/5PnrgYAnz/9vaoZNE226AgdLDDPOYS9JfIfa83pj6 LPFPaV+e2gHLSz3zxykIDTdrEEDV39H6OCtRbwie/NFmro2dWkK0fBcEftkdg7MPrKsa 6bzCaFFgURWJuWfy0AIi4+vaQm6gbQbVE0Woj+6geyapEbBKh20R7XrRRWv+c3S5+AWF IDeQ== X-Gm-Message-State: ALoCoQl1uUXCPsO8LQuuHMDJhkTFclbKrFyOjaSMDWXN/X6MJk31YrkuE+OmvX1w/2++5egheqr5 MIME-Version: 1.0 X-Received: by 10.66.26.194 with SMTP id n2mr17551069pag.151.1379545874914; Wed, 18 Sep 2013 16:11:14 -0700 (PDT) Sender: bsd-src@helfman.org Received: by 10.70.118.97 with HTTP; Wed, 18 Sep 2013 16:11:14 -0700 (PDT) Date: Wed, 18 Sep 2013 16:11:14 -0700 X-Google-Sender-Auth: waAcy55MfvzitnECGR8Szgf2nrA Message-ID: Subject: pkg integration spacewalk question From: Jason Helfman To: pkg@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Sep 2013 23:18:21 -0000 Hello All, I am mainly using Linux (RedHat) at work, at the moment, however I am using FreeBSD as my desktop. A tool I was introduced to recently is SpaceWalk. I have already had some thoughts shared regarding this tool, but for doing what little we use of it, it is pretty good. http://spacewalk.redhat.com/ At a basic level, you can have spacewalk subscribe to modern based repositories (much like pkg is now), and list the subscribed systems in a particular group and how out-of-date they may be with software. I made a brief inquiry to the development list, and received this feedback: https://www.redhat.com/archives/spacewalk-devel/2013-August/msg00064.html Beyond patching, it is also good for send a remote command to a remote host, and there are some other features that are worth looking into. The reason I bring this up is that I don't know of an Enterprise Level software package, or even open source, that gives you a view into your FreeBSD systems, and a tool to manage them effectively. Sure I can create a shell script that goes to each server and does a pkg upgrade, but what do I do for say 500 systems, or more? This tool can even update the system using a newer kernel package. I know about updating all to well, as I wrote the article on implementing your own FreeBSD Update Server, but could this be done the FreeBSD way with a tool such as SpaceWalk, or another tool that we may be able to write. I believe SpaceWalk could be crafted to handle FreeBSD from a package point-of-view, and possibly other items such as remote commands, however is SpaceWalk the right tool? Is there a tool out there that I am unaware of that does this? When I was upgrading systems at my previous position, we had to create a tool internally that just monitored the kernel versions of the system, but going to each system individually to upgrade was required. Is there a tool that say a business may use for a "dashboard" view of their infrastructure, and where they stand from a security and patch point-of-view? Many thanks! -jgh -- Jason Helfman | FreeBSD Committer jgh@FreeBSD.org | http://people.freebsd.org/~jgh | The Power to Serve From owner-freebsd-pkg@FreeBSD.ORG Fri Sep 20 00:54:10 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 5184888B; Fri, 20 Sep 2013 00:54:10 +0000 (UTC) (envelope-from jason.unovitch@gmail.com) Received: from mail-yh0-x22a.google.com (mail-yh0-x22a.google.com [IPv6:2607:f8b0:4002:c01::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 060C223C4; Fri, 20 Sep 2013 00:54:09 +0000 (UTC) Received: by mail-yh0-f42.google.com with SMTP id z12so4588418yhz.15 for ; Thu, 19 Sep 2013 17:54:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=j4rLMty9b6e752jcBUlzhuYDfqNExTS015cR6VSCUSQ=; b=OjhTsyNjnUzmsm3KZEIefh/dd0jijm330JNG2N1uEKbChI/4yyaXjW62iV4ApNfjJr HA8+HgFecRINjETKD+F2var7m/cNOBkhQmlH/AOJLWTA6CwH9U3YF2Ob1fvCnVTiYdts 3eerI5SFyJTncqM3LqMaj7lAwpK/ctoxMz3uK5J94UkI0OOn1UJ3pnZ9J35HOO85ZU67 ZSur58bx+a0qAEtx+6+Sc7tAdju/Tet9+oDut7B8CfwWv7PanBaH/zoLiHhl/d2C8ucn BdSScXcAb/ynerOGgbGxfqbC1IzTM76FA+tTdauPldekgxNyrqBEGcmUrxu2Gxur5qvb gN+A== X-Received: by 10.236.124.172 with SMTP id x32mr3819199yhh.59.1379638449087; Thu, 19 Sep 2013 17:54:09 -0700 (PDT) Received: from ?IPv6:2001:470:8:955:ac3e:1995:c71e:ef54? ([2001:470:8:955:ac3e:1995:c71e:ef54]) by mx.google.com with ESMTPSA id d26sm14900174yhj.25.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 19 Sep 2013 17:54:08 -0700 (PDT) Message-ID: <523B9CAF.5060002@gmail.com> Date: Thu, 19 Sep 2013 20:54:07 -0400 From: Jason Unovitch User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130803 Thunderbird/17.0.8 MIME-Version: 1.0 To: jgh@FreeBSD.org, freebsd-pkg@freebsd.org Subject: Re: pkg integration spacewalk question References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 00:54:10 -0000 Hi Jason, Some of the functionality looks similar to what is in Puppet. I've been working on finalizing a "how to" running Puppet open source with its Dashboard on an Nginx/Ruby on Rails/MariaDB back-end. Unfortunately I haven't tried any FreeBSD clients yet and only have experience with Linux clients talking to the Puppet on a FreeBSD server. If the pkg integration works as well as integration with the Linux package mangers, declaring having the latest versions of packages would be enough to ensure everything got updated. With a private pkg repo that gets vetted and updated when security issues come up I could see this working rather well for ensuring tight configuration control. Once I get around to testing some FreeBSD clients I'll see how well pkg integration works out. If Puppet doesn't work for you, other options to look into are Cfengine, Chef, and Salt. I've just stuck with the first tool for the job that I tried as it worked well. I'd be more than happy to point you to the how to guide when I'm done as I'm planning on putting it up on the forums for anybody who can benefit from it. Cheers, Jason Unovitch On 09/19/2013 08:00 AM, freebsd-pkg-request@freebsd.org wrote: > Message: 1 > Date: Wed, 18 Sep 2013 16:11:14 -0700 > From: Jason Helfman > To: pkg@freebsd.org > Subject: pkg integration spacewalk question > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > Hello All, > > I am mainly using Linux (RedHat) at work, at the moment, however I am using > FreeBSD as my desktop. A tool I was introduced to recently is SpaceWalk. I > have already had some thoughts shared regarding this tool, but for doing > what little we use of it, it is pretty good. > > http://spacewalk.redhat.com/ > > At a basic level, you can have spacewalk subscribe to modern based > repositories (much like pkg is now), and list the subscribed systems in a > particular group and how out-of-date they may be with software. > > I made a brief inquiry to the development list, and received this feedback: > https://www.redhat.com/archives/spacewalk-devel/2013-August/msg00064.html > > Beyond patching, it is also good for send a remote command to a remote > host, and there are some other features that are worth looking into. > > The reason I bring this up is that I don't know of an Enterprise Level > software package, or even open source, that gives you a view into your > FreeBSD systems, and a tool to manage them effectively. > > Sure I can create a shell script that goes to each server and does a pkg > upgrade, but what do I do for say 500 systems, or more? > > This tool can even update the system using a newer kernel package. I know > about updating all to well, as I wrote the article on implementing your own > FreeBSD Update Server, but could this be done the FreeBSD way with a tool > such as SpaceWalk, or another tool that we may be able to write. > > I believe SpaceWalk could be crafted to handle FreeBSD from a package > point-of-view, and possibly other items such as remote commands, however is > SpaceWalk the right tool? Is there a tool out there that I am unaware of > that does this? > > When I was upgrading systems at my previous position, we had to create a > tool internally that just monitored the kernel versions of the system, but > going to each system individually to upgrade was required. > > Is there a tool that say a business may use for a "dashboard" view of their > infrastructure, and where they stand from a security and patch > point-of-view? > > Many thanks! > > -jgh > From owner-freebsd-pkg@FreeBSD.ORG Fri Sep 20 05:58:00 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id AEB3F88E for ; Fri, 20 Sep 2013 05:58:00 +0000 (UTC) (envelope-from bsd-src@helfman.org) Received: from mail-pb0-f49.google.com (mail-pb0-f49.google.com [209.85.160.49]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 864E12FFB for ; Fri, 20 Sep 2013 05:58:00 +0000 (UTC) Received: by mail-pb0-f49.google.com with SMTP id xb4so9240168pbc.36 for ; Thu, 19 Sep 2013 22:57:54 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=xW2ymkoUaYLN8VkqrxfbSr9K0BdjU2MZeZ2HubA+iaw=; b=SXCR95rOnapP7o0l3ox/H5oPQdhtU6KnJtCRHedUpQC1vplL4+jG40x2AGSCav7oN7 F5sEEOIsby07YriV2ApzqocqfRRl75H8rknpvKvi8cuEaKildMTrVHx6PFqNKUZ2RW6N tmosY5iEWGcDf43qGjWrCVpGCgxjH85J4b9c/F3cJpuDDHGkSIX4b0VqZc+Xdv/+11Kg ND+1yHmdg50gJHb3AAo1v4wK8KfC6sFmylXEU0RVB9rn6+cKiVry98M0MtUGr2DP0hnD BfuxMnZuymASiCUs+PLYtc6mtsbT2anfIDCP/X6DP4gKWCNe3sMXYBEMhQXhw4HmPhmf RPhw== X-Gm-Message-State: ALoCoQlsHd1AOc5X1YLmJ5qOUhVsyFmGrvQimEQEd93WxUsato5hJXs87RFZta1EfNlv7c7yNpqp MIME-Version: 1.0 X-Received: by 10.69.12.36 with SMTP id en4mr6066789pbd.54.1379656267967; Thu, 19 Sep 2013 22:51:07 -0700 (PDT) Sender: bsd-src@helfman.org Received: by 10.70.100.165 with HTTP; Thu, 19 Sep 2013 22:51:07 -0700 (PDT) In-Reply-To: <523B9CAF.5060002@gmail.com> References: <523B9CAF.5060002@gmail.com> Date: Thu, 19 Sep 2013 22:51:07 -0700 X-Google-Sender-Auth: XaiCpglM4xpI78NyLN3OtSJNik4 Message-ID: Subject: Re: pkg integration spacewalk question From: Jason Helfman To: Jason Unovitch Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-pkg@freebsd.org X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 05:58:00 -0000 On Thu, Sep 19, 2013 at 5:54 PM, Jason Unovitch wrote: > Hi Jason, > Some of the functionality looks similar to what is in Puppet. I've been > working on finalizing a "how to" running Puppet open source with its > Dashboard on an Nginx/Ruby on Rails/MariaDB back-end. Unfortunately I > haven't tried any FreeBSD clients yet and only have experience with Linux > clients talking to the Puppet on a FreeBSD server. If the pkg integration > works as well as integration with the Linux package mangers, declaring > having the latest versions of packages would be enough to ensure everything > got updated. With a private pkg repo that gets vetted and updated when > security issues come up I could see this working rather well for ensuring > tight configuration control. Once I get around to testing some FreeBSD > clients I'll see how well pkg integration works out. > > If Puppet doesn't work for you, other options to look into are Cfengine, > Chef, and Salt. I've just stuck with the first tool for the job that I > tried as it worked well. I'd be more than happy to point you to the how to > guide when I'm done as I'm planning on putting it up on the forums for > anybody who can benefit from it. > > Cheers, > Jason Unovitch > Hi Jason. I've run puppet for years, but have never run the 'dashboard,' however I have run it recently taking advantage of 'pkg' repositories. This is a different request, though. This is on-demand. So I check a group of servers. I can work with that group of servers, and proactively see how many packages are out-of-date. I can then select those servers, and upgrade packages of those specific systems. I believe part of this can be done in 'puppet,' but puppet is very good at configuration management, and trigger based actions. I have not found any part of puppet that shows it is a good tool for patch management, or massive pkg deployment/upgrades. I may have missed where you can do this efficiently with puppet. However, I would be happy to discover this, as well :) I've worked slightly with the others you had mentioned, but still am unsure if they are as what I described what I am looking for. Nonetheless, I look forward to reading your forum post. -jgh -- Jason Helfman | FreeBSD Committer jgh@FreeBSD.org | http://people.freebsd.org/~jgh | The Power to Serve