Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Sep 2014 16:32:00 -0500
From:      Bryan Drewery <bdrewery@FreeBSD.org>
To:        Rick Miller <vmiller@hostileadmin.com>, freebsd-ports <freebsd-ports@freebsd.org>
Subject:   Re: Poudriere Build of pkg_* repos?
Message-ID:  <54233850.2070807@FreeBSD.org>
In-Reply-To: <CAHzLAVGcGPQP3NvaSpe6%2BidLdEWM4hrQyPwP6YVPvOO-J823Fw@mail.gmail.com>
References:  <CAHzLAVGcGPQP3NvaSpe6%2BidLdEWM4hrQyPwP6YVPvOO-J823Fw@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 9/24/2014 3:35 PM, Rick Miller wrote:
> Hi all,
>=20
> Does the EOL of legacy pkg_* tools in FreeBSD Ports affect Poudriere's
> ability to build legacy package repos?

No. Poudriere still supports it as long as you're using an older ports tr=
ee.

>=20
> Poudriere was able to build a legacy pkg_* repo from a snapshot of Port=
s
> from around the time releng/10.0 received the patch for -p7, but it fai=
led
> to build a legacy repo from a snapshot taken today and instead built a
> pkg(8) repo despite make.conf having WITHOUT_PKGNG=3Dyes.
>=20
> Aside:  Actually, it seemed to ignore the make.conf altogether as it
> contains PERL_VERSION=3D5.14.4 and built 5.16 instead.

It must be /usr/local/etc/poudriere.d/make.conf

>=20
> Provided this is the case, what suggestions are there for patching toda=
y's
> bash remote execution vulnerability[1] in a version of Ports that can b=
e
> built into a legacy repo?

Just apply the patch via files/ and use EXTRA_PATCHES:
http://dan.langille.org/2014/06/10/freebsd-custom-port-patches-when-using=
-poudriere/

>=20
> [1] http://seclists.org/oss-sec/2014/q3/650
>=20


--=20
Regards,
Bryan Drewery


--xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)

iQEcBAEBAgAGBQJUIzhQAAoJEDXXcbtuRpfPOIoH/iJ66Gnejekrh+6VKDVbMA3I
ipMFfqhBr7V0pBaeRQNXnk2jFVDZz7TBogwbOLXkD1CHWayDgaadr/D6plJr/DjT
rh9Q0/058leCD+z47yWHL2UMRcSJPz78S6UI0K3Q4CMaJhrGIpMGSyvmII7X/VtY
SboWvBwknY3R/+teVzf4UCqzGUVa080iGbdOa4BCbyohkcngzqto2XQPFb84eO5z
QzYZaFuZA65tyfXUKi7e9hOAr4O4fVTtnbZml/UAlri33LJlcfiIDPri0R2crNb3
hz7UtpNuYYbqWHoq/4kIaWiidleABeB7yhUpyEvz9JKUspXAnv9HbQhncdowqf0=
=LE6E
-----END PGP SIGNATURE-----

--xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?54233850.2070807>