From nobody Fri Aug 29 08:08:21 2025 X-Original-To: apache@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cCrVt1cBLz66Jr3 for ; Fri, 29 Aug 2025 08:08:22 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cCrVs5TXnz436b for ; Fri, 29 Aug 2025 08:08:21 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756454901; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=kwhZCf09HyGxOJaDyAay5Ryy0IujOABMGPk0Rqvl4DQ=; b=eZj6QyDC0GdIxG4xXMIfUW+ki0Fu12m+Fr78K+6QQWrSInM/3P6UFfSrBlENhTAWkRCUbW Oub/7HZw4gs8Thy1NoYOe6aEgvOZYelwNjC5kxTJMTOyMJQQ1npPiIbxFTgqZMnxGrHQgs D9eNIAFhXcq9sh/Pu04nNYGI6xgxaENO0CA4iOlbCAIlagxPZZv60HylA6uHsfZ6gmxG8J aWL6u23Pcvh1HpLbBe0I02Lp6rMdLDcEvTqYCd5QuTyh1zgXP6buwSOTAyldNTsVrl4ZzL LH2pWjRR3d/fnaATXeeB6A6cbuCYhGYeH7971yM7uNTbdTz+oW8Safil560r9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756454901; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=kwhZCf09HyGxOJaDyAay5Ryy0IujOABMGPk0Rqvl4DQ=; b=ahmgcmQVvPzJKMMjz99fdbGKg+jtGIxi3IH8qFJ8PNypNDhxrvB9MLqvh2vGspUYl/bGrt iwyLh2DVVGqmNIyYgKqdqiNwrT+Qf3Sd3VobrkCOoKL9CLprhJ5M0K7tqtsk6u8gOjPIRw g7zSuZhxFekEkRhiC04eG6aNcXu9Nf3E7lW8pkdakpSRg5VOhnIby709ExzER/w8Dnngra vhluDDyVeVCkaCiC7kMXdqFUHkwXYMS40gTSdLHqAdR9wb8sQ6SIueT8JwA0BkpQBqgvAM Gzvpf7OKsYYgtR0PeSNEvYawkXh0deRirRUBH2eacj89tMVtodjl312E49CTCw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1756454901; a=rsa-sha256; cv=none; b=dyduh4eHNKNpVmhCF1t/6Kbmo5dtzZD5mOBYCNvZs7KLr/rgxsh8elZe6Au9fyPh9tf+uU lBk/2p1tAxdYovPC8q4PppWvVHWdUT/6Y/bVV5qQnjadITRqBzZ3aRai2GO9Zbk8nG9Plz ia/pREwqad7vNPBJN3hVhzBUnh2b1PjoHnYnxgTW+X/EeLVqYufnT2bgwUH44JYwTAxeSv uxxYTjjdbez8Ujhako6pW8Jv/XYOfF2dIUrV7iHbB6yrQvW/6SsqXCT18+idOcAtvNh+S7 KMGMTxLtgk+uie/lTVIVBAm8Sp6ma1M5eaRLYJOwXQ14+LjncCccIZteswwLYw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4cCrVs4VTbzVmj for ; Fri, 29 Aug 2025 08:08:21 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 57T88L4C044020 for ; Fri, 29 Aug 2025 08:08:21 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 57T88LHF044019 for apache@FreeBSD.org; Fri, 29 Aug 2025 08:08:21 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 279494] www/apache24: make the start script service jails ready Date: Fri, 29 Aug 2025 08:08:21 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: apache@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Support of apache-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-apache List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-apache@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D279494 --- Comment #2 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=3Da3fbcaec539824a635d1bd53a2508fa= fae06ec6a commit a3fbcaec539824a635d1bd53a2508fafae06ec6a Author: Alexander Leidinger AuthorDate: 2025-08-29 07:44:59 +0000 Commit: Alexander Leidinger CommitDate: 2025-08-29 08:07:34 +0000 www/apache24: make the start script service jails ready The setup I've chosen is to allow ipv4/ipv6 access. It does not allow to use sysv IPC in a jail. If you want to use this possibility, the config would need to be changed to "net_basic sysvipc" instead. More advanced use cases may need different service jail options. The config can be overridden in rc.conf. See also: https://docs.freebsd.org/en/books/handbook/jails/#service-jails https://docs.freebsd.org/en/articles/rc-scripting/#rcng-service-jails Some notes: - There are special apache24_limits_* stuff which is different from the name_limits stuff as part of the rc framework. - The limits part in the precmd will probably not work in a service jail, as the start command will be executed in a jail and the precmd outside the jail. - While the patch is taking the profiles into account, it may fail when the jail is started, as the name of the service jail is derived from the name of the rc script (assuming "profiles" means different instances of apache are started for each profile). The tomcat/oauth2-proxy/openhab ports use a way to have different instances of the software running in parallel which is based upon the name of the rc script (via links to the original rc script). That way works well with service jails. Approved by: maintainer timeout PR: 279494 www/apache24/Makefile | 1 + www/apache24/files/apache24.in | 3 +++ 2 files changed, 4 insertions(+) --=20 You are receiving this mail because: You are the assignee for the bug.=