Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 15 Jun 2014 12:06:36 +0200
From:      Roland Smith <rsmith@xs4all.nl>
To:        Polytropon <freebsd@edvax.de>, Chris Maness <chris@chrismaness.com>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: Port Changes FAQ
Message-ID:  <20140615100636.GB23568@slackbox.erewhon.home>
In-Reply-To: <20140615022626.7111be2c.freebsd@edvax.de>
References:  <CANnsUMGxkDTxVnD_dq5L2SfXtppbYzJsB08kYm1h0zpFkkYMGQ@mail.gmail.com> <20140615022626.7111be2c.freebsd@edvax.de>

next in thread | previous in thread | raw e-mail | index | archive | help

--H+4ONPRPur6+Ovig
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Jun 15, 2014 at 02:26:26AM +0200, Polytropon wrote:
> On Sat, 14 Jun 2014 16:53:06 -0700, Chris Maness wrote:
> > I used to use ports, portsnap, portaudit, portupgrade, etc...
>=20
> No big changes here so far. The system's package database has
> been moved from pkg_* tools to the pkg (pkgng) system, but
> portupgrade or portmaster can deal with that fine. The data
> is now kept in a different database (sqlite). The pkg command
> also has an audit functionality now.
>=20
> https://wiki.freebsd.org/pkgng
>=20
> http://www.freebsd.org/cgi/man.cgi?query=3Dpkg&sektion=3D7
>=20
> http://www.freebsd.org/cgi/man.cgi?query=3Dpkg-audit&format=3Dhtml
>=20
> Additionally, CVS has been deprecated, so you use SVN to get
> the updates for your local ports tree (or simply use portsnap).

It seems that portsnap and freebsd-update have certain vulnerabilities that
make it vulnerable to e.g. MITM attacks;
http://lists.freebsd.org/pipermail/freebsd-questions/2014-April/257394.html

Some PRs have been filed about it as well, e.g;
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D188433
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D188428
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D188430
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D188432

So unless somebody finds the time to address these, it is not inconceivable
that portsnap will be retired after 8.x and 9.x reach EOL.

Updating ports with svnlite is easy. Initially do a check-out;

    # rm -rf /usr/ports
    # mkdir /usr/ports
    # svnlite checkout https://svn0.eu.FreeBSD.org/ports/head /usr/ports

(I'm using the European mirror as an example. Choose a relatively close mir=
ror.)

After that you can update the ports tree with;

    # svnlite update /usr/ports |& less

> > I
> > used to build everything from ports, #make install clean sorts of
> > commands.  Is this going away?
>=20
> It sill works as expected and is still supported. For few
> software, it's the only way of installation because no binary
> package exists (maybe you need specific compile-time options
> which are not the default options).
>=20
> So far, those are the "big changes" regarding software
> installation:
>=20
> 1. pkg (instead of pkg_* toolset)
>=20
> 2. clang (instead of gcc)
>=20
> 3. Subversion (instead of CVS)

There is another change coming; the support for installing Python packages =
for
multiple Python versions.

Roland
--=20
R.F.Smith                                   http://rsmith.home.xs4all.nl/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 5753 3324 1661 B0FE 8D93  FCED 40F6 D5DC A38A 33E0 (keyID: A38A33E0)

--H+4ONPRPur6+Ovig
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=9ogQ
-----END PGP SIGNATURE-----

--H+4ONPRPur6+Ovig--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20140615100636.GB23568>