From owner-freebsd-ports@FreeBSD.ORG Fri Oct 11 16:58:29 2013 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 78282BB0 for ; Fri, 11 Oct 2013 16:58:29 +0000 (UTC) (envelope-from kimor79@yahoo.com) Received: from nm21.bullet.mail.bf1.yahoo.com (nm21.bullet.mail.bf1.yahoo.com [98.139.212.180]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 0C63E2375 for ; Fri, 11 Oct 2013 16:58:28 +0000 (UTC) Received: from [98.139.215.143] by nm21.bullet.mail.bf1.yahoo.com with NNFMP; 11 Oct 2013 16:58:21 -0000 Received: from [98.139.212.239] by tm14.bullet.mail.bf1.yahoo.com with NNFMP; 11 Oct 2013 16:58:21 -0000 Received: from [127.0.0.1] by omp1048.mail.bf1.yahoo.com with NNFMP; 11 Oct 2013 16:58:21 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 931108.47299.bm@omp1048.mail.bf1.yahoo.com Received: (qmail 38112 invoked by uid 60001); 11 Oct 2013 16:58:21 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1381510701; bh=2tpkjkAG6igRLfWOxC/xSLMWpZYw71oQhUJG7k769no=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=OM0Y+N7fsiE/IUCEKdJRsODd7+9/hRVgPWW4N5HMdQIYQ8j4J4NzfzZv3zaW6/ulkFmlsLA9bInHIk/+BFEt4KdK7AyawvzuWHGlXl4MYhvOP9cEnocb4dY7aRsSIwlFL8tX+QApYlWbMXoFzYmZFH9biI0ALGkPEkRmgLmnZp0= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=pwBqkWJ70pf9rymnL9+5UsSN/FrB4Jj2KapzCwS0DNz8o7T/8uSe8k8LZAP1xc6N9Pom5c4RgfOdvtCgStf66h11F1oPOYiwkicyNRxOzDvvOtP6Hs5kwiLRlO7pIMpYYj+PdtEAYRxpeSqdmSWm2In+p34CzoM/of5621cNt14=; X-YMail-OSG: CyH_.tEVM1lk.gHe7EYfugtnavXdhuOHhpWkmSAIBgs.XD1 DuhU9fV1yZqUJZ0I05p2VODlF3iAnziCtBX0Aurv2A3UVOQHmDBvw.DTBTJR yb5djVgatIhKkRTFV2YD9oU1I0AWEYOKGzP04o2A10PLraiCSLFZVOvPOoUe aSwwEoYiucNAAnA7bhGA86Ta2E4boCQoPF12fkxY7G8uQItlC857lOLaQSV9 VgAGfmb862O8pEPe_NmHNLWnJLn6yY6U9WgLaknoB2iOxzsQlxE9ctjD2TBn VgFl1HaUcVdGaCuy5pfiq7ktNTPeLvhb4LNunm6LqPUkz40kZkyntlBYZfBq WUeIBr9cdn74I8261z0K92rW6zKAiRfIC38EDogQyRInFDeIWyRdDmucXTr8 nG.ZOBIwmvk6.jTAkmPPYeH.h3IwKFEYGO9kqJqbR9JejAne0SjbuzhH.4K2 _D13ISoUMK2cLo27G0rHmgIksw0.wc4NAsBWLQCH9Xq0gvd0mgMuSulSVa.U vqAMs0wzoQ9_5Qbh.iaAs5E_8pfHbS4gAmGU.n3Qos_DQUZs.ryTRRzEd7_j fcC7amyMz8zq3t7NoI624QAUx.49v5URuCMVfZDJbXl_3zavUWCv8N0TSKAM 81BHqPCyUfGVf7AXl9BueCA-- Received: from [64.124.27.199] by web142806.mail.bf1.yahoo.com via HTTP; Fri, 11 Oct 2013 09:58:20 PDT X-Rocket-MIMEInfo: 002.001, SSBkb24ndCBxdWl0ZSBhZ3JlZSB3aXRoIHRoYXQgYmVpbmcgdGhlIGRlZmF1bHQgYnV0IEkgdW5kZXJzdGFuZC4gVGhlIHBhdGNoIHdvcmtzIGFzIGludGVuZGVkLiBUaGFua3MhCgoKVGhhbmtzCktpbW8KCgoKLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0tLQo.IEZyb206IEJyeWFuIERyZXdlcnkgPGJkcmV3ZXJ5QEZyZWVCU0Qub3JnPgo.IFRvOiBLaW1vIFJvc2VuYmF1bSA8a2ltb3I3OUB5YWhvby5jb20.OyAiZnJlZWJzZC1wb3J0c0BmcmVlYnNkLm9yZyIgPGZyZWVic2QtcG9ydHNAZnJlZWJzZC5vcmcBMAEBAQE- X-Mailer: YahooMailWebService/0.8.160.587 References: <1381473199.36649.YahooMailNeo@web142801.mail.bf1.yahoo.com> <5257DDA8.5080202@FreeBSD.org> Message-ID: <1381510700.37006.YahooMailNeo@web142806.mail.bf1.yahoo.com> Date: Fri, 11 Oct 2013 09:58:20 -0700 (PDT) From: Kimo Rosenbaum Subject: Re: poudriere and networking To: "freebsd-ports@freebsd.org" In-Reply-To: <5257DDA8.5080202@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: Bryan Drewery X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Kimo Rosenbaum List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2013 16:58:29 -0000 I don't quite agree with that being the default but I understand. The patch= works as intended. Thanks!=0A=0A=0AThanks=0AKimo=0A=0A=0A=0A----- Original= Message -----=0A> From: Bryan Drewery =0A> To: Kimo = Rosenbaum ; "freebsd-ports@freebsd.org" =0A> Cc: =0A> Sent: Friday, October 11, 2013 4:14 AM=0A> Subject= : Re: poudriere and networking=0A> =0A> On 10/11/2013 1:33 AM, Kimo Rosenba= um wrote:=0A>> Hello,=0A>> =0A>> I'm running poudriere-devel-3.0.99.20130= 927 on 9.1-RELEASE. I'm =0A> trying to build a private port which requires = downloading files after the =0A> extract target. However, it seems as thoug= h networking isn't available after =0A> post-fetch. I do have RESOLV_CONF s= et in poudriere.conf and cat'ing =0A> /etc/resolv.conf in post-patch shows = the correct contents. The build is able to =0A> run the fetch but once past= post-fetch I can't do any DNS lookups nor ping =0A> anything external. The= host itself can do those things. Also when I enter the =0A> jail via jexec= I can perform those things.=0A>> =0A>> Any ideas?=0A>> =0A>> Thanks=0A>>= Kimo=0A> =0A> This is done for security. During build, the code running i= s untrusted.=0A> We don't want it to reach out and scan/infect your network= during a build.=0A> =0A> I do understand you're building a private port th= ough. I would add a=0A> flag to override this per port, but I worry some po= rter would put it in=0A> their FreeBSD port where it does not belong.=0A> = =0A> You can apply a patch like this to your=0A> /usr/local/share/poudriere= /common.sh to work around the issue:=0A> =0A>> --- src/share/poudriere/com= mon.sh=0A>> +++ src/share/poudriere/common.sh=0A>> @@ -1402,14 +1402,10 @= @=0A>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 fi= =0A>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 retu= rn 1=0A>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 fi=0A>> =A0 =A0 = =A0 =A0 =A0 =A0 =A0 =A0 fi=0A>> =0A>> -=A0 =A0 =A0 =A0 =A0 =A0 =A0 if [ = "${phase}" =3D "checksum" ]; =0A> then=0A>> -=A0 =A0 =A0 =A0 =A0 =A0 =A0 = =A0 =A0 =A0 =A0 jstop=0A>> -=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 = jstart 0=0A> =0A>> -=A0 =A0 =A0 =A0 =A0 =A0 =A0 fi=0A>> =A0 =A0 =A0 =A0 = =A0 =A0 =A0 =A0 print_phase_footer=0A>> =0A>> =A0 =A0 =A0 =A0 =A0 =A0 =A0 = =A0 if [ "${phase}" =3D "checksum" ]; =0A> then=0A>> =A0 =A0 =A0 =A0 =A0 = =A0 =A0 =A0 =A0 =A0 =A0 =A0 mkdir -p ${mnt}/portdistfiles=0A>> =A0 =A0 =A0= =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 echo "DISTDIR=3D/portdistfiles" >> = =0A> ${mnt}/etc/make.conf=0A> =0A> =0A> -- =0A> Regards,=0A> Bryan Drewery= =0A>