From owner-svn-ports-all@freebsd.org Sat Apr 7 11:01:09 2018 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 60018FA186E; Sat, 7 Apr 2018 11:01:09 +0000 (UTC) (envelope-from riggs@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 112086D488; Sat, 7 Apr 2018 11:01:09 +0000 (UTC) (envelope-from riggs@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 0AB4A1FE05; Sat, 7 Apr 2018 11:01:09 +0000 (UTC) (envelope-from riggs@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w37B18p1096445; Sat, 7 Apr 2018 11:01:08 GMT (envelope-from riggs@FreeBSD.org) Received: (from riggs@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w37B18b4096442; Sat, 7 Apr 2018 11:01:08 GMT (envelope-from riggs@FreeBSD.org) Message-Id: <201804071101.w37B18b4096442@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: riggs set sender to riggs@FreeBSD.org using -f From: Thomas Zander Date: Sat, 7 Apr 2018 11:01:08 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r466714 - head/net/traefik X-SVN-Group: ports-head X-SVN-Commit-Author: riggs X-SVN-Commit-Paths: head/net/traefik X-SVN-Commit-Revision: 466714 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Apr 2018 11:01:09 -0000 Author: riggs Date: Sat Apr 7 11:01:08 2018 New Revision: 466714 URL: https://svnweb.freebsd.org/changeset/ports/466714 Log: Update to upstream release 1.5.4 (bugfix release) Details: - Update to upstream release 1.5.4, changelog see https://github.com/containous/traefik/releases/tag/v1.5.4 - Install sample configuration file that allows to start traefik out of the box without configuration tweaks - Add pkg-message; includes a note on how to accomplish binding to privileged ports MFH: 2018Q2 Added: head/net/traefik/pkg-message (contents, props changed) Modified: head/net/traefik/Makefile head/net/traefik/distinfo Modified: head/net/traefik/Makefile ============================================================================== --- head/net/traefik/Makefile Sat Apr 7 09:33:32 2018 (r466713) +++ head/net/traefik/Makefile Sat Apr 7 11:01:08 2018 (r466714) @@ -1,9 +1,8 @@ # $FreeBSD$ PORTNAME= traefik -PORTVERSION= 1.5.3 +PORTVERSION= 1.5.4 DISTVERSIONPREFIX= v -PORTREVISION= 1 CATEGORIES= net MASTER_SITES= LOCAL/riggs/${PORTNAME}:webui DISTFILES= ${PORTNAME}-webui-static-${PORTVERSION}${EXTRACT_SUFX}:webui @@ -51,6 +50,10 @@ TRAEFIK_LDARGS= -ldflags "-s -w \ post-extract: @${MV} ${WRKDIR}/static ${WRKSRC} + # Install a sample configuration file which works by default + # without manual tweaking + ${REINPLACE_CMD} -e 's|:80|:8088|' \ + -e 's|\[docker|# \[docker|' ${WRKSRC}/traefik.sample.toml do-build: @cd ${WRKSRC}/src/github.com/containous/traefik; \ Modified: head/net/traefik/distinfo ============================================================================== --- head/net/traefik/distinfo Sat Apr 7 09:33:32 2018 (r466713) +++ head/net/traefik/distinfo Sat Apr 7 11:01:08 2018 (r466714) @@ -1,5 +1,5 @@ -TIMESTAMP = 1520701876 -SHA256 (traefik-webui-static-1.5.3.tar.gz) = ddc0d6311b892e4dee6342068181a3365ef46e0cff1c804b26f18ebb6a271167 -SIZE (traefik-webui-static-1.5.3.tar.gz) = 647897 -SHA256 (containous-traefik-v1.5.3_GH0.tar.gz) = b6876834290dd3f916c78f6810597d40dbbd461e1d1d25fd30d31cd99b9c062b -SIZE (containous-traefik-v1.5.3_GH0.tar.gz) = 7828055 +TIMESTAMP = 1523094469 +SHA256 (traefik-webui-static-1.5.4.tar.gz) = 879b95fd31ef6813155a90903e2bc6be6d1266e8bf7a76c45f00679890c719c3 +SIZE (traefik-webui-static-1.5.4.tar.gz) = 649631 +SHA256 (containous-traefik-v1.5.4_GH0.tar.gz) = d07999a03fb2732945d10d4f476db0cccd5c0df53020c5988cf99318936fe79e +SIZE (containous-traefik-v1.5.4_GH0.tar.gz) = 7978182 Added: head/net/traefik/pkg-message ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/net/traefik/pkg-message Sat Apr 7 11:01:08 2018 (r466714) @@ -0,0 +1,16 @@ +============================================================== + +Note that traefik starts as unpriviliged user. Thus, it cannot +bind to privileged ports (by default, ports below 1024) and +will exit when configured to do so. + +If traefik should serve ports in the privileged range, there +are options to achieve this: +- Have traffic bind to an unprivileged port and use the + packet filter configuration to redirect requests to the + desired privileged port to the unprivileged port in + traefik's configuration file e.g. the rdr rules in pf(4). +- The mac_portacl kernel module allows unprivileged processes + to bind to privileged ports. + +==============================================================