From owner-freebsd-ports@FreeBSD.ORG Wed Sep 24 21:32:14 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0CAD7E2D for ; Wed, 24 Sep 2014 21:32:14 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C822DEE8 for ; Wed, 24 Sep 2014 21:32:13 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.9/8.14.9) with ESMTP id s8OLWD2W016921 for ; Wed, 24 Sep 2014 21:32:13 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.9/8.14.9/Submit) id s8OLWDVP016920 for freebsd-ports@freebsd.org; Wed, 24 Sep 2014 21:32:13 GMT (envelope-from bdrewery) Received: (qmail 85735 invoked from network); 24 Sep 2014 16:32:09 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 24 Sep 2014 16:32:09 -0500 Message-ID: <54233850.2070807@FreeBSD.org> Date: Wed, 24 Sep 2014 16:32:00 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.1 MIME-Version: 1.0 To: Rick Miller , freebsd-ports Subject: Re: Poudriere Build of pkg_* repos? References: In-Reply-To: OpenPGP: id=6E4697CF; url=http://www.shatow.net/bryan/bryan2.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Sep 2014 21:32:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 9/24/2014 3:35 PM, Rick Miller wrote: > Hi all, >=20 > Does the EOL of legacy pkg_* tools in FreeBSD Ports affect Poudriere's > ability to build legacy package repos? No. Poudriere still supports it as long as you're using an older ports tr= ee. >=20 > Poudriere was able to build a legacy pkg_* repo from a snapshot of Port= s > from around the time releng/10.0 received the patch for -p7, but it fai= led > to build a legacy repo from a snapshot taken today and instead built a > pkg(8) repo despite make.conf having WITHOUT_PKGNG=3Dyes. >=20 > Aside: Actually, it seemed to ignore the make.conf altogether as it > contains PERL_VERSION=3D5.14.4 and built 5.16 instead. It must be /usr/local/etc/poudriere.d/make.conf >=20 > Provided this is the case, what suggestions are there for patching toda= y's > bash remote execution vulnerability[1] in a version of Ports that can b= e > built into a legacy repo? Just apply the patch via files/ and use EXTRA_PATCHES: http://dan.langille.org/2014/06/10/freebsd-custom-port-patches-when-using= -poudriere/ >=20 > [1] http://seclists.org/oss-sec/2014/q3/650 >=20 --=20 Regards, Bryan Drewery --xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJUIzhQAAoJEDXXcbtuRpfPOIoH/iJ66Gnejekrh+6VKDVbMA3I ipMFfqhBr7V0pBaeRQNXnk2jFVDZz7TBogwbOLXkD1CHWayDgaadr/D6plJr/DjT rh9Q0/058leCD+z47yWHL2UMRcSJPz78S6UI0K3Q4CMaJhrGIpMGSyvmII7X/VtY SboWvBwknY3R/+teVzf4UCqzGUVa080iGbdOa4BCbyohkcngzqto2XQPFb84eO5z QzYZaFuZA65tyfXUKi7e9hOAr4O4fVTtnbZml/UAlri33LJlcfiIDPri0R2crNb3 hz7UtpNuYYbqWHoq/4kIaWiidleABeB7yhUpyEvz9JKUspXAnv9HbQhncdowqf0= =LE6E -----END PGP SIGNATURE----- --xTVrTHTccKeEdfM8Kb8b817dVrTfWXubT--