Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jan 2025 19:01:10 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 283340] build: distributeworld -DNO_ROOT does not set SSL cert links uname / gname in METALOG
Message-ID:  <bug-283340-227-nYOSZG0OIt@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-283340-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-283340-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D283340

--- Comment #4 from Jessica Clarke <jrtc27@freebsd.org> ---
> The metalog file should have a:
>     /set uname=3Droot gname=3Dwheel
> Definition at the beginning of the file that should prevent this from hap=
pening.

No it shouldn't. That would hide potential bugs. If you want anything it sh=
ould
be to have a validation pass that every entry has uname and gname set.

> At any rate, the patch applied in 10fa3f2518d4 ("certctl: Set METALOG own=
ership to root:wheel") broke my NanoBSD NO_ROOT builds (WIP) because the pa=
ssword database file does not yet exist when certctl.sh is rehashed:
>     install: Can't open `/usr/obj/jlduran/obj/_.w/etc/group': No such fil=
e or directory
>     install: Unable to use user and group databases in `/usr/obj/jlduran/=
obj/_.w/etc': No such file or directory
>=20
> One =E2=80=9Chack=E2=80=9D that could work is to remove the -N flag from =
the INSTALLFLAGS.
> Or perhaps move the rehash later in the Makefile?

Yes and no; the patch is broken. certctl.sh rehash is run during installwor=
ld,
but the destination won't have the relevant files until distribution is run,
which at least for cheribuild comes after installworld, and I assume is true
for your build too. Makefile.inc1 uses -N ${.CURDIR}/etc, i.e. the *source*
tree's, DB. I think certctl.sh needs to do the same during installworld.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-283340-227-nYOSZG0OIt>