Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 Sep 2025 22:16:41 +0000
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        "freebsd-current@freebsd.org" <freebsd-current@freebsd.org>
Subject:   Re: Plan for "distribution set" deprecation
Message-ID:  <3ily2wedv7oue6qjjv2b47c37umnlqw363whvpohu6rrpz3hsg@a6g6mgjuy334>
In-Reply-To: <aNHD3RXadj1EMUlf@amaryllis.le-fay.org>
References:  <fd63e8df-3209-4b83-9dc5-5df4ec690bbf@freebsd.org> <xtkzcgocu5uwhqqghp27k4wjqu3cl24y4n4jcwms43bj6udm5e@wmnwfbucjpod> <aNHD3RXadj1EMUlf@amaryllis.le-fay.org>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On Mon, Sep 22, 2025 at 10:47:09PM +0100, Lexi Winter wrote:
> Shawn Webb wrote in <xtkzcgocu5uwhqqghp27k4wjqu3cl24y4n4jcwms43bj6udm5e@wmnwfbucjpod>:
> > Thank you for your (and others!) work on this. I'm hoping that this
> > bug can be resolved before PKGBASE is enabled by default for release
> > generation: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287877
> 
> can you please show the full process you're using to build the release
> image, including any make(1) settings (KERNCONF, etc.)?

$ sudo make real-release WITH_DVD=1 NODOC=1 NOSRC=1 NOPORTS=1 NODOCS=1 PKGBASE=1

Default KERNCONF on HardenedBSD is HARDENEDBSD. This build keeps that
default.

> 
> i am also curious if the patch at https://reviews.freebsd.org/D52638
> makes any difference.

I've ran out of time for the day, but will give this a shot tomorrow
or later in the week. I'll report back.

> 
> > I have confirmed that the pkgbase repo that gets built does indeed
> > include the right kernel package. Hence why I'm puzzled why that lua
> > assertion is being tripped.
> 
> please also show the (names of) the kernel packages you have in your
> release repository, i.e. the one in <objdir>/release/pkgbase-repo
> which is generated during the release build.

==== BEGIN OUTPUT ====
$ pkg repos
LocalBase: { 
    url             : "file:///usr/obj/usr/src/amd64.amd64/release/pkgbase-repo/FreeBSD:16:amd64/latest",
    enabled         : yes,
    priority        : 0
  }
$ pkg rquery -U -r LocalBase '%n' | grep HardenedBSD-kernel-hardenedbsd
HardenedBSD-kernel-hardenedbsd
HardenedBSD-kernel-hardenedbsd-dbg
==== END OUTPUT ====

That `pkg rquery` command is effectively the same as what that lua
script is executing, which is why I'm extra confused.

Thanks,

-- 
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:  shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
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=GaJX
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3ily2wedv7oue6qjjv2b47c37umnlqw363whvpohu6rrpz3hsg>