On 02/20/13 17:08, Patrick M. Hausen wrote:
Hello,

we use NanoBSD to build the software installations for our hosting platform
and I'm trying to better automate the process of building packages.

Poudriere looked like an interesting tool to me, so I tried it. Quite painless,
but two questions currently remain:

To me it looks like Poudriere populates the build jail/chroot from release
tarballs fetched from an FTP server - but I'd rather use, say, 8.3p6 as
the build platform as well as the one at runtime. At ~300+ installed ports
I simply do not know if anything links statically against base system libraries
and I want to catch all security updates included in RELENG_X_Y.
How would I go about that?

I'm not sure I get what you ask. You can make poudriere fetch sources from any subversion branch/tag and compile those, instead of using the distribution files. For example:

poudriere jail -c -j 91releng -v releng/9.1 -m svn

will fetch sources from the 9.1 security fix branch with all the latest security fixes, compile those and crate a new jail.


Second, how do I specify build time options that are not available via the
dialog most ports use for "make config"? Currently we use an ad hoc shell
script that simply installs all the ports I want, and the line for e.g. Apache 
reads:

cd /usr/ports/www/apache22 && make -DBATCH -DPROXY=on -DPROXY_HTTP=on 
-DSUEXEC=on -DSUEXEC_DOCROOT=/var/apache -DSUEXEC_LOGFILE=/var/apache/GLOBAL/suexec_log 
install

I can enable all options that simply taken an "on" setting, but what about
the paths for suexec? Obviously they are critical to the operation of our 
servers.

I think your best bet is using customized make.conf files in /usr/local/etc/poudriere.d.

This is documented well in the CUSTOMIZATION section of the poudriere(8) man page.

for example you could create a file make.conf there with the above options defined and all jails would read it.

BTW be aware that ports using OPTINSng will prefer their own syntax for defining their options in make.conf.

i.e. OPTIONS_SET+= XFT OPENSSL


If this is the wrong list, I can of course take the discussion to -ports or
anything else more appropriate. The Poudriere wiki doesn't mention
external ressources besides IRC.

--
Guido Falsi <m...@madpilot.net>
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"

Reply via email to