-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/14/17 09:21, Theo de Raadt wrote:
>> AFAICS there is no way to build a release without upgrading the base system 
>> first, i.e. you have to have root privileges.
>> 
>> To keep things simple, I wonder if it would be possible to use these 
>> privileges to avoid the noperm partition?
> 
> noperm is now so well established, we have already forgotten the various 
> tricks to during the transition, even moreso since there wasn't one 
> transition it was done in steps.
> 

???

I would have guessed a simple

        if test "x$USER" != "xroot"; then
                echo "error: noperm partition wanted"
                exit 1
        fi

would do.

Using noperm to build stable I got

bash-4.4# mount
/dev/sd0a on / type ffs (local)
/dev/sd0e on /export type ffs (local, nodev, nosuid)
mfs:73715 on /dest type mfs (asynchronous, local, nodev, noexec, noperm, 
size=3145728 512-blocks)

bash-4.4# export DESTDIR=/dest; export RELEASEDIR=/export/releasedir
bash-4.4# cd /usr/src/etc && make release
:
:
cc -g -Werror -Wall -Wimplicit-function-declaration  -Wno-uninitialized 
-Wno-pointer-sign  -Wframe-larger-than=2047 -mcmodel=kernel -mno-red-zone 
-mno-sse2 -mno-sse -mno-3dnow  -mno-mmx -msoft-float -fno-omit-frame-pointer 
-ffreestanding -fno-pie -O2 -pipe -nostdinc -I/usr/src/sys
- -I/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -I/usr/src/sys/arch -DDDB 
-DDIAGNOSTIC -DKTRACE -DACCOUNTING -DKMEMSTATS -DPTRACE -DCRYPTO -DSYSVMSG 
-DSYSVSEM -DSYSVSHM -DUVM_SWAP_ENCRYPT -DFFS -DFFS2 -DFFS_SOFTUPDATES 
-DUFS_DIRHASH -DQUOTA -DEXT2FS -DMFS -DNFSCLIENT -DNFSSERVER -DCD9660 -DUDF
- -DMSDOSFS -DFIFO -DFUSE -DSOCKET_SPLICE -DTCP_SACK -DTCP_ECN -DTCP_SIGNATURE 
-DART -DINET6 -DIPSEC -DPPP_BSDCOMP -DPPP_DEFLATE -DPIPEX -DMROUTING -DMPLS 
-DBOOT_CONFIG -DUSER_PCICONF -DAPERTURE -DMTRR -DNTFS -DHIBERNATE -DPCIVERBOSE 
-DUSBVERBOSE -DWSDISPLAY_COMPAT_USL -DWSDISPLAY_COMPAT_RAWKBD
- -DWSDISPLAY_DEFAULTSCREENS="6" -DX86EMU -DONEWIREVERBOSE -DMULTIPROCESSOR 
-DMAXUSERS=80 -D_KERNEL -MD -MP  -c /usr/src/sys/conf/swapgeneric.c
sh /usr/src/sys/conf/newvers.sh
touch: version: Permission denied
/usr/src/sys/conf/newvers.sh[84]: cannot create version: Permission denied
*** Error 1 in /usr/src/sys/arch/amd64/compile/GENERIC.MP (Makefile:897 
'vers.o')
*** Error 1 in . (Makefile:20 'bsd.mp')
*** Error 1 in . (Makefile:267 'release-sets')
*** Error 1 in . (Makefile:260 'do-release')
*** Error 1 in /usr/src/etc (Makefile:244 'release')


> As we've said before, use a snapshot to jump over such changes.

There are stable snapshots? Good thing, I will check.


Thanx very much, keep on your good work
Harri

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEH2V614LbR/u1O+a1Cp4qnmbTgcsFAljwf+gACgkQCp4qnmbT
gct1bAf9H0p2cfaq2yfREf+7qWUtPblUHtaiCNifB7h9OlIVCE7svAuiMPiDrgwc
3AOTB8lJUN5AETqnyiLKZSLqpGek354aG0jwDzMQ0pte1v0sU0rCmjmw7WgZsmsF
63Jn9cU1jx7MgnH1AVWtpDXvInIuwoOg+7HryGphrejDo2WBiddsJuU8vx/I+o8u
GzhhHpp3V27HGZhZa417H+fwESI3KMuEhJRKSzOYsWSkl84qUXnovCvDgctFZdcu
n7ojlnjlTTFK54p5Bd6cEiDD5XhV0jtOLhxe4FT4tGA8wraplX3TD/fADNAvClja
39yHJ7Q0TARQYGHCVegs8pieURRknQ==
=cbl4
-----END PGP SIGNATURE-----

Reply via email to