-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 04/14/17 09:21, Theo de Raadt wrote: >> AFAICS there is no way to build a release without upgrading the base system >> first, i.e. you have to have root privileges. >> >> To keep things simple, I wonder if it would be possible to use these >> privileges to avoid the noperm partition? > > noperm is now so well established, we have already forgotten the various > tricks to during the transition, even moreso since there wasn't one > transition it was done in steps. >
??? I would have guessed a simple if test "x$USER" != "xroot"; then echo "error: noperm partition wanted" exit 1 fi would do. Using noperm to build stable I got bash-4.4# mount /dev/sd0a on / type ffs (local) /dev/sd0e on /export type ffs (local, nodev, nosuid) mfs:73715 on /dest type mfs (asynchronous, local, nodev, noexec, noperm, size=3145728 512-blocks) bash-4.4# export DESTDIR=/dest; export RELEASEDIR=/export/releasedir bash-4.4# cd /usr/src/etc && make release : : cc -g -Werror -Wall -Wimplicit-function-declaration -Wno-uninitialized -Wno-pointer-sign -Wframe-larger-than=2047 -mcmodel=kernel -mno-red-zone -mno-sse2 -mno-sse -mno-3dnow -mno-mmx -msoft-float -fno-omit-frame-pointer -ffreestanding -fno-pie -O2 -pipe -nostdinc -I/usr/src/sys - -I/usr/src/sys/arch/amd64/compile/GENERIC.MP/obj -I/usr/src/sys/arch -DDDB -DDIAGNOSTIC -DKTRACE -DACCOUNTING -DKMEMSTATS -DPTRACE -DCRYPTO -DSYSVMSG -DSYSVSEM -DSYSVSHM -DUVM_SWAP_ENCRYPT -DFFS -DFFS2 -DFFS_SOFTUPDATES -DUFS_DIRHASH -DQUOTA -DEXT2FS -DMFS -DNFSCLIENT -DNFSSERVER -DCD9660 -DUDF - -DMSDOSFS -DFIFO -DFUSE -DSOCKET_SPLICE -DTCP_SACK -DTCP_ECN -DTCP_SIGNATURE -DART -DINET6 -DIPSEC -DPPP_BSDCOMP -DPPP_DEFLATE -DPIPEX -DMROUTING -DMPLS -DBOOT_CONFIG -DUSER_PCICONF -DAPERTURE -DMTRR -DNTFS -DHIBERNATE -DPCIVERBOSE -DUSBVERBOSE -DWSDISPLAY_COMPAT_USL -DWSDISPLAY_COMPAT_RAWKBD - -DWSDISPLAY_DEFAULTSCREENS="6" -DX86EMU -DONEWIREVERBOSE -DMULTIPROCESSOR -DMAXUSERS=80 -D_KERNEL -MD -MP -c /usr/src/sys/conf/swapgeneric.c sh /usr/src/sys/conf/newvers.sh touch: version: Permission denied /usr/src/sys/conf/newvers.sh[84]: cannot create version: Permission denied *** Error 1 in /usr/src/sys/arch/amd64/compile/GENERIC.MP (Makefile:897 'vers.o') *** Error 1 in . (Makefile:20 'bsd.mp') *** Error 1 in . (Makefile:267 'release-sets') *** Error 1 in . (Makefile:260 'do-release') *** Error 1 in /usr/src/etc (Makefile:244 'release') > As we've said before, use a snapshot to jump over such changes. There are stable snapshots? Good thing, I will check. Thanx very much, keep on your good work Harri -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEH2V614LbR/u1O+a1Cp4qnmbTgcsFAljwf+gACgkQCp4qnmbT gct1bAf9H0p2cfaq2yfREf+7qWUtPblUHtaiCNifB7h9OlIVCE7svAuiMPiDrgwc 3AOTB8lJUN5AETqnyiLKZSLqpGek354aG0jwDzMQ0pte1v0sU0rCmjmw7WgZsmsF 63Jn9cU1jx7MgnH1AVWtpDXvInIuwoOg+7HryGphrejDo2WBiddsJuU8vx/I+o8u GzhhHpp3V27HGZhZa417H+fwESI3KMuEhJRKSzOYsWSkl84qUXnovCvDgctFZdcu n7ojlnjlTTFK54p5Bd6cEiDD5XhV0jtOLhxe4FT4tGA8wraplX3TD/fADNAvClja 39yHJ7Q0TARQYGHCVegs8pieURRknQ== =cbl4 -----END PGP SIGNATURE-----