Re: [HEADSUP][CFT] pkgng beta1 is out
On 1/30/12 4:39 AM, Baptiste Daroussin wrote: Hi, pkgng has just reached the beta phase, and has now found its way to the ports tree (disabled by default). 1/ Why pkgng? the name sucks though it would be good to fix it before it's built in everywhere. like windows NT, which it is no longer NT. ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
On Tue, Jan 31, 2012 at 03:27:20AM +0100, Alberto Villa wrote: > On Tuesday 31 January 2012 00:52:25 Alberto Villa wrote: > > On Monday 30 January 2012 23:34:59 Yuri Pankov wrote: > > > The patch seems to have typos in it (usr_pkgng): > > > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L514 > > > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L528 > > > > Please, take the patch from here: > > https://github.com/xzhavilla/pkgng/blob/master/ports/portmaster.patch > > > > It should be pulled into the main repository soon. > > Just a quick note to say that I pushed some updates (now it works with > portmaster 3.11 *only*) which have yet to be checked by pkgng masters, so, > unless you want to test the new version, please get it from here: > https://github.com/xzhavilla/pkgng/blob/64ec7f352964b186b08aaa6b480afce8da625cb4/ports/portmaster.patch > -- > Alberto Villa, FreeBSD committer > http://people.FreeBSD.org/~avilla > > Heisenberg may have slept here. This has been merged thank you very much, portmaster 3.11 seems to be full working for me. regards, Bapt pgpYZi9dzlAA3.pgp Description: PGP signature
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 10:16:00PM -0800, Julian Elischer wrote: > On 1/30/12 4:39 AM, Baptiste Daroussin wrote: > > Hi, > > > > pkgng has just reached the beta phase, and has now found its way to the > > ports tree (disabled by default). > > > > 1/ Why pkgng? > > > the name sucks though > it would be good to fix it before it's built in everywhere. > > like windows NT, which it is no longer NT. > Well if you have better proposition, pkgng is just for now a code name :) the binary itself the library and the port are named simply pkg. bsd.pkgng.mk remain pkgng because when we will have pkg_install dead it will be merged into bsd.port.mk regards, Bapt pgpBpSsoAhLiN.pgp Description: PGP signature
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 9:32 AM, Baptiste Daroussin wrote: > On Mon, Jan 30, 2012 at 09:21:37AM -0800, Jos Backus wrote: > > On Mon, Jan 30, 2012 at 9:10 AM, Baptiste Daroussin >wrote: > > > > No pkg query can't do this, but this would be a nice addition (something > > > like > > > raw output for info or query) I do like the idea, please create an > issue > > > on the > > > github :)) > > > > > > regards, > > > > Bapt > > > > > > > I just created issue #128, thanks Baptiste! > > > > Cheers, > > Jos > > The time you did that I implemented it :) > > pkg info -R will be in beta2. > > Merci beaucoup :) Salut, Jos > Thank you, > regards, > Bapt > -- Jos Backus jos at catnook.com ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
On Tuesday 31 January 2012 00:52:25 Alberto Villa wrote: > On Monday 30 January 2012 23:34:59 Yuri Pankov wrote: > > The patch seems to have typos in it (usr_pkgng): > > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L514 > > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L528 > > Please, take the patch from here: > https://github.com/xzhavilla/pkgng/blob/master/ports/portmaster.patch > > It should be pulled into the main repository soon. Just a quick note to say that I pushed some updates (now it works with portmaster 3.11 *only*) which have yet to be checked by pkgng masters, so, unless you want to test the new version, please get it from here: https://github.com/xzhavilla/pkgng/blob/64ec7f352964b186b08aaa6b480afce8da625cb4/ports/portmaster.patch -- Alberto Villa, FreeBSD committer http://people.FreeBSD.org/~avilla Heisenberg may have slept here. signature.asc Description: This is a digitally signed message part.
Re: [HEADSUP][CFT] pkgng beta1 is out
Baptiste Daroussin writes:
[...]
> It has been done with scripting features in mind: 'pkg query' will allow
> you to query almost everything from the pkgng database in a script friendly
> way.
How to query the date a package was installed? I often manually remove
my packages based on time interval or time + package name after
finishing some task. It can involve pruning lots of deps for software
not yet in ports.
$ find /var/db/pkg/ -name +DESC -exec \
stat -f "%Sm %N" -t '%Y-%m-%d %H:%M' {} + \
| sed 's|/+.*||; s|/.*/||' \
| sort -r
| less
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
On Tuesday 31 January 2012 00:52:25 Alberto Villa wrote: > Set use_pkgng=yes in /usr/local/etc/portmaster.conf. Sorry, portmaster.rc. -- Alberto Villa, FreeBSD committer http://people.FreeBSD.org/~avilla The government of the United States is not in any sense founded on the Christian Religion -- George Washington signature.asc Description: This is a digitally signed message part.
Re: [HEADSUP][CFT] pkgng beta1 is out
On Monday 30 January 2012 23:34:59 Yuri Pankov wrote: > The patch seems to have typos in it (usr_pkgng): > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L514 > https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L528 Please, take the patch from here: https://github.com/xzhavilla/pkgng/blob/master/ports/portmaster.patch It should be pulled into the main repository soon. > And most stupid question for today - how do I actually tell portmaster > to use pkgng after applying the patch? Set use_pkgng=yes in /usr/local/etc/portmaster.conf. -- Alberto Villa, FreeBSD committer http://people.FreeBSD.org/~avilla Depend on the rabbit's foot if you will, but remember, it didn't help the rabbit. -- R. E. Shay signature.asc Description: This is a digitally signed message part.
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 01:39:30PM +0100, Baptiste Daroussin wrote: [...] > to use pkgng: > > echo WITH_PKGNG=yes >> /etc/make.conf > make -C /usr/ports/ports-mgmt/pkg install clean > > Some links: > http://wiki.FreeBSD.org/pkgng > http://github.com/pkgng/pkgng > > Note that on github you can find a patch for portmaster (against 3.10) The patch seems to have typos in it (usr_pkgng): https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L514 https://github.com/pkgng/pkgng/blob/master/ports/portmaster.patch#L528 And most stupid question for today - how do I actually tell portmaster to use pkgng after applying the patch? Thanks, Yuri pgpWRBGFuloAU.pgp Description: PGP signature
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 09:21:37AM -0800, Jos Backus wrote: > On Mon, Jan 30, 2012 at 9:10 AM, Baptiste Daroussin wrote: > > No pkg query can't do this, but this would be a nice addition (something > > like > > raw output for info or query) I do like the idea, please create an issue > > on the > > github :)) > > > > regards, > > Bapt > > > > I just created issue #128, thanks Baptiste! > > Cheers, > Jos The time you did that I implemented it :) pkg info -R will be in beta2. Thank you, regards, Bapt pgpF9e9Zt2SvC.pgp Description: PGP signature
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 9:10 AM, Baptiste Daroussin wrote: No pkg query can't do this, but this would be a nice addition (something > like > raw output for info or query) I do like the idea, please create an issue > on the > github :)) > > regards, Bapt > I just created issue #128, thanks Baptiste! Cheers, Jos -- Jos Backus jos at catnook.com ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
Hi Baptiste, This looks great! On Mon, Jan 30, 2012 at 4:39 AM, Baptiste Daroussin wrote: > > Sample output of pkg info: > > $ pkg info -f libreoffice: > Name : libreoffice > Version: 3.4.4 > Origin : editors/libreoffice > Prefix : /usr/local > Categories : editors > Licenses : MPL & LGPL3 > Maintainer : off...@freebsd.org > WWW: http://www.libreoffice.org/ > Comment: Full integrated office productivity suite > Options: >DEBUG: off >GNOME: off >GTK: on >JAVA: off >KDE4: off >MMEDIA: off >PYUNO: off >SDK: off >SYSTRAY: off >WEBDAV: off > Flat size : 319 MB > Description: > LibreOffice is the free power-packed Open Source personal productivity > suite for > Windows, Macintosh and Linux, that gives you six feature-rich applications > for > all your document production and data processing needs: Writer, Calc, > Impress, > Draw, Math and Base. > > WWW:http://www.libreoffice.org/ > > I haven't checked if `pkg query' can do this yet, but how about emitting the above output in YAML as well? It would still be very readable for humans. Anyway, I'll try this out. Jos -- Jos Backus jos at catnook.com ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
On Mon, Jan 30, 2012 at 08:43:58AM -0800, Jos Backus wrote: > Hi Baptiste, > > This looks great! > > On Mon, Jan 30, 2012 at 4:39 AM, Baptiste Daroussin wrote: > > > > > Sample output of pkg info: > > > > $ pkg info -f libreoffice: > > Name : libreoffice > > Version: 3.4.4 > > Origin : editors/libreoffice > > Prefix : /usr/local > > Categories : editors > > Licenses : MPL & LGPL3 > > Maintainer : off...@freebsd.org > > WWW: http://www.libreoffice.org/ > > Comment: Full integrated office productivity suite > > Options: > >DEBUG: off > >GNOME: off > >GTK: on > >JAVA: off > >KDE4: off > >MMEDIA: off > >PYUNO: off > >SDK: off > >SYSTRAY: off > >WEBDAV: off > > Flat size : 319 MB > > Description: > > LibreOffice is the free power-packed Open Source personal productivity > > suite for > > Windows, Macintosh and Linux, that gives you six feature-rich applications > > for > > all your document production and data processing needs: Writer, Calc, > > Impress, > > Draw, Math and Base. > > > > WWW:http://www.libreoffice.org/ > > > > > > > I haven't checked if `pkg query' can do this yet, but how about emitting > the above output in YAML as well? It would still be very readable for > humans. > > Anyway, I'll try this out. > No pkg query can't do this, but this would be a nice addition (something like raw output for info or query) I do like the idea, please create an issue on the github :)) regards, Bapt pgp2ikQVyXJQe.pgp Description: PGP signature
Re: Sudo security advisory
On Mon, Jan 30, 2012 at 10:56:44AM -0500, Mike Tancsa wrote: > Hi, > > > http://www.gratisoft.us/sudo/alerts/sudo_debug.html > > >From the advisory, > > Successful exploitation of the bug will allow a user to run arbitrary > commands as root. > Exploitation of the bug does *not* require that the attacker be listed > in the sudoers file. As such, we strongly suggest that affected sites > upgrade from affected sudo versions as soon as possible. Turns out my son is taking a longer than usual nap, which gave me enough time to get the update in the tree and a VuXML entry in for it. Please wait for them to mirror out. If you have any untrusted users you really should update quickly. If there are any problems please let me know. -- WXS ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: Sudo security advisory
On Mon, Jan 30, 2012 at 10:56:44AM -0500, Mike Tancsa wrote: > Hi, > > > http://www.gratisoft.us/sudo/alerts/sudo_debug.html > > >From the advisory, > > Successful exploitation of the bug will allow a user to run arbitrary > commands as root. > Exploitation of the bug does *not* require that the attacker be listed > in the sudoers file. As such, we strongly suggest that affected sites > upgrade from affected sudo versions as soon as possible. I was aware of this last night but was not planning on touching a computer until I'm officially off vacation tomorrow. However, I think I have enough time today to get the updated version in the tree along with a VuXML entry. Update your ports tree later tonight and hopefully it will be in there. -- WXS ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Sudo security advisory
Hi, http://www.gratisoft.us/sudo/alerts/sudo_debug.html >From the advisory, Successful exploitation of the bug will allow a user to run arbitrary commands as root. Exploitation of the bug does *not* require that the attacker be listed in the sudoers file. As such, we strongly suggest that affected sites upgrade from affected sudo versions as soon as possible. ---Mike -- --- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, m...@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/ ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: databases/postgresql91-server - fails to compile with selected options
On 30 January 2012 14:53, Volodymyr Kostyrko wrote: > Volodymyr Kostyrko wrote: >> >> I'm in process of upgrading FreeBSD to 9.0 on my servers. Today I found >> that databases/postgresql91-server stops building with my selected >> options. The one that pains me most is absence of pam integration. > > > I've found who to blame: > > "/usr/ports/Mk/bsd.port.mk", line 1258: warning: > OPTIONSFILE:/var/db/ports/postgresql/options UNIQUENAME:postgresql > "/usr/ports/Mk/bsd.port.mk", line 5935: warning: > OPTIONSFILE:/var/db/ports/postgresql91/options UNIQUENAME:postgresql91 > "/usr/ports/Mk/bsd.port.mk", line 6056: warning: > OPTIONSFILE:/var/db/ports/postgresql91/options UNIQUENAME:postgresql91 > > 4 days ago +crees added UNIQUNAME declaration to port and now it actually > fails to find correct configuration. > > Dunno how to fix though... D'oh! The Makefile defines DISTVERSION, but UNIQUENAME depends on PORTVERSION, which isn't set at that point. This means that UNIQUENAME changes halfway through bsd.port.mk. I'm really sorry about that; I'm not sure how it went unnoticed. Thank you for the report, I'll fix it when I get home. For now, just replace the PORTVERSION in UNIQUENAME with DISTVERSION, it'll work then. Chris ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
[joernc...@phenoelit.de: [Full-disclosure] Advisory: sudo 1.8 Format String Vulnerability]
Please update this port.
- Forwarded message from joernchen of Phenoelit
-
Date: Mon, 30 Jan 2012 14:56:26 +0100
From: joernchen of Phenoelit
To: full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com
Subject: [Full-disclosure] Advisory: sudo 1.8 Format String Vulnerability
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:9.0) Gecko/20111224
Thunderbird/9.0.1
Hi,
FYI, see attached.
cheers,
joernchen
--
joernchen ~ Phenoelit
~ C776 3F67 7B95 03BF 5344
http://www.phenoelit.de ~ A46A 7199 8B7B 756A F5AC
Phenoelit Advisory
[ Authors ]
joernchen
Phenoelit Group (http://www.phenoelit.de)
[ Affected Products ]
sudo 1.8.0 - 1.8.3p1 (http://sudo.ws)
[ Vendor communication ]
2012-01-24 Send vulnerability details to sudo maintainer
2012-01-24 Maintainer is embarrased
2012-01-27 Asking maintainer how the fixing goes
2012-01-27 Maintainer responds with a patch and a release date
of 2012-01-30 for the patched sudo and advisory
2012-01-30 Release of this advisory
[ Description ]
Observe src/sudo.c:
void
sudo_debug(int level, const char *fmt, ...)
{
va_list ap;
char *fmt2;
if (level > debug_level)
return;
/* Backet fmt with program name and a newline to make it a single
write */
easprintf(&fmt2, "%s: %s\n", getprogname(), fmt);
va_start(ap, fmt);
vfprintf(stderr, fmt2, ap);
va_end(ap);
efree(fmt2);
}
Here getprogname() is argv[0] and by this user controlled. So
argv[0] goes to fmt2 which then gets vfprintf()ed to stderr. The
result is a Format String vulnerability.
[ Example ]
/tmp $ ln -s /usr/bin/sudo %n
/tmp $ ./%n -D9
*** %n in writable segment detected ***
Aborted
/tmp $
A note regarding exploitability: The above example shows the result
of FORTIFY_SOURCE which makes explotitation painful but not
impossible (see [0]). Without FORTIFY_SOURCE the exploit is straight
forward:
1. Use formatstring to overwrite the setuid() call with setgid()
2. Trigger with formatstring -D9
3. Make use of SUDO_ASKPASS and have shellcode in askpass script
4. As askpass will be called after the formatstring has
overwritten setuid() the askepass script will run with uid 0
5. Enjoy the rootshell
[ Solution ]
Update to version 1.8.3.p2
[ References ]
[0] http://www.phrack.org/issues.html?issue=67&id=9
[ end of file ]
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- End forwarded message -
--
;s =;
___
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: databases/postgresql91-server - fails to compile with selected options
Volodymyr Kostyrko wrote: I'm in process of upgrading FreeBSD to 9.0 on my servers. Today I found that databases/postgresql91-server stops building with my selected options. The one that pains me most is absence of pam integration. I've found who to blame: "/usr/ports/Mk/bsd.port.mk", line 1258: warning: OPTIONSFILE:/var/db/ports/postgresql/options UNIQUENAME:postgresql "/usr/ports/Mk/bsd.port.mk", line 5935: warning: OPTIONSFILE:/var/db/ports/postgresql91/options UNIQUENAME:postgresql91 "/usr/ports/Mk/bsd.port.mk", line 6056: warning: OPTIONSFILE:/var/db/ports/postgresql91/options UNIQUENAME:postgresql91 4 days ago +crees added UNIQUNAME declaration to port and now it actually fails to find correct configuration. Dunno how to fix though... -- Sphinx of black quartz judge my vow. ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
databases/postgresql91-server - fails to compile with selected options
Hello. I'm in process of upgrading FreeBSD to 9.0 on my servers. Today I found that databases/postgresql91-server stops building with my selected options. The one that pains me most is absence of pam integration. 1. When compiling port today it yields me this binary: /usr/local/bin/postgres: libintl.so.9 => /usr/local/lib/libintl.so.9 (0x800cf3000) libxml2.so.5 => /usr/local/lib/libxml2.so.5 (0x800efc000) libssl.so.6 => /usr/lib/libssl.so.6 (0x80124c000) libcrypto.so.6 => /lib/libcrypto.so.6 (0x80149d000) libm.so.5 => /lib/libm.so.5 (0x801837000) libc.so.7 => /lib/libc.so.7 (0x801a55000) libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x801d8e000) libz.so.6 => /lib/libz.so.6 (0x802089000) 2. Port compiled on 23 Jan on other machine looks like: /usr/local/bin/postgres: libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x800ce7000) libintl.so.9 => /usr/local/lib/libintl.so.9 (0x800ef) libxml2.so.5 => /usr/local/lib/libxml2.so.5 (0x8010f8000) libpam.so.5 => /usr/lib/libpam.so.5 (0x801462000) libicuuc.so.48 => /usr/local/lib/libicuuc.so.48 (0x80166a000) libicui18n.so.48 => /usr/local/lib/libicui18n.so.48 (0x8019cf000) libssl.so.6 => /usr/lib/libssl.so.6 (0x801d93000) libcrypto.so.6 => /lib/libcrypto.so.6 (0x801fe4000) libm.so.5 => /lib/libm.so.5 (0x80237e000) libc.so.7 => /lib/libc.so.7 (0x80259c000) libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x8028d5000) libz.so.6 => /lib/libz.so.6 (0x802bcc000) libicudata.so.48 => /usr/local/lib/libicudata.so.48 (0x802de2000) libstdc++.so.6 => /usr/local/lib/gcc46/libstdc++.so.6 (0x80419e000) libgcc_s.so.1 => /usr/local/lib/gcc46/libgcc_s.so.1 (0x8044a2000) 3. Any machine yields binary without extra libraries - no icu, no pam. compilation succeeds. I have tested that in a clean chroot - ports haven't bothered to compile icu even it was selected in options. Can anyone reproduce this behavior? To test you need: cd /usr/ports/databases/postgresql91-server make config # and select pam support make ldd /tmp/ports/usr/ports/databases/postgresql91-server/work/postgresql-9.1.2/src/backend/postgres The last command should list libpam.so.5 as a dependancy. -- Sphinx of black quartz judge my vow. ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
Re: [HEADSUP][CFT] pkgng beta1 is out
Cool ! wen 2012/1/30 Baptiste Daroussin > Hi, > > pkgng has just reached the beta phase, and has now found its way to the > ports tree (disabled by default). > > 1/ Why pkgng? > > > Our current pkg_install tools are showing their age, are hard to maintain, > and they lack features: > > > ___ freebsd-ports@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ports To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
[HEADSUP][CFT] pkgng beta1 is out
Hi, pkgng has just reached the beta phase, and has now found its way to the ports tree (disabled by default). 1/ Why pkgng? Our current pkg_install tools are showing their age, are hard to maintain, and they lack features: - missing metadata - no upgrade support - no repository support - no fine dependency tracking - no modern binary package management - and many others Having old tools makes it hard to improve the ports infrastructure, as a result lots of hacks have found their way into the different Mk/bsd.*.mk files to work around pkg_install limitations plus there are lots of hacks in the packages metadata itself such as @comment which are not comments, and so forth. We have people writing tools to improve the situation (portmaster and portupgrade to name two), but they are limited by and can become quite complicated to maintain because of the pkg_install limitations. 2/ What it is? -- It is a tool that is designed to replace pkg_install and provide modern features to advance package management on FreeBSD. It has been done with compatibility in mind. Most of the ports tree are able to build on pkgng without modification (21500 successful packages is the highest pkgng score so far). The missing ones will be easily fixed with pkgng in ports. It has been done with ease of migration in mind. It is easy to migrate from pkg_install to pkgng. (Please note that going backwards is not possible.) It has been done with FreeBSD features in mind: it supports chroot, jails, rcng, etc. It has been done with scripting features in mind: 'pkg query' will allow you to query almost everything from the pkgng database in a script friendly way. It has been done with improvement in mind: it doesn't require a privileged account to create packages with root files in it; it is already able to package from a stage/fakeroot/name_it_like_you_want directory; it is also able to fake the package creation to directly install the package from that fake/stage/whatever directory. It has been done with human readability in mind: the new metadata is stored in YAML format; the plist keywords can be extended with YAML (for the ports). It has been our thinking that the pkg binary is not able to please everyone's needs, so it has been written on top of a library which can be used by any other third party tools. (Think about packagekit, or ruby binding for portupgrade for example, or any other usage like these). pkgng is the result of my long studies and reflection about packaging (studying what is done elsewhere: apt/dpkg, yum/rpm, pacman, aix, solaris, netbsd, openbsd) and how to have something that tries to take the good ideas from them, but tries not to take the *over engineered* complicated parts. And most importantly, tries to do it the FreeBSD way: which means it should work with the ports tree as-is (and help improve it in the future). 3/ Roadmap -- We plan a very long beta phase with lots of beta versions, released as often as possible to ease testing and help improve the tool as much as possible. The goal, now that we are in beta is to not break anything for users, which means that pkgng will be able to safely upgrade itself. (No real breakage occurred during the alpha phase; expect even less in beta.) Most of the big features are implemented, so now if you have a revolutionary idea that breaks everything, it won't find its way into pkgng 1.0. You can still provide it for pkgng 2.0. 1.0 is not revolutionary because of the way that it is full of workarounds to allow compatibility with the current ports tree. At some future time (TBD), once we have dropped pkg_install support, things will be able to move forward faster. pkgng will live in the ports tree, so it will evolve with the infrastructure, allowing us not to have to wait for the EOL of a release to be able to move forward to new features. The library API is currently not considered stable; it will be designated stable as of pkgng 2.0. Therefore, if you are going to use the library in a third party project, you can expect some breakage from time to time. Of course, we will avoid breakage as much as possible. The plan is to have pkgng 1.0 ready and rock solid for 10.0-RELEASE and 9.1-RELEASE. The more testers/contributors we have, the faster we can go, and the faster we go, the faster we can drop pkg_install and improve our port infrastructure. (Note: due to limitations in FreeBSD 7.x, we do not plan to backport there.) 4/ pkgng itself pkg add: add packages the old way (should be avoided by users) pkg audit: audit the installed packages for vulnerabilities pkg autoremove: interactively propose packages to be removed that were installed automatically (as a dependency) and not depended on anymore pkg check: check the installed packages database, prompting for inconsistency and proposing to try to fix it pkg clean: cleanup the package cache from binary installation (from repositories) pkg delet
Current unassigned ports problem reports
(Note: an HTML version of this report is available at http://www.freebsd.org/cgi/query-pr-summary.cgi?category=ports .) The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description o ports/164627powerdns port should include boost-libs as lib_depends o ports/164624New ports: www/py-django-cms Content management system o ports/164622New port: www/py-django-sekizai Block templating syste o ports/164611[maintainer update] devel/dyncall o ports/164608New port: sysutils/fbsdmon f ports/164597[patch] security/py-pycrypto: update to 2.5 o ports/164593fix ports/UPDATING o ports/164591[maintainer-update] audio/shoutcast: Add support for C o ports/164587[maintainer update] textproc/ibus: update gtk.immodule f ports/164586[PATCH] www/trac-gitplugin: [tarball refreshed from gi o ports/164581[new port] cad/linux-eagle6 o ports/164580Fix multimedia/mplayer builds on 8.2-RELEASE-pX and ea f ports/164563games/sumwars can't run o ports/164559x11-fonts/webfonts port compile fails as requires xcb- f ports/164551lang/clay does not build on i386 f ports/164540[PATCH] x11-themes/icons-tango: Fix fetching o ports/164539[patch] Update for audio/libmtp (from 1.0.6 to 1.1.1) f ports/164533net/isc-dhcp41-server and net/isc-dhcp42-server eat CP o ports/164507[MAINTAINER] japanese/ibus-skk: update to 1.4.0 o ports/164502[patch] news/sabnzbdplus not starting on boot o ports/164484[NEW PORT] japanese/libskk: A library to deal with Jap f ports/164464port sysutils/dvdisaster does not recognize drives on f ports/164463[PATCH] mail/qpopper: fix RC_SUBR f ports/164408gtranscode port created o ports/164403[patch] Mk/bsd.licenses.mk: bring back --hline o ports/164376New port: graphics/opennurbs allows to transfer 3D geo o ports/164373[patch] lang/sdcc-devel: update to 3.1.2.2012.01.22 o ports/164364New port: multimedia/banshee-devel Music management an o ports/164355misc/gpt will not install using pkg_add o ports/164345Mk/bsd.licenses.mk framework not suitable for linuxula o ports/164309New port: graphics/pinta Simple drawing/painting progr o ports/164306update mail/mailagent to 3.1.77 and utmpx fix o ports/164277new port: mail/roundcube-automatic_addressbook s ports/164242net/openafs port breaks with KERNCONFDIR and include o ports/164199Ports fail to acknowlegde newly created users f ports/164181[PATCH] www/xxxterm: Fix ssl_ca_file path and style o ports/164177audio/squeezeboxserver should require mysql 5.0 server o ports/164060net/ucarp doesn't work on FreeBSD 9.0-PRERELEASE o ports/164055sysutils/zfs-periodic: Test if scrubbing is in process f ports/164029[PATCH] graphics/bmeps fix build with databases/gdbm o ports/164015devel/php5-pinba: pinba crahes PHP when built with pro f ports/164012[patch] x11/dmenu version upgrade 4.5 and Xft support o ports/163963Mk/bsd.port.mk, math/spooles-mpich, science/mpqc-mpich o ports/163955input packet for interface are counted twice o ports/163948Python incompatibility on ports: deskutils/calibre f ports/163933Update security/zenmap to same vers as nmap o ports/163886New port: net/drawterm Plan9 cpu client o ports/163872devel/ioncube and distfiles o ports/163861new port: devel/art A Resource Tracer (A resource trac o ports/163850New port: cad/linux-bricscad o ports/163806New port: devel/arduino-lib-irremote: A Multi-Protocol f ports/163800net-mgmt/nagiosql: All files are Windows-converted f ports/163766multimedia/openshot fails to find "main" and "gtk" mod o ports/163616[new port] games/quadra: A tetris like multiuser actio o ports/163583[patch] x11/kdelibs3 conflicts with openssl-1 o ports/163467Ports using python 2.7 and "waf" intermittently hang o f ports/163441databases/couchdb multiple port installation issues. o ports/163314[maintainer update] www/ocsigen to version 2.0.2 o ports/163205graphics/gauche-gl won't build with gauche 0.9.2 f ports/163126security/sshguard changed from syslog.conf to daemon b o ports/163084net-mgmt/bsnmptools fails to build o bin/162681 ports pkg_add(1): new installer does not add doc packages o ports
