From nobody Fri Oct 09 16:41:40 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4j1Xh426tTz6vk7f for ; Fri, 09 Oct 2026 16:41:56 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Received: from mail-ot1-f50.google.com (mail-ot1-f50.google.com [209.85.210.50]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4j1Xh30P25z4dZ2 for ; Fri, 09 Oct 2026 16:41:55 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=none; arc=pass ("google.com:s=arc-20260327:i=1"); spf=pass (mx1.freebsd.org: domain of carpeddiem@gmail.com designates 209.85.210.50 as permitted sender) smtp.mailfrom=carpeddiem@gmail.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none) Received: by mail-ot1-f50.google.com with SMTP id 46e09a7af769-81ae6aefdceso12224a34.0 for ; Fri, 09 Oct 2026 09:41:55 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1791564114; cv=none; d=google.com; s=arc-20260327; b=RNoFoP2lBYRAg8p2DjSO0SEJAYDzGqErESSCkJOICX3Uk1AjKxUY1ohJpI4LRtKFfo fHHch9lSs27npI+SoXWRDEU6aYsG4OFFo2LOTZ0JszOynSgPT56vL3/cbg3RUmlbPwxy /Drd4OA/lZ5YdFZFXtfjiHoHUkWctgVr7jArwAyyjThjbVnJnsFCsqG1mS3HlHoo6xjx i12Ewq+UDkd7E3hbb9FwY07noDzNEP9jDkGRDTtNmklAmmjrxXJpxDVJU3+RJWRE8Jmk p0ibnWeRfmf0zpSLXbQ7mMrW/hD0I1Tbc8gYffCp1GrrNnzKv95FaYDlK32EDMtbFdBn WMfg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version; bh=mwFy1gOB3tp/odR0SIj8Gl407quvZB1Y0Ay9SHU3zik=; fh=6QvDxGvN/oZeUGteQ6KqOJr9iiZYmX9hdvTs+N9eHo8=; b=Ml6dScvKrbDZCo/R/07IuWfyYqCuAqX/eOfZ2/3mZe/qYnOvFcFAlBPNwgHQJ9MQm9 Y5Ji1az54eW0qhMkWzjlrkqpohPXrjyvTHkYsyWNiXax1twft4fzbRnZX66U2TFxt1Lg 5yZz2DW0fkR5kdWJBqdcMrdbJDv6G6peDE4sLdd8Xn8xLSf9kUnTdNOwqD5YbxoEJ6RC 7hCploG5CIz1n5bxxoBd+jPomYHi8TjY+f1gYtCfKTXvkRuGabgCmsSk63M4z7ghy6uZ wYjaB9/Oy8GJStcA2uzIZvLKcD4wPF8HTgbQCa/Eej7iSUrArZf2vaWXqgEXfAjx8sec zITw==; darn=freebsd.org ARC-Authentication-Results: i=1; mx.google.com; arc=none X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791564114; x=1792168914; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=mwFy1gOB3tp/odR0SIj8Gl407quvZB1Y0Ay9SHU3zik=; b=Eeps/q1pEUEZi+0X0C7d3yHqGguEMJrDejAAmLHVAWfKxRSdnCFrcn59/Rc6CKigLW sea0Z6/CpZ8m5zZk4K2lVCUuxik9ujakgA3PP5CXDvHW3bk0WW97TfVpJgSLCyi68mgw smQjK76MifspW7rik0WHNQoUoFCiipKHKaU/BugtUz9MDOUV0jCauyjaPxn473uANcCZ 7F2vHlJ7n807xZfXghpGDKGrrdCPFa7gHV8rfW8q0VEZZbjq5ofd6xerzi5VucI+5U3h Sz7zS60AXiv9sE10hmHZGDOp85oynC6tutdZRlGsEFzV59KxysUo2kN7CIpiMgP/00pw YGvg== X-Forwarded-Encrypted: i=1; AKwUvBxd/Kpaqm7VLWJy1RbXBXujkW6+b02+6kCMeiDx064O9OJS7bii0/s4Zk9sMlx6biNlDQLMXq63aXqaVN0s0+P0Pwn7@freebsd.org X-Gm-Message-State: AFuF++n7JSC6spSe7OD7eqqEPN3P5uY8Kbiv4slGgeJWktLpKYHmGBGd mjpuJeE12+KJubcNff+mckIEbt5ESxVZNF/KX91YcVyYXy93ex49jp79h8C6V6PykBzLNQdJX7S zBpL+f5M3zf1h/YOwHNqw2kfQI4sqMLo= X-Gm-Gg: AYBFou1q+r2Bo+eO4WcQBz3y/yHmAgXpJQVSo/ueHwBDUadwPYO4QsHPEV6cyAOVZCg cgg7WqSj4TcYoCzQyM3DfN0b3GVpjeVK+uffYSIm7Aum9rsKXigNoa0yp72j4uW8aXIXBeJEWi4 p8Z78waeAHonqH/CbdhSnkEVKku0xQ4EbzWnmLVmHgyPDm8YSlCVo+hB2OFTuTzm5+qXxh87cPr 5epJk5+dcNnRrYJ82c8LfTssyrNjSVnIwiauSnddGUqtbzXqrVnJb+Z7lTYOCL0nghYjN7bF6sS 2hbx0U8dPMHXMQI+eJ+lxHnIKBvQTLf0PEKleoA29g8uWwgq6+L8wEHNwNQCQxXu4bt2o7KeYmN HyL5MyxJDwqk29beLbXMuIQ== X-Received: by 2002:a05:6808:138e:b0:4e8:bce4:993d with SMTP id 5614622812f47-50c4e683baemr1727692b6e.11.1791564113820; Fri, 09 Oct 2026 09:41:53 -0700 (PDT) List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 References: <6ac9028e.3a17d.35333feb@gitrepo.freebsd.org> In-Reply-To: From: Ed Maste Date: Fri, 9 Oct 2026 12:41:40 -0400 X-Gm-Features: AclHuK89dizySCPr5TvdW2ljygEcM9jD3Uxv55IEhOENkv59G-4x8dBGWoJPwXM Message-ID: Subject: Re: git: 24d5194306b5 - main - build: Emit a warning for build targets run as root To: Jessica Clarke Cc: "src-committers@freebsd.org" , "dev-commits-src-all@freebsd.org" , "dev-commits-src-main@freebsd.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: - X-Spamd-Result: default: False [-1.00 / 15.00]; ARC_ALLOW(-1.00)[google.com:s=arc-20260327:i=1]; FORGED_SENDER(0.30)[emaste@freebsd.org,carpeddiem@gmail.com]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none]; RWL_MAILSPIKE_GOOD(-0.10)[209.85.210.50:from]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FREEFALL_USER(0.00)[carpeddiem]; RCVD_COUNT_ONE(0.00)[1]; TO_DN_SOME(0.00)[]; R_DKIM_NA(0.00)[]; TO_DN_EQ_ADDR_SOME(0.00)[]; MLMMJ_DEST(0.00)[dev-commits-src-all@freebsd.org]; FROM_NEQ_ENVFROM(0.00)[emaste@freebsd.org,carpeddiem@gmail.com]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[209.85.210.50:from]; TO_MATCH_ENVRCPT_SOME(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[dev-commits-src-all@freebsd.org]; MISSING_XM_UA(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_THREE(0.00)[4] X-Rspamd-Queue-Id: 4j1Xh30P25z4dZ2 On Fri, 9 Oct 2026 at 11:22, Jessica Clarke wrote: > > Whilst this is surely where we eventually want to end up, as it is best > practice to only use root when necessary, I=E2=80=99m not sure this is > something we should be warning about just yet, Yes, this is perhaps premature, and ought not be a .warning. What do you think of leaving it as .info? It is already helping to identify tooling and documentation that we need to update :) > especially given the > official updating-from-source instructions in the handbook [1] and > equivalent in-tree UPDATING instructions have you do everything as root > (well, they don=E2=80=99t say that explicitly, but there=E2=80=99s no men= tion of > switching users, the handbook uses make kernel which has to run > buildkernel as root like installkernel, and the buildworld is amongst > everything else (ditto buildkernel for UPDATING)). As of just now the handbook no longer references `make kernel`, but it is a fair point that the examples omit mention of using sudo or switching between an unprivileged build user and installing as root. So far on the TODO we've got: - documenting a suggested non-root workflow - nanobsd - etcupdate