git: c85a2539cd18 - main - oci: Install FreeBSD-pam in the runtime image
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 02 Sep 2026 16:20:12 UTC
The branch main has been updated by ivy:
URL: https://cgit.FreeBSD.org/src/commit/?id=c85a2539cd18bfc88d88547773d919e116b8bd6d
commit c85a2539cd18bfc88d88547773d919e116b8bd6d
Author: Lexi Winter <ivy@FreeBSD.org>
AuthorDate: 2026-09-02 16:19:32 +0000
Commit: Lexi Winter <ivy@FreeBSD.org>
CommitDate: 2026-09-02 16:19:32 +0000
oci: Install FreeBSD-pam in the runtime image
In 16.0/15.1, the PAM modules were split from FreeBSD-runtime into a
new FreeBSD-pam package. FreeBSD-runtime does not install FreeBSD-pam,
which means if a user starts from runtime, then installs sshd, sshd will
fail to authenticate users because of missing PAM modules.
Since FreeBSD-pam is relatively small (about 230kB on amd64), and is
already part of FreeBSD-set-minimal, add it to the runtime image as
well. Users who absolutely don't want this can still build their
own images without it.
MFC after: 1 week
Reviewed by: dfr
Reported by: Michael Johnson <ahze@ahze.net>
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D59194
---
release/tools/oci-image-runtime.conf | 1 +
1 file changed, 1 insertion(+)
diff --git a/release/tools/oci-image-runtime.conf b/release/tools/oci-image-runtime.conf
index db99e5640040..6061a9225a71 100644
--- a/release/tools/oci-image-runtime.conf
+++ b/release/tools/oci-image-runtime.conf
@@ -15,6 +15,7 @@ oci_image_build() {
rm ${workdir}/rootfs/usr/share/misc/termcap
install_packages ${abi} ${workdir} \
FreeBSD-runtime \
+ FreeBSD-pam \
FreeBSD-certctl \
FreeBSD-kerberos-lib \
FreeBSD-libarchive \