git: 31d00ac6c9ec - main - packages: Add a base-jail set
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 25 Sep 2025 18:25:26 UTC
The branch main has been updated by ivy:
URL: https://cgit.FreeBSD.org/src/commit/?id=31d00ac6c9ec342312ca4075d2e6dc0a68b5263d
commit 31d00ac6c9ec342312ca4075d2e6dc0a68b5263d
Author: Lexi Winter <ivy@FreeBSD.org>
AuthorDate: 2025-09-25 17:31:38 +0000
Commit: Lexi Winter <ivy@FreeBSD.org>
CommitDate: 2025-09-25 18:25:09 +0000
packages: Add a base-jail set
This is base, but without packages which are not generally useful
in jails. The following packages are excluded:
* Support for hardware not present in a jail:
acpi, apm, bluetooth, ccdconfig, console-tools, cxgbe-tools,
efi-tools, fd, hostapd, mlx-tools, nvme-tools, wpa
* Kernel facilities that don't work in a jail:
dtrace, dwatch, ggate, hast, iscsi, libcuse, smbutils
All library packages are included in base-jail, even if they might not
work, because the user may have executables linked with them.
While here, remove the set-minimal dependency from set-devel, since
this will cause unnecessary packages to be installed in jails. This
means users will need to install set-devel in addition to their base
set (minimal or base), which bsdinstall already handles correctly.
Add a license to all the set UCL files, so people can redistribute them.
MFC after: 6 hours
Reviewed by: manu
Differential Revision: https://reviews.freebsd.org/D52719
---
release/packages/sets/base-dbg.ucl | 18 +++++++++++++
release/packages/sets/base-jail-dbg.ucl | 34 ++++++++++++++++++++++++
release/packages/sets/base-jail.ucl | 37 +++++++++++++++++++++++++++
release/packages/sets/base.ucl | 18 +++++++++++++
release/packages/sets/devel-dbg.ucl | 25 +++++++++++++-----
release/packages/sets/devel.ucl | 25 +++++++++++++-----
release/packages/sets/kernels-dbg.ucl | 18 +++++++++++++
release/packages/sets/kernels.ucl | 18 +++++++++++++
release/packages/sets/lib32-dbg.ucl | 18 +++++++++++++
release/packages/sets/lib32.ucl | 18 +++++++++++++
release/packages/sets/minimal-dbg.ucl | 18 +++++++++++++
release/packages/sets/minimal-jail-dbg.ucl | 18 +++++++++++++
release/packages/sets/minimal-jail.ucl | 18 +++++++++++++
release/packages/sets/minimal.ucl | 18 +++++++++++++
release/packages/sets/src.ucl | 18 +++++++++++++
release/packages/sets/tests.ucl | 18 +++++++++++++
release/packages/ucl/acct-all.ucl | 4 +++
release/packages/ucl/atf-all.ucl | 4 +++
release/packages/ucl/audit-all.ucl | 4 +++
release/packages/ucl/autofs-all.ucl | 4 +++
release/packages/ucl/bhyve-all.ucl | 4 +++
release/packages/ucl/blocklist-all.ucl | 4 +++
release/packages/ucl/bsdconfig-all.ucl | 4 +++
release/packages/ucl/bsdinstall-all.ucl | 4 +++
release/packages/ucl/bsnmp-all.ucl | 4 +++
release/packages/ucl/csh-all.ucl | 4 +++
release/packages/ucl/dma-all.ucl | 4 +++
release/packages/ucl/ee-all.ucl | 4 +++
release/packages/ucl/examples-all.ucl | 4 +++
release/packages/ucl/ftp-all.ucl | 4 +++
release/packages/ucl/games-all.ucl | 4 +++
release/packages/ucl/gssd-all.ucl | 4 +++
release/packages/ucl/inetd-all.ucl | 4 +++
release/packages/ucl/ipf-all.ucl | 4 +++
release/packages/ucl/ipfw-all.ucl | 4 +++
release/packages/ucl/jail-all.ucl | 4 +++
release/packages/ucl/kerberos-all.ucl | 4 +++
release/packages/ucl/kerberos-kdc-all.ucl | 4 +++
release/packages/ucl/kyua-all.ucl | 4 +++
release/packages/ucl/lib9p-all.ucl | 4 +++
release/packages/ucl/libarchive-all.ucl | 4 +++
release/packages/ucl/libbegemot-all.ucl | 4 +++
release/packages/ucl/libblocksruntime-all.ucl | 4 +++
release/packages/ucl/libbsdstat-all.ucl | 4 +++
release/packages/ucl/libbsm-all.ucl | 4 +++
release/packages/ucl/libcasper-all.ucl | 4 +++
release/packages/ucl/libcompat-all.ucl | 4 +++
release/packages/ucl/libcompiler_rt-all.ucl | 4 +++
release/packages/ucl/libcuse-all.ucl | 4 +++
release/packages/ucl/libdwarf-all.ucl | 4 +++
release/packages/ucl/libevent1-all.ucl | 4 +++
release/packages/ucl/libexecinfo-all.ucl | 4 +++
release/packages/ucl/libipt-all.ucl | 4 +++
release/packages/ucl/libldns-all.ucl | 4 +++
release/packages/ucl/liblzma-all.ucl | 4 +++
release/packages/ucl/libmagic-all.ucl | 4 +++
release/packages/ucl/libmilter-all.ucl | 4 +++
release/packages/ucl/libpathconv-all.ucl | 4 +++
release/packages/ucl/librpcsec_gss-all.ucl | 4 +++
release/packages/ucl/librss-all.ucl | 4 +++
release/packages/ucl/libsdp-all.ucl | 4 +++
release/packages/ucl/libsqlite3-all.ucl | 4 +++
release/packages/ucl/libstdbuf-all.ucl | 4 +++
release/packages/ucl/libstdthreads-all.ucl | 4 +++
release/packages/ucl/libthread_db-all.ucl | 4 +++
release/packages/ucl/libucl-all.ucl | 4 +++
release/packages/ucl/libvgl-all.ucl | 4 +++
release/packages/ucl/libvmmapi-all.ucl | 4 +++
release/packages/ucl/liby-all.ucl | 4 +++
release/packages/ucl/libyaml-all.ucl | 4 +++
release/packages/ucl/lp-all.ucl | 4 +++
release/packages/ucl/natd-all.ucl | 4 +++
release/packages/ucl/netmap-all.ucl | 4 +++
release/packages/ucl/nfs-all.ucl | 4 +++
release/packages/ucl/ntp-all.ucl | 4 +++
release/packages/ucl/openssl-all.ucl | 4 +++
release/packages/ucl/pf-all.ucl | 4 +++
release/packages/ucl/pmc-all.ucl | 4 +++
release/packages/ucl/quotacheck-all.ucl | 4 +++
release/packages/ucl/rcmds-all.ucl | 4 +++
release/packages/ucl/rdma-all.ucl | 4 +++
release/packages/ucl/rip-all.ucl | 4 +++
release/packages/ucl/sendmail-all.ucl | 4 +++
release/packages/ucl/ssh-all.ucl | 4 +++
release/packages/ucl/tcpd-all.ucl | 4 +++
release/packages/ucl/telnet-all.ucl | 4 +++
release/packages/ucl/unbound-all.ucl | 4 +++
release/packages/ucl/yp-all.ucl | 4 +++
88 files changed, 611 insertions(+), 14 deletions(-)
diff --git a/release/packages/sets/base-dbg.ucl b/release/packages/sets/base-dbg.ucl
index c34e8b575834..d9eeb2c49677 100644
--- a/release/packages/sets/base-dbg.ucl
+++ b/release/packages/sets/base-dbg.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Base system debug symbols (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/base-jail-dbg.ucl b/release/packages/sets/base-jail-dbg.ucl
new file mode 100644
index 000000000000..7996b9afbb21
--- /dev/null
+++ b/release/packages/sets/base-jail-dbg.ucl
@@ -0,0 +1,34 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+comment = "Base jail system debug symbols (metapackage)"
+
+desc = <<EOD
+This metapackage installs debugging symbols for the base jail system.
+EOD
+
+deps {
+ "set-minimal-jail-dbg" {
+ version = "${VERSION}"
+ origin = "base"
+ },
+ "set-devel-dbg" {
+ version = "${VERSION}"
+ origin = "base"
+ }
+}
diff --git a/release/packages/sets/base-jail.ucl b/release/packages/sets/base-jail.ucl
new file mode 100644
index 000000000000..e6c52349d3cb
--- /dev/null
+++ b/release/packages/sets/base-jail.ucl
@@ -0,0 +1,37 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+comment = "Base jail system (metapackage)"
+
+vital = true
+
+desc = <<EOD
+This metapackage installs the complete base system, excluding packages which
+are not generally useful in a jail(8) environment.
+EOD
+
+deps {
+ "set-minimal-jail" {
+ version = "${VERSION}"
+ origin = "base"
+ },
+ "set-devel" {
+ version = "${VERSION}"
+ origin = "base"
+ }
+}
diff --git a/release/packages/sets/base.ucl b/release/packages/sets/base.ucl
index 2d94ff4f4f2e..7b86450ae5b2 100644
--- a/release/packages/sets/base.ucl
+++ b/release/packages/sets/base.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Base system (metapackage)"
vital = true
diff --git a/release/packages/sets/devel-dbg.ucl b/release/packages/sets/devel-dbg.ucl
index c3fcd9806272..f454bd1d634d 100644
--- a/release/packages/sets/devel-dbg.ucl
+++ b/release/packages/sets/devel-dbg.ucl
@@ -1,13 +1,24 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Development tools debugging symbols (metapackage)"
desc = <<EOD
This metapackage installs debugging symbols for the base system compiler and
toolchain.
EOD
-
-deps {
- "set-minimal-dbg" {
- version = "${VERSION}"
- origin = "base"
- },
-}
diff --git a/release/packages/sets/devel.ucl b/release/packages/sets/devel.ucl
index 08914a85a5b4..befa9a6e2e4c 100644
--- a/release/packages/sets/devel.ucl
+++ b/release/packages/sets/devel.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Development tools (metapackage)"
vital = true
@@ -6,10 +24,3 @@ desc = <<EOD
This metapackage installs development support for the base system, including
compilers, toolchain utilities, header files, and static libraries.
EOD
-
-deps {
- "set-minimal" {
- version = "${VERSION}"
- origin = "base"
- },
-}
diff --git a/release/packages/sets/kernels-dbg.ucl b/release/packages/sets/kernels-dbg.ucl
index cf789c29d35a..ecc775a99e08 100644
--- a/release/packages/sets/kernels-dbg.ucl
+++ b/release/packages/sets/kernels-dbg.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Base system kernels debugging symbols (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/kernels.ucl b/release/packages/sets/kernels.ucl
index a57bd5f16905..04ecee83e291 100644
--- a/release/packages/sets/kernels.ucl
+++ b/release/packages/sets/kernels.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Base system kernels (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/lib32-dbg.ucl b/release/packages/sets/lib32-dbg.ucl
index 12722510dc94..33d0b61b445c 100644
--- a/release/packages/sets/lib32-dbg.ucl
+++ b/release/packages/sets/lib32-dbg.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "32-bit compatibility library debugging symbols (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/lib32.ucl b/release/packages/sets/lib32.ucl
index b23ae15d00ae..85263e2097c4 100644
--- a/release/packages/sets/lib32.ucl
+++ b/release/packages/sets/lib32.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "32-bit compatibility libraries (metapackage)"
vital = true
diff --git a/release/packages/sets/minimal-dbg.ucl b/release/packages/sets/minimal-dbg.ucl
index 606394001696..aa2034c90548 100644
--- a/release/packages/sets/minimal-dbg.ucl
+++ b/release/packages/sets/minimal-dbg.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Basic multi-user system debugging symbols (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/minimal-jail-dbg.ucl b/release/packages/sets/minimal-jail-dbg.ucl
index 3f7df227d3a9..1af963737f08 100644
--- a/release/packages/sets/minimal-jail-dbg.ucl
+++ b/release/packages/sets/minimal-jail-dbg.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Basic multi-user jail debugging symbols (metapackage)"
desc = <<EOD
diff --git a/release/packages/sets/minimal-jail.ucl b/release/packages/sets/minimal-jail.ucl
index 04e71912898c..ad722e79bd7f 100644
--- a/release/packages/sets/minimal-jail.ucl
+++ b/release/packages/sets/minimal-jail.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Basic multi-user jail system (metapackage)"
vital = true
diff --git a/release/packages/sets/minimal.ucl b/release/packages/sets/minimal.ucl
index f2338f4c2e3b..37e7df8e7e68 100644
--- a/release/packages/sets/minimal.ucl
+++ b/release/packages/sets/minimal.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "Basic multi-user system (metapackage)"
vital = true
diff --git a/release/packages/sets/src.ucl b/release/packages/sets/src.ucl
index 7ab94eb420df..997335a19768 100644
--- a/release/packages/sets/src.ucl
+++ b/release/packages/sets/src.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "System source code"
vital = yes
diff --git a/release/packages/sets/tests.ucl b/release/packages/sets/tests.ucl
index 07b463fb7d69..3829dae11b3e 100644
--- a/release/packages/sets/tests.ucl
+++ b/release/packages/sets/tests.ucl
@@ -1,3 +1,21 @@
+/*
+ * SPDX-License-Identifier: ISC
+ *
+ * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
comment = "System test suite"
vital = yes
diff --git a/release/packages/ucl/acct-all.ucl b/release/packages/ucl/acct-all.ucl
index a96e3cc08471..f4c7119af798 100644
--- a/release/packages/ucl/acct-all.ucl
+++ b/release/packages/ucl/acct-all.ucl
@@ -29,3 +29,7 @@ lastcomm(1) command to view this information. However, system accounting
is not intended as a security auditing mechanism; use the OpenBSM auditing
system provided in the $PKG_NAME_PREFIX-audit package for that.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/atf-all.ucl b/release/packages/ucl/atf-all.ucl
index 4d4bf8b6b69b..3014163c95bd 100644
--- a/release/packages/ucl/atf-all.ucl
+++ b/release/packages/ucl/atf-all.ucl
@@ -33,3 +33,7 @@ test programs in a variety of languages. These libraries all offer similar
functionality and any test program written with them exposes a consistent user
interface.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/audit-all.ucl b/release/packages/ucl/audit-all.ucl
index c7c437d24476..43074b3bf299 100644
--- a/release/packages/ucl/audit-all.ucl
+++ b/release/packages/ucl/audit-all.ucl
@@ -42,3 +42,7 @@ system.
This packages provides the auditing daemon auditd(8) and various utilities
used to manage the auditing system and work with audit data.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/autofs-all.ucl b/release/packages/ucl/autofs-all.ucl
index a51292e78faf..63261b9ce8d1 100644
--- a/release/packages/ucl/autofs-all.ucl
+++ b/release/packages/ucl/autofs-all.ucl
@@ -27,3 +27,7 @@ or to provide automated access to NFS servers via the /net mountpoint.
This package provides the automountd(8) daemon which is responsible for
managing this, as well as the management utility automount(8).
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/bhyve-all.ucl b/release/packages/ucl/bhyve-all.ucl
index ac250b0f2ad4..c4e450a47934 100644
--- a/release/packages/ucl/bhyve-all.ucl
+++ b/release/packages/ucl/bhyve-all.ucl
@@ -40,3 +40,7 @@ loader.
An example script is also provided in /usr/share/examples/bhyve/vmrun.sh
which can be used to run simple virtual machines.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/blocklist-all.ucl b/release/packages/ucl/blocklist-all.ucl
index 6acc6c548103..6e94b3822cf0 100644
--- a/release/packages/ucl/blocklist-all.ucl
+++ b/release/packages/ucl/blocklist-all.ucl
@@ -26,3 +26,7 @@ system packet filter.
blacklistd(8) relies on each network daemon to report access attempts, so
only daemons which have had blacklist support added will work.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/bsdconfig-all.ucl b/release/packages/ucl/bsdconfig-all.ucl
index ba34e5b96fe9..944dc0a259da 100644
--- a/release/packages/ucl/bsdconfig-all.ucl
+++ b/release/packages/ucl/bsdconfig-all.ucl
@@ -25,3 +25,7 @@ configuration, including services, networking and disks.
This package also provides sysrc(8), a command-line utility for managing
the rc.conf(5) configuration.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/bsdinstall-all.ucl b/release/packages/ucl/bsdinstall-all.ucl
index cfa303bc2ba4..2e01cbcb51ca 100644
--- a/release/packages/ucl/bsdinstall-all.ucl
+++ b/release/packages/ucl/bsdinstall-all.ucl
@@ -35,3 +35,7 @@ bsdinstall is used for installation of new systems, both for system setup from
installation media, e.g., CD-ROMs, and for use on live systems to prepare VM
images and jails.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/bsnmp-all.ucl b/release/packages/ucl/bsnmp-all.ucl
index 683b6ff51a53..88a777b3181d 100644
--- a/release/packages/ucl/bsnmp-all.ucl
+++ b/release/packages/ucl/bsnmp-all.ucl
@@ -40,3 +40,7 @@ Protocol). It is intended to serve only the absolute basic MIBs and
implement all other MIBs through loadable modules. In this way the
bsnmpd can be used in unexpected ways.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/csh-all.ucl b/release/packages/ucl/csh-all.ucl
index a158b5cd4fcb..787c43bdb82b 100644
--- a/release/packages/ucl/csh-all.ucl
+++ b/release/packages/ucl/csh-all.ucl
@@ -38,3 +38,7 @@ interactive login shell and a shell script command processor. It includes
a command-line editor, programmable word completion, spelling correction,
a history mechanism, job control, and a C-like syntax.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/dma-all.ucl b/release/packages/ucl/dma-all.ucl
index 9abc83e8ee60..7b52c48a6def 100644
--- a/release/packages/ucl/dma-all.ucl
+++ b/release/packages/ucl/dma-all.ucl
@@ -46,3 +46,7 @@ systems, nor act as a mail exchanger for other hosts. If an SMTP server
is required, or when more advanced mail routing is needed, consider using
the $PKG_NAME_PREFIX-sendmail package instead.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/ee-all.ucl b/release/packages/ucl/ee-all.ucl
index 2caa658c40f3..fbad921e7ef8 100644
--- a/release/packages/ucl/ee-all.ucl
+++ b/release/packages/ucl/ee-all.ucl
@@ -23,3 +23,7 @@ The Easy Editor, ee(1), is a simple, user-friendly text editor. It provides
a full-screen editing interface similar to vi(1), but is easier to learn for
new users.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/examples-all.ucl b/release/packages/ucl/examples-all.ucl
index fe7ce1c461b4..027c65427924 100644
--- a/release/packages/ucl/examples-all.ucl
+++ b/release/packages/ucl/examples-all.ucl
@@ -24,3 +24,7 @@ The examples are provided as self-contained C source code.
Some useful graphics data related to the "Beastie" mascot are also provided.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/ftp-all.ucl b/release/packages/ucl/ftp-all.ucl
index a8eac7b57946..285bf72529b5 100644
--- a/release/packages/ucl/ftp-all.ucl
+++ b/release/packages/ucl/ftp-all.ucl
@@ -22,3 +22,7 @@ desc = <<EOD
The ftp(1) utility connects to a remote system implementing the Internet FTP
protocol (RFC 959) to upload and download files.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/games-all.ucl b/release/packages/ucl/games-all.ucl
index a4636c32153a..80339ef6cdea 100644
--- a/release/packages/ucl/games-all.ucl
+++ b/release/packages/ucl/games-all.ucl
@@ -26,3 +26,7 @@ Games distributed with the system:
* caesar(6) and rot13(6) implement a trivial (and easily broken) text
encryption system called a Caesar cipher.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/gssd-all.ucl b/release/packages/ucl/gssd-all.ucl
index 60d976bfa82c..dfd2958d143e 100644
--- a/release/packages/ucl/gssd-all.ucl
+++ b/release/packages/ucl/gssd-all.ucl
@@ -28,3 +28,7 @@ to fetch authentication data such as Kerberos tickets from userland.
This daemon is required when using Kerberos authentication with NFS.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/inetd-all.ucl b/release/packages/ucl/inetd-all.ucl
index bf70f8a7458d..be1e44fbaa3d 100644
--- a/release/packages/ucl/inetd-all.ucl
+++ b/release/packages/ucl/inetd-all.ucl
@@ -23,3 +23,7 @@ The inetd(8) server listens for incoming network connections and spawns a
process to handle the connection based on its configuration file. Some
built-in servers for basic services are also provided.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/ipf-all.ucl b/release/packages/ucl/ipf-all.ucl
index 232495d0bd80..04a0a8ef7469 100644
--- a/release/packages/ucl/ipf-all.ucl
+++ b/release/packages/ucl/ipf-all.ucl
@@ -25,3 +25,7 @@ This package provides the rc(8) services and utilities used to manage the
packet filter, and periodic(8) reports for filter activity. Some examples
of configuring IP Filter are also provided in /usr/share/examples/ipfilter.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/ipfw-all.ucl b/release/packages/ucl/ipfw-all.ucl
index e46a087f0685..4eec24194633 100644
--- a/release/packages/ucl/ipfw-all.ucl
+++ b/release/packages/ucl/ipfw-all.ucl
@@ -28,3 +28,7 @@ This package provides the ipfw(8) utility used to manage ipfw, periodic(8)
reports on filter activity, and rc(8) services to automatically start ipfw
at system startup.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/jail-all.ucl b/release/packages/ucl/jail-all.ucl
index 59b7a0c99828..6cd085581240 100644
--- a/release/packages/ucl/jail-all.ucl
+++ b/release/packages/ucl/jail-all.ucl
@@ -30,3 +30,7 @@ This package provides the jail(8), jexec(8) and jls(8) utilities for managing
jails, and an optional rc(8) service to start jails during system startup using
the /etc/jail.conf configuration file.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/kerberos-all.ucl b/release/packages/ucl/kerberos-all.ucl
index 2dfb8dc27b7f..a62be895e96d 100644
--- a/release/packages/ucl/kerberos-all.ucl
+++ b/release/packages/ucl/kerberos-all.ucl
@@ -32,3 +32,7 @@ applications to be integrated with Kerberos.
This version of Kerberos implements version 5 of the Kerberos protocol,
sometimes called Kerberos V.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/kerberos-kdc-all.ucl b/release/packages/ucl/kerberos-kdc-all.ucl
index fef5206055c8..7c2d412460ec 100644
--- a/release/packages/ucl/kerberos-kdc-all.ucl
+++ b/release/packages/ucl/kerberos-kdc-all.ucl
@@ -27,3 +27,7 @@ Unix systems, as well as many other platforms.
This package provides the Kerberos key distribution center (KDC), which
manages the Kerberos database and issues tickets to Kerberos users.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/kyua-all.ucl b/release/packages/ucl/kyua-all.ucl
index 2322ec95c455..e7a26de7ea6d 100644
--- a/release/packages/ucl/kyua-all.ucl
+++ b/release/packages/ucl/kyua-all.ucl
@@ -52,3 +52,7 @@ libraries and languages. The test program library of choice is ATF, which
kyua's design originated from. However, framework-less test programs and
TAP-compliant test programs can also be executed through kyua.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/lib9p-all.ucl b/release/packages/ucl/lib9p-all.ucl
index 6e48d373380f..9eb030bd7a0c 100644
--- a/release/packages/ucl/lib9p-all.ucl
+++ b/release/packages/ucl/lib9p-all.ucl
@@ -22,3 +22,7 @@ desc = <<EOD
lib9p implements the server side of the 9p2000, 9p2000.u and 9p2000.L revisions
of the 9P protocol.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libarchive-all.ucl b/release/packages/ucl/libarchive-all.ucl
index 8388fc916546..79a80b6a4c54 100644
--- a/release/packages/ucl/libarchive-all.ucl
+++ b/release/packages/ucl/libarchive-all.ucl
@@ -32,3 +32,7 @@ archives in various formats such as tar and cpio. libarchive also supports
reading and writing archives compressed using various compression filters
such as gzip and bzip2.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libbegemot-all.ucl b/release/packages/ucl/libbegemot-all.ucl
index b9fa09ca6689..c1080de8f253 100644
--- a/release/packages/ucl/libbegemot-all.ucl
+++ b/release/packages/ucl/libbegemot-all.ucl
@@ -44,3 +44,7 @@ The rpoll(3) family of functions is designed to overcome these restrictions.
They support the well known and understood technique of event driven programing
and, in addition to select(2) and poll(2) also support timers.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libblocksruntime-all.ucl b/release/packages/ucl/libblocksruntime-all.ucl
index 129dac965a04..4b4085d9d0da 100644
--- a/release/packages/ucl/libblocksruntime-all.ucl
+++ b/release/packages/ucl/libblocksruntime-all.ucl
@@ -23,3 +23,7 @@ The BlocksRuntime library provides runtime support for Blocks, a
non-standard extension to the C programming language which adds
support for lambda expressions and closures.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libbsdstat-all.ucl b/release/packages/ucl/libbsdstat-all.ucl
index 1b677a125c88..acfb77fd6242 100644
--- a/release/packages/ucl/libbsdstat-all.ucl
+++ b/release/packages/ucl/libbsdstat-all.ucl
@@ -22,3 +22,7 @@ desc = <<EOD
libbsdstat is a library for managing and display periodically collected
statistics.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libbsm-all.ucl b/release/packages/ucl/libbsm-all.ucl
index ee060f206890..76852b310e8f 100644
--- a/release/packages/ucl/libbsm-all.ucl
+++ b/release/packages/ucl/libbsm-all.ucl
@@ -34,3 +34,7 @@ The libbsm library routines provide an interface to BSM audit record streams,
allowing both the parsing of existing audit streams, as well as the creation
of new audit records and streams.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libcasper-all.ucl b/release/packages/ucl/libcasper-all.ucl
index 8d980987dffd..4f839ef6fc46 100644
--- a/release/packages/ucl/libcasper-all.ucl
+++ b/release/packages/ucl/libcasper-all.ucl
@@ -24,3 +24,7 @@ under the Capsicum capability-based security framework. libcasper allows
passing messages and capabilities between the sandboxed application and a
helper process to allow restricted access to system and network resources.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libcompat-all.ucl b/release/packages/ucl/libcompat-all.ucl
index a150709d1bc6..1fb209f4cafc 100644
--- a/release/packages/ucl/libcompat-all.ucl
+++ b/release/packages/ucl/libcompat-all.ucl
@@ -22,3 +22,7 @@ desc = <<EOD
libcompat provides an implementation of some obsolete library functions:
cuserid(3), re_comp(3), re_exec(3) and rexec(3).
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libcompiler_rt-all.ucl b/release/packages/ucl/libcompiler_rt-all.ucl
index f21e629ac88c..02be19aa0b7d 100644
--- a/release/packages/ucl/libcompiler_rt-all.ucl
+++ b/release/packages/ucl/libcompiler_rt-all.ucl
@@ -2,3 +2,7 @@ comment = "LLVM compiler_rt library"
desc = <<EOD
The libcompiler_rt library from LLVM.
EOD
+
+annotations {
+ set = "base,base-jail"
+}
diff --git a/release/packages/ucl/libcuse-all.ucl b/release/packages/ucl/libcuse-all.ucl
index 0d81ee40841c..4be6e8d32a16 100644
--- a/release/packages/ucl/libcuse-all.ucl
+++ b/release/packages/ucl/libcuse-all.ucl
@@ -33,3 +33,7 @@ desc = <<EOD
The libcuse library contains functions to create a character device in
userspace.
EOD
+
*** 471 LINES SKIPPED ***