From nobody Fri Oct 09 16:41:40 2026 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4j1Xh374Vjz6vk7d for ; Fri, 09 Oct 2026 16:41:55 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Received: from mail-oi1-f178.google.com (mail-oi1-f178.google.com [209.85.167.178]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4j1Xh26lXzz4dby for ; Fri, 09 Oct 2026 16:41:54 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=none; arc=pass ("google.com:s=arc-20260327:i=1"); spf=pass (mx1.freebsd.org: domain of carpeddiem@gmail.com designates 209.85.167.178 as permitted sender) smtp.mailfrom=carpeddiem@gmail.com; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none) Received: by mail-oi1-f178.google.com with SMTP id 5614622812f47-4c27f0df6e8so3033381b6e.0 for ; Fri, 09 Oct 2026 09:41:54 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1791564114; cv=none; d=google.com; s=arc-20260327; b=piPz+UD3sdrji+urTMHk01q7IOUzbnpTglf262p8QjjSwaAuGzblX5hxYzsv0VK7DU r/ezLD2OWysheCMzFzeD8MAF5oKcl/4e+Z4AtfEtXnhgl8XTow4wMBV9Y4KDRgvSD9KR 9E1WKvfdahGSJYr0JUTMRFbj7pFgT97+M3DVrVDO5Mq1SWcc/ktHnFjtKVKrUSseqxox uN/xgC/Vfl5Vd65GCQuPFcR+NcwWR5KD1ki+j308lDLC9QMrLK/kBGj7/cITbX/raixE jCpauII2mAesaF+mSajZgZVAJH1KN+m3Lfnk7OvPGBONMtgfPJ5kgWJxUjcnItTOo2Ki rC0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version; bh=mwFy1gOB3tp/odR0SIj8Gl407quvZB1Y0Ay9SHU3zik=; fh=On36nhKLdKTX754/TqDGWSLfBmi27mIfCtKcOaB7WiE=; b=BvcR23O1O68+VuX4jnAIx52k93d3pZQqufItY3VO7ezwSbOeVzNwMqz2uUKutERel+ OXC60QqOfAjWoIjY+gPwCyNkdPpYVTjbDMI8BkHhq/ilDfk7TITf4TiohummuDBvhK6x W77qwPdlLXkSeDv2jr/sThQSk5vrLlmnsKeTWjqgOuI9RFPLm6G6Bu5kIVXZB/He1ZuN FFA5Vbcd4JUcqLkcEEk7MdiNb3drU0KEizi/QhZmZHs9AFsop7Bvljm7YBuvTik1Zrnj fep7e3c5hTJbLZ7auaB2qnZVjZQFzewvEUFVWOdaZrIzqg9yMdYlxJmeL/pHaSLoF5hn dTmQ==; darn=freebsd.org ARC-Authentication-Results: i=1; mx.google.com; arc=none X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791564114; x=1792168914; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=mwFy1gOB3tp/odR0SIj8Gl407quvZB1Y0Ay9SHU3zik=; b=TThGrMqY0DbK9SmCL4uIM8q4VccHnmPBDHHtXg89e+fb01wAeroOxhA0MdWmdBj6+a C/bk6+Jr32OzPRHMWiq4oscsMw9M5X/h9hImvZ1M64GX6ksBsdkqLAZ7+13qP0kT3xdC yaSXn7tWajyaiTzUV5HuAxWttfaR74hs6HIevxHRmzNkm9EOEdhDpVWfwYUOzmYoGu9d V2l4iY0ZOmnn6M3yJaINlzmyE9tsVUiWNF2bMI0JKVsD5D/OT5NlDtEdKyFOhqolekBk zKrnRLsiQSSY9WWzscZo4Wz8D0RxAuo5CfVJGAohuqW3n9+4ySNYaQm+YprFUwvTaMh0 eT8w== X-Forwarded-Encrypted: i=1; AKwUvBzqcgesYE8hWs2OegsQEN62hFSEs0gHDBa1hr9gXzhnT7n7fZ2cWwxs6UAQSlkuEE9t253yGDha+4XEyvK58MGQictL3A==@freebsd.org X-Gm-Message-State: AFuF++l6B4SDL4Por7QyVrqBMRcpFMjCh7zKGh395lqu7IfFOSv0xsFH pk2i8kF3dDApVh17XjcAqnw3/1XF0LA06dP7LzPUgDAUfPEHDd3n3hUSq1qb+i+JYidFglKXG3u d43P9z5FFEyFOMVvSW3iBGzCuMkXIyCNnyxbU X-Gm-Gg: AYBFou12Rer+Tnk/6V37t9G/rXhn60LUZQg/KfsH+OMfeQgDP8ELDnMv5+LxQA729DI r/L0FnDUQI2QP3zRz9hgn/jADSHmz9bHC6MJVR6+5e63wmWtoxhgs+QERFrGLbNXUe+GZfgLoU+ /3soOKLcdpZ/Hoft09fLoSEqtb9QxWBc9McGrDYzQvsxzuBj/hPAmgEMEJZjAfmAaz1kfSwkHvw pkCzJwEDogsf+Xgvmgf6TpOc+0BCpntmTa6w/GFufxGHqjHSjMLArlsx5Xt2t3Fq5d4qaMpadXE 3PGB9cJAKPBXTnJ2cj6UuOVJ2mspEUPBMVR4oFf5MneWQVQNd9kf7A2yle8BG2mxnFS7IjR4CMx xOwiIHnmLqf/dxvP7r1EgIA== X-Received: by 2002:a05:6808:138e:b0:4e8:bce4:993d with SMTP id 5614622812f47-50c4e683baemr1727692b6e.11.1791564113820; Fri, 09 Oct 2026 09:41:53 -0700 (PDT) List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 References: <6ac9028e.3a17d.35333feb@gitrepo.freebsd.org> In-Reply-To: From: Ed Maste Date: Fri, 9 Oct 2026 12:41:40 -0400 X-Gm-Features: AclHuK89dizySCPr5TvdW2ljygEcM9jD3Uxv55IEhOENkv59G-4x8dBGWoJPwXM Message-ID: Subject: Re: git: 24d5194306b5 - main - build: Emit a warning for build targets run as root To: Jessica Clarke Cc: "src-committers@freebsd.org" , "dev-commits-src-all@freebsd.org" , "dev-commits-src-main@freebsd.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: / X-Spamd-Result: default: False [-0.90 / 15.00]; ARC_ALLOW(-1.00)[google.com:s=arc-20260327:i=1]; FORGED_SENDER(0.30)[emaste@freebsd.org,carpeddiem@gmail.com]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17]; MIME_GOOD(-0.10)[text/plain]; DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none]; TO_DN_EQ_ADDR_SOME(0.00)[]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; FREEFALL_USER(0.00)[carpeddiem]; RCVD_COUNT_ONE(0.00)[1]; TO_DN_SOME(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[209.85.167.178:from]; R_DKIM_NA(0.00)[]; MLMMJ_DEST(0.00)[dev-commits-src-main@freebsd.org]; FROM_NEQ_ENVFROM(0.00)[emaste@freebsd.org,carpeddiem@gmail.com]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[209.85.167.178:from]; TO_MATCH_ENVRCPT_SOME(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[dev-commits-src-main@freebsd.org]; MISSING_XM_UA(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_THREE(0.00)[4] X-Rspamd-Queue-Id: 4j1Xh26lXzz4dby On Fri, 9 Oct 2026 at 11:22, Jessica Clarke wrote: > > Whilst this is surely where we eventually want to end up, as it is best > practice to only use root when necessary, I=E2=80=99m not sure this is > something we should be warning about just yet, Yes, this is perhaps premature, and ought not be a .warning. What do you think of leaving it as .info? It is already helping to identify tooling and documentation that we need to update :) > especially given the > official updating-from-source instructions in the handbook [1] and > equivalent in-tree UPDATING instructions have you do everything as root > (well, they don=E2=80=99t say that explicitly, but there=E2=80=99s no men= tion of > switching users, the handbook uses make kernel which has to run > buildkernel as root like installkernel, and the buildworld is amongst > everything else (ditto buildkernel for UPDATING)). As of just now the handbook no longer references `make kernel`, but it is a fair point that the examples omit mention of using sudo or switching between an unprivileged build user and installing as root. So far on the TODO we've got: - documenting a suggested non-root workflow - nanobsd - etcupdate