[Bug 280137] security/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 280137] sysutils/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 280137] sysutils/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 05 Jul 2024 09:00:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280137
Bug ID: 280137
Summary: security/bacula15-server: fix filename of the rc
scripts to comply to the rc scripting recommendations
+ service jails options
Product: Ports & Packages
Version: Latest
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: Individual Port(s)
Assignee: ports-bugs@FreeBSD.org
Reporter: netchild@FreeBSD.org
Created attachment 251879
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=251879&action=edit
rename rc scripts to comply to recommendations
Hi,
The attached patch fixes some issues with the rc script.
A generic discussion about the rc scripts in the ports collection which
contains a lot more background information about the "why" of this patch is at
https://lists.freebsd.org/archives/freebsd-ports/2024-July/006342.html
Short:
- the filename shall be the same as the content of the name variable inside
the script
- (already OK) PROVIDE shall be the same as the content of the name variable
inside the script
- this fixes the use of the script with service jails (new feature in
-current)
Additionally to what is discussed there and fixed in the patch, I made the
following additional changes:
- add an UPATING entry (date needs to be adapted, this may conflict at the
time when you apply/commit)
- add service jails options to the scripts to enable the use in service jails
(new feature in -current)
the svcj_options allow the use of the host-network, if you want to allow
sysvipc you need to replace
"net_basic" with "net_basic sysvipc" (inherits/shares the sysv stuff,
"sysipcnew" if the sysvipc parts shall be uniq to the specific service)
if no network access is required for a service, you can set it hard to empty
(bacula_XXX_svcj_options="")
The service jails part will not cause issues when service jails are not
enabled. If bacula works inside a jail, it will work inside service jails too,
the only question is which kind of jail permissions need to be enabled for the
services. The handbook has more info about service jails:
https://docs.freebsd.org/en/books/handbook/jails/#service-jails
https://docs.freebsd.org/en/articles/rc-scripting/#rcng-service-jails
You may want to run the following before applying the patch:
for d in sysutils/bacula*-server/files; do
git mv $d/bacula-dir.in $d/bacula_dir.in
git mv $d/bacula-sd.in $d/bacula_sd.in
done
Bye,
Alexander.
--
You are receiving this mail because:
You are the assignee for the bug.