- Add CFENGINE_VERSION 35
cfengine-devel/Makefile:
- Mark IGNORE since development has not branched yet
Add cfengine 3.5.0:
New features:
- classes promises now take an optional scope constraint.
- new built-in functions: every, none, some, nth, sublist, uniq, filter
- cf-promises flag --parse-tree is replaced by --policy-output-format=,
requiring the
user to specify the output format (none, cf, json)
- cf-promises allows partial check of policy (without body common
control) without integrity check; --full-check enforces integrity check
- agent binaries support JSON input format (.json file as generated
by cf-promises)
- cf-key: new options --trust-key/-t and --print-digest/-p
- Class "failsafe_fallback" is defined in failsafe.cf when main
policy contains errors and
failsafe is run because of this
- add scope attribute for body classes (Redmine #2013)
- Better diagnostics of parsing errors
- Error messages from parser now show the context of error
- new cf-agent option: --self-diagnostics
- new output format, and --legacy-output
- warnings for cf-promises.
- Enable zeroconf-discovery of policy hubs for automatic bootstrapping
if Avahi is present
- Support for sys.cpus on more platforms than Linux & HPUX
Changes:
- parser no longer allows ',' after promiser or promisee. must be
either ';' or lval
- Make parser output in GCC compatible format the only supported format
(remove --gcc-brief-format flag)
- Silence license warnings in Enterprise Free25 installations
- action_policy => "warn" causes not_kept classes to be set on
promise needing repair.
- command line option version (-V) now prints a shorter parsable
version without graphic
- implicit execution of server and common bundles taking arguments
is skipped in cf-serverd.
- WARNING: option --policy-server removed, require option to --bootstrap
instead
- process promises don't log if processes are out of range unless you
run in verbose mode
- reports promises are now allowed in any context (Redmine #2005)
- cf-report has been removed
- cf-execd: --once implies --no-fork
- Version info removed from mail subject in the emails sent by cf-execd.
The subject will only contain "[fqname/ipaddress]" instead of
"communnity/nova [fqname/ipaddress]".
Please change your email filters accordingly if necessary.
- "outputs" promise type is retired. Their semantics was not clear,
and the functionality
is better suited for control body setting, not a promise.
- Tokyo Cabinet databases are now automatically checked for
correctness during opening. It should prevent a number of issues
with corrupted TC databases causing binaries to hang.
- Improved ACL handling on Windows, which led to some syntax changes.
We now consistently use the term "default" to describe ACLs that
can be inherited by child objects. These keywords have received new names:
acl_directory_inherit -> acl_default
specify_inherit_aces -> specify_default_aces
The old keywords are deprecated, but still valid. In addition, a new
keyword "acl_inherit" controls inheritance behavior on Windows. This
feature does not exist on Unix platforms. (Redmine #1832)
- Networking code is moved from libpromises to its own library,
libcfnet. Work has begun on making the API more sane and thread-safe.
Lots of legacy code was removed.
- Add getaddrinfo() replacement in libcompat (borrowed from PostgreSQL).
- Replace old deprecated and non thread-safe resolver calls with
getaddrinfo() and getnameinfo().
- Hostname2IPString(), IPString2Hostname() are now thread-safe, and are
returning error when resolution fails.
- Running cf-execd --once now implies --no-fork, and also does not wait
for splaytime to pass.
- execresult(), returnszero() and commands promises no longer requires
the first word
word to be an absolute path when using the shell. (Part of Redmine #2143)
- commands promises useshell attribute now accepts "noshell" and
"useshell" values. Boolean values are accepted but deprecated. (Part of
Redmine #2143)
- returnszero() now correctly sets the class name in this scenario (Part of
Redmine #2143):
classes:
"commandfailed" not => returnszero("/bin/nosuchcommand", "noshell");
Bugfixes:
- bundles are allowed to be empty (Redmine #2411)
- Fixed '.' and '-' not being accepted by a commands module. (Redmine #2384)
- Correct parsing of list variables by a command module. (Redmine #2239)
- Fixed issue with package management and warn. (Redmine #1831)
- Fixed JSON crash. (Redmine #2151)
- Improved error checking when using fgets(). (Redmine #2451)
- Fixed error message when deleting nonexistent files. (Redmine #2448)
- Honor warn-only when purging from local directory. (Redmine #2162)
- Make sure "restart" and "reload" are recognized keywords in
packages. (Redmine #2468)
- Allocate memory dynamically to avoid out-of-buffer or out-of-hash
situations
- fix edit_xml update of existing attributes (Redmine #2034)
- use failsafe policy from compile-time specified workdir (Redmine #1991)
- ifvarclass checked from classes promises in common bundles
- do not wait for splaytime when executing only once
- disable xml editing functionality when libxml2 doesn't provide
necessary APIs (Redmine #1937)
- Out-of-tree builds should work again, fixed a bunch of related bugs.
- Fixed race condition in file editing. (Redmine #2545)
- Fixed memory leak in cf-serverd and others (Redmine #1758)
Approved by: cy (maintainer, implicit)
sysutils/cfengine* ports.
The idea here is two-fold:
1.) Users should not need to ever change port origins
for a default software version bump;
2.) Users should expect to exist an unversioned port
directory to reflect the latest major version (and
they should be correct in this expectation).
With this change, users can install the sysutils/cfengine
port, and by default track the latest major version of the
software. Subsequent version releases, for example the 3.5
branch, will not require any interaction from user side.
Additionally, users can stay on a certain branch release by
adding, in this case, CFENGINE_VERSION version to make.conf
or specifying the branch during build time with:
# make CFENGINE_VERSION=NN
The list of available CFENGINE_VERSION values are listed
with:
# make -V VERSIONS
Discussed with: cy
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
- Remove CONFIGURE_TARGET hack in various bsd.*.mk
- USE_GNOME=gnometarget is now an no-op
Changes to individual ports, other than removing the CONFIGURE_TARGET hack:
= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
- comms/gnuradio
- science/abinit
- science/elmer-fem
- science/elmer-matc
- science/elmer-meshgen2d
- science/elmerfront
- science/elmerpost
= use x86_64 as ARCH
- devel/g-wrap
= other changes
- print/magicfilter
GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf
Total # of ports modified: 1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)
PR: 126524 (obsoletes 52917)
Submitted by: rafan
Tested on: two pointyhat 7-amd64 exp runs (by pav)
Approved by: portmgr (pav)
- Correct pkg-plist by adding two newly added intermediate
libraries. [1]
- Use better way to make dependency on Berkeley DB. [2]
Pointy hat to: delphij
Reported by: Scot Hetzel <swhetzel gmail com> [1]
tinderbox via pav and edwin [2]
- Make BDB 4.6 as default BDB version;
- Modify MASTER_SITES according to official website.
Submitted by: delphij
PR: ports/118562
Approved by: maintainer timeout
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run
- Respect users' PTHREEAD related settings
- Correct usage of BerkeleyDB
- Use Berkeley DB 4.4 per original authors
PR: ports/109707
Approved by: maintainer timeout (19 days)
when multiple db ports are installed
- Patch to explicitly link with included libpub.a, instead of one in /usr/local
- Patch to never rebuild documentation, the full copy is included
PR: ports/106790
Submitted by: Nick Barkas <snb@threerings.net>
Approved by: maintainer timeout (sergei; 1 month)
synced with sysutils/cfengine2 which it is going to replace.
The reason for that is Cfengine 2.x being the stable version now,
so the need for keeping both old 1.x (sysutils/cfengine) and the new
2.x (sysutils/cfengine2) has been obsoleted.
This is currently disconnected from the build.
authoritative FTP site for cfengine. Also remove the dependence on teTex
while port building since it is fscking huge and ugly. When package
building, add the dependence on teTex so more docs are available in the
package.
PR: 37239
Submitted by: maintainer
- USE_AUTO* -> USE_AUTO*_VER=* where required
- USE_AUTO* / *_DEPENDS=.*auto*:*/devel/auto* -> GNU_CONFIGURE where OK
- Other minor changes to fix things
These changes should be no-ops with the current bsd.port.mk, but will
assist in preparing for the next generation of USE_AUTO*.
Submitted by: bento 4-exp USE_AUTO* cleanups
http://people.FreeBSD.org/~will/4-exp/http://bento.FreeBSD.org/errorlogs/4-exp-latest/
* cfengine deadlocking in the resolver due to being linked against libc_r
* cfd issuing 'ioctl: No such network device' whenever it is invoked.
change maintainer email
add more docs
Patches obtained from Michael Kyle <mike@rainc.com>
PR: 29649
Submitted by: MAINTAINER
In fact, the only thing (that I can tell anyway) that uses the DB functions is
cfd. I'm guessing most people don't use it, especially since I haven't heard
any complaints about it.
Also, it was putting some of the docs in / (for some really strange reason).
That should be fixed too. They are now put in {PREFIX}/share/doc/cfengine,
depending on NOPORTSDOC (somewhat reverse logic than normal, but it made the
amount of changes less).
Finally, strip the binaries.
PR: 26189
Submitted by: maintainer
