Thursday, March 26, 2020

Re: PORTS_PRIVSEP=Yes and doas install

Marc Espie <espie@nerim.net> wrote:
> On Thu, Mar 26, 2020 at 01:37:30PM +0000, Lucas wrote:
> > Marc Espie <espie@nerim.net> wrote:
> > > No, it's just a question of giving cache/ to the right user, there's no
> > > need for a complete new set of variables.
> >
> > Then I can only think of moving _CACHE_REPO under DISTDIR. I can
> > prepare a patch for that too, if it's the direction to take.
> >
> > -Lucas
> >
> Why ? there's no problem having separate ownership of stuff under
> packages

I consider being asked a password a problem (we can't make unattended
builds if FETCH_PACKAGES isn't No) and I don't feel that adding

permit nopass lucas cmd install

to doas.conf is the correct solution.

At the very least, it should be noted somewhere that PORTS_PRIVSEP=Yes
and FETCH_PACKAGES != No don't play well together and changes to
doas.conf have to be made in order for not being asked frequently for
passwords.

From my ignorance, I think assigning _CACHE_REPO under DISTDIR is
non-invassive enough. I have yet to check what kind of files go under
DISTDIR and if it would conflict having ${MACHINE_ARCHITECTURE}/cache
in there.

No comments:

Post a Comment