> @newgroup _i2pd:838 > -@newuser _i2pd:838:838::i2pd account:${LOCALSTATEDIR}/lib/i2pd:/sbin/nologin > +@newuser _i2pd:838:838::i2pd account:${LOCALSTATEDIR}/i2pd:/sbin/nologin This will not get changed for users with existing installs so there will need to be some documentation about how to do that. > +@mode 0750 > @owner _i2pd > @group _i2pd > @sample ${SYSCONFDIR}/i2pd/ > -@sample ${LOCALSTATEDIR}/lib/i2pd/ > -@sample ${LOCALSTATEDIR}/lib/i2pd/certificates/ > -@sample ${LOCALSTATEDIR}/lib/i2pd/certificates/family/ > -@sample ${LOCALSTATEDIR}/lib/i2pd/certificates/reseed/ > -@sample ${LOCALSTATEDIR}/lib/i2pd/certificates/router/ > +@mode > +@sample ${LOCALSTATEDIR}/i2pd/ > +@sample ${LOCALSTATEDIR}/i2pd/certificates/ > +@sample ${LOCALSTATEDIR}/i2pd/certificates/family/ > +@sample ${LOCALSTATEDIR}/i2pd/certificates/reseed/ > +@sample ${LOCALSTATEDIR}/i2pd/certificates/router/ > @owner > @group do users need to move files around that they may have in /var/lib/i2pd? (does the daemon write into this tree at runtime? does it modify the crt files which have been @sample'd?) > @owner > @group > share/examples/i2pd/i2pd.conf > +@mode 0640 > @owner _i2pd > @group _i2pd > @sample ${SYSCONFDIR}/i2pd/i2pd.conf > +@mode > @owner > @group > share/examples/i2pd/tunnels.conf > +@mode 0640 > @owner _i2pd > @group _i2pd > @sample ${SYSCONFDIR}/i2pd/tunnels.conf is the daemon expected to write to /etc/i2pd/*.conf files? if not then 0640 root:_i2pd would be better. > +On OpenBSD, i2pd's HTTP interface is disabled by default, because it > +allows any user on the system to perform actions on the daemon, such > +as shutting it down, or access private data, such as the router > +identity and the tunnels' B32 addresses. > + > +If you want to use this interface anyway, you can reenable it in > +/etc/i2pd/i2pd.conf under the [http] section. ${SYSCONFDIR} > + > + > +Graceful shutdown > +================= > + > +It is good practice to shutdown the i2pd daemon gracefully, to avoid > +immediatly severing all connections, which would disconnect all immediately > +your peers and affect the overall operation of the I2P network. > +By default, the OpenBSD port of ${PKGSTEM} sends its log messages to Normal users are expected to use packages not ports, so generally refer to "the OpenBSD package" or "this package" rather than "port". Why use ${PKGSTEM} rather than i2pd here? Seems pointless. > +syslogd(8), which writes them to the /var/log/daemon file. > + > +The default log level of ${PKGSTEM} ("warn") can be very verbose. You > +may want to reduce this log verbosity by changing the "loglevel" > +parameter in /etc/i2pd/i2pd.conf. > + > +If you want log messages to be written to another file, e.g. > +/var/i2pd/i2pd.log, you can change the "log" and "logfile" parameters ${LOCALSTATEDIR} since you use it in PLIST.. > +in /etc/i2pd/i2pd.conf. To have this log file rotated automatically, ${SYSCONFDIR} > +you can add an entry to /etc/newsyslog.conf using the i2pd pid N.B. this is correct as-is, should _not_ be ${SYSCONFDIR} which only refers to things from ports. > +file so that newsyslog(8) can send SIGHUP to the daemon after rotation. > + > +For example: > + > + /var/i2pd/i2pd.log _i2pd:_i2pd 644 6 * $D13 Z > +/var/i2pd/i2pd.pid line wrapping issue > + > +Sending SIGHUP is enough for log rotation, and also makes i2pd reload > +its tunnel configuration and rotate transient keys. > Index: pkg/i2pd.rc > =================================================================== > RCS file: /cvs/ports/net/i2pd/pkg/i2pd.rc,v > diff -u -p -u -p -r1.4 i2pd.rc > --- pkg/i2pd.rc 11 Mar 2022 19:46:04 -0000 1.4 > +++ pkg/i2pd.rc 22 Jul 2026 12:13:13 -0000 > @@ -2,7 +2,12 @@ > > daemon="${TRUEPREFIX}/bin/i2pd --daemon" > daemon_user="_i2pd" > -daemon_flags="--service --datadir=${LOCALSTATEDIR}/lib/i2pd --conf=${SYSCONFDIR}/i2pd/i2pd.conf --tunconf=${SYSCONFDIR}/i2pd/tunnels.conf --tunnelsdir=${SYSCONFDIR}/i2pd/tunnels.d" > +daemon_flags="--service \ > + --datadir=${LOCALSTATEDIR}/i2pd \ > + --conf=${SYSCONFDIR}/i2pd/i2pd.conf \ > + --tunconf=${SYSCONFDIR}/i2pd/tunnels.conf \ > + --tunnelsdir=${SYSCONFDIR}/i2pd/tunnels.d \ > + --certsdir=${LOCALSTATEDIR}/i2pd/certificates" > > . /etc/rc.d/rc.subr > > Index: patches/patch-contrib_i2pd_conf > =================================================================== > RCS file: patches/patch-contrib_i2pd_conf > diff -N patches/patch-contrib_i2pd_conf > --- /dev/null 1 Jan 1970 00:00:00 -0000 > +++ patches/patch-contrib_i2pd_conf 22 Jul 2026 12:13:14 -0000 > @@ -0,0 +1,34 @@ > +Use OpenBSD paths and defaults for the configuration and logging. > + > +Index: contrib/i2pd.conf > +--- contrib/i2pd.conf.orig > ++++ contrib/i2pd.conf > +@@ -8,13 +8,13 @@ > + > + ## Tunnels config file > + ## Default: ~/.i2pd/tunnels.conf or /var/lib/i2pd/tunnels.conf > +-# tunconf = /var/lib/i2pd/tunnels.conf > ++tunconf = /etc/i2pd/tunnels.conf > + > + ## Tunnels config files path > + ## Use that path to store separated tunnels in different config files. > + ## Default: ~/.i2pd/tunnels.d or /var/lib/i2pd/tunnels.d > +-# tunnelsdir = /var/lib/i2pd/tunnels.d > ++tunnelsdir = /etc/i2pd/tunnels.d > + > + ## Path to certificates used for verifying .su3, families > + ## Default: ~/.i2pd/certificates or /var/lib/i2pd/certificates > +-# certsdir = /var/lib/i2pd/certificates > ++certsdir = /etc/i2pd/certificates > +@@ -30,4 +30,4 @@ > + ## * stdout - print log entries to stdout > + ## * file - log entries to a file > + ## * syslog - use syslog, see man 3 syslog > +-# log = file > ++log = syslog > +@@ -122,4 +122,4 @@ > + [http] > + ## Web Console settings > + ## Enable the Web Console (default: true) > +-# enabled = true > ++enabled = false > Index: patches/patch-libi2pd_FS_cpp > =================================================================== > RCS file: patches/patch-libi2pd_FS_cpp > diff -N patches/patch-libi2pd_FS_cpp > --- /dev/null 1 Jan 1970 00:00:00 -0000 > +++ patches/patch-libi2pd_FS_cpp 22 Jul 2026 12:13:14 -0000 > @@ -0,0 +1,8 @@ > +Use /var/i2pd as the service data directory on OpenBSD. > + > +Index: libi2pd/FS.cpp > +--- libi2pd/FS.cpp.orig > ++++ libi2pd/FS.cpp > +@@ -117,1 +117,1 @@ > +- dataDir = "/var/lib/" + appName; > ++ dataDir = "/var/" + appName; you use ${LOCALSTATEDIR} in PLIST so you need to use it here too. (or use /var in PLIST, there is not really any point using the variable...) > Index: patches/patch-test_Makefile > =================================================================== > RCS file: patches/patch-test_Makefile > diff -N patches/patch-test_Makefile > --- /dev/null 1 Jan 1970 00:00:00 -0000 > +++ patches/patch-test_Makefile 22 Jul 2026 12:13:14 -0000 > @@ -0,0 +1,12 @@ > +The tests no longer require boost_system. boost_system no longer exists. > +Index: tests/Makefile > +--- tests/Makefile.orig > ++++ tests/Makefile > +@@ -18,6 +18,5 @@ ifneq (, $(findstring mingw, $(SYS))$(findstring windo > + endif > + > + LDLIBS = \ > +- -lboost_system$(BOOST_SUFFIX) \ > + -lboost_program_options$(BOOST_SUFFIX) \ > + -lssl \
No comments:
Post a Comment