MidnightBSD Developer Journal

guile and gnustep-guile are now in mports.

deskutils/preferencepanes
x11-toolkits/gtookit (gtk/gnustep interface)
devel/wizardkit
devel/objcunit
devel/highlighterkit
devel/performance

I just commited changes to the Python port to bring us to 2.4.4. Let me know if there are any issues.

src now includes sudo. It has a rather conservative default config file.

I've updated Samba to 3.0.24 to deal with several security issues listed in the commit. I'd recommend updating to the new port when possible.

mports/devel/dmalloc was added today as well as mports/net/zillion. dmalloc is a memory debug library and zillion is a gnustep based job control system...

I've got guile working now, but gnustep-guile is failing to compile. I'll look at that when I get more time.

I've put off the remaining KDE issues as I'd like to get some higher priority issues resolved. The PowerPC stuff is still not working with errors mounting the mfsroot. I'd like to get more gnustep apps in and possibly do something similar to the newer FreeBSD gnustep-app port.

I noticed FreeBSD is starting to work on priority queues. That might be something we'll need to look at. I personally would love that feature and Windows offers support for it.

I'm hoping to compile a list (with help) of outstanding security issues wiht MidnightBSD. I'm sure there are several ports which need updating.

I was asked to build a PowerPC iso just to see it if was working for G4 Macs. I test booted the iso on my iBook G4 800Mhz. The kernel seems to work as long as a usb keyboard is plugged in. There is a freeze around drive detection without it. The mfsroot does not mount correctly. Out of curiosity, I mounted it on /dev/md0 on my i386 box and many files were all listed as 2.1M in size. Very strange. There could be an endian-ness issue present or something might be wrong with the isofs. For some reason, my initial import of FreeBSD did not include src/sys/powerpc/conf/* files either. I added them today.

Even the FreeBSD PowerPC port isn't that far along and I don't want people to think we're going to support this officially. We simply don't have the people to maintain a PPC port. It would be rather interesting though.

Based on personal experience, I'd recommend OpenBSD to anyone wanting to run a BSD on PowerPC hardware.

A stupid commit to sysinstall caused some serious problems with installing MidnightBSD in the last few snaps.  October or earlier are safe.  The newest i386 snap seems to fix it and also correctly enables encrypted swap.   The last amd64 snap is not good.  I'll do new snaps for other architectures soon.  I noticed a few other issues with sysinstall I need to look into.

I've been working on importing Bind 9.3.4 into the tree. Its imported and compiling on three different ia32 machines. It still requires further testing. I'm going to upgrade my secondary dns server tonight and see how well it runs.

Bind 9.3.4 was also updated/added to mports.

I noticed sendmail did a new release. I'll start looking at that when I get some more time.

Also, lets welcome back our security officer. Adam has been busy and PCless for the last month or so.

Finally, my work on mports has paid off. The index is in much better shape. We have most of KDE available. joe was added to editors last night. I'm attempting a snap build of amd64 right now with mports included. It also includes the bind update.

I typically only post MidnightBSD related entries to this blog. I saw this link on a mailing list today.

http://www.msnbc.msn.com/id/16934083/site/newsweek/page/2/

Bill Gates actually said "Nowadays, security guys break the Mac every single day. Every single day, they come out with a total exploit, your machine can be taken over totally. I dare anybody to do that once a month on the Windows machine."

Wow. I feel a renewed spirt toward this project after reading that sentence. In the end, it does not matter what operating system I prefer. All systems have security issues from time to time. Making a blanket statement like that is just amazing. What's next? Windows crack of the month?

I haven't read the whole article yet, but from what I've read so far he attacks Apple for their ad campaign in all the wrong ways. I've blogged about Apple's ads and inconsistencies before. I agree some of them are misleading. And I thought his Daily Show performance was bad...

I've got DVD playback working on my system with xine and that last patch.

The Marvell 6101/6145 PATA used on the Intel DP965LT and other boards was added today. A JMicron chip was added also.

This actually fixed my personal desktop. The sata controllers were renumbered so be prepared to fix fstab if you update to this.

This was done after the snapshot since it had not been tested yet.

I've added a new snapshot to the ftp server for i386. It does not include mports as we're working out some index issues during the KDE import.

This snap includes the recent jail fix.

I patched the jail security issue tonight. The /etc/rc.d/jail startup script did not check various paths for symbolic links which made them prone to attack. This patch corrects the issue and also changes the default output from /var/console.log.

I've been focusing on getting KDE working in mports. While we still plan to focus on GNUstep solutions, KDE is very popular among BSD users. It also gives us access to koffice and konquerer so that we have native office and web browsing. Opera is also working which is somewhat native although it requires compatibility libraries for freebsd 4 and 5.

index building is still most likely broken, but i've got kdebase, kdelibs and several other parts of kde in already.

Once these commits are completed, ports should be fairly stable to use for a snap or release.

Phil has been importing several other ports today. In the last day and a half we've done 255 commits so far alone.

src:
Progress continues on syncing with relevant FreeBSD 6.1 Release changes. I tagged the code today with a snapshot point that has been known to work on a limited number of systems. (not massive testing) If you've been holding off updating your sources, its stafe to use that tag. Please note that we have not patched the jail vulnerability found when starting jails with syslog yet. This will be done after our other changes are completed.

mports:
The mports index is not building currently. That means using portupgrade can fail unless you have an old stable index. The problem occured as I commited some kde ports awhile back without the entire KDE distrobution. It will be resolved one way or another shortly.

I fixed up some typos in various Makefiles and added ghostscript-apsl. I also made a few adjustments with the ghostscript references in bsd.port.mk... Phil had already made several changes recently in this area.

The sudden attention to detail with mports was long overdue. We also need to clean up mports for a snapshot and release on the horizon.

With the kde ports locally, I'm able to to bulid the index. I also noticed some bugs with the cups mport that need some research. (make clean fails for instance)

Our mports manager, Phil Pereira was featured recently. (bsdtalk091)

http://bsdtalk.blogspot.com/

I'm in the process of making some changes with syscons which breaks HEAD at the moment. If you need to cvsup to a more recent version, it should be safe to grab the changes from around Dec 31. Alternatively, you can save your syscons directory and sync up now. This should be fixed soon. Systems with 1 CPU and no hyperthreading should be fine.

Most of my time has been spent on src these last few days.  I just commited seq(1) from NetBSD. 

Yesterday I spent some time on init(8).  A patch was proposed for FreeBSD which also worked quite nicely for us to allow init to chroot.  I also did a bit of cleanup work on the source and shrunk the binary a bit. 

I also worked on /etc/rc.d.  Several of the scripts ordering was changed and some imrprovements were done to a few scripts.

The Acer m5288 PCI id was added to src/sys/dev/ata/ata-chipset.c to allow that chip which is found on newer laptops. 

The loginfail periodic script was altered to display login errors from more daemons. 

mixer_enable="YES" was added to rc so that one can turn off the mixer on systems without sound cards. 

src/usr.bin/login was changed to log errors from setenv. 

On the mports front, Phil has been commiting updates to several existing ports. 

First Release

I've made a decision about the first release.  I had held off on many source commits between early November and this last week as I had thought I'd do a release by now.  In fact, I promised it to several people.  The release has been held off mostly due to issues with automating building of packages for the ISO, generating the index and spliting the packages.  I'm at a point I can manually create packages and could possibly do a limited release.  I'd rather not ship packages which are not built in a very clean environment.  I've been working on modifying and writing scripts to do our package building in my spare time. 

I've decided that I will ship the first release without packages on the ISO.  mports will be installed however.  I plan to finish up some current projects on src and then possibly creating a snapshot early next week.  If all goes well, I hope to ship a tested release without packages by the end of January.  I will need to make adjustments to sysinstall as to not confuse users or cause any errors.  That deadline will also allow me to try to finish my scripts to build packages.  At this point, I feel the project has progressed far enough to warrent a release and allow us to start with a solid foundation to start doing interesting work.  The vast majority of commits have been to simply keep up with FreeBSD which is not what we want to do.  I don't want to be a distro of FreeBSD, but rather branch out with a complete desktop system.  You should start seeing more commits of features from other BSD systems and unique additions from our own project. 

A CVSup server was created to download src and mports. csup was also added to base to help with retrieving mports. sup files were created, edited and in some cases deleted so /usr/share/examples/cvsup is now safe to use as an example to connect to our server.

A bug was patched in burncd which caused erasing a CDRW to go on forwever.

A problem with the bsnmpd update from Oct 30 was corrected.

Updates to sync GEOM with FreeBSD 6.2 stable are underway.

A bug with long double to long and long long conversions on sparc64 was fixed.

A bug with syscons/tty support was fixed which could cause a race condition in certain situations.

An rcNG script was added for rdate to allow clients to sync to a time server. We introduced OpenNTPD and rdate several months back, but had not created a replacement for the ntpdate script. This has been corrected and other scripts depending on ntpdate were adjusted. To use the rdate script, a server must be specified in rc.conf as well as enabling it. rdate_enable="YES" and rdate_flags="-n stargazer.midnightbsd.org" for instance would enable rdate and have it sync to our local time server. Its not recommended to use our server as its on a slow link and not designed to be very accurate.

Several browsers have been updated in recent weeks.  Many of the mports were updated today.

www/linux-firefox : 2.0.0.1 (recent security patch)
www/linux-firefox-devel  (last snapshot)
www/linux-seamonkey (last release 1.0.6)
www/opera  : 9.10

security/gnupg was updated to 1.4.6 to fix a security issue.  All users that use gnupg should update as soon as possible. 

mail/squirrelmail was updated to 1.49a to fix a security issue.

AddressManager (mail/addresses) is a GNUstep Address Book.  It was added tonight. 

x11-servers/mga_hal, a Matrox driver, was added. 

GNU tar was updated to fix the semi-recent vulnerability.  It was also updated to 1.16.

FreeTar, a GNUstep graphical tar utility was added to archivers.