From nobody Fri Oct 13 08:03:10 2023 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4S6Jts2SSlz4wfcG for ; Fri, 13 Oct 2023 08:04:21 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Received: from mailgate.Leidinger.net (mailgate.leidinger.net [IPv6:2a00:1828:2000:313::1:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (P-256) client-digest SHA256) (Client CN "mailgate.leidinger.net", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4S6Jtr0hxRz4KT0 for ; Fri, 13 Oct 2023 08:04:20 +0000 (UTC) (envelope-from Alexander@Leidinger.net) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=leidinger.net header.s=outgoing-alex header.b=V4dKDkhc; spf=pass (mx1.freebsd.org: domain of Alexander@Leidinger.net designates 2a00:1828:2000:313::1:5 as permitted sender) smtp.mailfrom=Alexander@Leidinger.net; dmarc=pass (policy=quarantine) header.from=leidinger.net List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=leidinger.net; s=outgoing-alex; t=1697184243; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=NZz894xQk3j4295ebKg3rgWPJCxxxkjqxb8H+fZydic=; b=V4dKDkhcp+cYtBcWW6zxm22aWp2iz1rwtsLqkfXRMymRf/PvBIVyJCgJX6BVdJdv7yNOQB qTtTgdarfU0Z/LpVPPg9oL+r5e/3xMhQzNLlzm/Vt0e/z1PusPVlS9M2mA6Y45J/uL7VDN 6HlbUlBZdTYgXAv52MwlPxGMrVWyDC3+qXDsKfHAxGMAPYspgTSFR2mLTGbRkEP2GeG4OM LSNfJi0sGE4026Ssh05Mfs4/2MPjpe+ECIHmbHJMYUhOW9BKTf+XYsvOzG/WbuiNyHQK8a ZDPpLXWqXgws2+gOqO7osLrNW4kArNSKxRDktWyR267JLBMdnI+XSO91PQ/jWA== Date: Fri, 13 Oct 2023 10:03:10 +0200 From: Alexander Leidinger To: Current Subject: issue: poudriere jail update fails after recent changes around certctl Message-ID: <7b44912e0d3ff033ab27923aeeae5caf@Leidinger.net> X-Sender: Alexander@Leidinger.net Organization: No organization, this is a private message. Content-Type: multipart/signed; protocol="application/pgp-signature"; boundary="=_b25665bf52bbcaf2d923501a5ee0367d"; micalg=pgp-sha256 X-Spamd-Bar: ----- X-Spamd-Result: default: False [-5.76 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_SHORT(-0.97)[-0.975]; NEURAL_HAM_LONG(-0.92)[-0.922]; NEURAL_HAM_MEDIUM(-0.77)[-0.768]; DMARC_POLICY_ALLOW(-0.50)[leidinger.net,quarantine]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; R_DKIM_ALLOW(-0.20)[leidinger.net:s=outgoing-alex]; MLMMJ_DEST(0.00)[current@freebsd.org]; RCVD_COUNT_ZERO(0.00)[0]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; HAS_ORG_HEADER(0.00)[]; TO_DN_ALL(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; DKIM_TRACE(0.00)[leidinger.net:+]; HAS_ATTACHMENT(0.00)[]; ASN(0.00)[asn:34240, ipnet:2a00:1828::/32, country:DE]; RCPT_COUNT_ONE(0.00)[1]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Queue-Id: 4S6Jtr0hxRz4KT0 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --=_b25665bf52bbcaf2d923501a5ee0367d Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; format=flowed Hi, some change around certctl (world from 2023-10-09) has broken the poudriere jail update command. The complete install finishes, certctl is run, and then there is an exit code 1. This is because I have some certs listed as untrusted, and this seems to give a retval of 1 inside certctl. Testcase: set a cert as untrusted and try to use "poudriere jail -u -j YOUR_JAIL_NAME -m src=/usr/src" Relevant log: ---snip--- -------------------------------------------------------------- >>> Installing everything completed on Fri Oct 13 10:00:04 CEST 2023 -------------------------------------------------------------- 83.55 real 103.83 user 109.42 sys certctl.sh: Skipping untrusted certificate ad088e1d (/space/poudriere/jails/poudriere-x11/etc/ssl/untrusted/ad088e1d.0) [some more untrusted] *** [installworld] Error code 1 make[1]: stopped in /space/system/usr_src 1 error make[1]: stopped in /space/system/usr_src make: stopped in /usr/src [00:01:32] Error: Failed to 'make installworld' ---snip--- Bye, Alexander. -- http://www.Leidinger.net Alexander@Leidinger.net: PGP 0x8F31830F9F2772BF http://www.FreeBSD.org netchild@FreeBSD.org : PGP 0x8F31830F9F2772BF --=_b25665bf52bbcaf2d923501a5ee0367d Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc; size=833 Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEER9UlYXp1PSd08nWXEg2wmwP42IYFAmUo+cwACgkQEg2wmwP4 2IYObw/+OcQyUOv5Bp8R2Js+Nml6rUKCPm/+C2hsHL7i/qmClW/+jNUCD8cKh75o gKdlQndF8rJ36u0tzF8CD6M3nxMUo7rgGujykkUEAtk5T7GHjEUZWml8m0bwYFTE pi2PO6okUWdgsff8A8NVDPe6+Y0Rhf0Em7D7h9HDleT3M1/XvArtzT+z54mwjKBX RFT4u3UcnKJYo7s1sSkCElcaDdsJfD2HtXAhaiq1p0QRWdiQhVYYJgrTyXcBciFh dQvkOnOw3rcRQ1PfGlTtQ2/Fe5jhB6lfQAaoWSzCGgf95URWS6t6j1XK+lrP57Wf hvR7zhETccKiw4iPrAHvEKkkUjIxr3u6+dXnsTW+RkAvBT3ai5BP+duhnLybsy3N YCcqc9FLOSWONe+uJK938FoHYnu8NmEFXY7PkMfTA3lmhdSV7HBtKtguZAx331uG FkX+lIR8FwBQBOqIJxQV2V7xknJCjKJa+zJAiWiDn4wLYmxoVxf6mwxs0hXjv4Hp HUPpJRI4sd6ZWC9U+LhLI8Zput3fK2+puI7nW/+JCglzZw5fiQSkNptk2t2EJqTA RiAl8IJ5WOsQrJWE75IK5dF1aLrAVGJUfqAcWBXS5HpaqUrujiXTaOKaPQwjcwnN 17tTTCcsUrXHb/H0oRT4t4/9JWrvhBj0a1eD2Ea9bM9divzFcfE= =W82L -----END PGP SIGNATURE----- --=_b25665bf52bbcaf2d923501a5ee0367d--