[Bug 281837] Handbook "CentOS Base System from FreeBSD Packages" recommends deprecated packages

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 18 Oct 2024 15:39:03 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281837

--- Comment #41 from Fernando ApesteguĂ­a <fernape@FreeBSD.org> ---
(In reply to Alexander Ziaee from comment #36)
Yes, but sysexits are unlikely to show security issues in the future unlike a
port.

See the approach we do for "unamaintained" ports:

"The ${dp_PKGBASE} port currently does not have a maintainer. As a result, it
is
more likely to have unresolved issues, not be up-to-date, or even be removed in
the future..."

This is pretty explicit about the state of the port and its implications. I
don't think it is a good idea to conceal that from the users.

I understand some (many?) linux programs need 32-bit compatibility. I just want
users to *understand the risks* of installing c7 ports.

Some people install linux emulation to run things that can be run in 64 bits
mode. Those people should also be pointed to rl9 ports since they are way more
modern and they are still updated.

Also, the warning at the beginning of the Centos section was explicitly place
there as a consequence of some feedback in the review.

How about this? It is less alarming (IMO), but clear enough:

```
The emulators/linux_base-c7 port is no longer maintained upstream and will not
receive further security updates. Users who require 32-bit compatibility may
continue to use emulators/linux_base-c7, though caution is advised due to
potential security vulnerabilities. For users working in a 64-bit environment,
it is recommended to migrate to the Rocky Linux Base System
(emulators/linux_base-rl9), which is actively maintained and supported.
```

-- 
You are receiving this mail because:
You are on the CC list for the bug.