[Bug 280137] security/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 05 Jul 2024 09:00:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280137

            Bug ID: 280137
           Summary: security/bacula15-server: fix filename of the rc
                    scripts to comply to the rc scripting recommendations
                    + service jails options
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: netchild@FreeBSD.org

Created attachment 251879
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=251879&action=edit
rename rc scripts to comply to recommendations

Hi,

The attached patch fixes some issues with the rc script.

A generic discussion about the rc scripts in the ports collection which
contains a lot more background information about the "why" of this patch is at 
    https://lists.freebsd.org/archives/freebsd-ports/2024-July/006342.html

Short:
 - the filename shall be the same as the content of the name variable inside
the script
 - (already OK) PROVIDE shall be the same as the content of the name variable
inside the script
 - this fixes the use of the script with service jails (new feature in
-current)

Additionally to what is discussed there and fixed in the patch, I made the
following additional changes:
 - add an UPATING entry (date needs to be adapted, this may conflict at the
time when you apply/commit)
 - add service jails options to the scripts to enable the use in service jails
(new feature in -current)
   the svcj_options allow the use of the host-network, if you want to allow
sysvipc you need to replace
   "net_basic" with "net_basic sysvipc" (inherits/shares the sysv stuff,
"sysipcnew" if the sysvipc parts shall be uniq to the specific service)
   if no network access is required for a service, you can set it hard to empty
(bacula_XXX_svcj_options="")

The service jails part will not cause issues when service jails are not
enabled. If bacula works inside a jail, it will work inside service jails too,
the only question is which kind of jail permissions need to be enabled for the
services. The handbook has more info about service jails:
    https://docs.freebsd.org/en/books/handbook/jails/#service-jails
    https://docs.freebsd.org/en/articles/rc-scripting/#rcng-service-jails

You may want to run the following before applying the patch:
  for d in sysutils/bacula*-server/files; do      
    git mv $d/bacula-dir.in $d/bacula_dir.in                                    
    git mv $d/bacula-sd.in $d/bacula_sd.in                                      
  done

Bye,
Alexander.

-- 
You are receiving this mail because:
You are the assignee for the bug.