On Mon, Sep 22, 2025 at 10:47:09PM +0100, Lexi Winter wrote: > Shawn Webb wrote in > <xtkzcgocu5uwhqqghp27k4wjqu3cl24y4n4jcwms43bj6udm5e@wmnwfbucjpod>: > > Thank you for your (and others!) work on this. I'm hoping that this > > bug can be resolved before PKGBASE is enabled by default for release > > generation: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287877 > > can you please show the full process you're using to build the release > image, including any make(1) settings (KERNCONF, etc.)?
$ sudo make real-release WITH_DVD=1 NODOC=1 NOSRC=1 NOPORTS=1 NODOCS=1 PKGBASE=1 Default KERNCONF on HardenedBSD is HARDENEDBSD. This build keeps that default. > > i am also curious if the patch at https://reviews.freebsd.org/D52638 > makes any difference. I've ran out of time for the day, but will give this a shot tomorrow or later in the week. I'll report back. > > > I have confirmed that the pkgbase repo that gets built does indeed > > include the right kernel package. Hence why I'm puzzled why that lua > > assertion is being tripped. > > please also show the (names of) the kernel packages you have in your > release repository, i.e. the one in <objdir>/release/pkgbase-repo > which is generated during the release build. ==== BEGIN OUTPUT ==== $ pkg repos LocalBase: { url : "file:///usr/obj/usr/src/amd64.amd64/release/pkgbase-repo/FreeBSD:16:amd64/latest", enabled : yes, priority : 0 } $ pkg rquery -U -r LocalBase '%n' | grep HardenedBSD-kernel-hardenedbsd HardenedBSD-kernel-hardenedbsd HardenedBSD-kernel-hardenedbsd-dbg ==== END OUTPUT ==== That `pkg rquery` command is effectively the same as what that lua script is executing, which is why I'm extra confused. Thanks, -- Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc
signature.asc
Description: PGP signature
