Stuart Henderson wrote:
On 2026/10/16 22:01, David Uhden Collado wrote:
Please find attached a patch updating net/i2pd from 2.59.0 to
2.61.0, including fixes for regressions introduced by the upstream
pledge/unveil integration.
I've just committed my version (which disables pledge) as the change
in it to certs are packaged will avoid a lot of broken update diffs.
The OpenBSD-specific changes include:
- Move sandbox initialization until the effective configuration
paths and PID file are resolved, preserving custom paths and user
configurations.
- Restrict pledge/unveil permissions to those actually required,
checking errors instead of silently continuing.
- Restore SSU2 interface MTU detection using AF_LINK data from
getifaddrs(), avoiding SIOCGIFMTU, which is restricted by pledge.
- Handle SIGHUP synchronously through sigwait(), preventing unsafe
reload operations and thread self-join failures.
- Fix UDP cleanup timer ownership during tunnel reloads.
These more complicated changes should go upstream, it's too much for
patches in ports really, merging with any upstream changes in the
same area will be tricky, and this port seems to attract unskilled
update diffs so $deity knows how tgey'll get mangled.
https://github.com/PurpleI2P/i2pd/pull/2600
Tests are welcome...
