Re: Preventing other software from linking against MacPorts libraries

2024-05-09 Thread Bill Cole

On 2024-05-09 at 02:03:15 UTC-0400 (Thu, 9 May 2024 00:03:15 -0600)
Smith via macports-users 
is rumored to have said:


Hello,

I occasionally run into a problem where I'm building software from a 
tarball or a git clone outside of MacPorts, and the build process 
somehow ends up linking or trying to link against libraries in the 
MacPorts space (/opt/local). How can I prevent this from happening? 
Sometimes I just end up deleting /opt/local to get it to build and 
then re-install MacPorts, which can be painful or at least tiresome. I 
have to assume there is a better way or that I'm doing something 
wrong?


Thanks in advance for any thoughts,


When building software outside of MacPorts, you should cleanse your 
environment of any clues that /opt/local/ is a place to look for 
software. Remove /opt/local/bin and /opt/local/sbin from your PATH when 
running any 'configure' script (or other GNU auto* tools) that looks for 
tools and libraries.


Any software that is meant to be multiplatform should have some 
mechanism for explicitly setting where to find libraries, such as 
options to an autoconf-based configure script. You can use those or 
(less ideal) just manually obliterate any hints of /opt/local in the 
Makefiles created by the configure script.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com 
addresses)

Not Currently Available For Hire


Re: bash prints errors for every non-existing command

2024-04-24 Thread Bill Cole
On 2024-04-24 at 12:33:23 UTC-0400 (Wed, 24 Apr 2024 18:33:23 +0200)
Baerenblau via macports-users 
is rumored to have said:

> Hi,
>
> I'm on macOS 14.4.1 (23E224) and continue to experience a long standing 
> problem with bash from Macports

How long-standing? Just on Sonoma?

> % which bash
> /opt/local/bin/bash
>
> % bash --version
> GNU bash, Version 5.2.26(1)-release (x86_64-apple-darwin23.2.0)

Maybe rebuild this from source on the local machine? 14.4.1 is darwin 23.4.0, 
which *might* cause issues, although it should not, in principle. If you are 
not on an Apple Silicon Mac, you should definitely reinstall bash because you 
want your shell to be native code.

> For every command which is not found a error similar error like this is 
> printed:
>
> $ asdf
> objc[1321]: +[__SwiftNativeNSStringBase initialize] may have been in progress 
> in another thread when fork() was called.
> objc[1321]: +[__SwiftNativeNSStringBase initialize] may have been in progress 
> in another thread when fork() was called. We cannot safely call it or ignore 
> it in the fork() child process. Crashing instead. Set a breakpoint on 
> objc_initializeAfterForkError to debug.
> Abort trap: 6
>
> Xcode has been installed today. Then MacPorts has been updated to the latest 
> version, machine is rebooted, issue continues to exist.


Just as another data point: I have never seen anything like this despite 
running bash built using MacPorts for many years. The error message is not of a 
sort that I would expect to come out of bash itself, which I expect knows 
nothing of the Swift and objc runtimes. Also, you *should* be getting an error 
like  this:

$ dsfsfs
bash: dsfsfs: command not found

Guessing based on those observations, I suspect that you may have something in 
your bash environment that is causing this only when an executable file is not 
found in your $PATH because the process of searching for it and launching it 
hit an abort trap without indicating to bash that the command does not exist. I 
would start
troubleshooting this by minimizing your $PATH (to something like 
'/opt/local/bin:/opt/local/sbin:/bin:/sbin:/usr/bin:/usr/sbin') and removing or 
setting to defaults anything in bash's environment that could cause something 
to be done when you are given an interactive prompt or an error, i.e. 
$PROMPT_COMMAND, $PS1, $PS2, etc. Look in your .bash_profile, .bashrc, or 
.profile for anything being set or run that you don't understand.


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Latest Apache Segmentation Fault

2024-04-24 Thread Bill Cole

On 2024-04-24 at 01:34:11 UTC-0400 (Wed, 24 Apr 2024 05:34:11 +)
Horst Simon via macports-users 
is rumored to have said:


Hi,

I upgraded from MacPorts-2.8.1-13 to MacPorts-2.9.3-10.13 and did port 
update installed, this updated Apache 2.4.58 to Apache 2.4.59.
After the upgrade one URL which connects to the Horde Web server fails 
with following error in the apache error log:
[mpm_prefork:info] [pid 298] AH00162: server seems busy, (you may need 
to increase StartServers, or Min/MaxSpareServers), spawning 8 
children, there are 2 idle, and 4 total children


[core:notice] [pid 298] AH00052: child pid 715 exit signal 
Segmentation fault (11)


[core:notice] [pid 298] AH00052: child pid 714 exit signal 
Segmentation fault (11)




Other URL’s cacti and phpkyadmin are working fine.


I am not specifically familiar with Horde, but this looks like a failure 
of whatever Horde uses to run, e.g. php-fpm or mod_php. A common reason 
for this specific sort of failure is if you have different versions of 
PHP present and the loader manages to select conflicting versions of 
libraries



I still have MacPorts-2.8.1 on another machine and no updates and this 
one does not show any errors.




Are there changes in the updated apache which could cause this issues 
or additional parameters need to be changed?


Nothing in the Apache httpd 2.4.58->59 update itself is likely to cause 
trouble per se, but because it is a highly modular program with optional 
modules linking at run time, you can have mismatches between the core 
software and modules like mod_php.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com 
addresses)

Not Currently Available For Hire


Re: what app on a Mac reads/views ppm files?

2024-04-17 Thread Bill Cole
On 2024-04-16 at 22:44:22 UTC-0400 (Tue, 16 Apr 2024 19:44:22 -0700)
Kenneth Wolcott 
is rumored to have said:

> Hi;
>
>   what app on a Mac reads/views ppm files?
>
>   I've been looking at some code located on Rosetta Code that involves
> ppm files... https://rosettacode.org/wiki/Bitmap/Read_a_PPM_file

For a very long time, I've relied on GraphicConverter, which opens and saves a 
huge variety of formats including PPM, according to this page: 
https://www.lemkesoft.de/en/products/graphicconverter/key-features/import-and-export-formats

I have not personally used it with PPMs, but it has given me usable conversions 
of many other formats. It's a decent general-use graphics editor as well.


-- 
Bill Cole


Re: what MacPorts port would create a TAGS file (looks like a history helper, rlwrap?)

2024-04-12 Thread Bill Cole
On 2024-04-12 at 02:05:16 UTC-0400 (Thu, 11 Apr 2024 23:05:16 -0700)
Kenneth Wolcott 
is rumored to have said:

> I'll look in the emacs manual. Must have been some key I
> pressed by accident...

This is what I've said every time I've touched emacs...


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: build of rspamd and amavisd-new not working with High Sierra

2024-04-11 Thread Bill Cole

On 2024-04-11 at 06:18:58 UTC-0400 (Thu, 11 Apr 2024 20:18:58 +1000)
Horst Simon via macports-users 
is rumored to have said:

I understand the wiki information, but at a loss on how to get the 
patch.


Following the link Ryan put in the ticket and navigating the obfuscatory 
GitHub interface, I got to 
https://github.com/DCIT/perl-CryptX/pull/99/commits/9568b3e7ce17d9e3ace6ddbfb7df2d2e387aa91f 
which shows the patch graphically. If you are dedicated to actually 
using the 'patch' utility with a patchfile, there should be a way to get 
GitHub to provide that, but I don't see it. It is small enough (3 new 
lines and 2 changed across 2 header files and crypt.c) that you could 
make changes to the source by hand AFTER getting it downloaded, 
extracted, and patched by any pre-existing MacPorts patches, after which 
MacPorts won't notice your changes:


port patch  p5.34-cryptx

You will then have a copy of the source tree under the port's work 
directory (`port work p5.34-cryptx`) where you can edit the files and 
them try 'port build p5.34-cryptx' again.






On 11 Apr 2024, at 18:30, contextnerror  
wrote:



You would take the changes from the pull request and follow 
https://trac.macports.org/wiki/howto/PatchLocal


On Apr 11, 2024, at 1:15 AM, Horst Simon via macports-users 
 wrote:


 Thanks Ryan for the response I prefer to get the p5-cryptx 
working. Is there a how to or instruction on how to build it using 
the patch

Horst Simon



On 11 Apr 2024, at 17:48, Ryan Schmidt  
wrote:




On Apr 10, 2024, at 22:59, Horst Simon wrote:

I tried to install amavisd-new on macOS High Sierra but fails in 
the install of the dependency p5.34-cryptx, after this I tried to 
change to rspamd,

but rspamd  too fails to build.

I already created request ticket for p5.34cryptx. My question is 
is it possible to get at least on of these working on High Sierra 
and what is needed from me.


The rspamd problem is
https://trac.macports.org/ticket/63785. It currently cannot build 
for macOS 10.14 or earlier because it uses features from a newer 
version of C++ than those earlier macOS versions can normally 
accommodate.


The p5-cryptx problem is https://trac.macports.org/ticket/68470. I 
added a comment there about some similar upstream bug reports and a 
proposed upstream patch. You could try that patch and see if it 
solves the problem. If so we can add it to the port. If it doesn't 
solve the problem then report the problem to the developers so they 
can develop a fix.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com 
addresses)

Not Currently Available For Hire


Re: force rebuild a port

2024-03-06 Thread Bill Cole

On 2024-03-06 at 14:19:59 UTC-0500 (Wed, 6 Mar 2024 20:19:59 +0100)
Riccardo Mottola via macports-users 
is rumored to have said:


Hi!

suppose I want to rebuild a port, but it has no version update.
1) e.g. rev-upgrade shows it to be rebuild but "port outdated" doesn't 
show it.

2) Or I want to rebuild it with a different compiler.

How can I do? "port upgrade X" will do nothing because X is not 
outdated.
"port upgrade --force X" will upgrade all dependencies, which is a 
little too much...


1) in my case has issues because it wants to rebuild many packages and 
starts with one that breaks, so it never gets to the next one.
I tried using "-p" but apparently it is not respected for "port -p 
rev-upgrade" and still dies.


Try it stepwise. I believe that this will work to rebuild and install 
'crankyport' and nothing else, provided that none of the dependencies 
are out of date.


port fetch crankyport
port build crankyport
port uninstall crankyport
port install crankyport

But you need to understand that if a port has a dependency on another 
port, that dependency can only be met by the current version of that 
port. MacPorts has no mechanism to just use whatever version of a p[rt 
you happen to have installed.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Patch for 'skey' package submitted

2024-02-05 Thread Bill Cole

On 2024-02-04 at 20:53:36 UTC-0500 (Sun, 4 Feb 2024 20:53:36 -0500)
Link Dupont via macports-users 
is rumored to have said:

I think you linked to the wrong Trac ticket. The one you’re 
referring to is probably https://trac.macports.org/ticket/69280.


You are absolutely correct. I copied from the wrong tab.



Link

On Feb 4, 2024, at 18:12, Bill Cole 
 wrote:


They 'skey' package is an implementation of the S/Key algorithm 
derived from OpenBSD code over 20 years ago. It has not been built by 
the buildbots for any system after darwin19 because all the modern 
compilers (including Apple Clang called as 'gcc') enforce the C99 ban 
on implicit declarations.


There's a patch attached to the Trac ticket at 
https://trac.macports.org/ticket/69210 which adds the requisite 
#include statements.


Sorry for no pull request, but history tells me that putting one 
together properly takes me (a non-user of git, usually) a solid 10x 
as long as it should and annoys at least one person (me) and maybe a 
few more (actual devs seeing my messed-up PR.)



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Patch for 'skey' package submitted

2024-02-04 Thread Bill Cole
They 'skey' package is an implementation of the S/Key algorithm derived 
from OpenBSD code over 20 years ago. It has not been built by the 
buildbots for any system after darwin19 because all the modern compilers 
(including Apple Clang called as 'gcc') enforce the C99 ban on implicit 
declarations.


There's a patch attached to the Trac ticket at 
https://trac.macports.org/ticket/69210 which adds the requisite #include 
statements.


Sorry for no pull request, but history tells me that putting one 
together properly takes me (a non-user of git, usually) a solid 10x as 
long as it should and annoys at least one person (me) and maybe a few 
more (actual devs seeing my messed-up PR.)



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Questions on postfix

2023-12-29 Thread Bill Cole

On 2023-12-28 at 10:53:06 UTC-0500 (Thu, 28 Dec 2023 07:53:06 -0800)
Ubence Quevedo (thatrat) 
is rumored to have said:


Hi,

I’ve installed postfix and have configured it similarly to how I 
have it configured on some Linux systems using this tutorial 
[https://www.tutorialspoint.com/configure-postfix-with-gmail-on-ubuntu],


That's going to be deeply flawed on macOS. Ubuntu (as a Debian 
downstream) does major violence to the Postfix package and a tutorial 
won't map directly to macOS.


and when I install and configure postfix in macOS [and make some 
slight changes because everything is in /opt/local/etc/postfix], mail 
is not sent.


Sent by what means?
On what version of macOS?

What bothers me most is that I can’t find the log files for the 
macports version of postfix.


It's hard to say where you'll find logs, since you haven't mentioned 
your macOS version.


In an older version (10.x, basically,) you will get messages in 
/var/log/mail.log unless you've done something odd to /etc/syslog.conf 
and/or /etc/ASL.conf. The logging subsystem mostly worked like classical 
Unix/Linux syslog.


In modern macOS, Apple wrecked logging worse than Linux did with systemd 
and its rate-limiting. Wietse addressed both platforms' problematic 
logging by creating a logging subsystem just for Postfix called 
postlogd. Use that. Like all of Postfix it is well-documented.


Can someone point me in the right direction to where I can find them 
to see why my sending mail isn’t working?


The most likely root cause if you are using the standard command line 
tools is that you're using the Apple tools that expect to talk to the 
standard system Postfix, with sendmail under /usr, the spool in /var, 
and config in /etc/postfix. To fix that, you will need to put 
/opt/local/bin and /opt/local/sbin ahead of the system directories in 
your PATH environment variable.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Can't build "mpv"

2023-12-25 Thread Bill Cole
On 2023-12-25 at 15:49:41 UTC-0500 (Tue, 26 Dec 2023 07:49:41 +1100 
(EST))

Dave Horsfall 
is rumored to have said:


On Sun, 24 Dec 2023, Ryan Schmidt wrote:

That log doesn't seem to say much, other than that the real error may 
be

in the file meson-log.txt.


Aha; thanks.  I couldn't see the wood for the trees...

meson-log.txt:

--- stderr ---
env: python3: No such file or directory

Hmmm...  Looks like I lost python3 somehow; well, it's not urgent, so 
it

can wait.


FWIW: the MacPorts 'python3' is set by the 'port select' command (and 
requires python3_select.)


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Idiomatic process for handling needed external language modules for which there is no port

2023-12-16 Thread Bill Cole

On 2023-12-15 at 23:57:47 UTC-0500 (Fri, 15 Dec 2023 20:57:47 -0800)
Kenneth Wolcott 
is rumored to have said:


Idiomatic process for handling needed external language modules for
which there is no port

Hi;

  I'm trying to understand how to logically handle external modules
for a language under MacPorts.

TL;DR:

How do you do package management on MacPorts for languages which might
need modules which MacPorts doesn't have?


I have no general answer, but I have not had *substantial* problems with 
Perl for a small set of projects using your "Scenario A." CPAN installs 
into functionally correct places in a MacPorts Perl installation, and I 
don't recall anything from MacPorts that should even be called a 
warning.




  This problem exists for many languages supported by MacPorts; ie:
Perl, Python, Raku, Julia, etc

  Scenario A:

1.  Install Perl from MacPorts.
2. Need Perl module XYZ.
3. Perl module XYZ does not exist on MaqcPorts.
4. Install (using CPAN, CPANm, or manually) the XYX module locating it
under the MacPorts port.
5. MacPorts complains about things installed under /opt/local that it
didn't put there (makes sense).

Scenario B:
1.  Install Perl from MacPorts.
2. Perl script I want to use requires a more recent version of Perl
than those found on MacPorts.
3. Install my own version of Perl (usually from source).
4. Need Perl module XYZ.
5. Install Perl module XYZ (trying to match it with my own install
location, but frequently screw this up).
6. End up with weird path issues, Perl and/or module(s) all confused.

Scenario C:
1.  Install Perl from MacPorts.
2. Install Perl from perlbrew.
3. Run into problems with #3-6 from Scenario B.

Scenario D:
1 Use a Docker container for Perl exclusively for these experiments
that I'm trying to use Perl for (various math learning, etc);
2. Install Perl from source
3. Install all needed external Perl modules myself on the Docker 
container.


Looks like I end up using Scenario D for Perl and Raku.  Now
considering this for Julia, Python, Rust, etc

So one of my problems is that I do not have a foolproof method
(understanding) of how to install modules  (Perl, Raku, etc) so that
the modules are not in conflict with multiple installations of the
main language.

Bottom-line question:

How do you do package management on MacPorts for languages which might
need modules which MacPorts doesn't have?

Thanks,
Ken Wolcott



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: moar (better than less) conflicts with moarVM (needed for Raku)

2023-12-05 Thread Bill Cole

On 2023-12-05 at 15:07:56 UTC-0500 (Tue, 5 Dec 2023 12:07:56 -0800)
Kenneth Wolcott 
is rumored to have said:

[...]


~: sudo port -v -s install moar
--->  Computing dependencies for moar.
Error: Can't install moar because conflicting ports are active: MoarVM
Error: Follow https://guide.macports.org/#project.tickets if you
believe there is a bug.
Error: Processing of port moar failed

On Tue, Dec 5, 2023 at 11:04 AM Austin Ziegler 
 wrote:


`sudo port install moar +pager` should work after an update.


Those two command lines are not the same.

The "+pager" invokes a variant that fixes the problem by modifying the 
name of the conflicting executable.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Why all this GARBAGE WARE for one single app?

2023-11-25 Thread Bill Cole

On 2023-11-25 at 22:37:18 UTC-0500 (Sat, 25 Nov 2023 19:37:18 -0800)
Mark Dm 
is rumored to have said:

I am trying to install gedit on mac , installed macports, then the 
xcode
requirements rand the command to install gedit. Now about 209 minutes 
later

I am still seeing GARBAGE like GstreamerXXX and GstreamerYYY still
installing . THIS IS NUTS! I NEVER ASKED TO INSTALL GSTREAMER. I know 
there
are dependencies but how can gstreamer be a dependency for a text 
editor?


It is on EL-based Linux as well. 'dnf install gedit' on Alma9 comes back 
with a list of 170 packages including multiple gstreamer* packages. 
CentOS7 says it's got 108 dependencies.


It's a GUI text editor. It requires a GUI. Complain to GNOME.


WTF now it is installing something called "yelp"


That's the help browser for the GNOME desktop. I have no idea how 
essential it is for gedit, but it's deemed a "runtime" dependency, 
implying that it may be possible to create a variant that does not 
include help files or require yelp...



I remember now I tried MacPorts years ago and ended up having to 
reformat
my Mac to get all the speed back after the couple of apps I installed. 
I

regret trying it again and thing it is all a bunch of GARBAGE

Is this juist a method by which you can install garbageware onto a mac 
for

unsuspecting users?


I invite you to look at what MacPorts actually does. It's mostly TCL 
code which is documented and its operations are logged to whatever 
degree you desire to read.


If you deem the GNOME Desktop to be "garbageware" then I suggest that 
gedit is not the editor you really want.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ruby-select problem - Sonoma

2023-10-20 Thread Bill Cole

On 2023-10-19 at 18:47:01 UTC-0400 (Fri, 20 Oct 2023 11:47:01 +1300)
Chris F 
is rumored to have said:


On 20/10/23 11:17 am, Chris Jones wrote:




On 19 Oct 2023, at 10:58 pm, Chris F  wrote:



I've just migrated to Sonoma 14.0 via a clean OS install plus 
Migration Assistant and I'm now reinstalling my ports one at a time.


Port ruby31 installed without problems but ruby-select doesn't seem 
to work/be effective - after ruby-select ruby31 runs successfully, 
command "ruby" still starts the OS default ruby 2.6.10


I've checked /opt/local/bin/ruby and it points (correctly?) to 
ruby3.1.


Any advice would be appreciated.


Did you start a new terminal session after run port select for ruby ?


Yes I did, Chris - I shut terminal down and restarted it a couple of 
times as well.  Chris F


Check the order of directories in your $PATH environment variable. If 
the sub-directories under /usr are listed before those under /opt/local, 
you will use the base install executables instead oF those installed by 
MacPorts.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Unistalling gmic-gimp macport

2023-10-11 Thread Bill Cole

On 2023-10-11 at 07:22:44 UTC-0400 (Wed, 11 Oct 2023 11:22:44 +)
Michal Sidorczyk 
is rumored to have said:


Hi,

Very much thanks for very prompt answer.

So, I did reinstall the macports to Sonoma version, and then I 
followed this instruction:


https://guide.macports.org/chunked/installing.macports.uninstalling.html

to remove macports completely. However, /opt/local still contains data 
(I assume it is all macports related) and it is 2.7GB big.


Then something went wrong. Those instructions include totally removing 
/opt/local/ in section  2.4.3.



Can I just remove it manually safely?


If you want MacPorts and everything it ever installed totally gone, yes. 
Doing so is part of the uninstall instructions.


Moreover, it seems the uninstall procedure is pretty far from cleaning 
everything.


As you can see in section 2.4.3 of the guide, removal of /opt/local 
(along with a list of other possible locations where ports could have 
left pieces) is explicitly a part of the uninstall procedure. Why that 
failed to happen on your system is a mystery.


As I said installation of gmic-gimp port alone took 10GB. Not even 
mentioning the other part of macports. Now, after removal of all the 
ports, only 3GB of disk space was released. Adding 2.7GB from 
/opt/local makes it 5-6GB the top. Are there any other macports’ 
leftovers I should remove manually?


BR

Michal

From: Ryan Schmidt 
Date: Wednesday, 11 October 2023 at 10:49
To: Henning Hraban Ramm 
Cc: macports-users@lists.macports.org 
, basileu...@hotmail.com 


Subject: Re: Unistalling gmic-gimp macport
On Oct 11, 2023, at 02:03, Henning Hraban Ramm wrote:

 Am 11.10.23 um 07:34 schrieb Michal Sidorczyk:



I know there are some upgrade instructions, but I did not follow them, 
I admit. Having the problem with disk space I do not put even more 
overhead of it, without being certain that eventually I will get rid 
of this extra 10GB space.


Can you help me with my problem to remove gmic-gimp from my drive?

The error message you encountered can be overcome by installing 
MacPorts for macOS Sonoma. It should not need any more disk space than 
is already being used by MacPorts.



Just remove the complete MacPorts installation (/opt/local), you 
can’t use it anyway on a different platform.
Just removing /opt/local is not the correct way to uninstall MacPorts. 
The correct way is documented in the MacPorts Guide.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: perl --version is not at perl5.36 but at perl5.34 yet both are listed as active

2023-08-13 Thread Bill Cole

On 2023-08-13 at 20:21:23 UTC-0400 (Sun, 13 Aug 2023 17:21:23 -0700)
Kenneth Wolcott 
is rumored to have said:


Hi;

  I'm confused about what Perl I have installed vi MacPorts and what
is active and what I can use.


The short simple answer is: BOTH.



port installed | grep perl5
  ack @3.6.0_0+perl5_34
  ack @3.7.0_0+perl5_34 (active)
  docbook2X @0.8.8_11+perl5_34 (active)
  git 
@2.39.1_0+credential_osxkeychain+diff_highlight+doc+pcre+perl5_34
  git 
@2.39.2_0+credential_osxkeychain+diff_highlight+doc+pcre+perl5_34
  git 
@2.40.0_0+credential_osxkeychain+diff_highlight+doc+pcre+perl5_34
  git 
@2.40.1_0+credential_osxkeychain+diff_highlight+doc+pcre+perl5_34
  git 
@2.41.0_0+credential_osxkeychain+diff_highlight+doc+pcre+perl5_34 
(active)

  icoutils @0.32.3_1+perl5_34 (active)
  net-snmp @5.9.1_1+perl5_34+ssl (active)
  ossp-uuid @1.6.2_13+perl5_34+universal
  ossp-uuid @1.6.2_13+perl5_34 (active)
  perl5 @5.34.1_0+perl5_34 (active)
  perl5.34 @5.34.1_0 (active)
  perl5.36 @5.36.0_0
  perl5.36 @5.36.1_0 (active)
  po4a @0.66_0+perl5_34 (active)
  xmltoman @0.4_1+perl5_34 (active)

which perl
/opt/local/bin/perl

perl --version | head -2 | tail -1
This is perl 5, version 34, subversion 1 (v5.34.1) built for
darwin-thread-multi-2level


Note the illuminating output of "ls -l /opt/local/bin/perl*"

Which version is pointed to by the 'perl' symlink is determined by the 
variant of the perl5 port.




It looks like many perl5-based utilities are not yet updated to
perl5.36, yet I'd like to use perl5.36 when I'm writing a perl
program.


The layout of perl's components allows you to have multiple independent 
versions  installed without interfering with each other. In theory.




I apparently don't understand enough about how to use "port select"
even after several readings.


Yeah, I don't think the perl-select port works.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: p5-* perl module ports question

2023-06-20 Thread Bill Cole

On 2023-06-20 at 03:11:46 UTC-0400 (Tue, 20 Jun 2023 17:11:46 +1000)
raf via macports-users 
is rumored to have said:


Hi. All of the p5-* perl module ports have:

  perl5.branches  5.28 5.30 5.32 5.34

Why is that? There's a perl5.36 port,
and there are perl5.16-perl5.26 ports.

I'm curious. I was expecting to see a branch
for all available versions of perl5.


Not all modules are compatible with all Perl versions. Not all ports are 
maintained diligently, so when a new version  of Perl is a available, 
not all ports get updated immediately.


Sometimes it's just a formality. For example, Mail::SpamAssassin v4.0.0 
was released before Perl 5.36 and so none of us on the SA dev team 
tested it with  5.36. We do not claim that it works with 5.36, although 
we expect that it will. Some packagers are very picky about such things.


Historically, Mojca has been the SME and the most heroic heavy-lifter in 
keeping MacPorts' Perl jungle usable.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ports that are outdated but cannot be upgraded.

2023-03-29 Thread Bill Cole

On 2023-03-29 at 07:49:28 UTC-0400 (Wed, 29 Mar 2023 12:49:28 +0100)
Christopher Jones 
is rumored to have said:


Hio,

Your problem is precisely what it says at the end


Error: Failed to configure libtorrent-rasterbar: boost176 must be
installed with +python311.


you will likely have it installed with a different python version 
selected, and port respects this as your ‘choice’. You need to 
uninstall boost176 and reinstall it with the new default variants.


I agree 100%. Simple commands:

port uninstall boost176
port install boost176

Beware: building Boost from source is painfully slow.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ports that are outdated but cannot be upgraded.

2023-03-28 Thread Bill Cole

On 2023-03-28 at 15:03:48 UTC-0400 (Tue, 28 Mar 2023 12:03:48 -0700)
Kenneth Wolcott 
is rumored to have said:


HI;

  I ran a selfupdate successfully today.

Then "sudo port -v -s upgrade outdated" seemed successful.

But then:

--->  Scanning binaries for linking errors
Could not open 
/opt/local/libexec/boost/1.76/lib/libboost_python311-mt.dylib:

Error opening or reading file (referenced from
/opt/local/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/libtorrent.cpython-311-darwin.so)
--->  Found 1 broken file, matching files to ports
--->  Found 1 broken port, determining rebuild order
You can always run 'port rev-upgrade' again to fix errors.
The following ports will be rebuilt: libtorrent-rasterbar 
@2.0.8+python311

Continue? [Y/n]: n
~: port diagnose
[nothing returned]
port outdated
No installed ports are outdated.

So, this still seems less than ideal.


It seems to me that the right answer to rev-upgrade's "Continue?" prompt 
should always be "y" but I could be wrong.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ports that are outdated but cannot be upgraded.

2023-03-27 Thread Bill Cole

On 2023-03-27 at 17:54:53 UTC-0400 (Mon, 27 Mar 2023 14:54:53 -0700)
Kenneth Wolcott 
is rumored to have said:


Weird.  Getting ready to create a ticket for not being able to be
upgraded.  Now I see it does not show up on the outdated list.  Well,
the "replaced" ports are still in the outdated list.  Guess I'll just
ignore that.


What happens if you use 'port upgrade' instead of 'port install'?



On Mon, Mar 27, 2023 at 2:45 PM Kenneth Wolcott
 wrote:


Just successfully completed a selfupdate and the re-install of:

port -n upgrade --enforce-variants openssl3 +universal

Now what remains is what follows:

port outdated
The following installed ports are outdated:
libtorrent-rasterbar   2.0.8_0 < 2.0.8_1
py39-pep5170.13.0_0 < 0.13.0_1
py310-pep517   0.13.0_0 < 0.13.0_1
py311-pep517   0.13.0_0 < 0.13.0_1

So:

sudo port install libtorrent-rasterbar
Password:
--->  Computing dependencies for libtorrent-rasterbar
--->  Fetching archive for libtorrent-rasterbar
--->  Attempting to fetch
libtorrent-rasterbar-2.0.8_1+python311.darwin_22.arm64.tbz2 from
https://packages.macports.org/libtorrent-rasterbar
--->  Attempting to fetch
libtorrent-rasterbar-2.0.8_1+python311.darwin_22.arm64.tbz2.rmd160
from https://packages.macports.org/libtorrent-rasterbar
--->  Installing libtorrent-rasterbar @2.0.8_1+python311
Warning: boost176 must be installed with +python311.

I know that this will fail (tried it before), but to document the
failure, here goes:

Continue? [Y/n]: y
--->  Computing dependencies for libtorrent-rasterbar
--->  Cleaning libtorrent-rasterbar
--->  Scanning binaries for linking errors
--->  Found 1 broken file, matching files to ports
--->  Found 1 broken port, determining rebuild order
--->  Rebuilding in order
 libtorrent-rasterbar @2.0.8_1+python311
--->  Computing dependencies for libtorrent-rasterbar
--->  Fetching distfiles for libtorrent-rasterbar
--->  Verifying checksums for libtorrent-rasterbar
--->  Extracting libtorrent-rasterbar
--->  Applying patches to libtorrent-rasterbar
--->  Configuring libtorrent-rasterbar
Error: Failed to configure libtorrent-rasterbar: boost176 must be
installed with +python311.
Error: See 
/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_libtorrent-rasterbar/libtorrent-rasterbar/main.log

for details.
Error: rev-upgrade failed: Error rebuilding libtorrent-rasterbar
Error: Follow https://guide.macports.org/#project.tickets if you
believe there is a bug.

So, I'll file a bug for this part.

Now what about the other three ports?

Why are these ports still on my outdated list if they have been 
replaced?


sudo port -v -s install py39-pep517 py310-pep517 py311-pep517
py39-pep517 is replaced by py39-pyproject_hooks
--->  Computing dependencies for py39-pyproject_hooks.
--->  Cleaning py39-pyproject_hooks
--->  Removing work directory for py39-pyproject_hooks
py310-pep517 is replaced by py310-pyproject_hooks
--->  Computing dependencies for py310-pyproject_hooks.
--->  Cleaning py310-pyproject_hooks
--->  Removing work directory for py310-pyproject_hooks
py311-pep517 is replaced by py311-pyproject_hooks
--->  Computing dependencies for py311-pyproject_hooks.
--->  Cleaning py311-pyproject_hooks
--->  Removing work directory for py311-pyproject_hooks
--->  Scanning binaries for linking errors
Could not open 
/opt/local/libexec/boost/1.76/lib/libboost_python311-mt.dylib:

Error opening or reading file (referenced from
/opt/local/Library/Frameworks/Python.framework/Versions/3.11/lib/python3.11/site-packages/libtorrent.cpython-311-darwin.so)
--->  Found 1 broken file, matching files to ports
--->  Found 1 broken port, determining rebuild order
You can always run 'port rev-upgrade' again to fix errors.
The following ports will be rebuilt: libtorrent-rasterbar 
@2.0.8+python311

Continue? [Y/n]: n

Perhaps I should remove these ports?

I'll try that.

No, that's NOT a good idea :-(

sudo port -v uninstall py39-pep517 py310-pep517 py311-pep517
Note: It is not recommended to uninstall/deactivate a port that has
dependents as it breaks the dependents.
The following ports will break: py39-build @0.9.0_0
Continue? [y/N]: n
--->  Cleaning py39-pep517
--->  Removing work directory for py39-pep517
Note: It is not recommended to uninstall/deactivate a port that has
dependents as it breaks the dependents.
The following ports will break:
 py310-build @0.8.0_0
 py310-build @0.9.0_0
Continue? [y/N]: n
--->  Cleaning py310-pep517
--->  Removing work directory for py310-pep517
Note: It is not recommended to uninstall/deactivate a port that has
dependents as it breaks the dependents.
The following ports will break:
 py311-build @0.8.0_0
 py311-build @0.9.0_0
Continue? [y/N]: n
--->  Cleaning py311-pep517
--->  Removing work direct

Re: [mysterious owner of 'libc++.1.dylib']

2023-03-15 Thread Bill Cole

On 2023-03-15 at 14:00:44 UTC-0400 (Wed, 15 Mar 2023 18:00:44 +)
Maxim Abalenkov 
is rumored to have said:


Dear all,

I need help please. I’m compiling a C/C++ code base with clang++ 
compiler installed via MacPorts. When I look at the libraries my 
executable relies on I see:


  otool -L 
  /usr/lib/libc++.1.dylib (compatibility version 1.0.0, current 
version 1300.36.0)


What macOS version? I'm guessing Ventura...

That file doesn't exist on Big Sur (where there is a libc++.dylib 
elsewhere)  but it does on El Cap, where it is (sensibly) part of the 
base OS. I suspect that the version there is an indicator of macOS 13.



However, when I try to find out what package owns this library:

  sudo port provides "/usr/lib/libc++.1.dylib"
  /usr/lib/libc++.1.dylib does not exist.


Yes. MacPorts doesn't install libraries into /usr/lib. That would be 
bad.



Further inquiry with ‘pkgutil’ doesn’t shed more light either:

  pkgutil --file-info "/usr/lib/libc++.1.dylib"
  volume: /
  path: /usr/lib/libc++.1.dylib


Interesting. On my El Cap machine pkgutil shows that 
com.apple.pkg.Essentials and multiple com.apple.pkg.update.10.11.* 
packages included a file with that path.


Would you please tell me, who is the mysterious owner of the 
‘libc++’?


It is part of macOS itself. Specifically, it is the implementation of 
the standard C++ library developed by the LLVM project, which is used by 
the clang++ compiler.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ruby

2023-03-11 Thread Bill Cole

On 2023-03-11 at 13:05:54 UTC-0500 (Sat, 11 Mar 2023 13:05:54 -0500)
 
is rumored to have said:


Hi,
I need a quick ruby primer, please.

I'd like to install this,
https://github.com/pedrozath/coltrane


sudo gem install coltrane



won't work because I'm on Mojave with an an ancient ruby and this 
requires ruby 2.7 or above.




sudo port -vsN install ruby



installs ruby18 by default


sudo port -vsN install ruby27
sudo port select --set ruby ruby27


installs, but gem still complains.


What does 'which ruby' say?
How about 'sudo which ruby' ?
How about 'sudo which gem' ?

Make sure /opt/local/bin comes before /usr/bin in your $PATH.


just guessing at this point:

port -vsN install rb-rubygems



reinstalls ruby18 ><


Yes. The "ruby" port appears to be pegged at 1.8.7.


Help, please.


Worst case: The ruby?? ports each install their executable binaries in 
/opt/local/bin, so if for some reason reinstalling a recent ruby port 
and 'port select'ing it doesn't work, you can try:


sudo /opt/local/bin/gem3.0 install coltrane

Or whatever version of ruby you choose.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Request Alda and ABC packages exist on homebrew but do not exist as ports

2023-02-15 Thread Bill Cole

On 2023-02-15 at 16:40:00 UTC-0500 (Wed, 15 Feb 2023 13:40:00 -0800)
Kenneth Wolcott 
is rumored to have said:


Hi;

  I'd like to request that the software 'Alda' and 'ABC (notation) be
added as ports.  They both exist on homebrew.

https://abcnotation.com/


It's not clear which of the dozens of programs linked from the 
'software' page you are interested in. There's nothing there which makes 
me think that it is the website for any software, but rather it appears 
to be for the ABC standard.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Co-existance of MacPorts and Brew?

2023-02-15 Thread Bill Cole

On 2023-02-15 at 14:54:40 UTC-0500 (Wed, 15 Feb 2023 14:54:40 -0500)
André-John Mas 
is rumored to have said:


Hiya,

What is the current status of co-existence of Brew and MacPorts on the 
same machine?

Previously this was meant to be a problem.


It remains problematic. The conflict is intrinsic, and cannot be solved 
completely without one of the projects adopting the policies and 
practices of the other in a fundamentally incompatible way.


With that baseline understanding, you can use both never (if you are 
careful and lucky,) have a problem.



I am asking this question, since I am finding more and more recipes 
pointing towards

using Brew, instead of MacPorts.


If you try to use both it will *mostly* work and you may never encounter 
a problem, but if you do run into a conflict, it could be very hard to 
find a solution.


The underlying problem is that many open source packages have /usr/local 
hardcoded into their build, install, or load, such that even if they are 
made to live in and use the world under /opt/local (i.e. MacPorts) they 
may still look for shared libraries under /usr/local first. If you have 
a Brew world under /usr/local, there's a significant chance that if you 
build MacPorts packages from source, some configure script will pick 
stuff in /usr/local/ to use instead of the /opt/local components. That 
may work, until the next upgrade of the relevant packages on one side or 
the other.


The latest one I ran into was Vagrant, which indicates how to use Brew 
to install, but

nothing for MacPorts:

https://developer.hashicorp.com/vagrant/downloads

Also, there doesn't seem to a version of Vagrant in MacPorts.


If there's a recipe for brew, it shouldn't be terribly hard to create a 
port for MacPorts. All it takes is someone willing and able to do the 
work of creating the portfile and porting patches as needed.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: what is the MacPorts equivalent of homebrew pinning; freezing an installed version?

2022-12-28 Thread Bill Cole
On 2022-12-27 at 16:43:18 UTC-0500 (Tue, 27 Dec 2022 13:43:18 -0800)
Kenneth Wolcott 
is rumored to have said:

> Hi;
>
> what is the MacPorts equivalent of homebrew pinning; freezing an
> installed version?

There is none.

Just don't upgrade.




-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Finding dependents

2022-12-23 Thread Bill Cole

On 2022-12-23 at 07:49:09 UTC-0500 (Fri, 23 Dec 2022 13:49:09 +0100)
Gerben Wierda via macports-users 
is rumored to have said:

Ik keep struggling when I try to find out dependencies once in a 
while.


Suppose I have this installed:

  postfix @3.7.2_0+dovecot_sasl+pcre+smtputf8+tls (active)

How do I find out the port dependencies with the port command such 
that port tells me my postfix depends on port:pcre?



# port rdeps postfix @3.7.2_0+dovecot_sasl+pcre+smtputf8+tls
The following ports are dependencies of postfix 
@3.7.3_0+dovecot_sasl+pcre+smtputf8+tls:

  pcre
bzip2
libedit
  ncurses
zlib
  xz
gettext
  libiconv
gperf
  libtextstyle
  gettext-runtime
  gettext-tools-libs
  icu
  openssl
openssl3


OR, if you want something that doesn't require you to know the variants:

# port rdeps `port -q installed postfix|cut -d'(' -f1`
The following ports are dependencies of postfix 
@3.7.3_0+dovecot_sasl+pcre+smtputf8+tls:

  pcre
bzip2
libedit
  ncurses
zlib
  xz
gettext
  libiconv
gperf
  libtextstyle
  gettext-runtime
  gettext-tools-libs
  icu
  openssl
openssl3





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: a2ps fails to install (compressed log attached)

2022-12-19 Thread Bill Cole

On 2022-12-19 at 16:47:41 UTC-0500 (Mon, 19 Dec 2022 13:47:41 -0800)
Kenneth Wolcott 
is rumored to have said:


Hi Bill;

Here is some more information:

ls -ld /opt/local/bin/makeinfo
lrwxr-xr-x  1 root  admin  8 Dec  9 19:36 /opt/local/bin/makeinfo -> 
texi2any


port list texinfo
texinfo@7.0.1  textproc/texinfo

ls -ld /opt/local/bin/texi2any
-rwxr-xr-x  1 root  admin  68708 Dec  9 19:36 /opt/local/bin/texi2any

port contents texinfo | grep texi2any
  /opt/local/bin/texi2any
  /opt/local/share/info/texi2any_api.info
  /opt/local/share/info/texi2any_internals.info
  /opt/local/share/man/man1/texi2any.1.gz

I've never created a MacPorts bug report before; guess it is time to
learn how to do that :-)


Looks like a simple fix. The Portfile for a2ps includes this definition:

MAKEINFO=/usr/bin/makeinfo

Which would explain why the build failed and why the config didn't 
bother looking for a working makeinfo.





Thanks,
Ken

On Mon, Dec 19, 2022 at 1:28 PM Bill Cole
 wrote:


On 2022-12-19 at 15:03:35 UTC-0500 (Mon, 19 Dec 2022 12:03:35 -0800)
Kenneth Wolcott 
is rumored to have said:


Hi;

  a2ps fails to install (compressed log attached).

one item I noticed (several instances:
:info:destroot /bin/sh: /usr/bin/makeinfo: No such file or directory

Does this mean that there is a missing dependency?


It looks like it's saying that the version of 'makeinfo' that has
historically been included in macOS is not present.

That seems like something Apple might have done in a recent version, 
as

they have been removing GNU tools pretty aggressively. It was still
there in Catalina (which is as far as I've ventured...)

If it really is gone, you can get a version by installing the 
'texinfo'

port, but it won't be at that path and it won't be whatever version
Apple last had in the base system. However, it might be noticed and 
used

by the a2ps configure stage and if so, should work. I expect that the
proper solution will be to add texinfo as a dependency.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: a2ps fails to install (compressed log attached)

2022-12-19 Thread Bill Cole

On 2022-12-19 at 15:03:35 UTC-0500 (Mon, 19 Dec 2022 12:03:35 -0800)
Kenneth Wolcott 
is rumored to have said:


Hi;

  a2ps fails to install (compressed log attached).

one item I noticed (several instances:
:info:destroot /bin/sh: /usr/bin/makeinfo: No such file or directory

Does this mean that there is a missing dependency?


It looks like it's saying that the version of 'makeinfo' that has 
historically been included in macOS is not present.


That seems like something Apple might have done in a recent version, as 
they have been removing GNU tools pretty aggressively. It was still 
there in Catalina (which is as far as I've ventured...)


If it really is gone, you can get a version by installing the 'texinfo' 
port, but it won't be at that path and it won't be whatever version 
Apple last had in the base system. However, it might be noticed and used 
by the a2ps configure stage and if so, should work. I expect that the 
proper solution will be to add texinfo as a dependency.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


WARNING: Validate your icu dependents.

2022-12-14 Thread Bill Cole
This is NOT a request for assistance or advice, just a warning from a 
fellow user of an issue you MAY run into this week that you should be 
aware of...


Recently the 'icu' port got updated and as a result, many dependents 
need updates after installing the new icu. Most ports will Just Work if 
you're installing prebuilt binaries or building everything from source. 
HOWEVER, if you (like me) have MacPorts worlds that support and/or are 
supported by installations of non-MacPorts packages (e.g. Perl modules 
lacking ports) you may find that you have weird failures after MacPorts 
upgrades because of some link problem deep in a call chain somewhere... 
If the failure involves non-mp pieces, rev-upgrade either won't catch it 
or won't fix it.


I've run into a few of these in the past 3 days, and rather than  doing 
careful analysis I'm currently just rebuilding a few things (e.g. Perl 
itself and all my non-mp modules) from source locally to clean it up. I 
needed to do the same with  Postfix, but only because I use a bunch of 
variants.


If you cannot afford to put in at least a few minutes of validation and 
maybe a few hours of rebuild, you may want to postpone your regularly 
scheduled sync/upgrade cycle until you can watch it more carefully.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Ventura archives?

2022-12-01 Thread Bill Cole

On 2022-12-01 at 11:10:31 UTC-0500 (Thu, 01 Dec 2022 11:10:31 -0500)
Andy Hall 
is rumored to have said:

I've noticed that since the Ventura update in October I've had to 
build all packages locally instead of downloading archives from 
packages.macports.org. The logs show that it's looking for darwin_22 
versions of each package, but there are none available.


Just curious, how long does it usually take for the new archives to 
become available? I looked around in the wiki and issue tracker, but I 
couldn't find any hints at how this usually works.


My understanding from  prior answers on this list to exactly this 
question is that there is no known date yet and the sticking point is 
someone contributing a suitable machine to the build farm.


So, do not hold your breath waiting...

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Running open source 'unix' services via MacPorts on macOS is no longer feasible for me

2022-11-29 Thread Bill Cole
e 'old' way of doing things is less and less supported and 
certainly not a focus for Apple to keep operational (which is dumb 
because by not supporting they are flying blind for the kind of 
resource leak errors I seem to have encountered). So, install unbound, 
and after boot macOS will ask you 'do you want unbound to accept 
incoming connections?'. Yes, of course, but that setting doesn't 
stick. After every next reboot, the same happens. Run the same 
executable side by side on different ports, and ALF gets confused. So, 
not only is the old ACL/POSIX way of permissions no longer properly 
implemented, the new system is not friendly for your own compiled 
stuff.


If you code for Macs outside of Apple's macOS commercial ecosystem and 
rely on cross-platform compatibility via the use of standard POSIX APIs, 
you will have trouble with any daemon-like software unless you make 
special accommodations for the extra security on macOS. The same is true 
of similar novelties on other platforms (SELinux, systemd, etc.) but 
Apple has done a very poor job of giving developers the tools and docs 
to Just Work.


[...]


Apple turns macOS into a purely consumer appliance, it seems.


Yes.

That is their good right, but they also starve attention to the old 
unixy-way of things, leading to weak (certainly not robust) 
implementations of the unix-side. And that might be the eventual death 
of MacPorts unless it goes full in on Apple's new security model, 
signing and all.


I expect that much of MacPorts can continue to work just fine, because 
so many ports are NOT server packages of any sort.


And for the time being, Apple's own suggestion to move to open source 
variants of the macOS Server stuff they abandoned, is not to be taken 
seriously as they also are not serious about the foundation those open 
source elements need.


Absolutely correct. Apple is not serious about maintaining robust 
compatibility with the POSIX-compliant world in regards to anything that 
runs in the background without a UI and talks to the net. They do not 
want anyone doing that on their devices but them. Whatever they have 
said about replacing Server is disingenuous lip service. There's nothing 
for Apple to gain by maintaining the ability to run free software that 
is not wedded in any exclusive sense to their platform.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Emacs.app does not run after upgrade to macOS 13.0.1

2022-11-10 Thread Bill Cole
On 2022-11-10 at 12:56:27 UTC-0500 (Thu, 10 Nov 2022 18:56:27 +0100)
Artemio González López via macports-users 
is rumored to have said:

> After installing the 13.0.1 update on my M1 MacBook Pro I emacs.app crashes 
> on launch. Apparently, the problem is that it cannot find a library:
>
> Crashed Thread:0
>
> Exception Type:EXC_CRASH (SIGABRT)
> Exception Codes:   0x, 0x
>
> Termination Reason:Namespace DYLD, Code 1 Library missing
> Library not loaded: /opt/local/lib/libicui18n.71.dylib
> Referenced from: <45F9A0DF-B06D-34C8-946F-88FFA574E722> 
> /opt/local/lib/libxml2.2.dylib
> Reason: tried: '/opt/local/lib/libicui18n.71.dylib' (no such file), 
> '/System/Volumes/Preboot/Cryptexes/OS/opt/local/lib/libicui18n.71.dylib' (no 
> such file), '/opt/local/lib/libicui18n.71.dylib' (no such file), 
> '/usr/local/lib/libicui18n.71.dylib' (no such file), 
> '/usr/lib/libicui18n.71.dylib' (no such file, not in dyld cache)
> (terminated at launch; ignore backtrace)
>
> Does anybody know how to fix this? (I depend on Emacs.app for all my LaTeX 
> editing, so this is quite a problem for me).

Did you follow the documented NECESSARY procedure for reinstalling MacPorts 
after an OS upgrade?


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Big Sur on M1 - bind9 named daemon don't run

2022-09-22 Thread Bill Cole

On 2022-09-22 at 10:55:06 UTC-0400 (Thu, 22 Sep 2022 15:55:06 +0100)
Mark Lucas 
is rumored to have said:

Sorry to probably ask the obvious but what command do I use to start 
it manually?


/opt/local/sbin/named -g -u named

That will start named in the foreground of your terminal and force all 
logging to the terminal on the 'standard error' file descriptor, so 
you'll see anything named emits as an error.


You can add a "-d #' option where '#' is a digit with higher numbers 
giving more detail. If running without that option does not give you 
anything helpful, start with '-d 1' and if you don't get anything, try 2 
then 3 etc. If mem ory serves me, there's a level (4? 5?) where the 
volume of output precludes eyeball analysis. You should not need that.





On 22 Sep 2022, at 15:27, Daniel J. Luke  wrote:


On Sep 22, 2022, at 8:56 AM, Mark Lucas  wrote:
I just updated to bind 9.18.7 (Intel mac mini - macOS 12.6 ) and 
despite checking the config was ok, which it was, bind refuses to 
start.
Looking at the contents of /opt/local/var/named/ mysteriously most 
of the files were now listed as being owned by non existent user 
511.
e.g. -rw-r--r--   1 511named  -   3.2K  4 Aug  2021 
named.root
Tried uninstalling and reinstalling bind9 and changing 
/opt/local/var/named/ files owner to named but the problem remains.


I think the permissions stuff is unrelated to the port - it only 
installs these files into /opt/local/var/named:


% port contents bind9 | grep /opt/local/var/named
 /opt/local/var/named/db.127.0.0.dist
 /opt/local/var/named/db.cache.dist
 /opt/local/var/named/db.localhost.dist

You can try to start named by hand with `-g` (and maybe add a -d # 
option) to try to get more information on why it's not starting for 
you.


--
Daniel J. Luke




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Big Sur on M1 - bind9 named daemon don't run

2022-09-22 Thread Bill Cole

On 2022-09-22 at 10:27:16 UTC-0400 (Thu, 22 Sep 2022 10:27:16 -0400)
Daniel J. Luke 
is rumored to have said:


On Sep 22, 2022, at 8:56 AM, Mark Lucas  wrote:
I just updated to bind 9.18.7 (Intel mac mini - macOS 12.6 ) and 
despite checking the config was ok, which it was, bind refuses to 
start.
Looking at the contents of /opt/local/var/named/ mysteriously most of 
the files were now listed as being owned by non existent user 511.
e.g. -rw-r--r--   1 511named  -   3.2K  4 Aug  2021 
named.root
Tried uninstalling and reinstalling bind9 and changing 
/opt/local/var/named/ files owner to named but the problem remains.


named.root is the historical name of the root cache for BIND. Identical 
to what MacPorts installs as db.cache.dist. The directory 
/opt/local/var/named/ and everything in it should be owned by user and 
group 'named'


It looks possible that you've somehow had the user 'named' deleted (and 
it formerly had id 511.) That would cause permission problems.




I think the permissions stuff is unrelated to the port - it only 
installs these files into /opt/local/var/named:


% port contents bind9 | grep /opt/local/var/named
  /opt/local/var/named/db.127.0.0.dist
  /opt/local/var/named/db.cache.dist
  /opt/local/var/named/db.localhost.dist

You can try to start named by hand with `-g` (and maybe add a -d # 
option) to try to get more information on why it's not starting for 
you.


--
Daniel J. Luke



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Unable to build XV

2022-09-18 Thread Bill Cole
On 2022-09-18 at 21:33:32 UTC-0400 (Mon, 19 Sep 2022 11:33:32 +1000 (EST))
Dave Horsfall 
is rumored to have said:

> And because XV is broken I can't continue with upgrading following ports

You can get around that by explicitly excluding xv, e.g.:

port -v upgrade active and not xv



-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: libgcc9 and other ports that will never build on my system

2022-09-12 Thread Bill Cole

On 2022-09-12 at 15:02:47 UTC-0400 (Mon, 12 Sep 2022 15:02:47 -0400)
 
is rumored to have said:



Yes, you got it. How do I command MacPorts to upgrade all outdated 
ports "and not" this whatever troublesome port?  Is there a way? If 
you just told me, you'll have to be less subtle.


3rd time's a charm maybe? Here's the command on a single line all by 
itself. enter all of it, hit return, and nothing more:


sudo port upgrade outdated and not libgcc9

Really. I was not kidding. This syntax is documented in the port(1) man 
page.



P.S. no need to CC me on anything sent to this list.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: libgcc9 and other ports that will never build on my system

2022-09-12 Thread Bill Cole

On 2022-09-12 at 01:29:31 UTC-0400 (Mon, 12 Sep 2022 01:29:31 -0400)
 
is rumored to have said:


With Mojave on Macmini6,1 & XCode 11.3.1
I get this:

port -vsN upgrade libgcc9
--->  Computing dependencies for libgcc9.
--->  Fetching distfiles for libgcc9
Error: gcc9 9.5.0 is not supported on Darwin 18 i386


Why are you trying to to build it for i386, e.g. 32-bit? Is there some 
dependent that can't be built for x86_64?


That's the proximal issue, but it is probably not addressable by simply 
re-installing without the universal variant. See below.




Error: Failed to fetch libgcc9: incompatible macOS version
Error: See 
/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_lang_gcc9/libgcc9/main.log 
for details.
Error: Follow https://guide.macports.org/#project.tickets if you 
believe there is a bug.

-

I saw a bug report was opened, but wasn't paying much attention. This 
was closed 2 months ago

https://trac.macports.org/ticket/65415


Probably more relevant is this closed bug: 
https://trac.macports.org/ticket/65518


The bottom line there: GCC9 9.5.0 or greater won't work on 10.11 or 
later. Just will not. Upgrade to a later GCC, if you really need GCC.



In a couple or few other bug reports I've opened, most fixed and 
closed in due course, which is how I have known things to operate for 
the better part of 2 decades. But occasionally, some tickets are 
closed without the defect  being fixed, with something posted to the 
effect "you're not using the right version of XCode for your system, 
and we're not going to support it... " or similar, and I don't know 
what the heck they're talking about, because XCode 11 requires macOS 
10.14 or later, and I don't know what other version of XCode I'm 
supposed to be using on Mojave. But there's a further port here, which 
is that some maintainers and bug fixing volunteers, those that usually 
fix and close bug reports, seem to want to close these tickets even 
though the problem still exists, as though there is a mean boss 
somewhere putting pressure on them to close tickets when, sometimes, 
the defect still exists, as though closing a ticket has some magical 
effect. This is just an uninformed opinion from mild exasperation.


Because MacPorts is downstream of all ports, there are simply some 
problems that cannot be addressed by the MacPorts Project. Some problems 
can't be fixed because no one who could fix it (e.g. GCC upstream) 
considers it a problem or has a motivation to fix it. There is 
absolutely no benefit in leaving a downstream ticket open for an issue 
that can only be fixed upstream, but where upstream has decided not to 
fix it.


So there's that. But the other thing is, I just don't care, if 
something isn't going to work, fine. But how do I get it to stop 
showing up in my outdated list so that I can just blanket-upgrade the 
outdated ports without the upgrade command failing when it reaches the 
problematic port? I'm sure it's in the manual somewhere, but I figured 
Ryan and a couple others seem to know the manual by heart and may have 
mercy on me and my bad eyes, and tell me how to stop a port from being 
reported it is outdated.


MacPorts isn't designed to work around ports that have been pinned at an 
obsolete version. As long as you have libgcc9 installed via MacPorts on 
Mojave, it will show up as outdated and fail to upgrade.


Options:

1. Just remove libgcc9. It is old enough that there's a real chance that 
every reason you ever had to install it no longer demands that version.


2. Run 'port rdependents libgcc9' to get a list of what must be updated 
to a modern GCC in order to work. Install a modern libgcc version and 
rebuild those, then see #1.


3. "sudo port upgrade outdated and not libgcc9" should work, but it will 
leave everything dependent on libgcc9 at older versions.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: x86_64 version of libncurses

2022-08-30 Thread Bill Cole

On 2022-08-30 at 13:24:41 UTC-0400 (Tue, 30 Aug 2022 13:24:41 -0400)
Murray Eisenberg 
is rumored to have said:

Under macOS 12.5.1 on an M1 Mac, I'm trying to use the SageMath system 
(https://www.sagemath.org <https://www.sagemath.org/>) from the 
command-line in Terminal, and for that libncurses is required.


Under MacPorts 2.7.2 I have:

 sudo port installed | grep ncurses
 ncurses @6.3_0 (active)


If that was built with +universal, it would say so.



And sudo port info ncurses says that it is universal and is for 
platforms darwin, freebsd.


'port info' tells you about the AVAILABLE port, not the INSTALLED port.

'port installed' tells you about what you actually have installed.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: What happens when a port fails to compile (+universal) and there is no maintainer?

2022-08-22 Thread Bill Cole

On 2022-08-22 at 10:26:14 UTC-0400 (Mon, 22 Aug 2022 15:26:14 +0100)
Philip Potter 
is rumored to have said:


Hi,

What happens when a port fails to compile (+universal) and there is no 
maintainer?


The failure remains until someone with the right combination of skill 
and motivation fixes it.


I see you opened a bug repoert at https://trac.macports.org/ticket/65671 
so at least it is visible.



ie jemalloc? <https://ports.macports.org/port/jemalloc/details/>

The auto build build either an arm64 or an x86_64, so seems like no 
one would ever know if a +universal build fails.


It's unclear to me why anyone would need a universal build for something 
so low-level. Looking *cursorily* at the errors in the log in your bug 
report, I suspect it may be due to the code not having support for a 
universal build. You may want to also open an upstream bug, if you can 
analyze it well enough to determine that upstream fixes are required.



How or who resolves this kind of issue?


Maybe you? Maybe the upstream developers of jemalloc? Maybe no one? 
MacPorts is run by volunteers and has a very open contribution 
environment. To the best of my knowledge, there has not been any 
meaningful corporate support for the project for many years, so no one 
is really accountable for whether any particular bug is ever fixed.


Note that this is not meant as criticism of the MacPorts project in any 
way. It's the nature of FOSS: much of the work is done by people fixing 
their own issues and sharing the fixes.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Is there a well-defined way to do "bleeding edge" ports? Should there be one?

2022-05-21 Thread Bill Cole

On 2022-05-21 at 20:23:49 UTC-0400 (Sat, 21 May 2022 20:23:49 -0400)
Andrew Udvare 
is rumored to have said:

If it's off GitHub or GitLab you don't have to create the tarball 
unless it
has submodules (you can also fetch multiple tarballs but this is 
complex).


In this case (and for many ASF projects) the master version control is 
Subversion, so the only way I'm getting a tarball is making it 
client-side.


I actually have a script to update my ports that are of 'latest 
version'

tarballs.

https://github.com/Tatsh/ports/blob/master/_resources/bin/liveupdate


That could be useful, thanks.

Unfortunately on MacPorts there's no PortGroup to use git or similar 
to
fetch the latest code. I guess it's because it will almost certainly 
bring

more tickets into the system


Understood. I see this mostly as a developers tool, with explicit 
non-support.



especially when said latest versions are
important dependencies. On Gentoo we do have this feature (provided by
eclasses, equivalent of PoetGroup) and you have to make configuration
changes to use it when it comes to packages in the main tree. This 
makes
the point that you're on your own when you start doing this to your 
system.


You can write your own PortGroup to do this so the code can be shared 
among

your ports, similar to Gentoo's way:

https://gitweb.gentoo.org/repo/gentoo.git/plain/eclass/git-r3.eclass

Basically, git clone if the clone isn't there already, update 
otherwise

(replacing fetch phase). Don't forget submodules. Make the clone live
somewhere permanent until the package is uninstalled. When installing, 
copy
recursively the clone to the normal build directory (replacing the 
extract

phase) then the rest of the system can work as is.


Food for thought. Thanks.




On Sat, May 21, 2022, 16:38 Bill Cole <
macportsusers-20171...@billmail.scconsult.com> wrote:


On 2022-05-21 at 15:24:23 UTC-0400 (Sat, 21 May 2022 15:24:23 -0400)
Andrew Udvare 
is rumored to have said:


Rather than pull via version control,


Which is MY GOAL, not an incidental mechanical issue.


grab a tarball with the SHA you want.


Which would mean creating an ad hoc tarball before each (rapid) 
update.



That's how I do 'latest' version ports.


Well, that requires:

1. creating a tarball
2. calculating the hashes
3. editing the portfile

Which is a lot of fiddling for each new version.
My goal is to NOT do all that, but to get the same installation that 
I
would get if I did. It is also to have a way that non-developer users 
can
easily install the actual latest version of the moment, which is 
sometimes

the easiest way to get fixes that don't merit a full release.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Is there a well-defined way to do "bleeding edge" ports? Should there be one?

2022-05-21 Thread Bill Cole
On 2022-05-21 at 15:24:23 UTC-0400 (Sat, 21 May 2022 15:24:23 -0400)
Andrew Udvare 
is rumored to have said:

> Rather than pull via version control,

Which is MY GOAL, not an incidental mechanical issue.

> grab a tarball with the SHA you want.

Which would mean creating an ad hoc tarball before each (rapid) update.

> That's how I do 'latest' version ports.

Well, that requires:

1. creating a tarball
2. calculating the hashes
3. editing the portfile

Which is a lot of fiddling for each new version.
My goal is to NOT do all that, but to get the same installation that I would 
get if I did. It is also to have a way that non-developer users can easily 
install the actual latest version of the moment, which is sometimes the easiest 
way to get fixes that don't merit a full release.


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Is there a well-defined way to do "bleeding edge" ports? Should there be one?

2022-05-21 Thread Bill Cole
I'm currently working on a OSS project (SpamAssassin) which is in a pre-release 
rush and which I ultimately test & deploy via MacPorts.

I'd *like* to be able to switch from the current supported release in MacPorts 
to a fresh build from a Subversion checkout without manually mimicking what MP 
does (in part because I'm not 100% confident that I am doing it right) so that 
I can do testing iteration in a more efficient and repeatable fashion. This 
would be a different level of 'reckless cowboy' beyond the '-devel' ports we 
already have here and there with prerelease software.

I expect that this does not exist (I can't find anything...) but that it could. 
MP would need to always do a fetch/checkout/update/pull from the source control 
repo (I presume it would need BOTH svn and git support) and require use of a 
secure transport to make trusting the code without tarball checksums reasonable.

Does anyone else like the idea of this? See a need? Hate it? Already have a 
private tool for this?

-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Hello i'm new user on macports and i really don't know how to install all version of chrome

2022-05-03 Thread Bill Cole

On 2022-05-03 at 12:14:20 UTC-0400 (Tue, 3 May 2022 19:14:20 +0300)
Максим Овчаренко 
is rumored to have said:

Can you wrote me instruction about port installation of all ports of 
chrome


There is no port of Chrome (Google's web browser) in MacPorts. You can 
install Chrome from the Google web site.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Somewhat off topic - keeping older Macs running

2022-04-25 Thread Bill Cole

On 2022-04-25 at 03:06:25 UTC-0400 (Mon, 25 Apr 2022 15:06:25 +0800)
James 
is rumored to have said:


On 25 Apr 2022, at 1:44 pm, Dave Horsfall  wrote:

On Mon, 25 Apr 2022, James wrote:


I too have old macs that cant be updated. I just keep a time machine
backup and if ever I get hacked a quick restore will fix. For 10 
years

I've had no issues !!


Your "old macs" are not protected by a firewall?  One day...

As for backups, consider malware that will not trigger until well and
truly embedded into your backups; not much use then, are they?


Dave methinks there is lots of hysteria in the arena


Yes, but there is also a lot of nasty reality.

I have no firewall on my modem and no firewall on any of my machines. 
Yet the world is full of stories about exploits! Most of those are 
windows exploits!


Most but by no means all. A lot of modern attacks are multi-platform as 
they start as scripts on web pages that run in any browser, or as abuse 
of embeded execution mechanisms such as VBA in MS apps and embedded 
JavaScript in PDFs.



Lets consider firewalls:

By RFC no router on the internet may route a private IP. So *every* 
router between you and bad guys is broken!


So, this glosses over a couple of things...

1. Enabling NAT in your router (which may also be a modem) is a *form* 
of a firewall. Without NAT, 'private' (RFC1918) IPs do in fact not route 
anywhere. With NAT, the world only sees your external non-private 
address(es)


2. If by chance there was massive external breakage allowing outsiders 
to route your private network, if your own router isn't badly broken, it 
will drop private IPs on the public interface anyway.


So this is a pointless statement...

A firewall allows ESTABLISHED,RELATED traffic back, so if you've got a 
bad machine then bad guys can get to that machine and from there to 
your macs.

If you have a compromised machine then it is a target.


Macs can be compromised.

A decade ago one of the anti-virus companies offered $10 000 and a 
Sony Viao to first person to hack their honeypots. The windows 
honeypot was hacked in under an hour, the mac in a week (a flaw in 
safari) and the linux 'pot has never been hacked. They ascribed this 
to being unkewl to hack linux. Nonsense you'd be a hero for exposing a 
flaw (as has happened a couple of times.)


Urban legend unless you actually identify a reliable source...

I've been administering Internet-connected systems for 30 years, 
including Linux systems back to v0.99 and Macs back to System 7 with 
MacSLIP. I guarantee you that there is no such thing as an unhackable 
OS. I don't believe there has been a year since my first use of Linux 
where there has not been at least one publicly documented RCE 
vulnerability in core Linux components such as the kernel, core 
utilities, and Bash.


I have not been unlucky enough to have had a machine on the Internet 
that I was responsible for get taken over, but I recognize that as a 
function of luck. I did get hit by a couple of Mac viruses back in the 
80's and early 90's, but those all came via disk swapping and dialup 
BBSs. However, in my consulting and sysadmin work I've had to clean up a 
LOT of compromised boxes, including Mac, Linux, Solaris, Tru64, and 
BSDOS machines. And a few Windows machines, although I mostly avoid 
those.


If you enjoy playing then by all means, if not then enjoy an icecream, 
except if you have windows machines on your network forget the 
icecream.


I guess IPV6 will change the landscape somewhat.


Not so much, except that some people will take their non-shortage of 
address space as an excuse to stop NATing at their borders, which would 
be unwise.


The subtle comment about ring 0: linux and mac work in a way that is 
very limited, what disk?, whereas widows you are not allowed, here is 
$100, well ok.


Query: heresay not allowed, who has ever had a mac hacked?


Not my own, but I've cleaned up the mess when others have been careless, 
thinking they were safe because they had a Mac.


Especially of note for older Macs in recent years is the "ShellShock" 
vulnerability in older Bash, which was directly exploitable via Apache 
HTTPD through (at least) Snow Leopard. I have seen that hit multiple 
people who were sure that they were safe because they were running old 
stable systems. On Macs with humans sitting in front of them, the 
problem is worse because humans do things like "Updating Flash" when 
told they need to do so, even when they don't have Flash installed and 
definitely don't need it.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Somewhat off topic - keeping older Macs running

2022-04-25 Thread Bill Cole

On 2022-04-25 at 03:06:25 UTC-0400 (Mon, 25 Apr 2022 15:06:25 +0800)
James 
is rumored to have said:


On 25 Apr 2022, at 1:44 pm, Dave Horsfall  wrote:

On Mon, 25 Apr 2022, James wrote:


I too have old macs that cant be updated. I just keep a time machine
backup and if ever I get hacked a quick restore will fix. For 10 
years

I've had no issues !!


Your "old macs" are not protected by a firewall?  One day...

As for backups, consider malware that will not trigger until well and
truly embedded into your backups; not much use then, are they?


Dave methinks there is lots of hysteria in the arena


Yes, but there is also a lot of nasty reality.

I have no firewall on my modem and no firewall on any of my machines. 
Yet the world is full of stories about exploits! Most of those are 
windows exploits!


Most but by no means all. A lot of modern attacks are multi-platform as 
they start as scripts on web pages that run in any browser, or as abuse 
of embeded execution mechanisms such as VBA in MS apps and embedded 
JavaScript in PDFs.



Lets consider firewalls:

By RFC no router on the internet may route a private IP. So *every* 
router between you and bad guys is broken!


So, this glosses over a couple of things...

1. Enabling NAT in your router (which may also be a modem) is a *form* 
of a firewall. Without NAT, 'private' (RFC1918) IPs do in fact not route 
anywhere


2.

A firewall allows ESTABLISHED,RELATED traffic back, so if you've got a 
bad machine then bad guys can get to that machine and from there to 
your macs.

If you have a compromised machine then it is a target.

A decade ago one of the anti-virus companies offered $10 000 and a 
Sony Viao to first person to hack their honeypots. The windows 
honeypot was hacked in under an hour, the mac in a week (a flaw in 
safari) and the linux 'pot has never been hacked. They ascribed this 
to being unkewl to hack linux. Nonsense you'd be a hero for exposing a 
flaw (as has happened a couple of times.)


If you enjoy playing then by all means, if not then enjoy an icecream, 
except if you have windows machines on your network forget the 
icecream.


I guess IPV6 will change the landscape somewhat.
The subtle comment about ring 0: linux and mac work in a way that is 
very limited, what disk?, whereas widows you are not allowed, here is 
$100, well ok.


Query: heresay not allowed, who has ever had a mac hacked?
James



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Corrupted ports.tar file?

2022-04-13 Thread Bill Cole
On 2022-04-13 at 00:34:02 UTC-0400 (Tue, 12 Apr 2022 23:34:02 -0500)
Ryan Schmidt 
is rumored to have said:

> On Apr 11, 2022, at 17:02, Dave Horsfall wrote:
>
>> On Mon, 11 Apr 2022, Ryan Schmidt wrote:
>>
>>> Run "sudo port selfupdate" to get the most recent ports.tar. Do you
>>> still see the problem then?
>>
>> I did run that first; apologies for not mentioning it (there were no
>> issues).
>
> I think you did mention it. I was suggesting you run it again, in case 
> somehow the server files were in a weird state the last time you selfupdated. 
> There was some intermittent network problem affecting the server that 
> generates the ports.tar file a few days ago, and again today; although I 
> thought our rsync updates happened pretty much atomically, maybe it was 
> possible for a set of files to be published briefly that was not correct.

I just now (0600 UTC 2022-04-13) had a similar experience. Ran a selfupdate 
which suggested I do a reclaim at the end. I said 'y' and it did the leaf trim 
and the inactive purge, but while "Building list of distfiles still in use" it 
kicked out a lot of errors about a corrupted PortIndex as Dave reported.

I also got a handful of messages like these, interspersed with the others:

Warning: Failed to open port libpaper : can't read "portinfo(porturl)": no such 
element in array
Warning: Failed to open port p5.28-http-message : can't read 
"portinfo(porturl)": no such element in array

Running 'port info' for the supposedly "not found" ports gave the normal output.

Running 'port reclaim' again (without another update) did NOT trigger the flood 
of errors.

Theory: it's a problem related to running the reclaim from the prompt at the 
tail end of a selfupdate. Incomplete 'portindex' run perhaps?


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Python

2022-03-17 Thread Bill Cole

On 2022-03-17 at 17:22:51 UTC-0400 (Thu, 17 Mar 2022 22:22:51 +0100)
Tom 
is rumored to have said:


Hello people, how do I install a python replacement for macOS 12.3?


port install python310 python_select

[come back in 20 minutes]

port select python python310

If you need an older version, there are ports for them. Unlike Ryan, I 
urge you to NOT install a 2.x version unless you are absolutely sure 
that you need such an antique, unsupported, encoding-impaired tool.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Hybrid CDs on Big Sur

2022-03-08 Thread Bill Cole

On 2022-03-08 at 18:49:50 UTC-0500 (Tue, 8 Mar 2022 15:49:50 -0800)
Sriranga Veeraraghavan 
is rumored to have said:


Hi,

I have some older CDs that appear to be master with a Mac (HFS/HFS+) 
partition and a Windows (FAT32?) partition.


Under BigSur (on M1), Finder and DiskUtility only seem to want to 
mount the Mac partition on these CDs and don’t seem to provide a way 
to access the Windows partition.


I’ve been able to access the Windows partition by running on Linux 
running under an emulator, but this is somewhat clunky.


Does anyone know of a way (perhaps through a port in macports) to 
mount the Windows partition on a hybrid CD?


Have you tried using the diskutil command-line tool?


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Running a mail server via MacPorts on macOS Monterey

2022-03-04 Thread Bill Cole

On 2022-03-03 at 08:38:47 UTC-0500 (Thu, 3 Mar 2022 14:38:47 +0100)
Gerben Wierda via macports-users 
is rumored to have said:

Apart from Steven Smith, are there other users here that run a mail 
server setup via MacPorts? And is already someone else running on 
Monterey?


I have run a personal/family mail/web/dns server whose componentry* is 
almost all built by MacPorts since ~2006. Current platform is El 
Capitan, because Apple has made macOS increasingly hostile to server 
use. When running ElCap becomes too much of a hassle (or when that 
machine dies,) I expect that I will finally move its functionality to a 
FreeBSD machine.


Catalina and later simply are not fit for server duty. The deliberate 
breaking of standard logging, broad locking of the system, and breakage 
in the legacy implementation of 'cron' make it clear that Apple doesn't 
want people fiddling around with their Macs "under the hood" or using 
them as unattended utility machines.



(*) Apache HTTPD, Postfix, Dovecot, BIND, SpamAssassin, and a bunch of 
tools that I use for administrative/research work on that machine. Also 
MIMEDefang, which is hand-built because it's got some (originally 
intentional and explicit)  Mac-hostility and there's no port. Yet.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Which port provides protoc?

2022-02-07 Thread Bill Cole
On 2022-02-07 at 13:16:54 UTC-0500 (Mon, 7 Feb 2022 10:16:54 -0800)
Watson Ladd 
is rumored to have said:

> On Mon, Feb 7, 2022 at 9:59 AM Marius Schamschula  
> wrote:
>>
>> Watson,
>>
>> Compiler?
>
> protoc: the thing that takes the definition and outputs the code.
> Apparently something I tried installed it, but I'm now not sure what.


# port provides `which protoc`
/opt/local/bin/protoc is provided by: protobuf3-cpp



-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: XV/GIMP/etc: Can't open display

2022-01-28 Thread Bill Cole
On 2022-01-28 at 16:34:29 UTC-0500 (Sat, 29 Jan 2022 08:34:29 +1100 
(EST))

Dave Horsfall 
is rumored to have said:

MacBook Pro (13-inch, Mid 2010), saddled with High Sierra 10.13.6 (as 
far

as it will go).

Back when I was running Sierra these tools worked just fine; after
upgrading to HS (and rebuilding MacPorts that took almost a day) 
things

went pear-shaped:

mackie:~ dave$ xv
xv: Can't open display
mackie:~ dave$ gimp
Cannot open display:
mackie:~ dave$ echo $DISPLAY

mackie:~ dave$

Is this something I forgot to do during the upgrade?


Did you reinstall the X server? I believe that you need to. Specifically 
the xorg-server and xinit ports.



I set $DISPLAY to
":0" (an old Unix trick) to no effect, so I guess it's using a named 
pipe

instead but I cannot find it; poking around doesn't seem to uncover
anything applicable to this, and I certainly won't trust any "advice" 
on

StackOverflow.


Properly installed, it Just Works. At least after a logout/login cycle.

If it is correct, you will have a DISPLAY of the form:

/private/tmp/com.apple.launchd./org.macports:0

To get that, you need the xinit port.

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Sms for text messages in macports

2022-01-17 Thread Bill Cole
On 2022-01-17 at 16:58:06 UTC-0500 (Tue, 18 Jan 2022 08:58:06 +1100 
(EST))

Dave Horsfall 
is rumored to have said:


On Mon, 17 Jan 2022, Richard L. Hamilton wrote:


Every cell phone provider, or at least just about every US cell phone
provider, has an email to SMS gateway. It's free for someone sending
email to it, not necessarily for the recipient. The problem is you 
have

to know the provider for a given number, and AFAIK, there's no
particularly easy way to do that automatically and scriptably (so you
can generate an email address for the correct gateway). MMS gateways
also exist, although the acceptable MIME types and size/complexity
limits for attachments may be tedious to discover.


I've seen a reference to his before; the receiver pays to receive 
mobile

calls in the USA?


That has not been the case for most people for many years. Way back 
(~2k) some service providers tried to put tolls on SMS and it is still 
legal, but I don't think any major provider still charges to receive 
text messages.



In Australia it's the sender who pays (of course).


Most US providers have stopped charging at all for SMS for most 
customers.



And I believe that mobile phones (what you call cellular phones) don't
have their own prefix?


Right. It's all country code 1 and the "NANP" system of area codes and 
local exchanges (leading 3 digits of 7.)  Many mobile numbers are in 
exchanges first allocated to mobile providers, e.g. my number and all 
others in my area code with the same exchange prefix were first assigned 
to Sprint customers, but after 20y of churn via number portability has 
broken that pattern. It also is somewhat true that area codes (which no 
longer are geographically exclusive) which have the 'traditional' 0 or 1 
as the 2nd digit have the bulk of "landlines" and the newest area codes 
that overlay multiple legacy area codes mostly have mobiles, but that's 
just timing.



We reserve "04" for that; at one time you could
even tell which provider it was, but now you get to keep your number 
when

you change providers.


We never did that in the US because of the random walk under corporate 
influence of our telecom & antitrust policy of the past 5 decades. I'd 
bet that if AT had been allowed into mobile service pre-breakup, we'd 
probably have a special prefix or segregated area codes for mobile 
numbers.



But to bring this back on topic...

Alternatives: a service (some free for small volumes only) that can 
send
SMS from a computer.  Or Asterisk plus extensions, to set yourself 
up a
full VoIP PBX...except that will need some paid service too, to 
connect
to. But it will do a lot more than just send (or receive) SMS, it 
could

forward phone calls, with proper hardware interfaces drive either old
fashioned or VoiP phones, etc. It looks like a lot of work and 
learning
as well as expense, though, and really ought to have a dedicated 
server,

too, although that's not absolutely necessary.


We had that in a previous $JOB; if Nagios (a general system monitor)
detected something that triggered a rule then a set of users would 
receive
a brief SMS, sent from a GSM modem.  I looked at this for my own LAN, 
but

it ain't cheap...


One can do similar in the US: get a number from a mobile provider and 
put a SMS-capable CDMA or GSM modem on it. I've seen this done in 
multiple places, but all with bespoke custom drivers so I don't have any 
suggestions for the OP...



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Mojave and Macports

2022-01-13 Thread Bill Cole

On 2022-01-13 at 16:26:01 UTC-0500 (Thu, 13 Jan 2022 15:26:01 -0600)
Will Senn 
is rumored to have said:
[...]


My question for y'all goes like this - How long will macports continue 
to "work" on Mojave?


No one can actually give a fixed date for that which you could 
reasonably rely upon.


MacPorts still has support for Tiger. That's 10 releases older than 
Mojave. It is unlikely that the aggregate 'vision' of the people doing 
the work of keeping MP going will change so much as to drop Mojave 
before it is simply impossible to continue to support it. If I recall 
correctly, dropping Panther only happened because the last 
Panther-capable machine available to the project died. Speaking only as 
a long-time user and observer of MacPorts, I would be surprised if 
Mojave support went away in this decade.


With that said, "support" in MacPorts' core is not the only thing to be 
concerned with. One thing I found running Snow Leopard until last 
February on a 32bit-only CoreDuo was that support in ports I was using 
or tried to use was slowly crumbling over time, often beyond anything 
MacPorts could work around. The biggest headaches weren't even rooted in 
hardware or OS version per se, but in the toolchain (gcc/clang/etc.) and 
runtime (libgcc/libcxx/etc.) evolution. Re-bootstrapping my whole 
MacPorts world never became impossible, but by the end it was a 
multi-day festivity involving building multiple toolchains and learning 
obscure command-line options for port. It may never become impossible 
for to keep using MacPorts on Mojave, but it may end up taking so much 
babysitting that you'd rather not. I hope that's a long time, because my 
personal machines are staying there for some time as well.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: certificate update for old Macs

2022-01-04 Thread Bill Cole

On 2022-01-04 at 14:37:18 UTC-0500 (Tue, 4 Jan 2022 11:37:18 -0800)
Michael 
is rumored to have said:

On 2022-01-03, at 4:12 PM, Richard L. Hamilton  
wrote:


The only problem with that or anything similar, is that unless you go 
to quite a lot of work to just download rather than install the PEM 
file, and convert it into something human readable WITHOUT installing 
it, and investigate every certificate in there, you're trusting that 
the site you got it from is not only legit, but is secure and hasn't 
been hacked to alter the file to provide some very bogus certificates 
that could work together with some sort DNS spoofing to get you to 
feed sensitive information (ie bank passwords, etc) via an untrusted 
site that would capture it.


Makes sense. Now, how do you go about turning a certificate into 
something human readable? Serious question, I have *never* seen this 
discussed anywhere.


Get the certificate in PEM format, then:

   openssl x509 -text < cert.pem

See the man page ('man x509') for all the very gory details.

Everyone just says "As long as the roots are good you can trust the 
chain", and that's never made sense to me. The whole "trust what 
strangers say" system seems more like "Find a way for companies to 
make money" than any good security system.


Well, yes: that's what the public CA system is. It is grounded in the 
OSI protocol stack, which is big on hierarchical authority, and no one 
has figured out a better model that scales and allows strangers to 
establish authenticated private data transport. Ultimately it requires 
shared trust anchors of some sort, and the model we've stumbled into has 
the advantage of not being subject to a single authority and encouraging 
the various CAs and bundlers of trust to keep watch on each other.


A mechanism for eliminating the CA-based hierarchical trust layer 
already exists in the DANE (DNS-based Authentication of Named Entities) 
standard that is in broad use for validating email trasnsport. It 
replaces the CA model by binding the trust chain to DNS, making 
certificate trust ultimately dependent on DNSSEC and subject to all of 
its risks.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: [numpy @ bigsur: multithreading]

2022-01-03 Thread Bill Cole
On 2022-01-03 at 12:18:23 UTC-0500 (Mon, 3 Jan 2022 19:18:23 +0200)
Maxim Abalenkov 
is rumored to have said:

> Either I don’t understand the expected behaviour or my `port variants` 
> command returns something else. I would expect it to show [+]gfortran and 
> [+]mkl, not the [+]openblas.

As documented, the 'port variants' command returns the AVAILABLE variants, with 
the '[+]' added to the DEFAULT variants.


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Installation location for python code, tools, etc.

2022-01-02 Thread Bill Cole

On 2022-01-02 at 16:23:34 UTC-0500 (Sun, 2 Jan 2022 16:23:34 -0500)
Forrest Aldrich 
is rumored to have said:

I'm not very experienced with Python, yet, but with regard to 
MacPorts, I'm trying to understand why when I do a pip3 install, or a 
direct install from a project tree ie: "python setup.py install" the 
tool(s) end up in this directory instead of /opt/local/bin|sbin etc:


/opt/local/Library/Frameworks/Python.framework/Versions/3.9/bin/


This is how MacPorts supports simultaneous installs of different Python 
versions. You may note that there are versioned python symlinks in 
/opt/local/bin pointing to that path and possibly an additional bunch of 
symlinks making 'python' and 'python3' go there. If you install the 
python_select and python3_select ports, they will create links in 
/opt/local/bin if you run 'port select python' or 'port select python3' 
that ultimately resolve to that versioned path.


When you install a Python module outside of MacPorts, its installer is 
almost certain to not know to create those links.



I'm suspecting an environment variable.


I believe that *in theory* you should get binaries into 
/opt/local/(s)bin/ if you set the PYTHONHOME environment variable to 
'/opt/local/Library/Frameworks/Python.framework/Versions/3.9:/opt/local' 
when running setup.py or pip.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: is macports getting rusty?

2021-11-29 Thread Bill Cole

On 2021-11-29 at 08:32:46 UTC-0500 (Mon, 29 Nov 2021 13:32:46 +)
Chris Jones 
is rumored to have said:

If you find yourself during an port update building rust from source, 
either just let it finish, or if you don't want your machine tied up 
building rust for some period, just cancel the build and try again 
later on, as as others have pointed out eventually the buildbots will 
provide the binary tarball for it and thus you will just pick that 
once its available.


This raises a question that I cannot find a clear answer to:

How are builds prioritized on the buildbots?

I would hope that in an ideal world, some priority is given to large, 
slow, and heavily-depended-upon builds. It's also easier to say that 
than to actually implement it, but it would help address a real pain 
point in using MacPorts.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Does MacPorts depend on Spotlight?

2021-11-17 Thread Bill Cole
On 2021-11-17 at 15:06:23 UTC-0500 (Thu, 18 Nov 2021 07:06:23 +1100 (EST))
Dave Horsfall 
is rumored to have said:

> On Wed, 17 Nov 2021, Peter Hancock wrote:
>
>> On Catalina, for me the command "sudo mdutil -i off /opt/local/var/macports"
>> evokes:
>
> [...]
>
> Where are all these obscure commands documented?

/usr/share/man/man1/ and /usr/share/man/man8/ mostly...

FWIW, 'apropos spotlight' will tell you that mdutil and mddiagnose exist.





-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: libsdl2 port question

2021-11-14 Thread Bill Cole

On 2021-11-14 at 05:53:21 UTC-0500 (Sun, 14 Nov 2021 11:53:21 +0100)
Gerben Wierda via macports-users 
is rumored to have said:

I was just curious: why does the libsdl2 port which is at version 
2.0.16 install 2.0.0 libraries? How does that happen? Just learning.


I assume you mean the fact that the actual dylib file is named 
/opt/local/lib/libSDL2-2.0.0.dylib


It is a norm for dynamically loaded libraries to include a symlink with 
their base name (i.e. /opt/local/lib/libSDL2.dylib) and sometimes 
additional symlinks with partial versions in their names, with the 
versions being indicators of binary compatibility rather than 
whole-project code revision. This allows for multiple incompatible 
versions of the same shared library to be installed simultaneously, with 
the runtime loader picking which version to attempt to load by the name 
linked in the executable. This is a pattern/norm, not a fixed standard, 
so exactly how a specific library handles the possibility of future 
version incompatibility can vary a bit. The libsdl2 devs have apparently 
decided to leave the name of the real library with the lowest version 
that remains compatible with the current version rather than doing 
anything more complex. Others (e.g. pth) use distinct versioning for 
their library names.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: xorg

2021-11-12 Thread Bill Cole

On 2021-11-11 at 18:07:45 UTC-0500 (Fri, 12 Nov 2021 00:07:45 +0100)
Tom 
is rumored to have said:


Hi,

when trying to run an X11 program, I get the following error message:

(putty:8198): Gtk-WARNING **: 00:06:49.190: cannot open display: :0


Which means that your environment has the DISPLAY variable set to ":0" 
which indicates the first display on the local physical machine, or at 
least it would on most platforms that support X11. On a Mac, it's much 
more complicated and your DISPLAY should be a pathname to a socket in a 
subdirectory of /private/tmp/, whose use triggers the startup of the X 
display server and window manager (/Applications/MacPorts/X11.app.)



How can I fix that?


Make sure you have the xinit port installed (you should, as the 
xorg-server port depends on it.) Also make sure you have logged out and 
back in after installing xorg-server (and its dependencies like xinit.)





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: port cannot fetch because of expired cert, but cert is OK according to Safari, curl (question related to Mojave / Catalina)

2021-11-07 Thread Bill Cole
On 2021-11-07 at 16:29:30 UTC-0500 (Mon, 8 Nov 2021 08:29:30 +1100 
(EST))

Dave Horsfall 
is rumored to have said:


On Sun, 7 Nov 2021, Bill Cole wrote:

I have my own Mojave machines working without a problem after 
removing the bad certificate from /etc/ssl/cert.pem. The one that 
starts like this:


[...]

Intrigued, I checked my own:

mackie:~ dave$ grep "Not After" /etc/ssl/cert.pem


[... many dates snipped ...]

So I wonder how widespread this problem is?


The problem in this case is not the existence of the cert in the CA 
bundle, but the fact that this particular expired cert was used in an 
alternative validation path and the logic of verification for multi-path 
certs isn't correct. Normally, expired root CAs should stay in there 
because that allows positive non-verification of certs supposedly issued 
by an expired (and maybe compromised) root CA.


And I'm not happy with those that are set way in the future; I heard 
somewhere that 5 years is the recommended max.


CAs are special. The current limit on server certs is 397 days. I don't 
think there's a consensus on CA lifetimes because of the conflicting 
risks of too-short and too-long lives.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: port cannot fetch because of expired cert, but cert is OK according to Safari, curl (question related to Mojave / Catalina)

2021-11-07 Thread Bill Cole
 
described here:


https://trac.macports.org/wiki/ProblemHotlist#letsencrypt

When you said "curl works but port does not work" that's not quite 
right. /opt/local/bin/curl and /opt/local/lib/libcurl.dylib work. 
/usr/bin/curl and /usr/lib/libcurl.dylib (the latter of which 
MacPorts uses by default) do not work for Let's Encrypt-protected 
sites anymore.


I, on High Sierra, have the same issue, and I have no solution for 
you. This issue affects High Sierra and Mojave. I recommend 
upgrading to Catalina or later; I plan to eventually.


Well, you could rebuild MacPorts from source, instructing it to use 
a newer copy of libcurl with a newer copy of openssl or libressl 
that has a newer certificate bundle. For example, install a 
bootstrap copy of MacPorts in a separate prefix, install curl in 
that prefix, then rebuild your primary MacPorts from source, telling 
it to use the libcurl in the separate prefix. Any future upgrades to 
MacPorts base probably also have to be done from source; using "sudo 
port selfupdate" will not preserve your configure arguments and 
you'll be back to using the System's broken libcurl again.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: provide latest OS root certificates via port?

2021-10-29 Thread Bill Cole
On 2021-10-29 at 11:17:52 UTC-0400 (Fri, 29 Oct 2021 11:17:52 -0400 
(EDT))

Richard Bonomo TDS personal 
is rumored to have said:


I don't know what to think about MacPorts, specifically, providing
new certificates, but, pertaining to some of the arguments presented
against doing this on old Macs generally, it must be kept in mind
that some of us --
including yours truly --
have Apple computers that
CANNOT use newer operating systems or browsers.  Sometimes, one has
to work with what one has.


Sure, and I am not saying that MP should abandon older systems or that 
you and I and everyone else still running older systems is doing 
anything "wrong" but simply that it is risky and cannot be safe without 
the recognition that you have to understand and manage your risks 
without vendor support.


Some people have expressed more judgmental views here in the past, 
arguing that older Macs should be relegated to running other, free OSs 
that have active security maintenance and suggesting that MP deprecate 
MacOS versions no longer supported by Apple. I'm NOT saying that, but 
rather that users should understand their risks and MP should not take 
on the doomed task of de facto trying to maintain OS versions which are 
by any reasonable definition obsolete. The norm for MP has been to offer 
parallel tools to those in the OS (e.g. current packages that match what 
Apple used to include in Server) and leave the issue of whether & how to 
user them to actually replace Apple's tools up to the user.






- Original Message -----
From: "Bill Cole" 
To: "macports-users Users" 
Sent: Friday, October 29, 2021 10:09:45 AM
Subject: Re: provide latest OS root certificates via port?

On 2021-10-29 at 07:23:38 UTC-0400 (Fri, 29 Oct 2021 07:23:38 -0400)
Richard L. Hamilton 
is rumored to have said:


You're (probably - seems plausible but I haven't verified it myself)
right that that's annoying and fixable.

But there's a big reason to think carefully about whether to do that.
If something is old enough that it isn't receiving certificate
updates, it probably isn't receiving security updates either. And the
same applications and functionality that need current root
certificates to work are also likely to be common attack points.

So at the very least, anything that makes it easier to take such a
risk should come with a prominent warning, IMO.


Yes: Anyone running Mojave or earlier is not exactly skydiving without 
a
parachute, but is doing something close. Perhaps it's akin to 
skydiving

with a homemade parachute...

Frankly, I don't think MacPorts should attempt to 'fix' this issue or
similar future issues diretly, not because it encourages risky 
behavior
but because MacPorts should avoid poking around in the MacOS base at 
all
where it isn't essential for the operation of MacPorts. It's easy 
enough

in principle for MacPorts to stand up and use its own modern OSS-based
encryption+PKI stack with its own set of trusted CAs (e.g.
curl-ca-bundle and openssl ports) and so keep itself functional 
without
poking around in core functionality of the OS that MacPorts-naive 
tools
need to use. People who need to fix the problem of an expired root 
cert
should be able to understand and repair that problem (which can be 
done
without digging a CA bundle out of a newer system) if they need to, 
and

having the issue unaddressed is not itself a security issue, but a
functionality issue. Anyone who actually wants to run Safari & Chrome 
on

an OS that isn't getting basic security maintenance should be thinking
very carefully about what they are doing and accept responsibility for
making something work which arguably should no longer work because it 
is

too risky.

One risk for MacPorts is a slippery slope created by providing support
for antique OS versions that include opaque proprietary bits that are
probably insecure in ways that no one fully understands. If it is 
taken

too far (which in my opinion includes fixing core components like PKI)
MP would be doing a disservice to users who understandably expect a
"Just Works" experience on a Mac by enabling the continued use of 
tools

that could well have permanent unrecognized and mostly invisible
security flaws.



On Oct 29, 2021, at 07:12, René J.V. Bertin 
wrote:

Hi,

Users of older Apple OSes that are no longer receiving updates
probably noticed that Safari and Chrome-based browsers no longer
connect to lots of sites because a crucial root certificate has
expired.

Answer 1 to
https://apple.stackexchange.com/questions/422332/how-do-i-update-my-root-certificates-on-an-older-version-of-mac-os-e-g-el-capi
provides an easy solution, but you need access to an up-to-date OS
install.

These are not proprietary to Apple so I presume it should be 
possible

to provide the suggested `rootcerts.pem` file via a port - possibly
even install it in the post-activate. I had a look but couldn't find
if such a port already exists. I think it'

Re: provide latest OS root certificates via port?

2021-10-29 Thread Bill Cole

On 2021-10-29 at 07:23:38 UTC-0400 (Fri, 29 Oct 2021 07:23:38 -0400)
Richard L. Hamilton 
is rumored to have said:

You're (probably - seems plausible but I haven't verified it myself) 
right that that's annoying and fixable.


But there's a big reason to think carefully about whether to do that. 
If something is old enough that it isn't receiving certificate 
updates, it probably isn't receiving security updates either. And the 
same applications and functionality that need current root 
certificates to work are also likely to be common attack points.


So at the very least, anything that makes it easier to take such a 
risk should come with a prominent warning, IMO.


Yes: Anyone running Mojave or earlier is not exactly skydiving without a 
parachute, but is doing something close. Perhaps it's akin to skydiving 
with a homemade parachute...


Frankly, I don't think MacPorts should attempt to 'fix' this issue or 
similar future issues diretly, not because it encourages risky behavior 
but because MacPorts should avoid poking around in the MacOS base at all 
where it isn't essential for the operation of MacPorts. It's easy enough 
in principle for MacPorts to stand up and use its own modern OSS-based 
encryption+PKI stack with its own set of trusted CAs (e.g. 
curl-ca-bundle and openssl ports) and so keep itself functional without 
poking around in core functionality of the OS that MacPorts-naive tools 
need to use. People who need to fix the problem of an expired root cert 
should be able to understand and repair that problem (which can be done 
without digging a CA bundle out of a newer system) if they need to, and 
having the issue unaddressed is not itself a security issue, but a 
functionality issue. Anyone who actually wants to run Safari & Chrome on 
an OS that isn't getting basic security maintenance should be thinking 
very carefully about what they are doing and accept responsibility for 
making something work which arguably should no longer work because it is 
too risky.


One risk for MacPorts is a slippery slope created by providing support 
for antique OS versions that include opaque proprietary bits that are 
probably insecure in ways that no one fully understands. If it is taken 
too far (which in my opinion includes fixing core components like PKI) 
MP would be doing a disservice to users who understandably expect a 
"Just Works" experience on a Mac by enabling the continued use of tools 
that could well have permanent unrecognized and mostly invisible 
security flaws.



On Oct 29, 2021, at 07:12, René J.V. Bertin  
wrote:


Hi,

Users of older Apple OSes that are no longer receiving updates 
probably noticed that Safari and Chrome-based browsers no longer 
connect to lots of sites because a crucial root certificate has 
expired.


Answer 1 to 
https://apple.stackexchange.com/questions/422332/how-do-i-update-my-root-certificates-on-an-older-version-of-mac-os-e-g-el-capi 
provides an easy solution, but you need access to an up-to-date OS 
install.


These are not proprietary to Apple so I presume it should be possible 
to provide the suggested `rootcerts.pem` file via a port - possibly 
even install it in the post-activate. I had a look but couldn't find 
if such a port already exists. I think it'd help for lots of 
people... I'd propose a draft but I'm running 10.9 ... so thanks to 
anyone picking this up!


R.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Build from local source tree

2021-10-25 Thread Bill Cole

On 2021-10-24 at 11:23:47 UTC-0400 (Mon, 25 Oct 2021 01:23:47 +1000)
Peter West 
is rumored to have said:

What I’m attempting is to drop the bz2-compressed sources into 
/opt/local/var/macports/distfiles/gimp2, add

fetch {}
checksum {}

to the local Portfile,

portindex
sudo install gimp2


Even better: update the checksums version number in the gimp2-devel 
Portfile and offer it up as a pull request.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Apache httpd 2.4.49 port will not launch on ElCap

2021-10-17 Thread Bill Cole

On 2021-09-24 at 16:53:21 UTC-0400 (Fri, 24 Sep 2021 16:53:21 -0400)
Bill Cole 
is rumored to have said:


On 2021-09-22 at 16:47:41 UTC-0400 (Wed, 22 Sep 2021 22:47:41 +0200)
Bjarne D Mathiesen 
is rumored to have said:


Bill Cole wrote:
I'm wondering if anyone else has encountered this and if anyone has 
a sense of whether this is really a MacPorts-specific problem or if 
it is (as I suspect but have not been able to confirm) a problem 
with httpd.


I'm running apache 2.4.49 on
* 10.6.8
* 10.15.7
without any issues


That brackets the problem a bit.

Given the odd failure ("crashed on child side of fork pre-exec" with a 
segfault) I suspect it is something specific to the platform, e.g. 
compiler version, shared library versions, etc. and I'm experimenting 
with rebuilding it in different ways to  see if I can find a way to 
make it work.


Currently running with '-X' as a workaround (doesn't fork...)


Closing the loop here:

Rebuilding httpd and everything it recursively depends on with clang-10 
on the target system didn't touch the problem. Reverting to .48 didn't 
touch the problem(!) Limping along and waiting for the .51 update 
resolved the problem. I did not test .50, which lasted just a few days. 
I'm not up to analyzing all the flux in the httpd code between those 
versions, but there are enough core and mpm fixes that I'm satisfied 
with vague handwaving about something jostling an optimization in the 
wrong/right place and for 2 minor versions breaking it on one obsolete 
platform.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: ruby_select is broken

2021-10-03 Thread Bill Cole

On 2021-10-03 at 16:16:55 UTC-0400 (Mon, 4 Oct 2021 07:16:55 +1100)
Ian Wadham 
is rumored to have said:


Hi Christopher,

In brief, MacPorts’ “port select” command is working fine at the 
command-line in Catalina… but the problem is with installing ANY 
version of ruby, not switching between multiple versions of ruby that 
are already installed.


In a machine where no MacPorts Ruby is installed, the command “sudo 
port install ruby27” is not working fully.


It is definitely working as designed. Your complaint is with the design.



The package gets installed, but the links /opt/local/bin/ruby -> 
/opt/local/bin/ruby2.7 and /opt/local/bin/gem -> /opt/local/bin/gem2.7 
do not get created automatically.


Right. You MUST run 'port select ruby ' to select which 
binaries under /opt/local/*bin  the symlinks point to. That's how *ALL* 
*_select ports work: they create the generic-name links if you select 
one version, and remove them if you select the "none" option.


So after installing I always get Apple’s Ruby from /usr/bin when I 
use a “ruby” or “gem” command. Of course I can use “sudo 
port select” to fix that, and I have done, but it took me several 
days of frustration and messing around before I discovered that fact.


That's a documentation problem, I guess. FWIW, the information is 
present in ruby_select:


# port info ruby_select
ruby_select @1.2 (sysutils, lang)

	Description:  This port installs files that allow 'port select' 
to be used to create links to the preferred default version of Ruby.

Homepage: https://www.macports.org/

Platforms:darwin
License:  BSD
Maintainers:  Email: kimu...@macports.org, GitHub: kimuraw
  Policy: openmaintainer



I think this is because the port file named “ruby_select”, on 
which each Ruby port depends, is broken.


But it is not broken.

The ruby_select port is what provides the information that 'port select' 
needs to make links to a specific set of Ruby binaries.





You can see this port file’s contents using:

 cat $(port file ruby_select)

Compare them to the perl and python “select” files:

 cat $(port file perl_select)
 cat $(port file python_select)

and I hope you (or someone) will see what the problem is.


There is no problem.

General rule: the *_select ports support the simultaneous installation 
of multiple versions of a port (mostly dev tools) with the active 
version being determined by use of 'port select' commands. Installing a 
specific version of a port that has a *_select port does not directly 
set the links to activate that version, you MUST use port select.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: MacPorts Only Has ImageMagick 6 not 7?

2021-10-02 Thread Bill Cole

On 2021-10-02 at 17:02:20 UTC-0400 (Sat, 2 Oct 2021 16:02:20 -0500)
Christopher Stone 
is rumored to have said:


Hey Folks,

I'm only seeing ImageMagick @6.9.11-60_1 from MacPorts with `port 
info`.


It looks like the most current version is ImageMagick 7.1.0-8.

https://imagemagick.org/

Is this correct, or does this have something to do with the Let's 
Encrypt DST Root CA X3 Expiration issue Ryan reported this morning?


It is correct, and is entirely unrelated to the LE cert issue.

There's an open ticket for getting v7 into ports 
(https://trac.macports.org/ticket/51310) that provides insight to the 
issues behind the delay.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: How do i find missing dependents using the port command?

2021-09-28 Thread Bill Cole
On 2021-09-28 at 10:27:12 UTC-0400 (Tue, 28 Sep 2021 16:27:12 +0200)
Gerben Wierda via macports-users 
is rumored to have said:

> A while back I have done a lot of cleanup, using looking at dependents, 
> reinstalling stuff so it no longer depends on, say, older versions of python, 
> etc.
>
> Now, recently I’ve started reaching certbot/letsencrypt warnings that my 
> certificates are about to expire. I used to have a fully automatic setup that 
> did the updates in the background. Apparently, that has died. And it turns 
> out certbot doesn’t work anymore because some part of python is missing:
>
> Traceback (most recent call last):
[...]
>
> Other than that the cleaning up has removed chardet. Looking at chardet in 
> what is available, I find:
>
> py39-cchardet @2.1.7 (python, devel, textproc)
> cChardet is high speed universal character encoding detector.
>
> py39-chardet @4.0.0 (python, devel, textproc)
> Universal character encoding detector
>
> I suspect I need the chardet extension.
>
> What is the way to find this out using a port command?

In principle, 'port rdeps ' will show you a recursive tree of 
dependencies for any port. Also, 'port rdependents ' will show you 
all ports that are dependents (recursively) of any *installed* port.

In practice, those are sometimes not exactly correct, because they depend on 
port maintainers noticing dependencies and stating them in the Portfile.  For 
example, the error message you showed implies that certbot depends on chardet 
indirectly via the acme package, but that is not reflected in the MacPorts 
dependency map. The Changelog for certbot indicates that this dependency was 
added upstream in v1.18.0 and removed in 1.19.0, so the current MacPorts 
dependency map is correct not to show it NOW, but for most of August, that 
dependency existed in the code but not in the Portfile.



-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: What version of Xcode for High Sierra?

2021-09-24 Thread Bill Cole
On 2021-09-24 at 19:18:56 UTC-0400 (Sat, 25 Sep 2021 09:18:56 +1000 
(EST))

Dave Horsfall 
is rumored to have said:

MacBook Pro, 13", mid-2010, 8GB memory (self-supplied, as the default 
4GB is simply not enough), firmware 7,1.


Relevance to MacPorts: it needs Xcode...

There seems to be many versions of Xcode for High Sierra (I don't want 
to upgrade further just yet) so which one is known to work for this 
thing so that I can start using MacPorts again??  I don't want to 
waste a few hours of download (including Command Line Tools) only to 
see "xcode-select" spit the dummy because it's the wrong version of 
the OS or something.


10.1 or 9.4.1 should work. Supposedly one can install 10.2 by hacking 
some plist and it will work, but that would be silly if all you really 
need it for is MacPorts.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Apache httpd 2.4.49 port will not launch on ElCap

2021-09-24 Thread Bill Cole

On 2021-09-22 at 16:47:41 UTC-0400 (Wed, 22 Sep 2021 22:47:41 +0200)
Bjarne D Mathiesen 
is rumored to have said:


Bill Cole wrote:
I'm wondering if anyone else has encountered this and if anyone has a 
sense of whether this is really a MacPorts-specific problem or if it 
is (as I suspect but have not been able to confirm) a problem with 
httpd.


I'm running apache 2.4.49 on
* 10.6.8
* 10.15.7
without any issues


That brackets the problem a bit.

Given the odd failure ("crashed on child side of fork pre-exec" with a 
segfault) I suspect it is something specific to the platform, e.g. 
compiler version, shared library versions, etc. and I'm experimenting 
with rebuilding it in different ways to  see if I can find a way to make 
it work.


Currently running with '-X' as a workaround (doesn't fork...)

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Apache httpd 2.4.49 port will not launch on ElCap

2021-09-21 Thread Bill Cole
I've used the prebuilt binary and done a source build myself, it just won't 
launch.

A few startup messages are in the ErrorLog, but they don't note any reason for 
the crash.

The OS does manage to save crash reports when I try to start, all looking 
similar to the one below.

Googling about various specifics from the crash report (e.g. 
https://stackoverflow.com/questions/55286016/python-is-crashing-due-to-libdispatch-crashing-child-thread)
 makes me suspect that this has something to do with how httpd initializes 
itself. Telling bit is the "crashed on child side of fork pre-exec"

I'm wondering if anyone else has encountered this and if anyone has a sense of 
whether this is really a MacPorts-specific problem or if it is (as I suspect 
but have not been able to confirm) a problem with httpd.


Contents of crash report 
(/Library/Logs/DiagnosticReports/httpd_2021-09-21-122643_shiny.crash):

Process:   httpd [2068]
Path:  /opt/local/sbin/httpd
Identifier:httpd
Version:   0
Code Type: X86-64 (Native)
Parent Process:launchd [1]
Responsible:   httpd [2068]
User ID:   0

Date/Time: 2021-09-21 12:26:37.866 -0400
OS Version:Mac OS X 10.11.6 (15G22010)
Report Version:11
Anonymous UUID:DBCB60BF-452B-41AE-45BC-977D8F360144


Time Awake Since Boot: 3400 seconds

System Integrity Protection: enabled

Crashed Thread:0  Dispatch queue: com.apple.main-thread

Exception Type:EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:   KERN_INVALID_ADDRESS at 0x0110
Exception Note:EXC_CORPSE_NOTIFY

VM Regions Near 0x110:
-->
__TEXT 00010c8a1000-00010c8f6000 [  340K] r-x/rwx 
SM=COW  /opt/local/sbin/httpd

Application Specific Information:
crashed on child side of fork pre-exec

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libdispatch.dylib   0x7fff85630661 
_dispatch_queue_push_queue + 345
1   libdispatch.dylib   0x7fff8562eb06 
_dispatch_queue_wakeup_with_qos_slow + 126
2   libcorecrypto.dylib 0x7fff8a355ddc 
ccrng_CommonCrypto_generate + 309
3   libcommonCrypto.dylib   0x7fff8ea8648f 
CCRandomGenerateBytes + 28
4   libcrypto.1.1.dylib 0x00010f1f2efb 
rand_pool_acquire_entropy + 69
5   libcrypto.1.1.dylib 0x00010f1f204f 
rand_drbg_get_entropy + 364
6   libcrypto.1.1.dylib 0x00010f1f1296 RAND_DRBG_reseed + 
212
7   libcrypto.1.1.dylib 0x00010f1f16f3 RAND_DRBG_generate + 
407
8   libcrypto.1.1.dylib 0x00010f1f1fd5 
rand_drbg_get_entropy + 242
9   libcrypto.1.1.dylib 0x00010f1f1296 RAND_DRBG_reseed + 
212
10  libcrypto.1.1.dylib 0x00010f1f16f3 RAND_DRBG_generate + 
407
11  libcrypto.1.1.dylib 0x00010f1f1819 RAND_DRBG_bytes + 139
12  libssl.1.1.dylib0x00010f0878e1 SSL_CTX_new + 614
13  mod_ssl.so  0x00010f03aca2 ssl_init_ctx + 344
14  mod_ssl.so  0x00010f03a194 ssl_init_proxy_ctx + 
85
15  mod_ssl.so  0x00010f039e66 
ssl_init_ConfigureServer + 3896
16  mod_ssl.so  0x00010f038a03 ssl_init_Module + 802
17  httpd   0x00010c8a4521 ap_run_post_config + 
69
18  httpd   0x00010c8abb68 main + 2112
19  libdyld.dylib   0x7fff92f3f5ad start + 1

[remainder elided, including details of loaded dylibs and memory zone status]


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: CACKey_0.7.8_Slandup.pkg installation fails

2021-07-21 Thread Bill Cole

On 2021-07-21 at 15:59:32 UTC-0400 (Wed, 21 Jul 2021 13:59:32 -0600)
Tao Zhang 
is rumored to have said:


Hi,

 I am installing "CACKey_0.7.8_Slandup.pkg" CACKey package.


That's not a MacPorts package. You are unlikely to find much help from 
this mailing list.



It failed with the following information:

"The installation failed. The installer encountered an error that 
caused the installation to fail.


Contact the software manufacturer for assistance."


You should do that.

The home site for that software appears to be  https://cackey.rkeene.org


I just checked two directories in my Mac (OS 10.14.6) "/usr/local/lib" 
and "/Library",


MacPorts ports avoid installing anything in either of those directories. 
With very few exceptions, MacPorts installs software under /opt/local/ 
and not in any standard macOS directories to avoid entanglement with 
system software.



There are two folders "pkcs11" and "CACKey" that are created today 
(7/21). I can not access these two folders because


the owner is macports.


That is very strange. You should contact the developer about that, and 
find out if the package is intended to install files owned by 'macports' 
or if that is some sort of accident. It is possible for software to 
install itself under a numeric user ID that accidentally collides with 
the macports user.



 I am wondering whether the above issues cause the failure of 
installation of "CACKey_0.7.8_Slandup.pkg"?


May I remove those two folders "pkcs11" and "CACKey"? How can I remove 
them or How can I change the owner?


'sudo chown  ' should do the job.

Whether that's a solution to your problem or just a way to make it 
worse, I have no idea.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: apache doc folder permissions problem

2021-06-18 Thread Bill Cole

On 2021-06-18 at 14:33:43 UTC-0400 (Fri, 18 Jun 2021 14:33:43 -0400)
Murray Eisenberg 
is rumored to have said:

On 18 Jun2021, at 2:13 PM, Bill Cole 
 wrote:


On 2021-06-18 at 10:17:13 UTC-0400 (Fri, 18 Jun 2021 10:17:13 -0400)
Murray Eisenberg 
is rumored to have said:


Indeed,

sudo chmod a+x /Users /Users/me /Users/me/Sites

fixed the permissions access problem.
...


The requirement is that the user running httpd must have search 
access on the whole tree above anywhere httpd is serving files from. 
The precise meaning of the 'search' permission (i.e. the 'execute' 
bit on a directory) is not intuitive or even well documented. It is 
simply the ability to access nodes within the directory based on 
those nodes' permissions, provided the caller knows the name of the 
item being accessed. Without search permission it simply does not 
matter what the permissions on items below the directory might be, 
they cannot be accessed. If you are concerned with other users (i.e. 
processes running as other users, such as 'daemon' which runs httpd 
under MacPorts) you can 'chmod a-r' on those directories to block 
reading of the directories themselves (i.e. the list of names of 
sub-nodes.)


You can provide the search permission via the basic rwx by 
user/group/all mechanism or by extended ACLs, but you cannot create a 
deep space of access without a path from above….


With macOS 11.4 at least, the command

chmod a-r /Users

and even

sudo chmod a-r /Users

gives error "chmod: Unable to change file mode on /Users: Operation 
not permitted”.


Which indicates that Apple has decided to add /Users to the creeping 
expanse of files and directories behind the Iron Curtain of SIP. 
Consider yourself Protected.


(By contrast, making the change for /Users/me and /Users/me/Sites is 
OK.)


I guess they are waiting for OS 12 to lock those down...

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: mysql8 data dir owner and permissions?

2021-06-18 Thread Bill Cole

On 2021-06-18 at 12:40:30 UTC-0400 (Fri, 18 Jun 2021 12:40:30 -0400)
Murray Eisenberg 
is rumored to have said:

I have a non-default location for the data dir with mysql8, namely, as 
specified in my.cnf:


datadir = /Users/me/Databases/mysql/data

What should the ownership of that directory, and its subdirectories 
and files, be? And with what permissions?


The owner needs to be whatever user runs the mysqld process, which 
creates, deletes, reads, and writes files there as a necessary part of 
its operation. That's probably _mysql. That user ALSO needs a path up to 
the root of the filesystem that it can traverse, i.e. that it has search 
permission for. Assuming this 'me' is the same as that for your httpd 
issue, you already have that for /Users and /Users/me.


No other user needs any access except for whatever is doing your 
backups, which need read access on files & directories and search 
(execute) on directories. That is usually going to be root, so you don't 
need to be concerned about group ownership or other permissions.



At the moment, for reasons I do not know, I have:

ls -ld /Users/me/Databases/mysql/data
	drwxr-x--- 91 me  staff 2912 Jun 18 10:18 
/Users/me/Databases/mysql/data


And:

[~] % ls -l /Users/me/Databases/mysql/data
 total 709416 [partial listing]
 -rw-r- 1 me staff 196608 Apr 6 10:04 #ib_16384_0.dblwr
-rw-r- 1 me staff 8585216 Feb 4 12:45 #ib_16384_1.dblwr
drwxr-x--- 12 me staff 384 Apr 6 10:02 #innodb_temp
-rw-r- 1 me staff 4982504 Oct 3 2020 mymac.local.err
-rw-r- 1 me staff 4 Apr 6 10:02 mymac.pid
drwxr-x--- 23 me staff 736 Oct 3 2020 Math421Blog
-rw-r-@ 1 me staff 56 Oct 25 2018 auto.cnf
-rw-r- 1 me staff 179 Mar 7 22:47 binlog.003746
:
-rw-r- 1 me staff 864 Apr 6 10:02 binlog.index
-rw--- 1 me staff 1680 Jan 2 2020 ca-key.pem
-rw-r--r-- 1 me staff 1112 Jan 2 2020 ca.pem
-rw-r--r-- 1 me staff 1112 Jan 2 2020 client-cert.pem
-rw--- 1 me staff 1676 Jan 2 2020 client-key.pem
-rw-r- 1 me staff 5175 Apr 5 23:15 ib_buffer_pool
-rw-r- 1 me staff 50331648 Apr 6 10:04 ib_logfile0
-rw-r- 1 me staff 50331648 Feb 5 12:55 ib_logfile1
-rw-r- 1 me staff 79691776 Apr 6 21:01 ibdata1
-rw-r- 1 me staff 12582912 Apr 6 10:02 ibtmp1
drwxr-x--- 8 me staff 256 Feb 4 12:45 mysql
-rw-r- 1 me staff 46137344 Apr 6 10:02 mysql.ibd
-rw-r- 1 me staff 6 Feb 4 12:45 mysql_upgrade_info
drwxr-x--- 111 me staff 3552 Feb 4 12:45 performance_schema
drwxr-x--- 21 me staff 672 Oct 3 2020 phpmyadmin
-rw--- 1 me staff 1680 Jan 2 2020 private_key.pem
-rw-r--r-- 1 me staff 452 Jan 2 2020 public_key.pem
drwxr-x--- 29 me staff 928 Oct 3 2020 sakila
-rw-r--r-- 1 me staff 1112 Jan 2 2020 server-cert.pem
-rw--- 1 me staff 1676 Jan 2 2020 server-key.pem
drwxr-x--- 3 me staff 96 Oct 3 2020 sys
-rw-r- 1 me staff 80740352 Apr 6 10:04 undo_001
-rw-r- 1 me staff 29360128 Feb 5 21:01 undo_002


So, 'chown  -R _mysql /Users/me/Databases' should do the trick.

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: apache doc folder permissions problem

2021-06-18 Thread Bill Cole

On 2021-06-18 at 10:17:13 UTC-0400 (Fri, 18 Jun 2021 10:17:13 -0400)
Murray Eisenberg 
is rumored to have said:


Indeed,

sudo chmod a+x /Users /Users/me /Users/me/Sites

fixed the permissions access problem.

Is there some alternative way to fix this — by changing the owner of 
just /Users/me/Sites and its tree of descendents and/or by changing 
settings in the entries of

 /opt/local/etc/apache2/extra/httpd-vhosts.conf ?


The requirement is that the user running httpd must have search access 
on the whole tree above anywhere httpd is serving files from. The 
precise meaning of the 'search' permission (i.e. the 'execute' bit on a 
directory) is not intuitive or even well documented. It is simply the 
ability to access nodes within the directory based on those nodes' 
permissions, provided the caller knows the name of the item being 
accessed. Without search permission it simply does not matter what the 
permissions on items below the directory might be, they cannot be 
accessed. If you are concerned with other users (i.e. processes running 
as other users, such as 'daemon' which runs httpd under MacPorts) you 
can 'chmod a-r' on those directories to block reading of the directories 
themselves (i.e. the list of names of sub-nodes.)


You can provide the search permission via the basic rwx by 
user/group/all mechanism or by extended ACLs, but you cannot create a 
deep space of access without a path from above.


And if there is no such alternative, then why would permissions on 
/Users, /Users/me, and /Users/me/Sites have changed away from a+x, 
seemingly without my own intervention, during some macOS upgrade?


We do not know if it happened to all 3, as you did not show listings 
showing those directories' permissions. I only advised you to chmod them 
all because they all must have the permission and there's no effect of 
adding a permission that already exists.


My guess is that at some point Apple decided to tighten up permissions 
on home directories because it is simply a standard best practice. They 
have been getting increasingly unilateral in their security decisions 
since ~10.9 and removing world read and search/execute permissions from 
home directories is a harmless tightening for the overwhelming majority 
of Mac users.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: apache doc folder permissions problem

2021-06-17 Thread Bill Cole

On 2021-06-17 at 15:32:38 UTC-0400 (Thu, 17 Jun 2021 15:32:38 -0400)
Murray Eisenberg 
is rumored to have said:

I’m at a loss what to do in response to the reply, below, from Bill 
Cole.


I note that to the best of my knowledge, nothing changed as to the 
attributes or permissions of any of the user doc folders listed in my 
httpd-vhosts.conf file except as may have been done without my 
knowledge in an update to macOS 11.3 or 11.4, or in case of some 
change in the MacPorts files supporting apache — but I believe I’m 
still using the very same configuration files, including httpd.conf, 
httpd-vhosts.conf, and httpd-userdir.conf (and /private/etc/hosts) as 
I have in the past!


1. What should I do with respect to extended attributes? I get:

[~] % ls -le Sites
total 32 [some results omitted from list]
drwxr-xr-x@ 23 me  staff   736 Jul 31  2020 Math421Blog
drwxr-xr-x@ 92 me  staff  2944 Apr 10  2015 MyHomePage
drwxr-xr-x  32 me  staff  1024 Jun 12 15:32 RapidWeaver
drwxr-xr-x@ 20 me  staff   640 Jun 17 10:23 html
drwxr-xr-x  10 me  staff   320 Aug 27  2017 newsite

And:

[~] % ls -le Sites/MyHomePage
total 541576 [I show only a couple of the files & folders]
drwxr-xr-x@  73 me  staff   2336 Jan 31  2015 Math_127
drwxr-xr-x@ 146 me  staff   4672 Jan 31  2015 Math_131
-rw-r--r--@   1 me  staff   8331 Apr 10  2015 index.html
-rw-r--r--@   1 me  staff  39890 Jun  2  2010 me.jpg
-rw-r--r--@   1 me  staff695 Feb 24  2011 site.css
-rw-r--r--@   1 me  staff   1385 Feb 24  2011 style.css


That's fine as is. If extended ACLs were your issue, the 'e' option to 
ls would have displayed them.



2. In the vhost-specific error log 
/opt/local/var/log/apache2/me-MyHomePageerror_log I’m finding 
entries like this:
[Thu Jun 17 15:17:10.509589 2021] [core:error] [pid 13543] 
(13)Permission denied: [client 127.0.0.1:53851] AH00035: access to / 
denied (filesystem path '/Users/me/Sites') because search permissions 
are missing on a component of the path
[Thu Jun 17 15:17:10.551868 2021] [core:error] [pid 13543] 
(13)Permission denied: [client 127.0.0.1:53851] AH00035: access to 
/favicon.ico denied (filesystem path '/Users/me/Sites') because search 
permissions are missing on a component of the path, referer: 
http://myhomepage.local/
[Thu Jun 17 15:19:00.531386 2021] [core:error] [pid 13498] 
(13)Permission denied: [client 127.0.0.1:53909] AH00035: access to / 
denied (filesystem path '/Users/me/Sites') because search permissions 
are missing on a component of the path


There's the critical clue!

Your home directory is probably not world-searchable. To eliminate the 
reported error definitively:


sudo chmod a+x /Users /Users/me /Users/me/Sites



3. File httpd.conf includes the lines:
DocumentRoot "/opt/local/www/apache2/html"

Options Indexes FollowSymLinks
AllowOverride None
Require all granted

I don’t think that’s changed.


Looks good.


4. The errors are occurring with Opera as well as with Safari. I 
don’t know if there’s any browser setting that’s upgrading http 
to https; I am explicitly using the “http:” prefix in 
“http://MyHomePage.local <http://myhomepage.local/>"


So that is probably not an issue




On June 13 at 16:21 UTC 2021, Bill Cole  wrote:

On 2021-06-13 at 11:47:53 UTC-0400 (Sun, 13 Jun 2021 11:47:53 -0400)
Murray Eisenberg <https://lists.macports.org/mailman/listinfo/macports-users>>

is rumored to have said:


ls -ld Sites
drwxr-xr-x@ 18 me  staff  576 Feb 27 10:37 Sites


4 thoughts:

1. The '@' indicating the existence of extended attributes could be
overriding the '+' that is shown on files with extended ACLs, so any
level in the directory tree COULD have an ACL blocking the webserver
from reading the files or scanning the directories. Check with 'ls 
-le'

to be sure. This would be a simple but unlikely cause of the problem.

2. Check the error logs for details of the failure. There is a
vhost-specific error log defined, but there should also be a 
server-wide

error log which may contain illuminating entries.

3. Check the main httpd.conf for Directory or Location directives that
may be interfering with the Directory directives in the VirtualHost
definition.

4. Make sure you don't have anything automatically 'upgrading' you to
HTTPS. This can be in the server config or in a browser setting.


On 12 Jun2021, at 8:37 PM, Jeff Greenberg
<https://lists.macports.org/mailman/listinfo/macports-users>> wrote:


How about the permissions on the Sites folder?

On Jun 12, 2021, at 20:24, Murray Eisenberg
<https://lists.macports.org/mailman/listinfo/macports-users>> wrote:


For the Macports apache2 installation, I’m using a non-default
location for my web sites. The httpd.conf includes a
httpd-vhosts.conf file, and the latter includes 

Re: apache doc folder permissions problem

2021-06-13 Thread Bill Cole

On 2021-06-13 at 11:47:53 UTC-0400 (Sun, 13 Jun 2021 11:47:53 -0400)
Murray Eisenberg 
is rumored to have said:


ls -ld Sites
drwxr-xr-x@ 18 me  staff  576 Feb 27 10:37 Sites


4 thoughts:

1. The '@' indicating the existence of extended attributes could be 
overriding the '+' that is shown on files with extended ACLs, so any 
level in the directory tree COULD have an ACL blocking the webserver 
from reading the files or scanning the directories. Check with 'ls -le' 
to be sure. This would be a simple but unlikely cause of the problem.


2. Check the error logs for details of the failure. There is a 
vhost-specific error log defined, but there should also be a server-wide 
error log which may contain illuminating entries.


3. Check the main httpd.conf for Directory or Location directives that 
may be interfering with the Directory directives in the VirtualHost 
definition.


4. Make sure you don't have anything automatically 'upgrading' you to 
HTTPS. This can be in the server config or in a browser setting.


On 12 Jun2021, at 8:37 PM, Jeff Greenberg 
 wrote:


How about the permissions on the Sites folder?

On Jun 12, 2021, at 20:24, Murray Eisenberg 
 wrote:


For the Macports apache2 installation, I’m using a non-default 
location for my web sites. The httpd.conf includes a 
httpd-vhosts.conf file, and the latter includes entries such as:



DocumentRoot "/Users/me/Sites/MyHomePage"
ServerName MyHomePage.local
ServerAlias www.MyHomePage.local <http://www.myhomepage.local/>
ErrorLog  "var/log/apache2/me-MyHomePageerror_log"
CustomLog "var/log/apache2/me-MyHomePage-access_log" common

   Options Indexes FollowSymLinks
   Require all granted
   


And in my /private/etc/hosts I include the lines:

127.0.0.1   localhost
255.255.255.255 broadcasthost
::1 localhost
fe80::1%lo0 localhost
127.0.0.1   me-html.local
127.0.0.1   MyHomePage.local

When I start apache and try to open the site MyHomePage.local, i get 
error:


Forbidden You don't have permission to access this resource.

The permissions on /Users/me/Sites/MyHomePage are:

drwxr-xr-x@ 92 me  staff 2944 Apr 10 2015 MyHomePage

and the permissions for /Users/me/Sites/MyHomePage/index.html are:

-rw-r--r--@ 1 me  staff 8331 Apr 10 2015 index.html

What’s wrong?



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Why don't p5-* ports mark their dependencies?

2021-06-12 Thread Bill Cole

On 2021-06-12 at 12:55:24 UTC-0400 (Sat, 12 Jun 2021 09:55:24 -0700)
Ken Cunningham 
is rumored to have said:


macports recommended perl is still 5.28


Which has been unsupported upstream for just over a year. 5.30 just fell 
out of support a few weeks ago. They are doing a major release every 
year and only supporting the current and prior stable releases. "Pace" 
is all the rage these days, having supplanted "stability."


I still have stable production on 5.28.3 because of some known issues in 
5.30 and later with code hygiene, but I need to work on those issues so 
a 5.30 test system (and soon 5.32) is necessary for me.




$ port info perl5
perl5 @5.28.3 (lang)
Sub-ports:perl5.16, perl5.18, perl5.20, perl5.22, 
perl5.24, perl5.26, perl5.28, perl5.30, perl5.32

Variants: perl5_26, [+]perl5_28, perl5_30


Odd that perl5.32 is a sub-port but perl5_32 isn't a variant.

so that is supposed to be the default perl for everything, until such 
time as that is changed to perl 5.30.


So if you want perl 5.30 for everything, you will be fighting upstream 
at every turn.


I see it more as opening a second front downstream of MacPorts in 
alliance with the Perl upstream. :)


Someone could make a full-time+ job of maintaining just the Perl 
packages in MacPorts.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Why don't p5-* ports mark their dependencies?

2021-06-12 Thread Bill Cole

On 2021-06-12 at 12:11:47 UTC-0400 (Sat, 12 Jun 2021 09:11:47 -0700)
Kastus Shchuka 
is rumored to have said:

I wish it could be so easy to remove perl5.28. Apparently, I have to 
keep it because of git:


port uninstall git
port install git -perl5_28 +perl5_30


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Why don't p5-* ports mark their dependencies?

2021-06-12 Thread Bill Cole

On 2021-06-09 at 15:51:09 UTC-0400 (Wed, 9 Jun 2021 15:51:09 -0400)
Daniel J. Luke 
is rumored to have said:

On Jun 6, 2021, at 1:41 PM, Bill Cole 
 wrote:
I *think* I've even worked out the right way to use that construct to 
make Perl upgrades simpler, so I use the p5-* ports:


I gave up on trying to use this in any useful way a while ago - if 
you've got some way that it works, please share.


According to my shell history, this is what I did to clear out all the 
old perl5.2[68] and


port deactivate perl5
port install perl5 +perl5_30
port deactivate perl5.26
port deactivate perl5.28
port installed|grep '^  p5\.2.*-' |awk '{print $1}'|while read x; do 
y=`echo $x|sed 's/\.2.-/-/'`; port -v -f deactivate $x ; port -v install 
$y; done


Adjust to suit whatever versions you're trying to remove/replace.

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Why don't p5-* ports mark their dependencies?

2021-06-09 Thread Bill Cole

Not sure where the bug is here, but it's evident in 'port reclaim'.

The p5-* ports are basically placeholders for the p5.##- ports. I 
*think* I've even worked out the right way to use that construct to make 
Perl upgrades simpler, so I use the p5-* ports:


$ sudo port install p5-net-cidr p5-term-readline p5-test-fatal
--->  Computing dependencies for p5-net-cidr
The following dependencies will be installed:  p5.30-net-cidr
Continue? [Y/n]: y
--->  Fetching archive for p5.30-net-cidr
	--->  Attempting to fetch 
p5.30-net-cidr-0.200.0_0.darwin_18.noarch.tbz2 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-net-cidr
	--->  Attempting to fetch 
p5.30-net-cidr-0.200.0_0.darwin_18.noarch.tbz2.rmd160 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-net-cidr

--->  Installing p5.30-net-cidr @0.200.0_0
--->  Activating p5.30-net-cidr @0.200.0_0
--->  Cleaning p5.30-net-cidr
--->  Cleaning p5-net-cidr
--->  Computing dependencies for p5-term-readline
The following dependencies will be installed:  p5.30-term-readline
Continue? [Y/n]: y
--->  Fetching archive for p5.30-term-readline
	--->  Attempting to fetch 
p5.30-term-readline-1.140.0_0.darwin_18.noarch.tbz2 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-term-readline
	--->  Attempting to fetch 
p5.30-term-readline-1.140.0_0.darwin_18.noarch.tbz2.rmd160 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-term-readline

--->  Installing p5.30-term-readline @1.140.0_0
--->  Activating p5.30-term-readline @1.140.0_0
--->  Cleaning p5.30-term-readline
--->  Cleaning p5-term-readline
--->  Computing dependencies for p5-test-fatal
The following dependencies will be installed:  p5.30-test-fatal
Continue? [Y/n]: y
--->  Fetching archive for p5.30-test-fatal
	--->  Attempting to fetch 
p5.30-test-fatal-0.16.0_0.darwin_18.noarch.tbz2 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-test-fatal
	--->  Attempting to fetch 
p5.30-test-fatal-0.16.0_0.darwin_18.noarch.tbz2.rmd160 from 
https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.30-test-fatal

--->  Installing p5.30-test-fatal @0.16.0_0
--->  Activating p5.30-test-fatal @0.16.0_0
--->  Cleaning p5.30-test-fatal
--->  Cleaning p5-test-fatal
--->  Scanning binaries for linking errors
--->  No broken files found.
--->  No broken ports found.

Perfectly normal, right?

However, immediately after doing that, I did a reclaim and got a 
surprise:


$ sudo port -v reclaim
--->  Checking for unnecessary unrequested ports
Unrequested ports without requested dependents found:
 p5.30-test-fatal  @0.16.0_0
 p5.30-net-cidr  @0.200.0_0
 p5.30-term-readline  @1.140.0_0
Would you like to uninstall them? [Y/n]: n

And the dependency map is not reversible:

$ port deps p5-net-cidr
Full Name: p5-net-cidr @0.200.0_0
Library Dependencies: p5.30-net-cidr
    $ port rdependents p5.30-net-cidr
p5.30-net-cidr has no dependents.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Xcode for Sierra 10.12.6

2021-05-23 Thread Bill Cole
On 2021-05-23 at 19:45:17 UTC-0400 (Mon, 24 May 2021 09:45:17 +1000 (EST))
Dave Horsfall 
is rumored to have said:

> So, where can I find Xcode for 10.12.6

https://developer.apple.com/download/more/?=xcode

Not sure which version you need, but it will be there.

-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Command line glob expansion broken-ish

2021-05-20 Thread Bill Cole

On 2021-05-20 at 02:10:39 UTC-0400 (Thu, 20 May 2021 01:10:39 -0500)
Ryan Schmidt 
is rumored to have said:


On May 19, 2021, at 20:43, Bill Cole wrote:


Example:

shiny:~ root# port installed *proto
The following ports are currently installed:
 xorg-xorgproto @2021.4_0
shiny:~ root# port installed |fgrep proto
 xorg-compositeproto @0.4.2_0 (active)
 xorg-damageproto @1.2.1_0 (active)
 xorg-fixesproto @5.0_0 (active)
 xorg-kbproto @1.0.7_0 (active)
 xorg-randrproto @1.5.0_0 (active)
 xorg-renderproto @0.11.1_0 (active)
 xorg-xineramaproto @1.2.1_0 (active)
 xorg-xorgproto @2021.4_0

I do understand the issue, I think: the glob is being expanded 
against the names of ports that still exist in the current ports 
tree, not the ones that have been installed but have been superseded 
by (in this case) an omnibus port that won't activate because of the 
existing installations.


The obvious workaround was to manually uninstall each of the zombie 
ports individually. I wonder if anyone else considers this a bug?


I believe that's behaving as designed, so it's not a bug.


OK. I can see how that choice makes port-expression handling more 
efficient. It is probably worth documenting (I know: PRs welcomed...)


You can identify what you call zombie ports and what we call obsolete 
ports with:


port installed obsolete


That's the bit of man page I skimmed too loosely. Thanks!


You can uninstall them with

sudo port uninstall obsolete

You can also periodically use

sudo port reclaim

to reclaim disk space from things that are no longer needed, which 
might include obsolete ports unless you had explicitly requested them 
to be installed.


This is a machine whose MacPorts world had seen no attention in many 
months and probably hasn't been installed from scratch in 5+ years, as 
it was retired to low-attention duties. I may well have  'setrequested' 
every installed port at the last major OS update.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Command line glob expansion broken-ish

2021-05-19 Thread Bill Cole

Example:

shiny:~ root# port installed *proto
The following ports are currently installed:
  xorg-xorgproto @2021.4_0
shiny:~ root# port installed |fgrep proto
  xorg-compositeproto @0.4.2_0 (active)
  xorg-damageproto @1.2.1_0 (active)
  xorg-fixesproto @5.0_0 (active)
  xorg-kbproto @1.0.7_0 (active)
  xorg-randrproto @1.5.0_0 (active)
  xorg-renderproto @0.11.1_0 (active)
  xorg-xineramaproto @1.2.1_0 (active)
  xorg-xorgproto @2021.4_0

I do understand the issue, I think: the glob is being expanded against 
the names of ports that still exist in the current ports tree, not the 
ones that have been installed but have been superseded by (in this case) 
an omnibus port that won't activate because of the existing 
installations.


The obvious workaround was to manually uninstall each of the zombie 
ports individually. I wonder if anyone else considers this a bug?





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Reclaim was not 'safe'

2021-05-12 Thread Bill Cole

On 2021-05-10 at 12:47:35 UTC-0400 (Mon, 10 May 2021 09:47:35 -0700)
Ken Cunningham 
is rumored to have said:


Isn't that just sudo port setrequested installed


That’s what I’ve always done to avoid this, also having been 
burned by it once years ago:


sudo port setrequested installed


That basically eliminates the first stage of "reclaim" from ever doing 
anything, which may not be a bad idea as it currently stands. Also, it 
is probably better to use 'active' rather than 'installed' as there's no 
point in marking deactivated ports (generally speaking: old versions) as 
requested.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Reclaim was not 'safe'

2021-05-10 Thread Bill Cole

On 2021-05-10 at 11:43:56 UTC-0400 (Mon, 10 May 2021 17:43:56 +0200)
Bjarne D Mathiesen 
is rumored to have said:


Daniel J. Luke wrote:
On May 9, 2021, at 12:20 PM, Gerben Wierda via macports-users 
 wrote:
Anyway, the hard lesson was: reclaim is not ’safe’. I  thought, 
reclaim would only remove inactive installs, but it removed active 
ones as well.


It is not possible for me to retrace what went wrong exactly, sadly.


The first thing reclaim does is this:

--->  Checking for unnecessary unrequested ports
Unrequested ports without requested dependents found:

If you (like me) have an MacPorts install that pre-dates the 
requested flag, you'll have a bunch of ports in that list that you 
don't actually want uninstalled. For reclaim to work best, you need 
to do `port setrequested` on the ports you want to always keep - then 
the list of ports you see there will be stuff that got installed that 
you no longer need. (You can also mark things 'unrequested', see the 
port manpage - so you can fix things up if you mistakenly mark 
something requested that you don't want).


Or, you can just hit 'n' for the first prompt.



so, doing something like this :

port -q installed \


Better:

  port -q installed active \

Since the 'installed' pseudo-port includes deactivated ports, which are 
left by default after upgrades.



| awk '{print $1}' \
| xargs -n1 port setrequested

before the first use of 'port reclaim' would be advisable

I (luckily) didn't get burned, but I deemed 'port reclaim' to be 
unsafe

in automatic update scripts. In my case eg git was set up for reclaim.

--
Bjarne D Mathiesen
Korsør ; Danmark ; Europa
---
denne besked er skrevet i et totalt M$-frit miljø
OpenCore + macOS 10.15.7 Catalina
MacPro 2010 ; 2 x 3,46 GHz 6-Core Intel Xeon ; 256 GB 1333 MHz DDR3 
ECC

ATI Radeon RX 590 8 GB



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Error: Failed to build source-highlight: command execution failed

2021-05-05 Thread Bill Cole

On 2021-05-05 at 19:39:33 UTC-0400 (Wed, 5 May 2021 19:39:33 -0400)
tom eee 
is rumored to have said:

/Developer is gone and Xcode 4.6.3 in service.  Still failing build.  
See

attachment.  Thanks, Tom


That log shows that you are back at the original problem, whose proposed 
solution was to force the use of a newer version of the clang compiler 
by running these:


   sudo port clean source-highlight
   sudo port -s install source-highlight 
configure.compiler=macports-clang-9.0



However, I've lost track of whether we've actually solved the problem 
you hit the last time you tried that: a broken installation of 
clang-9.0. To make sure that problem is fixed, run this:


   /opt/local/bin/clang-mp-9.0 --version

That should put out something like this:

   clang version 9.0.1
   Target: i386-apple-darwin11.4.2
   Thread model: posix
   InstalledDir: /opt/local/libexec/llvm-9.0/bin



On Wed, May 5, 2021 at 5:14 PM Ryan Schmidt  
wrote:





On May 5, 2021, at 12:19, tom eee wrote:

Second, I retried 'sudo port install source-light' with no success.  
The

main.log was very big, so I cut out a big portion of the middle and
attached it to this email.

The log still shows the same error described in
https://trac.macports.org/ticket/59258 and shows that MacPorts still
recognizes that you have Xcode 4.2.

Deleting parts of logs can make it harder for us to help you. A 
better

file size reduction choice is to compress the log.


Third, I downloaded Xcode 4.6.3 and when the opened dmg directed me 
to
install the Xcode in my Application folder, I checked for what was 
already

there first, only to discover that I had Xcode 4.6.3 installed in the
Application folder since 2013!  I then looked in the Developer folder 
and
discovered Xcode 4.2 was there.  So I am confused about how to make 
Xcode
4.6.3 the version that MacPorts sees when it is doing it's thing and 
do I

now have to do some update for Developer?

The /Developer folder is obsolete. You can delete it. It is where 
Apple
used to install Xcode and associated files, but sometime after Xcode 
4.2

they stopped doing that. Xcode now belongs in /Applications.

You can use "xcode-select -print-path" to see what Xcode your system 
is

configured to use. MacPorts will use this Xcode.

Assuming it does not say the path is
/Applications/Xcode.app/Contents/Developer, change it to that by 
running
"sudo xcode-select -switch 
/Applications/Xcode.app/Contents/Developer"


Then you can run "sudo port clean source-highlight" and try to 
install it

again.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Error: Failed to build source-highlight: command execution failed

2021-04-30 Thread Bill Cole

On 30 Apr 2021, at 11:48, tom eee wrote:

The following is my terminal output for the clean/install commands you 
ask

me to run.  Attached is the install config.log and main.log.


The config.log indicates a serious problem with your clang-9.0 
installation:



configure:4766: checking for C compiler version
configure:4775: /opt/local/bin/clang-mp-9.0 --version >&5
xcodebuild: error: '/opt/local/libexec/llvm-9.0/bin/clang' not found.
/Developer/usr/bin/xcodebuild fails with 17664 - Unknown error: 17664


Because the clang-9.0 port installs both /opt/local/bin/clang-mp-9.0 (a 
shell script) and /opt/local/libexec/llvm-9.0/bin/clang (the actual 
compiler binary, which is called by that script) it should not be 
possible to get that error unless damage has been done to the clang-9.0 
installation.


You should try to uninstall and reinstall clang-9.0, then try the 
installation of source-highlight again.






Do you want
me to run the 'port -v installed boost' command also?

Last login: Fri Apr 30 11:26:05 on ttys000
11:29-1> sudo port clean source-highlight
Password:
--->  Cleaning source-highlight
11:30-2> sudo port -s install source-highlight
configure.compiler=macports-clang-9.0
--->  Computing dependencies for source-highlight
--->  Fetching distfiles for source-highlight
--->  Verifying checksums for source-highlight
--->  Extracting source-highlight
--->  Configuring source-highlight
Error: Failed to configure source-highlight, consult
/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_textproc_source-highlight/source-highlight/work/source-highlight-3.1.9/config.log
Error: Failed to configure source-highlight: configure failure: 
command

execution failed
Error: See
/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_textproc_source-highlight/source-highlight/main.log
for details.
Error: Follow https://guide.macports.org/#project.tickets to report a 
bug.

Error: Processing of port source-highlight failed

Thank you for your help,
Tom


On Thu, Apr 29, 2021 at 5:59 PM Ryan Schmidt 
wrote:




On Apr 29, 2021, at 10:54, tom eee wrote:

Hello Ryan,  I have been watching the ticket 59258 that you 
associated
with my problem and it is not quite clear to me whether I am being 
asked to

do something with boost.  Please update me with how I should proceed.
Thank you, Tom

In that ticket, I asked you to run:

port -v installed boost

However, since we also see the problem on our 10.7 build machine, 
that
suggests it's not a problem with your machine, so the results of the 
above

command may not turn out to be useful.

In that ticket, René mentioned that building source-highlight with a 
newer

compiler worked for him. So you could try running:

sudo port clean source-highlight
sudo port -s install source-highlight 
configure.compiler=macports-clang-9.0


If that works, let us know; it at least gives us a workaround we can 
apply
to the port until the developers respond to the upstream bug report I 
filed.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: what is the technical reason why no current version of GNOME runs on macOS?

2021-04-16 Thread Bill Cole

On 16 Apr 2021, at 8:35, Evelyn Pereira Souza via macports-users wrote:


On 16.04.21 14:13, Ben Greenfield wrote:

Can you clarify?


https://trac.macports.org/wiki/GNOMEPackageStatus


Note that wiki pages are inherently unreliable, as they are maintained 
manually by whoever feels like updating them when the whim strikes them. 
As the history of that page shows, it had about 8 weeks of interest from 
one person who is also the maintainer of most of the GNOME ports, back 
in 2009.



Quote:

gnome-desktop
2.26.3

Some days ago GNOME 4 was released. This very old release.


Yes, but that only shows that it is from a very old wiki page.

A check on a current MacPorts installation provides the actual truth:

# port info gnome-desktop
gnome-desktop @3.38.1 (gnome)
Variants: universal

Description:  gnome-desktop contains the libgnome-desktop 
library as
  well as a data file that exports the GNOME 
version to

  the Settings Details panel. The libgnome-desktop
  library provides API shared by several 
applications on
  the desktop, but that cannot live in the platform 
for
  various reasons. Documentation for the API is 
available

  with gtk-doc.
Homepage: https://www.gnome.org/

Extract Dependencies: xz
Build Dependencies:   meson, ninja, pkgconfig, itstool, gtk-doc
Library Dependencies: desktop-file-utils, fontconfig, 
gobject-introspection,

  gsettings-desktop-schemas, gtk3, iso-codes,
  xorg-libX11, xorg-libXext, xorg-libXrandr,
  xkeyboard-config
Platforms:darwin
License:  LGPL-2+
Maintainers:  Email: dev...@macports.org, GitHub: dbevans
  Policy: openmaintainer


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Migration after hardware failure

2021-03-02 Thread Bill Cole

On 2 Mar 2021, at 12:56, Craig Treleaven wrote:


Hi:

My old computer, which was running OS X 10.10, failed and I’ve 
replaced it with anew iMac running 10.15.  The drive in the old system 
was fine so I pulled it out and mounted it in an external enclosure so 
I could recover my file using Migration Assistant.


Looking at the Migration instructions [1], I don’t quite fit any of 
the mentioned scenarios.


Sure you do: it's a system upgrade.  It just has the added quirk of your 
MacPorts installation being under /Volumes//opt/local/ .


If you copy that entire directory to /opt/local on your new system, you 
can then proceed as described on the Migration page. So, make this Step 
0:


 cp -a /Volumes//opt/local /opt/



If I try to get a list of requested ports, it fails thusly:

$ port echo requested
Error: Current platform "darwin 19" does not match expected platform 
"darwin 14"
Error: If you upgraded your OS, please follow the migration 
instructions: https://trac.macports.org/wiki/Migration

OS platform mismatch
while executing
"mportinit ui_options global_options global_variations"
Error: /opt/local/bin/port: Failed to initialize MacPorts, OS platform 
mismatch



OK, so it looks like you already did that copy, since you have (a wrong 
version of) /opt/local/bin/port.



Do I just need to install the correct version of MacPorts for this OS


Yes. Step 2 on the Migration page.

The "port echo requested" command is Step 3(b) and you need to do all 
prior steps prior to this.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Question about fish shell initialization settings...

2021-02-22 Thread Bill Cole

On 22 Feb 2021, at 12:36, Carlo Tambuatco wrote:

On starting the shell, (within zsh at the moment, because fish isn’t 
yet my default
shell, since I am only just now learning it), it already seems to know 
all of the

environment variables eg: $PATH, $CPATH, $CLASSPATH, etc, that I set
from within the zsh initialization files. Is it reading my zsh 
initialization files to
get that information, or or getting that information from some other 
source?


Environment variables are passed from parent processes to their 
children. That's why they are called "environment" variables. A shell 
also has variables that exist for its own use in command lines that are 
NOT part of the environment. You can see all shell variables using the 
'set' command and all environment variables with the 'env' command. You 
can turn a normal variable into an environment variables with 'export 
VARIABLENAME' and POSIX-compliant shells can also be configured to 
export all variables automatically.


TL;DR: you'll need shell init files for fish.

--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Build servers going offline due to inclement weather

2021-02-19 Thread Bill Cole

On 19 Feb 2021, at 15:12, Todd Doucet wrote:

Many new users, like me, might not know what the consequences of the 
build servers being down are, exactly.  I am speculating that this 
does not mean that MacPorts is not available generally, but instead 
that if I ask for a port it might build it on my machine instead of 
pulling a pre-built binary for me.


Correct. In some cases there could also be problems with getting source 
distributions of some ports automatically.


From Ryan's initial message:

Binary archives of newly updated ports will not be produced during 
this time so MacPorts will compile from source on your computer when 
needed. Source distfiles will not be mirrored during this time either 
which may impact your ability to install some ports on older OS 
versions, particularly OS X 10.8 and earlier. If you get an error 
during the fetch phase, consult:


https://trac.macports.org/wiki/ProblemHotlist#fetch-failures


That link explains that if you can find and manually fetch the right 
distfile, you can work around a 'port fetch' failure.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Build servers going offline due to inclement weather

2021-02-16 Thread Bill Cole

On 16 Feb 2021, at 23:25, Richard Bonomo TDS personal wrote:


Clearly, Texas needs new nuclear power plants!


Or they could just winterize the ones they have. e.g. there's a nuclear 
plant south of Houston that is offline because its cooling water is 
currently ice.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Build servers going offline due to inclement weather

2021-02-16 Thread Bill Cole

On 16 Feb 2021, at 22:01, Peter West wrote:


Hi Ryan,

That’s interesting about the natural gas supplies.  I’m surprised 
that Texas does not have even two days worth of gas in storage. Maybe 
that had all been sold to Mexico. Considering that Russia supplies 
(from Siberia) significant quantities of natural gas to Europe, with 
plans for a doubling of the Nord Stream pipelines, they obviously have 
more experience in keeping gas flowing in freezing conditions. The 
Nord Stream pipelines do go under water, but the gas has to get to 
them.


If you *plan* for supplying gas and operating power plants (which need 
non-frozen water) in absurdly cold conditions, it is not hard to do, 
although it does cost money to implement. After all, people do live in 
Canada and the northern tier of the US, and both the wind turbines and 
the gas plants are running just fine in Minnesota.  No one ever planned 
for essentially all of Texas pl,us adjacent areas south and east to be 
as cold as it has been for the past week. There are also quirks of the 
way Texas has (not) regulated the energy sector that have encouraged 
minimizing prices in normal times, at the cost of the whole system 
collapsing in a cold snap.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: XQuartz and xorg-server

2021-01-22 Thread Bill Cole

On 22 Jan 2021, at 20:27, Peter West wrote:

I assume all of these issues have been resolved for CPAN for perl and 
associated packages, but many R packages require compilation. Is that 
problem similar for CPAN?


MacPorts provides a very large collection of Perl module ports, but not 
all of what is available in CPAN. You can use CPAN to add modules to a 
MacPorts Perl world, but if you inadvertently add a module both via CPAN 
& MacPorts it can get messy.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Catalina: accepting incoming connections on unbound does not survive a reboot

2021-01-14 Thread Bill Cole

On 14 Jan 2021, at 18:50, Tom wrote:


Have you tried Lulu or Little Snitch?


I've used both on various versions through 10.14. It is my understanding 
that due to Apple exempting their own software from the Network 
Extension Framework, both are hobbled on 10.15+, but that with 11.2 they 
will be reversing that choice.


My issues with modern macOS for server applications are mostly with the 
broken logging and the difficulty of stripping down the operational 
environment to just what's needed on a Mac that doesn't normally 
function as a personal computer.


Disabling the built-in firewall entirely may be your only solution. I 
am not sure because I have not bothered trying to make any macOS 
newer than El Capitan usable as a server. Life is short and FreeBSD 
exists.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: Catalina: accepting incoming connections on unbound does not survive a reboot

2021-01-14 Thread Bill Cole

On 13 Jan 2021, at 8:26, Gerben Wierda via macports-users wrote:

I did not have this problem under Mojave, but since I have upgraded I 
do.


I am running a backup nameserver (in my split-DNS setup) on a mac 
desktop (unbound via MacPorts). After a reboot, the first user to log 
in gets a panel from the firewall with the question to allow incoming 
connections for unbound. System administrator user name and password 
are  given and incoming connections are then accepted. But after a 
reboot I have to do this again.


Yes. Because modern macOS is unfit for server applications. Apple 
started making design choices circa Sierra aimed at converging it with 
iOS, for reasons that make sense for personal computers but without 
regard to how servers would be affected.


Historically it has been possible to make specific persistent exceptions 
using the Firewall panel of the Security preferences pane and supposedly 
this still can be done on Catalina (see 
https://www.dummies.com/computers/macs/macbook/how-to-customize-your-macbooks-catalina-firewall/) 
but I have not tried that and it may not work for software that is not 
packaged as a macOS application. You definitely should disable "stealth 
mode" in that panel.


Disabling the built-in firewall entirely may be your only solution. I am 
not sure because I have not bothered trying to make any macOS newer than 
El Capitan usable as a server. Life is short and FreeBSD exists.





--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: apache2 IPv6 Big Sur

2021-01-11 Thread Bill Cole

On 9 Jan 2021, at 13:16, Steve Wardle via macports-users wrote:


Hi,

I’ve got apache2 2.4.46 running on Big Sur 11.1 and it’s not 
listening on the IPv6 interfaces. I’m sure this was working last 
year and it would help to know if it’s a general apache2 2.4.46 
issue or confined to Big Sur or maybe just my system.


Check your configuration files. The port is a bit aggressive (e.g. 
replacing the root index.html file with every update) and it would not 
be surprising if it replaced a config file.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


  1   2   3   >