Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Pain points for me: The package management and upgrades.

If I'm not mistaken (perfectly possible, I'm really no expert and only browsed OpenBSD documentation here and there)

- you have no decent binary packages FreeBSD guys online complain a lot about the current pkgng changes, but the direction is great: Build from ports, install binaries elsewhere.

This is something I really really like, since I tend to avoid building stuff on production machines and since I don't want to (even temporarily - and that means you have to clean up!) pull in pure build time dependencies. FreeBSD solved this for my use case with pkgng and the ability to easily host your own repository. I have a build machine and run portshaker/poudriere to create exactly the (binary) packages I need. Installation on the targets is a breeze.

- consider the heartbleed issue

As far as I understand the OpenBSD project issued a patch (as in text file) and told you to rebuild the related parts of your base system (or everything)? FreeBSD has binary updates for these kind of things.

I'm not trying to bash OpenBSD or promote FreeBSD, I guess the general idea behind this post is that I'm interested in the project OpenBSD, but feel that running OpenBSD would probably too much tinkering than I'd like (cough I guess I'm saying that I'm lazy?).

But maybe, maybe, I'm wrong about one or both of these "issues"? Maybe there are 3rd party helpers that make everything very, very easy (just like portshaker/poudriere on FreeBSD are tools I install from ports, i.e. not part of base)? I'd be happy to be enlightened.



> you have no decent binary packages

This is completely incorrect. OpenBSD has been all about building reproducible binary packages for quite a long time now, and the ports tree is regularly bulk-built and failing ports fixed or swept out of the way. The key difference from FreeBSD is that OpenBSD binary package sets are released every six months with the base system, and you are expected to upgrade them during a system upgrade.

It's as simple as `pkg_add -ui` if you point the PKG_PATH to a remote OpenBSD distribution mirror.

One advantage of upgrading ports with the base system is that caveats are all conveniently listed in the upgrade guide for that release. E.g. for 5.4->5.5: http://www.openbsd.org/faq/upgrade55.html#Pkgup


Cool! Thanks for correcting me.

That said: I need more stuff than the ports tree contains (I .. checked NetBSD and FreeBSD, plus a couple of Linux distributions. I admit that I haven't checked all my packages against OpenBSD's ports tree, but I assume I'm correct). Plus, I do need the occasional update without waiting 6 month. How would I do that?

For comparison: On FreeBSD I use portshaker to create a ports tree that is a mixture of upstream (FreeBSD) and other sources (a git repository, in my case). If FreeBSD doesn't bump a package and PRs take a whiiiiile, I bump that thing in my overlay.

poudriere allows me to build (in bulk) all my relevant packages in jails, is clever enough to rebuild just the stuff that changed (or where I changed the config) and spits out a directory structure that represents a pkgng repository with (optional) signed binary packages.

pkgng is pointed to my repository (actually it supports multiple sources, apt like. Can PKG_PATH do that?), which contains now builds from upstream ports and my overlay.

How would I (hoping that you have a couple of minutes and can prove me wrong once more)

- build binary packages for ports that either don't exist upstream (stuff I ported) or are outdated upstream?

- distribute those in a decent way (PKG_PATH swapping..?)

I guess I'm left with the question whether we're talking about the same thing when we're saying 'decent binary packages'? I'm sure you can OpenBSD works well for the intended use - but 'decent' wasn't an objective attribute here, it was more a subjective 'decent for my needs' kind of thing. More details above.

In the end, pkg_* feel like ooold Solaris, or like using Slackware again. That's package management on a different level and feels like a step down from apt/yum/pacman/pkgng. Again: Probably it's just a matter of convenience and my laziness in the end, but so far I feel that's not for me.


I'll just point you at the ports and packages documentation, which has answers to all your questions: http://www.openbsd.org/faq/faq15.html


Fair enough. Here's an upvote, that's probably the right answer.

That said: I read that page. Multiple times. It doesn't help me mapping my portshaker/poudriere setup into something in the OpenBSD world so far. On the other hand: It makes no sense to expect that answer from you either, so .. back to the first line, full circle. :)


I should note that most OpenBSD users don't like needless tinkering and therefore stick to the binary packages. Those who want more up to date packages run a -current snapshot. Stable packages are also available via M:Tier.

But if you want to tinker and build your packages, you can do that. That's what the ports tree is there for. That is how the OpenBSD packages are built.

> - build binary packages for ports that either don't exist upstream (stuff I ported) or are outdated upstream?

The package target for bsd.port.mk(5):

     package       Build a port package (or packages in a MULTI_PACKAGES case)
                   from the fake installation.  Involves creating packaging
                   information from templates (see COMMENT, SUBST_VARS among
                   others) and invoking pkg_create(1) for each package in the
                   MULTI_PACKAGES list.  If the repository already contains
                   up-to-date packages, they are not rebuilt.

> - distribute those in a decent way (PKG_PATH swapping..?)

It is very easy to distribute OpenBSD packages. You can use http, ftp, nfs.. Yes, PKG_PATH needs to be set, just like you need to configure the package manager to your own repo on any other system.

> actually it supports multiple sources, apt like. Can PKG_PATH do that?

pkg_add(1):

     PKG_PATH     If a given package name cannot be found, the directories
                  named by PKG_PATH are searched.  It should contain a series
                  of entries separated by colons.  Each entry consists of a
                  directory name.  URL schemes such as FTP, HTTP, HTTPS, or
                  SCP are also appropriate.  The current directory may be
                  indicated implicitly by an empty directory name, or
                  explicitly by a single period (`./').

> poudriere allows me to build (in bulk) all my relevant packages in jails

So OpenBSD doesn't have jails, but it is possible to do ports builds from a read-only ports tree using a non-privileged user, with systrace in place to filter accesses that shouldn't happen.

> In the end, pkg_* feel like ooold Solaris, or like using Slackware again. That's package management on a different level and feels like a step down from apt/yum/pacman/pkgng.

You sure have lots of feelings about a package manager you don't know. Have you even used it?

I haven't used pkgng and my experience with yum & pacman is limited, but apt (and aptitude) is what made me finally quit using Linux; I'm 100% OpenBSD now. pkg_add is a definite step up for me, whether using subjective feelings or the number of times it's broken things for me as the metric.


Hey.

I appreciate the help people are offering here. I'm building a list of links (currently the Porter's handbook and various links around that) to read and decided that I need to dive deeper, give it a real spin (again) before commenting .. again.

If I understand the first part of your answer, or where it is coming from: I .. do understand that I can create packages. I don't understand how I'd have my own ports tree in a sensible way (do you have a couple of trees? Build package A from here, package B from there?), when you need stuff that just isn't ported/too 'niche'. Or if you need to bump a version of a port that is in the official tree.

I knew about make package, see above (same on/similar to systems I use today).

I posted my new understanding about PKG_PATH elsewhere in this thread, but I guess I DO have to admit that I should've hit the man page first. Admittedly I never used it for more than pointing to one single official mirror in the couple of VMs I played with. Anyway: Cool.

I'm not married to jails, I just like that poudriere offers a very nice way to build packages in an isolated environment. Security isn't the biggest concern here: One thing that this allows me to do for example is to run one version of FreeBSD and build packages in a jail of another version (or another arch, or both). At this point I assume there's an OpenBSD equivalent for this functionality as well though. :)

My feelings about pkg_* are honestly based on older experiences with FreeBSD and recent but discontinued explorations in NetBSD. My last OpenBSD installation is a while back and I might've given up quite quickly. Which of course might entirely be a fault of my character.

No offense intended, if you feel I attacked either you or a project you sympathize with I'm sorry about that.


No offense taken.

I just felt that your knowledge is seriously outdated or not based on actual usage of the OpenBSD tool (which, by the way, has had a steady stream of improvements throughout its existence). And it looks like I was right, if your experience is indeed based on FreeBSD & NetBSD. OpenBSD has its own tool, which was written from scratch on and for OpenBSD by Marc Espie. It is not based on the code by Hubbard. It is not at all the same thing the other BSDs have.

As for your own ports tree -- well, I can't tell what is the best method for your scenario; I primarily use the binary packages (and sometimes compile things outside the ports tree). But the most obvious thing to do (which I've done) is to checkout the official ports tree, add your own ports and/or make your changes in it and use it as such. You might have to merge upstream changes if they've updated something you have touched. But if you want to track the official ports in addition to your own, then it makes all the sense to watch out for overlapping updates, no?

Also, if you're bumping ports because the OpenBSD porters haven't done so yet, it might be a good idea to send the diff to ports@.


Glad that you're not offended.

As you correctly stated, my dislike for the pkg_* tools is probably without merit here and based on incorrect assumptions. I'll make sure to learn about the OpenBSD variants.

The ports tree.. Well, that's what I'd like portshaker [1] for. Yes, you can do that manually, but it's a pain.

Bumping ports: Same for FreeBSD, but unless OpenBSD has a much more responsive ports teams/mailing list, this won't usually work fast (I know, I'm extrapolating again). I have currently a meager list of four ports in my overlay that currently don't exist in FreeBSD or are outdated, but these exist for quite a while now ("weeks"). I try to be a good citizen and submit these things upstream, but I don't like to depend on someone having commit access.

1: http://www.manualpages.de/FreeBSD/FreeBSD-ports-9.0-RELEASE/...


> I don't understand how I'd have my own ports tree in a sensible way (do you have a couple of trees? Build package A from here, package B from there?), when you need stuff that just isn't ported/too 'niche'.

There's a /usr/ports/mystuff directory for building your own ports. Unless I'm missing something, I don't see why you'd need a whole new ports tree?


You post is formatted awkwardly so I'm only guessing at your issues. Forgive me if I am misunderstanding.

"you have no decent binary packages" - OpenBSD encourages the use of binary packages. The OS is shipped with them. You can use ports (compile from source) if you like, but packages are preferred. [0]

There are no binary updates for the base system (maybe in 3rd party, but not from OpenBSD). You do have to compile but there are only a few per release and not mandatory if they don't affect you. Here is the heartbleed patch [1]. Very simple and contains the instructions in the patch.

[0] Ports and Package Docs - http://www.openbsd.org/faq/faq15.html [1] Heartbleed Patch - http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/002_op...


the ability to easily host your own repository.

OpenBSD can do this by default. Just build your package how you like, and then on the target machines, set $PKG_PATH to your build/hosting server.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: