i'm not familiar enough with the OCI build to review this, but the change looks right: we shouldn't be duplicating information that's already in /etc/pkg/FreeBSD.conf. this would also fix downstream users (like me) who ship a modified FreeBSD.conf.

okay, that sounds reasonable.

also from the PR:

the problem reported in the PR is:

In D53051#1225647, @cperciva wrote:

This seems to have stalled; ok if I take it off the 15.0 issues list?

In D53491#1225645, @cperciva wrote:

This isn't intended to land in 15.0 any more, right?

In D53605#1223886, @jlduran wrote:

Perhaps the discussion can be if we want to make WITHOUT_BLOCKLIST the default? That would be understandable, since it has a low usage rate, I would approve that.

also update mtree

In D53605#1223871, @jlduran wrote:

Just to make sure I'm on the same page, because to me having FreeBSD-blocklist-lib and FreeBSD-blocklist would be like having FreeBSD-ssh and FreeBSD-ssh-lib.

fix the UPDATING text to match the use of LIB_PACKAGE

In D53484#1223366, @glebius wrote:

Note that there are tests that use routed :(

In D53576#1223087, @emaste wrote:

Will runtime need a dependency on libcasper now?

i don't know enough about ports to say if this is the right way to do this, but in principle disabling vulnerability checks here seems correct, otherwise building release would randomly break whenever VuXML is updated. which is, i suppose, what prompted this change in the first place.

while you're here, i notice there is some existing text in this page which is wrong:

i'm okay with this change but, based on what i remember of your original description of the problem, could explicitly installing FreeBSD-clibs-lib32 avoid it? or does it not actually require 32-bit libgcc at all?

thanks.

would you approve an MFH for this change? it's pretty straightforward and provides a useful feature.

PR: 289683