Page MenuHomeFreeBSD

sjg (Simon Gerraty)
User

Projects

User Details

User Since
Apr 9 2015, 9:27 PM (537 w, 4 d)

Recent Activity

Fri, Jul 25

sjg accepted D50149: do not commit - bmake: add a package for bmake and share/mk.

works for me, just one nit above

Fri, Jul 25, 10:20 PM
sjg added a comment to D50149: do not commit - bmake: add a package for bmake and share/mk.

Note I would disagree that make isn't needed in a minimal install, I use make and makefiles for all sorts of use-cases that have nothing to do with building src/

Fri, Jul 25, 9:45 PM

Thu, Jul 24

sjg accepted D51490: bsd.man.mk: add MANGROUPS.

Looks reasonable

Thu, Jul 24, 7:09 PM
sjg added inline comments to D51490: bsd.man.mk: add MANGROUPS.
Thu, Jul 24, 4:35 PM
sjg added a comment to D51447: loader: do not try to mount currdev for TFTP.
In D51447#1175667, @imp wrote:

I do like this better...

But what we're trying to avoid is setting currdir to tftp://1.2.3.4/mumble and having lots of tftp traffic go as we try to open it a bunch of times to see if each of the filesystems can cope... Can you confirm that's the top of this rabbit hole?

Thu, Jul 24, 12:53 AM

Wed, Jul 23

sjg updated the diff for D51447: loader: do not try to mount currdev for TFTP.

Rework to avoid opening dirs via TFTP while not breaking diskless
boot with nfs.

Wed, Jul 23, 10:57 PM
sjg accepted D51467: security/ossec-hids-local: fix makefile warnings: Invalid character " " in variable name.

I can't approved, but looks sane - I assume it works ;-)

Wed, Jul 23, 5:53 AM

Tue, Jul 22

sjg added inline comments to D51447: loader: do not try to mount currdev for TFTP.
Tue, Jul 22, 10:56 PM

Mon, Jul 21

sjg committed rGcae98cf683dd: install: allow ENV in metatags (authored by sjg).
install: allow ENV in metatags
Mon, Jul 21, 5:15 PM
sjg closed D51446: install: allow ENV in metatags.
Mon, Jul 21, 5:15 PM
sjg committed rG3717484168ee: bsd.subdir.mk skip _SUBDIR for DIRDEPS_BUILD (authored by sjg).
bsd.subdir.mk skip _SUBDIR for DIRDEPS_BUILD
Mon, Jul 21, 4:13 PM
sjg closed D51454: bsd.subdir.mk skip _SUBDIR for DIRDEPS_BUILD.
Mon, Jul 21, 4:12 PM
sjg requested review of D51454: bsd.subdir.mk skip _SUBDIR for DIRDEPS_BUILD.
Mon, Jul 21, 3:58 PM

Sun, Jul 20

sjg updated the diff for D51187: Allow secure-netboot.

Move install.c change to D51446
Move misc.c change to D51447

Sun, Jul 20, 11:11 PM
sjg requested review of D51447: loader: do not try to mount currdev for TFTP.
Sun, Jul 20, 11:06 PM
sjg requested review of D51446: install: allow ENV in metatags.
Sun, Jul 20, 10:35 PM

Sat, Jul 19

sjg updated the diff for D51187: Allow secure-netboot.

Mention pkgfs_fsops in libsa.3

Sat, Jul 19, 8:58 PM
sjg committed rGa8c56be47166: Merge bmake-20250707 (authored by sjg).
Merge bmake-20250707
Sat, Jul 19, 5:43 PM
sjg committed rG3d772e596c1a: Import bmake-20250707 (authored by sjg).
Import bmake-20250707
Sat, Jul 19, 5:10 PM

Fri, Jul 18

sjg updated the diff for D51187: Allow secure-netboot.

Add flag to fs_ops for skipping devopen

Fri, Jul 18, 10:32 PM
sjg added inline comments to D51187: Allow secure-netboot.
Fri, Jul 18, 10:12 PM
sjg abandoned D51094: Fix secure netboot with UEFI.

This review has been broken up and the open review is D51187

Fri, Jul 18, 4:21 PM
sjg updated the diff for D51187: Allow secure-netboot.

Make the code in open() neater

Fri, Jul 18, 4:09 PM
sjg updated the diff for D51187: Allow secure-netboot.

Alternative means of skipping devopen for pkgfs

Fri, Jul 18, 12:58 AM
sjg added inline comments to D51187: Allow secure-netboot.
Fri, Jul 18, 12:17 AM

Thu, Jul 17

sjg updated the diff for D51187: Allow secure-netboot.

Rebase after commit DEBUG_PRINTF

Thu, Jul 17, 11:54 PM
sjg committed rGe67aef419093: Add DEBUG_PRINTF to stand.h (authored by sjg).
Add DEBUG_PRINTF to stand.h
Thu, Jul 17, 11:38 PM
sjg closed D51269: Add DEBUG_PRINTF to stand.h.
Thu, Jul 17, 11:37 PM
sjg added a comment to D51269: Add DEBUG_PRINTF to stand.h.
In D51269#1173596, @imp wrote:

This looks good.

It would be nice if there was a loader command to set the debug level, but that's a separate thing and isn't universally useful since a lot of this code runs before the OK prompt.

Thu, Jul 17, 11:36 PM
sjg added a comment to D51094: Fix secure netboot with UEFI.
In D51094#1172979, @imp wrote:

I had a note to follow up on this in a "little while"
Where are we? Is this review done? Or have I overlooked some sub-review that split off?

Thu, Jul 17, 12:15 AM

Wed, Jul 16

sjg updated the diff for D51269: Add DEBUG_PRINTF to stand.h.

Tweak the #ifdef in stand.h

Wed, Jul 16, 12:22 AM

Fri, Jul 11

sjg added a comment to D51187: Allow secure-netboot.
In D51187#1170063, @imp wrote:

Can you do the debug level stuff first so we get that out of the way? There's also a lot of different fixes bundled together which makes me super nervous for future bisecting...

Fri, Jul 11, 10:38 PM
sjg requested review of D51269: Add DEBUG_PRINTF to stand.h.
Fri, Jul 11, 10:36 PM

Thu, Jul 10

sjg committed rGd1f0ee548c73: Allow net_cleanup for loader.efi (authored by sjg).
Allow net_cleanup for loader.efi
Thu, Jul 10, 6:18 PM
sjg closed D51186: Allow net_cleanup for loader.efi.
Thu, Jul 10, 6:17 PM

Wed, Jul 9

sjg updated the diff for D51186: Allow net_cleanup for loader.efi.

Tweak comment as suggested

Wed, Jul 9, 11:09 PM
sjg updated the diff for D51186: Allow net_cleanup for loader.efi.

Add a comment about why dev_cleanup needs to be called before bi_load

Wed, Jul 9, 6:21 PM

Tue, Jul 8

sjg added a comment to D51186: Allow net_cleanup for loader.efi.
In D51186#1169361, @imp wrote:
In D51186#1169123, @sjg wrote:
In D51186#1168883, @imp wrote:

So what happens when bi_load() returns an error? Most devices don't have the 'dv_cleanup()' routines, so it doesn't matter that much... But wouldn't this preclude network working if it does cleanup? I think it might be OK.

It looks like the only case for which bi_load() returns an error - vs panic is failure to find rootdev which seems the sort of thing that could have been done earlier?
If that were extracted to some earlier call, then bi_load() looks like a one way trip to boot or panic

It may be a redunant check. But I'm not sure that bi_load is the right place to do exit boot services since I don't want its callers to know that only panics are possible because that changes over time.

But I think your analysis is flawed, since we have

if (retry == 0) {
        BS->FreePages(addr, pages);
        printf("ExitBootServices error %lu\n", EFI_ERROR_CODE(status));
        return (EINVAL);
}

late in the bi_load.

Tue, Jul 8, 11:55 PM
sjg added a comment to D51186: Allow net_cleanup for loader.efi.
In D51186#1168883, @imp wrote:

So what happens when bi_load() returns an error? Most devices don't have the 'dv_cleanup()' routines, so it doesn't matter that much... But wouldn't this preclude network working if it does cleanup? I think it might be OK.

Tue, Jul 8, 5:16 PM
sjg added a comment to D51186: Allow net_cleanup for loader.efi.
In D51186#1168883, @imp wrote:

So what happens when bi_load() returns an error? Most devices don't have the 'dv_cleanup()' routines, so it doesn't matter that much... But wouldn't this preclude network working if it does cleanup? I think it might be OK.

Tue, Jul 8, 5:02 PM

Sun, Jul 6

sjg requested review of D51187: Allow secure-netboot.
Sun, Jul 6, 11:54 PM
sjg added a comment to D51094: Fix secure netboot with UEFI.
In D51094#1168500, @imp wrote:

Usually many of the smaller changes will go in quickly if there are any others the prove to need more discussion. So that can also narrow the focus quickly. Thanks.

Sun, Jul 6, 11:53 PM
sjg requested review of D51186: Allow net_cleanup for loader.efi.
Sun, Jul 6, 11:35 PM
sjg added a comment to D51094: Fix secure netboot with UEFI.
In D51094#1168160, @imp wrote:

This mixes a lot of different types of changes all in one big ball that's hard to review.
Any chance you could break them down to approximately what the paragraphs of the description say? At the very least, the debug stuff should be a separate commit, but really there's about 10 commits hiding in this one review by my quick count. It makes bisecting quite a bit simpler to do separate commits.

Sun, Jul 6, 11:23 PM

Mon, Jun 30

sjg updated the diff for D51094: Fix secure netboot with UEFI.

Make the same change for arm, i386 and riscv

Mon, Jun 30, 9:31 PM
sjg requested review of D51094: Fix secure netboot with UEFI.
Mon, Jun 30, 6:01 PM

Jun 28 2025

sjg committed rG0b46a53a2f50: Merge bmake-20250618 (authored by sjg).
Merge bmake-20250618
Jun 28 2025, 2:53 AM
sjg committed rG4f8f2bc29466: Import bmake-20250618 (authored by sjg).
Import bmake-20250618
Jun 28 2025, 2:39 AM

Jun 5 2025

sjg committed rGac05fc395317: local.dirdeps.mk remove stray .endif (authored by sjg).
local.dirdeps.mk remove stray .endif
Jun 5 2025, 3:37 AM
sjg committed rGbf407f36c5e9: local.dirdeps.mk move MK_RUN_TESTS .endif (authored by sjg).
local.dirdeps.mk move MK_RUN_TESTS .endif
Jun 5 2025, 3:31 AM

Jun 4 2025

sjg committed rG8e1e989c77d4: Add host.test.mk for DIRDEPS_BUILD (authored by sjg).
Add host.test.mk for DIRDEPS_BUILD
Jun 4 2025, 7:59 PM
sjg closed D50387: Add host.test.mk for DIRDEPS_BUILD.
Jun 4 2025, 7:59 PM

Jun 3 2025

sjg updated the diff for D50387: Add host.test.mk for DIRDEPS_BUILD.

Update comment at start of host.test.mk

Jun 3 2025, 8:06 PM
sjg committed rGa40d73475b1d: Export SB_OBJROOT for later reference (authored by sjg).
Export SB_OBJROOT for later reference
Jun 3 2025, 7:57 PM
sjg closed D50313: Export SB_OBJROOT for later reference.
Jun 3 2025, 7:57 PM

Jun 2 2025

sjg committed rG61d77e6c0095: loader: allow for exceptions to restricted settings. (authored by sjg).
loader: allow for exceptions to restricted settings.
Jun 2 2025, 5:50 AM
sjg committed rGf9890204b5db: install: must set netproto for tftp:// (authored by sjg).
install: must set netproto for tftp://
Jun 2 2025, 5:30 AM

May 27 2025

sjg updated the diff for D50387: Add host.test.mk for DIRDEPS_BUILD.

Give this a chance of being useful to non-DIRDEPS_BUILD

May 27 2025, 11:36 PM

May 26 2025

sjg committed rGb0ada425efb3: safe_eval allow : and + in values (authored by sjg).
safe_eval allow : and + in values
May 26 2025, 3:07 AM

May 22 2025

sjg committed rG2982c7085239: stand allow for local.defs.mk (authored by sjg).
stand allow for local.defs.mk
May 22 2025, 10:49 PM
sjg closed D50478: stand allow for local.defs.mk.
May 22 2025, 10:48 PM
sjg added inline comments to D50478: stand allow for local.defs.mk.
May 22 2025, 10:46 PM
sjg requested review of D50478: stand allow for local.defs.mk.
May 22 2025, 9:41 PM

May 21 2025

sjg added a comment to D50459: release: Avoid pipe in tarball creation.

Is there a reasonable way to have make use bash as the default shell on Linux?

May 21 2025, 8:27 PM
sjg added a comment to D50459: release: Avoid pipe in tarball creation.

What shell are we using here, the default system sh? dash doesn't support pipefail, so I'm concerned this will break on Linux.

May 21 2025, 8:09 PM

May 20 2025

sjg committed rG41cf74fe8ce5: loader - guard against empty rootdev (authored by sjg).
loader - guard against empty rootdev
May 20 2025, 4:13 PM
sjg closed D50334: loader - guard against empty rootdev.
May 20 2025, 4:12 PM

May 17 2025

sjg updated the diff for D50313: Export SB_OBJROOT for later reference.

tweak

May 17 2025, 3:34 PM
sjg updated the diff for D50387: Add host.test.mk for DIRDEPS_BUILD.

Add host.test.mk to FILES

May 17 2025, 3:12 PM

May 16 2025

sjg committed rG496b3c3a1ce8: grantbylabel_syscall check p_textvp != NULL (authored by sjg).
grantbylabel_syscall check p_textvp != NULL
May 16 2025, 10:20 PM
sjg closed D50368: grantbylabel_syscall check p_textvp != NULL.
May 16 2025, 10:20 PM
sjg updated the diff for D50313: Export SB_OBJROOT for later reference.

Fix typo in log message

May 16 2025, 9:22 PM
sjg updated the diff for D50387: Add host.test.mk for DIRDEPS_BUILD.

Fix typo in log message

May 16 2025, 9:17 PM
sjg requested review of D50387: Add host.test.mk for DIRDEPS_BUILD.
May 16 2025, 9:15 PM

May 15 2025

sjg requested review of D50368: grantbylabel_syscall check p_textvp != NULL.
May 15 2025, 5:16 PM

May 14 2025

sjg added a comment to D50334: loader - guard against empty rootdev.

A loader.efi with this change does not crash - but there is a long delay before the libsecureboot self tests output:

May 14 2025, 4:06 PM
sjg added a comment to D50334: loader - guard against empty rootdev.

There are a number of bootinfo's that also getenv("rootdev")

May 14 2025, 12:36 AM

May 13 2025

sjg updated the diff for D50334: loader - guard against empty rootdev.

main also needs to double check for empty rootdev.

May 13 2025, 6:29 PM
sjg added a comment to D50334: loader - guard against empty rootdev.
In D50334#1148471, @imp wrote:

I don't object, but I'd like more details about how this comes to pass

May 13 2025, 6:28 PM
sjg requested review of D50334: loader - guard against empty rootdev.
May 13 2025, 5:53 PM

May 12 2025

sjg requested review of D50313: Export SB_OBJROOT for later reference.
May 12 2025, 5:57 PM

May 8 2025

sjg accepted D50252: loader: i386: use -z nostart-stop-gc for bfd as well.

Looks good

May 8 2025, 4:31 AM

Apr 19 2025

sjg committed rG759b177aecbf: Merge bmake-20250414 (authored by sjg).
Merge bmake-20250414
Apr 19 2025, 9:00 PM
sjg committed rG284d1f7d4968: Import bmake-20250414 (authored by sjg).
Import bmake-20250414
Apr 19 2025, 8:55 PM
sjg committed rGcf5f0744cd1d: Add .NOTMAIN to guard targets (authored by sjg).
Add .NOTMAIN to guard targets
Apr 19 2025, 7:58 PM
sjg committed rG62671aa7d5fe: libsecureboot: avoid noise when looking for tust anchors (authored by sjg).
libsecureboot: avoid noise when looking for tust anchors
Apr 19 2025, 7:30 PM

Mar 19 2025

sjg committed rGd9a65c5de1c9: Merge bmake-20250308 (authored by sjg).
Merge bmake-20250308
Mar 19 2025, 9:12 PM
sjg committed rG397f57656d61: Import bmake-20250308 (authored by sjg).
Import bmake-20250308
Mar 19 2025, 9:02 PM

Mar 1 2025

sjg added a comment to D49193: freebsd-update add -4.
In D49193#1121912, @sjg wrote:

FYI I run freebsd-update cron on 1st of each month, this morning I noted that my home machine did not get the updates that the ones at work got.
I ran freebsd-update fetch which failed claiming there was no support for FreeBSD 14.1 amd64, using fetch -4 fixes this.

I don't know why, but I find from my home network that IPv6 is not as reliable as IPv4.

That sounds like a broken mirror -- they should all have amd64 bits for 14.1. Can you reproduce and tell me which mirror you hit?

Mar 1 2025, 7:39 PM
sjg added a comment to D49193: freebsd-update add -4.

FYI I run freebsd-update cron on 1st of each month, this morning I noted that my home machine did not get the updates that the ones at work got.
I ran freebsd-update fetch which failed claiming there was no support for FreeBSD 14.1 amd64, using fetch -4 fixes this.

Mar 1 2025, 4:54 PM
sjg requested review of D49193: freebsd-update add -4.
Mar 1 2025, 4:49 PM

Feb 11 2025

sjg closed D48737: Add newlog.sh and setops.sh to share/mk.
Feb 11 2025, 5:46 PM
sjg committed rGe9c2838d93ca: Add newlog.sh and setops.sh to share/mk (authored by sjg).
Add newlog.sh and setops.sh to share/mk
Feb 11 2025, 5:46 PM

Feb 10 2025

sjg updated the diff for D48737: Add newlog.sh and setops.sh to share/mk.

Ensure scripts are installed executable

Feb 10 2025, 10:42 PM
sjg updated the diff for D48737: Add newlog.sh and setops.sh to share/mk.

Use newlog.sh out of contrib/bmake/mk

Feb 10 2025, 10:34 PM
sjg committed rGf8f5b658bc76: rc.subr:rc_trace take advantage of sdot (authored by sjg).
rc.subr:rc_trace take advantage of sdot
Feb 10 2025, 10:27 PM
sjg closed D48856: rc.subr:rc_trace take advantage of sdot.
Feb 10 2025, 10:27 PM
sjg closed D48855: Update dirdeps.mk et al.
Feb 10 2025, 10:24 PM
sjg committed rGc8245ceb4756: Update dirdeps.mk et al (authored by sjg).
Update dirdeps.mk et al
Feb 10 2025, 10:24 PM

Feb 7 2025

sjg added a comment to D48872: callbootd: Add man page, update Makefile to install man page, and update usage()..

Looks ok - fix the items noted by maxim

Feb 7 2025, 8:52 PM