bsdpot/potluck

This project contains the FreeBSD pot (jail) (pkg install pot) flavours which are regularly built with Jenkins and published on potluck.honeyguide.net.

potluck's Issues

IPv6 enablement

Please enable IPv6 connectivity on potluck.honeyguide.net.

Error mounting tmpfs failed (git flavor jail)

First of all, amazing work/project. Thank you for your efforts.

Second, I tried to create a git JAIL (I am only attempting JAIL creation currently) from the git-nomad image and I ran into a problem durring start about "mounting tmpfs".

I am just getting my feet wet again after a long break away from BSD so I'm very rusty but I got my FreeBSD setup and a net bridge created. I have created my own jail flavors--based on potluck flavors as examples--and they being simple enough--create, add user, add pub key, setup .nextrc, etc--are working great. My next phase was to try using the ready made potluck images.

john[server:~]doas pot import -p git-nomad-amd64-14_0 -t 1.15.1 -U https://potluck.honeyguide.net/git-nomad

===>  importing git-nomad-amd64-14_0 @ 1.15.1 as git-nomad-amd64-14_0_1_15_1
/var/cache/pot/git-nomad-amd64-14_0_1.15.1.xz.         257  B 2092 kBps    00s
/var/cache/pot/git-nomad-amd64-14_0_1.15.1.xz          103 MB  813 kBps 02m11s
/var/cache/pot/git-nomad-amd64-14_0_1.15.1.xz.          50  B  396 kBps    00s
===>  Pot git-nomad-amd64-14_0_1_15_1 depends on freebsd-potluck-amd64-14_0_0_0_26_base (@1720718608)
===>  Installing dependency freebsd-potluck-amd64-14_0_0_0_26_base
===>  importing freebsd-potluck-amd64-14_0_0_0_26 @ base as freebsd-potluck-amd64-14_0_0_0_26_base
/var/cache/pot/freebsd-potluck-amd64-14_0_0_0_         257  B 1974 kBps    00s
/var/cache/pot/freebsd-potluck-amd64-14_0_0_0_         577 MB  793 kBps 12m26s
/var/cache/pot/freebsd-potluck-amd64-14_0_0_0_           2  B   15 kBps    00s
===>  Pot freebsd-potluck-amd64-14_0_0_0_26_base has no dependencies
===>  Assigning new IP: 192.168.0.2
cannot mount 'zroot/jails/jails/git-nomad-amd64-14_0_1_15_1/m': filesystem already mounted
===>  Assigning new IP: 192.168.0.3

john[server:~]doas pot ls
pot name : freebsd-potluck-amd64-14_0_0_0_26_base
	network : public-bridge
	ip : 192.168.0.2
	active : false

pot name : git-nomad-amd64-14_0_1_15_1
	network : public-bridge
	ip : 192.168.0.3
	active : false
	
john[server:~]doas pot start freebsd-potluck-amd64-14_0_0_0_26_base
===>  Internal network not found! Calling vnet-start to fix the issue
pfctl: pf already enabled
defaultrouter: 10.192.0.1 -> 192.168.0.250
===>  Starting the pot freebsd-potluck-amd64-14_0_0_0_26_base
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
32-bit compatibility ldconfig path: /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
	options=8<VLAN_MTU>
	ether 02:32:6a:53:fa:0b
	inet 192.168.0.2 netmask 0xffffff00 broadcast 192.168.0.255
	groups: epair
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 192.168.0.250
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Clearing /tmp (X related).
Updating /var/run/os-release done.
Creating and/or trimming log files.
Updating motd:.
Starting syslogd.
Starting sendmail_submit.
Starting cron.

Wed Jul 31 15:23:15 UTC 2024

john[server:~]doas pot run -p git-nomad-amd64-14_0_1_15_1          
mount: /usr/jails/jails/git-nomad-amd64-14_0_1_15_1/m/tmp: No such file or directory
###>  Error mounting tmpfs
###>  Mount failed 
###>  The pot git-nomad-amd64-14_0_1_15_1 doesn't start

loki image won't build on freebsd 14

loki.sh has the following steps for manual loki and promtail install

# last updated 2022-07-20
step "Download loki release from github"
fetch -qo - https://github.com/grafana/loki/releases/download/\
v2.6.1/loki-freebsd-amd64.zip | unzip -p - loki-freebsd-amd64 \
  >/usr/local/bin/loki
chmod 755 /usr/local/bin/loki

if [ "$(sha256 -q /usr/local/bin/loki)" != \
  "ece8b6d91fcf9a3b0cae6f828988c23cb077e17662fff4e5e0066570d29aa3d5" ]; then
  exit_error "/usr/local/bin/loki checksum mismatch!"
fi

# last updated 2022-07-20
step "Download promtail release from github"
fetch -qo - https://github.com/grafana/loki/releases/download/\
v2.6.1/promtail-freebsd-amd64.zip | unzip -p - promtail-freebsd-amd64 \
  >/usr/local/bin/promtail
chmod 755 /usr/local/bin/promtail

if [ "$(sha256 -q /usr/local/bin/promtail)" != \
  "7aa244fb3d0f8dba8b9edff7536fa55be2300bee7c63b0b003ac1a8f7d99ab9d" ]; then
  exit_error "/usr/local/bin/promtail checksum mismatch!"
fi

This fails to build on freebsd 14.

whereas beast-of-argh.sh has an updated setup, and newer versions, as follows. it builds fine.

# this is failing to extract on FBSD14
#step "Download loki release from github"
#fetch -qo - https://github.com/grafana/loki/releases/download/\
#v2.9.5/loki-freebsd-amd64.zip | unzip -p - loki-freebsd-amd64 \
#  >/usr/local/bin/loki
#chmod 755 /usr/local/bin/loki
#
#if [ "$(sha256 -q /usr/local/bin/loki)" != \
#  "e9374ec4e4c5fc6021646b7fa7cd7e0a0f08dc0db6741a3c55874f1b8496346a" ]; then
#  exit_error "/usr/local/bin/loki checksum mismatch!"
#fi

# alternative approach as temporary measure (2024-03-03)
step "Download loki release from github"
fetch -qo /tmp/loki-freebsd-amd64.zip https://github.com/grafana/loki/releases/download/v2.9.8/loki-freebsd-amd64.zip

step "Unzip loki"
unzip -o -d /tmp /tmp/loki-freebsd-amd64.zip

step "Validate loki checksum and install if valid"
if [ "$(sha256 -q /tmp/loki-freebsd-amd64)" == "f4dc39f6eada4fde16617e1d9372c897d16cbbe136401732fb644fb8033278a6" ]; then
	cp -f /tmp/loki-freebsd-amd64 /usr/local/bin/loki
	chmod 755 /usr/local/bin/loki
	rm -rf /tmp/loki-freebsd-amd64.zip /tmp/loki-freebsd-amd64
else
	exit_error "loki checksum mismatch!"
fi

# this is failing to extract on FBSD14
#step "Download promtail release from github"
#fetch -qo - https://github.com/grafana/loki/releases/download/\
#v2.9.5/promtail-freebsd-amd64.zip | unzip -p - promtail-freebsd-amd64 \
#  >/usr/local/bin/promtail
#chmod 755 /usr/local/bin/promtail
#
#if [ "$(sha256 -q /usr/local/bin/promtail)" != \
#  "5b4be0640062df6e25c4cbd3f1f12465fa75fcc6194e7605ee386b9424d842c6" ]; then
#  exit_error "/usr/local/bin/promtail checksum mismatch!"
#fi

step "Download promtail release from github"
fetch -qo /tmp/promtail-freebsd-amd64.zip https://github.com/grafana/loki/releases/download/v2.9.8/promtail-freebsd-amd64.zip

step "Unzip promtail"
unzip -o -d /tmp /tmp/promtail-freebsd-amd64.zip

step "Validate promtail checksum and install if valid"
if [ "$(sha256 -q /tmp/promtail-freebsd-amd64)" == "9dcd257be09e4ab22208c819abbaa74782ddcb5cde1f5fbb4fabff938230eeca" ]; then
	cp -f /tmp/promtail-freebsd-amd64 /usr/local/bin/promtail
	chmod 755 /usr/local/bin/promtail
	rm -rf /tmp/promtail-freebsd-amd64.zip /tmp/promtail-freebsd-amd64
else
	exit_error "promtail checksum mismatch!"
fi

I don't want to make major changes to loki, it can be shared back upstream perhaps?

Making a note here in meantime.

nginx flavour (non-nomad) has non-persistent configuration

Hello. I've noticed while trying to reference potluck/nginx flavour that it would shut down after running pot start -p nginx and cook script finishes.

As there are other nginx flavours in potluck which are for nomad and the README.md states this jail is not for use with nomad I think the flavour cmd file needs to be updated to enable persistence:

-- set-attribute -A persistent -V OFF
-- set-attribute -A no-rc-script -V ON
++ set-attribute -A persistent -V ON

Update syslog-ng.config to use stats(freq()) instead of stats_freq

[2024-07-25T14:21:28.848635] WARNING: Your configuration file uses an obsoleted keyword, please update your configuration; keyword='stats_freq', change='Use the stats() block. E.g. stats(freq(1));', location='/usr/local/etc/syslog-ng.conf:14:2'