3086 lines
106 KiB
XML
3086 lines
106 KiB
XML
<?xml version="1.0" encoding="iso-8859-1"?>
|
|
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V4.5-Based Extension//EN"
|
|
"../../../share/xml/freebsd45.dtd">
|
|
|
|
<article lang='en'>
|
|
<articleinfo>
|
|
<title>Package Building Procedures</title>
|
|
|
|
<authorgroup>
|
|
<corpauthor>The &os; Ports Management Team</corpauthor>
|
|
</authorgroup>
|
|
|
|
<copyright>
|
|
<year>2003</year>
|
|
<year>2004</year>
|
|
<year>2005</year>
|
|
<year>2006</year>
|
|
<year>2007</year>
|
|
<year>2008</year>
|
|
<year>2009</year>
|
|
<year>2010</year>
|
|
<year>2011</year>
|
|
<year>2012</year>
|
|
<year>2013</year>
|
|
<holder role="mailto:portmgr@FreeBSD.org">The &os; Ports
|
|
Management Team</holder>
|
|
</copyright>
|
|
|
|
<legalnotice id="trademarks" role="trademarks">
|
|
&tm-attrib.freebsd;
|
|
&tm-attrib.intel;
|
|
&tm-attrib.sparc;
|
|
&tm-attrib.general;
|
|
</legalnotice>
|
|
|
|
<pubdate>$FreeBSD$</pubdate>
|
|
|
|
<releaseinfo>$FreeBSD$</releaseinfo>
|
|
</articleinfo>
|
|
|
|
<sect1 id="intro">
|
|
<title>Introduction</title>
|
|
|
|
<para>In order to provide pre-compiled binaries of third-party
|
|
applications for &os;, the Ports Collection is regularly
|
|
built on one of the <quote>Package Building Clusters.</quote>
|
|
Currently, the main cluster in use is at
|
|
<ulink url="http://pointyhat.FreeBSD.org"></ulink>.</para>
|
|
|
|
<para>This article documents the internal workings of the
|
|
cluster.</para>
|
|
|
|
<note>
|
|
<para>Many of the details in this article will be of interest only to
|
|
those on the <ulink url="&url.base;/portmgr/">Ports Management</ulink>
|
|
team.</para>
|
|
</note>
|
|
|
|
<sect2 id="codebase">
|
|
<title>The codebase</title>
|
|
|
|
<para>Most of the package building magic occurs under the
|
|
<filename>/var/portbuild</filename> directory. Unless
|
|
otherwise specified, all paths will be relative to
|
|
this location. <replaceable>${arch}</replaceable> will
|
|
be used to specify one of the package architectures
|
|
(e.g., amd64, arm, &i386;, ia64, powerpc, &sparc64;), and
|
|
<replaceable>${branch}</replaceable> will be used
|
|
to specify the build branch (e.g., 7, 7-exp, 8, 8-exp, 9, 9-exp, 10, 10-exp).
|
|
The set of branches that <username>portmgr</username> currently
|
|
supports is the same as those that the &os;
|
|
<ulink url="http://www.freebsd.org/security/index.html#supported-branches">security team</ulink>
|
|
supports.
|
|
</para>
|
|
|
|
<note>
|
|
<para>Packages are no longer built for branches 4, 5, or 6, nor
|
|
for the alpha architecture.</para>
|
|
</note>
|
|
|
|
<para>The scripts that control all of this live in
|
|
<filename role="directory">/var/portbuild/scripts/</filename>.
|
|
These are the checked-out copies from the Subversion repository at
|
|
<ulink url="http://svnweb.freebsd.org/base/projects/portbuild/scripts/">
|
|
<filename role="directory">base/projects/portbuild/scripts/</filename>
|
|
</ulink>.</para>
|
|
|
|
<para>Typically, incremental builds are done that use previous
|
|
packages as dependencies; this takes less time, and puts less
|
|
load on the mirrors. Full builds are usually only done:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>right after release time, for the
|
|
<literal>-STABLE</literal> branches</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>periodically to test changes to
|
|
<literal>-CURRENT</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>for experimental (<literal>"exp-"</literal>) builds</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Packages from experimental builds are not uploaded.</para>
|
|
</sect2>
|
|
|
|
<sect2 id="codebase-notes">
|
|
<title>Notes on the codebase</title>
|
|
|
|
<para>Until mid-2010, the scripts were completely specific to
|
|
<hostid>pointyhat.FreeBSD.org</hostid> as the head (dispatch) node. During
|
|
the summer of 2010, a significant rewrite was done in order to allow
|
|
for other hosts to be head nodes. Among the changes were:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>removal of the hard-coding of the string
|
|
<literal>pointyhat</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>factoring out all configuration constants (which
|
|
were previously scattered throughout the code) into configuration
|
|
files (see <link linkend="new-head-node">below</link>)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>appending the hostname to the directories
|
|
specified by <literal>buildid</literal> (this will allow
|
|
directories to be unambigious when copied between machines.)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>making the scripts more robust in terms of setting
|
|
up directories and symlinks</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>where necessary, changing certain script invocations
|
|
to make all the above easier</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>This document was originally written before these changes
|
|
were made. Where things such as script invocations have changed,
|
|
they were denoted as <literal>new codebase:</literal> as opposed
|
|
to <literal>old codebase:</literal>.</para>
|
|
|
|
<note>
|
|
<para>Up until November 2012, <hostid>pointyhat</hostid> had still
|
|
been running the old codebase. That installation has now been
|
|
permanently offlined. Therefore, all the instructions having
|
|
to do with the old codebase have been removed.</para>
|
|
</note>
|
|
|
|
<note>
|
|
<para>Also during this process, the codebase was migrated to the
|
|
<ulink url="http://svnweb.freebsd.org/base/projects/portbuild/scripts/">
|
|
Subversion repository</ulink>. For reference, the previous version
|
|
may still be
|
|
<ulink url="http://www.freebsd.org/cgi/cvsweb.cgi/ports/Tools/portbuild/scripts/Attic/">
|
|
found in CVS</ulink>.</para>
|
|
</note>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="management">
|
|
<title>Build Client Management</title>
|
|
|
|
<para>The &i386; clients co-located with <hostid>pointyhat</hostid>
|
|
netboot from it (<replaceable>connected</replaceable> nodes); all
|
|
other clients (<replaceable>disconnected</replaceable> nodes)
|
|
are either self-hosted or netboot from some other
|
|
<literal>pxe</literal> host.
|
|
In all cases they set themselves
|
|
up at boot-time to prepare to build packages.</para>
|
|
|
|
<para>The cluster master <command>rsync</command>s the
|
|
interesting data (ports and src trees, bindist tarballs,
|
|
scripts, etc.) to disconnected nodes during the node-setup
|
|
phase. Then, the disconnected portbuild directory is
|
|
nullfs-mounted for jail builds.</para>
|
|
|
|
<para>The
|
|
<username>portbuild</username>
|
|
user can &man.ssh.1; to the client nodes to monitor them.
|
|
Use <command>sudo</command> and check the
|
|
<hostid>portbuild.<replaceable>hostname</replaceable>.conf</hostid>
|
|
for the user and access details.</para>
|
|
|
|
<para>The <command>scripts/allgohans</command> script can
|
|
be used to run a command on all of the
|
|
<replaceable>${arch}</replaceable> clients.</para>
|
|
</sect1>
|
|
|
|
<sect1 id="setup">
|
|
<title>Jail Build Environment Setup</title>
|
|
|
|
<para>Package builds are performed in a
|
|
<literal>jail</literal> populated by the
|
|
<filename>portbuild</filename> script using the
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/bindist.tar</filename>
|
|
file.</para>
|
|
|
|
<para>The <command>makeworld</command> command builds a world from the
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/src/</filename>
|
|
tree and installs it into
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/bindist.tar</filename>.
|
|
The tree will
|
|
be updated first unless <literal>-novcs</literal> is
|
|
specified. It should be run as <username>root</username>:</para>
|
|
|
|
<screen>&prompt.root; <userinput>/var/portbuild/scripts/makeworld <replaceable>${arch}</replaceable> <replaceable>${branch}</replaceable> <replaceable>${buildid}</replaceable> [-novcs]</userinput></screen>
|
|
|
|
<para>The <filename>bindist.tar</filename> tarball is created from the
|
|
previously installed world by the <command>mkbindist</command>
|
|
script. It should be also be run as <username>root</username>:</para>
|
|
|
|
<screen>&prompt.root; <userinput>/var/portbuild/scripts/mkbindist <replaceable>${arch}</replaceable> <replaceable>${branch}</replaceable> <replaceable>${buildid}</replaceable></userinput></screen>
|
|
|
|
<para>The per-machine tarballs are located in
|
|
<filename><replaceable>${arch}</replaceable>/clients</filename>.</para>
|
|
|
|
<para>The <filename>bindist.tar</filename> file is extracted
|
|
onto each client at client boot time, and at the start of
|
|
each pass of the <command>dopackages</command>
|
|
script.</para>
|
|
|
|
<para>For both commands above, if
|
|
<replaceable>${buildid}</replaceable> is
|
|
<literal>latest</literal>, it may be omitted.</para>
|
|
</sect1>
|
|
|
|
<sect1 id="customizing">
|
|
<title>Customizing Your Build</title>
|
|
|
|
<para>You can customize your build by providing local versions of
|
|
<filename>make.conf</filename> and/or
|
|
<filename>src.conf</filename>,
|
|
named
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/make.conf.server</filename>
|
|
and
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/src.conf.server</filename>,
|
|
respectively. These will be used in lieu of the default-named
|
|
files on the server side.</para>
|
|
|
|
<para>Similarly, if you wish to also affect the <emphasis>client-side</emphasis>
|
|
<filename>make.conf</filename>, you may use
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/make.conf.client</filename>.
|
|
</para>
|
|
|
|
<note>
|
|
<para>Due to the fact that individual clients may each have
|
|
their own per-host <filename>make.conf</filename>, the
|
|
contents of
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/make.conf.client</filename>
|
|
will be <emphasis>appended</emphasis> to that
|
|
<filename>make.conf</filename>, not supplant it, as is done
|
|
for
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/make.conf.server</filename>.</para>
|
|
</note>
|
|
|
|
<note>
|
|
<para>There is no similar functionality for
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/src.conf.client</filename>
|
|
(what effect would it have?).</para>
|
|
</note>
|
|
|
|
<example>
|
|
<title>Sample
|
|
<filename>make.conf.<replaceable>target</replaceable></filename>
|
|
to test new default <application>ruby</application>
|
|
version</title>
|
|
|
|
<para>(For this case, the contents are identical for both server
|
|
and client.)</para>
|
|
|
|
<programlisting>RUBY_DEFAULT_VER= 1.9</programlisting>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Sample
|
|
<filename>make.conf.<replaceable>target</replaceable></filename>
|
|
for <application>clang</application> builds</title>
|
|
|
|
<para>(For this case, the contents are also identical for both
|
|
server and client.)</para>
|
|
|
|
<programlisting>.if !defined(CC) || ${CC} == "cc"
|
|
CC=clang
|
|
.endif
|
|
.if !defined(CXX) || ${CXX} == "c++"
|
|
CXX=clang++
|
|
.endif
|
|
.if !defined(CPP) || ${CPP} == "cpp"
|
|
CPP=clang-cpp
|
|
.endif
|
|
# Do not die on warnings
|
|
NO_WERROR=
|
|
WERROR=</programlisting>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Sample <filename>make.conf.server</filename> for
|
|
<application>pkgng</application></title>
|
|
|
|
<programlisting>WITH_PKGNG=yes
|
|
PKG_BIN=/usr/local/sbin/pkg</programlisting>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Sample <filename>make.conf.client</filename> for
|
|
<application>pkgng</application></title>
|
|
|
|
<programlisting>WITH_PKGNG=yes</programlisting>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Sample <filename>src.conf.server</filename>
|
|
to test new <application>sort</application> codebase</title>
|
|
|
|
<programlisting>WITH_BSD_SORT=yes</programlisting>
|
|
</example>
|
|
</sect1>
|
|
|
|
<sect1 id="starting">
|
|
<title>Starting the Build</title>
|
|
|
|
<para>Separate builds for various combinations of architecture and branch
|
|
are supported. All data private to a build (ports tree, src tree,
|
|
packages, distfiles, log files, bindist, Makefile, etc) are located under the
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/builds/<replaceable>${buildid}</replaceable>/</filename>
|
|
directory.
|
|
The most recently created build can be alternatively referenced using buildid
|
|
<literal>latest</literal>, and the one before using
|
|
<literal>previous</literal>.</para>
|
|
|
|
<para>New builds are cloned from the <literal>latest</literal>, which is
|
|
fast since it uses ZFS.</para>
|
|
|
|
<sect2 id="build-dopackages">
|
|
<title><command>dopackages</command> scripts</title>
|
|
|
|
<para>The <filename>scripts/dopackages.wrapper</filename> script
|
|
is used to perform the builds.</para>
|
|
|
|
<screen>&prompt.root; <userinput>dopackages.wrapper <replaceable>${arch}</replaceable> <replaceable>${branch}</replaceable> <replaceable>${buildid}</replaceable> <option>[-options]</option></userinput></screen>
|
|
|
|
<para>Most often, you will be using <literal>latest</literal> for
|
|
the value of <replaceable>buildid</replaceable>.</para>
|
|
|
|
<para><literal>[-options]</literal> may be zero or more of the
|
|
following:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><option>-keep</option> - Do not delete this build in the
|
|
future, when it would be normally deleted as part of the
|
|
<literal>latest</literal> - <literal>previous</literal> cycle.
|
|
Do not forget to clean it up manually when you no longer need it.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nofinish</option> - Do not perform
|
|
post-processing once the build is complete. Useful
|
|
if you expect that the build will need to be restarted
|
|
once it finishes. If you use this option, do not forget to cleanup
|
|
the clients when you do not need the build any more.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-finish</option> - Perform
|
|
post-processing only.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nocleanup</option> - By default, when the
|
|
<option>-finish</option> stage of the build is complete, the build
|
|
data will be deleted from the clients. This option will prevent
|
|
that.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-restart</option> - Restart an interrupted
|
|
(or non-<literal>finish</literal>ed) build from the
|
|
beginning. Ports that failed on the previous build will
|
|
be rebuilt.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-continue</option> - Restart an interrupted
|
|
(or non-<literal>finish</literal>ed) build. Will not
|
|
rebuild ports that failed on the previous build.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-incremental</option> - Compare the
|
|
interesting fields of the new
|
|
<filename>INDEX</filename> with the previous one,
|
|
remove packages and log files for the old ports that
|
|
have changed, and rebuild the rest. This
|
|
cuts down on build times substantially since
|
|
unchanged ports do not get rebuilt every time.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-cdrom</option> - This package build is
|
|
intended to end up on a CD-ROM, so
|
|
<makevar>NO_CDROM</makevar> packages and distfiles
|
|
should be deleted in post-processing.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nobuild</option> - Perform all
|
|
the preprocessing steps, but do not actually do
|
|
the package build.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-noindex</option> - Do not rebuild
|
|
<filename>INDEX</filename> during preprocessing.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-noduds</option> - Do not rebuild the
|
|
<filename>duds</filename> file (ports that are never
|
|
built, e.g., those marked <literal>IGNORE</literal>,
|
|
<makevar>NO_PACKAGE</makevar>, etc.) during
|
|
preprocessing.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nochecksubdirs</option> - Do not check the
|
|
<makevar>SUBDIRS</makevar> for ports that are not connected
|
|
to the build.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-trybroken</option> - Try to build
|
|
<makevar>BROKEN</makevar> ports (off by default
|
|
because the amd64/&i386; clusters are fast enough now
|
|
that when doing incremental builds, more time
|
|
was spent rebuilding things that were going to
|
|
fail anyway. Conversely, the other clusters
|
|
are slow enough that it would be a waste of time
|
|
to try and build <makevar>BROKEN</makevar> ports).</para>
|
|
|
|
<note>
|
|
<para>With <option>-trybroken</option>, you probably
|
|
also want to use <option>-fetch-original</option>
|
|
and
|
|
<option>-unlimited-errors</option>.</para>
|
|
</note>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nosrc</option> - Do not update the
|
|
<filename>src</filename> tree from the ZFS snapshot, keep the tree from
|
|
previous build instead.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-srcvcs</option> - Do not update the
|
|
<filename>src</filename> tree from the ZFS snapshot, update it with
|
|
a fresh checkout instead.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-noports</option> - Do not update the
|
|
<filename>ports</filename> tree from the ZFS snapshot, keep the tree from
|
|
previous build instead.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-portsvcs</option> - Do not update the
|
|
<filename>ports</filename> tree from the ZFS snapshot, update it with
|
|
a fresh checkout instead.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-norestr</option> - Do not attempt to build
|
|
<makevar>RESTRICTED</makevar> ports.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-noplistcheck</option> - Do not make it fatal for
|
|
ports to leave behind files after deinstallation.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-nodistfiles</option> - Do not collect distfiles
|
|
that pass <command>make checksum</command> for later
|
|
uploading to <hostid>ftp-master</hostid>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-fetch-original</option> - Fetch the
|
|
distfile from the original <makevar>MASTER_SITES</makevar>
|
|
rather than any cache such as on <hostid>ftp-master</hostid>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><option>-unlimited-errors</option>
|
|
- defeat the "qmanager threshhold" check for runaway
|
|
builds. You want this primarily when doing a
|
|
<option>-restart</option> of a build that you expect to mostly
|
|
fail, or perhaps a <option>-trybroken</option> run. By default,
|
|
the threshhold check is done.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Unless you specify <option>-restart</option>,
|
|
<option>-continue</option>, or <option>-finish</option>,
|
|
the symlinks for the existing builds will be rotated. i.e,
|
|
the existing symlink for <filename>previous</filename> will
|
|
be deleted; the most recent build will have its symlink changed
|
|
to <filename>previous/</filename>; and a new build will be
|
|
created and symlinked into <filename>latest/</filename>.</para>
|
|
|
|
<para>If the last build finished cleanly you do not need to delete
|
|
anything. If it was interrupted, or you selected
|
|
<option>-nocleanup</option>, you need to clean up clients by running</para>
|
|
|
|
<screen>&prompt.user; <userinput>build cleanup <replaceable>${arch}</replaceable> <replaceable>${branch}</replaceable> <replaceable>${buildid}</replaceable> -full</userinput></screen>
|
|
|
|
<para>When a new build is created, the directories <filename>errors/</filename>,
|
|
<filename>logs/</filename>, <filename>packages/</filename>, and so
|
|
forth, are cleaned by the scripts. If you are short of space,
|
|
you can also clean out <filename>ports/distfiles/</filename>.
|
|
Leave the <filename>latest/</filename> directory alone; it is
|
|
a symlink for the webserver.</para>
|
|
|
|
<note>
|
|
<para><literal>dosetupnodes</literal> is supposed to be run from
|
|
the <literal>dopackages</literal> script in the
|
|
<option>-restart</option> case, but it can be a good idea to
|
|
run it by hand and then verify that the clients all have the
|
|
expected job load. Sometimes,
|
|
<filename>dosetupnode</filename> cannot clean up a build and you
|
|
need to do it by hand. (This is a bug.)</para>
|
|
</note>
|
|
|
|
<para>Make sure the <replaceable>${arch}</replaceable> build
|
|
is run as the <username>portbuild</username> user
|
|
or it will complain loudly.</para>
|
|
|
|
<note>
|
|
<para>The actual package build itself occurs in two
|
|
identical phases. The reason for this is that sometimes
|
|
transient problems (e.g., NFS failures, FTP sites being
|
|
unreachable, etc.) may halt a build. Doing things
|
|
in two phases is a workaround for these types of
|
|
problems.</para>
|
|
</note>
|
|
|
|
<para>Be careful that <filename>ports/Makefile</filename>
|
|
does not specify any empty subdirectories. This is especially
|
|
important if you are doing an -exp build. If the build
|
|
process encounters an empty subdirectory, both package build
|
|
phases will stop short, and an error similar to the following
|
|
will be written to
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/journal</filename>:</para>
|
|
|
|
<screen>don't know how to make dns-all(continuing)</screen>
|
|
|
|
<para>To correct this problem, simply comment out or remove
|
|
the <makevar>SUBDIR</makevar> entries that point to empty
|
|
subdirectories. After doing this, you can restart the build
|
|
by running the proper <command>dopackages</command> command
|
|
with the <option>-restart</option> option.</para>
|
|
|
|
<note>
|
|
<para>This problem also appears if you create a new category
|
|
<filename>Makefile</filename> with no <makevar>SUBDIR</makevar>s
|
|
in it. This is probably a bug.</para>
|
|
</note>
|
|
|
|
<example>
|
|
<title>Update the i386-7 tree and do a complete build</title>
|
|
|
|
<screen>&prompt.user; <userinput>dopackages.wrapper i386 7 -nosrc -norestr -nofinish</userinput></screen>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Restart an interrupted amd64-8 build without updating</title>
|
|
|
|
<screen>&prompt.user; <userinput>dopackages.wrapper amd64 8 -nosrc -noports -norestr -continue -noindex -noduds -nofinish</userinput></screen>
|
|
</example>
|
|
|
|
<example>
|
|
<title>Post-process a completed sparc64-7 tree</title>
|
|
|
|
<screen>&prompt.user; <userinput>dopackages.wrapper sparc64 7 -finish</userinput></screen>
|
|
</example>
|
|
|
|
<para>Hint: it is usually best to run the <command>dopackages</command>
|
|
command inside of <command>screen(1)</command>.</para>
|
|
</sect2>
|
|
|
|
<sect2 id="build-command">
|
|
<title><command>build</command> command</title>
|
|
|
|
<para>You may need to manipulate the build data before starting it,
|
|
especially for experimental builds. This is done with
|
|
the <command>build</command> command. Here are the useful
|
|
options for creation:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><literal>build create <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable>
|
|
[<replaceable>newid</replaceable>]</literal> - Creates
|
|
<replaceable>newid</replaceable> (or a datestamp if not specified).
|
|
Only needed when bringing up a new branch or a new architecture.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>build clone <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable> <replaceable>oldid</replaceable>
|
|
[<replaceable>newid</replaceable>]</literal> - Clones
|
|
<replaceable>oldid</replaceable> to
|
|
<replaceable>newid</replaceable> (or a datestamp if not specified).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>build srcupdate <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable>
|
|
<replaceable>buildid</replaceable></literal> - Replaces the src
|
|
tree with a new ZFS snapshot. Do not forget to use
|
|
<literal>-nosrc</literal> flag to <command>dopackages</command>
|
|
later!</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>build portsupdate <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable>
|
|
<replaceable>buildid</replaceable></literal> - Replaces the ports
|
|
tree with a new ZFS snapshot. Do not forget to use
|
|
<literal>-noports</literal> flag to <command>dopackages</command>
|
|
later!</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
|
|
<sect2 id="build-one">
|
|
<title>Building a single package</title>
|
|
|
|
<para>Sometimes there is a need to rebuild a single package from the
|
|
package set. This can be accomplished with the following
|
|
invocation:</para>
|
|
|
|
<screen>&prompt.root; <command><replaceable>path</replaceable>/qmanager/packagebuild <replaceable>amd64</replaceable> <replaceable>7-exp</replaceable> <replaceable>20080904212103</replaceable> <replaceable>aclock-0.2.3_2.tbz</replaceable></command></screen>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="anatomy">
|
|
<title>Anatomy of a Build</title>
|
|
|
|
<para>A full build without any <literal>-no</literal>
|
|
options performs the following operations in the
|
|
specified order:</para>
|
|
|
|
<orderedlist>
|
|
<listitem>
|
|
<para>An update of the current <filename>ports</filename>
|
|
tree from the ZFS snapshot<footnote id="footnote-status1">
|
|
<para>Status of these steps can be found in
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/build.log</filename>
|
|
as well as on stderr of the tty running the
|
|
<command>dopackages</command> command.</para></footnote></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>An update of the running branch's
|
|
<filename>src</filename> tree from the ZFS snapshot<footnoteref linkend='footnote-status1'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Checks which ports do not have a
|
|
<makevar>SUBDIR</makevar> entry in their respective
|
|
category's <filename>Makefile</filename><footnoteref linkend='footnote-status1'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Creates the <filename>duds</filename> file, which
|
|
is a list of ports not to build<footnoteref linkend='footnote-status1'></footnoteref><footnote id="footnote-buildstop">
|
|
<para>If any of these steps fail, the build will stop
|
|
cold in its tracks.</para></footnote></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Generates a fresh <filename>INDEX</filename>
|
|
file<footnoteref linkend='footnote-status1'></footnoteref><footnoteref linkend='footnote-buildstop'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Sets up the nodes that will be used in the
|
|
build<footnoteref linkend='footnote-status1'></footnoteref><footnoteref linkend='footnote-buildstop'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Builds a list of restricted ports<footnoteref linkend='footnote-status1'></footnoteref><footnoteref linkend='footnote-buildstop'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Builds packages (phase 1)<footnote id="footnote-status2"><para>Status of these steps can be found in
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/journal</filename>.
|
|
Individual ports will write
|
|
their build logs to
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/logs/</filename>
|
|
and their error logs to
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/errors/</filename>.
|
|
</para></footnote></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Performs another node setup<footnoteref linkend='footnote-status1'></footnoteref></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Builds packages (phase 2)<footnoteref linkend='footnote-status2'></footnoteref></para>
|
|
</listitem>
|
|
</orderedlist>
|
|
</sect1>
|
|
|
|
<sect1 id="build-maintenance">
|
|
<title>Build Maintenance</title>
|
|
|
|
<para>There are several cases where you will need to manually clean
|
|
up a build:</para>
|
|
|
|
<orderedlist>
|
|
<listitem>
|
|
<para>You have manually interrupted it.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>The head node has been rebooted while
|
|
a build was running.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>qmanager</filename> has crashed and
|
|
has been restarted.</para>
|
|
</listitem>
|
|
</orderedlist>
|
|
|
|
<sect2 id="interrupting">
|
|
<title>Interrupting a Build</title>
|
|
|
|
<para>Manually interrupting a build is a bit messy. First you need to
|
|
identify the tty in which it's running (either record the output
|
|
of &man.tty.1; when you start the build, or use <command>ps x</command>
|
|
to identify it. You need to make sure that nothing else important
|
|
is running in this tty, e.g., <userinput>ps -t p1</userinput> or whatever.
|
|
If there is not, you can just kill off the whole term easily with
|
|
<userinput>pkill -t pts/1</userinput>; otherwise issue a
|
|
<userinput>kill -HUP</userinput> in there by, for example,
|
|
<userinput>ps -t pts/1 -o pid= | xargs kill -HUP</userinput>. Replace
|
|
<replaceable>p1</replaceable> by whatever the tty is, of course.</para>
|
|
|
|
<para>The
|
|
package builds dispatched by <command>make</command> to
|
|
the client machines will clean themselves up after a
|
|
few minutes (check with <command>ps x</command> until they
|
|
all go away).</para>
|
|
|
|
<para>If you do not kill &man.make.1;, then it will spawn more jobs.
|
|
If you do not kill <command>dopackages</command>, then it will restart
|
|
the entire build. If you do not kill the <command>pdispatch</command>
|
|
processes, they'll keep going (or respawn) until they've built their
|
|
package.</para>
|
|
</sect2>
|
|
|
|
<sect2 id="cleanup">
|
|
<title>Cleaning up a Build</title>
|
|
|
|
<para>To free up resources, you will need to clean up client machines by
|
|
running <command>build cleanup</command> command. For example:</para>
|
|
|
|
<screen>&prompt.user; <userinput>/var/portbuild/scripts/build cleanup i386 8-exp 20080714120411 -full</userinput></screen>
|
|
|
|
<para>If you forget to do this, then the old build
|
|
<literal>jail</literal>s will not be cleaned up for 24 hours, and no
|
|
new jobs will be dispatched in their place since
|
|
<hostid>pointyhat</hostid> thinks the job slot is still occupied.</para>
|
|
|
|
<para>To check, <userinput>cat ~/loads/*</userinput> to display the
|
|
status of client machines; the first column is the number of jobs
|
|
it thinks is running, and this should be roughly concordant
|
|
with the load average. <literal>loads</literal> is refreshed
|
|
every 2 minutes. If you do <userinput>ps x | grep pdispatch</userinput>
|
|
and it is less than the number of jobs that <literal>loads</literal>
|
|
thinks are in use, you are in trouble.</para>
|
|
|
|
<para>You may have problem with the <command>umount</command>
|
|
commands hanging. If so, you are going to have to use the
|
|
<command>allgohans</command> script to run an &man.ssh.1;
|
|
command across all clients for that buildenv. For example:</para>
|
|
|
|
<screen>&prompt.user; ssh gohan24 df</screen>
|
|
|
|
<para>will get you a df, and</para>
|
|
|
|
<screen>&prompt.user; allgohans "umount -f pointyhat.freebsd.org:/var/portbuild/i386/8-exp/ports"
|
|
&prompt.user; allgohans "umount -f pointyhat.freebsd.org:/var/portbuild/i386/8-exp/src"</screen>
|
|
|
|
<para>are supposed to get rid of the hanging mounts. You will have to
|
|
keep doing them since there can be multiple mounts.</para>
|
|
|
|
<note>
|
|
<para>Ignore the following:</para>
|
|
|
|
<screen>umount: pointyhat.freebsd.org:/var/portbuild/i386/8-exp/ports: statfs: No such file or directory
|
|
umount: pointyhat.freebsd.org:/var/portbuild/i386/8-exp/ports: unknown file system
|
|
umount: Cleanup of /x/tmp/8-exp/chroot/53837/compat/linux/proc failed!
|
|
/x/tmp/8-exp/chroot/53837/compat/linux/proc: not a file system root directory</screen>
|
|
|
|
<para>The former two mean that the client did not have those mounted;
|
|
the latter two are a bug.</para>
|
|
|
|
<para>You may also see messages about <literal>procfs</literal>.</para>
|
|
</note>
|
|
|
|
<para>After you have done all the above, remove the
|
|
<filename><replaceable>${arch}</replaceable>/lock</filename>
|
|
file before trying to restart the build. If you do not,
|
|
<filename>dopackages</filename> will simply exit.</para>
|
|
|
|
<para>If you have to do a ports tree update before
|
|
restarting, you may have to rebuild either <filename>duds</filename>,
|
|
<filename>INDEX</filename>, or both.</para>
|
|
</sect2>
|
|
|
|
<sect2 id="build-command-2">
|
|
<title>Maintaining builds with the <command>build</command>
|
|
command</title>
|
|
|
|
<para>Here are the rest of the options for the <command>build</command>
|
|
command:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><literal>build destroy <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable></literal> - Destroy the
|
|
build id.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>build list <replaceable>arch</replaceable>
|
|
<replaceable>branch</replaceable></literal> - Shows the current set
|
|
of build ids.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="monitoring">
|
|
<title>Monitoring the Build</title>
|
|
|
|
<para>You can use <command>qclient</command> command to monitor the status
|
|
of build nodes, and to list the currently scheduled jobs:</para>
|
|
|
|
<screen>&prompt.user; <userinput>python <replaceable>path</replaceable>/qmanager/qclient jobs</userinput>
|
|
&prompt.user; <userinput>python <replaceable>path</replaceable>/qmanager/qclient status</userinput></screen>
|
|
|
|
<para>The
|
|
<userinput>scripts/stats <replaceable>${branch}</replaceable></userinput>
|
|
command shows the number of packages already built.</para>
|
|
|
|
<para>Running <userinput>cat /var/portbuild/*/loads/*</userinput>
|
|
shows the client loads and number of concurrent builds in
|
|
progress. The files that have been recently updated are the clients
|
|
that are online; the others are the offline clients.</para>
|
|
|
|
<note>
|
|
<para>The <command>pdispatch</command> command does the dispatching
|
|
of work onto the client, and post-processing.
|
|
<command>ptimeout.host</command> is a watchdog that kills a build
|
|
after timeouts. So, having 50 <command>pdispatch</command>
|
|
processes but only 4 &man.ssh.1; processes means 46
|
|
<command>pdispatch</command>es are idle, waiting to get an
|
|
idle node.</para>
|
|
</note>
|
|
|
|
<para>Running <userinput>tail -f <replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/build.log</userinput>
|
|
shows the overall build progress.</para>
|
|
|
|
<para>If a port build is failing, and it is not immediately obvious
|
|
from the log as to why, you can preserve the
|
|
<makevar>WRKDIR</makevar> for further analysis. To do this,
|
|
touch a file called <filename>.keep</filename> in the port's
|
|
directory. The next time the cluster tries to build this port,
|
|
it will tar, compress, and copy the <makevar>WRKDIR</makevar>
|
|
to
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/wrkdirs/</filename>.</para>
|
|
|
|
<para>If you find that the system is looping trying to build the
|
|
same package over and over again, you may be able to fix the
|
|
problem by rebuilding the offending package by hand.</para>
|
|
|
|
<para>If all the builds start failing with complaints that they
|
|
cannot load the dependent packages, check to see that
|
|
<application>httpd</application> is still running, and restart
|
|
it if not.</para>
|
|
|
|
<para>Keep an eye on &man.df.1; output. If the
|
|
<filename>/var/portbuild</filename> file system becomes full
|
|
then <trademark>Bad Things</trademark> happen.</para>
|
|
|
|
<para>The status of all current builds is generated periodically
|
|
into the <filename>packagestats.html</filename> file, e.g.,
|
|
<ulink url="http://pointyhat.FreeBSD.org/errorlogs/packagestats.html"></ulink>.
|
|
For each <literal>buildenv</literal>, the following is displayed:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><literal>updated</literal> is the contents of
|
|
<filename>.updated</filename>. This is why we recommend that you
|
|
update <filename>.updated</filename> for <literal>-exp</literal>
|
|
runs (see below).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>date of <literal>latest log</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>number of lines in <filename>INDEX</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>the number of current <literal>build logs</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>the number of completed <literal>packages</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>the number of <literal>errors</literal></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>the number of duds (shown as <literal>skipped</literal>)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>missing</literal> shows the difference between
|
|
<filename>INDEX</filename> and the other columns. If you have
|
|
restarted a run after a ports tree update, there
|
|
will likely be duplicates in the packages and error columns,
|
|
and this column will be meaningless. (The script is naive).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><literal>running</literal> and <literal>completed</literal>
|
|
are guesses based on a &man.grep.1; of <filename>build.log</filename>.
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect1>
|
|
|
|
<sect1 id="errors">
|
|
<title>Dealing With Build Errors</title>
|
|
|
|
<para>The easiest way to track build failures is to receive
|
|
the emailed logs and sort them to a folder, so you can maintain a
|
|
running list of current failures and detect new ones easily.
|
|
To do this, add an email address to
|
|
<filename><replaceable>${branch}</replaceable>/portbuild.conf</filename>.
|
|
You can easily bounce the new ones to maintainers.</para>
|
|
|
|
<para>After a port appears broken on every build combination
|
|
multiple times, it is time to mark it <makevar>BROKEN</makevar>.
|
|
Two weeks' notification for the maintainers seems fair.</para>
|
|
|
|
<note>
|
|
<para>To avoid build errors with ports that need to be manually
|
|
fetched, put the distfiles into
|
|
<filename>~ftp/pub/FreeBSD/distfiles</filename>.
|
|
Access restrictions are in place to make sure that only the
|
|
build clients can access this directory.</para>
|
|
</note>
|
|
</sect1>
|
|
|
|
<sect1 id="release">
|
|
<title>Release Builds</title>
|
|
|
|
<para>When building packages for a release, it may be
|
|
necessary to manually update the <literal>ports</literal>
|
|
and <filename>src</filename> trees to the release tag and use
|
|
<option>-novcs</option> and
|
|
<option>-noportsvcs</option>.</para>
|
|
|
|
<para>To build package sets intended for use on a CD-ROM,
|
|
use the <option>-cdrom</option> option to
|
|
<command>dopackages</command>.</para>
|
|
|
|
<para>If the disk space is not available on the cluster, use
|
|
<option>-nodistfiles</option> to avoid collecting distfiles.</para>
|
|
|
|
<para>After the initial build completes, restart the build
|
|
with
|
|
<option>-restart -fetch-original</option>
|
|
to collect updated distfiles as well. Then, once the
|
|
build is post-processed, take an inventory of the list
|
|
of files fetched:</para>
|
|
|
|
<screen>&prompt.user; <userinput>cd <replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable></userinput>
|
|
&prompt.user; <userinput>find distfiles > distfiles-<replaceable>${release}</replaceable></userinput></screen>
|
|
|
|
<!-- XXX MCL apparently obsolete -->
|
|
<para>This inventory file typically lives in
|
|
<filename>i386/<replaceable>${branch}</replaceable></filename>
|
|
on the cluster master.</para>
|
|
|
|
<para>This is useful to aid in periodically cleaning out
|
|
the distfiles from <hostid>ftp-master</hostid>. When space
|
|
gets tight, distfiles from recent releases can be kept while
|
|
others can be thrown away.</para>
|
|
|
|
<para>Once the distfiles have been uploaded (see below),
|
|
the final release package set must be created. Just to be
|
|
on the safe side, run the
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/cdrom.sh</filename>
|
|
script by hand to make sure all the CD-ROM restricted packages
|
|
and distfiles have been pruned. Then, copy the
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/packages</filename>
|
|
directory to
|
|
<filename><replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable>/packages-<replaceable>${release}</replaceable></filename>.
|
|
Once the packages are safely moved off, contact the &a.re;
|
|
and inform them of the release package location.</para>
|
|
|
|
<para>Remember to coordinate with the &a.re; about the timing
|
|
and status of the release builds.</para>
|
|
</sect1>
|
|
|
|
<sect1 id="uploading">
|
|
<title>Uploading Packages</title>
|
|
|
|
<para>Once a build has completed, packages and/or distfiles
|
|
can be transferred to <hostid>ftp-master</hostid> for
|
|
propagation to the FTP mirror network. If the build was
|
|
run with <option>-nofinish</option>, then make sure to
|
|
follow up with
|
|
<command>dopackages -finish</command> to post-process the
|
|
packages (removes <makevar>RESTRICTED</makevar> and
|
|
<makevar>NO_CDROM</makevar> packages where appropriate,
|
|
prunes packages not listed in <filename>INDEX</filename>,
|
|
removes from <filename>INDEX</filename>
|
|
references to packages not built, and generates a
|
|
<filename>CHECKSUM.MD5</filename>
|
|
summary); and distfiles (moves them from the temporary
|
|
<filename>distfiles/.pbtmp</filename> directory into
|
|
<filename>distfiles/</filename> and removes
|
|
<makevar>RESTRICTED</makevar> and <makevar>NO_CDROM</makevar>
|
|
distfiles).</para>
|
|
|
|
<para>It is usually a good idea to run the
|
|
<command>restricted.sh</command> and/or
|
|
<command>cdrom.sh</command> scripts by hand after
|
|
<command>dopackages</command> finishes just to be safe.
|
|
Run the <command>restricted.sh</command> script before
|
|
uploading to <hostid>ftp-master</hostid>, then run
|
|
<command>cdrom.sh</command> before preparing
|
|
the final package set for a release.</para>
|
|
|
|
<para>The package subdirectories are named by whether they are for
|
|
<filename>release</filename>, <filename>stable</filename>, or
|
|
<filename>current</filename>. Examples:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><filename>packages-7.2-release</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>packages-7-stable</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>packages-8-stable</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>packages-9-stable</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>packages-10-current</filename></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<note>
|
|
<para>Some of the directories on
|
|
<hostid>ftp-master</hostid> are, in fact, symlinks. Examples:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><filename>packages-stable</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><filename>packages-current</filename></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para> Be sure
|
|
you move the new packages directory over the
|
|
<emphasis>real</emphasis> destination directory, and not
|
|
one of the symlinks that points to it.</para>
|
|
</note>
|
|
|
|
<para>If you are doing a completely new package set (e.g., for
|
|
a new release), copy packages to the staging area on
|
|
<hostid>ftp-master</hostid> with something like the following:</para>
|
|
|
|
<screen>&prompt.root; <userinput>cd /var/portbuild/<replaceable>${arch}</replaceable>/<replaceable>${branch}</replaceable></userinput>
|
|
&prompt.root; <userinput>tar cfv - packages/ | ssh portmgr@ftp-master tar xfC - w/ports/<replaceable>${arch}</replaceable>/tmp/<replaceable>${subdir}</replaceable></userinput></screen>
|
|
|
|
<para>Then log into <hostid>ftp-master</hostid>, verify that
|
|
the package set was transferred successfully, remove the
|
|
package set that the new package set is to replace (in
|
|
<filename>~/w/ports/<replaceable>${arch}</replaceable></filename>),
|
|
and move the new set into place. (<filename>w/</filename> is
|
|
merely a shortcut.)</para>
|
|
|
|
<para>For incremental builds, packages should be uploaded
|
|
using <command>rsync</command> so we do not put too much
|
|
strain on the mirrors.</para>
|
|
|
|
<para><emphasis>ALWAYS</emphasis> use <option>-n</option>
|
|
first with <command>rsync</command> and check the output
|
|
to make sure it is sane. If it looks good, re-run the
|
|
<command>rsync</command> without the <option>-n</option>
|
|
option.</para>
|
|
|
|
<para>Example <command>rsync</command> command for incremental
|
|
package upload:</para>
|
|
|
|
<screen>&prompt.root; <userinput>rsync -n -r -v -l -t -p --delete packages/ portmgr@ftp-master:w/ports/<replaceable>${arch}</replaceable>/<replaceable>${subdir}</replaceable>/ | tee log</userinput></screen>
|
|
|
|
<para>Distfiles should be transferred with the
|
|
<command>cpdistfiles</command> script:</para>
|
|
|
|
<screen>&prompt.root; <userinput>/var/portbuild/scripts/cpdistfiles <replaceable>${arch}</replaceable> <replaceable>${branch}</replaceable> <replaceable>${buildid}</replaceable> [-yesreally] | tee log2</userinput></screen>
|
|
|
|
<para>Doing it by hand is deprecated.</para>
|
|
</sect1>
|
|
|
|
<sect1 id="expbuilds">
|
|
<title>Experimental Patches Builds</title>
|
|
|
|
<para>Experimental patches builds are run from time to time to
|
|
new features or bugfixes to the ports infrastructure (i.e.
|
|
<filename>bsd.port.mk</filename>), or to test large sweeping
|
|
upgrades. At any given time there may be several simultaneous
|
|
experimental patches branches, such as
|
|
<literal>8-exp</literal> on the amd64
|
|
architecture.</para>
|
|
|
|
<para>In general, an experimental patches build is run the same
|
|
way as any other build, except that you should first update the
|
|
ports tree to the latest version and then apply your patches.
|
|
To do the former, you can use the following:</para>
|
|
|
|
<note>
|
|
<para>The following example is obsolete</para>
|
|
</note>
|
|
|
|
<screen>&prompt.user; <userinput>cvs -R update -dP > update.out</userinput>
|
|
&prompt.user; <userinput>date > .updated</userinput></screen>
|
|
|
|
<para>This will most closely simulate what the <literal>dopackages</literal>
|
|
script does. (While <filename>.updated</filename> is merely
|
|
informative, it can be a help.)</para>
|
|
|
|
<para>You will need to edit <filename>update.out</filename> to look
|
|
for lines beginning with <literal>^M</literal>, <literal>^C</literal>,
|
|
or <literal>^?</literal> and then deal with them.</para>
|
|
|
|
<para>It is always a good idea to save
|
|
original copies of all changed files, as well as a list of what
|
|
you are changing. You can then look back on this list when doing
|
|
the final commit, to make sure you are committing exactly what you
|
|
tested.</para>
|
|
|
|
<para>Since the machine is shared, someone else may delete your
|
|
changes by mistake, so keep a copy of them in e.g., your home
|
|
directory on <hostid>freefall</hostid>. Do not use
|
|
<filename>tmp/</filename>; since <hostid>pointyhat</hostid>
|
|
itself runs some version of <literal>-CURRENT</literal>, you
|
|
can expect reboots (if nothing else, for updates).</para>
|
|
|
|
<para>In order to have a good control case with which to compare
|
|
failures, you should first do a package build of the branch on
|
|
which the experimental patches branch is based for the &i386;
|
|
architecture (currently this is <literal>8</literal>). Then, when
|
|
preparing for the experimental patches build, checkout a ports
|
|
tree and a src tree with the same date as was used for the control
|
|
build. This will ensure an apples-to-apples comparison
|
|
later.</para>
|
|
|
|
<!-- XXX MCL currently there is only one build cluster
|
|
<note><para>One build cluster can do the control build while the other
|
|
does the experimental patches build. This can be a great
|
|
time-saver.</para></note>
|
|
-->
|
|
|
|
<para>Once the build finishes, compare the control build failures
|
|
to those of the experimental patches build. Use the following
|
|
commands to facilitate this (this assumes the <literal>8</literal>
|
|
branch is the control branch, and the <literal>8-exp</literal>
|
|
branch is the experimental patches branch):</para>
|
|
|
|
<screen>&prompt.user; <userinput>cd /var/portbuild/i386/8-exp/errors</userinput>
|
|
&prompt.user; <userinput>find . -name \*.log\* | sort > /tmp/8-exp-errs</userinput>
|
|
&prompt.user; <userinput>cd /var/portbuild/i386/8/errors</userinput>
|
|
&prompt.user; <userinput>find . -name \*.log\* | sort > /tmp/8-errs</userinput></screen>
|
|
|
|
<note>
|
|
<para>If it has been a long time since one of the builds
|
|
finished, the logs may have been automatically compressed with
|
|
bzip2. In that case, you must use <userinput>sort | sed
|
|
's,\.bz2,,g'</userinput> instead.</para>
|
|
</note>
|
|
|
|
<screen>&prompt.user; <userinput>comm -3 /tmp/8-errs /tmp/8-exp-errs | less</userinput></screen>
|
|
|
|
<para>This last command will produce a two-column report. The
|
|
first column is ports that failed on the control build but not in
|
|
the experimental patches build; the second column is vice versa.
|
|
Reasons that the port might be in the first column
|
|
include:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Port was fixed since the control build was run, or was
|
|
upgraded to a newer version that is also broken (thus the
|
|
newer version should appear in the second column)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Port is fixed by the patches in the experimental patches
|
|
build</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Port did not build under the experimental patches build
|
|
due to a dependency failure</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Reasons for a port appearing in the second column
|
|
include:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem id="broken-by-exp-patches" xreflabel="broken by experimental patches">
|
|
<para>Port was broken by the experimental patches</para>
|
|
</listitem>
|
|
|
|
<listitem id="broken-by-upgrading" xreflabel="broken by upgrading">
|
|
<para>Port was upgraded since the control build and has become
|
|
broken</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Port was broken due to a transient error (e.g., FTP site
|
|
down, package client error, etc.)</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Both columns should be investigated and the reason for the
|
|
errors understood before committing the experimental patches
|
|
set. To differentiate between <xref
|
|
linkend="broken-by-exp-patches"></xref> and <xref
|
|
linkend="broken-by-upgrading"></xref> above, you can do a
|
|
rebuild of the affected packages under the control
|
|
branch:</para>
|
|
|
|
<screen>&prompt.user; <userinput>cd /var/portbuild/i386/8/ports</userinput></screen>
|
|
|
|
<note>
|
|
<para>The following example is obsolete</para>
|
|
</note>
|
|
|
|
<note>
|
|
<para>Be sure to <userinput>cvs update</userinput> this tree to the same date as
|
|
the experimental patches tree.</para>
|
|
</note>
|
|
|
|
<!-- XXX MCL fix -->
|
|
<para>The following command will set up the control branch for
|
|
the partial build (old codebase):</para>
|
|
|
|
<screen>&prompt.user; <userinput>/var/portbuild/scripts/dopackages.8 -noportsvcs -nobuild -novcs -nofinish</userinput></screen>
|
|
|
|
<!-- XXX MCL obsolete -->
|
|
<para>The builds must be performed from the
|
|
<filename>packages/All</filename> directory. This directory should
|
|
initially be empty except for the Makefile symlink. If this
|
|
symlink does not exist, it must be created:</para>
|
|
|
|
<screen>&prompt.user; <userinput>cd /var/portbuild/i386/8/packages/All</userinput>
|
|
&prompt.user; <userinput>ln -sf ../../Makefile .</userinput>
|
|
&prompt.user; <userinput>make -k -j<#> <list of packages to build></userinput></screen>
|
|
|
|
<note>
|
|
<para><#> is the concurrency of the build to
|
|
attempt. It is usually the sum of the weights listed in
|
|
<filename>/var/portbuild/i386/mlist</filename> unless you have a
|
|
reason to run a heavier or lighter build.</para>
|
|
|
|
<para>The list of packages to build should be a list of package
|
|
names (including versions) as they appear in
|
|
<filename>INDEX</filename>. The <makevar>PKGSUFFIX</makevar>
|
|
(i.e., <filename>.tgz</filename> or <filename>.tbz</filename>) is optional.</para>
|
|
</note>
|
|
|
|
<para>This will build only those packages listed as well as all
|
|
of their dependencies.</para>
|
|
|
|
<para>You can check the progress of this
|
|
partial build the same way you would a regular build.</para>
|
|
|
|
<para>Once all
|
|
the errors have been resolved, you can commit the package set.
|
|
After committing, it is customary to send a <literal>HEADS
|
|
UP</literal> email to <ulink
|
|
url="mailto:ports@FreeBSD.org">ports@FreeBSD.org</ulink> and
|
|
copy <ulink
|
|
url="mailto:ports-developers@FreeBSD.org">ports-developers@FreeBSD.org</ulink>
|
|
informing people of the changes. A summary of all changes
|
|
should also be committed to
|
|
<filename>/usr/ports/CHANGES</filename>.</para>
|
|
</sect1>
|
|
|
|
<sect1 id="new-node">
|
|
<title>How to configure a new package building node</title>
|
|
|
|
<para>Before following these steps, please coordinate with
|
|
<literal>portmgr</literal>.</para>
|
|
|
|
<note>
|
|
<para>Due to some generous donations, <literal>portmgr</literal> is
|
|
no longer looking for the loan of &i386; or <literal>amd64</literal>
|
|
systems. However, we are still interested in borrowing tier-2
|
|
systems.</para>
|
|
</note>
|
|
|
|
<sect2 id="node-requirements">
|
|
<title>Node requirements</title>
|
|
|
|
<para><literal>portmgr</literal> is still working on characterizing
|
|
what a node needs to be generally useful.</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>CPU capacity: anything less than 500MHz is generally
|
|
not useful for package building.</para>
|
|
|
|
<note>
|
|
<para>We are able to adjust the number of jobs
|
|
dispatched to each machine, and we generally tune
|
|
the number to use 100% of CPU.</para>
|
|
</note>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>RAM: Less than 2G is not very useful; 8G or more
|
|
is preferred. We have been tuning to one job
|
|
per 512M of RAM.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>disk: at least 20G is needed for filesystem; 32G is
|
|
needed for swap. Best performance will be if multiple
|
|
disks are used, and configured as <literal>geom</literal>
|
|
stripes. Performance numbers are also TBA.</para>
|
|
|
|
<note>
|
|
<para>Package building will test disk drives to destruction.
|
|
Be aware of what you are signing up for!</para>
|
|
</note>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>network bandwidth: TBA. However, an 8-job machine
|
|
has been shown to saturate a cable modem line.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
|
|
<sect2 id="node-preparation">
|
|
<title>Preparation</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Pick a unique hostname. It does not have to be
|
|
a publicly resolvable hostname (it can be a name on
|
|
your internal network).</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>By default, package building requires the following TCP
|
|
ports to be accessible: 22 (<literal>ssh</literal>), 414
|
|
(<literal>infoseek</literal>), and 8649
|
|
(<literal>ganglia</literal>). If these are not accessible,
|
|
pick others and ensure that an <command>ssh</command> tunnel
|
|
is set up (see below).</para>
|
|
|
|
<para>(Note: if you have more than one machine at your site,
|
|
you will need an individual TCP port for each service on
|
|
each machine, and thus <command>ssh</command> tunnels
|
|
will be necessary. As such, you will probably need to
|
|
configure port forwarding on your firewall.)</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Decide if you will be booting natively or via
|
|
<literal>pxeboot</literal>. You will find that it is
|
|
easier to keep up with changes to <literal>-current</literal>
|
|
with the latter, especially if you have multiple machines
|
|
at your site.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Pick a directory to hold ports configuration and
|
|
<filename>chroot</filename> subdirectories. It may be
|
|
best to put it this on its own partition. (Example:
|
|
<filename>/usr2/</filename>.)</para>
|
|
<note>
|
|
<para>The filename <filename>chroot</filename> is a
|
|
historical remnant.</para>
|
|
</note>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="node-src">
|
|
<title>Configuring <filename>src</filename></title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Create a directory to contain the latest
|
|
<literal>-current</literal> source tree and check it
|
|
out. (Since your machine will likely be asked to build
|
|
packages for <literal>-current</literal>, the kernel it
|
|
runs should be reasonably up-to-date with the
|
|
<literal>bindist</literal> that will be exported
|
|
by our scripts.)</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>If you are using <filename>pxeboot</filename>: create a
|
|
directory to contain the install bits. You will probably
|
|
want to use a subdirectory of <filename>/pxeroot</filename>,
|
|
e.g.,
|
|
<filename>/pxeroot/<replaceable>${arch}</replaceable>-<replaceable>${branch}</replaceable></filename>.
|
|
Export that as <makevar>DESTDIR</makevar>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>If you are cross-building, export
|
|
<makevar>TARGET_ARCH</makevar>=<replaceable>${arch}</replaceable>.</para>
|
|
|
|
<note>
|
|
<para>The procedure for cross-building ports is not yet
|
|
defined.</para>
|
|
</note>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Generate a kernel config file. Include
|
|
<filename>GENERIC</filename> (or, if you are using more than
|
|
3.5G on &i386;, <filename>PAE</filename>).</para>
|
|
|
|
<para>Required options:</para>
|
|
|
|
<programlisting>options NULLFS
|
|
options TMPFS</programlisting>
|
|
|
|
<para>Suggested options:</para>
|
|
|
|
<programlisting>options GEOM_CONCAT
|
|
options GEOM_STRIPE
|
|
options SHMMAXPGS=65536
|
|
options SEMMNI=40
|
|
options SEMMNS=240
|
|
options SEMUME=40
|
|
options SEMMNU=120
|
|
|
|
options ALT_BREAK_TO_DEBUGGER</programlisting>
|
|
|
|
<para>For <filename>PAE</filename>, it is not currently possible
|
|
to load modules. Therefore, if you are running an architecture
|
|
that supports Linux emulation, you will need to add:</para>
|
|
|
|
<programlisting>options COMPAT_LINUX
|
|
options LINPROCFS</programlisting>
|
|
|
|
<para>Also for <filename>PAE</filename>, as of 20110912 you need
|
|
the following. This needs to be investigated:</para>
|
|
|
|
<programlisting>nooption NFSD # New Network Filesystem Server
|
|
options NFSCLIENT # Network Filesystem Client
|
|
options NFSSERVER # Network Filesystem Server</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>As root, do the usual build steps, e.g.:</para>
|
|
|
|
<screen>&prompt.root; <userinput>make -j4 buildworld</userinput>
|
|
&prompt.root; <userinput>make buildkernel KERNCONF=<replaceable>${kernconf}</replaceable></userinput>
|
|
&prompt.root; <userinput>make installkernel KERNCONF=<replaceable>${kernconf}</replaceable></userinput>
|
|
&prompt.root; <userinput>make installworld</userinput></screen>
|
|
|
|
<para>The install steps use <makevar>DESTDIR</makevar>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Customize files in <filename>etc/</filename>.
|
|
Whether you do this on the client itself, or another
|
|
machine, will depend on whether you are using
|
|
<filename>pxeboot</filename>.</para>
|
|
|
|
<para>If you are using <filename>pxeboot</filename>: create
|
|
a subdirectory of
|
|
<filename><replaceable>${DESTDIR}</replaceable></filename>
|
|
called <filename>conf/</filename>. Create one subdirectory
|
|
<filename>default/etc/</filename>, and (if your site will host
|
|
multiple nodes), subdirectories
|
|
<filename><replaceable>${ip-address}</replaceable>/etc/</filename>
|
|
to contain override files for individual hosts. (You may find
|
|
it handy to symlink each of those directories to a hostname.)
|
|
Copy the entire contents of
|
|
<filename><replaceable>${DESTDIR}</replaceable>/etc/</filename>
|
|
to <filename>default/etc/</filename>; that is where you will
|
|
edit your files. The by-ip-address
|
|
<filename>etc/</filename> directories will probably only need
|
|
customized <filename>rc.conf</filename> files.</para>
|
|
|
|
<para>In either case, apply the following steps:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Create a
|
|
<literal>portbuild</literal>
|
|
user and group. It can have the <literal>'*'</literal> password.</para>
|
|
|
|
<para>Create
|
|
<filename>/home/portbuild/.ssh/</filename>
|
|
and populate <filename>authorized_keys</filename>. </para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Also add the following users:</para>
|
|
|
|
<programlisting>squid:*:100:100::0:0:User &:/usr/local/squid:/bin/sh
|
|
ganglia:*:102:102::0:0:User &:/usr/local/ganglia:/bin/sh</programlisting>
|
|
|
|
<para>Add them to <filename>etc/group</filename> as well.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create the appropriate files in
|
|
<filename>etc/.ssh/</filename>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>In <filename>etc/crontab</filename>: add</para>
|
|
|
|
<programlisting>* * * * * root /var/portbuild/scripts/client-metrics</programlisting>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create the appropriate
|
|
<filename>etc/fstab</filename>. (If you have multiple,
|
|
different, machines, you will need to put those in
|
|
the override directories.)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>In <filename>etc/inetd.conf</filename>: add</para>
|
|
|
|
<programlisting>infoseek stream tcp nowait nobody /var/portbuild/scripts/reportload</programlisting>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>You should run the cluster on UTC. If you have not set the clock
|
|
to UTC:</para>
|
|
|
|
<programlisting>&prompt.root; cp -p /usr/share/zoneinfo/Etc/UTC etc/localtime</programlisting>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create the appropriate
|
|
<filename>etc/rc.conf</filename>. (If you are using
|
|
<literal>pxeboot</literal>, and have multiple,
|
|
different, machines, you will need to put those in
|
|
the override directories.)</para>
|
|
|
|
<para>Recommended entries for physical nodes:</para>
|
|
|
|
<programlisting>hostname="<replaceable>${hostname}</replaceable>"
|
|
inetd_enable="YES"
|
|
linux_enable="YES"
|
|
nfs_client_enable="YES"
|
|
ntpd_enable="YES"
|
|
sendmail_enable="NONE"
|
|
sshd_enable="YES"
|
|
sshd_program="/usr/local/sbin/sshd"
|
|
|
|
gmond_enable="YES"
|
|
squid_enable="YES"
|
|
squid_chdir="<filename>/<replaceable>usr2</replaceable>/squid/logs</filename>"
|
|
squid_pidfile="<filename>/<replaceable>usr2</replaceable>/squid/logs/squid.pid</filename>"</programlisting>
|
|
|
|
<para>Required entries for VMWare-based nodes:</para>
|
|
|
|
<programlisting>vmware_guest_vmmemctl_enable="YES"
|
|
vmware_guest_guestd_enable="YES"</programlisting>
|
|
|
|
<para>Recommended entries for VMWare-based nodes:</para>
|
|
|
|
<programlisting>hostname=""
|
|
ifconfig_em0="DHCP"
|
|
fsck_y_enable="YES"
|
|
|
|
inetd_enable="YES"
|
|
linux_enable="YES"
|
|
nfs_client_enable="YES"
|
|
sendmail_enable="NONE"
|
|
sshd_enable="YES"
|
|
sshd_program="/usr/local/sbin/sshd"
|
|
|
|
gmond_enable="YES"
|
|
squid_enable="YES"
|
|
squid_chdir="<filename>/<replaceable>usr2</replaceable>/squid/logs</filename>"
|
|
squid_pidfile="<filename>/<replaceable>usr2</replaceable>/squid/logs/squid.pid</filename>"</programlisting>
|
|
|
|
<para>&man.ntpd.8; should <emphasis>not</emphasis>
|
|
be enabled for VMWare instances.</para>
|
|
|
|
<para>Also, it may be possible to leave
|
|
<application>squid</application> disabled by default
|
|
so as to not have
|
|
<filename>/<replaceable>usr2</replaceable></filename>
|
|
persistent (which should save instantiation time.)
|
|
Work is still ongoing.
|
|
</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create <filename>etc/resolv.conf</filename>, if
|
|
necessary.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Modify <filename>etc/sysctl.conf</filename>:</para>
|
|
|
|
<screen>9a10,30
|
|
> kern.corefile=<filename>/<replaceable>usr2</replaceable>/%N.core</filename>
|
|
> kern.sugid_coredump=1
|
|
> #debug.witness_ddb=0
|
|
> #debug.witness_watch=0
|
|
>
|
|
> # squid needs a lot of fds (leak?)
|
|
> kern.maxfiles=40000
|
|
> kern.maxfilesperproc=30000
|
|
>
|
|
> # Since the NFS root is static we do not need to check frequently for file changes
|
|
> # This saves >75% of NFS traffic
|
|
> vfs.nfs.access_cache_timeout=300
|
|
> debug.debugger_on_panic=1
|
|
>
|
|
> # For jailing
|
|
> security.jail.sysvipc_allowed=1
|
|
> security.jail.allow_raw_sockets=1
|
|
> security.jail.chflags_allowed=1
|
|
> security.jail.enforce_statfs=1
|
|
>
|
|
> vfs.lookup_shared=1</screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>If desired, modify <filename>etc/syslog.conf</filename>
|
|
to change the logging destinations to
|
|
<literal>@pointyhat.freebsd.org</literal>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="node-ports">
|
|
<title>Configuring <filename>ports</filename></title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Install the following ports:</para>
|
|
|
|
<programlisting>net/rsync
|
|
security/openssh-portable (with HPN on)
|
|
security/sudo
|
|
sysutils/ganglia-monitor-core (with GMETAD off)
|
|
www/squid (with SQUID_AUFS on)</programlisting>
|
|
|
|
<para>There is a WIP to create a meta-port, but it is not yet
|
|
complete.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Customize files in <filename>usr/local/etc/</filename>.
|
|
Whether you do this on the client itself, or another
|
|
machine, will depend on whether you are using
|
|
<filename>pxeboot</filename>.</para>
|
|
|
|
<note>
|
|
<para>The trick of using <filename>conf</filename>
|
|
override subdirectories is less effective here, because
|
|
you would need to copy over all subdirectories of
|
|
<filename>usr/</filename>. This is an implementation
|
|
detail of how the pxeboot works.</para>
|
|
</note>
|
|
|
|
<para>Apply the following steps:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Modify
|
|
<filename>usr/local/etc/gmond.conf</filename>:</para>
|
|
|
|
<screen>21,22c21,22
|
|
< name = "unspecified"
|
|
< owner = "unspecified"
|
|
---
|
|
> name = "<replaceable>${arch}</replaceable> package build cluster"
|
|
> owner = "portmgr@FreeBSD.org"
|
|
24c24
|
|
< url = "unspecified"
|
|
---
|
|
> url = "http://pointyhat.freebsd.org"</screen>
|
|
|
|
<!-- XXX MCL adapted literally from krismail; I do not understand it -->
|
|
<para>If there are machines from more than one cluster in the
|
|
same multicast domain (basically = LAN) then change the
|
|
multicast groups to different values (.71, .72, etc).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<!-- XXX MCL get latest patches from narutos -->
|
|
<para>Create
|
|
<filename>usr/local/etc/rc.d/portbuild.sh</filename>,
|
|
using the appropriate value for
|
|
<literal>scratchdir</literal>:</para>
|
|
|
|
<programlisting>#!/bin/sh
|
|
#
|
|
# Configure a package build system post-boot
|
|
|
|
scratchdir=<filename>/<replaceable>usr2</replaceable></filename>
|
|
|
|
ln -sf ${scratchdir}/portbuild /var/
|
|
|
|
# Identify builds ready for use
|
|
cd /var/portbuild/<replaceable>arch</replaceable>
|
|
for i in */builds/*; do
|
|
if [ -f ${i}/.ready ]; then
|
|
mkdir /tmp/.setup-${i##*/}
|
|
fi
|
|
done
|
|
|
|
# Flag that we are ready to accept jobs
|
|
touch /tmp/.boot_finished</programlisting>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Modify
|
|
<filename>usr/local/etc/squid/squid.conf</filename>:</para>
|
|
|
|
<screen>288,290c288,290
|
|
< #auth_param basic children 5
|
|
< #auth_param basic realm Squid proxy-caching web server
|
|
< #auth_param basic credentialsttl 2 hours
|
|
---
|
|
> auth_param basic children 5
|
|
> auth_param basic realm Squid proxy-caching web server
|
|
> auth_param basic credentialsttl 2 hours
|
|
611a612
|
|
> acl localnet src 127.0.0.0/255.0.0.0
|
|
655a657
|
|
> http_access allow localnet
|
|
2007a2011
|
|
> maximum_object_size 400 MB
|
|
2828a2838
|
|
> negative_ttl 0 minutes</screen>
|
|
|
|
<para>Also, change <filename>usr/local</filename>
|
|
to <filename><replaceable>usr2</replaceable></filename> in
|
|
<literal>cache_dir</literal>,
|
|
<literal>access_log</literal>,
|
|
<literal>cache_log</literal>,
|
|
<literal>cache_store_log</literal>,
|
|
<literal>pid_filename</literal>,
|
|
<literal>netdb_filename</literal>,
|
|
<literal>coredump_dir</literal>.</para>
|
|
|
|
<para>Finally, change the <literal>cache_dir</literal>
|
|
storage scheme from <literal>ufs</literal> to
|
|
<literal>aufs</literal> (offers better performance).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Configure <command>ssh</command>: copy
|
|
<filename>etc/ssh</filename> to
|
|
<filename>usr/local/etc/ssh</filename> and add
|
|
<literal>NoneEnabled yes</literal> to
|
|
<filename>sshd_config</filename>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<note>
|
|
<para>This step is under review.</para>
|
|
</note>
|
|
|
|
<para>Create
|
|
<filename>usr/local/etc/sudoers/sudoers.d/portbuild</filename>:</para>
|
|
|
|
<programlisting># local changes for package building
|
|
portbuild ALL=(ALL) NOPASSWD: ALL</programlisting>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="node-configuration">
|
|
<title>Configuration on the client itself</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Change into the port/package directory you picked
|
|
above, e.g.,
|
|
<command>cd <filename>/<replaceable>usr2</replaceable></filename></command>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>As root:</para>
|
|
|
|
<screen>&prompt.root; <userinput>mkdir portbuild</userinput>
|
|
&prompt.root; <userinput>chown portbuild:portbuild portbuild</userinput>
|
|
&prompt.root; <userinput>mkdir pkgbuild</userinput>
|
|
&prompt.root; <userinput>chown portbuild:portbuild pkgbuild</userinput>
|
|
&prompt.root; <userinput>mkdir squid</userinput>
|
|
&prompt.root; <userinput>mkdir squid/cache</userinput>
|
|
&prompt.root; <userinput>mkdir squid/logs</userinput>
|
|
&prompt.root; <userinput>chown -R squid:squid squid</userinput></screen>
|
|
</step>
|
|
|
|
<!-- XXX MCL adapted literally from krismail; I do not understand it -->
|
|
<step>
|
|
<para>If clients preserve <filename>/var/portbuild</filename>
|
|
between boots then they must either preserve their
|
|
<filename>/tmp</filename>, or revalidate their available
|
|
builds at boot time (see the script on the <literal>amd64</literal>
|
|
machines). They must also clean up stale jails from previous
|
|
builds before creating <filename>/tmp/.boot_finished</filename>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Boot the client.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>As root, initialize the <command>squid</command>
|
|
directories:</para>
|
|
|
|
<screen><userinput>squid -z</userinput></screen>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-configuration">
|
|
<title>Configuration on the server</title>
|
|
|
|
<para>These steps need to be taken by a <literal>portmgr</literal>
|
|
acting as <literal>portbuild</literal>
|
|
on the server.</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>If any of the default TCP ports is not available (see
|
|
above), you will need to create an <command>ssh</command>
|
|
tunnel for them and include its invocation command in
|
|
<literal>portbuild</literal>'s
|
|
<filename>crontab</filename>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Unless you can use the defaults, add an entry to
|
|
<filename>/home/portbuild/.ssh/config</filename>
|
|
to specify the public IP address, TCP port for
|
|
<command>ssh</command>, username, and any other necessary
|
|
information.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create
|
|
<filename>/var/portbuild/<replaceable>${arch}</replaceable>/clients/bindist-<replaceable>${hostname}</replaceable>.tar</filename>.</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Copy one of the existing ones as a template and unpack it
|
|
in a temporary directory.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Customize <filename>etc/resolv.conf</filename>
|
|
for the local site.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Customize <filename>etc/make.conf</filename> for
|
|
FTP fetches for the local site. Note: the nulling-out
|
|
of <makevar>MASTER_SITE_BACKUP</makevar> must be common
|
|
to all nodes, but the first entry in
|
|
<makevar>MASTER_SITE_OVERRIDE</makevar> should be the
|
|
nearest local FTP mirror. Example:</para>
|
|
|
|
<programlisting>.if defined(FETCH_ORIGINAL)
|
|
MASTER_SITE_BACKUP=
|
|
.else
|
|
MASTER_SITE_OVERRIDE= \
|
|
ftp://<replaceable>friendly-local-ftp-mirror</replaceable>/pub/FreeBSD/ports/distfiles/${DIST_SUBDIR}/ \
|
|
ftp://${BACKUP_FTP_SITE}/pub/FreeBSD/distfiles/${DIST_SUBDIR}/
|
|
.endif</programlisting>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><command>tar</command> it up and move it to the right
|
|
location.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Hint: you will need one of these for each machine;
|
|
however, if you have multiple machines at one site, you
|
|
should create a site-specific one (e.g., in
|
|
<filename>/var/portbuild/conf/clients/</filename>)
|
|
and symlink to it.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create
|
|
<filename>/var/portbuild/<replaceable>${arch}</replaceable>/portbuild-<replaceable>${hostname}</replaceable></filename>
|
|
using one of the existing ones as a guide. This
|
|
file contains overrides to
|
|
<filename>/var/portbuild/<replaceable>${arch}</replaceable>/portbuild.conf</filename>.</para>
|
|
|
|
<para>Suggested values:</para>
|
|
|
|
<programlisting>disconnected=1
|
|
http_proxy="http://localhost:3128/"
|
|
squid_dir=<filename>/<replaceable>usr2</replaceable>/squid</filename>
|
|
scratchdir=<filename>/<replaceable>usr2</replaceable>/pkgbuild</filename>
|
|
client_user=portbuild
|
|
sudo_cmd="sudo -H"
|
|
rsync_gzip=-z
|
|
|
|
infoseek_host=localhost
|
|
infoseek_port=<replaceable>${tunelled-tcp-port}</replaceable></programlisting>
|
|
|
|
<para>Possible other values:</para>
|
|
|
|
<programlisting>use_md_swap=1
|
|
md_size=9g
|
|
use_zfs=1
|
|
scp_cmd="/usr/local/bin/scp"
|
|
ssh_cmd="/usr/local/bin/ssh"</programlisting>
|
|
</step>
|
|
</procedure>
|
|
|
|
<para>These steps need to be taken by a <literal>portmgr</literal>
|
|
acting as <literal>root</literal> on <hostid>pointyhat</hostid>.</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Add the public IP address to
|
|
<filename>/etc/hosts.allow</filename>. (Remember, multiple
|
|
machines can be on the same IP address.)</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Add an appropriate <literal>data_source</literal> entry to
|
|
<filename>/usr/local/etc/gmetad.conf</filename>:</para>
|
|
|
|
<programlisting>data_source "<replaceable>arch</replaceable>/<replaceable>location</replaceable> Package Build Cluster" 30 <replaceable>hostname</replaceable></programlisting>
|
|
|
|
<para>You will need to restart <filename>gmetad</filename>.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="node-enabling">
|
|
<title>Enabling the node</title>
|
|
|
|
<para>These steps need to be taken by a <literal>portmgr</literal>
|
|
acting as <literal>portbuild</literal>:</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Ensure that <literal>ssh</literal> to the client
|
|
is working by executing
|
|
<userinput>ssh <replaceable>hostname</replaceable> uname -a</userinput>.
|
|
The actual command is not important; what is important is to
|
|
confirm the setup, and also add an entry into
|
|
<filename>known_hosts</filename>, once you have confirmed the
|
|
node's identity.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Populate the client's copy of
|
|
<filename>/var/portbuild/scripts/</filename> by something like
|
|
<userinput>/var/portbuild/scripts/dosetupnode <replaceable>arch</replaceable> <replaceable>major</replaceable> latest <replaceable>hostname</replaceable></userinput>.
|
|
Verify that you now have files in that directory.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Test the other TCP ports by executing
|
|
<userinput>telnet <replaceable>hostname</replaceable> <replaceable>portnumber</replaceable></userinput>.
|
|
<literal>414</literal> (or its tunnel) should give you a few lines of status
|
|
information including <literal>arch</literal> and
|
|
<literal>osversion</literal>; <literal>8649</literal> should
|
|
give you an <literal>XML</literal> response from
|
|
<literal>ganglia</literal>.</para>
|
|
</step>
|
|
</procedure>
|
|
|
|
<para>This step needs to be taken by a <literal>portmgr</literal>
|
|
acting as <literal>root</literal>:</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Tell <filename>qmanager</filename> about the node. Example:</para>
|
|
|
|
<para><userinput>python <replaceable>path</replaceable>/qmanager/qclient add
|
|
name=<replaceable>uniquename</replaceable>
|
|
arch=<replaceable>arch</replaceable>
|
|
osversion=<replaceable>osversion</replaceable>
|
|
numcpus=<replaceable>number</replaceable>
|
|
haszfs=0
|
|
online=1
|
|
domain=<replaceable>domain</replaceable>
|
|
primarypool=package
|
|
pools="package all" maxjobs=1
|
|
acl="ports-<replaceable>arch</replaceable>,deny_all"
|
|
</userinput></para>
|
|
</step>
|
|
</procedure>
|
|
|
|
<para>Finally, again as <literal>portmgr</literal>
|
|
acting as <literal>portbuild</literal>:</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Once you are sure that the client is working, tell
|
|
<application>pollmachine</application> about it by adding
|
|
it to
|
|
<filename>/var/portbuild/<replaceable>${arch}</replaceable>/mlist</filename>.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="new-branch">
|
|
<title>How to configure a new &os; branch</title>
|
|
|
|
<sect2 id="new-branch-pre-qmanager">
|
|
<title>Steps necessary before <application>qmanager</application> is started</title>
|
|
|
|
<para>When a new branch is created, some work needs to
|
|
be done to specify that the previous branch is no longer
|
|
equivalent to <literal>HEAD</literal>.</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
Edit <filename>/var/portbuild/conf/server.conf</filename>
|
|
with the following changes:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Add <replaceable>new-branch</replaceable> to
|
|
<makevar>SRC_BRANCHES</makevar>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>For what was previously head, change
|
|
<makevar>SRC_BRANCH_<replaceable>branch</replaceable>_SUBDIR</makevar> to
|
|
<literal>releng/<replaceable>branch</replaceable>.0</literal>
|
|
(literal zero).</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Add
|
|
<makevar>SRC_BRANCH_<replaceable>new-branch</replaceable>_SUBDIR</makevar>
|
|
<literal>=head</literal>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Run <command>/var/portbuild/updatesnap</command> manually.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
|
|
<sect2 id="new-branch-post-qmanager">
|
|
<title>Steps necessary after <application>qmanager</application> is started</title>
|
|
|
|
<note>
|
|
<para>Again, as
|
|
<literal>portbuild</literal>:</para>
|
|
</note>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>For each branch that will be supported, do the following:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Kick-start the build for the branch with:</para>
|
|
|
|
<screen>build create <replaceable>arch</replaceable> <replaceable>branch</replaceable></screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para><link linkend="setup">Create
|
|
<filename>bindist.tar</filename></link>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="old-branch">
|
|
<title>How to delete an unsupported &os; branch</title>
|
|
|
|
<para>When an old branch goes out of support, there are some
|
|
things to garbage-collect.</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Edit <filename>/var/portbuild/conf/server.conf</filename>
|
|
with the following changes:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Delete <replaceable>old-branch</replaceable> from
|
|
<makevar>SRC_BRANCHES</makevar>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Delete
|
|
<makevar>SRC_BRANCH_<replaceable>old-branch</replaceable>_SUBDIR</makevar><literal>=</literal>
|
|
<replaceable>whatever</replaceable></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<screen>umount a/snap/src-<replaceable>old-branch</replaceable>/src;
|
|
umount a/snap/src-<replaceable>old-branch</replaceable>;
|
|
zfs destroy -r a/snap/src-<replaceable>old-branch</replaceable></screen>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>You will probably find that the following files and
|
|
symlinks in <filename>/var/portbuild/errorlogs/</filename>
|
|
can be removed:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Files named
|
|
<filename>*-<replaceable>old_branch</replaceable>-failure.html</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Files named
|
|
<filename>buildlogs_*-<replaceable>old_branch</replaceable>-*-logs.txt</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Symlinks named
|
|
<filename>*-<replaceable>old_branch</replaceable>-previous*</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Symlinks named
|
|
<filename>*-<replaceable>old_branch</replaceable>-latest*</filename></para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect1>
|
|
|
|
<sect1 id="rebase-branch">
|
|
<title>How to rebase on a supported &os; branch</title>
|
|
|
|
<para>As of 2011, the philosophy of package building is to build
|
|
packages based on <emphasis>the earliest supported release</emphasis>
|
|
of each branch. e.g.: if on <literal>RELENG-8</literal>, the
|
|
following releases are supported: 8.1, 8.2, 8.3; then
|
|
<literal>packages-8-stable</literal> should be built from 8.1.</para>
|
|
|
|
<para>As releases go End-Of-Life (see
|
|
<ulink url="http://www.freebsd.org/security/index.html#supported-branches">chart</ulink>),
|
|
a full (not incremental!) package build should be done and uploaded.</para>
|
|
|
|
<para>The procedure is as follows:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Edit <filename>/var/portbuild/conf/server.conf</filename>
|
|
with the following changes:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Change the value of
|
|
<makevar>SRC_BRANCH_<replaceable>branch</replaceable>_SUBDIR</makevar> to
|
|
<literal>releng/</literal><replaceable>branch</replaceable>.<replaceable>N</replaceable>
|
|
where <literal>N</literal> is the newest 'oldest' release
|
|
for that branch.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Run <command>/var/portbuild/updatesnap</command> manually.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Run <command>dopackages</command> with <literal>-nobuild</literal>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Follow the <link linkend="setup">setup procedure</link>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Now you can run <command>dopackages</command> without <literal>-nobuild</literal>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect1>
|
|
|
|
<sect1 id="new-arch">
|
|
<title>How to configure a new architecture</title>
|
|
|
|
<sect2 id="new-arch-pre-qmanager">
|
|
<title>Steps necessary before <application>qmanager</application> is started</title>
|
|
|
|
<note>
|
|
<para>The initial steps need to be done as
|
|
<literal>root</literal>.</para>
|
|
</note>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>If it has not already been done, create the
|
|
<literal>portbuild</literal>
|
|
user and group.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<screen>mkdir /var/portbuild/<replaceable>arch</replaceable></screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create a new <application>zfs</application> filesystem:</para>
|
|
|
|
<screen>&prompt.root; zfs create -o mountpoint=/a/portbuild/<replaceable>arch</replaceable> a/portbuild/<replaceable>arch</replaceable></screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<screen>&prompt.root; chown portbuild:portbuild /var/portbuild/<replaceable>arch</replaceable>;
|
|
&prompt.root; chmod 775 /var/portbuild/<replaceable>arch</replaceable>;
|
|
&prompt.root; cd /var/portbuild/<replaceable>arch</replaceable></screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create the <filename>.ssh</filename> directory.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<note>
|
|
<para>The next steps are most easily done as user
|
|
<literal>portbuild</literal>.</para>
|
|
</note>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Create an archive directory for buildlogs and errorlogs
|
|
under <filename>archive/</filename>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>For each branch that will be supported, do the following:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Kick-start the build for the branch with</para>
|
|
|
|
<screen>&prompt.root; build create <replaceable>arch</replaceable> <replaceable>branch</replaceable></screen>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>If you are going to store your historical buildlogs and
|
|
errorlogs on your head node's hard drive, you may skip this step.
|
|
Otherwise:</para>
|
|
|
|
<para>Create an external directory and link to it:</para>
|
|
|
|
<example>
|
|
<title>Creating and linking an external archive directory</title>
|
|
|
|
<screen>&prompt.root; mkdir /dumpster/pointyhat/<replaceable>arch</replaceable>/archive
|
|
&prompt.root; ln -s /dumpster/pointyhat/<replaceable>arch</replaceable>/archive archive</screen>
|
|
</example>
|
|
|
|
<note>
|
|
<para>(Historical note that only applied to the original
|
|
<hostid>pointyhat.FreeBSD.org</hostid> installation)</para>
|
|
|
|
<para>It is possible that <filename>/dumpster/pointyhat</filename>
|
|
will not have enough space. In that case, create the archive
|
|
directory as
|
|
<filename>/dumpster/pointyhat/<replaceable>arch</replaceable>/archive</filename>
|
|
and symlink to that.</para>
|
|
</note>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Populate <filename>clients</filename> as usual.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create a fresh <filename>portbuild.conf</filename> file
|
|
from one of the ones for another architecture.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Create customized
|
|
<filename>portbuild.<replaceable>machinename</replaceable>.conf</filename>
|
|
files as appropriate.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<screen>&prompt.root; cd .ssh && ssh-keygen</screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>If desired,
|
|
edit the <filename>.ssh/config</filename> file for
|
|
convenience in using <application>ssh</application>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>If you need to create any tunnels:</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Make a private configuration directory:</para>
|
|
|
|
<screen>&prompt.root; mkdir /var/portbuild/conf/<replaceable>arch</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>In that directory: create any <filename>dotunnel.*</filename>
|
|
scripts needed.</para>
|
|
</step>
|
|
</procedure>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<note>
|
|
<para>Once again as <literal>root</literal>:</para>
|
|
</note>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Add <replaceable>arch</replaceable> to <makevar>SUPPORTED_ARCHS</makevar> in
|
|
<filename>/var/portbuild/conf/server.conf</filename>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Add the <replaceable>arch</replaceable> directory to
|
|
<filename>/var/portbuild/scripts/zbackup</filename> and
|
|
<filename>/var/portbuild/scripts/zexpire</filename>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Add an appropriate <replaceable>arch</replaceable> entry for
|
|
<filename>/var/portbuild/scripts/dologs</filename> to the portbuild
|
|
<filename>crontab</filename>. (This is a hack and should go away.)</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
|
|
<sect2 id="new-arch-post-qmanager">
|
|
<title>Steps necessary after <application>qmanager</application> is started</title>
|
|
|
|
<note>
|
|
<para>Again as <literal>root</literal>:</para>
|
|
</note>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Tell <application>qmanager</application> about the arch:</para>
|
|
|
|
<screen>python <replaceable>path</replaceable>/qmanager/qclient add_acl name=ports-<replaceable>arch</replaceable> uidlist=ports-<replaceable>arch</replaceable> gidlist=portbuild sense=1</screen>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>For each branch that will be supported, do the following:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para><link linkend="setup">Create
|
|
<filename>bindist.tar</filename></link>.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="new-head-node">
|
|
<title>How to configure a new head node (pointyhat instance)</title>
|
|
|
|
<para>Please talk to Mark Linimon before making any changes
|
|
to this section.</para>
|
|
|
|
<sect2 id="pointyhat-privsep">
|
|
<title>Notes on privilege separation</title>
|
|
|
|
<para>As of January 2013, a rewrite is in progress to further separate
|
|
privileges. The following concepts are introduced:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Server-side user <username>portbuild</username> assumes all
|
|
responsiblity for operations involving builds and communicating
|
|
with the clients. This user no longer has access to
|
|
<application>sudo</application>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Server-side user <username>srcbuild</username> is created
|
|
and given responsiblity for operations involving both VCS
|
|
operations and anything involving src builds for the clients.
|
|
This user does not have access to
|
|
<application>sudo</application>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>The server-side
|
|
<literal>ports-</literal><replaceable>arch</replaceable>
|
|
users go away.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>None of the above server-side users have
|
|
<application>ssh</application> keys. Individual
|
|
<literal>portmgr</literal> will accomplish all those
|
|
tasks using <application>ksu</application>. (This is
|
|
still work-in-progress.)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>The only client-side user is also named
|
|
<username>portbuild</username> and still has access to
|
|
<application>sudo</application> for the purpose of managing
|
|
jails.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>This document has not yet been updated with the latest changes.
|
|
</para>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-basics">
|
|
<title>Basic installation</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Install FreeBSD.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create a user to own the <application>portbuild</application>
|
|
repository, such as <literal>portbuild</literal>. It should have the
|
|
<literal>'*'</literal> password.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Export that value for a later initialization step:</para>
|
|
|
|
<screen>&prompt.root; export PORTBUILD_USER=<replaceable>portbuild</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Similarly, create a user to own the <application>svn</application>
|
|
repository, such as <literal>srcbuild</literal>. It should have the
|
|
<literal>'*'</literal> password.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Export that value for a later initialization step:</para>
|
|
|
|
<screen>&prompt.root; export SRCBUILD_USER=<replaceable>srcbuild</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Add the following to <filename>/boot/loader.conf</filename>:</para>
|
|
|
|
<programlisting>console="vidconsole,comconsole"</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>You should run the cluster on UTC. If you have not set the clock
|
|
to UTC:</para>
|
|
|
|
<programlisting>&prompt.root; cp -p /usr/share/zoneinfo/Etc/UTC /etc/localtime</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create the appropriate
|
|
<filename>/etc/rc.conf</filename>.</para>
|
|
|
|
<para>Required entries:</para>
|
|
|
|
<programlisting>hostname="<replaceable>${hostname}</replaceable>"
|
|
sshd_enable="YES"
|
|
zfs_enable="YES"</programlisting>
|
|
|
|
<para>Recommended entries:</para>
|
|
|
|
<programlisting>background_fsck="NO"
|
|
clear_tmp_enable="YES"
|
|
dumpdev="AUTO"
|
|
fsck_y_enable="YES"
|
|
|
|
apache22_enable="YES"
|
|
apache_flags=""
|
|
apache_pidfile="/var/run/httpd.pid"
|
|
gmetad_enable="YES"
|
|
gmond_enable="YES"
|
|
inetd_enable="YES"
|
|
inetd_flags="-l -w"
|
|
mountd_enable="YES"
|
|
nfs_server_enable="YES"
|
|
nfs_server_flags="-u -t -n 12"
|
|
nfs_remote_port_only="YES"
|
|
ntpd_enable="YES"
|
|
rpcbind_enable="YES"
|
|
rpc_lockd_enable="NO"
|
|
rpc_statd_enable="YES"
|
|
sendmail_enable="NONE"
|
|
smartd_enable="YES"</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create <filename>/etc/resolv.conf</filename>, if
|
|
necessary.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create the appropriate files in
|
|
<filename>/etc/ssh/</filename>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Add the following to <filename>/etc/sysctl.conf</filename>:</para>
|
|
|
|
<programlisting>kern.maxfiles=40000
|
|
kern.maxfilesperproc=38000
|
|
sysctl vfs.usermount=1
|
|
sysctl vfs.zfs.super_owner=1</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Make sure the following change is made to
|
|
<filename>/etc/ttys</filename>:</para>
|
|
|
|
<programlisting>ttyu0 "/usr/libexec/getty std.9600" vt100 on secure</programlisting>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-src">
|
|
<title>Configuring <filename>src</filename></title>
|
|
|
|
<para>You should be able to install from the most recent release
|
|
using only the default kernel configuration.</para>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-ports">
|
|
<title>Configuring <filename>ports</filename></title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>The following ports (or their latest successors) are required:</para>
|
|
|
|
<programlisting>databases/py-sqlite3
|
|
databases/py-sqlalchemy (only SQLITE is needed)
|
|
devel/git (WITH_SVN)
|
|
devel/py-configobj
|
|
devel/py-setuptools
|
|
devel/subversion
|
|
net/nc
|
|
net/rsync
|
|
sysutils/ganglia-monitor-core (with GMETAD off)
|
|
sysutils/ganglia-webfrontend (compile with -DWITHOUT_X11)
|
|
www/apache22 (with EXT_FILTER)</programlisting>
|
|
|
|
<para>Expect those to bring in, among others:</para>
|
|
|
|
<programlisting>databases/sqlite3
|
|
lang/perl-5.14 (or successor)
|
|
lang/python27 (or sucessor)</programlisting>
|
|
|
|
<para>The following ports (or their latest successors) are strongly suggested:</para>
|
|
|
|
<programlisting>devel/ccache
|
|
mail/postfix
|
|
net/isc-dhcp41-server
|
|
ports-mgmt/pkg
|
|
ports-mgmt/portaudit
|
|
ports-mgmt/portmaster
|
|
shells/bash
|
|
shells/zsh
|
|
sysutils/screen</programlisting>
|
|
|
|
<note>
|
|
<para>The use of <application>sudo</application> on the master,
|
|
which was formerly required, is
|
|
<emphasis>no longer recommended</emphasis>.
|
|
</para>
|
|
</note>
|
|
|
|
<para>The following ports (or their latest successors) are handy:</para>
|
|
|
|
<programlisting>benchmarks/bonnie++
|
|
ports-mgmt/pkg_tree
|
|
sysutils/dmidecode
|
|
sysutils/smartmontools
|
|
sysutils/zfs-stats</programlisting>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-zfs-volume">
|
|
<title>Configuring the zfs volume and setting up the repository</title>
|
|
|
|
<para>The following steps need to be done as euid root.</para>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Pick a <application>zfs</application> volume name and export
|
|
it. We have used <replaceable>a</replaceable> so far to date.</para>
|
|
|
|
<programlisting>&prompt.root; export ZFS_VOLUME=<replaceable>a</replaceable></programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Pick a mountpoint and export it. We have used
|
|
<filename>/<replaceable>a</replaceable></filename> so far to date.</para>
|
|
|
|
<screen>&prompt.root; export ZFS_MOUNTPOINT=/<replaceable>a</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create the <application>zfs</application> volume
|
|
and mount it.</para>
|
|
|
|
<example>
|
|
<title>Creating a <application>zfs</application> volume for portbuild</title>
|
|
|
|
<screen>&prompt.root; zpool create ${ZFS_VOLUME} mirror da1 da2 mirror da3 da4 mirror da5 da6 mirror da7 da8</screen>
|
|
</example>
|
|
|
|
<note>
|
|
<para>We will define a <application>zfs</application>
|
|
<literal>permission set</literal> below, so that the
|
|
<replaceable>portbuild</replaceable> user may administer this
|
|
volume without having to have root privileges.</para>
|
|
</note>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Select an <application>svn</application> repository
|
|
and export it. See the
|
|
<ulink url="&url.books.handbook;/mirrors-svn.html">&os; Handbook</ulink>
|
|
for the currently supported list.</para>
|
|
|
|
<screen>&prompt.root; export VCS_REPOSITORY=<replaceable>svn://svn0.us-east.FreeBSD.org</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Obtain a copy of the kickstart script into a
|
|
temporary directory. (You will not need to keep this
|
|
directory later.)</para>
|
|
|
|
<screen>&prompt.root; mkdir -p /home/<replaceable>portbuild</replaceable>/<replaceable>tmp</replaceable>
|
|
&prompt.root; svn checkout ${VCS_REPOSITORY}/base/projects/portbuild/admin/tools /home/<replaceable>portbuild</replaceable>/<replaceable>tmp</replaceable></screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Run the kickstart script:</para>
|
|
|
|
<screen>&prompt.root; sh /home/<replaceable>portbuild</replaceable>/<replaceable>tmp</replaceable>/mkportbuild</screen>
|
|
|
|
<para>This will accomplish all the following 5 steps:</para>
|
|
|
|
<procedure>
|
|
|
|
<!-- begin of whitespace-broken area -->
|
|
<step>
|
|
<para>Create the <filename>portbuild</filename> directory:</para>
|
|
|
|
<screen>&prompt.root; mkdir -p ${ZFS_MOUNTPOINT}/portbuild</screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Create and mount a new <application>zfs</application>
|
|
filesystem on it:</para>
|
|
|
|
<screen>zfs create -o mountpoint=${ZFS_MOUNTPOINT}/portbuild ${ZFS_VOLUME}/portbuild</screen>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Set up the directory:</para>
|
|
|
|
<screen>&prompt.root; chown ${PORTBUILD_USER}:${PORTBUILD_USER} ${ZFS_MOUNTPOINT}/portbuild
|
|
&prompt.root; chmod 775 ${ZFS_MOUNTPOINT}/portbuild
|
|
&prompt.root; ln -sf ${ZFS_MOUNTPOINT}/portbuild /var/portbuild</screen>
|
|
|
|
<note>
|
|
<para>The <command>ln</command> is necessary due to a number
|
|
of hardcoded paths. This is a bug.</para>
|
|
</note>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Set up the initial repository:</para>
|
|
|
|
<screen>&prompt.user; svn checkout ${VCS_REPOSITORY}/base/projects/portbuild ${ZFS_MOUNTPOINT}/portbuild</screen>
|
|
</step>
|
|
<!-- end of whitespace-broken area -->
|
|
|
|
<step>
|
|
<para>Set up the <application>zfs</application>
|
|
<literal>permission sets</literal>.</para>
|
|
</step>
|
|
</procedure>
|
|
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="portbuild-repo-configuration">
|
|
<title>Configuring the <application>portbuild</application> files</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Configure how build slaves will talk to your server
|
|
by making the following changes to
|
|
<filename>/<replaceable>a</replaceable>/portbuild/conf/client.conf</filename>:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Set <makevar>CLIENT_NFS_MASTER</makevar> to wherever
|
|
your build slaves will PXE boot from. (Possibly, the
|
|
hostname of your server.)</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>CLIENT_BACKUP_FTP_SITE</makevar>
|
|
to a backup site for FTP fetches; again, possibly
|
|
the hostname of your server.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>CLIENT_UPLOAD_HOST</makevar> to
|
|
where completed packages will be uploaded.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Most of the other default values should be fine.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Most of the default values in
|
|
<filename>/<replaceable>a</replaceable>/portbuild/conf/common.conf</filename>
|
|
should be fine. This file holds definitions used by
|
|
both the server and all its clients.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Configure the server by making the following changes to
|
|
<filename>/<replaceable>a</replaceable>/portbuild/conf/server.conf</filename>:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Set <makevar>SUPPORTED_ARCHS</makevar> to the
|
|
list of architectures you wish to build packages for.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>For each source branch you will be building for, set
|
|
<makevar>SRC_BRANCHES</makevar> and
|
|
<makevar>SRC_BRANCH_<replaceable>branch</replaceable>_SUBDIR</makevar>
|
|
as detailed in <xref linkend="new-branch-pre-qmanager"/>.
|
|
You should not need to change
|
|
<makevar>SRC_BRANCHES_PATTERN</makevar>.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>ZFS_VOLUME</makevar> and
|
|
<makevar>ZFS_MOUNTPOINT</makevar> to whatever you
|
|
chose above.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>UPLOAD_DIRECTORY</makevar>,
|
|
<makevar>UPLOAD_TARGET</makevar>, and
|
|
<makevar>UPLOAD_USER</makevar> as appropriate
|
|
for your site.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>VCS_REPOSITORY</makevar> to whatever
|
|
you chose above.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>Set <makevar>MASTER_URL</makevar> to the http
|
|
URL of your server. This will be stamped into the
|
|
package build logs and the indices thereof.</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>Most of the other default values should be fine.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-pre-qmanager">
|
|
<title>pre-<application>qmanager</application></title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>For each architecture, follow the steps in
|
|
<xref linkend="new-arch-pre-qmanager"/>.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-qmanager">
|
|
<title><application>qmanager</application></title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Copy the following files from
|
|
<filename>/a/portbuild/admin/etc/rc.d/</filename> to
|
|
<filename>/usr/local/etc/rc.d/</filename>:</para>
|
|
|
|
<programlisting>pollmachine
|
|
qmanager</programlisting>
|
|
|
|
<para>As root, start each one of them. You may find it handy
|
|
to start each under <application>screen</application> for
|
|
debugging purposes.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Initialize the <application>qmanager</application>
|
|
database's acl list:</para>
|
|
|
|
<note>
|
|
<para>This should now be automatically done for you by
|
|
the first <command>build</command> command.</para>
|
|
</note>
|
|
|
|
<screen>&prompt.root; python /<replaceable>a</replaceable>/portbuild/qmanager/qclient add_acl name=deny_all uidlist= gidlist= sense=0</screen>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-src-ports-repos">
|
|
<title>Creating src and ports repositories</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>As the <replaceable>srcbuild</replaceable> user,
|
|
run the following commands manually to create the
|
|
<literal>src</literal> and <literal>ports</literal>
|
|
repositories, respectively:</para>
|
|
|
|
<screen>&prompt.user; /<replaceable>a</replaceable>/portbuild/admin/scripts/updatesnap.ports
|
|
&prompt.user; /<replaceable>a</replaceable>/portbuild/admin/scripts/updatesnap</screen>
|
|
|
|
<para>These will be periodically run from the
|
|
<replaceable>srcbuild</replaceable>
|
|
<filename>crontab</filename>, which you will
|
|
install below.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-other-services">
|
|
<title>Other services</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>Configure
|
|
<filename>/usr/local/etc/apache22/httpd.conf</filename>
|
|
as appropriate for your site.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Copy <filename>/a/portbuild/admin/conf/apache.conf</filename>
|
|
to the appropriate <filename>Includes/</filename> subdirectory, e.g.,
|
|
<filename>/usr/local/etc/apache22/Includes/portbuild.conf</filename>.
|
|
Configure it as appropriate for your site.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Install <filename>/a/portbuild/admin/crontabs/portbuild</filename> as
|
|
the <username>portbuild</username> crontab via
|
|
<command>crontab -u portbuild -e</command>. If you do
|
|
not support all the archs listed there, make sure to comment out
|
|
the appropriate <application>dologs</application> entries.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Install <filename>/a/srcbuild/admin/crontabs/portbuild</filename> as
|
|
the <username>srcbuild</username> crontab via
|
|
<command>crontab -u srcbuild -e</command>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>If your build slaves will be pxebooted, make sure to
|
|
enable the <application>tftp</application> entries in
|
|
<filename>/etc/inetd.conf</filename>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>Configure mail by doing the following:</para>
|
|
|
|
<para><command>newaliases</command>.</para>
|
|
</step>
|
|
</procedure>
|
|
</sect2>
|
|
|
|
<sect2 id="pointyhat-finishing-up">
|
|
<title>Finishing up</title>
|
|
|
|
<procedure>
|
|
<step>
|
|
<para>For each architecture, follow the steps in
|
|
<xref linkend="new-arch-post-qmanager"/>.</para>
|
|
</step>
|
|
|
|
<step>
|
|
<para>You will probably find it handy to append
|
|
the following to the <makevar>PATH</makevar> definition for
|
|
the <replaceable>portbuild</replaceable> user:</para>
|
|
|
|
<programlisting>/<replaceable>a</replaceable>/portbuild/scripts:/<replaceable>a</replaceable>/portbuild/tools</programlisting>
|
|
</step>
|
|
|
|
<step>
|
|
<para>You will also probably find it handy to append
|
|
the following to the <makevar>PATH</makevar> definition for
|
|
the <replaceable>srcbuild</replaceable> user:</para>
|
|
|
|
<programlisting>/<replaceable>a</replaceable>/portbuild/admin/scripts:/<replaceable>a</replaceable>/portbuild/admin/tools</programlisting>
|
|
</step>
|
|
</procedure>
|
|
|
|
<para>You should now be ready to build packages.</para>
|
|
</sect2>
|
|
</sect1>
|
|
|
|
<sect1 id="disk-failure">
|
|
<title>Procedures for dealing with disk failures</title>
|
|
|
|
<note>
|
|
<para>The following section is particular to <hostid>freebsd.org</hostid>
|
|
and is somewhat obsolete.</para>
|
|
</note>
|
|
|
|
<para>When a machine has a disk failure (e.g., panics due to read errors,
|
|
etc), then we should do the following steps:</para>
|
|
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>Note the time and failure mode (e.g., paste in the
|
|
relevant console output) in
|
|
<filename>/var/portbuild/<replaceable>${arch}</replaceable>/reboots</filename></para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>For i386 gohan clients, scrub the disk by touching
|
|
<filename>/SCRUB</filename> in the nfsroot (e.g.,
|
|
<filename>/a/nfs/8.dir1/SCRUB</filename>) and rebooting. This will
|
|
<command>dd if=/dev/zero of=/dev/ad0</command> and force the drive to
|
|
remap any bad sectors it finds, if it has enough spares left. This is
|
|
a temporary measure to extend the lifetime of a drive that is on the
|
|
way out.</para>
|
|
|
|
<note>
|
|
<para>For the i386 blade systems another signal of a failing
|
|
disk seems to be that the blade will completely hang and be
|
|
unresponsive to either console break, or even NMI.</para>
|
|
</note>
|
|
|
|
<para>For other build systems that do not newfs their disk at boot (e.g.,
|
|
amd64 systems) this step has to be skipped.</para>
|
|
</listitem>
|
|
|
|
<listitem>
|
|
<para>If the problem recurs, then the disk is probably toast.
|
|
Take the machine out of <filename>mlist</filename> and (for ata disks)
|
|
run <command>smartctl</command> on the drive:</para>
|
|
|
|
<screen>smartctl -t long /dev/ad0</screen>
|
|
|
|
<para>It will take about 1/2 hour:</para>
|
|
|
|
<screen>gohan51# smartctl -t long /dev/ad0
|
|
smartctl version 5.38 [i386-portbld-freebsd8.0] Copyright (C) 2002-8
|
|
Bruce Allen
|
|
Home page is http://smartmontools.sourceforge.net/
|
|
|
|
=== START OF OFFLINE IMMEDIATE AND SELF-TEST SECTION ===
|
|
Sending command: "Execute SMART Extended self-test routine immediately in off-line mode".
|
|
Drive command "Execute SMART Extended self-test routine immediately in off-line mode" successful.
|
|
Testing has begun.
|
|
Please wait 31 minutes for test to complete.
|
|
Test will complete after Fri Jul 4 03:59:56 2008
|
|
|
|
Use smartctl -X to abort test.</screen>
|
|
|
|
<para>Then <command>smartctl -a /dev/ad0</command> shows the status
|
|
after it finishes:</para>
|
|
|
|
<screen># SMART Self-test log structure revision number 1
|
|
# Num Test_Description Status Remaining
|
|
LifeTime(hours) LBA_of_first_error
|
|
# 1 Extended offline Completed: read failure 80% 15252 319286</screen>
|
|
|
|
<para>It will also display other data including a log of previous drive
|
|
errors. It is possible for the drive to show previous DMA errors
|
|
without failing the self-test though (because of sector
|
|
remapping).</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
|
|
<para>When a disk has failed, please inform the cluster administrators
|
|
so we can try to get it replaced.</para>
|
|
</sect1>
|
|
</article>
|