Packages update Request

dvserg · Oct 15, 2009, 5:08 AM

Sorry guys, I was busy in September. How to appear a little free time - I'll do anything. :-\

jimp · Oct 15, 2009, 3:29 PM

Sorry guys, I was busy in September. How to appear a little free time - I'll do anything. :-\

dvserg,

Thanks for all the great work you've done. I updated the squid and squidguard package to work properly on NanoBSD – Namely adding conf_mount_rw(); and conf_mount_ro(); calls around where disk writes were needed, making sure file downloads go to /root and not /tmp (since /tmp is very small on NanoBSD), and so on. I have not been able to get to the HAVP package, however. I'm not sure what changes may need to be made in order to make it work there, since the RAM and writable space are limited it may not work at all. You can review my commits to the package repository over the past week and see what I have done.

If you could take a look at the HAVP package code and see if you can come up with a way to make that work it would be appreciated. I suppose forcing a RAM disk for scanning would be ideal, but that would also limit the file scan size a bit. Probably a good idea to limit it anyhow, since the resources are limited in general when dealing with embedded systems.

Feel free to say "sorry, I don't think it will work" also, that's a valid choice, but we'd like to open as many packages up for NanoBSD as possible.

Thanks!

josteinc · Oct 15, 2009, 10:04 PM

@dotdash:

I believe dsverg was commenting on the squidguard package and not any others.
billm did a lot of work on the IMspector package. If you want it updated, I would suggest starting a bounty and he might find the time to work on it again.

I'm kinda new to this forum, so pardon my stupid questions. How to start a bounty?

ColdFusion · Oct 16, 2009, 1:47 AM

Under Post a Bounty.

danswartz · Oct 19, 2009, 6:11 PM

No news on havp/embedded, I take it? I really like having the nanobsd setup, but I may have to switch back to the HD install I was using, since I am not wild about having no antivirus setup.

danswartz · Oct 19, 2009, 11:37 PM

Just noticed the nano platform now has a dashboard widget for havp? Does this mean havp is being worked on? If not, I'm not sure what the point is?

jimp · Oct 19, 2009, 11:39 PM

I just forgot to tag the havp widget as not being for embedded, but I would like to see havp working on nanobsd if possible. I haven't had any more time to look at it.

danswartz · Oct 19, 2009, 11:45 PM

bummer, i had high hopes :) Is there any way I can help with this? I work with software for a living, so I'm not out of my depth here…

jimp · Oct 19, 2009, 11:49 PM

I outlined what needs to happen a few posts back when I addressed a post toward dvserg. Basically any time that the package needs to write to the CF, it needs to first switch to read/write mode and then back to read only mode when complete. This would be for config changes, writing out an RC script, updating virus defs, etc.

Also, HDD scanning would have to be disabled, and only RAM disk scanning allowed, since there is no HDD. (Eventually I suppose support could be added to allow using external storage such as a USB HDD, but that is beyond the scope of what we're doing right now)

File activity in /tmp and /var need to be limited as well. You can write small files there all the time but nothing large, as it is also a RAM-based disk.

danswartz · Oct 19, 2009, 11:51 PM

Okay, this sounds manageable, given that I am on a learning curve here (bsd pkg system). Would I take the HD version of the package and make those changes? If so, where would I get it?

jimp · Oct 19, 2009, 11:59 PM

It's not the bsd package system you'd be dealing with, but the pfSense package system.

You can checkout the pfSense packages repo from git if you want to look at the individual packages.

danswartz · Oct 20, 2009, 12:08 AM

sorry for the confusion. i'm aware there is a difference - i was referring to the pkg_* system, which is specific to BSD, not (for example) linux. i will take a look…

jimp · Oct 20, 2009, 12:10 AM

Ah… well, the pfSense package stuff is mainly XML and PHP. In this case, all of the changes will probably be in the PHP code for the package.

danswartz · Oct 20, 2009, 12:20 AM

I am not clear if there is a difference between the embedded versions and the full versions, in terms of: are there different actual packages, or does the package have to figure out the operating environment and act accordingly?

jimp · Oct 20, 2009, 12:31 AM

There is no difference in packages. If any platform-specific code is needed, you can check /etc/platform, if the file contains the text "nanobsd" then it's on nanobsd.

The functions to mount things read/write and read only are basically a no-op on full installs, so they can be inserted where needed and will only affect nanobsd.

danswartz · Oct 20, 2009, 12:38 AM

cool thanks!

jimp · Oct 21, 2009, 6:46 PM

I split the package development questions off into its own thread:
http://forum.pfsense.org/index.php/topic,19986.0.html

dvserg · Oct 22, 2009, 7:04 AM

How possible update pfSense packages-7 tree ?

jimp · Oct 22, 2009, 12:08 PM

@dvserg:

How possible update pfSense packages-7 tree ?

I think only GeekGod, cmb, and a few others have access to that. They have to manually place new files there. Do you have a file that needs updated or changed? You can probably open a redmine ticket to get it done and they'll pick it up.

dvserg · Oct 22, 2009, 2:00 PM

Thanks
I see a way ::)