From 037fc22517361d3a9973cb8dc09040c378c2d913 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Thu, 9 Jul 2026 10:18:21 +0300 Subject: packages: harden NetBSD dtail pipeline (review findings) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Makefile: .SHELLFLAGS := -ec — with .ONESHELL a failing intermediate recipe line (remote pkg_create, scp, PV upload) previously did not stop the recipe and make exited 0; also remove stale /tmp package artifacts at target start so a failed build can never silently re-upload an old tgz, guard against an empty extracted version, and quote the tr operand - dtail-netbsd.json.tpl + rc.d: move the SSH host key from volatile /var/run/dserver/cache to persistent /var/db/dserver/ssh_host_key so it survives reboots (clients re-accept the key once after upgrade) - pkg-dtail-netbsd.sh: reject a missing version argument; write the pkg_summary via a temp file so a pkg_info failure cannot publish a truncated pkg_summary.gz; document that the dserver user/group is a deliberate manual install step - key-cache template: comment now states the daily cron entry is added manually at install time (documented in the pkgrepo skill) Co-Authored-By: Claude Fable 5 --- frontends/scripts/dserver-update-key-cache-netbsd.sh.tpl | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'frontends/scripts') diff --git a/frontends/scripts/dserver-update-key-cache-netbsd.sh.tpl b/frontends/scripts/dserver-update-key-cache-netbsd.sh.tpl index c50cb72..e30d21f 100644 --- a/frontends/scripts/dserver-update-key-cache-netbsd.sh.tpl +++ b/frontends/scripts/dserver-update-key-cache-netbsd.sh.tpl @@ -1,7 +1,9 @@ #!/bin/sh # Refresh the dserver SSH key cache from user authorized_keys files. # NetBSD variant: called from the dserver rc.d start_precmd (because -# /var/run is volatile across reboots) and from a daily root cron job. +# /var/run is volatile across reboots) and from a daily root cron job that +# is added manually at install time (not by the package) — see the pkgrepo +# skill's dtail-package.md for the crontab entry. CACHEDIR=/var/run/dserver/cache DSERVER_USER=dserver -- cgit v1.2.3