<feed xmlns='http://www.w3.org/2005/Atom'>
<title>wireguard-openbsd/Makefile, branch master</title>
<subtitle>WireGuard implementation for the OpenBSD kernel</subtitle>
<id>https://git.zx2c4.com/wireguard-openbsd/atom/Makefile?h=master</id>
<link rel='self' href='https://git.zx2c4.com/wireguard-openbsd/atom/Makefile?h=master'/>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/'/>
<updated>2020-04-05T20:14:14Z</updated>
<entry>
<title>minor cranking of libraries exposes a problem, details too long to explain.</title>
<updated>2020-04-05T20:14:14Z</updated>
<author>
<name>deraadt</name>
<email>deraadt@openbsd.org</email>
</author>
<published>2020-04-05T20:14:14Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=f2a208ef804ca96d0fab5d6be9051ef8d14a76ca'/>
<id>urn:sha1:f2a208ef804ca96d0fab5d6be9051ef8d14a76ca</id>
<content type='text'>
Run ldconfig -R after installing base libraries, and once again after
installing gnu libraries.
ok kettenis
</content>
</entry>
<entry>
<title>a few depend:-related thingies that were still in.</title>
<updated>2019-12-21T21:39:59Z</updated>
<author>
<name>espie</name>
<email>espie@openbsd.org</email>
</author>
<published>2019-12-21T21:39:59Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=3367dcf595ba746330d95b4c926ae4b05b798c0c'/>
<id>urn:sha1:3367dcf595ba746330d95b4c926ae4b05b798c0c</id>
<content type='text'>
okay millert@, tb@
</content>
</entry>
<entry>
<title>bye bye depends</title>
<updated>2017-07-05T10:22:32Z</updated>
<author>
<name>espie</name>
<email>espie@openbsd.org</email>
</author>
<published>2017-07-05T10:22:32Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=6340e171d8eb9361baa33ff251489f0e7ba78536'/>
<id>urn:sha1:6340e171d8eb9361baa33ff251489f0e7ba78536</id>
<content type='text'>
okay tb@ deraadt@
</content>
</entry>
<entry>
<title>mark newish phony targets as phony.</title>
<updated>2017-04-14T21:37:15Z</updated>
<author>
<name>espie</name>
<email>espie@openbsd.org</email>
</author>
<published>2017-04-14T21:37:15Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=60fd9b1090d630a99ff7a7109a5f56124bed6460'/>
<id>urn:sha1:60fd9b1090d630a99ff7a7109a5f56124bed6460</id>
<content type='text'>
okay tb@
</content>
</entry>
<entry>
<title>Ensure the build user can write to the GLOBAL_AUTOCONF_CACHE file by</title>
<updated>2017-01-29T17:06:56Z</updated>
<author>
<name>rpe</name>
<email>rpe@openbsd.org</email>
</author>
<published>2017-01-29T17:06:56Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=92d422c27679688ea6c6b5b3a5fd8b149be0c3fc'/>
<id>urn:sha1:92d422c27679688ea6c6b5b3a5fd8b149be0c3fc</id>
<content type='text'>
creating or truncating it with the proper ownership and permissions.

OK tb@
</content>
</entry>
<entry>
<title>Enable builds with a dedicated user that cannot elevate privileges or write</title>
<updated>2016-11-19T14:20:58Z</updated>
<author>
<name>tb</name>
<email>tb@openbsd.org</email>
</author>
<published>2016-11-19T14:20:58Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=46df90c2f4445e41648f4f318c82e3d630096f0f'/>
<id>urn:sha1:46df90c2f4445e41648f4f318c82e3d630096f0f</id>
<content type='text'>
to /usr/src or /usr/xenocara.

Change /usr/{,x}obj to owner build:wobj with mode 770 and install the
systemwide makefiles before starting a build.  The root of the noperm fs
containing DESTDIR should also be owned by build:wobj.

Developers will need to add their users to group wobj to be able to write
to /usr/{,x}obj/.

"push forward" deraadt; testing, input &amp; ok rpe
</content>
</entry>
<entry>
<title>Swap 'make cleandir' and 'make includes' for real.</title>
<updated>2016-10-18T02:47:07Z</updated>
<author>
<name>tb</name>
<email>tb@openbsd.org</email>
</author>
<published>2016-10-18T02:47:07Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=57fb2d252f84dc39f9e832dab8451262ab7ef38e'/>
<id>urn:sha1:57fb2d252f84dc39f9e832dab8451262ab7ef38e</id>
<content type='text'>
Should have been part of commitid uHRFWpwUBjIz0UuR.

Original message:

Move libcrypto, librpcsvc and gnu/usr.bin/cc/include from RDIRS to PRDIRS,
and add prereq targets, so some header files are generated by BUILDUSER
during 'make prereq' instead of by root during 'make includes'.

Switch the order of 'make cleandir' and 'make includes' during 'make build'
so we don't generate many files twice.

Except for some machine@ symlinks from ${MACHINE}/stand, /usr/obj is now
clean from files generated by root during 'make build'. Those will be
cleaned up in a second step.

help, testing &amp; ok deraadt, input from natano, further testing rpe
</content>
</entry>
<entry>
<title>Print the root check error message to stderr. While there add the name</title>
<updated>2016-10-06T18:56:17Z</updated>
<author>
<name>natano</name>
<email>natano@openbsd.org</email>
</author>
<published>2016-10-06T18:56:17Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=0afaca0c6d0be005bd6d442d79952668059c8937'/>
<id>urn:sha1:0afaca0c6d0be005bd6d442d79952668059c8937</id>
<content type='text'>
of the target to the message to be more descriptive.

ok deraadt tb
</content>
</entry>
<entry>
<title>Simplify the 'make includes' step in 'make build': move the privdrop</title>
<updated>2016-10-06T16:22:43Z</updated>
<author>
<name>tb</name>
<email>tb@openbsd.org</email>
</author>
<published>2016-10-06T16:22:43Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=192f59d447bf8644ae9f60419fa6caeb3a436b33'/>
<id>urn:sha1:192f59d447bf8644ae9f60419fa6caeb3a436b33</id>
<content type='text'>
bit up into 'make includes', so the latter benefits from that idiom
as well. Sprinkle a few 'exec' while there.

ok natano
</content>
</entry>
<entry>
<title>De-escalate to an unprivileged users during 'make build' and 'make release'.</title>
<updated>2016-10-05T18:00:41Z</updated>
<author>
<name>natano</name>
<email>natano@openbsd.org</email>
</author>
<published>2016-10-05T18:00:41Z</published>
<link rel='alternate' type='text/html' href='https://git.zx2c4.com/wireguard-openbsd/commit/?id=2a3ca3e957821cd3dce7f979168894ab5128cf03'/>
<id>urn:sha1:2a3ca3e957821cd3dce7f979168894ab5128cf03</id>
<content type='text'>
- If you start make build as root, everything will be run as root.
  Nothing new here. New is, that you can set BUILDUSER=somebody and the
  unprived parts will be run as somebody.
- If you start make build with sudo, the unprived parts will be run as
  the real user (meaning YOU). You can still set BUILDUSER=somebody and
  the uprived parts will run as somebody.
- If you start make build as a normal user it will error out. "I'm sorry
  Dave."

Note that DESTDIR must be on partition with the noperm flag set for make
release to work correctly as an unprivileged user.

idea and ok deraadt
input and ok tb ratchov millert
rpe, halex and probably others where part of the conversation to make
this happen, thanks!
</content>
</entry>
</feed>
