cirrus-ci: move package_check after test

Liveness is often more important than minor packaging glitches (which
might well be the fault of a prior commit.)

Reviewed by: emaste
Differential Revision:

cirrus-ci: move package_check after test

Liveness is often more important than minor packaging glitches (which
might well be the fault of a prior commit.)

Reviewed by: emaste
Differential Revision: https://reviews.freebsd.org/D55481

show more ...

Update vendor/libarchive to 3.8.5

Important bugfixes:
#2809 bsdtar: fix regression from 3.8.4 zero-length pattern issue bugfix

Obtained from: libarchive
Vendor commit: dd897a78c662a2c7a003e7ec158c

Update vendor/libarchive to 3.8.5

Important bugfixes:
#2809 bsdtar: fix regression from 3.8.4 zero-length pattern issue bugfix

Obtained from: libarchive
Vendor commit: dd897a78c662a2c7a003e7ec158cea7909557bee

show more ...

.cirrus.yml: Add persistent worker

As we have received an external box sponsored by NetActuate we can now
enable the pre-commit tasks to be run in this box.

Once we have enabled this debug if there

.cirrus.yml: Add persistent worker

As we have received an external box sponsored by NetActuate we can now
enable the pre-commit tasks to be run in this box.

Once we have enabled this debug if there are any errors and after
confirmation we can enable this for other tasks too.

Sponsored by: NetActuate
Sponsored by: The FreeBSD Foundation

Approved by: emaste, lwhsu
Differential Revision: https://reviews.freebsd.org/D54220

show more ...

Cirrus-CI: Bump to FreeBSD 15.0-RELEASE

Signed-off-by: Siva Mahadevan <me@svmhdvn.name>
Reviewed by: asomers
Pull request: https://github.com/freebsd/freebsd-src/pull/1929
Sponsored by: The FreeBSD

Cirrus-CI: Bump to FreeBSD 15.0-RELEASE

Signed-off-by: Siva Mahadevan <me@svmhdvn.name>
Reviewed by: asomers
Pull request: https://github.com/freebsd/freebsd-src/pull/1929
Sponsored by: The FreeBSD Foundation

show more ...

Update vendor/libarchive to 3.8.4

Important bugfixes:
#2787 bsdtar: Fix zero-length pattern issue
#2797 lib: Fix regression introduced in libarchive 3.8.2
when walking enterable but un

Update vendor/libarchive to 3.8.4

Important bugfixes:
#2787 bsdtar: Fix zero-length pattern issue
#2797 lib: Fix regression introduced in libarchive 3.8.2
when walking enterable but unreadable directories

Obtained from: libarchive
Vendor commit: d114ceee6de08a7a60ff1209492ba38bf9436f79

show more ...

Update vendor/libarchive to 3.8.3

Important bugfixes:
#2753 lib: Create temporary files in the target directory
#2768 lha: Fix for an out-of-bounds buffer overrun when using
p[H

Update vendor/libarchive to 3.8.3

Important bugfixes:
#2753 lib: Create temporary files in the target directory
#2768 lha: Fix for an out-of-bounds buffer overrun when using
p[H_LEVEL_OFFSET]
#2769 7-zip: Fix a buffer overrun when reading truncated 7zip headers
#2771 lz4 and zstd: Support both lz4 and zstd data with leading
skippable frames

Obtained from: libarchive
Vendor commit: 1368b08875351df8aa268237b882c8f4ceb0882d

show more ...

Cirrus-CI: Bump to FreeBSD 14.3 image

Sponsored by: The FreeBSD Foundation

Cirrus-CI: Switch back to tzst packages, but use level 1

We previously used `PKG_FORMAT: tar` to avoid spending a lot of time in
zstd compression. Instead just set PKG_LEVEL to compression level 1,

Cirrus-CI: Switch back to tzst packages, but use level 1

We previously used `PKG_FORMAT: tar` to avoid spending a lot of time in
zstd compression. Instead just set PKG_LEVEL to compression level 1,
which still produces packages that are much smaller than uncompressed
tarballs with only a small penalty in build time.

Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D52858

show more ...

Cirrus-CI: Build packages in parallel

Reviewed by: ivy
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D52857

Cirrus-CI: Use nproc instead of sysctl -n hw.ncpu

It is available on all supproted FreeBSD versions.

Sponsored by: The FreeBSD Foundation

Revert ".cirrus.yml: Reenable CI with pre-commit CI scripts"

This reverts commit 676d64ee8327851063d92d0dd6a4ceee6b3a25e6.

These tests take a combined 3h to run and are consuming our montly
Cirrus-

Revert ".cirrus.yml: Reenable CI with pre-commit CI scripts"

This reverts commit 676d64ee8327851063d92d0dd6a4ceee6b3a25e6.

These tests take a combined 3h to run and are consuming our montly
Cirrus-CI credits in short order, before failing.

In the PR markj reports that the failure appeared somewhere between:

good: da64f6e047b5f6cd9b9e8450d19072cb0b6e44d0
bad: b197d2abcb6895d78bc9df8404e374397aa44748

Unfortunately, even after we find the offending commit and have a fix we
still do not have sufficient monthly compute credit. Disable these
tests for now, pending a solution to both issues.

PR: 289696
Reviewed by: ngie
Differential Revision: https://reviews.freebsd.org/D52618

show more ...

.cirrus.yml: Reenable CI with pre-commit CI scripts

These CI works were disabled as we had been suppressing build logs for
developers running CI. That has been addressed by adding a new variable
cal

.cirrus.yml: Reenable CI with pre-commit CI scripts

These CI works were disabled as we had been suppressing build logs for
developers running CI. That has been addressed by adding a new variable
called CIENV. So reenable the tests.

Approved by: lwhsu
Differential Revision: https://reviews.freebsd.org/D51178
Event: Oslo Hackthon 202508

show more ...

.cirrus.yml: Switch to manual mode for internal CI

Pre-commit CI task using the FreeBSD internal CI system silences the
build logs. This is hard to decode the actual problem on why a build is
failin

.cirrus.yml: Switch to manual mode for internal CI

Pre-commit CI task using the FreeBSD internal CI system silences the
build logs. This is hard to decode the actual problem on why a build is
failing without any clue as the buildlogs are removed once the task
fails.

For now disable the tasks using manual trigger_type.

Approved by: emaste (irc)

show more ...

tests/ci: Pre-commit CI with CIRRUS-CI

Currently we do not have pre-commit testing mechanism for our src tree.
We have merged the CI test scripts into base(HEAD only). The plan is to
replace the ent

tests/ci: Pre-commit CI with CIRRUS-CI

Currently we do not have pre-commit testing mechanism for our src tree.
We have merged the CI test scripts into base(HEAD only). The plan is to
replace the entire Jenkins scripts with the one from the base system.
Limitations of the scripts:
- Full test does not work as intended like in a local environment. Our
amd64/aarch64/arm64 test requires somewhere near 4+ hours which is not
supported by CIRRUS-CI hosted systems yet as the hard limitation is
120m. But in future we can try to do this using hosted system with
various cloud providers.
- Currently only works with main branch, stable/13 and stable/14 has not
yet been processed. As the scripts are different.

Approved by: lwhsu
Differential Revision: https://reviews.freebsd.org/D36257

show more ...

Update vendor/libarchive to 3.8.0

New features:
#2088 7-zip reader: improve self-extracting archive detection
#2137 zip writer: added XZ, LZMA, ZSTD and BZIP2 support
#2403 zip writer: added LZMA

Update vendor/libarchive to 3.8.0

New features:
#2088 7-zip reader: improve self-extracting archive detection
#2137 zip writer: added XZ, LZMA, ZSTD and BZIP2 support
#2403 zip writer: added LZMA + RISCV BCJ filter
#2601 bsdtar: support --mtime and --clamp-mtime
#2602 libarchive: mbedtls 3.x compatibility

Security fixes:
#2422 tar reader: Handle truncation in the middle of a GNU long linkname
CVE-2024-57970
#2532 tar reader: fix unchecked return value in list_item_verbose()
CVE-2025-25724
#2532 unzip: fix null pointer dereference
CVE-2025-1632
#2568 warc: prevent signed integer overflow
#2584 rar: do not skip past EOF while reading
#2588 tar: fix overflow in build_ustar_entry
#2598 rar: fix double free with over 4 billion nodes
#2599 rar: fix heap-buffer-overflow

Important bugfixes:
#2399 7-zip reader: add SPARC filter support for non-LZMA compressors
#2405 tar reader: ignore ustar size when pax size is present
#2435 tar writer: fix bug when -s/a/b/ used more than once with b flag
#2459 7-zip reader: add POWERPC filter support for non-LZMA compressors
#2519 libarchive: handle ARCHIVE_FILTER_LZOP in archive_read_append_filter
#2539 libarchive: add missing seeker function to archive_read_open_FILE()
#2544 gzip: allow setting the original filename for gzip compressed files
#2564 libarchive: improve lseek handling
#2582 rar: support large headers on 32 bit systems
#2587 bsdtar: don't hardlink negative inode files together
#2596 rar: support large headers on 32 bit systems
#2606 libarchive: support @-prefixed Unix epoch timestamps as date strings

Obtained from: libarchive
Vendor commit: 70ff28fcf04ec129a1d064f96e49aa57fcc90e37
CVE: CVE-2024-57970, CVE-2025-1632, CVE-2025-25724

show more ...

.cirrus.yml: Switch image to 14

The current default image is set to 13.4 which is going to reach EOL
soon so switch the default CI image to 14.

Will be merged into stable/14 only. This has no opera

.cirrus.yml: Switch image to 14

The current default image is set to 13.4 which is going to reach EOL
soon so switch the default CI image to 14.

Will be merged into stable/14 only. This has no operational effect on
the build itself.

Approved by: emaste
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D50110

show more ...

.cirrus.yml: Refactor

Most of the matrix options are manually triggered ones but some of those
do not specifically mention them in the name. So add the string
' (manual)` in the name of the jobs for

.cirrus.yml: Refactor

Most of the matrix options are manually triggered ones but some of those
do not specifically mention them in the name. So add the string
' (manual)` in the name of the jobs for better clarity in the web
interface of cirrus CI.

These are mostly cosmetic changes and have no effects on the build
itself.

Will be merged in all stable versions.

Approved by: emaste
MFC after: 3 days
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D50110

show more ...

Update FreeBSD CI images

* FreeBSD 12 is EoL. Drop it.
* Use the latest FreeBSD 13 and 14 versions.
* Add FreeBSD 15.0-CURRENT.
* Use the current python version.

Sponsored by: ConnectWise
Reviewed

Update FreeBSD CI images

* FreeBSD 12 is EoL. Drop it.
* Use the latest FreeBSD 13 and 14 versions.
* Add FreeBSD 15.0-CURRENT.
* Use the current python version.

Sponsored by: ConnectWise
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Signed-off-by: Alan Somers <asomers@gmail.com>
Closes #17139

show more ...

.cirrus-ci: Update the non-manual GCC build job to GCC 14

Reviewed by: emaste
Differential Revision: https://reviews.freebsd.org/D49159

Cirrus-CI: Bump image to (supported) 13.4

Sponsored by: The FreeBSD Foundation

.cirrus-ci: Update the non-manual GCC build job to GCC 13

Reviewed by: imp, emaste
Differential Revision: https://reviews.freebsd.org/D48291

.cirrus: Add manual amd64 and aarch64 jobs using GCC 14

Reviewed by: imp, emaste
Differential Revision: https://reviews.freebsd.org/D48290

Import libder v1.0

libder will be used by pkg(7) to read DER-encoded keys and signatures
in the upcoming ECC support.

Cirrus-CI: Switch default job to llvm19-amd64

Clang/LLVM19 matches the default in-tree toolchain.

Sponsored by: The FreeBSD Foundation

Cirrus-CI: Add manual LLVM 19 jobs

The base system compiler is now Clang/LLVM 19.

Sponsored by: The FreeBSD Foundation