michael-o
commented
9 months ago These worked for me instead:
- Thick jail upgrade:
freebsd-update -j deblndw013x4v1j -d $(jls -j deblndw013x4v1j -h path | tail -1)/var/db/freebsd-update -f $(jls -j deblndw013x4v1j -h path | tail -1)/etc/freebsd-update.conf -r 13.2-RELEASE upgrade freebsd-update -j deblndw013x4v1j -d $(jls -j deblndw013x4v1j -h path | tail -1)/var/db/freebsd-update -f $(jls -j deblndw013x4v1j -h path | tail -1)/etc/freebsd-update.conf install - Release update:
mkdir -p /var/db/bastille/releases/13.2-RELEASE/freebsd-update freebsd-update -d /var/db/bastille/releases/13.2-RELEASE/freebsd-update -f /usr/local/bastille/releases/13.2-RELEASE/etc/freebsd-update.conf -b /usr/local/bastille/releases/13.2-RELEASE --currently-running 13.2-RELEASE fetch install - Thick jail update:
freebsd-update -j deblndw013x1j -d $(jls -j deblndw013x1j -h path | tail -1)/var/db/freebsd-update -f $(jls -j deblndw013x1j -h path | tail -1)/etc/freebsd-update.conf fetch install
Describe the bug Both commands
ugpradeandupdateusefreebsd-update(8)to update releases and thick jails. Unfortunately, they assume thatfreebsd-updatewill rebase all commands on top of the basedir passed, thus fully isolate all operations. It does not. The command is broken in this regard.See:
It pollutes the jailhost and uses potentially wrong config.
Sources:
Bastille and FreeBSD version (paste
bastille -v && freebsd-version -kruoutput) 0.10.20231013 13.2-STABLE 13.2-STABLE 13.2-STABLEHow did you install bastille? (port/pkg/git) port
Expected behavior For release updates/upgrades:
-ffrom the release root-doutside of release root, but independent of the jailhost, e.g.,/var/db/bastille/releases/{release}/freebsd-update/For thick jail updates/upgrades:
-jto reduce params-ffrom the jail root-dfrom the jail root (thus the update dir will remain completely inside the jail)Additional context Gladly, I have tested the upgrade in a separate host where the jails were shredded. I will refrain from using
bastille update/upgradefor now. If desired, I can provide a PR for this.