Overview
This is a haproxy jail that can be started with pot.
The jail exposes parameters that can either be set via the environment.
It also contains node_exporter and a local consul agent instance to be
available that it can connect to (see configuration below). You can e.g.
use the consul pot flavour
on this site to run consul.
Setup
You must be running 2 or 3 mariadb servers, such as the pot mariadb images, configured for replication on all servers in a MASTER-MASTER configuration.
The mariadb pot images must already be started with the LOADBALANCER parameter set to the IP address of this jail. This will setup access control and allow haproxy checks from this host for the user haproxy.
Installation
- Create a ZFS data set on the parent system beforehand
zfs create -o mountpoint=/mnt/haproxysqldata zroot/haproxysqldata - Create your local jail from the image or the flavour files.
- Clone the local jail
- Mount in the ZFS data set you created
pot mount-in -p <jailname> -m /mnt -d /mnt/haproxysqldata - Adjust to your environment:
sudo pot set-env -p <jailname> \ -E DATACENTER=<datacenter name> \ -E CONSULSERVERS="<comma-deliminated list of consul servers>" \ -E GOSSIPKEY=<32 byte Base64 key from consul keygen>] \ -E NODENAME=<name of node> \ -E IP=<IP address> \ -E SERVERONE=<IP address first mariadb host> \ -E SERVERTWO=<IP address second mariadb host> \ [ -E SERVERTHREE=<IP address this mariadb host> ] \ [ -E REMOTELOG=<IP of syslog-ng server> ]
The DATACENTER parameter is the name of the datacenter.
The CONSULSERVERS parameter is a comma-deliminated list of IP addresses for the consul server or cluster. Do not include spaces!
e.g. CONSULSERVERS="10.0.0.2" or CONSULSERVERS="10.0.0.2,10.0.0.3,10.0.0.4,10.0.0.5,10.0.0.6"
The GOSSIPKEY parameter is the gossip encryption key for consul agent.
The NODENAME parameter is the name of the node.
The IP parameter is the IP address of this image.
The SERVERONE parameter is the IP address of the first mariadb instance. It is required.
The SERVERTWO parameter is the IP address of the second mariadb instance. It is required.
SERVERTHREE is an optional parameter for the IP address of the third mariadb instance. Do not set to any value if there is no third server.
REMOTELOG is an optional parameter for a remote syslog service, such as via the loki or beast-of-argh images on potluck site.
Usage
Configure your application database settings to use the IP address of this jail, port 3306 and the applicable mariadb username and password.
This is an example of a two server MASTER-MASTER setup showing alternate server_id values:
user@host:$ mysql -h haproxy-sql.ip -u haproxy --execute="SELECT VERSION(), @@server_id"
+---------------------+-------------+
| VERSION() | @@server_id |
+---------------------+-------------+
| 10.6.14-MariaDB-log | 2 |
+---------------------+-------------+
user@host:$ mysql -h haproxy-sql.ip -u haproxy --execute="SELECT VERSION(), @@server_id"
+---------------------+-------------+
| VERSION() | @@server_id |
+---------------------+-------------+
| 10.6.14-MariaDB-log | 1 |
+---------------------+-------------+
Getting Started
- Image Readme
- How To Use The Ready-Made Image
- Alternatively: Create a Jail With This Flavour Yourself
- Version History
- Manual Image Download Links
- Jenkins Pot Creation Logs
How To Use The Ready-Made Image
FreeBSD 14.1:
pot import -p haproxy-sql-amd64-14_1 -t 0.14.3 -U https://potluck.honeyguide.net/haproxy-sql
With Signify Verification:
fetch https://potluck.honeyguide.net/potluck.pub; pot import -p haproxy-sql-amd64-14_1 -t 0.14.3 -C potluck.pub -U https://potluck.honeyguide.net/haproxy-sql
If you don’t want to use the default pot bridged network configuration but instead need an individual network setup (e.g. assign a host IP address), after importing it you can simply clone the jail like that (em0 is the host network adapter in this example):
pot clone -P haproxy-sql-amd64-14_1 -p my-cloned-jail -N alias -i "em0|10.10.10.10"
Note: Some images might require specific network configuration, double check the Overview-chapter at the top.
Alternatively: Create a Jail With This Flavour Yourself
1. Create Flavour Files
Save all files and directories from https://github.com/hny-gd/potluck/tree/master/haproxy-sql to /usr/local/etc/pot/flavours/
2. Create Jail From Flavour
Run
pot create -b <FreeBSD Version> -p <jailname> -t single -N public-bridge -f fbsd-update
with your FreeBSD version (e.g. 14.1) and the name your jail should get.
Note: Some images might require specific network configuration, double check the Overview-chapter at the top.
Version History
0.14
- Version bump for new base image
- Enable milliseconds in syslog-ng for all log timestamps
- Update syslog-ng config to use modern config options
0.13
- Version bump for new base image 14.1
- Extra steps to trim image size
0.12
- Version bump for new base image
0.11
- Version bump for new base image
0.10
- Version bump for new base image
0.9
- Version bump for new base image
- Include option “tune.disable-zero-copy-forwarding” to fix high CPU usage
0.8
- Version bump for new base image
- Fix node_exporter zfs issue
0.7
- Version bump for new base image
- FBSD14 base image
0.6
- Version bump for new base image
0.5
- Version bump for new base image
0.4
- Version bump for new base image
0.3
- Version bump for new base image
0.2
- Version bump for new base image
0.1
- Setup haproxy pre-configured for 2 or 3 mariadb instances
- Update for haproxy user instead of galera user, to remove confusion with galera package
- Update README with example of usage working
0.0
- Initial commit
These images were built on Wed Nov 6 20:24:57 UTC 2024
Manual Image Download Links
haproxy-sql-amd64-14_1_0.14.3.xz (
)
haproxy-sql-amd64-14_1_0.14.3.xz.skein (
)
haproxy-sql-amd64-14_1_0.14.3.xz.skein.sig (
)
haproxy-sql-amd64-14_1_0.14.3.xz.meta (
)
Jenkins Pot Creation Logs
haproxy-sql-amd64-14_1_0.14.3:
haproxy-sql/haproxy-sql:
copy-in -s /usr/local/etc/pot/flavours/haproxy-sql.d/local -d /root/.pot_local
haproxy-sql/haproxy-sql.sh:
#!/bin/sh
# Based on POTLUCK TEMPLATE v3.0
# Altered by Michael Gmelin
#
# EDIT THE FOLLOWING FOR NEW FLAVOUR:
# 1. RUNS_IN_NOMAD - true or false
# 2. If RUNS_IN_NOMAD is false, can delete the <flavour>+4 file, else
# make sure pot create command doesn't include it
# 3. Create a matching <flavour> file with this <flavour>.sh file that
# contains the copy-in commands for the config files from <flavour>.d/
# Remember that the package directories don't exist yet, so likely copy
# to /root
# 4. Adjust package installation between BEGIN & END PACKAGE SETUP
# 5. Adjust jail configuration script generation between BEGIN & END COOK
# Configure the config files that have been copied in where necessary
# Set this to true if this jail flavour is to be created as a nomad
# (i.e. blocking) jail.
# You can then query it in the cook script generation below and the script
# is installed appropriately at the end of this script
RUNS_IN_NOMAD=false
# set the cook log path/filename
COOKLOG=/var/log/cook.log
# check if cooklog exists, create it if not
if [ ! -e $COOKLOG ]
then
echo "Creating $COOKLOG" | tee -a $COOKLOG
else
echo "WARNING $COOKLOG already exists" | tee -a $COOKLOG
fi
date >> $COOKLOG
# -------------------- COMMON ---------------
STEPCOUNT=0
step() {
STEPCOUNT=$(("$STEPCOUNT" + 1))
STEP="$*"
echo "Step $STEPCOUNT: $STEP" | tee -a $COOKLOG
}
exit_ok() {
trap - EXIT
exit 0
}
FAILED=" failed"
exit_error() {
STEP="$*"
FAILED=""
exit 1
}
set -e
trap 'echo ERROR: $STEP$FAILED | (>&2 tee -a $COOKLOG)' EXIT
# -------------- BEGIN PACKAGE SETUP -------------
step "Bootstrap package repo"
mkdir -p /usr/local/etc/pkg/repos
# only modify repo if not already done in base image
# shellcheck disable=SC2016
test -e /usr/local/etc/pkg/repos/FreeBSD.conf || \
echo 'FreeBSD: { url: "pkg+http://pkg.FreeBSD.org/${ABI}/quarterly" }' \
>/usr/local/etc/pkg/repos/FreeBSD.conf
ASSUME_ALWAYS_YES=yes pkg bootstrap
step "Touch /etc/rc.conf"
touch /etc/rc.conf
# this is important, otherwise running /etc/rc from cook will
# overwrite the IP address set in tinirc
step "Remove ifconfig_epair0b from config"
# shellcheck disable=SC2015
sysrc -cq ifconfig_epair0b && sysrc -x ifconfig_epair0b || true
step "Disable sendmail"
service sendmail onedisable
step "Disable sshd"
service sshd onedisable || true
step "Create /usr/local/etc/rc.d"
mkdir -p /usr/local/etc/rc.d
step "Clean freebsd-update"
rm -rf /var/db/freebsd-update
mkdir -p /var/db/freebsd-update
# we need consul for consul agent
step "Install package consul"
pkg install -y consul
step "Install package openssl"
pkg install -y openssl
step "Install package sudo"
pkg install -y sudo
# necessary if installing curl now
step "Install package ca_root_nss"
pkg install -y ca_root_nss
step "Install package curl"
pkg install -y curl
step "Install package jq"
pkg install -y jq
step "Install package jo"
pkg install -y jo
step "Install package nano"
pkg install -y nano
step "Install package bash"
pkg install -y bash
step "Install package rsync"
pkg install -y rsync
step "Install package node_exporter"
pkg install -y node_exporter
step "Install package syslog-ng"
pkg install -y syslog-ng
step "Install package mariadb106-client"
pkg install -y mariadb106-client
step "Install package haproxy"
pkg install -y haproxy
step "Install package socat"
pkg install -y socat
step "Clean package installation"
pkg clean -ay
# -------------- END PACKAGE SETUP -------------
#
# Now generate the run command script "cook"
# It configures the system on the first run by creating the config file(s)
# On subsequent runs, it only starts sleeps (if nomad-jail) or simply exits
#
# this runs when image boots
# ----------------- BEGIN COOK ------------------
step "Clean cook artifacts"
rm -rf /usr/local/bin/cook /usr/local/share/cook
step "Install pot local"
tar -C /root/.pot_local -cf - . | tar -C /usr/local -xf -
rm -rf /root/.pot_local
step "Set file ownership on cook scripts"
chown -R root:wheel /usr/local/bin/cook /usr/local/share/cook
chmod 755 /usr/local/share/cook/bin/*
# ----------------- END COOK ------------------
# ---------- NO NEED TO EDIT BELOW ------------
step "Make cook script executable"
if [ -e /usr/local/bin/cook ]
then
echo "setting executable bit on /usr/local/bin/cook" | tee -a $COOKLOG
chmod u+x /usr/local/bin/cook
else
exit_error "there is no /usr/local/bin/cook to make executable"
fi
#
# There are two ways of running a pot jail: "Normal", non-blocking mode and
# "Nomad", i.e. blocking mode (the pot start command does not return until
# the jail is stopped).
# For the normal mode, we create a /usr/local/etc/rc.d script that starts
# the "cook" script generated above each time, for the "Nomad" mode, the cook
# script is started by pot (configuration through flavour file), therefore
# we do not need to do anything here.
#
# Create rc.d script for "normal" mode:
step "Create rc.d script to start cook"
echo "creating rc.d script to start cook" | tee -a $COOKLOG
# shellcheck disable=SC2016
echo '#!/bin/sh
#
# PROVIDE: cook
# REQUIRE: LOGIN
# KEYWORD: shutdown
#
. /etc/rc.subr
name="cook"
rcvar="cook_enable"
load_rc_config $name
: ${cook_enable:="NO"}
: ${cook_env:=""}
command="/usr/local/bin/cook"
command_args=""
run_rc_command "$1"
' > /usr/local/etc/rc.d/cook
step "Make rc.d script to start cook executable"
if [ -e /usr/local/etc/rc.d/cook ]
then
echo "Setting executable bit on cook rc file" | tee -a $COOKLOG
chmod u+x /usr/local/etc/rc.d/cook
else
exit_error "/usr/local/etc/rc.d/cook does not exist"
fi
if [ "$RUNS_IN_NOMAD" != "true" ]
then
step "Enable cook service"
# This is a non-nomad (non-blocking) jail, so we need to make sure the script
# gets started when the jail is started:
# Otherwise, /usr/local/bin/cook will be set as start script by the pot
# flavour
echo "enabling cook" | tee -a $COOKLOG
service cook enable
fi
# -------------------- DONE ---------------
exit_ok
haproxy-sql/haproxy-sql+1:
haproxy-sql/haproxy-sql+1.sh:
haproxy-sql/haproxy-sql+2:
haproxy-sql/haproxy-sql+2.sh:
haproxy-sql/haproxy-sql+3:
haproxy-sql/haproxy-sql+3.sh:
haproxy-sql/haproxy-sql+4:
haproxy-sql/haproxy-sql+4.sh:
=====> Create conf dir (/mnt/srv/pot/jails/haproxy-sql-amd64-14_1/conf)
=====> Cloning freebsd-potluck-amd64-14_1_0_0_31 with snap
=====> clone zroot/srv/pot/jails/freebsd-potluck-amd64-14_1_0_0_31/m@1730306249 into zroot/srv/pot/jails/haproxy-sql-amd64-14_1/m
=====> Flavour: fbsd-update
=====> Starting haproxy-sql-amd64-14_1 pot for the initial bootstrap
=====> mount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
defaultrouter: 10.192.0.1 -> 10.192.0.1
===> Starting the pot haproxy-sql-amd64-14_1
=====> Pot haproxy-sql-amd64-14_1 jail params are: allow.set_hostname=false allow.raw_sockets allow.socket_af allow.chflags exec.clean mount.devfs enforce_statfs=2 sysvshm=new sysvsem=new sysvmsg=new children.max=0 devfs_ruleset=4 stop.timeout=10 name=haproxy-sql-amd64-14_1 host.hostname=haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net osrelease=14.1-RELEASE-p6 path=/mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m persist vnet vnet.interface=epair0b
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
32-bit compatibility ldconfig path: /usr/lib32 /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
groups: lo
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:8c:16:c5:03:0b
inet 10.192.0.3 netmask 0xffc00000 broadcast 10.255.255.255
groups: epair
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Clearing /tmp (X related).
Updating /var/run/os-release done.
Creating and/or trimming log files.
Updating motd:.
Starting syslogd.
Starting sendmail_submit.
Starting cron.
Wed Nov 6 20:22:26 UTC 2024
/usr/local/etc/pot/flavours/fbsd-update.sh -> /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp/fbsd-update.sh
=====> Executing fbsd-update script on haproxy-sql-amd64-14_1
src component not installed, skipped
Looking up update.FreeBSD.org mirrors... 3 mirrors found.
Fetching public key from update1.freebsd.org... done.
Fetching metadata signature for 14.1-RELEASE from update1.freebsd.org... done.
Fetching metadata index... done.
Fetching 2 metadata files... done.
Inspecting system... done.
Preparing to download files... done.
No updates needed to update system to 14.1-RELEASE-p6.
No updates are available to install.
=====> Stop the pot haproxy-sql-amd64-14_1
=====> Remove p4672bd000b33e epair network interfaces
=====> unmount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
=====> unmount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/dev
=====> Flavour: haproxy-sql
=====> Executing haproxy-sql pot commands on haproxy-sql-amd64-14_1
=====> mount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
=====> Source /usr/local/etc/pot/flavours/haproxy-sql.d/local copied in the pot haproxy-sql-amd64-14_1
=====> unmount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
=====> /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/dev is already unmounted
=====> Starting haproxy-sql-amd64-14_1 pot for the initial bootstrap
=====> mount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
defaultrouter: 10.192.0.1 -> 10.192.0.1
===> Starting the pot haproxy-sql-amd64-14_1
=====> Pot haproxy-sql-amd64-14_1 jail params are: allow.set_hostname=false allow.raw_sockets allow.socket_af allow.chflags exec.clean mount.devfs enforce_statfs=2 sysvshm=new sysvsem=new sysvmsg=new children.max=0 devfs_ruleset=4 stop.timeout=10 name=haproxy-sql-amd64-14_1 host.hostname=haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net osrelease=14.1-RELEASE-p6 path=/mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m persist vnet vnet.interface=epair0b
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
32-bit compatibility ldconfig path: /usr/lib32 /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384
options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
groups: lo
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
options=8<VLAN_MTU>
ether 02:26:fd:93:c5:0b
inet 10.192.0.3 netmask 0xffc00000 broadcast 10.255.255.255
groups: epair
media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
status: active
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Clearing /tmp (X related).
Updating /var/run/os-release done.
Creating and/or trimming log files.
Updating motd:.
Starting syslogd.
Starting sendmail_submit.
Starting cron.
Wed Nov 6 20:22:59 UTC 2024
/usr/local/etc/pot/flavours/haproxy-sql.sh -> /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp/haproxy-sql.sh
=====> Executing haproxy-sql script on haproxy-sql-amd64-14_1
WARNING /var/log/cook.log already exists
Step 1: Bootstrap package repo
pkg already bootstrapped at /usr/local/sbin/pkg
Step 2: Touch /etc/rc.conf
Step 3: Remove ifconfig_epair0b from config
Step 4: Disable sendmail
sendmail disabled in /etc/rc.conf
sendmail_submit disabled in /etc/rc.conf
sendmail_msp_queue disabled in /etc/rc.conf
Step 5: Disable sshd
sshd disabled in /etc/rc.conf
Step 6: Create /usr/local/etc/rc.d
Step 7: Clean freebsd-update
Step 8: Install package consul
Updating FreeBSD repository catalogue...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] Fetching data.pkg: .......... done
Processing entries: .......... done
FreeBSD repository update completed. 35518 packages processed.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
consul: 1.19.2
Number of packages to be installed: 1
The process will require 124 MiB more space.
24 MiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Fetching consul-1.19.2.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Installing consul-1.19.2...
===> Creating groups
Creating group 'consul' with gid '469'
===> Creating users
Creating user 'consul' with uid '469'
===> Creating homedir(s)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Extracting consul-1.19.2: ..... done
Step 9: Install package openssl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 10: Install package sudo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 11: Install package ca_root_nss
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 12: Install package curl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 13: Install package jq
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 14: Install package jo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 15: Install package nano
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 16: Install package bash
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 17: Install package rsync
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 18: Install package node_exporter
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
node_exporter: 1.8.2
Number of packages to be installed: 1
The process will require 11 MiB more space.
4 MiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Fetching node_exporter-1.8.2.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Installing node_exporter-1.8.2...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Extracting node_exporter-1.8.2: .......... done
=====
Message from node_exporter-1.8.2:
--
If upgrading from a version of node_exporter <0.15.0 you'll need to update any
custom command line flags that you may have set as it now requires a
double-dash (--flag) instead of a single dash (-flag).
The collector flags in 0.15.0 have now been replaced with individual boolean
flags and the -collector.procfs` and -collector.sysfs` flags have been renamed
to --path.procfs and --path.sysfs respectively.
Step 19: Install package syslog-ng
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 10 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
e2fsprogs-libuuid: 1.47.1
glib: 2.80.5,2
ivykis: 0.43.2
json-c: 0.18
libffi: 3.4.6
mpdecimal: 4.0.0
pcre2: 10.43
py311-packaging: 24.1
python311: 3.11.10
syslog-ng: 4.8.0_2
Number of packages to be installed: 10
The process will require 241 MiB more space.
34 MiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/10] Fetching ivykis-0.43.2.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/10] Fetching mpdecimal-4.0.0.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [3/10] Fetching py311-packaging-24.1.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [4/10] Fetching glib-2.80.5,2.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [5/10] Fetching syslog-ng-4.8.0_2.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [6/10] Fetching pcre2-10.43.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [7/10] Fetching libffi-3.4.6.pkg: ......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [8/10] Fetching json-c-0.18.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [9/10] Fetching e2fsprogs-libuuid-1.47.1.pkg: ....... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [10/10] Fetching python311-3.11.10.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/10] Installing mpdecimal-4.0.0...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/10] Extracting mpdecimal-4.0.0: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/10] Installing libffi-3.4.6...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/10] Extracting libffi-3.4.6: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [3/10] Installing python311-3.11.10...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [3/10] Extracting python311-3.11.10: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [4/10] Installing py311-packaging-24.1...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [4/10] Extracting py311-packaging-24.1: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [5/10] Installing pcre2-10.43...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [5/10] Extracting pcre2-10.43: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [6/10] Installing ivykis-0.43.2...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [6/10] Extracting ivykis-0.43.2: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [7/10] Installing glib-2.80.5,2...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [7/10] Extracting glib-2.80.5,2: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [8/10] Installing json-c-0.18...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [8/10] Extracting json-c-0.18: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [9/10] Installing e2fsprogs-libuuid-1.47.1...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [9/10] Extracting e2fsprogs-libuuid-1.47.1: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [10/10] Installing syslog-ng-4.8.0_2...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [10/10] Extracting syslog-ng-4.8.0_2: .......... done
==> Running trigger: glib-schemas.ucl
Compiling glib schemas
No schema files found: doing nothing.
==> Running trigger: gio-modules.ucl
Generating GIO modules cache
=====
Message from python311-3.11.10:
--
Note that some standard Python modules are provided as separate ports
as they require additional dependencies. They are available as:
py311-gdbm databases/py-gdbm@py311
py311-sqlite3 databases/py-sqlite3@py311
py311-tkinter x11-toolkits/py-tkinter@py311
=====
Message from syslog-ng-4.8.0_2:
--
syslog-ng is now installed! To replace FreeBSD's standard syslogd
(/usr/sbin/syslogd), complete these steps:
1. Create a configuration file named /usr/local/etc/syslog-ng.conf
(a sample named syslog-ng.conf.sample has been included in
/usr/local/etc). Note that this is a change in 2.0.2
version, previous ones put the config file in
/usr/local/etc/syslog-ng/syslog-ng.conf, so if this is an update
move that file in the right place
2. Configure syslog-ng to start automatically by adding the following
to /etc/rc.conf:
syslog_ng_enable="YES"
3. Prevent the standard FreeBSD syslogd from starting automatically by
adding a line to the end of your /etc/rc.conf file that reads:
syslogd_enable="NO"
4. Shut down the standard FreeBSD syslogd:
kill `cat /var/run/syslog.pid`
5. Start syslog-ng:
/usr/local/etc/rc.d/syslog-ng start
Step 20: Install package mariadb106-client
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
libedit: 3.1.20240808,1
mariadb106-client: 10.6.19
Number of packages to be installed: 2
The process will require 52 MiB more space.
2 MiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/2] Fetching libedit-3.1.20240808,1.pkg: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/2] Fetching mariadb106-client-10.6.19.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/2] Installing libedit-3.1.20240808,1...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/2] Extracting libedit-3.1.20240808,1: .......... done
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/2] Installing mariadb106-client-10.6.19...
===> Creating groups
Creating group 'mysql' with gid '88'
===> Creating users
Creating user 'mysql' with uid '88'
===> Creating homedir(s)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [2/2] Extracting mariadb106-client-10.6.19: .......... done
=====
Message from mariadb106-client-10.6.19:
--
MariaDB respects hier(7) and doesn't check /etc and /etc/mysql for
my.cnf. Please move existing my.cnf files from those paths to
/usr/local/etc/mysql or /usr/local/etc. Sample
configuration files are provided in /usr/local/etc/mysql
and /usr/local/etc/mysql/conf.d.
The rc(8) script no longer uses /var/db/mysql/my.cnf for configuration
nor /var/db/mysql for logs and PID-file.
This port does NOT include the mytop perl script, this is included in
the MariaDB tarball but the most recent version can be found in the
databases/mytop port
%%WSREP%%Using wsrep clustering requires adding a configuration file.
%%WSREP%%Copy /usr/local/etc/mysql/conf.d/wsrep.conf.sample to
%%WSREP%%/usr/local/etc/mysql/conf.d/wsrep.conf and change what you need there.
Step 21: Install package haproxy
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
haproxy: 3.0.5
Number of packages to be installed: 1
The process will require 7 MiB more space.
2 MiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Fetching haproxy-3.0.5.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Installing haproxy-3.0.5...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Extracting haproxy-3.0.5: .......... done
Step 22: Install package socat
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):
New packages to be INSTALLED:
socat: 1.8.0.1
Number of packages to be installed: 1
213 KiB to be downloaded.
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Fetching socat-1.8.0.1.pkg: .......... done
Checking integrity... done (0 conflicting)
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Installing socat-1.8.0.1...
[haproxy-sql-amd64-14_1.vsf00002.cpt.za.honeyguide.net] [1/1] Extracting socat-1.8.0.1: .......... done
Step 23: Clean package installation
The following package files will be deleted:
/var/cache/pkg/e2fsprogs-libuuid-1.47.1~362f74ac69.pkg
/var/cache/pkg/libedit-3.1.20240808,1.pkg
/var/cache/pkg/consul-1.19.2.pkg
/var/cache/pkg/py311-packaging-24.1.pkg
/var/cache/pkg/python311-3.11.10~286ca605ff.pkg
/var/cache/pkg/mpdecimal-4.0.0~355dbb0218.pkg
/var/cache/pkg/syslog-ng-4.8.0_2~cf5f9ee289.pkg
/var/cache/pkg/mariadb106-client-10.6.19~7b0e4f0947.pkg
/var/cache/pkg/haproxy-3.0.5.pkg
/var/cache/pkg/pcre2-10.43.pkg
/var/cache/pkg/json-c-0.18.pkg
/var/cache/pkg/glib-2.80.5,2.pkg
/var/cache/pkg/node_exporter-1.8.2.pkg
/var/cache/pkg/socat-1.8.0.1~6c510789e1.pkg
/var/cache/pkg/syslog-ng-4.8.0_2.pkg
/var/cache/pkg/json-c-0.18~4c2b04b9f9.pkg
/var/cache/pkg/e2fsprogs-libuuid-1.47.1.pkg
/var/cache/pkg/pcre2-10.43~d476f63222.pkg
/var/cache/pkg/haproxy-3.0.5~c7cd25ce31.pkg
/var/cache/pkg/python311-3.11.10.pkg
/var/cache/pkg/ivykis-0.43.2.pkg
/var/cache/pkg/glib-2.80.5,2~909ca79520.pkg
/var/cache/pkg/ivykis-0.43.2~07934ae53e.pkg
/var/cache/pkg/node_exporter-1.8.2~d3c8df78fe.pkg
/var/cache/pkg/libffi-3.4.6~e038c4b1cf.pkg
/var/cache/pkg/mpdecimal-4.0.0.pkg
/var/cache/pkg/py311-packaging-24.1~b3b408ec53.pkg
/var/cache/pkg/libffi-3.4.6.pkg
/var/cache/pkg/consul-1.19.2~ffcc2d4893.pkg
/var/cache/pkg/mariadb106-client-10.6.19.pkg
/var/cache/pkg/libedit-3.1.20240808,1~f5ee367ad6.pkg
/var/cache/pkg/socat-1.8.0.1.pkg
The cleanup will free 66 MiB
Deleting files: .......... done
Step 24: Clean cook artifacts
Step 25: Install pot local
Step 26: Set file ownership on cook scripts
Step 27: Make cook script executable
setting executable bit on /usr/local/bin/cook
Step 28: Create rc.d script to start cook
creating rc.d script to start cook
Step 29: Make rc.d script to start cook executable
Setting executable bit on cook rc file
Step 30: Enable cook service
enabling cook
cook enabled in /etc/rc.conf
=====> Stop the pot haproxy-sql-amd64-14_1
=====> Remove p4672bd022b33e epair network interfaces
=====> unmount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/tmp
=====> unmount /mnt/srv/pot/jails/haproxy-sql-amd64-14_1/m/dev
===> exporting haproxy-sql-amd64-14_1 @ 1730924627 to /tmp/haproxy-sql-amd64-14_1_0.14.3.xz