Overview

This is a development flavour containing the nginx webserver, along with acme.sh, openssl, rsync and ssh.

It has been put together specifically for use in custom images and you MUST copy in files and set the parameter to 1 to enable:

sshd_config
authorized_keys
nginx.conf
rsyncd.conf
setup.sh
postsetup.sh

You can adjust this flavour and rebuild your own pot image if you have other requirements.

Installation

Create a ZFS data set on the parent system beforehand, for example: zfs create -o mountpoint=/mnt/<name> zroot/jaildata_<name>
Create your local jail from the image or the flavour files.
Clone the local jail
Mount in the ZFS data set you created: pot mount-in -p <jailname> -d <src> -m <dest>
Optionally copy in SSH authorized_keys file: pot copy-in -p <jailname> -s /path/to/authorized_keys -d /root/authorized_keys_in
Optionally copy in SSH sshd_config file: pot copy-in -p <jailname> -s /path/to/sshd_config -d /root/sshd_config_in
Optionally copy in nginx.conf file: pot copy-in -p <jailname> -s /path/to/nginx.conf -d /root/nginx.conf
Optionally copy in rsyncd.conf file: pot copy-in -p <jailname> -s /path/to/rsyncd.conf -d /root/rsyncd.conf
Optionally copy in setup.sh file for early commands to run: pot copy-in -p <jailname> -s /path/to/setup.sh -d /root/setup.sh
Optionally copy in postsetup.sh file for late commands to run after services are setup: pot copy-in -p <jailname> -s /path/to/postsetup.sh -d /root/postsetup.sh
Optionally export the ports after creating the jail: pot export-ports -p <jailname> -e 80:80

Adjust to your environment:

sudo pot set-env -p <jailname> \
 -E DATACENTER=<datacentername> \
 -E NODENAME=<nodename> \
 -E IP=<IP address of this system> \
 -E CONSULSERVERS='<correctly formatted list of quoted IP addresses>' \
 -E GOSSIPKEY=<32 byte Base64 key from consul keygen>] \
 -E SETUPSCRIPT=<1 | 0 default> \
 -E IMPORTAUTHKEY=<1 | 0 default> \
 -E IMPORTSSH=<1 | 0 default> \
 -E IMPORTNGINX=<1 | 0 default> \
 -E IMPORTRSYNC=<1 | 0 default> \
 -E POSTSCRIPT=<1 | 0 default>
 [ -E REMOTELOG=<IP of syslog-ng server> ]

Required Paramaters

The DATACENTER parameter defines a common datacenter.

The NODENAME parameter defines the name of this node.

The IP parameter is the IP address which will be used to access services.

The CONSULSERVERS parameter defines the consul server instances, and must be set as CONSULSERVERS='"10.0.0.2"' or CONSULSERVERS='"10.0.0.2", "10.0.0.3", "10.0.0.4"' or CONSULSERVERS='"10.0.0.2", "10.0.0.3", "10.0.0.4", "10.0.0.5", "10.0.0.6"'

The GOSSIPKEY parameter is the gossip encryption key for consul agent. We’re using a default key if you do not set the parameter, do not use the default key for production encryption, instead provide your own.

Optional Parameters

SETUPSCRIPT will run copied-in /root/setup.sh when set to 1. You can set custom commands here like creating directories needed for nginx.

IMPORTAUTHKEY will add copied-in /root/authorized_keys_in to /root/.ssh/authorized_keys when set to 1.

IMPORTSSH will add copied-in /root/sshd_config_in to /etc/sshd/sshd_config when set to 1. You can specify a custom sshd_config this way.

IMPORTNGINX will add copied-in /root/nginx.conf to /usr/local/etc/nginx/nginx.conf when set to 1. You can specify a custom nginx.conf this way.

IMPORTRSYNC will add copied-in /root/rsyncd.conf to /usr/local/etc/rsync/rsyncd.conf when set to 1. You can specify a custom rsyncd.conf this way.

POSTSCRIPT will run copied-in /root/postsetup.sh when set to 1. You can add additional commands to run to a script postsetup.sh here, which run AFTER all the services have been setup.

The REMOTELOG parameter is the IP address of a destination syslog-ng server, such as with the loki flavour, or beast-of-argh flavour.

Usage

To access nginx if enabled with IMPORTNGINX=1:

http://hostname

Persistent storage

To use persistent storage make sure to mount-in a pre-configured data set to the applicable directory.

Getting Started

Image Readme
How To Use The Ready-Made Image
Alternatively: Create a Jail With This Flavour Yourself
Version History
Manual Image Download Links
Jenkins Pot Creation Logs

How To Use The Ready-Made Image

FreeBSD 13.1:
pot import -p nginx-rsync-ssh-amd64-13_1 -t 0.3.1 -U https://potluck.honeyguide.net/nginx-rsync-ssh

FreeBSD 12.4:
pot import -p nginx-rsync-ssh-amd64-12_4 -t 0.3.1 -U https://potluck.honeyguide.net/nginx-rsync-ssh

If you don’t want to use the default pot bridged network configuration but instead need an individual network setup (e.g. assign a host IP address), after importing it you can simply clone the jail like that (em0 is the host network adapter in this example):
pot clone -P nginx-rsync-ssh-amd64-13_1 -p my-cloned-jail -N alias -i "em0|10.10.10.10"

Note: Some images might require specific network configuration, double check the Overview-chapter at the top.

Alternatively: Create a Jail With This Flavour Yourself

1. Create Flavour Files

Save all files and directories from https://github.com/hny-gd/potluck/tree/master/nginx-rsync-ssh to /usr/local/etc/pot/flavours/

2. Create Jail From Flavour

Run
pot create -b <FreeBSD Version> -p <jailname> -t single -N public-bridge -f fbsd-update

with your FreeBSD version (e.g. 13.1) and the name your jail should get.

Note: Some images might require specific network configuration, double check the Overview-chapter at the top.

Version History

0.3

Version bump for new base image

0.2

Version bump for new base image

0.1

New pot image format
Updates to add additional functionality
Fix ssh setup to start not restart
Adjust goaccess config due to startup error
Minor fixes, version bump

0.0.9

Version bump for rebuild to fix missing images on potluck site

0.0.8

Version bump for p3 rebuild

0.0.7

Version bump for FreeBSD-13.1 image

0.0.6

Fixing goaccess conf parameter as not working. Using custom goaccess.conf now.

0.0.5

Adding syslog-ng and remote logging

0.0.4

Fixing goaccess.conf error as installs to /usr/local/etc instead of /usr/local/etc/goaccess

0.0.3

Header and tags fixes

0.0.2

Typos and README fixes

0.0.1

Standard image with nginx, rsync, ssh all requiring files be copied in

0.0.0

Initiate file

These images were built on Mon Feb 20 23:47:33 UTC 2023

Manual Image Download Links

nginx-rsync-ssh-amd64-13_1_0.3.1.xz ( 93.5829 MB )
nginx-rsync-ssh-amd64-13_1_0.3.1.xz.skein ( 0.250977 KB ) nginx-rsync-ssh-amd64-13_1_0.3.1.xz.meta ( 0.0478516 KB )

nginx-rsync-ssh-amd64-12_4_0.3.1.xz ( 394.119 MB )
nginx-rsync-ssh-amd64-12_4_0.3.1.xz.skein ( 0.250977 KB ) nginx-rsync-ssh-amd64-12_4_0.3.1.xz.meta ( 0.00195312 KB )

Jenkins Pot Creation Logs

nginx-rsync-ssh-amd64-13_1_0.3.1:


nginx-rsync-ssh/nginx-rsync-ssh:
copy-in -s /usr/local/etc/pot/flavours/nginx-rsync-ssh.d/local -d /root/.pot_local
nginx-rsync-ssh/nginx-rsync-ssh.sh:
#!/bin/sh

# Based on POTLUCK TEMPLATE v3.0
# Altered by Michael Gmelin
#
# EDIT THE FOLLOWING FOR NEW FLAVOUR:
# 1. RUNS_IN_NOMAD - true or false
# 2. If RUNS_IN_NOMAD is false, can delete the <flavour>+4 file, else
#    make sure pot create command doesn't include it
# 3. Create a matching <flavour> file with this <flavour>.sh file that
#    contains the copy-in commands for the config files from <flavour>.d/
#    Remember that the package directories don't exist yet, so likely copy
#    to /root
# 4. Adjust package installation between BEGIN & END PACKAGE SETUP
# 5. Adjust jail configuration script generation between BEGIN & END COOK
#    Configure the config files that have been copied in where necessary

# Set this to true if this jail flavour is to be created as a nomad
# (i.e. blocking) jail.
# You can then query it in the cook script generation below and the script
# is installed appropriately at the end of this script
RUNS_IN_NOMAD=false

# set the cook log path/filename
COOKLOG=/var/log/cook.log

# check if cooklog exists, create it if not
if [ ! -e $COOKLOG ]
then
    echo "Creating $COOKLOG" | tee -a $COOKLOG
else
    echo "WARNING $COOKLOG already exists"  | tee -a $COOKLOG
fi
date >> $COOKLOG

# -------------------- COMMON ---------------

STEPCOUNT=0
step() {
  STEPCOUNT=$(("$STEPCOUNT" + 1))
  STEP="$*"
  echo "Step $STEPCOUNT: $STEP" | tee -a $COOKLOG
}

exit_ok() {
  trap - EXIT
  exit 0
}

FAILED=" failed"
exit_error() {
  STEP="$*"
  FAILED=""
  exit 1
}

set -e
trap 'echo ERROR: $STEP$FAILED | (>&2 tee -a $COOKLOG)' EXIT

# -------------- BEGIN PACKAGE SETUP -------------

step "Bootstrap package repo"
mkdir -p /usr/local/etc/pkg/repos
# only modify repo if not already done in base image
# shellcheck disable=SC2016
test -e /usr/local/etc/pkg/repos/FreeBSD.conf || \
  echo 'FreeBSD: { url: "pkg+http://pkg.FreeBSD.org/${ABI}/quarterly" }' \
    >/usr/local/etc/pkg/repos/FreeBSD.conf
ASSUME_ALWAYS_YES=yes pkg bootstrap

step "Touch /etc/rc.conf"
touch /etc/rc.conf

# this is important, otherwise running /etc/rc from cook will
# overwrite the IP address set in tinirc
step "Remove ifconfig_epair0b from config"
# shellcheck disable=SC2015
sysrc -cq ifconfig_epair0b && sysrc -x ifconfig_epair0b || true

step "Disable sendmail"
service sendmail onedisable

step "Enable SSH"
service sshd enable

step "Create /usr/local/etc/rc.d"
mkdir -p /usr/local/etc/rc.d

# we need consul for consul agent
step "Install package consul"
pkg install -y consul

step "Install package openssl"
pkg install -y openssl

step "Install package sudo"
pkg install -y sudo

# necessary if installing curl now
step "Install package ca_root_nss"
pkg install -y ca_root_nss

step "Install package curl"
pkg install -y curl

step "Install package jq"
pkg install -y jq

step "Install package jo"
pkg install -y jo

step "Install package nano"
pkg install -y nano

step "Install package bash"
pkg install -y bash

step "Install package rsync"
pkg install -y rsync

step "Install package node_exporter"
pkg install -y node_exporter

step "Install package nginx"
pkg install -y nginx

step "Install package goaccess"
pkg install -y goaccess

step "Install package acme.sh"
pkg install -y acme.sh

step "Install package syslog-ng"
pkg install -y syslog-ng

step "Clean package installation"
pkg autoremove -y
pkg clean -y

# -------------- END PACKAGE SETUP -------------

#
# Now generate the run command script "cook"
# It configures the system on the first run by creating the config file(s)
# On subsequent runs, it only starts sleeps (if nomad-jail) or simply exits
#

# this runs when image boots
# ----------------- BEGIN COOK ------------------

step "Clean cook artifacts"
rm -rf /usr/local/bin/cook /usr/local/share/cook

step "Install pot local"
tar -C /root/.pot_local -cf - . | tar -C /usr/local -xf -
rm -rf /root/.pot_local

step "Set file ownership on cook scripts"
chown -R root:wheel /usr/local/bin/cook /usr/local/share/cook
chmod 755 /usr/local/share/cook/bin/*

# ----------------- END COOK ------------------


# ---------- NO NEED TO EDIT BELOW ------------

step "Make cook script executable"
if [ -e /usr/local/bin/cook ]
then
    echo "setting executable bit on /usr/local/bin/cook" | tee -a $COOKLOG
    chmod u+x /usr/local/bin/cook
else
    exit_error "there is no /usr/local/bin/cook to make executable"
fi

#
# There are two ways of running a pot jail: "Normal", non-blocking mode and
# "Nomad", i.e. blocking mode (the pot start command does not return until
# the jail is stopped).
# For the normal mode, we create a /usr/local/etc/rc.d script that starts
# the "cook" script generated above each time, for the "Nomad" mode, the cook
# script is started by pot (configuration through flavour file), therefore
# we do not need to do anything here.
#

# Create rc.d script for "normal" mode:
step "Create rc.d script to start cook"
echo "creating rc.d script to start cook" | tee -a $COOKLOG

# shellcheck disable=SC2016
echo '#!/bin/sh
#
# PROVIDE: cook
# REQUIRE: LOGIN
# KEYWORD: shutdown
#
. /etc/rc.subr
name="cook"
rcvar="cook_enable"
load_rc_config $name
: ${cook_enable:="NO"}
: ${cook_env:=""}
command="/usr/local/bin/cook"
command_args=""
run_rc_command "$1"
' > /usr/local/etc/rc.d/cook

step "Make rc.d script to start cook executable"
if [ -e /usr/local/etc/rc.d/cook ]
then
  echo "Setting executable bit on cook rc file" | tee -a $COOKLOG
  chmod u+x /usr/local/etc/rc.d/cook
else
  exit_error "/usr/local/etc/rc.d/cook does not exist"
fi

if [ "$RUNS_IN_NOMAD" != "true" ]
then
  step "Enable cook service"
  # This is a non-nomad (non-blocking) jail, so we need to make sure the script
  # gets started when the jail is started:
  # Otherwise, /usr/local/bin/cook will be set as start script by the pot
  # flavour
  echo "enabling cook" | tee -a $COOKLOG
  service cook enable
fi

# -------------------- DONE ---------------
exit_ok

nginx-rsync-ssh/nginx-rsync-ssh+1:
nginx-rsync-ssh/nginx-rsync-ssh+1.sh:

nginx-rsync-ssh/nginx-rsync-ssh+2:
nginx-rsync-ssh/nginx-rsync-ssh+2.sh:

nginx-rsync-ssh/nginx-rsync-ssh+3:
nginx-rsync-ssh/nginx-rsync-ssh+3.sh:

nginx-rsync-ssh/nginx-rsync-ssh+4:
nginx-rsync-ssh/nginx-rsync-ssh+4.sh:
Password:=====>  Create conf dir (/mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/conf)
=====>  Cloning freebsd-potluck-amd64-13_1_0_0_8 with snap 
=====>  clone zroot/srv/pot/jails/freebsd-potluck-amd64-13_1_0_0_8/m@1676918384 into zroot/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m
=====>  Flavour: fbsd-update
=====>  Starting nginx-rsync-ssh-amd64-13_1 pot for the initial bootstrap
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
defaultrouter: 10.192.0.1 -> 10.192.0.1
===>  Starting the pot nginx-rsync-ssh-amd64-13_1
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
32-bit compatibility ldconfig path: /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
	inet 127.0.0.1 netmask 0xff000000
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8<VLAN_MTU>
	ether 02:6e:cb:c7:af:0b
	inet 10.192.0.3 netmask 0xffc00000 broadcast 10.255.255.255
	groups: epair
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Updating motd:.
Creating and/or trimming log files.
Updating /var/run/os-release done.
Clearing /tmp (X related).
Starting syslogd.
Starting cron.
Starting sendmail_outbound.

Mon Feb 20 23:36:23 UTC 2023
/usr/local/etc/pot/flavours/fbsd-update.sh -> /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp/fbsd-update.sh
=====>  Executing fbsd-update script on nginx-rsync-ssh-amd64-13_1
src component not installed, skipped
Looking up update.FreeBSD.org mirrors... 2 mirrors found.
Fetching metadata signature for 13.1-RELEASE from update2.freebsd.org... done.
Fetching metadata index... done.
Inspecting system... done.
Preparing to download files... done.

No updates needed to update system to 13.1-RELEASE-p7.
No updates are available to install.
=====>  Stop the pot nginx-rsync-ssh-amd64-13_1
=====>  Remove p463f403f43590 epair network interfaces
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/dev
=====>  Flavour: nginx-rsync-ssh
=====>  Executing nginx-rsync-ssh pot commands on nginx-rsync-ssh-amd64-13_1
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
=====>  Source /usr/local/etc/pot/flavours/nginx-rsync-ssh.d/local copied in the pot nginx-rsync-ssh-amd64-13_1
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
=====>  /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/dev is already unmounted
=====>  Starting nginx-rsync-ssh-amd64-13_1 pot for the initial bootstrap
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
defaultrouter: 10.192.0.1 -> 10.192.0.1
===>  Starting the pot nginx-rsync-ssh-amd64-13_1
ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg
32-bit compatibility ldconfig path: /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
	inet 127.0.0.1 netmask 0xff000000
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8<VLAN_MTU>
	ether 02:81:3b:a3:de:0b
	inet 10.192.0.3 netmask 0xffc00000 broadcast 10.255.255.255
	groups: epair
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Updating motd:.
Creating and/or trimming log files.
Updating /var/run/os-release done.
Clearing /tmp (X related).
Starting syslogd.
Starting cron.
Starting sendmail_outbound.

Mon Feb 20 23:36:45 UTC 2023
/usr/local/etc/pot/flavours/nginx-rsync-ssh.sh -> /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp/nginx-rsync-ssh.sh
=====>  Executing nginx-rsync-ssh script on nginx-rsync-ssh-amd64-13_1
WARNING /var/log/cook.log already exists
Step 1: Bootstrap package repo
pkg already bootstrapped at /usr/local/sbin/pkg
Step 2: Touch /etc/rc.conf
Step 3: Remove ifconfig_epair0b from config
Step 4: Disable sendmail
sendmail disabled in /etc/rc.conf
sendmail_outbound disabled in /etc/rc.conf
sendmail_msp_queue disabled in /etc/rc.conf
Step 5: Enable SSH
sshd enabled in /etc/rc.conf
Step 6: Create /usr/local/etc/rc.d
Step 7: Install package consul
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	consul: 1.12.4_3

Number of packages to be installed: 1

The process will require 80 MiB more space.
15 MiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching consul-1.12.4_3.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Installing consul-1.12.4_3...
===> Creating groups.
Creating group 'consul' with gid '469'.
===> Creating users
Creating user 'consul' with uid '469'.
===> Creating homedir(s)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting consul-1.12.4_3: ..... done
Step 8: Install package openssl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 9: Install package sudo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 10: Install package ca_root_nss
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 11: Install package curl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 12: Install package jq
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 13: Install package jo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 14: Install package nano
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 15: Install package bash
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 16: Install package rsync
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed
Step 17: Install package node_exporter
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	node_exporter: 1.5.0

Number of packages to be installed: 1

The process will require 11 MiB more space.
3 MiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching node_exporter-1.5.0.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Installing node_exporter-1.5.0...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting node_exporter-1.5.0: .......... done
=====
Message from node_exporter-1.5.0:

--
If upgrading from a version of node_exporter <0.15.0 you'll need to update any
custom command line flags that you may have set as it now requires a
double-dash (--flag) instead of a single dash (-flag).
The collector flags in 0.15.0 have now been replaced with individual boolean
flags and the -collector.procfs` and -collector.sysfs` flags have been renamed
to --path.procfs and --path.sysfs respectively.
Step 18: Install package nginx
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	nginx: 1.22.1_2,3
	pcre: 8.45_3

Number of packages to be installed: 2

The process will require 8 MiB more space.
2 MiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching nginx-1.22.1_2,3.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching pcre-8.45_3.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Installing pcre-8.45_3...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting pcre-8.45_3: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Installing nginx-1.22.1_2,3...
===> Creating groups.
Using existing group 'www'.
===> Creating users
Using existing user 'www'.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting nginx-1.22.1_2,3: .......... done
=====
Message from nginx-1.22.1_2,3:

--
Recent version of the NGINX introduces dynamic modules support.  In
FreeBSD ports tree this feature was enabled by default with the DSO
knob.  Several vendor's and third-party modules have been converted
to dynamic modules.  Unset the DSO knob builds an NGINX without
dynamic modules support.

To load a module at runtime, include the new `load_module'
directive in the main context, specifying the path to the shared
object file for the module, enclosed in quotation marks.  When you
reload the configuration or restart NGINX, the module is loaded in.
It is possible to specify a path relative to the source directory,
or a full path, please see
https://www.nginx.com/blog/dynamic-modules-nginx-1-9-11/ and
http://nginx.org/en/docs/ngx_core_module.html#load_module for
details.

Default path for the NGINX dynamic modules is

/usr/local/libexec/nginx.
Step 19: Install package goaccess
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	goaccess: 1.7
	libmaxminddb: 1.6.0

Number of packages to be installed: 2

The process will require 1 MiB more space.
346 KiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching libmaxminddb-1.6.0.pkg: ..... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching goaccess-1.7.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Installing libmaxminddb-1.6.0...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting libmaxminddb-1.6.0: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Installing goaccess-1.7...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting goaccess-1.7: .......... done
Step 20: Install package acme.sh
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	acme.sh: 3.0.5
	socat: 1.7.4.4

Number of packages to be installed: 2

The process will require 2 MiB more space.
379 KiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching acme.sh-3.0.5.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching socat-1.7.4.4.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Installing socat-1.7.4.4...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting socat-1.7.4.4: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Installing acme.sh-3.0.5...
===> Creating groups.
Creating group 'acme' with gid '169'.
===> Creating users
Creating user 'acme' with uid '169'.
===> Creating homedir(s)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting acme.sh-3.0.5: .......... done
=====
Message from acme.sh-3.0.5:

--
This script will create the following directories if they do not exist:

 ~acme/.acme.sh
 ~acme/certs

The script will also install ~acme/.acme.sh/account.conf.sample which has
sane defaults.  Copy this to ~acme/.acme.sh/account.conf and edit contents
to suit.

If you have EXAMPLES on:

* In the /usr/local/share/examples/acme.sh directory, you can find the dnsapi 
  scripts which will be useful if you decide to use dns-01 challenges. Also 
  included are the deploy scripts.

* A newsyslog.conf sample file is installed at 
  /usr/local/etc/newsyslog.d/acme.sh - you must modify it by
  at least uncommenting the line.

* If you run `newsyslog -NC` it will create the required logfiles.

* Please edit /usr/local/etc/cron.d/acme.sh - directions are provided in that
  file.
Step 21: Install package syslog-ng
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 9 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	e2fsprogs-libuuid: 1.46.6
	glib: 2.74.5,2
	json-c: 0.16
	libffi: 3.4.4
	libxml2: 2.10.3_1
	mpdecimal: 2.5.1
	pcre2: 10.40
	python39: 3.9.16
	syslog-ng: 3.38.1

Number of packages to be installed: 9

The process will require 164 MiB more space.
25 MiB to be downloaded.
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/9] Fetching libxml2-2.10.3_1.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/9] Fetching mpdecimal-2.5.1.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [3/9] Fetching python39-3.9.16.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [4/9] Fetching glib-2.74.5,2.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [5/9] Fetching syslog-ng-3.38.1.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [6/9] Fetching libffi-3.4.4.pkg: ...... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [7/9] Fetching pcre2-10.40.pkg: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [8/9] Fetching json-c-0.16.pkg: ........ done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [9/9] Fetching e2fsprogs-libuuid-1.46.6.pkg: ..... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/9] Installing mpdecimal-2.5.1...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [1/9] Extracting mpdecimal-2.5.1: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/9] Installing libffi-3.4.4...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [2/9] Extracting libffi-3.4.4: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [3/9] Installing libxml2-2.10.3_1...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [3/9] Extracting libxml2-2.10.3_1: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [4/9] Installing python39-3.9.16...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [4/9] Extracting python39-3.9.16: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [5/9] Installing pcre2-10.40...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [5/9] Extracting pcre2-10.40: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [6/9] Installing glib-2.74.5,2...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [6/9] Extracting glib-2.74.5,2: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [7/9] Installing json-c-0.16...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [7/9] Extracting json-c-0.16: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [8/9] Installing e2fsprogs-libuuid-1.46.6...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [8/9] Extracting e2fsprogs-libuuid-1.46.6: .......... done
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [9/9] Installing syslog-ng-3.38.1...
[nginx-rsync-ssh-amd64-13_1.vsf00001.cpt.za.honeyguide.net] [9/9] Extracting syslog-ng-3.38.1: .......... done
Generating GIO modules cache
Compiling glib schemas
No schema files found: doing nothing.
=====
Message from python39-3.9.16:

--
Note that some standard Python modules are provided as separate ports
as they require additional dependencies. They are available as:

py39-gdbm       databases/py-gdbm@py39
py39-sqlite3    databases/py-sqlite3@py39
py39-tkinter    x11-toolkits/py-tkinter@py39
=====
Message from syslog-ng-3.38.1:

--
syslog-ng is now installed!  To replace FreeBSD's standard syslogd
(/usr/sbin/syslogd), complete these steps:

1. Create a configuration file named /usr/local/etc/syslog-ng.conf
   (a sample named syslog-ng.conf.sample has been included in
   /usr/local/etc). Note that this is a change in 2.0.2
   version, previous ones put the config file in
   /usr/local/etc/syslog-ng/syslog-ng.conf, so if this is an update
   move that file in the right place

2. Configure syslog-ng to start automatically by adding the following
   to /etc/rc.conf:

        syslog_ng_enable="YES"

3. Prevent the standard FreeBSD syslogd from starting automatically by
   adding a line to the end of your /etc/rc.conf file that reads:

        syslogd_enable="NO"

4. Shut down the standard FreeBSD syslogd:

     kill `cat /var/run/syslog.pid`

5. Start syslog-ng:

     /usr/local/etc/rc.d/syslog-ng start
Step 22: Clean package installation
Checking integrity... done (0 conflicting)
Nothing to do.
Nothing to do.
Step 23: Clean cook artifacts
Step 24: Install pot local
Step 25: Set file ownership on cook scripts
Step 26: Make cook script executable
setting executable bit on /usr/local/bin/cook
Step 27: Create rc.d script to start cook
creating rc.d script to start cook
Step 28: Make rc.d script to start cook executable
Setting executable bit on cook rc file
Step 29: Enable cook service
enabling cook
cook enabled in /etc/rc.conf
=====>  Stop the pot nginx-rsync-ssh-amd64-13_1
=====>  Remove p463f4040b3590 epair network interfaces
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/tmp
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-13_1/m/dev
Password:Password:===>  exporting nginx-rsync-ssh-amd64-13_1 @ 1676936253 to /tmp/nginx-rsync-ssh-amd64-13_1_0.3.1.xz

nginx-rsync-ssh-amd64-12_4_0.3.1:


nginx-rsync-ssh/nginx-rsync-ssh:
copy-in -s /usr/local/etc/pot/flavours/nginx-rsync-ssh.d/local -d /root/.pot_local
nginx-rsync-ssh/nginx-rsync-ssh.sh:
#!/bin/sh

# Based on POTLUCK TEMPLATE v3.0
# Altered by Michael Gmelin
#
# EDIT THE FOLLOWING FOR NEW FLAVOUR:
# 1. RUNS_IN_NOMAD - true or false
# 2. If RUNS_IN_NOMAD is false, can delete the <flavour>+4 file, else
#    make sure pot create command doesn't include it
# 3. Create a matching <flavour> file with this <flavour>.sh file that
#    contains the copy-in commands for the config files from <flavour>.d/
#    Remember that the package directories don't exist yet, so likely copy
#    to /root
# 4. Adjust package installation between BEGIN & END PACKAGE SETUP
# 5. Adjust jail configuration script generation between BEGIN & END COOK
#    Configure the config files that have been copied in where necessary

# Set this to true if this jail flavour is to be created as a nomad
# (i.e. blocking) jail.
# You can then query it in the cook script generation below and the script
# is installed appropriately at the end of this script
RUNS_IN_NOMAD=false

# set the cook log path/filename
COOKLOG=/var/log/cook.log

# check if cooklog exists, create it if not
if [ ! -e $COOKLOG ]
then
    echo "Creating $COOKLOG" | tee -a $COOKLOG
else
    echo "WARNING $COOKLOG already exists"  | tee -a $COOKLOG
fi
date >> $COOKLOG

# -------------------- COMMON ---------------

STEPCOUNT=0
step() {
  STEPCOUNT=$(("$STEPCOUNT" + 1))
  STEP="$*"
  echo "Step $STEPCOUNT: $STEP" | tee -a $COOKLOG
}

exit_ok() {
  trap - EXIT
  exit 0
}

FAILED=" failed"
exit_error() {
  STEP="$*"
  FAILED=""
  exit 1
}

set -e
trap 'echo ERROR: $STEP$FAILED | (>&2 tee -a $COOKLOG)' EXIT

# -------------- BEGIN PACKAGE SETUP -------------

step "Bootstrap package repo"
mkdir -p /usr/local/etc/pkg/repos
# only modify repo if not already done in base image
# shellcheck disable=SC2016
test -e /usr/local/etc/pkg/repos/FreeBSD.conf || \
  echo 'FreeBSD: { url: "pkg+http://pkg.FreeBSD.org/${ABI}/quarterly" }' \
    >/usr/local/etc/pkg/repos/FreeBSD.conf
ASSUME_ALWAYS_YES=yes pkg bootstrap

step "Touch /etc/rc.conf"
touch /etc/rc.conf

# this is important, otherwise running /etc/rc from cook will
# overwrite the IP address set in tinirc
step "Remove ifconfig_epair0b from config"
# shellcheck disable=SC2015
sysrc -cq ifconfig_epair0b && sysrc -x ifconfig_epair0b || true

step "Disable sendmail"
service sendmail onedisable

step "Enable SSH"
service sshd enable

step "Create /usr/local/etc/rc.d"
mkdir -p /usr/local/etc/rc.d

# we need consul for consul agent
step "Install package consul"
pkg install -y consul

step "Install package openssl"
pkg install -y openssl

step "Install package sudo"
pkg install -y sudo

# necessary if installing curl now
step "Install package ca_root_nss"
pkg install -y ca_root_nss

step "Install package curl"
pkg install -y curl

step "Install package jq"
pkg install -y jq

step "Install package jo"
pkg install -y jo

step "Install package nano"
pkg install -y nano

step "Install package bash"
pkg install -y bash

step "Install package rsync"
pkg install -y rsync

step "Install package node_exporter"
pkg install -y node_exporter

step "Install package nginx"
pkg install -y nginx

step "Install package goaccess"
pkg install -y goaccess

step "Install package acme.sh"
pkg install -y acme.sh

step "Install package syslog-ng"
pkg install -y syslog-ng

step "Clean package installation"
pkg autoremove -y
pkg clean -y

# -------------- END PACKAGE SETUP -------------

#
# Now generate the run command script "cook"
# It configures the system on the first run by creating the config file(s)
# On subsequent runs, it only starts sleeps (if nomad-jail) or simply exits
#

# this runs when image boots
# ----------------- BEGIN COOK ------------------

step "Clean cook artifacts"
rm -rf /usr/local/bin/cook /usr/local/share/cook

step "Install pot local"
tar -C /root/.pot_local -cf - . | tar -C /usr/local -xf -
rm -rf /root/.pot_local

step "Set file ownership on cook scripts"
chown -R root:wheel /usr/local/bin/cook /usr/local/share/cook
chmod 755 /usr/local/share/cook/bin/*

# ----------------- END COOK ------------------


# ---------- NO NEED TO EDIT BELOW ------------

step "Make cook script executable"
if [ -e /usr/local/bin/cook ]
then
    echo "setting executable bit on /usr/local/bin/cook" | tee -a $COOKLOG
    chmod u+x /usr/local/bin/cook
else
    exit_error "there is no /usr/local/bin/cook to make executable"
fi

#
# There are two ways of running a pot jail: "Normal", non-blocking mode and
# "Nomad", i.e. blocking mode (the pot start command does not return until
# the jail is stopped).
# For the normal mode, we create a /usr/local/etc/rc.d script that starts
# the "cook" script generated above each time, for the "Nomad" mode, the cook
# script is started by pot (configuration through flavour file), therefore
# we do not need to do anything here.
#

# Create rc.d script for "normal" mode:
step "Create rc.d script to start cook"
echo "creating rc.d script to start cook" | tee -a $COOKLOG

# shellcheck disable=SC2016
echo '#!/bin/sh
#
# PROVIDE: cook
# REQUIRE: LOGIN
# KEYWORD: shutdown
#
. /etc/rc.subr
name="cook"
rcvar="cook_enable"
load_rc_config $name
: ${cook_enable:="NO"}
: ${cook_env:=""}
command="/usr/local/bin/cook"
command_args=""
run_rc_command "$1"
' > /usr/local/etc/rc.d/cook

step "Make rc.d script to start cook executable"
if [ -e /usr/local/etc/rc.d/cook ]
then
  echo "Setting executable bit on cook rc file" | tee -a $COOKLOG
  chmod u+x /usr/local/etc/rc.d/cook
else
  exit_error "/usr/local/etc/rc.d/cook does not exist"
fi

if [ "$RUNS_IN_NOMAD" != "true" ]
then
  step "Enable cook service"
  # This is a non-nomad (non-blocking) jail, so we need to make sure the script
  # gets started when the jail is started:
  # Otherwise, /usr/local/bin/cook will be set as start script by the pot
  # flavour
  echo "enabling cook" | tee -a $COOKLOG
  service cook enable
fi

# -------------------- DONE ---------------
exit_ok

nginx-rsync-ssh/nginx-rsync-ssh+1:
nginx-rsync-ssh/nginx-rsync-ssh+1.sh:

nginx-rsync-ssh/nginx-rsync-ssh+2:
nginx-rsync-ssh/nginx-rsync-ssh+2.sh:

nginx-rsync-ssh/nginx-rsync-ssh+3:
nginx-rsync-ssh/nginx-rsync-ssh+3.sh:

nginx-rsync-ssh/nginx-rsync-ssh+4:
nginx-rsync-ssh/nginx-rsync-ssh+4.sh:
Password:===>  Creating a new pot
===>  pot name     : nginx-rsync-ssh-amd64-12_4
===>  type         : single
===>  base         : 12.4
===>  pot_base     : 
===>  level        : 0
===>  network-type : public-bridge
===>  network-stack: ipv4
===>  ip           : 10.192.0.8
===>  bridge       : 
===>  dns          : inherit
===>  flavours     : fbsd-update nginx-rsync-ssh nginx-rsync-ssh+1 nginx-rsync-ssh+2 nginx-rsync-ssh+3 nginx-rsync-ssh+4
===>  Fetching FreeBSD 12.4
===>  Extract the tarball
=====>  Flavour: fbsd-update
=====>  Starting nginx-rsync-ssh-amd64-12_4 pot for the initial bootstrap
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
defaultrouter: NO -> 10.192.0.1
===>  Starting the pot nginx-rsync-ssh-amd64-12_4
Generating host.conf.
ELF ldconfig path: /lib /usr/lib /usr/lib/compat
32-bit compatibility ldconfig path: /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
	inet 127.0.0.1 netmask 0xff000000
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8<VLAN_MTU>
	ether 02:c9:29:ca:70:0b
	inet 10.192.0.8 netmask 0xffc00000 broadcast 10.255.255.255
	groups: epair
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Updating motd:.
Updating /var/run/os-release done.
Creating and/or trimming log files.
Starting syslogd.
Clearing /tmp (X related).
Starting cron.
Starting sendmail_submit.
Starting sendmail_msp_queue.

Mon Feb 20 23:38:58 UTC 2023
/usr/local/etc/pot/flavours/fbsd-update.sh -> /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp/fbsd-update.sh
=====>  Executing fbsd-update script on nginx-rsync-ssh-amd64-12_4
src component not installed, skipped
Looking up update.FreeBSD.org mirrors... 2 mirrors found.
Fetching public key from update1.freebsd.org... done.
Fetching metadata signature for 12.4-RELEASE from update1.freebsd.org... done.
Fetching metadata index... done.
Fetching 2 metadata files... done.
Inspecting system... done.
Preparing to download files... done.
Fetching 36 patches.....10....20....30... done.
Applying patches... done.
Fetching 1 files...  done.
The following files will be added as part of updating to
12.4-RELEASE-p2:
/usr/share/zoneinfo/America/Ciudad_Juarez
The following files will be updated as part of updating to
12.4-RELEASE-p2:
/bin/freebsd-version
/lib/geom/geom_eli.so
/lib/libcrypto.so.111
/rescue/[
/rescue/bectl
/rescue/bsdlabel
/rescue/bunzip2
/rescue/bzcat
/rescue/bzip2
/rescue/camcontrol
/rescue/cat
/rescue/ccdconfig
/rescue/chflags
/rescue/chgrp
/rescue/chio
/rescue/chmod
/rescue/chown
/rescue/chroot
/rescue/clri
/rescue/cp
/rescue/csh
/rescue/date
/rescue/dd
/rescue/devfs
/rescue/df
/rescue/dhclient
/rescue/disklabel
/rescue/dmesg
/rescue/dump
/rescue/dumpfs
/rescue/dumpon
/rescue/echo
/rescue/ed
/rescue/ex
/rescue/expr
/rescue/fastboot
/rescue/fasthalt
/rescue/fdisk
/rescue/fsck
/rescue/fsck_4.2bsd
/rescue/fsck_ffs
/rescue/fsck_msdosfs
/rescue/fsck_ufs
/rescue/fsdb
/rescue/fsirand
/rescue/gbde
/rescue/geom
/rescue/getfacl
/rescue/glabel
/rescue/gpart
/rescue/groups
/rescue/gunzip
/rescue/gzcat
/rescue/gzip
/rescue/halt
/rescue/head
/rescue/hostname
/rescue/id
/rescue/ifconfig
/rescue/init
/rescue/ipf
/rescue/iscsictl
/rescue/iscsid
/rescue/kenv
/rescue/kill
/rescue/kldconfig
/rescue/kldload
/rescue/kldstat
/rescue/kldunload
/rescue/ldconfig
/rescue/less
/rescue/link
/rescue/ln
/rescue/ls
/rescue/lzcat
/rescue/lzma
/rescue/md5
/rescue/mdconfig
/rescue/mdmfs
/rescue/mkdir
/rescue/mknod
/rescue/more
/rescue/mount
/rescue/mount_cd9660
/rescue/mount_msdosfs
/rescue/mount_nfs
/rescue/mount_nullfs
/rescue/mount_udf
/rescue/mount_unionfs
/rescue/mt
/rescue/mv
/rescue/nc
/rescue/newfs
/rescue/newfs_msdos
/rescue/nos-tun
/rescue/pgrep
/rescue/ping
/rescue/ping6
/rescue/pkill
/rescue/poweroff
/rescue/ps
/rescue/pwd
/rescue/rcorder
/rescue/rdump
/rescue/realpath
/rescue/reboot
/rescue/red
/rescue/rescue
/rescue/restore
/rescue/rm
/rescue/rmdir
/rescue/route
/rescue/routed
/rescue/rrestore
/rescue/rtquery
/rescue/rtsol
/rescue/savecore
/rescue/sed
/rescue/setfacl
/rescue/sh
/rescue/shutdown
/rescue/sleep
/rescue/spppcontrol
/rescue/stty
/rescue/swapon
/rescue/sync
/rescue/sysctl
/rescue/tail
/rescue/tar
/rescue/tcsh
/rescue/tee
/rescue/test
/rescue/tunefs
/rescue/umount
/rescue/unlink
/rescue/unlzma
/rescue/unxz
/rescue/unzstd
/rescue/vi
/rescue/whoami
/rescue/xz
/rescue/xzcat
/rescue/zcat
/rescue/zdb
/rescue/zfs
/rescue/zpool
/rescue/zstd
/rescue/zstdcat
/rescue/zstdmt
/usr/bin/openssl
/usr/bin/svnlite
/usr/bin/svnlitebench
/usr/bin/svnlitemucc
/usr/bin/svnliterdump
/usr/bin/svnlitesync
/usr/include/openssl/bnerr.h
/usr/include/openssl/x509v3.h
/usr/lib/libcrypto.a
/usr/lib/libcrypto_p.a
/usr/lib/libfetch.a
/usr/lib/libfetch.so.6
/usr/lib/libfetch_p.a
/usr/lib/libprivatessh.a
/usr/lib/libprivatessh.so.5
/usr/lib/libprivatessh_p.a
/usr/sbin/hostapd
/usr/sbin/wpa_supplicant
/usr/share/zoneinfo/America/Bogota
/usr/share/zoneinfo/America/Cambridge_Bay
/usr/share/zoneinfo/America/Godthab
/usr/share/zoneinfo/America/Inuvik
/usr/share/zoneinfo/America/Iqaluit
/usr/share/zoneinfo/America/Nuuk
/usr/share/zoneinfo/America/Ojinaga
/usr/share/zoneinfo/America/Pangnirtung
/usr/share/zoneinfo/America/Rankin_Inlet
/usr/share/zoneinfo/America/Resolute
/usr/share/zoneinfo/America/Whitehorse
/usr/share/zoneinfo/America/Yellowknife
/usr/share/zoneinfo/Asia/Kuala_Lumpur
/usr/share/zoneinfo/Asia/Singapore
/usr/share/zoneinfo/Canada/Yukon
/usr/share/zoneinfo/Singapore
/usr/share/zoneinfo/zone.tab
/usr/share/zoneinfo/zone1970.tab
Installing updates...Scanning //usr/share/certs/blacklisted for certificates...
Scanning //usr/share/certs/trusted for certificates...
 done.
=====>  Stop the pot nginx-rsync-ssh-amd64-12_4
=====>  Remove p463f4048f505f epair network interfaces
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/dev
=====>  Flavour: nginx-rsync-ssh
=====>  Executing nginx-rsync-ssh pot commands on nginx-rsync-ssh-amd64-12_4
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
=====>  Source /usr/local/etc/pot/flavours/nginx-rsync-ssh.d/local copied in the pot nginx-rsync-ssh-amd64-12_4
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
=====>  /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/dev is already unmounted
=====>  Starting nginx-rsync-ssh-amd64-12_4 pot for the initial bootstrap
=====>  mount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
defaultrouter: 10.192.0.1 -> 10.192.0.1
===>  Starting the pot nginx-rsync-ssh-amd64-12_4
ELF ldconfig path: /lib /usr/lib /usr/lib/compat
32-bit compatibility ldconfig path: /usr/lib32
Starting Network: lo0 epair0b.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
	inet 127.0.0.1 netmask 0xff000000
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
epair0b: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8<VLAN_MTU>
	ether 02:c6:1b:6a:71:0b
	inet 10.192.0.8 netmask 0xffc00000 broadcast 10.255.255.255
	groups: epair
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add net default: gateway 10.192.0.1
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Updating motd:.
Updating /var/run/os-release done.
Creating and/or trimming log files.
Starting syslogd.
Clearing /tmp (X related).
Starting cron.
Starting sendmail_submit.
Starting sendmail_msp_queue.

Mon Feb 20 23:39:40 UTC 2023
/usr/local/etc/pot/flavours/nginx-rsync-ssh.sh -> /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp/nginx-rsync-ssh.sh
=====>  Executing nginx-rsync-ssh script on nginx-rsync-ssh-amd64-12_4
Creating /var/log/cook.log
Step 1: Bootstrap package repo
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] Installing pkg-1.19.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] Extracting pkg-1.19.0: .......... done
Bootstrapping pkg from pkg+http://pkg.FreeBSD.org/FreeBSD:12:amd64/quarterly, please wait...
Step 2: Touch /etc/rc.conf
Step 3: Remove ifconfig_epair0b from config
Step 4: Disable sendmail
sendmail disabled in /etc/rc.conf
sendmail_submit disabled in /etc/rc.conf
sendmail_msp_queue disabled in /etc/rc.conf
Step 5: Enable SSH
sshd enabled in /etc/rc.conf
Step 6: Create /usr/local/etc/rc.d
Step 7: Install package consul
Updating FreeBSD repository catalogue...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] Fetching meta.conf: . done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] Fetching packagesite.pkg: .......... done
Processing entries: .......... done
FreeBSD repository update completed. 32394 packages processed.
All repositories are up to date.
Updating database digests format: . done
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	consul: 1.12.4_3

Number of packages to be installed: 1

The process will require 80 MiB more space.
15 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching consul-1.12.4_3.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing consul-1.12.4_3...
===> Creating groups.
Creating group 'consul' with gid '469'.
===> Creating users
Creating user 'consul' with uid '469'.
===> Creating homedir(s)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting consul-1.12.4_3: ..... done
Step 8: Install package openssl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	openssl: 1.1.1t,1

Number of packages to be installed: 1

The process will require 14 MiB more space.
4 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching openssl-1.1.1t,1.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing openssl-1.1.1t,1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting openssl-1.1.1t,1: .......... done
Step 9: Install package sudo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 3 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	gettext-runtime: 0.21.1
	indexinfo: 0.3.1
	sudo: 1.9.12p2

Number of packages to be installed: 3

The process will require 8 MiB more space.
2 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/3] Fetching indexinfo-0.3.1.pkg: . done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/3] Fetching sudo-1.9.12p2.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/3] Fetching gettext-runtime-0.21.1.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/3] Installing indexinfo-0.3.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/3] Extracting indexinfo-0.3.1: .... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/3] Installing gettext-runtime-0.21.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/3] Extracting gettext-runtime-0.21.1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/3] Installing sudo-1.9.12p2...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/3] Extracting sudo-1.9.12p2: .......... done
Step 10: Install package ca_root_nss
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	ca_root_nss: 3.86

Number of packages to be installed: 1

266 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching ca_root_nss-3.86.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing ca_root_nss-3.86...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting ca_root_nss-3.86: .......... done
=====
Message from ca_root_nss-3.86:

--
FreeBSD does not, and can not warrant that the certification authorities
whose certificates are included in this package have in any way been
audited for trustworthiness or RFC 3647 compliance.

Assessment and verification of trust is the complete responsibility of the
system administrator.


This package installs symlinks to support root certificates discovery by
default for software that uses OpenSSL.

This enables SSL Certificate Verification by client software without manual
intervention.

If you prefer to do this manually, replace the following symlinks with
either an empty file or your site-local certificate bundle.

  * /etc/ssl/cert.pem
  * /usr/local/etc/ssl/cert.pem
  * /usr/local/openssl/cert.pem
Step 11: Install package curl
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 6 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	curl: 7.87.0
	libidn2: 2.3.4
	libnghttp2: 1.48.0
	libpsl: 0.21.1_6
	libssh2: 1.10.0_1,3
	libunistring: 1.1

Number of packages to be installed: 6

The process will require 9 MiB more space.
3 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/6] Fetching libnghttp2-1.48.0.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/6] Fetching libidn2-2.3.4.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/6] Fetching libunistring-1.1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/6] Fetching libssh2-1.10.0_1,3.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/6] Fetching libpsl-0.21.1_6.pkg: ........ done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/6] Fetching curl-7.87.0.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/6] Installing libunistring-1.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/6] Extracting libunistring-1.1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/6] Installing libidn2-2.3.4...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/6] Extracting libidn2-2.3.4: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/6] Installing libnghttp2-1.48.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/6] Extracting libnghttp2-1.48.0: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/6] Installing libssh2-1.10.0_1,3...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/6] Extracting libssh2-1.10.0_1,3: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/6] Installing libpsl-0.21.1_6...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/6] Extracting libpsl-0.21.1_6: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/6] Installing curl-7.87.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/6] Extracting curl-7.87.0: .......... done
Step 12: Install package jq
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	jq: 1.6
	oniguruma: 6.9.8_1

Number of packages to be installed: 2

The process will require 2 MiB more space.
493 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching jq-1.6.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching oniguruma-6.9.8_1.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Installing oniguruma-6.9.8_1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting oniguruma-6.9.8_1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Installing jq-1.6...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting jq-1.6: .......... done
Step 13: Install package jo
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	jo: 1.6

Number of packages to be installed: 1

20 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching jo-1.6.pkg: ... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing jo-1.6...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting jo-1.6: ....... done
Step 14: Install package nano
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	nano: 7.1

Number of packages to be installed: 1

The process will require 3 MiB more space.
598 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching nano-7.1.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing nano-7.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting nano-7.1: .......... done
Step 15: Install package bash
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	bash: 5.2.15
	readline: 8.2.0

Number of packages to be installed: 2

The process will require 11 MiB more space.
2 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching readline-8.2.0.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching bash-5.2.15.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Installing readline-8.2.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting readline-8.2.0: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Installing bash-5.2.15...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting bash-5.2.15: .......... done
Step 16: Install package rsync
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 5 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	libiconv: 1.17
	liblz4: 1.9.4,1
	rsync: 3.2.7
	xxhash: 0.8.1_2
	zstd: 1.5.2_1

Number of packages to be installed: 5

The process will require 8 MiB more space.
2 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/5] Fetching rsync-3.2.7.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/5] Fetching liblz4-1.9.4,1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/5] Fetching zstd-1.5.2_1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/5] Fetching xxhash-0.8.1_2.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/5] Fetching libiconv-1.17.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/5] Installing liblz4-1.9.4,1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/5] Extracting liblz4-1.9.4,1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/5] Installing zstd-1.5.2_1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/5] Extracting zstd-1.5.2_1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/5] Installing xxhash-0.8.1_2...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/5] Extracting xxhash-0.8.1_2: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/5] Installing libiconv-1.17...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/5] Extracting libiconv-1.17: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/5] Installing rsync-3.2.7...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/5] Extracting rsync-3.2.7: .......... done
=====
Message from rsync-3.2.7:

--
Some scripts provided by rsync such as rrsync requires
python which is not installed by default
Step 17: Install package node_exporter
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 1 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	node_exporter: 1.5.0

Number of packages to be installed: 1

The process will require 11 MiB more space.
3 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Fetching node_exporter-1.5.0.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Installing node_exporter-1.5.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/1] Extracting node_exporter-1.5.0: .......... done
=====
Message from node_exporter-1.5.0:

--
If upgrading from a version of node_exporter <0.15.0 you'll need to update any
custom command line flags that you may have set as it now requires a
double-dash (--flag) instead of a single dash (-flag).
The collector flags in 0.15.0 have now been replaced with individual boolean
flags and the -collector.procfs` and -collector.sysfs` flags have been renamed
to --path.procfs and --path.sysfs respectively.
Step 18: Install package nginx
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	nginx: 1.22.1_2,3
	pcre: 8.45_3

Number of packages to be installed: 2

The process will require 8 MiB more space.
2 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching nginx-1.22.1_2,3.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching pcre-8.45_3.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Installing pcre-8.45_3...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting pcre-8.45_3: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Installing nginx-1.22.1_2,3...
===> Creating groups.
Using existing group 'www'.
===> Creating users
Using existing user 'www'.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting nginx-1.22.1_2,3: .......... done
=====
Message from nginx-1.22.1_2,3:

--
Recent version of the NGINX introduces dynamic modules support.  In
FreeBSD ports tree this feature was enabled by default with the DSO
knob.  Several vendor's and third-party modules have been converted
to dynamic modules.  Unset the DSO knob builds an NGINX without
dynamic modules support.

To load a module at runtime, include the new `load_module'
directive in the main context, specifying the path to the shared
object file for the module, enclosed in quotation marks.  When you
reload the configuration or restart NGINX, the module is loaded in.
It is possible to specify a path relative to the source directory,
or a full path, please see
https://www.nginx.com/blog/dynamic-modules-nginx-1-9-11/ and
http://nginx.org/en/docs/ngx_core_module.html#load_module for
details.

Default path for the NGINX dynamic modules is

/usr/local/libexec/nginx.
Step 19: Install package goaccess
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	goaccess: 1.7
	libmaxminddb: 1.6.0

Number of packages to be installed: 2

The process will require 1 MiB more space.
344 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching libmaxminddb-1.6.0.pkg: ..... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching goaccess-1.7.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Installing libmaxminddb-1.6.0...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting libmaxminddb-1.6.0: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Installing goaccess-1.7...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting goaccess-1.7: .......... done
Step 20: Install package acme.sh
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	acme.sh: 3.0.5
	socat: 1.7.4.4

Number of packages to be installed: 2

The process will require 2 MiB more space.
378 KiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Fetching acme.sh-3.0.5.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Fetching socat-1.7.4.4.pkg: .......... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Installing socat-1.7.4.4...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/2] Extracting socat-1.7.4.4: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Installing acme.sh-3.0.5...
===> Creating groups.
Creating group 'acme' with gid '169'.
===> Creating users
Creating user 'acme' with uid '169'.
===> Creating homedir(s)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/2] Extracting acme.sh-3.0.5: .......... done
=====
Message from acme.sh-3.0.5:

--
This script will create the following directories if they do not exist:

 ~acme/.acme.sh
 ~acme/certs

The script will also install ~acme/.acme.sh/account.conf.sample which has
sane defaults.  Copy this to ~acme/.acme.sh/account.conf and edit contents
to suit.

If you have EXAMPLES on:

* In the /usr/local/share/examples/acme.sh directory, you can find the dnsapi 
  scripts which will be useful if you decide to use dns-01 challenges. Also 
  included are the deploy scripts.

* A newsyslog.conf sample file is installed at 
  /usr/local/etc/newsyslog.d/acme.sh - you must modify it by
  at least uncommenting the line.

* If you run `newsyslog -NC` it will create the required logfiles.

* Please edit /usr/local/etc/cron.d/acme.sh - directions are provided in that
  file.
Step 21: Install package syslog-ng
Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
The following 9 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	e2fsprogs-libuuid: 1.46.6
	glib: 2.74.5,2
	json-c: 0.16
	libffi: 3.4.4
	libxml2: 2.10.3_1
	mpdecimal: 2.5.1
	pcre2: 10.40
	python39: 3.9.16
	syslog-ng: 3.38.1

Number of packages to be installed: 9

The process will require 164 MiB more space.
25 MiB to be downloaded.
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/9] Fetching libxml2-2.10.3_1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/9] Fetching mpdecimal-2.5.1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/9] Fetching python39-3.9.16.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/9] Fetching glib-2.74.5,2.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/9] Fetching syslog-ng-3.38.1.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/9] Fetching libffi-3.4.4.pkg: ...... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [7/9] Fetching pcre2-10.40.pkg: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [8/9] Fetching json-c-0.16.pkg: ........ done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [9/9] Fetching e2fsprogs-libuuid-1.46.6.pkg: ..... done
Checking integrity... done (0 conflicting)
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/9] Installing mpdecimal-2.5.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [1/9] Extracting mpdecimal-2.5.1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/9] Installing libffi-3.4.4...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [2/9] Extracting libffi-3.4.4: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/9] Installing libxml2-2.10.3_1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [3/9] Extracting libxml2-2.10.3_1: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/9] Installing python39-3.9.16...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [4/9] Extracting python39-3.9.16: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/9] Installing pcre2-10.40...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [5/9] Extracting pcre2-10.40: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/9] Installing glib-2.74.5,2...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [6/9] Extracting glib-2.74.5,2: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [7/9] Installing json-c-0.16...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [7/9] Extracting json-c-0.16: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [8/9] Installing e2fsprogs-libuuid-1.46.6...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [8/9] Extracting e2fsprogs-libuuid-1.46.6: .......... done
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [9/9] Installing syslog-ng-3.38.1...
[nginx-rsync-ssh-amd64-12_4.vsf00001.cpt.za.honeyguide.net] [9/9] Extracting syslog-ng-3.38.1: .......... done
Compiling glib schemas
No schema files found: doing nothing.
Generating GIO modules cache
=====
Message from python39-3.9.16:

--
Note that some standard Python modules are provided as separate ports
as they require additional dependencies. They are available as:

py39-gdbm       databases/py-gdbm@py39
py39-sqlite3    databases/py-sqlite3@py39
py39-tkinter    x11-toolkits/py-tkinter@py39
=====
Message from syslog-ng-3.38.1:

--
syslog-ng is now installed!  To replace FreeBSD's standard syslogd
(/usr/sbin/syslogd), complete these steps:

1. Create a configuration file named /usr/local/etc/syslog-ng.conf
   (a sample named syslog-ng.conf.sample has been included in
   /usr/local/etc). Note that this is a change in 2.0.2
   version, previous ones put the config file in
   /usr/local/etc/syslog-ng/syslog-ng.conf, so if this is an update
   move that file in the right place

2. Configure syslog-ng to start automatically by adding the following
   to /etc/rc.conf:

        syslog_ng_enable="YES"

3. Prevent the standard FreeBSD syslogd from starting automatically by
   adding a line to the end of your /etc/rc.conf file that reads:

        syslogd_enable="NO"

4. Shut down the standard FreeBSD syslogd:

     kill `cat /var/run/syslog.pid`

5. Start syslog-ng:

     /usr/local/etc/rc.d/syslog-ng start
Step 22: Clean package installation
Checking integrity... done (0 conflicting)
Nothing to do.
Nothing to do.
Step 23: Clean cook artifacts
Step 24: Install pot local
Step 25: Set file ownership on cook scripts
Step 26: Make cook script executable
setting executable bit on /usr/local/bin/cook
Step 27: Create rc.d script to start cook
creating rc.d script to start cook
Step 28: Make rc.d script to start cook executable
Setting executable bit on cook rc file
Step 29: Enable cook service
enabling cook
cook enabled in /etc/rc.conf
=====>  Stop the pot nginx-rsync-ssh-amd64-12_4
=====>  Remove p463f404b9505f epair network interfaces
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/tmp
=====>  unmount /mnt/srv/pot/jails/nginx-rsync-ssh-amd64-12_4/m/dev
=====>  Flavour: nginx-rsync-ssh+1
=====>  Executing nginx-rsync-ssh+1 pot commands on nginx-rsync-ssh-amd64-12_4
=====>  No shell script available for the flavour nginx-rsync-ssh+1
=====>  Flavour: nginx-rsync-ssh+2
=====>  Executing nginx-rsync-ssh+2 pot commands on nginx-rsync-ssh-amd64-12_4
=====>  No shell script available for the flavour nginx-rsync-ssh+2
=====>  Flavour: nginx-rsync-ssh+3
=====>  Executing nginx-rsync-ssh+3 pot commands on nginx-rsync-ssh-amd64-12_4
=====>  No shell script available for the flavour nginx-rsync-ssh+3
=====>  Flavour: nginx-rsync-ssh+4
=====>  Executing nginx-rsync-ssh+4 pot commands on nginx-rsync-ssh-amd64-12_4
=====>  No shell script available for the flavour nginx-rsync-ssh+4

Nginx-rsync-ssh