ansible/environments/home/host_vars/homeserver

@@ -13,7 +13,11 @@ rc_conf: "homeserver_rc.conf"
 loader_conf: "homeserver_loader.conf"
 netgraph_config: "setup_netgraph_homeserver"
 cputype: "intel"
+cpu_opt: broadwell
 hwpstate: false
+build_user:
+  name: talexander
+  group: talexander
 devfs_rules: "homeserver_devfs.rules"
 jail_zfs_dataset: zmass/encrypted/jails
 jail_zfs_dataset_mountpoint: /jail/main

ansible/environments/laptop/group_vars/all

@@ -1,28 +1,3 @@
 timezone: "America/New_York"
 install_bluetooth: true
 emacs_flavor: "full"
-ssh_hosts:
-  - name: poudriere
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.203
-  - name: controller0
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.204
-  - name: controller1
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.205
-  - name: controller2
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.206
-  - name: worker0
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.207
-  - name: worker1
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.208
-  - name: worker2
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.209
-  - name: brianai
-    proxy_jump: talexander@mrmanager
-    host_name: 10.215.1.215

ansible/environments/laptop/host_vars/odofreebsd

@@ -1,21 +1,25 @@
 os_flavor: "freebsd"
-custom_repo: current-default-framework
+#custom_repo: 13amd64-default-framework
 zfs_snapshot_datasets:
   - path: zroot/freebsd/current/be/default
 sshd_enabled: true
 sshd_conf: "sshd_config"
-#pf_config: "odofreebsd_pf.conf"
+pf_config: "odofreebsd_pf.conf"
-#pflog_conf:
+pflog_conf:
-#  - name: 0
+  - name: 0
-#    dev: pflog0
+    dev: pflog0
 network_rc: "odofreebsd_network.conf"
 rc_conf: "odofreebsd_rc.conf"
 loader_conf: "odofreebsd_loader.conf"
 install_graphics: true
 graphics_driver: "amd"
 cputype: "amd"
+cpu_opt: znver4
 hwpstate: true
 cores: 16
+build_user:
+  name: talexander
+  group: talexander
 users:
   talexander:
     initialize: true
@@ -27,7 +31,6 @@ users:
       - name: u2f
       - name: operator # To be able to shutdown without root
       - name: webcamd
-        gid: 145
     authorized_keys:
       - yubikey
       - main_fido

ansible/environments/vm/host_vars/freebsdupdatemrmanager

@@ -0,0 +1,5 @@
+os_flavor: "freebsd"
+cpu_opt: tigerlake
+build_user:
+  name: root
+  group: wheel

ansible/environments/vm/host_vars/poudrieremrmanager

@@ -1,15 +1,13 @@
 os_flavor: "freebsd"
-pkgbase_url: "file:///usr/local/poudriere/data/images/currentznver4-repo/FreeBSD:15:amd64/latest"
 poudriere_builds:
-  # - jail: 13amd64
+  - jail: 13amd64
-  #   ports: default
-  #   set: framework
-  #   version: 13.2-RELEASE
-  - jail: currentznver4
     ports: default
     set: framework
-    version: CURRENT
+    version: 13.2-RELEASE
-    # revision: 66d37dbedfbf2dc94ccf49e6983c3652d5909b91
+  # - jail: current
-    kernel: GENERIC-NODEBUG
+  #   ports: default
-    branch: main
+  #   set: framework
-    srcconf: currentznver4_src.conf
+  #   version: CURRENT
+  #   revision: af01b4722577903f91acc44f01bdcb8cdb2d65ad
+  #   kernel: CUSTOM
+  #   branch: main

ansible/environments/vm/hosts

@@ -1,8 +1,13 @@
 [vm]
 poudriereodo ansible_user=builder ansible_host=10.213.177.12
 poudrieremrmanager ansible_user=root ansible_host=poudriere
+freebsdupdatemrmanager ansible_user=root ansible_host=freebsdupdate
 #
 # Put in ~/.ssh/config
 #    Host poudriere
 #       ProxyJump talexander@mrmanager
 #       HostName 10.215.1.203
+#
+#    Host freebsdupdate
+#       ProxyJump talexander@mrmanager
+#       HostName 10.215.1.213

ansible/playbook.yaml

@@ -42,6 +42,7 @@
     - ansible
     - wireguard
     - portshaker
+    - poudriere
     - android
     - latex
     - python
@@ -67,10 +68,10 @@
   roles:
     - sudo # for poudboot script
     - fstab
-    - package_manager
     - portshaker
     - poudriere
     - poudrierenginx
+    - freebsd_update_server
 
 - hosts: mrmanager
   vars:
@@ -122,6 +123,22 @@
   roles:
     - framework_laptop
 
+- hosts: odofreebsd
+  vars:
+    ansible_become: True
+  roles:
+    - freebsd_update_server
+
+- hosts: freebsdupdatemrmanager
+  vars:
+    ansible_become: True
+  roles:
+    - sudo # for poudboot script
+    - doas
+    - fstab
+    - build
+    - freebsd_update_server
+
 - hosts: homeserver
   vars:
     ansible_become: True

ansible/roles/android/tasks/linux.yaml

@@ -19,6 +19,4 @@
     name:
       - gvfs
       - gvfs-mtp
-      - android-udev # Access android over USB without root.
-      - android-tools # For fastboot to flash phones.
     state: present

ansible/roles/base/files/gitconfig_work

@@ -33,5 +33,3 @@
 	cmd = meld "$LOCAL" "$MERGED" "$REMOTE" --output "$MERGED"
         # Make the middle pane start without any merge progress:
 	# cmd = meld "$LOCAL" "$BASE" "$REMOTE" --output "$MERGED"
-[includeIf "gitdir:/bridge/git/machine_setup/"]
-	path = /bridge/git/machine_setup/ansible/roles/base/files/gitconfig_home

ansible/roles/base/files/odofreebsd_rc.conf

@@ -2,9 +2,9 @@ clear_tmp_enable="YES"
 syslogd_flags="-ss"
 sendmail_enable="NONE"
 hostname="odo"
-wlans_iwlwifi0="wlan0"
+# wlans_iwlwifi0="wlan0"
-ifconfig_wlan0="WPA DHCP"
+# ifconfig_wlan0="WPA DHCP"
-ifconfig_wlan0_ipv6="inet6 accept_rtadv"
+# ifconfig_wlan0_ipv6="inet6 accept_rtadv"
 sshd_enable="YES"
 ntpd_enable="YES"
 powerd_enable="YES"

ansible/roles/base/tasks/linux.yaml

@@ -8,7 +8,6 @@
       - man-db
       - uutils-coreutils
       - usbutils # for lsusb
-      - bolt
     state: present
 
 - name: Start pkgfile update service

ansible/roles/build/defaults/main.yaml

@@ -0,0 +1,2 @@
+# freebsd_version: "releng/13.2"
+freebsd_version: "c3d7bb5aca7749626b5c70dfa86ee8f07960f44a"

ansible/roles/build/files/CUSTOM

@@ -0,0 +1,6 @@
+include GENERIC-NODEBUG
+
+# Disable Intel SD/MMC controller for reading eMMC
+nodevice sdhci
+
+ident   CUSTOM

ansible/roles/build/files/find_packages_that_installed_kernel_modules.bash

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+#
+# List installed packages that install a kernel module.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+: ${PORTSDIR:="/usr/ports"}
+
+function main {
+    if [ "$#" -ne 0 ]; then
+        (>&2 echo "This script takes no positional parameters.")
+        exit 1
+    fi
+    local module
+    doas find / -type f -name '*.ko' | sort | while read module; do
+        local provides=$(pkg provides "$module")
+        if [ -n "$provides" ]; then
+            package_name=$(grep 'Name    : ' <<<"$provides" | sed 's/Name    : //g')
+            # module_file=$(grep 'Filename: ' <<<"$provides" | sed 's/Filename: //g')
+            echo "$package_name"
+        fi
+    done
+}
+
+main "${@}"

ansible/roles/build/files/find_popular_ports_options.bash

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+#
+# Find which port options appear the most in ports.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+: ${PORTSDIR:="/usr/ports"}
+
+function main {
+    if [ "$#" -ne 0 ]; then
+        (>&2 echo "This script takes no positional parameters.")
+        exit 1
+    fi
+    local folder
+    find_port_folders | while read folder; do
+        set +e
+        dump_port_options "$folder"
+        set -e
+    done | sort | uniq -c | sort -nr
+}
+
+function find_port_folders {
+    local mf
+    find "$PORTSDIR" -type f -name Makefile -mindepth 3 -maxdepth 3 | sort | while read mf; do
+        dirname "$mf"
+    done
+}
+
+function dump_port_options {
+    local folder="$1"
+    local portopts=$(make -C "$folder" -V OPTIONS_DEFINE)
+    echo "$portopts" | grep -oE --line-buffered '[^ ]*'
+}
+
+main "${@}"

ansible/roles/build/files/find_ports_containing_option.bash

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+#
+# List ports containing an option matching the first parameter to the script.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+: ${PORTSDIR:="/usr/ports"}
+
+function main {
+    if [ "$#" -ne 1 ]; then
+        (>&2 echo "Pass exactly 1 option name to this script.")
+        exit 1
+    fi
+    local find_option_name=$1
+    local folder
+    find_port_folders | while read folder; do
+        set +e
+        dump_port_options "$folder" | grep -qE "^${find_option_name}$"
+        has_opt=$?;
+        set -e
+        if [ $has_opt -eq 0 ]; then
+            echo "$folder"
+        fi
+    done
+}
+
+function find_port_folders {
+    local mf
+    find "$PORTSDIR" -type f -name Makefile -mindepth 3 -maxdepth 3 | sort | while read mf; do
+        dirname "$mf"
+    done
+}
+
+function dump_port_options {
+    local folder="$1"
+    local portopts=$(make -C "$folder" -V OPTIONS_DEFINE)
+    echo "$portopts" | grep -oE --line-buffered '[^ ]*'
+}
+
+main "${@}"

ansible/roles/build/files/freebsd_update_step1

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+#
+# Build and installs whatever is in /usr/src. Run step 1, reboot, then step 2.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+cores=$(sysctl -n hw.ncpu)
+
+if sudo etcupdate status | grep -qE '^  C '; then
+    >&2 echo 'Conflicts remain in etcupdate. Run `etcupdate resolve` to fix them first.'
+    exit 1
+fi
+
+cd /usr/src
+
+make -j "$cores" clean
+make -j "$cores" buildworld buildkernel
+sudo make installkernel
+
+echo "FreeBSD update step 1 done. Please reboot."

ansible/roles/build/files/freebsd_update_step2

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+#
+# Build and installs whatever is in /usr/src. Run step 1, reboot, then step 2.
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+sudo etcupdate -p
+
+cd /usr/src
+sudo make installworld
+sudo etcupdate -B
+
+if sudo etcupdate status | grep -qE '^  C '; then
+    >&2 echo 'Conflicts in etcupdate. Run `etcupdate resolve` to fix them first.'
+    exit 1
+fi
+
+echo "FreeBSD update step 2 done. Please reboot."

ansible/roles/build/tasks/freebsd.yaml

@@ -0,0 +1,100 @@
+- name: Install packages
+  package:
+    name:
+      - git
+    state: present
+
+- name: Create directories
+  file:
+    name: "{{ item }}"
+    state: directory
+    mode: 0755
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+  loop:
+    - "/usr/src"
+    # - "/usr/ports"
+    - "/usr/obj"
+
+- name: chown the FreeBSD source
+  file:
+    name: "{{ item }}"
+    state: directory
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+    recurse: true
+  loop:
+    - "/usr/src"
+
+- name: Clone FreeBSD Source
+  git:
+    repo: "https://git.FreeBSD.org/src.git"
+    dest: /usr/src
+    version: "{{ freebsd_version }}"
+    force: true
+  become: true
+  become_user: "{{ build_user.name }}"
+  diff: false
+
+# - name: Clone Ports Tree
+#   git:
+#     repo: "https://git.FreeBSD.org/ports.git"
+#     dest: /usr/ports
+#     version: "main"
+#     force: true
+#     update: false
+#   become: true
+#   become_user: "{{ build_user.name }}"
+#   diff: false
+
+- name: Install Configuration
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - src: make.conf
+      dest: /etc/make.conf
+
+- name: Install Configuration
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0644
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+  loop:
+    - src: CUSTOM
+      dest: /usr/src/sys/amd64/conf/CUSTOM
+
+- name: Install Configuration
+  template:
+    src: "templates/{{ item.src }}.j2"
+    dest: "{{ item.dest }}"
+    mode: 0644
+    owner: root
+    group: wheel
+  loop:
+    - src: src.conf
+      dest: /etc/src.conf
+
+- name: Install scripts
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0700
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+  loop:
+    - src: freebsd_update_step1
+      dest: /usr/local/bin/freebsd_update_step1
+    - src: freebsd_update_step2
+      dest: /usr/local/bin/freebsd_update_step2
+    - src: find_popular_ports_options.bash
+      dest: /usr/local/bin/find_popular_ports_options
+    - src: find_ports_containing_option.bash
+      dest: /usr/local/bin/find_ports_containing_option
+    - src: find_packages_that_installed_kernel_modules.bash
+      dest: /usr/local/bin/find_packages_that_installed_kernel_modules

ansible/roles/build/tasks/linux.yaml

@@ -89,7 +89,7 @@
   loop:
     - src: aurutils.conf
       dest: /etc/pacman.d/conf.d/
-    - src: pacman-x86_64.conf
+    - src: pacman-custom.conf
       dest: /etc/aurutils/
     - src: makepkg.conf # TODO: Is this needed or can I use the default from devtools?
       dest: /etc/aurutils/
@@ -103,7 +103,7 @@
     - /var/cache/pacman/custom/
 
 - name: Create custom repo db
-  command: repo-add --new --sign /var/cache/pacman/custom/custom.db.tar "/home/{{ build_user.name }}/.config/ansible_deploy/aurutils/aurutils-*-any.pkg.tar.*"
+  command: repo-add --sign /var/cache/pacman/custom/custom.db.tar
   become: true
   become_user: "{{ build_user.name }}"
   args:

ansible/roles/build/templates/src.conf.j2

@@ -1,7 +1,13 @@
-CPUTYPE?=znver4
+{% if cpu_opt is defined and cpu_opt %}
+CPUTYPE?={{ cpu_opt }}
+{% endif %}
+KERNCONF=CUSTOM
 WITH_MALLOC_PRODUCTION=YES
 WITHOUT_LLVM_ASSERTIONS=YES
 WITH_REPRODUCIBLE_BUILD=YES
+PORTS_MODULES+=graphics/drm-kmod
+PORTS_MODULES+=graphics/gpu-firmware-intel-kmod
+PORTS_MODULES+=net/wireguard-kmod
 
 # Would be fun to experiment with:
 # WITHOUT_SOURCELESS=YES
@@ -25,6 +31,5 @@ WITHOUT_HTML=YES
 WITHOUT_IPFW=YES
 WITHOUT_IPFILTER=YES
 WITHOUT_LLVM_TARGET_ALL=YES
-
 # Commented out because maybe I want email alerts for failing disks
 # WITHOUT_MAIL=YES

ansible/roles/emacs/files/elisp/util-vertico.el

@@ -21,7 +21,7 @@
   (vertico-count 20)
   )
 
-;; Create an ido/ivy-like experience when selecting files.
+;; Create an ivy-like experience when selecting files.
 (use-package vertico-directory
   :after vertico
   :ensure nil

ansible/roles/emacs/tasks/common.yaml

@@ -3,7 +3,6 @@
   package:
     name:
       - aspell
-      - graphviz # used for exporting graphviz dot charts from org-mode
     state: present
 
 - name: Install scripts

ansible/roles/emacs/tasks/freebsd.yaml

@@ -18,6 +18,7 @@
       - py39-black
       - zip # for odt export from org-mode
       - gnuplot # used for exporting graphs from org-mode
+      - graphviz # used for exporting graphviz dot charts from org-mode
       # - pyright
       - sqlite3 # for sqlite code blocks in org-mode
       # - terraform-ls # Terraform language server

ansible/roles/freebsd_update_server/files/build_release.bash

@@ -0,0 +1,130 @@
+#!/usr/bin/env bash
+#
+set -euo pipefail
+IFS=$'\n\t'
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
+
+: ${DATA_DIRECTORY:="/usr/local/share/freebsdupdate"}
+: ${STAGE_FILE:="${DATA_DIRECTORY}/stage"}
+: ${RELEASE_DIRECTORY:="${DATA_DIRECTORY}/release"}
+: ${LOG_DIRECTORY:="${DATA_DIRECTORY}/logs"}
+: ${PORTS_TREE:="/usr/ports"}
+: ${PORTS_REPO:="https://git.FreeBSD.org/ports.git"}
+
+############## Setup #########################
+
+function die {
+    local status_code="$1"
+    shift
+    (>&2 echo "${@}")
+    exit "$status_code"
+}
+
+function log {
+    (>&2 echo "${@}")
+}
+
+############## Program #########################
+
+function main {
+    assert_directories
+
+    local stage=""
+    if [ -e "$STAGE_FILE" ]; then
+        local stage=$(cat "$STAGE_FILE")
+    fi
+    if [ "$stage" = "selfbuild" ]; then
+        log_cmd stage_selfbuild
+    elif [ "$stage" = "selfinstallworld" ]; then
+        log_cmd stage_selfinstallworld
+    elif [ "$stage" = "selfconflictcheck" ]; then
+        log_cmd stage_selfconflictcheck
+    elif [ "$stage" = "releasebuild" ]; then
+        log_cmd stage_releasebuild
+    elif [ "$stage" = "done" ]; then
+        log_cmd stage_done
+    else
+        die 1 "Unhandled stage: \"$stage\"."
+    fi
+}
+
+function log_cmd {
+    "${@}" |& tee "$LOG_DIRECTORY/$(date +%Y%m%d-%s).log"
+}
+
+function self_conflict_check {
+    if etcupdate status | grep -qE '^  C '; then
+        die 1 'Conflicts remain in etcupdate. Run `etcupdate resolve` to fix them first.'
+    fi
+}
+
+function assert_directories {
+    for d in "$DATA_DIRECTORY" "$RELEASE_DIRECTORY" "$LOG_DIRECTORY"; do
+        if [ ! -e "$d" ]; then
+            mkdir -p "$d"
+        fi
+    done
+}
+
+function update_ports_tree {
+    if [ ! -e "$PORTS_TREE" ]; then
+        mkdir -p $PORTS_TREE
+        git -C $PORTS_TREE init --initial-branch=main
+        git -C $PORTS_TREE remote add origin $PORTS_REPO
+    fi
+    git -C $PORTS_TREE fetch origin main # 'refs/heads/main'
+    git -C $PORTS_TREE checkout FETCH_HEAD
+}
+
+function set_stage {
+    echo "${@}" > "$STAGE_FILE"
+}
+
+function stage_selfbuild {
+    self_conflict_check
+    assert_directories
+    update_ports_tree
+
+    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src clean
+    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src buildworld buildkernel
+    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src installkernel
+
+    set_stage "selfinstallworld"
+    /sbin/shutdown -r now
+}
+
+function stage_selfinstallworld {
+    etcupdate -p
+    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src installworld
+    etcupdate -B
+
+    set_stage "selfconflictcheck"
+    stage_selfconflictcheck
+}
+
+function stage_selfconflictcheck {
+    self_conflict_check
+    set_stage "releasebuild"
+    /sbin/shutdown -r now
+}
+
+function stage_releasebuild {
+    local today=$(date +%Y%m%d)
+    local target_directory="${RELEASE_DIRECTORY}/${today}"
+    if [ -e "$target_directory" ]; then
+        die 1 "The release directory $target_directory already exists. Exiting."
+    fi
+    SRCCONF=/dev/null __MAKE_CONF=/dev/null make -C /usr/src clean
+    make -C /usr/src buildworld buildkernel
+    make -C /usr/src/release obj
+    make -C /usr/src/release release
+    mkdir -p "$target_directory"
+    make -C /usr/src/release install DESTDIR="$target_directory"
+    set_stage "done"
+}
+
+function stage_done {
+    log "Everything is done."
+}
+
+main "${@}"

ansible/roles/freebsd_update_server/files/release.conf

@@ -0,0 +1,120 @@
+#!/bin/sh
+#
+
+## Redefine environment variables here to override prototypes
+## defined in release.sh.
+#load_chroot_env() { }
+#load_target_env() { }
+#buildenv_setup() { }
+
+## Set the directory within which the release will be built.
+CHROOTDIR="/scratch"
+
+## Do not explicitly require the devel/git port to be installed.
+#NOGIT=1
+## Set the version control system host.
+GITROOT="https://git.freebsd.org/"
+GITSRC="src.git"
+GITPORTS="ports.git"
+
+## Set the src/, ports/, and doc/ branches or tags.
+#SRCBRANCH="stable/13"
+SRCBRANCH="main"
+PORTBRANCH="main"
+
+## Sample configuration for using git from ports.
+#GITCMD="/usr/local/bin/git clone -q --branch main"
+
+## Set to override the default target architecture.
+#TARGET="amd64"
+#TARGET_ARCH="amd64"
+#KERNEL="GENERIC"
+KERNEL="GENERIC-NODEBUG"
+## Multiple kernels may be set.
+#KERNEL="GENERIC XENHVM"
+
+## Set to specify a custom make.conf and/or src.conf
+#MAKE_CONF="/etc/local/make.conf"
+MAKE_CONF="/etc/make.conf"
+#SRC_CONF="/etc/local/src.conf"
+SRC_CONF="/etc/src.conf"
+
+## Set to use make(1) flags.
+#MAKE_FLAGS="-s"
+
+## Set to use world- and kernel-specific make(1) flags.
+#WORLD_FLAGS="-j $(sysctl -n hw.ncpu)"
+#KERNEL_FLAGS="-j $(( $(( $(sysctl -n hw.ncpu) + 1 )) / 2 ))"
+
+## Set miscellaneous 'make release' settings.
+#NOPORTS=
+#NOSRC=
+#WITH_DVD=
+#WITH_COMPRESSED_IMAGES=
+
+## Set to '1' to disable multi-threaded xz(1) compression.
+#XZ_THREADS=0
+
+## Set when building embedded images.
+#EMBEDDEDBUILD=
+
+## Set to a list of ports required to build embedded system-on-chip
+## images, such as sysutils/u-boot-rpi.
+#EMBEDDEDPORTS=
+
+## Set to the hardware platform of the target userland.  This value
+## is passed to make(1) to set the TARGET (value of uname -m) to cross
+## build.
+#EMBEDDED_TARGET=
+
+## Set to the machine processor architecture of the target userland.
+## This value is passed to make(1) to set the TARGET_ARCH (value of uname -p)
+## to cross build.
+#EMBEDDED_TARGET_ARCH=
+
+## Set to skip the chroot environment buildworld/installworld/distribution
+## step if it is expected the build environment will exist via alternate
+## means.
+#CHROOTBUILD_SKIP=
+
+## Set to a non-empty value skip checkout or update of /usr/src in
+## the chroot.  This is intended for use when /usr/src already exists.
+#SRC_UPDATE_SKIP=
+
+## Set to a non-empty value skip checkout or update of /usr/ports in
+## the chroot.  This is intended for use when /usr/ports already exists.
+#PORTS_UPDATE_SKIP=
+
+## Set to pass additional flags to make(1) for the build chroot setup, such
+## as TARGET/TARGET_ARCH.
+#CHROOT_MAKEENV=
+
+## Set to a non-empty value to build virtual machine images as part of the
+## release build.
+#WITH_VMIMAGES=
+
+## Set to a non-empty value to compress virtual machine images with xz(1)
+## as part of the release build.
+#WITH_COMPRESSED_VMIMAGES=
+
+## If WITH_VMIMAGES is set to a non-empty value, this is the name of the
+## file to use for the installed userland/kernel.
+#VMBASE="vm"
+
+## If WITH_VMIMAGES is set to a non-empty value, this is the size of the
+## virtual machine disk filesystem.  Valid size values are described in
+## the makefs(8) manual page.
+#VMSIZE="20g"
+
+## If WITH_VMIMAGES is set to a non-empty value, this is a list of disk
+## image formats to create.  Valid values are listed in the mkimg(1)
+## manual page, as well as 'mkimg --formats' output.
+#VMFORMATS="vhdf vmdk qcow2 raw"
+
+## Set to a non-empty value to build virtual machine images for various
+## cloud providers as part of the release build.
+#WITH_CLOUDWARE=
+
+## If WITH_CLOUDWARE is set to a non-empty value, this is a list of providers
+## to create disk images.
+#CLOUDWARE="EC2 GCE VAGRANT-VIRTUALBOX VAGRANT-VMWARE"

ansible/roles/freebsd_update_server/tasks/common.yaml

@@ -0,0 +1,5 @@
+- import_tasks: tasks/freebsd.yaml
+  when: 'os_flavor == "freebsd" and build_user is defined'
+
+- import_tasks: tasks/linux.yaml
+  when: 'os_flavor == "linux"'

ansible/roles/freebsd_update_server/tasks/freebsd.yaml

@@ -0,0 +1,50 @@
+- name: Install packages
+  package:
+    name:
+      - git
+      - tmux # For convenience
+      - htop # For convenience
+      - bash
+    state: present
+
+- name: Create directories
+  file:
+    name: "{{ item }}"
+    state: directory
+    mode: 0755
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+  loop:
+    - /opt/freebsd_update_server
+
+- name: Clone freebsd-update-build
+  git:
+    repo: "https://github.com/freebsd/freebsd-update-build.git"
+    dest: /opt/freebsd_update_server/freebsd-update-build
+    version: "28bb3ae7de9c1332fe8a366fb154a5b9faf37f49"
+    force: true
+  become: true
+  become_user: "{{ build_user.name }}"
+  diff: false
+
+- name: Install Configuration
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0600
+    owner: "{{ build_user.name }}"
+    group: "{{ build_user.group }}"
+  loop:
+    - src: release.conf
+      dest: /opt/freebsd_update_server/release.conf
+
+- name: Install scripts
+  copy:
+    src: "files/{{ item.src }}"
+    dest: "{{ item.dest }}"
+    mode: 0755
+    owner: root
+    group: wheel
+  loop:
+    - src: build_release.bash
+      dest: /usr/local/bin/build_release

ansible/roles/freebsd_update_server/tasks/linux.yaml

@@ -0,0 +1,29 @@
+# - name: Build aur packages
+#   register: buildaur
+#   become_user: "{{ build_user.name }}"
+#   command: "aurutils-sync --no-view {{ item }}"
+#   args:
+#     creates: "/var/cache/pacman/custom/{{ item }}-*.pkg.tar.*"
+#   loop:
+#     - foo
+
+# - name: Update cache
+#   when: buildaur.changed
+#   pacman:
+#     name: []
+#     state: present
+#     update_cache: true
+    
+# - name: Install packages
+#   package:
+#     name:
+#       - foo
+#     state: present
+
+# - name: Enable services
+#   systemd:
+#     enabled: yes
+#     name: "{{ item }}"
+#     daemon_reload: yes
+#   loop:
+#     - foo.service

ansible/roles/freebsd_update_server/tasks/main.yaml

@@ -0,0 +1,2 @@
+- import_tasks: tasks/common.yaml
+  # when: foo is defined

ansible/roles/graphics/files/amd_kld_rc.conf

@@ -1 +0,0 @@
-kld_list="/boot/modules/amdgpu.ko"

ansible/roles/graphics/tasks/freebsd_amd.yaml

@@ -31,12 +31,12 @@
 #    - intel_power
 #    - intel_hw_accel_video
 
-- name: Install service configuration
+#- name: Install service configuration
-  copy:
+#  copy:
-    src: "files/amd_{{ item }}_rc.conf"
+#    src: "files/intel_{{ item }}_rc.conf"
-    dest: "/etc/rc.conf.d/{{ item }}"
+#    dest: "/etc/rc.conf.d/{{ item }}"
-    mode: 0644
+#    mode: 0644
-    owner: root
+#    owner: root
-    group: wheel
+#    group: wheel
-  loop:
+#  loop:
-    - kld
+#    - kld

ansible/roles/jail_nat_dhcp/files/kea-dhcp4.conf

@@ -78,6 +78,11 @@
                         // brianai
                         "hw-address": "06:a6:dc:59:78:12",
                         "ip-address": "10.215.1.215"
+                    },
+                    {
+                        // freebsdupdate
+                        "hw-address": "06:14:5c:92:3d:5b",
+                        "ip-address": "10.215.1.213"
                     }
                 ]
             }

ansible/roles/kubernetes/meta/main.yaml

@@ -0,0 +1,2 @@
+dependencies:
+  - build

ansible/roles/kubernetes/tasks/linux.yaml

@@ -1,8 +1,25 @@
+- name: Build aur packages
+  register: buildaur
+  become_user: "{{ build_user.name }}"
+  command: "aurutils-sync --no-view {{ item }}"
+  args:
+    creates: "/var/cache/pacman/custom/{{ item }}-*.pkg.tar.*"
+  loop:
+    - kubeswitch
+    - flux-scm
+
+- name: Update cache
+  when: buildaur.changed
+  pacman:
+    name: []
+    state: present
+    update_cache: true
+
 - name: Install packages
   package:
     name:
       - yamllint
       - stern
-      # - kubeswitch
+      - kubeswitch
-      - fluxcd
+      - flux-scm
     state: present

ansible/roles/package_manager/files/mirrorlist

@@ -1,15 +1,17 @@
-# Server list generated by rankmirrors on 2024-01-30
 ##
 ## Arch Linux repository mirrorlist
 ## Generated on 2023-02-26
 ##
+
 ## Worldwide
 #Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch
 #Server = http://mirror.rackspace.com/archlinux/$repo/os/$arch
 #Server = https://mirror.rackspace.com/archlinux/$repo/os/$arch
+
 ## Argentina
 #Server = http://mirrors.eze.sysarmy.com/archlinux/$repo/os/$arch
 #Server = https://mirrors.eze.sysarmy.com/archlinux/$repo/os/$arch
+
 ## Australia
 #Server = https://mirror.aarnet.edu.au/pub/archlinux/$repo/os/$arch
 #Server = http://archlinux.mirror.digitalpacific.com.au/$repo/os/$arch
@@ -26,6 +28,7 @@
 #Server = http://ftp.swin.edu.au/archlinux/$repo/os/$arch
 #Server = http://mirrors.wale.id.au/archlinux/$repo/os/$arch
 #Server = https://mirrors.wale.id.au/archlinux/$repo/os/$arch
+
 ## Austria
 #Server = http://mirror.alwyzon.net/archlinux/$repo/os/$arch
 #Server = https://mirror.alwyzon.net/archlinux/$repo/os/$arch
@@ -34,20 +37,26 @@
 #Server = https://at.arch.mirror.kescher.at/$repo/os/$arch
 #Server = http://mirror.reisenbauer.ee/archlinux/$repo/os/$arch
 #Server = https://mirror.reisenbauer.ee/archlinux/$repo/os/$arch
+
 ## Azerbaijan
 #Server = http://mirror.yer.az/archlinux/$repo/os/$arch
 #Server = https://mirror.yer.az/archlinux/$repo/os/$arch
+
 ## Bangladesh
 #Server = http://mirror.xeonbd.com/archlinux/$repo/os/$arch
+
 ## Belarus
 #Server = http://ftp.byfly.by/pub/archlinux/$repo/os/$arch
 #Server = http://mirror.datacenter.by/pub/archlinux/$repo/os/$arch
+
 ## Belgium
 #Server = http://archlinux.cu.be/$repo/os/$arch
 #Server = http://archlinux.mirror.kangaroot.net/$repo/os/$arch
 #Server = http://mirror.tiguinet.net/arch/$repo/os/$arch
+
 ## Bosnia and Herzegovina
 #Server = http://archlinux.mirror.ba/$repo/os/$arch
+
 ## Brazil
 #Server = http://br.mirror.archlinux-br.org/$repo/os/$arch
 #Server = http://archlinux.c3sl.ufpr.br/$repo/os/$arch
@@ -58,6 +67,7 @@
 #Server = http://mirror.ufam.edu.br/archlinux/$repo/os/$arch
 #Server = http://mirror.ufscar.br/archlinux/$repo/os/$arch
 #Server = https://mirror.ufscar.br/archlinux/$repo/os/$arch
+
 ## Bulgaria
 #Server = https://mirror.archlinux.bg/$repo/os/$arch
 #Server = https://mirror.darklinux.uk/archlinux/$repo/os/$arch
@@ -67,9 +77,11 @@
 #Server = https://mirror.telepoint.bg/archlinux/$repo/os/$arch
 #Server = http://mirrors.uni-plovdiv.net/archlinux/$repo/os/$arch
 #Server = https://mirrors.uni-plovdiv.net/archlinux/$repo/os/$arch
+
 ## Cambodia
 #Server = http://mirror.sabay.com.kh/archlinux/$repo/os/$arch
 #Server = https://mirror.sabay.com.kh/archlinux/$repo/os/$arch
+
 ## Canada
 #Server = http://mirror.0xem.ma/arch/$repo/os/$arch
 #Server = https://mirror.0xem.ma/arch/$repo/os/$arch
@@ -90,12 +102,14 @@
 #Server = https://mirror.scd31.com/arch/$repo/os/$arch
 #Server = http://mirror.xenyth.net/archlinux/$repo/os/$arch
 #Server = https://mirror.xenyth.net/archlinux/$repo/os/$arch
+
 ## Chile
 #Server = http://mirror.anquan.cl/archlinux/$repo/os/$arch
 #Server = https://mirror.anquan.cl/archlinux/$repo/os/$arch
 #Server = http://mirror.archlinux.cl/$repo/os/$arch
 #Server = http://mirror.ufro.cl/archlinux/$repo/os/$arch
 #Server = https://mirror.ufro.cl/archlinux/$repo/os/$arch
+
 ## China
 #Server = http://mirrors.163.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.aliyun.com/archlinux/$repo/os/$arch
@@ -125,12 +139,15 @@
 #Server = https://mirrors.wsyu.edu.cn/archlinux/$repo/os/$arch
 #Server = https://mirrors.xjtu.edu.cn/archlinux/$repo/os/$arch
 #Server = http://mirrors.zju.edu.cn/archlinux/$repo/os/$arch
+
 ## Colombia
 #Server = http://edgeuno-bog2.mm.fcix.net/archlinux/$repo/os/$arch
 #Server = https://edgeuno-bog2.mm.fcix.net/archlinux/$repo/os/$arch
 #Server = http://mirrors.udenar.edu.co/archlinux/$repo/os/$arch
+
 ## Croatia
 #Server = http://archlinux.iskon.hr/$repo/os/$arch
+
 ## Czechia
 #Server = http://mirror.dkm.cz/archlinux/$repo/os/$arch
 #Server = https://mirror.dkm.cz/archlinux/$repo/os/$arch
@@ -146,21 +163,25 @@
 #Server = http://ftp.sh.cvut.cz/arch/$repo/os/$arch
 #Server = https://ftp.sh.cvut.cz/arch/$repo/os/$arch
 #Server = http://mirror.vpsfree.cz/archlinux/$repo/os/$arch
+
 ## Denmark
 #Server = http://mirrors.dotsrc.org/archlinux/$repo/os/$arch
 #Server = https://mirrors.dotsrc.org/archlinux/$repo/os/$arch
 #Server = http://mirror.one.com/archlinux/$repo/os/$arch
 #Server = https://mirror.one.com/archlinux/$repo/os/$arch
 #Server = https://mirror.safe-con.dk/archlinux/$repo/os/$arch
+
 ## Ecuador
 #Server = http://mirror.cedia.org.ec/archlinux/$repo/os/$arch
 #Server = http://mirror.espoch.edu.ec/archlinux/$repo/os/$arch
 #Server = http://mirror.uta.edu.ec/archlinux/$repo/os/$arch
+
 ## Estonia
 #Server = http://mirror.cspacehostings.com/archlinux/$repo/os/$arch
 #Server = https://mirror.cspacehostings.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.xtom.ee/archlinux/$repo/os/$arch
 #Server = https://mirrors.xtom.ee/archlinux/$repo/os/$arch
+
 ## Finland
 #Server = https://arch.mcstrugs.org/$repo/os/$arch
 #Server = http://mirror.arctic.lol/ArchMirror/$repo/os/$arch
@@ -174,6 +195,7 @@
 #Server = https://mirror.wuki.li/archlinux/$repo/os/$arch
 #Server = http://arch.yhtez.xyz/$repo/os/$arch
 #Server = https://arch.yhtez.xyz/$repo/os/$arch
+
 ## France
 #Server = http://archlinux.de-labrusse.fr/$repo/os/$arch
 #Server = http://mirror.archlinux.ikoula.com/archlinux/$repo/os/$arch
@@ -217,9 +239,11 @@
 #Server = https://mirroir.wptheme.fr/archlinux/$repo/os/$arch
 #Server = http://arch.yourlabs.org/$repo/os/$arch
 #Server = https://arch.yourlabs.org/$repo/os/$arch
+
 ## Georgia
 #Server = http://archlinux.grena.ge/$repo/os/$arch
 #Server = https://archlinux.grena.ge/$repo/os/$arch
+
 ## Germany
 #Server = http://mirror.23m.com/archlinux/$repo/os/$arch
 #Server = https://mirror.23m.com/archlinux/$repo/os/$arch
@@ -322,12 +346,14 @@
 #Server = https://mirrors.xtom.de/archlinux/$repo/os/$arch
 #Server = http://arch.mirror.zachlge.org/$repo/os/$arch
 #Server = https://arch.mirror.zachlge.org/$repo/os/$arch
+
 ## Greece
 #Server = http://ftp.cc.uoc.gr/mirrors/linux/archlinux/$repo/os/$arch
 #Server = https://repo.greeklug.gr/data/pub/linux/archlinux/$repo/os/$arch
 #Server = http://mirrors.myaegean.gr/linux/archlinux/$repo/os/$arch
 #Server = http://ftp.ntua.gr/pub/linux/archlinux/$repo/os/$arch
 #Server = http://ftp.otenet.gr/linux/archlinux/$repo/os/$arch
+
 ## Hong Kong
 #Server = https://asia.mirror.pkgbuild.com/$repo/os/$arch
 #Server = http://mirror-hk.koddos.net/archlinux/$repo/os/$arch
@@ -337,6 +363,7 @@
 #Server = https://arch-mirror.wtako.net/$repo/os/$arch
 #Server = http://mirror.xtom.com.hk/archlinux/$repo/os/$arch
 #Server = https://mirror.xtom.com.hk/archlinux/$repo/os/$arch
+
 ## Hungary
 #Server = https://ftp.ek-cer.hu/pub/mirrors/ftp.archlinux.org/$repo/os/$arch
 #Server = http://archmirror.hbit.sztaki.hu/archlinux/$repo/os/$arch
@@ -346,9 +373,11 @@
 #Server = https://nova.quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
 #Server = https://quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
 #Server = https://super.quantum-mirror.hu/mirrors/pub/archlinux/$repo/os/$arch
+
 ## Iceland
 #Server = http://mirror.system.is/arch/$repo/os/$arch
 #Server = https://mirror.system.is/arch/$repo/os/$arch
+
 ## India
 #Server = https://mirrors.abhy.me/archlinux/$repo/os/$arch
 #Server = https://mirror.albony.xyz/archlinux/$repo/os/$arch
@@ -363,6 +392,7 @@
 #Server = https://mirrors.piconets.webwerks.in/archlinux-mirror/$repo/os/$arch
 #Server = http://mirror.sahil.world/archlinux/$repo/os/$arch
 #Server = https://mirror.sahil.world/archlinux/$repo/os/$arch
+
 ## Indonesia
 #Server = http://mirror.cloudweeb.com/archlinux/$repo/os/$arch
 #Server = http://mirror.faizuladib.com/archlinux/$repo/os/$arch
@@ -382,6 +412,7 @@
 #Server = http://suro.ubaya.ac.id/archlinux/$repo/os/$arch
 #Server = http://mirror.telkomuniversity.ac.id/archlinux/$repo/os/$arch
 #Server = https://mirror.telkomuniversity.ac.id/archlinux/$repo/os/$arch
+
 ## Iran
 #Server = http://mirror.arvancloud.com/archlinux/$repo/os/$arch
 #Server = https://mirror.arvancloud.com/archlinux/$repo/os/$arch
@@ -393,15 +424,18 @@
 #Server = http://mirror.nak-mci.ir/arch/$repo/os/$arch
 #Server = http://mirror.rasanegar.com/archlinux/$repo/os/$arch
 #Server = https://mirror.rasanegar.com/archlinux/$repo/os/$arch
+
 ## Ireland
 #Server = http://ftp.heanet.ie/mirrors/ftp.archlinux.org/$repo/os/$arch
 #Server = https://ftp.heanet.ie/mirrors/ftp.archlinux.org/$repo/os/$arch
+
 ## Israel
 #Server = http://archlinux.interhost.co.il/$repo/os/$arch
 #Server = https://archlinux.interhost.co.il/$repo/os/$arch
 #Server = http://mirror.isoc.org.il/pub/archlinux/$repo/os/$arch
 #Server = https://mirror.isoc.org.il/pub/archlinux/$repo/os/$arch
 #Server = https://archlinux.mivzakim.net/$repo/os/$arch
+
 ## Italy
 #Server = https://archmirror.it/repos/$repo/os/$arch
 #Server = http://archlinux.mirror.garr.it/archlinux/$repo/os/$arch
@@ -410,6 +444,7 @@
 #Server = https://archlinux.mirror.server24.net/$repo/os/$arch
 #Server = http://mirror.spazioincloud.it/archlinux/$repo/os/$arch
 #Server = https://mirror.spazioincloud.it/archlinux/$repo/os/$arch
+
 ## Japan
 #Server = http://mirrors.cat.net/archlinux/$repo/os/$arch
 #Server = https://mirrors.cat.net/archlinux/$repo/os/$arch
@@ -417,28 +452,35 @@
 #Server = http://ftp.jaist.ac.jp/pub/Linux/ArchLinux/$repo/os/$arch
 #Server = https://ftp.jaist.ac.jp/pub/Linux/ArchLinux/$repo/os/$arch
 #Server = https://mirror.saebasol.org/archlinux/$repo/os/$arch
+
 ## Kazakhstan
 #Server = http://mirror.hoster.kz/archlinux/$repo/os/$arch
 #Server = https://mirror.hoster.kz/archlinux/$repo/os/$arch
 #Server = http://mirror.ps.kz/archlinux/$repo/os/$arch
 #Server = https://mirror.ps.kz/archlinux/$repo/os/$arch
+
 ## Kenya
 #Server = http://archlinux.mirror.liquidtelecom.com/$repo/os/$arch
 #Server = https://archlinux.mirror.liquidtelecom.com/$repo/os/$arch
+
 ## Latvia
 #Server = http://archlinux.koyanet.lv/archlinux/$repo/os/$arch
 #Server = https://archlinux.koyanet.lv/archlinux/$repo/os/$arch
+
 ## Lithuania
 #Server = http://mirrors.atviras.lt/archlinux/$repo/os/$arch
 #Server = https://mirrors.atviras.lt/archlinux/$repo/os/$arch
 #Server = http://mirrors.ims.nksc.lt/archlinux/$repo/os/$arch
 #Server = https://mirrors.ims.nksc.lt/archlinux/$repo/os/$arch
+
 ## Luxembourg
 #Server = http://archmirror.xyz/archlinux/$repo/os/$arch
 #Server = https://archmirror.xyz/archlinux/$repo/os/$arch
 #Server = http://archlinux.mirror.root.lu/$repo/os/$arch
+
 ## Mexico
 #Server = https://arch.jsc.mx/$repo/os/$arch
+
 ## Moldova
 #Server = http://md.mirrors.hacktegic.com/archlinux/$repo/os/$arch
 #Server = https://md.mirrors.hacktegic.com/archlinux/$repo/os/$arch
@@ -446,9 +488,11 @@
 #Server = https://mirror.ihost.md/archlinux/$repo/os/$arch
 #Server = http://mirror.mangohost.net/archlinux/$repo/os/$arch
 #Server = https://mirror.mangohost.net/archlinux/$repo/os/$arch
+
 ## Monaco
 #Server = http://archlinux.qontinuum.space/archlinux/$repo/os/$arch
 #Server = https://archlinux.qontinuum.space/archlinux/$repo/os/$arch
+
 ## Netherlands
 #Server = http://mirror.cj2.nl/archlinux/$repo/os/$arch
 #Server = https://mirror.cj2.nl/archlinux/$repo/os/$arch
@@ -487,10 +531,12 @@
 #Server = https://mirror-archlinux.webruimtehosting.nl/$repo/os/$arch
 #Server = http://mirrors.xtom.nl/archlinux/$repo/os/$arch
 #Server = https://mirrors.xtom.nl/archlinux/$repo/os/$arch
+
 ## New Caledonia
 #Server = http://mirror.lagoon.nc/pub/archlinux/$repo/os/$arch
 #Server = http://archlinux.nautile.nc/archlinux/$repo/os/$arch
 #Server = https://archlinux.nautile.nc/archlinux/$repo/os/$arch
+
 ## New Zealand
 #Server = http://mirror.2degrees.nz/archlinux/$repo/os/$arch
 #Server = https://mirror.2degrees.nz/archlinux/$repo/os/$arch
@@ -499,11 +545,13 @@
 #Server = https://archlinux.ourhome.kiwi/$repo/os/$arch
 #Server = http://mirror.smith.geek.nz/archlinux/$repo/os/$arch
 #Server = https://mirror.smith.geek.nz/archlinux/$repo/os/$arch
+
 ## North Macedonia
 #Server = http://arch.softver.org.mk/archlinux/$repo/os/$arch
 #Server = http://mirror.onevip.mk/archlinux/$repo/os/$arch
 #Server = http://mirror.t-home.mk/archlinux/$repo/os/$arch
 #Server = https://mirror.t-home.mk/archlinux/$repo/os/$arch
+
 ## Norway
 #Server = http://mirror.archlinux.no/$repo/os/$arch
 #Server = https://mirror.archlinux.no/$repo/os/$arch
@@ -513,8 +561,10 @@
 #Server = http://mirror.neuf.no/archlinux/$repo/os/$arch
 #Server = https://mirror.neuf.no/archlinux/$repo/os/$arch
 #Server = http://mirror.terrahost.no/linux/archlinux/$repo/os/$arch
+
 ## Paraguay
 #Server = http://archlinux.mirror.py/archlinux/$repo/os/$arch
+
 ## Poland
 #Server = https://mirror.eloteam.tk/archlinux/$repo/os/$arch
 #Server = http://ftp.icm.edu.pl/pub/Linux/dist/archlinux/$repo/os/$arch
@@ -532,6 +582,7 @@
 #Server = http://repo.skni.umcs.pl/archlinux/$repo/os/$arch
 #Server = https://repo.skni.umcs.pl/archlinux/$repo/os/$arch
 #Server = http://ftp.vectranet.pl/archlinux/$repo/os/$arch
+
 ## Portugal
 #Server = http://glua.ua.pt/pub/archlinux/$repo/os/$arch
 #Server = https://glua.ua.pt/pub/archlinux/$repo/os/$arch
@@ -539,6 +590,7 @@
 #Server = https://ftp.rnl.tecnico.ulisboa.pt/pub/archlinux/$repo/os/$arch
 #Server = http://mirrors.up.pt/pub/archlinux/$repo/os/$arch
 #Server = https://mirrors.up.pt/pub/archlinux/$repo/os/$arch
+
 ## Romania
 #Server = http://mirrors.chroot.ro/archlinux/$repo/os/$arch
 #Server = https://mirrors.chroot.ro/archlinux/$repo/os/$arch
@@ -557,6 +609,7 @@
 #Server = https://mirrors.nxthost.com/archlinux/$repo/os/$arch
 #Server = http://mirrors.pidginhost.com/arch/$repo/os/$arch
 #Server = https://mirrors.pidginhost.com/arch/$repo/os/$arch
+
 ## Russia
 #Server = http://mirror.kamtv.ru/archlinux/$repo/os/$arch
 #Server = https://mirror.kamtv.ru/archlinux/$repo/os/$arch
@@ -575,11 +628,14 @@
 #Server = http://mirror.yandex.ru/archlinux/$repo/os/$arch
 #Server = https://mirror.yandex.ru/archlinux/$repo/os/$arch
 #Server = http://archlinux.zepto.cloud/$repo/os/$arch
+
 ## Réunion
 #Server = http://arch.mithril.re/$repo/os/$arch
+
 ## Serbia
 #Server = http://arch.petarmaric.com/$repo/os/$arch
 #Server = http://mirror.pmf.kg.ac.rs/archlinux/$repo/os/$arch
+
 ## Singapore
 #Server = http://mirror.0x.sg/archlinux/$repo/os/$arch
 #Server = https://mirror.0x.sg/archlinux/$repo/os/$arch
@@ -593,15 +649,18 @@
 #Server = http://ossmirror.mycloud.services/os/linux/archlinux/$repo/os/$arch
 #Server = http://mirror.sg.gs/archlinux/$repo/os/$arch
 #Server = https://mirror.sg.gs/archlinux/$repo/os/$arch
+
 ## Slovakia
 #Server = http://mirror.lnx.sk/pub/linux/archlinux/$repo/os/$arch
 #Server = https://mirror.lnx.sk/pub/linux/archlinux/$repo/os/$arch
 #Server = http://tux.rainside.sk/archlinux/$repo/os/$arch
+
 ## Slovenia
 #Server = http://archimonde.ts.si/archlinux/$repo/os/$arch
 #Server = https://archimonde.ts.si/archlinux/$repo/os/$arch
 #Server = http://mirror.tux.si/arch/$repo/os/$arch
 #Server = https://mirror.tux.si/arch/$repo/os/$arch
+
 ## South Africa
 #Server = http://archlinux.za.mirror.allworldit.com/archlinux/$repo/os/$arch
 #Server = https://archlinux.za.mirror.allworldit.com/archlinux/$repo/os/$arch
@@ -609,6 +668,7 @@
 #Server = http://mirror.is.co.za/mirror/archlinux.org/$repo/os/$arch
 #Server = http://mirrors.urbanwave.co.za/archlinux/$repo/os/$arch
 #Server = https://mirrors.urbanwave.co.za/archlinux/$repo/os/$arch
+
 ## South Korea
 #Server = http://mirror.anigil.com/archlinux/$repo/os/$arch
 #Server = https://mirror.anigil.com/archlinux/$repo/os/$arch
@@ -623,11 +683,13 @@
 #Server = https://mirror.misakamikoto.network/archlinux/$repo/os/$arch
 #Server = http://mirror.premi.st/archlinux/$repo/os/$arch
 #Server = https://mirror.premi.st/archlinux/$repo/os/$arch
+
 ## Spain
 #Server = https://mirror.cloroformo.org/archlinux/$repo/os/$arch
 #Server = http://mirror.librelabucm.org/archlinux/$repo/os/$arch
 #Server = https://mirror.librelabucm.org/archlinux/$repo/os/$arch
 #Server = http://ftp.rediris.es/mirror/archlinux/$repo/os/$arch
+
 ## Sweden
 #Server = http://ftp.acc.umu.se/mirror/archlinux/$repo/os/$arch
 #Server = https://ftp.acc.umu.se/mirror/archlinux/$repo/os/$arch
@@ -638,6 +700,7 @@
 #Server = http://ftp.myrveln.se/pub/linux/archlinux/$repo/os/$arch
 #Server = https://ftp.myrveln.se/pub/linux/archlinux/$repo/os/$arch
 #Server = https://mirror.osbeck.com/archlinux/$repo/os/$arch
+
 ## Switzerland
 #Server = http://pkg.adfinis.com/archlinux/$repo/os/$arch
 #Server = https://pkg.adfinis.com/archlinux/$repo/os/$arch
@@ -650,6 +713,7 @@
 #Server = https://theswissbay.ch/archlinux/$repo/os/$arch
 #Server = https://mirror.ungleich.ch/mirror/packages/archlinux/$repo/os/$arch
 #Server = https://mirror.worldhotspot.org/archlinux/$repo/os/$arch
+
 ## Taiwan
 #Server = http://mirror.archlinux.tw/ArchLinux/$repo/os/$arch
 #Server = https://mirror.archlinux.tw/ArchLinux/$repo/os/$arch
@@ -661,16 +725,19 @@
 #Server = http://ftp.tku.edu.tw/Linux/ArchLinux/$repo/os/$arch
 #Server = http://ftp.yzu.edu.tw/Linux/archlinux/$repo/os/$arch
 #Server = https://ftp.yzu.edu.tw/Linux/archlinux/$repo/os/$arch
+
 ## Thailand
 #Server = https://mirror.cyberbits.asia/archlinux/$repo/os/$arch
 #Server = http://mirror.kku.ac.th/archlinux/$repo/os/$arch
 #Server = https://mirror.kku.ac.th/archlinux/$repo/os/$arch
 #Server = http://mirror2.totbb.net/archlinux/$repo/os/$arch
+
 ## Turkey
 #Server = http://ftp.linux.org.tr/archlinux/$repo/os/$arch
 #Server = http://depo.turkiye.linux.web.tr/archlinux/$repo/os/$arch
 #Server = https://depo.turkiye.linux.web.tr/archlinux/$repo/os/$arch
 #Server = http://mirror.veriteknik.net.tr/archlinux/$repo/os/$arch
+
 ## Ukraine
 #Server = http://archlinux.astra.in.ua/$repo/os/$arch
 #Server = https://archlinux.astra.in.ua/$repo/os/$arch
@@ -684,6 +751,7 @@
 #Server = https://mirror.mirohost.net/archlinux/$repo/os/$arch
 #Server = http://mirrors.nix.org.ua/linux/archlinux/$repo/os/$arch
 #Server = https://mirrors.nix.org.ua/linux/archlinux/$repo/os/$arch
+
 ## United Kingdom
 #Server = http://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch
 #Server = https://archlinux.uk.mirror.allworldit.com/archlinux/$repo/os/$arch
@@ -708,18 +776,152 @@
 #Server = https://mirrors.ukfast.co.uk/sites/archlinux.org/$repo/os/$arch
 #Server = http://mirror.cov.ukservers.com/archlinux/$repo/os/$arch
 #Server = https://mirror.cov.ukservers.com/archlinux/$repo/os/$arch
+
 ## United States
 #Server = http://mirrors.acm.wpi.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.advancedhosters.com/archlinux/$repo/os/$arch
+Server = http://mirrors.aggregate.org/archlinux/$repo/os/$arch
+Server = http://il.us.mirror.archlinux-br.org/$repo/os/$arch
+Server = http://mirror.arizona.edu/archlinux/$repo/os/$arch
+Server = https://mirror.arizona.edu/archlinux/$repo/os/$arch
+Server = http://arlm.tyzoid.com/$repo/os/$arch
+Server = https://arlm.tyzoid.com/$repo/os/$arch
+Server = https://mirror.ava.dev/archlinux/$repo/os/$arch
+Server = http://mirrors.bloomu.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.bloomu.edu/archlinux/$repo/os/$arch
+Server = http://ca.us.mirror.archlinux-br.org/$repo/os/$arch
+Server = http://mirrors.cat.pdx.edu/archlinux/$repo/os/$arch
+Server = http://mirror.cc.columbia.edu/pub/linux/archlinux/$repo/os/$arch
+Server = http://mirror.clarkson.edu/archlinux/$repo/os/$arch
+Server = https://mirror.clarkson.edu/archlinux/$repo/os/$arch
+Server = http://arch.mirror.constant.com/$repo/os/$arch
+Server = https://arch.mirror.constant.com/$repo/os/$arch
+Server = http://mirror.cs.pitt.edu/archlinux/$repo/os/$arch
+Server = http://mirror.cs.vt.edu/pub/ArchLinux/$repo/os/$arch
+Server = http://mirror.cybersecurity.nmt.edu/archlinux/$repo/os/$arch
+Server = https://mirror.cybersecurity.nmt.edu/archlinux/$repo/os/$arch
+Server = http://distro.ibiblio.org/archlinux/$repo/os/$arch
+Server = http://mirror.es.its.nyu.edu/archlinux/$repo/os/$arch
+Server = http://mirror.ette.biz/archlinux/$repo/os/$arch
+Server = https://mirror.ette.biz/archlinux/$repo/os/$arch
+Server = http://codingflyboy.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://coresite.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://irltoolkit.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://mirror.fcix.net/archlinux/$repo/os/$arch
+Server = http://mnvoip.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://nnenix.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://ridgewireless.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://southfront.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://uvermont.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://ziply.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://codingflyboy.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://coresite.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://irltoolkit.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://mirror.fcix.net/archlinux/$repo/os/$arch
+Server = https://mnvoip.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://nnenix.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://ridgewireless.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://southfront.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://uvermont.mm.fcix.net/archlinux/$repo/os/$arch
+Server = https://ziply.mm.fcix.net/archlinux/$repo/os/$arch
+Server = http://mirror.fossable.org/archlinux/$repo/os/$arch
+Server = https://america.mirror.pkgbuild.com/$repo/os/$arch
+Server = http://mirrors.gigenet.com/archlinux/$repo/os/$arch
+Server = http://www.gtlib.gatech.edu/pub/archlinux/$repo/os/$arch
+Server = http://mirror.hackingand.coffee/arch/$repo/os/$arch
+Server = https://mirror.hackingand.coffee/arch/$repo/os/$arch
+Server = https://mirror.hodgepodge.dev/archlinux/$repo/os/$arch
+Server = http://mirror.hostup.org/archlinux/$repo/os/$arch
+Server = https://mirror.hostup.org/archlinux/$repo/os/$arch
+Server = http://arch.hu.fo/archlinux/$repo/os/$arch
+Server = https://arch.hu.fo/archlinux/$repo/os/$arch
+Server = http://repo.ialab.dsu.edu/archlinux/$repo/os/$arch
+Server = https://repo.ialab.dsu.edu/archlinux/$repo/os/$arch
+Server = https://arch.mirror.ivo.st/$repo/os/$arch
+Server = http://mirrors.kernel.org/archlinux/$repo/os/$arch
+Server = https://mirrors.kernel.org/archlinux/$repo/os/$arch
+Server = http://mirror.dal10.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = http://mirror.mia11.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = http://mirror.sfo12.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = http://mirror.wdc1.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = https://mirror.dal10.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = https://mirror.mia11.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = https://mirror.sfo12.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = https://mirror.wdc1.us.leaseweb.net/archlinux/$repo/os/$arch
+Server = http://mirrors.liquidweb.com/archlinux/$repo/os/$arch
+Server = http://mirror.lty.me/archlinux/$repo/os/$arch
+Server = https://mirror.lty.me/archlinux/$repo/os/$arch
+Server = http://mirrors.lug.mtu.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.lug.mtu.edu/archlinux/$repo/os/$arch
+Server = https://m.lqy.me/arch/$repo/os/$arch
+Server = http://mirror.math.princeton.edu/pub/archlinux/$repo/os/$arch
+Server = http://mirror.metrocast.net/archlinux/$repo/os/$arch
+Server = http://mirror.kaminski.io/archlinux/$repo/os/$arch
+Server = https://mirror.kaminski.io/archlinux/$repo/os/$arch
+Server = http://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
+Server = https://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
+Server = http://repo.miserver.it.umich.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.mit.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.mit.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.ocf.berkeley.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.ocf.berkeley.edu/archlinux/$repo/os/$arch
+Server = http://archmirror1.octyl.net/$repo/os/$arch
+Server = https://archmirror1.octyl.net/$repo/os/$arch
+Server = http://ftp.osuosl.org/pub/archlinux/$repo/os/$arch
+Server = https://ftp.osuosl.org/pub/archlinux/$repo/os/$arch
+Server = http://arch.mirrors.pair.com/$repo/os/$arch
+Server = http://dfw.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = http://iad.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = http://ord.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = https://dfw.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = https://iad.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = https://ord.mirror.rackspace.com/archlinux/$repo/os/$arch
+Server = http://mirrors.radwebhosting.com/archlinux/$repo/os/$arch
+Server = https://mirrors.radwebhosting.com/archlinux/$repo/os/$arch
+Server = http://plug-mirror.rcac.purdue.edu/archlinux/$repo/os/$arch
+Server = https://plug-mirror.rcac.purdue.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.rit.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.rit.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.rutgers.edu/archlinux/$repo/os/$arch
+Server = https://mirrors.rutgers.edu/archlinux/$repo/os/$arch
+Server = https://mirror2.sandyriver.net/pub/archlinux/$repo/os/$arch
+Server = http://mirror.siena.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.sonic.net/archlinux/$repo/os/$arch
+Server = https://mirrors.sonic.net/archlinux/$repo/os/$arch
+Server = http://mirror.phx1.us.spryservers.net/archlinux/$repo/os/$arch
+Server = https://mirror.phx1.us.spryservers.net/archlinux/$repo/os/$arch
+Server = http://arch.mirror.square-r00t.net/$repo/os/$arch
+Server = https://arch.mirror.square-r00t.net/$repo/os/$arch
+Server = http://mirror.stephen304.com/archlinux/$repo/os/$arch
+Server = https://mirror.stephen304.com/archlinux/$repo/os/$arch
+Server = http://mirror.stjschools.org/arch/$repo/os/$arch
+Server = https://mirror.stjschools.org/arch/$repo/os/$arch
+Server = http://ftp.sudhip.com/archlinux/$repo/os/$arch
+Server = https://ftp.sudhip.com/archlinux/$repo/os/$arch
+Server = http://mirror.pit.teraswitch.com/archlinux/$repo/os/$arch
+Server = https://mirror.pit.teraswitch.com/archlinux/$repo/os/$arch
+Server = https://mirror.the-repo.org/ArchMirror/$repo/os/$arch
+Server = https://mirror.theash.xyz/arch/$repo/os/$arch
+Server = https://mirror.tmmworkshop.com/archlinux/$repo/os/$arch
+Server = http://mirror.umd.edu/archlinux/$repo/os/$arch
+Server = https://mirror.umd.edu/archlinux/$repo/os/$arch
+Server = http://mirrors.vectair.net/archlinux/$repo/os/$arch
+Server = https://mirrors.vectair.net/archlinux/$repo/os/$arch
+Server = http://mirror.vtti.vt.edu/archlinux/$repo/os/$arch
+Server = http://wcbmedia.io:8000/$repo/os/$arch
+Server = http://mirrors.xmission.com/archlinux/$repo/os/$arch
+Server = http://mirrors.xtom.com/archlinux/$repo/os/$arch
+Server = https://mirrors.xtom.com/archlinux/$repo/os/$arch
+Server = https://mirror.zackmyers.io/archlinux/$repo/os/$arch
+Server = https://zxcvfdsa.com/arch/$repo/os/$arch
+
 ## Uzbekistan
 #Server = http://mirror.dc.uz/arch/$repo/os/$arch
 #Server = https://mirror.dc.uz/arch/$repo/os/$arch
+
 ## Vietnam
 #Server = https://mirrors.42tm.tech/archlinux/$repo/os/$arch
 #Server = http://f.archlinuxvn.org/archlinux/$repo/os/$arch
 #Server = http://mirror.bizflycloud.vn/archlinux/$repo/os/$arch
-#Server = https://arch.mirror.constant.com/$repo/os/$arch
-Server = https://iad.mirrors.misaka.one/archlinux/$repo/os/$arch
-Server = https://forksystems.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://mirrors.mit.edu/archlinux/$repo/os/$arch
-Server = https://coresite.mm.fcix.net/archlinux/$repo/os/$arch
-Server = https://uvermont.mm.fcix.net/archlinux/$repo/os/$arch

ansible/roles/package_manager/tasks/common.yaml

@@ -3,3 +3,12 @@
 
 - import_tasks: tasks/linux.yaml
   when: 'os_flavor == "linux"'
+
+- include_tasks:
+    file: tasks/peruser.yaml
+    apply:
+      become: yes
+      become_user: "{{ initialize_user }}"
+  loop: "{{ users | dict2items | community.general.json_query('[?value.initialize==`true`].key') }}"
+  loop_control:
+    loop_var: initialize_user

ansible/roles/package_manager/tasks/freebsd.yaml

@@ -65,16 +65,6 @@
   loop:
     - { src: custom.conf.j2, dest: /usr/local/etc/pkg/repos/custom.conf }
 
-- name: Install Configuration
-  when: pkgbase_url is defined
-  template:
-    src: "{{ item.src }}"
-    dest: "{{ item.dest }}"
-    owner: root
-    group: wheel
-    mode: 0644
-  loop:
-    - { src: pkgbase.conf.j2, dest: /usr/local/etc/pkg/repos/pkgbase.conf }
 # - name: Replace all packages with packages from new repo
 #   command: pkg upgrade -f -y
 #   when: changed_config.changed

ansible/roles/package_manager/tasks/peruser.yaml

@@ -0,0 +1,29 @@
+- include_role:
+    name: per_user
+
+# - name: Create directories
+#   file:
+#     name: "{{ account_homedir.stdout }}/{{ item }}"
+#     state: directory
+#     mode: 0700
+#     owner: "{{ account_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
+#   loop:
+#     - ".config/foo"
+
+# - name: Copy files
+#   copy:
+#     src: "files/{{ item.src }}"
+#     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"
+#     mode: 0600
+#     owner: "{{ account_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
+#   loop:
+#     - src: foo.conf
+#       dest: .config/foo/foo.conf
+
+- import_tasks: tasks/peruser_freebsd.yaml
+  when: 'os_flavor == "freebsd"'
+
+- import_tasks: tasks/peruser_linux.yaml
+  when: 'os_flavor == "linux"'

ansible/roles/package_manager/templates/pkgbase.conf.j2

@@ -1,17 +0,0 @@
-base: {
-    # url: "file:///usr/local/poudriere/data/images/currentznver4-repo/FreeBSD:15:amd64/latest"
-    # url: "file:///update"
-    # url: "https://freebsdpkg.fizz.buzz/pkgbase/currentznver4-repo/FreeBSD:15:amd64/latest",
-    url: "{{ pkgbase_url }}",
-    mirror_type: "none",
-    enabled: yes,
-    # signature_type: "pubkey",
-    # pubkey: "/usr/local/etc/pkg/poudriere.pub",
-    priority: 100
-}
-# poudriere jail -c -j current -v main -a amd64 -m git -D -U https://git.FreeBSD.org/src.git -K GENERIC-NODEBUG -B -b
-# env ABI=FreeBSD:15:amd64 pkg update -f -r base
-# env ABI=FreeBSD:15:amd64 pkg install -r base  -g 'FreeBSD-*'
-
-# for f in /etc/master.passwd /etc/group /etc/sysctl.conf /etc/ssh/sshd_config; do cp -v "$f.pkgsave" "$f"; done
-# pwd_mkdb -p /etc/master.passwd

ansible/roles/poudriere/files/poudboot

@@ -13,12 +13,12 @@ desc="Poudriere Loop"
 
 load_rc_config $name
 
-: ${poudboot_enable:=NO}
+: ${poudboot_enable:=YES}
 
 command=/usr/sbin/daemon
 pidfile=/var/run/${name}.pid
 
-command_args="-p $pidfile -u root -f -S -T $name nice -n 10 poudboot start"
+command_args="-p $pidfile -u root -f -S -T $name poudboot start"
 
 export PATH="${PATH}:/usr/local/bin"
 run_rc_command "$1"

ansible/roles/poudriere/files/poudboot.bash

@@ -8,7 +8,6 @@ DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 : ${LOCKFILE:="/var/run/poudboot.lock"}
 : ${INFO_DIR:="/opt/poudriere/run_info"}
 : ${PORT_UPDATE_SECONDS:="86400"}
-: ${CLEAN_SECONDS:="1209600"}
 : ${BUILD_SECONDS:="7200"}
 : ${LOG_RETENTION_DAYS:="30"}
 
@@ -68,7 +67,7 @@ function abort_if_jobs_running {
 }
 
 function build {
-    poudriere pkgclean -v -y "$@"
+    poudriere pkgclean -y "$@"
     poudriere bulk -J "${POUDRIERE_JOBS:-1}" "$@"
 }
 
@@ -89,7 +88,6 @@ function cmd_start {
                 mkdir -p "$RUN_DIR"
                 local PORTUPDATE=0
                 local LASTBUILD=0
-                local LASTCLEAN=0
                 if [ -e "$TIMES_FILE" ]; then
                     source "$TIMES_FILE"
                 fi
@@ -99,25 +97,19 @@ function cmd_start {
                     portshaker -U
                     portshaker -M
                     PORTUPDATE=$(date +%s)
+                    # Cleanup old unused dist files
+                    poudriere distclean -y -p "$PORTS" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
+                    poudriere logclean -y "$LOG_RETENTION_DAYS"
                 fi
                 if [ $((now - LASTBUILD)) -gt "$BUILD_SECONDS" ]; then
                     log "Building ports for $JAIL-$PORTS-$SET"
                     build -j "$JAIL" -p "$PORTS" -z "$SET" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
                     LASTBUILD=$(date +%s)
                 fi
-                if [ $((now - LASTCLEAN)) -gt "$CLEAN_SECONDS" ]; then
-                    log "Cleaning for $JAIL-$PORTS-$SET"
-                    # Cleanup old unused dist files
-                    poudriere distclean -v -y -p "$PORTS" -f /usr/local/etc/poudriere.d/$JAIL-$PORTS-$SET-pkglist
-                    poudriere logclean -v -y "$LOG_RETENTION_DAYS"
-                    # TODO: Should clean be a global ?
-                    LASTCLEAN=$(date +%s)
-                fi
 
                 cat > "$TIMES_FILE" <<EOF
 PORTUPDATE=$PORTUPDATE
 LASTBUILD=$LASTBUILD
-LASTCLEAN=$LASTCLEAN
 EOF
             )
         done

ansible/roles/poudriere/files/poudriere.d/13amd64-default-framework-make.conf

@@ -1,10 +1,10 @@
-# Disable CPUTYPE optimizations when compiling gcc48 because zen 4 is not included in gcc4.8
+# Disable CPUTYPE optimizations when compiling gcc48 because tigerlake is not included in gcc4.8
+#
+# Disable CPUTYPE optimizations for qt6-base because FreeBSD 13 is on Clang 14 which does not yet support zen4 (added in Clang 16) so qt6 is incorrectly flagging my CPU as not supporting AVX512.
 #
 # Example from bottom of /usr/share/examples/etc/make.conf
-.if ${.CURDIR:M*/devel/boost-libs*} || ${.CURDIR:M*/multimedia/wl-screenrec*} || ${.CURDIR:M*/www/firefox*}
+.if ${.CURDIR:N*/lang/gcc48*} && ${.CURDIR:N*/lang/gcc10*} && ${.CURDIR:N*/devel/qt6-base*}
-CPUTYPE?=x86-64-v4
+CPUTYPE?=tigerlake
-.elif ${.CURDIR:N*/lang/gcc48*} && ${.CURDIR:N*/lang/gcc10*} && ${.CURDIR:N*/devel/binutils*} && ${.CURDIR:N*/devel/qt6-base*} && ${.CURDIR:N*/www/node20*}
-CPUTYPE?=znver4
 # CPUTYPE?=x86-64-v4
 .endif
 
@@ -21,10 +21,6 @@ CPUTYPE?=znver4
 OPTIONS_SET+=STATIC LTO
 .endif
 
-.if ${.CURDIR:M*/editors/emacs*}
-OPTIONS_SET+=NATIVECOMP PGTK
-.endif
-
 OPTIONS_SET+=OPTIMIZED_CFLAGS
 # qemu uses STATIC_LINK instead of the more standard flag of STATIC
 OPTIONS_SET+=STATIC_LINK

ansible/roles/poudriere/files/poudriere.d/13amd64-default-framework-options/editors_emacs/options

@@ -0,0 +1,44 @@
+# This file is auto-generated by 'make config'.
+# Options for emacs-29.1,3
+_OPTIONS_READ=emacs-29.1,3
+_FILE_COMPLETE_OPTIONS_LIST=ACL DBUS GNUTLS GSETTINGS HARFBUZZ JSON LCMS2 M17N MAILUTILS MODULES NATIVECOMP OTF PGTK SCROLLBARS SOURCES SQLITE3 THREADS TREESITTER XFT XIM XML XWIDGETS GFILE KQUEUE ALSA OSS GTK2 GTK3 MOTIF XAW XAW3D CAIRO GIF JPEG MAGICK PNG SVG TIFF WEBP XPM
+OPTIONS_FILE_SET+=ACL
+OPTIONS_FILE_SET+=DBUS
+OPTIONS_FILE_SET+=GNUTLS
+OPTIONS_FILE_SET+=GSETTINGS
+OPTIONS_FILE_SET+=HARFBUZZ
+OPTIONS_FILE_SET+=JSON
+OPTIONS_FILE_SET+=LCMS2
+OPTIONS_FILE_UNSET+=M17N
+OPTIONS_FILE_SET+=MAILUTILS
+OPTIONS_FILE_SET+=MODULES
+OPTIONS_FILE_SET+=NATIVECOMP
+OPTIONS_FILE_SET+=OTF
+OPTIONS_FILE_SET+=PGTK
+OPTIONS_FILE_SET+=SCROLLBARS
+OPTIONS_FILE_SET+=SOURCES
+OPTIONS_FILE_SET+=SQLITE3
+OPTIONS_FILE_SET+=THREADS
+OPTIONS_FILE_SET+=TREESITTER
+OPTIONS_FILE_UNSET+=XFT
+OPTIONS_FILE_UNSET+=XIM
+OPTIONS_FILE_SET+=XML
+OPTIONS_FILE_UNSET+=XWIDGETS
+OPTIONS_FILE_UNSET+=GFILE
+OPTIONS_FILE_SET+=KQUEUE
+OPTIONS_FILE_UNSET+=ALSA
+OPTIONS_FILE_SET+=OSS
+OPTIONS_FILE_UNSET+=GTK2
+OPTIONS_FILE_SET+=GTK3
+OPTIONS_FILE_UNSET+=MOTIF
+OPTIONS_FILE_UNSET+=XAW
+OPTIONS_FILE_UNSET+=XAW3D
+OPTIONS_FILE_SET+=CAIRO
+OPTIONS_FILE_SET+=GIF
+OPTIONS_FILE_SET+=JPEG
+OPTIONS_FILE_UNSET+=MAGICK
+OPTIONS_FILE_SET+=PNG
+OPTIONS_FILE_SET+=SVG
+OPTIONS_FILE_SET+=TIFF
+OPTIONS_FILE_SET+=WEBP
+OPTIONS_FILE_UNSET+=XPM

ansible/roles/poudriere/files/poudriere.d/13amd64-default-framework-pkglist

@@ -20,7 +20,7 @@ dns/coredns
 editors/emacs
 editors/mg
 ftp/wget
-graphics/ImageMagick7
+graphics/ImageMagick
 graphics/drm-kmod
 graphics/evince
 graphics/gimp
@@ -51,7 +51,7 @@ net-mgmt/ipcalc
 net/google-cloud-sdk
 net/rsync
 net/tcpdump
-net/wireguard-tools
+net/wireguard
 net/wlvncc
 ports-mgmt/pkg
 ports-mgmt/pkg-provides
@@ -105,18 +105,16 @@ textproc/en-aspell
 textproc/gsed
 textproc/jq
 textproc/kdiff3
-textproc/meld
 textproc/py-pygments
 textproc/ripgrep
 www/firefox
-www/yt-dlp
 x11-fm/pcmanfm
 x11-fonts/cascadia-code
 x11-fonts/noto
 x11-fonts/noto-emoji
 x11-fonts/noto-extra
-x11-fonts/source-code-pro-ttf
 x11-fonts/source-sans-ttf
+x11-fonts/sourcecodepro-ttf
 x11-themes/adwaita-qt5
 x11-themes/adwaita-qt6
 x11-wm/sway

ansible/roles/poudriere/files/poudriere_schedule_build.bash

@@ -5,7 +5,7 @@ IFS=$'\n\t'
 DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
 
 function main {
-    find / -type f -name times -exec sed -E -i 's/LASTBUILD=.*/LASTBUILD=0/' {} \;
+    find / -type f -name times -exec sed -iE 's/LASTBUILD=.*/LASTBUILD=0/' {} \;
 }
 
 main "${@}"

ansible/roles/poudriere/tasks/freebsd.yaml

@@ -92,16 +92,6 @@
     mode: 0600
   loop: "{{ poudriere_builds }}"
 
-- name: Install src.conf
-  when: item.srcconf is defined
-  copy:
-    src: "files/{{ item.srcconf }}"
-    dest: "/usr/local/etc/poudriere.d/{{ item.jail }}-src.conf"
-    owner: root
-    group: wheel
-    mode: 0600
-  loop: "{{ poudriere_builds }}"
-
 - name: Install rc script
   copy:
     src: "files/{{ item.src }}"
@@ -131,7 +121,7 @@
 - name: Create the jails
   when: item.version != "CURRENT"
   command: |-
-    poudriere jail {{poudriere_perf_flags}} -c -j {{ item.jail }} -v {{ item.version }} -B -b
+    poudriere jail {{poudriere_perf_flags}} -c -j {{ item.jail }} -v {{ item.version }}
   args:
     creates: "/usr/local/poudriere/jails/{{ item.jail }}"
   loop: "{{ poudriere_builds }}"
@@ -139,10 +129,8 @@
 - name: Create the jails
   when: item.version == "CURRENT"
   # -D clones the entire history instead of just the most recent commit
-  # -B to build the pkgbase packages
-  # -b to build the jail OS from source
   command: |-
-    echo poudriere jail {{poudriere_perf_flags}} -c -j {{ item.jail }} -v {{ item.branch|default("main") }} -a amd64 -m git -D -U https://git.FreeBSD.org/src.git -K {{ item.kernel|default("GENERIC-NODEBUG") }} -B -b
+    poudriere jail {{poudriere_perf_flags}} -c -j {{ item.jail }} -v {{ item.branch|default("main") }} -a amd64 -m git -D -U https://git.FreeBSD.org/src.git -K {{ item.kernel|default("GENERIC") }}
   args:
     creates: "/usr/local/poudriere/jails/{{ item.jail }}"
   loop: "{{ poudriere_builds }}"

ansible/roles/poudrierenginx/files/nginx.conf

@@ -39,10 +39,5 @@ http {
             alias /usr/local/poudriere/data/packages;
             autoindex on;
         }
-
-        location /pkgbase {
-            alias /usr/local/poudriere/data/images;
-            autoindex on;
-        }
     }
 }

ansible/roles/rust/defaults/main.yaml

@@ -1,2 +1,2 @@
 # Check that rust-analyzer is valid for date on https://rust-lang.github.io/rustup-components-history/
-rust_date: "2024-03-28"
+rust_date: "2023-12-04"

ansible/roles/rust/files/cargo_config.toml

@@ -1,2 +1,2 @@
 [target.x86_64-unknown-linux-gnu]
-rustflags = ["-C", "target-cpu=native", "-Zthreads=0"]
+rustflags = ["-C", "target-cpu=native"]

ansible/roles/rust/tasks/freebsd.yaml

@@ -18,7 +18,7 @@
   git:
     repo: "https://github.com/rust-lang/rust-analyzer.git"
     dest: /opt/rust-analyzer
-    version: "2024-04-01"
+    version: "2023-05-01"
     force: true
   diff: false
 

ansible/roles/rust/tasks/linux.yaml

@@ -6,7 +6,4 @@
       - musl # for building static binaries
       - rust-analyzer
       - cargo-semver-checks
-      # ? - cargo-bloat
-      # ? - cargo-outdated
-      # ? - cargo-public-api
     state: present

ansible/roles/rust/tasks/peruser_linux.yaml

@@ -22,11 +22,6 @@
   args:
     creates: "{{ account_homedir.stdout }}/.rustup/toolchains/nightly-{{ rust_date }}-x86_64-unknown-linux-gnu/bin/cargo-clippy"
 
-- name: Install cranelift
-  command: rustup component add rustc-codegen-cranelift
-  args:
-    creates: "{{ account_homedir.stdout }}/.rustup/toolchains/nightly-{{ rust_date }}-x86_64-unknown-linux-gnu/lib/rustlib/manifest-rustc-codegen-cranelift-preview-x86_64-unknown-linux-gnu"
-
 - name: Create directories
   file:
     name: "{{ account_homedir.stdout }}/{{ item }}"

ansible/roles/ssh_client/tasks/peruser.yaml

@@ -1,34 +1,26 @@
 - include_role:
     name: per_user
 
-- name: Create directories
+# - name: Create directories
-  file:
+#   file:
-    name: "{{ account_homedir.stdout }}/{{ item }}"
+#     name: "{{ account_homedir.stdout }}/{{ item }}"
-    state: directory
+#     state: directory
-    mode: 0700
+#     mode: 0700
-    owner: "{{ account_name.stdout }}"
+#     owner: "{{ account_name.stdout }}"
-    group: "{{ group_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
-  loop:
+#   loop:
-    - ".ssh"
+#     - ".config/foo"
 
-- name: Add ssh hosts to config
+# - name: Copy files
-  blockinfile:
+#   copy:
-    path: "{{ account_homedir.stdout }}/.ssh/config"
+#     src: "files/{{ item.src }}"
-    marker: "# {mark} ANSIBLE MANAGED BLOCK {{ item.name }}"
+#     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"
-    create: true
+#     mode: 0600
-    mode: 0600
+#     owner: "{{ account_name.stdout }}"
-    owner: "{{ account_name.stdout }}"
+#     group: "{{ group_name.stdout }}"
-    group: "{{ group_name.stdout }}"
+#   loop:
-    block: |
+#     - src: foo.conf
-      Host {{ item.name }}
+#       dest: .config/foo/foo.conf
-      {% if item.proxy_jump is defined %}
-        ProxyJump {{ item.proxy_jump }}
-      {% endif %}
-      {% if item.host_name is defined %}
-        HostName {{ item.host_name }}
-      {% endif %}
-  when: ssh_hosts is defined
-  loop: "{{ ssh_hosts }}"
 
 - import_tasks: tasks/peruser_freebsd.yaml
   when: 'os_flavor == "freebsd"'

ansible/roles/vscode/files/keybindings.json

@@ -164,7 +164,7 @@
         "command": "-editor.action.clipboardPasteAction"
     },
     {
-        "key": "ctrl+x p f",
+        "key": "ctrl+x ctrl+f",
         "command": "workbench.action.quickOpen"
     },
     {
@@ -204,77 +204,5 @@
     {
         "key": "ctrl+shift+p",
         "command": "-workbench.action.showCommands"
-    },
-    {
-        "key": "ctrl+c ctrl+a",
-        "command": "editor.action.quickFix",
-        "when": "editorHasCodeActionsProvider && textInputFocus && !editorReadonly"
-    },
-    {
-        "key": "ctrl+.",
-        "command": "-editor.action.quickFix",
-        "when": "editorHasCodeActionsProvider && textInputFocus && !editorReadonly"
-    },
-    {
-        "key": "shift+alt+5",
-        "command": "editor.action.startFindReplaceAction",
-        "when": "editorFocus || editorIsOpen"
-    },
-    {
-        "key": "ctrl+h",
-        "command": "-editor.action.startFindReplaceAction",
-        "when": "editorFocus || editorIsOpen"
-    },
-    {
-        "key": "shift+1",
-        "command": "editor.action.replaceAll",
-        "when": "editorFocus && findWidgetVisible"
-    },
-    {
-        "key": "ctrl+alt+enter",
-        "command": "-editor.action.replaceAll",
-        "when": "editorFocus && findWidgetVisible"
-    },
-    {
-        "key": "shift+alt+,",
-        "command": "cursorTop",
-        "when": "textInputFocus"
-    },
-    {
-        "key": "ctrl+home",
-        "command": "-cursorTop",
-        "when": "textInputFocus"
-    },
-    {
-        "key": "shift+alt+.",
-        "command": "cursorBottom",
-        "when": "textInputFocus"
-    },
-    {
-        "key": "ctrl+end",
-        "command": "-cursorBottom",
-        "when": "textInputFocus"
-    },
-    {
-        "key": "ctrl+x ctrl+f",
-        "command": "workbench.action.files.openFile",
-        "when": "true"
-    },
-    {
-        "key": "ctrl+o",
-        "command": "-workbench.action.files.openFile",
-        "when": "true"
-    },
-    {
-        "key": "ctrl+x k",
-        "command": "workbench.action.closeEditorInAllGroups"
-    },
-    {
-        "key": "ctrl+x b",
-        "command": "workbench.action.showAllEditors"
-    },
-    {
-        "key": "ctrl+k ctrl+p",
-        "command": "-workbench.action.showAllEditors"
     }
 ]

ansible/roles/vscode/files/settings.json

@@ -1,7 +1,7 @@
 {
   "application.shellEnvironmentResolutionTimeout": 90,
   "workbench.colorTheme": "Default High Contrast",
-  "remote.SSH.connectTimeout": 90,
+  "remote.SSH.connectTimeout": 30,
   "remote.SSH.enableDynamicForwarding": false,
   "remote.SSH.enableAgentForwarding": false,
   "remote.SSH.enableX11Forwarding": false,
@@ -15,22 +15,9 @@
     "editorCursor.foreground": "#ccff66",
     "terminalCursor.foreground": "#ccff66"
   },
-  "workbench.editor.showTabs": "none",
-  "workbench.activityBar.location": "hidden",
-  "window.menuBarVisibility": "toggle",
-  "explorer.autoReveal": false,
   "[python]": {
     "editor.defaultFormatter": "ms-python.black-formatter",
     "editor.formatOnSave": true
   },
-  "[terraform]": {
+  "black-formatter.importStrategy": "fromEnvironment"
-    "editor.defaultFormatter": "hashicorp.terraform",
-    "editor.formatOnSave": true
-  },
-  "[terraform-vars]": {
-    "editor.defaultFormatter": "hashicorp.terraform",
-    "editor.formatOnSave": true
-  },
-  "black-formatter.importStrategy": "fromEnvironment",
-  "workbench.statusBar.visible": false
 }

ansible/roles/vscode/tasks/peruser_linux.yaml

@@ -1,5 +1,4 @@
 - name: Copy files
-  when: not closed_source_vscode
   copy:
     src: "files/{{ item.src }}"
     dest: "{{ account_homedir.stdout }}/{{ item.dest }}"
@@ -45,7 +44,7 @@
     owner: "{{ account_name.stdout }}"
     group: "{{ group_name.stdout }}"
   loop:
-    - .config/Code - OSS/User
+    - .config/Code/User
 
 - name: Copy files
   when: not closed_source_vscode

ansible/roles/wireguard/tasks/freebsd.yaml

@@ -1,7 +1,7 @@
 - name: Install packages
   package:
     name:
-      - wireguard-tools
+      - wireguard
     state: present
 
 - name: Configure wireguard

ansible/roles/zfs/tasks/linux.yaml

@@ -2,6 +2,7 @@
   package:
     name:
       - linux-lts-headers
+      - linux-headers
     state: present
 
 - name: Check trusted gpg keys

ansible/run.bash

@@ -40,6 +40,8 @@ elif [ "$target" = "jail_admin_git" ]; then
     ansible-playbook -v -i environments/jail playbook.yaml --diff --limit admin_git "${@}"
 elif [ "$target" = "jail_public_dns" ]; then
     ansible-playbook -v -i environments/jail playbook.yaml --diff --limit public_dns "${@}"
+elif [ "$target" = "vm_freebsdupdatemrmanager" ]; then
+    ansible-playbook -v -i environments/vm playbook.yaml --diff --limit freebsdupdatemrmanager "${@}"
 else
     die 1 "Unrecognized target"
 fi