Ceph is a distributed object store and file system designed to
provide excellent performance, reliability and scalability.
PR: 217046
Submitted by: Willem Jan Withagen <wjw@digiware.nl>
Reported by: Willem Jan Withagen <wjw@digiware.nl>
Reviewed by: asomers, feld, mat, mmokhi
Approved by: asomers, feld (mentor)
Differential Revision: https://reviews.freebsd.org/D9584
Samhain is an open source file integrity and host-based intrusion
detection system for Linux and Unix. It can run as a daemon process,
and and thus can remember file changes - contrary to a tool that runs
from cron, if a file is modified you will get only one report, while
subsequent checks of that file will ignore the modification as it is
already reported (unless the file is modified again).
Samhain can optionally be used as client/server system to provide
centralized monitoring for multiple host. Logging to a (MySQL or
PostgreSQL) database is supported.
PR: 214623
Submitted by: Nikola Kolev <koue@chaosophia.net>
- enables privilege separation
- removes the build dependency on asciidoctor
- removes the runtime dependency on makeinfo and readline
- add a runtime dependency on libedit
- do not install the HTML documentation (in favour of man pages)
- update the post-install message (pkg-message) in light of privilege separation
- set the permission of /var/db/chrony to the new "chronyd" user and group
PR: 216737
Submitted by: maintainer
Approved by: mat (mentor)
Differential Revision: https://reviews.freebsd.org/D9570
This update introduces a dedicated user for uwsgi and introduces the
uwsgi_socket_owner setting which by default is set to www:www. The
previous change to socket mode of 600 has been modified to 660 as well.
This change further increases security while restoring compatibility.
MFH: 2017Q1
Differential Revision: https://reviews.freebsd.org/D9398
- Add missing run depends
- Add rc script
- Add example configs
- Add instructions to pkg-message
- Add user for daemon to run as non-root
- Add patch to run with newer nacl
- Take maintainership
Approved by: maintainer (private communications)
Differential Revision: https://reviews.freebsd.org/D9228
Lightdm is a display manager that:
* Is cross-desktop - supports different desktops
* Supports different display technologies
* Is lightweight - low memory usage and fast performance
* Has a comprehensive test suite
WWW: https://www.freedesktop.org/wiki/Software/LightDM/
lightdm-gtk-greeter is the reference GTK+ greeter for LightDM.
WWW: https://launchpad.net/lightdm-gtk-greeter
Approved by: adamw (mentor, implicit)
Horizon is a Django-based project aimed at providing
a complete OpenStack Dashboard along with an extensible framework
for building new dashboards from reusable components.
PR: 215155
Submitted by: Alexander Nusov (alexander.nusov@nfvexpress.com)
Recursive DNS/DNSCurve server and comandline tool to debug DNS/DNSCurve
WWW: https://mojzis.com/software/dq/
PR: 215073
Submitted by: Piotr Kubaj <pkubaj@anongoth.pl>
Please note that this is a development version of nova.
Many features are not available.
Currently nova works on FreeBSD 11 and supports QEMU and Xen.
Common issues:
- Security groups are not implemented
- ARP spoofing, DHCP isolation protection are not implemented
- Nova services work from the root user
- No IPv6 support
QEMU issues:
- Need to enable serialconsole (TCP)
- Need to disable online CPU tracking
- Cannot mount cinder volumes
Xen issues:
- Live snapshots don't work
- No support for cinder volume hot-plugging
- XENBUS delay (5 min) when using qemu driver and COW images
- Some Linux images cannot be booted
For further FreeBSD specific notes please refer to port's pkg-message.
PR: 215151
Submitted by: Alexander Nusov (alexander.nusov@nfvexpress.com)
- Rewrite the rc script with new options that allows users to:
- set config file.
- set datadir.
- set bitcoin limits.
PR: ports/213235
Submitted by: Christopher Hall <hsw@bitmark.com>
Approved by: maintainer timeout (1 month)
- Set permissions properly on ETCDIR
- Add an information on znc user/group to pkg-message
- Pass maintainership to dbaio
PR: 200005
Submitted by: josh+freebsd@zevlag.com, dbaio@bsd.com.br
Nexus Repository Manager OSS provides you with an essential level of control
over the external repositories you use and the internal repositories you create.
It provides infrastructure and services for organizations that use repository
managers to obtain and deliver software. If you create software libraries or
applications for your end users, you can use Nexus Repository Manager OSS to
distribute your software. If your software depends on open source software
components, you can cache software components from remote repositories.
Nexus Repository Manager OSS features:
- Hosting repositories
- Proxy remote repositories
- Repository groups
- Numerous repository formats
- Hosting project websites
- Fine-grained security model
- Flexible LDAP integration
- Component search
- Scheduled rasks
- REST services
- Integration with m2eclipse
WWW: https://www.sonatype.com/nexus-repository-oss
PR: 203074
Submitted by: Dusan Vejnovic <freebsd@dussan.org>, Michael Osipov <1983-01-06@gmx.net> (maintainer)
Reviewed by: feld, junovitch, koobs (mentors)
Approved by: feld, junovitch, koobs (mentors)
FastDFS is an open source high performance distributed file system (DFS).
It's major functions include: file storing, file syncing and file accessing,
and design for high capacity and load balance.
WWW: https://github.com/happyfish100/fastdfs
PR: 213311
Submitted by: Daniel Ylitalo <daniel@blodan.se>
Summary:
Add 'rtg' user and group in UIDs/GIDs.
Use daemon(8) to daemonize rtgpoll.
Add prestart commands to set correct permissions for RTG's files.
Reviewers: swills, allanjude, xmj, andrew.fengler_scaleengine.com, #contributor_reviewers_ports, matthew
Reviewed By: #contributor_reviewers_ports, matthew
Subscribers: matthew, mat
Differential Revision: https://reviews.freebsd.org/D7486
OpenMDNS is a full implementation of MDNS/DNS-SD, it aims to be a light
replacement for Avahi/Bonjour. Currently OpenMDNS is about 10% of the size
of Avahi.
http://www.haesbaert.org/openmdns/
Prometheus is a systems and service monitoring system. It collects metrics
from configured targets at given intervals, evaluates rule expressions,
displays the results, and can trigger alerts if some condition is observed
to be true.
Prometheus' main distinguishing features as compared to other monitoring
systems are:
- a multi-dimensional data model (timeseries defined by metric name and
set of key/value dimensions)
- a flexible query language to leverage this dimensionality
- no dependency on distributed storage; single server nodes are autonomous
- timeseries collection happens via a pull model over HTTP
- pushing timeseries is supported via an intermediary gateway
- targets are discovered via service discovery or static configuration
- multiple modes of graphing and dashboarding support
- support for hierarchical and horizontal federation
WWW: https://prometheus.io/
PR: 212468
Submitted by: Jev Bjoersell <jev@ecadlabs.com>
The Knot DNS Resolver is a caching full resolver implementation,
including both a resolver library and a daemon.
WWW: https://www.knot-resolver.cz/
PR: 212215
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
ufdbGuard is a URL filter for the Squid web proxy. Besides blocking
access from PCs and smartphones to undesired websites, ufdbGuard
has safety features to make browsing safer and to block remote
access. ufdbGuard supports configuration of groups with different
web access policies, SafeSearch enforcement, SSH tunnel detection,
safer HTTPS traffic, time-based access rules and much more.
WWW: https://www.urlfilterdb.com/
PR: 212044
Submitted by: Pavel Timofeev <timp87@gmail.com>
People always go to the end and see that it's 999 and that we must be
out of entries. Now, they'll just have to pick a free entry.
Generated with (should be idempotent):
awk -F: '$3>=100 && $3 < 1000 && $3 != old+1 && !/^#/ {while (old+1 <= $3-1) {old=old+1; print "# free: "old}} /^# free/ {next} {print; old=$3}' UIDs
Discussed with: swills (on irc)
Sponsored by: Absolight
Sndio is a small audio and MIDI framework part of the OpenBSD project.
It provides an lightweight audio & MIDI server and a fully documented
user-space API to access either the server or directly the hardware in
a uniform way. Sndio is designed to work for desktop applications,
but pays special attention to synchronization mechanisms and
reliability required by music applications. Reliability through
simplicity are part of the project goals.
WWW: http://www.sndio.org/
PR: 210124
Submitted by: Tobias Kortkamp <t@tobik.me>
Uchiwa is a simple dashboard for the Sensu monitoring framework.
WWW: http://uchiwa.io/
PR: 210071
Submitted by: Alexander Holte-Davidsen <ports@treg.io>
- Update rc.d script to run as davmail user rather than root
- Update rc.d script to take advantage of daemon(8) rather than hand-rolling
process management
- Update rev info (checksums, refresh patches, etc.)
- Remove .md5 files
- Appease testport by removing empty dirs in STAGEDIR not in plist
UIDs/GIDs: add davmail user
Changes: https://sourceforge.net/p/davmail/code/2427/tree/trunk/releasenotes.txt
PR: 209354
Submitted by: John Hein <z7dr6ut7gs@snkmail.com>
Approved by: maintainer timeout (7 weeks)
Tile38 is an open source (MIT licensed), in-memory geolocation data store,
spatial index, and realtime geofence. It supports a variety of object types
including lat/lon points, bounding boxes, XYZ tiles, Geohashes, and GeoJSON.
Features:
Spatial index with search methods such as NEARBY, WITHIN, and INTERSECTS.
Realtime geofencing through persistent sockets or webhooks.
Object types of lat/lon, bbox, Geohash, GeoJSON, QuadKey, and XYZ tile.
Support for lots of Clients Libraries written in many different langauges.
Variety of client protocols, including http (curl), websockets, telnet,
and the Redis RESP.
Server responses are RESP or JSON.
Full command line interface.
Leader / follower replication.
In-memory database that persists on disk.
WWW: http://tile38.com/
PR: 210147
Submitted by: olevole@olevole.ru
to deploy applications across an infrastructure. Deploy virtualized,
containerized, or standalone application workloads across a fleet of
servers to maximize resource utilization.
https://www.nomadproject.io/
PR: 210456
Submitted by: John Hixson <jhixson@gmail.com>
ntopng is a new generation flexible and feature-rich tool for monitoring and
troubleshooting local area networks. It provides command line and web
interfaces, the latter via an embedded web server. ntop is based on libpcap.
WWW: http://www.ntop.org/products/ntop/
