diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 75a919159..6fb0447ed 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -18,7 +18,7 @@ jobs: uses: cross-platform-actions/action@master with: operating_system: freebsd - version: '13.2' + version: '14.2' shell: bash sync_files: runner-to-vm run: | @@ -31,8 +31,8 @@ jobs: # to do proper tests, we need the fs to have ACLs enabled sudo mount -o acls / # install required packages - sudo env IGNORE_OSVERSION=yes pkg update - sudo env IGNORE_OSVERSION=yes pkg install -y bash rsync ca_root_nss jq fping screen flock curl + sudo env pkg update + sudo env pkg install -y bash rsync ca_root_nss jq fping screen flock curl # create required folder sudo mkdir -p /opt/bastion # copy bastion code to the proper location diff --git a/README.md b/README.md index b98372d43..212bf117a 100644 --- a/README.md +++ b/README.md @@ -127,9 +127,9 @@ Any other so-called "modern" Linux version are not tested with each release, but The following OS are also tested with each release: -- FreeBSD/HardenedBSD 13.2\*\* +- FreeBSD/HardenedBSD 14.2\*\* -\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 13.2. +\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks, as well as no filesystem-level ACL support and missing PAM support (hence no MFA). diff --git a/doc/sphinx/installation/basic.rst b/doc/sphinx/installation/basic.rst index 4b2e66590..d74ddef67 100644 --- a/doc/sphinx/installation/basic.rst +++ b/doc/sphinx/installation/basic.rst @@ -44,11 +44,11 @@ but should work with no or minor adjustments. The following OS are also tested with each release: -- FreeBSD/HardenedBSD 13.2\*\* +- FreeBSD/HardenedBSD 14.2\*\* \*\*: Note that these have partial MFA support, due to their reduced set of available ``pam`` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. -The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 13.2. +The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks,