From 955a51aa3c7f082865f7bdd8451ab199b49fd9af Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Lesimple?= Date: Tue, 4 Feb 2025 17:04:50 +0000 Subject: [PATCH] chg: upgrade tests from FreeBSD 13.2 to 14.2 Some packages were no longer easy to install (such as screen), which made the tests fail. The code should still work under FreeBSD 13.x however, but we now officially support and test v14.2 --- .github/workflows/freebsd.yml | 6 +++--- README.md | 4 ++-- doc/sphinx/installation/basic.rst | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 75a919159..6fb0447ed 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -18,7 +18,7 @@ jobs: uses: cross-platform-actions/action@master with: operating_system: freebsd - version: '13.2' + version: '14.2' shell: bash sync_files: runner-to-vm run: | @@ -31,8 +31,8 @@ jobs: # to do proper tests, we need the fs to have ACLs enabled sudo mount -o acls / # install required packages - sudo env IGNORE_OSVERSION=yes pkg update - sudo env IGNORE_OSVERSION=yes pkg install -y bash rsync ca_root_nss jq fping screen flock curl + sudo env pkg update + sudo env pkg install -y bash rsync ca_root_nss jq fping screen flock curl # create required folder sudo mkdir -p /opt/bastion # copy bastion code to the proper location diff --git a/README.md b/README.md index b98372d43..212bf117a 100644 --- a/README.md +++ b/README.md @@ -127,9 +127,9 @@ Any other so-called "modern" Linux version are not tested with each release, but The following OS are also tested with each release: -- FreeBSD/HardenedBSD 13.2\*\* +- FreeBSD/HardenedBSD 14.2\*\* -\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 13.2. +\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks, as well as no filesystem-level ACL support and missing PAM support (hence no MFA). diff --git a/doc/sphinx/installation/basic.rst b/doc/sphinx/installation/basic.rst index 4b2e66590..d74ddef67 100644 --- a/doc/sphinx/installation/basic.rst +++ b/doc/sphinx/installation/basic.rst @@ -44,11 +44,11 @@ but should work with no or minor adjustments. The following OS are also tested with each release: -- FreeBSD/HardenedBSD 13.2\*\* +- FreeBSD/HardenedBSD 14.2\*\* \*\*: Note that these have partial MFA support, due to their reduced set of available ``pam`` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. -The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 13.2. +The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks,