HBSD-UPDATE-BUILD.CONF(5)

NAME
hbsd-update-build.conf - configuration file for hbsd-update-build(8)

DESCRIPTION
The hbsd-update-build.conf file controls the behavior of the hbsd-update-build(8) tool. The file is parsed by sh(1) and follows its syntax for declaring variables.

The possible options and their meanings are as follows:

BRANCH
    The git branch or tag to use after doing the initial code checkout. (Default: “hardened/current/master”)

CHROOTDIR
    The directory to use in building a chroot environment for building release artifacts. (Default: “/builds/updater/chroot”)

DEBUGBUILD
    Include .debug files in release artifacts. Empty means yes. (Default: “”)

DEVMODE
    Use -DNO_CLEAN and -DNO_KERNELCLEAN when building world and kernel. Set to “yes” to enable. (Default: “”)

FULLCLEAN
    Preserve the chroot directory. (Default: “no”)

KERNELS
    Space-separated list of kernels to build and include in the update archive. (Default: “HARDENEDBSD”)

LOGDIR
    Directory to place build logs. (Default: “/builds/updater/logs”)

OUTPUTDIR
    Directory to place deployable update archives. (Default: “/builds/updater/output”)

PRIVKEY
    Private RSA key for use in signing the build artifacts within the update archive. (Default: “/usr/share/keys/updater/private/updater.key”)

PUBKEY
    Public X.509 certificate that corresponds to the PRIVKEY. This file gets included in the update archive and verified by the hbsd-update(8) tool prior to applying a downloaded update. (Default: “/usr/share/keys/updater/certs/updater.crt”)

REPO
    URL of the git repository to clone and use when building the release artifacts. (Default “git://github.com/HardenedBSD/hardenedBSD.git”)

SIGNBIN
    Path to the OpenSSL binary. This option included in case the user performing the build wishes to switch to LibreSSL. (Default: “/usr/bin/openssl”)

SRCCONFPATH
    Path to a custom src.conf(5) to use when building the release artifacts. (Default: “”)

SRCDIR
    Path to the src directory to use when preparing the chroot jail. (Default: “/usr/src”)

STAGEDIR
    Path to the staging directory where release artifacts are placed. (Default: “/builds/updater/stage”)

FILES

/etc/hbsd-update.conf
    Default location of the hbsd-update configuration file.

SEE ALSO
hbsd-update(8)

AUTHORS
Shawn Webb <shawn.webb@hardenedbsd.org>