CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ports-mgmt/poudriere 3.4.8

Port build and test system

Port info

Maintainer
bdrewery@FreeBSD.org
Packages
latest: 3.4.8
Upstream
up to date
Last update
to 3.4.8 · be5f291f83
Quarterly
2026Q4: 3.4.8
WWW
https://github.com/freebsd/poudriere/wiki
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install poudriere
installs 3.4.8 from latest; from quarterly (2026Q4) 3.4.8
Port
# cd /usr/ports/ports-mgmt/poudriere && make install clean
# make -C /usr/ports/ports-mgmt/poudriere config  # change options first
Size
901 KiB download · 3.6 MiB installed
Depends on
misc/freebsd-release-manifests 20260915, ports-mgmt/portconfig 0.6.2_2
License
BSD2CLAUSE
Options
5 of 6 on in the package: BASH EXAMPLES MANIFESTS PORTCONFIG ZSH
Show the 1 options that are off
QEMU

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.4.83.4.8–
FreeBSD 153.4.83.4.8–
FreeBSD 143.4.83.4.83.4.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.4.83.4.8–
FreeBSD 143.4.83.4.83.4.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.4.8.

Fixed (0)

No VuXML entries for this package.

Problem reports (12) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
298462maintainer-feedback? ports-mgmt/poudriere: PKG_REPO_FROM_HOST runs the target architecture pkg, not the host pkgNew2026-09-14
295566maintainer-feedback? ports-mgmt/poudriere: regression i386 - poudriere creates truncated devel/llvm19 packagesNew2026-05-27
259639maintainer-feedback? ports-mgmt/poudriere{-devel}: databases/ruby-bdb fails to build with USE_TMPFS=NO in poudriere.conf: chmod: $file: Operation not permittedOpen2026-01-01
290933maintainer-feedback? ports-mgmt/poudriere jail createtion fails on amd64 for 15.0-STABLENew2025-11-10
267790maintainer-feedback? ports-mgmt/poudriere: wrong MANIFEST usedOpen2025-09-14
Show all 12
PRSummaryStatusChanged
262609maintainer-feedback? ports-mgmt/poudriere "options" mode doesn't correctly assess -C (only present changed options dialogue)New2025-09-14
220162maintainer-feedback? ports-mgmt/poudriere: jail -k doesn't workIn Progress2025-05-11
181799ports-mgmt/poudriere: allow in-line comments in ports-listIn Progress2024-12-24
278600easy feature maintainer-feedback? ports-mgmt/poudriere: Add OpenBSD httpd(8) example configurationNew2024-05-17
277757maintainer-feedback? fix ports-mgmt/poudriere package under qemuNew2024-03-18
262650maintainer-feedback? ports-mgmt/poudriere: Use a dynamic linuxbase from sysctl for linprocfs mountsNew2022-03-18
240718maintainer-feedback? ports-mgmt/poudriere: testport -P causes false failures, left over "@dir /prefix"New2020-09-19

Commits (147)

Bryan Drewery (bdrewery) · 3.1.17_1
Fix build of sh on GCC platforms where -std=gnu99 is needed.
6b45af196f
Bryan Drewery (bdrewery) · 3.1.17
Update to 3.1.17

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3117
06f9cb381d
Bryan Drewery (bdrewery) · 3.1.16
Update to 3.1.16.

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3116
29f7a6a4fb
Bryan Drewery (bdrewery) · 3.1.15
Update to 3.1.15

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3115
a8e649189b
Bryan Drewery (bdrewery) · 3.1.14_3
Fix building arm64 jails by copying in the needed binutils.
45a04670ae
Bryan Drewery (bdrewery) · 3.1.14_2
Move the release MANIFESTS to misc/freebsd-release-manifests.

Also add a dependency for ca_root_nss to Poudriere.
825647e47b
Bryan Drewery (bdrewery) · 3.1.14_1
Fix debugging that crept in
9e1cb40a53
Bryan Drewery (bdrewery) · 3.1.14
- Update to 3.1.14

- Fix creating /nxb-bin in the root system
0c105b1676
Bryan Drewery (bdrewery) · 3.1.13
- Update to 3.1.13

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3113
6d5e251a5f
Bryan Drewery (bdrewery) · 3.1.12_2
Bump revision after orphan plist fix in r412544.
7192f9a55d
Olli Hauer (ohauer) · 3.1.12_1
- fix and sort pkg-plist
026c472e03
Colin Percival (cperciva) · 3.1.12_1
Add MANIFEST files from 10.3-RELEASE.

The MANIFEST files were obtained by
(a) verifying the signature on the 10.3-RELEASE announcement against
the GPG key in the FreeBSD documentation repository;
(b) downloading all of the bootonly.iso.xz ISOs;
(c) verifying those files against the hashes listed in the signed release
announcement; and
(d) extracting the MANIFEST files.
f99100b982
Mathieu Arnold (mat) · 3.1.12
Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight
8d6597e0bb
Bryan Drewery (bdrewery) · 3.1.12
- Update to 3.1.12

Changes:
  - Fix error starting up when jail contains ':' (or other special characters)
35d08cb131
Colin Percival (cperciva) · 3.1.11_1
Add MANIFEST files from (9|10).*-RELEASE.  These files are installed in /usr/local/share/poudriere/MANIFESTS, where poudriere (as of version 3.1.11) checks for pre-distributed MANIFEST files before fetching them from the ftp/http/https server.

This allows poudriere to ensure that the bits it is downloading and
installing really match the bits provided by the release engineering
team, and have not been subtly trojanned in transit.  (Note that this
does not apply if poudriere is creating a jail from -STABLE or -CURRENT
since we cannot pre-distribute those MANIFESTs.)

The MANIFEST files were obtained by
(a) finding the GPG-signed announcements for 9.0 and later releases;
(b) verifying those signatures against the GPG keys in the FreeBSD
documentation repository;
(c) downloading all of the relevant bootonly ISOs;
(d) verifying the ISOs against the hashes listed in the signed release
announcements; and
(e) extracting the MANIFEST files from those ISOs.

Reviewed by:	bdrewery
Security:	If someone could trick you into building packages in a
		world which they tampered with, they could do all sorts
		of nasty things to those packages...
811e5a639d
Bryan Drewery (bdrewery) · 3.1.11
- Update to 3.1.11

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3111
38af45bf21
Bryan Drewery (bdrewery) · 3.1.10_2
Enable ZSH option by default
651d23fa1c
Bryan Drewery (bdrewery) · 3.1.10_1
Revert usage of -x for rm(1) for now due to 9.x not having it.
9db7964a0e
Bryan Drewery (bdrewery) · 3.1.10
- Update to 3.1.10

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_3110
bd6c33d11e
Bryan Drewery (bdrewery) · 3.1.9
- Update to 3.1.9

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_319

  - Fix handling of ports dependencies without a PORTSDIR
  - jail -c: Fix fetching when TARGET does not match TARGET_ARCH
2dd1601dae
Bryan Drewery (bdrewery) · 3.1.8
Update to 3.1.8

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_318

PR:	        202622
PR:	        193732
6a65e81011
Bryan Drewery (bdrewery) · 3.1.7
Update to 3.1.7

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_317
 - Restore /usr/sbin and /sbin to PATH lost in 3.1.5
 - HTML: Fix broken log link from 3.1.5
 - Avoid copying /var/db/freebsd-update into build jails
 - QEMU: Fix handling of elftoolchain install for older src checkouts.
e335283ca2
Bryan Drewery (bdrewery) · 3.1.6
Update to 3.1.6

Changes:
  - jail -m src: Fix asking about removing files. This was a bug in 3.1.0. The
    fix came in right after 3.1.5 release.
58e884a591
Bryan Drewery (bdrewery) · 3.1.5
Update to 3.1.5

Changes: https://github.com/freebsd/poudriere/wiki/release_notes_315
677d6537a9
Bryan Drewery (bdrewery) · 3.1.4
USE_GITHUB: For the new support, fix DISTNAME to be more consistent.

When using GH_TAGNAME the DISTNAME would have GH_PROJECT and GH_ACCOUNT in
it. When not using GH_TAGNAME it would not have this. Now both cases
will add in the GH_PROJECT and GH_ACCOUNT.

Add special care to ensure that the DISTVERSION is not added in twice. If
a port does GH_TAGNAME=v${PORTVERSION} it will be added in twice though. For
that case DISTVERSIONPREFIX=v should be set and no GH_TAGNAME should be used.

empty() is used rather than (!defined || !${}) to support fmake.

The purpose of setting DISTNAME at all in these cases is to make it more clear
that the distfile is from *GITHUB* and to avoid collisions if a project were
to be renamed or moved. Without adding in GH_PROJECT and GH_ACCOUNT then there
are real risks that collisions on filenames would happen on renamed or moved
projects, which is fairly common. A GITHUB-generated file may not match
a custom-rolled or git-archive-rolled distfile.

PR:		199069
With hat:	portmgr
Testing done:	All USE_GITHUB ports without GH_COMMIT were checksum/fetch/extract/WRKSRC tested.
aa6ad6e726
Bryan Drewery (bdrewery) · 3.1.4
No need for bsd.port.options.mk now
5f9aedd9d5
Bryan Drewery (bdrewery) · 3.1.4
Update to 3.1.4

Changelog: https://github.com/freebsd/poudriere/wiki/release_notes_314
4b36d9cb6b
Bryan Drewery (bdrewery) · 3.1.3
Update to 3.1.3

Changes:
  - Fix deleting jails when using NO_ZFS/TMPFS_ALL is used.
ecd4ad78f3
Bryan Drewery (bdrewery) · 3.1.2
Update to 3.1.2

Changelog: https://github.com/freebsd/poudriere/wiki/release_notes_312
a574c6ec77
Bryan Drewery (bdrewery) · 3.1.1
Fix the new USE_GITHUB to rename the distfile such that it does not conflict with the old scheme and cause a "reroll" or "invalid checksums".  This also avoids clobbering the FreeBSD distcache.

Use a revision in the DISTNAME for USE_GITHUB in case we need to bump this
again for anything. It's more a hint of how to handle it in the future.

Reported by:	mat
Discused with:	mat, antoine, swills
With hat:	portmgr
db55af0fea
Bryan Drewery (bdrewery) · 3.1.1
Convert to new USE_GITHUB
1c8c975d95
Bryan Drewery (bdrewery) · 3.1.1
Update USE_GITHUB so it does not require GH_COMMIT.

Using this new scheme allows only setting the _tag_ or _commit hash_ in
GH_TAGNAME and not having to know the hash for a tag.  This scheme will
download a tarball that has a different checksum than before due to a changed
directory name for extraction.

The following MASTER_SITES are provided to retain the old checksum and
directory structure (that require GH_COMMIT):
  GH -> GHL
  GITHUB -> GITHUB_LEGACY

Differential Revision:	https://reviews.freebsd.org/D748
Submitted by:	amdmi3
Reviewed by:	mat, swills, antoine, bdrewery
With hat:	portmgr
5b5a90256d
Dmitry Marakasov (amdmi3) · 3.1.1
- Add missing EXAMPLES option

PR:		196244
Submitted by:	amdmi3
Approved by:	bdrewery (maintainer)
c4a79d6fc9
Bryan Drewery (bdrewery) · 3.1.1
- Update to 3.1.1 which fixes pkg(8) crashing in 8.4 jails.   8.4 jails should be recreated if created with Poudriere 3.1 or   poudriere-devel-3.0.99.20141117.
d35f39e899
Bryan Drewery (bdrewery) · 3.1.0
Update to 3.1.0.

19 months have passed since the release of 3.0.0 and there have been 1259
commits from over 24 contributors. Though many of the bugfixes did make it into
the 3.0 branch, not all of them did.

3.1 brings many speedups, new features and commands, a new web interface, and
build hooks. The new web interface works at a top-level, jail-level and the
build-level still by using a static site with AJAX.

There is a queue system that is not quite ready yet but should make it into
3.2.

The release notes documenting the major changes is at
https://github.com/freebsd/poudriere/wiki/release_notes_31

Thank you to everyone involved.

Support can be found in #poudriere on Freenode.
af42edc943
Bryan Drewery (bdrewery) · 3.0.19
Remove unneeded @dir entries
a7e61407eb
Bryan Drewery (bdrewery) · 3.0.19
- Update to 3.0.19

Changes:
  * Fix improper call to 'msg_warn'. Bad backport from 3.1.

Reported by:	sunpoet
dc44d10de8
Bryan Drewery (bdrewery) · 3.0.18
- Update to 3.0.18

Changes:
  * Add a check for 3.1 repository and reject the build. 3.0 does not know
    how to handle 3.1's repository format. Downgrading is not supported
    at this point.
  * Allow securelevel>=1 with USE_TMPFS=all
  * Add a warning that DEVELOPER=yes is ignored in lieu of bulk -t/testport
c94d6270d3
Bryan Drewery (bdrewery) · 3.0.17
- Update to 3.0.17

Changes:
  * Workaround regression with pkg-1.3 causing all packages to have new options.
  * distclean: Fix some false-positives
  * Fix dead link in poudriere.conf
7061e6867f
Bryan Drewery (bdrewery) · 3.0.16
- Update to 3.0.16 - Move to using pkg-plist

Changes:

  This will likely be the last 3.0.x release. 3.1 is almost complete.

  * Leftovers checking has moved to Ports Mk/Scripts/check_leftovers.sh,
    which allows more consistency and easier maintenance without requiring
    a Poudriere release to make changes.
  * Staging Orphans has moved to Ports 'make check-plist' for the same
    reasons. See r351587 for more information on the new behavior.

  The new leftover/orphan code has new %%PLIST%% sub behavior and also
  fixes many false-positive orphans, leftovers, and @dirrm showing.

  * Fix many races in port cleanup/skip handling.
  * Fix crashed builder detection.
  * Hide pkg_install EOL warnings and disable WARNING/ERROR waits when
    testing
  * Disable DEVELOPER from make.conf; Poudriere will automatically
    set it when appropriate. This prevents testing of port dependencies
    that were not requested to be tested.
  * distclean: Prevent removing all files by accident.
  * Having PKG_REPO_SIGNING_KEY set but the file missing is now fatal.
  * kern.securelevel >=1 is now fatal.
  * Fix 'kill: No such process' warnings with older /bin/sh (8.x)
  * Fix crash on 8.3 due to bug with $(()) handling of _vars (fixed in
    base r234001)
  * Fix case of packages always rebuilding with "changed options" when
    the port has an OPTION defined multiple times (such as fixed in
    ports r352512)
  * Fix 'Terminated' warning showing at shutdown with older /bin/sh (fixed
    by r218105 but never made it to stable/8)
d9e14a982a
Baptiste Daroussin (bapt) · 3.0.15
Fix packaging as a user While here strip binaries

Reported by:	jmmv
24708f28b5
Bryan Drewery (bdrewery) · 3.0.15
- Update to 3.0.15

Changes:
  - Fix ipv6 only usage
  - Ensure /sbin and /usr/sbin are in PATH when running
  - Remove trailing slashes from listed_ports.
  - Fix child process cleanup logic to only sleep if child
    still running.
  - Always dismount filesystems and try cleaning up when exiting and in jail -k
  - For stage_orphans, ignore modified files (such as nobody vs root)
  - testport -I: Mark cleanup done, not as recursively failing
  - testport -i: Use a local.conf instead of PACKAGESITE
  - testport -I: Suggest same login method which is more sane/clean than exec /bin/sh
  - options: Require dialog4ports as it runs from host and
    jail may be for a different ARCH
  - Ignore parents of home directories too during leftovers check
  - Ignore /var/db/dbus/machine-id leftover
  - Restrict ZFS on 9.0/9.1 due to known deadlock
  - bulk: Parse MOVED for given port build list
  - Add support for svnlite and overriding SVN_CMD
  - Show warning when jail is newer than host
  - Show host/jail OSVERSION in build logs
f3c9132071
Bryan Drewery (bdrewery) · 3.0.14
Update LICENSE to new format
bc1ca15647
Bryan Drewery (bdrewery) · 3.0.14
- Update to 3.0.14

Changes:
  * Fix dependencies when existing packages have their origins moved
    via MOVED by now loading and parsing MOVED for existing packages
    only.
  * Force umount some directories to avoid desktop utils traversing them
    causing them to remain mounted.
  * Fix stage orphan false-positives with KDE4_PREFIX
  * Fix a race condition in bulk which could lead to 'unknown stuck queue bug'
  * Fix usage of cpdup(1) -X [no functional change]
  * Speedup bulk startup by not rolling back fresh builder jails
  * Various parallel execution fixes
  * Parallel execution errors now wait up to 30 seconds for children to
    finish before ending the build.
  * Ignore home directory of users created by ports during leftover check
3bde9b6433
Baptiste Daroussin (bapt) · 3.0.13
Pass maintainership to bdrewery
92d95b8d9e
Bryan Drewery (bdrewery) · 3.0.13
- Update to 3.0.13

Changes:
 * Fix leftover detection on HEAD due to new nmtree
 * Fix jail rollback on HEAD due to new nmtree which manifested
   as missing dependencies in /new_packages
 * Don't exclude anything when looking for stage orphans, which
   fixes finding /var/run/PORTNAME as an orphan
79060e73e7
Bryan Drewery (bdrewery) · 3.0.12
- Update to 3.0.12

Changes:
  * Fix testport -i regression in 3.0.11
1557c1e84d
Bryan Drewery (bdrewery) · 3.0.11
- Update to 3.0.11

Changes:
 * poudriere.8: Document that -j is required for bulk
 * bulk/testport: Delete packages that have changed PKGNAME during startup,
   which will avoid pkg-repo duplicate package warnings/bugs. This will not
   clean up existing duplicates, just fix new ones going forward.
ba4c3f35a9
Bryan Drewery (bdrewery) · 3.0.10
Fix distinfo - tag was not synced to repo yet
f82181380d
Bryan Drewery (bdrewery) · 3.0.10
- Update to 3.0.10

Changes:
  * Fix random crashes with parallel process handling
  * jail -cu: Disable CCACHE on 10
  * testport/bulk -t: Fix staging absolute link checking with files
    that have spaces
  * testport: Fix so that MAKE_JOBS runs by default
  * bulk -t: Fix so that MAKE_JOBS does not run by default
  * testport: Fix so that the port being tested shows in the web ui.
    Note that this is still in data/logs/bulk/
  * jail: Make -m http work
  * jail -c: Fix -m ftp-archive for 9.0
97d9f80436