CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

sysutils/iocage 1.13

FreeBSD jail manager written in Python3

Port info

Maintainer
grembo@FreeBSD.org
Packages
latest: 1.13
Upstream
up to date
Last update
to 1.13 · e775918a4e
Quarterly
2026Q4: 1.13
Formerly
sysutils/py3-iocage until 2017-10-02
WWW
https://github.com/freebsd/iocage
Links
cgit · VuXML

Install

Package
# pkg install py312-iocage
installs 1.13 from latest; from quarterly (2026Q4) 1.13
Port
# cd /usr/ports/sysutils/iocage && make install clean
# make -C /usr/ports/sysutils/iocage config  # change options first
Size
362 KiB download · 2.0 MiB installed
Depends on
devel/git 2.56.0, devel/py-click 8.5.0, devel/py-coloredlogs 15.0.1_1, devel/py-gitpython 3.1.62, devel/py-jsonschema 4.26.0, devel/py-six 1.17.0, dns/py-dnspython 2.9.0,1, lang/python312 3.12.15, net/py-netifaces 0.11.0_1, textproc/py-texttable 1.7.0_1, www/py-requests 2.34.2
License
BSD2CLAUSE
Options
1 of 2 on in the package: GIT
Show the 1 options that are off
GIT_LITE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.131.13–
FreeBSD 151.131.13–
FreeBSD 141.131.131.13

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.131.13–
FreeBSD 141.131.131.13

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.13.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (85)

Michael Gmelin (grembo) · 1.13
sysutils/iocage: Update to 1.13

While there, switch to release tarball.
e775918a4e
Michael Gmelin (grembo) · 1.12_1
sysutils/iocage: Fix build and runtime issues

This switches the build to pyproject.yml and hatchling to avoid
various setuptools issues.

It adds a workaround for problems with py-click, which
prevented some command line options from working properly
(especially formatting output for scripting using '-h').

While there, import small github hosted patch into the tree.

PR:		295084, 295723
Reported by:	andreas@turriff.net, echoxxzz@gmail.com
737bf0755a
Alan Somers (asomers) · 1.12
sysutils/iocage: fix "make test"

* Add some missing TEST_DEPENDS
* Since we have no port for pytest-pep8, patch the port to remove that
  from the test function.

Sponsored by:		ConnectWise
Approved by:		grembo (maintainer)
Differential Revision:	https://reviews.freebsd.org/D56713
df89129c22
Michael Gmelin (grembo) · 1.12
sysutils/iocage: Correct reference in comment
0dde767be3
Michael Gmelin (grembo) · 1.12
sysutils/iocage: Update to 1.12

PR:		291626
347923f2f7
Michael Gmelin (grembo) · 1.11_1
sysutils/iocage: Support Python 3.12

See also: https://github.com/freebsd/iocage/pull/90

PR:		288758
Reported by: 	Matthew Wener <matthew@wener.org>
50976d85c8
Po-Chuan Hsieh (sunpoet) · 1.11
sysutils/iocage: Clean up TEST_DEPENDS after the removal of py-pytest4 and dependent ports

It can be converted to USE_PYTHON=pytest if this port tests fine with py-pytest.

Reported by:	adamw
Approved by:	portmgr (blanket)
With hat:	python
c5529e6c4d
Michael Gmelin (grembo) · 1.11
sysutils/iocage: Fix CONFLICTS

PR:		286022
6a8ba43e4b
Michael Gmelin (grembo) · 1.11
sysutils/iocage: Update to 1.11
78632a4040
Charlie Li (vishwin) · 1.10_3
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal

Any missed ports, feel free to bump.

Any ports that need setuptools at runtime can have the devel/py-setuptools
manually added back to RUN_DEPENDS, but understand that this practice
is deprecated; see CHANGES for details.
06a08e69f3
Michael Gmelin (grembo) · 1.10_2
sysutils/iocage: Bump PORTREVISION
f66b671d37
Michael Gmelin (grembo) · 1.10_1
sysutils/iocage: Fix default gw detecion on CURRENT
a3c2f17fd6
Michael Gmelin (grembo) · 1.10_1
sysutils/iocage: Fix stopping jails

Jails with a dot in their name/hostuuid could not be stopped.
30af11cd13
Michael Gmelin (grembo) · 1.10
sysutils/iocage: Update to 1.10
e833dc2345
Michael Gmelin (grembo) · 1.8_2
sysutils/iocage: Fix fetch release command

See also: https://github.com/freebsd/iocage/pull/55
66fa9f7ee8
Michael Gmelin (grembo) · 1.8_1
sysutils/iocage: Add hardening measures on untar

This adds hardening measures while untaring archives fetched
over the network (including FreeBSD tarballs and iocage plugins),
as implemented by TrueNAS.

This reduces the impact of intentionally malicious or accidentally
broken archives.

Please note that users are still advised to only fetch from
trusted sources and make use of TLS to prevent MITM attacks.

While there, add patch to store man pages in the correct location.

Obtained from:		https://github.com/truenas/iocage/pull/358
c4139815d8
Robert Clausecker (fuz) · 1.8
filesystems: add new category for file systems and related utilities

The filesystems category houses file systems and file system utilities.
It is added mainly to turn the sysutils/fusefs-* pseudo-category into
a proper one, but is also useful for the sundry of other file systems
related ports found in the tree.

Ports that seem like they belong there are moved to the new category.
Two ports, sysutils/fusefs-funionfs and sysutils/fusefs-fusepak are
not moved as they currently don't fetch and don't have TIMESTAMP set
in their distinfo, but that is required to be able to push a rename
of the port by the pre-receive hook.

Approved by:	portmgr (rene)
Reviewed by:	mat
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/302
PR:		281988
6e2da9672f
Michael Gmelin (grembo) · 1.8
sysutils/iocage: Update to 1.8, new upstream

PR:		269298
Reported by:	netchild
Co-authored-by:	Geoffroy Desvernay <dgeo@centrale-med.fr>
5787776b70
Michael Gmelin (grembo) · 1.2_13
sysutils/iocage: Fixes for python 3.11

PR:		280219
Reported by:	asomers
Tested by:	asomers
e15d19c28d
Michael Gmelin (grembo) · 1.2_12
sysutils/iocage: Fix handling of slashes in jail param

PR:		275738
Reported by:	alexey@ocaml.nl
65eb9ca8f3
Michael Gmelin (grembo) · 1.2_11
sysutils/iocage: Use streaming reads on image import

This avoids out of memory conditions when importing a jail.

PR:		275767
Reported by:	James B. Byrne <byrnejb@harte-lyne.ca>
88044b4614
Rene Ladan (rene) · 1.2_10
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Stefan Eßer (se) · 1.2_10
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.2_10
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Michael Gmelin (grembo) · 1.2_10
sysutils/iocage: Update distfiles to match github
ffbdd973c1
Michael Gmelin (grembo) · 1.2_10
sysutils/iocage: Fix on 14.0-CURRENT

Fix deprecated zfs syntax that became illegal.

PR:		263823
Reported by:	asomers
4424f13691
Dmitry Marakasov (amdmi3) · 1.2_9
devel/py-pytest-{pep8,translations}: switch to pytest4

These plugins are not compatible with recent pytest.

Consumers (sysutils/iocage and www/py-flask-security) were switched
to pytest4 as well. Note that py-flask-security tests were and still
are broken due to unrelated problem - py-sqlalchemy12 and
py-sqlalchemy14 conflict.

PR:		256624
35a9ac41d0
Stefan Eßer (se) · 1.2_9
Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)
bcaf25a8c8
Stefan Eßer (se) · 1.2_9
*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)
819f25b36d
Stefan Eßer (se) · 1.2_9
sysutils/iocage: Update CONFLICTS specification

This port used to restrict its CONFLICTS entry to py-iocage built
for Python-2.7, but it does obviously conflict with that ports built
for any Python version.

This port is marked as NO_ARCH=yes and I do assumed that there is
only an install conflict, but have not tested that assumption and
therefore not changed the CONFLICTS to CONFLICTS_INSTALL.

Approved by:	grembo (maintainer)
2e2926e384
Michael Gmelin (grembo) · 1.2_9
sysutils/iocage: Add test target, no pytest-runner

Move test dependencies to TEST_DEPENDS and add test target.
Patch out pytest-runner locally.

PR:		251447
Reported by:	koobs
12d8f46d9b
Michael Gmelin (grembo) · 1.2_9
sysutils/iocage: Remove pytest-runner runtime dep

py-pytest-runner is deprecated, but upstream is still using it.
Having this as a runtime dependency was always a bit questionable.

PR:		251447
Reported by:	Mina Galic <me@igalic.co>
de2b126b03
Jimmy Olgeni (olgeni) · 1.2_8
sysutils/iocage: unbreak by adding missing dependencies.

The iocage cli was not able to locate commands if missing dependencies
were not installed.

Obtained from:	https://github.com/iocage/iocage/issues/1256
3f46d070ec
Guangyuan Yang (ygy) · 1.2_7
Unbreak ports after devel/py-gitpython's PORTNAME change

PR: 		255489
Fixes:		f133c410c6d97254810f4f0fbd329e42b9eaf3a1
Approved by:	lwhsu, portmgr (blanket)
Differential Revision:	https://reviews.freebsd.org/D30039
5c99e25514
Mathieu Arnold (mat) · 1.2_6
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 1.2_6
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.2_6
Remove # $FreeBSD$ from Makefiles.
305f148f48
Renato Botelho (garga) · 1.2_6
Change dependencies of git-lite to git@lite

PR:		250281
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
084d12ace4
Michael Gmelin (grembo) · 1.2_6
Fix `iocage fetch' on i386.

While there, switch to fetching all patches directly from github.

PR:		247856
Reported by:	Vincent Bentley
4f1b80eb5d
Michael Gmelin (grembo) · 1.2_5
Respect PREFIX (when PREFIX != LOCALBASE)

PR:		244387
Submitted by:	John Hein <jcfyecrayz@liamekaens.com>
Reviewed by:	koobs
Approved by:	portmgr (blanket: framework/ports (python) compliance)
5ca6123985
Michael Gmelin (grembo) · 1.2_5
Fix accidental overwriting of properties on update

See:
https://github.com/iocage/iocage/issues/1130
https://github.com/iocage/iocage/commit/b47dc2c47ff125d644720b03f598a9caf4e08192

PR:		244252
MFH:		2020Q1 (runtime fix)
e795000d0e
Michael Gmelin (grembo) · 1.2_4
Fix accidental removal of devfs_rulesets on jail stop

Pulls in a bugfix[0] that has been merged upstream[1].

This bug caused manually configured devfs_rulesets to get deleted on jail
stop, causing jails to come up with a default devfs rules on next start,
which can be a nuisance or even dangerous, depending on the specific setup.

Also adds a minimum devfs_ruleset id for dynamically created devfs rulesets
and fixes a devfs_ruleset resource leak when using plugins.

Take maintainership, as suggested by araujo@ (thanks for taking care of that
port for so long!).

[0]https://github.com/iocage/iocage/pull/1106
[1]https://github.com/iocage/iocage/commit/753b2f35731423597d7f51f33427b6d619fcd0b5

PR:		243510
Approved by:	araujo (maintainer)
MFH:		2020Q1
755ddd458f
Marcelo Araujo (araujo) · 1.2_3
- Set OPTIONS_DEFAULT to devel/git instead of devel/git-lite.

Requested by:	mat and grembo
776b1adab0
Marcelo Araujo (araujo) · 1.2_3
- Fix git/git-lite dependencies as well as leftover EGG files. - Now the port pass "poudriere testport". - Bump PORTREVISION.

PR:		240959 (based on)
Submitted by:	burnerbox <burnerbox_protonmail.com>
		Sascha Holzleiter <sascha_root-login.org>
Reported by:	many
Reviewed by:	romain
Differential Revision:	https://reviews.freebsd.org/D21929
09affdabe2
Marcelo Araujo (araujo) · 1.2_2
- Drop support for devel/dulwich. [0] - The port works fine with devel/git too, we should first check if there   is git installed, instead to assume we need to install git-lite. [1] - Bump PORTREVISION.

Submitted by:	dvl [0]
Reported by:	many [1]
3fb8ce0418
Marcelo Araujo (araujo) · 1.2_1
- Update necessary dependencies for iocage 1.2 release. - Bump PORTREVISION.

PR:		ports/240927
Submitted by:	Neel Chauhan <neel@neelc.org>
		Dan Langille <<dan@langille.org>> (via email)
Reported by:	many
9e21bf738f
Marcelo Araujo (araujo) · 1.2
- Update to 1.2.

Changelog: https://github.com/iocage/iocage/releases/tag/1.2
29170bad5b
Michael Gmelin (grembo) · 1.1_1
Fix `iocage upgrade' for 11.3-RELEASE and upcoming 12.1-RELEASE[0]

Also:
- Fix dependencies when upgrading <12 jails running on a 12-RELEASE jailhost
  (depend on `merge' from devel/rcs57).
- Fix to unbreak updating multiple jails at once[1].
- Patch to `setup.py' to make `make check-plist' pass[2].
- Move `NO_ARCH' to make portlint happy

See:
[0]https://github.com/iocage/iocage/pull/1027 and
https://github.com/iocage/iocage/commit/f66d9f0724daa03dc08cebc3f30b04abc7e97f82
[1]https://github.com/iocage/iocage/commit/47d7c28ad2db76eaba797921555bbf68a476eb9b#diff-134cbca4d064a61a693d1199494d24df
[2]https://github.com/iocage/iocage/issues/1043

PR:		240177
Approved by:	araujo (maintainer timeout)
c1e7290815
Marcelo Araujo (araujo) · 1.1
Update to 1.1.

Changelog at:
https://github.com/iocage/iocage/releases/tag/1.1
d9121093b3
Marcelo Araujo (araujo) · 1.0
- Pet PORTLINT. - Remove wrong conflicts.
bcb20be0e8