www/pomerium: Fix build with WITH_PIE Go cannot internally link PIE executables on freebsd/amd64, so -buildmode=pie (added by Uses/go.mk when WITH_PIE is set) requires cgo and external linking. The port builds with CGO_ENABLED=0, like upstream does, so the build failed with: -buildmode=pie requires external (cgo) linking, but cgo is not enabled Set PIE_UNSAFE to build a regular executable instead.9192e9d2fd
Port details
www/pomerium 0.33.4_2,1
Identity-aware access proxy
Port info
- Maintainer
- delphij@FreeBSD.org
- Packages
- latest: 0.33.4_2,1
- Upstream
- up to date
- Last update
- to 0.33.4_2,1 · 9192e9d2fd
- Quarterly
- 2026Q4: 0.33.3_2,1 · last MFH 60647eff54
- WWW
- https://pomerium.io/
- Links
- cgit · VuXML
Install
- Package
# pkg install pomeriuminstalls 0.33.4_2,1 fromlatest; fromquarterly(2026Q4) 0.33.3_2,1- Port
# cd /usr/ports/www/pomerium && make install clean- Size
- 24 MiB download · 103 MiB installed
- Depends on
- www/pomerium-envoy-custom 1.37.0.20261001_1
- License
- APACHE20
- pkg-message
Shown after installing
## Quick start You need a configured indentity provider and a wild-card TLS certificate before proceeding (if Pomerium will be terminating TLS connections). Please note that the default installation runs Pomerium with unprivileged "www" user, and therefore will not be able to bind on 443 unless net.inet.ip.portrange.reservedhigh is lowered. Please consult the official website https://www.pomerium.io/docs/ for additional configuration information.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.33.4_2,1 | ✗ | – |
| FreeBSD 15 | 0.33.4_2,1 | 0.33.4_1,1 | – |
| FreeBSD 14 | 0.33.4_2,1 | ✗ | ✗ |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.33.3_2,1 | ✗ | – |
| FreeBSD 14 | 0.33.3_2,1 | ✗ | ✗ |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 0.33.4_2,1.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (80)
various: Bump Go ports for Go 1.26.10 / 1.27.3d81b7ba3c3
various: Bump Go ports031fc6bfbf
www/pomerium: update to 0.33.4 While here: - Set Pdeathsig on the envoy child process so that it is terminated when pomerium exits, matching the behavior on Linux. - Stop enabling reuse_port on FreeBSD: Envoy force-disables it for TCP listeners on non-Linux platforms and logs a warning for each listener.52bafdf0b9
www/pomerium: update to 0.33.3b28ddf8b4c
many: Bump go ports for 1.26.8 and 1.27.1dd0905142a
www/pomerium: Fix fetch3c61b70c7d
www/pomerium: update to 0.33.19f1a686b95
various: Bump go ports for go-1.25.14 / 1.26.74867821cd6
various: Bump go ports for go-1.25.13 / 1.26.66d39dcf04e
www/pomerium: update to 0.33.06f0dc46317
various: Bump go ports for go-1.25.12 / 1.26.54ea3547132
www/{pomerium-envoy-custom,pomerium}: update to 1.36.8-p1 / 0.32.937d4040848various: Bump go ports for go-1.25.11 / go-1.26.4dd8dc2a59d
various: Bump ports for Go 1.25.104e243a83f8
www/pomerium: upgrade to v0.32.7 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>805e9aafaa
www/pomerium-envoy-custom: add a port for pomerium's envoy fork. This port is different from www/envoy and is used exclusively by pomerium. www/pomerium: upgrade to 0.32.6. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>f4dbc3fea9
various: Bump go ports for go-1.25.9 / 1.26.27507e72a84
various: Bump ports for Go 1.25.8a8d318da7c
various: Bump ports for Go default 1.24->1.2597685c1886
various: Bump Go ports for 1.24.13529df949a5
various: Bump Go ports for 1.24.12013f2d30b0
various: Bump Go ports for 1.24.11b24429e3ed
various: Bump Go ports for 1.24.100dfced16fb
various: Bump go ports for go-1.24.990f976619b
many: Bump dependent ports after go124 update2e7587aaf8
many: Bump go ports for go-1.24.731a5a229a7
go ports: Bump for 1.24.653610681ea
many: Bump PORTREVISION for go-1.24.5 update275975297b
various: Bump PORTREVISION after go124-1.24.4 update94be418de3
go: Bump go124-dependent ports Earlier I bumped the default Go to 1.24. Ports that specify a lower version will still build with those lower version (for now), so they don't need a bumping. Instead I'm bumping anything that (now) has go124 as a dependency.0bdd2ad334
go: Bump ports for go124 updatea4e30d4f4f
Bump all go ports for yesterday's releasesd0642a6176
all: Bump after lang/go121 updateaa8c0111bf
all: Bump after lang/go121 updatec4b51c2028
all: Bump after lang/go121 update MFH: 2024Q2746fa696a1
all: Bump after lang/go121 update MFH: 2024Q2fce0cc3272
all: Bump after lang/go121 update MFH: 2024Q232b284679a
lang/go: Change DEFAULT to 1.21 PR: 277776 Approved by: portmgr (exp-run)a5a000df3b
all: Bump PORTREVISION after lang/go* update PR: 2765307e5aa2085f
www/pomerium: upgrade to 0.8.4.19b9d82997
all: Bump PORTREVISION after lang/go* update PR: 2744050505b712df
all: Bump PORTREVISION after lang/go* update8e4bc57934
all: Bump PORTREVISION after lang/go{119,120} update09b993031aall: Bump PORTREVISION after lang/go{119,120} updateff40d94c1dwww/pomerium: fix build on riscv64 Bump golang.org/x/sys dependency to a version new enough to support riscv64-freebsd. While we are at it, chase github.com/go-redis/redis -> github.com/redis/go-redis rename. Sponsored by: Berliner Linux User Group e.V. Approved by: portmgr (build fix blanket)d76905c37b
all: Bump PORTREVISION after Go ports update09079730e9
all: Bump PORTREVISION after lang/go{119,120} update56b5ec772fall: Bump PORTREVISION after GO_DEFAULT update.2297efc51b
all: Bump PORTVERSION after lang/go{118,119} update3b383d833a