Bastille is an open-source system for automating deployment
and management of containerized applications on FreeBSD using
the jail framework.
The project focuses on secure defaults, automation and
repeatable templates.
The version naming scheme has changed to only include semantic versioning. eg: 1.x.x
Bastille version 1.4.4 introduces a minor change to how it handles the rdr command.
It requires an additional line inside `/etc/pf.conf` if you are using `bastille rdr`.
Place the following line at the beginning of the `/etc/pf.conf` filtering section.
anchor "bastille/*"
See https://bastille.readthedocs.io/en/latest/chapters/networking.html#etc-pf-conf for
details.
Reason:
Potentially breaking changes since 1.0.20250714
Network: Bastille now handles all epairs dynamically, allowing both -V and -B
VNET jails to coexist. Previous versions only supported one type per system.
New naming scheme for network interfaces is e0a_jailname (host side) and
e0b_jailname (jail side). Additional interfaces: e1a_jailname, e1b_jailname, etc
(incrementing numbers). Long jail names are truncated with xx placeholder due to
interface name limitations
Required action after update:
Restart all jails (preferably one at a time) to trigger automatic conversion.
Bastille will auto-convert jail.conf and rc.conf files when jails are stopped.
Manual intervention required: If you previously used the network sub-command to
add interfaces, manually edit jail.conf and rc.conf files to update epair names
(increment numbers for additional interfaces).
Auto-conversion handles most cases, please report bugs if issues occur during the
transition.
Full release announcement: https://github.com/BastilleBSD/bastille/releases/tag/1.0.20250714
Reason:
The `rcorder` has been deprecated, and new `boot` and `priority` options have
been added to the jails. A boot file will be created with default values of
`boot=on` and `priority=99` on jail creation. For existing jails, the boot file
will be generated on the next subcommand execution to the jail. If you want to
generate the file for all the jails, you can use `bastille restart ALL` to fill
in the defaults. To change these values, use `bastille config TARGET set boot off`
or `bastille config TARGET set priority 10` or some other number according to
your needs.
sysutils/bastille: update to version 1.0.20250714
This release has potentially breaking changes that are noted, but will
depend on the user configuration. See the release announcement [1] for
more detail.
[1] https://github.com/BastilleBSD/bastille/releases/tag/1.0.20250714
PR: 288111
sysutils/bastille: update to 0.10.20231125
While here do not override upstream rc script
PR: 274993
Reported by: dsh@bamus.cz
Approved by: christer.edwards@gmail.com (maintainer)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
sysutils/bastille: Update to 0.9.20220714
ChangeLog: https://github.com/BastilleBSD/bastille/releases/tag/0.9.20220714
* Update bootstrap.rst
* Add variable JAIL_IP6 to access ip6.addr in templates
* fix non-unique epair creation when using vnet
* Allow Linux jails to see their mount points
* Extend RDR to support logging
* Permit outgoing network connections during stop action
* Repair table, fix incorrect descriptions
* Allow 'bastille cmd' on Linux jails
* The text speaks of defining an OVERLAY but the example uses CP.
* Avoid cache/RELEASE dirs creation on Linux jails
PR: 265312
Reported by: christer.edwards@gmail.com (maintainer)
New port: sysutils/bastille
Bastille is a jail automation framework that allows you to
quickly create and manage FreeBSD jails.
The project focuses on secure defaults, automation and
repeatable templates.
WWW: https://bastillebsd.org
PR: 235679
Submitted by: Christer Edwards <christer.edwards@gmail.com>
