From 579e5d0617beb7d56af17e024634d0b01c4da3b4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Lesimple?= Date: Fri, 8 Aug 2025 15:05:38 +0000 Subject: [PATCH] chore: tests: bump FreeBSD from 14.2 to 14.3 --- .github/workflows/freebsd.yml | 2 +- README.md | 4 ++-- bin/shell/connect.pl | 6 +++--- doc/CHANGELOG.md | 2 +- doc/release-notes/v3.19.00.md | 2 +- doc/sphinx/installation/basic.rst | 4 ++-- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 375fbc7..6ae9b51 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -19,7 +19,7 @@ jobs: uses: cross-platform-actions/action@master with: operating_system: freebsd - version: '14.2' + version: '14.3' shell: bash sync_files: runner-to-vm run: | diff --git a/README.md b/README.md index e77c173..c021ebc 100644 --- a/README.md +++ b/README.md @@ -127,9 +127,9 @@ Any other so-called "modern" Linux version are not tested with each release, but The following OS are also tested with each release: -- FreeBSD/HardenedBSD 14.2\*\* +- FreeBSD/HardenedBSD 14.3\*\* -\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. +\*\*: Note that these have partial MFA support, due to their reduced set of available `pam` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.3. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks, as well as no filesystem-level ACL support and missing PAM support (hence no MFA). diff --git a/bin/shell/connect.pl b/bin/shell/connect.pl index 67ec563..127deba 100755 --- a/bin/shell/connect.pl +++ b/bin/shell/connect.pl @@ -80,17 +80,17 @@ if (open(my $fh, '<', "/proc/" . getppid() . '/cmdline')) { # mosh elsif ($pargv[0] eq 'mosh-server') { - ; # we're being called by mosh-server, alrighty + ; # we're being called by mosh-server, alrighty } # clush plugin elsif ($pargv[1] =~ m{/bin/plugin/(open|restricted)/clush$}) { - ; # we're being called by the clush plugin, ok + ; # we're being called by the clush plugin, ok } # interactive mode: our parent is osh.pl elsif ($pargv[0] eq 'perl' and $pargv[1] =~ m{/bin/shell/osh\.pl$}) { - ; # we're being called by the interactive mode of osh.pl, ok + ; # we're being called by the interactive mode of osh.pl, ok } # --ssh-as diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md index 668609c..8acaf92 100644 --- a/doc/CHANGELOG.md +++ b/doc/CHANGELOG.md @@ -14,7 +14,7 @@ ## v3.19.00 - 2025/02/25 - feat: add agent forwarding support on egress side - feat: add undocumented rename-account.sh and modify osh-orphaned-homedir.sh accordingly -- chg: upgrade tests from FreeBSD 13.2 to 14.2 +- chg: upgrade tests from FreeBSD 13.2 to 14.3 - enh: ssh autologin: allow TERM env passthrough - enh: use only TL1 special chars when generating passwords - chore: github actions: add timeouts, always launch short tests diff --git a/doc/release-notes/v3.19.00.md b/doc/release-notes/v3.19.00.md index 3a33d5a..0ae2284 100644 --- a/doc/release-notes/v3.19.00.md +++ b/doc/release-notes/v3.19.00.md @@ -24,7 +24,7 @@ A more complete list of changes can be found below, for an exhaustive (and borin - feat: add agent forwarding support on egress side - chg: set ECDSA as default egress key algo for new installs - chg: ``groupInfo``: remove deprecated JSON fields -- chg: upgrade tests from FreeBSD 13.2 to 14.2 +- chg: upgrade tests from FreeBSD 13.2 to 14.3 - enh: 35% faster ``is_valid_ip()`` when fast=1 - enh: ``accountInfo``: add osh-only information for accounts - enh: tests: add ``--skip-functional-tests`` and ``--skip-unit-tests`` diff --git a/doc/sphinx/installation/basic.rst b/doc/sphinx/installation/basic.rst index b687f51..194a35a 100644 --- a/doc/sphinx/installation/basic.rst +++ b/doc/sphinx/installation/basic.rst @@ -44,11 +44,11 @@ but should work with no or minor adjustments. The following OS are also tested with each release: -- FreeBSD/HardenedBSD 14.2\*\* +- FreeBSD/HardenedBSD 14.3\*\* \*\*: Note that these have partial MFA support, due to their reduced set of available ``pam`` plugins. Support for either an additional password or TOTP factor can be configured, but not both at the same time. -The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.2. +The code is actually known to work on FreeBSD/HardenedBSD 10+, but it's only regularly tested under 14.3. Other BSD variants, such as OpenBSD and NetBSD, are unsupported as they have a severe limitation over the maximum number of supplementary groups, causing problems for group membership and restricted commands checks,