Add portsnap: Provides secure snapshots of the ports directory.

PR: ports/73323
Submitted by: Colin Percival <cperciva@daemonology.net>

5 files changed, 70 insertions, 0 deletions

diff --git a/sysutils/Makefile b/sysutils/Makefile
index 0d8d57f04d7b..fc409287be24 100644
--- a/sysutils/Makefile
+++ b/sysutils/Makefile
@@ -326,6 +326,7 @@
     SUBDIR += portdowngrade
     SUBDIR += portmanager
     SUBDIR += portsman
+    SUBDIR += portsnap
     SUBDIR += portupgrade
     SUBDIR += powerman
     SUBDIR += prips
diff --git a/sysutils/portsnap/Makefile b/sysutils/portsnap/Makefile
new file mode 100644
index 000000000000..6305f269e133
--- /dev/null
+++ b/sysutils/portsnap/Makefile
@@ -0,0 +1,38 @@
+# New ports collection makefile for:		Ports tree snapshot utility
+# Date created:					29 October 2004
+# Whom:						cperciva@daemonology.net
+#
+# $FreeBSD$
+#
+
+PORTNAME=	portsnap
+PORTVERSION=	0.2
+CATEGORIES=	sysutils net
+MASTER_SITES=	http://www.daemonology.net/portsnap/
+
+MAINTAINER=	cperciva@daemonology.net
+COMMENT=	Provides secure snapshots of the ports directory
+
+# The freebsd-sha1 port is marked IGNORE for some versions of FreeBSD,
+# but for those sha1 should be found in /sbin/, so this should be safe.
+RUN_DEPENDS=	bspatch:${PORTSDIR}/misc/bsdiff		\
+		sha1:${PORTSDIR}/sysutils/freebsd-sha1	\
+		freebsd-update-verify:${PORTSDIR}/security/freebsd-update
+
+MAN5=		portsnap.conf.5
+MAN8=		portsnap.8
+PLIST_FILES=	etc/portsnap.conf.sample sbin/portsnap
+PLIST_DIRS=	portsnap
+
+do-install:
+	${INSTALL_SCRIPT} ${WRKSRC}/portsnap ${PREFIX}/sbin
+	${INSTALL_MAN} ${WRKSRC}/portsnap.conf.5 ${PREFIX}/man/man5/
+	${INSTALL_MAN} ${WRKSRC}/portsnap.8 ${PREFIX}/man/man8/
+	${INSTALL_DATA} ${WRKSRC}/portsnap.conf		\
+		${PREFIX}/etc/portsnap.conf.sample
+	${MKDIR} ${PREFIX}/portsnap
+
+post-install:
+	@${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.mk>
diff --git a/sysutils/portsnap/distinfo b/sysutils/portsnap/distinfo
new file mode 100644
index 000000000000..cc280f5d8bc6
--- /dev/null
+++ b/sysutils/portsnap/distinfo
@@ -0,0 +1,2 @@
+MD5 (portsnap-0.2.tar.gz) = bd31debcdec8acfc391c880d42ab52dc
+SIZE (portsnap-0.2.tar.gz) = 6752
diff --git a/sysutils/portsnap/pkg-descr b/sysutils/portsnap/pkg-descr
new file mode 100644
index 000000000000..8b36901d06e4
--- /dev/null
+++ b/sysutils/portsnap/pkg-descr
@@ -0,0 +1,14 @@
+Portsnap is a system for securely updating the ports tree by
+distributing signed compressed snapshots.  This is the client
+half of that system; it downloads compressed snapshots into
+/usr/local/portsnap ("portsnap fetch") and uses those to extract
+a ports tree into /usr/ports ("portsnap extract") or update an
+existing tree ("portsnap update").
+
+Portsnap uses bandwidth roughly comparable to CVSup, but operates 
+entirely over HTTP.
+
+WWW: http://www.daemonology.net/portsnap/
+
+- Colin Percival
+cperciva@daemonology.net
diff --git a/sysutils/portsnap/pkg-message b/sysutils/portsnap/pkg-message
new file mode 100644
index 000000000000..bdd214bcd8ea
--- /dev/null
+++ b/sysutils/portsnap/pkg-message
@@ -0,0 +1,15 @@
+
+Before you can use portsnap, you will have to create an update configuration
+file specifying the server from which to fetch snapshots and the sha1 hash
+of the RSA public key which is trusted to sign the snapshots.
+
+A sample configuration file has been installed in
+
+	/usr/local/etc/portsnap.conf.sample
+
+which will fetch snapshots built and signed by the author.  If you want to
+use these updates, copy that file to
+
+	/usr/local/etc/portsnap.conf
+
+otherwise, create that file as appropriate.