pnu-portstreelint 1.0.1

FreeBSD ports tree lint

Installation

Once you have installed Python and its packages manager pip, use one of the following commands, depending on if you want only this tool, the full set of PNU tools, or PNU plus a selection of additional third-parties tools:

pip install pnu-portstreelint
pip install PNU
pip install pytnix

PORTSTREELINT(8)

NAME

portstreelint - FreeBSD ports tree lint

SYNOPSIS

portstreelint [--show-cat|-C] [--show-mnt|-M] [--cat|-c LIST] [--mnt|-m LIST] [--port|-p LIST] [--plist NUM] [--broken NUM] [--deprecated NUM] [--forbidden NUM] [--unchanged NUM] [--check-host|-h] [--check-url|-u] [--debug] [--info] [--version] [--help|-?] [--]

DESCRIPTION

The portstreelint utility checks the FreeBSD port tree Index and some part of the port's Makefiles for errors and warnings.

By default it will scan the whole port tree, but you can select a subset of the ports with the options --cat|-c for categories, --mnt|-m for maintainers and --port|-p for ports. All these options expect a parameter which can be a single item or a comma-separated list of items. If you combine several of these operators they will perform as a logical AND.

In order to know which categories or maintainers are available for selection, you can use the --show-cat|-C and --show-mnt|-M options to view all the categories and maintainers with their number of associated ports.

The two costlier analysis are disabled by default. You can check if the port's www sites hostnames are resolvable with the --check-host|-h option (takes about 15 minutes on the whole port tree). And you can check if the port's www sites URL are available with the --check-url|-u option, which implies the previous one (takes about 6 hours on the whole port tree).

The checks list includes:

• Nonexistent Makefile
• Nonexistent INDEX:port-path
• Unusual INDEX:installation-prefix (warning)
• Too long INDEX:comments (> 70 characters) (warning)
• Uncapitalized INDEX:comments
• INDEX:comments ending with a dot
• INDEX:comments different from Makefile:COMMENT
• Nonexistent INDEX:description-file
• URL ending INDEX:description-file
• INDEX:description-file content same as INDEX:comment
• INDEX:description-file content no longer than INDEX:comment
• Nonexistent pkg-plist, Makefile:PLIST_FILES/PLIST/PLIST_SUB (info)
• Makefile:PLIST_FILES abuse (warning)
• INDEX:maintainer different from Makefile:MAINTAINER
• Unofficial categories (warning)
• INDEX:categories different from Makefile:CATEGORIES
• Empty INDEX:www-site
• Unresolvable INDEX:www-site (optional)
• Unaccessible INDEX:www-site (optional)
• INDEX:www-site different from Makefile:WWW
• Ports marked as BROKEN, FORBIDDEN or DEPRECATED
• Ports marked as IGNORE (warning, unreliable)
• Ports marked as BROKEN, FORBIDDEN or DEPRECATED for too long
• Ports unchanged for a long time (info)

It's possible to change the default values for PLIST_FILES abuse, BROKEN_since, DEPRECATED_since, FORBIDDEN_since and Unchanged_since with the --plist, --broken, --deprecated, --forbidden and --unchanged options, followed by a number of files for the first one and a number of days for the others.

OPTIONS

Options	Use
--show-cat|-C	Show categories with ports count
--show-mnt|-M	Show maintainers with ports count
--cat|-c LIST	Select only the comma-separated categories in LIST
--mnt|-m LIST	Select only the comma-separated maintainers in LIST
--port|-p LIST	Select only the comma-separated ports in LIST
--plist NUM	Set PLIST_FILES abuse to NUM files
--broken NUM	Set BROKEN since to NUM days
--deprecated NUM	Set DEPRECATED since to NUM days
--forbidden NUM	Set FORBIDDEN since to NUM days
--unchanged NUM	Set Unchanged since to NUM days
--check-host|-h	Enable checking hostname resolution (long!)
--check-url|-u	Enable checking URL (very long!)
--debug	Enable logging at debug level
--info	Enable logging at info level
--version	Print version and exit
--help|-?	Print usage and this help message and exit
--	Options processing terminator

FILES

The whole port tree under /usr/ports

• as root, get the last version with "portsnap fetch update"

/usr/ports/INDEX-xx

• where xx is the major version of FreeBSD that you are using (as I write this xx=14). As root, get the last version with "cd /usr/ports ; make fetchindex" or rebuild it from your port tree with "cd /usr/ports ; make index"

EXIT STATUS

The portstreelint utility exits 0 on success, and >0 if an error occurs.

EXAMPLES

To analyze the full port tree in the background, do:

$ nohup portstreelint --info -hu > stdout.txt 2> stderr.txt &

Results for this example are available there:

• stdout output,
• stderr output for details.

To analyze the ports of a specific maintainer identified by id@domain, do:

$ portstreelint --info -m id@domain

SEE ALSO

lint(1), portlint(1), vuxml(3)

STANDARDS

The portstreelint utility is not a standard UNIX command.

This implementation tries to follow the PEP 8 style guide for Python code.

PORTABILITY

None. Works only on FreeBSD, but who needs anything else?

HISTORY

While working on the 4th version of the pysec2vuxml tool, I noticed there were errors in the FreeBSD port Index, so I built the portlint2 tool to analyze this more thoroughly...

After dicussions on the freebsd-ports mailing list an interest in checking port vulnerabilities arose, which led me to convert that standalone command into a Python package in order to benefit from my vuxml library.

LICENSE

It is available under the 3-clause BSD license.

AUTHORS

Hubert Tournier