If reorder_kernel is running, then syspatch will abort to prevent stepping on an
already running reorder.
Restrict the process matching to the root user to prevent a non privileged user
from drafting and running an endless script called reorder_kernel which would
prevent syspatch run.
This is not a perfect solution but it's less bad than before.
Initial diff from Nick Owens
drop the old 2019-era static copy of geolite databases, other ports have
stopped using them. either sign up to fetch updated geolite2 from maxmind,
or use the freely available databases in net/dbip/{asn,city,country} instead.
jujutsu: remove base-gcc workaround
The intersection of RUST_ARCHS and GCC4_ARCHS is empty nowadays, so
"COMPILER=base-clang ports-gcc" and "COMPILER_LANGS=c" is just noise.
ocaml-cppo: add version string to dune-project
If /usr/ports is a git checkout, and a dune project is missing the version
string, then dune will attempt to check if the port is a git project in
order to find a version string via git.
However ocaml-cppo is not a git project and so dune walks the directory tree
until it finds the unrelated /usr/ports/.git in this setup. Dune then uses
the unrelated parent git repo to extract the wrong version string for
ocaml-cppo's metadata.
Fix this by patching in a version string manually into dune-project. This
will avoid dune going down this wrong code path. Note that the build will
only error out on a system that is also missing a git package. If git is
present then dune will silently insert the wrong package metadata.
Spotted by tb@
fw_update: Make tar skip files outside expected locations
tar(1) strips ".." path components, but this happens after globbing is
applied to the file parameter. This meant tar's -s replacements and the
file parameter examined different strings, meaning a specially
constructed archive could write outside the expected locations. Use
tar's documented order of -s expressions to skip everything else.
