On 2026/04/30 21:40, Tom Smyth wrote:
> Hi Folks, 
> 
> Im trying to  move web workloads to perl based application servers... 
> 
> Im trying foswiki, with  httpd on OpenBSD... 
> 
> for the perl functionality any suggestions on how to elegantly import the necessary directories
> out of the chroot jail 
> 
> One thought was to mfs mount  some of the perl paths outside of the chroot inside of the
> chroot  
> 
> so when I upgrade / patch the system it will always have a fresh copy on reboot ?  or am I over
> complicating and use symlinks ? 

symlinks won't work.

personally I'd skip the chroot (if you're running under slowcgi, using
-p /, or use some fastcgi wrapper without enabling chroot).

I don't think chroot is going to give you much benefit after populating
the jail with all of perl and a bunch of external modules, plus any
other executables/libraries as needed. Better to run in a single
purpose VM and firewall it fairly heavily (including outgoing
connections) i.e. separate the whole thing rather than just the
web files.

> pkg_add p5-Algorithm-Diff
> #pkg_add p5-Archive-Tar  #not found  
> pkg_add p5-Authen-SASL
> pkg_add p5-CGI
> pkg_add p5-CGI-Session
> pkg_add p5-Crypt-PasswdMD
> pkg_add p5-Crypt-PasswdMD5
> pkg_add p5-Digest-SHA1
> pkg_add p5-Email-Address-XS
> pkg_add p5-Email-MIME
> #pkg_add p5-Encode   not found
> pkg_add p5-Error
> pkg_add p5-File-Copy-Recursive
> pkg_add p5-HTML-Parser
> pkg_add p5-IO-Socket-SSL
> #pkg_add p5-IO-Socket-IP not found

I think all of those 'not found' ones are in Perl core