Created attachment 246071 [details]
appjail-2.9.0.patch

Description:

ChangeLog: https://github.com/DtxdF/AppJail/releases/tag/v2.9.0

* `Added`: `version_extra` keyword in `appjail jail list`.
* `Migrated`: https://appjail.readthedocs.io
* Added DEVFS support:
  * `.gitignore`:
     - `Added`: `find-number-from-start`.
     - `Added`: `find-smallest-missing-number`.
  * `etc/rc.d/appjail`:
     - `Added`: `devfs` in `REQUIRE`.
   * `Added`: `fnfs` algorithm.
   * `Added`: `fsmn` algorithm.
   * `Added`: `devfs` command.
   * `Added`: `device` option in `appjail quick`.
   * `Added`: `DEVICE` instruction in `appjail makejail`.
   * `Added`: `devfs_ruleset` keyword in `appjail jail list`.
   * `Added` DEVFS support in `appjail start`.
   * `Added`: `lib_check_varname` function in `share/lib/check_func`.
   * `Added`: `devfs` library.
   * `Added`: `select` library.
   * `Added`: `load-devfs-rules` script.
   * `Added`: `DEVFS_ASSIGN_ALGO` option in AppJail configuration file.
   * `Added`: `DEVFS_FNFS` option in AppJail configuration file.
* `Fixed`: `lib_repeat`:
   - `Fixed`: exit status (it returns 0 instead of the correct exit status).
   - `Fixed`: check for when the output is empty or not.
* `Fixed`: usage `limits remove keyword`.
* `Fixed`: typo `limits` -> `limits_usage`.
* `Added`: `IMAGE_DOWNLOAD_METHOD` option in AppJail configuration file (This option
           is implemented to solve a problem, namely fairness when downloading an
           image between multiple sources. The `random` option is set by default
           as it appears to be fair, but more methods may be implemented in the
           future if this assumption is not accurate.).
* `Replaced`: shell process with exec in `share/appjail/scripts/ajuser.sh` and
              `share/appjail/scripts/runas.sh`.
* `Fixed`: functions and modules that may hang (These functions naively pass an argument
           to `grep(1)` relying on the `-F` flag to compare each entry. The problem is
           that if the user passes an invalid entry as `-a`, problems such as hangings
           or the like may occur. To fix this, simply add `--` before the pattern to
           told to `getopt(3)` to stop processing further options.):
  - `appjail fetch`.
  - `appjail login`.
  - `lib_check_signal`.
  - `lib_check_rctl*`.
  - `lib_check_path_traversal*`.
* `Fixed`: limits stats (it shows duplicate entries).
* `Added`: support for applying Makejails.
* `Fixed`: `lib_check_func` (`lib_check_func` may return 0 even if its argument is not a
           function but a program, which may lead to execute it instead of the intended
           function.).
* `Fixed`: current directory when executing initscripts (When executing an initscript,
           the current directory should be the last current directory when processing
           the main Makejail, but it is the current directory where the initscript is
           located, which can break stages using some instructions like `COPY` or
           `CMD --local`. The build stage is not affected since it does not use
           initscripts.).
* `Removed`: extra new line in `share/appjail/scripts/run_jail.sh`.
* `Added`: Shorten Domain Names feature.
* `Added`: `JOBS` option in AppJail configuration file.
* `Deprecated`: `appjail fstab jail ... -p` flag.
* `Added`: `etcupdate` command.
* `Added`: `appjail checkOld` command.
* `Fixed`: `appjail update jail` parameters.
* `Added`: `appjail deleteOld` command
* `Added`: `appjail fetch src` command.
* `Added`: `release` option in `appjail quick`.
* `Removed`: unused parameters in `appjail update release`.
* `Limited`: depth of search in `appjail fetch list`.
* `Added`: more checks for when errors occur after creating directories in a thinjail.
* `Ignored`: files that do not exist when creating a thinjail.
* `Optimized`: `appjail jail list` (Getting jail information in parallel is better and
               improves performance than doing it sequentially).
* `Fixed`: syntax order in `appjail fetch`.
* `Implemented`: PseudoFS.
* `Added`: support for files when using `nullfs` filesystem.
* `Added`: `etc/rc.d/appjail-dns` to uninstall target.

QA:

* portlint: OK (looks fine.)
* testport: OK (poudriere: 13.2-RELEASE, amd64, DOCS tested)