The port devel/apr1 depends on databases/db5 which is nearing end of life. It is recommended to use databases/db18 instead. Message from db5-5.3.28_8: ===> NOTICE: This port is deprecated; you may wish to reconsider installing it: EOLd, potential security issues, maybe use db18 instead. It is scheduled to be removed on or after 2022-06-30.
^Triage: Link against dependent issue, which post QA (exp-run) will/should be the issue that is the 'update' issue. Please block any other issues related the db5 update against the same issue as well so its clear what they depend on. Is this issue proposal only dependent on the change/resolution of bug 261523 or is there an additional/independent change required for apr1 in this issue once the dependent issue lands?
No, not that I am aware of. The resolution of bug 261523 takes care of this issue as well.
(In reply to mayhem30 from comment #2) Not exactly, bug261523 is for changing the default BDB version but not removing db5. i.e., it's for the ports that has USES=bdb without specifying which version it wants explicitly. We need to make sure those ports are ok to move from db5 to db18. For the task of removing db5 and moving all ports explicitly expend on it, can be resolved in a separated ticket, and this ticket, bug261525, should be blocked by that one. This could make things less complex.
Would it make sense to switch to using ndbm as its default database support, while you're updating? Ndbm was added as an option in 2009 [1] after being requested in bug #83644, but (understandably) the port continued using BDB as its default. Considering the BDB18 license and it generally being an Oracle product, now might be a perfect time to switch to ndbm as the default in order to keep in line with the spirit of FreeBSD (if such a thing exists and I interpret it correctly). [1]: https://cgit.freebsd.org/ports/commit/devel/apr1/Makefile?id=4877c5ead2c29e59bebd51393e3d6eb48e50053f
(In reply to Oliver Heesakkers from comment #4) https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261523#c6 is a patch to add bdb18 to devel/ap1. I think we need to test and apply this patch, no matter what we want to move to other dbm or not. It's still worth to have it as an option. Speaking of switching default dbm, ndbm is available in the base, sounds a good idea. BTW there is also sdbm shipped along with apr1, don't know which one performs better.
Is there any progress on this? A bunch of stuff using upstream ports are complaining at me, even calling me names! :) Thanks o/
(In reply to Danny McGrath from comment #6) I've been building apr1 from ports with BDB disabled and NDBM enabled for a few weeks now. That allowed me to remove BDB from my servers. So far, no ill effect, but then I only need it to run apache24.
(In reply to Oliver Heesakkers from comment #7) Ya I saw that some were using it, but then I gotta compile it and use ports on a bunch of stuff that's using upstream repo only. I do have poudriere setup with some hosts using it, but I was trying to move TO upstream repo, not FROM it :)
So I use poudriere and just changed my devel/apr1 to turn off `BDB`, and turn on `NDBM`. I only use devel/apr1 for apache24, and everything seems to be fine at first glance at least.
(In reply to Sean McBride from comment #9) I've done the same (using Synth) and apache24 is running just fine.
This may be addressed by a recent commit - see bug 269857. But see bug 269857, comment 5 for a patch to fix some issues with the commit.
This one is on for a long time already. But still there is no "solution". Apache (pkg) still depends and demands db5. And every night you get the report that is is outdated... Is there somebody that will fix it or at least a "how to get rid of the warning" ? Building apache from ports is too complicated (too many dependencies, ruins my running system), but it should be possible to create an updated apr port and release it. Why doesn't it happen???
(In reply to Michael Meiszl from comment #12) It's been almost 3 years since I first reported this. I've moved on and switched to Nginx + PHP-PFM and I couldn't be happier. You may want to consider doing the same thing.