| Port details |
- bastillion Web-based SSH console
- 3.14.00 security
 =4       3.14.00Version of this port present on the latest quarterly branch. - Maintainer: netchild@FreeBSD.org
- Port Added: 2019-08-14 20:36:37
- Last Update: 2022-09-07 21:58:51
- Commit Hash: fb16dfe
- People watching this port, also watch:: mcjoin, ndisc6, ndpmon, fastnetmon, lnav
- Also Listed In: java www
- License: AGPLv3
- WWW:
- https://www.bastillion.io
- Description:
- Bastillion is an open-source web-based SSH console that centrally manages
administrative access to systems.
A bastion host for administrators with features that promote infrastructure
security, including key management and auditing.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- bastillion>0:security/bastillion
- To install the port:
- cd /usr/ports/security/bastillion/ && make install clean
- To add the package, run one of these commands:
- pkg install security/bastillion
- pkg install bastillion
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: bastillion
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1644825984
SHA256 (bastillion-jetty-v3.14_00.tar.gz) = 187d933dcf97236e5d9332dd986338d2909aeb0e1221e4b672273c0ad4d50048
SIZE (bastillion-jetty-v3.14_00.tar.gz) = 20744503
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Runtime dependencies:
-
- bash : shells/bash
- java : java/openjdk11
- There are no ports dependent upon this port
Configuration Options:- No options to configure
- Options name:
- security_bastillion
- USES:
- shebangfix
- pkg-message:
- Bastille is now installed in /usr/local/www/bastillion and /usr/local/jetty_bastillion.
Before the first start (but not if you update), you have to set a DB password in
/usr/local/jetty_bastillion/bastillion/WEB-INF/classes/BastillionConfig.properties
You can do that via e.g.:
# sed -i '' -e "s:dbPassword=:dbPassword=$(dd if=/dev/urandom bs=1 count=10 | openssl base64):" \
/usr/local/jetty_bastillion/bastillion/WEB-INF/classes/BastillionConfig.properties
You may want to activate it in /etc/rc.conf:
# sysrc bastillion_enable="YES"
Once Bastille is started, point your web browser to the login page at
https://<hostname>:8443/.
- If upgrading from > 3.10.00:
- The datastore of bastillion needs to be upgraded (if you do not see users / can not login,
you forgot to upgrade it):
java -jar /usr/local/jetty_bastillion/upgrade/bastillion-upgrade-4.00.01.jar /usr/local/jetty_bastillion/bastillion/WEB-INF/classes/BastillionConfig.properties
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
07 Sep 2022 21:58:51
 |
Stefan Eßer (se) |
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner) |
3.14.00
07 Sep 2022 21:10:59
|
Stefan Eßer (se) |
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above  ) |
3.14.00
21 Jul 2022 08:15:30
|
Tobias C. Berner (tcberner) |
cleanup: remove remaining occurrences of $FreeBSD$ |
3.14.00
14 Feb 2022 08:22:23
|
Alexander Leidinger (netchild) |
security/bastillion: update to 3.14.0 |
3.13.00
10 Jan 2022 10:58:01
|
Alexander Leidinger (netchild) |
security/bastillion: update to 3.13.00
Contains updates to h2 and log4j. |
3.12.02
04 Jan 2022 10:37:47
|
Alexander Leidinger (netchild) |
security/bastillion: update to 3.12.02
Release notes at
https://github.com/bastillion-io/Bastillion/releases/tag/v3.12.02 |
3.12.00
23 Dec 2021 14:52:55
|
Alexander Leidinger (netchild) |
security/bastillion: update to 3.12.00
This update contains an incompatible DB change, please read UPDATING
*before* updating. |
3.11.01
17 Dec 2021 07:42:37
|
Alexander Leidinger (netchild) |
security/bastillion: update to 3.11.01 (log4j 2.16)
Revert my previous log4j fix (disable JNDI lookups via env variable),
the update to 3.11.01 contains the fixed log4j 2.16. |
3.10.00_1
14 Dec 2021 12:46:06
|
Alexander Leidinger (netchild) |
security/bastillion: fix log4j vulnerablity
Disable format msg lookup via shell variable on startup.
Security: CVE-2021-44228 |
3.10.00
07 Apr 2021 08:09:01
 |
Mathieu Arnold (mat) |
One more small cleanup, forgotten yesterday.
Reported by: lwhsu |
3.10.00
06 Apr 2021 14:31:13
|
Mathieu Arnold (mat) |
all: Remove all other $FreeBSD keywords. |
3.10.00
06 Apr 2021 14:31:07
|
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
3.10.00
24 May 2020 07:37:51
 |
netchild |
Update to 3.10.00.
This fixes some potential XSS in the included jquery, but there is no
information if bastillion is vulnerable in some place or not.
As all the action in bastillion happens after authentication, and
is limited to what you enter yourself, it looks like the impact
or attack surface of the jquery XSS on bastillion is low.
ChangeLog: https://github.com/bastillion-io/Bastillion/releases/tag/v3.10.00
CVE: CVE-2020-11022
CVE: CVE-2020-11023 |
3.09.00
13 Dec 2019 10:12:57
|
netchild |
Update to 3.09.00:
- removed license key requirement |
3.08.01
03 Oct 2019 17:22:17
|
glewis |
Remove references to EoL'ed Java versions
* Java 9 and 10 are EoL'ed upstream and the ports for them are scheduled
for deletion, so switch the version specification here to 11+.
PR: 241022
Approved by: netchild@
Sponsored by: The FreeBSD Foundation |
3.08.01
26 Sep 2019 08:46:15
|
netchild |
Update to bugfix release 3.08.01. |
3.08.00_2
12 Sep 2019 07:18:06
|
netchild |
Add missing distinfo for upgrafe program. |
3.08.00_2
11 Sep 2019 17:53:24
|
netchild |
- Add update tool.
- Add update instructions (datastore needs to be updated).
- Convert pkg-message to UCL format.
- Rework plist generation target. |
3.08.00_1
10 Sep 2019 11:50:48
|
netchild |
Fix build by actually committing the change in the plist... |
3.08.00
09 Sep 2019 20:00:35
|
netchild |
Update to 3.08. |
3.06.04_1
27 Aug 2019 11:57:45
|
mat |
Regular pkg-message cleanup.
Pointy hat: dinoex ashish |
3.06.04_1
17 Aug 2019 20:13:21
|
netchild |
Fix URL.
Noticed by: pkubaj |
3.06.04
17 Aug 2019 08:33:17
|
antoine |
Remove duplicate line from plist |
3.06.04
16 Aug 2019 06:42:48
|
netchild |
Improvements to the port MAkefile, no package changes.
Suggested by: mat |
3.06.04
14 Aug 2019 20:36:31
|
netchild |
Add new port "Bastillion".
Bastillion is an open-source web-based SSH console that centrally manages
administrative access to systems.
A bastion host for administrators with features that promote infrastructure
security, including key management and auditing. |
As an Amazon Associate I earn from qualifying purchases.