Re: Prevent bmake from installing security/ca-certificates

[Jonathan Perkin <jperkin%pkgsrc.org@localhost>]

* On 2026-11-02 at 07:32 GMT, P Gman wrote:

> On my Debian Trixie machine, I've linked my system ca-certificates
> into my pkg tree in order to avoid potential conflicts and
> duplication.
>
> I'd like to ensure that the pkgsrc ca-certificates wont get built and
> installed, whether accidentally (or by another tenant) or as a
> dependency, overwriting this.
>
> Is there a recommended way to do this?

Assuming only building from source (this won't work if someone wants to 
'pkgin install ca-certificates'), what I do is have a section in my 
mk.conf like this:

  PKGSKIP.databases/mongodb3=     "Consistently fails and takes hours"
  PKGSKIP.lang/mercury=           "Consistently fails and takes hours"
  PKGSKIP.lang/ruby=              "Conflicts with pkg_alternatives"
  PKGSKIP.www/nginx-devel=        "Causes confusion in package repos"
  .if defined(PKGSKIP.${PKGPATH})
  PKG_SKIP_REASON+=               ${PKGSKIP.${PKGPATH}}
  .endif

Then extend accordingly.

A brief note on why PKG_SKIP_REASON and not PKG_FAIL_REASON, the former 
allows me to set the terribly-named NO_SKIP=yes if for whatever reason I 
want to temporarily build the package manually without editing mk.conf.

--
Jonathan Perkin                    pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com