Re: Prevent bmake from installing security/ca-certificates

[P Gman <patrickgunsolley%gmail.com@localhost>]

Works perfectly

Cheers!

On Mon, Nov 2, 2026 at 1:27 AM Jonathan Perkin <jperkin%pkgsrc.org@localhost> wrote:
>
> * On 2026-11-02 at 07:32 GMT, P Gman wrote:
>
> >On my Debian Trixie machine, I've linked my system ca-certificates
> >into my pkg tree in order to avoid potential conflicts and
> >duplication.
> >
> >I'd like to ensure that the pkgsrc ca-certificates wont get built and
> >installed, whether accidentally (or by another tenant) or as a
> >dependency, overwriting this.
> >
> >Is there a recommended way to do this?
>
> Assuming only building from source (this won't work if someone wants to
> 'pkgin install ca-certificates'), what I do is have a section in my
> mk.conf like this:
>
>    PKGSKIP.databases/mongodb3=     "Consistently fails and takes hours"
>    PKGSKIP.lang/mercury=           "Consistently fails and takes hours"
>    PKGSKIP.lang/ruby=              "Conflicts with pkg_alternatives"
>    PKGSKIP.www/nginx-devel=        "Causes confusion in package repos"
>    .if defined(PKGSKIP.${PKGPATH})
>    PKG_SKIP_REASON+=               ${PKGSKIP.${PKGPATH}}
>    .endif
>
> Then extend accordingly.
>
> A brief note on why PKG_SKIP_REASON and not PKG_FAIL_REASON, the former
> allows me to set the terribly-named NO_SKIP=yes if for whatever reason I
> want to temporarily build the package manually without editing mk.conf.
>
> --
> Jonathan Perkin                    pkgsrc.smartos.org
> Open Source Complete Cloud   www.tritondatacenter.com