From: Lloyd <ng2d68@proton.me>
Subject: sysupgrade proxy support
To: tech <tech@openbsd.org>
Date: Fri, 10 Apr 2026 17:58:51 +0000

Reposting this patch if there is any interest before the next release.

Adds proxy support to the automated sysupgrade, as the check for
packages/firmware will fail for hosts on a proxy-protected network.

Regards
Lloyd
 
Index: sysupgrade.sh
===================================================================
RCS file: /cvs/src/usr.sbin/sysupgrade/sysupgrade.sh,v
retrieving revision 1.58
diff -u -p -u -p -r1.58 sysupgrade.sh
--- sysupgrade.sh	3 Feb 2025 18:55:55 -0000	1.58
+++ sysupgrade.sh	9 Sep 2025 03:04:38 -0000
@@ -219,6 +219,12 @@ Pathname to the sets = ${SETSDIR}/
 Directory does not contain SHA256.sig. Continue without verification = yes
 __EOT

+# If a proxy was needed to fetch the sets, pass it to the unattend file
+[[ -n $http_proxy ]] &&
+	cat <<__EOT >> /auto_upgrade.conf
+HTTP proxy URL = ${http_proxy}
+__EOT
+
 if ! ${KEEP}; then
 	CLEAN=$(echo BUILDINFO SHA256 ${SETS} | sed -e 's/ /,/g')
 	cat <<__EOT > /etc/rc.firsttime