From owner-freebsd-questions@FreeBSD.ORG Wed Feb 20 18:04:07 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 10EFE16A406 for ; Wed, 20 Feb 2008 18:04:07 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (gate6.infracaninophile.co.uk [IPv6:2001:8b0:151:1::1]) by mx1.freebsd.org (Postfix) with ESMTP id 68D1E13C4DB for ; Wed, 20 Feb 2008 18:04:06 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) by smtp.infracaninophile.co.uk (8.14.2/8.14.2) with ESMTP id m1KI41hx033145; Wed, 20 Feb 2008 18:04:01 GMT (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.4.4 smtp.infracaninophile.co.uk m1KI41hx033145 Authentication-Results: smtp.infracaninophile.co.uk; dkim=hardfail (SSP) header.i=unknown Message-ID: <47BC6B90.8010106@infracaninophile.co.uk> Date: Wed, 20 Feb 2008 18:04:00 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 2.0.0.9 (X11/20080210) MIME-Version: 1.0 To: Zbigniew Szalbot References: <94136a2c0802200802r790ea5b1ye6f1a331b15ed6f4@mail.gmail.com> <47BC61BA.60103@infracaninophile.co.uk> <94136a2c0802200941h1f8ffd26n7c4164c51c760918@mail.gmail.com> In-Reply-To: <94136a2c0802200941h1f8ffd26n7c4164c51c760918@mail.gmail.com> X-Enigmail-Version: 0.95.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (smtp.infracaninophile.co.uk [IPv6:::1]); Wed, 20 Feb 2008 18:04:01 +0000 (GMT) X-Virus-Scanned: ClamAV 0.92/5893/Wed Feb 20 08:07:36 2008 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,NO_RELAYS autolearn=ham version=3.2.4 X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd-questions Subject: Re: security of a new installation / steps to take X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Feb 2008 18:04:07 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Zbigniew Szalbot wrote: > Hello, > > 2008/2/20, Matthew Seaman : >> Make sure you track freebsd-announce@freebsd.org and apply any system patches >> in a timely manner. Also make full use of portaudit(1) and generally ensure >> that you are running up to date versions of any ported software. > > Thaaanks! Ah... this brings me to one more question. I love 6.3 but > should I wait to install 7.0? I mean I'd hate having to update a few > months after the server is up and running. Especially, that any > updates will be remotely handled (fortunately the ISP promises to help > if need be - they are excellent and very responsive in this respect). Well, the 7.0 release candidates available now seem to run very stably wherever I've tried them. The make a big difference to performance, especially if you're running highly contended, multi-threaded applications. On the other hand, I've done a number of remote 6.x -> 7.0 upgrades without any huge difficulty. You run a risk of thinks screwing up if your 7.0 kernel doesn't boot properly, for which you'ld need remote hands to get you unstuck. Also, you /will/ need to recompile everything you've installed on the machine -- applications compiled under 6.x will run just fine so long as you don't do the 'delete-old-libs' step of the upgrade procedure too soon, and you can install the compat6x libs to survive even that. However having a lot of 6.x software installed will make it exceeding difficult to maintain your ports, plus the new compiler in 7.0 can get you some useful performance enhancements. That mega-recompilation step does tend to lead to some non-neglible periods of service downtime, but apart from the time consumption it's pretty routine stuff. Cheers, Matthew - -- Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHvGuQ8Mjk52CukIwRCA1hAJ4jvOra+2jdgpOp9zS/DSNMOYjkDwCfYWRN HEQws1mEcw5DOsMx7ofsL8k= =i1jL -----END PGP SIGNATURE-----