Date: Thu, 14 Jun 2012 11:12:05 +0100 From: Matthew Seaman <matthew@FreeBSD.org> To: Leslie Jensen <leslie@eskk.nu> Cc: freebsd-questions@FreeBSD.org Subject: Re: freebsd-update procedure, question Message-ID: <4FD9B8F5.5060909@FreeBSD.org> In-Reply-To: <4FD9B1C4.6010403@eskk.nu> References: <4FD9B1C4.6010403@eskk.nu>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig7FE9FD37767AC1777BA83433 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 14/06/2012 10:41, Leslie Jensen wrote: > When one recives the >=20 > FreeBSD Errata Notice or >=20 > FreeBSD Security Advisory >=20 > The instruction is to do: >=20 >=20 > # freebsd-update fetch >=20 > # freebsd-update install >=20 >=20 >=20 > From earlier discussions on this list about the -px number not changing= , > I usually rebuild and install the kernel. >=20 > My question is: >=20 > Do I need to reboot after # freebsd-update install or can I rebuild and= > install the kernel before the reboot? freebsd-update will fetch any updates to /usr/src, so any time after you've done 'freebsd-update install' you can build and install a new kernel with all the security patches applied. Given that you are only applying security updates within one release branch and you are using a kernel configuration that has been well tested, you should be fine to just install the new kernel before rebooting at the end of your update procedure. However, if you're going to be doing anything more ambitious (switching RELEASE version, modifying the kernel config non-trivially), then you should adopt a more cautious approach. You need to make sure you've got a world+kernel combination that still works after freebsd-update has applied all its changes to the system before you try booting to your customised kernel. In the case of major version upgrades, use the default kernels that freebsd-update supplies during the actual upgrade so you can be assured that you have a working combination (working in the sense that you can log in and build/install a new kernel; if you need a custom kernel to support some odd bits of hardware then those temporarily won't work). Once you've got the system up and running after updating, then go ahead and build and install your new kernel. Should it fail to boot properly, you will be able to back-out to the previous known-working kernel. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey --------------enig7FE9FD37767AC1777BA83433 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk/ZuPwACgkQ8Mjk52CukIzH/QCfbz516SA7FvnyNdbFg4jyrpp9 7ScAnih2jMTk3QIUpXmaCjXvPRTQx0HG =krpW -----END PGP SIGNATURE----- --------------enig7FE9FD37767AC1777BA83433--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FD9B8F5.5060909>