From owner-freebsd-security@FreeBSD.ORG Fri Oct 13 06:21:04 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2214C16A4A0; Fri, 13 Oct 2006 06:21:04 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 552D143D7E; Fri, 13 Oct 2006 06:19:39 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by cyrus.watson.org (Postfix) with ESMTP id 9C8D846E1C; Fri, 13 Oct 2006 02:19:34 -0400 (EDT) Date: Fri, 13 Oct 2006 07:19:34 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: "Simon L. Nielsen" In-Reply-To: <20061012090620.GA1059@zaphod.nitro.dk> Message-ID: <20061013071718.W84892@fledge.watson.org> References: <451F6E8E.8020301@freebsd.org> <20061011102106.GY1594@obiwan.tataz.chchile.org> <452D4693.6010606@elischer.org> <200610121059.18889.pokui@psg.com> <20061012090620.GA1059@zaphod.nitro.dk> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd security , Patrick Okui , freebsd-stable@freebsd.org, security-officer@freebsd.org Subject: Re: [fbsd] HEADS UP: FreeBSD 5.3, 5.4, 6.0 EoLs coming soon X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Oct 2006 06:21:04 -0000 On Thu, 12 Oct 2006, Simon L. Nielsen wrote: > On 2006.10.12 10:59:18 +0300, Patrick Okui wrote: >> One of my servers is colocated in a place on a different continent - which >> is why I haven't been able to upgrade it beyond RELENG_4. Google turns up a >> binary upgrade as the only way I can get to RELENG_6. Is this still the >> case (because the logistics on arranging that are ... interesting) or is >> there a relatively safe way to upgrade from RELENG_4 to RELENG_6 remotely? > > I have upgraded a system from 4.10 to 6.2 via 5.5 half a world away just > using serial console (well and remote power, but that wasn't needed for the > upgrade itself). I did this via buildworld etc. and it was actually quite > painless, so it can be done. That said, of cause there is always the risk > that something will make it blow up. > > Note that you have to be careful to follow the guidelines to the letter (see > the migration guide which was part of 5.3 or 5.4 docs AFAIR) for the 4.x -> > 5.x part. Ditto. I upgraded my cyrus mail server and kerberos server from 4.x to 6.x remotely from across the world and didn't have any problems. The main caveat was to include the compat4.x stuff during the upgrade, and to make sure to be thorough when rebuilding ports and packages. I was careful to boot 6.x test kernels on all boxes to make sure all hardware probed, etc, before committing to the update. I would have felt a lot less comfortable without a serial console in-hand, though. Robert N M Watson Computer Laboratory University of Cambridge