From owner-freebsd-questions@FreeBSD.ORG Thu Sep 27 22:03:48 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3817E1065673 for ; Thu, 27 Sep 2012 22:03:48 +0000 (UTC) (envelope-from edflecko@gmail.com) Received: from mail-oa0-f54.google.com (mail-oa0-f54.google.com [209.85.219.54]) by mx1.freebsd.org (Postfix) with ESMTP id F01888FC15 for ; Thu, 27 Sep 2012 22:03:47 +0000 (UTC) Received: by oagn9 with SMTP id n9so1193018oag.13 for ; Thu, 27 Sep 2012 15:03:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=+kZ54Eru838UXQ0SAcDf4kH5PMECpZ1bPhV1spuQlVg=; b=y/mQRIWxVvVgoaP6pQHOBCKtZoRowps0A91PFzpsMtwyYaH5mGNDwgH6wS1vJsKKlf cE3T81lQpWhvsfI1t9V2J1cGgJggb7T1QnHHxauipcN4DJVRNhW6bzS+79r63Qzzvl6O 9PcaUzVWqvbzPEUpvT8Pzt8OkV28RH1sSGQelkex7OTHSsI0qN/nGFp4J+29LOPH+CTC phPiG4tig7TjBfwAfXgTUpKnVomVQgXClOotKeC4AvV0YGz7+Z3i9x88EF3pe59sWgM/ FWVwW7JzaorPEdocIos6eift4Dlm2ze7Via0On00idp+NhFYZkJ8nY9U43vdptGlpRbl GMFg== MIME-Version: 1.0 Received: by 10.182.14.101 with SMTP id o5mr4405525obc.1.1348783427412; Thu, 27 Sep 2012 15:03:47 -0700 (PDT) Received: by 10.76.83.1 with HTTP; Thu, 27 Sep 2012 15:03:47 -0700 (PDT) Date: Thu, 27 Sep 2012 15:03:47 -0700 Message-ID: From: Ed Flecko To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: svn checkout "head" or "stable" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Sep 2012 22:03:48 -0000 My goal is to simply have a production server that's fully patched, but I will be running custom kernels (which is why I'm not using freebsd-update). I've seen a lot of subversion references to checking out the "head" branch and the "stable" branch. I understand the "head" branch is the most current, so that's the same as the "current" branch, right? If I understand correctly, "most" people will not follow the "current" branch for production servers. My goal is to have all of the files I need to rebuild my kernel and my system after security updates have been released, therefore I should do something like: svn co svn://svn.freebsd.org/base/stable/9 /usr/src svn co svn://svn.freebsd.org/ports/stable/9 /usr/ports svn co svn://svn.freebsd.org/doc/stable/9 /usr/doc This will give me everything I need to recompile and have a fully patched system, right? I do not make changes to the src, ports, or doc directories. From that point forward, as new security patches are released, I can simply: svn up /usr/src svn up /usr/ports svn up /usr/doc and once again rebuild my kernel and system. Does this sound correct? Ed