From owner-freebsd-questions@FreeBSD.ORG Tue Jan 24 10:50:10 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F172C1065679 for ; Tue, 24 Jan 2012 10:50:10 +0000 (UTC) (envelope-from c.kworr@gmail.com) Received: from mail-ey0-f182.google.com (mail-ey0-f182.google.com [209.85.215.182]) by mx1.freebsd.org (Postfix) with ESMTP id 0B93F8FC13 for ; Tue, 24 Jan 2012 10:50:04 +0000 (UTC) Received: by eaai10 with SMTP id i10so1680636eaa.13 for ; Tue, 24 Jan 2012 02:50:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=V0c9du2MRZd9rFSyXFDpDB3aSAQYI48FtRuSUjpQo7U=; b=kfQcv9QX1+OB7YEthG8mYO5k7hnXlZB8ZTmfd+XphgS5YESkocWDixLZ3ELm+t/s4C SwcLokiIggnbOGFTs3m5y4p6Z+sKdgLMk2rE93FJ3I+aAoGpdIIrG41QuajQqUNwcIQT 2vqRRB7DJAnTAfmXXBUrn9wdOdtib5Qi1Tdyg= Received: by 10.213.26.77 with SMTP id d13mr310660ebc.132.1327402203965; Tue, 24 Jan 2012 02:50:03 -0800 (PST) Received: from green.tandem.local (utwig.xim.bz. [91.216.237.46]) by mx.google.com with ESMTPS id c16sm66167858eei.1.2012.01.24.02.50.02 (version=SSLv3 cipher=OTHER); Tue, 24 Jan 2012 02:50:02 -0800 (PST) Message-ID: <4F1E8CD8.6060105@gmail.com> Date: Tue, 24 Jan 2012 12:50:00 +0200 From: Volodymyr Kostyrko User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:9.0.1) Gecko/20120110 Firefox/9.0.1 SeaMonkey/2.6.1 MIME-Version: 1.0 To: Victor Sudakov References: <20120123103232.GA79175@admin.sibptus.tomsk.ru> <4F1D7844.8060807@gmail.com> <20120124084110.GA99094@admin.sibptus.tomsk.ru> In-Reply-To: <20120124084110.GA99094@admin.sibptus.tomsk.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: portmaster best practices X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jan 2012 10:50:11 -0000 Victor Sudakov wrote: >>> If portaudit shows that some installed packages have vulnerabilities, >>> what do you usually do? >> >> Greatly depend on where am I. All my systems are staying up-to-date >> whereas when I'm visiting someones system I prefer to update only >> required pieces of software. Anyway if you tell portmaster to update >> port x it would try to update all ports it depends on. > > Does it often screw things up when updating dependencies (both > ascending and descending ones)? Do you recommend to always update the > ascending dependencies (portmaster -r) also? I never faced any problems updating ports with portmaster. Mostly because portmaster always backups old libraries to compat folder for me as stated in my configuration file: /usr/local/etc/portmaster.rc: NO_BACKUP=Bopt PM_VERBOSE=vopt SAVE_SHARED=wopt DONT_SCRUB_DISTFILES=Dopt NO_BACKUP means don't create a temporary package when deleting something. This is unsuitable for me as /usr/ports in my network is distributed via NFS ro. PM_VERBOSE increases detail level. SAVE_SHARED is a must, it tells portmaster to propagate deleted shared libraries to compat directory. This way updating any port to newer lib version will have no impact on ports requiring previous versions. DONT_SCRUB_DISTFILES also is redundant for me as /usr/ports is read only and I don't want to drop sources of python 2.5 when building python 2.7 as python2.5 is still needed for AppEngine for example. Personally I never use -r as anything that can be fixed with that one can be fixed with pkg_libchk and careful planning. >> The better way of debugging such problems for me is pkg_libchk from >> sysutils/bsdadminscripts. > > I use sysutils/libchk when I have to, but it is a tedious manual job I > would like to avoid. They are almost the same except pkg_libchk doesn't depend on ruby and works in parallel better (for me). -- Sphinx of black quartz judge my vow.