From owner-freebsd-stable@FreeBSD.ORG Wed May 6 17:31:22 2009 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F0BCC1065675 for ; Wed, 6 May 2009 17:31:22 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: from yx-out-2324.google.com (yx-out-2324.google.com [74.125.44.30]) by mx1.freebsd.org (Postfix) with ESMTP id A5ADC8FC16 for ; Wed, 6 May 2009 17:31:22 +0000 (UTC) (envelope-from fjwcash@gmail.com) Received: by yx-out-2324.google.com with SMTP id 8so131463yxb.13 for ; Wed, 06 May 2009 10:31:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=1NpZQfK91f7ZWE+fiLDAimymZP5m+x09+/W3/qXyg+I=; b=jzuyQoABzZMt7kihzh3eT4ML+JNK8DliBkCrb4nEong7iXfM+IkWfwurP2g+IzqguH ORfmkGDQLa/YZEO+VShod8UOeGVlceRh9p+t6A21OcukoQ0mmrSUWe5la2OBWH+I5JbQ DwfaJJYfY1lGyzQy2BRN0HRSr6d+AVAdVDmGw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=efTs7Y4yMIIcjBiovpYefaU9Jpi2+a3zGYNYBIgATIw5fI8XZa42caRxDSnpGev5h6 IWgZKuNpB9y6f6ys8V+14CADcgDmxKrPnCMnVd1tJKMRyjyS9dvGHRbABLk5Ax4LGtN9 ecypHLjrd391p/7XY3MRPTsH0mVkjl5l7ZJmo= MIME-Version: 1.0 Received: by 10.151.125.8 with SMTP id c8mr2685631ybn.202.1241631082138; Wed, 06 May 2009 10:31:22 -0700 (PDT) In-Reply-To: <000001c9ce66$ed588fc0$c809af40$@org> References: <000001c9ce66$ed588fc0$c809af40$@org> Date: Wed, 6 May 2009 10:31:22 -0700 Message-ID: From: Freddie Cash To: Paul Stewart Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-stable@freebsd.org Subject: Re: Keeping Updated X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 May 2009 17:31:23 -0000 On Wed, May 6, 2009 at 9:23 AM, Paul Stewart wrote: > I guess I'm kinda wondering the "condensed quick version" of what people = are > typically doing to keep their system updated from source without making l= ife > difficult ;) =C2=A0Yes, I've been reading through various things to get m= yself > updated to newer info but there's also a lot of stuff on the Internet bas= ed > on older info hence why I'm asking. This is what I do. I don't claim that it's perfect, nor that it's the recommended way, but it works nicely, and provides some safety nets, just in case. For ports (requires the installation of portmaster and portaudit): # portsnap fetch update # portaudit -Fda > ~/ports-with-issues # pkg_version -vl '<' > ~/ports-with-updates # more /usr/ports/UPDATING If there's anything in ports-with-issues, then look if there's an update in ports-with-updates. If there's anything in ports-with-updates that *needs* to be updated (security fix, bug fix, major feature needed, etc), then update only those ports: # portmaster -bd [portname] For source: Subscribe to the freebsd security announcement mailing list. Copy /usr/share/examples/cvsup/stable-supfile to /etc/supfile.source Edit /etc/supfile.source to set tag=3D to RELENG_X_Y where X_Y is the version you want to upgrade to (7_2, for example). Then, whenever a security announcement is made: # csup /etc/supfile.source # cd /usr/src # make buildworld # make KERNCONF=3DWHATEVER buildkernel # make KERNCONF=3DWHATEVER KODIR=3D/boot/newkernel installkernel # nextboot -k newkernel # shutdown -r now # cd /usr/src # make installworld # mergemaster -iU # mv /boot/kernel /boot/kernel.bak # mv /boot/newkernel /boot/kernel # shutdown -r now Using KODIR and nextboot allows you a safety net. If the boot using /boot/newkernel fails, a simple reboot will bring it back up with /boot/kernel (the old, working kernel). --=20 Freddie Cash fjwcash@gmail.com