From owner-freebsd-questions Mon Jul 22 9:32:36 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B516537B400 for ; Mon, 22 Jul 2002 09:32:32 -0700 (PDT) Received: from dunnevant.worksforfood.com (pool-151-205-71-170.char.east.verizon.net [151.205.71.170]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0756443E5E for ; Mon, 22 Jul 2002 09:32:27 -0700 (PDT) (envelope-from dannyboy@worksforfood.com) Received: by dunnevant.worksforfood.com (Postfix, from userid 1000) id 1C1D62FD17; Mon, 22 Jul 2002 12:32:26 -0400 (EDT) Date: Mon, 22 Jul 2002 12:32:26 -0400 From: Daniel Harris To: David Wilk Cc: freebsd-questions@FreeBSD.ORG Subject: Re: FreeBSD upgrade maintenance vs. debian (please help) Message-ID: <20020722163226.GA384@dunnevant.worksforfood.com> Mail-Followup-To: David Wilk , freebsd-questions@FreeBSD.ORG References: <20020722094844.D9023@cygnus.wks.Gallup.cia-g.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="6c2NcOVqGQ03X4Wi" Content-Disposition: inline In-Reply-To: <20020722094844.D9023@cygnus.wks.Gallup.cia-g.com> User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --6c2NcOVqGQ03X4Wi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jul 22, 2002 at 09:48:44AM -0600, David Wilk wrote: > The recent security probs (libc, libdns, ssh) have given me quick lessons > on FreeBSD updates on a pre-production box. I'm not terribly thrilled > with the amount of downtime necessary to keep a FreeBSD box up to date. > I'm talking about the 'shutdown to single user mode, make installworld, > reboot to new GENERIC, test, reboot to CUSTOM and yer back in production'. Single-user mode is rarely actually needed for updates within a -STABLE or -RELEASE branch. I usually do make buildworld && make buildkernel KERNCONF=3DCUSTOM and make installworld && make installkernel && mergemaster After that, one reboot. It's a rare (I've never seen one) security update that will have problems with multiuser. --=20 Daniel Harris --6c2NcOVqGQ03X4Wi Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9PDOZbGPaBITQ1+cRAhCtAJoDrqlaDE+6A0FhPMa9306jTZnNawCfT7Ka TOvmyW3ABQvufPQ+9AKKeog= =8EvO -----END PGP SIGNATURE----- --6c2NcOVqGQ03X4Wi-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message