From owner-freebsd-questions Tue Jan 30 5:36:55 2001 Delivered-To: freebsd-questions@freebsd.org Received: from easynet-gw.netvalue.fr (unknown [212.180.121.161]) by hub.freebsd.org (Postfix) with ESMTP id 0A37637B4E0 for ; Tue, 30 Jan 2001 05:36:36 -0800 (PST) Received: from mail.netvalue.fr (unknown [192.168.1.13]) by easynet-gw.netvalue.fr (Postfix) with ESMTP id E08D38C3E for ; Tue, 30 Jan 2001 14:38:39 +0100 (CET) Received: from mail-hk.netvalue.fr ([192.168.100.13]) by mail.netvalue.fr (Netscape Messaging Server 3.6) with ESMTP id AAA53ED for ; Tue, 30 Jan 2001 14:36:20 +0100 Received: from erwan.netvalue.fr ([192.168.100.100]) by mail-hk.netvalue.fr (Netscape Messaging Server 4.15) with ESMTP id G7Z9ST00.SI0; Tue, 30 Jan 2001 21:36:29 +0800 Received: from netvalue.com (localhost [127.0.0.1]) by erwan.netvalue.fr (Postfix) with ESMTP id CC96E1A09; Tue, 30 Jan 2001 21:36:28 +0800 (HKT) Message-ID: <3A76C35C.B1AE6150@netvalue.com> Date: Tue, 30 Jan 2001 21:36:28 +0800 From: Erwan Arzur Organization: NetValue Ltd. X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en, fr-FR MIME-Version: 1.0 To: Alexei Betin Cc: freebsd-questions@freebsd.org Subject: Re: the way freebsd to be patched is sick References: <006f01c08ab3$8fa35900$4ac08dd5@belcom.ru> <20010130130832.Q62745@d9168.upc-d.chello.nl> <012b01c08abb$5415b4c0$4ac08dd5@belcom.ru> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Alexei Betin wrote: > > ----- Original Message ----- > From: "Edwin Groothuis" > > > make package, scp/ftp/sendfile/rcp it, pkg_add it. > > > > man perl, search for the NOTES section. > > sure, there are plenty ways to update a part of freebsd > (btw make package, pkg_add does't work for bind), some > of them are very interesting and chelanging. unfortunatly > all of them are very time and resource consuming espesialy > in environment where different version oses installed. and > usualy there are plenty of other important things to do... How would you upgrade bind or any running server without disrupting the service ? Even making binary patches won't solve this issue, i think. The question is : do you really need to upgrade ? (for that BIND advisory, i'd say yes ...) Maybe a compilation server for nightly buildworlds and make installworld/installkernel over NFS on your servers will solve your problem. if you need to reboot web servers, there is a very nice way to reboot them with a very short down time with ipfilter. block in quick on XXX proto tcp from any to any port = 80 flags S (which prevents any new connection, while allowing established ones to complete) wait until sockstat displays no established connection, and simply reboot. -- Erwan Arzur NetValue ltd. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message