From owner-freebsd-hackers@FreeBSD.ORG Tue Nov 25 23:24:26 2003 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 72EA516A4CF for ; Tue, 25 Nov 2003 23:24:26 -0800 (PST) Received: from tx1.oucs.ox.ac.uk (tx1.oucs.ox.ac.uk [129.67.1.167]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0314E43F85 for ; Tue, 25 Nov 2003 23:24:25 -0800 (PST) (envelope-from colin.percival@wadham.ox.ac.uk) Received: from scan1.oucs.ox.ac.uk ([129.67.1.166] helo=localhost) by tx1.oucs.ox.ac.uk with esmtp (Exim 4.20) id 1AOu2B-0003SF-JI for freebsd-hackers@freebsd.org; Wed, 26 Nov 2003 07:24:24 +0000 Received: from rx1.oucs.ox.ac.uk ([129.67.1.165]) by localhost (scan1.oucs.ox.ac.uk [129.67.1.166]) (amavisd-new, port 25) with ESMTP id 13057-09 for ; Wed, 26 Nov 2003 07:24:23 +0000 (GMT) Received: from gateway.wadham.ox.ac.uk ([163.1.161.253]) by rx1.oucs.ox.ac.uk with smtp (Exim 4.20) id 1AOu2B-0003SA-5u for freebsd-hackers@freebsd.org; Wed, 26 Nov 2003 07:24:23 +0000 Received: (qmail 23830 invoked by uid 0); 26 Nov 2003 07:24:23 -0000 Received: from colin.percival@wadham.ox.ac.uk by gateway by uid 71 with qmail-scanner-1.16 (sweep: 2.14/3.71. spamassassin: 2.53. Clear:. Processed in 1.32797 secs); 26 Nov 2003 07:24:23 -0000 X-Qmail-Scanner-Mail-From: colin.percival@wadham.ox.ac.uk via gateway X-Qmail-Scanner: 1.16 (Clear:. Processed in 1.32797 secs) Received: from dhcp1131.wadham.ox.ac.uk (HELO piii600.wadham.ox.ac.uk) (163.1.161.131) by gateway.wadham.ox.ac.uk with SMTP; 26 Nov 2003 07:24:22 -0000 Message-Id: <5.0.2.1.1.20031126071427.01cb4ab0@popserver.sfu.ca> X-Sender: cperciva@popserver.sfu.ca X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 26 Nov 2003 07:24:19 +0000 To: akanwar@digitarchy.com, freebsd-hackers@freebsd.org From: Colin Percival In-Reply-To: <323910-22003113261956699@M2W053.mail2web.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Subject: Re: patchlevels and FreeBSD source X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Nov 2003 07:24:26 -0000 At 20:09 25/11/2003 -0500, akanwar@digitarchy.com wrote: >Presently I install my servers using a automated pxeboot method. The NFS >image I choose is a copy of the freebsd 4.8-RELEASE cdrom. Post install I >cvsup the plain 4.8-RELEASE server to RELENG_4_8 (taking the patchlevel to >4.8-RELEASE-p15 for example) and then build world. The cvsup/buildworld >takes a long time. These steps are also difficult to automate. After installing the RELEASE, install FreeBSD Update (ports/security/freebsd-update), move its configuration file into the right place, and run `freebsd-update fetch && freebsd-update install`. Given a decent internet connection, this takes no more than a couple minutes, and is much easier than updating your install image every time security issues arise. Colin Percival