From owner-freebsd-questions@FreeBSD.ORG Wed May 22 20:01:00 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id F0D7F835 for ; Wed, 22 May 2013 20:01:00 +0000 (UTC) (envelope-from axelbsd@ymail.com) Received: from nm4-vm6.bullet.mail.gq1.yahoo.com (nm4-vm6.bullet.mail.gq1.yahoo.com [98.136.218.165]) by mx1.freebsd.org (Postfix) with SMTP id B551C839 for ; Wed, 22 May 2013 20:01:00 +0000 (UTC) Received: from [98.137.12.55] by nm4.bullet.mail.gq1.yahoo.com with NNFMP; 22 May 2013 20:00:59 -0000 Received: from [98.136.185.46] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 22 May 2013 20:00:59 -0000 Received: from [127.0.0.1] by smtp107.mail.gq1.yahoo.com with NNFMP; 22 May 2013 20:00:59 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1369252859; bh=6U8yxv8U3ad9d/jOPyPmI/1bAuDv55eUGTpdjBG3E2E=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Received:X-Google-DKIM-Signature:X-Received:MIME-Version:Received:In-Reply-To:References:From:Date:Message-ID:Subject:To:Cc:Content-Type; b=5Cp6+FtC3RrzsTJRnhcY5bz2UuUGDUFwv/0ViG9f27hkN0Fnd6dYr/wqv50+zlIRQzJ2WKin92TWiluNpWdOu8QcVduqUz8rHeEDUoFdrDdX40Phn35LTo42HoTuuGLrOf/VGkLvhmhbw96UqSr3Qh8Y9ZgBBvCVCP6Y0FkPMrE= X-Yahoo-Newman-Id: 644427.77610.bm@smtp107.mail.gq1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: juH_NHUVM1lYIQiiSBjg3KU13.7BBAKxFPuhTnJQAEqwo2N U4ZLg5lU_ZdZdCScJfd8eK2DBw0S4jmihNNJFyT_tGqcDTpHk8pupCHYb7Ji .73QwCFcoTvHeTaXB3OuDyLV8q9NlAObA_PyY2tpkktNUnil7w.3uEMFVqUK Fnget0C_4SzsODuARTbj_C6jhCPfEfzm7f8n4pA.MNaNEpSlQ86_RTYE1VxV U0FfRWqhd9lAkmS1tTmyPj6RHe45kPs5zR_22eC.o7F1_UZxQ2rmlLZRkmub AnsbB1q34CkMd73l3VUomh95gXD4nVQ6ceR.v6NYSKvwI4fu.6_HVIdvwFed pNKOiMT5AiWwQUPqxIz0KNv.Hu3Pe6KLPTlPA7wiVSCrewYdJKHbqlas0.Mr 2q0d7Bw8gxRVozhnFE7JHGF3giqe7j0uaVY8_0pkB1UKBCJOIxHnsTFUUpHf eMrywCdCgm72KKHVV5ZXDzuxNmhWmCg.RzwONYdue.Jyu7NvqgDuvDQCS7ns 2VMDcbo.sZ1L.HLebmDcWTRqamaQE5oudrQMJAlQTxA-- X-Yahoo-SMTP: S65s63SswBDjU54Gjqw2GSWlZmfgiEU_X3tN1_9u X-Rocket-Received: from mail-vc0-f182.google.com (axelbsd@209.85.220.182 with ) by smtp107.mail.gq1.yahoo.com with SMTP; 22 May 2013 20:00:59 +0000 UTC Received: by mail-vc0-f182.google.com with SMTP id gf12so1603110vcb.13 for ; Wed, 22 May 2013 13:00:58 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=6U8yxv8U3ad9d/jOPyPmI/1bAuDv55eUGTpdjBG3E2E=; b=dgKHcjYLAIcQVG3Zp5pB21hIn0dbR+ysQ74PvXU/w/iZpvZIqY2UYSp6hxpkQKgVhb 7rPy569sacJhURFGThkQLtbg/aSLATSdZ4L5zMdwyYTJS+57jKzwPtL5MkEWAyiafoQB JiS3GAmmNYjyphlps8vvJ4oo6y3v5kHsXvuWjriGNmp2hUqcHzkuqn2pp1vxtEpkkfoI P/kriB5fDoKcEquZBne0plAgrHAis4QlXV9iVeZjQ8MaE9PiZ5vTk0V1ZQ4fiwSSWSdq pagDgz/L0KQk53hqiwUM19pma+aPQtoxS/9W1UCiA38XGbBATVOCTs8UXsxIAtMkvmHq SkxA== X-Received: by 10.52.90.202 with SMTP id by10mr2922949vdb.26.1369252858043; Wed, 22 May 2013 13:00:58 -0700 (PDT) MIME-Version: 1.0 Received: by 10.58.146.6 with HTTP; Wed, 22 May 2013 13:00:37 -0700 (PDT) In-Reply-To: References: From: Alexandre Date: Wed, 22 May 2013 22:00:37 +0200 Message-ID: Subject: Re: Keeping my system up to date with CTM or subversion? To: Ed Flecko Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: FreeBSD Questions Mailing List X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 May 2013 20:01:01 -0000 On Wed, May 22, 2013 at 8:26 PM, Ed Flecko wrote: > I'm confused about an effective way to keep my system patched and > up-to-date, and I'm hoping someone can clarify what seems like a lot of > options. > > I'll be running a production server (so security and stability are most > important) with a custom kernel and I want it to have all of the latest > security patches applied. I'll install from DVD and I'll chose the option > to install both the ports and the source. > > After this, it sure seems like the best way, in terms of speed to downloa= d > any updated files, is to use CTM as a cron job, but I think the FBSD > handbook recommends subversion? Also, I think I read that CTM won't updat= e > documentation? Is that right? > > I also see some people say they use portsnap, portaudit and portupgrade. > For example, I came across this command: > > portsnap fetch && /usr/sbin/portsnap update && /usr/local/sbin/portaudit = -F > && /usr/local/sbin/portupgrade =E2=80=93aR > > however these utilities are used more for keeping your ports collection > up-to-date (if you install software from ports), and not so much for > keeping your system patched from a security perspective - isn't that righ= t? > > Hopefully, someone can clarify my confusion. > > Thank you! > > Ed > Hi Ed, To update my ports tree, I use "portsnap" tool. To install ports (or upgrade them) I use "portmaster". More information here: http://www.freebsd.org/doc/en/books/handbook/ports-using.html To update my sources tree, I use "subversion" tool. Then I rebuild world. More information here: http://www.freebsd.org/doc/en/books/handbook/svn.htm= l & http://www.freebsd.org/doc/en/books/handbook/makeworld.html I use subversion to update my sources tree because I am running 9-STABLE. If you are running 9.x-RELEASE (or 8.x-RELEASE) you can use "freebsd-update" to sync sources and install binary patchs. As you are using custom kernel, you will have to recompile it. More information here: http://www.freebsd.org/doc/en/books/handbook/updating-upgrading-freebsdupda= te.html I hope this help you. Kind regards, Alexandre