From owner-freebsd-questions@FreeBSD.ORG Thu Jan 22 05:07:06 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8187A416 for ; Thu, 22 Jan 2015 05:07:06 +0000 (UTC) Received: from fly.hiwaay.net (fly.hiwaay.net [216.180.54.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4DAC27CF for ; Thu, 22 Jan 2015 05:07:05 +0000 (UTC) Received: from kabini1.local (rbn1-216-180-76-128.adsl.hiwaay.net [216.180.76.128]) (authenticated bits=0) by fly.hiwaay.net (8.13.8/8.13.8/fly) with ESMTP id t0M573B6021803 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Wed, 21 Jan 2015 23:07:03 -0600 Message-ID: <54C086EE.5000603@hiwaay.net> Date: Wed, 21 Jan 2015 23:13:18 -0600 From: "William A. Mahaffey III" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 CC: freebsd-questions@freebsd.org Subject: Re: frequency of pkg updates References: <54BFFB43.7060208@networktest.com> <54C01B26.1080407@FreeBSD.org> <54C01E7B.6090403@hiwaay.net> <20150122003400.c91771b9.freebsd@edvax.de> In-Reply-To: <20150122003400.c91771b9.freebsd@edvax.de> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Jan 2015 05:07:06 -0000 On 01/21/15 17:34, Polytropon wrote: > On Wed, 21 Jan 2015 15:47:39 -0600, William A. Mahaffey III wrote: >> On 01/21/15 15:33, Matthew Seaman wrote: >>> On 2015/01/21 19:17, David Newman wrote: >>>> How often is the FreeBSD pkg repository updated? >>>> >>>> Asking because 'sudo pkg audit' sometimes shows vulnerabilities in one >>>> or more packages, yet 'sudo pkg update && sudo pkg upgrade -f >>> name>' offers only to reinstall the vulnerable version. >>>> >>>> An updated pkg can take days to show up. The ports tree is updated much >>>> faster, but I'm trying to move to pkg where possible. (Yes, I know I >>>> could run poudriere and create a pkg repository, but I'm asking here >>>> about FreeBSD's pkg system.) >>>> >>>> This is on 10.1-RELEASE-p4 amd64. >>> Packages are built weekly from a snapshot of the ports taken on a >>> Wednesday at (I think) 01:00 UTC. It's definitely some time on >>> Wednesday though. The package builders then build all of the packages >>> for all the supported release branches + HEAD, which takes until some >>> time the following weekend. >>> >>> Thus if a package of interest to you updates on a Thursday, it can be >>> about 10 days before an updated package is available from the repos. >>> >>> More hardware is being procured to cut down the time it takes to build >>> packages, so the update frequency should improve. >>> >>> Cheers, >>> >>> Matthew >>> >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >>> >> Hmmmm .... So the individual pkg's are actually built by .... who ? The >> pkg maintainer ? A central coordinating body ? Somebody/Something else ? > It's an automated build system, a build cluster I think. > The port maintainers are responsible for making sure the > Makefile and the patches work, they primarily do the porting > (when the original software has been created on and for Linux) > and the testing. Then they commit the changes to the official > ports tree, for example, when they updated foo-1.2.3 to foo-1.2.4. > The build system then uses that version for the next scheduled > build session. > > Note that the update might be in the ports tree a bit earlier > than the binary packages become available. If you urgently > require bleeding-edge ports, using portsnap (or probably > even better: svn) is the way to go. With binary packages, > you'll have to wait a little. > > > >> Inquiring minds wanna know .... They might also be interested in >> contributing hardware if that would noticeably speed things up ;-) .... > Provide a time machine so the scheduled day of the week can > be deployed to _all_ of the seven weekdays at once. ;-) I'll get right on that ;-) .... -- William A. Mahaffey III ---------------------------------------------------------------------- "The M1 Garand is without doubt the finest implement of war ever devised by man." -- Gen. George S. Patton Jr.