On 02/10/2013 02:40 AM, James Griffin wrote:
--> Jan Stary<h...@stare.cz> [2013-02-10 09:08:14 +0100]:
On Feb 09 21:11:56, themazed...@gmail.com wrote:
On 02/09/2013 08:42 PM, System Administrator wrote:
OpenBSD is all about KISS (simplicity) -- have you tried running the bi-
annual release update procedure? have you read (carefully) the FAQ
section on upgrading? Many users report it takes less than 15 minutes
to perform a *remote* upgrade. Also you need to mind that OpenBSD does
not support version rollbacks or offer binary updates to stable. So
will an additional tool which requires ongoing maintenance and a
configuration file setup, really add value (simplicity) ?
On 9 Feb 2013 at 20:23, Crookedmaze wrote:
Dear OpenBSD Community,
Hello I am wondering if there is a tool similar to FreeBSD-update on
OpenBSD? If not are there any reasons for why a tool like this
hasn't been developed? Also if there isn't a tool like this
(I am pretty sure there isn't one as I have checked) if I were to
develop one do you think it would be accepted into OpenBSD? Please
let me know what you think!
Sincerely,
Crookedmaze
Yes, System Administrator I have had a look at the FAQ the reason I am
asking about such a tool is because it seems as if the only way to
update OpenBSD (Errata update wise) is to download a patch from
the errata page and to manually patch the source code then follow the
instructions for applying the patch (Or you could follow stable using
CVS). I just thought it would be easier (and Simpler) if you were
able to patch the version of OpenBSD you are running by simply typing
openbsd-update which would then apply the security update by download
and installing a binary package.
Just upgrade with a snapshot, like everyone else.
It doesn't get much simpler than that.
This is absolutely true. I'm fairly new to OpenBSD and have been
upgrading using snapshots since November and it takes minutes to
complete and couldn't be easier IMO, even for an idiot like me :-).
I used FreeBSD for many years but will not go back to it now. This
project is superior and whilst I can understand the reasons for
your suggestion, it just isn't needed.
Thanks for replying guys, I have looked into using snapshots but it
looks like the snapshots are based off of current and I had a look at
the FAQ and in section 5.1 of the FAQ it says.
"Between formal releases of OpenBSD, /snapshots/ are made available
through the FTP sites <http://www.openbsd.org/ftp.html>. As the name
implies, these are builds of whatever
code is in the tree at the instant the builder grabbed a copy of the
code for that
particular platform. Remember, on some platforms, it may be DAYS before
the snapshot build is completed and put out for distribution. There is no
promise that the snapshots are completely functional, or even install."
This makes me a little nervous and I think I would rather just follow
release with errata patches or just follow stable. OK, System
Administrator I see what you mean by overhead now, now that I think about
it I am starting to see what you mean by undue burdon (why would you add
something new if what is being used right now works just fine?) I will
have to have a look at marc.info and see what I can find on the topic on
binary updates there also. Nick your right I should stop trying to make
OpenBSD like FreeBSD or Linux, in all honestly I don't really mind the
current update process, really the only actual "problem" I have had with
it is simply that if you had multiple servers running OpenBSD
(eg if you had 200 servers why would you build the patch on all 200 of
them) but the tool Brian suggested I look at looked promising in that
it looks like you could just apply the patch on a single system build a
package and have all the other servers install the package.
Nick I also agree with you that there is
a certain "simple elegance" about OpenBSD its actually one of my
favorite things about OpenBSD in that it is secure by default
and the installer for it is great because I can install OpenBSD
in about 3 minutes (as opposed to 20-30+ minutes on others)
not to mention all the time I would normally have to spend
hardening the system post install. With OpenBSD its just a matter
of checking the errata page.
-Crookedmaze
