Im a newbie in openbsd, so i started reading the documentation in openbsd.org, 
and i want some confirmation or correction on my understanding after reading 
the ports section of the FAQ.

-I've installed -release from http with the "cd61.iso" so i have -release 
installed.
-After that i run "syspatch", so i have -stable installed (-release with latest 
patches applied)
-Then, i added some ports with "pkg_add <package>", so those packages may be 
outdated in the sense of latest security packages, because -stable don't get 
binary security updates, and issuing "pkg_add  <package>" installed the -stable 
package instead of the -current (latest) version.
-So i proceeded to get the CVS tree of ports as stated in the FAQ, and if i 
build the same ports with "make install" then i will get the latest security 
patches applied to my ports. This got me thinking, that then, it's better to 
install the ports packages directly from compiling from CVS after a fresh 
-release and then -stable installation.
-From this point, (-stable base system and -stable ports from CVS), to update 
everything with the latest security patches i need to "syspatch" to get the 
latest patches applied automatically to base system, and cvs update in the 
ports directory to get the latest patches for installed ports and then "make 
install" to every package that has been updated with security patches. Because 
"pkg_add -Uuv" is only for updating -current ports, and will do nothing in a 
system with -stable ports (because, as stated before, -stable didn't get binary 
ports updates, only the patches in the CVS tree).

Hope to read your corrections in my understanding of the system!

Thanks!

Reply via email to