DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 16th September 2008
milo974 milo974 is offline
Fdisk Soldier
 
Join Date: Jul 2008
Posts: 58
Thanked 0 Times in 0 Posts
Cool updates from openbsd errata

I use OpenBSD 4.3 :

OpenBSD firewall.my.domain 4.3 GENERIC#698 i386

Filesystem Size Used Avail Capacity Mounted on
/dev/wd0a 147M 29.2M 110M 21% /
/dev/wd0e 147M 29.3M 110M 21% /altroot
/dev/wd0h 49.0M 20.0K 46.5M 0% /home
/dev/wd0d 118M 2.0K 112M 0% /tmp
/dev/wd0g 1005M 382M 573M 40% /usr
/dev/wd0f 196M 5.5M 181M 3% /var

when i want to install a package i use : PKG_PATH, and pkg_add.
I ve seen on "http://www.openbsd.org/errata43.html" updates for 4.3
My Folder : /usr/src is emplty *
What is the easiest way to install the security update?
Reply With Quote
  #2   (View Single Post)  
Old 16th September 2008
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 3,661
Thanked 214 Times in 189 Posts
Default

The OS is managed entirely separately from the Ports and Packages system, Milo.

Read FAQ 5.

The OS is source-code maintained. You are expected to know which flavor of OpenBSD you wish to run (typically, -release + errata or -stable), how to obtain the proper source code for your flavor of the OS), and how to build and install a new GENERIC kernel. You should also know how to build the complete userland, though, if you elect to use -release + errata, userland patches will usually come with individual instructions. Lastly, if you use the X Windows system, you should know how to rebuild OpenBSD's implementation of X.Org's X11R6 software, called xenocara. We are unlikely to see errata for xenocara, but it might happen.
Reply With Quote
  #3   (View Single Post)  
Old 16th September 2008
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,877
Thanked 190 Times in 160 Posts
Default

Quote:
Originally Posted by milo974 View Post
My Folder : /usr/src is emplty
By default, source code will not be installed during installation. Source can be installed by two different methods:
  • Expand src.tar.gz & sys.tar.gz found either on the official CD set or in /pub/OpenBSD/4.3/ at any ftp mirror.
  • Download source from a CVS mirror.
Information on installing source through either CVS or untarring src.tar.gz & sys.tar.gz is provided in Section 5.3.3 of the FAQ:

http://openbsd.org/faq/faq5.html#BldGetSrc
Quote:
What is the easiest way to install the security update?
"Easy" depends upon your experience & skill level. You can either:
  • Install each path individually through information found at:

    http://openbsd.org/errata43.html
  • Upgrade to OpenBSD 4.3-stable, however, this will mean periodically updating /usr/src/ through CVS & recompiling the kernel & userland. Both are explained in Sections 5.3.4 & 5.3.5 of the FAQ.

    Information on the differences between 4.3-release & 4.3-stable can be found in Section 5.1 of the FAQ.
You can choose either choice.

Last edited by ocicat; 16th September 2008 at 02:01 PM.
Reply With Quote
  #4   (View Single Post)  
Old 16th September 2008
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 3,661
Thanked 214 Times in 189 Posts
Default

You asked:
Quote:
What is the easiest way to install the security update?
I believe -stable is easier to manage than -release + errata, and because -stable may include minor fixes not published as errata, may provide a better platform.

The userland build takes an hour or two with modern PCs. On older or smaller architectures (e.g.: VAX, VME) this may take days. On those systems, -release+errata may be of greater interest than -stable.
Reply With Quote
  #5   (View Single Post)  
Old 16th September 2008
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,877
Thanked 190 Times in 160 Posts
Default

If you end up upgrading from OpenBSD 4.3-release to 4.3-stable, note that nothing will need to be done to whatever packages are already installed. Any new packages you may later decide to install are still installed the same manner as in 4.3-release..
Reply With Quote
  #6   (View Single Post)  
Old 16th September 2008
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,877
Thanked 190 Times in 160 Posts
Default

Quote:
Originally Posted by jggimi View Post
The userland build takes an hour or two with modern PCs. On older or smaller architectures (e.g.: VAX, VME) this may take days. On those systems, -release+errata may be of greater interest than -stable.
As relative benchmarks:
  • Building the kernel on architectures in the ~500MHz range can take ~40 minutes. Building the kernel on architectures in the ~1.5GHz range will take ~10 minutes.
  • Building userland on architectures in the ~500MHz range will take ~12 hours. Building userland on architectures in the ~1.5GHz range will take ~3 hours.
FWIW.
Reply With Quote
  #7   (View Single Post)  
Old 16th September 2008
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 3,661
Thanked 214 Times in 189 Posts
Default

Good point, Ocicat. -stable is not an upgrade, it is -release, plus a careful collection of patches. Only patches that affect security or reliability are included -- there is no new functionality, and no library changes. The advantage is that -release and -stable are interchangeable. -release packages may be added to -stable systems, and -stable packages to -release systems. Yes, -stable packages used to be available. At one time, ports with security fixes were added to the -stable ports tree, and -stable packages were built and added to the package mirrors.

Currently, this is not done, due to resource constraints. But it may happen again, in the future.
Reply With Quote
  #8   (View Single Post)  
Old 24th September 2008
milo974 milo974 is offline
Fdisk Soldier
 
Join Date: Jul 2008
Posts: 58
Thanked 0 Times in 0 Posts
Default

so, i use release version (4.3) , i want to use -stable ... how can i do that, i have read the faq (5), but i don't understand how to proceed ... if someone can help me please
Reply With Quote
  #9   (View Single Post)  
Old 24th September 2008
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 2,877
Thanked 190 Times in 160 Posts
Default

Quote:
Originally Posted by milo974 View Post
i want to use -stable ... how can i do that, i have read the faq (5), but i don't understand how to proceed ...
Note: /usr will need a minimum of 2-3 GB of free space for downloading all source code & building.
  1. Choose a mirror from the following list -- preferably a mirror geographically close to wherever you are located:

    http://openbsd.org/cvsync.html
  2. Set CVSROOT to this mirror as described in Section 5.3.3:

    http://openbsd.org/faq/faq5.html#BldGetSrc

    For example, if cvsync.allbsd.org is the closest mirror, then:

    # export CVSROOT=anoncvs@cvsync.allbsd.org:/cvs
  3. Change into /usr & download the source tree:

    # cd /usr
    # cvs -d$CVSROOT -rOPENBSD_4_3 -P src

    If you are running X Windows, use the following command instead:

    # cvs -d$CVSROOT -rOPENBSD_4_3 -P src xenocara
  4. Build the kernel first according to Section 5.3.4:

    http://openbsd.org/faq/faq5.html#BldKernel
  5. Build userland according to Section 5.3.5:

    http://openbsd.org/faq/faq5.html#BldUserland
  6. Build Xenocara according to Section 5.5 only if you have X installed:

    http://openbsd.org/faq/faq5.html#Xbld
Each time you wish to update your system, you will to go through these same steps with the following exception:
3. Update the source tree via:

# cd /usr/src
# cvs -d$CVSROOT up -rOPENBSD_4_3 -Pd

...and if X is installed,

# cd /usr/xenocara
# cvs -d$CVSROOT up -rOPENBSD_4_3 -Pd

Last edited by ocicat; 24th September 2008 at 07:00 AM.
Reply With Quote
Old 24th September 2008
milo974 milo974 is offline
Fdisk Soldier
 
Join Date: Jul 2008
Posts: 58
Thanked 0 Times in 0 Posts
Default

thank's OCICAT, i will try this this afternoon ...
Reply With Quote
Old 24th September 2008
milo974 milo974 is offline
Fdisk Soldier
 
Join Date: Jul 2008
Posts: 58
Thanked 0 Times in 0 Posts
Default

it works fine !
when i type : dmesg > OpenBSD 4.3 -stable (GENERIC)
Thank's a lot !
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Package Updates for OpenBSD 4.2 and 4.3 shep OpenBSD Packages and Ports 15 17th October 2009 02:39 PM
openbsd stables updates milo974 OpenBSD General 5 12th October 2008 06:46 PM
Server updates through a proxy crayoxide FreeBSD Installation and Upgrading 3 24th September 2008 10:40 PM


All times are GMT. The time now is 09:21 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick