Updating FreeBSD

[carpman]

Hello, ok first of i use gentoo on my desktop but my server is FreeBSD.

I am comfortable in gentoo updating system, building custom kernels etc.

I am looking to update my freebsd server, but the more i read the more i get confused?

There seems to be some many ways and tools for doing this when i am used to doing emerge -uDp world

The server was originally built with minimal install, then /etc/make.conf including setting CPU type.

custom cvsup was used, really just changed to local mirror.

a custom kernel was used and system was rebuilt with 'make world'


Now i am looking some different type of updates.

1, Security

2, Whole system

3, version update ie 6.2 > 6.3


Main concern is the first two!

Reading through docs it seems csup -L 2 is now preferred to cvsup -L 2 though if read things correctly portsnap does the same thing with

portsnap fetch
portsnap extract
portsnap update


But what is best way to update the system? should i do 'make world' again?

or use one of the many apps such as

Portmanager
portupgrade
portmaster
freebsd-update (though believe this only for binary updates)

The other problem is that i have use Hsphere Hosting CP installed on server which seems to cause issues!


doing portmaster -L give me list of updates some which are system some of which are hsphere.

Here is last few to give you an idea.

==>>> hsphere-webshell-4.3.11_0

        ===>>> No /usr/ports/hsphere/hsphere-webshell exists, and no information
        ===>>> about hsphere/hsphere-webshell can be found in /usr/ports/MOVED

===>>> hsphere-webshell-cgi-1.0.4_1

        ===>>> No /usr/ports/hsphere/hsphere-webshell-cgi exists, and no information
        ===>>> about hsphere/hsphere-webshell-cgi can be found in /usr/ports/MOVED

===>>> imake-1.0.2_4,1
===>>> libXext-1.0.3,1
===>>> libXt-1.0.5_1
===>>> liba52-0.7.4_2
===>>> mysql-scripts-5.0.45
        ===>>> New version available: mysql-scripts-5.0.67
===>>> pico-4.64
===>>> portupgrade-2.4.6,2
===>>> postgresql-contrib-7.4.17
        ===>>> New version available: postgresql-contrib-7.4.21_1
===>>> razor-agents-2.84
===>>> rkhunter-1.2.8_3
        ===>>> New version available: rkhunter-1.3.2_1
===>>> snort-2.6.1.3
        ===>>> New version available: snort-2.8.2.1_1
===>>> texi2html-1.76_1,1
===>>> webmin-1.430
===>>> xtrans-1.0.4
===>>> 38 leaf ports

===>>> 139 total installed ports
        ===>>> 24 have new versions available

If i run pkgdb i get

pkgdb -F
--->  Checking the package registry database
[Updating the pkgdb <format:bdb_btree> in /var/db/pkg ... - 139 packages found (-0 +1) . done]
Stale origin: 'hsphere/hsphere-apache': perhaps moved or obsoleted.
Skip this for now? [yes] y
To skip it without asking in future, please list it in HOLD_PKGS.
Stale origin: 'hsphere/hsphere-aspell': perhaps moved or obsoleted.
Skip this for now? [yes] y
To skip it without asking in future, please list it in HOLD_PKGS.
Stale origin: 'hsphere/hsphere-awstats': perhaps moved or obsoleted.
Skip this for now? [yes]

Not sure how to deal with this?

I can just make list of required system updates and use portupgrade app1 app2 etc but this seems long winded and un-necessary ?


Sorry for long post but any pointers would really help?

many thanks

[TerryP]

First there are two things to figure out,

A.) Updating FreeBSD is not updating third party software (e.g. everything you've installed from ports, packages, or manually, does not apply) -- it only updates the base system, aka FreeBSD.

B.) Updating installed software (installed via ports, pkg, manual) is done seperately, as they are not related problems in regards to the FreeBSD source tree.



Updating FreeBSD itself, depends somewhat on your version. Generally speaking, it amounts to fetching the latest code for your branch via csup, compiling, and installing it, or using freebsd-update to do it via binaries.


Generally speaking, in the case of freebsd's releases, you can just use the freebsd-update utility and relax.


When it comes to security patches, just subscribe to the security mailing list and follow the update instructions provided in the postings, most often this is just running freebsd-update, or if desired or required fetching/applying a patch and recompiling of the effected items in /usr/src.


A full system update done without freebsd-update on the other hand, The handbook explains the steps you need to take. In my case, this is usually:

# script /root/update-log.YYYY-MM-DD
# cd /boot
# tar cf KERNELCONF-NAME.tar kernel
# csup mysupfile
# cd /usr/src
# less UPDATING
    .... check for important notes
# make -j12 buildworld
# make -j12 buildkernel
# make installkernel
# shutdown now
   ... drop into single user mode
# make installworld
# mergemaster -viU
# reboot

If you use a custom kernel, you should set /etc/make.conf to build both your custom kernel and GENERIC, but install yours by default.


The process of updating installed software (.b) is usually best done with some care.

For automated updating of all installed ports, update the ports tree via portsnap/csup,
ALWAYS search /usr/ports/UPDATING before a major update. And you will probably want to use either the portupgrade or portmaster utilities from ports if you have many things to update.

[carpman]

Thanks for reply, makes things a little clearer, i will need to go away and digest this but still have one nagging question.

When system was built the cpu was set and other edit made ot make.conf and rc.conf then a 'make world' was done, coming form gentoo i understand this as optimising system and apps for the cpu plus any other settings.

My query is the use of freebsd-update tool as i believe this just installs binary updates which seems to be counter to the initial install using 'make world' ?

[robbak]

That is correct. If you want to keep using processor-optimised binaries, then you need to stick with the buildworld cycle.

[hitest]

Thanks TerryP for the helpful information:-)

[carpman]

I have another question relating to this and that is doing update remotely?

The info in this thread and other guides i have read all say drop to single user mode to run mergemaster however with a remote server this is not possible?


Are there any specific steps to take when not able to use single user mode?

cheers

[robbak]

Single use mode is used to ensure that there is no processes that will mess up as system files change. It is rare, and should never cause problems that won't be fixed by the next restart.

I usually upgrade by running "make buildworld buildkernel installkernel installworld", followed by "reboot". Running mergemaster is good to upgrade any config files, but it takes a little arcane knowledge.

So, if single user mode is difficult, then omit it. It'll work.