Search Job

Tuesday, January 6, 2015

Re: FreeBSD Security Advisory FreeBSD-SA-14:31.ntp

"Roger Marquis" <marquis@roble.com> writes:
> "Dag-Erling Smørgrav" <des@des.no> writes:
> > I do it all the time:
> > $ sudo env UNAME_r=X.Y-RELEASE freebsd-update fetch install
> Not sure if using a jail to test is relevant but this never updates (my)
> binaries to the specified RELEASE/RELENG, only to the current kernel's patch
> level.

No, it updates everything. Like I said, I do this all the time,
including with jails that run a different release than the host system.

> Then there's the issue of specifying -RELEASE to mean -RELENG.

There is no such thing as -RELENG. See sys/conf/newvers.sh.

> > Actually, you want to do this from *outside* the jail, partly out of
> > healthy paranoia and partly so freebsd-update will re-use previously
> > downloaded indexes and patches
> Updates to non-jailed environments are the preferred method to be sure but
> patching and testing base updates in a jail can be more convenient.

You missed my point. You can run freebsd-update outside the jail to
update the contents of the jail. See the attached shell script.

DES
--
Dag-Erling Smørgrav - des@des.no

No comments:

Post a Comment