More on freebsd-update (WAS: Is the server portion of freebsd-update open source?)

suporte_at_wahtec.com.br
Date: 10/31/05


To: freebsd-security@freebsd.org
Date: Mon, 31 Oct 2005 16:25:45 +0000


> Date: Sat, 29 Oct 2005 07:34:28 -0700
> From: Colin Percival <cperciva@freebsd.org>
> Subject: Re: Is the server portion of freebsd-update open source?
> To: markzero <mark@darklogik.org>
> Cc: freebsd-security@freebsd.org
> Message-ID: <43638874.2020004@freebsd.org>
> Content-Type: text/plain; charset=ISO-8859-1
>
> markzero wrote:
> > No this isn't insufficient, what is insufficient is that I currently
> > can't run a local freebsd-update server. I'm quite limited by bandwidth
> > here, you see. What would make more sense in my situation would be to
> > have a local mirror of the 'official' freebsd-update server so that
> > all of my machines can sync to that rather than all of them downloading
> > over the WAN.
>
> Go ahead. :-):-)
>
> FreeBSD Update relies entirely upon static files served over HTTP, so if
> you point your favourite HTTP mirroring tool at update.daemonology.net
> you can create a local mirror.
>
> Another approach which is likely to be more useful is to set up an HTTP
> proxy: Since many files on the FreeBSD Update web server won't be fetched
> by most systems (FreeBSD Update attempts to use binary patches, and only
> falls back to fetching complete files if the patching fails), using a
> caching HTTP proxy will use far less bandwidth than mirroring everything.
>
> Colin Percival

Hi,

I have two questions to add to this thread...

1- if and when freebsd-update will be the official freebsd system binary
update? Like, when it will be part of freebsd structure, with a dedicated
server and stuff? ... It's far better then updating by cvs.

2- for future plans, is there any possibility to customize or add some
features to kernels on official freebsd-update server? IPSEC is quite
important on security. Since there isn't a LKM to use IPSEC (correct me if
I'm wrong), when someone compiles the kernel to add it, he looses the
freebsd-update kernel update.

Regards,
--aristeu

PS: is there a way to use IPSEC without compiling the kernel?

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"



Relevant Pages

  • [FreeBSD-Announce] FreeBSD Errata Notice FreeBSD-EN-07:05.freebsd-update
    ... For general information regarding FreeBSD Errata Notices and Security ... FreeBSD Update is a system for building, distributing, and installing ... if a system is running a kernel built from the ... and install updates for it. ...
    (freebsd-announce)
  • FreeBSD Status report for Oct-Dec 2003
    ... Bluetooth stack for FreeBSD ... Not much to report. ... Bluetooth kernel modules appear to be stable. ... concerns and some src committers are willing to commit the patches. ...
    (freebsd-current)
  • FreeBSD Status Report for Oct-Dec 2003
    ... Bluetooth stack for FreeBSD ... Not much to report. ... Bluetooth kernel modules appear to be stable. ... concerns and some src committers are willing to commit the patches. ...
    (freebsd-hackers)
  • FreeBSD Status Report for Oct-Dec 2003
    ... Bluetooth stack for FreeBSD ... Not much to report. ... Bluetooth kernel modules appear to be stable. ... concerns and some src committers are willing to commit the patches. ...
    (freebsd-stable)
  • RE: FreeBSD 4.11 P13 Crash
    ... I do not want to jinx myself, but after back revving to FreeBSD 4.9 + ... think it is related to IPFilter in conjunction with 4 Intel nics and/or ... page fault while in kernel mode ... Okay this time my kernel was recompiled so there are no modules to ...
    (freebsd-hackers)