Patric k Okui April 20, 2005 Slide 1 Updating FreeBSDUpdating FreeBSD Uni x Sy ste m Ad min istr atio n

Patric k Okui April 20, 2005 Slide 2 Wh y up dat e Fix bugs in the OS – some of them relate d to securit y issues that could potenti ally leave your syste m vulner able to differe nt kinds of attack. Get “driver s” for new hardw are previo usly unsup ported and/or updat es to existin g drivers. Other featur es that may be interes ting like better memo ry mana geme nt, backgr ound FSCK (introd uced in the 5.X versio ns) etc

Patric k Okui April 20, 2005 Slide 3 CURR ENT Th e ` ` b l e e d i n g e d g e ' ' o f F r e e B S D d e v e l o p m e n t. F r e e B S D - C U R R E N T u s e r s a r e e x p e c t e d t o h a v e a h i g h d e g r e e o f t e c h n i c a l s k i l l, a n d s h o u l d b e c a p a b l e o f s o l v i n g d i f f i c u l t s y s t e m p r o b l e m s o n t h e i r o w n. I f y o u a r e n e w t o F r e e B S D, P L E A S E D O N O T i n s t a l l i t. STAB LE Th e d e v e l o p m e n t b r a n c h f r o m w h i c h m a j o r r e l e a s e s a r e m a d e. C h a n g e s g o i n t o t h i s b r a n c h a t a d i f f e r e n t p a c e, a n d w i t h t h e g e n e r a l a s s u m p t i o n t h a t t h e y h a v e f i r s t g o n e i n t o F r e e B S D - C U R R E N T f o r t e s t i n g. T h i s i s s t i l l a d e v e l o p m e n t b r a n c h, h o w e v e r. Bra nch es of Fre eB SD

Patric k Okui April 20, 2005 Slide 4 Us ers of CU RR EN T Memb ers of the FreeB SD comm unity who are activel y workin g on some part of the source tree and for whom keepin g ``curre nt'' is an absolu te requir ement. Memb ers of the FreeB SD comm unity who are active testers, willing to spend time solvin g proble ms in order to ensur e that FreeB SD- CURR ENT remai ns as sane as possib le. These are also people who wish to make topical sugge stions on chang es and the gener al directi on of FreeB SD, and submit patche s to imple ment them. Those who merely wish to keep an eye on things, or to use the curren t source s for refere nce purpo ses (e.g. for readin g, not runnin g). These people also make the occasi onal comm ent or contrib ute code. Subsc ribe to freebs d- curren ebsd.o rg freebs d- curren ebsd.o rg

Patric k Okui April 20, 2005 Slide 5 ST AB LE Still develo pment al – but more tested than - CURR ENT. Track STAB LE with cautio n. This is what gives us the next releas e of FreeB SD. Possib le to track a specifi c versio n after it's been releas ed. E.g trackin g only 5.3 which should get mostly securit y updat es and almost nothin g else. Advisa ble to test on a testing server before deploy ment in a live enviro nment. Subsc ribe to freebs d- bsd.or g freebs d- bsd.or g

Patric k Okui April 20, 2005 Slide 6 Ho w to up gra de Reinst alling a new releas e from CD – this overwr ites all your config uratio n files, setting s etc. (Partiti on wisely for data preser vation). 3 rd Party applic ations need to be reinsta lled. Binary upgra de featur e availa ble on the CDRO M: ✔F a s t a n d E a s y ✗V e r y b u g g y a n d c o u l d b r e a k y o u r s y s t e m e s p b y n o t m a i n t a i n i n g y o u r c o n f i g u r a t i o n s ✗W i l l n o t p r e s e r v e c u s t o m o p t i o n s d o n e a t c o m p i l e t i m e e. g r e m o v i n g I P V 6 f r o m t h e k e r n e l ✗N o t o p t i m i s e d f o r y o u r h a r d w a r e – a p r o b l e m i f y o u r h a r d w a r e i s v e r y s p e c i f i c

Patric k Okui April 20, 2005 Slide 7 Binary updat e using FreeB SD updat e availa ble online from the websit ehttp:/ /www. daem onolog y.net/f reebs d- updat e/ and also availa ble in the portshttp:/ /www. daem onolog y.net/f reebs d- updat e/ ✔T r a c k s o n l y s e c u r i t y p r o b l e m s ✔F a s t a n d e a s y t o r u n ✗S t i l l l o s e s y o u r c o m p i l e t i m e c u s t o m i s a t i o n s ✗P o t e n t i a l l y p u t s p a r t o f t h e s y s t e m o u t o f s y n c w i t h t h e r e s t o f t h e s y s t e m i f i t d o e s n ' t h a n d l e c h a n g e s t o c o n f i g u r a t i o n f i l e s ✗D o e s n o t p l a y n i c e i f y o u u p g r a d e y o u r s y s t e m a n y o t h e r w a y. Updati ng throug h source (using cvsup) ✔M o s t f l e x i b l e – m a i n t a i n i n g y o u r r u n - t i m e m o d i f i c a t i o n s. ✔A l l o w s y o u t o m a i n t a i n y o u r c o n f i g u r a t i o n f i l e s a n d / o r u p d a t e t h e m m a n u a l l y w h e n n e e d e d ✗S l o w e s t m e t h o d a n d r e q u i r e s s o m e k n o w l e d g e o f c v s u p

Patric k Okui April 20, 2005 Slide 8 At this point we would updat e source but previo us “magic cvsup comm and” handle d in previo us sessio n took care of that. Do source updat e cd / u s r / s r c les s / u s r / s r c / U P D A T I N G ma k e b u i l d w o r l d ma k e b u i l d k e r n e l ma k e i n s t a l l k e r n e l [ r e b o o t i n s i n g l e u s e r m o d e ]

Patric k Okui April 20, 2005 Slide 9 cd /usr/sr c /etc/rc.d/ prese edran dom (why?) me r g e m a s t e r - p ma k e i n s t a l l w o r l d me r g e m a s t e r [ r e b o o t ]