ezjail and UPDATING20131010

[Alexander Leidinger]

On Fri, 11 Oct 2013 15:42:11 -0500
Mark Felder <feld at FreeBSD.org> wrote:

> On Fri, Oct 11, 2013, at 14:30, Dirk Engling wrote:
> > On 11.10.13 21:27, wishmaster wrote:
> > 
> > > Yeah!? But do you think updating python in each jail this is the 
> > > right solution? Freebsd-update in each jail?? What about when
> > > number of jails is 10 or about. My server is very high loaded and
> > > I use tunable custom kernel and world.
> > 
> > Don't use jails then. Better go and order ten servers and use the
> > amazing features of ... well, d'oh. Puppet?
> > 
> 
> This is not the right attitude to approach this problem.

Let's take what is good from it: puppet or any other similar software.

No matter if the servers are virtualized or not, such a software is
designed to handle the package/config part of the question. With this
you can even decide which servers get an update of software X instead
of automatically updating every server and running into problems
(major updates of PHP come into my mind here).

Regarding OS updates (and I assume manual installworld updates in the
question as freebsd-update is not considered an option) I use:
---snip---
cd /usr/src
for jail in /path/to/jails/*; do
   echo $jail
   sleep 5
   mergemaster -D $jail
   make DESTDIR=$jail delete-old -DBATCH_DELETE_OLD_FILES
   make DESTDIR=$jail check-old		# list old libs
fi
make DESTDIR=/path/to/basejail delete-old -DBATCH_DELETE_OLD_FILES
---snip---

Depending on the situation I use delete-old-libs instead of check-libs
(I know what gets deleted from the update of the jail-host) or issue
the delete-old-libs later when all jails don't use the libs anymore.

Bye,
Alexander.

-- 
http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID = 72077137