Hardening production servers
sam at rfc1149.net
Tue Jul 8 13:42:13 PDT 2003
>>>>> "Chuck" == Chuck Swiger <cswiger at mac.com> writes:
Chuck> Beyond that, you should consider sharing /usr/src and /usr/obj
Chuck> from your buildserver onto the other machines for performing
Chuck> upgrades. You can copy all of your kernel config files to the
Chuck> build server, and do:
Chuck> make buildkernel KERNCONF=machine1
Chuck> make buildkernel KERNCONF=machine2
Chuck> ...etc, for each distinct kernel config file you have.
Even better: make buildkernel KERNCONF="machine1 machine2 ..."
Typically, in the server's /etc/make.conf, use:
KERNCONF="SERVER CLIENT1 CLIENT2 CLIENT3 ..."
A buildkernel will make all of them and a installkernel will install
only the first one (SERVER).
Samuel Tardieu -- sam at rfc1149.net -- http://www.rfc1149.net/sam
More information about the freebsd-stable