Hardening production servers

[Samuel Tardieu]

>>>>> "Chuck" == Chuck Swiger <cswiger at mac.com> writes:

Chuck> Beyond that, you should consider sharing /usr/src and /usr/obj
Chuck> from your buildserver onto the other machines for performing
Chuck> upgrades.  You can copy all of your kernel config files to the
Chuck> build server, and do:

Chuck> make buildkernel KERNCONF=machine1
Chuck> make buildkernel KERNCONF=machine2

Chuck> ...etc, for each distinct kernel config file you have.

Even better: make buildkernel KERNCONF="machine1 machine2 ..."

Typically, in the server's /etc/make.conf, use:

  KERNCONF="SERVER CLIENT1 CLIENT2 CLIENT3 ..."

A buildkernel will make all of them and a installkernel will install
only the first one (SERVER).

  Sam
-- 
Samuel Tardieu -- sam at rfc1149.net -- http://www.rfc1149.net/sam