FreeBSD Security Advisory FreeBSD-SA-14:31.ntp

Leif Pedersen bilbo at hobbiton.org
Wed Jan 7 17:36:45 UTC 2015


On Fri, Jan 2, 2015 at 11:59 AM, Dag-Erling Smørgrav <des at des.no> wrote:

> $ sudo env UNAME_r=X.Y-RELEASE freebsd-update -b /path/to/jail fetch
> install


I use freebsd-update enthusiastically, but I hadn't noticed the -b option
before. I'm glad you mentioned it. I've always run freebsd-update inside of
each jail, unnecessarily downloading everything repeatedly.

It seems like -b doesn't work for upgrades though, unless I've missed
something. Your example is for "fetch install", but naturally I
extrapolated that it should work for "upgrade" also. Should one of the
following work? My host has already been upgraded to 10.1 because it seems
to me that upgrading the host first is required since a new kernel will
support old userlands, but not necessarily the reverse (which I infer from
the standard instructions to do installkernel before installworld). In this
case, my jail is simply an independent directory; no nullfs magic or
anything.

# env UNAME_r=10.1-RELEASE freebsd-update -b /j/test upgrade
freebsd-update: Release target must be specified via -r option.


Or:

# freebsd-update -b /j/test -r 10.1 upgrade
freebsd-update: Cannot upgrade from 10.1-RELEASE to itself


- Leif


-- 

As implied by email protocols, the information in this message is
not confidential.  Any middle-man or recipient may inspect, modify,
copy, forward, reply to, delete, or filter email for any purpose unless
said parties are otherwise obligated.  As the sender, I acknowledge that
I have a lower expectation of the control and privacy of this message
than I would a post-card.  Further, nothing in this message is
legally binding without cryptographic evidence of its integrity.

http://bilbo.hobbiton.org/wiki/Eat_My_Sig


More information about the freebsd-security mailing list