Is there a server currently furnishing snapshots of the FreeBSD 4.11 security branch? We have some servers running various 4.x versions that might not be happy with 6.x due to memory requirements. They also might have slower file access (The file system in FreeBSD 6.x still isn't as snappy as the one in 4.x, though I hope this will change). So, we'd like to upgrade them to a patch level that includes all recent security fixes. Are ISOs available? --Brett Glass
On 5/15/06, Brett Glass <brett@lariat.net> wrote:> Is there a server currently furnishing snapshots of the FreeBSD 4.11 security > branch? We have some servers running various 4.x versions that might not be > happy with 6.x due to memory requirements. They also might have slower file > access (The file system in FreeBSD 6.x still isn't as snappy as the one > in 4.x, though I hope this will change). So, we'd like to upgrade them to > a patch level that includes all recent security fixes. Are ISOs available? >according to this link 4.11 is a supported errata branch: http://www.freebsd.org/releng/ here is a link to the errata policy: http://www.freebsd.org/releases/4.11R/errata_policy.html you should be able to sync your source via cvsup from official freebsd mirrors. -pete -- ~~o0OO0o~~ Pete Wright www.nycbug.org NYC's *BSD User Group
At 08:42 PM 5/15/2006, pete wright wrote:>according to this link 4.11 is a supported errata branch: > >http://www.freebsd.org/releng/ >here is a link to the errata policy: >http://www.freebsd.org/releases/4.11R/errata_policy.html > >you should be able to sync your source via cvsup from official freebsd mirrors.True. But this requires assembling a system to do it, and then waiting hours while I build the world and "make release". I was hoping that there was a snapshot server up, as there was in Japan a few years ago. --Brett Glass
Brett Glass wrote:> At 08:42 PM 5/15/2006, pete wright wrote: > >> according to this link 4.11 is a supported errata branch: >> >> http://www.freebsd.org/releng/ >> here is a link to the errata policy: >> http://www.freebsd.org/releases/4.11R/errata_policy.html >> >> you should be able to sync your source via cvsup from official freebsd mirrors. > > True. But this requires assembling a system to do it, and then waiting hours > while I build the world and "make release". I was hoping that there was a > snapshot server up, as there was in Japan a few years ago. >This may help: http://snapshots.jp.freebsd.org/
Plamen Stoev wrote:> Brett Glass wrote: > >> At 08:42 PM 5/15/2006, pete wright wrote: >> >> >>> according to this link 4.11 is a supported errata branch: >>> >>> http://www.freebsd.org/releng/ >>> here is a link to the errata policy: >>> http://www.freebsd.org/releases/4.11R/errata_policy.html >>> >>> you should be able to sync your source via cvsup from official >>> freebsd mirrors. >> >> >> True. But this requires assembling a system to do it, and then >> waiting hours >> while I build the world and "make release". I was hoping that there >> was a >> snapshot server up, as there was in Japan a few years ago. >> > > This may help: > > http://snapshots.jp.freebsd.org/ > _______________________________________________ > freebsd-stable@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-stable > To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"Also at the bottom of that page under the FAQ heading it spells out where to get the older snapshots :-)
At 09:19 AM 5/16/2006, Randy Rowe wrote:>Also at the bottom of that page under the FAQ heading it spells out >where to get the older snapshots :-)Alas, those snapshots are old indeed. The latest is from August of last year! There does not seem to be a snapshot of the 4.11 security branch available with the latest patches -- especially the Sendmail patch. Since 4.xx is still in such widespread use, it does seem to me that one of those sites ought to have a build with the latest patches -- if for no other reason than to prevent people from picking up the older ones and leaving their machines vulnerable. --Brett Glass
If you absolutely must run FreeBSD 4.11, install the RELEASE and then run FreeBSD Update. Personally, since FreeBSD 4.11 will reach its EoL about 8 months from now, and the 4.x->[56].x upgrade path is non-trivial, I recommend installing FreeBSD 6.1 instead. Colin Percival
You could build your own snapshots.... It's not hard (hint 'man release'). Seth Brett Glass wrote:>Is there a server currently furnishing snapshots of the FreeBSD 4.11 security >branch? We have some servers running various 4.x versions that might not be >happy with 6.x due to memory requirements. They also might have slower file >access (The file system in FreeBSD 6.x still isn't as snappy as the one >in 4.x, though I hope this will change). So, we'd like to upgrade them to >a patch level that includes all recent security fixes. Are ISOs available? > >--Brett Glass > >_______________________________________________ >freebsd-stable@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-stable >To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org" > > >
On Mon, May 15, 2006 at 07:35:53PM -0600, Brett Glass wrote:> Is there a server currently furnishing snapshots of the FreeBSD 4.11 security > branch? We have some servers running various 4.x versions that might not be > happy with 6.x due to memory requirements. They also might have slower file > access (The file system in FreeBSD 6.x still isn't as snappy as the one > in 4.x, though I hope this will change). So, we'd like to upgrade them to > a patch level that includes all recent security fixes. Are ISOs available?FYI, it is only soft updates (really bufdaemon, through which all the I/O passes) that has performance problems under high load on 6.x compared to 4.x. Other mount modes perform quite a bit better (e.g. 30% faster for async write performance) than 4.x on the hardware I tested. http://people.freebsd.org/~kris/bsdcan/Filesystem%20Performance.pdf Kris P.S. Don't link to the above URL, I need to send it to Dan for publication on the BSDCan site, to which you should link instead. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20060521/71e2a034/attachment.pgp