* Nate Williams (nateyogotech.com) [020418 18:16]:
> > > > Like it or not, Brett has raised a concern which is entirely valid and echoed
> > > > by many system administrators. ( I have a feeling the number is not small )
> > >
> > > but you are missing the point that _administrators_ have the option (and
> > > the knowledge) to upgrade from source, using a builder system, just like
> > > most freebsd admins with larger installations do.
> >
>
> > Indeed they do. Doing this for 1000 individual servers, even when
> > scripted, is an incredible task, and not very feasible.
>
> Doing *anything* to 1000 individual servers running ANY OS is an
> incredible tasks, regardless of what is being done. Why is FreeBSD
> being singled out here?

Because keeping an internal build mechanism is far more complex and costly
than keeping a set of scripts that push out patches.

> > Quite a few shops do have the luxery of being able to maintain and release
> > internal builds. Quite a few more do not. Either way, its still a good
> > opportunity for someone who can. =)
>
> Any shop that has a significant # of servers that I've worked with takes
> the time to do internal builds using a standard set of hardware.
> Otherwise, you spend more time chasing your tail than in solving
> problems. (Again, this issue is orthogonal to the issue of which
> hardware/software is being used).

Again, verification is not quite the task that building an OS is.

>
> Nate

-- 
Benjamin Krueger
"Life is far too important a thing ever to talk seriously about."
- Oscar Wilde (1854 - 1900)
----------------------------------------------------------------
Send mail w/ subject 'send public key' or query for (0x251A4B18)
Fingerprint = A642 F299 C1C1 C828 F186  A851 CFF0 7711 251A 4B18
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]