OpenBSD CVS

CVS log for src/usr.sbin/syspatch/syspatch.8


[BACK] Up to [local] / src / usr.sbin / syspatch

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.22 / (download) - annotate - [select for diffs], Mon Dec 7 21:19:28 2020 UTC (3 years, 5 months ago) by ajacoutot
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, HEAD
Changes since 1.21: +4 -2 lines
Diff to previous 1.21 (colored)

When asking to install patches and none are available, return 2.

man page and inputs from schwarze@
ok sthen@

Revision 1.21 / (download) - annotate - [select for diffs], Sat Jul 25 15:45:44 2020 UTC (3 years, 10 months ago) by solene
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.20: +4 -2 lines
Diff to previous 1.20 (colored)

Add a EXIT STATUS section

"no objection" ajacoutot@

Revision 1.20 / (download) - annotate - [select for diffs], Sat Jun 15 16:54:19 2019 UTC (4 years, 11 months ago) by ajacoutot
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.19: +3 -2 lines
Diff to previous 1.19 (colored)

"If any sets are missing, patches are skipped accordingly."

wording help and ok jmc@

Revision 1.19 / (download) - annotate - [select for diffs], Tue Aug 22 13:32:50 2017 UTC (6 years, 9 months ago) by ajacoutot
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.18: +6 -10 lines
Diff to previous 1.18 (colored)

Add support for KARL:
- only extract the according /usr/share/compile/GENERIC{,.MP}
- if a "kernel" patch was properly installed (or rolled back), run
  /usr/libexec/reorder_kernel _once_ just before exiting
- don't backup /bsd anymore, reorder_kernel already does it for us
- drop 2 now unused functions: install_kernel() and sp_cleanup()

While it appears to work fine after some quick testing, it should still be
considered WIP.

Revision 1.18 / (download) - annotate - [select for diffs], Tue May 9 12:23:04 2017 UTC (7 years ago) by ajacoutot
Branch: MAIN
Changes since 1.17: +4 -2 lines
Diff to previous 1.17 (colored)

Document that patches are cumulative and as such it is not possible to install
only a subset of them.

with input from jmc@

Revision 1.17 / (download) - annotate - [select for diffs], Fri May 5 08:07:36 2017 UTC (7 years ago) by ajacoutot
Branch: MAIN
Changes since 1.16: +5 -3 lines
Diff to previous 1.16 (colored)

Add a `-R' switch that reverts all patches.

prodded by deraadt@
knobs sorting input jmc@
ok sthen@

Revision 1.16 / (download) - annotate - [select for diffs], Sat Apr 8 20:36:50 2017 UTC (7 years, 1 month ago) by schwarze
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

use .Em for emphasis, not .Pa

Revision 1.15 / (download) - annotate - [select for diffs], Tue Feb 7 17:58:43 2017 UTC (7 years, 3 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.14: +4 -3 lines
Diff to previous 1.14 (colored)

Ox on its own line;

Revision 1.14 / (download) - annotate - [select for diffs], Tue Feb 7 08:58:47 2017 UTC (7 years, 3 months ago) by ajacoutot
Branch: MAIN
Changes since 1.13: +5 -2 lines
Diff to previous 1.13 (colored)

Add installurl to FILES and SEE ALSO.

Revision 1.13 / (download) - annotate - [select for diffs], Thu Dec 8 09:47:37 2016 UTC (7 years, 5 months ago) by ajacoutot
Branch: MAIN
Changes since 1.12: +10 -7 lines
Diff to previous 1.12 (colored)

Make it possible to install patches even if we don't have all sets installed
(e.g. no x sets); in this case, syspatch will skip the patch *but* it will still
be listed as available. This will allow applying the patch in case sets are
installed later on.

Revision 1.12 / (download) - annotate - [select for diffs], Wed Nov 30 12:58:28 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.11: +7 -7 lines
Diff to previous 1.11 (colored)

Change the hierarchy under /var/syspatch/ so that the output of installed or
missing patches matches the official names.
e.g.
$ doas syspatch -c
015_libssl

Add a bit more output on what we are doing.
Tighten a few checks and rename some vars.

People playing with syspatch on 6.0 should update syspatch.sh asap from current
as I will soon remove the temporary quirks glue.

Revision 1.11 / (download) - annotate - [select for diffs], Tue Nov 29 09:00:05 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.10: +6 -2 lines
Diff to previous 1.10 (colored)

Document the fact that *for now* syspatch only works on official releases and
will always sync and apply all patches regardless of the installed sets.

Revision 1.10 / (download) - annotate - [select for diffs], Wed Nov 16 14:54:26 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.9: +3 -3 lines
Diff to previous 1.9 (colored)

/bsd.rollbackXX -> bsd.syspatchXX to make it more obvious where it comes from
and less prone to conflict.
Simplify ls_installed while here.

Revision 1.9 / (download) - annotate - [select for diffs], Tue Nov 15 16:29:03 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.8: +5 -5 lines
Diff to previous 1.8 (colored)

Small wording tweak and a couple of fixes from jmc@

Revision 1.8 / (download) - annotate - [select for diffs], Thu Nov 10 16:14:47 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.7: +21 -3 lines
Diff to previous 1.7 (colored)

Extend documentation a bit. It'll probably need some adjustments soon.

Revision 1.7 / (download) - annotate - [select for diffs], Tue Nov 8 15:36:50 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.6: +3 -3 lines
Diff to previous 1.6 (colored)

Simplify.

Revision 1.6 / (download) - annotate - [select for diffs], Thu Nov 3 16:12:23 2016 UTC (7 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.5: +4 -4 lines
Diff to previous 1.5 (colored)

rollback -> revert where it makes sense.

Revision 1.5 / (download) - annotate - [select for diffs], Sat Sep 10 16:07:33 2016 UTC (7 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored)

apply_patches should not take any arguments.
Few tweaks while here.

Revision 1.4 / (download) - annotate - [select for diffs], Wed Sep 7 16:17:12 2016 UTC (7 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.3: +17 -4 lines
Diff to previous 1.3 (colored)

Minimal man page.

Revision 1.3 / (download) - annotate - [select for diffs], Wed Sep 7 15:19:33 2016 UTC (7 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.2: +2 -2 lines
Diff to previous 1.2 (colored)

syspatch goal is not to act as a package manager but to sync the system to the
corresponding stable. So prevent rollbacking a specific binpatch but instead
always rollback the latest one. It's the only way we can know the system is
consistent.

discussed with halex@ jasper@ robert@

Revision 1.2 / (download) - annotate - [select for diffs], Mon Sep 5 11:26:18 2016 UTC (7 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.1: +3 -2 lines
Diff to previous 1.1 (colored)

No need to install the /var/syspatch/$REL directory, the binpatch does it for us.
Put /var/syspatch into a variable, it's used more than 10 times.

prodded by robert@

Revision 1.1 / (download) - annotate - [select for diffs], Mon Sep 5 11:04:45 2016 UTC (7 years, 8 months ago) by ajacoutot
Branch: MAIN

Welcome syspatch(8), a binary patch management utility for the base system.

This is currently a POC, maybe it will become something, maybe not.
Therefore it will not be hooked to the build before we are happy with it.

Workflow would be something like:
- fetch and verify signed tarballs containing the patched binaries from a mirror
- create a rollback tarball of the files we are about to replace
- extract and install the patched files

*** BIG FAT RED DISCLAIMER ***
This is very much WIP, it does *NOT* work, don't bikeshed, don't use it!

"get it in" deraadt@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.