On 1/15/07, Patrick Useldinger <[EMAIL PROTECTED]> wrote:
My understanding is that OpenBSD version updates can only be done with
binaries. Likewise, for additional application installation, packages
i.e. binaries are favored over ports i.e. compiling from source.

Version up_grades_  (one release/version to another) are supported via
binary upgrade. People attempting to upgrade via source end up
breaking things.

You're right about packages vs. ports being preferred, where possible.
Why waste time and introduce potential for failure if you don't have
to? A port build just results in a package anyway.

Why then, otoh, does following -stable involve compiling from source?

Because it works and happens sometimes too frequently to justify
binary releases so often.

Note that you can follow the directions in release(8) to produce your
own distribution set for binary "updates" if you want; it's
essentially treated as an upgrade although you can apply updates the
same way (you just aren't moving from one version to another.)

I thought that the rationale for using binaries was security: everybody
is guaranteed to use exactly the same binaries so there's no risk that
for some reason, on one machine, the compile process would yield in a
different result. Yet the same argument would be true for following
-stable, especially as using the GENERIC kernel is the only supported
configuration.

Statistically, the process doesn't yield different results. This is
one benefit of a known, stable development environment shipping with
the OS. Security is probably a weak argument there. One might argue
that binary distribution updates mask security problems; when you
apply updates and build from using source patches, you see what is
going into your system. (OK, it could be a a weak argument. Whatever.)

So I guess I am missing something decisive here. Can anybody shed some
light on _why_ there are 2 different ways to update?

Other than one is really an upgrade and the other is an update, so
it's apples to oranges in that regard?

(Note that there are 3rd-party binary update/patch programs for
OpenBSD on the Internet. I'm not advocating them; note also that
you're on your own if you choose to use them.)

DS

Reply via email to