一直都不敢用portupgrade直接升級server上所有的軟體,最近開始在測試機上玩玩看,請大家多給予指點,若有錯請不吝指正.

1.ee /usr/local/etc/pkgtools.conf
加入常用的編譯選項
MAKE_ARGS = {
'databases/mysql40-*' => 'WITH_CHARSET=big5',
'lang/perl5.8' => 'ENABLE_SUIDPERL=yes',
'www/apache13' => 'WITH_APACHE_SUEXEC=yes',
}

2.cvsup ports-supfile
3.cd /usr/ports ; make fetchindex (portsdb -Uu要好久的時間,改用fetchindex)
4.pkgdb -F
5.portupgrade -aWy


另外請教tim大大是否有用http://freebsd.lab.mlc.edu.tw/cvsup-ports.txt 定時升級呢?謝謝!

引文:

沒有喔！

其實我個人感覺是不一定要全部套件升級，而是該套件有安全性更新時再來更新即可，且一次更新部份套件即可，要定期收到該套件是否有更新訊息請安裝

/usr/ports/security/portaudit

安裝好後想檢查目前port套件是否有安全性問題

#/usr/local/bin/portaudit -F -a //列出目前有安全性問題之套件

目前的作法如下：

一、找一台機器(等級高、低都可以，差別在運作時間長、短而已)
二、寫了個程序稿(script)如下：
引文:
三、心血來潮時就玩一下(不建議放在 crontab 中)。
四、請注意我使用的參數：portupgrade -aWyn ，有一個「n」喔！套句運動術語叫作「假動作」。
五、根據 sort /tmp/portupgrade.log | more 的內容，再做是否升級的決定。
六、確定升級時，必須判斷是要有優先順序呢？還是整體批次升級？

PS. 還有大約一半的心得寫不出來，因為不知如何描述！

我改成這樣


結果是
+ archivers/lha (lha-1.14i_2)
+ archivers/p5-Archive-Tar (p5-Archive-Tar-1.08)
+ archivers/p5-Archive-Zip (p5-Archive-Zip-1.09)
+ archivers/unarj (unarj-2.43_1)
+ archivers/unrar (unrar-3.30_1,3)
+ archivers/unzip (unzip-5.50_2)
+ archivers/zip (zip-2.3_1)
+ converters/libiconv (libiconv-1.9.1_3)
+ converters/p5-Convert-UUlib (p5-Convert-UUlib-1.0,1)
+ converters/p5-MIME-Base64 (p5-MIME-Base64-3.00)
+ converters/p5-Text-Iconv (p5-Text-Iconv-1.2_1)
+ converters/tnef (tnef-1.2.1)
+ databases/mysql323-client (mysql-client-3.23.58_1)
+ databases/mysql323-server (mysql-server-3.23.58_1)
+ databases/p5-DBI (p5-DBI-1.41)
+ databases/phpmyadmin (phpMyAdmin-2.5.4)
+ devel/autoconf253 (autoconf-2.53_1)
+ devel/automake15 (automake-1.5,1)
+ devel/gettext (gettext-0.13.1)
+ devel/imake-4 (imake-4.3.0_1)
+ devel/m4 (m4-1.4_1)
+ devel/mm (mm-1.3.0)
+ devel/p5-File-Spec (p5-File-Spec-0.86)
+ devel/p5-IO-stringy (p5-IO-stringy-2.108)
+ devel/p5-Storable (p5-Storable-2.09)
+ devel/p5-Test-Harness (p5-Test-Harness-2.40)
+ devel/p5-Test-Simple (p5-Test-Simple-0.47_1)
+ devel/p5-Time-HiRes (p5-Time-HiRes-1.55,1)
+ devel/pkgconfig (pkgconfig-0.15.0)
+ dns/p5-Net-DNS (p5-Net-DNS-0.45)
+ editors/pico (pico-4.58)
+ ftp/ncftp3 (ncftp-3.1.5_2)
+ ftp/pure-ftpd (pure-ftpd-1.0.17a)
+ ftp/wget (wget-1.8.2_6)
+ graphics/ImageMagick (ImageMagick-5.5.7.11_1)
+ graphics/gd (gd-2.0.15_1,1)
+ graphics/jasper (jasper-1.700.2)
+ graphics/jbigkit (jbigkit-1.5)
+ graphics/jhead (jhead-2.0_1)
+ graphics/jpeg (jpeg-6b_1)
+ graphics/lcms (lcms-1.09,1)
+ graphics/libfpx (libfpx-1.2.0.9)
+ graphics/libwmf (libwmf-0.2.8)
+ graphics/netpbm (netpbm-10.20_2)
+ graphics/png (png-1.2.5_2)
+ graphics/tiff (tiff-3.6.0)
+ lang/perl5 (perl-5.6.1_15)
+ lang/python (python-2.3.2_3)
+ lang/ruby18 (ruby-1.8.1.2004.05.02)
+ mail/biabam (biabam-0.9.2)
+ mail/mailscanner (MailScanner-4.32.5_1)
+ mail/openwebmail (openwebmail-2.32)
+ mail/p5-MIME-Tools (p5-MIME-Tools-5.411a_3,1)
+ mail/p5-Mail-SpamAssassin (p5-Mail-SpamAssassin-2.63)
+ mail/p5-Mail-Tools (p5-Mail-Tools-1.60)
+ mail/procmail (procmail-3.22_4)
+ mail/qpopper (qpopper-4.0.5_1)
+ mail/razor-agents (razor-agents-2.36_3)
+ mail/spamass-milter (spamass-milter-0.2.0_1)
+ math/libgmp4 (libgmp-4.1.3)
+ misc/compat4x (compat4x-i386-5.0.20030328)
+ misc/help2man (help2man-1.29)
+ multimedia/libmpeg2 (libmpeg2-0.3.1_1)
+ net-mgmt/mrtg (mrtg-2.10.5_1,1)
+ net-mgmt/p5-Net-CIDR (p5-Net-CIDR-0.09)
+ net-mgmt/p5-SNMP_Session (p5-SNMP_Session-0.98)
+ net/cvsup-mirror (cvsup-mirror-1.3_2)
+ net/cvsup-without-gui (cvsup-without-gui-16.1h)
+ net/isc-dhcp3-server (isc-dhcp3-server-3.0.1.r12)
+ net/p5-IO-INET6 (p5-IO-INET6-1.28)
+ net/p5-Net (p5-Net-1.17,1)
+ net/p5-Socket6 (p5-Socket6-0.10)
+ net/p5-URI (p5-URI-1.30)
+ net/rsync (rsync-2.6.0)
+ net/samba (samba-2.2.8a)
+ print/cups-base (cups-base-1.1.19.0)
+ print/freetype2 (freetype2-2.1.5_1)
+ print/ghostscript-gnu (ghostscript-gnu-7.07_4)
+ science/hdf (hdf-4.1r5)
+ security/clamav (clamav-0.74)
+ security/f-prot (f-prot-4.4.1)
+ security/f-prot-sig (f-prot-sig-20040318)
+ security/openssl (openssl-0.9.7d)
+ security/p5-Authen-SASL (p5-Authen-SASL-2.06)
+ security/p5-Digest (p5-Digest-1.05)
+ security/p5-Digest-SHA1 (p5-Digest-SHA1-2.07)
+ security/p5-Net-SSLeay (p5-Net-SSLeay-1.23)
+ security/portaudit (portaudit-0.3.1)
+ security/rkhunter (rkhunter-1.0.8)
+ shells/bash2 (bash-2.05b.007)
+ sysutils/pkg_install-devel (pkg_install-devel-20040512)
+ sysutils/rc_subr (rc_subr-1.16)
+ sysutils/webmin (webmin-1.130_7)
+ sysutils/xmbmon (xmbmon-203_1)
+ textproc/antiword (antiword-0.35)
+ textproc/expat2 (expat-1.95.6_1)
+ textproc/ispell (ispell-3.2.06_3)
+ textproc/libxml2 (libxml2-2.6.2_1)
+ textproc/p5-XML-Parser (p5-XML-Parser-2.34)
+ textproc/sablotron (Sablot-1.0_1)
+ www/apache13-modssl (apache+mod_ssl-1.3.29+2.8.16)
+ www/awstats (awstats-6.0_1)
+ www/gallery (gallery-1.4.2)
+ www/mod_php4 (mod_php4-4.3.4_6,1)
+ www/p5-CGI-SpeedyCGI (p5-CGI-SpeedyCGI-2.22)
+ www/p5-CGI.pm (p5-CGI.pm-3.04,1)
+ www/p5-HTML-Parser (p5-HTML-Parser-3.35)
+ www/p5-HTML-Tagset (p5-HTML-Tagset-3.03)
+ www/p5-libwww (p5-libwww-5.76)
+ www/phpSysInfo (phpSysInfo-2.1)
+ www/webalizer (webalizer-2.1.10_4)
+ x11-fonts/fontconfig (fontconfig-2.2.90_3)
+ x11/XFree86-4-libraries (XFree86-libraries-4.3.0_6)
- archivers/arc (arc-5.21j)
- archivers/p5-Compress-Zlib (p5-Compress-Zlib-1.33)
- archivers/zoo (zoo-2.10.1)
- converters/p5-Convert-BinHex (p5-Convert-BinHex-1.119)
- converters/p5-Convert-TNEF (p5-Convert-TNEF-0.17)
- databases/p5-Mysql (p5-Mysql-modules-1.2219)
- databases/ruby-bdb1 (ruby18-bdb1-0.2.2)
- devel/autoconf213 (autoconf-2.13.000227_5)
- devel/bison (bison-1.75_2)
- devel/gmake (gmake-3.80_2)
- devel/libtool13 (libtool-1.3.5_2)
- devel/p5-Data-ShowTable (p5-Data-ShowTable-3.3)
- devel/p5-File-Temp (p5-File-Temp-0.12_1)
- mail/mailmgr (mailmgr-1.2.3)
- misc/compat3x (compat3x-i386-5.0.20020925)
- net-mgmt/net-snmp4 (ucd-snmp-4.2.6_3)
- net/p5-Net-XWhois (p5-Net-XWhois-0.90_2)
- net/wol (wol-0.6.0_4)
- security/p5-Authen-PAM (p5-Authen-PAM-0.14)
- security/p5-Digest-HMAC (p5-Digest-HMAC-1.01)
- security/p5-Digest-MD5 (p5-Digest-MD5-2.33)
- security/p5-Digest-Nilsimsa (p5-Digest-Nilsimsa-0.06)
- sysutils/bsdsar (bsdsar-1.10_2)
- sysutils/p5-Unix-Syslog (p5-Unix-Syslog-0.100)
- sysutils/portupgrade (portupgrade-20041226_1)
- www/eaccelerator (turck-mmcache-2.4.6)
- www/mod_bandwidth (mod_bandwidth-2.0.5)

---> Packages processed: 113 done, 27 ignored, 0 skipped and 0 failed

這樣可以放心一次全部升級嗎?

先處理 perl ，它處於應用程式的最底層。
也就是說，有一堆程式要升級時，如果 perl 在其中，要先單獨升級 perl 。

板上有兩篇與 perl 的升級有關的文章，你先「參考」看看。
第一篇
第二篇