FreeBSD security updates

[roman]

I hate asking this question but I must since....I don't know the answer. I've used a lot of different OS's and they all seem to have a way to easily apply security updates. Either apt-get, YAST, or the OpenBSD method of having a package of all the patches. With FreeBSD I've been given two answers, track 4.3-STABLE with CVSup and recompile the packages as needed, or manually download all the patches and apply them. Please tell me there is a better way. I have 52 systems to watch security for and this is a *****. Any help for this FreeBSD newb would be appreciated.

[freebsd]

>> I hate asking this question but I must since....I don't know the answer

Whenever you don't know the answer, SEARCH GOOGLE. Posting here is your last resort.

>> Please tell me there is a better way

If you can't handle 52 systems, just don't do it. Say you have 52 identical boxes all running 4.3-STABLE, then just run a NFS server and export your /usr/ports and /usr/src and /usr/obj. In doing so, you don't need to waste time on make, just need to run make install on each box.

[roman]

*********************************************
*** ** **** ** ** >> I hate asking this question but I must since....I don't know the answer

>>Whenever you don't know the answer, SEARCH GOOGLE. Posting here is your last resort.
*********************************************
Nice a RTFM reference without the RTFM. Sorry I asked


*********************************************
>> Please tell me there is a better way


If you can't handle 52 systems, just don't do it. Say you have 52 identical boxes all running 4.3-STABLE, then just run a NFS server and export your /usr/ports and /usr/src and /usr/obj. In doing so, you don't need to waste time on make, just need to run make install on each box.
*********************************************
Thanks for the suggestion truly but honestly save the venom.

[jemfinch]

Um, he's right. If you have 52 systems running FreeBSD stable, you need to invest in one extra test system to test new builds on, and then export its /usr/src, /usr/obj, and /usr/ports to all the other systems and sync from there. That's the only real way to maintain 52 systems.

Jeremy

[roman]

No the suggestions are really appreciated. Just not the venom thats all I'm saying. Most people that I know that use FreeBSD just don't patch anything but the big things and I just wasn't too excited about that idea. Don't get me wrong I really like it otherwise, just thought I must be missing something obvious and I couldn't seem to find a solution so I thought I'd try here. I apologize for the question.