Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Warner Losh
On Sat, Feb 27, 2021 at 12:15 AM Kevin Oberman wrote: > Well, back to a full clone. Thanks for the "--unshallow" argument, but so > far it has failed twice. I suspect that it's my urtwn interface is bad. > I'll swap it out tomorrow and see it that fixes it. > > I am a bit surprised at how little

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Kevin Oberman
Well, back to a full clone. Thanks for the "--unshallow" argument, but so far it has failed twice. I suspect that it's my urtwn interface is bad. I'll swap it out tomorrow and see it that fixes it. I am a bit surprised at how little more space the full clone takes. I was really expecting it to be

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Ed Maste
On Fri, 26 Feb 2021 at 12:10, Helge Oldach wrote: > > A shallow tree is about 1.6G. If you want to patch source (say, from > a SA or EN) you certainly also need space for an object tree which is > about 4.5G. The total is >6G. > > I'd say relative to the total required to build, the 1.1G

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Warner Losh
On Fri, Feb 26, 2021 at 9:35 AM Ed Maste wrote: > On Thu, 25 Feb 2021 at 15:58, Warner Losh wrote: > > > > The problem, though, can happen when you run a shallow clone or gitup to > > get the sources and build from that. In that case the v number is bogus > > (hmmm, we should omit it when we

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Ed Maste
On Thu, 25 Feb 2021 at 15:58, Warner Losh wrote: > > The problem, though, can happen when you run a shallow clone or gitup to > get the sources and build from that. In that case the v number is bogus > (hmmm, we should omit it when we have a shallow clone maybe). I want to clarify one point here

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Karl Denninger
On 2/26/2021 10:22, Ed Maste wrote: On Thu, 25 Feb 2021 at 16:57, Karl Denninger wrote: The time (and present items) on a given machine to know whether it is covered by a given advisory under the "svn view of the world" is one command, and no sources. That is, if the advisory says "r123456"

Re: How do I know if my 13-stable has security patches?

2021-02-26 Thread Ed Maste
On Thu, 25 Feb 2021 at 16:57, Karl Denninger wrote: > > The time (and present items) on a given machine to know whether it is > covered by a given advisory under the "svn view of the world" is one > command, and no sources. That is, if the advisory says "r123456" has > the fix, then if I do a

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Mark Millard via freebsd-stable
Warner Losh imp at bsdimp.com wrote on Fri Feb 26 00:23:15 UTC 2021 : > Before I get into the blow by blow (which can sound nit-picky, despite my > best efforts), I would like to apologize. It wasn't completely appreciated > how clearly the dependencies that the nX number being generated

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Warner Losh
Before I get into the blow by blow (which can sound nit-picky, despite my best efforts), I would like to apologize. It wasn't completely appreciated how clearly the dependencies that the nX number being generated needed to be communicated. And for that I apologize. When they are met, we have

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Tim Daneliuk
On 2/25/21 3:56 PM, Karl Denninger wrote: > On 2/25/2021 15:56, Warner Losh wrote: >> > > Unless I've missed something that's what was lost and IMHO needs to be > restored; a way to know that in seconds with nothing other than the operating > OS on the box (e.g. via uname) and the advisory

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread George Mitchell
On 2/25/21 3:56 PM, Warner Losh wrote: [...] We should likely just publish the 'v' number in the advisories. It's basically a count back to the start of the project. We put that number in uname already. [] +1 !!! -- George OpenPGP_signature

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Karl Denninger
On 2/25/2021 15:56, Warner Losh wrote: On Thu, Feb 25, 2021 at 6:37 AM Karl Denninger > wrote: On 2/25/2021 04:30, Olivier Certner wrote: >> Neither command is what I'd call 'intuitive', so it would have taken me a >> long time to find either of

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Warner Losh
On Thu, Feb 25, 2021 at 6:37 AM Karl Denninger wrote: > On 2/25/2021 04:30, Olivier Certner wrote: > >> Neither command is what I'd call 'intuitive', so it would have taken me > a > >> long time to find either of them. I cut and pasted the 'git branch' > command > >> and it took me a moment to

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Kevin Oberman
On Thu, Feb 25, 2021 at 6:10 AM Ed Maste wrote: > On Thu, 25 Feb 2021 at 02:42, Kevin Oberman wrote: > > > > Thanks, Ed, but where do I find this? uname -a" gives me > stable/13-007101f87. For a while I was seeing a hyphenated number prefixed > with a 'c' and I had assumed that that number was

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Ed Maste
On Thu, 25 Feb 2021 at 02:42, Kevin Oberman wrote: > > Thanks, Ed, but where do I find this? uname -a" gives me stable/13-007101f87. > For a while I was seeing a hyphenated number prefixed with a 'c' and I had > assumed that that number was the sequence. It is (was) - we changed from 'c' to

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Karl Denninger
On 2/25/2021 04:30, Olivier Certner wrote: Neither command is what I'd call 'intuitive', so it would have taken me a long time to find either of them. I cut and pasted the 'git branch' command and it took me a moment to realize what that meant. Never ran "grep -l" on a pipe, I guess. You made

Re: How do I know if my 13-stable has security patches?

2021-02-25 Thread Olivier Certner
> Neither command is what I'd call 'intuitive', so it would have taken me a > long time to find either of them. I cut and pasted the 'git branch' command > and it took me a moment to realize what that meant. Never ran "grep -l" on > a pipe, I guess. You made me laugh! Apart from relatively simple

Re: How do I know if my 13-stable has security patches?

2021-02-24 Thread Kevin Oberman
Thanks, Ed, but where do I find this? uname -a" gives me stable/13-007101f87. For a while I was seeing a hyphenated number prefixed with a 'c' and I had assumed that that number was the sequence. The full hash from the logs just is a long hex number. As usual with git stuff, I'm still very

Re: How do I know if my 13-stable has security patches?

2021-02-24 Thread Ed Maste
On Wed, 24 Feb 2021 at 12:35, Kevin Oberman wrote: > > In the svn days, I could just look at my svn revision to check on whether a > security patch was required. Now I have a git hash. I have no idea how to > tell if my system running 13-STABLE of a few days ago has the patch. Thanks for posting

Re: How do I know if my 13-stable has security patches?

2021-02-24 Thread Kevin Oberman
Thanks, Olivier, for the quick response. Now I don't have to do a system build! Neither command is what I'd call 'intuitive', so it would have taken me a long time to find either of them. I cut and pasted the 'git branch' command and it took me a moment to realize what that meant. Never ran "grep

Re: How do I know if my 13-stable has security patches?

2021-02-24 Thread Olivier Certner
Hi, In your base git repository, type: git rev-list | grep -lF This outputs something ("(standard input)") iff you have it in. In order to limit the search time in case of a false result, you'd better pass the --since= to git rev-list. There is an alternative if you have a branch pointing

How do I know if my 13-stable has security patches?

2021-02-24 Thread Kevin Oberman
In the svn days, I could just look at my svn revision to check on whether a security patch was required. Now I have a git hash. I have no idea how to tell if my system running 13-STABLE of a few days ago has the patch. Branch/path Revision -