tracking -stable in the enterprise

[Andy Kosela]

On Jun 25, 2008, at 3:46 AM, Peter Wemm wrote:
>I think we still have FreeBSD-3.x machines in production. I know we
>have FreeBSD-4.3.  99.9% of security issues don't affect us.  We have
>our own package system built on top of FreeBSD's pkg_add format and
>have the ability to push packages to machines.  If circumstances
>warrant it, we can push a fix for something.  It'll either push a new
>binary or be a source patch that is compiled directly on the machines
>in question.   The machines run a custom software stack.  More often
>we push fixes for driver or performance fixes or things like timezone
>updates.

Ports infrastructure do not support such old FreeBSD versions, so how
do you deal with that? Do you maintain your own CVS branches of
selected packages and backports necessary security patches? I guess it
demands considerable effort to compile the latest apache on FreeBSD
3.x or 4.x.

-- 
Andy Kosela
ora et labora