16e6d254dSBrad Davis 26e6d254dSBrad Davis# Trusted keyprint. Changing this is a Bad Idea unless you've received 36e6d254dSBrad Davis# a PGP-signed email from <security-officer@FreeBSD.org> telling you to 46e6d254dSBrad Davis# change it and explaining why. 56e6d254dSBrad DavisKeyPrint 800651ef4b4c71c27e60786d7b487188970f4b4169cc055784e21eb71d410cc5 66e6d254dSBrad Davis 76e6d254dSBrad Davis# Server or server pool from which to fetch updates. You can change 86e6d254dSBrad Davis# this to point at a specific server if you want, but in most cases 96e6d254dSBrad Davis# using a "nearby" server won't provide a measurable improvement in 106e6d254dSBrad Davis# performance. 116e6d254dSBrad DavisServerName update.FreeBSD.org 126e6d254dSBrad Davis 136e6d254dSBrad Davis# Components of the base system which should be kept updated. 146e6d254dSBrad DavisComponents src world kernel 156e6d254dSBrad Davis 166e6d254dSBrad Davis# Example for updating the userland and the kernel source code only: 176e6d254dSBrad Davis# Components src/base src/sys world 186e6d254dSBrad Davis 196e6d254dSBrad Davis# Paths which start with anything matching an entry in an IgnorePaths 206e6d254dSBrad Davis# statement will be ignored. 216e6d254dSBrad DavisIgnorePaths 226e6d254dSBrad Davis 236e6d254dSBrad Davis# Paths which start with anything matching an entry in an IDSIgnorePaths 246e6d254dSBrad Davis# statement will be ignored by "freebsd-update IDS". 256e6d254dSBrad DavisIDSIgnorePaths /usr/share/man/cat 266e6d254dSBrad DavisIDSIgnorePaths /usr/share/man/whatis 276e6d254dSBrad DavisIDSIgnorePaths /var/db/locate.database 286e6d254dSBrad DavisIDSIgnorePaths /var/log 296e6d254dSBrad Davis 306e6d254dSBrad Davis# Paths which start with anything matching an entry in an UpdateIfUnmodified 316e6d254dSBrad Davis# statement will only be updated if the contents of the file have not been 326e6d254dSBrad Davis# modified by the user (unless changes are merged; see below). 336e6d254dSBrad DavisUpdateIfUnmodified /etc/ /var/ /root/ /.cshrc /.profile 346e6d254dSBrad Davis 356e6d254dSBrad Davis# When upgrading to a new FreeBSD release, files which match MergeChanges 366e6d254dSBrad Davis# will have any local changes merged into the version from the new release. 376e6d254dSBrad DavisMergeChanges /etc/ /boot/device.hints 386e6d254dSBrad Davis 396e6d254dSBrad Davis### Default configuration options: 406e6d254dSBrad Davis 416e6d254dSBrad Davis# Directory in which to store downloaded updates and temporary 426e6d254dSBrad Davis# files used by FreeBSD Update. 436e6d254dSBrad Davis# WorkDir /var/db/freebsd-update 446e6d254dSBrad Davis 456e6d254dSBrad Davis# Destination to send output of "freebsd-update cron" if an error 466e6d254dSBrad Davis# occurs or updates have been downloaded. 476e6d254dSBrad Davis# MailTo root 486e6d254dSBrad Davis 496e6d254dSBrad Davis# Is FreeBSD Update allowed to create new files? 506e6d254dSBrad Davis# AllowAdd yes 516e6d254dSBrad Davis 526e6d254dSBrad Davis# Is FreeBSD Update allowed to delete files? 536e6d254dSBrad Davis# AllowDelete yes 546e6d254dSBrad Davis 556e6d254dSBrad Davis# If the user has modified file ownership, permissions, or flags, should 566e6d254dSBrad Davis# FreeBSD Update retain this modified metadata when installing a new version 576e6d254dSBrad Davis# of that file? 586e6d254dSBrad Davis# KeepModifiedMetadata yes 596e6d254dSBrad Davis 606e6d254dSBrad Davis# When upgrading between releases, should the list of Components be 616e6d254dSBrad Davis# read strictly (StrictComponents yes) or merely as a list of components 626e6d254dSBrad Davis# which *might* be installed of which FreeBSD Update should figure out 636e6d254dSBrad Davis# which actually are installed and upgrade those (StrictComponents no)? 646e6d254dSBrad Davis# StrictComponents no 656e6d254dSBrad Davis 666e6d254dSBrad Davis# When installing a new kernel perform a backup of the old one first 676e6d254dSBrad Davis# so it is possible to boot the old kernel in case of problems. 686e6d254dSBrad Davis# BackupKernel yes 696e6d254dSBrad Davis 706e6d254dSBrad Davis# If BackupKernel is enabled, the backup kernel is saved to this 716e6d254dSBrad Davis# directory. 726e6d254dSBrad Davis# BackupKernelDir /boot/kernel.old 736e6d254dSBrad Davis 746e6d254dSBrad Davis# When backing up a kernel also back up debug symbol files? 756e6d254dSBrad Davis# BackupKernelSymbolFiles no 76*f28f1389SDave Fullard 77*f28f1389SDave Fullard# Create a new boot environment when installing patches 78*f28f1389SDave Fullard# CreateBootEnv yes 79