xref: /freebsd/usr.sbin/freebsd-update/freebsd-update.conf (revision d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf)
16e6d254dSBrad Davis
26e6d254dSBrad Davis# Trusted keyprint.  Changing this is a Bad Idea unless you've received
36e6d254dSBrad Davis# a PGP-signed email from <security-officer@FreeBSD.org> telling you to
46e6d254dSBrad Davis# change it and explaining why.
56e6d254dSBrad DavisKeyPrint 800651ef4b4c71c27e60786d7b487188970f4b4169cc055784e21eb71d410cc5
66e6d254dSBrad Davis
76e6d254dSBrad Davis# Server or server pool from which to fetch updates.  You can change
86e6d254dSBrad Davis# this to point at a specific server if you want, but in most cases
96e6d254dSBrad Davis# using a "nearby" server won't provide a measurable improvement in
106e6d254dSBrad Davis# performance.
116e6d254dSBrad DavisServerName update.FreeBSD.org
126e6d254dSBrad Davis
136e6d254dSBrad Davis# Components of the base system which should be kept updated.
146e6d254dSBrad DavisComponents src world kernel
156e6d254dSBrad Davis
166e6d254dSBrad Davis# Example for updating the userland and the kernel source code only:
176e6d254dSBrad Davis# Components src/base src/sys world
186e6d254dSBrad Davis
196e6d254dSBrad Davis# Paths which start with anything matching an entry in an IgnorePaths
206e6d254dSBrad Davis# statement will be ignored.
216e6d254dSBrad DavisIgnorePaths
226e6d254dSBrad Davis
236e6d254dSBrad Davis# Paths which start with anything matching an entry in an IDSIgnorePaths
246e6d254dSBrad Davis# statement will be ignored by "freebsd-update IDS".
256e6d254dSBrad DavisIDSIgnorePaths /usr/share/man/cat
266e6d254dSBrad DavisIDSIgnorePaths /usr/share/man/whatis
276e6d254dSBrad DavisIDSIgnorePaths /var/db/locate.database
286e6d254dSBrad DavisIDSIgnorePaths /var/log
296e6d254dSBrad Davis
306e6d254dSBrad Davis# Paths which start with anything matching an entry in an UpdateIfUnmodified
316e6d254dSBrad Davis# statement will only be updated if the contents of the file have not been
326e6d254dSBrad Davis# modified by the user (unless changes are merged; see below).
336e6d254dSBrad DavisUpdateIfUnmodified /etc/ /var/ /root/ /.cshrc /.profile
346e6d254dSBrad Davis
356e6d254dSBrad Davis# When upgrading to a new FreeBSD release, files which match MergeChanges
366e6d254dSBrad Davis# will have any local changes merged into the version from the new release.
376e6d254dSBrad DavisMergeChanges /etc/ /boot/device.hints
386e6d254dSBrad Davis
396e6d254dSBrad Davis### Default configuration options:
406e6d254dSBrad Davis
416e6d254dSBrad Davis# Directory in which to store downloaded updates and temporary
426e6d254dSBrad Davis# files used by FreeBSD Update.
436e6d254dSBrad Davis# WorkDir /var/db/freebsd-update
446e6d254dSBrad Davis
456e6d254dSBrad Davis# Destination to send output of "freebsd-update cron" if an error
466e6d254dSBrad Davis# occurs or updates have been downloaded.
476e6d254dSBrad Davis# MailTo root
486e6d254dSBrad Davis
496e6d254dSBrad Davis# Is FreeBSD Update allowed to create new files?
506e6d254dSBrad Davis# AllowAdd yes
516e6d254dSBrad Davis
526e6d254dSBrad Davis# Is FreeBSD Update allowed to delete files?
536e6d254dSBrad Davis# AllowDelete yes
546e6d254dSBrad Davis
556e6d254dSBrad Davis# If the user has modified file ownership, permissions, or flags, should
566e6d254dSBrad Davis# FreeBSD Update retain this modified metadata when installing a new version
576e6d254dSBrad Davis# of that file?
586e6d254dSBrad Davis# KeepModifiedMetadata yes
596e6d254dSBrad Davis
606e6d254dSBrad Davis# When upgrading between releases, should the list of Components be
616e6d254dSBrad Davis# read strictly (StrictComponents yes) or merely as a list of components
626e6d254dSBrad Davis# which *might* be installed of which FreeBSD Update should figure out
636e6d254dSBrad Davis# which actually are installed and upgrade those (StrictComponents no)?
646e6d254dSBrad Davis# StrictComponents no
656e6d254dSBrad Davis
666e6d254dSBrad Davis# When installing a new kernel perform a backup of the old one first
676e6d254dSBrad Davis# so it is possible to boot the old kernel in case of problems.
686e6d254dSBrad Davis# BackupKernel yes
696e6d254dSBrad Davis
706e6d254dSBrad Davis# If BackupKernel is enabled, the backup kernel is saved to this
716e6d254dSBrad Davis# directory.
726e6d254dSBrad Davis# BackupKernelDir /boot/kernel.old
736e6d254dSBrad Davis
746e6d254dSBrad Davis# When backing up a kernel also back up debug symbol files?
756e6d254dSBrad Davis# BackupKernelSymbolFiles no
76*f28f1389SDave Fullard
77*f28f1389SDave Fullard# Create a new boot environment when installing patches
78*f28f1389SDave Fullard# CreateBootEnv yes
79