> NOTES: if you are updating a source tree that you initially fetched from a
> different server, or from a CD, you must add the -d $CVSROOT options to cvs.
Assuming $CVSROOT is set to the appropriate server. Since CVSROOT
is only used with "get" or when importing something new some have
it set to their local cvs repositories and hard code the specific
server they wish to use when accessing any other repository.
> You must also set the CVS_IGNORE_REMOTE_ROOT environment variable. If you
Nope. CVS_IGNORE_REMOTE_ROOT is no longer used. From "info cvs"
`$CVS_IGNORE_REMOTE_ROOT'
For CVS 1.10 and older, setting this variable prevents CVS from
overwriting the `CVS/Root' file when the `-d' global option is
specified. Later versions of CVS do not rewrite `CVS/Root', so
`CVS_IGNORE_REMOTE_ROOT' has no effect.
cvs is GNU software and GNU doesn't believe in man pages so do not
believe ANYTHING you read in the cvs man page, read the info files
instead. (Sucks, but that's the way it is).
> are following a patch branch, be sure to always omit the -A flag to cvs, or
> you may find yourself tracking current instead.
Excellent advice.
> Question 1 -- How often should I go through this process?
Monitor the soure changes mailing list and update when you want/need
something that was recently checked in.
> Question 2 -- Do I have to go through the process everytime there is a
> security advisory? Can I just download the patch and install it? Download
> the patch using ftp or cvs?
I prefer cvs up. That way I KNOW I'm getting exactly what is in cvs
and won't run into problems later when updating.
// marc
|