System Patches package version 2.2.x

[JonathanLee]

@jimp Installed Thank you!!

[OffstageRoller]

Thank you for this! It’s awesome that I don’t have to hunt down patches, nor wait for the next OS release to get these, and it’s all done in a single click (and reboot).

What would be the process when the next version of pfSense is released? Normally I:

1. Reboot
2. Uninstall all packages
3. Upgrade
4. Reboot
5. Reinstall all packages

But with all of these recommended patches, before I do step 1 above, should I first revert all patches applied?

Or is it safe to keep all the patches applied and install the upgrade as is? Can the patches package be removed with patches still applied before upgrading?

My fear would be a patch the applied to 23.01, but didn’t make it to 23.05, and now I still have that modified file on my disk, but it’s not available to be installed/reverted in version 23.05. Does that make sense what I’m trying to say?

[SteveITS]

@offstageroller normally the Recommended patches are all included in the next version. If not (which I haven’t seen yet) then presumably either something’s wrong with the patch, or it would still be listed in the package for the next version.

[slu]

@jimp said in System Patches package version 2.2:

This function is really fantastic!

[JeGr]

@jimp As you mention 23.05 around the corner I'm curious: what's the plan with 2.7? Release before 23.05 or joint release with 23.05 (shortly after)? We've many people asking when the step-up to 2.7 will arrive (mostly because they also have to plan maint windows in advance) so even a guesstimate would be nice.

As the snaps of 2.7 haven't gone beta yet I'm wondering :)

Cheers

[jimp]

@jegr said in System Patches package version 2.2:

@jimp As you mention 23.05 around the corner I'm curious: what's the plan with 2.7? Release before 23.05 or joint release with 23.05 (shortly after)? We've many people asking when the step-up to 2.7 will arrive (mostly because they also have to plan maint windows in advance) so even a guesstimate would be nice.

As the snaps of 2.7 haven't gone beta yet I'm wondering :)

Not a topic for this thread, but still being discussed internally, likely after.

[Dobby_]

I am on pfSense+ 23.01 with system patches 2.2.1
and all is running fine for now. Well done!

[jimp]

Bumping thread, 2.2.2 is building now, see edit in the main post for info.

tl;dr 9 new patches for 23.01, no changes for other versions.

[johnpoz]

@jimp so take in when it shows as available just update and reapply, no need to revert and then apply - that sort of thing. Or apply just new ones that show up.

[jimp]

Update the package, look over the list and just apply anything you think you might benefit from that isn't already applied. Or whack the apply all recommended button again and it'll just apply all the new stuff.

No need to revert or touch anything before/after otherwise.

[JonathanLee]

@jimp Thank you, I appreciate all you do. It's working great on my 2100 MAX

[JonathanLee]

@jimp @LamaZ Your patch for authenticated NTP status is also still working.

[keyser]

@jimp said in System Patches package version 2.2.x:

Update the package, look over the list and just apply anything you think you might benefit from that isn't already applied. Or whack the apply all recommended button again and it'll just apply all the new stuff.

No need to revert or touch anything before/after otherwise.

While I really applaude this patch manager and the delivery mechanism it brings, I would like to add that unless 23.05 is right around the corner, it’s my firm belief that a 23.01.1 should be released asap.
It’s a long list of patches now, and waiting many months before they are applied to the average 23.01 upgrader, is simply not the right solution in my opinion.

[jimp]

@keyser said in System Patches package version 2.2.x:

@jimp said in System Patches package version 2.2.x:

Update the package, look over the list and just apply anything you think you might benefit from that isn't already applied. Or whack the apply all recommended button again and it'll just apply all the new stuff.

No need to revert or touch anything before/after otherwise.

While I really applaude this patch manager and the delivery mechanism it brings, I would like to add that unless 23.05 is right around the corner, it’s my firm belief that a 23.01.1 should be released asap.
It’s a long list of patches now, and waiting many months before they are applied to the average 23.01 upgrader, is simply not the right solution in my opinion.

23.05 is targeted for early May (before BSDCan), we're already in the first stages of the release cycle and things are looking pretty good overall. At this point it would take us longer to shift gears and put out a patch release than to keep moving forward.

[keyser]

@jimp said in System Patches package version 2.2.x:

23.05 is targeted for early May (before BSDCan), we're already in the first stages of the release cycle and things are looking pretty good overall. At this point it would take us longer to shift gears and put out a patch release than to keep moving forward.

Here’s hoping that your schedule stays on track - that’s within the next 3 weeks :-)

[JonathanLee]

@jimp Will I need to remove all patches before the inplace upgrade? Custom ones also? Or can I just leave them?

[SteveITS]

@jonathanlee no just apply new ones.

[chrcoluk]

Nice, I am only on 2.6.0, one of the reasons i didnt move to plus is I didnt know if custom system patches could still be done for that version.

This package is one of the nicest features about pfSense, not just because of the recommended patches but the fact you officially support people making their own patches which is awesome.

I currently have 16 of my own patches active via this package.

[JonathanLee]

@steveits but for new OS updates do we remove before PfSense updates?

[JonathanLee]

https://redmine.pfsense.org/issues/13984

Off topic, but has anyone checked out this patch that is set up for pull request review??