Match what reorder_kernel is doing and use kern.osversion to find out whether
we are running an MP kernel or not.

based on a reworked submission from kris at devtty dot one via deraadt@
input and ok

Match what reorder_kernel is doing and use kern.osversion to find out whether
we are running an MP kernel or not.

based on a reworked submission from kris at devtty dot one via deraadt@
input and ok robert@

show more ...

When asking to install patches and none are available, return 2.

man page and inputs from schwarze@
ok sthen@

Check that SHA256.sig has at least three lines

If there are fewer than three syspatches, this utility currently won't
see them due to a small thinko from r1.164 that checks whether SHA256
has at lea

Check that SHA256.sig has at least three lines

If there are fewer than three syspatches, this utility currently won't
see them due to a small thinko from r1.164 that checks whether SHA256
has at least three lines (two lines signature + 1 line with a syspatch)
instead of doing the same on SHA256.sig. Adjust the check so it works
as intended with no need for brilliantly ugly workarounds from robert.

found by tj
ok ajacoutot

show more ...

Print usage to stderr, print error messages in errx(3) fashion

While here, rename sg_err()/ug_err() to just err() and sync code between
syspatch(8) and sysupgrade(8).

Feedback OK naddy

set -/+o pipefail around the magic loop in ls_missing() so that we can properly
error out if ftp(1) or tar(1) fails; this happened to swarte@ a few months
(something to do with /home on NFS without -

set -/+o pipefail around the magic loop in ls_missing() so that we can properly
error out if ftp(1) or tar(1) fails; this happened to swarte@ a few months
(something to do with /home on NFS without -maproot IIRC).

Check that the signature file is at least 3 lines long (meaning that it contains
at least 1 syspatch) before entering the magic loop otherwise `grep -q' will
abort the script due to pipefail.

While here, revove a useless use of sort(1).

show more ...

Our old ksh(1) bug where eval()uating a || compound list would terminate the
shell has been fixed by benno@; remove workaround.

ok naddy@

Small XXX.

Relax the filename checks to allow dashes as well. Starting with
OpenBSD 6.9, we can use less awkward filenames.

Initial diff by deraadt, ok aja

Simplify: _BSDMP was only used once.

Just output a generic error message:
"Unsupported filesystem, aborting"
for mfs, nfs and co.

Drop non existent vars.

Wrap long lines.

use ftp -N option; ok jca

Retracted a bit too much.

retract 1.151, now that ftp reports the failing url itself.
with jca, ok aja

Tweak and sync comment.

Determine the OS version in a way that won't break after 9.9.
Do it the same way in all three copies of the code.

Based on a patch from Chris Waddey.
with & ok ajacoutot

Better error message when we fail to fetch SHA256.sig.
Add "syspatch:" to every error message so we know where it comes from.

req. by deraddt@
ok deraadt@ tb@

Add where missing and harmonize PATH to be _PATH_DEFPATH (without local nor
X11R6).
Suggested by tb@

ok deraadt@ tb@ millert@

Tell user to look at manually running /usr/libexec/reorder_kernel in case
it fails at the end of the syspatch run.
Because a kernel syspatch was installed, a user could think the kernel
was updated a

Tell user to look at manually running /usr/libexec/reorder_kernel in case
it fails at the end of the syspatch run.
Because a kernel syspatch was installed, a user could think the kernel
was updated accordingly; which is not the case if reorder_kernel fails.

show more ...

For "unpriv -f file", chown file back to root once the command finishes,
like install.sub and sysupgrade(8) do.

Initialise variable.

Change variable name.

If we don't have a proper installurl, use cdn.openbsd.org.
Idea from sysupgrade(8).

Move release check up front.