Hacker News Reader

the bit that resulted in me removing it from all my routers/firewalls was having to run "make world" and rebuild the entire OS to install security fixes

not at all practical on a router with a underpowered cpu and little disk

apparently the developers have had a change of heart here (previously they didn't believe in providing binaries for security fixes)

View on HN

That particular problem has been addressed in the more common architectures - syspatch was introduced in OpenBSD 6.1 (April 2017) https://man.openbsd.org/syspatch

I think the expectation is that you would cross-compile for your router on a faster machine. I have no idea whether you need to be running OpenBSD on the build machine.

This is indeed how I did it before syspatch was available. I ran a more powerful Dell Optiplex tower as my "build box" and built the -stable branch on it, then installed those sets on my low power router boxes.

https://man.openbsd.org/syspatch

Reply on news.ycombinator.com