On Sun, Nov 01, 2026 at 07:33:48AM -0600, Theo de Raadt wrote:
> >On Sun, Nov 01, 2026 at 07:01:13AM -0600, Theo de Raadt wrote:
> >> My plan for dbupdate is to run it from the _weekly_ script (since TZ
> >> updates have historically always had at least 1 week heads up even from
> >> the most retarded governments), and I suspect this will also cover
> >> problems with certs quickly enough.
> >> 
> >> Users can always run it manually themselves, in which case the weekly
> >> run will notice it does not need to do the large download operation.
> >> On that matter:
> >> 
> >> I am not seriouslyu concerned about having all openbsd machines in timezone
> >> stripe hitting downloads for (typically) a single file at the same time,
> >> if I change it to use cdn.openbsd.org
> >> 
> >> I am considering whether the installurl mirror should be used, or if
> >> it we should make it use the cdn (for the potential pressure)...
> >> 
> >> Maybe try to use the cdn first, failover the installurl.  It is possible
> >> someone will run an underbuilt mirror because too many users end up
> >> pointing at it without them knowing.  The cdn is much better prepared
> >> to handle this.
> >
> >I am not concerned about this.
> >Mirrors already get their fair share of pkg_add -un and syspatch -n. And I am
> >not talking about all the rsync or http mirror syncs.
> 
> The mirrors do not experience everyone in the same TZ band hitting them in
> roughly the same second.  Do they?

True.

> (And I do not want to use ~ to work around that).  People expect the big
> script to run at a known time.  I also don't want the timezone offset to
> change asyncronously while one of these scripts is running with a seperate
> cron statement.  It is better if it changes syncronouslyinside the script.

Using installurl would also allow using file:/// and not need network access.
Dunno if that's a thing or not.

-- 
Antoine