Here's what I want: I want to install RELEASE-8.2, and want to keep the system and packages up to date with security patches only. I want to avoid ports b/c I do not want my machines to start compiling large packages and their dependencies when it has a high load; also, I do not want to deal with broken ports.
Keeping the core system seems simple enough with
freebsd-update fetch and
How should I keep packages up to date with the latest available from
portupgrade man page says that the
-PP flag may be what I want-- however, it says I need an updated ports tree. That's fine, but what happens if I have Foo-1.0 installed, the ports tree says Foo-1.2 is the newest version, but only Foo-1.1 is available as a package? Will it recognize Foo-1.1 as a higher version? If so, why does it need an updated ports tree?
Is this enough?:
portsnap fetch update portupgrade -a -PP
(I'm assuming you don't need
-R when you have