If both the installed package and the new package are upgrade aware: execute preupgrade script from the old package execute upgrade script with PRE-UPGRADE argument from the old package remove files from the old package remove directories from the old package extract files and directories from the new package execute postupgrade script from the new package execute upgrade script with POST-UPGRADE argument from the new packageWhen packages are installed, if they are installed as a dependency of other packages they are flagged as automatically installed, whether from ports or from the remote repositories. autoremove proposes to remove those automatic packages if no others depend on them. It also prints the disk space saved. backupwhen used with -d (dump) it exports the whole database in an archive (txz) each packages information is exported as a yamlmtree file. when used with -r (restore) it reads an archive previously created via pkg backup -d and recreates the database according to the information from the archive. cleanexample of info command: pkg info -f zsh Name : zsh Version : 4.3.12 Origin : shells/zsh Prefix : /usr/local Categories : shells Licenses : ZSH Maintainer : baptFreeBSD.org WWW : zsh.org/ Comment : The Z shell Options : ZSHGDBM: off ZSHMAILDIR: off ZSHMEM: off ZSHMULTIBYTE: on ZSHPCRE: on ZSHSTATIC: off Flat size : 11 MB Description : Zsh is a UNIX command interpreter (shell) which of the standard shells most resembles the Korn shell (ksh), although it is not completely compatible. It includes enhancements of many types, notably in the command-line editor, options for customising its behaviour, filename globbing, features to make C-shell (csh) users feel more at home and extra features drawn from tcsh (another custom shell). If you want to use the zsh completion system, you should type the following commands: autoload -U compinstall compinstall See also zshcompsys(1) manpage. :) WWW: zsh.org/This is the developer-oriented way to query information from packages. It has a custom syntax and allows complex queries: pkg query n is installed from o in version v it takes sh on the system zsh zsh is installed from shells/zsh in version 4.3.12 it takes 11 MB on the system pkg query n is compiled with option Ok set to Ov zsh zsh is compiled with option ZSHGDBM set to off zsh is compiled with option ZSHMAILDIR set to off zsh is compiled with option ZSHMEM set to off zsh is compiled with option ZSHMULTIBYTE set to on zsh is compiled with option ZSHPCRE set to on zsh is compiled with option ZSHSTATIC set to offthis command registers as installed a packages whose files are already installed. if -l is not provided that it also executes the post-install scripts and shows the pkg-message. if -i /path is provided, then the files located in the /path (considered as the root directory) and listed in the plist as copied to the destination directory (default /). repoFind all the installed packages that can be updated and install the new dependencies if needed. linimon note: I fought the wiki syntax to get version displayed correctly for half an hour. good luck. manolis note: I added an invisible character at the end of version (chr 129) - version is defined in moinmoin default css, thats the reason for the wrong rendering versionIf you want to help this is here: Code review Better signing infrastructure (needs a specification from security officer) Real solver Check vulnerability database signature Create users using pw, gr API, instead of calling pw(8) Add a way to replace packages (REPLACE knobs in ports ) Add conflict information during pkg repo to allow detecting as much as possible conflicts prior fetching Add pkg tags (key/value) tagsThis is based on exp-runs (mostly): PORT PKGNG ISSUE PKGNG VERSION DESCRIPTION security/signing-party 1.0-beta8 installs both gnupg1 and gnupg2 as dependency which both brings gpg-zip.1.gz editors/mode-info 1.0-beta8 installs both emacs-23.4,2 and elisp-manual-21.2.81,1 which conclicts on /usr/local/info/elisp.info devel/gnustep 1.0-beta8 installs both gnustep-back-art-0.17.13 and gnustep-back-0.17.13 which conflicts on /usr/local/GNUstep/System/Library/Documentation/man/man1/gpbs.1.gz graphics/blender 1.0-beta8 installs both python32-3.2.23 and python27-2.7.24 which conflicts on /usr/local/bin/2to3 mail/maildrop pkg-1.0.b13 conflicts with courier-imap-4.10.0,2 installed on /usr/local/man/man1/maildirmake.1.gzContents Using Hardening Options dpkg-buildflags Enable or disable certain hardening features separately Notes for packages using QMake Notes for packages using CMake Notes for packages using Vala hardening-wrapper hardening-includes Validation Environment variables DEBBUILDHARDENINGFORMAT (gcc/g -Wformat -Wformat-security -Werrorformat-security) DEBBUILDHARDENINGFORTIFY (gcc/g -DFORTIFYSOURCE2) DEBBUILDHARDENINGSTACKPROTECTOR (gcc/g -fstack-protector-strong) DEBBUILDHARDENINGPIE (gcc/g -fPIE -pie) DEBBUILDHARDENINGRELRO (ld -z relro) DEBBUILDHARDENINGBINDNOW (ld -z now) State of implementation Notes on Memory Corruption Mitigation Methods User Space Stack Protector heap protection libc pointer encryption gcc -DFORTIFYSOURCE2 -O1 gcc -Wformat -Wformat-security gcc -pie -fPIE ld -z relro ld -z now Kernel Space non-exec memory segmentation (ExecShield) -fstack-protector runtime memory allocation validation Address Space Layout Randomization /proc/pid/maps protection /dev/mem protection link protections chroot, dmesg, fifo protections DocumentationContents Using Hardening Options dpkg-buildflags Enable or disable certain hardening features separately Notes for packages using QMake Notes for packages using CMake Notes for packages using Vala hardening-wrapper hardening-includes Validation