Portsnap

This article includes a list of references, related reading or external links, but its sources remain unclear because it lacks inline citations. Please help to improve this article by introducing more precise citations. (September 2019) (Learn how and when to remove this template message)

Portsnap is a system written by Colin Percival for secure distribution of compressed, digitally signed snapshots of the FreeBSD ports tree. The distribution follows the client–server model and uses the transport protocol HTTP (pipelined HTTP).

As of FreeBSD 6.0, portsnap is a part of the base system (including 5.5). In previous versions it was installed from ports. It's a standalone program which can be run manually or in a cron job.

As such, it is one of alternatives to the classic method. Its advantages include:

• secure transfer - encrypted and signed data stream, not vulnerable to man-in-the-middle attacks
• end-to-end connectivity (as opposed to mirrors with cvsup)
• delta-based distribution - effective for small and frequent updates
• HTTP is used as protocol (as opposed to custom protocol of cvsup)

Another alternative to cvsup is (used to manage the OpenBSD source tree), it shares cvsup disadvantages, though.

The portsnap package is distributed under the 2-clause BSD license.

References[]

• portsnap in the FreeBSD Handbook
• portsnap at daemonology.net