Solved Updating jails with freebsd-update on 11-stable host

[driesm]

I would like to start using jails but I have a few questions regarding updating them.
I'm running 11-stable on the host and would like to run 11.1-release in the jails.
I'm wondering if I can use freebsd-update to update the 11.1-release jails even when running 11-stable on the host.
I noticed that when issuing freebsd-update fetch in a jail results in it trying to fetch keys for 11.2-prerelease (11-stable).

root@port:/ # freebsd-update --debug fetch
Looking up update.FreeBSD.org mirrors... 3 mirrors found.
Fetching public key from update6.freebsd.org... fetch: http://update6.freebsd.org/11.2-PRERELEASE/amd64/pub.ssl: Not Found
failed.
Fetching public key from update5.freebsd.org... fetch: http://update5.freebsd.org/11.2-PRERELEASE/amd64/pub.ssl: Not Found
failed.
Fetching public key from update4.freebsd.org... fetch: http://update4.freebsd.org/11.2-PRERELEASE/amd64/pub.ssl: Not Found
failed.
No mirrors remaining, giving up.

This makes me believe it will not be possible to use freebsd-update. Is this correct?
The only possible way to update jails on a stable host will be through source builds then?
Using make installworld and mergemaster just like on the host without the kernel part?

 

[chrbr]

Dear Duffyx,
from my understanding it should be possible to use 11-stable on the host and 11.x-release in the jails because stable is never behind release. You just have to update the host before updating the jails. Regarding the binary update, I think it should be initiated from the host as

freebsd-update -b /where/the/jail/is fetch
freebsd-update -b /where/the/jail/is install

If you compile your own kernel and you do not need 11.x-release in the jails you can also use the own compiled stuff to update the jails. My guess about your question is that you forgot or have not been aware of the -b option in the update command.

 

[driesm]

Ok to come back to your answer I was aware that the -b option was available. But it is not enough:

root@vados:/ # freebsd-update --debug -b /jail/plex fetch
Fetching public key from update.FreeBSD.org... fetch: http://update.FreeBSD.org/11.2-PRERELEASE/amd64/pub.ssl: Not Found
failed.
No mirrors remaining, giving up.

I forgot to RTFM ... freebsd-update(8)()
The manual explains the following option: "--currently-running ".
The following command works for updating the world of a 11.1-RELEASE jail on a 11-STABLE host.


freebsd-update --currently-running 11.1-RELEASE -b /where/the/jail/is fetch