hoopycat wrote:
The problem with compiling from source is that you are then on the hook to handle any security updates that are required, without any leadtime the distribution vendors might have. This is particularly critical for things that are accessed remotely, like (for example) Apache or PHP.
In other words, you've just defeated the security benefits of CentOS (or any other distro). Not a good idea.
I tend to agree in principle but, to some extent, not agree in practice. Yes it is best to stick to software releases provided by your distribution. But sometimes that doesn't work out.
If you know what you're doing, and recognize (and accept) the responsibility for updating manually, there's nothing really "wrong" with installing from source. I build Apache from source, primarily because the CentOS way of doing suexec doesn't work for me. I monitor for new Apache releases and when one appears I build in a sandbox, test, watch for discussion, and eventually deploy. Yes it's a bit more work for me, but I don't think "I've defeated the security benefits" of my CentOS system.