What buttons do I have to click to get my free patches? Oh that's right, they don't supply patches for free anymore.
Wrong again. You get LOTS of free patches with a free install of Solaris. RedHat set the pace for this: if you install RHEL, you have to use up2date which requires a registered system with the RedHat Network (RHN). If you don't want to register and pay for RHN, you wait for the next release and do your upgrade from that. Sun implemented a similar system -- in planning, testing, and preliminary deployment LONG before the acquisition -- requiring registration and a support contract number before allowing entitlement to certain patches in a more timely fashion than the traditional six-month release cycle.
Maybe you just re-install every 6 months when the new media set is released? right!
Actually, you can upgrade off the install CD from the media sets, too, without reinstalling. Always have been able to, and it's a simple, easy way to keep up-to-date, though it requires some downtime to install. Downside: no zero-day exploit fixes. Upside: free patch sets every six months. As long as I've been working with Solaris -- since 1999, and up through right now while I'm downloading the latest kernel exploit & StarOffice 8 security patch on my Solaris box -- the zero-day security exploits are listed in the patch entitlement for ALL Solaris systems, not just those with a support contract.
Upgrade old release (7, 8, 9): http://docs.sun.com/app/docs/doc/817-3799/6mjcan1v6?l=en&a=view
Upgrade newer release (10): http://docs.sun.com/app/docs/doc/817-0544/6mgbagb1c?l=en&a=view (x86 on this page; the SPARC install instructions are also in the documentation)ma
To get your security patches, go to Launch-> Applications -> Utilities -> Update Manager. Go through the registration wizard. Choose "Continue without providing a Service Plan Number". Accept the software license agreement. Finish the registration; if you want to use this as a base image for mass-deployment, click the "enable auto registration" option.
Next select all updates, and install them.
I understand you're concerned with not having the latest-and-greatest usability and functionality updates to your OS on a faster-than-6-month schedule. If it's of sufficient concern to you, register for a cheap Solaris support contract through SDN and be done with it. But for the rest of the world that wants to continue using Solaris for free, CRITICAL SECURITY PATCHES ARE AVAILABLE TO ANYONE WITH A SUN ONLINE ACCOUNT.
Free security updates online as soon as you get around to installing them. Free every-six-month usability and functionality updates. What exactly is the problem with this patch schedule? That those who choose to pay nothing for a great operating system don't get usability and functionality updates on the same schedule as paying customers?
OpenSolaris exists to fill that niche: customers who need bleeding-edge features on a very timely schedule and don't want to spend a lot of money. You can even patch production Solaris boxes from OpenSolaris patches if you wish, though I understand some assembly is required. Never done that myself. Never felt the need.
Overall, I think the Oracle acquisition of Sun has been a good thing for both companies. Sun gets to keep the lights on and payroll flowing, Oracle gets a bunch of hardware & software products in its portfolio.