On 05/05/2025 21:58, Chuck Tuffli wrote:
One aspect of running pkg-base I've found tricky is figuring out which package provides a missing binary, library, or man page. The port pkg-provides answers this type of question for ports, but (seemingly) not for pkg-base (unless I'm being dumb?). Are there plans to add this type of support? Alternatively, if I'm being dumb, can someone point me at some docs? TIA
There's provision in `pkg repo` (see: pkg-repo(8)) to generate a `filesite.txz` file as repository metadata, which lists all of the files, their checksums and various other per-file metadata for all of the files in all of the packages in the repository.
This isn't normally generated for the repositories provided by the project due to limitations on available space and bandwidth.
I've had the notion kicking around in my head for a while that having a database of all of the checksums of all of the files ever packaged and provided by the project, with cryptographic signatures proving the authenticity and provenance of those data, would be a pretty awesome resource. Basically tripwire(8) built into pkg(8). However, it would require someone with pretty deep pockets to fund the necessary infrastructure.
Cheers,
Matthew
OpenPGP_signature.asc
Description: OpenPGP digital signature
