* On 2015-08-06 at 20:13 BST, Heinz Nikolaus Gies wrote:

> That is a (yet another…) bug in pkgin for unsigned packages it
> silently hangs.

I wasn't aware of this, so took a look into it.  Turns out to be a
misconfiguration in pkg_install rather than a pkgin bug.

We set the following option in /opt/local/etc/pkg_install.conf:

  VERIFIED_INSTALLATION=trusted

THis ensures that packages we try to install are signed.  However, a
side-effect of this setting is that if the package is unsigned, it
will issue a prompt asking the user whether to proceed or not.

This works fine if using pkg_add(1), however pkgin is designed to use
pkg_add in unattended mode, so it ends up stuck at this prompt and
silently hangs as you describe.

I will fix this in future bootstrap kits by changing the setting to:

  VERIFIED_INSTALLATION=always

This will simply fail if the package is unsigned and the error will be
reported back to pkgin as usual, e.g.:

  $ pkgin in pcre
  installing pcre-8.37...
  pkg_install warnings: 0, errors: 1
  pkg_install error log can be found in /var/db/pkgin/pkg_install-err.log

  $ cat /var/db/pkgin/pkg_install-err.log
  ---Aug 07 13:50:13: installing pcre-8.37...
  pkg_add: No valid signature found, rejected
  pkg_add: 1 package addition failed

This presents you with two options:

 - Create signed packages and have your installer add your GPG key to
   /opt/local/etc/gnupg/pkgsrc.gpg prior to running pkgin.  This is
   the preferred option.

 - Leave packages unsigned and change VERIFIED_INSTALLATION to "never"
   temporarily in /opt/local/etc/pkg_install.conf while installing
   your packages, then revert back to "always".

In the future could you log issues against our GitHub issues[0] so
that we are aware of them?

Thanks,

[0]: https://github.com/joyent/pkgsrc/issues 

-- 
Jonathan Perkin  -  Joyent, Inc.  -  www.joyent.com


-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to