Hi John, the bug I was referring to is this:

https://github.com/NetBSDfr/pkgin/issues/45 
<https://github.com/NetBSDfr/pkgin/issues/45>

pkgin surpasses the output of pkg_add that asks for the confirmation of non 
signed packages instead of either flat out failing or allowing the user to 
choose. That way it appears pkgin ‘hangs’ while pkg_add in the background is 
waiting for interactive input.

> On Aug 7, 2015, at 15:24, Jonathan Perkin <[email protected]> wrote:
> 
> * On 2015-08-06 at 20:13 BST, Heinz Nikolaus Gies wrote:
> 
>> That is a (yet another…) bug in pkgin for unsigned packages it
>> silently hangs.
> 
> I wasn't aware of this, so took a look into it.  Turns out to be a
> misconfiguration in pkg_install rather than a pkgin bug.
> 
> We set the following option in /opt/local/etc/pkg_install.conf:
> 
> VERIFIED_INSTALLATION=trusted
> 
> THis ensures that packages we try to install are signed.  However, a
> side-effect of this setting is that if the package is unsigned, it
> will issue a prompt asking the user whether to proceed or not.
> 
> This works fine if using pkg_add(1), however pkgin is designed to use
> pkg_add in unattended mode, so it ends up stuck at this prompt and
> silently hangs as you describe.
> 
> I will fix this in future bootstrap kits by changing the setting to:
> 
> VERIFIED_INSTALLATION=always
> 
> This will simply fail if the package is unsigned and the error will be
> reported back to pkgin as usual, e.g.:
> 
> $ pkgin in pcre
> installing pcre-8.37...
> pkg_install warnings: 0, errors: 1
> pkg_install error log can be found in /var/db/pkgin/pkg_install-err.log
> 
> $ cat /var/db/pkgin/pkg_install-err.log
> ---Aug 07 13:50:13: installing pcre-8.37...
> pkg_add: No valid signature found, rejected
> pkg_add: 1 package addition failed
> 
> This presents you with two options:
> 
> -  Create signed packages and have your installer add your GPG key to
>  /opt/local/etc/gnupg/pkgsrc.gpg prior to running pkgin.  This is
>  the preferred option.
> 
> -  Leave packages unsigned and change VERIFIED_INSTALLATION to "never"
>  temporarily in /opt/local/etc/pkg_install.conf while installing
>  your packages, then revert back to "always".
> 
> In the future could you log issues against our GitHub issues[0] so
> that we are aware of them?
> 
> Thanks,
> 
> []: https://github.com/joyent/pkgsrc/issues
> 
> --
> Jonathan Perkin  -  Joyent, Inc.  -  www.joyent.com
> 



-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to