3 ms·
"Dependency tracking, resolution, individual file check-summing and package signing are all performed." Can you link me to the documentation that covers this?
by SwellJoe 12y ago
"Dependency tracking, resolution, individual file check-summing and package signing are all performed."
Can you link me to the documentation that covers this? I googled before making my comment, because I have limited (and mostly old) experience with OpenBSD ports, and wanted to be sure I wasn't making incorrect assertions. I couldn't find anything about verifying packages.
Anyway, if what you say is true, and OpenBSD now has effective package management, I'm going to spend some time with it, and possibly add support in our installer for it. I was under the (seemingly) mistaken impression that it would have the same faults as ports on FreeBSD.
- brynet 12y agoMarc Espie is who developed the package tools, and has given talks about it. Ted Unangst created signify, which is the basis for the package signing capabilities. You could also check the pkg_add(8), signify(1) and ports(7)/packages(7) man pages. http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/pkg_add.1 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/... http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/signify.1 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man1/... http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/packages.7 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/... http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/ports.7 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/...
- lcd047 12y agoAlso relevant: * packages vs. ports[0] * porter's handbook[1] [0]: http://www.openbsd.org/faq/faq15.html http://www.openbsd.org/faq/faq15.html [1]: http://www.openbsd.org/faq/ports/index.html http://www.openbsd.org/faq/ports/index.html
- deleted 12y ago[deleted]
- _delirium 12y agoFwiw you can get signed ports for FreeBSD via cperciva's Portsnap [1]. It was released in 2005, but it's taken a while for people to find out about it and switch over from the traditional CVSup updating method. I believe pkgng also supports signed updates, although the FreeBSD Wiki page on it says "TODO: Better signing infrastructure (needs a specification from security officer)" [2]. [1] http://www.daemonology.net/portsnap/ http://www.daemonology.net/portsnap/ [2] https://wiki.freebsd.org/pkgng#TODO https://wiki.freebsd.org/pkgng#TODO
- cperciva 12y agopngng has been signed for a long time now. That TODO list is hopelessly out of date.