Hi,

I'm looking at ways to do some basic sanity testing of pkg upgrading.

Among the things I'd like to do are verify that the files in an 
update/install are actually changed correctly on the system.

Firstly there does not seem to be any way to get pkg install (or 
image-update) to tell you what files it is changing. The -v option is a 
little more verbose but does not help at the file level.

Next I can't see a way to compare whats in the package on the repository 
and on the system. I can do a 'package contents -m' which will give the 
filename, owner etc. but not a chksum that I can then check with a query 
against the repository. I guess the pkg tool has some way of working this 
out as it determines what to download; or is it working purely on the 40 
bit 'filename' in the repository?

So basically Iafter an image-update I can't verify whats changed. Any 
thoughts on how best to achieve this?

I was thinking of the following RFE's:
* Have 'pkg install/image-update -v' give you the list of files changed and 
  actions performed.
* Have pkg contents display a md5 of files, locally and on the repository. 
This would allow the user to verify that their system is correct. Possibly 
also a good tool for security, detecting trojans etc.

Thoughts?

Cheers,
~Albert

_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to