Re: installing unsigned packages

2023-06-05 Thread Jan Stary
On Jun 05 22:29:51, sol...@perso.pw wrote:
> line doesn't have "keepenv", so pkg_add is run without TRUSTED_PKG_PATH
> because of doas not keeping it

On Jun 05 21:46:48, s...@spacehopper.org wrote:
> Ports infrastructure should set that automatically.
> 
> Could be you aren't passing the environment through correctly. If you're
> using sudo, make sure you have SUDO=sudo -E in mk.conf, or if you're using
> doas then make sure it has keepenv.

It was the missing keepenv.
Thank you,

Jan



Re: installing unsigned packages

2023-06-05 Thread Stuart Henderson

Ports infrastructure should set that automatically.

Could be you aren't passing the environment through correctly. If you're 
using sudo, make sure you have SUDO=sudo -E in mk.conf, or if you're using 
doas then make sure it has keepenv.


--
 Sent from a phone, apologies for poor formatting.

On 5 June 2023 21:23:29 Jan Stary  wrote:


This is current/amd64.  I just build the rsync package
as currently tweaked for xxhash, up to make package;
now I'm trying to install it.

$ env TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ make update
===> Updating for rsync-3.2.7p0
Upgrading from rsync-3.2.7
doas (h...@box.stare.cz) password:
quirks-6.133 signed on 2023-06-04T21:20:32Z
file:/usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz: unsigned package
Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz
Couldn't install rsync-3.2.7p0

Isn't TRUSTED_PKG_PATH supposed to enforce pkg_add -Dunsigned?

Also, "Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz"
seems odd as the file exists.

Jan




Re: installing unsigned packages

2023-06-05 Thread Solène Rapenne
On Mon, 2023-06-05 at 22:23 +0200, Jan Stary wrote:
> This is current/amd64.  I just build the rsync package
> as currently tweaked for xxhash, up to make package;
> now I'm trying to install it.
> 
> $ env TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ make update
> ===> Updating for rsync-3.2.7p0
> Upgrading from rsync-3.2.7
> doas (h...@box.stare.cz) password: 
> quirks-6.133 signed on 2023-06-04T21:20:32Z
> file:/usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz: unsigned
> package
> Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz
> Couldn't install rsync-3.2.7p0
> 
> Isn't TRUSTED_PKG_PATH supposed to enforce pkg_add -Dunsigned?
> 
> Also, "Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz"
> seems odd as the file exists.
> 
> Jan
> 
hi

a wild guess is that you use PORTS_PRIVSEP but your doas configuration
line doesn't have "keepenv", so pkg_add is run without TRUSTED_PKG_PATH
because of doas not keeping it



installing unsigned packages

2023-06-05 Thread Jan Stary
This is current/amd64.  I just build the rsync package
as currently tweaked for xxhash, up to make package;
now I'm trying to install it.

$ env TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ make update
===> Updating for rsync-3.2.7p0
Upgrading from rsync-3.2.7
doas (h...@box.stare.cz) password: 
quirks-6.133 signed on 2023-06-04T21:20:32Z
file:/usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz: unsigned package
Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz
Couldn't install rsync-3.2.7p0

Isn't TRUSTED_PKG_PATH supposed to enforce pkg_add -Dunsigned?

Also, "Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz"
seems odd as the file exists.

Jan