Age | Commit message (Collapse) | Author | Files | Lines |
|
so user can override trusted keys directory and repositories file.
|
|
it's a warning not an error to have non-existant repository.
bad signature means tampering; but we might want to just ignore
those. this is especially important if we have http repositories
and we are bootstrapping (without network).
|
|
they are not needed, and cause errors if signing keys are not
present.
|
|
|
|
over the ones in config file. also remove the apk_root == NULL
check as this cannot happen anymore. a valid root is always
required.
|
|
|
|
|
|
|
|
usually we are interested on the actual file's length. but
audit is interested about the link. so add a flag for this and
use it in audit.
|
|
|
|
so do not choke on it.
|
|
so initialize db with a root, but avoid loading state or
repositories.
|
|
it will allow to overwrite files owned by some other packages
to get upgrades right (e.g. when splitting or renaming packages)
|
|
also makes it possibly to upgrade package without adding it to
top-level deps. fixes #69.
|
|
previously they might have been skipped on certain situations.
this also fixes some other reverse dependency enforcements and
implements new "pending" state for locked name.
|
|
otherwise we can accept unsigned repositories, and install bad
packages.
|
|
and by default just update the world, and dump a lost of packages
that are not removed. fixes #47.
|
|
We need the define for uint16
|
|
should really fix abuild-tar.
|
|
make the system audit compare only installed files, instead of
scanning the whole file system. also make it print only package
names with -q, so reinstalling modified packages becomes easy.
|
|
other wise cache_fd points to var/lib/apk and contains the real
installed db causing it to be loaded twice.
|
|
this way we never change cwd, and relative filenames are always
parsed consistently. this also helps filename construction in many
places. this patch also changes '--root' to override location of
all configuration to be in the new root. previously it depended
on the file which one was used.
|
|
remember to increment destination pointer; and munmap the proper
base address.
|
|
|
|
|
|
also take precautions in audit code if the db is missing the
checksum.
|
|
and use it for /etc/init.d by default. fixes #99.
|
|
so we avoid some malloc/free calls.
|
|
apparently it needs to have both PROT_READ and PROT_WRITE. and
it needs to be MAP_SHARED for the writing to be effective. oh,
and the data needs to be preallocated with ftruncate; otherwise,
one gets SIGBUS.
|
|
we don't want to do checksumming of existing files unless it's
in a protected directory. also, we keep the original file if it's
*modified*.
|
|
avoids some copying and system calls.
|
|
and force checksumming only when unpacking archive. otherwise
it's extra computation for nothing.
|
|
apparently the double colon rule dependencies affect only the
specific rule-set.
|
|
otherwise bad things happens. avoid this be checking end of
stream at the beginning of read.
|
|
|
|
and use that to figure if questions are allowed or not instead
of the verbosity level.
|
|
|
|
this dependency is now inserted automatically by abuild.
|
|
|
|
use the package 'installed_size' == 0 as a test instead for
dependency only packages.
|
|
this enables virtual packages and files specified from command
line to work on non-harddisk installs.
|
|
Otherwise will link(2) fail since it does not exist.
|
|
can't cancel an index reading or we lose signature checking.
|
|
when failed to load an existing index.
|
|
and do not remove modified configuration files unless --purge is
specified.
|
|
to check system files for changes.
|
|
fixes verification of non-repository packages while installing
them. this is final thing needed for full signing support
(fixes #46).
|
|
make sure cache is enabled on non-permanent rootfs setups.
some optimizations and fixes too.
|
|
smaller callback and less cases to check. also reintroduce the
oneshot digest flag, hopefully correct this time.
|
|
|