From owner-freebsd-questions@freebsd.org Sun Aug 2 16:20:01 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 061A19B1BDE for ; Sun, 2 Aug 2015 16:20:01 +0000 (UTC) (envelope-from carlj@peak.org) Received: from filter04.peak.org (filter04.peak.org [69.59.194.80]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C6B4A857 for ; Sun, 2 Aug 2015 16:20:00 +0000 (UTC) (envelope-from carlj@peak.org) Received: from zmail-mta02.peak.org ([207.55.16.112]) by filter04.peak.org ({b5578ef9-c87c-4111-97f7-092309db775d}) via TCP (outbound) with ESMTPS id 20150802161613460_0000 for ; Sun, 02 Aug 2015 09:16:13 -0700 X-RC-FROM: X-RC-RCPT: Received: from zmail-mta02.peak.org (localhost [127.0.0.1]) by zmail-mta02.peak.org (Postfix) with ESMTPS id 60A2254CA3 for ; Sun, 2 Aug 2015 09:16:08 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by zmail-mta02.peak.org (Postfix) with ESMTP id 541E352513 for ; Sun, 2 Aug 2015 09:16:08 -0700 (PDT) Received: from zmail-mta02.peak.org ([127.0.0.1]) by localhost (zmail-mta02.peak.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id pdlIZhDYORjJ for ; Sun, 2 Aug 2015 09:16:08 -0700 (PDT) Received: from mailproxy-lb-06.peak.org (mailproxy-lb-06.peak.org [207.55.17.96]) by zmail-mta02.peak.org (Postfix) with ESMTP id BE3E15005C for ; Sun, 2 Aug 2015 09:16:07 -0700 (PDT) Received: from carlj by elk.localnet with local (Exim 4.80) (envelope-from ) id 1ZLvvi-0007iu-O5 for freebsd-questions@freebsd.org; Sun, 02 Aug 2015 09:16:06 -0700 From: Carl Johnson To: freebsd-questions@freebsd.org Subject: Re: Bootstrapping pkg from a package References: <87y4hugxf4.fsf@elk.localnet> <55BE04FA.6040301@FreeBSD.org> Mail-Followup-To: freebsd-questions@freebsd.org X-Clacks-Overhead: GNU Terry Pratchett Date: Sun, 02 Aug 2015 09:16:06 -0700 In-Reply-To: <55BE04FA.6040301@FreeBSD.org> (Matthew Seaman's message of "Sun, 2 Aug 2015 12:54:34 +0100") Message-ID: <87r3nlhdix.fsf@elk.localnet> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-MAG-OUTBOUND: peakinternet.redcondor.net@207.55.16/22 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Aug 2015 16:20:01 -0000 Matthew Seaman writes: > On 02/08/2015 04:51, Carl Johnson wrote: >> I was just bringing up my Raspberry Pi from the 10.2-RC2 image and tried >> to install some packages that I had saved previously. The pkg(7) >> manpage states that the pkg in the base system can use 'pkg add ' >> to install the pkg package instead of getting the package from the >> repository (which isn't available for arm). When I tried that I just >> got the message 'Signature for pkg not available.' I don't have a >> signature for it, and don't know where to get it from or how to generate >> it. Once I install it from ports, I can use that to add other saved >> packages without any signature being necessary. > > You'll only get this error message if SIGNATURE_TYPE='fingerprints' > somewhere in your pkg.conf and you're using pkg(7) to run > 'pkg add something' -- otherwise it will just go ahead and install from > the pkg.txz tarball without checking the package integrity and authenticity. That is the default in /etc/pkg/FreeBSD.conf, so the base pkg uses that. >> The manpage makes it appear that should work, so is there something else >> that I need to do? Thanks for any information. > > Check for the presence of pkg.txz.sig -- that has to be present in the > same directory as the pkg.txz you're trying to install from before > signature checking will work -- and also that you have the current > FreeBSD repository public key: > > /usr/share/keys/pkg/trusted/pkg.freebsd.org.2013102301 > > which should look like this: > > % cat pkg.freebsd.org.2013102301 > # $FreeBSD: stable/10/share/keys/pkg/trusted/pkg.freebsd.org.2013102301 > 260608 2014-01-13 22:07:36Z bdrewery $ > > function: "sha256" > fingerprint: > "b0170035af3acc5f3f3ae1859dc717101b4e6c1d0a794ad554928ca0cbb2f438" > > Each of these files should be present on the installation media, if they > haven't already been installed on the system. Those are present, but the problem is there is no FreeBSD repository available for the arm architecture, so that is why I am doing this. > Otherwise I believe you can turn off signature checking by setting: > > SIGNATURE_TYPE=none Setting the environment variable works, so I don't need to bother with changing the configuration file. It still seems odd that I can add packages with pkg from ports without a signature, so it seems the pkg from ports ignores the signature setting in the config file. Thanks for the explanation and fix. Hopefully they will get a pkg repository setup for arm before too long so I won't need to bother with this. -- Carl Johnson carlj@peak.org