Date: Thu, 15 Nov 2018 16:04:21 +0000 From: bugzilla-noreply@freebsd.org To: pkg@FreeBSD.org Subject: [Bug 232350] ports-mgmt/pkg: periodic pkg-checksum and pkg-backup interfere with 'overnight' port builds Message-ID: <bug-232350-32340-Bz23T2uyO4@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-232350-32340@https.bugs.freebsd.org/bugzilla/> References: <bug-232350-32340@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=232350 --- Comment #12 from Alex Kozlov <ak@FreeBSD.org> --- The pkg-checksum reads almost entire $PREFIX, so if you don't want for files disappear/change checksum during validation, you need to copy $(pkg info -la) files to /tmp. It's easier with pkgdb, just a few megabytes, but if e.g. pkg-audit works on stalled pkgdb, there is possibility that you install vulnerable port and will know about it only after next periodic run. Granted, chances for this is not very high, but IMO it's much easier and safer to move pkg-* periodic scripts to another time or build ports in poudriere. -- You are receiving this mail because: You are the assignee for the bug.help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-232350-32340-Bz23T2uyO4>