You are not logged in.

#1 2013-03-20 12:38:43

jrussell
Member
From: Cape Town, South Africa
Registered: 2012-08-16
Posts: 510

list unsigned packages

Hi, is there any way to list packages that are untrusted/unsigned?

Also, what does:

SigLevel = PackageRequired

actually mean? I cant find anything on google, nor in man pages.


bitcoin: 1G62YGRFkMDwhGr5T5YGovfsxLx44eZo7U

Offline

#2 2013-03-20 12:57:51

loafer
Member
From: the pub
Registered: 2009-04-14
Posts: 1,772

Re: list unsigned packages

I'm not sure how to list unsigned packages but the SigLevel stuff is in the man pages:

https://www.archlinux.org/pacman/pacman … e_checking


All men have stood for freedom...
For freedom is the man that will turn the world upside down.
Gerrard Winstanley.

Offline

#3 2013-03-20 13:01:15

Allan
Pacman
From: Brisbane, AU
Registered: 2007-06-09
Posts: 11,403
Website

Re: list unsigned packages

There are no unsigned packages in the Arch repos.

In the upcoming pacman-4.1 you will be able to see how the installed packages were verified.

Online

#4 2013-03-20 13:30:34

jrussell
Member
From: Cape Town, South Africa
Registered: 2012-08-16
Posts: 510

Re: list unsigned packages

loafer wrote:

I'm not sure how to list unsigned packages but the SigLevel stuff is in the man pages:

https://www.archlinux.org/pacman/pacman … e_checking

Got it, didnt see "Options in both groups can additionally be prefixed with either Package or Database"

Allan wrote:

There are no unsigned packages in the Arch repos.

In the upcoming pacman-4.1 you will be able to see how the installed packages were verified.

I meant list from installed packages, not from repos.


bitcoin: 1G62YGRFkMDwhGr5T5YGovfsxLx44eZo7U

Offline

#5 2013-03-20 14:03:58

Allan
Pacman
From: Brisbane, AU
Registered: 2007-06-09
Posts: 11,403
Website

Re: list unsigned packages

jrussell wrote:
Allan wrote:

There are no unsigned packages in the Arch repos.

In the upcoming pacman-4.1 you will be able to see how the installed packages were verified.

I meant list from installed packages, not from repos.

You can list packages that are not from the repos (pacman -Qm).   Anything else is signed...

Online

#6 2013-03-20 22:16:04

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 11,966

Re: list unsigned packages

Not if you have a local or unofficial repo with unsigned packages ...

(i use an unsigned local repo for the aur packages i use/maintain) .

Jrussel, check pacman.conf and look for repos that don't have SigLevel = PackageRequired .
Say repo foo doesn't have that , then do pacman -Sl foo .
The list will show all packages repo foo has, and those you have installed are marked clearly.

In case all repos in pacman.conf have SigLevel = PackageRequired, Allan' comment in post 5 is correct.

Last edited by Lone_Wolf (2013-03-20 22:16:54)


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

Board footer

Powered by FluxBB