You are not logged in.

#1 2011-10-23 19:28:40

n3wu53r
Member
Registered: 2011-09-06
Posts: 12

Slightly Silly Question

I am not too sure if this is the right place for this question and forgive me for how silly it may sound.
I have never installed Arch on a host before, because I am fairly paranoid and pacman's lack of package signing always bugged me. Now that pacman is at version 4.0 and now checks for signatures I am now planning a move to arch. However on http://www.archlinux.org/packages/ some of the packages shown are unsigned (even common ones like bash: http://www.archlinux.org/packages/core/i686/bash/ ). Now this is probably me being crazy but should I really be concerned? Should I either wait for every package to be signed or just install Arch now and be done with it?

Offline

#2 2011-10-23 19:34:26

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: Slightly Silly Question

It's up to you.
Not every package is signed yet but they eventually will all be. I think they are being signed as they are being rebuilt.

Offline

#3 2011-10-23 19:38:16

n3wu53r
Member
Registered: 2011-09-06
Posts: 12

Re: Slightly Silly Question

If They are being signed as they are rebuilt, some old unmaintained software or software that has not seen a release in years may never be signed.
I might have to wait anyways, AMD still doesn't have a binary driver working with Gnome 3.

Offline

#4 2011-10-23 19:43:51

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: Slightly Silly Question

n3wu53r wrote:

If They are being signed as they are rebuilt, some old unmaintained software or software that has not seen a release in years may never be signed.

Old unmaintained software may be dropped altogether and old but still useful one may be rebuilt anyway.

There's some info e.g. on https://wiki.archlinux.org/index.php/De … g_Packages
If you want more details, I think it's best to ask on the mailing list where the devs are.

Offline

Board footer

Powered by FluxBB