[bug-notifications] [pkgutil 0004693]: multiple occurences of use_gpg lead to multiple checks

[Mantis Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4693 
====================================================================== 
Reported By:                flod
Assigned To:                bonivart
====================================================================== 
Project:                    pkgutil
Issue ID:                   4693
Category:                   regular use
Reproducibility:            always
Severity:                   trivial
Priority:                   normal
Status:                     feedback
====================================================================== 
Date Submitted:             2011-02-20 04:16 CET
Last Modified:              2011-02-25 14:53 CET
====================================================================== 
Summary:                    multiple occurences of use_gpg lead to multiple
checks
Description: 
With the update to CSWpkgutil 2.3,REV=2011.02.12 the behavior somehow
changed.
I always saw two gpg blocks on one machine:
pkgutil -c
Checking integrity of
/var/opt/csw/pkgutil/catalog.csw.informatik.uni-erlangen.de_csw_current_i386_5.10
with gpg.
gpg: Unterschrift vom 17. Februar 2011 18:27:53 MET mittels DSA-Schlüssel
ID E12E9D2F
gpg: Korrekte Unterschrift von "CSW Distribution Manager
<dm at opencsw.org>"
Checking integrity of
/var/opt/csw/pkgutil/catalog.csw.informatik.uni-erlangen.de_csw_current_i386_5.10
with gpg.
gpg: Unterschrift vom 17. Februar 2011 18:27:53 MET mittels DSA-Schlüssel
ID E12E9D2F
gpg: Korrekte Unterschrift von "CSW Distribution Manager
<dm at opencsw.org>"

It looks like there are two places for config files:
/etc/opt/csw/pkgutil.conf
/opt/csw/etc/pkgutil.conf

at the host both contained the configuration:
use_gpg=true
use_md5=true

I removed /etc/opt/csw/pkgutil.conf and the output is back to one block.

Nevertheless that was a somehow unexpected behaviour.
====================================================================== 

---------------------------------------------------------------------- 
 (0008830) bonivart (manager) - 2011-02-25 14:53
 https://www.opencsw.org/mantis/view.php?id=4693#c8830 
---------------------------------------------------------------------- 
There is a problem with the gpg setting being global and OpenCSW doesn't
sign the experimental catalog. I'm looking into adding support for this and
maybe more to be per mirror.

Regarding your script output I think what you want has been in pkgutil for
long now. First of all, you can use -C instead of -c to get rid of those
SAME line. In addition to that there's the -e option to e-mail just this
kind of report, I run it daily from root's crontab:

10 5 * * * /opt/csw/bin/pkgutil -U -e mail at foo.bar > /dev/null 2>&1

I just tested it with gpg on and it still just mails a list of upgradeable
packages like this (spacing probably weird here in Mantis):

CSWbash                   4.1.7,REV=2010.11.20      4.1.9,REV=2010.12.20  
  
CSWbind                   9.7.2P3,REV=2010.12.03    9.7.3,REV=2011.02.23  
  
CSWbindutils              9.7.2P3,REV=2010.12.03    9.7.3,REV=2011.02.23  
  
CSWcas-etcservices        1.42,REV=2010.11.26       1.42,REV=2011.02.16   
  
CSWgdbm                   1.8.3,REV=2011.01.27      1.8.3,REV=2011.02.01  
 

Regarding stable interface for scripting I have gotten feedback from more
and more people that are using pkgutil for different things, it's hard for
me to anticipate everything people do. :-) I have started (in 2.3) to
introduce a --parse option as addition to -a/c/C and so on which removes
the header and separates all columns with one tab. Give that a try.

The duplication detection is for the exact same mirror path, I can't know
the contents of the mirror. Assume you're creating your own local mirror
(with bldcat) and you call that unstable to match our main mirrors. The
message is printed to stderr, I'm trying to do this more strict now.