Re: installing unsigned packages

On Mon, 2023-06-05 at 22:23 +0200, Jan Stary wrote:
> This is current/amd64.  I just build the rsync package
> as currently tweaked for xxhash, up to make package;
> now I'm trying to install it.
>
> $ env TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ make update
> ===> Updating for rsync-3.2.7p0
> Upgrading from rsync-3.2.7
> doas (hans@box.stare.cz) password:
> quirks-6.133 signed on 2023-06-04T21:20:32Z
> file:/usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz: unsigned
> package
> Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz
> Couldn't install rsync-3.2.7p0
>
> Isn't TRUSTED_PKG_PATH supposed to enforce pkg_add -Dunsigned?
>
> Also, "Can't find /usr/ports/packages/amd64/all/rsync-3.2.7p0.tgz"
> seems odd as the file exists.
>
>         Jan
>
hi

a wild guess is that you use PORTS_PRIVSEP but your doas configuration
line doesn't have "keepenv", so pkg_add is run without TRUSTED_PKG_PATH
because of doas not keeping it