sbopkg: checking asc and md5sum files

JosephS · 05-27-2009, 04:45 PM

I would like to know if sbopkg checks the slackbuilds with the .asc
files. I rsynced the sbo directory from a live cd, and I don't know
if it did that then. I didn't notice if it checked when I built the
packages on my computer at home.

I assume sbopkg checks the MD5SUM for the packages when it downloads.
Correct me if I'm wrong.

Thanks.

chess · 05-27-2009, 05:47 PM

Quote:

Originally Posted by JosephS

I would like to know if sbopkg checks the slackbuilds with the .asc
files. I rsynced the sbo directory from a live cd, and I don't know
if it did that then. I didn't notice if it checked when I built the
packages on my computer at home.

I assume sbopkg checks the MD5SUM for the packages when it downloads.
Correct me if I'm wrong.

Thanks.

Sbopkg checks the md5sum of downloaded sources when building or installing packages. It currently does not check the gpg signatures of the SBo tarballs but this is something that we are looking into incorporating, however.

chess · 05-29-2009, 11:39 AM

I just committed a patch to sbopkg's SVN repository that now incorporates GPG checking of the SBo tarballs during the build/install process. Additionally, there are some new menu items that allow folks to manually check the GPG signature at any time or re-extract the SlackBuild tarball of a given piece of software in the repo.