LinuxQuestions.org - [SOLVED] Cannot update with slackpkg+

- Slackware (https://www.linuxquestions.org/questions/slackware-14/)

- - Cannot update with slackpkg+ (https://www.linuxquestions.org/questions/slackware-14/cannot-update-with-slackpkg-4175696204/)

Cannot update with slackpkg+

Hi,

I just reinstalled Slackware64 using this current ISO (https://slackware.uk/people/alien-cu...64-current-iso).
So it's a fresh install, but unexpectedly slackpkg+ is not working. I'm using slackpkg+-1.7.6-noarch-5mt
I set verbose at level 3 on slackpkgplus.conf
If I run slackpkg update gpg, I got this:

Code:

Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added







==============================================================================

  INFO! Debug informations

------------------------------------------------------------------------------

https://www.slackware.com/infra/keys/GPG-KEY --> OK

The temp directory /tmp/slackpkg.cjME7y will NOT be removed!

==============================================================================

Then I run slackpkg update, and I got this:

Code:

FATAL! No Slackware GPG-KEY imported.

If you are upgrading from an older release of slackpkg+, all keys must to be reimported.

Please run

  # slackpkg update gpg







==============================================================================

  INFO! Debug informations

------------------------------------------------------------------------------

The temp directory /tmp/slackpkg.0C5RO6 will NOT be removed!

==============================================================================

How is it possible? I have never had issues with slackpkg update gpg and slackpkg update commands.
How can I solve?
If I disable slackpkg+, slackpkg is running fine.

Thank you in advance,

Scorpion77

I'm sorry I have no answer because I didn't try upgrading my system in the last month, but I think your problem may be related to a recently reported vulnerability with gpg-keys:

https://www.linuxquestions.org/quest...ed-4175694561/

which lead to the Mon Jun 7 18:53:49 UTC 2021 change log entry:

Code:

ap/slackpkg-15.0.5-noarch-1.txz: Upgraded.

      Add "--" option to "command cd" in bash completion file. (akinomyoga)

      shell-completions/slackpkg.bash: add "show-changelog".

      Import bash-completion file from upstream project.

      Added the new-config actions for specific files. (Piter PUNK)

      Harden slackpkg with respect to obtaining GPG key. (CRTS)

I didn't read that thread in its entirety but I think there you could find some hint to fix your problem.

I hope this may give you at least some little help.

Has you uncomment mirror file to choose ftp o http? I've use slackpkg under non current version by no problem.
Can you follow the official steps

https://docs.slackware.com/slackware:slackpkg

Quote:

Originally Posted by Linpassion (Post 6257640)

Has you uncomment mirror file to choose ftp o http? I've use slackpkg under non current version by no problem.
Can you follow the official steps

https://docs.slackware.com/slackware:slackpkg

My slackpkgplus.conf is the same for years and has always worked.

It's possible the change to the official slackpkg update broke slackpkg+. Hopefully someone else running the latest versions can chime in to see if theirs is working or broken. If it's broken, I imagine it will be patched within a day or two.

Quote:

Originally Posted by bassmadrigal (Post 6257658)

It's possible the change to the official slackpkg update broke slackpkg+.

if this is the case, someone should better notify the slackpkg+ maintainer, zerouno.

FWIW, here is what I have installed, and working fine.

Code:

ls -l /var/lib/pkgtools/packages | grep slackpkg

-rw-r--r-- 1 root root 3.7K Jun  8 06:31 slackpkg-15.0.5-noarch-1

-rw-r--r-- 1 root root 1.5K May 27 04:57 slackpkg+-1.7.6-noarch-5m

I did an update to the June 7th updates and all worked as expected.

Quote:

Originally Posted by ponce (Post 6257660)

if this is the case, someone should better notify the slackpkg+ maintainer, zerouno.

I don't easily have the ability to check since I don't run -current. But it seems like camorri has tested it and it works fine with the new slackpkg update, so it seems OP's issue is not tied to the update.

Same problem here : fresh install of current, slackpkg alone works great, the add of slackpkg+ lead to this strange behavior :
- no update of the gpg keys for alienbob and restricted area (uncommented as usual in the slackpkgplus.conf file),
- only update of the slackware gpg key
- but "slackpkg update" ask for the gpg key update...

Thanks for your advices

Séb

Quote:

Originally Posted by seb_62 (Post 6257734)

You can try a different mirror in /etc/slackpkg/slackpkgplus.conf. My ISP doesn't particularly like http://bear.alienbase.nl for some reason.

For -current64 you could use (for example):

MIRRORPLUS['alienbob']=http://slackware.uk/people/alien/sbrepos/current/x86_64/

Thank you, but that doesn't work : even if the only mirror activated in slackpkg+ is the one for updating slackpkg+ itself, the behaviour I described is observed.

what are the results for the following:

Code:

find /etc -iname *.new

I'm thinking you may possibly have a badly out of date /etc/slackpkg/slackpkgplus.conf or slackpkg.conf

I think the issue lies with get and import GPG keys. If your keys are up-to-date, no issue. But with a fresh Slackware-current install, as soon as you install slackpkgplus and declare additionnal mirrors (e.g. alienbob, etc ...), slackpkgplus is unable to grab the new GPG keys.

I'm not 100% sure, but I noticed that slackpkg-15.0.5-noarch-1 defines new functions named get_gpg_key and import_gpg_key which are not overrided in /usr/libexec/slackpkg/functions.d/slackpkgplus.sh

Yep, slackpkg+ needs an upgrade due to the new gpg routines in slackpkg. As the OP reported, slackpkg update gpg works without slackpkg+. The output below is with the 'CHECKGPG=off' setting in slackpkg.conf:

Code:

root@laptop:/# slackpkg update gpg



    File: /tmp/slackpkg.kMppXY/gpgkey -> GPG-KEY              .. Downloading... 



pub  1024D/40102233 2003-02-26 Slackware Linux Project <security@slackware.com>

sub  1024g/4E523569 2003-02-26 [expires: ????-??-??]



    File: slackpkgplus        -> GPG-KEY              .. Downloading... 





                  !!! W A R N I N G !!!

    Repository 'slackpkgplus' does NOT contain the GPG-KEY

    You SHOULD disable GPG check by setting 'CHECKGPG=off'

    in /etc/slackpkg/slackpkg.conf or use slackpkg with

    '-checkgpg=off' : 'slackpkg -checkgpg=off install packge'







    File: restricted          -> GPG-KEY              .. Downloading... 





                  !!! W A R N I N G !!!

    Repository 'restricted' does NOT contain the GPG-KEY

    You SHOULD disable GPG check by setting 'CHECKGPG=off'

    in /etc/slackpkg/slackpkg.conf or use slackpkg with

    '-checkgpg=off' : 'slackpkg -checkgpg=off install packge'







    File: alienbob            -> GPG-KEY              .. Downloading... 





                  !!! W A R N I N G !!!

    Repository 'alienbob' does NOT contain the GPG-KEY

    You SHOULD disable GPG check by setting 'CHECKGPG=off'

    in /etc/slackpkg/slackpkg.conf or use slackpkg with

    '-checkgpg=off' : 'slackpkg -checkgpg=off install packge'





                        Slackware Linux Project's GPG key added



root@laptop:/#

Even ignoring the gpg warnings and continuing to download the 3rd party mirror files does no good. The net effect is the same. The 3rd party mirror files will be ignored by slackpkg & slackpkg+.

Code:

root@laptop:/# slackpkg update



Updating the package lists...

        Downloading...

                ChangeLogs

    File: slackware            -> ChangeLog.txt        .. Cached.

    File: slackpkgplus        -> ChangeLog.txt        .. Downloading... 

 Downloading... 

    File: restricted          -> ChangeLog.txt        .. Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

    File: alienbob            -> ChangeLog.txt        .. Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

 Downloading... 

    File: slackpkgplus        -> CHECKSUMS.md5        .. Downloading... 



                        !!! F A T A L !!!

    Repository 'slackpkgplus' FAILS the CHECKSUMS.md5 download

    The repository may be invalid and will be SKIPPED.



    File: restricted          -> CHECKSUMS.md5        .. Downloading... 



                        !!! F A T A L !!!

    Repository 'restricted' FAILS the CHECKSUMS.md5 download

    The repository may be invalid and will be SKIPPED.



    File: alienbob            -> CHECKSUMS.md5        .. Downloading... 



                        !!! F A T A L !!!

    Repository 'alienbob' FAILS the CHECKSUMS.md5 download

    The repository may be invalid and will be SKIPPED.





                No changes in ChangeLog.txt between your last update and now.

                Do you really want to download all other files (y/N)? y



                List of all files

    File: patches              -> MANIFEST.bz2        .. Cached.

    File: slackware            -> MANIFEST.bz2        .. Cached.

    File: extra                -> MANIFEST.bz2        .. Cached.

    File: pasture              -> MANIFEST.bz2        .. Cached.

    File: testing              -> MANIFEST.bz2        .. Cached.

                Checksums

    File: slackware            -> CHECKSUMS.md5        .. Cached.

    File: slackware            -> CHECKSUMS.md5.asc    .. Cached.



                WARNING: Without CHECKGPG, we can't check if this file is

                        signed by:



                        Slackware Linux Project <security@slackware.com>.



                        Enabling CHECKGPG is highly recommended for best

                        security.



                Package List

    File: slackware            -> FILELIST.TXT        .. Cached.

                Package descriptions

    File: patches              -> PACKAGES.TXT        .. Cached.

    File: slackware            -> PACKAGES.TXT        .. Cached.

    File: extra                -> PACKAGES.TXT        .. Cached.

    File: pasture              -> PACKAGES.TXT        .. Cached.

    File: testing              -> PACKAGES.TXT        .. Cached.

        Formatting lists to slackpkg style...

                Package List: using CHECKSUMS.md5 as source

                Package descriptions





==============================================================================

  WARNING! One or more errors occurred while slackpkg was running

------------------------------------------------------------------------------

slackpkgplus: SKIPPING Invalid repository (fails to download CHECKSUMS.md5)

    ( http://slakfinder.org/slackpkg+dev/CHECKSUMS.md5 )

restricted: SKIPPING Invalid repository (fails to download CHECKSUMS.md5)

    ( http://bear.alienbase.nl/mirrors/people/alien/restricted_sbrepos/14.2/x86/CHECKSUMS.md5 )

alienbob: SKIPPING Invalid repository (fails to download CHECKSUMS.md5)

    ( http://bear.alienbase.nl/mirrors/people/alien/sbrepos/14.2/x86/CHECKSUMS.md5 )



root@laptop:/#

Always fun when upstream changes affect downstream work. I run into different downstream issues with autoslackpkg too. I'm waiting for slackpkg & slackpkg+ to settle down for 15.0 before releasing a new autoslackpkg. In the meantime lots of refactoring is taking place!

Yep, it's broke.

slackpkg - version 15.0.5 / slackpkg+ 1.7.6

Made a back up of /var/lib/slackpkg, then deleted it. Here is what happens:

Code:

slackpkg update gpg



You have selected a mirror for Slackware -current in /etc/slackpkg/mirrors,

but Slackware version 14.2+ appears to be installed.



Slackware -current is the development (i.e. unstable) tree.



Is this really what you want?



To confirm your choice, press Y, else press N. Then, press Enter: y



Slackpkg will not show this warning again unless you remove the

//var/lib/slackpkg/current file. 



                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added



slackpkg update



FATAL! No Slackware GPG-KEY imported.

Please run

  # slackpkg update gpg

When you run slackpkg update gpg, you will get this every time.

Code:

slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added

The following is after turning off slackpkg+

Code:

SLACKPKGPLUS=off slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added



:/var/lib/slackpkg# ls -l

total 4

drwxr-xr-x 2 root root 4096 Jun 10 23:26 cache/

-rw-r--r-- 1 root root    0 Jun 10 23:26 current

-rw-r--r-- 1 root root    0 Jun 10 23:26 install.log



:/var/lib/slackpkg# SLACKPKGPLUS=off slackpkg update 



Updating the package lists...

        Downloading...

                        Linking /home/slackware/slackware64-current/CHECKSUMS.md5.asc...

Files //var/lib/slackpkg/CHECKSUMS.md5.asc and /tmp/slackpkg.Ed9m2y/CHECKSUMS.md5.asc differ



        Downloading...

                        Linking /home/slackware/slackware64-current/ChangeLog.txt...

                List of all files

                        Linking /home/slackware/slackware64-current/patches/MANIFEST.bz2...

                        Linking /home/slackware/slackware64-current/testing/MANIFEST.bz2...

                        Linking /home/slackware/slackware64-current/slackware64/MANIFEST.bz2...

                        Linking /home/slackware/slackware64-current/extra/MANIFEST.bz2...

                        Linking /home/slackware/slackware64-current/pasture/MANIFEST.bz2...

                Checksums

                        Linking /home/slackware/slackware64-current/CHECKSUMS.md5...

                        Linking /home/slackware/slackware64-current/CHECKSUMS.md5.asc...

                Package List

                        Linking /home/slackware/slackware64-current/FILELIST.TXT...

                Package descriptions

                        Linking /home/slackware/slackware64-current/patches/PACKAGES.TXT...

                        Linking /home/slackware/slackware64-current/testing/PACKAGES.TXT...

                        Linking /home/slackware/slackware64-current/slackware64/PACKAGES.TXT...

                        Linking /home/slackware/slackware64-current/extra/PACKAGES.TXT...

        Formatting lists to slackpkg style...

                Package List: using CHECKSUMS.md5 as source

                Package descriptions



:/var/lib/slackpkg# ls -l

total 6616

-rw-r--r-- 1 root root 1075278 Jun 10 23:34 CHECKSUMS.md5

-rw-r--r-- 1 root root    163 Jun 10 23:34 CHECKSUMS.md5.asc

-rw-r--r-- 1 root root 1522690 Jun 10 23:34 ChangeLog.txt

-rw-r--r-- 1 root root      11 Jun 10 23:34 LASTUPDATE

-rw-r--r-- 1 root root  885715 Jun 10 23:34 PACKAGES.TXT

drwxr-xr-x 2 root root    4096 Jun 10 23:26 cache/

-rw-r--r-- 1 root root      0 Jun 10 23:26 current

-rw-r--r-- 1 root root  22355 Jun 10 23:34 extra-filelist.gz

-rw-r--r-- 1 root root      0 Jun 10 23:26 install.log

-rw-r--r-- 1 root root      21 Jun 10 23:34 patches-filelist.gz

-rw-r--r-- 1 root root  141534 Jun 10 23:34 pkglist

-rw-r--r-- 1 root root 3096453 Jun 10 23:34 slackware64-filelist.gz

-rw-r--r-- 1 root root      21 Jun 10 23:34 testing-filelist.gz

root@racermach:/var/lib/slackpkg# slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added

NOTE: With my restored /var/lib/slackpkg directory I can still use slackpkg with slackpkg+ with no issues aside from using 'slackpkg update gpg' which produces this output.

Code:

root@racermach:~# slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY

                        Slackware Linux Project's GPG key added

This is the listing of /var/lib/slackpkg/ as restored.

Code:

:/var/lib/slackpkg# ls -l

total 9752

-rw-r--r-- 1 root root 1650054 Jun 10 23:38 CHECKSUMS.md5

-rw-r--r-- 1 root root    469 Jun 10 23:38 CHECKSUMS.md5.asc

-rw-r--r-- 1 root root 1522690 Jun 10 23:38 ChangeLog.txt

drwxr-xr-x 2 root root    4096 Jun 10 23:38 ChangeLogs/

-rw-r--r-- 1 root root 1445085 Jun 10 23:38 PACKAGES.TXT

-rw-r--r-- 1 root root 1583791 Jun 10 23:38 SLACKPKGPLUS_alienbob-filelist.gz

-rw-r--r-- 1 root root      21 Jun 10 23:38 SLACKPKGPLUS_justpkgs-filelist.gz

-rw-r--r-- 1 root root  161005 Jun 10 23:38 SLACKPKGPLUS_multilib-filelist.gz

-rw-r--r-- 1 root root  152274 Jun 10 23:38 SLACKPKGPLUS_nonslack-filelist.gz

-rw-r--r-- 1 root root  22246 Jun 10 23:38 SLACKPKGPLUS_restricted-filelist.gz

-rw-r--r-- 1 root root      21 Jun 10 23:38 SLACKPKGPLUS_slackpkgbeta-filelist.gz

-rw-r--r-- 1 root root    324 Jun 10 23:38 SLACKPKGPLUS_slackpkgplus-filelist.gz

drwxr-xr-x 2 root root    4096 May 29 00:25 cache/

-rw-r--r-- 1 root root      0 May 29 00:24 current

-rw-r--r-- 1 root root  22355 Jun 10 23:38 extra-filelist.gz

drwxr-xr-x 2 root root    4096 May 29 00:25 gpg/

-rw-r--r-- 1 root root  17001 Jun 10 22:09 install.log

-rw-r--r-- 1 root root      21 Jun 10 23:38 patches-filelist.gz

-rw-r--r-- 1 root root  255871 Jun 10 23:38 pkglist

-rw-r--r-- 1 root root 3096453 Jun 10 23:38 slackware64-filelist.gz

-rw-r--r-- 1 root root      21 Jun 10 23:38 testing-filelist.gz