Copyright (c) 2008, 2009 The NetBSD Foundation, Inc.
All rights reserved.
This code is derived from software contributed to The NetBSD Foundation
by Thomas Klausner.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
.Dd January 8, 2009 .Dt PKG_INSTALL.CONF 5 .Os .Sh NAME .Nm pkg_install.conf .Nd configuration file for package installation tools .Sh DESCRIPTION The file .Nm contains system defaults for the package installation tools as a list of variable-value pairs. Each line has the format .Ev VARIABLE=VALUE . If the value consists of more than one line, each line is prefixed with .Ev VARIABLE= .
p The current value of a variable can be checked by running .Dl Ic pkg_admin config-var VARIABLE
p The following variables are supported: l -tag -width indent t Dv ACTIVE_FTP Force the use of active FTP. t Dv CERTIFICATE_ANCHOR_PKGS Path to the file containing the certificates used for validating binary packages. A package is trusted when a certificate chain ends in one of the certificates contained in this file. The certificates must be PEM-encoded. t Dv CERTIFICATE_ANCHOR_PKGVULN Analogous to .Dv CERTIFICATE_ANCHOR_PKGS . The
a pkg-vulnerabilities is trusted when a certificate chain ends in one of the certificates contained in this file. t Dv CERTIFICATE_CHAIN Path to a file containing additional certificates that can be used for completing certificate chains when validating binary packages or pkg-vulnerabilities files. t Dv CHECK_VULNERABILITIES Check for vulnerabilities when installing packages. Supported values are: l -tag -width interactiveXX t Dv never No check is performed. t Dv always Passing the vulnerability check is required. A missing pkg-vulnerabilities file is considered an error. t Dv interactive The user is always asked to confirm installation of vulnerable packages. .El t Dv GPG Path to .Xr gpg 1 , which can be used to verify the signature in the
a pkg-vulnerabilities file when running .Dl Ic pkg_admin check-pkg-vulnerabilities -s or .Dl Ic pkg_admin fetch-pkg-vulnerabilities -s It can also be used to verify and sign binary packages. t Dv GPG_KEYRING_PKGVULN Non-default keyring to use for verifying GPG signatures of
a pkg-vulnerabilities . t Dv GPG_KEYRING_SIGN Non-default keyring to use for signing packages with GPG. t Dv GPG_KEYRING_VERIFY Non-default keyring to use for verifying GPG signature of packages. t Dv GPG_SIGN_AS User-id to use for signing packages. t Dv IGNORE_PROXY Use direct connections and ignore .Ev FTP_PROXY and .Ev HTTP_PROXY . t Dv IGNORE_URL One line per advisory which should be ignored when running .Dl Ic pkg_admin audit The URL from the
a pkg-vulnerabilities file should be used as value. t Dv PKGVULNDIR Directory name in which the
a pkg-vulnerabilities file resides. Default is
a ${PKG_DBDIR} . t Dv PKGVULNURL URL which is used for updating the local
a pkg-vulnerabilities file when running .Dl Ic pkg_admin fetch-pkg-vulnerabilities The default is
a ftp://ftp.NetBSD.org/pub/NetBSD/packages/vulns/pkg-vulnerabilities.gz .Em Note : Usually, only the compression type should be changed. Currently supported are uncompressed files and files compressed by .Xr bzip2 1
q Pa .bz2 or .Xr gzip 1
q Pa .gz . t Dv VERBOSE_NETIO Log details of network IO to stderr. t Dv VERIFIED_INSTALLATION Set trust level used when installation. Supported values are: l -tag -width interactiveXX t Dv never No signature checks are performed. t Dv always A valid signature is required. If the binary package can not be verified, the installation is terminated t Dv trusted A valid signature is required. If the binary package can not be verified, the user is asked interactively. t Dv interactive The user is always asked interactively when installing a package. .El .El .Sh FILES l -tag t Pa @SYSCONFDIR@/pkg_install.conf Default location for the file described in this manual page. .El .Sh SEE ALSO .Xr pkg_add 1 , .Xr pkg_admin 1