Solved Curl (I think) holding back brotli security upgrade

K

kjpetrie

On my machines with curl installed the brotli upgrade is not happening automatically. I can force it using
pkg install brotli-1.2.1,1 but should I or am I likely to break curl?
 
SirDice said:
Did you pkg-lock(8) something?

What does pkg version -vRL= show?
Click to expand...
I tried unlocking. It wasn't locked. I haven't locked anything.

The output of pkg version -vRL= (after the usual information) is:
Code: 
brotli-1.2.1,1                     >   succeeds remote (remote has 1.2.0,1)

I'm using 15.1-RELEASE-p6 with packages built by ports-mgmt/poudriere.

As you can see, I have forced the upgrade and I just hope I haven't broken anything by doing so.
 
If you get everything from a local repository, disable the FreeBSD repositories. The package resolver has a bit of an issue if there's multiple versions of the same package in different repositories. It tends to get confused.
 
I disabled the FreeBSD repository (in /usr/local/etc/pkg/repos) when I built my local one and I've just checked it again to be sure, but it appears pkg might still be looking at the official one to check available versions. Should I edit the more complex /etc/pkg/FreeBSD.conf as well?
 
kjpetrie said:
I disabled the FreeBSD repository
Click to expand...
Did you perhaps use the 'old' repository names? It used to be FreeBSD and FreeBSD-kmods, this changed to FreeBSD-ports and FreeBSD-ports-kmods from 15.0 onward.

kjpetrie said:
it appears pkg might still be looking at the official one to check available versions.
Click to expand...
What does pkg repos show?

kjpetrie said:
Should I edit the more complex /etc/pkg/FreeBSD.conf as well?
Click to expand...
No, never edit that file.
 
Code: 
# pkg repos
FreeBSD-ports: {
    url             : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/quarterly",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkg"
  }
FreeBSD-ports-kmods: {
    url             : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/kmods_quarterly_1",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkg"
  }
FreeBSD-base: {
    url             : "pkg+https://pkg.FreeBSD.org/FreeBSD:15:amd64/base_release_1",
    enabled         : no,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkgbase-15"
  }
custom: {
    url             : "http://10.0.2.161/15amd64-local-kjpservers",
    enabled         : yes,
    priority        : 0,
    signature_type  : "NONE"
  }

That's interesting. It suggests FreeBSD.conf is not disabled but I have:
Code: 
]# cat /usr/local/etc/pkg/repos/FreeBSD.conf
FreeBSD: {
        enabled: no
}

Should I change that to:
Code: 
FreeBSD-ports: {
        enabled: no
}
FreeBSD-ports-kmods: {
        enabled: no
}
then?
 
You must log in or register to reply here.
Back
Top