summaryrefslogtreecommitdiff
path: root/pkgtools/pkg_install/files/lib/pkg_install.conf.cat5
blob: e720f985e55c76fb12c86c035e25e89b40e33718 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
PKG_INSTALL.CONF(5)       NetBSD File Formats Manual       PKG_INSTALL.CONF(5)

NNAAMMEE
     ppkkgg__iinnssttaallll..ccoonnff -- configuration file for package installation tools

DDEESSCCRRIIPPTTIIOONN
     The file ppkkgg__iinnssttaallll..ccoonnff contains system defaults for the package
     installation tools as a list of variable-value pairs.  Each line has the
     format VARIABLE=VALUE.  If the value consists of more than one line, each
     line is prefixed with VARIABLE=.

     The current value of a variable can be checked by running
           ppkkgg__aaddmmiinn ccoonnffiigg--vvaarr VVAARRIIAABBLLEE

     The following variables are supported:

     ACTIVE_FTP
             Force the use of active FTP.

     CERTIFICATE_ANCHOR_PKGS
             Path to the file containing the certificates used for validating
             binary packages.  A package is trusted when a certificate chain
             ends in one of the certificates contained in this file.  The cer-
             tificates must be PEM-encoded.

     CERTIFICATE_ANCHOR_PKGVULN
             Analogous to CERTIFICATE_ANCHOR_PKGS.  The _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s is
             trusted when a certificate chain ends in one of the certificates
             contained in this file.

     CERTIFICATE_CHAIN
             Path to a file containing additional certificates that can be
             used for completing certicate chains when validating binary pack-
             ages or pkg-vulnerabilities files.  CHECK_VULNERABILITIES Check
             for vulnerabilities when installing packages.  Supported values
             are:

             never          No check is performed.

             always         Passing the vulnerability check is required.  A
                            missing pkg-vulnerabilities file is considered an
                            error.

             interactive    The user is always asked to confirm installation
                            of vulnerable packages.

     GPG     Deprecated.  Path to gpg(1), which can be used to verify the sig-
             nature in the _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file when running
                   ppkkgg__aaddmmiinn cchheecckk--ppkkgg--vvuullnneerraabbiilliittiieess --ss
             or
                   ppkkgg__aaddmmiinn ffeettcchh--ppkkgg--vvuullnneerraabbiilliittiieess --ss

     IGNORE_PROXY
             Use direct connections and ignore FTP_PROXY and HTTP_PROXY.

     IGNORE_URL
             One line per advisory which should be ignored when running
                   ppkkgg__aaddmmiinn aauuddiitt
             The URL from the _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file should be used as
             value.

     PKGVULNDIR
             Directory name in which the _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file resides.
             Default is _$_{_P_K_G___D_B_D_I_R_}.

     PKGVULNURL
             URL which is used for updating the local _p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s file
             when running
                   ppkkgg__aaddmmiinn ffeettcchh--ppkkgg--vvuullnneerraabbiilliittiieess
             The default is
             _f_t_p_:_/_/_f_t_p_._N_e_t_B_S_D_._o_r_g_/_p_u_b_/_N_e_t_B_S_D_/_p_a_c_k_a_g_e_s_/_v_u_l_n_s_/_p_k_g_-_v_u_l_n_e_r_a_b_i_l_i_t_i_e_s_._g_z
             _N_o_t_e: Usually, only the compression type should be changed.  Cur-
             rently supported are uncompressed files and files compressed by
             bzip2(1) (_._b_z_2) or gzip(1) (_._g_z).

     VERBOSE_NETIO
             Log details of network IO to stderr.

     VERIFIED_INSTALLATION
             Set trust level used when installation.  Supported values are:

             never          No signature checks are performed.

             always         A valid signature is required.  If the binary
                            package can not be verified, the installation is
                            terminated

             trusted        A valid signature is required.  If the binary
                            package can not be verified, the user is asked
                            interactively.

             interactive    The user is always asked interactively when
                            installing a package.

FFIILLEESS
     @SYSCONFDIR@/pkg_install.conf     Default location for the file described
                                       in this manual page.

SSEEEE AALLSSOO
     pkg_add(1), pkg_admin(1)

NetBSD 5.0                      January 8, 2009                     NetBSD 5.0