FFFF Are sig files properly downloaded ? · Issue #126 · anatol/pacoloco · GitHub
[go: up one dir, main page]

Skip to content

Are sig files properly downloaded ? #126

Open

Description

@fredleb

I don't see a clear problem but I am a bit surprised when looking at the files in the cache directory:

/var/cache/pacoloco/pkgs/archlinux # ls -al
total 538528
drwxr-xr-x    1 root     root           570 Jun  6 15:11 .
drwxr-xr-x    1 root     root            18 Jun  6 14:07 ..
-rw-r--r--    1 root     root     111288320 Jun  6 15:12 .libreoffice-fresh-25.2.4-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root     110436352 Jun  6 15:12 .linux-6.14.10.arch1-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root     112795648 Jun  6 15:12 .linux-firmware-20250508.788aadc8-2-any.pkg.tar.zst
-rw-r--r--    1 root     root     108765184 Jun  6 15:12 .signal-desktop-7.56.1-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root        119231 Jun  6 14:09 core.db
-rw-r--r--    1 root     root        119231 Jun  6 14:09 core.db.sig
-rw-r--r--    1 root     root       8158964 Jun  6 14:38 extra.db
-rw-r--r--    1 root     root       8158964 Jun  6 14:38 extra.db.sig
-rw-r--r--    1 root     root        137226 Jun  6 12:40 multilib.db
-rw-r--r--    1 root     root        137226 Jun  6 12:40 multilib.db.sig
-rw-r--r--    1 root     root      91321331 Jun  3 10:59 qt6-webengine-6.9.1-1-x86_64.pkg.tar.zst
/var/cache/pacoloco/pkgs/archlinux # diff core.db core.db.sig 
/var/cache/pacoloco/pkgs/archlinux # 

It seems the file core.db and core.db.sig are exactly the same... is that wanted ???

It seems to affect only the repo files though

/var/cache/pacoloco/pkgs/archlinux # ls -al
total 808488
drwxr-xr-x    1 root     root          1424 Jun  6 15:24 .
drwxr-xr-x    1 root     root            18 Jun  6 14:07 ..
-rw-r--r--    1 root     root       4194304 Jun  6 15:24 .dbeaver-25.1.0-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root       4194304 Jun  6 15:24 .electron34-34.5.8-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root       2531328 Jun  6 15:24 .gradle-8.14.2-1-any.pkg.tar.zst
-rw-r--r--    1 root     root       1769472 Jun  6 15:24 .jdk-openjdk-24.0.1.u9-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root      11042816 Jun  6 15:24 .nvidia-utils-575.57.08-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root        119231 Jun  6 14:09 core.db
-rw-r--r--    1 root     root        119231 Jun  6 14:09 core.db.sig
-rw-r--r--    1 root     root       8158964 Jun  6 14:38 extra.db
-rw-r--r--    1 root     root       8158964 Jun  6 14:38 extra.db.sig
-rw-r--r--    1 root     root     150334569 Jun  6 13:50 libreoffice-fresh-25.2.4-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root           310 Jun  6 13:50 libreoffice-fresh-25.2.4-1-x86_64.pkg.tar.zst.sig
-rw-r--r--    1 root     root     146012018 Jun  4 19:44 linux-6.14.10.arch1-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root           119 Jun  4 19:44 linux-6.14.10.arch1-1-x86_64.pkg.tar.zst.sig
-rw-r--r--    1 root     root     287519592 May 22 18:12 linux-firmware-20250508.788aadc8-2-any.pkg.tar.zst
-rw-r--r--    1 root     root           310 May 22 18:12 linux-firmware-20250508.788aadc8-2-any.pkg.tar.zst.sig
-rw-r--r--    1 root     root        137226 Jun  6 12:40 multilib.db
-rw-r--r--    1 root     root        137226 Jun  6 12:40 multilib.db.sig
-rw-r--r--    1 root     root      91321331 Jun  3 10:59 qt6-webengine-6.9.1-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root           310 Jun  3 10:59 qt6-webengine-6.9.1-1-x86_64.pkg.tar.zst.sig
-rw-r--r--    1 root     root     112098394 Jun  5 12:47 signal-desktop-7.56.1-1-x86_64.pkg.tar.zst
-rw-r--r--    1 root     root           566 Jun  5 12:47 signal-desktop-7.56.1-1-x86_64.pkg.tar.zst.sig
/var/cache/pacoloco/pkgs/archlinux # 

Activity

  1. mbleichner commented on Jun 10, 2025

    @mbleichner

    Looks like this is known/intentional:

    pacoloco/downloader.go

    Lines 78 to 79 in 0c82591

    // Archlinux dbs are not signed as of Nov 2024
    // https://wiki.archlinux.org/title/DeveloperWiki:Repo_DB_Signing

  2. mbleichner commented on Jun 10, 2025

    @mbleichner

    As a heads up: pacoloco seems to be a bit flaky when it comes to syncing database files. During setup, I ran into a lot of weird, non-reproducible GPG related problems.

    It seems to be a lot more stable if I set it up as a CacheServer (instead of Server) in my pacman.conf, like this:

    [core]
    CacheServer = http://my.pacoloco.server/repo/archlinux/$repo/os/$arch
    Include = /etc/pacman.d/mirrorlist
    

    This avoids mirroring database files altogether.

    CacheServer = url
    A full URL to a location where the packages, and signatures (if available) for this repository can be found. Cache servers will be tried before any non-cache servers, will not be removed from the server pool for 404 download errors, and will not be used for database files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      0