[arch-haskell] Database Signatures

[Magnus Therning]

On Mon, Jan 28, 2013 at 9:56 PM, Xyne <xyne at archlinux.ca> wrote:
> Hi Magnus,
>
> How are you generating database signatures? I regularly have to issue "pacman
> -Syyu" to force Pacman to download newer signature files. In general, the
> signature should be generated and uploaded at the same time as the database to
> avoid the invalid signature error. It is admittedly a bug that Pacman fails to
> check for newer signatures but it is avoidable.

I use the '--sign' argument to tell `repo-add` to sign the database as
I add packages.

I've seen this myself, ever.  Which repo are you using?  If you use
the xsounds repo then there could be an issue with the rsync'ing.

> Was the repo-add_and_sign script that I wrote not useful? That should
> completely avoid all mismatched signature errors in the repo.

I'm not using it, no.  I don't remember why, it might just have been
that I wanted to understand how pacman works with signing for myself
first.  At the moment I have two short scripts, one for signing the
packages and one for adding packages to the database.

/M

-- 
Magnus Therning                      OpenPGP: 0xAB4DFBA4
email: magnus at therning.org   jabber: magnus at therning.org
twitter: magthe               http://therning.org/magnus