David Cross @david@mastodon.crossfamilyweb.com

Shamelessly stolen from somewhere

@dvl Ok, and in a contender for 'wow that was a long reply'.. I finally got around to this, I repro-ed it, and solved it. In the Latest directory there is a pkg.pkg.pubkeysig, what pkg (for me) looked for was pkg.txz.pubkeysig, I just linked that and :boom: bob's your uncle. You may need pkg.tgz.pubkeysig or pkg.tbz.pubkeysig depending on your poudriere configuration

@lattera Wooooah

@thomasfuchs @mwlucas omg. Yes. The memories!!!

@lattera well, that’s when it should be used!

@phryk on ios15 with the ios link it took me to the app store (after a very quick redirect through safari)

@mwlucas it is kinda big iron, and they had that recentish security kerfluffle but I
use and enjoy ubiquiti products

@lattera 20 _T_?!?!?!

@dvl i do this via local directories so far (keep meaning to setup a webserver for this). It is very annoying that (apparently) pkg has different behavior for local vs http repos. Let me experiment 🤔

@dvl so I do my local pkg repo setup via poudriere, one thing I note is that pkg is 'special', it is in "Latest" directory AND in the "All" directory, in the Latest directory it has its own individual signature, whereas the "All" directory is signed all at once with a signature that encompasses the ENTIRE repo together via their hashes; if you look in the Latest directory of your repo, do you have pkg there? is there a signature file next to it?

@dvl I have my own pkg bootstrap with local signed repos, is this a very recent bug?