[solved] package verification, some packages unverified

Question

Some of my packages seem to not be validated, they say
Validated By : Unknown
but after reinstall
Validated By : Signature
Some also say validated by md5 and sha, any idea about this inconsistency?
sudo pacman -Qi zsh
Name : zsh
Version : 5.0.2-1
Description : A very advanced and programmable command interpreter (shell) for UNIX
Architecture : x86_64
URL : http://www.zsh.org/
Licenses : custom
Groups : None
Provides : None
Depends On : pcre libcap gdbm
Optional Deps : None
Required By : None
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 7216.00 KiB
Packager : Pierre Schmitz <[email protected]>
Build Date : Sat 22 Dec 2012 01:19:52 SAST
Install Date : Tue 25 Dec 2012 11:40:48 SAST
Install Reason : Explicitly installed
Install Script : Yes
Validated By : Unknown
I then ran,
sudo pacman -S zsh
so:
sudo pacman -Qi zsh
Name : zsh
Version : 5.0.2-1
Description : A very advanced and programmable command interpreter (shell) for UNIX
Architecture : x86_64
URL : http://www.zsh.org/
Licenses : custom
Groups : None
Provides : None
Depends On : pcre libcap gdbm
Optional Deps : None
Required By : None
Optional For : None
Conflicts With : None
Replaces : None
Installed Size : 7216.00 KiB
Packager : Pierre Schmitz <[email protected]>
Build Date : Sat 22 Dec 2012 01:19:52 SAST
Install Date : Thu 30 May 2013 12:32:08 SAST
Install Reason : Explicitly installed
Install Script : Yes
Validated By : Signature
Is this because of the pacman upgrade to 4.1 earlier?
pacman.conf:
admin@russell-server ~ % cat /etc/pacman.conf
# /etc/pacman.conf
# See the pacman.conf(5) manpage for option and repository directives
# GENERAL OPTIONS
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir = /
#DBPath = /var/lib/pacman/
#CacheDir = /var/cache/pacman/pkg/
#LogFile = /var/log/pacman.log
#GPGDir = /etc/pacman.d/gnupg/
HoldPkg = pacman glibc
#XferCommand = /usr/bin/curl -C - -f %u > %o
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
#UseDelta = 0.7
Architecture = auto
# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg =
#IgnoreGroup =
#NoUpgrade =
#NoExtract =
# Misc options
#UseSyslog
Color
#TotalDownload
CheckSpace
#VerbosePkgLists
# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required
# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.
# REPOSITORIES
# - can be defined here or included from another file
# - pacman will search repositories in the order defined here
# - local/custom mirrors can be added here or in separate files
# - repositories listed first will take precedence when packages
# have identical names, regardless of version number
# - URLs will have $repo replaced by the name of the current repo
# - URLs will have $arch replaced by the name of the architecture
# Repository entries are of the format:
# [repo-name]
# Server = ServerName
# Include = IncludePath
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.
#[testing]
#Include = /etc/pacman.d/mirrorlist
[core]
Include = /etc/pacman.d/mirrorlist
[extra]
Include = /etc/pacman.d/mirrorlist
#[community-testing]
#Include = /etc/pacman.d/mirrorlist
[community]
Include = /etc/pacman.d/mirrorlist
# If you want to run 32 bit applications on your x86_64 system,
# enable the multilib repositories as required here.
#[multilib-testing]
#Include = /etc/pacman.d/mirrorlist
[multilib]
Include = /etc/pacman.d/mirrorlist
# An example of a custom package repository. See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs
*Edit, sorry
"validated by md5 and sha" as I said above came from running
pacman -Si package
as apposed to -Qi
I got confused
Last edited by jrussell (2013-05-30 10:43:17)

Answer 1

Allan wrote:Packages installed with pacman-4.0 or earlier will not have their method of verification recorded.   That was added in pacman-4.1.   So "Unknown" means just that.  "None" is installation without checking signature or checksum.
Cool, thank you!
I got around this with
comm -23 <(pacman -Qeq|sort) <(pacman -Qmq|sort) | pacman -S -
from https://wiki.archlinux.org/index.php/Pa … d_packages
Last edited by jrussell (2013-05-30 10:46:11)