openpkg/release.8

Mon, 20 Apr 2009 19:22:00 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Mon, 20 Apr 2009 19:22:00 +0200
changeset 178
0ba300bdf30a
child 428
f880f219c566
permissions
-rw-r--r--

Change unfortunate but partly useful overreaching security tradeoff.
The principle of allocating each running process an individual system
user and group can have security benefits, however maintining a plethora
of users, groups, processes, file modes, file permissions, and even
nonportable file ACLs on a host serving from a hundred processes has
some security disadvantages. This tradeoff is even worse for systems
like OpenPKG which benefit from administration transparency through the
use of minimal system intrusion and only three usage privilege levels.

michael@13 1 .\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.32
michael@13 2 .\"
michael@13 3 .\" Standard preamble:
michael@13 4 .\" ========================================================================
michael@13 5 .de Sh \" Subsection heading
michael@13 6 .br
michael@13 7 .if t .Sp
michael@13 8 .ne 5
michael@13 9 .PP
michael@13 10 \fB\\$1\fR
michael@13 11 .PP
michael@13 12 ..
michael@13 13 .de Sp \" Vertical space (when we can't use .PP)
michael@13 14 .if t .sp .5v
michael@13 15 .if n .sp
michael@13 16 ..
michael@13 17 .de Vb \" Begin verbatim text
michael@13 18 .ft CW
michael@13 19 .nf
michael@13 20 .ne \\$1
michael@13 21 ..
michael@13 22 .de Ve \" End verbatim text
michael@13 23 .ft R
michael@13 24 .fi
michael@13 25 ..
michael@13 26 .\" Set up some character translations and predefined strings. \*(-- will
michael@13 27 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
michael@13 28 .\" double quote, and \*(R" will give a right double quote. | will give a
michael@13 29 .\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used to
michael@13 30 .\" do unbreakable dashes and therefore won't be available. \*(C` and \*(C'
michael@13 31 .\" expand to `' in nroff, nothing in troff, for use with C<>.
michael@13 32 .tr \(*W-|\(bv\*(Tr
michael@13 33 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
michael@13 34 .ie n \{\
michael@13 35 . ds -- \(*W-
michael@13 36 . ds PI pi
michael@13 37 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
michael@13 38 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
michael@13 39 . ds L" ""
michael@13 40 . ds R" ""
michael@13 41 . ds C`
michael@13 42 . ds C'
michael@13 43 'br\}
michael@13 44 .el\{\
michael@13 45 . ds -- \|\(em\|
michael@13 46 . ds PI \(*p
michael@13 47 . ds L" ``
michael@13 48 . ds R" ''
michael@13 49 'br\}
michael@13 50 .\"
michael@13 51 .\" If the F register is turned on, we'll generate index entries on stderr for
michael@13 52 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
michael@13 53 .\" entries marked with X<> in POD. Of course, you'll have to process the
michael@13 54 .\" output yourself in some meaningful fashion.
michael@13 55 .if \nF \{\
michael@13 56 . de IX
michael@13 57 . tm Index:\\$1\t\\n%\t"\\$2"
michael@13 58 ..
michael@13 59 . nr % 0
michael@13 60 . rr F
michael@13 61 .\}
michael@13 62 .\"
michael@13 63 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
michael@13 64 .\" way too many mistakes in technical documents.
michael@13 65 .hy 0
michael@13 66 .if n .na
michael@13 67 .\"
michael@13 68 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
michael@13 69 .\" Fear. Run. Save yourself. No user-serviceable parts.
michael@13 70 . \" fudge factors for nroff and troff
michael@13 71 .if n \{\
michael@13 72 . ds #H 0
michael@13 73 . ds #V .8m
michael@13 74 . ds #F .3m
michael@13 75 . ds #[ \f1
michael@13 76 . ds #] \fP
michael@13 77 .\}
michael@13 78 .if t \{\
michael@13 79 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
michael@13 80 . ds #V .6m
michael@13 81 . ds #F 0
michael@13 82 . ds #[ \&
michael@13 83 . ds #] \&
michael@13 84 .\}
michael@13 85 . \" simple accents for nroff and troff
michael@13 86 .if n \{\
michael@13 87 . ds ' \&
michael@13 88 . ds ` \&
michael@13 89 . ds ^ \&
michael@13 90 . ds , \&
michael@13 91 . ds ~ ~
michael@13 92 . ds /
michael@13 93 .\}
michael@13 94 .if t \{\
michael@13 95 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
michael@13 96 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
michael@13 97 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
michael@13 98 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
michael@13 99 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
michael@13 100 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
michael@13 101 .\}
michael@13 102 . \" troff and (daisy-wheel) nroff accents
michael@13 103 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
michael@13 104 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
michael@13 105 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
michael@13 106 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
michael@13 107 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
michael@13 108 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
michael@13 109 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
michael@13 110 .ds ae a\h'-(\w'a'u*4/10)'e
michael@13 111 .ds Ae A\h'-(\w'A'u*4/10)'E
michael@13 112 . \" corrections for vroff
michael@13 113 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
michael@13 114 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
michael@13 115 . \" for low resolution devices (crt and lpr)
michael@13 116 .if \n(.H>23 .if \n(.V>19 \
michael@13 117 \{\
michael@13 118 . ds : e
michael@13 119 . ds 8 ss
michael@13 120 . ds o a
michael@13 121 . ds d- d\h'-1'\(ga
michael@13 122 . ds D- D\h'-1'\(hy
michael@13 123 . ds th \o'bp'
michael@13 124 . ds Th \o'LP'
michael@13 125 . ds ae ae
michael@13 126 . ds Ae AE
michael@13 127 .\}
michael@13 128 .rm #[ #] #H #V #F C
michael@13 129 .\" ========================================================================
michael@13 130 .\"
michael@13 131 .IX Title "RELEASE 8"
michael@13 132 .TH RELEASE 8 "OpenPKG" "RELEASE(8)" "OpenPKG"
michael@13 133 .SH "NAME"
michael@13 134 \&\fBopenpkg release\fR \- OpenPKG Release Utility
michael@13 135 .SH "SYNOPSIS"
michael@13 136 .IX Header "SYNOPSIS"
michael@13 137 \&\fBopenpkg release\fR [\fB\-F\fR|\fB\-\-fmt\fR \fIformat\fR]
michael@13 138 .SH "DESCRIPTION"
michael@13 139 .IX Header "DESCRIPTION"
michael@13 140 The \fBopenpkg release\fR command displays the OpenPKG release tag and
michael@13 141 distribution \s-1URL\s0. The release tag uniquely identifies an OpenPKG
michael@13 142 distribution and the distribution \s-1URL\s0 is the location where the
michael@13 143 distribution packages and indices are stored.
michael@13 144 .SH "OPTIONS"
michael@13 145 .IX Header "OPTIONS"
michael@13 146 .IP "\fB\-F\fR, \fB\-\-fmt\fR \fIformat\fR" 4
michael@13 147 .IX Item "-F, --fmt format"
michael@13 148 The output format specification. The argument \fIformat\fR is an arbitrary
michael@13 149 string which can contain the special expansion constructs "\f(CW%t\fR\*(L" for
michael@13 150 expanding the release tag, \*(R"\f(CW%u\fR\*(L" for expanding the distribution \s-1URL\s0
michael@13 151 and \*(R"\f(CW\*(C`\en\*(C'\fR" for expanding an embedded newline character.
michael@13 152 The instance \s-1UUID\s0 information is also availble by expanding
michael@13 153 \&\f(CW%r\fR to \s-1UUID_REGISTRY\s0, \f(CW%i\fR to \s-1UUID_INSTANCE\s0, \f(CW%p\fR to \s-1UUID_PLATFORM\s0.
michael@13 154 The default \fIformat\fR is "\f(CW\*(C`OpenPKG\-%t %u\*(C'\fR".
michael@13 155 .IP "\fB\-r\fR, \fB\-\-release\fR \fIrelease\fR" 4
michael@13 156 .IX Item "-r, --release release"
michael@13 157 The package "\f(CW\*(C`Release\*(C'\fR" header value to use for deriving the release
michael@13 158 tag. The values in the \fI@l_prefix@/etc/openpkg/release\fR file and the
michael@13 159 "\f(CW\*(C`Release\*(C'\fR" header of the bootstrap package \fBopenpkg\fR are ignored if
michael@13 160 this option is used.
michael@13 161 .SH "FILES"
michael@13 162 .IX Header "FILES"
michael@13 163 .IP "\fI@l_prefix@/etc/openpkg/release\fR" 4
michael@13 164 .IX Item "@l_prefix@/etc/openpkg/release"
michael@13 165 This optional configuration file can be used to explicitly set values
michael@13 166 for the OpenPKG release tag and distribution URLs. It consists of lines
michael@13 167 with variable name/value pairs. The following configuration variables
michael@13 168 are recognized:
michael@13 169 .RS 4
michael@13 170 .IP "\fBTAG=\fR\fItag\fR" 4
michael@13 171 .IX Item "TAG=tag"
michael@13 172 The default \fItag\fR is automatically derived from the "\f(CW\*(C`Version\*(C'\fR" header
michael@13 173 of the OpenPKG bootstrap package \fBopenpkg\fR. One usually only sets this
michael@13 174 explicitly to a value if a bootstrap package is used from a foreign
michael@13 175 distribution version.
michael@13 176 .IP "\fBURL=\fR\fIurl\fR" 4
michael@13 177 .IX Item "URL=url"
michael@13 178 The fully-qualified distribution \s-1URL\s0 based on either the "\f(CW\*(C`ftp\*(C'\fR\*(L",
michael@13 179 \&\*(R"\f(CW\*(C`http\*(C'\fR\*(L" or \*(R"\f(CW\*(C`file\*(C'\fR" \s-1URL\s0 schemes. If \fIurl\fR contains a trailing
michael@13 180 "\f(CW\*(C`/*\*(C'\fR", this is expanded according to the \fItag\fR value of the \fB\s-1TAG\s0\fR
michael@13 181 variable and the corresponding filesystem layout on \f(CW\*(C`ftp.openpkg.org\*(C'\fR.
michael@13 182 The default \fIurl\fR is "\f(CW\*(C`ftp://ftp.openpkg.org/*\*(C'\fR".
michael@13 183 .RS 4
michael@13 184 .RE
michael@13 185 .RS 4
michael@13 186 .SH "EXAMPLE"
michael@13 187 .IX Header "EXAMPLE"
michael@13 188 .Vb 2
michael@13 189 \& $ openpkg release
michael@13 190 \& OpenPKG-CURRENT ftp://ftp.openpkg.org/current/SRC/
michael@13 191 .Ve
michael@13 192 .Sp
michael@13 193 .Vb 2
michael@13 194 \& $ openpkg release --fmt=%t
michael@13 195 \& CURRENT
michael@13 196 .Ve
michael@13 197 .Sp
michael@13 198 .Vb 2
michael@13 199 \& $ openpkg release --fmt=%u
michael@13 200 \& ftp://ftp.openpkg.org/current/SRC/
michael@13 201 .Ve
michael@13 202 .Sp
michael@13 203 .Vb 3
michael@13 204 \& $ openpkg release --fmt="OpenPKG %t is located at:\e\en%u"
michael@13 205 \& OpenPKG CURRENT is located at:
michael@13 206 \& ftp://ftp.openpkg.org/current/SRC/
michael@13 207 .Ve
michael@13 208 .Sp
michael@13 209 .Vb 2
michael@13 210 \& $ openpkg release --release=2.5.4 --fmt=%t
michael@13 211 \& 2.5-RELEASE
michael@13 212 .Ve
michael@13 213 .Sp
michael@13 214 .Vb 3
michael@13 215 \& $ cat /openpkg/etc/openpkg/release
michael@13 216 \& TAG=2-STABLE-20060622
michael@13 217 \& URL=ftp://ftp.example.com/mirror/openpkg.org/*
michael@13 218 .Ve
michael@13 219 .SH "SEE ALSO"
michael@13 220 .IX Header "SEE ALSO"
michael@13 221 \&\fIuuid\fR\|(8)
michael@13 222 .SH "HISTORY"
michael@13 223 .IX Header "HISTORY"
michael@13 224 The \fBopenpkg release\fR command first appeared in \fBOpenPKG 2\-STABLE\-20060622\fR.

mercurial