Re: CFT: pkgbase support in 15.0

On 05/05/2025 21:58, Chuck Tuffli wrote:
> One aspect of running pkg-base I've found tricky is figuring out which
> package provides a missing binary, library, or man page. The port
> pkg-provides answers this type of question for ports, but (seemingly)
> not for pkg-base (unless I'm being dumb?). Are there plans to add this
> type of support? Alternatively, if I'm being dumb, can someone point
> me at some docs? TIA

There's provision in `pkg repo` (see: pkg-repo(8)) to generate a 
`filesite.txz` file as repository metadata, which lists all of the 
files, their checksums and various other per-file metadata for all of 
the files in all of the packages in the repository.

This isn't normally generated for the repositories provided by the 
project due to limitations on available space and bandwidth.

I've had the notion kicking around in my head for a while that having a 
database of all of the checksums of all of the files ever packaged and 
provided by the project, with cryptographic signatures proving the 
authenticity and provenance of those data, would be a pretty awesome 
resource.  Basically tripwire(8) built into pkg(8).  However, it would 
require someone with pretty deep pockets to fund the necessary 
infrastructure.

	Cheers,

	Matthew