Page 2 of 2

Re: Sbopkg package manager

Posted: 21 Jul 2011, 11:30
by BlackRider
Is there a simple solution to that?
The simplest solution to avoid malware from insecure sources is not to use insecure sources. By getting the source code from upstream, you ensure nobody has changed the tarball between him and you.

The way I do it: take the script from SlackBuilds with their associated files, and then review them all. Then take the source from its author. If the links slackbuilds.org is not pointing to the author's original hosting, I download both and verify they are the same by performing various checksums (MD5 is good for error detection, but is collision prone and should not be used for security purposes, so I use MD5 and another one). To this date, I have found every source I have downloaded to be reliable, but you never know...
How would you edit the code?
What I know about coding could be written in a very small place. I'd better leave the coding to coders.

Re: Sbopkg package manager

Posted: 21 Jul 2011, 11:39
by Hamza
I am working on a feature to make secure all "trusted" packages. For more security, I will not publish the source code of this protection.

It will be able to check of the packages is from official repo, and if it is not corrupted by a malware.

Bye!

Re: Sbopkg package manager

Posted: 22 Jul 2011, 14:40
by francois
Please hyerlink to the appropriate thread once completed. We will be happy to use your tool.

Re: Sbopkg package manager

Posted: 22 Jul 2011, 14:43
by Hamza
I sent it to brokenman. :oops:

There is already a security function in Sbopkg, I just found it in the source code.
I will write a function to use it under Porteus V1.0

Sbopkg package manager

Posted: 28 Mar 2020, 08:41
by francois
Should we renew interest into sbopkg, now that there is a gui interface:
https://slackalaxy.com/tag/slackonly/

Sbopkg package manager

Posted: 28 Mar 2020, 09:07
by francois
There is a gui for sbopkg:
https://slackalaxy.com/2016/06/22/a-sbo ... #more-3779

The first post has been updated the gui and for the site where to find sbopkg. :)

Sbopkg package manager

Posted: 28 Mar 2020, 09:42
by francois
Problem running sbopkg_gui and problem running sbopkg. =@

Code: Select all

root@porteus:~# sbopkg_gui
Unable to load library icui18n "Cannot load library icui18n: (icui18n: cannot open shared object file: No such file or directory)" 
IOError: [Errno 2] No such file or directory: '/var/lib/sbopkg/SBo/SLACKBUILDS.TXT'

Sbopkg package manager

Posted: 28 Mar 2020, 21:48
by francois
Damn me. :evil:

This is in part my bad habit of working root mode.

What is left as an error is:

Code: Select all

Unable to open "/var/lib/sbopkg/SBo/ChangeLog.txt"

Sbopkg package manager

Posted: 29 Mar 2020, 02:29
by francois
sbopkg tutorial:
https://blog.jeaye.com/2015/07/09/sbopkg/

Provide the optional dependencies as in the first post of this thread.
Then sync sbopkg:
sudo su #has to be root mode
sbopkg -r #r for rsync

The error messages were because the necessary files are at the wrong places. Just copy /var/lib/sbopkg/SBo/14.2/SLACKBUILDS.TXT and /var/lib/sbopkg/SBo/14.2/ChangeLog.txt into /var/lib/sbopkg/SBo/

Then Update from sbopkg gui.
The program is bugged =@

**************************************************************************8
sbopkg howto:
https://slackalaxy.com/2016/06/22/a-sbopkg-gui/

To build gnumeric:
sbopkg -g gnumeric #g for grep

Then use spacebar to see the file and take note of additional needed packages. Or find them with:
echo | sbopkg -s "$1" | grep REQUIRES

***To be continued

Sbopkg package manager

Posted: 29 Mar 2020, 12:58
by francois
sbopkg works just fine now. You have to install sbopkg and sync it before using the gui: sbopkg gui.