From owner-freebsd-questions@FreeBSD.ORG Tue May 6 16:22:52 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6B810C02 for ; Tue, 6 May 2014 16:22:52 +0000 (UTC) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "ca.infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 11361600 for ; Tue, 6 May 2014 16:22:51 +0000 (UTC) Received: from ox-dell39.ox.adestra.com (no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged)) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.8/8.14.8) with ESMTP id s46GMjAs092513 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Tue, 6 May 2014 17:22:45 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) Authentication-Results: lucid-nonsense.infracaninophile.co.uk; dmarc=none header.from=infracaninophile.co.uk DKIM-Filter: OpenDKIM Filter v2.8.3 smtp.infracaninophile.co.uk s46GMjAs092513 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1399393365; bh=9rqo+ji4dJ97e7NW9XuUXa8Jf9YS2KsXIJT6EW3lAAw=; h=Date:From:To:Subject:References:In-Reply-To; z=Date:=20Tue,=2006=20May=202014=2017:22:36=20+0100|From:=20Matthew =20Seaman=20|To:=20freebsd-questi ons@freebsd.org|Subject:=20Re:=20pkg=20install=20command|Reference s:=20<536904D6.1090102@a1poweruser.com>|In-Reply-To:=20<536904D6.1 090102@a1poweruser.com>; b=QszkpzLZJ18bK1HNoTQr6P2fGJrhhMrOSBjZjoOHFH/gNUfiQA0iz940I8vZCGLgF H07bEsHAxtLrrO6GLuDRKJ6DKzRByipvIMc0ZYrwgf98qK1d9UmKLJxy5hCjZpQJOT 4mV6t73aUBxem+kdoMPjt+3rJoEoQ46jJIvCQxHM= X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host no-reverse-dns.metronet-uk.com [85.199.232.226] (may be forged) claimed to be ox-dell39.ox.adestra.com Message-ID: <53690C4C.9090808@infracaninophile.co.uk> Date: Tue, 06 May 2014 17:22:36 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: pkg install command References: <536904D6.1090102@a1poweruser.com> In-Reply-To: <536904D6.1090102@a1poweruser.com> X-Enigmail-Version: 1.6 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="iHB9A6spKWJEgwluGlJgGiVRH9jJioIv2" X-Virus-Scanned: clamav-milter 0.98.1 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-1.7 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,RDNS_NONE,SPF_FAIL autolearn=no autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 16:22:52 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --iHB9A6spKWJEgwluGlJgGiVRH9jJioIv2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 05/06/14 16:50, Fbsd8 wrote: > How does the "pkg install" command work? You type 'pkg install pkgname' and it installs the named package on your system, or updates it, if it's already installed. Read pkg-install(8) for the details. > Does it issue a fetch ftp command to download the package? It can use any of the protocols supported by libfetch, plus SSH plus reading directly from the filesystem. Which one it uses depends on the repo.conf --- for the default FreeBSD pkg repository, the URL is: pkg+http://pkg.FreeBSD.org/freebsd:10:x86:64/latest meaning it looks up 'pkg.freebsd.org' via SRV records and then fetches packages etc. from one of the repository mirrors using HTTP. Type 'pkg -vv' to see a summary of your active configuration. > Does my firewall need any rules to let "pkg install" out and in? If you're using HTTP to access the repo, then pkg(8) needs exactly the same firewall access as any other HTTP client. It should be proxy friendly, and you can use the environment settings described in fetch(3).= AFAIK, there aren't any publicly accessible package repositories available via anything other than HTTP, although it would be perfectly possible to use FTP instead. In the unlikely event that you need to use a FTP based repository, then your firewall settings should allow passive-mode FTP clients. Cheers, Matthew --iHB9A6spKWJEgwluGlJgGiVRH9jJioIv2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJTaQxUXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTndS0P/jhAnPBdHgkMA2W7wrJDATaL et79PayvUKtTRTFI6QynR6o9WDdNGHjedZjaqhQaS9Ivs8bCKnE+YuKwcnbZO08G uz44g2k0FiDHBkqcUGK1lR3Ol4P8w71XUszPmB8ZSfGy6O8XYSFyDk++3dsDSDb/ zz6qY7uzbXq4nVCX2gW/AZza6AhFGV3jplX0UjYnt/fFXiBvmOQCbdf1qeU6Up+t 7UfsP2VyHaIE3tFA8qHM2vNk6A2pfgvY/zPYnl6Qo+NUmrswygBfxpzcl8RwwT70 ztmgOhrLtSG1V8E5BbRK8FH/KqggPwqnneCs55u5TbtTZMK4V2mjh8q9j23iOS8h R04q7eYKPp441j5Sm57gCux/vlwa2DTtGMFAMUdJxUa+PepHsEOmMu2DHQFVsI59 Uw2SsIGLTJDW8ETqls+5lETNVo5Xm0BdtK9OsAcCnb3N1a6zmT5m/UD+wN3pTEaI JDPA/3YH+jHB6yXtmwcRYk2S+ow7zXUS/BWHhnzTxaz6GLTv+nzLEfWh+1i73qWt EQ/TXWwEREU9NfO5tXEj2JgQyDmxi37hW7VyxqHXwbzMp5NOgkPesvze8yafL7xL u0edhKw4gCpnNrqmyFeDhuaFLS8Hr4GTdVScDhb80MzqXP8YNvirztsKYU9a51f8 OLCU+dYLV7e0DQOJd1hK =Y7+m -----END PGP SIGNATURE----- --iHB9A6spKWJEgwluGlJgGiVRH9jJioIv2--