On Sat, Dec 02, 2006 at 05:05:30PM -0500, Winston Smith wrote:
> Does apt-get check the integrity of cached debs before installing them?
> For example, if I did
>
> apt-get --download-only install <package>
>
> which downloads the package to the file
>
> /var/cache/apt/archives/<package>.version.deb
>
> but doesn't install it, and then sometime later, after the above file
> became corrupt because of a faulty hard drive, did
>
> apt-get install <package>
>
> (which required no new download because there is no version change) would
> the corruption be detected?
>
> In other words, is the check done after the download, before the
> installation, or both?
>
Basically, yes. The md5sum is stored by apt. It checks the downloaded
deb before installing against the stored md5sum.

> Is there an easy way to check the integrity of cached debs and remove
> corrupt ones? Also, is there an easy way to check the integrity of the
> unchanging parts of installed packages?
>
Try debsums.

Regards,

-Roberto

--
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFFcipS5SXWIKfIlGQRAlhiAJ0dssHTQANci46hgXZY6m AN25IvigCgttZO
miQv9b/rWfkMvVQWr5BRf2U=
=KHxc
-----END PGP SIGNATURE-----