Open-Carpet / YAUT

[cybrjackle]

Yet Another Update Tool

This is a pretty nice tool,

http://www.open-carpet.org/

Go here, download the latest rpm's and install them for FC2

http://slightly.off.net/rc-fc2/rcfc2/fedora-2-i386/

$ sudo rpm -ivh *.rpm
Password:
Preparing...                ########################################### [100%]
   1:rcd                    ########################################### [ 13%]
   2:libredcarpet           ########################################### [ 25%]
   3:libredcarpet-python    ########################################### [ 38%]
   4:libredcarpet-tools     ########################################### [ 50%]
   5:libsoup2.2             ########################################### [ 63%]
   6:rcd-devel              ########################################### [ 75%]
   7:red-carpet             ########################################### [ 88%]
   8:rug                    ########################################### [100%]
$ sudo /etc/init.d/rcd start
$ sudo red-carpet&

ScreenShots are on the page.

[cybrjackle]

Word to the wise, I wouldn't do a full UPDATE with everything in there, just leave that up to how ever you setup your yum.conf. I only use red/open-carpet to handle deps for when I want to install software from DAG/Fresh/Newrpms/Atrpms

[imdeemvp]

very nice and thanks for info.................i have to admit i will stick to my yum

[cybrjackle]

Like I said, I don't like keeping DAG/Fresh/Newrpms/Atrpms in my yum.conf. I like to keep yum.conf pretty clean and when there are packages I want from the 3rd party repo's I got tired of #uncommenting them out, yum check-upate, blah blah blah so I just use red-carpet for them. ;-) plus it looks nice and it runs fast! Not saying yum is slow or anything

[dezrock]

I am concerned about support for signed packages. By default, this red-carpet does not check, nor was its package signed. You must edit /etc/ximian/rcd.conf (add 'require-signatures=true') to enable, but even then (at least on my system) red-carpet seems to ignore signature check failures.

On installs of signed packages, rug reports something like, 'Unable to verify package signature for [..]; package will be installed because user is trusted'. On installs of unsigned packages, it reports something like, 'There is no package signature for [..]; package will be installed because user is trusted'.

What does this actually mean, and am I the only one seeing it? Who is being trusted?