xbps-install gets stuck on verifying RSA signature

Open
#693 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
42/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Quiet
Tech stack
c
Domain
cli, security

Research direction

Start by reproducing the stall with xbps-install -Syu or several packages on a musl-based installation using the official repository, then trace the RSA signature-verification path in the xbps-install code. Compare single-package and multi-package runs and check whether cancelling and retrying changes the behavior. Done means multi-package installs complete without hanging during verification.

Written by the indexing model from the issue text.

Description

It gets stuck forever. I've personally waited for 10 minutes. Sometimes it shows "stalled", sometimes it doesn't.
This occurs with every ~10th package when downloading several packages along, whether I specify multiple ones to install or I'm doing xbps-install -Syu. Did not see it happen on installing a single package (with dependencies). Killing the process with ctrl+c and then re-issuing the command makes the process continue from whete it stopped and work fine until it processes the next 10 or 20 packages and gets stuck again.

Additional info: Using the official repo. Base installation with musl. XBPS was up to date as of June 30.

Dominant language
C
Stars
1.1k
Forks
151
PR merge metrics
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from void-linux/xbps

All issues in void-linux/xbps

Similar issues

More C issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.