[pacman-dev] About pacman and libalpm workflow
remyoudompheng at gmail.com
Sat May 21 10:49:45 EDT 2011
On 2011/5/21 ari edelkind <edelkind+arch-pacman at gmail.com> wrote:
>> To be honest, I have very little idea about pacman "program flow". I
>> follow something like this every time I go to dig deeper into the pacman
>> code and fix something:
> This is quite useful.
> I should say, however, that i wasn't actually referring to pacman
> program flow -- i was referring specifically to the flow of the
> signing/verification process, as it's intended to operate.
There is not really any flow: the signatures are downloaded along with
the package, and the MD5 check is supplemented/replaced by a signature
check (which is essentially a single call to libgpgme).
Same process for databases.
More information about the pacman-dev