diff options
author | Karl Berry <karl@freefriends.org> | 2016-05-18 01:19:46 +0000 |
---|---|---|
committer | Karl Berry <karl@freefriends.org> | 2016-05-18 01:19:46 +0000 |
commit | 8b3e3bd16cf6a794907397c4f21744a09f87b8dd (patch) | |
tree | 367a26049ddb4987fb6b456f4376ffd0bfe028b8 /Master/texmf-dist/doc/man/man1/tlmgr.1 | |
parent | 27af262ba96324c4b7cbe6aa9523364bb7e13c3d (diff) |
/home/texlive/karl/Master/tlpkg/bin/tl-update-auto
git-svn-id: svn://tug.org/texlive/trunk@41228 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Master/texmf-dist/doc/man/man1/tlmgr.1')
-rw-r--r-- | Master/texmf-dist/doc/man/man1/tlmgr.1 | 91 |
1 files changed, 48 insertions, 43 deletions
diff --git a/Master/texmf-dist/doc/man/man1/tlmgr.1 b/Master/texmf-dist/doc/man/man1/tlmgr.1 index 54af97db267..8add900134c 100644 --- a/Master/texmf-dist/doc/man/man1/tlmgr.1 +++ b/Master/texmf-dist/doc/man/man1/tlmgr.1 @@ -133,13 +133,13 @@ .\" ======================================================================== .\" .IX Title "TLMGR 1" -.TH TLMGR 1 "2016-05-10" "perl v5.22.1" "User Contributed Perl Documentation" +.TH TLMGR 1 "2016-05-18" "perl v5.22.1" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -tlmgr \- the TeX Live Manager +tlmgr \- the native TeX Live Manager .SH "SYNOPSIS" .IX Header "SYNOPSIS" tlmgr [\fIoption\fR]... \fIaction\fR [\fIoption\fR]... [\fIoperand\fR]... @@ -580,9 +580,9 @@ succession before invoking these programs. The respective locations are as follows: .PP .Vb 3 -\& tex/generic/config/language.dat (and language\-local.dat); -\& tex/generic/config/language.def (and language\-local.def); -\& tex/generic/config/language.dat.lua (and language\-local.dat.lua); +\& tex/generic/config/language.dat (and language\-local.dat) +\& tex/generic/config/language.def (and language\-local.def) +\& tex/generic/config/language.dat.lua (and language\-local.dat.lua) .Ve .SS "gui" .IX Subsection "gui" @@ -1283,9 +1283,9 @@ The allowed keys are: .ie n .IP """persistent\-downloads"", value 0 or 1 (default 1), same as command-line option." 4 .el .IP "\f(CWpersistent\-downloads\fR, value 0 or 1 (default 1), same as command-line option." 4 .IX Item "persistent-downloads, value 0 or 1 (default 1), same as command-line option." -.ie n .IP """require\-verification"", value 0 or 1 (default 1), same as command-line option." 4 -.el .IP "\f(CWrequire\-verification\fR, value 0 or 1 (default 1), same as command-line option." 4 -.IX Item "require-verification, value 0 or 1 (default 1), same as command-line option." +.ie n .IP """require\-verification"", value 0 or 1 (default 0), same as command-line option." 4 +.el .IP "\f(CWrequire\-verification\fR, value 0 or 1 (default 0), same as command-line option." 4 +.IX Item "require-verification, value 0 or 1 (default 0), same as command-line option." .ie n .IP """verify\-downloads"", value 0 or 1 (default 1), same as command-line option." 4 .el .IP "\f(CWverify\-downloads\fR, value 0 or 1 (default 1), same as command-line option." 4 .IX Item "verify-downloads, value 0 or 1 (default 1), same as command-line option." @@ -1296,46 +1296,51 @@ The system-wide config file can contain one additional key: .el .IP "\f(CWallowed\-actions\fR \fIaction1\fR [,\fIaction\fR,...] The value is a comma-separated list of \f(CWtlmgr\fR actions which are allowed to be executed when \f(CWtlmgr\fR is invoked in system mode (that is, without \f(CW\-\-usermode\fR)." 4 .IX Item "allowed-actions action1 [,action,...] The value is a comma-separated list of tlmgr actions which are allowed to be executed when tlmgr is invoked in system mode (that is, without --usermode)." This allows distributors to include the \f(CW\*(C`tlmgr\*(C'\fR in their packaging, but -allow only a restricted set of actions that do not interfere with the -distro package managers. For native TeX Live installations, it doesn't +allow only a restricted set of actions that do not interfere with their +distro package manager. For native TeX Live installations, it doesn't make sense to set this. .PP The \f(CW\*(C`no\-checksums\*(C'\fR key needs more explanation. By default, package checksums computed and stored on the server (in the \s-1TLPDB\s0) are compared -to checksums computed locally after downloading. \f(CW\*(C`no\-checksums\*(C'\fR -disables this. -.PP -The checksum algorithm is \s-1SHA\-512. \s0 Your system must have (looked for in -this order) the Perl \f(CW\*(C`Digest::SHA\*(C'\fR module, the \f(CW\*(C`openssl\*(C'\fR program -(<http://openssl.org>), or the \f(CW\*(C`sha512sum\*(C'\fR program (from \s-1GNU\s0 -Coreutils, <http://www.gnu.org/software/coreutils>). If none of these -are available, a warning is issued and \f(CW\*(C`tlmgr\*(C'\fR proceeds without -checking checksums. (Incidentally, other \s-1SHA\s0 implementations, such as -the pure Perl and pure Lua modules, are much too slow to be usable in -our context.) \f(CW\*(C`no\-checksums\*(C'\fR also avoids the warning. +to checksums computed locally after downloading. That is, for each +\&\f(CW\*(C`texlive.tlpdb\*(C'\fR loaded from a repository, the corresponding checksum +file \f(CW\*(C`texlive.tlpdb.sha512\*(C'\fR is also downloaded, and \f(CW\*(C`tlmgr\*(C'\fR confirms +whether the checksum of the downloaded \s-1TLPDB\s0 file agrees with the +download data. \f(CW\*(C`no\-checksums\*(C'\fR disables this process. +.PP +The checksum algorithm is \s-1SHA\-512. \s0 Your system must have one of (looked +for in this order) the Perl \f(CW\*(C`Digest::SHA\*(C'\fR module, the \f(CW\*(C`openssl\*(C'\fR +program (<http://openssl.org>), the \f(CW\*(C`sha512sum\*(C'\fR program (from \s-1GNU\s0 +Coreutils, <http://www.gnu.org/software/coreutils>), or finally the +\&\f(CW\*(C`shasum\*(C'\fR program (just to support old Macs). If none of these are +available, a warning is issued and \f(CW\*(C`tlmgr\*(C'\fR proceeds without checking +checksums. (Incidentally, other \s-1SHA\s0 implementations, such as the pure +Perl and pure Lua modules, are much too slow to be usable in our +context.) \f(CW\*(C`no\-checksums\*(C'\fR avoids the warning. .SH "CRYPTOGRAPHIC VERIFICATION" .IX Header "CRYPTOGRAPHIC VERIFICATION" -If a working GnuPG binary (\f(CW\*(C`gpg\*(C'\fR) is found (see below for search -method), by default verification of downloaded files is performed. This -can be suppressed by specifying \f(CW\*(C`\-\-no\-verify\-downloads\*(C'\fR on the command -line, or adding an entry \f(CW\*(C`verify\-downloads = 0\*(C'\fR to a \f(CW\*(C`tlmgr\*(C'\fR config -file (described in \*(L"\s-1CONFIGURATION FILE FOR TLMGR\*(R"\s0). On the other hand, -it is possible to \fIrequire\fR verification by specifying -\&\f(CW\*(C`\-\-require\-verification\*(C'\fR on the command line, or by adding an entry -\&\f(CW\*(C`require\-verification = 1\*(C'\fR to a \f(CW\*(C`tlmgr\*(C'\fR config file. -.PP -Verification is performed as follows: For each \f(CW\*(C`texlive.tlpdb\*(C'\fR loaded -for a repository, the respective checksum \f(CW\*(C`texlive.tlpdb.sha512\*(C'\fR is -always downloaded, too, and \f(CW\*(C`tlmgr\*(C'\fR confirms whether the checksum of -the downloaded \s-1TLPDB\s0 file agrees with the download data. This is done -in any case. -.PP -Unless cryptographic verification is disabled, then a signature of the -checksum file is downloaded and the signature verified. The signature is -created by the TeX Live Distribution \s-1GPG\s0 key 0x06BAB6BC, which in turn -is signed by Karl Berry's key 0x9DEB46C0 and Norbert Preining's key -0x6CACA448. All of these keys are obtainable from the standard key -servers. +\&\f(CW\*(C`tlmgr\*(C'\fR and \f(CW\*(C`install\-tl\*(C'\fR perform cryptographic verification if +possible. If verification is performed and successful, the programs +report \f(CW\*(C`(verified)\*(C'\fR after loading the \s-1TLPDB\s0; otherwise, they report +\&\f(CW\*(C`(not verified)\*(C'\fR. Either way, by default the installation and/or +updates proceed normally. +.PP +The attempted verification can be suppressed by specifying +\&\f(CW\*(C`\-\-no\-verify\-downloads\*(C'\fR on the command line, or the entry +\&\f(CW\*(C`verify\-downloads = 0\*(C'\fR in a \f(CW\*(C`tlmgr\*(C'\fR config file (described in +\&\*(L"\s-1CONFIGURATION FILE FOR TLMGR\*(R"\s0). On the other hand, it is possible to +\&\fIrequire\fR verification by specifying \f(CW\*(C`\-\-require\-verification\*(C'\fR on the +command line, or \f(CW\*(C`require\-verification = 1\*(C'\fR in a \f(CW\*(C`tlmgr\*(C'\fR config file; +in this case, if verification is not possible, the program quits. +.PP +Cryptographic verification requires checksum checking (described just +above) to succeed, and a working GnuPG (\f(CW\*(C`gpg\*(C'\fR) program (see below for +search method). Then, unless cryptographic verification has been +disabled, a signature file (\f(CW\*(C`texlive.tlpdb.*.asc\*(C'\fR) of the checksum file +is downloaded and the signature verified. The signature is created by +the TeX Live Distribution \s-1GPG\s0 key 0x06BAB6BC, which in turn is signed by +Karl Berry's key 0x9DEB46C0 and Norbert Preining's key 0x6CACA448. All +of these keys are obtainable from the standard key servers. .PP Additional trusted keys can be added using the \f(CW\*(C`key\*(C'\fR action. .SS "Configuration of GnuPG invocation" @@ -1347,7 +1352,7 @@ checked; finally \f(CW\*(C`gpg2\*(C'\fR is checked. Further adaptation of the \f(CW\*(C`gpg\*(C'\fR invocation can be made using the two environment variables \f(CW\*(C`TL_GNUPGHOME\*(C'\fR, which is passed to \f(CW\*(C`gpg\*(C'\fR as the value for \f(CW\*(C`\-\-homedir\*(C'\fR, and \f(CW\*(C`TL_GNUPGARGS\*(C'\fR, which replaces the default -arguments \f(CW\*(C`\-\-no\-secmem\-warning \-\-no\-permission\-warning\*(C'\fR. +options \f(CW\*(C`\-\-no\-secmem\-warning \-\-no\-permission\-warning\*(C'\fR. .SH "USER MODE" .IX Header "USER MODE" \&\f(CW\*(C`tlmgr\*(C'\fR provides a restricted way, called ``user mode'', to manage |