Configuring Publishers

To install and update software, you need to be able to contact a package repository.

Displaying Publisher Information

Use the pkg publisher command to display information about package publishers configured for this image. The publishers are listed in the order in which they are searched to find packages when the publisher is not specified in the package FMRI.

/usr/bin/pkg publisher [-HPn] [publisher ...]

By default, the solaris publisher is configured on a newly installed Oracle Solaris 11 system. Use the pkg publisher command to check the origin of your publisher.

$ pkg publisher
PUBLISHER                   TYPE    STATUS  URI
solaris                     origin  online  http://pkg.oracle.com/solaris11/release/
isv.com        (non-sticky) origin  online  file:/export/isv-repo/
example.com    (disabled)   origin  online  http://pkg.example.com/

Specify publishers by name to display detailed configuration for those publishers.

$ pkg publisher solaris
       Publisher: solaris
           Alias:
      Origin URI: http://pkg.oracle.com/solaris11/release/
         SSL Key: None
        SSL Cert: None
     Client UUID: 00000000-3db4-fcc2-0111-000000000000
 Catalog Updated: Thu Sep 22 21:06:03 2011
         Enabled: Yes
Signature Policy: verify

Use the -P option to display only the first publisher in the publisher search order. Use the -n option to display only enabled publishers. The -H option omits headers in the output.

Adding, Modifying, or Removing Package Publishers

Use the pkg set-publisher command to perform the following operations:

• Configure a new publisher.

• Set publisher origins and mirrors.

• Enable or disable a publisher. A newly-added publisher is enabled by default. A disabled publisher is not used when populating the package list or in install, uninstall, or update package operations. The properties for a disabled publisher can still be set and viewed. If only one publisher is enabled, that publisher cannot be disabled.

• Set publisher stickiness. A newly-added publisher is sticky by default. If a publisher is non-sticky, then a package that was installed from this publisher could be updated from another publisher.

• Set publisher search order. A newly-added publisher is last in the search order by default. The publisher search order is used to find packages to install. The publisher search order is used to find packages to update if the publisher that the package was originally installed from is non-sticky.

• Specify SSL keys and certificates for a publisher.

• Set and unset a publisher property, and add and remove a publisher property value. See Configuring Package Signature Properties.

/usr/bin/pkg set-publisher [-Ped] [-k ssl_key] [-c ssl_cert]
    [-g origin_to_add | --add-origin origin_to_add ...]
    [-G origin_to_remove | --remove-origin origin_to_remove ...]
    [-m mirror_to_add | --add-mirror mirror_to_add ...]
    [-M mirror_to_remove | --remove-mirror mirror_to_remove ...]
    [-p repo_uri] [--enable] [--disable] [--no-refresh]
    [--reset-uuid] [--non-sticky] [--sticky]
    [--search-after publisher] [--search-before publisher] [--search-first]
    [--approve-ca-cert path_to_CA]
    [--revoke-ca-cert hash_of_CA_to_remove]
    [--unset-ca-cert hash_of_CA_to_remove]
    [--set-property name_of_property=value]
    [--add-property-value name_of_property=value_to_add]
    [--remove-property-value name_of_property=value_to_remove]
    [--unset-property name_of_property_to_delete]
    [publisher]

The following command adds a new publisher named data.com with an origin URI specified with the -g option and sets this publisher to be first in the search order. Use the -P option or the --search-first option to set the specified publisher first in the search order.

# pkg set-publisher -P -g http://pkg.data.com/release/ data.com

The following command enables the example.com publisher and sets it ahead of the isv.com publisher in the search order.

# pkg set-publisher --enable --search-before isv.com example.com

Use the -p option to retrieve publisher configuration information from the specified repository URI. If a publisher is specified, then only the matching publisher is added or updated. If no publisher is specified, all publishers are added or updated as appropriate. The -p option cannot be combined with the -g, --add-origin, -G, --remove-origin, -m, --add-mirror, -M, --remove-mirror, --disable, --enable, --no-refresh, or --reset-uuid options.

To change the origin URI for a publisher, add the new URI and remove the old URI. Use the -g option to add a new origin URI. Use the -G option to remove the old origin URI.

# pkg set-publisher -G '*' -g http://pkg.example.com/support/ example.com

Use the -m option to add a URI as a mirror for the specified publisher. See Repository Origins and Mirrors for an explanation of the difference between an origin and a mirror. Use the -M option to remove a URI as a mirror for the specified publisher.

# pkg set-publisher -m http://pkg.data.com/release2/ data.com
# pkg publisher
PUBLISHER                   TYPE    STATUS   URI
data.com                    origin  online   http://pkg.data.com/release/
data.com                    mirror  online   http://pkg.data.com/release2/

Use the -k option to specify the client SSL key. Use the -c option to specify the client SSL certificate. Use the --approve-ca-cert option to add the specified certificate as a CA certificate that is trusted. The hashes of the user approved CA certificates are listed in the output of the pkg publisher command for this publisher. See Displaying Publisher Information.

# pkg set-publisher -k /root/creds/example.key -c /root/creds/example.cert \
--approve-ca-cert /tmp/example_file.pem example.com

Use the --revoked-ca-cert option to treat the specified certificate as revoked. The hashes of the user revoked CA certificates are listed in the output of the pkg publisher command for this publisher.

Use the --unset-ca-cert option to remove the specified certificate from the list of approved and the list of revoked certificates.

When you specify the -no-refresh option, the repositories for the image's publishers are not contacted to retrieve the newest list of available packages and other metadata.

Use the --reset-uuid option to choose a new unique identifier that identifies this image to its publisher.

Use the pkg unset-publisher command to remove a publisher.

# pkg unset-publisher isv.com