NAME¶

reprepro - produce, manage and sync a local repository of Debian packages

SYNOPSIS¶

reprepro --help

reprepro [ options ] command [ per-command-arguments ]

DESCRIPTION¶

reprepro is a tool to manage a repository of Debian packages (.deb, .udeb, .dsc, ...). It stores files either being injected manually or downloaded from some other repository (partially) mirrored into a pool/ hierarchy. Managed packages and checksums of files are stored in a Berkeley DB database file, so no database server is needed. Checking signatures of mirrored repositories and creating signatures of the generated Package indices is supported.

Former working title of this program was mirrorer.

GLOBAL OPTIONS¶

Options can be specified before the command. Each affects a different subset of commands and is ignored by other commands.

-h --help

Displays a short list of options and commands with description.

-v, -V, --verbose

Be more verbose. Can be applied multiple times. One uppercase -V counts as five lowercase -v.

--silent

Be less verbose. Can be applied multiple times. One -v and one -s cancel each other out.

-f, --force

This option is ignored, as it no longer exists.

-b, --basedir basedir

Sets the base-dir all other default directories are relative to. If none is supplied and the REPREPRO_BASE_DIR environment variable is not set either, the current directory will be used.

--outdir outdir

Sets the base-dir of the repository to manage, i.e. where the pool/ subdirectory resides. And in which the dists/ directory is placed by default. If this starts with '+b/', it is relative to basedir.

The default for this is basedir.

--confdir confdir

Sets the directory where the configuration is searched in.

If this starts with '+b/', it is relative to basedir.

If none is given, +b/conf (i.e. basedir/conf) will be used.

--distdir distdir

Sets the directory to generate index files relatively to. (i.e. things like Packages.gz, Sources.gz and Release.gpg)

If this starts with '+b/', it is relative to basedir, if starting with '+o/' relative to outdir.

If none is given, +o/dists (i.e. outdir/dists) is used.

Note: apt has dists hard-coded in it, so this is mostly only useful for testing or when your webserver pretends another directory structure than your physical layout.

Warning: Beware when changing this forth and back between two values not ending in the same directory. Reprepro only looks if files it wants are there. If nothing of the content changed and there is a file it will not touch it, assuming it is the one it wrote last time, assuming any different --distdir ended in the same directory. So either clean a directory before setting --distdir to it or do an export with the new one first to have a consistent state.

--logdir logdir

The directory where files generated by the Log: directive are stored if they have no absolute path.

If this starts with '+b/', it is relative to basedir, if starting with '+o/' relative to outdir, with '+c/' relative to confdir.

If none is given, +b/logs (i.e. basedir/logs) is used.

--dbdir dbdir

Sets the directory where reprepro keeps its databases.

If this starts with '+b/', it is relative to basedir, if starting with '+o/' relative to outdir, with '+c/' relative to confdir.

If none is given, +b/db (i.e. basedir/db) is used.

Note: This is permanent data, no cache. One has almost to regenerate the whole repository when this is lost.

--listdir listdir

Sets the directory where it downloads indices to when importing from other repositories. This is temporary data and can be safely deleted when not in an update run.

If this starts with '+b/', it is relative to basedir, if starting with '+o/' relative to outdir, with '+c/' relative to confdir.

If none is given, +b/lists (i.e. basedir/lists) is used.

--morguedir morguedir

Files deleted from the pool are stored into morguedir.

If this starts with '+b/', it is relative to basedir, if starting with '+o/' relative to outdir, with '+c/' relative to confdir.

If none is given, deleted files are just deleted.

--methoddir methoddir

Look in methoddir instead of /usr/lib/apt/methods for methods to call when importing from other repositories.

-C, --component components

Limit the specified command to this components only. This will force added packages to this components, limit removing packages from this components, only list packages in this components, and/or otherwise only look at packages in this components, depending on the command in question.

Multiple components are specified by separating them with |, as in -C 'main|contrib'.

-A, --architecture architectures

Limit the specified command to this architectures only. (i.e. only list such packages, only remove packages from the specified architectures, or otherwise only look at/act on this architectures depending on the specific command).

Multiple architectures are specified by separating them with |, as in -A 'sparc|i386'.

Note that architecture all packages can be included to each architecture but are then handled separately. Thus by using -A in a specific way one can have different versions of an architecture all package in different architectures of the same distribution.

-T, --type dsc|deb|udeb

Limit the specified command to this packagetypes only. (i.e. only list such packages, only remove such packages, only include such packages, ...)

-S, --section section

Overrides the section of inclusions. (Also override possible override files)

-P, --priority priority

Overrides the priority of inclusions. (Also override possible override files)

--export=(silent-never|never|changed|lookedat|force)

This option specify whether and how the high level actions (e.g. install, update, pull, delete) should export the index files of the distributions they work with.

--export=lookedat

In this mode every distribution the action handled will be exported, unless there was an error possibly corrupting it.
Note that only missing files and files whose intended content changed between before and after the action will be written. To get a guaranteed current export, use the export action.
For backwards compatibility, lookedat is also available under the old name normal. The name normal is deprecated and will be removed in future versions.

--export=changed

In this mode every distribution actually changed will be exported, unless there was an error possibly corrupting it. (i.e. if nothing changed, not even missing files will be created.)
Note that only missing files and files whose intended content changed between before and after the action will be written. To get a guaranteed current export, use the export action.

--export=force

Always export all distributions looked at, even if there was some error possibly bringing it into a inconsistent state.

--export=never

No index files are exported. You will have to call export later.
Note that you most likely additionally need the --keepunreferencedfiles option, if you do not want some of the files pointed to by the untouched index files to vanish.

--export=silent-never

Like never, but suppress most output about that.

--ignore=what

Ignore errors of type what. See the section ERROR IGNORING for possible values.

--nolistsdownload

When running update, checkupdate or predelete do not download any Release or index files. This is hardly useful except when you just run one of those command for the same distributions. And even then reprepro is usually good in not downloading except Release and Release.gpg files again.

--nothingiserror

If nothing was done, return with exitcode 1 instead of the usual 0.

Note that "nothing was done" means the primary purpose of the action in question. Auxiliary actions (opening and closing the database, exporting missing files with --export=lookedat, ...) usually do not count. Also note that this is not very well tested. If you find an action that claims to have done something in some cases where you think it should not, please let me know.

--keeptemporaries

Do not delete temporary .new files when exporting a distribution fails. (reprepro first create .new files in the dists directory and only if everything is generated, all files are put into their final place at once. If this option is not specified and something fails, all are deleted to keep dists clean).

--keepunreferencedfiles

Do not delete files that are no longer used because the package they are from is deleted/replaced with a newer version from the last distribution it was in.

--keepunusednewfiles

The include, includedsc, includedeb and processincoming by default delete any file they added to the pool that is not marked used at the end of the operation. While this keeps the pool clean and allows changing before trying to add again, this needs copying and checksum calculation every time one tries to add a file.

--keepdirectories

Do not try to rmdir parent directories after files or directories have been removed from them. (Do this if your directories have special permissions you want keep, do not want to be pestered with warnings about errors to remove them, or have a buggy rmdir call deleting non-empty directories.)

--ask-passphrase

Ask for passphrases when signing things and one is needed. This is a quick and dirty and unsafe implementation using the obsolete getpass(3) function with the description gpgme is supplying. So the prompt will look quite funny and support for passphrases with more than 8 characters depend on your libc. Use of this option is not recommended. Use gpg-agent with pinentry instead.

(With current versions of gnupg you need to set pinentry-mode loopback in your .gnupg/gpg.conf file to use --ask-passphrase. Without that option gnupg uses the much safer and recommended pinentry instead).

--noskipold

When updating do not skip targets where no new index files and no files marked as already processed are available.

If you changed a script to preprocess downloaded index files or changed a Listfilter, you most likely want to call reprepro with --noskipold.

--waitforlock count

If there is a lockfile indicating another instance of reprepro is currently using the database, retry count times after waiting for 10 seconds each time. The default is 0 and means to error out instantly.

--spacecheck full|none

The default is full:
In the update commands, check for every to be downloaded file which filesystem it is on and how much space is left.
To disable this behaviour, use none.

--dbsafetymargin bytes-count

If checking for free space, reserve byte-count bytes on the filesystem containing the db/ directory. The default is 104857600 (i.e. 100MB), which is quite large. But as there is no way to know in advance how large the databases will grow and libdb is extremely touchy in that regard, lower only when you know what you do.

--safetymargin bytes-count

If checking for free space, reserve byte-count bytes on filesystems not containing the db/ directory. The default is 1048576 (i.e. 1MB).

--noguessgpgtty

Don't set the environment variable GPG_TTY, even when it is not set, stdin is terminal and /proc/self/fd/0 is a readable symbolic link.

--gnupghome

Set the GNUPGHOME evnironment variable to the given directory as argument to this option. And your gpg will most likely use the content of this variable instead of "~/.gnupg". Take a look at gpg(1) to be sure. This option in the command line is usually not very useful, as it is possible to set the environment variable directly. Its main reason for existence is that it can be used in conf/options.

--gunzip gz-uncompressor

While reprepro links against libz, it will look for the program given with this option (or gunzip if not given) and use that when uncompressing index files while downloading from remote repositories. (So that downloading and uncompression can happen at the same time). If the program is not found or is NONE (all-uppercase) then uncompressing will always be done using the built in uncompression method. The program has to accept the compressed file as stdin and write the uncompressed file into stdout.

--bunzip2 bz2-uncompressor

When uncompressing downloaded index files or if not linked against libbz2 reprepro will use this program to uncompress .bz2 files. The default value is bunzip2. If the program is not found or is NONE (all-uppercase) then uncompressing will always be done using the built in uncompression method or not be possible if not linked against libbz2. The program has to accept the compressed file as stdin and write the uncompressed file into stdout.

--unlzma lzma-uncompressor

When uncompressing downloaded index files or if not linked against liblzma reprepro will use this program to uncompress .lzma files. The default value is unlzma. If the program is not found or is NONE (all-uppercase) then uncompressing lzma files will always be done using the built in uncompression method or not be possible if not linked against liblzma. The program has to accept the compressed file as stdin and write the uncompressed file into stdout.

--unxz xz-uncompressor

When uncompressing downloaded index files or if not linked against liblzma reprepro will use this program to uncompress .xz files. The default value is unxz. If the program is not found or is NONE (all-uppercase) then uncompressing xz files will always be done using the built in uncompression method or not be possible if not linked against liblzma. The program has to accept the compressed file as stdin and write the uncompressed file into stdout.

--lunzip lzip-uncompressor

When trying to uncompress or read lzip compressed files, this program will be used. The default value is lunzip. If the program is not found or is NONE (all-uppercase) then uncompressing lz files will not be possible. The program has to accept the compressed file as stdin and write the uncompressed file into stdout. Note that .lz support is DEPRECATED and will be removed in the future.

--list-max count

Limits the output of list, listmatched and listfilter to the first count results. The default is 0, which means unlimited.

--list-skip count

Omitts the first count results from the output of list, listmatched and listfilter.

--list-format format

Set the output format of list, listmatched and listfilter commands. The format is similar to dpkg-query's --showformat: fields are specified as ${fieldname} or ${fieldname;length}. Zero length or no length means unlimited. Positive numbers mean fill with spaces right, negative fill with spaces left.

\n, \r, \t, \0 are new-line, carriage-return, tabulator and zero-byte. Backslash (\) can be used to escape every non-letter-or-digit.

The special field names $identifier, $architecture, $component, $type, $codename denote where the package was found.

The special field names $source and $sourceversion denote the source and source version a package belongs to. (i.e. ${$source} will either be the same as ${source} (without a possible version in parentheses at the end) or the same as ${package}.

The special field names $basename, $filekey and $fullfilename denote the first package file part of this entry (i.e. usually the .deb, .udeb or .dsc file) as basename, as filekey (filename relative to the outdir) and the full filename with outdir prepended (i.e. as relative or absolute as your outdir (or basedir if you did not set outdir) is).

When --list-format is not given or NONE, then the default is equivalent to
${$identifier} ${package} ${version}\n.

Escaping digits or letters not in above list, using dollars not escaped outside specified constructs, or any field names not listed as special and not consisting entirely out of letters, digits and minus signs have undefined behaviour and might change meaning without any further notice.

If you give this option on the command line, don't forget that $ is also interpreted by your shell. So you have to properly escape it. For example by putting the whole argument to --list-format in single quotes.

--show-percent

When downloading packages, show each completed percent of completed package downloads together with the size of completely downloaded packages. (Repeating this option increases the frequency of this output).

--onlysmalldeletes

The pull and update commands will skip every distribution in which one target loses more than 20% of its packages (and at least 10).

Using this option (or putting it in the options config file) can avoid removing large quantities of data but means you might often give --noonlysmalldeletes to override it.

--restrict src[=version|:type]

Restrict a pull or update to only act on packages belonging to source-package src. Any other package will not be updated (unless it matches a --restrict-bin). Only packages that would otherwise be updated or are at least marked with hold in a FilterList or FilerSrcList will be updated.

The action can be restricted to a source version using a equal sign or changed to another type (see FilterList) using a colon.

This option can be given multiple times to list multiple packages, but each package may only be named once (even when there are different versions or types).

--restrict-binary name[=version|:type]

Like --restrict but restrict to binary packages (.deb and .udeb). Source packages are not upgraded unless they appear in a --restrict.

--restrict-file filename

Like --restrict but read a whole file in the FilterSrcList format.

--restrict-file-bin filename

Like --restrict-bin but read a whole file in the FilterList format.

--endhook hookscript

Run the specified hookscript once reprepro exits. It will get the usual REPREPRO_* environment variables set (or unset) and additionally a variable REPREPRO_EXIT_CODE that is the exit code with which reprepro would have exited (the hook is always called once the initial parsing of global options and the command name is done, no matter if reprepro did anything or not). Reprepro will return to the calling process with the exitcode of this script. Reprepro has closed all its databases and removed all its locks, so you can run reprepro again in this script (unless someone else did so in the same repository before, of course).

The only advantage over running that command always directly after reprepro is that you can some environment variables set and cannot so easily forget it if this option is in conf/options.

The script is supposed to be located relative to confdir, unless its name starts with /, ./, +b/, +o/, or +c/ and the name may not start (except in the cases given before) with a +.

An example script looks like:
#!/bin/sh

if [ "$REPREPRO_EXIT_CODE" -ne 0 ] ; then
exit "$REPREPRO_EXIT_CODE"
fi

echo "congratulations, reprepro with arguments: $*"
echo "seems to have run successfully. REPREPRO_ part of the environment is:"
set | grep ^REPREPRO_

exit 0

--outhook hookscript

hookscript is called with a .outlog file as argument (located in logdir) containing a description of all changes made to outdir.

The script is supposed to be located relative to confdir, unless its name starts with /, ./, +b/, +o/, or +c/ and the name may not start (except in the cases given before) with a +.

For a format of the .outlog files generated for this script see the manual.html shipped with reprepro.

COMMANDS¶

export [ codenames ]

Generate all index files for the specified distributions.

This regenerates all files unconditionally. It is only useful if you want to be sure dists is up to date, you called some other actions with --export=never before or you want to create an initial empty but fully equipped dists/codename directory.

[ --delete ] createsymlinks [ codenames ]

Creates suite symbolic links in the dists/-directory pointing to the corresponding codename.

It will not create links, when multiple of the given codenames would be linked from the same suite name, or if the link already exists (though when --delete is given it will delete already existing symlinks)

list codename [ packagename ]

List all packages (source and binary, except when -T or -A is given) with the given name in all components (except when -C is given) and architectures (except when -A is given) of the specified distribution. If no package name is given, list everything. The format of the output can be changed with --list-format. To only get parts of the result, use --list-max and --list-skip.

listmatched codename glob

as list, but does not list a single package, but all packages matching the given shell-like glob. (i.e. *, ? and [chars] are allowed).

Examples:

reprepro -b . listmatched test2 'linux-*' lists all packages starting with linux-.

listfilter codename condition

as list, but does not list a single package, but all packages matching the given condition.

The format of the formulas is those of the dependency lines in Debian packages' control files with some extras. That means a formula consists of names of fields with a possible condition for its content in parentheses. These atoms can be combined with an exclamation mark '!' (meaning not), a pipe symbol '|' (meaning or) and a comma ',' (meaning and). Additionally parentheses can be used to change binding (otherwise '!' binds more than '|' than ',').

The values given in the search expression are directly alphabetically compared to the headers in the respective index file. That means that each part Fieldname (cmp value) of the formula will be true for exactly those package that have in the Package or Sources file a line starting with fieldname and a value is alphabetically cmp to value.

Additionally since reprepro 3.11.0, '%' can be used as comparison operator, denoting matching a name with shell like wildcard (with '*', '?' and '[..]').

The special field names starting with '$' have special meaning (available since 3.11.1):

$Version

The version of the package, comparison is not alphabetically, but as Debian version strings.

$Source

The source name of the package.

$SourceVersion

The source version of the package.

$Architecture

The architecture the package is in (listfilter) or to be put into.

$Component

The component the package is in (listfilter) or to be put into.

$Packagetype

The packagetype of the package.

Examples:

reprepro -b . listfilter test2 'Section (== admin)' will list all packages in distribution test2 with a Section field and the value of that field being admin.

reprepro -b . -T deb listfilter test2 'Source (== blub) | ( !Source , Package (== blub) )' will find all .deb Packages with either a Source field blub or no Source field and a Package field blub. (That means all package generated by a source package blub, except those also specifying a version number with its Source).

reprepro -b . -T deb listfilter test2 '$Source (==blub)' is the better way to do this (but only available since 3.11.1).

reprepro -b . listfilter test2 '$PackageType (==deb), $Source (==blub)' is another (less efficient) way.

reprepro -b . listfilter test2 'Package (% linux-*-2.6*)' lists all packages with names starting with linux- and later having an -2.6.

ls package-name

List the versions of the specified package in all distributions.

lsbycomponent package-name

Like ls, but group by component (and print component names).

remove codename package-names[=version] ...

Delete packages in the specified distribution, that have package name listed as argument. Package versions must be specified by appending '=' and the version to the name (without spaces). When no version is specified, the latest package version is removed.

Note that like any other operation removing or replacing a package, the old package's files are unreferenced and thus may be automatically deleted if this was their last reference and no --keepunreferencedfiles specified.

removematched codename glob

Delete all packages listmatched with the same arguments would list.

removefilter codename condition

Delete all packages listfilter with the same arguments would list.

removesrc codename source-name [version]

Remove all packages in distribution codename belonging to source package source-name. (Limited to those with source version version if specified).

If package tracking is activated, it will use that information to find the packages, otherwise it traverses all package indices for the distribution.

removesrcs codename source-name[=version] ...

Like removesrc, but can be given multiple source names and source versions must be specified by appending '=' and the version to the name (without spaces).

update [ codenames ]

Sync the specified distributions (all if none given) as specified in the config with their upstreams. See the description of conf/updates below.

checkupdate [ codenames ]

Same like update, but will show what it will change instead of actually changing it.

dumpupdate [ codenames ]

Same like checkupdate, but less suitable for humans and more suitable for computers.

predelete [ codenames ]

This will determine which packages a update would delete or replace and remove those packages. This can be useful for reducing space needed while upgrading, but there will be some time where packages are vanished from the lists so clients will mark them as obsolete. Plus if you cannot download a updated package in the (hopefully) following update run, you will end up with no package at all instead of an old one. This will also blow up .diff files if you are using the pdiff example or something similar. So be careful when using this option or better get some more space so that update works.

cleanlists

Delete all files in listdir (default basedir/lists) that do not belong to any update rule for any distribution. I.e. all files are deleted in that directory that no update command in the current configuration can use. (The files are usually left there, so if they are needed again they do not need to be downloaded again. Though in many easy cases not even those files will be needed.)

pull [ codenames ]

pull in newer packages into the specified distributions (all if none given) from other distributions in the same repository. See the description of conf/pulls below.

checkpull [ codenames ]

Same like pull, but will show what it will change instead of actually changing it.

dumppull [ codenames ]

Same like checkpull, but less suitable for humans and more suitable for computers.

includedeb codename .deb-filename

Include the given binary Debian package (.deb) in the specified distribution, applying override information and guessing all values not given and guessable.

includeudeb codename .udeb-filename

Same like includedeb, but for .udeb files.

includedsc codename .dsc-filename

Include the given Debian source package (.dsc, including other files like .orig.tar.gz, .tar.gz and/or .diff.gz) in the specified distribution, applying override information and guessing all values not given and guessable.

Note that .dsc files do not contain section or priority, but the Sources.gz file needs them. reprepro tries to parse .diff and .tar files for it, but is only able to resolve easy cases. If reprepro fails to extract those automatically, you have to either specify a DscOverride or give them via -S and -P

include codename .changes-filename

Include in the specified distribution all packages found and suitable in the .changes file, applying override information guessing all values not given and guessable.

processincoming rulesetname [.changes-file]

Scan an incoming directory and process the .changes files found there. If a filename is supplied, processing is limited to that file. rulesetname identifies which rule-set in conf/incoming determines which incoming directory to use and in what distributions to allow packages into. See the section about this file for more information.

check [ codenames ]

Check if all packages in the specified distributions have all files needed properly registered.

checkpool [ fast ]

Check if all files believed to be in the pool are actually still there and have the known md5sum. When fast is specified md5sum is not checked.

collectnewchecksums

Calculate all supported checksums for all files in the pool. (Versions prior to 3.3 did only store md5sums, 3.3 added sha1, 3.5 added sha256).

translatelegacychecksums

Remove the legacy files.db file after making sure all information is also found in the new checksums.db file. (Alternatively you can call collecnewchecksums and remove the file on your own.)

rereference

Forget which files are needed and recollect this information.

dumpreferences

Print out which files are marked to be needed by whom.

dumpunreferenced

Print a list of all filed believed to be in the pool, that are not known to be needed.

deleteunreferenced

Remove all known files (and forget them) in the pool not marked to be needed by anything.

deleteifunreferenced [ filekeys ]

Remove the given files (and forget them) in the pool if they are not marked to be used by anything. If no command line arguments are given, stdin is read and every line treated as one filekey. This is mostly useful together with --keepunreferenced in conf/options or in situations where one does not want to run deleteunreferenced, which removes all files eligible to be deleted with this command.

reoverride [ codenames ]

Reapply the override files to the given distributions (Or only parts thereof given by -A,-C or -T).

Note: only the control information is changed. Changing a section to a value, that would cause another component to be guessed, will not cause any warning.

redochecksums [ codenames ]

Re-add the information about file checksums to the package indices.

Usually the package's control information is created at inclusion time or imported from some remote source and not changed later. This command modifies it to re-add missing checksum types.

Only checksums already known are used. To update known checksums about files run collectnewchecksums first.

dumptracks [ codenames ]

Print out all information about tracked source packages in the given distributions.

retrack [ codenames ]

Recreate a tracking database for the specified distributions. This contains ouf of three steps. First all files marked as part of a source package are set to unused. Then all files actually used are marked as thus. Finally tidytracks is called remove everything no longer needed with the new information about used files.

(This behaviour, though a bit longsome, keeps even files only kept because of tracking mode keep and files not otherwise used but kept due to includechanges or its relatives. Before version 3.0.0 such files were lost by running retrack).

removealltracks [ codenames ]

Removes all source package tracking information for the given distributions.

removetrack codename sourcename version

Remove the trackingdata of the given version of a given sourcepackage from a given distribution. This also removes the references for all used files.

tidytracks [ codenames ]

Check all source package tracking information for the given distributions for files no longer to keep.

copy destination-codename source-codename package[=version] ...

Copy the given packages from one distribution to another. The packages are copied verbatim, no override files are consulted. Only components and architectures present in the source distribution are copied. Package versions must be specified by appending '=' and the version to the name (without spaces). When no version is specified, the latest package version is copied.

copysrc destination-codename source-codename source-package [versions]

look at each package (where package means, as usual, every package be it dsc, deb or udeb) in the distribution specified by source-codename and identifies the relevant source package for each. All packages matching the specified source-package name (and any version if specified) are copied to the destination-codename distribution. The packages are copied verbatim, no override files are consulted. Only components and architectures present in the source distribution are copied.

copymatched destination-codename source-codename glob

Copy packages matching the given glob (see listmatched).

The packages are copied verbatim, no override files are consulted. Only components and architectures present in the source distribution are copied.

copyfilter destination-codename source-codename formula

Copy packages matching the given formula (see listfilter). (all versions if no version is specified). The packages are copied verbatim, no override files are consulted. Only components and architectures present in the source distribution are copied.

move destination-codename source-codename package[=version] ...

Move the given packages from one distribution to another. The packages are moved verbatim, no override files are consulted. Only components and architectures present in the source distribution are moved. Package versions must be specified by appending '=' and the version to the name (without spaces). When no version is specified, the latest package version is moved.

movesrc destination-codename source-codename source-package [versions]

look at each package (where package means, as usual, every package be it dsc, deb or udeb) in the distribution specified by source-codename and identifies the relevant source package for each. All packages matching the specified source-package name (and any version if specified) are moved to the destination-codename distribution. The packages are moved verbatim, no override files are consulted. Only components and architectures present in the source distribution are moved.

movematched destination-codename source-codename glob

Move packages matching the given glob (see listmatched).

The packages are moved verbatim, no override files are consulted. Only components and architectures present in the source distribution are moved.

movefilter destination-codename source-codename formula

Move packages matching the given formula (see listfilter). (all versions if no version is specified). The packages are moved verbatim, no override files are consulted. Only components and architectures present in the source distribution are moved.

restore codename snapshot packages...

restoresrc codename snapshot source-epackage [versions]

restorefilter destination-codename snapshot formula

restorematched destination-codename snapshot glob

Like the copy commands, but do not copy from another distribution, but from a snapshot generated with gensnapshot. Note that this blindly trusts the contents of the files in your dists/ directory and does no checking.

clearvanished

Remove all package databases that no longer appear in conf/distributions. If --delete is specified, it will not stop if there are still packages left. Even without --delete it will unreference files still marked as needed by this target. (Use --keepunreferenced to not delete them if that was the last reference.)

Do not forget to remove all exported package indices manually.

gensnapshot codename directoryname

Generate a snapshot of the distribution specified by codename in the directory dists/codename/snapshots/directoryname/ and reference all needed files in the pool as needed by that. No Content files are generated and no export hooks are run.

Note that there is currently no automated way to remove that snapshot again (not even clearvanished will unlock the referenced files after the distribution itself vanished). You will have to remove the directory yourself and tell reprepro to unreferencesnapshot codename directoryname before deleteunreferenced will delete the files from the pool locked by this.

To access such a snapshot with apt, add something like the following to your sources.list file:
deb method://as/without/snapshot codename/snapshots/name main

unreferencesnapshot codename directoryname

Remove all references generated by an genshapshot with the same arguments. This allows the next deleteunferenced call to delete those files. (The indices in dists/ for the snapshot are not removed.)

rerunnotifiers [ codenames ]

Run all external scripts specified in the Log: options of the specified distributions.

build-needing codename architecture [ glob ]

List source packages (matching glob) that likely need a build on the given architecture.

List all source package in the given distribution without a binary package of the given architecture built from that version of the source, without a .changes or .log file for the given architecture, with an Architecture field including any, os-any (with os being the part before the hyphen in the architecture or linux if there is no hyphen) or the architecture and at least one package in the Binary field not yet available.

If instead of architecture the term any is used, all architectures are iterated and the architecture is printed as fourth field in every line.

If the architecture is all, then only source packages with an Architecture field including all are considered (i.e. as above with real architectures but any does not suffice). Note that dpkg-dev << 1.16.1 does not both set any and all so source packages building both architecture dependent and independent packages will never show up unless built with a new enough dpkg-source).

translatefilelists

Translate the file list cache within db/contents.cache.db into the new format used since reprepro 3.0.0.

Make sure you have at least half of the space of the current db/contents.cache.db file size available in that partition.

flood distribution [architecture]

For each architecture of distribution (or for the one specified) add architecture all packages from other architectures (but the same component or packagetype) under the following conditions:

Packages are only upgraded, never downgraded.
If there is a package not being architecture all, then architecture all packages of the same source from the same source version are preferred over those that have no such binary sibling.
Otherwise the package with the highest version wins.

You can restrict with architectures are looked for architecture all packages using -A and which components/packagetypes are flooded by -C/-T as usual.

There are mostly two use cases for this command: If you added an new architecture to an distribution and want to copy all architecture all packages to it. Or if you included some architecture all packages only to some architectures using -A to avoid breaking the other architectures for which the binary packages were still missing and now want to copy it to those architectures were they are unlikely to break something (because a newbinary is already available).

unusedsources [distributions]

List all source packages for which no binary package build from them is found.

sourcemissing [distributions]

List all binary packages for which no source package is found (the source package must be in the same distribution, but source packages only kept by package tracking is enough).

reportcruft [distributions]

List all source package versions that either have a source package and no longer a binary package or binary packages left without source package in the index. (Unless sourcemissing also list packages where the source package in only in the pool due to enabled tracking but no longer in the index).

sizes [ codenames ]

List the size of all packages in the distributions specified or in all distributions.

Each row contains 4 numbers, each being a number of bytes in a set of packages, which are: The packages in this distribution (including anything only kept because of tracking), the packages only in this distribution (anything in this distribution and a snapshot of this distribution counts as only in this distribution), the packages in this distribution and its snapshots, the packages only in this distribution or its snapshots.

If more than one distribution is selected, also list a sum of those (in which 'Only' means only in selected ones, and not only only in one of the selected ones).

repairdescriptions [ codenames ]

Look for binary packages only having a short description and try to get the long description from the .deb file (and also remove a possible Description-md5 in this case).

CONFIG FILES¶

reprepo uses three config files, which are searched in the directory specified with --confdir or in the conf/ subdirectory of the basedir.

If a file options exists, it is parsed line by line. Each line can be the long name of a command line option (without the --) plus an argument, where possible. Those are handled as if they were command line options given before (and thus lower priority than) any other command line option. (and also lower priority than any environment variable).

To allow command line options to override options file options, most boolean options also have a corresponding form starting with --no.

(The only exception is when the path to look for config files changes, the options file will only opened once and of course before any options within the options file are parsed.)

The file distributions is always needed and describes what distributions to manage, while updates is only needed when syncing with external repositories and pulls is only needed when syncing with repositories in the same reprepro database.

The last three are in the format control files in Debian are in, i.e. paragraphs separated by empty lines consisting of fields. Each field consists of a fieldname, followed by a colon, possible whitespace and the data. A field ends with a newline not followed by a space or tab.

Lines starting with # as first character are ignored, while in other lines the # character and everything after it till the newline character are ignored.

A paragraph can also consist of only a single field "!include:" which causes the named file (relative to confdir unless starting with ~/, +b/, +c/ or / ) to be read as if it was found at this place.

Each of the three files or a file included as described above can also be a directory, in which case all files it contains with a filename ending in .conf and not starting with . are read.

OVERRIDE FILES¶

The format of override files used by reprepro should resemble the extended ftp-archive format, to be specific it is:

packagename field name new value

For example:
kernel-image-2.4.31-yourorga Section protected/base
kernel-image-2.4.31-yourorga Priority standard
kernel-image-2.4.31-yourorga Maintainer That's me <me@localhost>
reprepro Priority required

All fields of a given package will be replaced by the new value specified in the override file with the exception of special fields starting with a dollar sign ($). While the field name is compared case-insensitive, it is copied in exactly the form in the override file there. (Thus I suggest to keep to the exact case it is normally found in index files in case some other tool confuses them.) More than copied is the Section header (unless -S is supplied), which is also used to guess the component (unless -C is there).

Some values like Package, Filename, Size or MD5sum are forbidden, as their usage would severely confuse reprepro.

As an extension reprepro also supports patterns instead of packagenames. If the package name contains '*', '[' or '?', it is considered a pattern and applied to each package that is not matched by any non-pattern override nor by any previous pattern.

Fieldnames starting with a dollar ($) are not be placed in the exported control data but have special meaning. Unknown ones are loudly ignored. Special fields are:

$Component: includedeb, includedsc, include and processincoming will put the package in the component given as value (unless itself overridden with -C). Note that the proper way to specify the component is by setting the section field and using this extension will most likely confuse people and/or tools.

$Delete: the value is treated a fieldname and fields of that name are removed. (This way one can remove fields previously added without removing and re-adding the package. And fields already included in the package can be removed, too).

UPLOADERS FILES¶

These files specified by the Uploaders header in the distribution definition as explained above describe what key a .changes file as to be signed with to be included in that distribution.

Empty lines and lines starting with a hash are ignored, every other line must be of one of the following nine forms or an include directive:

allow condition by anybody

which allows everyone to upload packages matching condition,

allow condition by unsigned

which allows everything matching that has no pgp/gpg header,

allow condition by any key

which allows everything matching with any valid signature in or

allow condition by key key-id

which allows everything matching signed by this key-id (to be specified without any spaces). If the key-id ends with a + (plus), a signature with a subkey of this primary key also suffices.

key-id must be a suffix of the id libgpgme uses to identify this key, i.e. a number of hexdigits from the end of the fingerprint of the key, but no more than what libgpgme uses. (The maximal number should be what gpg --list-key --with-colons prints, as of the time of this writing that is at most 16 hex-digits).

allow condition by group groupname

which allows every member of group groupname. Groups can be manipulated by

group groupname add key-id

to add a key-id (see above for details) to this group, or

group groupname contains groupname

to add a whole group to a group.

To avoid warnings in incomplete config files there is also

group groupname empty

to declare a group has no members (avoids warnings that it is used without those) and

group groupname unused

to declare that a group is not yet used (avoid warnings that it is not used).

A line starting with include causes the rest of the line to be interpreted as filename, which is opened and processed before the rest of the file is processed.

The only conditions currently supported are:

*

which means any package,

source 'name'

which means any package with source name. ('*', '?' and '[..]' are treated as in shell wildcards).

sections 'name'(|'name')*

matches an upload in which each section matches one of the names given. As upload conditions are checked very early, this is the section listed in the .changes file, not the one from the override file. (But this might change in the future, if you have the need for the one or the other behavior, let me know).

sections contain 'name'(|'name')*

The same, but not all sections must be from the given set, but at least one source or binary package needs to have one of those given.

binaries 'name'(|'name')*

matches an upload in which each binary (type deb or udeb) matches one of the names given.

binaries contain 'name'(|'name')*

again only at least one instead of all is required.

architectures 'architecture'(|'name')*

matches an upload in which each package has only architectures from the given set. source and all are treated as unique architectures. Wildcards are not allowed.

architectures contain 'architecture'(|'architecture')*

again only at least one instead of all is required.

byhand

matches an upload with at least one byhand file (i.e. a file with section byhand or raw-something).

byhand 'section'(|'section')*

matches an upload with at least one byhand file and all byhand files having a section listed in the list of given section. (i.e. byhand 'byhand'|'raw-*' is currently is the same as byhand).

distribution 'codename'

which means any package when it is to be included in codename. As the uploaders file is given by distribution, this is only useful to reuse a complex uploaders file for multiple distributions.

Putting not in front of a condition, inverses it's meaning. For example
allow not source 'r*' by anybody
means anybody may upload packages which source name does not start with an 'r'.

Multiple conditions can be connected with and and or, with or binding stronger (but both weaker than not). That means
allow source 'r*' and source '*xxx' or source '*o' by anybody
is equivalent to
allow source 'r*xxx' by anybody
allow source 'r*o' by anybody

(Other conditions will follow once somebody tells me what restrictions are useful. Currently planned is only something for architectures).

ERROR IGNORING¶

With --ignore on the command line or an ignore line in the options file, the following type of errors can be ignored:

brokenold (hopefully never seen)

If there are errors parsing an installed version of package, do not error out, but assume it is older than anything else, has not files or no source name.

brokensignatures

If a .changes or .dsc file contains at least one invalid signature and no valid signature (not even expired or from an expired or revoked key), reprepro assumes the file got corrupted and refuses to use it unless this ignore directive is given.

brokenversioncmp (hopefully never seen)

If comparing old and new version fails, assume the new one is newer.

dscinbinnmu

If a .changes file has an explicit Source version that is different the to the version header of the file, than reprepro assumes it is binary non maintainer upload (NMU). In that case, source files are not permitted in .changes files processed by include or processincoming. Adding --ignore=dscinbinnmu allows it for the include command.

emptyfilenamepart (insecure)

Allow strings to be empty that are used to construct filenames. (like versions, architectures, ...)

extension

Allow one to includedeb files that do not end with .deb, to includedsc files not ending in .dsc and to include files not ending in .changes.

forbiddenchar (insecure)

Do not insist on Debian policy for package and source names and versions. Thus allowing all 7-bit characters but slashes (as they would break the file storage) and things syntactically active (spaces, underscores in filenames in .changes files, opening parentheses in source names of binary packages). To allow some 8-bit chars additionally, use 8bit additionally.

8bit (more insecure)

Allow 8-bit characters not looking like overlong UTF-8 sequences in filenames and things used as parts of filenames. Though it hopefully rejects overlong UTF-8 sequences, there might be other characters your filesystem confuses with special characters, thus creating filenames possibly equivalent to /mirror/pool/main/../../../etc/shadow (Which should be safe, as you do not run reprepro as root, do you?) or simply overwriting your conf/distributions file adding some commands in there. So do not use this if you are paranoid, unless you are paranoid enough to have checked the code of your libs, kernel and filesystems.

ignore (for forward compatibility)

Ignore unknown ignore types given to --ignore.

flatandnonflat (only suppresses a warning)

Do not warn about a flat and a non-flat distribution from the same source with the same name when updating. (Hopefully never ever needed.)

malformedchunk (I hope you know what you do)

Do not stop when finding a line not starting with a space but no colon(:) in it. These are otherwise rejected as they have no defined meaning.

missingfield (safe to ignore)

Ignore missing fields in a .changes file that are only checked but not processed. Those include: Format, Date, Urgency, Maintainer, Description, Changes

missingfile (might be insecure)

When including a .dsc file from a .changes file, try to get files needed but not listed in the .changes file (e.g. when someone forgot to specify -sa to dpkg-buildpackage) from the directory the .changes file is in instead of erroring out. (--delete will not work with those files, though.)

spaceonlyline (I hope you know what you do)

Allow lines containing only (but non-zero) spaces. As these do not separate chunks as thus will cause reprepro to behave unexpected, they cause error messages by default.

surprisingarch

Do not reject a .changes file containing files for a architecture not listed in the Architecture-header within it.

surprisingbinary

Do not reject a .changes file containing .deb files containing packages whose name is not listed in the "Binary:" header of that changes file.

undefinedtarget (hope you are not using the wrong db directory)

Do not stop when the packages.db file contains databases for codename/packagetype/component/architectures combinations that are not listed in your distributions file.

This allows you to temporarily remove some distribution from the config files, without having to remove the packages in it with the clearvanished command. You might even temporarily remove single architectures or components, though that might cause inconsistencies in some situations.

undefinedtracking (hope you are not using the wrong db directory)

Do not stop when the tracking file contains databases for distributions that are not listed in your distributions file.

This allows you to temporarily remove some distribution from the config files, without having to remove the packages in it with the clearvanished command. You might even temporarily disable tracking in some distribution, but that is likely to cause inconsistencies in there, if you do not know, what you are doing.

unknownfield (for forward compatibility)

Ignore unknown fields in the config files, instead of refusing to run then.

unusedarch (safe to ignore)

No longer reject a .changes file containing no files for any of the architectures listed in the Architecture-header within it.

unusedoption

Do not complain about command line options not used by the specified action (like --architecture).

uploaders

The include command will accept packages that would otherwise been rejected by the uploaders file.

wrongarchitecture (safe to ignore)

Do not warn about wrong "Architecture:" lines in downloaded Packages files. (Note that wrong Architectures are always ignored when getting stuff from flat repositories or importing stuff from one architecture to another).

wrongdistribution (safe to ignore)

Do not error out if a .changes file is to be placed in a distribution not listed in that files' Distributions: header.

wrongsourceversion

Do not reject a .changes file containing .deb files with a different opinion on what the version of the source package is.
(Note: reprepro only compares literally here, not by meaning.)

wrongversion

Do not reject a .changes file containing .dsc files with a different version.
(Note: reprepro only compares literally here, not by meaning.)

expiredkey (I hope you know what you do)

Accept signatures with expired keys. (Only if the expired key is explicitly requested).

expiredsignature (I hope you know what you do)

Accept expired signatures with expired keys. (Only if the key is explicitly requested).

revokedkey (I hope you know what you do)

Accept signatures with revoked keys. (Only if the revoked key is explicitly requested).

GUESSING¶

When including a binary or source package without explicitly declaring a component with -C it will take the first component with the name of the section, being prefix to the section, being suffix to the section or having the section as prefix or any. (In this order)

Thus having specified the components: "main non-free contrib non-US/main non-US/non-free non-US/contrib" should map e.g. "non-US" to "non-US/main" and "contrib/editors" to "contrib", while having only "main non-free and contrib" as components should map "non-US/contrib" to "contrib" and "non-US" to "main".

NOTE: Always specify main as the first component, if you want things to end up there.

NOTE: unlike in dak, non-US and non-us are different things...

NOMENCLATURE¶

Codename the primary identifier of a given distribution. This are normally things like sarge, etch or sid.

basename

the name of a file without any directory information.

byhand

Changes files can have files with section 'byhand' (Debian) or 'raw-' (Ubuntu). Those files are not packages but other data generated (usually together with packages) and then uploaded together with this changes files.

With reprepro those can be stored in the pool next to their packages with tracking, put in some log directory when using processincoming, or given to an hook script (currently only possible with processincoming).

filekey

the position relative to the outdir. (as found in "Filename:" in Packages.gz)

full filename

the position relative to /

architecture

The term like sparc, i386, mips, ... . To refer to the source packages, source is sometimes also treated as architecture.

component

Things like main, non-free and contrib (by policy and some other programs also called section, reprepro follows the naming scheme of apt here.)

section

Things like base, interpreters, oldlibs and non-free/math (by policy and some other programs also called subsections).

md5sum

The checksum of a file in the format "<md5sum of file> <length of file>"

Some note on updates¶

ENVIRONMENT VARIABLES¶

Environment variables are always overwritten by command line options, but overwrite options set in the options file. (Even when the options file is obviously parsed after the environment variables as the environment may determine the place of the options file).

REPREPRO_BASE_DIR

The directory in this variable is used instead of the current directory, if no -b or --basedir options are supplied.
It is also set in all hook scripts called by reprepro (relative to the current directory or absolute, depending on how reprepro got it).

REPREPRO_CONFIG_DIR

The directory in this variable is used when no --confdir is supplied.
It is also set in all hook scripts called by reprepro (relative to the current directory or absolute, depending on how reprepro got it).

REPREPRO_OUT_DIR

This is not used, but only set in hook scripts called by reprepro to the directory in which the pool subdirectory resides (relative to the current directory or absolute, depending on how reprepro got it).

REPREPRO_DIST_DIR

This is not used, but only set in hook scripts called by reprepro to the dists directory (relative to the current directory or absolute, depending on how reprepro got it).

REPREPRO_LOG_DIR

This is not used, but only set in hook scripts called by reprepro to the value setable by --logdir.

REPREPRO_CAUSING_COMMAND

REPREPRO_CAUSING_FILE

Those two environment variable are set (or unset) in Log: and ByHandHooks: scripts and hint what command and what file caused the hook to be called (if there is some).

REPREPRO_CAUSING_RULE

This environment variable is set (or unset) in Log: scripts and hint what update or pull rule caused this change.

REPREPRO_FROM

This environment variable is set (or unset) in Log: scripts and denotes what other distribution a package is copied from (with pull and copy commands).

REPREPRO_FILTER_ARCHITECTURE

REPREPRO_FILTER_CODENAME

REPREPRO_FILTER_COMPONENT

REPREPRO_FILTER_PACKAGETYPE

REPREPRO_FILTER_PATTERN

Set in FilterList: and FilterSrcList: scripts.

GNUPGHOME

Not used by reprepro directly. But reprepro uses libgpgme, which calls gpg for signing and verification of signatures. And your gpg will most likely use the content of this variable instead of "~/.gnupg". Take a look at gpg(1) to be sure. You can also tell reprepro to set this with the --gnupghome option.

GPG_TTY

When there is a gpg-agent running that does not have the passphrase cached yet, gpg will most likely try to start some pinentry program to get it. If that is pinentry-curses, that is likely to fail without this variable, because it cannot find a terminal to ask on. In this cases you might set this variable to something like the value of $(tty) or $SSH_TTY or anything else denoting a usable terminal. (You might also want to make sure you actually have a terminal available. With ssh you might need the -t option to get a terminal even when telling gpg to start a specific command).

By default, reprepro will set this variable to what the symbolic link /proc/self/fd/0 points to, if stdin is a terminal, unless you told with --noguessgpgtty to not do so.

BUGS¶

Increased verbosity always shows those things one does not want to know. (Though this might be inevitable and a corollary to Murphy)

Reprepro uses berkeley db, which was a big mistake. The most annoying problem not yet worked around is database corruption when the disk runs out of space. (Luckily if it happens while downloading packages while updating, only the files database is affected, which is easy (though time consuming) to rebuild, see recovery file in the documentation). Ideally put the database on another partition to avoid that.

While the source part is mostly considered as the architecture source some parts may still not use this notation.

WORK-AROUNDS TO COMMON PROBLEMS¶

gpgme returned an impossible condition

With the woody version this normally meant that there was no .gnupg directory in $HOME, but it created one and reprepro succeeds when called again with the same command. Since sarge the problem sometimes shows up, too. But it is no longer reproducible and it does not fix itself, neither. Try running gpg --verify file-you-had-problems-with manually as the user reprepro is running and with the same $HOME. This alone might fix the problem. It should not print any messages except perhaps
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
if it was an unsigned file.

not including .orig.tar.gz when a .changes file's version does not end in -0 or -1

If dpkg-buildpackage is run without the -sa option to build a version with a Debian revision not being -0 or -1, it does not list the .orig.tar.gz file in the .changes file. If you want to include such a file with reprepro when the .orig.tar.gz file does not already exist in the pool, reprepro will report an error. This can be worked around by:
call dpkg-buildpackage with -sa (recommended)
copy the .orig.tar.gz file to the proper place in the pool before
call reprepro with --ignore=missingfile (discouraged)

leftover files in the pool directory.

reprepro is sometimes a bit too timid of deleting stuff. When things go wrong and there have been errors it sometimes just leaves everything where it is. To see what files reprepro remembers to be in your pool directory but does not know anything needing them right know, you can use
reprepro dumpunreferenced
To delete them:
reprepro deleteunreferenced

INTERRUPTING¶

Interrupting reprepro has its problems. Some things (like speaking with apt methods, database stuff) can cause problems when interrupted at the wrong time. Then there are design problems of the code making it hard to distinguish if the current state is dangerous or non-dangerous to interrupt. Thus if reprepro receives a signal normally sent to tell a process to terminate itself softly, it continues its operation, but does not start any new operations. (I.e. it will not tell the apt-methods any new file to download, it will not replace a package in a target, unless it already had started with it, it will not delete any files gotten dereferenced, and so on).

It only catches the first signal of each type. The second signal of a given type will terminate reprepro. You will risk database corruption and have to remove the lockfile manually.

Also note that even normal interruption leads to code-paths mostly untested and thus expose a multitude of bugs including those leading to data corruption. Better think a second more before issuing a command than risking the need for interruption.

REPORTING BUGS¶

Report bugs or wishlist requests to the Debian BTS
(e.g. by using reportbug reprepro under Debian)
or directly to

COPYRIGHT¶

Copyright © 2004,2005,2006,2007,2008,2009,2010,2011,2012
This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.