[Bug 205350] ports-mgmt/pkg doesn't respect locked packages and upgrades them anyway

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=205350

Adam Bernstein <adam at electricembers.coop> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |adam at electricembers.coop

--- Comment #1 from Adam Bernstein <adam at electricembers.coop> ---
I want to add snippets of a session transcript here as supporting material. 

Summary:

1. curl starts out locked (because we build it from ports with custom options)
2. pkg sees that it's locked and says it won't touch it, and does not list it
in the "Packages to be UPGRADED" section
3. pkg downloads and installs the update anyway, unlocking the package in the
process
4. curl is indeed updated, and now unlocked

That is clearly inconsistent/buggy behavior. It happens with various packages,
not just curl, quite reliably ever since one of the version updates of pkg
itself - and I'm sorry we can't say which, but maybe 2-3 months ago.

Transcript follows:

# pkg lock -l
Currently locked packages:
alpine-2.20_1
curl-7.44.0
drush-6.5.0
pdflib-7.0.5_4
pear-1.9.4_3
pecl-pdflib-3.0.4
pecl-ssh2-0.12
portmaster-3.17.7
pwauth-2.3.11
wget-1.16.3

# pkg upgrade
Updating FreeBSD repository catalogue...
[SNIP]
Checking for upgrades (127 candidates): 100%
Processing candidates (127 candidates): 42%

curl-7.44.0 is locked and may not be modified
Processing candidates (127 candidates): 100%
The following 114 package(s) will be affected (of 0 checked):

Installed packages LOCKED:
Package curl-7.44.0 is locked and may not be upgraded to version 7.46.0_1

[SNIP]

Installed packages to be UPGRADED:

[SNIP]
emacs-nox11: 24.5_1,3 -> 24.5_2,3
db5: 5.3.28_2 -> 5.3.28_3
cmake-modules: 3.3.1 -> 3.4.1
cmake: 3.3.1 -> 3.4.1
ca_root_nss: 3.20 -> 3.20.1
bash: 4.3.42 -> 4.3.42_1
[SNIP]

Proceed with this action? [y/N]: y

[SNIP]
[private1.electricembers.net] Fetching curl-7.46.0_1.txz: 3% 50 KiB
51.2kB/[private1.electricembers.net] Fetching curl-7.46.0_1.txz: 100% 1 MiB
1.5MB/s 00:01
[private1.electricembers.net] [49/115] Upgrading curl from 7.44.0 to
7.46.0_1...
[private1.electricembers.net] [49/115] Extracting curl-7.46.0_1: 100%
[SNIP]

# pkg info | grep curl
curl-7.46.0_1 Non-interactive tool to get files from FTP, GOPHER, HTTP(S)
servers

# pkg lock -l
Currently locked packages:
alpine-2.20_1
drush-6.5.0
pdflib-7.0.5_4
pear-1.9.4_3
pecl-pdflib-3.0.4
pecl-ssh2-0.12
portmaster-3.17.7
pwauth-2.3.11
wget-1.16.3

-- 
You are receiving this mail because:
You are the assignee for the bug.