Home / ubuntu / Questions / 143030
In Process
chris
Asked: 2012-05-28 12:58:03 +0800 CST

Verify integrity of installed Ubuntu packages

  • 772

I'm looking for a script that is run from a boot-CD doing the following for all files on a drive:

  1. find the debian-package a file is from (if possible)
  2. download and extract the debian-package
  3. generate md5sums for the installed file and the downloaded file
  4. list differences and files that weren't packaged

Is something like this readily available? (I don't trust the local deb-archive.)

Chris

security

1 Answers

  1. Part 1

    sudo dpkg -S stdio.h
sudo dpkg -S stdio.h | cut -d ':' -f 1 > packages.list

    source: section 5.2

    Part 2

    mkdir -p /tmp/archives/partial
apt-get -d -o dir::cache=/tmp -o Debug::NoLocking=1 install --reinstall  < packages.list

    source: Comment from dpk on Alfonso Vila's answer

    Part 3

    Debs are Ar archives and can be manipulated with ar. MD5 hashes can be found using:

    openssl dgst -md5 <filename>

    -- I stopped here as this is where I found debsums which does all of what you want in one tidy package

    sources: Wikipedia on Deb and Debsums ManPage

    • 2