7.1 The Event Set

peipkg emits eleven event types into the kernel event subsystem. The caller's identity is stamped into the envelope by the kernel (§1.2) and is not part of the payload.

TypeEmitted forEmitted today
peipkg.installA successful installyes
peipkg.upgradeA successful upgrade, downgrade, or undoyes
peipkg.uninstallA successful uninstallyes
peipkg.refreshA repository refresh, successful or partially failedyes
peipkg.transaction-failedA rejected or rolled-back transactionyes
peipkg.recoveryA recovery resolved through peipkg recoveryes
peipkg.authorisationAn operator authorisation recordyes
peipkg.repo-addA repository addyes
peipkg.repo-removeA repository removeyes
peipkg.claimA claim grant or revokeyes
peipkg.config-changeA trust-policy or transport-flag changeno

peipkg.config-change is specified and not emitted. A trust-policy or transport-flag change today produces no event at all.

7.1.1 Payload fields #

FieldContent
txn_idThe transaction identifier.
outcomesuccess, rejection, or rollback.
repoThe repository, for repository operations.
detailThe rejection reason, the operation count, or the authorised action.
timestampRFC 3339, UTC.
packagesName, version and architecture per package.

Note timestamp here is an RFC 3339 string, not the uint used elsewhere in this book (§1.3). peipkg carries its own.

7.1.2 Emission depends on a privilege #

An audit privilege on the caller's token. Without it, emission fails, peipkg warns, and the operation proceeds unaudited. The absence of an event does not mean the operation did not happen.

On a kernel with no emit call, emission is a silent successful no-op.

Edit this page