[tsc-devel] Re: Providing an APT repository on alexandria (new team member?)

Marvin Gülker | Thu, 20 Sep 2018 18:32:49 UTC

Am 20. September 2018 um 11:44 Uhr -0400 schrieb Sydney Dykstra:
>  First off,  I don't mind that he is trying to create a PPA(Personal

> Package Archive, as Ubuntu calls it).


I don't think it's a PPA. PPAs are tied to launchpad.net if I am
informed correctly, and he currently hosts it as a real APT repository
on his own server, i.e. you'd need to add a new line to
/etc/apt/sources.list. That's why I mentioned reprepro[1]; that's the
software I used for maintaining a custom APT repostory. It's even
possible to run reprepro under a non-debian-based distribution like
ArchLinux for maintaining an APT repository.

> As a matter of fact, I think it is a good thing. I know alot of people

> in the Debian ecosystem frown on the practice of adding unknown

> repositories to systems, whereas people in the Ubuntu ecosystem seem

> to almost recommend it. I personally don't care so long as it doesn't

> break my package manager and it seems to be a reputable source

> link. It would probably make the most sense just to create a Ubuntu

> PPA, and not try to support Debian.


I think everyone needs to decide on his own whether to add a custom
repository or not. The security implications are real. I think that a
possible compromise would be to offer the .deb packages for download on
the website as well. That way, users can decide whether to add the APT
repository and receive updates (with security implications) or just to
install this specific version, but be more secure.

If possible, a single package for both Debian and Ubuntu would be ideal
in my opinion, though. We'll have to see if boospy can manage to do
this.

Marvin

[1]: https://launchpad.net/reprepro (ironically hosted itself on launchpad.net)

-- 
Blog: https://mg.guelker.eu
PGP/GPG ID: F1D8799FBCC8BC4F
_______________________________________________
tsc-devel mailing list -- …l@l…
To unsubscribe send an email to …e@l…