Обсуждение: APT repository instructions

Hi,

Thanks for all the work you guys put in to maintain the deb packages
for postgres!

Is there somewhere where updates/changes to the APT repository
documentation can be submitted?

I can see various differing instructions at:
https://wiki.postgresql.org/wiki/Apt
https://wiki.postgresql.org/wiki/Apt/FAQ
https://apt.postgresql.org/pub/repos/apt/README
https://salsa.debian.org/postgresql/postgresql-common/raw/master/pgdg/apt.postgresql.org.sh

From a quick glance, it looks like the instructions are out of date in
some places and could do with some updating. See
https://blog.cloudflare.com/dont-use-apt-key/ for reasons why.

In short, the gpg key symlink should be moved from
/etc/apt/trusted.gpg.d/ to /usr/share/keyrings/ and the
sources.list.d/pgdg.list should be updated to read:

deb [signed-by=/usr/share/keyrings/apt.postgresql.org.gpg]
https://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main


Thanks,
Tom

Re: Tom Cassidy
> Hi,
> 
> Thanks for all the work you guys put in to maintain the deb packages
> for postgres!
> 
> Is there somewhere where updates/changes to the APT repository
> documentation can be submitted?

Hi Tom,

it's on the TODO list. You are right that we should be doing something
about the key handling, but at the same time, we aren't going to rush
it since we don't want to break existing systems, so this is still
waiting for some quiet hours here so I can think through the whole
process.


https://www.postgresql.org/message-id/flat/g2njU7RqFXPz62jAeK3x0e5SvgP9EocwTWjDTfMnCM7l6er_-ewFRbU6E_QaAH3JRCw5YQyVRMX5Dgd-tsvuleGS4iv4oj5OxjmMgcx15_E%3D%40protonmail.ch

Christoph

On Tue, 2022-08-16 at 17:17 +0200, Christoph Berg wrote:
> Re: Tom Cassidy
> > Hi,
> > 
> > Thanks for all the work you guys put in to maintain the deb
> > packages
> > for postgres!
> > 
> > Is there somewhere where updates/changes to the APT repository
> > documentation can be submitted?
> 
> Hi Tom,
> 
> it's on the TODO list. You are right that we should be doing
> something
> about the key handling, but at the same time, we aren't going to rush
> it since we don't want to break existing systems, so this is still
> waiting for some quiet hours here so I can think through the whole
> process.
> 
>
https://www.postgresql.org/message-id/flat/g2njU7RqFXPz62jAeK3x0e5SvgP9EocwTWjDTfMnCM7l6er_-ewFRbU6E_QaAH3JRCw5YQyVRMX5Dgd-tsvuleGS4iv4oj5OxjmMgcx15_E%3D%40protonmail.ch
> 
> Christoph

Good to know it's already being tracked.

Thanks Christoph.

Tom