Обсуждение: [MASSMAIL]Obsolete Linux downloads (Debian) instructions

Поиск
Список
Период
Сортировка

[MASSMAIL]Obsolete Linux downloads (Debian) instructions

От
Laura Smith
Дата:
Hi

Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @
https://www.postgresql.org/download/linux/debian/ ? 

The manner proposed is really "not the done thing" in 2024 and it has been explicitly obsoleted by Debian so the
projectreally should not be promoting it as a supported manner to do things. 

TL;DR: You should not be using blindly trusting keys for all repos (which is what apt-key add does).  See
: https://wiki.debian.org/DebianRepository/UseThirdParty


Something like this is the way it should be done:


# Install GPG Certcurl -fsSL "https://www.postgresql.org/media/keys/ACCC4CF8.asc" \
    | gpg --dearmor \
    | sudo sponge /etc/apt/keyrings/postgresql.gpg
# Create source list file
. /etc/os-release
echo "deb [signed-by=/etc/apt/keyrings/postgresql.gpg] https://apt.postgresql.org/pub/repos/apt
${VERSION_CODENAME}-pgdgmain" \ 
    | doas sponge /etc/apt/sources.list.d/postgresql.list
## Install
doas apt-get update && apt-get -y install postgresql







Re: Obsolete Linux downloads (Debian) instructions

От
Daniel Gustafsson
Дата:
> On 12 Apr 2024, at 12:43, Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch> wrote:

> Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @
https://www.postgresql.org/download/linux/debian/? 

Badgering is usually not required when it comes to fixing broken things,
assuming they are broken (since I'm not a Debian user I cannot really comment
on that part), fixing them is generally more productive.  You can find the
website code in the following repository:

    https://git.postgresql.org/gitweb/?p=pgweb.git;a=summary

The file to look at is templates/pages/download/linux/debian.html.  If you
propose a patch for the instructions, ideally on the pgsql-www@ mailinglist,
I'm sure we can ask Christophe (in CC:) for a review.

--
Daniel Gustafsson




Re: Obsolete Linux downloads (Debian) instructions

От
Christoph Berg
Дата:
Re: Daniel Gustafsson
> > On 12 Apr 2024, at 12:43, Laura Smith <n5d9xq3ti233xiyif2vp@protonmail.ch> wrote:
> 
> > Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @
https://www.postgresql.org/download/linux/debian/?
 

I still think that "frankly dangerous" is a gross exaggeration, but
the long-due update of the Debian and Ubuntu download pages has now
happened.

Christoph