public inbox for [email protected]  
help / color / mirror / Atom feed
Obsolete Linux downloads (Debian) instructions
3+ messages / 3 participants
[nested] [flat]

* Obsolete Linux downloads (Debian) instructions
@ 2024-04-12 10:43  Laura Smith <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Laura Smith @ 2024-04-12 10:43 UTC (permalink / raw)
  To: postgre <[email protected]>

Hi

Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @ https://www.postgresql.org/download/linux/debian/ ? 

The manner proposed is really "not the done thing" in 2024 and it has been explicitly obsoleted by Debian so the project really should not be promoting it as a supported manner to do things.

TL;DR: You should not be using blindly trusting keys for all repos (which is what apt-key add does).  See : https://wiki.debian.org/DebianRepository/UseThirdParty


Something like this is the way it should be done:


# Install GPG Certcurl -fsSL "https://www.postgresql.org/media/keys/ACCC4CF8.asc"; \
    | gpg --dearmor \
    | sudo sponge /etc/apt/keyrings/postgresql.gpg
# Create source list file
. /etc/os-release
echo "deb [signed-by=/etc/apt/keyrings/postgresql.gpg] https://apt.postgresql.org/pub/repos/apt ${VERSION_CODENAME}-pgdg main" \
    | doas sponge /etc/apt/sources.list.d/postgresql.list
## Install
doas apt-get update && apt-get -y install postgresql










^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Obsolete Linux downloads (Debian) instructions
@ 2024-04-12 10:57  Daniel Gustafsson <[email protected]>
  parent: Laura Smith <[email protected]>
  0 siblings, 1 reply; 3+ messages in thread

From: Daniel Gustafsson @ 2024-04-12 10:57 UTC (permalink / raw)
  To: Laura Smith <[email protected]>; +Cc: postgre <[email protected]>; Christoph Berg <[email protected]>

> On 12 Apr 2024, at 12:43, Laura Smith <[email protected]> wrote:

> Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @ https://www.postgresql.org/download/linux/debian/ ?

Badgering is usually not required when it comes to fixing broken things,
assuming they are broken (since I'm not a Debian user I cannot really comment
on that part), fixing them is generally more productive.  You can find the
website code in the following repository:

	https://git.postgresql.org/gitweb/?p=pgweb.git;a=summary

The file to look at is templates/pages/download/linux/debian.html.  If you
propose a patch for the instructions, ideally on the pgsql-www@ mailinglist,
I'm sure we can ask Christophe (in CC:) for a review.

--
Daniel Gustafsson







^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: Obsolete Linux downloads (Debian) instructions
@ 2024-04-16 10:48  Christoph Berg <[email protected]>
  parent: Daniel Gustafsson <[email protected]>
  0 siblings, 0 replies; 3+ messages in thread

From: Christoph Berg @ 2024-04-16 10:48 UTC (permalink / raw)
  To: Daniel Gustafsson <[email protected]>; +Cc: Laura Smith <[email protected]>; postgres <[email protected]>

Re: Daniel Gustafsson
> > On 12 Apr 2024, at 12:43, Laura Smith <[email protected]> wrote:
> 
> > Who do I have to badger to get the obsolete and frankly dangerous Debian repo instructions fixed @ https://www.postgresql.org/download/linux/debian/ ?

I still think that "frankly dangerous" is a gross exaggeration, but
the long-due update of the Debian and Ubuntu download pages has now
happened.

Christoph






^ permalink  raw  reply  [nested|flat] 3+ messages in thread


end of thread, other threads:[~2024-04-16 10:48 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-04-12 10:43 Obsolete Linux downloads (Debian) instructions Laura Smith <[email protected]>
2024-04-12 10:57 ` Daniel Gustafsson <[email protected]>
2024-04-16 10:48   ` Christoph Berg <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox