MIME-Version: 1.0
In-Reply-To: <20130219160156.GJ3033@piware.de>
References: <20130216153309.GF12029@momjian.us>
	<20130216234034.GG12029@momjian.us>
	<20130217054028.GA6000@alvh.no-ip.org>
	<20130217121745.GH12029@momjian.us>
	<20130218020824.GA4691@alvh.no-ip.org>
	<20130219120304.GB20153@momjian.us>
	<5123952C.1030408@2ndQuadrant.com>
	<CABUevExD808PKJEMuhLnH_pk8hD9yJ3eSA2Dv0q_EP1-o7B5Mg@mail.gmail.com>
	<20130219153632.GE3033@piware.de>
	<CABUevEzGrQ=0J8dw1fj=k-cVkzbgfnNOkwYTk_BK-zLu8P+wBA@mail.gmail.com>
	<20130219160156.GJ3033@piware.de>
Date: Wed, 20 Feb 2013 17:05:44 +0100
Message-ID: 
 <CABUevEzmomgWW6p3U+wJ1+q=w9H1vbASg+2QvhsEjsBkedgJVA@mail.gmail.com>
Subject: Re: [pgsql-pkg-debian] Re: We should not transition to
	apt.postgresql.org until we have a PPA
From: Magnus Hagander <magnus@hagander.net>
To: Martin Pitt <mpitt@debian.org>
Cc: Greg Smith <greg@2ndquadrant.com>, Bruce Momjian <bruce@momjian.us>,
	Alvaro Herrera <alvherre@2ndquadrant.com>,
	Christoph Berg <myon@debian.org>,
	Stefan Kaltenbrunner <stefan@kaltenbrunner.cc>,
	Josh Berkus <josh@agliodbs.com>,
	PostgreSQL WWW <pgsql-www@postgresql.org>,
	PostgreSQL in Debian <pgsql-pkg-debian@postgresql.org>,
	Tom Lane <tgl@sss.pgh.pa.us>
Content-Type: text/plain; charset=ISO-8859-1
Precedence: bulk
Sender: pgsql-www-owner@postgresql.org

On Tue, Feb 19, 2013 at 5:01 PM, Martin Pitt <mpitt@debian.org> wrote:
> Magnus Hagander [2013-02-19 16:40 +0100]:
>> Unfortunately, it will take quite a while to propagate, no?
>
> Yes, but it took a long time to set up apt.p.o, and the PPA won't
> disappear anytime soon anyway. This is also something which we can
> backport to 12.04 LTS, and 10.04 LTS' lifetime isn't that long any
> more anyway. For Debian, there's a good chance we can get it into the
> next release (wheezy); it's in deep freeze, but that's a low-risk
> change.

Yeah. It would be very nice to get it in there for future work, but we
definitely need to put something else in place before then. But let's
do both :)


>> What we were considering was using a curl | sudo bash basically. It
>> will then be signed by our main SSL certificate, so that should be
>> almost as trustworthy as a package signature (ours would be
>> exploitable by somebody tricking a public CA into giving them a cert
>> for www.postgresql.org)
>
> That seems fine indeed. There's nothing wrong with having more than
> one way -- if you have the local script, use that, otherwise use above
> approach?

Yeah, that's what I'd suggest.


-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/


-- 
Sent via pgsql-www mailing list (pgsql-www@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-www