Project

General

Profile

Bug #15626

Verify (and Document?) Additional Software Feature behaviour with apt-key

Added by geb about 1 year ago. Updated 9 days ago.

Status:
Confirmed
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
05/29/2018
Due date:
% Done:

0%

Feature Branch:
Type of work:
Research
Blueprint:
Starter:
Affected tool:
Additional Software Packages

Description

Hi,

Additionnal Software feature documents how to add a repository here https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html.
However, lot of those repositories use additionnal PGP keys for integrity etc.

As the documentation does not mention anything about those keys and their use, I am wondering,
- How/If it will work without those keys
- If/How it won't be wortly to document how to add those keys, if douable.


Related issues

Blocked by Tails - Bug #16563: Configuring additional APT repositories make WhisperBack crash Resolved 03/15/2019

History

#1 Updated by emmapeel about 1 year ago

  • Assignee set to sajolida

sajolida, please have a look at this ticket and assign it to me if you feel it should be part of the new Additional Software docs.

#2 Updated by emmapeel about 1 year ago

  • Subject changed from Verify (and Document?) Additionnal Software Feature behaviour with apt-key to Verify (and Document?) Additional Software Feature behaviour with apt-key

#3 Updated by sajolida about 1 year ago

  • Status changed from New to Confirmed
  • Assignee changed from sajolida to emmapeel
  • Target version set to Tails_3.9
  • Type of work changed from End-user documentation to Research

Indeed, that's a valid point.

In the current version we are advertising adding additional repos to enable non-free section and that doesn't require additional APT key:

https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html#index2h1

But in the version we are writing on feature/14594-asp-gui we talk about non-Debian repositories, and these would require additional APT key.

Emma, can you check what it would take to make an additional APT key persistent in Tails?

  • If that's feasible, then I would adjust our new doc to mention this as well.
  • If that's not feasible, then I would adjust our new doc to make it clear that this will not be enough for non-Debian repos.

#4 Updated by u 11 months ago

  • Related to Bug #15609: We do not provide OpenPGP signature for the Additional Software feature Beta ISO added

#5 Updated by u 11 months ago

  • Related to deleted (Bug #15609: We do not provide OpenPGP signature for the Additional Software feature Beta ISO)

#6 Updated by u 11 months ago

#7 Updated by u 11 months ago

  • QA Check set to Info Needed

#8 Updated by u 11 months ago

  • Assignee changed from emmapeel to sajolida

I'm assigning this to sajolida: please let me know if you want to look into it, if emmapeel will do it or if we should ask Alan?

#9 Updated by sajolida 11 months ago

  • Assignee deleted (sajolida)
  • Target version deleted (Tails_3.9)
  • QA Check deleted (Info Needed)
  • Type of work changed from Research to Wait

I think that's outside of the scope of SponorW_2017. Let's wait some time after 3.9 to see how popular this use case is. Then we'll have better argument to work on this (my bet is that it will be hard to support this use case well).

#10 Updated by intrigeri 4 months ago

  • Type of work changed from Wait to Research

sajolida wrote:

I think that's outside of the scope of SponorW_2017. Let's wait some time after 3.9 to see how popular this use case is. Then we'll have better argument to work on this (my bet is that it will be hard to support this use case well).

@sajolida, maybe enough time after 3.9 has passed to do the next steps?

#11 Updated by sajolida 4 months ago

  • Assignee set to sajolida
  • Target version set to Tails_3.13
  • Parent task set to #15979

If I have time, I'll try to write a script to extract "======= content of /" from WhisperBack reports as part of #15979. This way we could have easy stats on both Additional Software usage and list of additional repos, if any.

#12 Updated by sajolida 4 months ago

  • Blocked by Bug #16563: Configuring additional APT repositories make WhisperBack crash added

#13 Updated by sajolida 4 months ago

  • Target version changed from Tails_3.13 to Tails_3.14

#14 Updated by u 4 months ago

  • Parent task deleted (#15979)

I'm unparenting this from the deliverable.

#15 Updated by CyrilBrulebois about 2 months ago

  • Target version changed from Tails_3.14 to Tails_3.15

#16 Updated by CyrilBrulebois 9 days ago

  • Target version changed from Tails_3.15 to Tails_3.16

Also available in: Atom PDF