cyanfish
commented
2 months ago I've added some instructions here, try this: https://www.naps2.com/linux-scanning#apt
Open Gitoffthelawn opened 2 months ago
cyanfish
commented
2 months ago I've added some instructions here, try this: https://www.naps2.com/linux-scanning#apt
Gitoffthelawn
commented
2 months ago I've added some instructions here, try this: https://www.naps2.com/linux-scanning#apt
Thanks. From security, privacy, and availability points of views, do you think it makes more sense to set it up to get the files from the private naps2.com server, or from GitHub servers? Especially given that the signatures and executables would be coming from the same server (unless I'm misunderstanding), I wonder if GitHub is a slightly better choice. What do you think?
Separately, one of the things I really like about PPAs is that it that adding a PPA is so incredibly easy for users.
cyanfish
commented
2 months ago www.naps2.com and downloads.naps2.com are different physical servers (though it's fair to say the separation isn't perfect as they're both under the same VPS account).
I would be happy to use Github but I don't know that it's possible - all the doc I had was based on local packages. And I don't think PPAs will work as Launchpad doesn't support binary packages.
The main security benefit you get is that you only download the public key once - in the event of a server compromise, you're only vulnerable if you're trying to do the initial Apt setup. And that's no less true if you're just downloading binaries directly.
Gitoffthelawn
commented
2 months ago I followed your instructions, and they worked well. Thank you.
There has yet to be a NAPS2 update since you posted your reply, so when you release the next version, I'll know for sure if everything is a success.
If you have a few minutes, and feel like it, and want to explain a bit more why you think a PPA won't work for NAPS2, I'm interested in reading your thoughts. To date, I have not published a PPA myself, so I'm interested in learning more about potential obstacles. If you're too busy, or just don't feel writing more on the topic, that's not a problem, and I certainly understand.
cyanfish
commented
2 months ago NAPS2 currently only builds binary packages, not source packages. PPAs are published through Launchpad, which does not allow binary packages.
Note: We do not allow uploading pre-built binary packages.
And I'm not sure that making source packages would help, as I assume Launchpad can only use build dependencies that are provided through Ubuntu. NAPS2 uses the latest .NET SDK to build, and I usually upgrade to the newest version on release. But the Ubuntu-based releases tend to lag behind the official Microsoft releases and aren't supported on all the Ubuntu versions I support.
Gitoffthelawn
commented
2 months ago Thanks. How are you defining "source package". The NAPS2 source is open (a big thank you!), and a makefile can be created to automate the build process. I get the sense there is more to it though. Is there?
Regarding the latest .NET SDK, yes, I could see that possibly being an issue. I'm currently not sure of Launchpad's dependency criteria either.
Is your feature request related to a problem? Please describe. It's not a big deal, but having to check GitHub and then manually download and install the latest version of NAPS2 from GitHub is a little bit of a hassle.
Describe the solution you'd like Make Ubuntu and Linux Mint downloads available via a PPA.
Describe alternatives you've considered Make Linux downloads available via downstream repositories, such as the ones maintained by Debian, Ubuntu, or Linux Mint.