Open GitHubMad opened 7 years ago
Great idea, as it would boost the usage of BerryBoot. But there should be a clear written policy and security procedure for gpg/checksums for each image, and how they are admitted into this repository. Best would be after review for malware/public vulnerabilities. Else it could have detrimental effects. It'a a feature providing each user full IoT-capabilities just a click away and many are not aware of the dangers from installing unknown images. Maybe a warning/info-screen about this issue could be shown when this different tab in BerryBoot install OS menu is selected.
Some sort of defined BerryBoot protocol with the ability to add custom OS sources could definitely be useful. Alexander Goldcheidt's images being one good example of a 'source'
Haven't had time to look into his images, but adding custom repositories is already possible.
Requires having a file named berryboot.ini on the SD card with:
[repo]
url2=http://location-of-repository/distro.ini
And on the server a repository file in this format, but without the s/mime signing: http://dl.berryboot.com/distro.smime
Hi guys, thanks to open a discussion about adding my images to a unofficial repository. Yes, I'm willing to add all my images to a repository format like Sir @maxnet describe. Also I agreed with @hellyberry about policy and security procedure, I think it will be a mess if anyone can add custom repositories without any security control.
From my end, I can provide all the data about the converting and compression process of all my images, also I have been analyzing all data of every image with ClamAV. If anyone can suggest another way to check the OS images, please let me know.
I'll be working on the repository file in the next days, if anyone have something to add, please let me know. I'll appreciate any comment, suggestion and request.
Has this been managed yet my good Sirs? BTW How Are you agoldcheidt ? haven't had words with you in a I'd say about going on 3 years now. love your site love what you've done with it so far,that you kept well up to date with upmost detailed development even as of 2018. to this day Raspberry pi in my opinion wouldn't be nearly as fun without ya. Anyway very happy with the images so far. has this been so far as tangible yet? or by anyone? i must say..if that next update comes I've just been dying till that tab is added ive thought about it too. oh man i get the chills just Thinking of how happy that would make me grin to see that come to life. ["The Alexander Goldcheidt Images" Tab] that would be exquisite!! or in yet some way to download them straight from OS install tab idk. i like GitHubMad's idea is the best i can think of yet. that would be an awesome addition to the berry boot engine entirely. great idea GitHubMad.
As on one side Alexander Goldcheidt Custom OS Images for Berryboot is growing in popularity (today >17K downloads & ~100 images) and on the other side, BerryBoot official images are not always up-to-date, could you make an agreement with Alexander to add a new Tab in BerryBoot's "Download Images" menu, pointing to his repo ? This would make a bunch of updated & various images more easily accessible to all folks using BB.