search

pyroscope / rtorrent-ps

:art: Extended rTorrent distribution with a fully customizable canvas and colors, other feature additions, and complete docs.
http://rtorrent-ps.readthedocs.io/
GNU General Public License v2.0
465 stars 43 forks source link

Bintray repository should be signed #66

Open zokier opened 7 years ago

zokier commented 7 years ago

Hi,

Currently adding your bintray repository to sources.list results in following error message when running apt update on Debian Stretch:

E: The repository 'https://dl.bintray.com/pyroscope/rtorrent-ps  Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Here is a link about signing bintray repositories:

https://blog.bintray.com/2014/12/16/hosting-debian-packages-on-bintray-rocks/

This is not very high priority issue imho, but would be nice to have.

zokier commented 7 years ago

Now that I got it configured, I notice that the repository is not really usable as-is because all distros/versions are in the same repo. So for me apt wants to install (or update to) vivid version of rtorrent-ps, even though I'm on stretch. 

# apt list --upgradeable
Listing... Done
rtorrent-ps/unknown 0.9.6-PS-1.0-104-g07be19e~vivid amd64 [upgradable from: 0.9.6-PS-1.0-94-g5a987ef~stretch]
N: There are 31 additional versions. Please use the '-a' switch to see them.

Maybe the scope of this issue could be expanded to improve the repository situation, or maybe at least add note to the bintray page and/or readme that the repo is not usable. Or should that be tracked on a separate issue?

pyroscope commented 7 years ago

Not designed for APT, follow http://rtorrent-ps.readthedocs.io/en/latest/install.html#installation-using-debian-packages

A split will only happen when I come around to fully automate package updates based on the new build-via-docker.