Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #166677 > unrolled thread
| Started by | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| First post | 2016-04-13 06:10 +0200 |
| Last post | 2016-04-14 11:20 +0200 |
| Articles | 12 — 4 participants |
Back to article view | Back to linux.debian.user
Firefox install Marc Shapiro <marcnshap@gmail.com> - 2016-04-13 06:10 +0200
Re: Firefox install arian <debian@semioptimal.net> - 2016-04-13 11:40 +0200
Re: Firefox install Marc Shapiro <marcnshap@gmail.com> - 2016-04-13 16:20 +0200
Re: Firefox install Lisi Reisz <lisi.reisz@gmail.com> - 2016-04-13 20:50 +0200
Re: Firefox install Liam O'Toole <liam.p.otoole@gmail.com> - 2016-04-13 21:10 +0200
Re: Firefox install Marc Shapiro <marcnshap@gmail.com> - 2016-04-14 03:50 +0200
Re: Firefox install Liam O'Toole <liam.p.otoole@gmail.com> - 2016-04-14 10:30 +0200
Re: Firefox install Lisi Reisz <lisi.reisz@gmail.com> - 2016-04-14 10:50 +0200
Re: Firefox install Marc Shapiro <marcnshap@gmail.com> - 2016-04-14 16:30 +0200
Re: Firefox install Marc Shapiro <marcnshap@gmail.com> - 2016-04-14 06:30 +0200
Re: Firefox install Lisi Reisz <lisi.reisz@gmail.com> - 2016-04-14 09:30 +0200
Re: Firefox install arian <debian@semioptimal.net> - 2016-04-14 11:20 +0200
| From | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| Date | 2016-04-13 06:10 +0200 |
| Subject | Firefox install |
| Message-ID | <rnkhP-3bG-7@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
I have been using the Firefox and Thunderbird packages from Mozilla for quite a while. Now that Firefox is available directly from the Debian repository I am thinking of installing from there. (I may wait until Thunderbird is also available, however.) I figure that even if I am going to wait until Thunderbird is available from the repository, that I should get things set up and ready to go, so I am following the instructions on mozilla.debian.net. I have updated my /etc/apt/sources.list file and installed both pkg-mozilla-archive-keyring and debian-keyring. I have run aptitude update and the check of the newly installed key as suggested on mozilla.debian.net. It gives the message about '1 signature not checked due to a missing key|| || <http://mozilla.debian.net/pkg-mozilla-archive-keyring_1.1_all.deb>as expected'. But when I try to run 'aptitude install-t jessie-backports firefox' I get the following: ------------------------------------------------------------------------------------------------------------- The following NEW packages will be installed: firefox 0 packages upgraded, 1 newly installed, 0 to remove and 11 not upgraded. Need to get 43.1 MB of archives. After unpacking 99.4 MB will be used. WARNING: untrusted versions of the following packages will be installed! Untrusted packages could compromise your system's security. You should only proceed with the installation if you are certain that this is what you want to do. firefox Do you want to ignore this warning and proceed anyway? To continue, enter "Yes"; to abort, enter "No": no ------------------------------------------------------------------------------------------------------------- With the key installed, I would have thought that the package would be trusted. Is there another step that I am missing, somewhere? Marc
[toc] | [next] | [standalone]
| From | arian <debian@semioptimal.net> |
|---|---|
| Date | 2016-04-13 11:40 +0200 |
| Message-ID | <rnprc-7F0-15@gated-at.bofh.it> |
| In reply to | #166677 |
[Multipart message — attachments visible in raw view] — view raw
Hi Marc,
firefox is not in jessie-backports, but in unstable. The package which you may find there in the future is firefox-esr, which is in testing atm. For desktop-installations it's IMO better to just run testing or unstable if you're somewhat knowledgeable. You know, they say there are three flavors of debian: rusty, stale and broken. Probably should add a fourth fossilized flavor ;)
> I have updated my /etc/apt/sources.list file and installed both pkg-mozilla-archive-keyring and debian-keyring.
so you installed from mozilla repo before and you certainly had the debian repo - what did you have to change?
Also: how did you attempt to install the keyrings? check: dpkg -l ${packagename} - ii in front for installed
If they're not installed, obtain the keyring deb via HTTPS and install: dpkg -i {packagename} (HTTPS because you cannot verify keyring integrity without trusting the keyring in the first place, default-HTTPS does not give you the same guarantees as secure-apt but at least an attacker has to acquire a validly signed cert.)
regards, Arian
[toc] | [prev] | [next] | [standalone]
| From | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| Date | 2016-04-13 16:20 +0200 |
| Message-ID | <rntOa-2uP-21@gated-at.bofh.it> |
| In reply to | #166679 |
[Multipart message — attachments visible in raw view] — view raw
On 04/13/2016 02:30 AM, arian wrote:
> Hi Marc,
>
> firefox is not in jessie-backports, but in unstable. The package which you may find there in the future is firefox-esr, which is in testing atm. For desktop-installations it's IMO better to just run testing or unstable if you're somewhat knowledgeable. You know, they say there are three flavors of debian: rusty, stale and broken. Probably should add a fourth fossilized flavor ;)
>
>> I have updated my /etc/apt/sources.list file and installed both pkg-mozilla-archive-keyring and debian-keyring.
> so you installed from mozilla repo before and you certainly had the debian repo - what did you have to change?
I have been installing from the tarballs provided by mozilla.
Per mozilla.debian.net, I added the following line to /etc/apt/sources.list
deb http://mozilla.debian.net/ jessie-backports firefox-release
I do not have any testing or unstable lines in /etc/apt/sources.list
> Also: how did you attempt to install the keyrings? check: dpkg -l ${packagename} - ii in front for installed
> If they're not installed, obtain the keyring deb via HTTPS and install: dpkg -i {packagename} (HTTPS because you cannot verify keyring integrity without trusting the keyring in the first place, default-HTTPS does not give you the same guarantees as secure-apt but at least an attacker has to acquire a validly signed cert.)
>
> regards, Arian
>
Also per mozilla.debian.net:
You can do so by installing the |pkg-mozilla-archive-keyring| package
<http://mozilla.debian.net/pkg-mozilla-archive-keyring_1.1_all.deb>.
Once installed, you can check the key with the following command
(requires the |debian-keyring| package to be installed):
[toc] | [prev] | [next] | [standalone]
| From | Lisi Reisz <lisi.reisz@gmail.com> |
|---|---|
| Date | 2016-04-13 20:50 +0200 |
| Message-ID | <rny1s-5Eb-7@gated-at.bofh.it> |
| In reply to | #166679 |
On Wednesday 13 April 2016 10:30:46 arian wrote:
> Hi Marc,
>
> firefox is not in jessie-backports, but in unstable.
??
And I have installed it from Jessie backports. Also from wheezy backports.
Lisi
>The package which you
> may find there in the future is firefox-esr, which is in testing atm. For
> desktop-installations it's IMO better to just run testing or unstable if
> you're somewhat knowledgeable. You know, they say there are three flavors
> of debian: rusty, stale and broken. Probably should add a fourth fossilized
> flavor ;)
>
> > I have updated my /etc/apt/sources.list file and installed both
> > pkg-mozilla-archive-keyring and debian-keyring.
>
> so you installed from mozilla repo before and you certainly had the debian
> repo - what did you have to change? Also: how did you attempt to install
> the keyrings? check: dpkg -l ${packagename} - ii in front for installed If
> they're not installed, obtain the keyring deb via HTTPS and install: dpkg
> -i {packagename} (HTTPS because you cannot verify keyring integrity without
> trusting the keyring in the first place, default-HTTPS does not give you
> the same guarantees as secure-apt but at least an attacker has to acquire a
> validly signed cert.)
>
> regards, Arian
[toc] | [prev] | [next] | [standalone]
| From | Liam O'Toole <liam.p.otoole@gmail.com> |
|---|---|
| Date | 2016-04-13 21:10 +0200 |
| Message-ID | <rnykO-65O-25@gated-at.bofh.it> |
| In reply to | #166686 |
On 2016-04-13, Lisi Reisz <lisi.reisz@gmail.com> wrote: > On Wednesday 13 April 2016 10:30:46 arian wrote: >> Hi Marc, >> >> firefox is not in jessie-backports, but in unstable. > > ?? > > And I have installed it from Jessie backports. Also from wheezy backports. > > Lisi > I take it you're using the mozilla.debian.net repositories? -- Liam
[toc] | [prev] | [next] | [standalone]
| From | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| Date | 2016-04-14 03:50 +0200 |
| Message-ID | <rnEzT-2bp-3@gated-at.bofh.it> |
| In reply to | #166687 |
On 04/13/2016 12:04 PM, Liam O'Toole wrote: > On 2016-04-13, Lisi Reisz <lisi.reisz@gmail.com> wrote: >> On Wednesday 13 April 2016 10:30:46 arian wrote: >>> Hi Marc, >>> >>> firefox is not in jessie-backports, but in unstable. >> ?? >> >> And I have installed it from Jessie backports. Also from wheezy backports. >> >> Lisi >> > I take it you're using the mozilla.debian.net repositories? > That is what I am attempting to do. Marc
[toc] | [prev] | [next] | [standalone]
| From | Liam O'Toole <liam.p.otoole@gmail.com> |
|---|---|
| Date | 2016-04-14 10:30 +0200 |
| Message-ID | <rnKP0-7eq-11@gated-at.bofh.it> |
| In reply to | #166690 |
On 2016-04-14, Marc Shapiro <marcnshap@gmail.com> wrote: > On 04/13/2016 12:04 PM, Liam O'Toole wrote: >> On 2016-04-13, Lisi Reisz <lisi.reisz@gmail.com> wrote: >>> On Wednesday 13 April 2016 10:30:46 arian wrote: >>>> Hi Marc, >>>> >>>> firefox is not in jessie-backports, but in unstable. >>> ?? >>> >>> And I have installed it from Jessie backports. Also from wheezy backports. >>> >>> Lisi >>> >> I take it you're using the mozilla.debian.net repositories? >> > That is what I am attempting to do. > > Marc > > My question was directed at Lisi (and arian, indirectly) and intended to clear up the mystery surrounding the whereabouts of the firefox package. It seems that Lisi is using mozilla.debian.net, whereas arian is not. I followed the same instructions that you did, on mozilla.debian.net, and installed firefox-esr from that repository. I didn't get the warning about untrusted packages. After you have installed the keys you have to run 'apt-get update' or 'aptitude update' again, but I think you already mentioned that you did that. -- Liam
[toc] | [prev] | [next] | [standalone]
| From | Lisi Reisz <lisi.reisz@gmail.com> |
|---|---|
| Date | 2016-04-14 10:50 +0200 |
| Message-ID | <rnL8m-7nM-3@gated-at.bofh.it> |
| In reply to | #166694 |
On Thursday 14 April 2016 09:22:59 Liam O'Toole wrote: > On 2016-04-14, Marc Shapiro <marcnshap@gmail.com> wrote: > > On 04/13/2016 12:04 PM, Liam O'Toole wrote: > >> On 2016-04-13, Lisi Reisz <lisi.reisz@gmail.com> wrote: > >>> On Wednesday 13 April 2016 10:30:46 arian wrote: > >>>> Hi Marc, > >>>> > >>>> firefox is not in jessie-backports, but in unstable. > >>> > >>> ?? > >>> > >>> And I have installed it from Jessie backports. Also from wheezy > >>> backports. > >>> > >>> Lisi > >> > >> I take it you're using the mozilla.debian.net repositories? > > > > That is what I am attempting to do. > > > > Marc > > My question was directed at Lisi (and arian, indirectly) and intended to > clear up the mystery surrounding the whereabouts of the firefox package. > It seems that Lisi is using mozilla.debian.net, Correct. Sorry - I was about to answer when Marc did, so decided that I was wrong to think everything meant me! I had meant to include a hyperlink. Lisi > whereas arian is not. > > I followed the same instructions that you did, on mozilla.debian.net, > and installed firefox-esr from that repository. I didn't get the warning > about untrusted packages. After you have installed the keys you have to > run 'apt-get update' or 'aptitude update' again, but I think you already > mentioned that you did that.
[toc] | [prev] | [next] | [standalone]
| From | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| Date | 2016-04-14 16:30 +0200 |
| Message-ID | <rnQrn-2ZQ-7@gated-at.bofh.it> |
| In reply to | #166694 |
On 04/14/2016 01:22 AM, Liam O'Toole wrote: > On 2016-04-14, Marc Shapiro <marcnshap@gmail.com> wrote: >> On 04/13/2016 12:04 PM, Liam O'Toole wrote: >>> On 2016-04-13, Lisi Reisz <lisi.reisz@gmail.com> wrote: >>>> On Wednesday 13 April 2016 10:30:46 arian wrote: >>>>> Hi Marc, >>>>> >>>>> firefox is not in jessie-backports, but in unstable. >>>> ?? >>>> >>>> And I have installed it from Jessie backports. Also from wheezy backports. >>>> >>>> Lisi >>>> >>> I take it you're using the mozilla.debian.net repositories? >>> >> That is what I am attempting to do. >> >> Marc >> >> > My question was directed at Lisi (and arian, indirectly) and intended to > clear up the mystery surrounding the whereabouts of the firefox package. > It seems that Lisi is using mozilla.debian.net, whereas arian is not. > > I followed the same instructions that you did, on mozilla.debian.net, > and installed firefox-esr from that repository. I didn't get the warning > about untrusted packages. After you have installed the keys you have to > run 'apt-get update' or 'aptitude update' again, but I think you already > mentioned that you did that. > No, actually that appears to be the step that I missed. I did the key installs with aptitude then tried the firefox install. I did not do an 'aptitude update' in between. I just tried that now and the warnings have dissapeared. Thank you. Marc
[toc] | [prev] | [next] | [standalone]
| From | Marc Shapiro <marcnshap@gmail.com> |
|---|---|
| Date | 2016-04-14 06:30 +0200 |
| Message-ID | <rnH4K-4hC-9@gated-at.bofh.it> |
| In reply to | #166686 |
On 04/13/2016 11:47 AM, Lisi Reisz wrote: > On Wednesday 13 April 2016 10:30:46 arian wrote: >> Hi Marc, >> >> firefox is not in jessie-backports, but in unstable. > ?? > > And I have installed it from Jessie backports. Also from wheezy backports. > > Lisi > So, having installed the key, should I still be getting messages from aptitude that firefox is untrusted? Or have I missed a step somewhere? Marc
[toc] | [prev] | [next] | [standalone]
| From | Lisi Reisz <lisi.reisz@gmail.com> |
|---|---|
| Date | 2016-04-14 09:30 +0200 |
| Message-ID | <rnJSW-6wh-5@gated-at.bofh.it> |
| In reply to | #166691 |
On Thursday 14 April 2016 05:24:34 Marc Shapiro wrote: > On 04/13/2016 11:47 AM, Lisi Reisz wrote: > > On Wednesday 13 April 2016 10:30:46 arian wrote: > >> Hi Marc, > >> > >> firefox is not in jessie-backports, but in unstable. > > > > ?? > > > > And I have installed it from Jessie backports. Also from wheezy > > backports. > > > > Lisi > > So, having installed the key, should I still be getting messages from > aptitude that firefox is untrusted? Or have I missed a step somewhere? Something would appear to have gone wrong somewhere. Perhaps tell us _exactly_ what you are doing/have done. (Hint: quotes of what you are putting, or have put, in the command line, and what the response is/was would be great!) Lisi
[toc] | [prev] | [next] | [standalone]
| From | arian <debian@semioptimal.net> |
|---|---|
| Date | 2016-04-14 11:20 +0200 |
| Message-ID | <rnLBo-7R1-11@gated-at.bofh.it> |
| In reply to | #166691 |
[Multipart message — attachments visible in raw view] — view raw
> So, having installed the key, should I still be getting messages from aptitude that firefox is untrusted? Or have I missed a step somewhere?
depends on your repo setup, which is noch completely clear. You could post the output of:
apt-cache policy firefox{,-esr}
which shows all candidates for the firefox and -esr name and which packages are candidates for that. Also
apt-key finger
shows which keys your apt installation trusts
regards, arian
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web