Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #235173

Re: Repo. ppa.launchpad.net

Show all headers | View raw

David Wright <deblis@lionunicorn.co.uk> writes:

> On Thu 13 May 2021 at 16:42:09 (+0100), Richmond wrote:
>> David Wright <deblis@lionunicorn.co.uk> writes:
>> 
>> > I'm surprised it doesn't do a quick upgrade while it's about it.
>> > Anyway, that's what I call self-inflicted.
>> 
>> Those aren't the instructions given on the Signal website.
>
> As you prefer. I typed   signal debian   into google and clicked on
> the top link:
>   https://signal.org › download
> which took me to
>   https://signal.org/en/download/
> I clicked on the blue   Download for Linux   button, and the following appeared:
>
>   Linux (Debian-based) Install Instructions
>
>   # NOTE: These instructions only work for 64 bit Debian-based
>   # Linux distributions such as Ubuntu, Mint etc.
>
>   # 1. Install our official public software signing key
>   wget -O- https://updates.signal.org/desktop/apt/keys.asc | gpg --dearmor > signal-desktop-keyring.gpg
>   suXdo mv signal-desktop-keyring.gpg /usr/share/keyrings/
>
>   # 2. Add our repository to your list of repositories
>   echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main' |\
>     suXdo tee -a /etc/apt/sources.list.d/signal-xenial.list
>
>   # 3. Update your package database and install signal
>   suXdo apt update && suXdo apt install signal-desktop
>
> Comparing this with what I posted before, I see that curl (Optional)
> is replaced by wget (Standard), and one can assume the latter
> is already installed.
>
> Step 1 differs in that it stores the .gpg key instead of .asc.
> I'm not aware of any significance in one format or the other.
>
> Step 2 differs in that a specific key is used for verification,
> rather than any key on the keyring.
>
> Step 3 is identical.
>
> Comments as before.


The command being piped to sudo, which you are concerned about, in the
second version is the output from echo, which is the deb
command. So it is doing what it says it is doing, adding the repo. The
key is validated by gpg.

The curl version is dubious because it doesn't validate the key, so it
could contain a ; and some other commands. But I don't know why anyone
would follow those instructions for students.

None of this shows that installing signal added the ppa.launchpad.net
repo.. So it is not self inflicted.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-12 12:20 +0200
  Re: Repo. ppa.launchpad.net Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-12 17:00 +0200
    Re: Repo. ppa.launchpad.net David Wright <deblis@lionunicorn.co.uk> - 2021-05-12 18:10 +0200
      Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-12 19:00 +0200
    Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-12 18:30 +0200
      Re: Repo. ppa.launchpad.net Stefan Krusche <linux@stefan-krusche.de> - 2021-05-12 19:30 +0200
        Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-12 20:10 +0200
          Re: Repo. ppa.launchpad.net Stefan Krusche <linux@stefan-krusche.de> - 2021-05-13 07:30 +0200
            Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-13 08:30 +0200
              Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-13 09:20 +0200
                Re: Repo. ppa.launchpad.net Stefan Krusche <linux@stefan-krusche.de> - 2021-05-13 11:50 +0200
                Re: Repo. ppa.launchpad.net Greg Wooledge <greg@wooledge.org> - 2021-05-13 13:00 +0200
                Re: Repo. ppa.launchpad.net David Wright <deblis@lionunicorn.co.uk> - 2021-05-13 17:20 +0200
                Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-13 18:10 +0200
                Re: Repo. ppa.launchpad.net David Wright <deblis@lionunicorn.co.uk> - 2021-05-13 21:10 +0200
                Re: Repo. ppa.launchpad.net Richmond <richmond@criptext.com> - 2021-05-13 23:10 +0200
                Re: Repo. ppa.launchpad.net David Wright <deblis@lionunicorn.co.uk> - 2021-05-14 18:00 +0200

csiph-web