Puppet: System Administration Automated

Support

Ticket #556 (new enhancement)

Opened 2 years ago

Last modified 7 months ago

apt provider should support --allow-unauthenticated option

Reported by: darks Assigned to: luke
Priority: normal Milestone:
Component: Debian Version: 0.22.1
Severity: normal Keywords:
Cc: Triage Stage: Needs design decision
Attached Patches: None Complexity: Unknown

Description

with new style apt on etch there are lots of packages which cannot be authenticated. therefore depending on such package fails. it would be nice to have a configuration option for the apt provider to add --allow-unauthenticated to the aptcmd. probably enable this by default.

Change History

03/21/07 17:58:40 changed by tim

Good idea that the option should be there. I think Luke recently implemented something that allows specific options for providers.

But please, you really don't want "--allow-unauthenticated" by default...

03/21/07 19:40:04 changed by shadoi

Agreed, it should never be the default. APT keys are published and it's trivial to write an Execget-apt-keys? that the package type can be made to depend on.

03/21/07 19:41:08 changed by shadoi

Make that Exec["get-apt-keys"]

03/21/07 19:43:58 changed by DavidS

Or install a up-to-date version of debian-archive-keyring. And/or sign local repositories.

Forcing apt to --allow-unauthenticated should not be encouraged because apt has no other safe-guard against package forgery.

04/19/07 22:33:58 changed by luke

  • specification set to Unnecessary.
  • patch set to None.
  • complexity set to Unknown.
  • approval set to Unnecessary.
  • compatibility set to Unknown.
  • stage set to Needs design decision.

04/24/08 07:43:03 changed by luke

  • component changed from client to Debian.

This is dependent on #915.