diff options
| author | Julian Andres Klode <julian.klode@canonical.com> | 2023-06-27 19:14:43 +0200 |
|---|---|---|
| committer | Julian Andres Klode <julian.klode@canonical.com> | 2023-06-27 19:21:47 +0200 |
| commit | aba813975abb880f8b27d659147f7760c02f99e7 (patch) | |
| tree | a288dc6a6ebb4d13b42a35c6df610a6cecc6ec31 /test | |
| parent | f557a5e15bb4715557566d7e88e7367c17e94ebf (diff) | |
update: Add notice about missing Signed-By in deb822 sources
We want to gently steer users towards having Signed-By for each
source such that we can retire a shared keyring across sources
which improves resilience against configuration issues and
incompetent malicious actors.
Diffstat (limited to 'test')
| -rwxr-xr-x | test/integration/test-apt-get-update-sourceslist-warning | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/test/integration/test-apt-get-update-sourceslist-warning b/test/integration/test-apt-get-update-sourceslist-warning index 02e1ccb29..3a3cb2e9f 100755 --- a/test/integration/test-apt-get-update-sourceslist-warning +++ b/test/integration/test-apt-get-update-sourceslist-warning @@ -38,6 +38,17 @@ testsuccessequal "$BOILERPLATE" apt update --no-download echo 'deb-src http://example.org/debian bookworm main non-free' > rootdir/etc/apt/sources.list.d/example.list testsuccessequal "$BOILERPLATE" apt update --no-download +msgmsg 'Suggest Signed-By for deb822 sources.list(5) entries' +rm rootdir/etc/apt/sources.list.d/example.list +echo 'Types: deb +URIs: http://example.org/debian +Suites: bookworm +Components: main +' > rootdir/etc/apt/sources.list.d/example.sources +testsuccessequal "$BOILERPLATE +N: Missing Signed-By in the sources.list(5) entry for 'http://example.org/debian'" apt update --no-download +rm rootdir/etc/apt/sources.list.d/example.sources + msgmsg 'Is non-free-firmware missing?' echo 'deb http://example.org/debian bookworm main non-free' > rootdir/etc/apt/sources.list.d/example.list cat >> rootdir/var/lib/apt/lists/example.org_debian_dists_bookworm_non-free_binary-amd64_Packages <<EOF @@ -72,3 +83,4 @@ insertinstalledpackage 'firmware-linux-nonfree' 'all' '1' testsuccessequal "$BOILERPLATE N: Repository 'Debian bookworm' changed its 'firmware component' value from 'non-free' to 'non-free-firmware' N: More information about this can be found online in the Release notes at: $NOTESURL" apt update --no-download + |