Bug #10143

Test whether Dotfile allow adding additional APT repositories

Added by sajolida 2015-09-01 07:17:05 . Updated 2015-11-17 03:34:38 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Persistence
Target version:
Start date:
2015-09-01
Due date:
% Done:

0%

Feature Branch:
Type of work:
Test
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

This could be useful for hypothetical Tails derivatives and to allow us to disable non-free repositories in the ISO (Bug #10130).

Subtasks

Related issues

Blocks Tails - Feature #10543: Document how to add APT sources using Dotfiles Resolved 2015-11-13

History

#1 Updated by sajolida 2015-09-01 07:17:33

  • blocks Bug #10130: Disable Debian non-free in APT in the ISO added

#2 Updated by intrigeri 2015-09-01 08:21:19

Note that for the suggested use case, what’s “needed” is enabling more sections for a repo that’s already enabled, more than adding a new repo. Thankfully it works, tested that on sid and Jessie:

deb http://ftp.us.debian.org/debian/ jessie main
deb http://ftp.us.debian.org/debian/ jessie non-free

… of course it doesn’t solve the dotfiles part of the problem, but at least it confirms that if dotfiles can be used to add stuff to sources.list.d, then it would be enough to address that use case :)

#3 Updated by sajolida 2015-11-13 13:22:58

  • Status changed from Confirmed to Resolved

I tested this a it works. I tried several things so I’m not sure which one of the two works but here is what I got:

persistence.conf:
  / source=systemfiles/link
  /etc  source=systemfiles/etc,link

/live/persistence/TailsData_unlocked:
  systemfiles
  systemfiles/etc
  systemfiles/etc/apt
  systemfiles/etc/apt/sources.list.d
  systemfiles/etc/apt/sources.list.d/extra.list

/etc/apt/sources.list.d/extra.list:
  /etc/apt/sources.list.d/extra.list -> /live/persistence/TailsData_unlocked/systemfiles/etc/apt/sources.list.d/extra.list

#4 Updated by sajolida 2015-11-13 13:23:40

  • blocked by deleted (Bug #10130: Disable Debian non-free in APT in the ISO)

#5 Updated by sajolida 2015-11-13 13:23:48

#6 Updated by intrigeri 2015-11-16 04:06:29

This:

/   source=systemfiles/link

… sounds scary and something we really don’t want to do.

One will have to check ownership / permissions vs. room for privilege escalation, when documenting such things:


/etc source=systemfiles/etc,link

(we don’t want this to allow non-root to replace arbitrary files in /etc.)

#7 Updated by sajolida 2015-11-17 03:33:51

  • blocks Feature #10543: Document how to add APT sources using Dotfiles added

#8 Updated by sajolida 2015-11-17 03:34:38

This ticket was about proving that it could work. See you on Feature #10543 regarding which precise configuration to document.