News for hackers. Stuff that matters.
Re:Debian elects new project leader, PPA support proposed by sp332 on Monday April 20, 2015 @11:06AM (#9408558)
In addition to the main package repositories for your distro, you can add little repos that just have one or two packages in them. They get their own signing keys, so the author of a package that's not in the main repo can make their own little repo. It's a lot more convenient and a little more secure than downloading the package file from the dev's website.
Re:Debian elects new project leader, PPA support proposed by 0x0 on Monday April 20, 2015 @11:32AM (#9408761)
How is that different from what deb-multimedia.org and virtualbox.org do with their apt repositories?
Re:Debian elects new project leader, PPA support proposed by sp332 on Monday April 20, 2015 @11:57AM (#9408943)
You can just run apt-add-repository <reponame>, and it will add the correct files to /etc/apt/sources.list.d/ and install the signing keys.
Re:Debian elects new project leader, PPA support proposed by mahouse on Monday April 20, 2015 @11:40AM (#9408825)
Not much, just that Ubuntu hosts the PPAs themselves, and it's much easier to add them than it is to add individual repos.
Re:Debian elects new project leader, PPA support proposed by josinalvo on Monday April 20, 2015 @12:26PM (#9409156)
Isn't it the case that ubuntu compiles the packages themselves ?

This offers a measure of security agains malicious binaries ...

Re:Debian elects new project leader, PPA support proposed by alphapapa on Monday April 20, 2015 @02:24PM (#9409911)
No, individuals can upload binary packages to PPAs.

Even if Launchpad builds the binary package, Ubuntu does not review packages' content.

The trust model for PPAs requires users to trust PPA owners, not Ubuntu.

Re:Debian elects new project leader, PPA support proposed by theandrewbailey on Monday April 20, 2015 @12:27PM (#9409172)
But isn't the point of PPAs is that Ubuntu doesn't host them?
Re:Debian elects new project leader, PPA support proposed by mahouse on Monday April 20, 2015 @02:41PM (#9410010)
No, the point is that they are outside the normal repositories, which require testing by the Ubuntu developers, bureaucracy, etc