Am Donnerstag, dem 06.04.2023 um 05:33 -0700 schrieb Mark Waite:

I'd rather not include extra instructions for Debian 10, Debian 11, Ubuntu 18, 
and Ubuntu 20, especially when those instructions involve creating directories 
as the root user and assuring those directories have correct ownership and 
permissions.

People knowing that page might then (falsely) assume that the key will be 
managed by a package after initial setup if it is to be placed into 
/usr/share/keyrings. OTOH, creating the directory is just one more line, like


        sudo sh -c "test -d /etc/apt/keyrings || mkdir -m 0755 
/etc/apt/keyrings"

We'll discuss further in the retrospective to see which path we take to reduce 
the problems for Debian and Ubuntu administrators on the next GPG key rotation.

Why wait (until next rotation)? Why not create a package which places the 
current key into /usr/share/keyrings and add that as a dependency to the main 
Jenkins package? This is how Element or PostgreSQL (to name a few) already do 
it. Would have the benefit that no documentation change would be needed.

Bye...

Dirk

--

Dirk Heinrichs
Senior Systems Engineer, Delivery Pipeline
OpenText ™ Discovery | Recommind
Phone: +49 2226 15966 18
Email: [email protected]<mailto:[email protected]>
Website: 
www.recommind.de<mail://ab5defde1fa49913f64f8482009c4be447b3cf96/Gesendete%20Elemente/www.recommind.de>
Recommind GmbH, Von-Liebig-Straße 1, 53359 Rheinbach
Vertretungsberechtigte Geschäftsführer Gordon Davies, Madhu Ranganathan, 
Christian Waida, Registergericht Amtsgericht Bonn, Registernummer HRB 10646
This e-mail may contain confidential and/or privileged information. If you are 
not the intended recipient (or have received this e-mail in error) please 
notify the sender immediately and destroy this e-mail. Any unauthorized 
copying, disclosure or distribution of the material in this e-mail is strictly 
forbidden
Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. 
Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten 
haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. 
Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail sind nicht 
gestattet.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/d6907badbc00fa9e6698c29011899c5392a015c9.camel%40opentext.com.

Reply via email to