On 10/5/20 9:00 PM, Andrew David Wong wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Dear Qubes Community,
Marek has just published the following announcement:
https://www.qubes-os.org/news/2020/10/05/qubes-os-contributed-packages/
The plain text of this announcement is reproduced below.
======================================================================
"Qubes OS contributed packages are now available"
by Marek Marczykowski-Górecki
We are happy to announce the availability of Qubes OS contributed packages
under the [QubesOS-contrib] GitHub Project. This is a place where our community
can [contribute Qubes OS related packages, additions and various
customizations][package-contrib]. Meanwhile, we provide the infrastructure and
[review process] necessary to make them available easily and safely to users
within standard Qubes installations.
[Frédéric Pierret] built the infrastructure based on a similar setup for
building official packages. This means that it features the same [Qubes build
security] measures, including keeping the signing keys separate in a dedicated
VM, downloading packages over Tor, publishing build logs in a non-spoofable way
and more. Frédéric is also the maintainer of [QubesOS-contrib].
The source code repositories of the packages and infrastructure-related parts
are also hosted under [QubesOS-contrib].
To contribute a package, follow the process described at [package
contributions]. You will find a few helpful tips there, including a [skeleton
repository] with example RPM packaging and [Qubes Builder] integration.
Since the project has been running for some time already, there are already
some submitted packages available there. To name a few:
- [qubes-tunnel]
- [qvm-screenshot-tool]
- [qmenu]
You can find the full list at [QubesOS-contrib].
If you want to install one of these packages, first you need to enable the
repository in your system (dom0 and/or templates). This can be done by
installing the `qubes-repo-contrib` package. This package includes the
repository definition and keys necessary to download, verify, and install
[QubesOS-contrib] packages.
In dom0, use `qubes-dom0-update`:
sudo qubes-dom0-update qubes-repo-contrib
In a Fedora-based template, use `dnf`:
sudo dnf install qubes-repo-contrib
In a Debian-based template, use `apt`:
sudo apt update && sudo apt install qubes-repo-contrib
[QubesOS-contrib]: https://github.com/QubesOS-contrib/
[package-contrib]: https://www.qubes-os.org/doc/package-contributions/
[review process]:
https://www.qubes-os.org/doc/package-contributions/#review-procedure
[Frédéric Pierret]: https://www.qubes-os.org/team/#fr%C3%A9d%C3%A9ric-pierret
[Qubes build security]: https://www.qubes-os.org/news/2016/05/30/build-security/
[package contributions]: https://www.qubes-os.org/doc/package-contributions/
[skeleton repository]: https://github.com/QubesOS-contrib/qubes-skeleton/
[Qubes Builder]: https://www.qubes-os.org/doc/qubes-builder/
[qubes-tunnel]: https://github.com/QubesOS-contrib/qubes-tunnel
[qvm-screenshot-tool]: https://github.com/QubesOS-contrib/qvm-screenshot-tool
[qmenu]: https://github.com/QubesOS-contrib/qmenu
======================================================================
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAl97wZ8ACgkQ203TvDlQ
MDCXUxAAkurl2jyJSCEZxPlUel8G1rUhFFBPm3LFgpyTg3odC3GSD0fho0XiEKHh
zY0ifGJO76n0b/INU9DK1RdDsMI5hM0w9uXEhnrk27xGLyYgtyBzZ7wV/ok3xQlr
aEsjO4+SdRCNgIGt/MMRHtjnE1GgySo4UpExucilbKkmSXoSabY9r02DFMQIdsBL
d3k+MIpgz5YlEAO3pvvTcKEN/k10s9oGalLrpIDjSlpieeXKzSrblDDSWhbN6hPA
zMDjtoBnEHU9QX4OxoGN1qE8QDnfJK4LCqYz5II7HLWrRWywZ6E1+sCiqQRBg1H7
Osj+oWX03fZeh9HGRQGX7r5bDO5qRpFHge4SEQ0eiIwyeuijEY+w819spC2cfRN2
3hDnSKVOJl2E9Vth1/VF30kBsJsstgIomGoHmm49iGk8PzzAFUqPpklDiIJ/OpJl
BTFUgdYXIwqae5JkfkQb866GkaMmeDsMT5hKdtWuKB26Idb4nboQ8rVQ7jD76lAR
adXBJPMqmPr7mpI+xjqqBEvObau9zrLDaUFhS4FlsxLpqaSKWxQGkbLpBe+yL5/U
+IW7Hsfjb/UELkW0sEPxXS+D6+Uxne7fWORBaxIbIJypw/fseOtchXBYbIzEpZGG
O6gODRsAEad5YcgiZfwcNsa3BXu9qUYu9PUw95uP1wDIbLmpn44=
=tYPp
-----END PGP SIGNATURE-----
So do I understand this currently is only available for Fed31? and not
32? That was mentioned in one of the chat rooms but if true, and Fed31
is reaching EOL is there and ETA on when the contributed-packages will
be available for Fed32?
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/20c41c41-82cd-6319-f444-d9f5ebf5a217%40posteo.net.
