This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Evergreen ILS". The branch, rel_3_15 has been updated via 444d20fc7b63dbb2ddfe21ee8af66e2567a72989 (commit) from 1e06071f95b7ff2f39cff924f70d3a28bdf18cc8 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 444d20fc7b63dbb2ddfe21ee8af66e2567a72989 Author: Jason Boyer <> Date: Mon Feb 3 16:23:48 2025 -0500 LP2097313: Keep PostgreSQL's key in another pocket It's not considered good practice to use /etc/apt/trusted.gpg.d/ to store locally managed keys because this causes them to be trusted to sign any package in any repository. For our use-case (see [1]) /etc/apt/keyrings is preferred. [1] https://wiki.debian.org/DebianRepository/UseThirdParty#line-16 Signed-off-by: Jason Boyer <JBoyer@equinoxOLI.org> Signed-off-by: Chris Sharp <csharp@georgialibraries.org> diff --git a/Open-ILS/src/extras/install/Makefile.debian b/Open-ILS/src/extras/install/Makefile.debian index bc427ecc4c..9f3223b788 100644 --- a/Open-ILS/src/extras/install/Makefile.debian +++ b/Open-ILS/src/extras/install/Makefile.debian @@ -34,9 +34,10 @@ debian_sys_config: # Adding this for installing versions from PostgreSQL community apt source debian_postgresql_repo: if test -z "$$(grep -R apt.postgresql.org /etc/apt/)" ; then \ - echo "deb [signed-by=/etc/apt/trusted.gpg.d/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ $(RELEASE_CODENAME)-pgdg main" \ + mkdir -p --mode 0755 /etc/apt/keyrings ; \ + echo "deb [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ $(RELEASE_CODENAME)-pgdg main" \ > /etc/apt/sources.list.d/pgdg.list; \ - wget --quiet -O /etc/apt/trusted.gpg.d/pgdg.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc ; \ + wget --quiet -O /etc/apt/keyrings/pgdg.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc ; \ $(APT_TOOL) update ; \ fi ----------------------------------------------------------------------- Summary of changes: Open-ILS/src/extras/install/Makefile.debian | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) hooks/post-receive -- Evergreen ILS