This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "Evergreen ILS". The branch, main has been updated via 17a2f5efdd814a08a685b6c337f0688f0c7cd5ca (commit) from 61681a92b856b6ba5e34a1e875df6601acf66694 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 17a2f5efdd814a08a685b6c337f0688f0c7cd5ca Author: Jason Boyer <> Date: Mon Feb 3 16:23:48 2025 -0500 LP2097313: Keep PostgreSQL's key in another pocket It's not considered good practice to use /etc/apt/trusted.gpg.d/ to store locally managed keys because this causes them to be trusted to sign any package in any repository. For our use-case (see [1]) /etc/apt/keyrings is preferred. [1] https://wiki.debian.org/DebianRepository/UseThirdParty#line-16 Signed-off-by: Jason Boyer <JBoyer@equinoxOLI.org> Signed-off-by: Chris Sharp <csharp@georgialibraries.org> diff --git a/Open-ILS/src/extras/install/Makefile.debian b/Open-ILS/src/extras/install/Makefile.debian index bc427ecc4c..9f3223b788 100644 --- a/Open-ILS/src/extras/install/Makefile.debian +++ b/Open-ILS/src/extras/install/Makefile.debian @@ -34,9 +34,10 @@ debian_sys_config: # Adding this for installing versions from PostgreSQL community apt source debian_postgresql_repo: if test -z "$$(grep -R apt.postgresql.org /etc/apt/)" ; then \ - echo "deb [signed-by=/etc/apt/trusted.gpg.d/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ $(RELEASE_CODENAME)-pgdg main" \ + mkdir -p --mode 0755 /etc/apt/keyrings ; \ + echo "deb [signed-by=/etc/apt/keyrings/pgdg.asc] http://apt.postgresql.org/pub/repos/apt/ $(RELEASE_CODENAME)-pgdg main" \ > /etc/apt/sources.list.d/pgdg.list; \ - wget --quiet -O /etc/apt/trusted.gpg.d/pgdg.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc ; \ + wget --quiet -O /etc/apt/keyrings/pgdg.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc ; \ $(APT_TOOL) update ; \ fi ----------------------------------------------------------------------- Summary of changes: Open-ILS/src/extras/install/Makefile.debian | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) hooks/post-receive -- Evergreen ILS