lynis icon indicating copy to clipboard operation
lynis copied to clipboard

Distribute Lynis deb repo info via Debian External Repositories

Open BillTheGoat opened this issue 2 months ago • 1 comments

Is your feature request related to a problem? Please describe.

Debian requests external repositories use Debian External Repositories to publish repo information, to reduce random scripts running on user installations.

Describe the solution you'd like

Add repo info to https://salsa.debian.org/extrepo-team/extrepo-data

Required changes

As per the linked comment, you requested a specific issue for this. Debian External Repositories prefers maintainers submit directly. It would be hard for others to clearly define your policies, supported architectures and suites, etc, and keep this information up to date in the same way you can. I made as much of the yaml file they request as I could. The content is pasted below. It will require at least minor changes. You might want to add your customer repos to the file, etc.

reponame: cisofy-lynis
  description: This is the software repository for packages provided by CISOfy. It contains packages related to Lynis.

  source: 
    Types: deb
    URIs: https://packages.cisofy.com/community/lynis/deb/
    Suites: stable
    Components: main
    Architectures: amd64

  suites:
  - bullseye
  - bookworm
  - trixie

  policy: main

  # Some way of contacting the maintainers of the repository.
  # Informational only.
  contact: [email protected]
  # Some way of filing issues with the repository. Informational only.
  bugs: https://github.com/CISOfy/lynis/issues

  # Add the ASCII-armored version of your signing key below.
  gpg-key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----

<SURELY YOU WOULDN'T TRUST MY CUT AND PASTE>
-----END PGP PUBLIC KEY BLOCK-----

Additional context

See linked comment above

BillTheGoat avatar Oct 25 '25 04:10 BillTheGoat

Thanks for creating this. As noted in the same comment, I think it is better to create a pull request directly at the extrepo project. After all, it's "meta data" that they manage and you are able to test it.

For the reponame you can use 'lynis' and contact '[email protected]'

mboelen avatar Oct 27 '25 19:10 mboelen