BIRD Debian repo instructions need updating to reflect best-practice

Laura Smith n5d9xq3ti233xiyif2vp at protonmail.ch
Thu Aug 5 13:35:14 CEST 2021


Re: https://bird.network.cz/?download&tdir=debian/

The instructions presented are not inline with Debian best-practices.

As per https://wiki.debian.org/DebianRepository/UseThirdParty:
"The key MUST be downloaded over a secure mechanism like HTTPS to a location only writable by root, which SHOULD be /usr/share/keyrings. The key MUST NOT be placed in /etc/apt/trusted.gpg.d or loaded by apt-key add. A sources.list entry SHOULD have the signed-by option set. The signed-by entry MUST point to a file, and not a fingerprint."



More information about the Bird-users mailing list