Package: apt-verify
Severity: wishlist
X-Debbugs-Cc: j...@joshtriplett.org

Many tools that use .d configuration directories support multiple such
directories, to make it easy to separate local sysadmin configuration
from distribution configuration. For instance, a hypothetical
apt-verify-myplugin package could install
/usr/share/apt/verify.d/50myplugin so that it automatically works when
installed, and then the sysadmin could change that with
/etc/apt/verify.d/50myplugin . One of several advantages of this is that
a sysadmin can, themselves, *package* their configuration very easily,
without having to divert files or similar.

(Also, in the process of this, you might consider refusing to run if no
configuration exists, to avoid effectively disabling verification. If a
user really wants to *disable* verification they should use the apt
configuration for *that* rather than installing apt-verify as a hook and
then giving apt-verify nothing to do.)


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64

Kernel: Linux 6.6.8-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Reply via email to