https://bugs.kde.org/show_bug.cgi?id=428125
Bug ID: 428125
Summary: local file installation broken because of only-trusted
Product: Discover
Version: unspecified
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: PackageKit
Assignee: lei...@leinir.dk
Reporter: sit...@kde.org
CC: aleix...@kde.org
Target Milestone: ---
SUMMARY
local deb (and probably rpm) installation is called with the `only-trusted`
transaction flag. At least for deb that makes no sense, a randomly side loaded
deb will almost never pass signature validation and as a consequence installing
side loaded debs never works because they can't be validated.
This is different from pkcon which doesn't set the flag and works as expected.
STEPS TO REPRODUCE
1. on neon
2. download https://www.microsoftedgeinsider.com/en-us/download/?platform=linux
3. open
4. click install
OBSERVED RESULT
'cannot install from unsigned repo' error
EXPECTED RESULT
deb installs
ADDITIONAL INFORMATION
Debug output from packagekit
Discover:
10:47:36 PackageKit InstallFiles method called:
/home/me/Downloads/microsoft-edge-dev_88.0.673.0-1_amd64.deb
(transaction_flags: only-trusted)
pkcon (working):
10:48:01 PackageKit InstallFiles method called:
/home/me/Downloads/microsoft-edge-dev_88.0.673.0-1_amd64.deb
(transaction_flags: none)
--
You are receiving this mail because:
You are watching all bug changes.
