https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41447
Bug ID: 41447
Summary: Provide an official bootstrap script to configure Koha
APT repository on Debian/Ubuntu
Initiative type: ---
Sponsorship ---
status:
Product: Project Infrastructure
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Release tools
Assignee: [email protected]
Reporter: [email protected]
Installing Koha on Debian and Ubuntu currently requires manually performing
several prerequisite steps before koha-common can be installed, including:
- Adding the Koha APT signing key
- Configuring the Koha APT repository
- Running apt update
These steps are well documented, but they are repetitive, error-prone for new
users, and frequently re-implemented across third-party guides and automation
scripts.
This bug proposes providing an official, minimal bootstrap script for
Debian/Ubuntu only, whose sole responsibility is to:
- Install the Koha APT signing key
- Configure the Koha APT repository
- Run apt update
After this step, installation continues exactly as required:
apt install koha-common
Rationale / Motivation:
- Reduces installation friction for first-time and test installations on
supported platforms
- Encourages a single, auditable implementation instead of many unofficial ones
- Simplifies automation, CI, containers, and provisioning workflows
- Keeps Koha's existing packaging and installation model unchanged
Reference Implementation:
A reference implementation currently used in production for ~2 years is
available here:
https://github.com/saiful-semantic/KohaOnUbuntu
This is provided to illustrate the approach, not as a final implementation. The
reference implementation is validated using GitHub Actions CI on both Ubuntu
LTS (20.04, 22.04, 24.04) and Debian (11, 12).
Security Considerations:
The common 'curl | sudo bash' pattern is acknowledged as a concern, which can
be mitigated by:
- Hosting the script under an official Koha domain
- Providing checksums or signature verification
Alternatively, offering a download-then-execute workflow instead of piping.
--
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
