l i s t a l l e r
play

L i s t a l l e r A simple and secure way to distribute - PowerPoint PPT Presentation

Jan 28, 2024 •208 likes •373 views

L i s t a l l e r A simple and secure way to distribute 3rd-party applications Matthias Klumpp mak@debian.org matthias@tenstral.net X K C D 9 2 7 Wh y ? P e o p l e w a n t t o h a v e n e w s o f t

  1. L i s t a l l e r A simple and secure way to distribute 3rd-party applications Matthias Klumpp mak@debian.org matthias@tenstral.net

  2. X K C D 9 2 7

  3. Wh y ? • P e o p l e w a n t t o h a v e n e w s o f t w a r e w h i c h i s n o t a v a i l a b l e i n t h e d i s t r i b u t i o n ' s r e p o s i t o r i e s – D i s t r i b u t o r r e s o u r c e s a r e l i m i t e d : C a n ' t b a c k p o r t e v e r y t h i n g • 3 r d - p a r t y r e p o s i t o r i e s ( „ P P A s “ ) a r e i n s e c u r e a n d c a n p o t e n t i a l l y b r e a k t h e s y s t e m o r d i s t r i b u t i o n u p g r a d e s • P P A s o f t w a r e i s s e t e q u a l t o s o f t w a r e r e v i e w e d b y t h e d i s t r i b u t o r , w h i l e c o m i n g f r o m a p o t e n t i a l l y m a l i c i o u s s o u r c e • P P A s a r e d i s t r i b u t i o n - s p e c i fj c : L o t s o f P P A s f o r n e w s o f t w a r e a r e a v a i l a b l e f o r U b u n t u , b u t n o t F e d o r a , D e b i a n , …

  4. L i s t a l l e r G o a l s • S y s t e m i n t e g r a t i o n – T h e u s e r s h o u l d n o t n o t i c e t h a t L i s t a l l e r i s u s e d w h e n i n s t a l l i n g a p p s – L i s t a l l e r a p p s s h o u l d i n t e g r a t e s e a m l e s s l y w i t h t h e s y s t e m – S o f t w a r e u p d a t e s s h o u l d b e r e t r i e v e d u s i n g t h e s a m e U I a s t h e s y s t e m i t s e l f • C r o s s - d i s t r o a n d - d e s k t o p c o m p a t i b i l i t y • S i m p l i fj c a t i o n – N o c a t c h - a l l s o l u t i o n , L i s t a l l e r s h o u l d c o v e r t h e m o s t c o m m o n u s e - c a s e s . N a t i v e d i s t r i b u t i o n p a c k a g e s s h o u l d c o v e r t h e r e m a i n i n g c a s e s • S e c u r i t y – S i g n a t u r e s , s e c u r i t y h i n t s d a t a b a s e , s a n d b o x i n g , . . . • D e v e l o p e r t o o l s – P r o v i d e h e l p e r s f o r d e v e l o p e r s t o m a k e t h e i r a p p s r u n o n m u l t i p l e d i s t r i b u t i o n s – M a k e p a c k a g i n g a s s i m p l e a s p o s s i b l e , r e d u c e p o s s i b l e e r r o r s o u r c e s

  5. L i s t a l l e r c o n s i s t s o f m a n y t o o l s

  6. P a c k a g e K i t & L i s t a l l e r Software Package Update Center Manager Viewer SYSTEM DBUS Backend packagekitd Thread #1 Instance Thread #2 Listaller Active Queue STDIN STDERR STDOUT Runner Runner Helper T ask T ask Executable

  7. C o m p o n e n t s • U p s t r e a m p r o j e c t s ( G T K + / Q t / . . . ) c a n s h i p c o m p o n e n t d e fj n i t i o n s , d e fj n i n g w h i c h p u b l i c i n t e r f a c e s t h e y p r o v i d e

  8. U t o p i a p a c k a g i n g e x a m p l e L e t ' s p a c k a g e B l o a t p a d !

  9. Wr i t e s o m e c o n fj g

  10. C r e a t e p a c k a g e ! earth@sun:~/Development/Bloatpad$ lipkgen -b --sign ● Runs depscan ● Detects required components: GTK+3 (>= 3.12), GLib2 (>= 2.36), Xorg, gnome-icon-theme, GStreamer1.0 (>= 1.0) ● Generates package structure, signs package ● Runs lilith: W: icon 'bloatpad.png' has wrong size: 64x52 instead of 64x64 W: missing ';' in 'bloatpad.desktop' Categories field I: desktop-file 'Bloatpad.desktop' is missing keywords! I: no upstream author defined

  11. U s e r i n s t a l l s p a c k a g e earth@sun:~$ pkcon install-local Bloatpad-1.0_amd64.ipk earth@sun:~$ lipa -i Bloatpad-1.0_amd64.ipk ● Our user runs KDE ● Listaller will search for native packages declaring the missing components and install them

  12. U s e r r u n s a p p l i c a t i o n earth@sun:~$ runapp bloatpad ● Application is run by specifying it's desktop-filename as argument to runapp ● Runapp will take care of sandboxing the application, or warn about missing dependencies ● Will soon support DBus-activated applications as well

  13. D e v e l o p e r c r e a t e s u p d a t e earth@sun:~$ lirepo -a Bloatpad-1.2_amd64.ipk ● Add new releases to the update repository ● Also allows cross-distro application repositories („AppStores“), but users need to add these manually

  14. U s e r r e m o v e s B l o a t p a d Apper

  15. T h a n k y o u f o r y o u r a t t e n t i o n !

Recommend

More recommend