Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Recommend using the PPA in the wordpress website as well #6406

Open
Lidoca opened this issue Jul 15, 2024 · 5 comments
Open

Recommend using the PPA in the wordpress website as well #6406

Lidoca opened this issue Jul 15, 2024 · 5 comments
Assignees
Labels
documentation Issues and pull requests related to the documentation wordpress This is related to the official website

Comments

@Lidoca
Copy link

Lidoca commented Jul 15, 2024

Is your feature request related to a problem? Please describe.

On the primary website (WordPress.com), there is no warning about Ubuntu and its derivatives.

Describe the solution you'd like

Write the following on the Downloads page on WordPress.com as well:

For Ubuntu 18.04+ and derivatives (such as Linux Mint), users are strongly
advised
to use the
PPA.

How to add and install from the PPA:

sudo add-apt-repository ppa:deki/firejail
sudo apt-get update
sudo apt-get install firejail firejail-profiles

Reason: The firejail package for Ubuntu 20.04 has been left vulnerable to
CVE-2021-26910 for months after a patch for it was posted on Launchpad:

See also https://wiki.ubuntu.com/SecurityTeam/FAQ:

What software is supported by the Ubuntu Security team?

Ubuntu is currently divided into four components: main, restricted, universe
and multiverse. All binary packages in main and restricted are supported by
the Ubuntu Security team for the life of an Ubuntu release, while binary
packages in universe and multiverse are supported by the Ubuntu community.

Additionally, the PPA version is likely to be more recent and to contain more
profile fixes.

See the following discussions for details:

Describe alternatives you've considered

A clear and concise description of any alternative solutions or features you've considered.

Additional context

From what I understand, this may also apply to firetools, in which case the WordPress.com Downloads page for firetools and the README on GitHub would also need to be modified.

@glitsj16
Copy link
Collaborator

Having the Ubuntu PPA details on the primary website too makes sense. If I'm not mistaken only @netblue30 can take care of that.

From what I understand, this may also apply to firetools, in which case the WordPress.com Downloads page for firetools and the README on GitHub would also need to be modified.

Firetools repo offers .deb's on its releases page. I don't see any firetools package on the PPA though.

@kmk3 kmk3 added documentation Issues and pull requests related to the documentation wordpress This is related to the official website labels Jul 15, 2024
@kmk3
Copy link
Collaborator

kmk3 commented Jul 15, 2024

From what I understand, this may also apply to firetools, in which case the
WordPress.com Downloads page for firetools and the README on GitHub would
also need to be modified.

Firetools repo offers .deb's on its
releases page. I don't see
any firetools package on the
PPA though.

It sounds like a good idea to have all firejail-related tools in the same PPA.
One consideration is that firetools depends on qt, which might be tricky to
deal with if different Debian versions ship with different qt versions, though
I'm not familiar with maintaining something like that.

@reinerh Thoughts?

@kmk3 kmk3 changed the title Make sure Ubuntu and its derivatives recommend using PPA on the Downloads page on WordPress.com as well Recommend using the PPA on the Downloads page on WordPress.com as well Jul 15, 2024
@kmk3 kmk3 changed the title Recommend using the PPA on the Downloads page on WordPress.com as well Recommend using the PPA in the wordpress website as well Jul 15, 2024
@reinerh
Copy link
Collaborator

reinerh commented Jul 15, 2024

there was no need yet to have firetools in the PPA, as firetools is not released so frequently.
but if there is interest, I can upload it as well.
I think firetools does not have a tight requirement on certain Qt versions, so it might work without much problems.

kmk3 added a commit to kmk3/firejail that referenced this issue Jul 15, 2024
@reinerh
Copy link
Collaborator

reinerh commented Jul 15, 2024

I just remembered that I actually already uploaded firetools to the PPA: https://launchpad.net/~deki/+archive/ubuntu/firejail
0.9.72 is available for Ubuntu 20.04, 22.04 and 22.10.

kmk3 added a commit to kmk3/firejail that referenced this issue Jul 15, 2024
@kmk3
Copy link
Collaborator

kmk3 commented Jul 15, 2024

there was no need yet to have firetools in the PPA, as firetools is not
released so frequently. but if there is interest, I can upload it as well. I
think firetools does not have a tight requirement on certain Qt versions, so
it might work without much problems.

I just remembered that I actually already uploaded firetools to the PPA:
https://launchpad.net/~deki/+archive/ubuntu/firejail 0.9.72 is available for
Ubuntu 20.04, 22.04 and 22.10.

I see, but is it important to have matching versions of firejail/firetools?

For example, if a user installed firejail 0.9.72 in the PPA and firetools
0.9.70 from the distribution (in case it was not in the PPA).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Issues and pull requests related to the documentation wordpress This is related to the official website
Projects
None yet
Development

No branches or pull requests

5 participants