• henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 months ago

    Really should keep that PPA use to a minimum. They’re potentially a source of not just instability but possible malware as you’re putting a lot of trust in whoever maintains that resource.

    • manxu@piefed.social
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 months ago

      Especially because there is no way to limit the packages installed from a PPA AFAIK. If the PPA has a “new” version of NGINX, or of libc, or of Wayland - you get it, too!!!

      • zorro@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 months ago

        You can set packages from a particular repo to a lower priority so that they are only installed when you expressly ask for them

          • zorro@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            https://wiki.debian.org/AptConfiguration#Using_pinning

            The company I work for has a apt repo that both has some tools I like to install, but also maintains super new versions of certain libraries and kernels with configs that would break my laptop.

            So I have the priority set low enough that if a package exists in any other repo it it preferred over my companies version.

            Also sorry for the slow reply I forgot to check my messages 😄