[Aptitude-devel] Bug#915246: aptitude: doesn't cope with "Repository '…' changed its 'Origin' value from 'A' to 'B'. This must be accepted explicitly before updates for this repository can be applied. […] Do you want to accept these changes and continue updating from this repository?" questions from apt.

[David Kalnischkies]

On Sun, Dec 02, 2018 at 04:34:23AM +0100, Axel Beckert wrote:
> But with "apt update" I get this dialog (and afterwards two more)
> instead of just failing package list updates:
> 
> E: Repository 'https://deb.opera.com/opera stable InRelease' changed its 'Origin' value from 'Opera Software ASA' to 'Opera Software AS'
> N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
> Do you want to accept these changes and continue updating from this repository? [y/N]
> 
> Seems as if currently aptitude doesn't have the capability to make a
> dialog out of this.

For Context: It is "just" apt which asks this question interactively
currently, apt-get "only" prints the errors and expects the confirmation
via commandline flag(s) [or as usual via config options].

Implementation wise it should be "simple": You likely have a class
extending pkgAcquireStatus – change that to pkgAcquireStatus2 (yeah for
keeping ABI compatibility) and implement the method "bool
ReleaseInfoChanges(metaIndex const * const LastRelease, metaIndex const
* const CurrentRelease, std::vector<ReleaseInfoChange> &&Changes)".
See apt-private/acqprogress.cc for an example in the apt sources
implementing the behaviour in apt/apt-get.


Feel free to ask if there is something unclear… it is a security feature
of sorts & I implemented it, so its kinda important to me. :)


Best regards

David Kalnischkies
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/aptitude-devel/attachments/20181202/b049d3e7/attachment.sig>