cromlech

Packages for Debian and Ubuntu users

Instructions

Shell script:

Note: Prompts to install dependencies first, i.e. apt-transport-https, curl, et al. Verify the script first before running this.

Interactive shell:

curl -Ls https://cromle.ch/gpg | sudo apt-key add - && \
    sudo add-apt-repository \
    "deb https://cromle.ch/deb $(lsb_release -cs) main"

Note: Ensure you apt update after running the above.

Dockerfile:

RUN curl -Ls https://cromle.ch/gpg | apt-key add - && \
    add-apt-repository \
    "deb https://cromle.ch/deb $(lsb_release -cs) main" && \
    apt update

Ansible Playbook:

- name: gpg key
  apt_key:
    url: https://cromle.ch/gpg
    state: present

- name: add repo
  apt_repository:
    repo: "deb https://cromle.ch/deb/ {{ ansible_distribution_release }} main"
    state: present

Removal:

Find the file that contains the repo line, it can vary depending on whether it was added via script, manually or by Ansible:

grep -i 'cromle.ch/deb' /etc/apt/**/*

...and either remove the file if it only contains that line or edit the file to remove that line and finally apt update.

What is this and why?

This is my personal Debian package repository, freely and publicly available for anyone else to use if so desired. Everything is open source and verifiable. What's in here is used by me for my laptop, other old machines I have lying around at home and on servers, so it is actively maintained.

I've set this up as a central point that I can use for any application, util or dependency, on bare metal, in the cloud, in a Docker container, a Kubernetes cluster or on a Chromebook. If I find some cool new tool on GitHub that needs compiling for example, I can compile it once, package it up and use it anywhere. Instead of relying on NPM being up and being secure I can package one of my Node.js libraries (and its dependencies which I can verify) up and apt install like everything else. For me it is safer and more reliable.

Supported distributions

I aim to support Debian testing plus the latest stable version and the latest two LTS versions of Ubuntu. This may seem odd as Debian testing is right up to date and I'm missing out on the latest versions of Ubuntu potentially but the 6 month release cycle is too quick for my tastes and I run Debian testing on my laptop.

Currently this means:

  • debian stable 9 stretch
  • debian testing 10 buster
  • ubuntu LTS 16.04 xenial
  • ubuntu LTS 18.04 bionic

Packages

package name license debian ubuntu
9 10 16.04 18.04
ddb MIT
nini MIT

Trust

All packages are signed by me using this key.

All package sources are verifiable either in their respective repos or here.

Everything is served out from Amazon S3 via CloudFront over HTTPS, there are no servers to hack and the repo is highly available globally.

You can check me out here, here, here, here, and here.

You can message me on Keybase or via email: roryrjb [at] gmail [dot] com.

Mailing list

You can be notified of any updates to the packages here by subscribing to the mailing list here.

 

 

© 2018 Rory Bradford and various original package authors.