@yann said in New Rust Xen guest tools:
@john.c OK, that will be useful when the repo is signed, but for now I don't see what adverse effect it can have. Do I miss something?
Also we try to avoid breaking support for older OS versions, so we'll likely continue to advertise the old format for older versions of Debian.
@yann From Debian 13.0.0 (code name Trixie) having repository signing is mandatory. Without it apt will straight refuse to install, update or upgrade its packages.
Also doing with deb822 format will help to protect the GPG Key, used by Vates from abuse by another repository. Especially if that repository is hosting malware laden deb packages. As only the Vates repository can then use that signing key, as defined in the sources file.
Refusing to install, update or upgrade is an adverse effect wouldn’t you say?