You are about to install software that can't be authenticated

ychaouche · 12-14-2020, 02:14 AM

https://i.imgur.com/YdRCMUK.png

This has been a first since I am using mint (2015). I didn't touch my sources file, only added a repo for slack and another one for google earth, but the warning message is about system packages, not third party apps.

Code:

chaouche#ychaouche-PC 16:35:35 ~ $ cat /etc/apt/sources.list /etc/apt/sources.list.d/*
#deb cdrom:[Linux Mint 17 _Qiana_ - Release amd64 20140619]/ trusty contrib main non-free
# deb http://archive.getdeb.net/ubuntu trusty-getdeb apps
### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
# deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main
### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
# deb http://dl.google.com/linux/earth/deb/ stable main
### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
# deb http://dl.google.com/linux/talkplugin/deb/ stable main
# Do not edit this file manually, use Software Sources instead.

deb http://packages.linuxmint.com qiana main upstream import  #id:linuxmint_main
deb http://extra.linuxmint.com qiana main #id:linuxmint_extra

deb http://archive.ubuntu.com/ubuntu trusty main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu trusty-updates main restricted universe multiverse

deb http://security.ubuntu.com/ubuntu/ trusty-security main restricted universe multiverse
deb http://archive.canonical.com/ubuntu/ trusty partner
# deb http://ppa.launchpad.net/oguzhaninan/stacer/ubuntu trusty main
# deb-src http://ppa.launchpad.net/oguzhaninan/stacer/ubuntu trusty main
# deb http://dl.ajaxplorer.info/repos/apt stable main
# deb-src http://dl.ajaxplorer.info/repos/apt stable main### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
deb https://packagecloud.io/slacktechnologies/slack/debian/ jessie main
# Written by ubuntu-advantage-tools
deb https://esm.ubuntu.com/ubuntu trusty-infra-security main
# deb-src https://esm.ubuntu.com/ubuntu trusty-infra-security main

deb https://esm.ubuntu.com/ubuntu trusty-infra-updates main
# deb-src https://esm.ubuntu.com/ubuntu trusty-infra-updates main
ychaouche#ychaouche-PC 16:35:45 ~ $

Any comments ?

shruggy · 12-14-2020, 02:42 AM

Quote:

Originally Posted by ychaouche

Code:

deb https://packagecloud.io/slacktechnologies/slack/debian/ jessie main

This line seems to be the culprit. It doesn't look like a secure deb repository, just like a trivial, home-made one (it lacks the Release/Release.gpg/InRelease files).

ychaouche · 12-14-2020, 04:27 AM

Quote:

Originally Posted by shruggy

This line seems to be the culprit. It doesn't look like a secure deb repository, just like a trivial, home-made one (it lacks the Release/Release.gpg/InRelease files).

It only contains the slack software updates, nothing else. Check out https://packagecloud.io/slacktechnologies/slack/

shruggy · 12-14-2020, 04:35 AM

So what? It's not secure, that's all. You should either not use it, or explicitly tell APT not to complain about it:

Code:

deb [allow-insecure=yes] https://packagecloud.io/slacktechnologies/slack/debian/ jessie main

ychaouche · 12-14-2020, 04:41 AM

Quote:

Originally Posted by shruggy

So what?

The point I was trying to make is that it likely isn't the culprit.
I added that repo way before the warning message happend. You see,
I didn't recieve system updates in years, because the system isn't
supported anymore. The only updates I was receiving were those of
slack and slack only. The only packages that were updated was a single
package (slack). But a few days ago, when ESM kicked in, I started
receiving updates from either the ubuntu repo or the linuxmint repo
(in my opinion) about important system packages like apt and bash,
which are clearly not in the slack repo you pointed out.

see https://i.imgur.com/YdRCMUK.png if you haven't yet.

shruggy · 12-14-2020, 05:27 AM

Sorry, I cannot see the picture.