So kommt es zu solchen Auswüchsen 🇬🇧 (siehe auch die original sources.list am Ende des Artikels).
Wahllos werden etliche Quellen in die sources.list geschrieben und diese dann in Foren als Empfehlung beworben. Hunderte User gehen darauf hin und binden sich solche Listen mit Quellen in die sources.list ein ohne zu wissen was für Quellen das überhaupt sind.
So erging es Jοhan Kiviniemi 🇬🇧 . Johan betreibt eine kleine Paketquelle für seine Entwicklungen und Tests. Eine handvoll User nutzen die Paketquelle um seine Software schnell testen zu können. Irgendwie wurde diese Paketquelle mit in die oben vorgestellte Paketliste aufgenommen, ohne dass der Entwickler kontaktiert wurde, ob das ihm überhaupt recht ist. Und auf einmal beziehen hunderte User Pakete über eine kleine Dial-Up Leitung, die eigentlich nur für wenige Leute gedacht ist.
Ubuntu Untrusted Repository von trevi55, CC BY-NC-SA 2.0 |
Als er das bemerkte, wählte er eine kleine Überraschung für seine „Abonnenten“. Er erzeugte eine neuere Version von "edgy-wallpapers" für seine Paketquelle und ersetze das Standard-Wallpaper durch diese Version.
Ein harmloser, aber wirkungsvoller Scherz, der auf einmal die Benutzer in Panik und Aufruhr versetzte. Denn diese wurden natürlich durch die automatischen Updates auch mit diesem Paket versorgt und fanden auf einmal das besagte Wallpaper auf ihrem Desktop wieder. Johan hat seine Meinung in einer Erklärung abgegeben.
Und man muss zugeben: Er hat recht!
Bitte, liebe Benutzer: Die Linux-Welt ist meistens freundlich. Doch es würde ein Leichtes sein, eine Softwarequelle aufzusetzen, diese eine Weile durch aktuelle Updates populär zu machen und dann eine wichtige Systemkomponente gegen beispielsweise Malware auszutauschen.
Man fügt niemals jede Quelle blind zur Paketverwaltung hinzu. Wenn man meint eine bestimmte Quelle zu brauchen, dann installiert man aus dieser ausschließlich die Programme, die interessant sind und deaktiviert sie danach wieder. So compiliert man kleine Programme lieber selbst und baut primär auf die Programme und Versionen, die Ubuntu von Haus aus mitbringt.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 | # Treviño’s Ubuntu Edgy Sources list # http://download.tuxfamily.org/3v1deb/blog/?page_id=13 # # Firstly made on source-o-matic (http://www.ubuntulinux.nl/source-o-matic) list # Added many extra repository # # If you get errors about missing keys, lookup the key in this file # and run these commands (replace KEY with the key number): # # gpg –keyserver subkeys.pgp.net –recv KEY # gpg –export –armor KEY | sudo apt-key add - # # If you have a gpg key URL use (replace URL with the key address): # # wget URL –quiet -O – | sudo apt-key add - # # If you have a gpg key file use (replace FILE with the key file): # # sudo apt-key add FILE # # Ubuntu supported packages (GPG key: 437D05B5) deb http://archive.ubuntu.com/ubuntu edgy main restricted deb http://archive.ubuntu.com/ubuntu edgy-updates main restricted deb http://archive.ubuntu.com/ubuntu edgy-security main restricted deb http://archive.ubuntu.com/ubuntu edgy-proposed main restricted deb-src http://archive.ubuntu.com/ubuntu edgy main restricted deb-src http://archive.ubuntu.com/ubuntu edgy-updates main restricted deb-src http://archive.ubuntu.com/ubuntu edgy-security main restricted deb-src http://archive.ubuntu.com/ubuntu edgy-proposed main restricted # Ubuntu community supported packages (GPG key: 437D05B5) deb http://archive.ubuntu.com/ubuntu edgy universe multiverse deb http://archive.ubuntu.com/ubuntu edgy-updates universe multiverse deb http://archive.ubuntu.com/ubuntu edgy-security universe multiverse deb http://archive.ubuntu.com/ubuntu edgy-proposed universe multiverse deb-src http://archive.ubuntu.com/ubuntu edgy universe multiverse deb-src http://archive.ubuntu.com/ubuntu edgy-updates universe multiverse deb-src http://archive.ubuntu.com/ubuntu edgy-security universe multiverse deb-src http://archive.ubuntu.com/ubuntu edgy-proposed universe multiverse # Ubuntu backports project (GPG key: 437D05B5) deb http://archive.ubuntu.com/ubuntu edgy-backports main restricted universe multiverse deb-src http://archive.ubuntu.com/ubuntu edgy-backports main restricted universe multiverse # CANONICAL COMMERCIAL REPOSITORY (Hosted on Canonical servers, not Ubuntu servers. # RealPlayer10, Opera and more to come.) deb http://archive.canonical.com/ubuntu edgy-commercial main # Seveas’ packages (GPG key: 1135D466) deb http://mirror.ubuntulinux.nl edgy-seveas all deb-src http://mirror.ubuntulinux.nl edgy-seveas all # kubuntu.org packages for the latest KDE version (GPG key: DD4D5088) deb http://kubuntu.org/packages/kde-latest edgy main deb-src http://kubuntu.org/packages/kde-latest edgy main # kubuntu.org packages for the latest KDE4 beta (GPG key: DD4D5088) # Warning: those packages won’t overwrite your kde3 environnement #deb http://kubuntu.org/packages/kde4-3.80.3 ./ # kubuntu.org packages for the latest Koffice version (GPG key: DD4D5088) deb http://kubuntu.org/packages/koffice-latest edgy main deb-src http://kubuntu.org/packages/koffice-latest edgy main # kubuntu.org packages for the latest amaroK version (GPG key: DD4D5088) #deb http://kubuntu.org/packages/amarok-latest edgy main #deb-src http://kubuntu.org/packages/amarok-latest edgy main deb http://kubuntu.org/packages/amarok-144 edgy main # Bleeding edge wine packages deb http://wine.budgetdedicated.com/apt edgy main deb-src http://wine.budgetdedicated.com/apt edgy main # The Opera browser (packages) (GPG key: 6A423791) deb http://deb.opera.com/opera etch non-free # Google picasa packages deb http://dl.google.com/linux/deb/ stable non-free # Medibuntu (Multimedia, Entertainment & Distraction In Ubuntu – ex Penguin Liberation Front) # GPG key-file: http://medibuntu.sos-sts.com/repo/medibuntu-key.gpg deb http://medibuntu.sos-sts.com/repo/ edgy free non-free deb-src http://medibuntu.sos-sts.com/repo/ edgy free non-free ## archive.kubuntu.de / archive.czessi.net # The repository from Kubuntu Germany # GPG key-file: http://archive.czessi.net/ubuntu/kczessi.gpg # sudo apt-key add kczessi.gpg deb http://archive.czessi.net/ubuntu edgy main restricted universe multiverse preview deb-src http://archive.czessi.net/ubuntu edgy main restricted universe multiverse preview ## E-Yagi Consulting Community Repository (GPG: 4B6E7209) #deb http://eyagi.bpa.nu/~jamie/ubuntu edgy main restricted universe multiverse #deb-src http://eyagi.bpa.nu/~jamie/ubuntu edgy main restricted universe multiverse # Ubuntu Taiwan ubuntu extra repository deb http://apt.ubuntu.org.tw ubtw/ deb http://apt.ubuntu.org.tw ubtw-testing/ # # Achim’s Unofficial ‘edgy’ Kubuntu packages # deb http://www.mpe.mpg.de/~ach/kubuntu/edgy ./ # deb-src http://www.mpe.mpg.de/~ach/kubuntu/edgy ./ # # Ubuntu edgy University Klagenfurt packages # # $ wget http://ubuntu.uni-klu.ac.at/uniklu-debuild.pub # # $ sudo apt-key add uniklu-debuild.pub # # uniklu: backports and new packages # # uniklu-desktop: packages for uniklu desktop # # uniklu-intern: not freely redistributable (jvm), or modified packages # # uniklu-nfsv4: nfsv4 kernel and packages # # uniklu-vserver: vserver kernel # # uniklu-testing: packages not ready for general use ! # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-desktop # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-intern # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-nfsv4 # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-vserver # deb http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-testing # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-desktop # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-intern # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-nfsv4 # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-vserver # deb-src http://ubuntu.uni-klu.ac.at/ubuntu.uniklu/ edgy uniklu-testing ## SimplyMepis packages (distro based on k-ubuntu) #deb http://apt.mepis.org/6.0/ mepis main # Ekiga and Debian pkg-voip deb http://pkg-voip.buildserver.net/ubuntu edgy main # superm1′s repository (mythtv and other nonfree) (GPG key: 80DF6D58) deb http://home.eng.iastate.edu/~superm1 edgy all deb-src http://home.eng.iastate.edu/~superm1 edgy all # Official Beryl Ubuntu Packages (GPG key: 1609B551) # GPG key-file: http://ubuntu.beryl-project.org/1609B551.gpg deb http://ubuntu.beryl-project.org edgy main deb-src http://ubuntu.beryl-project.org edgy main # Freedesktop compiz packages # GPG key-file: http://gandalfn.club.fr/ubuntu/gandalfn.key deb http://gandalfn.club.fr/ubuntu/ edgy stable deb-src http://gandalfn.club.fr/ubuntu/ edgy stable #deb http://gandalfn.club.fr/ubuntu/ edgy dev git #deb-src http://gandalfn.club.fr/ubuntu/ edgy dev git # Ubuntu repository for Screenlets (GPG key: 619A3D4E) # GPG key-file: http://hendrik.kaju.pri.ee/ubuntu/619A3D4E.gpg deb http://hendrik.kaju.pri.ee/ubuntu edgy screenlets deb-src http://hendrik.kaju.pri.ee/ubuntu edgy screenlets # Subpixel Font rendering packages # Improved font rendering – WARNING: May violate some patents deb http://www.elisanet.fi/mlind/ubuntu edgy fonts main deb-src http://www.elisanet.fi/mlind/ubuntu edgy fonts main ## Others mlind experimental misc Packages #deb http://www.elisanet.fi/mlind/ubuntu edgy experimental #deb-src http://www.elisanet.fi/mlind/ubuntu edgy experimental ## Murrine Ubuntu Repository (GPG key: B54820BC) ## GPG key-file: http://malteo.homelinux.net/B54820BC.gpg #deb http://malteo.homelinux.net edgy-malteo all #deb-src http://malteo.homelinux.net edgy-malteo all # gandalfn misc packages (anjuta and other devs) deb http://gandalfn.club.fr/ubuntu/ edgy misc deb-src http://gandalfn.club.fr/ubuntu/ edgy misc # Skype packages deb http://download.skype.com/linux/repos/debian/ stable non-free # Easycam packages deb http://blognux.free.fr/debian unstable main # Audacious deb http://vdlinux.sourceforge.jp/ experimental audacious deb-src http://vdlinux.sourceforge.jp/ experimental audacious ## Listen #deb http://theli.free.fr/packages/ dapper listen theli listen-unstable #deb-src http://theli.free.fr/packages/ dapper listen theli listen-unstable # Geole’s Ubuntu Repository # GPG key-file: http://www.geole.info/fileadmin/data/misc/geole.info-apt-key.gpg # sudo apt-key add geole-apt-key.gpg deb http://ubuntu.geole.info/ edgy universe multiverse # Linux2Go Ubuntu Packages (GPG key: E8BDA4E3) deb http://www.linux2go.dk/ubuntu edgy main deb-src http://www.linux2go.dk/ubuntu edgy main # GCompris, Televidilo, Kdocker, Frozen-Bubble… deb http://thomas.pub.enix.org/debian/ edgy main deb-src http://thomas.pub.enix.org/debian/ edgy main # Asher256′s Repository deb http://asher256-repository.tuxfamily.org dapper main dupdate french deb http://asher256-repository.tuxfamily.org ubuntu main dupdate french # Gauvain Repository deb http://gauvain.tuxfamily.org/repos edgy contrib deb-src http://gauvain.tuxfamily.org/repos edgy contrib # Tvfreeplayer Packages (GPG key: 3C6489CB) # GPG key-file: http://www.tvfreeplayer.com/linux/falcon/tvfreeplayer.gpg deb http://www.tvfreeplayer.com/linux/falcon edgy all deb-src http://www.tvfreeplayer.com/linux/falcon edgy all # gnomemeeting – ekiga (GPG key: 52ABFCB1) deb http://snapshots.ekiga.net/ubuntu/ edgy main deb-src http://snapshots.ekiga.net/ubuntu/ edgy main #deb http://snapshots.voxgratia.org/ubuntu/ edgy main #deb-src http://snapshots.voxgratia.org/ubuntu/ edgy main # seb128 repository (gaim – rhythmbox) deb http://people.ubuntu.com/~seb128/deb ./ deb-src http://people.ubuntu.com/~seb128/deb ./ ## lprod packages: many audio/video apps: avidemux, cinelerra… #deb http://lprod.org/deb/edgy/ ./ #deb-src http://lprod.org/deb/edgy/ ./ ## Mjpegtools and Cinelerra packages (choose your arch) #deb http://www.kiberpipa.org/~gandalf/ubuntu/dapper/mjpegtools ./ #deb http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/i686/ ./ ##deb http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/pentium4/ ./ ##deb http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/athlonxp/ ./ #deb-src http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/i686/ ./ ##deb-src http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/pentium4/ ./ ##deb-src http://www.kiberpipa.org/~gandalf/ubuntu/dapper/cinelerra/athlonxp/ ./ ## LiVes dapper package #deb http://people.ubuntubrasil.org/~rclbelem/lives/edgy/ ./binary/ ## A little too quiet #deb http://apt.alittletooquiet.net/staging dapper main ## Jahshaka Packages #deb http://repo.jahshaka.org/ubuntu/dapper binary-i386/ ## Spring Packages #deb ftp://ftp.gwdg.de/pub/linux/people/fbo/debspring/dapper/ / #deb-src ftp://ftp.gwdg.de/pub/linux/people/fbo/debspring/dapper/ / ## debian.wgdd.de Ubuntu Repository (GPG key: E394D996) # deb http://debian.wgdd.de/ubuntu edgy universe # deb-src http://debian.wgdd.de/ubuntu edgy universe ## VLC nightlies #deb http://nightlies.videolan.org/build/edgy-i386 / # Cafuego’s edgy Stuff: Broadcom firmware, google-earth, beagle (GPG key: 969F3F57)… deb http://au.ubuntu.cafuego.net edgy-cafuego all bcm43xx deb-src http://au.ubuntu.cafuego.net edgy-cafuego all bcm43xx # Debuntu Ubuntu edgy packages # GPG Key: http://repository.debuntu.org/GPG-Key-chantra.txt deb http://repository.debuntu.org/ edgy multiverse deb-src http://repository.debuntu.org/ edgy multiverse # BMPx edgy Repository # GPG key-file: http://files.beep-media-player.org/packages/bmp-packages.pubkey deb http://files.beep-media-player.org/packages/ubuntu edgy main testing deb-src http://files.beep-media-player.org/packages/ubuntu edgy main testing # Morgoth Repository (Monkey’s Audio, xmms pugins, vlc plugins, gqview, audacity…) (GPG key: 7E2E4741) # GPG key-file: http://morgoth.free.fr/files/morgoth-signkey.gpg.asc deb http://morgoth.free.fr/ubuntu edgy-backports main deb-src http://morgoth.free.fr/ubuntu edgy-backports main # ATi & nVidia drivers Ubuntu packages # GPG key: http://albertomilone.com/drivers/tseliot.asc deb http://www.albertomilone.com/drivers/edgy/latest/32bit binary/ ## Latest Nvidia drivers in restricted modules packages #deb http://amaranth.selfip.com/ edgy lrm #deb-src http://amaranth.selfip.com/ edgy lrm # Givre’s repository (ntfs-3g & fuse 2.5.3) – NTFS writing support deb http://ntfs-3g.sitesweetsite.info/ubuntu/ edgy main deb-src http://ntfs-3g.sitesweetsite.info/ubuntu/ edgy main # Automatix repository (GPG key: E23C5FC3) deb http://www.getautomatix.com/apt edgy main # SoS: SeerOfSouls – e17 (Enlightenment DR 17) # GPG-Key: http://seerofsouls.com/keys/hawkwind.asc deb http://SeerOfSouls.com/ edgy e17 contrib deb-src http://SeerOfSouls.com/ edgy contrib e17 # edevelop – e17 (Enlightenment DR 17) deb http://edevelop.org/pkg-e/ubuntu edgy e17 deb-src http://edevelop.org/pkg-e/ubuntu edgy e17 # Musicbrainz deb http://ftp.musicbrainz.org/pub/musicbrainz/users/luks/ubuntu edgy musicbrainz deb-src http://ftp.musicbrainz.org/pub/musicbrainz/users/luks/ubuntu edgy musicbrainz # imbrandons software repository (GPG key: 887D9FD2) deb http://www.imbrandon.com/packages edgy all deb-src http://www.imbrandon.com/packages edgy all # Candyz’s Ubuntu Packages # GPG key: http://cle.linux.org.tw/candyz/Ubuntu/candyz.key deb http://cle.linux.org.tw/candyz/Ubuntu/edgy i386/ # The Ubuntu NLP Repository (GPG key: 8ABD1965) deb http://cl.naist.jp/~eric-n/ubuntu-nlp edgy nlp english delph-in misc deb-src http://cl.naist.jp/~eric-n/ubuntu-nlp edgy nlp english delph-in misc # Ubuntu System Administrator packages # mirror: http://ubuntu.systemadministrator.org deb http://ubuntu.moshen.de edgy multimedia misc deb-src http://ubuntu.moshen.de edgy multimedia misc # Michael Biebl Tracker Repository (GPG key: BD058554) # GPG Key-file: http://www.teco.edu/~biebl/biebl.asc deb http://debs.michaelbiebl.de/ edgy main deb-src http://debs.michaelbiebl.de/ edgy main # The Consciousness Repository (GPG key: DD385D79) # GPG key-file: http://debs.peadrop.com/DD385D79.gpg deb http://debs.peadrop.com edgy all deb-src http://debs.peadrop.com edgy all # XFCE 4.4.0 Repository deb http://ubuntu.tolero.org/ edgy xfce-4-4-0 deb-src http://ubuntu.tolero.org/ edgy xfce-4-4-0 # IVTV Repository for Ubuntu (GPG key: 80DF6D58) # GPG key-file: http://dl.ivtvdriver.org/ubuntu/80DF6D58.gpg deb http://dl.ivtvdriver.org/ubuntu edgy all deb-src http://dl.ivtvdriver.org/ubuntu edgy all # # Ion’s Ubuntu packages (GPG key: 2EE24E0B) # # WARNING: He had made some bad packages!!! # deb http://johan.kiviniemi.name/ubuntu edgy all # deb-src http://johan.kiviniemi.name/ubuntu edgy all # Treviño’s Ubuntu edgy Repository (GPG key: 81836EBF – DD800CD9) # Many "random" software: aMule, amsn, mplayer, moto4lin, flashplugin & flashplayer (9.x)… # Further informations: http://3v1n0.tuxfamily.org deb http://download.tuxfamily.org/3v1deb edgy 3v1n0 deb-src http://download.tuxfamily.org/3v1deb edgy 3v1n0 # Treviño’s Ubuntu edgy Beryl-SVN Repository (GPG key: 81836EBF – DD800CD9) # Daily Updated Beryl (and related projects) Packages… deb http://download.tuxfamily.org/3v1deb edgy beryl-svn deb-src http://download.tuxfamily.org/3v1deb edgy beryl-svn ## Treviño’s Ubuntu Suspend2 patched kernels Repository (GPG key: 81836EBF – DD800CD9) ## Ubuntu kernels patched with Suspend2 plus other related tools www.suspend2.net ## Warning: they will replace standard ubuntu kernel related packages #deb http://download.tuxfamily.org/3v1deb edgy suspend2 #deb-src http://download.tuxfamily.org/3v1deb edgy suspend2 ## Treviño’s Ubuntu edgy Xorg-7.2 Repository (GPG key: 81836EBF – DD800CD9) ## Xorg 7.2 and Mesa 6.5.2 recompiled under edgy ## Warning: this is only for advanced users, read at http://tinyurl.com/2w8alr #deb http://download.tuxfamily.org/3v1deb edgy xorg-7.2 |
Zur Diskussion.