On Debian-based distros, when an app is available as a DEB or an AppImage (that doesn’t self-update), but no APT repository, PPA or Flatpak, the only option is to manually download each update, and usually manually check even whether there are updates.

But, what if those would be upgraded at the same time as everything else using the tools you’re familiar with ?

dynapt is a local web server that fetches those DEBs (and AppImages to be wrapped into DEBs) wherever those are, then serves these to APT like any package repository does.

I started building it a few months ago, and after using it to upgrade apps on my computers and servers for some time, I pre-released it for the first time last week.

The stable version will come with a CLI wizard to avoid this manual configuration.

Feedback is welcome :)

  • Asetru@feddit.org
    link
    fedilink
    arrow-up
    1
    ·
    12 days ago

    Sorry to be that guy, but this sounds like a cybersecurity nightmare. While everybody was busy to come up with schemes that make absolutely sure that only trusted sources can update a system to avoid having malicious players push their code to users, this one just takes any rando’s pile of whatever and injects it straight into the system’s core? Like, that doesn’t sound like a good idea.

    • markstos@lemmy.world
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      12 days ago

      No matter where you install from, you have to trust the source. Indeed, you have to trust every step in the supply chain.

      If you are getting your code straight from the author, you are eliminating an exploit that’s introduced by a compromised account of a packager.

      Carry on.