[Bug 2114894] Re: modernize-sources warning still appearing on Questing

Marcos Alano 2114894 at bugs.launchpad.net
Wed Jun 18 14:58:46 UTC 2025


I understand. It shows the alert even there is just one source affected, and then modernize-sources try to modernize all of them.
Here is my result:
Audit: Repositories should provide a clear-signed InRelease file, but none found at https://get.filebot.net/deb/dists/universal/InRelease.
Audit: Repositories should provide a clear-signed InRelease file, but none found at http://linux.dropbox.com/ubuntu/dists/plucky/InRelease.
Audit: The sources.list(5) entry for 'https://downloads.1password.com/linux/debian/amd64' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'http://linux.dropbox.com/ubuntu' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'https://get.filebot.net/deb' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'http://apt.keepsolid.com/ubuntu' should be upgraded to deb822 .sources
Audit: Missing Signed-By in the sources.list(5) entry for 'http://apt.keepsolid.com/ubuntu'
Audit: Consider migrating all sources.list(5) entries to the deb822 .sources format
Audit: The deb822 .sources format supports both embedded as well as external OpenPGP keys
Audit: See apt-secure(8) for best practices in configuring repository signing.
Notice: Some sources can be modernized. Run 'apt modernize-sources' to do so.

So theoretically, the file affected is /etc/apt/sources.list.d/keepsolidinc.list, but:
➜ cat keepsolidinc.list
c=cat
deb [arch=amd64 signed-by=/etc/apt/keyrings/keepsolidinc.gpg] https://apt.keepsolid.com/ubuntu/ jammy main

Any ideas? maybe some old thing under /var/lib/apt? Maybe it should be
.asc instead of .gpg?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/2114894

Title:
  modernize-sources warning still appearing on Questing

Status in apt package in Ubuntu:
  Opinion

Bug description:
  I think maybe this is a problem with the upstream.

  According to this, https://tracker.debian.org/news/1647058/accepted-
  apt-302-source-into-unstable/, the version 3.0.2 downgrade the
  modernize source to audit, so I should see information about it just
  when I execute apt with `--audit`.

  This change, and perhaps others, weren't moved to version 3.1.2, the
  version used in questing today.

  This message is really annoying. I can't modernize source because of
  some applications, like Spotify and Steam, recreate the .list file
  when they are updated, so that's cause a worse warning about source
  duplication.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2114894/+subscriptions




More information about the foundations-bugs mailing list