[Bug 2114894] Re: modernize-sources warning still appearing on Questing
Marcos Alano
2114894 at bugs.launchpad.net
Wed Jun 18 14:58:46 UTC 2025
I understand. It shows the alert even there is just one source affected, and then modernize-sources try to modernize all of them.
Here is my result:
Audit: Repositories should provide a clear-signed InRelease file, but none found at https://get.filebot.net/deb/dists/universal/InRelease.
Audit: Repositories should provide a clear-signed InRelease file, but none found at http://linux.dropbox.com/ubuntu/dists/plucky/InRelease.
Audit: The sources.list(5) entry for 'https://downloads.1password.com/linux/debian/amd64' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'http://linux.dropbox.com/ubuntu' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'https://get.filebot.net/deb' should be upgraded to deb822 .sources
Audit: The sources.list(5) entry for 'http://apt.keepsolid.com/ubuntu' should be upgraded to deb822 .sources
Audit: Missing Signed-By in the sources.list(5) entry for 'http://apt.keepsolid.com/ubuntu'
Audit: Consider migrating all sources.list(5) entries to the deb822 .sources format
Audit: The deb822 .sources format supports both embedded as well as external OpenPGP keys
Audit: See apt-secure(8) for best practices in configuring repository signing.
Notice: Some sources can be modernized. Run 'apt modernize-sources' to do so.
So theoretically, the file affected is /etc/apt/sources.list.d/keepsolidinc.list, but:
➜ cat keepsolidinc.list
c=cat
deb [arch=amd64 signed-by=/etc/apt/keyrings/keepsolidinc.gpg] https://apt.keepsolid.com/ubuntu/ jammy main
Any ideas? maybe some old thing under /var/lib/apt? Maybe it should be
.asc instead of .gpg?
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/2114894
Title:
modernize-sources warning still appearing on Questing
Status in apt package in Ubuntu:
Opinion
Bug description:
I think maybe this is a problem with the upstream.
According to this, https://tracker.debian.org/news/1647058/accepted-
apt-302-source-into-unstable/, the version 3.0.2 downgrade the
modernize source to audit, so I should see information about it just
when I execute apt with `--audit`.
This change, and perhaps others, weren't moved to version 3.1.2, the
version used in questing today.
This message is really annoying. I can't modernize source because of
some applications, like Spotify and Steam, recreate the .list file
when they are updated, so that's cause a worse warning about source
duplication.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2114894/+subscriptions
More information about the foundations-bugs
mailing list