apt-offline 1.7

Ritesh Raj Sarraf's picture

Hello World,

In this part of the world, today is a great day. Today is Diwali - the festival of lights

On this day, I am very happy to announce the release of apt-offline, version 1.7. This release brings in a large number of fixes and is a recommended update. Thanks to Bernd Dietzel for uncovering the shell injection bug which could be exploited by carefully crafting the signature file. Since apt-offline could be run as 'root', this one was an important bug. Also thanks to him for the fix.

During my tests, I also realized that apt-offline's --install-src-packages implementation had broken over time. --install-src-packages option can be useful to users who would like the offline ability to download a [Debian] source package, along with all its Build Dependencies.

For further details on many of the other fixes, please refer to the git repository at the homepage. Packages for Debian (and derivatives) are already in the queue.

Wishing You and Your Loved Ones a Very Happy Diwali.

Keywords: 

Categories: 

Comments

Where can I download 1.7?

Hi there,
I have poked around the site and can't see a way to download a .deb for 1.7. I also cloned the git repo, but none of the branches had any recent commits and the apt-offline executable reported version 1.2.

I was using 1.3 previously, but noticed that it did not find packages that were downloaded from non-default ppas/sources. I'm hoping that's been fixed since then. Other than that, apt-offline is exactly what I need.

Regards,
David

Ritesh Raj Sarraf's picture

Which site have you been

Which site have you been referring to? The apt-offline homepage is at http://apt-offline.alioth.debian.org/
 
Same question about git repo. The official git repository is at: http://anonscm.debian.org/gitweb/?p=apt-offline/apt-offline.git
And these days, I also mirror it to Github at: https://github.com/rickysarraf/apt-offline
 
And the .deb is available for Debian, at: https://packages.debian.org/search?keywords=apt-offline

BZ2 errors

DATA_ERROR_MAGIC when forcing install and doesn't even install the packages otherwise. Downloading on Windows, trying to install on linux. I have not found a better way for contact than this...

Ritesh Raj Sarraf's picture

In the above comments, there

In the above comments, there are link to the project page and also github page. Please use them to file a complete bug report, with all details and steps to reproduce.

Android

Since asking for instructions for installing AOL on Android using one of the available Python interpreters, I've realized that that the only way to run it on Android might be to turn it into an Android app, which I assume you've considered. Considering the ubiquity of Android devices, an Android GUI download-only version would probably be the ideal companion to the Deb package.

QPython hack might allow Apt-offline to be set up on Android

It's apparently possible to set Apt-offline up on Android devices, since it's not compiled but interpreted. But setting it up on Android requires some Python expertise, which I don't have. I did find a hack, located at http://wiki.qpython.org/en/diveinto/, which supposedly would allow the interpreter included with QPython (an Android app) to be used by Android shell apps, which I assume would allow Apt-offline to be set up. The hack requires a Python script to be executed, which would be simple in QPython, and some other steps pertaining to environmental variables for configuring the shell, which I assume could be included in a shell script.

Although it would be nice if the GUI could be used, I realize that it might be a lot of work to get the GUI to work on Android due to differences between graphical systems, and it would be no big deal to use text-commands in a shell script to set up Apt-offline and to issue get-commands.

Root privileges might be required to install AOL on Android

I forgot to consider that installing AOL on Linux requires superuser privileges, and I assume that this would be necessary on Android, and that it would be necessary to "root" the device.

Installation feasible despite need for root access

I gather that there is no way around Apt-offline's requirement for root access during installation, meaning that it would be necessary to root an Android device before installing the Python version. Fortunately, there's the SuperuserSU app (which I gather has been screened for security problems since it's available from the app store), which allows users to control which apps are granted root access. If it does what it claims, there would be no reason to be concerned about creating giant security holes by rooting the device. Root access would be granted to whatever needs it in order to install Apt-offline, and then denied afterward, since Apt-offline would perform only the get-process on the Android device, and the get-process doesn't require root access.

But an actual Android app would obviously be easier to install. A text version could be as easy to use as a GUI-version. For example, a text version would have a certain folder where signature files would be placed, along with a folder to receive the downloaded files, during the corresponding get-process. All signature files would be named apt-offline.sig, all download-folders would be named something like pkg, and their paths would always be the same during the get-process since they'd always be placed in the same folder during the get-process. So, the get-command would never change. When the signature file and download-folder aren't being used in the get-process, they would be placed in a file named after the corresponding package to distinguish them from other signature files and download-folders. So, the get-process would boil down to moving files into a certain folder, double-clicking on a shell script which would contain the get-command, and moving the files back to their folder (along with the downloaded package), which would obviously be very easy if the right file-manager app were used for moving the files. Hopefully, creating such a version would be easy enough for you to seriously consider. But I don't want to pressure you, so you don't even have to respond to this suggestion.

Pages

Add new comment