Signed PPA instructions need improvement

Bug #330386 reported by Stuart Bishop
This bug report is a duplicate of:  Bug #631868: Adding PPAs pop-up confusing. Edit Remove
6
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

The follow message displayed on a signed PPA page is not correct English - the sentence structure requires the definite article 'the':

    This repository is signed with 1024R/249AD24C OpenPGP key.

A better phrase would be:

    This repository is signed with the OpenPGP key 1024R/249AD24C

As the major use of the key id at the moment is to cut and paste into a terminal window, I would further suggest that the following be used (space before and after the '/' seperator, and the hyperlink removed from the keyid onto 'lookup'):

    This repository is signed with the OpenPGP key 1024R / 249AD24C (lookup)

The second sentence highlights the other problem:

    Follow these instructions for installing packages from this PPA

The instructions are not for installing packages from *this* PPA - this is a lengthy document describing PPAs in general, and doesn't mention *this* PPA at all. The 'Follow these instructions' link should popup instructions for adding *this* PPA to your apt configuration with the bare minimal disclaimers we need, and a hyperlink to the 'for more information' page on the wiki. The popup providing instructions for adding this PPA to the users apt configuration should be short - I imagine no more than 5 or 6 lines long, containing text that can be easily cut and paste into a terminal window including the correct key id for *this* archive:

    """
    The packages in this archive are not supported by Launchpad or Canonical. By installing packages from this archive you are placing your trust entirely on the package providers. If you feel they are a trustworthy source of software, you can continue by issuing the following command in a terminal window:

    gpg --keyserver keyserver.ubuntu.com --export -a DEADBEEF | sudo apt-key add -

    For further information, please see our [PPA documentation].
    """

Tags: lp-soyuz
Revision history for this message
Stuart Bishop (stub) wrote :

Of course, the command line should work which demonstrates why a cheat sheet is necessary with current Ubuntu releases. I once forgot the key id and managed to import my entire keyring with apt-key...

gpg --keyserver keyserver.ubuntu.com --recv-key DEADBEEF
gpg --armor --export DEADBEEF | sudo apt-key add -

(or a one liner that doesn't leave the key in the users main keyring if a sane one exists).

Changed in soyuz:
status: New → Triaged
Revision history for this message
Julian Edwards (julian-edwards) wrote :

We discussed ease of PPA installation at the recent UI sprint and you're echoing many of our thoughts. We'll be re-vamping the PPA index page in the next 3 months.

BTW, the one-liner you want is:
sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com KEYID

Changed in soyuz:
importance: Undecided → Medium
milestone: none → pending
Revision history for this message
Julian Edwards (julian-edwards) wrote :

The PPA page has changed a lot since this bug was filed. It doesn't implement everything that you suggested but it's a lot better. Can I close this bug now?

Changed in soyuz:
milestone: pending → none
status: Triaged → Incomplete
Revision history for this message
Stuart Bishop (stub) wrote :

There are still no instructions on the page for adding this particular PPA - the popup help is generic for all PPAs requiring the user to interpolate variables such as the URL and keyid themselves. Furthermore, the popup obscures this information so the user needs to close it to discover the information they need, and reopen it to continue on with the instructions. If the URL and keyid was interpolated into the help then the user experience is much nicer and the instructions themselves can be simplified.

The keyid is still hyperlinked and formatted in a way that makes it difficult to cut and paste (the prime use case for this information is to cut and paste it).

Changed in soyuz:
status: Incomplete → Triaged
Revision history for this message
Michael Nelson (michael.nelson) wrote :

Notes:

Part of this will be fixed with karmic as the instructions will be much simpler, but we'll still need to include Stuart's improvements for everyone who's not using karmic of course (see https://dev.launchpad.net/VersionThreeDotO/Soyuz/PPAUI )

Also, the fix for this bug should also address William's point about using fingerprints rather than IDs (see bug 408187 - now marked as a dupe of this one.)

Changed in launchpad:
importance: Medium → Low
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.