canonical / canonical/authd

Feature request: Package broker as deb package in authd PPA

Open
#1,115 2 comments 2 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
310
Forks
41
Avg merge
2d 4h
Merged PRs (30d)
58

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues and found none that matched mine

### Describe the issue

Currently, authd-oidc-brokers is available only as a Snap package. While Snaps offer convenience in some scenarios, they do not allow users to pin or hold specific versions of a package in the same way .deb packages do. Pinning and holding packages are crucial features for systems where stability and version control are important, such as in production environments or long-term support (LTS) systems.

We would like to request that the authd-oidc-brokers project also provide a .deb package in addition to the existing Snap package. This would enable users to easily pin or hold specific versions of the package, a feature that is essential for users who require predictable and stable environments.

**Why This Is Important:**

- **Pinning and Holding Versions:** In Ubuntu, the ability to pin a package (i.e., prevent it from being upgraded automatically) or hold it at a specific version is a critical feature for system administrators. Snaps do not support version pinning or holding, and updates to Snap packages can occur automatically without the ability to manage version consistency. A .deb package would enable users to pin and hold authd-oidc-brokers to a stable version, avoiding unexpected changes and maintaining system consistency.
- **System Stability:** For enterprise environments or systems with specific requirements, it's essential to maintain consistent versions of critical software. This avoids potential incompatibilities that could arise from automatic updates. .deb packages can be managed using tools like apt-mark hold, which locks a package at a certain version.
- **Better Integration with APT:** .deb packages integrate directly with the APT package manager, allowing for easier handling, updates, and maintenance. It also provides administrators with more granular control over package installation and upgrades.

**Proposed Solution:**

We request that the authd-oidc-brokers package be made available as a .deb package. Having a .deb version would allow users to take full advantage of the ability to pin or hold the package version, ensuring a more predictable and controlled update process.

**Benefits of a .deb Package:**

-**Pin and Hold Versions:** Administrators can use apt-mark hold to prevent the package from being upgraded, ensuring compatibility and stability.
-**Controlled Updates:** Users would have more control over when and how updates are applied, and can defer updates to specific versions that meet their needs.
-**Better Compatibility with APT-based Systems:** Many systems rely on APT for package management, and adding a .deb option would streamline the installation and upgrade process.

**Additional Information:**

We understand that maintaining multiple package formats can be challenging, but we believe that offering .deb packages alongside Snap packages would address the needs of users who require more control over package versions.

Thank you for considering this request!

### Where does the issue happens

- [ ] I can reproduce the issue in the graphical display manager
- [ ] I can reproduce the issue on a terminal with "login"

### Steps to reproduce it

According to this documentation I should install the broker using Snap which I do not prefer as I mentioned previously https://github.com/ubuntu/authd/wiki/02---How%E2%80%90to-install

### System information and logs

_No response_

### Relevant information

_No response_

### Double check your logs

- [X] I have redacted any sensitive information from the logs

Contributor guide

Open the contributing guide

Research direction

Start with the authd installation wiki page and inspect how authd-oidc-brokers is currently distributed as a Snap. Determine the project's existing release and packaging entry points, then define how a .deb would be built and published in the authd PPA. Done means users can install the broker from the PPA and the installation documentation describes the new option.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, ubuntu
Domain
build-system, release
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.