https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41447 Bug ID: 41447 Summary: Provide an official bootstrap script to configure Koha APT repository on Debian/Ubuntu Initiative type: --- Sponsorship --- status: Product: Project Infrastructure Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Release tools Assignee: jonathan.druart@gmail.com Reporter: saiful@semanticconsulting.com Installing Koha on Debian and Ubuntu currently requires manually performing several prerequisite steps before koha-common can be installed, including: - Adding the Koha APT signing key - Configuring the Koha APT repository - Running apt update These steps are well documented, but they are repetitive, error-prone for new users, and frequently re-implemented across third-party guides and automation scripts. This bug proposes providing an official, minimal bootstrap script for Debian/Ubuntu only, whose sole responsibility is to: - Install the Koha APT signing key - Configure the Koha APT repository - Run apt update After this step, installation continues exactly as required: apt install koha-common Rationale / Motivation: - Reduces installation friction for first-time and test installations on supported platforms - Encourages a single, auditable implementation instead of many unofficial ones - Simplifies automation, CI, containers, and provisioning workflows - Keeps Koha's existing packaging and installation model unchanged Reference Implementation: A reference implementation currently used in production for ~2 years is available here: https://github.com/saiful-semantic/KohaOnUbuntu This is provided to illustrate the approach, not as a final implementation. The reference implementation is validated using GitHub Actions CI on both Ubuntu LTS (20.04, 22.04, 24.04) and Debian (11, 12). Security Considerations: The common 'curl | sudo bash' pattern is acknowledged as a concern, which can be mitigated by: - Hosting the script under an official Koha domain - Providing checksums or signature verification Alternatively, offering a download-then-execute workflow instead of piping. -- You are receiving this mail because: You are watching all bug changes.