enable "apt-get --error-on=any" by default

makes apt exit non-zero for transient failures

`/etc/apt/apt.conf.d/40error-on-any`

https://forums.whonix.org/t/debian-bullseye-apt-get-error-on-any/12068
This commit is contained in:
Patrick Schleizer 2021-08-03 12:37:39 -04:00
parent 240ec7672a
commit 0492f28aa1
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 11 additions and 0 deletions

View File

@ -352,6 +352,8 @@ See:
## Application-specific hardening
* Enables "`apt-get --error-on=any`" which makes apt exit non-zero for
transient failures. — `/etc/apt/apt.conf.d/40error-on-any`.
* Enables APT seccomp-BPF sandboxing — `/etc/apt/apt.conf.d/40sandbox`.
* Deactivates previews in Dolphin.
* Deactivates previews in Nautilus —

View File

@ -0,0 +1,9 @@
## Copyright (C) 2021 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## Make "sudo apt-get update" exit non-zero for transient failures.
## Same as "apt-get --error-on=any".
## https://forums.whonix.org/t/debian-bullseye-apt-get-error-on-any/12068
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594813
## https://salsa.debian.org/apt-team/apt/-/commit/c7123bea6a8dc2c9e327ce41ddfc25e29f1bb145
APT::Update::Error-Mode any;