Bernhard.Linz/openvpn-install
1
0
Fork 0
mirror of https://github.com/angristan/openvpn-install.git synced 2026-07-30 11:18:13 +02:00
Code Issues Projects Releases Wiki Activity

Handle unsupported OpenVPN APT suites (#1502)

Browse Source 
## Summary

- check that the official OpenVPN APT repository publishes the detected
suite before configuring it
- fall back to distribution packages for unsupported suites such as
Debian Sid/Forky
- remove stale repository configuration so failed installations can be
retried
- add Debian Sid to the Docker test matrix

Closes #1498
This commit is contained in:
Stanislas
2026-07-24 21:10:30 +02:00
committed by GitHub
parent 935e5591e1
commit 25476a7143
3 changed files with 38 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openvpn-install.sh
+31 -5
View File
@@ -1633,7 +1633,8 @@ function checkOS() {
source /etc/os-release
if [[ $ID == "debian" || $ID == "raspbian" ]]; then
if [[ $VERSION_ID -lt 11 ]]; then
# Debian testing and unstable do not set VERSION_ID.
if [[ -n ${VERSION_ID:-} && $VERSION_ID -lt 11 ]]; then
log_warn "Your version of Debian is not supported."
log_info "However, if you're using Debian >= 11 or unstable/testing, you can continue at your own risk."
until [[ $CONTINUE =~ (y|n) ]]; do
@@ -1834,9 +1835,37 @@ function installOpenVPNRepo() {
log_info "Setting up official OpenVPN repository..."
if [[ $OS =~ (debian|ubuntu) ]]; then
local repo_url="https://build.openvpn.net/debian/openvpn/stable"
local repo_list="/etc/apt/sources.list.d/openvpn-aptrepo.list"
local repo_status
# Remove configuration left by an interrupted or failed installation so
# that it cannot prevent the prerequisite package update.
if [[ -e $repo_list ]]; then
run_cmd_fatal "Removing existing OpenVPN repository configuration" rm -f "$repo_list"
fi
run_cmd_fatal "Update package lists" apt-get update
run_cmd_fatal "Installing prerequisites" apt-get install -y ca-certificates curl
# The OpenVPN repository does not publish packages for every Debian and
# Ubuntu suite. This commonly affects Debian testing and unstable.
if [[ -z ${VERSION_CODENAME:-} ]]; then
log_warn "Distribution codename is unavailable; using distribution packages"
return 0
fi
if ! repo_status=$(curl -sL --connect-timeout 10 --max-time 30 -o /dev/null -w "%{http_code}" "${repo_url}/dists/${VERSION_CODENAME}/Release"); then
log_fatal "Failed to check OpenVPN repository availability for ${VERSION_CODENAME}"
fi
if [[ $repo_status == "404" ]]; then
log_warn "Official OpenVPN repository does not publish packages for ${VERSION_CODENAME}; using distribution packages"
return 0
elif [[ $repo_status != "200" ]]; then
log_fatal "OpenVPN repository availability check returned HTTP ${repo_status} for ${VERSION_CODENAME}"
fi
# Create keyrings directory
run_cmd "Creating keyrings directory" mkdir -p /etc/apt/keyrings
@@ -1846,10 +1875,7 @@ function installOpenVPNRepo() {
fi
# Add repository - using stable release
if [[ -z "${VERSION_CODENAME}" ]]; then
log_fatal "VERSION_CODENAME is not set. Unable to configure OpenVPN repository."
fi
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/openvpn-repo-public.asc] https://build.openvpn.net/debian/openvpn/stable ${VERSION_CODENAME} main" >/etc/apt/sources.list.d/openvpn-aptrepo.list
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/openvpn-repo-public.asc] ${repo_url} ${VERSION_CODENAME} main" >"$repo_list"
log_info "Updating package lists with new repository..."
run_cmd_fatal "Update package lists" apt-get update