Skip to content

docs(apt): say plainly what [trusted=yes] gives up #39

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vietanhdev merged 1 commit into from
Jul 20, 2026
Merged

docs(apt): say plainly what [trusted=yes] gives up #39

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/.vitepress/config.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,7 @@ export default withMermaid(
items: [
{ text: 'Architecture', link: '/development/architecture' },
{ text: 'Packaging', link: '/development/packaging' },
{ text: 'APT Signing', link: '/development/apt-signing' },
{ text: 'CSS Architecture', link: '/development/css' },
{ text: 'Icon Generation', link: '/development/icons' },
{
Expand Down
16 changes: 16 additions & 0 deletions docs/download.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,6 +120,22 @@ sudo apt update
sudo apt install thinkutils
```

::: warning What `[trusted=yes]` means
This repository is not yet GPG-signed, and `[trusted=yes]` tells `apt` to install
from it without verifying any signature. HTTPS still authenticates the server for
the duration of the download, but nothing proves the packages are the ones our CI
built — and ThinkUtils installs a helper that runs as root.

If that trade-off is not one you want to make, download the `.deb` from the
[releases page](https://github.com/vietanhdev/ThinkUtils/releases) and install it
with `apt install ./thinkutils_*.deb` instead. You give up automatic updates and
check for new versions yourself.

Signing is implemented and waiting on a key — see
[apt-signing](/development/apt-signing). Once it is enabled these instructions
change to `signed-by=` and the `[trusted=yes]` flag goes away.
:::

## Before fan control works

One step is not optional, and it is the most common reason people think the app
Expand Down
Loading