d/control: update package description to clarify sources.list situation

[mika]

We nowadays ship the file /usr/share/grml-keyring/grml.sources with /etc/apt/sources.list.d/grml.sources as symlink pointing to that file. So when someone installs the grml-keyring package, they might not be aware that also the Grml repositories are enabled by default, Clarify this through the package description.

Closes: #18

[akorn]

Instead of clarifying it in the description, please don't install the /etc/apt/sources.list.d/ symlink automatically. The admin can do that if they want.

Installing the symlink broke unattended-upgrades (by breaking apt) on all my systems, because I had my own grml.list with a signed-by the pointed to /etc/apt/keyrings/grml.gpg (which I had put there).

In this situation, with the new grml.sources symlink in place, apt fails with:

E: Conflicting values set for option Signed-By regarding source http://deb.grml.org/ grml-stable: /etc/apt/keyrings/grml.gpg != /usr/share/keyrings/grml-archive-keyring.pgp
E: The list of sources could not be read.

[mika]

Thanks for your feedback, we plan to split the grml.sources file into a separate grml-apt-source binary package, which then will be a Recommends inside grml-keyring package only and try to get this change through Debian's NEW.

[akorn]

Thanks for your feedback, we plan to split the grml.sources file into a separate grml-apt-source binary package, which then will be a Recommends inside grml-keyring package only and try to get this change through Debian's NEW.

Why Recommends and not Suggests?

The grml-apt-source package Depends on the keyring (and thus the grml-keyring package), that's clear; but they keyring is usable and useful without the grml-apt-source package.

apt by default installs Recommended packages. Is it appropriate to enable the grml repository by default on all systems that just want the grml keyring?

[crpb]

fwiw... but yeah.. NEW is a b* :P.
master...crpb:grml-debian-keyring:master

[mika]

fwiw... but yeah.. NEW is a b* :P. master...crpb:grml-debian-keyring:master

@crpb more than happy to get your PR! :)

[mika]

Replaced by #21