The Debian package now includes a single-revision git repository in /usr/src/propellor/, and ~/.propellor/ is set up to use this repository as its "upstream" remote. This avoids relying on the security of the github repository when using the Debian package.

3 files changed, 11 insertions, 1 deletions

diff --git a/debian/README.Debian b/debian/README.Debian
index 78077483..73fea47d 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -8,4 +8,9 @@ Edit ~/.propellor/config.hs to configure it.
 
 Note that upgrading the propellor package will not update your
 ~/.propellor/ repository. You can `git pull upstream` in your repository to
-update to the current upstream.
+update to the current upstream source, as distributed in the Debian
+package.
+
+Older versions of propellor set the upstream remote to
+point to a repository on github, so if you used one of them, you may want
+to change it to point to the new location, /usr/src/propellor/
diff --git a/debian/changelog b/debian/changelog
index ca413199..286c5a8c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,9 @@
 propellor (0.8.3) UNRELEASED; urgency=medium
 
+  * The Debian package now includes a single-revision git repository in
+    /usr/src/propellor/, and ~/.propellor/ is set up to use this repository as
+    its "upstream" remote. This avoids relying on the security of the github
+    repository when using the Debian package.
   * Included the config.hs symlink to config-simple.hs in the cabal and Debian
     packages.
 
diff --git a/debian/control b/debian/control
index a4dc2466..2d113cdf 100644
--- a/debian/control
+++ b/debian/control
@@ -3,6 +3,7 @@ Section: admin
 Priority: optional
 Build-Depends: 
 	debhelper (>= 9),
+	git,
 	ghc (>= 7.4),
 	cabal-install,
 	libghc-async-dev,