View Full Version : List of Maemo Repositories / Repository
When I first got my N800 tablets a few weeks ago, I wondered why I wasnt able to see or download some things. Then I figure out you can add maemo repositories in the Application Manager and expand the list of programs available for download. Had a few friends and folks ask where can they find certain programs, like mplayer, etc.. as it isn't too obvious I've started this thread to help out folks - I couldn't find an existing thread specifically for repository addresses..
Below are the "OFFICIAL" maemo repositories I found so far and in the order I have them in my Application Manager:
* DEFAULTS - OS2008 for N800*
1. Catalog name: Nokia catalog
Web address: http://catalogue.tableteer.nokia.com/certified
Components: user
Disabled: "Disabled as I prefer using the maemo.org mirror"
2. Catalog name: Nokia catalog (3rd party software)
Web address: http://catalogue.tableteer.nokia.com/non-certified
Components: user
Disabled: "Disabled as I prefer using the maemo.org mirror"
3. Nokia System Software Updates
* Note - can not modify
4. Catalog name: maemo Extras
Web address: http://repository.maemo.org/extras
Components: free non-free
* ADDITIONS *
5. Catalog name: Maemo catalog
Web address: http://repository.maemo.org/catalogue/certified
Component = user
* Note - mirror of catalog 1
6. Catalog name: Maemo catalog (3rd party software)
Web address: http://repository.maemo.org/catalogue/non-certified
Component = user
* Note - mirror of catalog 2
7. Catalog name: Maemo extras-devel
Web address: http://repository.maemo.org/extras-devel
Component = free non-free
8. Catalog name: Maemo contrib
Web address: http://repository.maemo.org/contrib
Component = free non-free
9. Catalog name: Maemo rtcomm
Web address: http://repository.maemo.org/rtcomm
Component = free non-free
* Note - Repository for Internet Communications Software Update 2
* Repository will be added automatically if you follow the procedures in the following:
http://rtcomm.garage.maemo.org/
I just leave the Distribution field blank. Seems to know / detect which distribution is installed on the tablet.
Cheers!
futures
Thanks for putting that together, I didn't know about Maemo Contrib.
Have you see this?
http://www.gronmayer.com/it/
There may be some more that are useful to you.
Thanks for putting that together, I didn't know about Maemo Contrib.
Have you see this?
http://www.gronmayer.com/it/
There may be some more that are useful to you.
I think I wondered across that url before.. but thanks for posting it again.. yeah it seems to have an extensive list of repository sources. However, what I've listed seems to be the only "official" repositories, so far, off of maemo.org.
Should note to other fellow newbies that adding the catalogs listed in the original post will give you access to most of the useful / widely distributed apps.. such as the mplayer beta for OS2008, and FM for N800, etc.. but there's a number of other great apps that you'll need to manually hunt down.. particularily privately distributed ones like Garnet (PalmOS) Emulator.. Mediabox interface for Mplayer is also highly rated.
But if you dont know what you're doing.. just stick with whats available in the App Manager and you should be fine..
MurphysPub
2008-01-05, 04:23
I added all the reps from gronmayer.com/it, after deleting all my reps, and refreshing my app list as reccomended in these forums and on the site, and now my app manager has a connection error while trying to refresh. I've tried it with the temp reps enabled, and the originals diabled and vice versa, but it still won't work. Are any of the other reps broken? Please Help.
I added all the reps from gronmayer.com/it, after deleting all my reps, and refreshing my app list as reccomended in these forums and on the site, and now my app manager has a connection error while trying to refresh. I've tried it with the temp reps enabled, and the originals diabled and vice versa, but it still won't work. Are any of the other reps broken? Please Help.
I dont think anyone recommended that you add all the addresses from the gronmayer.com/it link. What I suggest is you first try only the "official" repositories listed in the initial post. Once you get them working then try other addresses.. but one at a time would probably be best..
The bottom line though is dont add stuff for the sake of adding things.. find out what's available in the repositories by visiting the addresses in a browser.. if it contains useful apps then try it..
Good luck!
I recommended that all the addresses from the gronmayer.com/it link be added, so your supposition that no one recommended it is wrong.
If one isn't supposed to add all those addresses, why does the site furnish a one-click method making it easy to do so?
BTW: If you are having trouble connecting with one of the repositories, it's easy to track down which one it is by using Application Catalog and disabling repositories and refreshing. It seems like a long process, but it's not that bad. So you can answer your own question about which repository is causing the problem. In general, I would say that the repositories toward the end of the /it listing are the less reliable ones.
I recommended that all the addresses from the gronmayer.com/it link be added, so your supposition that no one recommended it is wrong.
If one isn't supposed to add all those addresses, why does the site furnish a one-click method making it easy to do so?
Oh my... You do understand that everytime you add a repo to the list you basically give the repo owner root permissions on your tablet (even if you do not knowingly install a single piece of software from the repo)?
This may not be a problem for you -- maybe you have no private info on your machine or you've estimated the risk to be small enough -- but recommending that others blindly add unknown repositories is a bit reckless, if you ask me.
PinCushionQueen
2008-01-05, 15:43
Just curious, how do you come up with the repos listed in the first post as "Official" compared to the gronmayer repos? They are also listed at the gronmayer site. Or are you just saying that the ones listed are officially endorsed by Maemo?
Maemo Contrib is exactly the same as Maemo Extras at gronmayer - with the exception of the url listed. If you check out the contents and dates and sizes they are identical.
I've been using the gronmayer repos but it is nice to see some mirrors/alternatives offered.
@Jussik - I really have a hard time believing that downloading a repo gives someone access to ALL my personal information. Could you please give more details on how this security breach might occur? I too have been recommending that users grab all repos initially and then install what they need - there is always a risk with the installation of an app - but the downloading of a catalog?:eek:
"Oh my... You do understand that everytime you add a repo to the list you basically give the repo owner root permissions on your tablet (even if you do not knowingly install a single piece of software from the repo)?"
No, I don't understand that, any more than I understood that no one advocated installing all the repos on the /it site, even though I am not the only one advocating same.
Let's see... isn't a repository catalog item essentially just a list of addresses where files can be found? I'm a bit foggy on what else I am doing by adding something to my catalog. Would you explain how someone gets root access by my doing that?
What jussik is referring to is that they can add whatever they want to their repository and you are none the wiser of it. So while they don't have a full root access, they can put whatever they want in their repo and call it whatever they want.
Also, anyone can add a repo to gronmayer's site, so you should probably research before installing them. While there is a small chance of someone doing it, they could host a malicious program and name it some updated version of a file everyone wants or some new game people are asking for.
When you allow someone access to your system, you should always be sure you can trust them. It's like letting someone borrow your car, you don't give it to just anyone.
Also, you are right, they don't get all your personal info just by adding their repo, they would have to inject a malicious file first, which they could feasibly do.
Hope that helps clear things up. :)
PinCushionQueen
2008-01-05, 16:53
What jussik is referring to is that they can add whatever they want to their repository and you are none the wiser of it. So while they don't have a full root access, they can put whatever they want in their repo and call it whatever they want.
Also, anyone can add a repo to gronmayer's site, so you should probably research before installing them. While there is a small chance of someone doing it, they could host a malicious program and name it some updated version of a file everyone wants or some new game people are asking for.
When you allow someone access to your system, you should always be sure you can trust them. It's like letting someone borrow your car, you don't give it to just anyone.
Also, you are right, they don't get all your personal info just by adding their repo, they would have to inject a malicious file first, which they could feasibly do.
Hope that helps clear things up. :)
Ok, yeah - that's been my understanding as well - thanks for confirming :). But isn't that the case with any and every piece of software out there? Windows, Linux, Mac or even Palm software shouldn't be downloaded unless you trust the source or at the very least have a good backup - because it could jack up you device.
Just curious, how do you come up with the repos listed in the first post as "Official" compared to the gronmayer repos? They are also listed at the gronmayer site. Or are you just saying that the ones listed are officially endorsed by Maemo?
Maemo Contrib is exactly the same as Maemo Extras at gronmayer - with the exception of the url listed. If you check out the contents and dates and sizes they are identical.
I've been using the gronmayer repos but it is nice to see some mirrors/alternatives offered.
When I say official, I mean repositories hosted on the maemo.org site nothing more.
In response to geneven, when I said no one recommend adding all the reps listed on gronmayer site, I was only refering to the first few posts of this thread. Also, I consider the info for maemo tablet newbies.. and I recommend folks first try and find out what stuff is in a repository not hosted on maemo.org before adding it.. but shouldnt really matter, as you can always reflash and start over... use to this thanks to windows :)
Ok, yeah - that's been my understanding as well - thanks for confirming :). But isn't that the case with any and every piece of software out there? Windows, Linux, Mac or even Palm software shouldn't be downloaded unless you trust the source or at the very least have a good backup - because it could jack up you device.
There is a difference here -- adding a repository to the list means trusting the source not only this one time, but trusting it all the time in the future too... Basically the repository model can be easier and safer than the Windows/Mac/Palm model, but only if users only accept repositories they trust (implicitly this means that repo upload access is strictly restricted to trusted developers only). I'm not saying the maemo repos are a model example of this, but this is what we should strive for: A small number of repositories with clear "security levels" so users can choose the level of risk they want -- with 101 repositories this is not really possible.
Here is an example of the threat I was talking about btw:
User has repositories Good and Evil enabled. He installs "AwesomeProgram 1.0.0" for repo Good. Later Application manager tells user there is an upgrade available (1.0.1) and he of course installs it -- not realising that the new version actually comes from Evil and contains a keylogger and send his home dir all over the internet.
If you are diligent you can notice that something is wrong before installing the upgrade, but it is difficult... It's a lot easier to mitigate the risk by only enabling the repositories you trust.
In real word, repositories are signed by their author.
Any packages that has been injected by somebody else will not have the correct authentication. Example, if I'm able to add a package to repository.maemo.org and maemo.org has a GPG problem, nobody will ever see it..
With this signature, you have then to trust the author. You know that packages you install from his repo are really from him, because he's the only one having the private key.
If the author is able to get his key signed by somebody you trust (maemo.org) , it goes a bit further in the chain of trust.
Simply adding the repo, without installating anything doesn't create ANY risk at all.
Also, one package can not overwrite files of another package. You then have to look at which packages get updated if you don't trust the repository author.
I agree with you 100%, except for this:
Simply adding the repo, without installating anything doesn't create ANY risk at all.
In theory you're correct, but in reality it just goes like this: "Hey, a new version of MaemoMapper, cool! [click-click]". This behaviour is not a problem at all if the repositories are trusted, but with a rogue repo in the list it becomes a disaster.
I agree with you 100%, except for this:
In theory you're correct, but in reality it just goes like this: "Hey, a new version of MaemoMapper, cool! [click-click]". This behaviour is not a problem at all if the repositories are trusted, but with a rogue repo in the list it becomes a disaster.
I'm with you on this.. it goes back to my original suggestion that its safest to check whats on a repository before adding it.
But if you like fooling around with stuff (probably the case with most tablet owners).. then be prepared to reflash (restore) a few times :)
I'm thankful for those making the effort to develop for the platform. As a begger (non programmer) .. I cant be too choosy.. at the moment nothing rivals this platform.. poo on palm for letting another market slip.. Palm could of owned the hand held media player, messenging.. and browsing markets.. but they simply have no vision.. and now they have no platform lol.. As a long time Palm owner (original Palm Pilot 5000 to Tungsten T3).. I was extremely dissappointed that Palm wouldnt even cough the resources to develop basics such as their own media player, web browser, a decent image viewer.
If they cant support their own OS development efforts with basic but popular apps.. they should just stick to hardware.. and make something open for other platforms..
Now I hope Nokia learns from Palm's missteps.. perhaps make another maemo line targetted to the media player market. likely would be hard for them as they're not really established in the media field like Apple.. What would rock as suggested by others is a Nokia Tablet / Google collaboration and cross marketing..
gemniii42
2008-09-03, 23:00
After searching, this thread looked about as good as any other to revive -
Could the extremely knowledgeable point to or add to the discusssion of a good thin list of needed repositories please?
I know of gronmayer's site and have seen a list from bun for his "7 special" (one for each day of the week?). And I thought I ran across where bun had a deb, but I couldn't find it again.
Anyways, any concise lists, for Diablo, and an easy way to add them?
bun's list
http://www.internettablettalk.com/forums/showpost.php?p=202616&postcount=11
tia
GeneralAntilles
2008-09-03, 23:15
Could the extremely knowledgeable point to or add to the discusssion of a good thin list of needed repositories please?
Yeah, one, Extras (http://wiki.maemo.org/Extras).
gemniii42
2008-09-03, 23:46
That's pretty concise.
If it's all in the bun 7, why gronymayer's list of 63?
GeneralAntilles
2008-09-03, 23:57
That's pretty concise.
If it's all in the bun 7, why gronymayer's list of 63?
Because gronmayer doesn't let you delete repositories so it's filled with legacy and crap repositories that have a high probability of breaking your device.
More seriously, it was created at a time when Extras isn't what it is today. Back then, due to issues with the Extras process and generally poor behavior of maintainers, lots of developers went and created their own repositories to distribute their software straight away. Today, that's not the case. Most everything useful or interesting goes to Extras (if not sooner, then later). By and large, everything you really need is now in Extras. If it isn't, well, either it's not ready, the maintainer needs to be whipped, or you really don't want to install it. ;)
There are, obviously, some outliers (the Collabora repo might be a good example), but as a general recommendation, outliers don't factor in, so I'll leave it up to individual users whether they want to add specific 3rd party repositories to their application catalogs on a case-by-case basis.
gemniii42
2008-09-04, 01:07
Now with a lecture like that you need to stick it!
Here
http://www.internettablettalk.com/wiki/index.php?title=Working_2008_OS_Software
:D
It would answer a lot of questions!
THANKS!
GeneralAntilles
2008-09-04, 01:23
Now with a lecture like that you need to stick it!
I don't do the itT wiki. :)
http://wiki.maemo.org is where I stick things. ;)
vBulletin® v3.8.8, Copyright ©2000-2024, vBulletin Solutions, Inc.