Debian repository is out-of-date

[ChrReimer]

Plan

Free/Premium

Country

Germany

Device

Desktop

Operating System

Arch Linux

My Question or Issue

Your Debian repository under repository.spotify.com is out-of-date for some time now (1.1.42). The only way to get an up-to-date version of Spotify is through snapcraft (1.1.46 and 1.1.52)

There are several reasons not to like snap and snapcraft but I don't want to go into too much detail since most of them are subjective.

But fact is: Your Debian repository provides a GPG signature for the 'Release' file which contains the checksums for the actual *.deb package.
By trusting your GPG signature it is possible to check the spotify package for authenticity (Release.gpg -> Release -> (checksum) -> *.deb)

There's no GPG signature on snapcraft (at least I can't find one). And since there is no way to check for authenticity we don't only have to trust you, but also snapcraft/Canonical. This brings a whole new set of concerns

What are your future plans for Spotify on Linux? Will the Debian repository see updates again?

As far as I can tell there are a few possible solutions to this

- Continue updating the Debian repository
- Provide an AppImage signed with your GPG key, ideally from *.spotify.com
- Provide the Linux Spotify as ZIP or tarball signed with your GPG key, ideally from *.spotify.com

Thanks

Christopher

[NicoHood]

Hey Spotify Team,
please have a look at this. As you already saw with this [previous Post users really want to see Spotify on linux](https://community.spotify.com/t5/Live-Ideas/Redistribute-Spotify-on-Linux-Distributions/idc-p/455159...).

It would be really nice, if you could have a chat with us package maintainers, so we can easily find a proper way to integrate spotify into our distributions. This would help Spotify, their users and improve the overall security and makes things simpler.

Cheers
Nico

[Jpfonseca]

I support everything said before.

[alanmrich]

Hi Spotify Team,

Please help the community by updating the repository.

Thanks,

Alan

[LordChaos]

Hey Spotify gurus,

Please update the Debian repositories; I've been a longtime Linux user but also a longtime paying (premium) customer of Spotify as well. I think the Spotify client on Linux deserves the same attention as the ones on the more popular platforms.

Thank you.

[megamaced]

Has there been any communication about this yet? I am the maintainer of the spotify-easyrpm script for openSUSE and so I'll need to change it to grab the binaries from snap instead of the deb if Spotify decides to abandon the latter.

I think it would be a huge regression to only ship snaps which is not present on non-Ubuntu based distributions. Many people still prefer deb or rpms, especially on rolling distributions like openSUSE Tumbleweed

[mychaos87]

Ong term Linux and Spotify user. Please give us back signed releases!

[megamaced]

well Spotify just updated the debian repo with a new version.

[NicoHood]

Spotify finally updated the Debian repositories and switched to GTK3!
Thanks a lot Spotify Dev Team!

[LordChaos]

This is great news, installing the AUR package as we speak. Thank you all.

[alicaccs]

Bumping the thread. The i386 flavor is still stuck at 1.0.72.117 after 3 years, and the current package cannot be installed on Debian 10 and later versions. I know it was possibly because of Ubuntu not supporting i386 anymore. So... should we conclude it being official for Spotify to drop further client releases on i386 flavor?