Bug#1055370: debci setup should include security repositories

[Paul Gevers]

Control: reassign -1 lxc-templates
Control: retitle -1 consider adding security repos by default
Control: affects -1 debci autopkgtest

Hi all,

On 05-11-2023 03:41, Santiago Ruano Rincón wrote:

Is there any reason why `debci setup ...` doen't configure the security
repostories inside the lxc containers? This is the sources.list of a
just created autopkgtest-bookworm-amd64 container:

 deb http://deb.debian.org/debian bookworm main contrib non-free 
non-free-firmware
 deb-src http://deb.debian.org/debian bookworm main contrib non-free 
non-free-firmware
 deb http://deb.debian.org/debian-debug bookworm-debug main contrib 
non-free non-free-firmware
 deb-src http://deb.debian.org/debian-debug bookworm-debug main contrib 
non-free non-free-firmware


As debci with the lxc backend just uses lxc-templates to set-up the 
containers, I think this is something for lxc-templates to consider.


Having said that, I'm unsure if *I* (with my ci.debian.net maintainer 
and my Release Team member hat on) would want that. For lxc users it's 
easier to *add* repositories than it is to remove them for the use case 
where you don't want the security archive installed (e.g. for Release 
Team's testing of proposed-updates against stable). So, for 
ci.debian.net I'd want an easy way to opt-out of the security archive in 
case it gets added by default.


debci supports the user (both via the API as well as via the 
self-service) to easily add repositories once debci is configured to 
support those additional repositories (as ci.debian.net does).


Paul


OpenPGP_signature.asc
Description: OpenPGP digital signature

Bug#1055370: debci setup should include security repositories

[Santiago Ruano Rincón]

Package: debci
Version: 3.7
Severity: normal

Dear debci maintainers,

Is there any reason why `debci setup ...` doen't configure the security
repostories inside the lxc containers? This is the sources.list of a
just created autopkgtest-bookworm-amd64 container:

deb http://deb.debian.org/debian bookworm main contrib non-free 
non-free-firmware
deb-src http://deb.debian.org/debian bookworm main contrib non-free 
non-free-firmware
deb http://deb.debian.org/debian-debug bookworm-debug main contrib non-free 
non-free-firmware
deb-src http://deb.debian.org/debian-debug bookworm-debug main contrib 
non-free non-free-firmware

Cheers,

 -- Santiago

-- System Information:
Debian Release: trixie/sid
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'oldstable-updates'), (500, 
'oldstable-security'), (500, 'oldoldstable-updates'), (500, 'oldoldstable'), 
(500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.5.0-3-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages debci depends on:
ii  adduser 3.137
ii  amqp-tools  0.11.0-1+b1
ii  curl8.4.0-2
ii  dctrl-tools 2.24-3+b1
ii  debian-archive-keyring  2023.4
ii  debootstrap 1.0.133
ii  distro-info 1.7
ii  fonts-font-awesome  5.0.10+really4.7.0~dfsg-4.1
ii  inotify-tools   4.23.9.0-1
ii  jq  1.7-1
ii  libjs-bootstrap 3.4.1+dfsg-3
ii  libjs-jquery3.6.1+dfsg+~3.5.14-1
ii  libjs-jquery-flot   4.2.1+dfsg-6
ii  moreutils   0.67-1
ii  patchutils  0.4.2-1
ii  retry   1.0.5-3
ii  rsync   3.2.7-1
ii  ruby1:3.1
ii  ruby-activerecord   2:6.1.7.3+dfsg-2
ii  ruby-bunny  2.19.0-2
ii  ruby-erubi  1.12.0-1
ii  ruby-kaminari-activerecord  1.2.2-1
ii  ruby-omniauth-gitlab4.1.0-1
ii  ruby-pg 1.5.3-1
ii  ruby-sinatra3.0.5-3
ii  ruby-sinatra-contrib3.0.5-3
ii  ruby-sqlite31.4.2-4+b3
ii  ruby-thor   1.2.2-1
ii  sudo1.9.14p2-1

Versions of packages debci recommends:
ii  systemd-timesyncd [time-daemon]  254.5-1

Versions of packages debci suggests:
ii  apt-cacher-ng   3.7.4-1+b2
pn  auto-apt-proxy  

-- Configuration Files:
/etc/sudoers.d/debci [Errno 13] Permission denied: '/etc/sudoers.d/debci'

-- no debconf information