Your message dated Thu, 20 Apr 2006 05:47:08 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#361786: fixed in fai 2.10.1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
package: fai

Hi Thomas,

we talked about the issue yesterday morning, as you had no time to work on 
this yesterday, I decided to forward it to the BTS so that this issue doesn't 
get forgotten.


regards,
        Holger


----------  Forwarded Message  ----------

Subject: Re: debootstrap: security updates
Date: Monday 30 January 2006 20:46
From: Christoph Mitasch <[EMAIL PROTECTED]>
To: [email protected]

Hi!

> >>>>> On Tue, 29 Nov 2005 15:58:06 +0100, Christoph Mitasch <[EMAIL
> >>>>> PROTECTED]> said:
> >>>>>
>     > When calling make-fai-nfsroot debootstrap installs some base debian
>     > packages but does not take security updates into account.
>     > "...debootstrap $FAI_DEBOOTSTRAP_OPTS $1 $NFSROOT $2..."
>     >
>     > Is there a way to get debootstrap to include security updates from
>     > security.debian.org?
>
> debootstrap itself can not use security.debian.org, because it only
> uses one URI. But make-fai-nfsroot is doing and update;upgrade, so it
> should work if you include security.... in /etc/fai/sources.list.
> --
> regards Thomas

security.debian.org was already included in /etc/fai/sources.list.
The security updates for the packages fetched via debootstrap are not
included.

I checked $NFSROOT/var/tmp/base.tgz. My impression was, that it does not
include packages from security.debian.org.

Now I have a new problem that I think is related to my security updates
troubles. Today I created a new fai-mirror and afterwards a new fai-cd.

When I try to install with the new FAI-CD it fails because there is a
conflict between a package from the base repository (without security
updates) and a package from security.debian.org that is trying to be
installed.

Any ideas?

Thank you!
Christoph

-------------------------------------------------------


----------  Forwarded Message  ----------

Subject: Re: debootstrap: security updates
Date: Sunday 09 April 2006 03:25
From: Holger Levsen <[EMAIL PROTECTED]>
To: [email protected]

Hi,

On Tuesday 31 January 2006 17:42, Christoph Mitasch wrote:
> Here are the details:
>
> The problem was that the function "delete_base_packages" in the
> "fai-mirror" script removes all packages that are already included in
> base.tgz. This function removed a security-updated package from the
> fai-mirror.
>
> Now when "task_instsoft" tried to install a package that depends on the
> security-updated one, it failed because of a dependency to the newer
> version of the updated package existed.
> That updated package was not installed through "task_extrbase" and not
> updated through "task_updatebase" since the fai-mirror didn't contain
> the security-updated package.
>
>
> Ok and now the concrete case.
>
> When installing with fai-cd it fails at "task_instsoft" with the
> following error:
> "perl: Depends: perl-base (= 5.8.4-8sarge3) but 5.8.4-8 is to be
> installed"
>
> The reason for that is that the "perl-base 5.8.4-8" package was already
> installed through "base.tgz" and that "perl-base 5.8.4-8sarge3" was
> removed through "delete_base_packages" from the fai-mirror.
>
> I think the "delete_base_packages" function should be reworked so it
> does not remove security updates.
> At the moment it removes packages with that command, where $p is a name
> from base-pkgs.lis (e.g. perl-base)
> # rm $archivedir/${p}_*.deb
>
> There is a option "-a"for fai-mirror that solved my problem.
> "-a     Add packages included in base.tgz and packages defined in
> make-fai-nfsroot.conf to the mirror."
>
>
> And now I'm just happy that it works again ;)
>
> Christoph
>
> On Mon, 2006-01-30 at 21:20 +0100, Michael Tautschnig wrote:
> > What kind of "conflict" is it? Could you be so kind and provide some logs
> > or the exact error message?

Thomas, you have not replied to this at all :( To me this looks like a bug
worth fixing - shall I commit it to the BTS tomorrow ?!


regards,
        Holger

-------------------------------------------------------

Attachment: pgpCyLQvFf12S.pgp
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: fai
Source-Version: 2.10.1

We believe that the bug you reported is fixed in the latest version of
fai, which is due to be installed in the Debian FTP archive:

fai-client_2.10.1_all.deb
  to pool/main/f/fai/fai-client_2.10.1_all.deb
fai-doc_2.10.1_all.deb
  to pool/main/f/fai/fai-doc_2.10.1_all.deb
fai-nfsroot_2.10.1_all.deb
  to pool/main/f/fai/fai-nfsroot_2.10.1_all.deb
fai-quickstart_2.10.1_all.deb
  to pool/main/f/fai/fai-quickstart_2.10.1_all.deb
fai-server_2.10.1_all.deb
  to pool/main/f/fai/fai-server_2.10.1_all.deb
fai_2.10.1.dsc
  to pool/main/f/fai/fai_2.10.1.dsc
fai_2.10.1.tar.gz
  to pool/main/f/fai/fai_2.10.1.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Lange <[EMAIL PROTECTED]> (supplier of updated fai package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 20 Apr 2006 11:46:12 +0200
Source: fai
Binary: fai-client fai-server fai-doc fai-quickstart fai-nfsroot
Architecture: source all
Version: 2.10.1
Distribution: unstable
Urgency: low
Maintainer: Thomas Lange <[EMAIL PROTECTED]>
Changed-By: Thomas Lange <[EMAIL PROTECTED]>
Description: 
 fai-client - Fully Automatic Installation client package
 fai-doc    - Documentation for FAI
 fai-nfsroot - Fully Automatic Installation nfsroot package
 fai-quickstart - Fully Automatic Installation quickstart package
 fai-server - Fully Automatic Installation server package
Closes: 312198 318299 358910 361786 363480 363521
Changes: 
 fai (2.10.1) unstable; urgency=low
 .
   * fai-chboot: fix division by zero error
   * fai.conf: remove $OS_TYPE
   * fai: remove $OS_TPYPE, set $targetdir, eval_cmdline is not needed for
     install and dirinst, move prcopyleft() and additional code into
     external script, use /var/log/fai/current as default LOGDIR,
     /tmp/fai is currently a mount --bind to it
   * fai-do-scripts: replace --no-lock with -K, this should fix cfengine's
     segfault bug
   * install_packages: add commands for y2pmsh, yast and rpm
   * mount2dir: add more fs types that should be skipped
   * fai-mirror: use different source.list when downloading packages for
     debootstrap (closes: #361786), remove comments from PACKAGES line
     (closes: #358910), add option -C, (closes: #318299), recreates
     Package.gz and Release file using apt-ftparchive
   * fai-cd: add option -C (closes: #312198), print FAI version in grub
     menu, not fai-cd version
   * make-fai-nfsroot: print warning if -f is still used, add config for
     aptitude to allow unsigned packages without prompting
   * menu.lst: enable timeout, use localboot as default, remove syslogd
     flag, remove unused entries, fix IP address for demohost
   * subroutines: new path /var/log/fai/current/showvar.log
   * fai-guide.sgml: include package splitting into fai guide
   * make-fai-nfsroot.conf: new names packages in fai-kernel, add
     console-tools to nfsroot (closes: #363480)
   * get-boot-info: do not try to activate the first four ethernet devices
   * conf/apt.conf: add aptitude option so untrusted repositories will also be 
used
   * instsoft.FAIBASE: use fcopy for kernel-img.conf
   * subroutines-linux: use IP address when calling fai-chboot in
     task_chboot, this helps when the install client has two network cards
     and the host name lookup fails
   * mkrw: fix typo (closes: #363521)
   * dhcpd.conf: make deny unknown-clients default, remove range definition
   * S99fai-setup: enable networking for faiserver
Files: 
 a2dc73516237d47b06ab34a93a4d7149 583 admin extra fai_2.10.1.dsc
 c7cdb88ca678b4c467b8e8c248fc65b1 182420 admin extra fai_2.10.1.tar.gz
 e6fe23fb56eb6a082ca1f463aefd09b7 86834 admin extra fai-client_2.10.1_all.deb
 f8e78b55d0e6af9cb50e9f2c8a7fd921 502824 admin extra fai-doc_2.10.1_all.deb
 085e70c47d5d47b57a81b5de4797cacf 35110 admin extra fai-server_2.10.1_all.deb
 7e614c2d076a519fa9c532de8ed68714 1772 admin extra fai-quickstart_2.10.1_all.deb
 32940a897ec4e3620ed187d1ac1bf932 31994 admin extra fai-nfsroot_2.10.1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFER3x13BPlTqubZv0RAgnoAKDgD8z1IGB4fh+K3P+Y1vuqhT0EpQCgn2XW
XbKr/ESGy7lIU19b0eCai5c=
=oeyH
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to