On Tue, 2026-06-23 at 22:57 +0200, Johannes Schauer Marin Rodrigues
wrote:
> Hi,
> 
> Quoting Benjamin Drung (2026-06-23 18:30:56)
> > Instead of tweaking the sources list, it would be nice if mmdebstrap could 
> > be
> > instructed which suites should be enabled.
> > 
> > Calling `mmdebstrap resolute resolute.tar` creates /etc/apt/sources.list
> > with:
> > 
> > ```
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://archive.ubuntu.com/ubuntu resolute main
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://archive.ubuntu.com/ubuntu resolute-updates main
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://security.ubuntu.com/ubuntu resolute-security main
> > ```
> > 
> > I propose taking a --suites parameter to tweak the suites (similar to
> > the --components paramater):
> > 
> > ```
> > mmdebstrap --suites="%s %s-updates %s-proposed %s-security" resolute 
> > resolute.tar
> > ```
> > 
> > would result in:
> > 
> > ```
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://archive.ubuntu.com/ubuntu resolute main
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://archive.ubuntu.com/ubuntu resolute-updates main
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://archive.ubuntu.com/ubuntu resolute-proposed main
> > deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
> > http://security.ubuntu.com/ubuntu resolute-security main
> > ```
> 
> I don't think a --suites parameter would fix this problem because you want
> "resolute-security" with a different mirror security.ubuntu.com.
> 
> I think what we want here is a better distro-info-data-extra which we can tell
> "I want the defaults for Ubuntu Resolute" and it would give you above list
> of mirror URLs, suites and signed-by, no?

I thought about it. We should handle security.ubuntu.com separately. It
might be useful to use resolute-security from the mirror that you
specified and have security.ubuntu.com as fallback. So

```
mmdebstrap --suites="%s %s-updates %s-security" resolute resolute.tar 
http://my.mirror.example/ubuntu
```

would create:

```
deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
http://my.mirror.example/ubuntu resolute main
deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
http://my.mirror.example/ubuntu resolute-updates main
deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
http://my.mirror.example/ubuntu resolute-security main
deb [signed-by="/usr/share/keyrings/ubuntu-archive-keyring.gpg"] 
http://security.ubuntu.com/ubuntu resolute-security main
```

What do you think?

-- 
Benjamin Drung
Debian & Ubuntu Developer

Reply via email to