On Fri, 16 Mar 2018 19:09:27 +0000 KatolaZ <[email protected]> wrote: > > [...] > > >pinpoint any DSA whose patch is *not* > > > already available in Devuan > > [...] > > > > Ascii packages not yet replaced with patched versions > > > > leloft, you must have "ascii-security" enabled in sources.list. Those > packages are already in ascii: > > $ apt-cache policy samba > samba: > Installed: (none) > Candidate: 2:4.5.12+dfsg-2+deb9u2 > Version table: > 2:4.5.12+dfsg-2+deb9u2 500 > 500 http://pkgmaster.devuan.org/merged ascii-security/main > amd64 Packages 2:4.5.12+dfsg-2+deb9u1 500 > 500 http://pkgmaster.devuan.org/merged ascii/main amd64 > Packages $ > > Same for all the other packages you mentioned. Please double-check > yourself. > > Updates enter pkgmaster.devuan.org about 5/6 minutes after the relevan > Pacckages files are published by primary Debian mirrors. And they are > available on deb.devuan.org (the new DNS Round-robin of Devuan package > mirrors) about 30 minutes later, on average, and in any case no later > than one hour later. > > HND > > KatolaZ
Thanks for your feedback, it is very welcome. I did not use my sources.list to apt-cache policy these packages to check them. I checked them against an apt-mirror configured with the mirror.list posted here a few days ago. It would appear that although the patched packages are immediately available on the official pkgmaster ascii-security repo as you demonstrated, they are not similarly available on an apt-mirror if it does not also mirror additional ascii-* repos. I have added extra repos (taken from from the localhost's sources.list and amended to also mirror 'contrib' and 'non-free') thus ############# config ################## # set base_path /srv/apt-mirror # # set mirror_path $base_path/mirror # set skel_path $base_path/skel # set var_path $base_path/var # set cleanscript $var_path/clean.sh # set defaultarch <running host architecture> # set postmirror_script $var_path/postmirror.sh # set run_postmirror 0 set nthreads 20 set _tilde 0 # ############# end config ############## # mirroring package sources deb-src http://pkgmaster.devuan.org/merged ascii main contrib non-free deb-src http://pkgmaster.devuan.org/merged ascii-security main contrib non-free deb-src http://pkgmaster.devuan.org/merged ascii-backports main contrib non-free #deb-src http://pkgmaster.devuan.org/merged ascii-proposed main contrib non-free deb-src http://pkgmaster.devuan.org/merged ascii-updates main contrib non-free deb-src http://pkgmaster.devuan.org/merged ascii-proposed-updates main contrib non-free #deb-src http://pkgmaster.devuan.org/devuan ascii-proposed-security main contrib non-free deb-src http://pkgmaster.devuan.org/devuan experimental main contrib non-free # mirroring binary architectures deb-amd64 http://pkgmaster.devuan.org/merged ascii main contrib non-free deb-i386 http://pkgmaster.devuan.org/merged ascii main contrib non-free deb-amd64 http://pkgmaster.devuan.org/devuan ascii main contrib non-free deb-i386 http://pkgmaster.devuan.org/devuan ascii main contrib non-free deb-amd64 http://pkgmaster.devuan.org/merged ascii-security main contrib non-free deb-i386 http://pkgmaster.devuan.org/merged ascii-security main contrib non-free deb-amd64 http://pkgmaster.devuan.org/merged ascii-backports main contrib non-free deb-i386 http://pkgmaster.devuan.org/merged ascii-backports main contrib non-free deb-amd64 http://pkgmaster.devuan.org/devuan ascii-proposed main contrib non-free deb-i386 http://pkgmaster.devuan.org/devuan ascii-proposed main contrib non-free deb-amd64 http://pkgmaster.devuan.org/merged ascii-updates main contrib non-free deb-i386 http://pkgmaster.devuan.org/merged ascii-updates main contrib non-free deb-amd64 http://pkgmaster.devuan.org/merged ascii-proposed-updates main contrib non-free deb-i386 http://pkgmaster.devuan.org/merged ascii-proposed-updates main contrib non-free #deb-amd64 http://pkgmaster.devuan.org/devuan ascii-proposed-security main contrib non-free #deb-i386 http://pkgmaster.devuan.org/devuan ascii-proposed-security main contrib non-free deb-amd64 http://pkgmaster.devuan.org/devuan experimental main contrib non-free deb-i386 http://pkgmaster.devuan.org/devuan experimental main contrib non-free # cleanup obsolete stuff clean http://pkgmaster.devuan.org/merged However, if I do not comment out the four lines indicated above, apt-mirror downloads 585 index files but generates the following errors Processing indexes: [SSSapt-mirror: can't open index pkgmaster.devuan.org/merged//dists/ascii-proposed/main/source/Sources in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/merged//dists/ascii-proposed/contrib/source/Sources in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/merged//dists/ascii-proposed/non-free/source/Sources in process_index at /usr/bin/apt-mirror line 800. SSSapt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/main/source/Sources in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/contrib/source/Sources in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/non-free/source/Sources in process_index at /usr/bin/apt-mirror line 800. SSPPPPPPPPPPPPPPapt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/main/binary-amd64/Packages in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/contrib/binary-amd64/Packages in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/non-free/binary-amd64/Packages in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/main/binary-i386/Packages in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/contrib/binary-i386/Packages in process_index at /usr/bin/apt-mirror line 800. apt-mirror: can't open index pkgmaster.devuan.org/devuan//dists/ascii-proposed-security/non-free/binary-i386/Packages in process_index at /usr/bin/apt-mirror line 800. PPPP] But if the four lines indicated above are commented out, apt-mirror downloads 504 index files, and does not report errors. I have 3 questions: 1) are the commented lines above correctly configured for their respective targets; if so, could anyone shed any light on the source of these errors? 2) is the above mirror.list complete, i.e will it faithfully mirror all ascii* packages available and without trying to mirror non-existent repos? 3) are the jessie repos similarly arranged. i.e. can i use the above mirror.list as a template for apt-mirroring jessie? Many thanks, and again thank you for your helpful feedback. leloft _______________________________________________ Dng mailing list [email protected] https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
