On 01/08/18 01:03, leloft wrote:

> 
> I am experimenting with the idea of a customised local instance of the
> Debian security-tracker  but configured for Devuan Beowulf . Thus I may
> have access to a local devuan-security mirror from which I could
> extract a beowulf summary for this list to accompany the DSA summaries
> for ascii.  To this end, I have done the following:

Great idea.  Would love it and will help where I can.
> 
> 1) git clone
> [email protected]:security-tracker-team/security-tracker.git
> and issued $bin/setup-repo
> 
> 2) with a view to a devuan-specific version of this 
> https://security-team.debian.org/security_tracker.html#setting-up-a-local-testing-instance
> 
> 3) by editing the ./security-tracker/Makefile to
> Devuan specific variables. 
> 
> 4)  I was hoping it would be a trivial matter of
> replacing devuan values in place for debian e.g. 'ascii' for 'stretch'
> and Devuan URLs in place of
> MIRROR = http://debian.csail.mit.edu/debian
MIRROR = http://deb.devuan.org/merged

> SECURITY_MIRROR = http://security.debian.org/debian-security
SECURITY_MIRROR = http://deb.devuan.org/merged (same as normal)

You'll need to change the code to reflect our security suites to handle
<suite>-security

> 
> Are there Devuan equivalents to these? Am I being naive? 
^^

> My reasoning was that as the distance between Devuan
> and Debian grows, so the desirability for Devuan-specific security
> advisories may well increase in tandem.  As this is going to add a
> layer of uncertainty for the already over-worked upstream, my hope was
> that I could do some of the preliminary spadework, although spadework
> is about all it would (could) be. I have also reasoned that if
> it was that simple, it's already been done, and probably better.

We're all busy people - it's needed but not as much as other stuff.
Would love if you could take this on!
> 
> Is there anything in this idea that could be developed into a 'project'?
> I have had a look at the devuan-security pages, and would be more than
> willing to be a junior participant in such a project.
> https://git.devuan.org/devuan-security

Come over to #devuan-infra on freenode to discuss further

> 
> All (any) advice or tips would be gratefully accepted.
> 
> Many Thanks
> 
> leloft
> 
> 
> 
> 
> 
> _______________________________________________
> Dng mailing list
> [email protected]
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
> 


-- 
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Dng mailing list
[email protected]
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to