Bug#975977: tor generates invalid adress for hiddenservice when runninf on armv5tel architectures

2020-12-16 Thread Peter Palfrader
Hi Bernhard!

On Sun, 13 Dec 2020, Bernhard Übelacker wrote:

> Dear Maintainer,
> I tried to collect some more information and compared this
> situation on real hardware armv5tel with an armv7 and
> it looks like in keccak_finalize the following instruction
> stores different data to memory depending on the arm hardware:
> 
>0x005c4ac0 :f0 20 c4 e1 strdr2, [r4]
> 
> In the failing case this is stored:
> (gdb) x/8xb &((keccak_state *) 0xbeffef5c)->a
> 0xbeffef5c: 0x6f0x6e0x200x630x000x000x00
> 0x00
> 
> And in the good case this:
> (gdb) x/8xb &((keccak_state *) 0xbeffef5c)->a
> 0xbeffef5c: 0x2e0x6f0x6e0x690x6f0x6e0x20
> 0x63
> 
> While on both the registers r2 and r3 contain:
> r2 0x696e6f2e  1768845102
> r3 0x63206e6f  1663069807
> 
> In the attached files are some more details leading to the above result.

Can you try to rebuild tor with __attribute__((aligned(8))) for the
keccak_state as suggested in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975977#44
and then let us know if the issue is still there?
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#975977: tor generates invalid adress for hiddenservice when runninf on armv5tel architectures

2020-12-15 Thread Peter Palfrader
On Tue, 15 Dec 2020, George Kadianakis wrote:

> Bernhard Übelacker  writes:
> 
> > Dear Maintainer,
> > I tried to collect some more information and compared this
> > situation on real hardware armv5tel with an armv7 and
> > it looks like in keccak_finalize the following instruction
> > stores different data to memory depending on the arm hardware:
> >
> > 0x005c4ac0 :f0 20 c4 e1 strdr2, [r4]
> >
> > In the failing case this is stored:
> >  (gdb) x/8xb &((keccak_state *) 0xbeffef5c)->a
> >  0xbeffef5c: 0x6f0x6e0x200x630x000x000x00   
> >  0x00
> >
> > And in the good case this:
> >  (gdb) x/8xb &((keccak_state *) 0xbeffef5c)->a
> >  0xbeffef5c: 0x2e0x6f0x6e0x690x6f0x6e0x20   
> >  0x63
> >
> > While on both the registers r2 and r3 contain:
> >  r2 0x696e6f2e  1768845102
> >  r3 0x63206e6f  1663069807
> >
> > In the attached files are some more details leading to the above result.
> >
> 
> Woah Bernhard, that's some top-notch detective work!
> 
> I wonder what this means? Does this mean that strd is broken on that
> armv5tel, or that we are running gcc with the wrong flags for this
> architecture?

Arnd Bergmann on #debian-arm points out that

  113 setout8(const uint8_t *src, uint8_t *dst, size_t len) {
  114   const uint64_t *si = (const uint64_t*)src; // Always aligned.

line 114 of src/ext/keccak-tiny/keccak-tiny-unrolled.c has undefined behavior
and that 0xbeffef5c is not actually aligned.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#975977: tor generates invalid adress for hiddenservice when runninf on armv5tel architectures

2020-11-30 Thread Peter Palfrader
On Fri, 27 Nov 2020, Jean-Francois Paris wrote:

> I believe that tor generates invalid hidden service onion addresses when 
> running on armv5tel platform

I don't have access to an armv5tel system, but at least running armel on
ARMv7 cpus (both abel.d.o and harries.d.o) I cannot reproduce this
issue.

Here's what I tried:

} [sid_armel-dchroot] weasel@harris:~$ cat torrc
} HiddenServiceDir /home/weasel/hs
} HiddenServicePort 80 127.0.0.1:8080

} [sid_armel-dchroot] weasel@harris:~$ mkdir hs
} [sid_armel-dchroot] weasel@harris:~$ chmod go-rwx -R hs
} [sid_armel-dchroot] weasel@harris:~$

} [sid_armel-dchroot] weasel@harris:~$ echo 
'PT0gZWQyNTUxOXYxLXNlY3JldDogdHlwZTAgPT0AAACg6zoxlQ2hy7C6fUoTgIa0GLMk/YdVs2ic6jUDCzztZeLWcfqwCQ5/KoPk9v99cuWKO5mNpVrDtbOc27UUyC7e'
 | base64 -d > hs/hs_ed25519_secret_key

} [sid_armel-dchroot] weasel@harris:~$ echo 
'6bff2f57fcd69049091dcfa42b08fb84919d60dac919cbb16e3df1d960bb7843  
./hs/hs_ed25519_secret_key' | sha256sum -c
} ./hs/hs_ed25519_secret_key: OK


} [sid_armel-dchroot] weasel@harris:~$ /usr/sbin/tor -f torrc Log 'info stdout'
} # And kill it using ^C after a few seconds

And then I get
} [sid_armel-dchroot] weasel@harris:~$ cat hs/hostname
} upxkcswnvepfls7vcy5vuixy54hlugfjnzhvl5ygfbjtm7znkyahcvad.onion

on armel, armhf, and also amd64.


-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#975939: tor: Tor fails to boot when SOCKSPORT set to anything but localhost

2020-11-26 Thread Peter Palfrader
On Thu, 26 Nov 2020, mike wrote:

> I have a server on the LAN that hosts a few minor Tor hidden services.
> I'd like it to also allow connections from the LAN to allow other
> computers on the LAN to use the SOCKSPORT rather than each one have to
> individually run their own tor proxy. In torrc if I set the following
> the tor daemon fails to bootstrap when I restart the machine.
> /var/log/tor/notices.log is empty upon boot and systemctl status tor
> shows as loaded, but the daemon doesn't allow connections from nyx or
> any other application.

> Changing to SOCKSPORT :9100 results in the same problem. On reboot tor
> fails to load without error, but when restarting tor via systemd tor
> works fine. 

Does it work if you set SocksPort to 0.0.0.0:9100?  What does syslog say
in either case?

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#975297: buster-pu: package tor/3.5.12-1

2020-11-25 Thread Peter Palfrader
On Fri, 20 Nov 2020, Adam D. Barratt wrote:

> Control: tags -1 + confirmed
> 
> Hi,
> 
> On Fri, 2020-11-20 at 07:43 +, Peter Palfrader wrote:
> > Stable currently has Tor 0.3.5.10.
> > 
> > Upstream released 0.3.5.11 and 0.3.5.12 since, which bring some
> > security fixes, update the list of fallback directory servers, and a
> > few things more.
> > 
> > See 
> > https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.12
> > for a full list.
> > 
> > I would like to build and upload packages for tor 3.5.12.
> 
> Based on previous updates, I'd be happy with that, but please attach a
> debdiff to this bug log once it's built / uploaded, for completeness.

} iweasel@orinoco:~/projects/debian/debian/tor/0.3.5.X/0.3.5.12-1$ debdiff 
../0.3.5.10-1/tor_0.3.5.10-1_source.changes tor_0.3.5.12-1_source.changes
} File lists identical (after any substitutions)


} weasel@orinoco:~/projects/debian/debian/tor/0.3.5.X/0.3.5.12-1$ debdiff 
../0.3.5.10-1/tor_0.3.5.10-1_amd64.changes tor_0.3.5.12-1_amd64.changes
} [The following lists of changes regard files as different if they have
} different names, permissions or owners.]
}
} Files in second .changes but not in first
} -
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/18/bd700da967b9476719cb90673f0f4583c8a6a7.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/45/2e6cbd2fb513558a8cd34c7c4f3976187558de.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/e0/7c60e61bff7a6889d4ec421b7bed8cf26d0791.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/ea/4bdaf3cfd226cd4d215276517548b9f34ba5b9.debug
}
} Files in first .changes but not in second
} -
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/02/7122fe11c07cce9682d43c677dc1e072b35e5a.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/0b/6fdffb0e845324489080a83d64f683c156d2ac.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/a1/ece546e7fe6bd69b13ed10faaee7ab7067144d.debug
} -rw-r--r--  root/root   
/usr/lib/debug/.build-id/cb/fd02ab0ee4b42164806ad4c3176679cc7077d3.debug
}
} Control files of package tor: lines which differ (wdiff format)
} ---
} Installed-Size: [-5071-] {+5074+}
} Version: [-0.3.5.10-1-] {+0.3.5.12-1+}
}
} Control files of package tor-dbgsym: lines which differ (wdiff format)
} --
} Build-Ids: [-027122fe11c07cce9682d43c677dc1e072b35e5a 
0b6fdffb0e845324489080a83d64f683c156d2ac 
a1ece546e7fe6bd69b13ed10faaee7ab7067144d 
cbfd02ab0ee4b42164806ad4c3176679cc7077d3-] 
{+18bd700da967b9476719cb90673f0f4583c8a6a7 
452e6cbd2fb513558a8cd34c7c4f3976187558de 
e07c60e61bff7a6889d4ec421b7bed8cf26d0791 
ea4bdaf3cfd226cd4d215276517548b9f34ba5b9+}
} Depends: tor (= [-0.3.5.10-1)-] {+0.3.5.12-1)+}
} Installed-Size: [-5367-] {+5368+}
} Version: [-0.3.5.10-1-] {+0.3.5.12-1+}
}
} Control files of package tor-geoipdb: lines which differ (wdiff format)
} ---
} Depends: tor (>= [-0.3.5.10-1)-] {+0.3.5.12-1)+}
} Installed-Size: [-8358-] {+8361+}
} Version: [-0.3.5.10-1-] {+0.3.5.12-1+}

(I'll only upload the source one)

Source diffs attached.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/
diff -u tor-0.3.5.10/debian/changelog tor-0.3.5.12/debian/changelog
--- tor-0.3.5.10/debian/changelog
+++ tor-0.3.5.12/debian/changelog
@@ -1,3 +1,9 @@
+tor (0.3.5.12-1) buster; urgency=medium
+
+  * New upstream version, updating Tor in stable (cf. #975297).
+
+ -- Peter Palfrader   Wed, 25 Nov 2020 08:44:12 +0100
+
 tor (0.3.5.10-1) buster-security; urgency=medium
 
   * New upstream version.
diff -u tor-0.3.5.10/debian/micro-revision.i tor-0.3.5.12/debian/micro-revision.i
--- tor-0.3.5.10/debian/micro-revision.i
+++ tor-0.3.5.12/debian/micro-revision.i
@@ -1 +1 @@
-"48bd3fbaa3edb9b0"
+"d02a75ee30269081"
diff -u tor-0.3.5.10/debian/misc/backport tor-0.3.5.12/debian/misc/backport
--- tor-0.3.5.10/debian/misc/backport
+++ tor-0.3.5.12/debian/misc/backport
@@ -77,6 +77,7 @@
 disco		disco		1
 eoan		eoan		1
 focal		focal		1
+groovy		groovy		1
 EOF
 )
 	if [ -z "$result" ] ; then
diff -u tor-0.3.5.10/debian/misc/build-tor-sources tor-0.3.5.12/debian/misc/build-tor-sources
--- tor-0.3.5.10/debian/misc/build-tor-sources
+++ tor-0.3.5.12/debian/misc/build-tor-sources
@@ -221,6 +221,11 @@
 	bp1 $pkg $dir $sid_debian_version focal
 	bp2 $pkg $dir $origtar
 
+	# groovy (EOL: 2021-07)
+	#
+	bp1 $pkg $dir $sid_debian_version groovy
+	bp2 $pkg $dir $origtar
+
 	##

Bug#975297: buster-pu: package tor/3.5.12-1

2020-11-20 Thread Peter Palfrader
On Fri, 20 Nov 2020, Peter Palfrader wrote:

> I would like to build and upload packages for tor 3.5.12.

Actually, that's 0.3.5.12, and the package would be 0.3.5.12-1.

-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#975297: buster-pu: package tor/3.5.12-1

2020-11-19 Thread Peter Palfrader
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu

Hi!

Stable currently has Tor 0.3.5.10.

Upstream released 0.3.5.11 and 0.3.5.12 since, which bring some security
fixes, update the list of fallback directory servers, and a few things
more.

See https://gitweb.torproject.org/tor.git/tree/ChangeLog?h=tor-0.3.5.12
for a full list.

I would like to build and upload packages for tor 3.5.12.

Please ack?
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#961956: tor: After upgrade to Unstable tor doesn't start automatically

2020-06-01 Thread Peter Palfrader
Hi Russell!

On Mon, 01 Jun 2020, Russell Coker wrote:

> Package: tor
> Version: 0.4.3.5-1
> Severity: normal
> 
> After upgrading tor to the version in Unstable on two systems they both don't
> start it on boot, I have to run "systemctl restart tor@default.service" to
> start it.
> 
> I expect it to just start on boot, as it did previously.

It's supposed to start automatically, and it does for me.

What does journalctl say about the service?  Anything in the
torlog/syslog?

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942309: [linux-...@okhysing.is: New Debian mirror submission (mirrors.opensource.is)]

2019-11-22 Thread Peter Palfrader
On Mon, 14 Oct 2019, Peter Palfrader wrote:

> o The tracefile
>   http://mirrors.opensource.is/debian/project/trace/mirrors.opensource.is
>   suggests that the ftpsync version you are using is very old.  Please 
> upgrade.
> 
>   Using a modern ftpsync ensures updates are done in the correct order
>   so apt clients don't get confused.   In particular, it processes
>   translations, contents, and more files that have been added to the
>   archive in recent years in the correct stage.  It also should produce
>   trace files that contain more information that is useful for us and helps
>   downstream mirrors sync better.
> 
>   http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz

Ping.

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#944810: mirror submission for mirrors.mivocloud.com

2019-11-22 Thread Peter Palfrader
Hi!

On Fri, 15 Nov 2019, MivoCloud wrote:

> Site: mirrors.mivocloud.com

I added this mirror, however, there are some issues you may want to
resolve:

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?

o The nameservers for mirrors.mivocloud.com are all in the same AS.  For 
reliability we
  recommend having nameservers in more than one location.
-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#944246: mirror listing update for mirror.nbtelecom.com.br

2019-11-09 Thread Peter Palfrader
Unfortunately your mirror still redirects to https.

On Wed, 06 Nov 2019, Pedro Alves wrote:

> Submission-Type: update
> Site: mirror.nbtelecom.com.br
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Pedro Alves 
> Country: BR Brazil
> Location: Rio de Janeiro
> Sponsor: NB Telecom https://www.nbtelecom.com.br

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942060: closed by Peter Palfrader (reply to Debian Mirror Team ) (Re: Bug#942060: mirror submission for us.mirror.nsec.pt)

2019-10-31 Thread Peter Palfrader
Hi!

On Tue, 29 Oct 2019, Yev G wrote:

> Looks like we had some issues with the cron, by ftpsync logs(and
> trace) that should be fixed.
> 
> So I'm reopening the ticket for the same purpose.

I added your mirror, thanks.

Our checker still has this to say:

$ ./mirror-check.py us.mirror.nsec.pt

| o The tracefile at
|   http://us.mirror.nsec.pt/debian/project/trace/us.mirror.nsec.pt
|   is missing some required information.
| 
|   We expect at least the Maintainer and Upstream-mirror values to be filled 
in,
|   and your tracefile is missing one or both of them.
| 
| o The nameservers for us.mirror.nsec.pt are all in the same AS.  For 
reliability we
|   recommend having nameservers in more than one location.

Also,

>  I'd like to add a new mirror to the official Debian mirror list. For
>  now it only has public http but we are also thinking about adding
>  ftp.

I don't think supporting ftp:// in this day and age is anything you
need to spend any time on.  Feel free to do it, but I just don't see the
benefit.  If you want to add another protocol to support, then offering
rsync access would be useful for downstreams :)


Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942451: mirror submission for mirror.ufro.cl

2019-10-23 Thread Peter Palfrader
On Wed, 23 Oct 2019, Jonathan Gutiérrez wrote:

> Hello! I updated ftpsync and the trace file should have the required
> information now. Please check it out and tell me if there's still something
> else that needs to be fixed.

It seems you dropped sources.

What are your ARCH_* settings?  If you want a full mirror, you can just
not set any of them.  I suspect all ARCH_INCLUDE='*' might also work.

> About the nameservers, sadly, that's not in my hands, but I'll ask about
> that to the right people anyway.

Please do.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#941903: snapshot.debian.org: 404 error for one snapshot.debian.org IP address but not for the other

2019-10-21 Thread Peter Palfrader
Evan Jones schrieb am Monday, dem 21. October 2019:

> THANK YOU and whoever else is involved in maintaining this. Just letting
> you know that I appreciate the work here. I don't work for Google, but I do
> use Distroless [1], a lightweight Debian-based container runtime that uses
> snapshot to have reproducible builds, so this was definitely annoying to
> work around. Thanks!
> 
> [1] https://github.com/GoogleContainerTools/distroless

I'm tempted to think that this tool should not use snapshot but the real
mirrors that can handle the load way better.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942451: mirror submission for mirror.ufro.cl

2019-10-21 Thread Peter Palfrader
Hi!

On Wed, 16 Oct 2019, Jonathan Gutierrez wrote:

> Site: mirror.ufro.cl
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Jonathan Gutierrez 
> Country: CL Chile
> Location: Temuco, Chile
> Sponsor: Universidad de La Frontera https://www.ufro.cl/

I have added your mirrror, however:

o The tracefile at
  http://mirror.ufro.cl/debian/project/trace/mirror.ufro.cl
  is missing some required information.

  We expect at least the Maintainer and Upstream-mirror values to be filled in.

o The tracefile
  http://mirror.ufro.cl/debian/project/trace/mirror.ufro.cl
  suggests that the ftpsync version you are using is very old.  Please upgrade.

  Using a modern ftpsync ensures updates are done in the correct order
  so apt clients don't get confused.   In particular, it processes
  translations, contents, and more files that have been added to the
  archive in recent years in the correct stage.  It also should produce
  trace files that contain more information that is useful for us and helps
  downstream mirrors sync better.

  http://mirror.ufro.cl/debian/project/ftpsync/ftpsync-current.tar.gz

o The nameservers for mirror.ufro.cl are all in the same /24 network.  For
  reliability we recommend having nameservers in more than one location.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#940152: Please add 'verbose' option to show transfers

2019-10-21 Thread Peter Palfrader
Hi Daniel!

On Fri, 13 Sep 2019, Daniel Baumann wrote:

> when doing a manual 'ftpsync sync:archive:foo' invocation, it would be
> nice to be able to specify something like '--verbose' to show the output
> of rsync on the console directly.
> 
> Having to walk to /var/log/ftpsync and doing a 'tail -f' on the correct
> logfile is inconvenient.

Sounds like a good idea.  Can you provide a patch?

-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932503: mirror submission for repo.iut.ac.ir

2019-10-21 Thread Peter Palfrader
On Tue, 15 Oct 2019, IT Center wrote:

> Hello 
> 
> Our source: mirror.de.leaseweb.net

Not what I meant.  You must ship the sources for all the binaries.
For instance at http://repo.iut.ac.ir/debian/pool/main/n/ncdu/
there are no source files (tar.gz and dsc).

In ftpsync, you should list source as an architecture to include.

(Also, names are cut off)

Cheers,

> On 2019-10-14 15:19, Peter Palfrader wrote:
> 
> > Control: retitle -1 mirror submission for repo.iut.ac.ir [sources]
> > Control: tag -1 +moreinfo
> > 
> > Hi!
> > 
> > On Sat, 20 Jul 2019, ITCenter Software Group wrote:
> > 
> >> Submission-Type: new
> >> Archive-architecture: amd64 arm64
> > 
> > To comply with the licenses of various pieces of software that you
> > distribute on that mirror, you will probably need to also include
> > sources.
> > 
> > To be listed as a Debian mirror in our mirror-list you MUST include
> > sources.
> > 
> > Please let us know how you want to proceed.
> > 
> > Cheers,

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#941216: mirror submission for mirror.nbtelecom.com.br

2019-10-21 Thread Peter Palfrader
On Wed, 16 Oct 2019, Pedro Alves wrote:

> >    Is it a problem if we redirect all http requests to https ?

Yes.  Please don't do that.  It's ok to also offer a https version,
but redirecting clients may break them if their systems don't trust all
of the CAB Forum.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#941903: snapshot.debian.org: 404 error for one snapshot.debian.org IP address but not for the other

2019-10-21 Thread Peter Palfrader
Michael Rogers schrieb am Monday, dem 07. October 2019:

> When trying to fetch package lists and packages from the
> buster/updates repository I get 404 errors at random, depending on
> which IP address of snapshot.debian.org my machine chooses for each
> request. Requests that go to 193.62.202.27 succeed, while requests
> that go to 185.17.185.185 fail with 404 errors.

> The requested URL /file/02424f70567c5695ef02c2410dd9bca446a86437 was not 
> found on this server.

Thanks for the report.  It seems that the farm broke.  Should be fixed
now, sync is still in progress.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#921500: [20190206] mirror.poliwangi.ac.id: unreliable sync

2019-10-15 Thread Peter Palfrader
Control: retitle -1 [20191015] mirror.poliwangi.ac.id: ghost updates

On Wed, 06 Feb 2019, Peter Palfrader wrote:

> According to our monitoring, mirror.poliwangi.ac.id is not at keeping up
> to date.  The archive updates every 6 hours (4 times a day), but as seen
> on
> https://mirror-master.debian.org/status/mirror-info/mirror.poliwangi.ac.id.html
> your mirror often is many days behind.

It seems the mirror is now keeping up, which is great.

However, there are weird updates to the tracefile, usually three in
total, after every mirror run.

See the bold entries in the sitetrace column at
https://mirror-master.debian.org/status/mirror-info/mirror.poliwangi.ac.id.html

Any idea what's going on there?  Please investigate.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#931758: mirror submission for repo.jztkft.hu

2019-10-15 Thread Peter Palfrader
On Mon, 14 Oct 2019, Birincsik Gábor wrote:

> I misunderstood, I changed to BME server, and doing a force sync.
> 
> Will I get the approval for being an official debian mirror?

Your mirror should make it to the website and the debian installer when
they are next re-built.  This can take a while.

Thanks for your support!

-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932709: mirror listing update for mirrors.netix.net

2019-10-15 Thread Peter Palfrader
On Tue, 15 Oct 2019, Krasen Tsnevski wrote:

> Now is:
> 
> RSYNC_HOST=ftp.de.debian.org

This is *NOT* recommended.


-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#941216: mirror submission for mirror.nbtelecom.com.br

2019-10-15 Thread Peter Palfrader
I have removed your mirror again, as it's broken now.

| weasel@orinoco:~$ wget -O - 
http://mirror.nbtelecom.com.br/debian/project/trace/mirror.nbtelecom.com.br -q
| 
| 
| 400 Bad Request
| 
| Bad Request
| Your browser sent a request that this server could not understand.
| Reason: You're speaking plain HTTP to an SSL-enabled server port.
| Instead use the HTTPS scheme to access this URL, please.
| Hint: https://nbtelecom.dl.sourceforge.net/;>https://nbtelecom.dl.sourceforge.net/

Please re-submit your mirror should it come back.

On Thu, 26 Sep 2019, Pedro Alves wrote:

> Trace Url: 
> http://mirror.nbtelecom.com.br/debian/project/trace/mirror.nbtelecom.com.br
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932709: mirror listing update for mirrors.netix.net

2019-10-15 Thread Peter Palfrader
On Tue, 15 Oct 2019, Krasen Tsnevski wrote:

> I put the latest version of ftpsync and let it sync.
> Can you now see if everything is all right?

I added it, but I still noticed this:

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#918357: mirror listing update for mirror.unesp.br

2019-10-14 Thread Peter Palfrader
While I added your mirror, at least one of the issues below have not
been addressed.

On Sun, 06 Jan 2019, Peter Palfrader wrote:

> Control: retitle -1 mirror.unesp.br: upstream-name
> Control: tag -1 +moreinfo
> 
> On Sat, 05 Jan 2019, Erley Barbosa da Silva / Valdir Barbosa wrote:
> 
> > Site: mirror.unesp.br
> > Type: leaf
> > Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> > kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> > Archive-http: /debian/
> > Archive-rsync: debian/
> > Maintainer: Erley Barbosa da Silva / Valdir Barbosa 
> > Country: BR Brazil
> > Location: Sao Paulo
> > Sponsor: Universidade Estadual Paulista (UNESP) https://www.unesp.br
> > Comment: Mirror at the university.
> 
> Hi!
> 
> o According to
>   http://mirror.unesp.br/debian/project/trace/mirror.unesp.br
>   you use ftp.br.debian.org as an upstream mirror.
> 
>   Please, do not use ftp.*.debian.org.  First, ftp.*.debian.org services
>   only guarantee that http is available on /debian, no guarantee for
>   rsync access exists.  Even if an ftp.CC.debian.org supports rsync now,
>   there is no guarantee that it will in the future.  Second,
>   ftp.CC.debian.org might be a round robin of different sites, so you
>   would not always pull from the same upstream.
> 
>   Better pick an individual name, such as debian.c3sl.ufpr.br which
>   currently is ftp.br.debian.org.
> 
> o Your mirror seems to not have updated for almost a day.  Are you sure
>   you are running ftpsync four times a day?
>   Or, once you correct your upstream name, you could also try running
>   ftpsync-cron every hour or two instead.  It will check the upstream
>   trace file 
> http://debian.c3sl.ufpr.br/debian/project/trace/debian.c3sl.ufpr.br
>   to see if an update is required and run ftpsync if so.
> 
> Cheers,
> 
> PS: I'm currently writing https://etherpad.wikimedia.org/p/debian-mirror --
>   let me know if it's helpful or is missing anything.
> 
> Cheers,
> -- 
> |  .''`.   ** Debian **
>   Peter Palfrader   | : :' :  The  universal
>  https://www.palfrader.org/ | `. `'  Operating System
> |   `-https://www.debian.org/
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942309: [linux-...@okhysing.is: New Debian mirror submission (mirrors.opensource.is)]

2019-10-14 Thread Peter Palfrader
Control: retitle -1 mirror submission for mirrors.opensource.is 
[ftpsync-version]
Control: tag -1 +moreinfo

Hi,

o The tracefile
  http://mirrors.opensource.is/debian/project/trace/mirrors.opensource.is
  suggests that the ftpsync version you are using is very old.  Please upgrade.

  Using a modern ftpsync ensures updates are done in the correct order
  so apt clients don't get confused.   In particular, it processes
  translations, contents, and more files that have been added to the
  archive in recent years in the correct stage.  It also should produce
  trace files that contain more information that is useful for us and helps
  downstream mirrors sync better.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz


On Mon, 14 Oct 2019, Peter Palfrader wrote:

> Package: mirrors
> Severity: wishlist
> User: mirr...@packages.debian.org
> Usertags: mirror-submission
> 
> - Forwarded message from "linux-...@okhysing.is"  
> -
> 
> From: "linux-...@okhysing.is" 
> Subject: New Debian mirror submission (mirrors.opensource.is)
> To: mirr...@debian.org
> Date: Fri, 09 Aug 2019 12:50:45 +
> Message-Id: 
> X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,BAYES_00, 
> HEADER_FROM_DIFFERENT_DOMAINS autolearn=no autolearn_force=no version=3.4.2
> X-Original-To: pe...@palfrader.org
> 
> Submission-Type: new
> Site: mirrors.opensource.is
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Maintainer: linux-...@okhysing.is 
> Country: IS Iceland
> Location: Iceland
> Sponsor: Opin Kerfi https://opinkerfi.is/en
> Comment: We are also hosting /debian-cd so we would like it to be added as 
> well.
> 
> 
> 
> 
> Trace Url: http://mirrors.opensource.is/debian/project/trace/
> Trace Url: 
> http://mirrors.opensource.is/debian/project/trace/ftp-master.debian.org
> Trace Url: 
> http://mirrors.opensource.is/debian/project/trace/mirrors.opensource.is
> 
> 
> - End forwarded message -
> 
> -- 
> |  .''`.   ** Debian **
>   Peter Palfrader   | : :' :  The  universal
>  https://www.palfrader.org/ | `. `'  Operating System
> |   `-https://www.debian.org/
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#931758: mirror submission for repo.jztkft.hu

2019-10-14 Thread Peter Palfrader
As I said, RSYNC_HOST=ftp.hu.debian.org is NOT recommended.

On Mon, 14 Oct 2019, Birincsik Gábor wrote:

> Hello,
> 
> Here my configuration file:
> MIRRORNAME="repo.jztkft.hu"
> TO="/srv/repo/mirror/debian"
> # MAILTO="$LOGNAME"
> # HUB=false
> 
> 
> ## Connection options
> 
> 
> RSYNC_HOST=ftp.hu.debian.org
> RSYNC_PATH="debian"
> # RSYNC_USER=
> # RSYNC_PASSWORD=
> 
> This is how it is setup.
> 
> Gábor
> 
> On 2019.10.14. 13:45, Peter Palfrader wrote:
> > Hi
> > 
> > On Wed, 10 Jul 2019, Gabor Birincsik wrote:
> > 
> > > Submission-Type: new
> > > Site: repo.jztkft.hu
> > > Trace Url: http://repo.jztkft.hu/debian/project/trace/
> > > Trace Url: 
> > > http://repo.jztkft.hu/debian/project/trace/ftp-master.debian.org
> > > Trace Url: http://repo.jztkft.hu/debian/project/trace/repo.jztkft.hu
> > says
> > | Upstream-mirror: ftp.hu.debian.org
> > 
> > o we recommend mirrors not sync directly from service aliases such as
> >ftp..debian.org (only http is guaranteed to be available at
> >ftp..d.o sites).  Maybe change your config to sync from
> >the site currently backing the ftp..debian.org service you sync
> >from?
> > 
> > Cheers,
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#934449: mirror submission for mirror.realcompute.io

2019-10-14 Thread Peter Palfrader
Hi!

On Sun, 11 Aug 2019, Andrew Yager wrote:

> Site: mirror.realcompute.io
> 
> Trace Url: 
> http://mirror.realcompute.io/debian/project/trace/mirror.realcompute.io

says
| Upstream-mirror: ftp.au.debian.org

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?

Cheers,

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#933404: mirror submission for debian.voipgrow.com

2019-10-14 Thread Peter Palfrader
Hi!

On Tue, 30 Jul 2019, Saban wrote:

> Submission-Type: new
> Site: debian.voipgrow.com
> Trace Url: http://debian.voipgrow.com/debian/project/trace/debian.voipgrow.com

says
| Upstream-mirror: ftp.nl.debian.org

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?


-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#933852: mirror submission for debmirror.hbcse.tifr.res.in

2019-10-14 Thread Peter Palfrader
Hi!

On Sun, 04 Aug 2019, Ashish Kumar Singh wrote:

> Site: debmirror.hbcse.tifr.res.in

> Trace Url: 
> http://debmirror.hbcse.tifr.res.in/debian/project/trace/debmirror.hbcse.tifr.res.in

says
| Upstream-mirror: ftp.sg.debian.org

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?

Cheers,

-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932503: mirror submission for repo.iut.ac.ir

2019-10-14 Thread Peter Palfrader
Control: retitle -1 mirror submission for repo.iut.ac.ir [sources]
Control: tag -1 +moreinfo

Hi!

On Sat, 20 Jul 2019, ITCenter Software Group wrote:

> Submission-Type: new
> Archive-architecture: amd64 arm64

To comply with the licenses of various pieces of software that you
distribute on that mirror, you will probably need to also include
sources.

To be listed as a Debian mirror in our mirror-list you MUST include
sources.

Please let us know how you want to proceed.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#929864: mirror submission for debianmirror.una.ac.cr

2019-10-14 Thread Peter Palfrader
On Sun, 02 Jun 2019, Maykol Phillips wrote:

> Submission-Type: new
> Site: debianmirror.una.ac.cr

> Trace Url: 
> http://debianmirror.una.ac.cr/debian/project/trace/debianmirror.una.ac.cr
says:
| Upstream-mirror: ftp.us.debian.org


o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  This holds double for those backed by more than
  one server, as the target you're syncing against keeps changing.

  Maybe change your config to sync from a specific site.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#931758: mirror submission for repo.jztkft.hu

2019-10-14 Thread Peter Palfrader
Hi

On Wed, 10 Jul 2019, Gabor Birincsik wrote:

> Submission-Type: new
> Site: repo.jztkft.hu
> Trace Url: http://repo.jztkft.hu/debian/project/trace/
> Trace Url: http://repo.jztkft.hu/debian/project/trace/ftp-master.debian.org
> Trace Url: http://repo.jztkft.hu/debian/project/trace/repo.jztkft.hu

says
| Upstream-mirror: ftp.hu.debian.org

o we recommend mirrors not sync directly from service aliases such as
  ftp..debian.org (only http is guaranteed to be available at
  ftp..d.o sites).  Maybe change your config to sync from
  the site currently backing the ftp..debian.org service you sync
  from?

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#929699: mirror submission for mirror.xaas.ir

2019-10-14 Thread Peter Palfrader
Control: retitle -1 mirror submission for mirror.xaas.ir [syncscript]
Control: tag -1 +moreinfo

On Wed, 29 May 2019, ali bahramiyan wrote:

> Submission-Type: new
> Site: mirror.xaas.ir
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: ali bahramiyan 
> Country: IR Iran, Islamic Republic of
> Location: Tehran
> Sponsor: XaaS Cloud Computing https://www.xaas.ir
> 
> Trace Url: http://mirror.xaas.ir/debian/project/trace/
> Trace Url: http://mirror.xaas.ir/debian/project/trace/ftp-master.debian.org
> Trace Url: http://mirror.xaas.ir/debian/project/trace/mirror.xaas.ir


Thank you for your support in mirroring Debian.

o trace file:
  I notice there is no tracefile matching your site name.  See link
  above.

  Please use our ftpsync script to mirror Debian.

  It should produce the trace files we require, and do the mirroring in a way
  that ensures the mirror is in a consistent state even during updates.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz


  Using a modern ftpsync ensures updates are done in the correct order
  so apt clients don't get confused.   In particular, it processes
  translations, contents, and more files that have been added to the
  archive in recent years in the correct stage.  It also should produce
  trace files that contain more information that is useful for us and helps
  downstream mirrors sync better.

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#928998: mirror submission for debian.blue3.com.br

2019-10-14 Thread Peter Palfrader
Control: retitle -1 mirror submission for debian.blue3.com.br [tracefile-name 
mirror-gone?]
Control: tag -1 +moreinfo

Seems that mirror changed name.  At least
http://debian.blue3.com.br/debian/project/trace/debian.blue3.com.br
is no longer a thing.

What's the status?

On Tue, 14 May 2019, Samir Hanna Verza wrote:

> Package: mirrors
> Severity: wishlist
> User: mirr...@packages.debian.org
> Usertags: mirror-submission
> 
> Submission-Type: new
> Site: debian.blue3.com.br
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Samir Hanna Verza 
> Country: BR Brazil
> Location: Porto Alegre / RS
> Sponsor: BLUE3 http://blue3.com.br
> Comment: [2019] 20Gbps with PTTRS RPN, 1Gbps with ISP
> 
> 
> 
> 
> Trace Url: http://debian.blue3.com.br/debian/project/trace/
> Trace Url: 
> http://debian.blue3.com.br/debian/project/trace/ftp-master.debian.org
> Trace Url: http://debian.blue3.com.br/debian/project/trace/debian.blue3.com.br
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932709: mirror listing update for mirrors.netix.net

2019-10-14 Thread Peter Palfrader
Control: retitle -1 mirror submission for mirrors.netix.net [tracefile-info 
syncscript]
Control: tag -1 +moreinfo

Hi!

On Mon, 22 Jul 2019, Krasen Tsonevski wrote:

> Site: mirrors.netix.net

> Trace Url: http://mirrors.netix.net/debian/project/trace/
> Trace Url: http://mirrors.netix.net/debian/project/trace/ftp-master.debian.org
> Trace Url: http://mirrors.netix.net/debian/project/trace/mirrors.netix.net


o The tracefile linked above
  suggests that the ftpsync version you are using is very old.  Please upgrade.

  Using a modern ftpsync ensures updates are done in the correct order
  so apt clients don't get confused.   In particular, it processes
  translations, contents, and more files that have been added to the
  archive in recent years in the correct stage.  It also should produce
  trace files that contain more information that is useful for us and helps
  downstream mirrors sync better.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz


-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#929918: Acknowledgement (mirror submission for mirror.ipb.de)

2019-10-14 Thread Peter Palfrader
Stefan Funke schrieb am Friday, dem 26. July 2019:

> We registered our Debian mirror about ~2 month ago and didn’t receive any 
> update/reply.
> Any update on this? Is there anything we can do?

Added,
Cheers
-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#942309: [linux-...@okhysing.is: New Debian mirror submission (mirrors.opensource.is)]

2019-10-14 Thread Peter Palfrader
Package: mirrors
Severity: wishlist
User: mirr...@packages.debian.org
Usertags: mirror-submission

- Forwarded message from "linux-...@okhysing.is"  
-

From: "linux-...@okhysing.is" 
Subject: New Debian mirror submission (mirrors.opensource.is)
To: mirr...@debian.org
Date: Fri, 09 Aug 2019 12:50:45 +
Message-Id: 
X-Spam-Status: No, score=-2.7 required=5.0 tests=ALL_TRUSTED,BAYES_00, 
HEADER_FROM_DIFFERENT_DOMAINS autolearn=no autolearn_force=no version=3.4.2
X-Original-To: pe...@palfrader.org

Submission-Type: new
Site: mirrors.opensource.is
Type: leaf
Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 kfreebsd-amd64 
kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
Archive-http: /debian/
Maintainer: linux-...@okhysing.is 
Country: IS Iceland
Location: Iceland
Sponsor: Opin Kerfi https://opinkerfi.is/en
Comment: We are also hosting /debian-cd so we would like it to be added as well.




Trace Url: http://mirrors.opensource.is/debian/project/trace/
Trace Url: 
http://mirrors.opensource.is/debian/project/trace/ftp-master.debian.org
Trace Url: 
http://mirrors.opensource.is/debian/project/trace/mirrors.opensource.is


- End forwarded message -

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#940227: please provide the policy as one big file

2019-09-14 Thread Peter Palfrader
On Sat, 14 Sep 2019, Charles Plessy wrote:

> Le Sat, Sep 14, 2019 at 09:13:22AM +0000, Peter Palfrader a écrit :
> > 
> > https://www.debian.org/doc/debian-policy/ is pretty and all,
> > but it's really hard to grep in it since it's split into different files
> > for each section.
> > 
> > Please provide a version where everything is in one file.
> 
> Hi Peter,
> 
> please find it at:
> 
> https://www.debian.org/doc/debian-policy/policy.txt
> 
> Links for the different formats:
> 
> https://www.debian.org/doc/devel-manuals#policy
> 
> Have a nice week-end,

Thanks.  Could this please be linked from
https://www.debian.org/doc/debian-policy/ also, as this is the URL
google actually has (and I wasn't the only one on IRC who didn't know
of or find that text version).

Cheers,
-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#940229: uses killall in logrotate snippet

2019-09-14 Thread Peter Palfrader
Package: mosquitto
Version: 1.5.7-1
Severity: important

Regarding severity, see [1].

| root@raven:~# systemctl --failed
  | UNIT  LOAD   ACTIVE SUBDESCRIPTION
| ● logrotate.service loaded failed failed Rotate log files

| root@raven:~# journalctl -u logrotate.service
| -- Logs begin at Fri 2019-09-13 13:14:46 CEST, end at Sat 2019-09-14 10:46:55 
CEST. --
| Sep 14 00:00:01 raven systemd[1]: Starting Rotate log files...
| Sep 14 00:00:02 raven logrotate[17281]: logrotate_script: 2: 
logrotate_script: /usr/bin/killall: not found
| Sep 14 00:00:02 raven logrotate[17281]: error: error running non-shared 
postrotate script for /var/log/mosquitto/mosquitto.log of 
'/var/log/mosquitto/mosquitto.log '
| Sep 14 00:00:02 raven systemd[1]: logrotate.service: Main process exited, 
code=exited, status=1/FAILURE
| Sep 14 00:00:02 raven systemd[1]: logrotate.service: Failed with result 
'exit-code'.

So, there's a few things wrong with this logrotate setup:

| root@raven:~# grep -A1 postro /etc/logrotate.d/mosquitto
| postrotate
| /usr/bin/killall -HUP mosquitto

First, you should never use killall (or pkill) to send signals to
processes by name out of system scripts.  You may only send things to
your processes, and you don't control which other things on the system
might be called mosquitto.

Second, *if* you use killall, you need to ensure it's actually
installed.  killall is shipped by the psmisc package, which is not
Essential, yet the mosquitto packages doesn't depend on it.  Further,
the postrotate snippet probably should NOT supply the full path to the
script[2].

However, what the script probably should do is reload its service using
something like apache2 does:
|   postrotate
|   if invoke-rc.d apache2 status > /dev/null 2>&1; then \
|   invoke-rc.d apache2 reload > /dev/null 2>&1; \
|   fi;
|   endscript

This will call the service's reload thing.  Your sysV init script
already correctly sends a HUP only to the service process.  It seems
the systemd service file doesn't.  I don't know if this is the proper
way to deal with this issue but the following should work:

@@ -8,6 +8,7 @@
 Type=notify
 NotifyAccess=main
 ExecStart=/usr/sbin/mosquitto -c /etc/mosquitto/mosquitto.conf
+ExecReload=/bin/kill -HUP ${MAINPID}
 Restart=on-failure

 [Install]


Cheers,

PS: please consider updating the version in stable.

Cheers,
1: This could be serious, since "Packages must include a "Depends:" line
   listing any other packages they require for operation", but then it's
   "just" logrotation.  Either way, please fix :)
2: | Programs called from maintainer scripts should not normally have a
   | path prepended to them.  [...] These considerations really apply to
   | all shell scripts.


-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#940227: please provide the policy as one big file

2019-09-14 Thread Peter Palfrader
Package: www.debian.org
Severity: wishlist

Hi!

https://www.debian.org/doc/debian-policy/ is pretty and all,
but it's really hard to grep in it since it's split into different files
for each section.

Please provide a version where everything is in one file.

Cheers,
weasel
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#940226: broken link to source from policy manual

2019-09-14 Thread Peter Palfrader
Package: www.debian.org
Severity: normal

Hey!

https://www.debian.org/doc/debian-policy/ has a "Show Source" link
to https://www.debian.org/doc/debian-policy/_sources/index.rst.txt
which doesn't exist.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#939873: qla2xxx .. Async-gnlist failed

2019-09-09 Thread Peter Palfrader
Package: src:linux
Version: 4.19.67-2
Severity: important

The buster kernel, as well as the backports kernel
(linux-image-5.2.0-0.bpo.2-amd64 5.2.9-2~bpo10+1) fail to boot
sibelius.debian.org, which has some storage attached to it via,
presumably, FC.

The kernel keeps printing

| qla2xxx [...]-...: Async-gpdb failed - hdl=.. ...

and systemd keeps waiting for the devices to appear.

Screenshot of remote console attached.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/


Bug#939310: missing systray icon for blueman-applet

2019-09-05 Thread Peter Palfrader
On Tue, 03 Sep 2019, Christopher Schramm wrote:

> Hi Peter,
> 
> sounds like there's some issue with the libappindicator-based icon
> implementation which disables the GTK-based one. Your edit effectively
> avoids the latter.
> 
> Did you try blueman 2.1.1-1 yet?

I built it on stable and tried it.  Same problem.

} weasel@orinoco:~$ blueman-applet
}   
} (blueman-applet:6950): Gtk-WARNING **: 10:45:02.006: Theme parsing error: 
gtk.css:127:35: The style property GtkButton:child-displacement-x is deprecated 
and shouldn't be used anymore. It will be removed in a future version
} 
} (blueman-applet:6950): Gtk-WARNING **: 10:45:02.006: Theme parsing error: 
gtk.css:128:35: The style property GtkButton:child-displacement-y is deprecated 
and shouldn't be used anymore. It will be removed in a future version
} 
} (blueman-applet:6950): Gtk-WARNING **: 10:45:02.006: Theme parsing error: 
gtk.css:132:46: The style property GtkScrolledWindow:scrollbars-within-bevel is 
deprecated and shouldn't be used anymore. It will be removed in a future version
} blueman-applet version 2.1.1 starting
} Stale PID, overwriting
} blueman-tray version 2.1.1 starting
} Stale PID, overwriting
} Terminating blueman-tray
} blueman-applet 10.45.02 WARNING  PluginManager:147 __load_plugin: Not loading 
PPPSupport because its conflict has higher priority
} blueman-applet 10.45.02 WARNING  PluginManager:147 __load_plugin: Not loading 
DhcpClient because its conflict has higher priority
} blueman-applet 10.45.02 ERRORAgentManager:18 on_register_failed: 
/org/bluez/obex/agent/blueman org.bluez.obex.Error.AlreadyExists Agent already 
exists
} blueman-tray version 2.1.1 starting
} Stale PID, overwriting
} 
} (blueman-tray:6968): Gtk-WARNING **: 10:45:02.477: Theme parsing error: 
gtk.css:127:35: The style property GtkButton:child-displacement-x is deprecated 
and shouldn't be used anymore. It will be removed in a future version
} 
} (blueman-tray:6968): Gtk-WARNING **: 10:45:02.477: Theme parsing error: 
gtk.css:128:35: The style property GtkButton:child-displacement-y is deprecated 
and shouldn't be used anymore. It will be removed in a future version
} 
} (blueman-tray:6968): Gtk-WARNING **: 10:45:02.477: Theme parsing error: 
gtk.css:132:46: The style property GtkScrolledWindow:scrollbars-within-bevel is 
deprecated and shouldn't be used anymore. It will be removed in a future version

but no systray icon.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#939310: missing systray icon for blueman-applet

2019-09-03 Thread Peter Palfrader
Package: blueman
Version: 2.0.8-1
Severity: normal

Hi!

I run awesomewm with KDE.

When I start blueman-applet, an icon briefly flickers in my awesomewm
systray, but then is no longer visible and I don't see any way to get it
to stay visible.

If I edit /usr/lib/python3/dist-packages/blueman/plugins/applet/AppIndicator.py
to set self.Applet.Plugins.StatusIcon.props.visible to True at the end
of on_load() then everything works as it should and I see and can
interact with blueman-applet's icon.

It would be great if editing files in /usr wasn't necessary for that,
though :)

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#939195: broken config file location

2019-09-02 Thread Peter Palfrader
Package: barrier
Version: 2.1.2+dfsg-1
Severity: normal

The manpage says barriers reads it config from:

| If no configuration file pathname is provided then the first of the
| following to load successfully sets the configuration:
|   $HOME/.local/share/barrier/barrier.conf /etc/barrier.conf

Apart from the fact that this probably should be ~/.config/barrier.conf,
the code does not match the documentation:

| weasel@orinoco:~$ strace -f barriers -a 127.0.0.1 2>&1 | grep -i open
[..]
| openat(AT_FDCWD, "/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
| openat(AT_FDCWD, "/home/weasel/.local/share/barrier/.barrier.conf", O_RDONLY) 
= -1 ENOENT (No such file or directory)
| openat(AT_FDCWD, "/etc/barrier.conf", O_RDONLY) = -1 ENOENT (No such file or 
directory)

So it actually seems to try  $HOME/.local/share/barrier/.barrier.conf
(extra dot before barrier.conf).

Cheers,
-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#935886: does not email properly, violating RFC821

2019-08-27 Thread Peter Palfrader
Package: bacula-director
Version: 9.4.2-1
Severity: normal

This is actually against 9.4.2-1~bpo9+1 on stretch.

With postfix setting strict_rfc821_envelopes = yes and

| root@dictyotum:~# grep bacula-service /etc/bacula/ -r
| /etc/bacula/bacula-dir.conf:  mail on error = bacula-serv...@torproject.org = 
all, !skipped
| /etc/bacula/bacula-dir.conf:  operator = bacula-serv...@torproject.org = mount
| /etc/bacula/bacula-dir.conf:  mail = bacula-serv...@torproject.org = all, 
!skipped

emails don't work:

| root@dictyotum:~# cat /var/log/mail.warn-20190827 
| Aug 26 19:13:40 dictyotum/dictyotum postfix/smtpd[1301]: warning: Illegal 
address syntax from localhost[127.0.0.1] in MAIL command: <(Bacula) 
bacula-serv...@torproject.org>


Cheers
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#933387: does not reap children

2019-07-30 Thread Peter Palfrader
Package: mandos
Version: 1.8.4-1
Severity: normal

It seems that mandos on buster does not correctly reap its children,
leaving zombies around.  Maybe one per client it knows about?

weasel@mandos-01:~$ ps xauf | grep -C1 '[_]mandos'; date
root  9047  0.0  0.1  14976  2772 ?Ss   Jul22   0:04 ssh: 
/var/run/.ud-replicate.ssh.socket [mux]
_mandos  31762  0.0  1.3 118612 26680 ?Ssl  Jul24   2:35 
/usr/bin/python /usr/sbin/mandos --foreground
_mandos  31765  0.0  0.8 338604 17464 ?Sl   Jul24   1:41  \_ 
/usr/bin/python /usr/sbin/mandos --foreground
_mandos  12060  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

_mandos  12061  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

_mandos  12063  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

_mandos  12067  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

_mandos  12071  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

_mandos  12076  0.0  0.0  0 0 ?Z06:49   0:00  \_ [mandos] 

nagios   18438  0.0  0.2   8208  4836 ?Ss   01:24   0:00 /usr/sbin/nrpe 
-c /etc/nagios/nrpe.cfg -f --no-ssl
Tue Jul 30 06:50:38 UTC 2019
weasel@mandos-01:~$ 

It should probably not leave those around.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#930113: tor: please provide runscript file

2019-07-16 Thread Peter Palfrader
On Tue, 16 Jul 2019, Dmitry Bogatov wrote:

> 
> control: retitle -1 tor: please provide runscript file -- second call
> 
> Hello, dear maintainer.
> 
> This bug, requesting addition of runscript file into package was filed
> some time ago, and got no response. It is quite unfortunate, since
> your review of could have provided valuable advice how to improve
> proposed patch.
> 
> But, after all, we all volonteers here. So hereby I inform you,
> following advice in Developer reference, section 5.11, that I plan to
> do non-maintainer upload in two weeks or so.
> 
> Upload will be into DELAYED/15, so you still have plenty of time
> to make comments and take action.

don't.

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#932125: tor: missing dependency on procps

2019-07-15 Thread Peter Palfrader
On Mon, 15 Jul 2019, Dmitry Bogatov wrote:

> init.d script contains following code (line 239):
> 
>   if ps "$pid" >/dev/null 2>&1; then
>   log_success_msg "$NAME is running"
>   exit 0
>   else
>   log_failure_msg "$NAME is not running"
>   exit 1
>   fi

Thanks for your report.

I think the following should also fix this:

-   if ps "$pid" >/dev/null 2>&1; then
+   if start-stop-daemon --pid "$pid" -T ; then


Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#929922: Broken links to documentation in warning and READMEs

2019-06-03 Thread Peter Palfrader
Package: cryptsetup-initramfs
Version: 2:2.1.0-4
Severity: normal

Hi!

## 1 ##

| root@intrepid:~# update-initramfs -u 
| update-initramfs: Generating /boot/initrd.img-4.19.0-5-amd64
| cryptsetup: WARNING: Option 'cipher' missing in crypttab for plain dm-crypt 
| mapping cswap. Please read /usr/share/doc/cryptsetup/README.initramfs and 
add 
| the correct 'cipher' option to your crypttab(5).
| cryptsetup: WARNING: Option 'size' missing in crypttab for plain dm-crypt 
| mapping cswap. Please read /usr/share/doc/cryptsetup/README.initramfs and 
add 
| the correct 'size' option to your crypttab(5).
..

However, that file does not exist:

} # ls /usr/share/doc/cryptsetup/README.initramfs
} ls: cannot access '/usr/share/doc/cryptsetup/README.initramfs': No such file 
or directory

} # ls /usr/share/doc/cryptsetup*/README.initramf*
} /usr/share/doc/cryptsetup-initramfs/README.initramfs.gz

Probably should point to that one instead.

## 2 ##

Also, that file then points to /usr/share/doc/cryptsetup/README.Debian
which also does not exist.  It should probably be
/usr/share/doc/cryptsetup-run/README.Debian.gz.

Cheers!
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#929009: NMU: [wea...@debian.org: proposed nmu to revert change]

2019-05-15 Thread Peter Palfrader
Package: postgrey
Version: 1.36-5

As discussed in #880047, I have uploaded this NMU:

- Forwarded message from Peter Palfrader  -

diff -Nur postgrey-1.36-5/debian/changelog postgrey-1.36-5.1/debian/changelog
--- postgrey-1.36-5/debian/changelog2017-11-25 11:18:01.0 +0100
+++ postgrey-1.36-5.1/debian/changelog  2019-05-09 13:35:38.0 +0200
@@ -1,3 +1,14 @@
+postgrey (1.36-5.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Revert the 1.36-5 change due to a regression, discussed in #880047#.
+The same patch has also been included in 1.36-3+deb9u1 and reverted
+in 1.36-3+deb9u2.
+There is no point in creating a /var/run/postgrey/ to hold the pidfile
+as using /var/run/postgrey.pid seems to work just fine.
+
+ -- Peter Palfrader   Thu, 09 May 2019 13:35:38 +0200
+
 postgrey (1.36-5) unstable; urgency=medium
 
   * debian/postgrey.init: create /var/run/postgrey if it
diff -Nur postgrey-1.36-5/debian/postgrey.init 
postgrey-1.36-5.1/debian/postgrey.init
--- postgrey-1.36-5/debian/postgrey.init2017-11-25 11:18:01.0 
+0100
+++ postgrey-1.36-5.1/debian/postgrey.init  2019-05-09 13:35:08.0 
+0200
@@ -26,7 +26,7 @@
 DESC="postfix greylisting daemon"
 DAEMON_USER=postgrey
 
-PIDFILE=/var/run/postgrey/$DAEMON_NAME.pid
+PIDFILE=/var/run/$DAEMON_NAME.pid
 SCRIPTNAME=/etc/init.d/$DAEMON_NAME
 
 # Gracefully exit if the package has been removed.
@@ -55,14 +55,6 @@
 #   0 if daemon has been started
 #   1 if daemon was already running
 #   2 if daemon could not be started
-   if [ ! -d /var/run/postgrey/ ]
-   then
-mkdir /var/run/postgrey/
-chown $DAEMON_USER: /var/run/postgrey/
-chmod 0755 /var/run/postgrey/
-# Restore selinux context
-[ -x /sbin/restorecon ] && /sbin/restorecon /var/run/postgrey/
-   fi
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON 
--test > /dev/null \
 || return 1
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- 
\


- End forwarded message -

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#928973: Processed: Re: snapshot.debian.org: internal server error (Error 500)

2019-05-14 Thread Peter Palfrader
severity 928973 normal
close 928973
thanks

On Tue, 14 May 2019, Debian Bug Tracking System wrote:

> > severity -1 grave

> Bug #928973 [snapshot.debian.org] snapshot.debian.org: internal server error 
> (Error 500)
> Severity set to 'grave' from 'important'

This is snapshot being overloaded by people pointing their CI at it, by
jigdo using it as it primary backends, and other abuses.

We are, in our limited time, trying to keep it working, but we don't
always succeed.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#880047: proposed nmu to revert change

2019-05-09 Thread Peter Palfrader
On Thu, 09 May 2019, Peter Palfrader wrote:

> I plan to revert the -5 change from this bug which has also been
> reverted in the stretch upload.

uploaded to delayed 5.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#880047: proposed nmu to revert change

2019-05-09 Thread Peter Palfrader
I plan to revert the -5 change from this bug which has also been
reverted in the stretch upload.

It seems to be unnecessary.

diff -Nur postgrey-1.36-5/debian/changelog postgrey-1.36-5.1/debian/changelog
--- postgrey-1.36-5/debian/changelog2017-11-25 11:18:01.0 +0100
+++ postgrey-1.36-5.1/debian/changelog  2019-05-09 13:35:38.0 +0200
@@ -1,3 +1,14 @@
+postgrey (1.36-5.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Revert the 1.36-5 change due to a regression, discussed in #880047#.
+The same patch has also been included in 1.36-3+deb9u1 and reverted
+in 1.36-3+deb9u2.
+There is no point in creating a /var/run/postgrey/ to hold the pidfile
+as using /var/run/postgrey.pid seems to work just fine.
+
+ -- Peter Palfrader   Thu, 09 May 2019 13:35:38 +0200
+
 postgrey (1.36-5) unstable; urgency=medium
 
   * debian/postgrey.init: create /var/run/postgrey if it
diff -Nur postgrey-1.36-5/debian/postgrey.init 
postgrey-1.36-5.1/debian/postgrey.init
--- postgrey-1.36-5/debian/postgrey.init2017-11-25 11:18:01.0 
+0100
+++ postgrey-1.36-5.1/debian/postgrey.init  2019-05-09 13:35:08.0 
+0200
@@ -26,7 +26,7 @@
 DESC="postfix greylisting daemon"
 DAEMON_USER=postgrey
 
-PIDFILE=/var/run/postgrey/$DAEMON_NAME.pid
+PIDFILE=/var/run/$DAEMON_NAME.pid
 SCRIPTNAME=/etc/init.d/$DAEMON_NAME
 
 # Gracefully exit if the package has been removed.
@@ -55,14 +55,6 @@
 #   0 if daemon has been started
 #   1 if daemon was already running
 #   2 if daemon could not be started
-   if [ ! -d /var/run/postgrey/ ]
-   then
-mkdir /var/run/postgrey/
-chown $DAEMON_USER: /var/run/postgrey/
-chmod 0755 /var/run/postgrey/
-# Restore selinux context
-[ -x /sbin/restorecon ] && /sbin/restorecon /var/run/postgrey/
-   fi
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON 
--test > /dev/null \
 || return 1
 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- 
\


Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#880047: summary

2019-05-09 Thread Peter Palfrader
So,

since this bug has been reopened without comments, here's what appears
to be the status:

currently stretch has 1.36-3+deb9u2 and sid has 1.36-5.

According to the changelog, stretch get a patch in -3+deb9u1 which was
reverted in -3+deb9u2.

sid got that patch in -5, no revert.

-- 
Peter Palfrader   +43 662 8044 6326
FB Computerwissenschaften  Universität Salzburg
Jakob-Haringer-Straße 2  5020 Salzburg, Austria



Bug#926643: LeakSanitizer: detected memory leaks, fails to decrypt

2019-04-08 Thread Peter Palfrader
Package: mandos-client
Version: 1.8.3-3
Severity: normal

With --global-options=--debug in conf/conf.d/mandos/plugin-runner.conf,
mandos runs into a memory leaks:

} ~ # /scripts/init-premount/mandos
} ~ # Mandos plugin mandos-client: Ignoring hook "." - not a file
} Mandos plugin mandos-client: Ignoring hook ".." - not a file
} Mandos plugin mandos-client: Interface "eth0" is already up; good
} Mandos plugin mandos-client: Interface "eth0" is already up; good
} Mandos plugin mandos-client: No interfaces were brought up
} [...]
} Mandos plugin mandos-client: Unlinking "/tmp/mandosPEK5ZS/pubring.kbx"
} Mandos plugin mandos-client: Unlinking "/tmp/mandosPEK5ZS/pubring.kbx~"
} Mandos plugin mandos-client: Unlinking "/tmp/mandosPEK5ZS/trustdb.gpg"
} 
} =
} ==267==ERROR: LeakSanitizer: detected memory leaks
} 
} Direct leak of 8 byte(s) in 1 object(s) allocated from:
} #0 0x7f5c671d6be8 in __interceptor_malloc 
(/lib/x86_64-linux-gnu/liblsan.so.0+0xebe8)
} #1 0x7f5c6656cff9 in strdup (/lib/x86_64-linux-gnu/libc.so.6+0x87ff9)
} 
} SUMMARY: LeakSanitizer: 8 byte(s) leaked in 1 allocation(s).
} 
} ~ #

and it fails to decrypt the filesystem.

If I don't have --global-options=--debug, it will run through and boot
properly.

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#926641: dirs in initrd are not accessible by mandos plugin-runner

2019-04-08 Thread Peter Palfrader
Package: mandos-client
Version: 1.8.3-3
Severity: important

Hi!

This is a pretty minimal, fresh buster.  It has also dropbear-initramfs
installed so that may also be to blame.

During boot, mandos' plugin-runner can't run the plugins:

| ~ # /lib/mandos/plugin-runner: fexecve for 
/lib/mandos/plugins.d/mandos-client: Permission denied
| /lib/mandos/plugin-runner: fexecve for /lib/mandos/plugins.d/splashy: 
Permission denied
| /lib/mandos/plugin-runner: fexecve for /lib/mandos/plugins.d/usplash: 
Permission denied

Turns out, lots of directories are owned by root and not accessible by
other processes, among them:
| ~ # find / -xdev -type d ! -perm +001 | grep usr | grep -v modules/
| /usr/lib64
| /usr/lib/x86_64-linux-gnu
| /usr/lib/udev
| /usr/lib/udev/rules.d
| /usr/lib/systemd
| /usr/lib/systemd/network
| /usr/lib/modules
| /usr/lib/modprobe.d
| /usr/lib/mandos/plugins.d
| /usr/lib/mandos/plugin-helpers
| /usr/lib/cryptsetup

Changing some permissions makes plugin-runner able to run its plugins:
--- mandos  2019-04-08 10:57:20.082839532 +
+++ /usr/share/initramfs-tools/hooks/mandos 2019-04-08 10:59:25.794634878 
+
@@ -264,7 +264,7 @@
·
 # Reset some other things to sane permissions which we have
 # inadvertently affected with our umask setting.
-for dir in / /bin /etc /keyscripts /sbin /scripts /usr /usr/bin; do
+for dir in / /bin /etc /keyscripts /sbin /scripts /usr /usr/bin /usr/lib64 
/usr/lib/x86_64-linux-gnu "${PLUGINDIR}" "${PLUGINHELPERDIR}"; do
 if [ -d "${DESTDIR}$dir" ]; then
chmod a+rX "${DESTDIR}$dir"
 fi

(this is of course not a real fix, since we can't just hardcode the lib 
directory.)



-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#917958: Requesting information about mirror status

2019-03-26 Thread Peter Palfrader
On Wed, 20 Mar 2019, DevPGSV Pablo wrote:

> I submitted a public debian mirror (
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917958 ).
> It was requested that we changed the upstream mirror (we did), but that
> requests didn't arrive to my email ( ihad to look it up online, in the
> previous link).
> 
> I replied to the same message thread, but I have the feeling the message
> was not correctly received (perhaps it didn't arrive to the destinatary
> inbox).
> 
> We have been using our mirror (http://mirror.librelabucm.org/debian/) in
> several servers and desktop computers without any issues.

I just added your mirror.  Sorry that it took so long, we are all silly
busy it seems :/

Thanks for your support!

Cheers,
-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#924556: mirror submission for debian.uz

2019-03-26 Thread Peter Palfrader
Hi!

On Thu, 14 Mar 2019, debian.uz wrote:

> Submission-Type: new
> Site: debian.uz
> Type: leaf
> Archive-architecture: amd64 i386
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: debian.uz 
> Country: UZ Uzbekistan

Thanks for your submission.

This mirror has some problems before it can be accepted into the
mirrorlist we maintain.

The tracefile has little to no info, suggesting it is not written by
ftpsync.  Mirrors need to use ftpsync.

You say you only carry amd64 and i386.  If that is accurate you need at
least also carry sources.

Also cf.
https://volatile.noreply.org/2019-03-26-ppEHsOkKRAY/debian-mirror.txt

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#922191: typo in mirror update commit

2019-03-04 Thread Peter Palfrader
On Sun, 03 Mar 2019, Nils Hamerlinck wrote:

> Hi,
> 
> This commit
> <https://salsa.debian.org/mirror-team/masterlist/commit/b1905ba9511dc11494eb790feb5f1c7ba8bbb829>
> seems
> to have introduced a typo:
> 
> -Archive-http: /debian/
> +*s*rchive-http: /debian/

Thanks, fixed.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#921840: metar: Parsing metar record fails due to changes in NOAA API

2019-02-27 Thread Peter Palfrader
Kees, ping!

On Sat, 09 Feb 2019, Sven Paulus wrote:

> * What led up to the situation?
> 
> On February 4th the "metar" tool stopped working.
> At this point NOAA switched responding on their HTTP URL with metar data
> to returning a redirect to the HTTPS variante of the URL.


weasel@orinoco:~$ metar lows
METAR pattern not found in NOAA data.
weasel@orinoco:~$ 
METARURL=https://tgftp.nws.noaa.gov/data/observations/metar/stations/ metar lows
LOWS 271220Z VRB03KT CAVOK 15/M00 Q1027 NOSIG

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#922191: mirror listing update for debian.xtdv.net

2019-02-25 Thread Peter Palfrader
Hi!

On Wed, 13 Feb 2019, Ta Xuan Truong wrote:

> Submission-Type: update
> Site: debian.xtdv.net
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Ta Xuan Truong 
> Country: VN Vietnam
> Location: Ho Chi Minh city
> Sponsor: XTDV Group http://www.xtdv.group

Thanks for the update.  I have updated Sponsor and Maintainer as well as
the rsync address.


The tracefile
  http://debian.xtdv.net/debian/project/trace/debian.xtdv.net
suggests that the ftpsync version you are using is very old.  Please upgrade.

Using a modern ftpsync ensures updates are done in the correct order so
apt clients don't get confused.   In particular, it processes
translations, contents, and more files that have been added to the
archive in recent years in the correct stage.  It also should produce
trace files that contain more information that is useful for us and
helps downstream mirrors sync better.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz


Thanks for running the service,
Peter
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#922690: mirror submission for mirror.sitsa.com.ar

2019-02-25 Thread Peter Palfrader
On Tue, 19 Feb 2019, NOC SiTSA Telecomunicaciones wrote:

> Package: mirrors

> Submission-Type: new
> Site: mirror.sitsa.com.ar

> Comment: ¡Bienvenido a la réplica del centro, del centro del país!
>  
>  Si se encuentra en Argentina en general, es posible que esta réplica sea 
> útil de acuerdo con nuestra ubicación y conectividad.
>  Es hora de contribuir a la comunidad Debian GNU / Linux por su excelencia 
> técnica y, entre otros propósitos, porque siempre están atentos a las 
> necesidades y expectativas que surgen.
>  
>  El equipo de SiTSA Telecomunicaciones.-

Um, english please?

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#921501: [20190206] debian.mirror.vu.lt: sync frequency

2019-02-06 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

According to our monitoring, debian.mirror.vu.lt is not keeping up to
date as well as it could.
The archive updates every 6 hours (4 times a day), but as seen on
https://mirror-master.debian.org/status/mirror-info/debian.mirror.vu.lt.html
your mirror often is significantly behind.

Please investigate and fix.

I suggest you try running ftpsync-cron out of cron every 2 hours or so.
That script should query the upstream mirror and do a full ftpsync run
only if it's required.  Let us know how that works, it's quite new.

Cheers,



Bug#921500: [20190206] mirror.poliwangi.ac.id: unreliable sync

2019-02-06 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

According to our monitoring, mirror.poliwangi.ac.id is not at keeping up
to date.  The archive updates every 6 hours (4 times a day), but as seen
on
https://mirror-master.debian.org/status/mirror-info/mirror.poliwangi.ac.id.html
your mirror often is many days behind.

Please investigate and fix.  If this cannot be resolved, we will have to
remove your mirror from our list.

Cheers,



Bug#920255: Acknowledgement (tries to install apt-transport-https even if doesn't exist)

2019-01-23 Thread Peter Palfrader
As a workaround, I pass a different setup-script to debootstrap now.

cuts from by setup-dchroot script:

script=/usr/share/debootstrap/scripts/gutsy

# work around for Debian#920255
debootstrapscript=$(tempfile)
cleanup+=("rm $debootstrapscript")
sed -e 's/apt-transport-https//' < "$script" > "$debootstrapscript"
script="$debootstrapscript"

debootstrap \
--keyring "$keyring" \
--include="$extrapkgs" \
--variant=buildd \
--arch="$arch" \
"$suite" "$rootdir" "$mirror" "$script"


Thanks to cjwatson for the idea.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#920255: tries to install apt-transport-https even if doesn't exist

2019-01-23 Thread Peter Palfrader
Package: debootstrap
Version: 1.0.89
Severity: important

Also applies to 1.0.110~bpo9+1.

debootstrap tries to install apt-transport-https with https mirror URLs
even if that's not required anymore and even if the packages doesn't
exist (as in the newer ubuntus, where it's in universe only):

} + debootstrap --keyring /usr/share/keyrings/ubuntu-archive-keyring.gpg 
--include=apt,gnupg,ca-certificates --variant=buildd --arch=i386 disco 
/srv/chroot/schroot-unpack/create-disco-yq4jAG 
https://mirror.netcologne.de/ubuntu /usr/share/debootstrap/scripts/gutsy
} I: Retrieving InRelease 
} I: Checking Release signature
} I: Valid Release signature (key id 790BC7277767219C42C86F933B4FE6ACC0B21F32)
} I: Retrieving Packages 
} I: Validating Packages 
} I: Resolving dependencies of required packages...
} I: Resolving dependencies of base packages...
} I: Found additional base dependencies: dirmngr gnupg-l10n gnupg-utils gpg 
gpg-agent gpg-wks-client gpg-wks-server gpgconf gpgsm libasn1-8-heimdal 
libassuan0 libgssapi3-heimdal libhcrypto4-heimdal libheimbase1-heimdal 
libheimntlm0-heimdal 
} libhx509-5-heimdal libkrb5-26-heimdal libksba8 libldap-2.4-2 libldap-common 
libnpth0 libreadline7 libroken18-heimdal libsasl2-2 libsasl2-modules-db 
libsqlite3-0 
} libssl1.1 libwind0-heimdal openssl pinentry-curses readline-common 
} I: Checking component main on https://mirror.netcologne.de/ubuntu...
} E: Couldn't find these debs: apt-transport-https

It shouldn't do that.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916891: mirror submission for debian.mirrors.theom.nz

2019-01-07 Thread Peter Palfrader
On Sun, 06 Jan 2019, Theo Morra wrote:

> The issue I’m facing at the moment while everyone slowly returns to
> work is that the mirror service has 2 mirrors in the cluster that are
> public facing (so far). Both service debian.mirrors.theom.nz
> <http://debian.mirrors.theom.nz/> but both will also return two
> different traces since they’re not perfectly in sync yet (such are the
> issues when running mirrors within ISPs).

If there are two mirrors that are not identical, always, then you can
submit both mirrors individually.


Also, 203.86.206.98 looks like it's some residential line somewhere.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#918357: mirror listing update for mirror.unesp.br

2019-01-06 Thread Peter Palfrader
Control: retitle -1 mirror.unesp.br: upstream-name
Control: tag -1 +moreinfo

On Sat, 05 Jan 2019, Erley Barbosa da Silva / Valdir Barbosa wrote:

> Site: mirror.unesp.br
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Erley Barbosa da Silva / Valdir Barbosa 
> Country: BR Brazil
> Location: Sao Paulo
> Sponsor: Universidade Estadual Paulista (UNESP) https://www.unesp.br
> Comment: Mirror at the university.

Hi!

o According to
  http://mirror.unesp.br/debian/project/trace/mirror.unesp.br
  you use ftp.br.debian.org as an upstream mirror.

  Please, do not use ftp.*.debian.org.  First, ftp.*.debian.org services
  only guarantee that http is available on /debian, no guarantee for
  rsync access exists.  Even if an ftp.CC.debian.org supports rsync now,
  there is no guarantee that it will in the future.  Second,
  ftp.CC.debian.org might be a round robin of different sites, so you
  would not always pull from the same upstream.

  Better pick an individual name, such as debian.c3sl.ufpr.br which
  currently is ftp.br.debian.org.

o Your mirror seems to not have updated for almost a day.  Are you sure
  you are running ftpsync four times a day?
  Or, once you correct your upstream name, you could also try running
  ftpsync-cron every hour or two instead.  It will check the upstream
  trace file http://debian.c3sl.ufpr.br/debian/project/trace/debian.c3sl.ufpr.br
  to see if an update is required and run ftpsync if so.

Cheers,

PS: I'm currently writing https://etherpad.wikimedia.org/p/debian-mirror --
  let me know if it's helpful or is missing anything.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#917958: mirror listing update for mirror.librelabucm.org

2019-01-06 Thread Peter Palfrader
Control: retitle -1 mirror.librelabucm.org: upstream
Control: tag -1 +moreinfo

On Tue, 01 Jan 2019, Pablo Garcia de los Salmones wrote:

> Site: mirror.librelabucm.org
> Type: leaf
> Archive-architecture: amd64 arm64 armel armhf i386 kfreebsd-i386 mips
> Archive-http: /debian/
> Maintainer: Pablo Garcia de los Salmones 
> Country: ES Spain
> Location: Spain, Madrid, Universidad Complutense de Madrid, Facultad de 
> Informática, LibreLabUCM
> Sponsor: LibrelabUCM https://librelabucm.org

Hi!

According to
http://mirror.librelabucm.org/debian/project/trace/mirror.librelabucm.org
you use ftp.de.debian.org as an upstream mirror.

Please, do not use ftp.*.debian.org.  First, ftp.*.debian.org services only
guarantee that http is available on /debian, no guarantee for rsync access
exists.  Even if an ftp.CC.debian.org supports rsync now, there is no guarantee
that it will in the future.  Second, ftp.CC.debian.org might be a round robin
of different sites, so you would not always pull from the same upstream.

Better pick an individual name, such as debian.inf.tu-dresden.de which
currently is ftp.de.debian.org.


Also, weird choice of architectures :)

PS: I'm currently writing https://etherpad.wikimedia.org/p/debian-mirror --
  let me know if it's helpful or is missing anything.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916754: [20181218] debian.gtisc.gatech.edu: broken DNS

2018-12-22 Thread Peter Palfrader
On Fri, 21 Dec 2018, Paul Royal wrote:

> Hello,
> 
> There was a DC-wide power outage; please try resolution again now.

Even if it worked now, having all your nameservers behind a SPOF is still bad 
configuration.


-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916891: marked as done (mirror submission for debian.mirrors.theom.nz)

2018-12-20 Thread Peter Palfrader
Control: reopen 916891
thanks

Ok, I've removed the mirror again, for now.

The nameservers for the mirrors.theom.nz provide me with different
anders for the IP address of that mirror, and there is not a consistent
view across the different addresses.

Please fix and/or let us know what's going on.

Also, the TTL for debian.mirrors seems low.

> Package: mirrors
> Severity: wishlist
> User: mirr...@packages.debian.org
> Usertags: mirror-submission
> 
> Submission-Type: new
> Site: debian.mirrors.theom.nz
> Type: leaf
> Archive-architecture: ALL amd64 arm64 armel armhf hurd-i386 i386 
> kfreebsd-amd64 kfreebsd-i386 mips mips64el mipsel powerpc ppc64el s390x
> Archive-http: /debian/
> Archive-rsync: debian/
> Maintainer: Theo M. 
> Country: NZ New Zealand
> Location: Auckland, Christchurch
> Sponsor: TheoM's Mirror Service https://theom.co.nz

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#874487: Debian mirror mirrors.gigenet.com: missing-tracefile, syncscript

2018-12-20 Thread Peter Palfrader
On Tue, 18 Dec 2018, Julien Cristau wrote:

> On 12/18/18 2:26 PM, Scott Ehas wrote:
> > Hello Peter,
> > 
> > We have updated the ftpsync.conf, and have reconfigured the cronjob. 
> > I'll check in a few hours to see if the sync has finished.
> > 
> > 00 03 * * * /opt/debiansync/bin/ftpsync sync:all
> > 00 06 * * * /opt/debiansync/bin/ftpsync sync:all
> > 00 12 * * * /opt/debiansync/bin/ftpsync sync:all
> > 00 21 * * * /opt/debiansync/bin/ftpsync sync:all
> > 
> Are you sure about that schedule?  That has a 3 hour interval and a 9
> hour one, instead of all 6.

Also, it appears to not work.

https://mirror-master.debian.org/status/mirror-info/mirrors.gigenet.com.html

It runs some syncing, but it never finishes successfully.

Please do investigate.
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916754: [20181218] debian.gtisc.gatech.edu: broken DNS

2018-12-18 Thread Peter Palfrader
On Tue, 18 Dec 2018, Robert Edmonds wrote:

> Peter Palfrader wrote:
> > Hi!
> > 
> > it seems we cannot resolve debian.gtisc.gatech.edu currently.
> > https://mirror-master.debian.org/status/mirror-info/debian.gtisc.gatech.edu.html
> > 
> > The problem appears to be a broken DNS configuration that puts all of
> > the nameservers for gtisc.gatech.edu in the same AS.
> 
> That is not the root cause.

It's still a bad configuration.  Nameservers for a zone are supposed to
be diverse, and while those for gatech.edu are, those for
gtisc.gatech.edu are not.

> I would try to CNAME debian.gtisc.gatech.edu elsewhere but I'm afraid
> the only online secondary nameserver is configured to AXFR the zone from
> servers that are ... powered off.

gtisc.gatech.edu only has two nameservers, 143.215.130.241 and
143.215.130.242.

-- 
        |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916785: [20181218] ftp.linux.org.tr: broken DNS

2018-12-18 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems we cannot resolve ftp.linux.org.tr currently.
https://mirror-master.debian.org/status/mirror-info/ftp.linux.org.tr.html

The problem appears to be a broken DNS configuration that puts all of
the nameservers for linux.org.tr in the same AS.

Please fix.

Cheers,



Bug#916784: [20181218] debian.gnu.gen.tr: broken DNS

2018-12-18 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems we cannot resolve debian.gnu.gen.tr currently.
https://mirror-master.debian.org/status/mirror-info/debian.gnu.gen.tr.html

The problem appears to be a broken DNS configuration that puts all of
the nameservers for gnu.gen.tr in the same AS.

Please fix.

Cheers,



Bug#916757: [20181218] mirror.sjc02.svwh.net: sync script

2018-12-18 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems mirror.sjc02.svwh.net is not using the recommended sync script
to mirror debian, ftpsync.

This causes an inconsistent mirror during updates, please start using
ftpsync.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz


Using a modern ftpsync ensures updates are done in the correct order so
apt clients don't get confused.   In particular, it processes
translations, contents, and more files that have been added to the
archive in recent years in the correct stage.  It also should produce
trace files that contain more information that is useful for us and
helps downstream mirrors sync better.

Also, please don't use a round-robin-rotation as upstream mirror and
instead pick a good, fixed one.

Also see https://etherpad.wikimedia.org/p/debian-mirror

Cheers,



Bug#916754: [20181218] debian.gtisc.gatech.edu: broken DNS

2018-12-18 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems we cannot resolve debian.gtisc.gatech.edu currently.
https://mirror-master.debian.org/status/mirror-info/debian.gtisc.gatech.edu.html

The problem appears to be a broken DNS configuration that puts all of
the nameservers for gtisc.gatech.edu in the same AS.

Please fix.

| ;; AUTHORITY SECTION:
| gtisc.gatech.edu.   86400   IN  NS  b.ns.gtisc.gatech.edu.
| gtisc.gatech.edu.   86400   IN  NS  a.ns.gtisc.gatech.edu.
| 
| ;; ADDITIONAL SECTION:
| b.ns.gtisc.gatech.edu.  300 IN  A   143.215.130.242
| a.ns.gtisc.gatech.edu.  300 IN  A   143.215.130.241

(Also, one of the nameservers for the parent zone (168.24.2.35) replies with
SERVFAIL when asked about gtisc.gatech.edu.)

Cheers,



Bug#916751: [20181218] debian.tu-bs.de: unreachable

2018-12-18 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems
http://debian.tu-bs.de/debian/
is unreachable:
https://mirror-master.debian.org/status/mirror-info/debian.tu-bs.de.html

Please investigate.

Cheers,



Bug#874487: Debian mirror mirrors.gigenet.com: missing-tracefile, syncscript

2018-12-18 Thread Peter Palfrader
ping?

On Tue, 11 Dec 2018, Peter Palfrader wrote:

> On Mon, 10 Dec 2018, Scott Ehas wrote:
> 
> > We performed an entirely new sync, and I haven't found any errors within
> > the ftpsync logs.  Can you confirm everything is correct?
> 
> http://mirrors.gigenet.com/debian/project/trace/mirrors.gigenet.com
> says it's from Saturday, December 8.
> 
> So the file has the right name now, but the sync is not happening
> regularly (every 6 hours, 4 times a day).
> 
> Further:
> - looking at your arch list, you might want to move from an architecture
>   EXCLUDE configuration to an INCLUDE configuration.
> - You should probably not sync off an ftp.*.debian.org alias and
>   probably not of a DNS rotation of several mirrors.  Pick one upstream.
> 
> 
> Also cf
>  - 
> https://mirror-master.debian.org/status/mirror-info/mirrors.gigenet.com.html
> Cheers,
> 
> > > I started writing a new howto/guidelines in case that's helpful:
> > >   https://etherpad.wikimedia.org/p/debian-mirror
> -- 
> |  .''`.   ** Debian **
>   Peter Palfrader   | : :' :  The  universal
>  https://www.palfrader.org/ | `. `'  Operating System
> |   `-https://www.debian.org/
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#916193: [20181211] ftp.harukasan.org: unreachable

2018-12-11 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems
http://ftp.harukasan.org/debian/
is unavailable since a few days ago.

https://mirror-master.debian.org/status/mirror-info/ftp.harukasan.org.html

Please investigate.

Cheers,



Bug#874435: debian.org.ua: tracefile-name, upstream-name, ftpsync-version

2018-12-11 Thread Peter Palfrader
Hi

Not having received any response, and this mirror not being run in
accordance with best practices, I have removed it from the mirrorlist
for now.

Thanks for having provided this service.

If you want to bring it back, please do and fill in
 https://www.debian.org/mirror/submit
again.

On Tue, 04 Dec 2018, Peter Palfrader wrote:

> ping.
> 
> On Wed, 28 Nov 2018, Peter Palfrader wrote:
> 
> > hey!
> > 
> > Please act on the email below.
> > 
> > On Sun, 15 Oct 2017, Peter Palfrader wrote:
> > 
> > > Ping.
> > > 
> > > On Thu, 28 Sep 2017, Peter Palfrader wrote:
> > > 
> > > > Ping.
> > > > 
> > > > On Wed, 06 Sep 2017, Peter Palfrader wrote:
> > > > 
> > > > > I was checking some things in the Debian mirror universe and noticed
> > > > > a problem with your mirror:
> > > > > 
> > > > > o Status: 
> > > > > https://mirror-master.debian.org/status/mirror-info/debian.org.ua.html
> > > > > 
> > > > > o There is a mismatch between your tracefile name in
> > > > >   http://debian.org.ua/debian/project/trace/ and your site-name.  Can
> > > > >   you please have the tracefile name be the same as the site name?  I
> > > > >   think you can accomplish this by setting MIRRORNAME= in 
> > > > > ftpsync.conf.
> > > > > 
> > > > >   (Even though ftp.ua.debian.org is currently an alias for your site,
> > > > >the mirrorname should be debian.org.ua)
> > > > > 
> > > > > o we recommend mirrors not sync directly from service aliases such as
> > > > >   ftp.de.debian.org (only http is guaranteed to be available at
> > > > >   ftp..d.o sites).  Maybe change your config to sync from
> > > > >   the site currently backing ftp.de.debian.org?
> > > > > 
> > > > > o The tracefile on your mirror suggests that the ftpsync version you 
> > > > > are
> > > > >   using is a bit dated..  Please upgrade.
> > > > > 
> > > > >   Using a modern ftpsync ensures updates are done in the correct order
> > > > >   so apt clients don't get confused.   In particular, it processes
> > > > >   translations, contents, and more files that have been added to the
> > > > >   archive in recent years in the correct stage.  It also should 
> > > > > produce
> > > > >   trace files that contain more information that is useful for us.
> > > > > 
> > > > >   http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#914882: debian.mirror.garr.it: ftpsync, tracefile name

2018-12-11 Thread Peter Palfrader
On Tue, 11 Dec 2018, Peter Palfrader wrote:

> On Mon, 10 Dec 2018, Paolo Velati via RT wrote:
> 
> > Hello again Peter,
> > as you can see on https://debian.mirror.garr.it/ , I've updated the debian
> > mirror with the latest ftpsync script, mirroring these repos: debian, 
> > archive,
> > backports, ports, cd, security.
> > 
> > Now the trace file should be complete:
> > https://debian.mirror.garr.it/debian/project/trace/
> 
> Very nice.
> 
> A few other things:
>   - You probably should sync every 6 hours (4 times a day).  Currently
> 
> https://mirror-master.debian.org/status/mirror-info/debian.mirror.garr.it.html
> suggests yoy have not updated since yesterday
>   - You use ftp.de.debian.org as upstream.  This is not recommended.
> ftp.*.debian.org names only guarantee http service at /debian.
> Maybe just use debian.inf.tu-dresden.de (which currently /is/
> ftp.de.debian.org but which will offer rsync even if
> ftp.de.debian.org changes).
> 
> Also see https://etherpad.wikimedia.org/p/debian-mirror

Further, you probably want to retire the backports archive.  It has been
unused for many releases already.  (The -backports suites are in the
main archive these days.)
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#876821: Debian mirror ftp.lug.ro: out-of-date, syncscript

2018-12-11 Thread Peter Palfrader
Not having received any response, and this mirror not being run in
accordance with best practices, I have removed it from the mirrorlist
for now.

Thanks for having provided this service.

If you want to bring it back, please do and fill in
 https://www.debian.org/mirror/submit
again.

On Tue, 04 Dec 2018, Peter Palfrader wrote:

> ping.
> 
> On Wed, 28 Nov 2018, Peter Palfrader wrote:
> 
> > ping.
> > 
> > Also, when you set up ftpsync, please set MIRRORNAME correctly so
> > that the tracefile name matches your mirror name.
> > 
> > cf
> >  https://mirror-master.debian.org/status/mirror-info/ftp.lug.ro.html
> > 
> > Cheers,
> > 
> > On Tue, 26 Sep 2017, Peter Palfrader wrote:
> > 
> > > o The trace file at
> > >   http://ftp.lug.ro/debian/project/trace/ftp.lug.ro
> > >   does not contain much information.
> > > 
> > >   Please use our ftpsync script to mirror Debian.
> > > 
> > >   Using a modern ftpsync ensures updates are done in the correct order
> > >   so apt clients don't get confused.   In particular, it processes
> > >   translations, contents, and more files that have been added to the
> > >   archive in recent years in the correct stage.  It also should produce
> > >   trace files that contain more information that is useful for us.
> > > 
> > >   http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#914329: mirror submission for debian.mirror.liquidtelecom.com

2018-12-11 Thread Peter Palfrader
On Thu, 22 Nov 2018, Peter Palfrader wrote:

> Hi Anthony!

> >  we would also like to become the official KE mirror and potentially
> >  support being official mirror for any african nations not yet
> >  having one - particularly southern and eastern africa countries
> >  listed: ZA,ZW,ZM,BW,TZ,UG,RW,KE

I have added
| ftp.ke.debian.org.  IN  CNAME   debian.mirror.liquidtelecom.com.
to our zone.

Does it make sense to add the others too?

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915865: [20181207] ftp.nluug.nl: out of date

2018-12-11 Thread Peter Palfrader
On Fri, 07 Dec 2018, ftp-ad...@nluug.nl wrote:

> 
> Quoting Peter Palfrader :
> Hi Peter,
> 
> Thanks for noticing.
> I adjusted the source and the ftpsync version.
> Syncing has been restarted.

Has it?

https://mirror-master.debian.org/status/mirror-info/ftp.nluug.nl.html
still looks sad.

> > o Also, your ftpsync version is a bit old, please upgrade --
> >   http://ftp.debian.org/debian/project/ftpsync/
> > 
> > o Furthermore, you seem to sync off an ftp.*.debian.org service alias.
> > 
> >   This is *not* recommended.  First, ftp.*.debian.org services only
> >   guarantee that http is available on /debian, no guarantee for rsync
> >   access exists.  Even if an ftp.CC.debian.org supports rsync now, there
> >   is no guarantee that it will in the future.
> > 
> >   Second, ftp.CC.debian.org might be a round robin of different sites,
> >   so you would not always pull from the same upstream.

mirror howto/guidelines: https://etherpad.wikimedia.org/p/debian-mirror

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#914882: debian.mirror.garr.it: ftpsync, tracefile name

2018-12-11 Thread Peter Palfrader
On Mon, 10 Dec 2018, Paolo Velati via RT wrote:

> Hello again Peter,
> as you can see on https://debian.mirror.garr.it/ , I've updated the debian
> mirror with the latest ftpsync script, mirroring these repos: debian, archive,
> backports, ports, cd, security.
> 
> Now the trace file should be complete:
> https://debian.mirror.garr.it/debian/project/trace/

Very nice.

A few other things:
  - You probably should sync every 6 hours (4 times a day).  Currently

https://mirror-master.debian.org/status/mirror-info/debian.mirror.garr.it.html
suggests yoy have not updated since yesterday
  - You use ftp.de.debian.org as upstream.  This is not recommended.
ftp.*.debian.org names only guarantee http service at /debian.
Maybe just use debian.inf.tu-dresden.de (which currently /is/
ftp.de.debian.org but which will offer rsync even if
ftp.de.debian.org changes).

Also see https://etherpad.wikimedia.org/p/debian-mirror

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#874487: Debian mirror mirrors.gigenet.com: missing-tracefile, syncscript

2018-12-11 Thread Peter Palfrader
On Mon, 10 Dec 2018, Scott Ehas wrote:

> We performed an entirely new sync, and I haven't found any errors within
> the ftpsync logs.  Can you confirm everything is correct?

http://mirrors.gigenet.com/debian/project/trace/mirrors.gigenet.com
says it's from Saturday, December 8.

So the file has the right name now, but the sync is not happening
regularly (every 6 hours, 4 times a day).

Further:
- looking at your arch list, you might want to move from an architecture
  EXCLUDE configuration to an INCLUDE configuration.
- You should probably not sync off an ftp.*.debian.org alias and
  probably not of a DNS rotation of several mirrors.  Pick one upstream.


Also cf
 - https://mirror-master.debian.org/status/mirror-info/mirrors.gigenet.com.html
Cheers,

> > I started writing a new howto/guidelines in case that's helpful:
> >   https://etherpad.wikimedia.org/p/debian-mirror
-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915522: Re : Bug#915522: debian.mirror.iweb.ca mirror name

2018-12-10 Thread Peter Palfrader
On Mon, 10 Dec 2018, Benjamin Navaro wrote:

> 
> Le 18-12-04 07:21, « Peter Palfrader »  a écrit :
> 
> Package: mirrors
> User: mirr...@packages.debian.org
> Usertags: mirror-problem
> 
>     On Wed, 28 Nov 2018, Peter Palfrader wrote:
> 
> > We list your mirror as debian.mirror.iweb.ca, however your
> > tracefile-name at http://debian.mirror.iweb.ca/debian/project/trace/
> > says mirror.iweb.ca.
> 
> Please set MIRRORNAME in your ftpsync.conf correctly.
> 
> 
> Hi Peter,
> 
> Could you please be a little more specific ? 
> Our ftpsync.conf seems to be setup properly and I can't find any reference to 
> 'mirror.iweb.ca' in the files in our trace directory, only to 
> 'debian.mirror.iweb.ca'.
> Could you please point me to the issue ?

The tracefile-name issue was fixed around December 5th; see
  https://mirror-master.debian.org/status/mirror-info/debian.mirror.iweb.ca.html

I also sent you a followup regrading the tracefile name and pointed out
another issue; see
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=915522#10

Cheers,
Peter
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915869: sometimes get backtrace on shutdown

2018-12-07 Thread Peter Palfrader
Package: onionshare
Version: 1.3-1
Severity: normal

sometimes onionshare throws an exception on shutdown:

| Onionshare 1.3 | https://onionshare.org/
| [Dec 07 2018 13:55:25] Settings.__init__
| [Dec 07 2018 13:55:25] Onion.__init__
| [Dec 07 2018 13:55:25] Onion.connect
| [Dec 07 2018 13:55:25] Settings.__init__
| [Dec 07 2018 13:55:25] Settings.load
| Connecting to the Tor network: 5% - Connecting to directory server
| Connecting to Tor is taking too long. Maybe your computer is offline, or your 
clock isn't accurate.
| Exception ignored in: 
| Traceback (most recent call last):
|   File "/usr/lib/python3.5/weakref.py", line 548, in __call__
| return info.func(*info.args, **(info.kwargs or {}))
|   File "/usr/lib/python3.5/tempfile.py", line 936, in _cleanup
| _rmtree(name)
|   File "/usr/lib/python3.5/shutil.py", line 480, in rmtree
| _rmtree_safe_fd(fd, path, onerror)
|   File "/usr/lib/python3.5/shutil.py", line 438, in _rmtree_safe_fd
| onerror(os.unlink, fullname, sys.exc_info())
|   File "/usr/lib/python3.5/shutil.py", line 436, in _rmtree_safe_fd
| os.unlink(name, dir_fd=topfd)
| FileNotFoundError: [Errno 2] No such file or directory: 'state.tmp'


Cheers,
-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915865: [20181207] ftp.nluug.nl: out of date

2018-12-07 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems
http://ftp.nluug.nl/debian/
is out of date, not having successfully finished a mirrorrun since
the 3rd:
http://ftp.nluug.nl/debian/project/trace/

https://mirror-master.debian.org/status/mirror-info/ftp.nluug.nl.html

Please investigate.


o Also, your ftpsync version is a bit old, please upgrade --
  http://ftp.debian.org/debian/project/ftpsync/

o Furthermore, you seem to sync off an ftp.*.debian.org service alias.

  This is *not* recommended.  First, ftp.*.debian.org services only
  guarantee that http is available on /debian, no guarantee for rsync
  access exists.  Even if an ftp.CC.debian.org supports rsync now, there
  is no guarantee that it will in the future.

  Second, ftp.CC.debian.org might be a round robin of different sites,
  so you would not always pull from the same upstream.

Cheers,



Bug#915859: [Pkg-privacy-maintainers] Bug#915859: uses a fixed filename in /tmp

2018-12-07 Thread Peter Palfrader
On Fri, 07 Dec 2018, intrigeri wrote:

> Hi,
> 
> Peter Palfrader:
> > onionshare uses /tmp/onionshare_server.log as a logfile with --debug.
> 
> Good catch!
> 
> While that code obviously conflicts with basic secure programming best
> practices, it seems to me that the default settings of the
> fs.protected_symlinks and fs.protected_hardlinks sysctls protect
> Debian users against exploitation, so I find RC severity hard to
> justify given this only affects users who manually pass --debug under
> a non-default sysctl/kernel configuration.
> 
> In any case, this should be fixed :)

In addition to the security issues of bad tempfile handling, it causes
onionshare to break for me as on this system several users run
onionshare.

-- 
    |  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915864: mirror.solnode.io: out of date

2018-12-07 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

- Forwarded message from Peter Palfrader  -

From: Peter Palfrader 
Subject: mirror.solnode.io out of date
To: Ben Babich 
Cc: Debian Mirror Team 
Reply-To: Debian Mirror Team 
Date: Wed, 5 Dec 2018 14:21:18 +
Message-ID: <20181205142118.gc2...@sarek.noreply.org>
X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 
autolearn=ham autolearn_force=no version=3.4.2
X-Original-To: pe...@palfrader.org

Hi!

It seems mirror.solnode.io's upstream is out of date, and therefore so
is your mirror.

You might want to pick a different upstream.

Alternatively, if you want, we could set up ssh triggering you from
syncproxy.au.debian.org and give you access to its rsync.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/


- End forwarded message -



Bug#915859: uses a fixed filename in /tmp

2018-12-07 Thread Peter Palfrader
Package: onionshare
Version: 1.3-1
Severity: grave
Tags: security

onionshare uses /tmp/onionshare_server.log as a logfile with --debug.

in onionshare/web.py:
| def debug_mode():
| temp_dir = tempfile.gettempdir()
| log_handler = logging.FileHandler(
| os.path.join(temp_dir, 'onionshare_server.log'))

tempfile.gettempdir() returns /tmp.  It does not give you a
dedicated temp-directory.  It is not mkdtemp.

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#874487: Debian mirror mirrors.gigenet.com: missing-tracefile, syncscript

2018-12-06 Thread Peter Palfrader
On Wed, 05 Dec 2018, Scott Ehas wrote:

> We have removed the straight Rsync command, and implemented the ftpsync.
> Please let us know if you spot any issues.

Hm.

It seems it's still running since there's Archive-Update-* flagfiles in
http://mirrors.gigenet.com/debian/
and http://mirrors.gigenet.com/debian/project/trace/ does not yet have a
new tracefile.

I started writing a new howto/guidelines in case that's helpful:
  https://etherpad.wikimedia.org/p/debian-mirror

It seems at the very least you want to set MIRRORNAME to
mirrors.gigenet.com.  Right now it defaults to MSRV001 for you.

Cheers,
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915105: [20181129] mirror.seedvps.com: out of date, ftpsync version, upstream-server

2018-12-05 Thread Peter Palfrader
On Tue, 04 Dec 2018, SeedVPS wrote:

> Hi Peter,
> 
> Good to know, Thanks! I have changed ftp.us.debian.org to a local mirror
> (rsync)
> I will keep an eye to make sure it continues to sync properly.

Thanks!
-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#915533: [20181204] mirror.aarnet.edu.au: out of date

2018-12-04 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

Hi!

it seems
mirror.aarnet.edu.au/debian/
is out of date
https://mirror-master.debian.org/status/mirror-info/mirror.aarnet.edu.au.html

Please investigate.


Also, you appear to not run ftpsync.

Using a modern ftpsync ensures updates are done in the correct order
so apt clients don't get confused.   In particular, it processes
translations, contents, and more files that have been added to the
archive in recent years in the correct stage.  It also should produce
trace files that contain more information that is useful for us and helps
downstream mirrors sync better.

  http://ftp.debian.org/debian/project/ftpsync/ftpsync-current.tar.gz

Cheers,



Bug#915522: debian.mirror.iweb.ca mirror name

2018-12-04 Thread Peter Palfrader
Package: mirrors
User: mirr...@packages.debian.org
Usertags: mirror-problem

On Wed, 28 Nov 2018, Peter Palfrader wrote:

> We list your mirror as debian.mirror.iweb.ca, however your
> tracefile-name at http://debian.mirror.iweb.ca/debian/project/trace/
> says mirror.iweb.ca.

Please set MIRRORNAME in your ftpsync.conf correctly.

-- 
|  .''`.   ** Debian **
      Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



Bug#914893: [20181128] ftp.iinet.net.au: syncscript, no-tracefile, non-standard-path, upstream-round-robin

2018-12-04 Thread Peter Palfrader
Not having received any response, and this mirror not being run in
accordance with best practices, I have removed it from the mirrorlist
for now.

Thanks for having provided this service.

If you want to bring it back, please do and fill in
 https://www.debian.org/mirror/submit
again.

On Wed, 28 Nov 2018, Peter Palfrader wrote:

> Hi!
> 
> ping.
> 
> - Forwarded message from Peter Palfrader  -
> Date: Tue, 14 Feb 2017 12:32:38 +
> 
> Hi,
> 
> I was checking some things in the Debian mirror universe and noticed a
> few minor issues with your mirror:
> 
> o The trace file at
>   http://ftp.iinet.net.au/debian/debian/project/trace/ftp.iinet.net.au
>   contains very little information.
> 
>   Please use our ftpsync script to mirror Debian.
> 
>   Using ftpsync ensures updates are done in the correct order so apt
>   clients don't get confused.  It also should produce correct trace
>   files that contain more information that is useful for us.
>   http://freedom.dicea.unifi.it/debian/project/ftpsync/ftpsync-current.tar.gz
> 
> o We recommend all mirrors present the Debian archive under /debian, like
>   http://ftp.debian.org/debian/ -- can you do the same?
> 
> o It seems you use a DNS round robin rotation as a mirror source.
>   Causing your mirror to flip between states at times.  Please pick one
>   good upstream, e.g. mirrors.wikimedia.org or ftp-osl.osuosl.org and
>   mirror from that.
> 
>   If you are intested, we might also be able to hook you up with ssh
>   triggered push/pull access from syncproxy.au.debian.org, but note that
>   this is more involved.
> 
> Thank you for your support in mirroring Debian.
> 
> Cheers,
> -- 
> |  .''`.   ** Debian **
>   Peter Palfrader   | : :' :  The  universal
>  https://www.palfrader.org/ | `. `'  Operating System
>     |   `-https://www.debian.org/
> 

-- 
|  .''`.   ** Debian **
  Peter Palfrader   | : :' :  The  universal
 https://www.palfrader.org/ | `. `'  Operating System
|   `-https://www.debian.org/



  1   2   3   4   5   6   7   8   9   10   >