package: fai Hi Thomas,
we talked about the issue yesterday morning, as you had no time to work on
this yesterday, I decided to forward it to the BTS so that this issue doesn't
get forgotten.
regards,
Holger
---------- Forwarded Message ----------
Subject: Re: debootstrap: security updates
Date: Monday 30 January 2006 20:46
From: Christoph Mitasch <[EMAIL PROTECTED]>
To: linux-fai@uni-koeln.de
Hi!
> >>>>> On Tue, 29 Nov 2005 15:58:06 +0100, Christoph Mitasch <[EMAIL
> >>>>> PROTECTED]> said:
> >>>>>
> > When calling make-fai-nfsroot debootstrap installs some base debian
> > packages but does not take security updates into account.
> > "...debootstrap $FAI_DEBOOTSTRAP_OPTS $1 $NFSROOT $2..."
> >
> > Is there a way to get debootstrap to include security updates from
> > security.debian.org?
>
> debootstrap itself can not use security.debian.org, because it only
> uses one URI. But make-fai-nfsroot is doing and update;upgrade, so it
> should work if you include security.... in /etc/fai/sources.list.
> --
> regards Thomas
security.debian.org was already included in /etc/fai/sources.list.
The security updates for the packages fetched via debootstrap are not
included.
I checked $NFSROOT/var/tmp/base.tgz. My impression was, that it does not
include packages from security.debian.org.
Now I have a new problem that I think is related to my security updates
troubles. Today I created a new fai-mirror and afterwards a new fai-cd.
When I try to install with the new FAI-CD it fails because there is a
conflict between a package from the base repository (without security
updates) and a package from security.debian.org that is trying to be
installed.
Any ideas?
Thank you!
Christoph
-------------------------------------------------------
---------- Forwarded Message ----------
Subject: Re: debootstrap: security updates
Date: Sunday 09 April 2006 03:25
From: Holger Levsen <[EMAIL PROTECTED]>
To: linux-fai@rrz.uni-koeln.de
Hi,
On Tuesday 31 January 2006 17:42, Christoph Mitasch wrote:
> Here are the details:
>
> The problem was that the function "delete_base_packages" in the
> "fai-mirror" script removes all packages that are already included in
> base.tgz. This function removed a security-updated package from the
> fai-mirror.
>
> Now when "task_instsoft" tried to install a package that depends on the
> security-updated one, it failed because of a dependency to the newer
> version of the updated package existed.
> That updated package was not installed through "task_extrbase" and not
> updated through "task_updatebase" since the fai-mirror didn't contain
> the security-updated package.
>
>
> Ok and now the concrete case.
>
> When installing with fai-cd it fails at "task_instsoft" with the
> following error:
> "perl: Depends: perl-base (= 5.8.4-8sarge3) but 5.8.4-8 is to be
> installed"
>
> The reason for that is that the "perl-base 5.8.4-8" package was already
> installed through "base.tgz" and that "perl-base 5.8.4-8sarge3" was
> removed through "delete_base_packages" from the fai-mirror.
>
> I think the "delete_base_packages" function should be reworked so it
> does not remove security updates.
> At the moment it removes packages with that command, where $p is a name
> from base-pkgs.lis (e.g. perl-base)
> # rm $archivedir/${p}_*.deb
>
> There is a option "-a"for fai-mirror that solved my problem.
> "-a Add packages included in base.tgz and packages defined in
> make-fai-nfsroot.conf to the mirror."
>
>
> And now I'm just happy that it works again ;)
>
> Christoph
>
> On Mon, 2006-01-30 at 21:20 +0100, Michael Tautschnig wrote:
> > What kind of "conflict" is it? Could you be so kind and provide some logs
> > or the exact error message?
Thomas, you have not replied to this at all :( To me this looks like a bug
worth fixing - shall I commit it to the BTS tomorrow ?!
regards,
Holger
-------------------------------------------------------
pgpvlZxpj4vW9.pgp
Description: PGP signature
