Bug#851680: closed by Ben Hutchings <b...@decadent.org.uk> (Re: Bug#851680: Please provide linux-image-amd64-unsigned et al. metapackages (was Re: Please upload signed kernel images at the same time a

2017-01-17 Thread Ben Hutchings 
On Tue, 2017-01-17 at 20:05 +0100, Julien Aubin wrote:
> Hi Ben,
> 
> In that case you have to find a way to provide signed and unsigned images
> simultaneously.
> 
> Otherwise to me it looks like a release blocker and I'll raise a ticket
> about this.

For stable security updates on security.debian.org, they will be
provided simultaneously.

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
  - Albert
Camus



signature.asc
Description: This is a digitally signed message part

Bug#851680: closed by Ben Hutchings <b...@decadent.org.uk> (Re: Bug#851680: Please provide linux-image-amd64-unsigned et al. metapackages (was Re: Please upload signed kernel images at the same time a

2017-01-17 Thread Julien Aubin 
Hi Ben,

In that case you have to find a way to provide signed and unsigned images
simultaneously.

Otherwise to me it looks like a release blocker and I'll raise a ticket
about this.



2017-01-17 18:55 GMT+01:00 Thorsten Glaser :

> Hello Ben,
>
> >No, there will be no such meta-packages.  The -unsigned packages are
> >only meant for developer testing and as build dependencies for signed
> >binary packages.
>
> then, would you please kindly explain how you plan to address the
> issue of not getting the security updates from newer kernel packages
> installed on Debian systems for a week or so?
>
>
> On Tue, 17 Jan 2017, Julien Aubin wrote:
>
> > Could you raise a ticket about this instead of the -unsigned metapackage?
> > (Actually a -signed metapackage would make much more sense)
>
> That’s precisely what I already did, which you might have noticed.
> And yes, that would make much more sense, because 90% or more of
> Debian users have absolutely zero need, nor any surplus value a̲t̲
> a̲l̲l̲, from the signed images.
>
>
> Thanks,
> //mirabilos
> --
> tarent solutions GmbH
> Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
> Tel: +49 228 54881-393 • Fax: +49 228 54881-235
> HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
> Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander
> Steeg
>

Bug#851680: closed by Ben Hutchings <b...@decadent.org.uk> (Re: Bug#851680: Please provide linux-image-amd64-unsigned et al. metapackages (was Re: Please upload signed kernel images at the same time a

2017-01-17 Thread Ben Hutchings 
On Tue, 2017-01-17 at 18:55 +0100, Thorsten Glaser wrote:
> Hello Ben,
> 
> > No, there will be no such meta-packages.  The -unsigned packages
> > are
> > only meant for developer testing and as build dependencies for
> > signed
> > binary packages.
> 
> then, would you please kindly explain how you plan to address the
> issue of not getting the security updates from newer kernel packages
> installed on Debian systems for a week or so?
[...]

A week?  What are you talking about?

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
  - Albert
Camus



signature.asc
Description: This is a digitally signed message part

Bug#851680: closed by Ben Hutchings <b...@decadent.org.uk> (Re: Bug#851680: Please provide linux-image-amd64-unsigned et al. metapackages (was Re: Please upload signed kernel images at the same time a

2017-01-17 Thread Thorsten Glaser 
Hello Ben,

>No, there will be no such meta-packages.  The -unsigned packages are
>only meant for developer testing and as build dependencies for signed
>binary packages.

then, would you please kindly explain how you plan to address the
issue of not getting the security updates from newer kernel packages
installed on Debian systems for a week or so?


On Tue, 17 Jan 2017, Julien Aubin wrote:

> Could you raise a ticket about this instead of the -unsigned metapackage?
> (Actually a -signed metapackage would make much more sense)

That’s precisely what I already did, which you might have noticed.
And yes, that would make much more sense, because 90% or more of
Debian users have absolutely zero need, nor any surplus value a̲t̲
a̲l̲l̲, from the signed images.


Thanks,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg