[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#665638: prevent debootstrap vom needing SHA256sums



Mario Koppensteiner wrote:
> I have an issue with debootstrap. I debugged the issue and I found the
> following:
> 
> The Problem is in the file /usr/share/debootstrap/functions line 634
> 
> Here is the code of the line 628 to 634
>         $PKGDETAILS PKGS "$m" "$pkgdest" "$@" | (
>                 leftover=""  
>                 while read p ver arc mdup fil checksum size; do
> 		 if [ "$ver" = "-" ]; then
>                                 leftover="$leftover $p"
>                         else
>                                 progress_next "$(($dloaddebs + $size))"
> 
> checksum should contain the SHA256sum and size should contain the size.
> 
> But if the Packages.gz file does not contain any SHA256sums, then the
> checksum variable contains the size and the size variable is empty.
> If that happens then the line 634 executes "0 +"
> 
> I used the following command:
> root# debootstrap --no-check-gpg --verbose squeeze /path/chrootsystem/
> ftp://ftp.domain.tld/pub/debian/squeeze

Am I correct in deducing that this mirror is one that was actually
generated with apt-move, and that's why it's missing the SHA256 fields?

> Can somebody please implement a parameter which tells debootstrap not
> to relly on SHA256sums and use MD5sums instead?

Well, that would be insecure. Better to fix the mirror?

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


Reply to: