On 10/25/2016 03:17 PM, Marga Manterola wrote: > The installer currently doesn't support downloading packages from https > mirrors, because busybox's wget doesn't support https. > > The wget package has been changed to provide a udeb, compiled against > the libssl udeb, so that it provides https support. > > The change needed in d-i is to add the wget udeb and it's dependencies > (libcrypto1.0.2, libssl1.0.2 and libpcre3) to the initrd. Which I guess boils down to adding wget-udeb to the installer's pkg-lists/base because I think all flavors and all architectures should have the same feature set. > Regarding total size (as this was mentioned when I discussed this in the > past), this is the size of the needed udebs: > -rw-r----- 1 marga marga 878072 Sep 26 20:17 > libcrypto1.0.2-udeb_1.0.2j-1_amd64.udeb > -rw-r----- 1 marga marga 153852 Aug 19 12:59 libpcre3-udeb_8.39-2_amd64.udeb > -rw-r----- 1 marga marga 141318 Sep 26 20:17 > libssl1.0.2-udeb_1.0.2j-1_amd64.udeb > -rw-r----- 1 marga marga 147960 Sep 26 15:19 wget-udeb_1.18-4_amd64.udeb libcrypto is already in there. So we end up with just libpcre3-udeb, libssl1.0.2-udeb and wget-udeb. > And this is the size difference of the old initrd and the new one: > -rw-r----- 1 marga eng 22580707 Oct 25 02:07 initrd.gz > -rw-r----- 1 marga eng 23381570 Oct 25 15:11 newinitrd.gz > > So, approximately 780k extra for the initrd image (3.5% increase) I'm not sure how you got this number (from a d-i rebuild?), but I end up with 22580517B (~same) to 23106785B (2.3% increase) when rebuilding amd64 netboot from d-i git. Of course it's way less percentage-wise for the default amd64 netboot-gtk (which has a 44696935B initrd right now). So at least size-wise this shouldn't be very controversial. Adding wget-udeb to pkg-lists/base ends up with this: $ lsinitrd dest/netboot/debian-installer/amd64/initrd.gz | grep wget -rwxr-xr-x 1 root root 409016 Sep 26 15:11 usr/bin/wget So that seems to have the desired result. I did not try out the resulting installer, though. Kind regards Philipp Kern
Attachment:
signature.asc
Description: OpenPGP digital signature