[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#842040: Please add https support

On 10/25/2016 03:17 PM, Marga Manterola wrote:
> The installer currently doesn't support downloading packages from https
> mirrors, because busybox's wget doesn't support https.
> The wget package has been changed to provide a udeb, compiled against
> the libssl udeb, so that it provides https support.
> The change needed in d-i is to add the wget udeb and it's dependencies
> (libcrypto1.0.2, libssl1.0.2 and libpcre3) to the initrd.

Which I guess boils down to adding wget-udeb to the installer's
pkg-lists/base because I think all flavors and all architectures should
have the same feature set.

> Regarding total size (as this was mentioned when I discussed this in the
> past), this is the size of the needed udebs:
> -rw-r----- 1 marga marga 878072 Sep 26 20:17
> libcrypto1.0.2-udeb_1.0.2j-1_amd64.udeb
> -rw-r----- 1 marga marga 153852 Aug 19 12:59 libpcre3-udeb_8.39-2_amd64.udeb
> -rw-r----- 1 marga marga 141318 Sep 26 20:17
> libssl1.0.2-udeb_1.0.2j-1_amd64.udeb
> -rw-r----- 1 marga marga 147960 Sep 26 15:19 wget-udeb_1.18-4_amd64.udeb

libcrypto is already in there. So we end up with just libpcre3-udeb,
libssl1.0.2-udeb and wget-udeb.

> And this is the size difference of the old initrd and the new one:
> -rw-r----- 1 marga eng 22580707 Oct 25 02:07 initrd.gz
> -rw-r----- 1 marga eng 23381570 Oct 25 15:11 newinitrd.gz
> So, approximately 780k extra for the initrd image (3.5% increase)

I'm not sure how you got this number (from a d-i rebuild?), but I end up
with 22580517B (~same) to 23106785B (2.3% increase) when rebuilding
amd64 netboot from d-i git. Of course it's way less percentage-wise for
the default amd64 netboot-gtk (which has a 44696935B initrd right now).

So at least size-wise this shouldn't be very controversial. Adding
wget-udeb to pkg-lists/base ends up with this:

$ lsinitrd dest/netboot/debian-installer/amd64/initrd.gz | grep wget
-rwxr-xr-x   1 root     root       409016 Sep 26 15:11 usr/bin/wget

So that seems to have the desired result. I did not try out the
resulting installer, though.

Kind regards
Philipp Kern

Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: