[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#792729: marked as done (debootstrap: Uses wrong keyring to bootstrap etch (and likely also other archived releases))

Your message dated Fri, 16 Mar 2018 12:49:52 +0000
with message-id <E1ewonw-000BQ0-HK@fasolo.debian.org>
and subject line Bug#792729: fixed in debootstrap 1.0.93+nmu1
has caused the Debian Bug report #792729,
regarding debootstrap: Uses wrong keyring to bootstrap etch (and likely also other archived releases)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org

792729: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792729
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: debootstrap
Version: 1.0.67
Severity: normal
Control: affects -1 xen-tools

$ debootstrap  --verbose --arch amd64 etch /tmp/2d2hgjrQsL http://debian.ethz.ch/debian-archive/debian
I: Retrieving Release 
I: Retrieving Release.gpg 
I: Checking Release signature
E: Release signed by unknown key (key id B5D0C804ADB11277)

$ debootstrap --keyring=/usr/share/keyrings/debian-archive-removed-keys.gpg  --verbose --arch amd64 etch /tmp/9TZTmvueLz http://debian.ethz.ch/debian-archive/debian
I: Retrieving Release 
I: Retrieving Release.gpg 
I: Checking Release signature
I: Valid Release signature (key id 7EA391D72477203B58C04FBCB5D0C804ADB11277)
I: Retrieving Packages 
I: Validating Packages 

But /usr/share/debootstrap/scripts/etch contains:

  keyring /usr/share/keyrings/debian-archive-keyring.gpg

This should be changed to:

  keyring /usr/share/keyrings/debian-archive-removed-keys.gpg

This seems also to count for all other archived Debian releases (as
"egrep '^keyring' /usr/share/debootstrap/scripts/*" shows) and may also
count for archived Ubuntu releases. (Didn't test the latter, but
ubuntu-archive-keyring contains a similarily named file:

This issue has been found in Jessie, but still seems to be present in
Sid. Reporting from a Sid machine, but against the version in Jessie.

The current workaround for xen-tools is to use
"--debootstrap-cmd='debootstrap --keyring=/usr/share/keyrings/debian-archive-removed-keys.gpg'"
as option to xen-create-image.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (500, 'buildd-unstable'), (400, 'stable'), (110, 'experimental'), (1, 'buildd-experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.19.0-trunk-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages debootstrap depends on:
ii  wget  1.16.3-3

Versions of packages debootstrap recommends:
ii  debian-archive-keyring  2014.3
ii  gnupg                   1.4.19-3

debootstrap suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: debootstrap
Source-Version: 1.0.93+nmu1

We believe that the bug you reported is fixed in the latest version of
debootstrap, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 792729@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Hideki Yamane <henrich@debian.org> (supplier of updated debootstrap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)

Hash: SHA512

Format: 1.8
Date: Mon, 05 Mar 2018 22:28:22 +0900
Source: debootstrap
Binary: debootstrap debootstrap-udeb
Architecture: source all
Version: 1.0.93+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Hideki Yamane <henrich@debian.org>
 debootstrap - Bootstrap a basic Debian system
 debootstrap-udeb - Bootstrap the Debian system (udeb)
Closes: 600647 659360 676370 676373 736995 792729 839073 891404
 debootstrap (1.0.93+nmu1) unstable; urgency=medium
   * Non-maintainer Upload.
   * Use force_md5 for breezy, dapper and edgy (Closes: #659360, #676373)
     Now you can create Ubuntu breezy/dapper/edgy chroot.
   * Add Suggests: ubuntu-archive-keyring for debootstraping Ubuntu on Debian.
     When you fetch Ubuntu packages ubuntu-archive-keyring is necessary.
     (Closes: #736995)
   * Change repository URI for old Ubuntu releases (Closes: #676370, #839073)
     Archived Ubuntu releases are at old-releases.ubuntu.com/ubuntu
   * Set correct keyring and default mirror for old debian releases.
     Now you can fetch popato/woody/sarge/etch/lenny/squeeze if you want.
     (Closes: #891404, #600647, #792729)
 e2413fcfeb05c32bb826aea8d7f10268e2fde431 1974 debootstrap_1.0.93+nmu1.dsc
 4ca6c77f0acfbeced5857a3b772f84586bfd322a 69482 debootstrap_1.0.93+nmu1.tar.gz
 b14bed3a25567573c1003ed26b4532e6475ecdb2 19136 debootstrap-udeb_1.0.93+nmu1_all.udeb
 bb595a1618aa5641fdc91ed51d0dcdbd244fb3a2 67076 debootstrap_1.0.93+nmu1_all.deb
 a119b0b867f03e42929520ccc374d4e49439716b 5815 debootstrap_1.0.93+nmu1_amd64.buildinfo
 9a3baa12be0cf04a1bfcb98b3db5aea89c9e9b10d0ca9510f058d09b6445ed18 1974 debootstrap_1.0.93+nmu1.dsc
 0e2d51b3ce105b467e40f4a38923105e09e0c9f128facf6884be3f3c4a98229f 69482 debootstrap_1.0.93+nmu1.tar.gz
 363381e7247b3cf1601eb7db13e381053ef203955c844ef782cfb6d463a65303 19136 debootstrap-udeb_1.0.93+nmu1_all.udeb
 4e5f8505a0c323d96b1e00f9a0a06890b3e24e47e75180232a55d04d03fdb219 67076 debootstrap_1.0.93+nmu1_all.deb
 ac3c70b031539eb4e06bc58c798ae6dc4ea85fba3d1326a9342bcf95d8a65a82 5815 debootstrap_1.0.93+nmu1_amd64.buildinfo
 73ef5dd5094ac169de99e0784918118c 1974 admin optional debootstrap_1.0.93+nmu1.dsc
 585e98ddabb435d9ee24359af49825e0 69482 admin optional debootstrap_1.0.93+nmu1.tar.gz
 ab8393e9e78fbaa87adab219aafc6774 19136 debian-installer optional debootstrap-udeb_1.0.93+nmu1_all.udeb
 6e0f46c66d0bfd2109afbd4e653db841 67076 admin optional debootstrap_1.0.93+nmu1_all.deb
 402ba8abee2325a804dd9a628ebf6909 5815 admin optional debootstrap_1.0.93+nmu1_amd64.buildinfo



--- End Message ---

Reply to: