[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#892803: marked as done (di-netboot-assistant: unsigned daily images)

Your message dated Sun, 18 Mar 2018 15:34:26 +0000
with message-id <E1exaKI-000ALm-J4@fasolo.debian.org>
and subject line Bug#892803: fixed in di-netboot-assistant 0.52
has caused the Debian Bug report #892803,
regarding di-netboot-assistant: unsigned daily images
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
892803: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892803
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: di-netboot-assistant
Version: 0.51
Severity: minor

When attempting to install a daily image I get the following

========================================================================
# di-netboot-assistant install daily --arch=amd64
I: Processing daily/amd64.
I: Downloading 'SHA256SUMS'.
E: Could not download 'https://d-i.debian.org/daily-images/amd64/daily/../../../../Release' and/or 'Release.gpg'. 

  * * * * * * * * * * * * WARNING * * * * * * * * * * * * *
  *                                                       *
  *  Could not verify/find the signature of the release.  *
  *                                                       *
  * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

      Download and install the image anyway? [y|N]:
========================================================================
In the package provided di-sources.list file, in the daily section, there are the following comments, 

  ## Daily netboot DI images (not signed?!?). Read:
  # https://d-i.debian.org/daily-images/build-logs.html
  # http://wiki.debian.org/DebianInstaller/Today

which is a hint that this is likely to fail.
It would be nice if the d-i daily's were signed, even if they had to use a different key that I would then need to install on the system so that this di-netboot-assistant check could use. Is there already a bug open requesting daily image signing? If not then maybe this one can be cloned and reassigned to the right place. 

But until something like that is possible I suggest a couple things:
* add something to the error message detecting when installing daily and explaining it's known that daily images currently aren't signed * add some sort of override option for daily images to skip the check, printing a warning. This would allow for calling di-netboot-assistant from other tools (scripts, puppet, etc) * update the comments in di-sources.list explaining dailys aren't signed and will result in the warning prompt * the 'Today' URL in the comments no longer exists, I couldn't find a good replacement 

--
Matt Taggart
matt@lackof.org

--- End Message ---
--- Begin Message --- 
Source: di-netboot-assistant
Source-Version: 0.52

We believe that the bug you reported is fixed in the latest version of
di-netboot-assistant, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 892803@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas B. Mundt <andi@debian.org> (supplier of updated di-netboot-assistant package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 18 Mar 2018 18:17:54 +0300
Source: di-netboot-assistant
Binary: di-netboot-assistant
Architecture: source all
Version: 0.52
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Andreas B. Mundt <andi@debian.org>
Description:
 di-netboot-assistant - Debian-Installer netboot assistant
Closes: 789247 892800 892803
Changes:
 di-netboot-assistant (0.52) unstable; urgency=medium
 .
   * Fix di-netboot-assistant when '$HOME' is not set (closes: #892800).
   * Replace REGEX by correct URLs in the 'di-sources.list' file.
     (Closes: #789247).
   * Add option to ignore image signature check failures.
     (Closes: #892803).
   * Take new syntax for 'menu.c32' into account.
   * Bump dh compat level to 11 (no changes needed).
Checksums-Sha1:
 3fc57167e571d4397035dd33957a100ae3213d20 1896 di-netboot-assistant_0.52.dsc
 6cc7865b220e0ba3ea10d6443c391fe680cdb55e 38656 di-netboot-assistant_0.52.tar.xz
 f0261799071c446716eff12de92b560673977494 40256 di-netboot-assistant_0.52_all.deb
 9d94877f541e4d35980eb7044afd5df4301b4e1f 5421 di-netboot-assistant_0.52_amd64.buildinfo
Checksums-Sha256:
 e132267db72809de31ea38a86e29b887ba29f26f4bb814f82e6efd321c6d15b8 1896 di-netboot-assistant_0.52.dsc
 4d54325c641fa2d8ff5eab25438b50ce0a2eb027c1489a79c9efd3aba072cda8 38656 di-netboot-assistant_0.52.tar.xz
 bc6483c0575b1639a0483b3d23e79d94df2f2aa2b9f11cfb46894b6a3571d22f 40256 di-netboot-assistant_0.52_all.deb
 a342a54d43a1927e8dba59a2c8b26e74e91716cd21af8bde1bc5d37ec317f4eb 5421 di-netboot-assistant_0.52_amd64.buildinfo
Files:
 9f40cb2eccae8baff38c0918be98cdb2 1896 utils optional di-netboot-assistant_0.52.dsc
 003df85e54980b4d5fc871e029cfadc1 38656 utils optional di-netboot-assistant_0.52.tar.xz
 c6e7969a453df85e01be4aca245952b4 40256 utils optional di-netboot-assistant_0.52_all.deb
 78289253b160acd61ac1a6169fb87d27 5421 utils optional di-netboot-assistant_0.52_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1yFr
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: