Re: Bug#93612: Support for new archive structure
On Sat, Apr 14, 2001 at 05:02:10PM -0600, Jason Gunthorpe wrote:
[snip]
> I *really* don't see why this is necessary. How is writing:
> deb file:/.../ woody-secured main
> any better than writing
> deb-partial file:/.../ woody main
> ?
>
> Even with this scheme you still need to have the 'deb-partial' feature!
> Consider with AJ's case that you want to use security, and file/http
> URI's, you *still* need to have the original release file, the complete
> package file and the reduced file list and you still need APT support to
> combine all that information.
>
> All this proposal does is break apt-cdrom, in a way that I probably can't
> fix, and that makes it far worse than everything else that has been
> proposed!
>
> Step back and look at why you are doing this - the only reason is so that
> people using old APTs can continue to use file: URIs and loopback mounts
> and not use -m! Those people are so few that it is not unreasonable to
> expect them to upgrade to a new APT and change their sources.list
> slightly. Nothing they already have stops working.
Yes. I've followed this thread for a while and by now, I agree mostly
that if supporting both old and new APTs means kludges and
workarounds, we shouldn't do it. (In particular, as Jason notes,
because "apt-get -m" exists.)
Still, I'd like to propose another possible solution, in the same
spirit as AJ's:
- "Packages" contains an old-style package listing
- "AllPackages" contains the complete listing, as signed by Release.gpg
To support this, AFAICT all that we need is for apt to look for
AllPackages before Packages when accessing filesystems.
I don't actually know what format Release has - presumably it includes
a line "Packages md5sum_of_Packages"?. In that case, an ugly thing is
that the MD5 sum does not match that of Packages, but that of
AllPackages. apt would know about this, but anyone checking the MD5
sums manually would be very surprised... :-/
Cheers,
Richard
PS: I'm still working on JigsawDownload...
--
__ _
|_) /| Richard Atterer | CS student at the Technische | GnuPG key:
| \/¯| http://atterer.net | Universität München, Germany | 0x888354F7
¯ ´` ¯
Reply to: