[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#494640: live-helper: Doesn't follow APT_RECOMMENDS settings in lh_chroot_sources

Daniel Baumann wrote:

> Chris Lamb wrote:
> > I've committed a change to live-helper in Git which fixes this issue.  
> this fix does actually do more harm than it solves - it injects the apt
> settings into the binary image, which is not acceptable as it produces
> tainted images.

Ugh, you are completely correct. I will revert it and commit a different
solution in a few moments.

However, there are two issues:

 * First, we really do need to taint the binary when chroot_local-packages
   are used otherwise local packages will be replaced. I don't think it even
   matters too much as the changes are limited to /etc/apt/preferences and if
   a user is using chroot_local-packages it is hardly Debian anyway.

   The change I just commited locally and to git.chris-lamb.co.uk does this.

 * Secondly, not tainting the chroot will mean that users with
   LH_APT_INSTALL_RECOMMENDS="disabled" who run "apt-get dist-upgrade" on
   bootup (to install security upgrades etc.) will get all recommended
   packages installed (!).

   Whilst I agree that we shouldn't taint the binary image, shouldn't we make
   an exception for the recommends setting, or do we just document that they
   should modify the apt configuration themselves? This doesn't seem to
   follow "do the right thing" IMHO.
   (Another solution would be to add an LH_BINARY_INSTALL_RECOMMENDS
   config option.)


Chris Lamb, UK                                       chris at chris-lamb.co.uk
                                                            GPG: 0x634F9A20
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/debian-live-devel/attachments/20080812/1d5ff8e4/attachment.pgp 

Reply to: