Bug#650783: snapshot.debian.org: please list "deb ..." lines for sources.list on http://snapshot.d.o/package/$package/$version/
Package: snapshot.debian.org
Followup-For: Bug #650783
I was just about to report the same bug. First, comments on replies:
> It helps a little: multi-binary packages are easier to apt-get than wget
> 3-4 files. Although, arguably not much easier.
It’s better because you also have APT checking the Release file signature.
It also makes apt use dependency resolution, which dpkg -i doesn’t do
(apt install /path/to/*.deb is rather new).
> add "deb ..." lines for a sources.list. They can be deduced from the
> binary download urls by removing anything after the timestamp.
No, they can’t, but it’s easy enough to scan, upon import, all
Packages.gz and Sources.gz files to discover when a given file
first occurred and then save *that* timestamp as an additional
field next to each filename and generate the sources.list line
from that.
*This* would really make snapshot.d.o useful. Somewhat, just
downloading .deb files from the link on snapshot.d.o feels
like it could have some better way of ensuring that the .deb
file I get is, indeed, the exact signed file from the archive.
Thanks!
-- System Information:
Debian Release: buster/sid
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64
Kernel: Linux 4.14.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)
Reply to: