Tzafrir Cohen wrote:
On Sun, Jun 15, 2008 at 07:35:41PM +0800, Bob wrote:Does such a thing exist?If you do a networked installation, you'll get the latest version at install time anyway.
I tend to do a standard system install (remotely over ssh complete with dodgy keys) without getting updates so it all comes off the CD, then after the first reboot I edit /etc/sources to point to my apt-proxy, run apt-get dist-upgrade, reboot then tasksel for whatever I'm after.
This way it all comes off my apt-proxy at very high speed. As I said in the thread "Squid for apt." http://groups.google.com/group/linux.debian.user/tree/browse_frm/thread/e8bb54d0e99e8906/320639842c72d043?One thing I'm thinking of doing is editing the host file on my router so DNS requests for debian.org return the IP of my apt-proxy so that the hardwired security apt source at install time gets redirected to my proxy. The problem with that is then I can't browse to debian.org, what'd be really cool is if there was a separate apt pool address [0] that did load balancing and had it's address hardwired into the installer, users of an apt proxy could over ride that address at their router so installs would automagically pull their files from the proxy. Another benefit is that, laptops would use the proxy when inside network but could still update when offsite, without having to edit their sources file.
Ultimately I guess this just seems like such a fundamental security flaw that fixing the install media, particularly the DVD images which are often used by people with little, no or infrequent internet access, so the problem keys don't propagate any further should be a bit of a priority.
Any way, I'm not bitching, I'm very grateful for all the work put in by everyone to make Deian the OS it is, etch is my desktop and server OS of choice and I love it, I'm looking forward to Lenny and from what I've seen it'll be even better. [1]
[0] a bit like the ntp pool [1] I really hope Ekiga 3 makes it for Lenny