[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: debian-9.5.0-amd64-xfce-CD-1.iso missing files for install without mirror

Le 03/11/2018 à 04:01, David Christensen a écrit :
On 11/2/18 5:17 PM, Steve McIntyre wrote:

There is a bug here, and I think it's possibly in tasksel. Mutt is not
on the installation CD, and neither are its dependencies libgpgme11
and libnotmuch4.

*However*, the installer has automatically added security.debian.org
to the sources.list of the new system and peformed an "apt-get
update". This found a security update for mutt, and mutt is Priority:
standard so tasksel decided it should be installed. But the
dependencies are not on security.debian.org and not on the CD -->
I view the fact that the d-i couldn't obtain a security update package to be a defect in the Debian security package distribution chain.  If 'apt-get update' finds that a security update package is available and the d-i wants to install that package, then 'apt-get update' must be able to download that package.  Which package do I file a bug report against?

IMO, debian-installer. We cannot expect tasksel to check that all required dependencies for any selected package are available. The installer should not automatically enable the security archive without adding a normal mirror too in order to have consistent sources, even when installing from a large DVD or BD image. Also, if you install from an old image, adding only the security archive may miss security updates which have been moved to the main archive. This gives a false sense of security.

Reply to: