[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#596189: marked as done (Ignores Release file if it is not signed)



Your message dated Fri, 10 Sep 2010 19:32:13 +0000
with message-id <E1Ou9KX-0007Gv-GT@franck.debian.org>
and subject line Bug#596189: fixed in apt 0.8.4
has caused the Debian Bug report #596189,
regarding Ignores Release file if it is not signed
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
596189: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596189
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: apt
Version: 0.8.1
Severity: normal

I turn /var/cache/pbuilder/results into a flat repo using the following cron job:

    #!/bin/bash -eE
    # As etckeeper is triggered by "apt-get install" but not "dpkg -i", it
    # is desirable to make a bare-bones private package archive.
    test -x /usr/bin/apt-ftparchive || exit 0
    test -d /var/cache/pbuilder/result/ || exit 0
    cd /var/cache/pbuilder/result/
    for p in Packages Sources Contents Release
    do apt-ftparchive -q=2 ${p,,} . >$p
    done
    sed -i 1i"NotAutomatic: yes" Release # Workaround #272557.

It produces a /var/cache/pbuilder/results/Release file like this:

    NotAutomatic: yes
    Date: Thu, 09 Sep 2010 04:22:55 UTC
    MD5Sum:
     42665307063939a74f90fa2807f19a7a            10428 Packages
     d41d8cd98f00b204e9800998ecf8427e                0 Release
     bebff4df2ffdfc54e9eca1cc0c488e03             7373 Sources
    SHA1:
     a01b72eb8eecfbc023aafb4fc2868e11d3a71371            10428 Packages
     da39a3ee5e6b4b0d3255bfef95601890afd80709                0 Release
     29e553112ab2fbae30fa0d7018ffb094f6374ee8             7373 Sources
    SHA256:
     dfe618a8e3d4b974fb17fef94a06db8979bedc9ecef64c54dd3ed195c35e3eab            10428 Packages
     e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855                0 Release
     7a0141712de8e91ea29f4909840d8652449bf66f69175322c9afe3812e72ee8b             7373 Sources

My /etc/apt/sources.list refers to this private repo thusly:

    deb file:///var/cache/pbuilder/result ./

After running apt-get update, on a host with apt 0.7.25.3, my private
repo correctly receives priority 1:

    # apt-cache policy
    Package files:
     100 /var/lib/dpkg/status
         release a=now
       1 file: ./ Packages
         release c=
     990 http://mirror.internode.on.net testing/updates/main Packages
         release v=None,o=Debian,a=testing,n=squeeze,l=Debian-Security,c=main
         origin mirror.internode.on.net
     990 http://mirror.internode.on.net testing/main Packages
         release o=Debian,a=testing,n=squeeze,l=Debian,c=main
         origin mirror.internode.on.net
     500 http://mirror.internode.on.net unstable/main Packages
         release o=Debian,a=unstable,n=sid,l=Debian,c=main
         origin mirror.internode.on.net
       1 http://mirror.internode.on.net experimental/main Packages
         release o=Debian,a=experimental,n=experimental,l=Debian,c=main
         origin mirror.internode.on.net
    Pinned packages:

On a host with apt 0.8.1 (the one I'm running reportbug on), it DOES
NOT receive priority 1; instead it get priority 500 (the default).  To
me, this suggests that apt 0.8.1 ignores NotAutomatic: yes in either
file:/// or flat repositories.

    $ apt-cache policy
    Package files:
     100 /var/lib/dpkg/status
         release a=now
     500 file:/var/cache/pbuilder/result/ ./ Packages
       1 http://mirror.internode.on.net/pub/debian/ experimental/main amd64 Packages
         release o=Debian,a=experimental,n=experimental,l=Debian,c=main
         origin mirror.internode.on.net
     500 http://mirror.internode.on.net/pub/debian/ unstable/main amd64 Packages
         release o=Debian,a=unstable,n=sid,l=Debian,c=main
         origin mirror.internode.on.net
    Pinned packages:

I also note that apt-get update 0.8.1 DOES NOT copy the Release file
into /var/lib/apt/lists, whereas 0.7.25.3 does.

-- Package-specific info:

-- apt-config dump --

APT "";
APT::Architecture "amd64";
APT::Build-Essential "";
APT::Build-Essential:: "build-essential";
APT::Install-Recommends "1";
APT::Install-Suggests "0";
APT::Acquire "";
APT::Acquire::Translation "environment";
APT::Authentication "";
APT::Authentication::TrustCDROM "true";
APT::NeverAutoRemove "";
APT::NeverAutoRemove:: "^firmware-linux.*";
APT::NeverAutoRemove:: "^linux-firmware$";
APT::NeverAutoRemove:: "^linux-image.*";
APT::NeverAutoRemove:: "^kfreebsd-image.*";
APT::NeverAutoRemove:: "^linux-restricted-modules.*";
APT::NeverAutoRemove:: "^linux-ubuntu-modules-.*";
APT::Never-MarkAuto-Sections "";
APT::Never-MarkAuto-Sections:: "metapackages";
APT::Never-MarkAuto-Sections:: "restricted/metapackages";
APT::Never-MarkAuto-Sections:: "universe/metapackages";
APT::Never-MarkAuto-Sections:: "multiverse/metapackages";
APT::Never-MarkAuto-Sections:: "oldlibs";
APT::Never-MarkAuto-Sections:: "restricted/oldlibs";
APT::Never-MarkAuto-Sections:: "universe/oldlibs";
APT::Never-MarkAuto-Sections:: "multiverse/oldlibs";
Dir "/";
Dir::State "var/lib/apt/";
Dir::State::lists "lists/";
Dir::State::cdroms "cdroms.list";
Dir::State::mirrors "mirrors/";
Dir::State::extended_states "/var/lib/apt/extended_states";
Dir::State::status "/var/lib/dpkg/status";
Dir::Cache "var/cache/apt/";
Dir::Cache::archives "archives/";
Dir::Cache::srcpkgcache "srcpkgcache.bin";
Dir::Cache::pkgcache "pkgcache.bin";
Dir::Etc "etc/apt/";
Dir::Etc::sourcelist "sources.list";
Dir::Etc::sourceparts "sources.list.d";
Dir::Etc::vendorlist "vendors.list";
Dir::Etc::vendorparts "vendors.list.d";
Dir::Etc::main "apt.conf";
Dir::Etc::netrc "auth.conf";
Dir::Etc::parts "apt.conf.d";
Dir::Etc::preferences "preferences";
Dir::Etc::preferencesparts "preferences.d";
Dir::Etc::trusted "trusted.gpg";
Dir::Etc::trustedparts "trusted.gpg.d";
Dir::Bin "";
Dir::Bin::methods "/usr/lib/apt/methods";
Dir::Bin::dpkg "/usr/bin/dpkg";
Dir::Media "";
Dir::Media::MountPath "/media/apt";
Dir::Log "var/log/apt";
Dir::Log::Terminal "term.log";
Dir::Log::History "history.log";
Dir::Ignore-Files-Silently "";
Dir::Ignore-Files-Silently:: "~$";
Dir::Ignore-Files-Silently:: "\.disabled$";
Dir::Ignore-Files-Silently:: "\.bak$";
Dir::Ignore-Files-Silently:: "\.dpkg-[a-z]+$";
DPkg "";
DPkg::Pre-Invoke "";
DPkg::Pre-Invoke:: "if [ -x /usr/sbin/etckeeper ]; then etckeeper pre-install; fi";
DPkg::Post-Invoke "";
DPkg::Post-Invoke:: "if [ -x /usr/sbin/etckeeper ]; then etckeeper post-install; fi";
DPkg::Post-Invoke:: "if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi";
DPkg::Pre-Install-Pkgs "";
DPkg::Pre-Install-Pkgs:: "/usr/sbin/apt-listbugs apt || exit 10";
DPkg::Pre-Install-Pkgs:: "/usr/bin/apt-listchanges --apt || test $? -ne 10";
DPkg::Pre-Install-Pkgs:: "/usr/sbin/dpkg-preconfigure --apt || true";
DPkg::Tools "";
DPkg::Tools::Options "";
DPkg::Tools::Options::/usr/sbin/apt-listbugs "";
DPkg::Tools::Options::/usr/sbin/apt-listbugs::Version "2";
DPkg::Tools::Options::/usr/bin/apt-listchanges "";
DPkg::Tools::Options::/usr/bin/apt-listchanges::Version "2";
RPM "";
RPM::Pre-Invoke "";
RPM::Pre-Invoke:: "if [ -x /usr/sbin/etckeeper ]; then etckeeper pre-install; fi";
RPM::Post-Invoke "";
RPM::Post-Invoke:: "if [ -x /usr/sbin/etckeeper ]; then etckeeper post-install; fi";
CommandLine "";
CommandLine::AsString "apt-config dump";

-- (no /etc/apt/preferences present) --


-- /etc/apt/sources.list --

deb http://mirror.internode.on.net/pub/debian unstable main
deb http://mirror.internode.on.net/pub/debian experimental main
deb file:///var/cache/pbuilder/result ./

deb-src http://mirror.internode.on.net/pub/debian unstable main
deb-src http://mirror.internode.on.net/pub/debian experimental main
deb-src file:///var/cache/pbuilder/result ./

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apt depends on:
ii  debian-archive-keyring  2010.08.28       GnuPG archive keys of the Debian a
ii  gnupg                   1.4.10-4         GNU privacy guard - a free PGP rep
ii  libc6                   2.11.2-3         Embedded GNU C Library: Shared lib
ii  libgcc1                 1:4.5.1-1        GCC support library
ii  libstdc++6              4.5.1-1          The GNU Standard C++ Library v3
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

apt recommends no packages.

Versions of packages apt suggests:
pn  apt-doc           <none>                 (no description available)
ii  aptitude          0.6.3-3.1              terminal-based package manager (te
ii  bzip2             1.0.5-4                high-quality block-sorting file co
ii  dpkg-dev          1.15.8.4               Debian package development tools
ii  python-apt        0.7.97.1               Python interface to libapt-pkg
ii  xz-lzma [lzma]    4.999.9beta+20100810-1 XZ-format compression utilities - 

-- no debconf information

-- debsums errors found:
debsums: changed file /usr/bin/apt-mark (from apt package)



--- End Message ---
--- Begin Message ---
Source: apt
Source-Version: 0.8.4

We believe that the bug you reported is fixed in the latest version of
apt, which is due to be installed in the Debian FTP archive:

apt-doc_0.8.4_all.deb
  to main/a/apt/apt-doc_0.8.4_all.deb
apt-transport-https_0.8.4_i386.deb
  to main/a/apt/apt-transport-https_0.8.4_i386.deb
apt-utils_0.8.4_i386.deb
  to main/a/apt/apt-utils_0.8.4_i386.deb
apt_0.8.4.dsc
  to main/a/apt/apt_0.8.4.dsc
apt_0.8.4.tar.gz
  to main/a/apt/apt_0.8.4.tar.gz
apt_0.8.4_i386.deb
  to main/a/apt/apt_0.8.4_i386.deb
libapt-pkg-dev_0.8.4_i386.deb
  to main/a/apt/libapt-pkg-dev_0.8.4_i386.deb
libapt-pkg-doc_0.8.4_all.deb
  to main/a/apt/libapt-pkg-doc_0.8.4_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 596189@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt <mvo@debian.org> (supplier of updated apt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 10 Sep 2010 20:45:15 +0200
Source: apt
Binary: apt apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https
Architecture: source all i386
Version: 0.8.4
Distribution: unstable
Urgency: low
Maintainer: APT Development Team <deity@lists.debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description: 
 apt        - Advanced front-end for dpkg
 apt-doc    - Documentation for APT
 apt-transport-https - APT https transport
 apt-utils  - APT utility programs
 libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst
 libapt-pkg-doc - Documentation for APT development
Closes: 596189
Changes: 
 apt (0.8.4) unstable; urgency=low
 .
   [ Michael vogt ]
   * ftparchive/writer.cc:
     - write out {Files,Checksum-Sha1,Checksum-Sha256} only if
       available LP: #633967. Thanks to Colin Watson
   * apt-pkg/contrib/cdromutl.cc:
     - if apt-cdrom is used on writable media (like usb-sticks), do
       not use the root directory to identify the medium (as all
       changes there change the ident id). Use the .disk directory
       instead
 .
   [ David Kalnischkies ]
   * ftparchive/writer.cc:
     - null the valid string instead of the date if Valid-Until is not set
   * apt-pkg/acquire-item.cc:
     - use also unsigned Release files again (Closes: #596189)
 .
   [ Christian Perrier ]
   * Fix missing space after dot in a message from apt-pkg
     Translations unfuzzied. Thanks to Holger Wansing.
Checksums-Sha1: 
 19ca42be46a395df782514474c0df1063a1c25e3 1282 apt_0.8.4.dsc
 e92fb9a2af56bbee821f2090fce0fccf297df1c0 3048500 apt_0.8.4.tar.gz
 2875d3978b8f953d579a125b8ec837c84bb3d40c 203362 apt-doc_0.8.4_all.deb
 ae90cf084c622ef7e1d9626b9739a37f2bc668e7 688732 libapt-pkg-doc_0.8.4_all.deb
 a115daa8b6180a36f8e94ee0e5682386e0e4a73b 2076512 apt_0.8.4_i386.deb
 613148ccfc44251050cf7799ede323e7ca790b80 148844 libapt-pkg-dev_0.8.4_i386.deb
 c7176dedd7a165fc34b61ac91ece32afd719f3c9 257848 apt-utils_0.8.4_i386.deb
 b55413f9a08891dc40f73658094cc895410b9ba0 80764 apt-transport-https_0.8.4_i386.deb
Checksums-Sha256: 
 8c88e8240aefcd0250d0ff5b64031e15b862942bf237fb7d6a4e52e63963cf67 1282 apt_0.8.4.dsc
 4c034f51ac4ccaa45f4654b7df7adb33cb7a9765e11434e3f5ab58ebf5f9dcbf 3048500 apt_0.8.4.tar.gz
 fb7f8cee90de978661075aaa8c4a61babb79650853351f34c292a252d7593cdf 203362 apt-doc_0.8.4_all.deb
 24c846bb869f10036e2b9978f61aadc70daacaf7750617fb9acc2c60ce637249 688732 libapt-pkg-doc_0.8.4_all.deb
 5bbfa863287814f019b7f8e8878a695a0033728bf19f153859d4c066df9af682 2076512 apt_0.8.4_i386.deb
 f703c63427067422256d66aa6879089d607b9d095ee6d43aece1f1469fe34650 148844 libapt-pkg-dev_0.8.4_i386.deb
 d2a6eb5a66b8730cb6cbe8a632f35053c160c68b348a9b3737da5e207681aa3f 257848 apt-utils_0.8.4_i386.deb
 7908d3962a3bb05c824c3db66c0f6d1f18edb7fec2f9a9cbed311a399061a744 80764 apt-transport-https_0.8.4_i386.deb
Files: 
 7a1ddc9fe28da87b69c6cbf1ff18c6cf 1282 admin important apt_0.8.4.dsc
 a2e2dfe58c16575dc0bb250a94b503d4 3048500 admin important apt_0.8.4.tar.gz
 dbbb2e5afb4211d46b69437d8cf46f4a 203362 doc optional apt-doc_0.8.4_all.deb
 e8910672361fde1da9f1c1cbe5a32786 688732 doc optional libapt-pkg-doc_0.8.4_all.deb
 35210ce3e2906a4df38fc8e09c85e95c 2076512 admin important apt_0.8.4_i386.deb
 1ea3664d5c987c348a31da55aecb5710 148844 libdevel optional libapt-pkg-dev_0.8.4_i386.deb
 8643710cb8f0631e2c2fca91c9300d37 257848 admin important apt-utils_0.8.4_i386.deb
 2b70c5aac68f4b770cd3214f5af70226 80764 admin optional apt-transport-https_0.8.4_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkyKhWMACgkQliSD4VZixzShtgCfcpBiIrwqMbIAJjmjDQIoBvyK
MsAAn3AwIibyNV3WX0iFtO5t1WvGc3yR
=b80p
-----END PGP SIGNATURE-----



--- End Message ---

Reply to: