Your message dated Tue, 22 Aug 2023 18:49:22 +0000
with message-id <e1qywro-00djhn...@fasolo.debian.org>
and subject line Bug#1050179: fixed in dgit 11.2
has caused the Debian Bug report #1050179,
regarding dgit: unable to clone -security suites (?since bullseye)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1050179: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1050179
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dgit
Version: 10.7
Severity: important
Hi,
It's suggested (in e.g. dgit-user(7)) to clone a combined ,-security
suite. But this does not work (transcript 0 below), with an error about
missing Release file:
E: The repository 'http://security.debian.org/debian-security
bookworm/updates Release' does not have a Release file.
I think this is because the suit map/rmap for debian-security are
wrong:
dgit: 'dgit-distro.debian-security.aptget-suite-map' =>
's#-security$#/updates#',
dgit: 'dgit-distro.debian-security.aptget-suite-rmap' => 's#$#-security#',
Debian changed its security suite names starting with bullseye from
<suite>/updates to <suite>-security:
https://lists.debian.org/debian-devel-announce/2019/07/msg00004.html
If I disable both mappings I can then clone pcre2 stable,-security
with a warning that pcre2 can't be found in the (security) archive
which I think is correct. That was done thus:
dgit -cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone pcre2
stable,-security
Transcript 1 below contains the full output of that command.
By way of checking that this works where there has been a security
update, I cloned bind9 stable,-security and checked that left me at
1:9.18.16-1~deb12u1 (the security release) - see Transcript 2.
Likewise, dgit merge/pull work with the map & rmap unset.
The difficulty is that there is AFAICT no version-knowledge in these
map/rmap entries - one would prefer to apply the map for suites <
bullseye and not for >=bullseye
IMO, this would be worth a backport to at least stable when fixed -
it's a bit sad that this functionality is broken since it's quite
useful for end-users of dgit and helps make sure they get security
updates.
Thanks,
Matthew
*** BEGIN TRANSCRIPT 0 ***
matthew@aragorn:~/junk$ dgit clone pcre2 stable,-security
fetching stable...
canonical suite name for stable is bookworm
fetching existing git history
last upload to archive: specified git info (debian)
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 2341k 100 2341k 0 0 2322k 0 0:00:01 0:00:01 --:--:--
2324k
HEAD is now at be53c99 Changelog for 10.42-1
dgit [stable] ok: ready for work in pcre2
fetching bookworm-security...
Ign:1 http://security.debian.org/debian-security bookworm/updates InRelease
Err:2 http://security.debian.org/debian-security bookworm/updates Release
404 Not Found [IP: 2a04:4e42:82::644 80]
Reading package lists... Done
E: The repository 'http://security.debian.org/debian-security
bookworm/updates Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user
configuration details.
dgit [bookworm-security]: failed command: apt-get -c
'/home/matthew/.cache/dgit/aptget/apt.conf#debian' update
dgit [bookworm-security]: error: subprocess failed with error exit
status 100
dgit: error: failed to obtain bookworm-security: failed with error exit
status 255
*** END TRANSCRIPT 0 ***
*** BEGIN TRANSCRIPT 1 ***
matthew@aragorn:~/junk$ dgit
-cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone pcre2
stable,-security
fetching stable...
canonical suite name for stable is bookworm
fetching existing git history
last upload to archive: specified git info (debian)
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 2341k 100 2341k 0 0 2322k 0 0:00:01 0:00:01 --:--:--
2324k
HEAD is now at be53c99 Changelog for 10.42-1
dgit [stable] ok: ready for work in pcre2
fetching bookworm-security...
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Reading package lists... Done
canonical suite name is bookworm-security
W: Unable to locate package pcre2
no version available from the archive
dgit [bookworm-security]: source package pcre2 does not exist in suite
bookworm-security
calculated combined tracking suite bookworm,-security
HEAD is now at be53c99 Changelog for 10.42-1
dgit ok: ready for work in pcre2
*** END TRANSCRIPT 1 ***
*** BEGIN TRANSCRIPT 2 ***
matthew@aragorn:~/junk$ dgit
-cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone bind9
stable,-security
fetching stable...
canonical suite name for stable is bookworm
starting new git history
last upload to archive: NO git hash
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 5334k 100 5334k 0 0 2352k 0 0:00:02 0:00:02 --:--:--
2352k
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 833 100 833 0 0 23809 0 --:--:-- --:--:-- --:--:--
24500
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 60492 100 60492 0 0 1038k 0 --:--:-- --:--:-- --:--:--
1054k
dpkg-source: info: extracting bind9 in bind9-9.18.16
dpkg-source: info: unpacking bind9_9.18.16.orig.tar.xz
dpkg-source: info: unpacking bind9_9.18.16-1~deb12u1.debian.tar.xz
synthesised git commit from .dsc 1:9.18.16-1~deb12u1
HEAD is now at 05e430c Add-support-for-reporting-status-via-sd_notify
dgit [stable] ok: ready for work in bind9
fetching bookworm-security...
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Reading package lists... Done
canonical suite name is bookworm-security
Reading package lists... Done
NOTICE: 'bind9' packaging is maintained in the 'Git' version control
system at:
https://salsa.debian.org/dns-team/bind9.git -b debian/9.18
Please use:
git clone https://salsa.debian.org/dns-team/bind9.git -b debian/9.18
to retrieve the latest (possibly unreleased) updates to the package.
Need to get 5,527 kB of source archives.
Get:1 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (dsc) [3,325 B]
Get:2 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (tar) [5,462 kB]
Get:3 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (asc) [833 B]
Get:4 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (diff) [60.5 kB]
Fetched 5,527 kB in 2s (2,387 kB/s)
Download complete and in download only mode
last upload to archive: NO git hash
using existing bind9_9.18.16.orig.tar.xz
using existing bind9_9.18.16.orig.tar.xz.asc
using existing bind9_9.18.16-1~deb12u1.debian.tar.xz
dpkg-source: info: extracting bind9 in bind9-9.18.16
dpkg-source: info: unpacking bind9_9.18.16.orig.tar.xz
dpkg-source: info: unpacking bind9_9.18.16-1~deb12u1.debian.tar.xz
synthesised git commit from .dsc 1:9.18.16-1~deb12u1
dgit [bookworm-security] ok: fetched into
refs/remotes/dgit/dgit/bookworm-security
calculated combined tracking suite bookworm,-security
HEAD is now at 05e430c Add-support-for-reporting-status-via-sd_notify
dgit ok: ready for work in bind9
matthew@aragorn:~/junk$ cd bind9 ; dpkg-parsechangelog -S version
1:9.18.16-1~deb12u1
*** END TRANSCRIPT 2 ***
-- System Information:
Debian Release: 12.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-3-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages dgit depends on:
ii apt 2.6.1
ii ca-certificates 20230311
ii coreutils 9.1-1
ii curl 7.88.1-10+deb12u1
ii devscripts 2.23.4
ii dpkg-dev 1.21.22
ii dput 1.1.3
ii git [git-core] 1:2.39.2-1.1
ii git-buildpackage 0.9.30
ii git-core 1:2.11.0-3+deb9u7
ii libdpkg-perl 1.21.22
ii libjson-perl 4.10000-1
ii liblist-moreutils-perl 0.430-2
ii liblocale-gettext-perl 1.07-5
ii libtext-csv-perl 2.02-2
ii libtext-glob-perl 0.11-3
ii libtext-iconv-perl 1.7-8
ii libwww-curl-perl 4.17-10
ii perl [libdigest-sha-perl] 5.36.0-7
Versions of packages dgit recommends:
ii distro-info-data 0.58
ii liburi-perl 5.17-1
ii openssh-client [ssh-client] 1:9.2p1-2
Versions of packages dgit suggests:
ii cowbuilder 0.89
ii pbuilder 0.231
ii sbuild 0.85.0
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: dgit
Source-Version: 11.2
Done: Ian Jackson <ijack...@chiark.greenend.org.uk>
We believe that the bug you reported is fixed in the latest version of
dgit, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1050...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ian Jackson <ijack...@chiark.greenend.org.uk> (supplier of updated dgit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 22 Aug 2023 19:25:55 +0100
Source: dgit
Architecture: source
Version: 11.2
Distribution: unstable
Urgency: high
Maintainer: Ian Jackson <ijack...@chiark.greenend.org.uk>
Changed-By: Ian Jackson <ijack...@chiark.greenend.org.uk>
Closes: 1050179
Changes:
dgit (11.2) unstable; urgency=high
.
* Use the old /updates security map only for buster. Fixes fetching from
suites ,-security after buster. [Matthew Vernon] Closes: #1050179.
Checksums-Sha1:
4fe9708853e169c943349bf2ece6345b611e9932 1856 dgit_11.2.dsc
6bcf0eca39187c056a8374576edbb93d98723478 681301 dgit_11.2.tar.gz
Checksums-Sha256:
2cd69909ec835937c6ea9906836529d332dc1b2d41ce3a58c1cfbfb5fa093dd7 1856
dgit_11.2.dsc
3df38323980b3ac9c067c629b473789e63f12eb5ad9e38b0f67ee770fa945e6c 681301
dgit_11.2.tar.gz
Files:
2a31ee3536aea244ac005ad4c3f77f50 1856 devel optional dgit_11.2.dsc
fe30b222bf4da912727b898b6e55e2b7 681301 devel optional dgit_11.2.tar.gz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAmTlAIkACgkQ4+M5I0i1
DTnp9ggAxPQk8NwHpKJFzYmrf0zQFhFPx5QjqAffpJ1+1yxCzYiZn/v5Y1PIxGAd
LLVsJwcD8mSQ7D4io6WlZtRZX16HZ1zhrImM75GTLscBc+T4pBonnAqQmBLQGb2Y
zqkasazWQ3fXQnvQ8ZFQ2bYzL9EBXKqOIzuWzwhUDOr7EDbFqNZEs0wixGct2KRk
US+SSgK9JquN52d2wESfyD6ab1nOotiIkcJ6K3dbreprlJHNtptDyQMdar6T+WkC
XwphPz8FpwULcdMG8jcQgBeTgegHq3yjHIAtKbcr+9XW+w7UsTbs36i4uEIX5L/+
EIg1eo2ZUYR2mSPzsL1lFxP4QL9hBg==
=2EKP
-----END PGP SIGNATURE-----
--- End Message ---
