* [OSSTEST PATCH 1/3] production-config: Rewind buster armhf snapshot to 2021-01-124
@ 2021-02-10 17:36 Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 2/3] production-config: Update d-i version to older Debian snapshot Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 3/3] Disable updates for ssapshot.debian.org Ian Jackson
0 siblings, 2 replies; 3+ messages in thread
From: Ian Jackson @ 2021-02-10 17:36 UTC (permalink / raw)
To: xen-devel; +Cc: Ian Jackson, Julien Grall, Stefano Stabellini
It seems that XXXX
CC: Julien Grall <julien@xen.org>
CC: Stefano Stabellini <sstabellini@kernel.org>
Signed-off-by: Ian Jackson <iwj@xenproject.org>
---
production-config | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/production-config b/production-config
index f783af3c..d89257e5 100644
--- a/production-config
+++ b/production-config
@@ -93,7 +93,7 @@ TftpDiVersion_jessie 2018-06-26
TftpDiVersion_stretch 2020-09-24
TftpDiVersion_buster 2021-02-09
-DebianMirror_buster_armhf http://snapshot.debian.org/archive/debian/20210201T024125Z/
+DebianMirror_buster_armhf http://snapshot.debian.org/archive/debian/20210124T203726Z/
DebianSnapshotBackports_jessie http://snapshot.debian.org/archive/debian/20190206T211314Z/
--
2.20.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [OSSTEST PATCH 2/3] production-config: Update d-i version to older Debian snapshot
2021-02-10 17:36 [OSSTEST PATCH 1/3] production-config: Rewind buster armhf snapshot to 2021-01-124 Ian Jackson
@ 2021-02-10 17:36 ` Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 3/3] Disable updates for ssapshot.debian.org Ian Jackson
1 sibling, 0 replies; 3+ messages in thread
From: Ian Jackson @ 2021-02-10 17:36 UTC (permalink / raw)
To: xen-devel; +Cc: Ian Jackson
Signed-off-by: Ian Jackson <iwj@xenproject.org>
---
production-config | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/production-config b/production-config
index d89257e5..81582ec0 100644
--- a/production-config
+++ b/production-config
@@ -91,7 +91,7 @@ TftpNetbootGroup osstest
TftpDiVersion_wheezy 2016-06-08
TftpDiVersion_jessie 2018-06-26
TftpDiVersion_stretch 2020-09-24
-TftpDiVersion_buster 2021-02-09
+TftpDiVersion_buster 2021-02-10
DebianMirror_buster_armhf http://snapshot.debian.org/archive/debian/20210124T203726Z/
--
2.20.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
* [OSSTEST PATCH 3/3] Disable updates for ssapshot.debian.org
2021-02-10 17:36 [OSSTEST PATCH 1/3] production-config: Rewind buster armhf snapshot to 2021-01-124 Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 2/3] production-config: Update d-i version to older Debian snapshot Ian Jackson
@ 2021-02-10 17:36 ` Ian Jackson
1 sibling, 0 replies; 3+ messages in thread
From: Ian Jackson @ 2021-02-10 17:36 UTC (permalink / raw)
To: xen-devel; +Cc: Ian Jackson
security updates are a separate apt source.
The point of using snapshot is to avoid pulling in uncontrolled
updates, so we need to disable security updates.
The non-security SUITE-updates are disabled by this too. But
everything is on fire and I don't want another iteration while I
figure out the proper syntax for disabling only the security updates.
Signed-off-by: Ian Jackson <iwj@xenproject.org>
---
Osstest/Debian.pm | 15 ++++++++++++---
1 file changed, 12 insertions(+), 3 deletions(-)
diff --git a/Osstest/Debian.pm b/Osstest/Debian.pm
index d6e0b59d..ded7cdfc 100644
--- a/Osstest/Debian.pm
+++ b/Osstest/Debian.pm
@@ -972,12 +972,19 @@ END
preseed_hook_command($ho, 'late_command', $sfx,
debian_dhcp_rofs_fix($ho, '/target'));
+ my $disable_security_updates = 0;
+
my $murl = debian_mirror_url($ho);
if ($murl =~ m/$c{DebianMirrorAllowExpiredReleaseRegexp}/) {
# Inspired by
# https://stackoverflow.com/questions/25039317/is-there-any-setting-in-the-preseed-file-to-ignore-the-release-valid-until-opt/51396935#51396935
# In some sense a workaround for the lack of a better way,
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771699
+ $disable_security_updates = 1;
+ # ^ this disables normal -updates too. That's not desirable
+ # but I don't want to mess with this now. Hopefully it can
+ # be improved later.
+
preseed_hook_installscript($ho, $sfx,
'/usr/lib/apt-setup/generators/', '02IgnoreValidUntil', <<'END');
#!/bin/sh
@@ -1075,12 +1082,14 @@ END
d-i mirror/suite string $suite
END
+ $disable_security_updates = 1 if $suite =~ m/jessie/;
+ # security.d.o CDN seems unreliable right now
+ # and jessie-updates is no more, so disable both for jessie
+
$preseed .= <<'END'
d-i apt-setup/services-select multiselect
END
- if $suite =~ m/jessie/;
- # security.d.o CDN seems unreliable right now
- # and jessie-updates is no more
+ if $disable_security_updates;
if (grep { $r{$_} } runvar_glob('*_dmrestrict') and
$suite =~ m/stretch/) {
--
2.20.1
^ permalink raw reply related [flat|nested] 3+ messages in thread
end of thread, other threads:[~2021-02-10 17:36 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-02-10 17:36 [OSSTEST PATCH 1/3] production-config: Rewind buster armhf snapshot to 2021-01-124 Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 2/3] production-config: Update d-i version to older Debian snapshot Ian Jackson
2021-02-10 17:36 ` [OSSTEST PATCH 3/3] Disable updates for ssapshot.debian.org Ian Jackson
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).