Package: dgit
Version: 10.7
Severity: important
Hi,
It's suggested (in e.g. dgit-user(7)) to clone a combined ,-security
suite. But this does not work (transcript 0 below), with an error about
missing Release file:
E: The repository 'http://security.debian.org/debian-security
bookworm/updates Release' does not have a Release file.
I think this is because the suit map/rmap for debian-security are
wrong:
dgit: 'dgit-distro.debian-security.aptget-suite-map' =>
's#-security$#/updates#',
dgit: 'dgit-distro.debian-security.aptget-suite-rmap' => 's#$#-security#',
Debian changed its security suite names starting with bullseye from
<suite>/updates to <suite>-security:
https://lists.debian.org/debian-devel-announce/2019/07/msg00004.html
If I disable both mappings I can then clone pcre2 stable,-security
with a warning that pcre2 can't be found in the (security) archive
which I think is correct. That was done thus:
dgit -cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone pcre2
stable,-security
Transcript 1 below contains the full output of that command.
By way of checking that this works where there has been a security
update, I cloned bind9 stable,-security and checked that left me at
1:9.18.16-1~deb12u1 (the security release) - see Transcript 2.
Likewise, dgit merge/pull work with the map & rmap unset.
The difficulty is that there is AFAICT no version-knowledge in these
map/rmap entries - one would prefer to apply the map for suites <
bullseye and not for >=bullseye
IMO, this would be worth a backport to at least stable when fixed -
it's a bit sad that this functionality is broken since it's quite
useful for end-users of dgit and helps make sure they get security
updates.
Thanks,
Matthew
*** BEGIN TRANSCRIPT 0 ***
matthew@aragorn:~/junk$ dgit clone pcre2 stable,-security
fetching stable...
canonical suite name for stable is bookworm
fetching existing git history
last upload to archive: specified git info (debian)
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 2341k 100 2341k 0 0 2322k 0 0:00:01 0:00:01 --:--:--
2324k
HEAD is now at be53c99 Changelog for 10.42-1
dgit [stable] ok: ready for work in pcre2
fetching bookworm-security...
Ign:1 http://security.debian.org/debian-security bookworm/updates InRelease
Err:2 http://security.debian.org/debian-security bookworm/updates Release
404 Not Found [IP: 2a04:4e42:82::644 80]
Reading package lists... Done
E: The repository 'http://security.debian.org/debian-security
bookworm/updates Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is
therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user
configuration details.
dgit [bookworm-security]: failed command: apt-get -c
'/home/matthew/.cache/dgit/aptget/apt.conf#debian' update
dgit [bookworm-security]: error: subprocess failed with error exit
status 100
dgit: error: failed to obtain bookworm-security: failed with error exit
status 255
*** END TRANSCRIPT 0 ***
*** BEGIN TRANSCRIPT 1 ***
matthew@aragorn:~/junk$ dgit
-cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone pcre2
stable,-security
fetching stable...
canonical suite name for stable is bookworm
fetching existing git history
last upload to archive: specified git info (debian)
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 2341k 100 2341k 0 0 2322k 0 0:00:01 0:00:01 --:--:--
2324k
HEAD is now at be53c99 Changelog for 10.42-1
dgit [stable] ok: ready for work in pcre2
fetching bookworm-security...
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Reading package lists... Done
canonical suite name is bookworm-security
W: Unable to locate package pcre2
no version available from the archive
dgit [bookworm-security]: source package pcre2 does not exist in suite
bookworm-security
calculated combined tracking suite bookworm,-security
HEAD is now at be53c99 Changelog for 10.42-1
dgit ok: ready for work in pcre2
*** END TRANSCRIPT 1 ***
*** BEGIN TRANSCRIPT 2 ***
matthew@aragorn:~/junk$ dgit
-cdgit-distro.debian-security.aptget-suite-map=''
-cdgit-distro.debian-security.aptget-suite-rmap='' clone bind9
stable,-security
fetching stable...
canonical suite name for stable is bookworm
starting new git history
last upload to archive: NO git hash
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 5334k 100 5334k 0 0 2352k 0 0:00:02 0:00:02 --:--:--
2352k
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 833 100 833 0 0 23809 0 --:--:-- --:--:-- --:--:--
24500
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 60492 100 60492 0 0 1038k 0 --:--:-- --:--:-- --:--:--
1054k
dpkg-source: info: extracting bind9 in bind9-9.18.16
dpkg-source: info: unpacking bind9_9.18.16.orig.tar.xz
dpkg-source: info: unpacking bind9_9.18.16-1~deb12u1.debian.tar.xz
synthesised git commit from .dsc 1:9.18.16-1~deb12u1
HEAD is now at 05e430c Add-support-for-reporting-status-via-sd_notify
dgit [stable] ok: ready for work in bind9
fetching bookworm-security...
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Reading package lists... Done
canonical suite name is bookworm-security
Reading package lists... Done
NOTICE: 'bind9' packaging is maintained in the 'Git' version control
system at:
https://salsa.debian.org/dns-team/bind9.git -b debian/9.18
Please use:
git clone https://salsa.debian.org/dns-team/bind9.git -b debian/9.18
to retrieve the latest (possibly unreleased) updates to the package.
Need to get 5,527 kB of source archives.
Get:1 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (dsc) [3,325 B]
Get:2 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (tar) [5,462 kB]
Get:3 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (asc) [833 B]
Get:4 http://security.debian.org/debian-security bookworm-security/main
bind9 1:9.18.16-1~deb12u1 (diff) [60.5 kB]
Fetched 5,527 kB in 2s (2,387 kB/s)
Download complete and in download only mode
last upload to archive: NO git hash
using existing bind9_9.18.16.orig.tar.xz
using existing bind9_9.18.16.orig.tar.xz.asc
using existing bind9_9.18.16-1~deb12u1.debian.tar.xz
dpkg-source: info: extracting bind9 in bind9-9.18.16
dpkg-source: info: unpacking bind9_9.18.16.orig.tar.xz
dpkg-source: info: unpacking bind9_9.18.16-1~deb12u1.debian.tar.xz
synthesised git commit from .dsc 1:9.18.16-1~deb12u1
dgit [bookworm-security] ok: fetched into
refs/remotes/dgit/dgit/bookworm-security
calculated combined tracking suite bookworm,-security
HEAD is now at 05e430c Add-support-for-reporting-status-via-sd_notify
dgit ok: ready for work in bind9
matthew@aragorn:~/junk$ cd bind9 ; dpkg-parsechangelog -S version
1:9.18.16-1~deb12u1
*** END TRANSCRIPT 2 ***
-- System Information:
Debian Release: 12.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-3-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages dgit depends on:
ii apt 2.6.1
ii ca-certificates 20230311
ii coreutils 9.1-1
ii curl 7.88.1-10+deb12u1
ii devscripts 2.23.4
ii dpkg-dev 1.21.22
ii dput 1.1.3
ii git [git-core] 1:2.39.2-1.1
ii git-buildpackage 0.9.30
ii git-core 1:2.11.0-3+deb9u7
ii libdpkg-perl 1.21.22
ii libjson-perl 4.10000-1
ii liblist-moreutils-perl 0.430-2
ii liblocale-gettext-perl 1.07-5
ii libtext-csv-perl 2.02-2
ii libtext-glob-perl 0.11-3
ii libtext-iconv-perl 1.7-8
ii libwww-curl-perl 4.17-10
ii perl [libdigest-sha-perl] 5.36.0-7
Versions of packages dgit recommends:
ii distro-info-data 0.58
ii liburi-perl 5.17-1
ii openssh-client [ssh-client] 1:9.2p1-2
Versions of packages dgit suggests:
ii cowbuilder 0.89
ii pbuilder 0.231
ii sbuild 0.85.0
-- no debconf information
