>> Erm, this bug is not related to APT HTTP method.
>
> This is about the protocol used by apt and other front-ends to
> retrieve packages over HTTP, no?
>
> Is your point that the same problem applies to other protocols like
> FTP, too?
No-no, I just didn't realize you want discuss this question
Hi APT team,
As Eugene noticed, the use of round-robin DNS between out-of-sync
mirrors, by ftp.us.debian.org for example, makes it hard to reliably
fetch and verify the Debian archive's index files. Despite having
similar addresses Release.gpg, Release, and Packages can end up being
fetched from d
Jonathan Nieder wrote:
> Should apt’s HTTP method be using IP addresses in its requests
> instead? Would this be safe, or do some mirrors use virtual hosts?
Erm, this bug is not related to APT HTTP method. You probably want to discuss
this matter with APT maintainers.
--
Eugene V. Lyubimkin aka
Eugene V. Lyubimkin wrote:
> Is there some RFC spec about 'use the same IP if you need
> consistence?' or like?
I was too focused on DNS before, and there is no problem there. Of
course DNS does exactly what we want it to here.
However, a case could be made that the inconsistency between APT
mi
package cupt libcupt-perl mirrors
reassign 582352 mirrors
retitle 582352 different mirrors under single DNS should have equal content
affects 582352 + libcupt-perl
thanks
Jonathan Nieder wrote:
> Eugene V. Lyubimkin wrote:
>
>> Khm. I would argue that it's not a Cupt problem and the other side pr
Eugene V. Lyubimkin wrote:
> Khm. I would argue that it's not a Cupt problem and the other side providing
> round-robin DNS should ensure the equality of files.
Eh, it might be nice for them to do that, but we would have to either
change them or live with what we have.
In other words, maybe this
Jonathan Nieder wrote:
> So it looks like the Release is temporarily “out of sync” with other files.
Yup.
> Meanwhile, I have never run into this problem with apt-get.
>
> ... ah, okay, maybe this is it: ftp.us.debian.org uses round-robin DNS
> to switch between multiple mirrors. APT’s HTTP meth
Eugene V. Lyubimkin wrote:
> Firstly, I would like to confirm that even in that case, the whole update
> thing is run fully, because the next lines should indicate downloading
> Packages.gz for the same entry and succeed (or, hm, possibly, fail too).
> Is it the case?
Oh! Yes, that’s right; it s
Jonathan Nieder wrote:
> Package: cupt
> Version: 1.5.11
>=20
> Every once in a while (mirror sync-related?), cupt update is failing:
>=20
> # cupt update
> [...]
> Get:6 http://ftp.us.debian.org/debian experimental Release.gpg=
=20
> Get:7 http://ftp.us.debian.org/debian e
Package: cupt
Version: 1.5.11
Every once in a while (mirror sync-related?), cupt update is failing:
# cupt update
[...]
Get:6 http://ftp.us.debian.org/debian experimental Release.gpg
Get:7 http://ftp.us.debian.org/debian experimental/main Packages.bz2 [257KiB]
10 matches
Mail list logo