Colin, thank you very much for your work on this issue and I'm currently
testing https installs in our environment now. I had a question on how
to properly set the installer to use a https mirror. The installer PXE
configuration line I'm using is:

KERNEL pxelinux.cfg/kernel
APPEND append initrd=pxelinux.cfg/initrd.img vga=normal fb=false auto=true 
priority=critical auto-install/enable=true 
debian-installer/allow_unauthenticated_ssl=true 
url=https://buildhost/trusty/preseed.cfg.pl 
media=https://buildhost/Ubuntu-14.04-amd64/

These are the stock kernel and initrd available for Ubuntu 14.04, and
it's hitting a nightly sync'd mirror that's available on
https://buildhost/Ubuntu-14.04-amd64/. This site has a self-signed
certificate, which debian-installer/allow_unauthenticated_ssl=true
allows us to download and use the preseed.cfg.pl over https.

The base-install of packages still uses http however, which I can see by
looking at the web server logs. I've tried the following based off of
your Debian list emails (https://lists.debian.org/debian-
boot/2014/02/msg00084.html):

1. Adding mirror/protocol=https in the append line, this results in the install 
prompting for a mirror
2. Adding debian-installer/mirror/protocol=https to the append line, this 
installs, but still goes over http
3. Adding d-i mirror/protocol string https in the preseed file, this has the 
same result as 1

I tried digging through the documentation for base-installer,
debootstrap, and debian-installer, but other than the emails on the
Debian list and change log entries, I couldn't find the exact syntax or
place to tell the installer to use https for our custom mirror.

This is possible, and if so could you provide the needed syntax in order
for packages to go over https as well? Thank you.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1135163

Title:
  d-i can't install against an https mirror

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt-setup/+bug/1135163/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to