Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian....@packages.debian.org
Usertags: pu
X-Debbugs-Cc: debian-edu-con...@packages.debian.org
Control: affects -1 + src:debian-edu-config
Please accept a new upstream release of debian-edu-config to Debian
bookworm. This finalizes the Debian Edu 12 release, so that we should be
good to go to announce the first stable release of Debian Edu 12.
[ Reason ]
While testing Debian Edu from the Debian 12.4 point release, several
issues were discovered that needed amending (see below in the [ Changes ]
section).
[ Impact ]
Debian Edu 12 release won't happen via Debian 12.5 point release.
[ Tests ]
Manually, on customer systems via preview builds and deployment via
customer-driver APT repository.
[ Risks ]
None for Debian users, minimal for Debian Edu users.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
+debian-edu-config (2.12.44) unstable; urgency=medium
+
+ * share/debian-edu-config/tools/wpad-extract:
+ + Update IP of www.debian.org.
-> debian-edu-config ships a script that contains the hard-code IP of
www.debian.org. Assuming this never changes. (But it did "recently").
+ + Don't use the proxy for accessing wpad.
This avoids a DHCP client hook failure and loss of the active DHCP lease
after a while (~ 1h).
+ * share/debian-edu-config/tools/fetch-rootca-cert:
+ + Don't use the proxy for accessing wwww.intern.
This avoids a DHCP client hook failure and loss of the active DHCP lease
after a while (~ 1h).
+ * debian/debian-edu-config.maintscript:
+ + Remove stray /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert. Should have
+ been removed with 2.12.34 already. (Closes: #1061560).
-> conffile was been removed in 2.12.34 but we never cleaned up during
upgrades from earlier versions.
+ + Use <prior-version> version numbers as recommended on the
+ dpkg-maintscript-helper man page (the current upload version suffixed
+ by '~').
-> Nearly a cosmetic adjustments. Functionality improved for people
investigating old packages and conffile removals.
+ -- Mike Gabriel <sunwea...@debian.org> Wed, 31 Jan 2024 15:07:09 +0100
+
+debian-edu-config (2.12.43) unstable; urgency=medium
+
+ [ Holger Levsen ]
+ * d/changelog:
+ - add missing Closes: for #1021688, #1024033 and #1039461 in previous
+ entries to ease future debugging.
+ - fix too long line in previous entry.
-> d/changelog amendments only
+ -- Holger Levsen <hol...@debian.org> Mon, 25 Dec 2023 11:56:02 +0100
+
+debian-edu-config (2.12.42) unstable; urgency=medium
+
+ * share/debian-edu-config/tools/update-proxy-from-wpad: Ignore missing dconf
+ command. (Closes: #1057777). It might be missing on main-server
+ installations where no desktop environment is installed.
-> don't let DHCP client hook (and Debian Installer edu profile
configuration) fail on systems that are installed without a desktop
environment.
[ Other info ]
None.
diff -Nru debian-edu-config-2.12.41~deb12u1/debian/changelog
debian-edu-config-2.12.44~deb12u1/debian/changelog
--- debian-edu-config-2.12.41~deb12u1/debian/changelog 2023-12-03
08:45:42.000000000 +0100
+++ debian-edu-config-2.12.44~deb12u1/debian/changelog 2024-02-01
10:52:12.000000000 +0100
@@ -1,3 +1,43 @@
+debian-edu-config (2.12.44~deb12u1) bookworm; urgency=medium
+
+ * Upload to bookworm.
+
+ -- Mike Gabriel <sunwea...@debian.org> Thu, 01 Feb 2024 10:52:12 +0100
+
+debian-edu-config (2.12.44) unstable; urgency=medium
+
+ * share/debian-edu-config/tools/wpad-extract:
+ + Update IP of www.debian.org.
+ + Don't use the proxy for accessing wpad.
+ * share/debian-edu-config/tools/fetch-rootca-cert:
+ + Don't use the proxy for accessing wwww.intern.
+ * debian/debian-edu-config.maintscript:
+ + Remove stray /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert. Should have
+ been removed with 2.12.34 already. (Closes: #1061560).
+ + Use <prior-version> version numbers as recommended on the
+ dpkg-maintscript-helper man page (the current upload version suffixed
+ by '~').
+
+ -- Mike Gabriel <sunwea...@debian.org> Wed, 31 Jan 2024 15:07:09 +0100
+
+debian-edu-config (2.12.43) unstable; urgency=medium
+
+ [ Holger Levsen ]
+ * d/changelog:
+ - add missing Closes: for #1021688, #1024033 and #1039461 in previous
+ entries to ease future debugging.
+ - fix too long line in previous entry.
+
+ -- Holger Levsen <hol...@debian.org> Mon, 25 Dec 2023 11:56:02 +0100
+
+debian-edu-config (2.12.42) unstable; urgency=medium
+
+ * share/debian-edu-config/tools/update-proxy-from-wpad: Ignore missing dconf
+ command. (Closes: #1057777). It might be missing on main-server
+ installations where no desktop environment is installed.
+
+ -- Mike Gabriel <sunwea...@debian.org> Sat, 09 Dec 2023 08:15:45 +0100
+
debian-edu-config (2.12.41~deb12u1) bookworm; urgency=medium
* Upload to bookworm.
@@ -238,6 +278,12 @@
configuration in /etc/icingaweb2/modules/monitoring/. Instead of adjusting
single files and directories, enforce sensible permissions on all
directories
and configuration files. Closes: #1039475.
+ * cf3/cf.samba: fix samba usershares permissions:
+ Setting the group ownership of /var/lib/samba/usershares/ to "students"
fails
+ during the installation because this group is defined in LDAP and the
slapd is
+ not running at the time the samba promise bundle is evaluated. Thus use
the
+ numeric GID instead. The group is defined in
+ ldap-bootstrap/{samba.ldif,gosa.ldif}. Closes: #1039461.
-- Mike Gabriel <sunwea...@debian.org> Sat, 01 Jul 2023 05:41:56 +0200
@@ -315,7 +361,7 @@
[ Wolfgang Schweer ]
* sbin/debian-edu-ltsp-install: Install firefox-esr l10n package
conditionally
- in case the minidesktop thin client type has been chosen.
+ in case the minidesktop thin client type has been chosen. Closes: #1024033.
-- Holger Levsen <hol...@debian.org> Sun, 13 Nov 2022 14:57:03 +0100
@@ -342,7 +388,7 @@
desktop environment is used during an installation including the Main
server
or LTSP server profile. (In these cases, ConnMan as the preferred LXQt
network manager doesn't work well with the Debian Edu specific way network
- interfaces are set up.)
+ interfaces are set up.) Closes: #1021688.
-- Holger Levsen <hol...@debian.org> Mon, 17 Oct 2022 21:56:43 +0200
diff -Nru
debian-edu-config-2.12.41~deb12u1/debian/debian-edu-config.maintscript
debian-edu-config-2.12.44~deb12u1/debian/debian-edu-config.maintscript
--- debian-edu-config-2.12.41~deb12u1/debian/debian-edu-config.maintscript
2023-09-27 22:34:54.000000000 +0200
+++ debian-edu-config-2.12.44~deb12u1/debian/debian-edu-config.maintscript
2024-02-01 10:51:20.000000000 +0100
@@ -1,5 +1,6 @@
-rm_conffile /share/debian-edu-config/debian-edu.addmachine.template 2.12.5
-rm_conffile /share/debian-edu-config/debian-edu.ldapscripts.passwd 2.12.5
-rm_conffile /etc/cfengine3/debian-edu/cf.ldapscripts 2.12.5
-dir_to_symlink /etc/debian-edu/host-keytabs /var/lib/debian-edu/host-keytabs
2.12.17
-rm_conffile /etc/init.d/fetch-ldap-cert 2.12.33
+rm_conffile /share/debian-edu-config/debian-edu.addmachine.template 2.12.6~
+rm_conffile /share/debian-edu-config/debian-edu.ldapscripts.passwd 2.12.6~
+rm_conffile /etc/cfengine3/debian-edu/cf.ldapscripts 2.12.6~
+dir_to_symlink /etc/debian-edu/host-keytabs /var/lib/debian-edu/host-keytabs
2.12.18~
+rm_conffile /etc/init.d/fetch-ldap-cert 2.12.34~
+rm_conffile /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert 2.12.44~
diff -Nru
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/fetch-rootca-cert
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/fetch-rootca-cert
---
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/fetch-rootca-cert
2023-09-27 22:34:54.000000000 +0200
+++
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/fetch-rootca-cert
2024-02-01 10:51:20.000000000 +0100
@@ -10,6 +10,12 @@
. /etc/debian-edu/config
fi
+# Don't use the proxy for accesing www.intern
+if [ -n "${no_proxy}" ]; then
+ no_proxy="${no_proxy},"
+fi
+export no_proxy="${no_proxy}www.intern"
+
BUNDLECRT=/etc/ssl/certs/debian-edu-bundle.crt
ROOTCACRT=/etc/ssl/certs/Debian-Edu_rootCA.crt
LOCALCACRT=/usr/local/share/ca-certificates/Debian-Edu_rootCA.crt
diff -Nru
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/update-proxy-from-wpad
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/update-proxy-from-wpad
---
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/update-proxy-from-wpad
2023-09-27 22:34:54.000000000 +0200
+++
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/update-proxy-from-wpad
2024-02-01 10:51:20.000000000 +0100
@@ -97,6 +97,13 @@
}
update_dconf() {
+ if ! command -v dconf >/dev/null; then
+ # If the dconf command is not install, let's ignore it.
+ # This might happen on main-server installations without
+ # a desktop environment installed.
+ return 0
+ fi
+
proxy_host="${http_proxy#*://}"
proxy_port="${proxy_host##*:}"
proxy_host="${proxy_host%:*}"
diff -Nru
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/wpad-extract
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/wpad-extract
---
debian-edu-config-2.12.41~deb12u1/share/debian-edu-config/tools/wpad-extract
2022-03-23 11:36:06.000000000 +0100
+++
debian-edu-config-2.12.44~deb12u1/share/debian-edu-config/tools/wpad-extract
2024-02-01 10:51:20.000000000 +0100
@@ -7,10 +7,16 @@
# This version uses pactester from package libpacparser1.
+# Don't use the proxy for accesing wpad
+if [ -n "${no_proxy}" ]; then
+ no_proxy="${no_proxy},"
+fi
+export no_proxy="${no_proxy}wpad"
+
# Look up one of the www.debian.org IP addresses to avoid hanging on
# DNS if the skolelinux machines are not connected to the Internet.
proxy_url=$(curl -s http://wpad/wpad.dat | pactester -p - \
- -u http://130.89.148.14 | awk '{print $2}' | cut -d';' -f1)
+ -u http://130.89.148.77 | awk '{print $2}' | cut -d';' -f1)
if [ "$proxy_url" ]; then
echo "http://$proxy_url";
