Package:  vmdebootstrap
Version:  0.2-1
Severity: important
Tags:     upstream

Dear Maintainer,

I noticed this when using vmdebootstrap to create Freedombox images
based on Debian Jessie.  The generated /extlinux.conf file look like
this:

  default linux
  timeout 1

  label linux
  kernel boot/vmlinuz-3.13-1-486
  append initrd=boot/initrd.img-3.13-1-486 
root=UUID=5d3aaadb-7187-485e-a901-44e1e353d25e ro

The problem is that the kernel and initrd path contain detailed version
information, and the file is not updated when a new kernel is installed
/ upgraded.  The result is either a virtual machine with obsolete and
possible insecure kernels, or a non-bootable virtual machine.

I ran into the problem when the 3.12 kernel was in jessie and the 3.13
kernel appeared.  I installed the new kernel, removed the old kernel and
rebooted to activate the new kernel version.  The installed image no
longer booted.  I was not afraid of removing the old kernel as this is a
virtual scratch machine I use for testing. :)

Please change the extlinux.conf file to use the /vmlinuz and /initrd.img
symlinks instead of the specific versioned files in /boot/.

Please also move the extlinux.conf file from / to /etc/, where etckeeper
can be used to track changes to it. :) Or perhaps change to grub, which
seem to handle upgrades automatically. :)

-- System Information:
Debian Release: 7.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages vmdebootstrap depends on:
ii  debootstrap    1.0.48+deb7u1
ii  extlinux       2:4.05+dfsg-6+deb7u1
ii  kpartx         0.4.9+git0.4dfdaf2b-7~deb7u2
ii  mbr            1.1.11-5+b1
ii  parted         2.3-12
ii  python         2.7.3-4+deb7u1
ii  python-cliapp  1.20120630-1
ii  qemu-utils     1.1.2+dfsg-6a

vmdebootstrap recommends no packages.

vmdebootstrap suggests no packages.

-- no debconf information

-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to