Source: opendnssec Version: 1:2.1.6-2 Severity: normal File: debian/gitlab-ci.yml User: debian-de...@lists.debian.org Usertags: bullseye-security
With the release of Debian bullseye and later, security updates are provided in the bullseye-security suite instead of bullseye/updates. In the opendnssec source package there is a gitlab CI configuration script that uses stable/updates when testing the package with piuparts. I'm not sure what the right way to do this is, but probably switching to the standard salsa CI scripts would be the way to go rather than hard-coding the necessary CI steps and the stable/updates suite. I filed this bug at severity normal since the script in question doesn't appear to be used for any part of the Debian packages nor for building the Debian packages, but only for test-building on salsa. opendnssec-2.1.6 $ grep -r -B4 -A8 /updates debian/gitlab-ci.yml- # Call piuparts, either in install or in upgrade mode debian/gitlab-ci.yml- - if [ "${PIUPARTS_MODE}" = "upgrade" ]; then debian/gitlab-ci.yml- piuparts ${PIUPARTS_ARGS} debian/gitlab-ci.yml- --distribution stable debian/gitlab-ci.yml: --extra-repo "deb http://security.debian.org/debian-security stable/updates main" debian/gitlab-ci.yml- --extra-repo "deb http://deb.debian.org/debian stable-updates main" debian/gitlab-ci.yml- --distribution unstable debian/gitlab-ci.yml- ${PACKAGES}; debian/gitlab-ci.yml- else debian/gitlab-ci.yml- piuparts ${PIUPARTS_ARGS} debian/gitlab-ci.yml- --distribution unstable debian/gitlab-ci.yml- ${PACKAGES}; debian/gitlab-ci.yml- fi -- System Information: Debian Release: bullseye/sid APT prefers testing-debug APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.9.0-1-amd64 (SMP w/4 CPU threads) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part