Re: debian-installer status 2003-02-21

2003-03-01 Thread Martin Quinson
On Sat, Feb 22, 2003 at 11:32:36AM +0100, Tollef Fog Heen wrote:
 * Larry Gilbert 
 
 | Tollef Fog Heen wrote:
 |Also, having somebody with a good touch for English to go
 |through the templates would be nice.
 | 
 | I wouldn't mind helping with this, but I can't seem to figure out how
 | to check out debian-installer from the CVS server (using
 | -d:pserver:[EMAIL PROTECTED]:/cvs/debian-installer gives me
 | /cvs/debian-installer: no such repository).  And once I do so, I'm
 | not sure I'll know where the templates are. :-)
 
 Look at http://raw.no/d-i/getting_started.html for some information on
 getting started.

All templates (not only the ones from di) can be found from
www.debian.org/intl/l10n/po-debconf 

All of them may desserve attention from a native speaker, I guess.

Bye, Mt.

-- 
Don't drink as root!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-installer status 2003-02-21

2003-03-01 Thread Martin Sjögren
ons 2003-02-26 klockan 15.08 skrev Martin Quinson:
 On Sat, Feb 22, 2003 at 11:32:36AM +0100, Tollef Fog Heen wrote:
  * Larry Gilbert 
  
  | Tollef Fog Heen wrote:
  |Also, having somebody with a good touch for English to go
  |through the templates would be nice.
  | 
  | I wouldn't mind helping with this, but I can't seem to figure out how
  | to check out debian-installer from the CVS server (using
  | -d:pserver:[EMAIL PROTECTED]:/cvs/debian-installer gives me
  | /cvs/debian-installer: no such repository).  And once I do so, I'm
  | not sure I'll know where the templates are. :-)
  
  Look at http://raw.no/d-i/getting_started.html for some information on
  getting started.
 
 All templates (not only the ones from di) can be found from
 www.debian.org/intl/l10n/po-debconf

And there's also ddtp.debian.org. When ddtp fully supports po-debconf, I
think that is the preferred way of doing things.


/M


signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signeradmeddelandedel


Re: debian-installer status 2003-02-21

2003-02-24 Thread Cardenas
On Sat, Feb 22, 2003 at 11:32:36AM +0100, Tollef Fog Heen wrote:
 * Larry Gilbert 
 
 | Tollef Fog Heen wrote:
 |Also, having somebody with a good touch for English to go
 |through the templates would be nice.
 | 
 | I wouldn't mind helping with this, but I can't seem to figure out how
 | to check out debian-installer from the CVS server (using
 | -d:pserver:[EMAIL PROTECTED]:/cvs/debian-installer gives me
 | /cvs/debian-installer: no such repository).  And once I do so, I'm
 | not sure I'll know where the templates are. :-)
 
 Look at http://raw.no/d-i/getting_started.html for some information on
 getting started.
 

there's also http://people.debian.org/~mbc/di.html which I will be
updating with the new status soon. 

-- 
michael cardenas   | lead software engineer, lindows.com
hyperpoem.net  | GNU/Linux software developer
people.debian.org/~mbc | encrypted email preferred

Are you seeking to know what is wrong with the world? All the
disasters that have wrecked your world, came from your leaders'
attempt to avoid the fact that A is A.
- Ayn Rand, Atlas Shrugged


pgp0.pgp
Description: PGP signature


Re: debian-installer status 2003-02-21

2003-02-22 Thread Tollef Fog Heen
* Larry Gilbert 

| Tollef Fog Heen wrote:
|Also, having somebody with a good touch for English to go
|through the templates would be nice.
| 
| I wouldn't mind helping with this, but I can't seem to figure out how
| to check out debian-installer from the CVS server (using
| -d:pserver:[EMAIL PROTECTED]:/cvs/debian-installer gives me
| /cvs/debian-installer: no such repository).  And once I do so, I'm
| not sure I'll know where the templates are. :-)

Look at http://raw.no/d-i/getting_started.html for some information on
getting started.

-- 
Tollef Fog Heen,''`.
UNIX is user friendly, it's just picky about who its friends are  : :' :
  `. `' 
`-  


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-installer status 2003-02-21

2003-02-22 Thread John Summerfield
On 21 Feb 2003, Tollef Fog Heen wrote:

 - - automated installs and testing.  If somebody could give automated
   installations and how to get those working better a shot, it'd be
   cool.  Getting the report tool (which should fill out the report
   template available at http://raw.no/d-i/report-template.html)
   written would make it easier for testers to give us good reports.
 - - fix the ext3 problem; mkfs.ext3 gives an error about «file not
   found» (which is really that it can't find /etc/mtab).  mkswap
   should also be added.

Is there a quick-start guide on how to integrate D-I with Woody and do
this? Automatically is the only way I want to install Debian.

I've become quite adept at installing Red Hat Linux using kickstart, and
I've written my own (crude) Debian installer, so I've had time to
develop thoughts on what ought to happen.



-- 
Cheers
John Summerfield
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: debian-installer status 2003-02-21

2003-02-22 Thread Martin Sjögren
lör 2003-02-22 klockan 02.49 skrev John Summerfield:
 On 21 Feb 2003, Tollef Fog Heen wrote:
 
  - - automated installs and testing.  If somebody could give automated
installations and how to get those working better a shot, it'd be
cool.  Getting the report tool (which should fill out the report
template available at http://raw.no/d-i/report-template.html)
written would make it easier for testers to give us good reports.
 Is there a quick-start guide on how to integrate D-I with Woody and do
 this? Automatically is the only way I want to install Debian.

No.


/M


signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signeradmeddelandedel


Re: debian-installer status 2003-02-21

2003-02-22 Thread Glenn McGrath
On 21 Feb 2003 16:30:02 +0100
Tollef Fog Heen [EMAIL PROTECTED] wrote:

 optimally, what I'd like
 is getting anna to support gpg and verify the full integrity of the
 install.  One would then only have to trust the integrity of the
 initial boot media; a compromised mirror would be detected
 immediately.

Attached is program that uses libopencdk to verify the
Release/Release.gpg file, its only experimental code though.

The code is small, but as it needs libgcrypt (which needs opencdk and
zlib) it makes it a 350kB binary, 171kB gzip'ed, which is pretty big for
our purposes.



Glenn



/*
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 */

#include sys/types.h
#include errno.h
#include stdio.h
#include string.h
#include opencdk.h

extern int verify_gpg_file(const char *sign_file)
{
	CDK_KEYDB_HD pub_db;
	CDK_HD hd;
	int rc;
	const unsigned long ftpmaster2003[2] = { 0xB629A24C, 0x38C6029A };
	const unsigned long ftpmaster2002[2] = { 0xAA7DEB7B, 0x722F1AED };

	printf(Verifying gpg signature of %s\n, sign_file);
	cdk_set_log_level(CDK_LOG_DEBUG);
	rc = cdk_keydb_new(pub_db, CDK_DBTYPE_PK_KEYRING, /home/bug1/.gnupg/pubring.gpg, 29);
	if (rc) {
		fprintf(stderr, keydb new: `%s'\n, cdk_strerror(rc));
		return 0;
	}
	cdk_handle_new(hd);
	cdk_handle_set_keydb(hd, pub_db);

	/* Check the signature */
	rc = cdk_file_verify(hd, sign_file, NULL);
	printf(cdk_file_verify result is %d\n, rc);

	/* Process the results */
	rc = cdk_sig_get_ulong_attr(hd, 0, CDK_ATTR_STATUS);
	switch(rc) {
		case CDK_SIGSTAT_GOOD: {
			const unsigned long *keyid;

			keyid = cdk_sig_get_data_attr(hd, 0, CDK_ATTR_KEYID);
			/* TODO: should detect the key id using a seperate keyring ? */
			printf( Good signature by %08lX%08lX\n, keyid[0], keyid[1]);
			if ((keyid[0] == ftpmaster2002[0])  (keyid[1] != ftpmaster2002[1])) {
printf( Key signed with expired key\n);
			}
			else if ((keyid[0] != ftpmaster2003[0]) || (keyid[1] != ftpmaster2003[1])) {
printf( Danger Will Robinson, Danger!\n);
printf( Who the hell is %08lX %08lX ?, keyid[0], keyid[1]);
printf( It should be signed by B629A24C 38C6029A\n);
printf( This other guy might be trying sneak in a trojaned package!\n);
printf( Danger Will Robinson, Danger!\n);
exit(-1);
			}
			break;
		}
		case CDK_SIGSTAT_BAD:
			printf( Verification failed, signature doesnt match file\n);
			break;
		case CDK_SIGSTAT_NOKEY:
			printf( Verification failed, unknown keyid\n);
			break;
	}

	/* Cleanup */
	cdk_handle_free(hd);	

	return(rc);
}


int main(int argc, char **argv)
{
	verify_gpg_file(argv[1]);
}


pgp0.pgp
Description: PGP signature


Re: debian-installer status 2003-02-21

2003-02-22 Thread Glenn McGrath
On Sun, 23 Feb 2003 10:35:04 +1100
Glenn McGrath [EMAIL PROTECTED] wrote:

 The code is small, but as it needs libgcrypt (which needs opencdk and
 zlib) it makes it a 350kB binary, 171kB gzip'ed, which is pretty big
 for our purposes.

To be more specific, compiling statically against libopencdk, libgcrypt
and libz, but dynamically against glibc gives that result.  


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



debian-installer status 2003-02-21

2003-02-21 Thread Tollef Fog Heen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Since the last status report, almost three months have passed, we have
had a quite successful alpha release and much has changed.
Debian-installer is still able to install Debian, so that hasn't
changed. :) The goals set in the last status report before alpha: menu
ordering, unbreaking of mkfs, fix mounting and adding a log-tool are
mostly done.  Still outstanding is the addition of a self-test/logging
tool.

Martin has done some good work on getting Release file support into
anna and the retrievers, though the archive doesn't have working
Release files for sarge (since the debian-installer part of sarge is
just a symlink to sid, for the time being); optimally, what I'd like
is getting anna to support gpg and verify the full integrity of the
install.  One would then only have to trust the integrity of the
initial boot media; a compromised mirror would be detected
immediately.

cdebconf has gotten a slang frontend, which seems to work reasonably
well, but looks ugly and has some strange hangs unaccounted for in
addition to at least a non-implemented progress bar.  Screenshots[1]
courtesy of Martin.  We've also gotten a progress bar into cdebconf,
as well as an HTTP backend.  Some work has been done on the gtk
frontend, but nothing solid yet.  Help here is appreciated.

Santiago Garcia Mantinan has done some great work on getting daily
built CD netinst and business card-sized images online. [2] The
netinst images contain debian-installer and the base packages, the
business card-sized ones just debian-installer.

A lot of work has been going into infrastructure work, such as finding
a method of installing extra packages into the base system.  This is
needed for EVMS, grub and some other packages in addition to the
kernel-installer.  This means kernel-images will be installed from
normal Debian packages, unlike in boot-floppies where they were just
copied off the floppy/CD, something which has caused confusion in the
past.

We now have some new udebs as well, such as keyboard selection and
language chooser and autopartitioner.  Good work, those of you working
on those.

So, now it's time for the big and ugly TODO list.  :)

- - Porting.  As usual, some ports are in a better shape than others,
  and some are in serious trouble even before they are begun.  m68k
  and sparc32 are in the latter category, since they have problems
  with 2.4, which is needed due to devfs.
- - de-uglification of the slang frontend and progress bar addition to
  cdebconf.
- - gtkfb/graphical install.  Work has been done, but this need to get
  more solid and onto the CDs.
- - testing.  More testing, more bug reports.  If somebody who knows a
  bit about usability could begin looking and guiding us, it would be
  good.  Also, having somebody with a good touch for English to go
  through the templates would be nice.
- - automated installs and testing.  If somebody could give automated
  installations and how to get those working better a shot, it'd be
  cool.  Getting the report tool (which should fill out the report
  template available at http://raw.no/d-i/report-template.html)
  written would make it easier for testers to give us good reports.
- - fix the ext3 problem; mkfs.ext3 gives an error about «file not
  found» (which is really that it can't find /etc/mtab).  mkswap
  should also be added.
- - base-config - d-i integration.  The debconf db should be seeded
  with the values from debian-installer.  Exactly how to do this is
  not clear yet.

We are moving into a more polish/integration phase; most of the major
building blocks are in place, but many are missing critical features.
This means that non-x86 arches should get moving with regards to
getting debian-installer at least roughly working, if they need
changes to central parts of debian-installer.

As always, feedback, flames, comments and ideas are appreciated.

[1] http://people.debian.org/~sjogren/d-i/screenshots/2003-02-16/slang/
[2] http://lists.debian.org/debian-cd/2003/debian-cd-200301/msg00121.html

- -- 
Tollef Fog Heen,''`.
UNIX is user friendly, it's just picky about who its friends are  : :' :
  `. `' 
`-  
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Please see my GPG key at http://raw.no/gpgkey.asc

iD8DBQE+VkWwQSseMYF6mWoRAvdRAJ9wHWv9+Yl0TbTXeSP1+mgxwVZGuwCgxrbl
IP1TsRhZu/yUwOhA6BBhHZk=
=IjeO
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]