Re: [OT] Need old Packages.gz and Release Files

2008-05-09 Thread Michelle Konzack
Hallo Jens,

Am 2008-05-05 15:29:27, schrieb Jens Seidel:
 You can use the jigdo files such as debian-40r2-i386-DVD-1.jigdo from
 http://www.debian.co.il/debian-cd/4.0_r2/i386/jigdo-dvd/ or
 http://ftp.pwr.wroc.pl/debian-iso/4.0_r1/i386/jigdo-dvd/debian-40r1-i386-DVD-1.jigdo
 to extract this information. jigdo files are just gzipped text files.
 
 At least for the 4.0 release you should be able to find jigdo files ...
 I think I can send you also some older releases such as Woody in a
 private mail. Have to dig ...

In some days I have back my Server online and I can give you an sftp/scp
access to upload them.  I think it is better then E-Mail...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
+49/177/935194750, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Re: [OT] Need old Packages.gz and Release Files

2008-05-05 Thread Michelle Konzack
Am 2008-04-28 20:21:34, schrieb Goswin von Brederlow:
  If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build  the
  package tree from there since I have all original packages I only do not
  know which packages went included in the releases...
 
 Did anyone mention http://archive.debian.org/README yet?

Yes, but the lists are not complete.

 If you get the Packages.gz, Release and Release.gpg files from a
 CD/DVD set then you can verify them individually with the debian
 archive key from that time and then merge them into a full list and
 sign with your own key. You don't have to download anything from
 archive.debian.net if you have those index file.

As I have written, I have nearly  20 TByte  of  Debian  packages  on  my
mirror and only accidently killet the /debian/dists/ directory with  all
its Packages.gz, Sources.gz, Release and releases.gpg files.

I have all downloaded I  have  found  and  arround  16%  of  the  mirror
(generaly the last releses) restored.  What I am missing, are the  LISTS
of the packages from the Sub-Releases like r0, r1, ...

Since I have ONLY original Debian packages and trust them because it  is
a private Non-Public mirror (up to now) I need only the Lists  with  the
files with its version numbers which went in the Sub-Releases to  create
the Symlinks and generate the NEW Packages.gz and Sources.gz files.

Since I can not use the original GPG-Key I sign the Release  files  with
MY GPG-Key to be sure, no one else after me has modified it.

OK, there are peoples using my  mirror,  BUT THEY TRUST MY KEY  even  if
they have not signed it, because we have never meet us personaly.

Note:   If I do bad things, peoples will find it out very fast,
and my business is ancien history...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
+49/177/935194750, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Re: [OT] Need old Packages.gz and Release Files

2008-05-05 Thread Jens Seidel
On Thu, May 01, 2008 at 05:20:32PM +0200, Michelle Konzack wrote:
 As I have written, I have nearly  20 TByte  of  Debian  packages  on  my
 mirror and only accidently killet the /debian/dists/ directory with  all
 its Packages.gz, Sources.gz, Release and releases.gpg files.
 
 I have all downloaded I  have  found  and  arround  16%  of  the  mirror
 (generaly the last releses) restored.  What I am missing, are the  LISTS
 of the packages from the Sub-Releases like r0, r1, ...

You can use the jigdo files such as debian-40r2-i386-DVD-1.jigdo from
http://www.debian.co.il/debian-cd/4.0_r2/i386/jigdo-dvd/ or
http://ftp.pwr.wroc.pl/debian-iso/4.0_r1/i386/jigdo-dvd/debian-40r1-i386-DVD-1.jigdo
to extract this information. jigdo files are just gzipped text files.

At least for the 4.0 release you should be able to find jigdo files ...
I think I can send you also some older releases such as Woody in a
private mail. Have to dig ...

Jens


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-28 Thread Michelle Konzack
Am 2008-04-25 16:07:51, schrieb Stefano Zacchiroli:
 You are asking generically Packages without specifying a mirror. Are
 they granted to be identically replicated among all mirrors?  Of course
 they *probably* are due to how mirroring works, but is it *granted* that
 there are no differences among mirrors?
 
 Would such difference inhibit proper installation due to the apt-secure
 stuff?

If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build  the
package tree from there since I have all original packages I only do not
know which packages went included in the releases...

And yes, there is a problem with the signed release files, but  since  I
can check my packages agains packages on archive.debian.net I am sure,
I have the right an unaltered ones.

And IF I recreate the packages.gz/Sources.gz, I sign it with MY key  and
you CAN trust it or not...

And of course, you can pull down a couple of packages/files  out  of  my
several million (nearly 20 TByte or ninety SCSI  300 GByte  drives)  and
check it against packages/files from archive.debian.net...  :-)

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
+49/177/935194750, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Re: [OT] Need old Packages.gz and Release Files

2008-04-28 Thread Goswin von Brederlow
Michelle Konzack [EMAIL PROTECTED] writes:

 Am 2008-04-25 16:07:51, schrieb Stefano Zacchiroli:
 You are asking generically Packages without specifying a mirror. Are
 they granted to be identically replicated among all mirrors?  Of course
 they *probably* are due to how mirroring works, but is it *granted* that
 there are no differences among mirrors?
 
 Would such difference inhibit proper installation due to the apt-secure
 stuff?

They have to be identical accross all mirrors.

Release.gpg safeguards Release
Release safeguards Packages.gz
Packages.gz safeguards foo_ver_arch.deb

If any checksum check along that line fails apt will complain.

And nobody can create the Release.gpg unless they have the key from
ftp-master. Somebody elses key won't be in apts keyring unless this is
intentionally.

 If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build  the
 package tree from there since I have all original packages I only do not
 know which packages went included in the releases...

Did anyone mention http://archive.debian.org/README yet?

 And yes, there is a problem with the signed release files, but  since  I
 can check my packages agains packages on archive.debian.net I am sure,
 I have the right an unaltered ones.

 And IF I recreate the packages.gz/Sources.gz, I sign it with MY key  and
 you CAN trust it or not...

 And of course, you can pull down a couple of packages/files  out  of  my
 several million (nearly 20 TByte or ninety SCSI  300 GByte  drives)  and
 check it against packages/files from archive.debian.net...  :-)

If you get the Packages.gz, Release and Release.gpg files from a
CD/DVD set then you can verify them individually with the debian
archive key from that time and then merge them into a full list and
sign with your own key. You don't have to download anything from
archive.debian.net if you have those index file.

MfG
Goswin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-26 Thread Andreas Metzler
Gunnar Wolf [EMAIL PROTECTED] wrote:
 Thomas Weber dijo [Fri, Apr 25, 2008 at 09:25:04AM +0200]:
   j By the way, it would be great if the mirrors kept more than just a
   j week of Diffs.
[...]
 Diffs are often quite small. The time needed to establish a connection
 is often comparable to the time a diff takes to be downloaded... So,
 even with pipelining and all, storing too many diffs becomes
 irrelevant. 

That is only true if you trying to optimize for time, instead of minimal
download volume. And I doubt that 7 days is the sweet spot, Packages.gz is
huge:

[EMAIL PROTECTED]:/org/ftp.root/debian/dists/sid/main/binary-i386$ du -sh 
/org/ftp.root/debian/dists/sid/main/binary-i386/Packages.gz 
/org/ftp.root/debian/dists/sid/main/binary-i386/Packages.diff/
6,7M/org/ftp.root/debian/dists/sid/main/binary-i386/Packages.gz
344K/org/ftp.root/debian/dists/sid/main/binary-i386/Packages.diff/

cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



[OT] Need old Packages.gz and Release Files

2008-04-26 Thread peter green

I have had an accident on my Debian-Archiv-Server and  unfortunatly  the
files Packages.gz,  Packages.bz2,  Sources.gz,  Sources.bz2  and
Release from the directories

Afaict snapshot.debian.net has woody down to r4 and all point release of sarge 
and etch.

For older point releases of woody you could grab the jigdo/template files for the CDs from 
http://cdimage.debian.org/cdimage/archive/jigdo/ , you will have to reconstruct a single big 
packages/release file set from the broken down ones on the CDs yourself though and 
unfortunately downloads of those .jigdo files seem to be hanging for me at the moment.


For potato I doubt you have much hope except for the last point release (which 
is availible on archive.debian.org).



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Mikhail Gusarov
Twas brillig at 10:56:18 25.04.2008 UTC+08 when [EMAIL PROTECTED] did gyre and 
gimble:

 j By the way, it would be great if the mirrors kept more than just a
 j week of Diffs. It seems every time I get back from a trip, I end up
 j uploading the whole Packages.gz file again. Two weeks worth would be
 j better.

...for you.

Think about two-week trips, three-week trips, month-long vacations,
three-months-long vacations, round-the-world trips... Won't this result
in keeping whole year of diffs?

-- 


pgpmphn9B3I4C.pgp
Description: PGP signature


Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Thomas Weber
Am Freitag, den 25.04.2008, 13:16 +0700 schrieb Mikhail Gusarov:
 Twas brillig at 10:56:18 25.04.2008 UTC+08 when [EMAIL PROTECTED] did gyre 
 and gimble:
 
  j By the way, it would be great if the mirrors kept more than just a
  j week of Diffs. It seems every time I get back from a trip, I end up
  j uploading the whole Packages.gz file again. Two weeks worth would be
  j better.
 
 ...for you.
 
 Think about two-week trips, three-week trips, month-long vacations,
 three-months-long vacations, round-the-world trips... Won't this result
 in keeping whole year of diffs?

No, you can the take the combined size of all diffs as an upper bound.
If it becomes larger than the current Packages.gz file, it's time to
drop older diffs.

Thomas


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Stefano Zacchiroli
On Thu, Apr 03, 2008 at 03:35:57PM +0200, Michelle Konzack wrote:
 I have had an accident on my Debian-Archiv-Server and  unfortunatly  the
 files Packages.gz,  Packages.bz2,  Sources.gz,  Sources.bz2  and
 Release from the directories

Neat project. I'm jumping into it with a question which unfortunately is
not solving your problem.

You are asking generically Packages without specifying a mirror. Are
they granted to be identically replicated among all mirrors?  Of course
they *probably* are due to how mirroring works, but is it *granted* that
there are no differences among mirrors?

Would such difference inhibit proper installation due to the apt-secure
stuff?

Cheers.

-- 
Stefano Zacchiroli -*- PhD in Computer Science ... now what?
[EMAIL PROTECTED],cs.unibo.it,debian.org}  -%-  http://upsilon.cc/zack/
(15:56:48)  Zack: e la demo dema ?/\All one has to do is hit the
(15:57:15)  Bac: no, la demo scema\/right keys at the right time


signature.asc
Description: Digital signature


Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Eric Cooper
On Fri, Apr 25, 2008 at 04:07:51PM +0800, Stefano Zacchiroli wrote:
 You are asking generically Packages without specifying a mirror. Are
 they granted to be identically replicated among all mirrors?  Of course
 they *probably* are due to how mirroring works, but is it *granted* that
 there are no differences among mirrors?
 
 Would such difference inhibit proper installation due to the apt-secure
 stuff?

The Release file contains strong checksums of the Packages files, and
it is signed with the Debian Archive key.  Both of these are checked
when apt does updates and installs.  So as long as there are no keys
from rogue repositories in apt's keyring, it should be fine.

-- 
Eric Cooper e c c @ c m u . e d u


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Gunnar Wolf
Thomas Weber dijo [Fri, Apr 25, 2008 at 09:25:04AM +0200]:
   j By the way, it would be great if the mirrors kept more than just a
   j week of Diffs. It seems every time I get back from a trip, I end up
   j uploading the whole Packages.gz file again. Two weeks worth would be
   j better.
  
  ...for you.
  
  Think about two-week trips, three-week trips, month-long vacations,
  three-months-long vacations, round-the-world trips... Won't this result
  in keeping whole year of diffs?
 
 No, you can the take the combined size of all diffs as an upper bound.
 If it becomes larger than the current Packages.gz file, it's time to
 drop older diffs.

Diffs are often quite small. The time needed to establish a connection
is often comparable to the time a diff takes to be downloaded... So,
even with pipelining and all, storing too many diffs becomes
irrelevant. 

-- 
Gunnar Wolf - [EMAIL PROTECTED] - (+52-55)5623-0154 / 1451-2244
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973  F800 D80E F35A 8BB5 27AF


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-25 Thread Don Armstrong
On Fri, 25 Apr 2008, Gunnar Wolf wrote:
 Diffs are often quite small. The time needed to establish a
 connection is often comparable to the time a diff takes to be
 downloaded... So, even with pipelining and all, storing too many
 diffs becomes irrelevant.

There's also the (non-trivial) overhead of actually applying the diff
to consider. [The equation for the break-even point is something like:

package.gz_size/slowest_speed = 
(num_pdifs)[ave_pdif_size/slowest_speed+ave_pdif_apply_time]

num_pdifs = package.gz_size/link_speed

[ave_pdif_size/link_speed+ave_pdif_apply_time]
 
where link_speed is the slowest link speed we think is reasonable (56K
modem?) ]

I know for most of my machines, the number of pdifs at the break-even
point tends to be around 20. [Super fast links, but not-so-hot cpus.]


Don Armstrong

-- 
The state must declare the child to be the most precious treasure of
the people. As long as the government is perceived as working for the
benefit of the children, the people will happily endure almost any
curtailment of liberty and almost any deprivation.
 -- Adolf Hitler _Mein Kampf_ p403

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-24 Thread jidanni
By the way, it would be great if the mirrors kept more than just a
week of Diffs. It seems every time I get back from a trip, I end up
uploading the whole Packages.gz file again. Two weeks worth would be better.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-10 Thread Michelle Konzack
Hello Lennart,

Am 2008-04-04 12:44:38, schrieb Lennart Sorensen:
 Certainly archive.debian.org would have the last version of each release
 (so 2.2r5, 3.0r6, etc).

Thank you for this hint...

 The CDs would have had seperate (and different) Packages.gz since there
 would be one on each CD covering just what was on that CD.

Right, but if I have for example the Packages.gz fro 3.0r2
I can generate a new Packages.gz for the Mirror.

 Neat project.  I am not sure why being able to install 3.0r3 rather than
 3.0r6 is necesarily very useful, but it is neat to have the choice.

Sometimes it can help to resolv errors if you upgrade from
one release to another.

 Unfortunate that debian of course only keeps the current version of a
 release on their servers, and archive.debian.org only ever archives the
 last version of a given release.

Yes unfortunately...

I think, this is WHY archive.debian.org can not realy run out
of Diskspace like my mirror

Maybe I ahave found a sponsor for a new cage of 15 drives since
currently it is an expensive hobby for me...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack   Apt. 917  ICQ #328449886
+49/177/935194750, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France   IRC #Debian (irc.icq.com)


signature.pgp
Description: Digital signature


Re: [OT] Need old Packages.gz and Release Files

2008-04-07 Thread Wouter Verhelst
On Fri, Apr 04, 2008 at 12:44:38PM -0400, Lennart Sorensen wrote:
 Neat project.  I am not sure why being able to install 3.0r3 rather than
 3.0r6 is necesarily very useful, but it is neat to have the choice.

To have reproducibility of installations, where such is necessary (e.g.,
software escrow situations).

-- 
Lo-lan-do Home is where you have to wash the dishes.
  -- #debian-devel, Freenode, 2004-09-22


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: [OT] Need old Packages.gz and Release Files

2008-04-07 Thread Wouter Verhelst
On Thu, Apr 03, 2008 at 03:35:57PM +0200, Michelle Konzack wrote:
 Hello,
 
 I have had an accident on my Debian-Archiv-Server and  unfortunatly  the
 files Packages.gz,  Packages.bz2,  Sources.gz,  Sources.bz2  and
 Release from the directories
 
 /debian/dists/${RELEASE}/main/binary-${ARCH}/
 /debian/dists/${RELEASE}/main/sources/
 /debian/dists/${RELEASE}/contrib/binary-${ARCH}/
 /debian/dists/${RELEASE}/contrib/sources/
 /debian/dists/${RELEASE}/non-free/binary-${ARCH}/
 /debian/dists/${RELEASE}/non-free/sources/
 
 deleted.  The special is, that I have ALL Releases where ${RELEASES}  is
 like:
 
 potato: 2.2r0 bis 2.2r5 =  6 Releases
 woody:  3.0r0 bis 3.0r6 =  7 Releases
 sarge:  3.1r0 bis 3.1r7 =  8 Releases
 etch:   4.0r0 bis 4.0r2 =  3 Releases
 
 Does anyone has this files?  (e.g from the original CD's)

Can't you fetch them from snapshot.debian.net?

-- 
Lo-lan-do Home is where you have to wash the dishes.
  -- #debian-devel, Freenode, 2004-09-22


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]