Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sun, 15 Apr 2001, Anthony Towns wrote: > Having random insecure files, however tempting they may look, shouldn't > stop a user from at least knowing whether they're using something straight > from Debian or not. I would prefer that instructions be as simple as possible to minimize errors. I

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Anthony Towns
On Sat, Apr 14, 2001 at 08:15:49PM -0600, Jason Gunthorpe wrote: > On Sun, 15 Apr 2001, Raphael Hertzog wrote: > > > Having more than one tree means it will be detected more than once and > > > that certianly is not desirable, any may cause problems, like it asking > > > for the disks in a non-ide

Re: Call for test and some thoughts

2001-04-14 Thread Anthony Towns
On Sun, Apr 15, 2001 at 02:41:08AM +0200, Raphael Hertzog wrote: > I commited today some changes to debian-cd wrt the latest bug > about Packages and Release(.gpg) files. I haven't tested it much (only manty > helped me debug it this night), and I'd welcome other results to be sure > it's ok. BTW

Re: Call for test and some thoughts

2001-04-14 Thread Jim Westveer netnw.com
- Original Message - From: "Raphael Hertzog" <[EMAIL PROTECTED]> Subject: Call for test and some thoughts > I commited today some changes to debian-cd wrt the latest bug > about Packages and Release(.gpg) files. I haven't tested it much (only manty > helped me debug it this night), and I'

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sun, 15 Apr 2001, Raphael Hertzog wrote: > > Having more than one tree means it will be detected more than once and > > that certianly is not desirable, any may cause problems, like it asking > > for the disks in a non-ideal order, or something equally lame. > May or will cause problem ? I

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Raphael Hertzog
Le Sat, Apr 14, 2001 at 05:02:10PM -0600, Jason Gunthorpe écrivait: > Having more than one tree means it will be detected more than once and > that certianly is not desirable, any may cause problems, like it asking > for the disks in a non-ideal order, or something equally lame. May or will cause

Call for test and some thoughts

2001-04-14 Thread Raphael Hertzog
Hi people, I commited today some changes to debian-cd wrt the latest bug about Packages and Release(.gpg) files. I haven't tested it much (only manty helped me debug it this night), and I'd welcome other results to be sure it's ok. I also made a change to work with the latest boot floppies where

cvs commit to debian-cd/tools/boot/woody by hertzog

2001-04-14 Thread hertzog
Repository: debian-cd/tools/boot/woody who:hertzog time: Sat Apr 14 17:32:55 PDT 2001 Log Message: * Changed UDMA66 to IDE according to the latest boot floppies. Files: changed:boot-i386 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trou

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sat, 14 Apr 2001, Raphael Hertzog wrote: > Le Sat, Apr 14, 2001 at 02:05:35PM -0600, Jason Gunthorpe écrivait: > > How exactly do you propose that apt-cdrom determine that these two random > > trees of stuff are actually the same tree of stuff? Current apt-cdrom will > > not properly handle C

cvs commit to debian-cd/tools by hertzog

2001-04-14 Thread hertzog
Repository: debian-cd/tools who:hertzog time: Sat Apr 14 15:38:51 PDT 2001 Log Message: * Corrections. Include Release file in the main Release file. Files: changed:add_secured -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Conta

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Attila Nagy
Hello, > > I have used this myself. It is a good way to test an image. It is also > > used by people who have borrowed CDs and do not have a burner. I think a validity checking part in debian-cd would be very nice. BTW, what's the correct way to check an ISO made with the debian-cd script? And

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Raphael Hertzog
Le Sat, Apr 14, 2001 at 02:05:35PM -0600, Jason Gunthorpe écrivait: > How exactly do you propose that apt-cdrom determine that these two random > trees of stuff are actually the same tree of stuff? Current apt-cdrom will > not properly handle CD's made like this, so you've broke that. Explain us

cvs commit to debian-cd/tools by hertzog

2001-04-14 Thread hertzog
Repository: debian-cd/tools who:hertzog time: Sat Apr 14 13:57:06 PDT 2001 Log Message: * Create a $CODENAME-secured tree with Release and Release.gpg file. * Some esthetic cleanup. Files: changed:scanpackages scansources added: add_secured -- To UNSUBSCRIBE, emai

cvs commit to debian-cd by hertzog

2001-04-14 Thread hertzog
Repository: debian-cd who:hertzog time: Sat Apr 14 13:57:06 PDT 2001 Log Message: * Create a $CODENAME-secured tree with Release and Release.gpg file. * Some esthetic cleanup. Files: changed:Makefile -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsub

cvs commit to debian-cd/debian by hertzog

2001-04-14 Thread hertzog
Repository: debian-cd/debian who:hertzog time: Sat Apr 14 13:57:06 PDT 2001 Log Message: * Create a $CODENAME-secured tree with Release and Release.gpg file. * Some esthetic cleanup. Files: changed:changelog -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject o

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sat, 14 Apr 2001, Philip Charles wrote: > A CD (or iso image) is essentially one file and the integrity of this can > be verified by a single signed checksum. No, that is such an oversimplification and what you have described of the HURD CD's prooves that. CD's may in fact contain content f

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sat, 14 Apr 2001, J.A. Bezemer wrote: > > Nope, packages fails verification and APT will stop without using the > > file, ditto for ftp, http, etc. > > EVERY access method up to current potato APT will work nicely with this. If > woody/sid APT suddenly stops working correctly, thats a grave

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Jason Gunthorpe
On Sat, 14 Apr 2001, Raphael Hertzog wrote: > Le Sun, Apr 15, 2001 at 12:27:19AM +1000, Anthony Towns écrivait: > > So anyway, how does the above idea (two woody trees in dists), > > sound? Workable, or are there other problems? > > I don't see any apart from the fact that most tools will use

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Filip Van Raemdonck
On Fri, Apr 13, 2001 at 11:14:30PM +, Philip Charles wrote: > On Fri, 13 Apr 2001, Jason Gunthorpe wrote: > > > > > > > you can tell it to read Packages.cd directly > > > > > I don't want that, it's a hack. :) > > > > No more than all the other ugly things that have been suggested, and th

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Steve McIntyre
On Sat, Apr 14, 2001 at 06:05:04PM +0200, Raphael Hertzog wrote: >Le Sun, Apr 15, 2001 at 12:27:19AM +1000, Anthony Towns ?crivait: >> Instead of changing the name of the Packages file, how about we try something >> completely different? >> >> dists/ woody-secured/ >[...] >> That should be p

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Raphael Hertzog
Le Sun, Apr 15, 2001 at 12:27:19AM +1000, Anthony Towns écrivait: > Instead of changing the name of the Packages file, how about we try something > completely different? > > dists/ woody-secured/ [...] > That should be pretty easy to do right now, and shouldn't cause any > problems to anyon

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Anthony Towns
On Sat, Apr 14, 2001 at 03:06:09PM +0200, J.A. Bezemer wrote: > That's because APT (and ONLY apt) is effectively changing the very definition > of "Packages file". Up to this moment: > Packages = file that is an index to all packages (virtually) available > in&under current director

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Philip Charles
I think that we are trying to turn apples into oranges. The security of CDs is relatively simple, that of a mirror more complex and they need to be approached differently. A mirror can have one corrupt or sabotaged file amongst 2-3 and there needs to be a way of detecting this. The proposed

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread J.A. Bezemer
On Fri, 13 Apr 2001, Jason Gunthorpe wrote: > On Sat, 14 Apr 2001, J.A. Bezemer wrote: > > > > b) Use verbatim package files and call them 'Packages.something' > > > - Everyone can make CD set, and we still have end-to-end security > > > - apt file:/../ does not work properly on those discs

possible error in potato-i386-1.list

2001-04-14 Thread John Marcum
Hello, I hope this is the right place to say this. I have been trying to make a copy of the Debian CD-ROM and the "potato-i386-1.list" seems to have an error, typo most likely. The following three line have commas instead of underscore in the file name. Or it could be that they were changed by

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Cristian Ionescu-Idbohrn
On Sat, 14 Apr 2001, Santiago Vila wrote: > On Fri, 13 Apr 2001, Philip Charles wrote: > > > On Fri, 13 Apr 2001, Jason Gunthorpe wrote: > > > > > No more than all the other ugly things that have been suggested, and this > > > only affects the 3 people silly enough to loopback mount ISO's and try

Re: Bug#93612: Support for new archive structure

2001-04-14 Thread Santiago Vila
On Fri, 13 Apr 2001, Philip Charles wrote: > On Fri, 13 Apr 2001, Jason Gunthorpe wrote: > > > No more than all the other ugly things that have been suggested, and this > > only affects the 3 people silly enough to loopback mount ISO's and try to > > use APT on them. > > I have used this myself.