From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6628518713905643520 X-Received: by 2002:a19:f60d:: with SMTP id x13mr103198lfe.12.1543331256551; Tue, 27 Nov 2018 07:07:36 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a2e:8910:: with SMTP id d16-v6ls2979903lji.14.gmail; Tue, 27 Nov 2018 07:07:36 -0800 (PST) X-Google-Smtp-Source: AFSGD/VnySmuGgXX4SXxGpudQsJLuxcp3p0Tl4gu5IJY2vT7PQgdxIMtIlUGTAOTYOAUuhazRbOx X-Received: by 2002:a2e:4253:: with SMTP id p80-v6mr103963lja.13.1543331256089; Tue, 27 Nov 2018 07:07:36 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1543331255; cv=none; d=google.com; s=arc-20160816; b=Ym6OFki8GfnOUpyFBd22mAmpoxsZTbjV91sDQrhsnK6rdxegv6ak/up8D+X14K41Lo yNPx2CxD0FgfatAkG61YD4qqzGCB+SKG7nKOxoZwYLW3om1HGCk+LXqvszAO9v24fIFX 6bFuxf052vMnPzmYqyHrZN4uqYpqA4D6OIVaknjM7X3XPyQqlts5mE0VFNDM+mWz4Y1n aGFbfxX0lP5Xv4ofexNDIDBEnyGFakYTJ4hhELBt9/oyeWKqEVNXmimnGs8nBv/OD14S 0Zcw+oAhm4O4vCiyg0HJAs3Sd4/pUktlIxWLyYbgDkCn27Z/OHaGGaCSxh1fAQYfa2ok hdAQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date; bh=/XcBaGMgFnzaBedKe93iQO5p4xxqbeyMpKVrsG1c9Dw=; b=MrP6RzkZsf7kX3uPRZbC284QlgUnNUD9n/QZpweraO7C+84trSCOdxKzERop5obzjq NOTxTWIdPbrLYy23S0IqiYxIqAtKVxPGbT49iDN2FchM6mDPcdFvXC1e9K57XNkNSgWH cQy171pzLWolZ4TAzHARB4WT1kGrJ4ZXxnOdyVvirJ/9EKfktZX/QLCHIwo2NqNoVHs1 vQ9RG2usLWWZDgwcsfRq/cREWiK5kF90EfL3WK/UWhxKVpenUDnowN30DTHCfIa0UxMU HwyRVtAuTFPKt+oT91EFPGNvBghuXbyepUCaRfzoPDr4mGD2dPFffWMviq5YrpQxLJkX R32A== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Return-Path: Received: from lizzard.sbs.de (lizzard.sbs.de. [194.138.37.39]) by gmr-mx.google.com with ESMTPS id e17-v6si136078ljg.5.2018.11.27.07.07.35 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 27 Nov 2018 07:07:35 -0800 (PST) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) client-ip=194.138.37.39; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 194.138.37.39 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.15.2/8.15.2) with ESMTPS id wARF7ZiZ024371 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Tue, 27 Nov 2018 16:07:35 +0100 Received: from md1za8fc.ad001.siemens.net ([139.25.68.176]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id wARF7Z9m027126; Tue, 27 Nov 2018 16:07:35 +0100 Date: Tue, 27 Nov 2018 16:07:34 +0100 From: Henning Schild To: "[ext] Cirujano Cuesta, Silvano" Cc: "isar-users@googlegroups.com" Subject: Re: Automatically add 'apt-transport-https' if any HTTPS mirror being used Message-ID: <20181127160734.389ab1d8@md1za8fc.ad001.siemens.net> In-Reply-To: <1543322271.28585.13.camel@siemens.com> References: <1543322271.28585.13.camel@siemens.com> X-Mailer: Claws Mail 3.15.0-dirty (GTK+ 2.24.32; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-TUID: qlBMVhmnXzGm Am Tue, 27 Nov 2018 12:37:53 +0000 schrieb "[ext] Cirujano Cuesta, Silvano" : > IMHO ISAR should automatically install 'apt-transport-https' during > debootstrapping if any of the provided mirrors uses HTTPS. Let me > elaborate my reasons. >=20 > There are two possible scenarios WRT Debian repositories involving > HTTPS: >=20 > 1. First mirror uses HTTPS > 2. First mirror uses HTTP >=20 > 1. works transparently with debootstrap > 1.0.58 (see [1]), since > 'apt- transport-https' gets automatically added to the packages to > install if the mirror to use (the first one) uses HTTPS. >=20 > 2. WON'T WORK out of the box, since debootstrap won't install 'apt- > transport-https' automatically (remember that it only uses the first > one and it's not HTTPS). And therefore 'apt-transport-https' isn't > available for installations from other mirrors (some of them being > HTTPS). >=20 > Fixing this limitation is not very difficult, but implies overriding > 'isar-bootstrap.inc' just to add 'apt-transport-https' to the list of > packages to be installed by debootstrap [2]. That's not convenient, > and kind of overkilling. >=20 > Letting ISAR handle it automatically is the solution I'd prefer, since > it's very convenient and elegant and I don't see any drawbacks. >=20 > In case I've overseen any drawbacks, then having the possibility of > specifying additional packages to be installed during bootstrapping > with a variable would be much better than overriding 'isar- > bootstrap.inc'. >=20 > Any opinions about it? Sound like a good idea, will you send a patch? Henning > Regards, > =C2=A0 Silvano >=20 > [1] > https://sources.debian.org/src/debootstrap/1.0.110/debian/changelog/?hl > =3D669#L669 >=20 > [2] > https://github.com/ilbers/isar/blob/6c5db020b9b837d7b0ce63bfc719f9192e7 > 25f26/meta/recipes-core/isar-bootstrap/isar-bootstrap.inc#L186 >=20