[PATCH 1/1] switch debian snapshot mirror to snapshot.debian.org

[PATCH 1/1] switch debian snapshot mirror to snapshot.debian.org

['Felix Moessbauer' via isar-users]

The cloudflare mirror is not updated since may 2024. By that, other
projects like reproducible-containers switched back to the "official"
snapshot.d.o mirror, after being informed by me.

Having an outdated upstream mirror poses the risk of being
"non-reproducible", just because the SDE is more recent than the latest
snapshot and once the mirror is updated, a more recent snapshot is taken
(due to the redirect-to-latest logic of the snapshot mirror).

This patch also switches the debian mirror to snapshot.debian.org to at
least use an official and maintained mirror. In case downstream users
run into rate-limiting issues, they still can switch to other mirrors.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
---
References:

- snapshot-debian ML: https://lists.debian.org/debian-snapshot/2024/06/msg00014.html
- docker-library issue: https://github.com/docker-library/official-images/issues/16044#issuecomment-2238577223
- reproducible-containers issue: https://github.com/reproducible-containers/repro-sources-list.sh/issues/17

Best regards,
Felix Moessbauer

 meta/conf/distro/debian-common.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/conf/distro/debian-common.conf b/meta/conf/distro/debian-common.conf
index 9b07efb5..d8556964 100644
--- a/meta/conf/distro/debian-common.conf
+++ b/meta/conf/distro/debian-common.conf
@@ -41,4 +41,4 @@ COMPAT_DISTRO_ARCH:amd64 = "i386"
 COMPAT_DISTRO_ARCH:arm64 = "armhf"
 
 # snapshot mirror for reproducible builds
-DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot-cloudflare.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n"
\ No newline at end of file
+DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n"
-- 
2.39.2

-- 
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/isar-users/20240719113403.149492-1-felix.moessbauer%40siemens.com.

Re: [PATCH 1/1] switch debian snapshot mirror to snapshot.debian.org

[Uladzimir Bely]

On Fri, 2024-07-19 at 13:34 +0200, 'Felix Moessbauer' via isar-users
wrote:
> The cloudflare mirror is not updated since may 2024. By that, other
> projects like reproducible-containers switched back to the "official"
> snapshot.d.o mirror, after being informed by me.
> 
> Having an outdated upstream mirror poses the risk of being
> "non-reproducible", just because the SDE is more recent than the
> latest
> snapshot and once the mirror is updated, a more recent snapshot is
> taken
> (due to the redirect-to-latest logic of the snapshot mirror).
> 
> This patch also switches the debian mirror to snapshot.debian.org to
> at
> least use an official and maintained mirror. In case downstream users
> run into rate-limiting issues, they still can switch to other
> mirrors.
> 
> Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
> ---
> References:
> 
> - snapshot-debian ML:
> https://lists.debian.org/debian-snapshot/2024/06/msg00014.html
> - docker-library issue:
> https://github.com/docker-library/official-images/issues/16044#issuecomment-2238577223
> - reproducible-containers issue:
> https://github.com/reproducible-containers/repro-sources-list.sh/issues/17
> 
> Best regards,
> Felix Moessbauer
> 
>  meta/conf/distro/debian-common.conf | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/meta/conf/distro/debian-common.conf
> b/meta/conf/distro/debian-common.conf
> index 9b07efb5..d8556964 100644
> --- a/meta/conf/distro/debian-common.conf
> +++ b/meta/conf/distro/debian-common.conf
> @@ -41,4 +41,4 @@ COMPAT_DISTRO_ARCH:amd64 = "i386"
>  COMPAT_DISTRO_ARCH:arm64 = "armhf"
>  
>  # snapshot mirror for reproducible builds
> -DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot-
> cloudflare.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n"
> \ No newline at end of file
> +DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*)
> snapshot.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n"
> -- 
> 2.39.2
> 

Applied to next, thanks.

-- 
Best regards,
Uladzimir.



-- 
You received this message because you are subscribed to the Google Groups "isar-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/isar-users/3197db61018aa20edadd2f4807b7686f8d58865a.camel%40ilbers.de.