Re: still Debian 9.1 because of ignoring "stretch-updates" (and security patches)?

[Gernot Hillier <gernot.hillier@siemens.com>]

Hi Alexander!

Am 16.11.2017 um 10:27 schrieb Alexander Smirnov:
> Hi Gernot!
> 
> On 11/16/2017 12:17 PM, Gernot Hillier wrote:
>> Hi there!
>>
>> I was quite confused why our Isar version still gives me a Debian 9.1
>> image (according to /etc/debian_version) while Debian 9.2 is released
>> more than a month ago.
>>
>> I finally found that we currently only install packages from
>> distribution "stretch" which has nearly all packages from 9.2, but still
>> provides old "base-files" including debian_version from 9.1.
>>
>> (I installed against deb.debian.org, not our internal mirror.)
>>
>> After adding "stretch-updates" to sources.list, I got updates of only
>> two packages: "base-files" and "tzdata" - et voilà, we have Debian 9.2.
>>
>> After additionally adding "stretch/updates" from security.debian.org, I
>> got updates to openssl, dnsmasq and wget.
>>
>> While still being puzzled why Debian adds this layer of confusion to the
>> world, we should probably honor this and give the user an up-to-date
>> image from all three sources, no?
>>
>> Or did we make some mistake in Isar setup?
> 
> I can't imagine what could be wrong in Isar in context of pure Debian
> packages. Everything related to base system is handled by multistrap
> which performs 'apt-get' from specified in config file upstream mirrors.
> 
> Probably user should add all these 3 mirrors to multisrtrap config in
> his meta.

Sorry for late reply...

Well, Isar contains recipes for building Debian images and I think, they
should include handling for all usual Debian suites.

I'll post a first draft for a patch later today.

-- 
Gernot