From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6488938966684794880 X-Received: by 10.25.199.78 with SMTP id x75mr528358lff.36.1511268921255; Tue, 21 Nov 2017 04:55:21 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 10.46.29.73 with SMTP id d70ls169972ljd.4.gmail; Tue, 21 Nov 2017 04:55:20 -0800 (PST) X-Google-Smtp-Source: AGs4zMb4ZLu6JakVGmG9MSoJRSGsM1ZohuXP2maDhEZDAg0zRAcgkvSOk9AaVt8bM7wBZWZB4Mq9 X-Received: by 10.46.21.86 with SMTP id 22mr669547ljv.28.1511268920897; Tue, 21 Nov 2017 04:55:20 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1511268920; cv=none; d=google.com; s=arc-20160816; b=VzvvetB9X1+Y5CJYmHrIZLoo6GHrxF4cHLsQ1Ez0huGSKJmTZEUlXSxhqsTQfVVqBy qPKNrH6i1WTPyCr/ZwToDvm4qYB51epHQq80mZkrC70K4UNa9ZolObJsxDDMnVNEOuza FONtUpbAfN8MkFsvdiYWLZcMLgZmODcfAz7oxeq0QoBJ2zqjkdt+vevMCv+VeCodjKpp d8RMXa3qFKJTnsnl0G9f2wNAfDQugHaMtG9vdA2dhIShWvhHXeItcNo+hiHCPeSSMl2a 0puRDtffG2PIDrl7xtd8mvwY+Tt7TZQ6BucusA9xZ4aKvB8VYudY8Ti5+TkVek5I1z0t N3jA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject :arc-authentication-results; bh=fUjp7udu/SlTRpkJF48NPiRqtz0cQETUhd8CcRuOeWk=; b=yKW12LHELxo39VVwhnh/5eku0iuBBItGc47RjZtqxsHjf0nCQzsZqi4taj4K1VsfBe Qey0zfOb4BRvfM7s5wg+365258fgCzc3snSYnuOfqcqcbN6s0xwcwK7CpWm0insdKtYm 669UvEpeHX6Bfs65FDpxUH8x3wVRttsYAvXlcsw4qhbIdnXQftVIIji75FcBWKU6L8jj vnJI9srsBKbYgXXV78XFtudZRYzjQt/i0G+5xDxIWMDrkIWS5LrQWL0oB5Xw8SSjQeP8 B0r7sg8ugWhwWMLj3+O1pUAG0Fd4IFHBqdIabxrtFm0ub4TYlDhdJBVwvygw3JwYYoA0 g6wA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com Return-Path: Received: from goliath.siemens.de (goliath.siemens.de. [192.35.17.28]) by gmr-mx.google.com with ESMTPS id c69si1143801ljd.4.2017.11.21.04.55.20 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 21 Nov 2017 04:55:20 -0800 (PST) Received-SPF: pass (google.com: domain of gernot.hillier@siemens.com designates 192.35.17.28 as permitted sender) client-ip=192.35.17.28; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of gernot.hillier@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=gernot.hillier@siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by goliath.siemens.de (8.15.2/8.15.2) with ESMTPS id vALCtK88023001 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 21 Nov 2017 13:55:20 +0100 Received: from linux-mf4q.internal.hillier.de ([167.87.32.10]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id vALCtJic015260; Tue, 21 Nov 2017 13:55:19 +0100 Subject: Re: still Debian 9.1 because of ignoring "stretch-updates" (and security patches)? To: Alexander Smirnov , isar-users@googlegroups.com References: From: Gernot Hillier Message-ID: <4599d7bf-1ed0-a481-10a5-89ebc30dacda@siemens.com> Date: Tue, 21 Nov 2017 13:55:18 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-TUID: H+oGA90AUQYQ Hi Alexander! Am 16.11.2017 um 10:27 schrieb Alexander Smirnov: > Hi Gernot! > > On 11/16/2017 12:17 PM, Gernot Hillier wrote: >> Hi there! >> >> I was quite confused why our Isar version still gives me a Debian 9.1 >> image (according to /etc/debian_version) while Debian 9.2 is released >> more than a month ago. >> >> I finally found that we currently only install packages from >> distribution "stretch" which has nearly all packages from 9.2, but still >> provides old "base-files" including debian_version from 9.1. >> >> (I installed against deb.debian.org, not our internal mirror.) >> >> After adding "stretch-updates" to sources.list, I got updates of only >> two packages: "base-files" and "tzdata" - et voilà, we have Debian 9.2. >> >> After additionally adding "stretch/updates" from security.debian.org, I >> got updates to openssl, dnsmasq and wget. >> >> While still being puzzled why Debian adds this layer of confusion to the >> world, we should probably honor this and give the user an up-to-date >> image from all three sources, no? >> >> Or did we make some mistake in Isar setup? > > I can't imagine what could be wrong in Isar in context of pure Debian > packages. Everything related to base system is handled by multistrap > which performs 'apt-get' from specified in config file upstream mirrors. > > Probably user should add all these 3 mirrors to multisrtrap config in > his meta. Sorry for late reply... Well, Isar contains recipes for building Debian images and I think, they should include handling for all usual Debian suites. I'll post a first draft for a patch later today. -- Gernot