From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 31 Oct 2024 16:40:15 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f59.google.com (mail-wm1-f59.google.com [209.85.128.59]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 49VFeEv3021313 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 31 Oct 2024 16:40:14 +0100 Received: by mail-wm1-f59.google.com with SMTP id 5b1f17b1804b1-4327bd6bd60sf6913675e9.1 for ; Thu, 31 Oct 2024 08:40:14 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1730389209; cv=pass; d=google.com; s=arc-20240605; b=OcboTUAEKTM89k4gVCYFYrBNup/oEy3MEZChsjX4XAXwOwGkNOj+776yo2N18hjSZ1 8Sm01n6tCgUawl7H58hwGPhMzeGJqz01NVCJYmPXr/GeIxx6rlAhhk1Ja+RxDQJUaBm9 E/g6nR3X0w3jIgH0VHRftYU7w2pbQod3qTZRNdS8qRx9SQLt6BOFvsO8sgehsqUm+0D2 z/UlU9U9rfRlcae46p8iH9kq1O6EP6eZzFj7gJ8EEg4/Z6UZ7+4M1Xs5dO8Jfxp07qbE MU68F9rh/ExQw//q1TS/3aSFTHF5J+gDMK9RLJ+7O2wFiJjfBdLbn+2CKyywKAFo8Uon C5xA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:to:from:dkim-signature; bh=RW+TLj5vm6W0A1D7WKANw7Y9GqNH7G+vGtMF5eGcdAE=; fh=zt6DAnWUaUo9WgJwFtJxykgDFJAdwnE1knnMYjBaSUQ=; b=Mj+WiUo0jZJsGsfnQIFuwo1H0QU0B3Hmr92pJXx4wl7BAU3lE5VFAcvU/3j+0qUmt/ 2VfPdhlsw/jYL+oOBwyRfYMdWNTeAR/tqFgR/j7i/re7ZBOd2iSWnIWwGdm56Wu5Xo6n xV9AyNz5EySYp7SwJeV18MLWgoGpyX49DY+eLiUMSW9kSsM1Yu4qnIb+PIYPI4BJvYpB eAwL16JuQ73ZYlBeOQ1ckCbmlgOSR1PJZiu4pyQBNGMe/EjoNa0IlALuvctspL6VLSDE N3EnuCRsVs3JnHnChcnblSkEmcvsKj36f1ueHXlsd7qJYsHS7hrTB9sY0zTbfKBx+1xb 9D9g==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZEt36Z6F; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of alexander.heinisch@siemens.com designates 2a01:111:f403:2614::61c as permitted sender) smtp.mailfrom=alexander.heinisch@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1730389209; x=1730994009; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=RW+TLj5vm6W0A1D7WKANw7Y9GqNH7G+vGtMF5eGcdAE=; b=P7KYUFtS/16rQwgBkzpbHlX77jTxRqCyCICOCjLS6ObH/OxW2zt9nn7wnXp6tpH9na B1OhycJ8nJWa0Vs7TMgkEULvQhAWCLFek9pWkRKBbKP0ESsL1XBCzRj2qdpb4zdwDdVr Ep2ncjGYB26li5wg571o2Nbu29/KIPPOtAWLsb8As2XJ7Nclw9GFUyZtZY2YoCkuL4WG beN5IHJmbIuoX+tHWqAU0igThurg8r0kwTHZr1OpRBBq/NAnq44TB86EZ3gQIBkubPUl 48RqndOmL9Xg6TYTKpVhXg1Fk3rYRg4pjV2husFf4bbEefa9wBC5mZCpiepj8gMpExR2 qhDg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730389209; x=1730994009; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:to:from:x-beenthere:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to; bh=RW+TLj5vm6W0A1D7WKANw7Y9GqNH7G+vGtMF5eGcdAE=; b=oebWG5ozH8E9eN5cOSSNFbt50ocTGMbK6qsb2o5pLIAXoyflRlv2X5FHdWATD60nKc 0wH2gqffr1q1dur7Ure7bgdxL+haDzPd3vz0xiOxNNnrU2fI5p93E3EFjdWUeeShYK4W /1V0Ol1GreB54WLEX4SsU2y++b7wad4+iD8fSs/GMPRcuwSla8p2bpf/KFuzgVrLve2U Zn1lgWPGlGbunKwWemdx83qOHCpci3ErdwVlh9muWzIJd5Xcn32dmGMd44TQ0OhsWC7x GmiUU30gjSjQLXlxopz9MHATplH1uk05shFHQ2TfTvtI02jM2jX4Ksp24dPYqCwCEV8K nWtA== X-Forwarded-Encrypted: i=3; AJvYcCXR/I1clbEa1gtQeL4AdFCS7D64FTfAllRAGIHiYnDuNAfD9Z5AVrRum1EWjHCge4m91ee+@ilbers.de X-Gm-Message-State: AOJu0YzIciQ4pY9Uxqs5lIYQ0pL1T8YPILWnOm47zjfLdiVQIBLB5uFq kIFnuxRxx6+3/sHeySG3z438cWvfIprbdW33GF4pETGI7ZmaNGWB X-Google-Smtp-Source: AGHT+IHFvwtuLt7apVVBFIvf5fB1DlR4GHsjbJEctRGDKsW1T5LK0XI8h0oIpPMK3w352L4OBhrWnQ== X-Received: by 2002:a05:600c:4a88:b0:431:9397:9ac9 with SMTP id 5b1f17b1804b1-431aa292eb4mr116927515e9.15.1730389207688; Thu, 31 Oct 2024 08:40:07 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:600c:1386:b0:42c:af5b:facc with SMTP id 5b1f17b1804b1-4327b802100ls1469675e9.1.-pod-prod-07-eu; Thu, 31 Oct 2024 08:40:05 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCVbzUbf/VKlr9UJeeBgtQhLVIM5vO4NpHAM66c+WlbYjFmjl14+oPa6BtotmYlOCUtVcTswxHYyylSq@googlegroups.com X-Received: by 2002:a05:600c:198c:b0:431:93d8:e1a1 with SMTP id 5b1f17b1804b1-4319ad08b39mr150594265e9.27.1730389205153; Thu, 31 Oct 2024 08:40:05 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1730389205; cv=pass; d=google.com; s=arc-20240605; b=FiFF52NRpts0rEylqr1FVICd59PLIPcb9rB/m7vFXSN7s6tbwyqxn+myol7etZOGNm LzDZdAxYC8Jx2/1cCMgEgfKy2VVANnd0yqiGDwLhGORmjO3wP/yMjcowy5drYTe0YBKd nlsN1hQAZLwlAE8rNRclfxKHmRB3v4wp0AkChlBcLWA/oq2PYLfqpM6FC5OGk9vB2Pbn cNlh0chmdqT1giDjHVVhW9wPWZeHxMGDwu/Czzwl1hFT1FggpXyQA4iyqPyRplwbtybs 0+bF0OezKOBwI64T1a1NxlaXpTCeDgoue59G94oQ2J8txs1qIFdNZyBLaXiqS74vB+JI 1Tvw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:to:from:dkim-signature; bh=XFoyxSjt0HZHAnA2nXxHDvpEPgxvutQTgBL+6upik9c=; fh=CO49RLsRgbmdgT8pbQxGuLxaBkXWn47UnVW039L4jWE=; b=MxyS9/erm0U23LeofglgbmWW6kxc7aHz4dxcUipt+IUzIiRMZa+HnW5i5QQRkYfQkP YPKSsOIzsbekg2pBcTZuIh+syJgJR6+81a065lSX5VnBphWjUjXpPiQYgaOvEFoDe+Hf cLdAgycO5qiR3B9fdfvuXn+KleudeNBHJ6QhK/wB4ORGZgX0PUH6eLcoJnyzoSOLKw44 v81JpMUccITnuQQBfiGIh/kJmIC1njrUNzyih0y6pql33iweYKn1Gt8g9Q5nuRxzVSdt 93UzxXRqQAThNL3vtzlcSXv4Ss5IwwSiJGmnywSfBwnEHmEWcc5oQ1hu7AFYzU8oAlgz uDVg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZEt36Z6F; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of alexander.heinisch@siemens.com designates 2a01:111:f403:2614::61c as permitted sender) smtp.mailfrom=alexander.heinisch@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2061c.outbound.protection.outlook.com. [2a01:111:f403:2614::61c]) by gmr-mx.google.com with ESMTPS id ffacd0b85a97d-381c11870afsi42934f8f.5.2024.10.31.08.40.04 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 31 Oct 2024 08:40:05 -0700 (PDT) Received-SPF: pass (google.com: domain of alexander.heinisch@siemens.com designates 2a01:111:f403:2614::61c as permitted sender) client-ip=2a01:111:f403:2614::61c; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=tYfSYBplHDZRW+RZlxN+mQRjRvbKPNlhMynxwiba3maCGxvGeV5tok+Q1htfPxcMTZHb7ChvQ1Ry4VU7jNiY8UYOAnmdDWFy4d9GhV7UUfRWSH8jbBYFmHSrlH7tggzZVtT8PEaVsk1QoTmB770l+fNejI7d29Ygj6Y868rtu42caFf16CMSbV/33sfI2GrrtAC+VAo7Ua1tKOoZWq2UcTEnmaDERNdq8d7c3nIS9HdYjMPLYWkDyph6r94ZW8D9cDLsuytk0hZr35v//Wwhq6FeW2cyXNg94LxtWAv6xHSr+QypCKB0u95d02laXmIgWzAmbVNgdEQTVnXhBGJB2g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=XFoyxSjt0HZHAnA2nXxHDvpEPgxvutQTgBL+6upik9c=; b=xEz6FymQsvK8s4O8iRrE+RbSOBXJIrGZGlY6esVyQaCxnsBS0PcHjNqh8Lb4KS6S4uh+4w10zGZqDlBiRUCS4n6d+5iLLUFJDhuFau8ytTS8Pjlm87TpLy5ledYCo8037nmmdkKKlwmNQVvZIuQXJjhBMmsKC8fCaHjIavf4oPd9U4e1udUB3F9XowsB1t8WeMizmgHbU50y2runfpxObWI9Dfp5iMCVkrQm4HDpvo4SDFpU4WO03dA/XnSHs81XmdvYI0092tsNLvhB8Kgez739AX2gqi5H7+O20VwwO4t7OK7rHmUkrEbh5j74Kf6pGgcb+cG67hQ36WAB3ao8BQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3320.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:10c::13) by DU0PR10MB5411.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:32a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8114.20; Thu, 31 Oct 2024 15:40:03 +0000 Received: from AM7PR10MB3320.EURPRD10.PROD.OUTLOOK.COM ([fe80::3a6d:95dc:3ce2:6da0]) by AM7PR10MB3320.EURPRD10.PROD.OUTLOOK.COM ([fe80::3a6d:95dc:3ce2:6da0%7]) with mapi id 15.20.8114.015; Thu, 31 Oct 2024 15:40:02 +0000 From: "'Heinisch, Alexander' via isar-users" To: "MOESSBAUER, Felix" , "ubely@ilbers.de" , "isar-users@googlegroups.com" , "Kiszka, Jan" Subject: RE: [PATCH 0/3] Added support for apt caching Thread-Topic: [PATCH 0/3] Added support for apt caching Thread-Index: AQHbERB3bAAITx0vc06zqYhSGfA9l7J8YVAAgAAV0VCAAGTFgIAkSUQAgAAOzWA= Date: Thu, 31 Oct 2024 15:40:02 +0000 Message-ID: References: <20240927190650.128263-1-alexander.heinisch@siemens.com> <9093339262ec7d1866abbc8345dcf9fc498e341e.camel@ilbers.de> <8604a9552135790de2df1a7fc05c31bc07075259.camel@siemens.com> In-Reply-To: <8604a9552135790de2df1a7fc05c31bc07075259.camel@siemens.com> Accept-Language: de-AT, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=b337b513-b8b6-4204-b219-0020296ee26a;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2024-10-31T15:39:17Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3320:EE_|DU0PR10MB5411:EE_ x-ms-office365-filtering-correlation-id: aa4596e1-9124-48a5-b00d-08dcf9c2491c x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?MnhtWUpvNlJWdm5pUnBEaitlTVhNSTVJNHhyYUJURVI5RittMm9CQVNYYkRY?= =?utf-8?B?MmRHb0M5T1h4K2FCdkNIeEc4UENXWHFKc2gxZitURjFvMldWWXdmcnhKMEVS?= =?utf-8?B?NVhRNHJLR3JyeFJBWWVBZUJyOS90VTFZMlAzR1RpZnExejZBc3JQeThEMG02?= =?utf-8?B?emFGVXQ5cXVhZHpQRXJGNXFEMFJ4aGUwUU9UMEdNWXJmbmZXU3gweUJGS3hQ?= =?utf-8?B?SkhnbkVvaFhzZVhJdXQ0ZitvK1ZKdmxHU2dacVlFQkRFSkR6d0NjWTlhNUFH?= =?utf-8?B?ZndpOS9KRWRqeno0ZTVocFJBeWpoeE5IdlRLdnBwR2p0RktNR0E1a1FxaWpK?= =?utf-8?B?OTZiSGdJZ2N1RHltUThhN0xxS0MvdGdMU0ZvUzRQSCt2THBWbzlqSDBhVXk0?= =?utf-8?B?VGkzbXJGUWZsV0NsZ0gxSkFBMThZaVErdGNvVTI3R2VYbGtaeWIxUTNwZlpm?= =?utf-8?B?czVWaEVCaEdBSVZrL3BzMy9FMXE5SCtQNTlseDdnc2xncFR5VlRuTlE3WHZx?= =?utf-8?B?MFNUVlJjbW5kMTlmME5TeTRHTkhjRW1UM3A3cWNicHZydVFoUnZCUHNnLzFL?= =?utf-8?B?eG5kVHc4bG42MmNrNDBFcllSUm5vZ1NGQjg2emNsUlNiNVI1NEtESERicHdx?= =?utf-8?B?ME81ZXExY0xKL0ZHcFNlTEIzWkxPSTN5S3JrRXNSWjFMVi8wM0E5cnFBc0tN?= =?utf-8?B?Y2lDbXZXb2ZFdDZrM0hLS0ZnM3NGeGh3TG1Sc2NHNmtsTDVlSTl0MUR5M2kx?= =?utf-8?B?UnNuaENPN3lYZWxYRWV4blZsOXRkeHc4Y2xlV1VwcHVNeklmVFlURGZoZ0tH?= =?utf-8?B?ODlHcWFMcE1pOGhXcEpSZ3d4YjVTemJpNzF6N2kyTlVKdUthamVWOXRuNitM?= =?utf-8?B?L3ZhcWsyTjZYNVlFMlp0STFHUCtxazNvOUM1VFFuV3lzRUU4K3oyRUJpN0Nt?= =?utf-8?B?OWU2OGh0U2M5VDhxVHNHQkRJczJ2dEJzM1orVi9rWkhRcUhwL3hEREliclF1?= =?utf-8?B?d1kxOUxpa01zWVAxRFVlWFkveFFtbHM0c1JPTkZrSHUwdDVPaFlTa1VVMjk4?= =?utf-8?B?c3UzWXBPRnI0bFZ1UU1HekJ5Mk9XVmp1VlhyQm1wZThvNEZEaVNubElLMlFv?= =?utf-8?B?S0MwYTRQSjFqdVdiZ0o5bmhlS3BjK2VKRWxyU3VSN214c0FxMm5SU2thZTQy?= =?utf-8?B?ZzNTTkJoR3JKVlBFd0E1SjF6NmJuOG5LUXVzTTNMbU0zWk5vTUt6cldGSTBE?= =?utf-8?B?RXpFTlhlUHFRcjErbXRiUGxNQ3QrK1VFd1JNR054YWtjbnJsQWV0ZVRIem80?= =?utf-8?B?ck41UzJKRWFJZlJWcUE1dGhlNXJ3bGQ4K0FGM25DODBXbXN1bmJlbUFVdnRz?= =?utf-8?B?MlhmU091QmtNcXdEVFBXY1hqVVVTU0ZhdnNVd3IzUkZoRGx0b3hQNTNNV1Iv?= =?utf-8?B?ZEtJQlg0TTlQRUNwaTByajZlTW4xSEM4Qm1HaHAwYmJjTlpTdGdMaUVkbDNP?= =?utf-8?B?V0VKMlkwZks4THFFNXBlNnJ6UkVxeGM3b2pnMFg5c2Ira1JUYnZmRHloUHkw?= =?utf-8?B?ZUFmalFNeHByUGg2dEJscUdLNURwNWtIbmxQSW5PUVZGSTBTZnRISGRBVWlV?= =?utf-8?B?Z1lNR0lpdUNSR0tCRmFXUnJ0TGlXbHRoTzVxK2EwcEVEbmZsSHd6WGxhUTQ2?= =?utf-8?B?MDFERGxhM0NoSjFBQW1hVTU4Y05aMDVvWEdhU0MraVFhQlo5T25PMHBMWUZv?= =?utf-8?B?dzg2enNQMmpaU3dFWGxybVhEazdteDh3N0ZrVENxRW9ST0ZtRlNPcUJPTkhR?= =?utf-8?B?aHJPM1Frd0hOVURZWmJGdlBVN3lCRTVQUU5Cek1rL3krMjNxREJpVEsvWCtK?= =?utf-8?Q?yM4V5TvD/tyZg?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3320.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?WTNLaEpTVjBvdCtSYnB2ZXBZOTRWZlp0cnE1YlhwWGZlNzNnU3dUcVlVWDVa?= =?utf-8?B?MzVWbHcyVUR1MlBvbE9BdWQvSXNmN3pZTC9Fa3Z6VHk1aGdMMGJnM3Q3TGk5?= =?utf-8?B?cnQwNU8vNUxWQmdBSStqemwyYitwRmF2bUdCeUhTRlpPb09lejNyeFBiYUY1?= =?utf-8?B?ZU4xWklZOS9GbFVkT1AwN3NNV3FCUGw5TzZDUGE3aHlXR2xEM2dSRHpkQVRl?= =?utf-8?B?NTNpNm9iei9vbzFSUDluOC9QZkU5bW5MMmdWWkduNXVTWUdxQWYzMDNIVGtm?= =?utf-8?B?aXpmWVdBekdxOVEzRDlFZFZPQ2VnU21PYzhDMzlTOUNqd29XVXE3VldkRFVk?= =?utf-8?B?R1VlcGNCZ2dweXNkZk5mazdpVm1xejA0OXVKSnRDc3Z5YWFQWEV2MHVZTDNQ?= =?utf-8?B?Y2dLemQ5M1NtRnBYMHVaU3J0aDZndVFZcExJTkdpVzFpY2UwOXNZNXBLUWZG?= =?utf-8?B?Z2taUEZzUzhFMVo4aHl5QkhGQWtHbnFPT20wOTB1RE9jR0NNUVIzNWpRVGRu?= =?utf-8?B?WnRjWGpWb3RlamtSY21QN0pDMEZsRGNhTGZBQlczRDFaazEwYzFZTXEzQmJO?= =?utf-8?B?Y2JQYStOdmhHUUhjdm91bjdGY1R2VXhUK3AzN3Z0SUVHemhVL05FRkROR2No?= =?utf-8?B?N1FaNmhkcmNnVit3WldyKzIxbmZweVkzNHZiV1lqblJuTGtIc3Z0Z1A5cWRZ?= =?utf-8?B?NWs3L0JUTDFmMUd0YVRKUmM4WlV0dkR5eC8xeXNWKzc1VDRjKzUvWTVGbUlK?= =?utf-8?B?czFjK1BCVE9yM240STE0Z3RmWDBHaWhBRXBQRGg2bWpBbk1idW5iWGJ0cGNL?= =?utf-8?B?Uk96Tys0ZkJocEFDNHlNZlEvY2g2eG1Qd0dZdUFyOEVCVW9Da0ZZZmkvcVMw?= =?utf-8?B?WHkvQml6RnVYUzZhdkxGTmxXNFdnSUVQRUJhS08yTmtmeHpRdUNwNDdLSHRG?= =?utf-8?B?aWlmcmw2QUpUcjRuUk8zYTVwcVhudUdqN2JwMTJXMks1ZEVwQVgvWTJnQ0pH?= =?utf-8?B?bHBIZ051NjJlM0dFQi9ScXhJYzhLSEVkQ2JZbm9aYTNuUlF2N2tJWkpXTnNi?= =?utf-8?B?VFFqMzQxY1dvK3QrTVBMSisxMkRWVkx6Qk9MQ3Q2VkR6dTNtMVRoemw3a2oz?= =?utf-8?B?SlUrZWRNS1Awei9UVzN1ZlhwVzJLZ3NzNVl5NEt5QTdKNDgrRXNSNUR6TXg4?= =?utf-8?B?QXp0UVVjRGNEbXlqSkl1eTVTTnFSNnd4aDV6Qkh3R1NWM0p2UFdNeVBwVU9R?= =?utf-8?B?Ym5hbjZwL2lJU0ZJSjNMbXJabERKNFNmQWZwRDdLbk5tM3drOGlSanZIZmVr?= =?utf-8?B?OUduS05tVytYN2NvTTVOVDVmSDUwa0xjSXFCeUdaa0o3WXlVUERYTHZzS2Rl?= =?utf-8?B?K3ZHWDBJY3lMT1JRVzBkS2drQzAwRHBzV04yUSt4NWtTTUdhSkRyRFB2aURo?= =?utf-8?B?SElFWlE0UnJHSDVseGRPNUZuVHVlc2hPODA0YjNLQjVuakczQmJESTU0VmtK?= =?utf-8?B?K0FtUXA3U1pEQnRBU2xnQ2NMVHY1YmIxZEZKSkVHajVxMkRoRGF4N0lJVEUv?= =?utf-8?B?WUFzQklMQjlNVlh2YkdoYzdLWk5RcHNrWHNQSnFuOGxrNTFic0NMT3ZjVzF0?= =?utf-8?B?cTZ0SEc1amluRk8xY25yQTRmMWlHS0VVTU9obGozbXBXd2FtL01WOVd3SCt2?= =?utf-8?B?eDg3eFFDN0Rsd3FmczN2bGxhenFaOXRham5BY1hseU9CNi8yckdLaXpCK2Zo?= =?utf-8?B?RjNlSE9heHZScDdxQjNkQ0FJeE5vWmQ0VnoyTlowcWZYRzlyT0x5OFJQVVJw?= =?utf-8?B?U3d4YnVOK2tMSnRIYmRpZ1VqRDBQSGx2dDl4NnJ2Z1hMVlpEWnhPV1JPR2NE?= =?utf-8?B?SEJlakJnYUlvS1NNakE2SXdLTjZtQjRyQ0xGaEJxU0ExN21tRGEwNE52NTFm?= =?utf-8?B?ZXJIVGVoYi9iKzVLbkdaUW5IREk2UkxZZWlremx3REU1TlhWdjFiZy9laWFE?= =?utf-8?B?Z3loVDVoS1BxZ1liMUhuek8xYXdjV2R3S0xpZFduakhHeTlnTlNtQnFBYXBr?= =?utf-8?B?c2w5SDRxdU94MnczTFphMzA4UForT0JnVDczNHdscHBsN3NVbGZ2QTc5N1pD?= =?utf-8?B?dWJqbEovTkVZQ093ZENDTkxvb0tBVUFaNVdNSld0UGU5VHhIVFVFZE1uU0hl?= =?utf-8?B?QXc9PQ==?= Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3320.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: aa4596e1-9124-48a5-b00d-08dcf9c2491c X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Oct 2024 15:40:02.5061 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: RD94l/TzOPOQ/MoEJNbf5g1D82FAIc7p/zFUk/0Q14cBcZ3k7TIlPUKmYFGnqjJsIjuc3luVIQI+vJgbP0PHKqV/R43KUHf1y/Vru/Q5NoQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB5411 X-Original-Sender: alexander.heinisch@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ZEt36Z6F; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of alexander.heinisch@siemens.com designates 2a01:111:f403:2614::61c as permitted sender) smtp.mailfrom=alexander.heinisch@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "Heinisch, Alexander" Reply-To: "Heinisch, Alexander" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: DeDT4gNpJ+gr > Hi, this series is much needed to work with the still unreliable snapshot= mirrors. >=20 > @Alexander: Do you plan to send a v2? >=20 > At the same time I'm working on adding internal apt-cacher-ng support to = kas to let the build pass the initial bootstrapping. >=20 > Best regards, > Felix Hi Felix Thank you for coming back. Even when using apt-cacher-ng index files oftentimes got updated from snapshot.debian.org which caused problems when our company was on a blacklist for some time again. Unfortunately, I didn't find the time to analyze why that was the case. I did a tcpdump during one of our builds, but didn't analyze it for 2 weeks= or so :-( But I suspect either apt client sends a reload request or the expiry date= =20 returned from upstream is to limited. While this could be relevant when fetching packages from "main" mirrors,=20 it should not have much impact on snapshot mirrors. To mitigate that issue, since then we switched to squid as a proxy for snap= shot.debian.org Squid has an offline mode, which says, no matter what happens, cach entries= once seen are never updated upstream. As stated above, while this could have dra= stic impacts when using main mirrors, it shouldn't cause issues on snapshots, by= definition. Thus, I dropped apt-cacher-ng in our project in favour of squid. I also prepared documentation for such, but during preparing the patch, I= =20 was not sure if that is worth a separate doc/ file or if we should merge th= at with doc/offline.md. I was struggling with that decision since it does not reall= y=20 solve an offline case, as it only caches packages already seen once, and fu= rther,=20 only solves the offline case for apt and not for other sources like git, ..= . What is your opinion? BR Alexander PS: Appended the patch, I was referring to: >From cf64db474c2f2477633bfe3fd111156d2ac7495a Mon Sep 17 00:00:00 2001 From: Alexander Heinisch Date: Thu, 24 Oct 2024 20:06:23 +0200 Subject: [PATCH] doc: Added setup guide for squid as an caching proxy for a= pt (snapshot) mirrors. Signed-off-by: Alexander Heinisch --- doc/apt-caching-proxy.md | 142 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 142 insertions(+) create mode 100644 doc/apt-caching-proxy.md diff --git a/doc/apt-caching-proxy.md b/doc/apt-caching-proxy.md new file mode 100644 index 00000000..2a23a313 --- /dev/null +++ b/doc/apt-caching-proxy.md @@ -0,0 +1,142 @@ +# Setup Squid as APT Caching Proxy + +Limited download bandwitdth oftentimes is an issue, and increases the buil= d times drastically. Further, large corporate networks could get rate limit= ed by debian mirrors, as many people / pipelines / aso. fetch huge amounts = of packets from there. + +In such cases a proxy caching the packages is quite useful as it reduces d= ownload times and reduces pressure on debian mirrors. + +## Install Squid Proxy +``` +apt install squid +``` + +## Configure Proxy for Caching (with APT in mind) + +1. /etc/squid/squid.conf +This file contains the main configuration for `squid`. +We configure it to listen to port `4242` and cache all requests from sites= listed in `/etc/squid/mirror-dstdomain.acl`. Further, to enable, offline u= secases (or usecases where your ip got temporarily blacklisted by `snapshot= .debian.org` or similar) we set `offline_mode on` +to not fetch already cached packages from upstream. + +> Note: While `offline_mode on` is totally fine for `snapshot.debian.org` = when using a timestamp to fix your package archive version, this could caus= e unintended behaviour (most probably outdated packages) when used against = a non archive mirror. + +> Hint: If you are planning to work against non archive mirrors, and you a= re not sure, it's recommended to set `offline_mode off` and probably tweak = cache behaviour with a `refresh_pattern`. + +### /etc/squid/squid.conf: +``` +# File: /etc/squid/squid.conf + +# default to a different port than stock squid +http_port 4242 + +# user visible name +visible_hostname squid-apt-caching-proxy + +# do not fetch already cached packages from upstream +offline_mode on + +# we need a big cache, some debs are huge +maximum_object_size 512 MB + +# increase available disk space for cache dir to 40G +cache_dir aufs /var/cache/squid 40000 16 256 + +# logs +access_log /var/log/squid/access.log +cache_log /var/log/squid/cache.log +cache_store_log /var/log/squid/store.log + +# tweaks to speed things up +cache_mem 256 MB +maximum_object_size_in_memory 10240 KB + +# only allow ports we trust +acl Safe_ports port 80 +acl Safe_ports port 443 + +http_access deny !Safe_ports + +# Deny access to blacklisted sites +acl blockedpkgs urlpath_regex "/etc/squid/pkg-blacklist-regexp.acl" +http_access deny blockedpkgs + +# List of domains to cache +acl to_archive_mirrors dstdomain "/etc/squid/mirror-dstdomain.acl" +# don't cache domains not listed in the mirrors file +cache deny !to_archive_mirrors + +# Allow access to the proxy only from networks listed in allowed-networks-= src.acl +acl allowed_networks src "/etc/squid/allowed-networks-src.acl" +http_access allow allowed_networks + +# And finally deny all other access to this proxy +http_access deny all +``` + +### /etc/squid/mirror-dstdomain.acl: +``` +# File: /etc/squid/mirror-dstdomain.acl + +snapshot.debian.org +``` + +### /etc/squid/pkg-blacklist-regexp.acl: +``` +# File: /etc/squid/pkg-blacklist-regexp.acl +# Empty for now +``` + +### /etc/squid/allowed-networks-src.acl: +``` +# File: /etc/squid/allowed-networks-src.acl + +# network sources that you want to allow access to the cache + +# private networks +10.0.0.0/8 +172.16.0.0/12 +192.168.0.0/16 +127.0.0.1 + +# IPv6 private addresses +fe80::/64 +::1/128 + +# IPv6 mesh local +fd00::/8 +``` + +Restart `systemctl restart squid` + +## Use the Proxy in ISAR Build System + +To forward the proxy settings to apt inside the ISAR build system just exp= ort `http_proxy` +as follows: + +``` +export http_proxy=3Dhttp://:4242 +``` + +> Hint: Consider also setting `https_proxy`. + +### Validation + +The first time you build your image the cache will fetch all packages from= upstream. +During that phase you will see log entries, like + +``` +... TCP_MISS/200 1574478 GET http://snapshot.debian.org/file/7cfaf... +``` +in `/var/log/squid/access.log`. + +From that time on for existing packages only + +``` +... TCP_OFFLINE_HIT/200 1574480 GET http://snapshot.debian.org/file/7cfaf.= .. +... TCP_MEM_HIT/200 1574480 GET http://snapshot.debian.org/file/7cfaf... +``` + +> Note: When you add new packages to your image, these have to be fetched = first, so you will encounter `TCP_MISS`es whenever you add packages you did= n't fetched before. Same holds true when upgrading the snapshot timestamp (= `ISAR_APT_SNAPSHOT_TIMESTAMP` or `ISAR_APT_SNAPSHOT_DATE`). + +> Hint: You can observe your cache misses using: +> ``` +> tail -f /var/log/squid/access.log | grep -e TCP_MEM_HIT -e TCP_OFFLINE_H= IT -v +> ``` --=20 2.43.0 --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= AM7PR10MB33207841E236025B621B725486552%40AM7PR10MB3320.EURPRD10.PROD.OUTLOO= K.COM.