still Debian 9.1 because of ignoring "stretch-updates" (and security patches)?

still Debian 9.1 because of ignoring "stretch-updates" (and security patches)?

[Gernot Hillier]

Hi there!

I was quite confused why our Isar version still gives me a Debian 9.1
image (according to /etc/debian_version) while Debian 9.2 is released
more than a month ago.

I finally found that we currently only install packages from
distribution "stretch" which has nearly all packages from 9.2, but still
provides old "base-files" including debian_version from 9.1.

(I installed against deb.debian.org, not our internal mirror.)

After adding "stretch-updates" to sources.list, I got updates of only
two packages: "base-files" and "tzdata" - et voilà, we have Debian 9.2.

After additionally adding "stretch/updates" from security.debian.org, I
got updates to openssl, dnsmasq and wget.

While still being puzzled why Debian adds this layer of confusion to the
world, we should probably honor this and give the user an up-to-date
image from all three sources, no?

Or did we make some mistake in Isar setup?

-- 
Gernot
Siemens AG, Corporate Competence Center Embedded Linux

Re: still Debian 9.1 because of ignoring "stretch-updates" (and security patches)?

[Alexander Smirnov]

Hi Gernot!

On 11/16/2017 12:17 PM, Gernot Hillier wrote:
> Hi there!
> 
> I was quite confused why our Isar version still gives me a Debian 9.1
> image (according to /etc/debian_version) while Debian 9.2 is released
> more than a month ago.
> 
> I finally found that we currently only install packages from
> distribution "stretch" which has nearly all packages from 9.2, but still
> provides old "base-files" including debian_version from 9.1.
> 
> (I installed against deb.debian.org, not our internal mirror.)
> 
> After adding "stretch-updates" to sources.list, I got updates of only
> two packages: "base-files" and "tzdata" - et voilà, we have Debian 9.2.
> 
> After additionally adding "stretch/updates" from security.debian.org, I
> got updates to openssl, dnsmasq and wget.
> 
> While still being puzzled why Debian adds this layer of confusion to the
> world, we should probably honor this and give the user an up-to-date
> image from all three sources, no?
> 
> Or did we make some mistake in Isar setup?

I can't imagine what could be wrong in Isar in context of pure Debian 
packages. Everything related to base system is handled by multistrap 
which performs 'apt-get' from specified in config file upstream mirrors.

Probably user should add all these 3 mirrors to multisrtrap config in 
his meta.

Alex

Re: still Debian 9.1 because of ignoring "stretch-updates" (and security patches)?

[Gernot Hillier]

Hi Alexander!

Am 16.11.2017 um 10:27 schrieb Alexander Smirnov:
> Hi Gernot!
> 
> On 11/16/2017 12:17 PM, Gernot Hillier wrote:
>> Hi there!
>>
>> I was quite confused why our Isar version still gives me a Debian 9.1
>> image (according to /etc/debian_version) while Debian 9.2 is released
>> more than a month ago.
>>
>> I finally found that we currently only install packages from
>> distribution "stretch" which has nearly all packages from 9.2, but still
>> provides old "base-files" including debian_version from 9.1.
>>
>> (I installed against deb.debian.org, not our internal mirror.)
>>
>> After adding "stretch-updates" to sources.list, I got updates of only
>> two packages: "base-files" and "tzdata" - et voilà, we have Debian 9.2.
>>
>> After additionally adding "stretch/updates" from security.debian.org, I
>> got updates to openssl, dnsmasq and wget.
>>
>> While still being puzzled why Debian adds this layer of confusion to the
>> world, we should probably honor this and give the user an up-to-date
>> image from all three sources, no?
>>
>> Or did we make some mistake in Isar setup?
> 
> I can't imagine what could be wrong in Isar in context of pure Debian
> packages. Everything related to base system is handled by multistrap
> which performs 'apt-get' from specified in config file upstream mirrors.
> 
> Probably user should add all these 3 mirrors to multisrtrap config in
> his meta.

Sorry for late reply...

Well, Isar contains recipes for building Debian images and I think, they
should include handling for all usual Debian suites.

I'll post a first draft for a patch later today.

-- 
Gernot