From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6436374115778560000 X-Received: by 10.25.196.140 with SMTP id u134mr2181495lff.7.1498672393232; Wed, 28 Jun 2017 10:53:13 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 10.25.38.205 with SMTP id m196ls346738lfm.16.gmail; Wed, 28 Jun 2017 10:53:12 -0700 (PDT) X-Received: by 10.25.204.65 with SMTP id c62mr2369313lfg.13.1498672392621; Wed, 28 Jun 2017 10:53:12 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498672392; cv=none; d=google.com; s=arc-20160816; b=zClf3I5PgueOJExj7VKphwga64Pmvtk9FXtW3mFs89qn89cZXArmPmRNaQYTv+NYrU UEu1JmaIstNNdTp1GsvRzlHQvcir+pSFdEKXhItkE8Q55TTjnBU9qLgxCLuGtcsj4Y8F 4S6mCMuNWEw4cT/R8nrY34yCgh4xLSnnHfvMocBt3iYIFlk0yi1I9mVRidLpzmUSqsBF K+4moa9lLPJYVDf2uklsaHZu7P/AXCiaFG0B65J06b+1Hwa6uYooZ+uBRqGPxSJGZyNq +SizxgvycgreZPtrHQxVWsW4ouPsq0KoYrTCpMma0JyjciYeSa6UE8L7dQTDrGCPz76/ rTqw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject :arc-authentication-results; bh=JpxaMa1Wy8aDen/rW0G7gnEIrQPcrkcbBBecz1Uwk0k=; b=mNeabrfpJmL0MXXAw8iNQhICQWP+JkI00Z904I84lu8jzPsnVdS4UdmcuE6Q/f4Rb4 JxDhFE+89t5lPDaMMPOH/QShWFPMMFb7c9uULGmSX8X12xLzPzfTgBWWl5CXmjCgAaUR fR8qY+Yvl2SOcfhKKvEaA/RzkYpX1QZzD8Uhf/eImzOpjnkqwdwEmQRKwatuqFBERQ0H UnwkEh04+cfknc354+y6IpPIHVULMSCAa+aVSwTg+ikYMGTIw5M+BXCngOuN3IrRB7vv xRr31q5QqHBMA0XD+qGTdEBkEPGKS2eG7PmGCYQ8+QryVgNLej8hAJpbIwlSFMQ37jFP YGYg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 192.35.17.2 is neither permitted nor denied by best guess record for domain of jan.kiszka@siemens.com) smtp.mailfrom=jan.kiszka@siemens.com Return-Path: Received: from thoth.sbs.de (thoth.sbs.de. [192.35.17.2]) by gmr-mx.google.com with ESMTPS id 197si2125226wmo.0.2017.06.28.10.53.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 10:53:12 -0700 (PDT) Received-SPF: neutral (google.com: 192.35.17.2 is neither permitted nor denied by best guess record for domain of jan.kiszka@siemens.com) client-ip=192.35.17.2; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 192.35.17.2 is neither permitted nor denied by best guess record for domain of jan.kiszka@siemens.com) smtp.mailfrom=jan.kiszka@siemens.com Received: from mail2.siemens.de (mail2.siemens.de [139.25.208.11]) by thoth.sbs.de (8.15.2/8.15.2) with ESMTPS id v5SHrCBN013805 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Wed, 28 Jun 2017 19:53:12 +0200 Received: from md1f2u6c.ww002.siemens.net ([139.25.68.37]) by mail2.siemens.de (8.15.2/8.15.2) with ESMTP id v5SHrCWi027217 for ; Wed, 28 Jun 2017 19:53:12 +0200 Subject: Re: Jessie: Host configuration leakage around apt-get To: isar-users@googlegroups.com References: <4b30841e-f0a1-d7f1-5844-cd8d792a2063@siemens.com> <20170628161026.GB32130@yssyq.radix50.net> From: Jan Kiszka Message-ID: Date: Wed, 28 Jun 2017 19:53:11 +0200 User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.8.1.12) Gecko/20080226 SUSE/2.0.0.12-1.1 Thunderbird/2.0.0.12 Mnenhy/0.7.5.666 MIME-Version: 1.0 In-Reply-To: <20170628161026.GB32130@yssyq.radix50.net> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: 8tcYyXu/zcZn On 2017-06-28 18:10, Baurzhan Ismagulov wrote: > On Tue, Jun 27, 2017 at 07:38:46PM +0200, Jan Kiszka wrote: >> for days, I was hunting a nasty bug around multistrap mystically failing >> in a jessie docker container while working fine in a stretch container >> as well as a regular jessie VM installation. It turned out that the >> docker image (debian:jessie-slim) contains >> >> /etc/apt/apt.conf.d/docker-gzip-indexes >> >> which disables the unpacking of packages index files after downloading. >> Due to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774698, this >> also affected the multistrap call of apt-get. So, everyone trying to >> build Isar images with jessie can run into this bug. Maybe we should >> detect the affect version (<2.2.1) and warn at least? > > Good idea, thanks for the analysis! I've opened > https://github.com/ilbers/isar/issues/16. > I can try writing a patch. Do you have a suggestion where to hook up this check best? > >> Considering to pull in 2.2.9 from stretch into my builder image now... > > Did this help with gzipped indexes? > Yep, see my patch for the kas docker image. Jan -- Siemens AG, Corporate Technology, CT RDA ITP SES-DE Corporate Competence Center Embedded Linux