Project

General

Profile

Debian Repository » History » Version 13

Marc Dequènes, 2021-10-16 16:59

1 1 Marc Dequènes
h1. Debian Repository
2
3 3 Marc Dequènes
h2. Content
4
5
Since Buster we document here the reason for having custom/ported packages in this repository.
6
7 12 Marc Dequènes
h3. Sid
8
9
| lxd | Packaging of LXD (unsuitable for official Debian upload) |
10
11 8 Marc Dequènes
h3. Bullseye
12
13
|_.Packages|_.Reason|
14
|spoolinger|DC tool, packaging in Debian WIP|
15
|xl2tpd|fixed upstream release|
16 9 Marc Dequènes
|openldap|/2.N-Way Sync and better cn=config management|
17
|python-ldap|
18 11 Marc Dequènes
|python-certbot-dns-rfc2136| certbot DNS plugin with workaround since the "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244 is not being merged and no solution in sight|
19 12 Marc Dequènes
| lxd |/3. Packaging of LXD (unsuitable for official Debian upload), and related backports |
20
| lxc ||
21
| dqlite ||
22 8 Marc Dequènes
23 3 Marc Dequènes
h3. Buster
24 1 Marc Dequènes
25 8 Marc Dequènes
|_.Packages|_.Reason|
26 4 Marc Dequènes
|ftp-ssl|missing in Buster|
27 3 Marc Dequènes
|m2crypto|dependency for *srv_cert_tlsa_gen*|
28
|molly-guard|/2.backported "fix for Debian#914716":https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914716|
29
|usrmerge|
30 4 Marc Dequènes
|phpmyadmin|/7.phpmyadmin is missing from Buster and previous version was broken (#670), simple backport with a few dependencies|
31
|google-recaptcha|
32
|phpmyadmin-motranslator|
33
|phpmyadmin-shapefile|
34
|phpmyadmin-sql-parser|
35
|tcpdf|
36
|twig-extensions|
37 3 Marc Dequènes
|python-acme|/3.certbot with "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244|
38
|python-certbot|
39
|python-certbot-dns-rfc2136|
40 4 Marc Dequènes
|roundcube|/2.port of the 1.4 series to get important improvements|
41
|php-masterminds-html5|
42
|spoolinger|DC tool, packaging in Debian WIP|
43 1 Marc Dequènes
|inspircd|patched to be able to reload the TLS certificate without restarting (not supported in v2)|
44
|xl2tpd|fixed upstream release|
45 9 Marc Dequènes
|openldap|/2.N-Way Sync and better cn=config management|
46
|python-ldap|
47 3 Marc Dequènes
48 2 Marc Dequènes
h2. Administration
49
50 1 Marc Dequènes
All files are stored into */srv/www/sites/repository.duckcorp.org* (config, packages, upload zone…). The user *dc-repository* has been created to handle all the necessary tasks with only limited rights.
51
52
Regular administration is to be done using the *adm_dc-repository* script as root. This script is able to sudo and pass local configuration options to reprepro, and avoid messing with the rights.
53
54
For example:
55
<pre>
56
# adm_dc-repository list jessie
57
jessie|dc-net|amd64: libiksemel-dev 1.4-2+dc1
58
jessie|dc-net|amd64: libiksemel-utils 1.4-2+dc1
59
jessie|dc-net|amd64: libiksemel3 1.4-2+dc1
60
jessie|dc-net|amd64: zabbix-agent 1:2.4.6+dfsg-1+dc1
61
62
jessie|dc-net|i386: zabbix-agent 1:2.4.6+dfsg-1+dc1
63
64
jessie|dc-net|source: libiksemel 1.4-2+dc1
65
jessie|dc-net|source: zabbix 1:2.4.6+dfsg-1+dc1
66
</pre>
67 2 Marc Dequènes
68
h2. Adding Contributors
69
70
The list of uploader is setup into */srv/www/sites/repository.duckcorp.org/htdocs/debian/conf/dc-incoming-uploaders*.
71 6 Marc Dequènes
72
h2. Renewing Signing Key
73
74
gpg expects to have full control over the tty, so temporarily give the tty's ownership over to the _dc-repository_ user (or document here a better solution).
75
76
Key creation:
77
78
<pre>
79
chown dc-repository $(tty)
80
su - dc-repository
81
gpg --full-generate-key
82
# default key is fine
83
# expiration: 5y
84
# Real name: DuckCorp Archive Automatic Signing Key
85
# Email address: admin_at_duckcorp.org
86
# note the new <key-id>
87
gpg --armor --export <key-id> >duckcorp_repository.gpg.key
88
chown root $(tty)
89
</pre>
90
91
Update the <key_id> in _host_vars/Toushirou/debian_repository.yml_ and redeploy the repository configuration:
92
93
    ansible-playbook --diff playbooks/tenants/duckcorp/debian_repository.yml
94
95
Force resigning with the new key:
96
97
    adm_dc-repository --export=lookedat export
98
99
Then update the APT trusted keys on all hosts:
100
101
    ansible-playbook --diff -t apt playbooks/common.yml