Project

General

Profile

Debian Repository » History » Version 19

Marc Dequènes, 2021-10-27 13:16

1 1 Marc Dequènes
h1. Debian Repository
2
3 3 Marc Dequènes
h2. Content
4
5
Since Buster we document here the reason for having custom/ported packages in this repository.
6
7 12 Marc Dequènes
h3. Sid
8
9
| lxd | Packaging of LXD (unsuitable for official Debian upload) |
10
11 8 Marc Dequènes
h3. Bullseye
12
13 16 Marc Dequènes
|_. Packages |_. Reason |
14
| spoolinger | DC tool, packaging in Debian WIP |
15
| xl2tpd | fixed upstream release|
16
| openldap |/2. backport for N-Way Sync and better cn=config management|
17
| python-ldap |
18
| python-certbot-dns-rfc2136 | certbot DNS plugin with workaround since the "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244 is not being merged and no solution in sight |
19 1 Marc Dequènes
| lxd |/3. Packaging of LXD (unsuitable for official Debian upload), and related backports |
20 12 Marc Dequènes
| lxc |
21 15 Marc Dequènes
| dqlite |
22 16 Marc Dequènes
| criu | Backport for live migrations with LXD |
23 18 Marc Dequènes
| roundcube | back for newer version |
24 8 Marc Dequènes
25 3 Marc Dequènes
h3. Buster
26 1 Marc Dequènes
27 16 Marc Dequènes
|_. Packages |_. Reason |
28
| ftp-ssl | missing in Buster |
29
| m2crypto|dependency for *srv_cert_tlsa_gen*|
30
| molly-guard|/2. backported "fix for Debian#914716":https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914716 |
31
| usrmerge|
32
| phpmyadmin|/7. phpmyadmin is missing from Buster and previous version was broken (#670), simple backport with a few dependencies |
33
| google-recaptcha|
34
| phpmyadmin-motranslator|
35
| phpmyadmin-shapefile|
36
| phpmyadmin-sql-parser|
37
| tcpdf|
38
| twig-extensions|
39
| python-acme |/3. certbot with "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244 |
40
| python-certbot |
41
| python-certbot-dns-rfc2136 |
42
| roundcube |/2. port of the 1.4 series to get important improvements  |
43
| php-masterminds-html5 |
44
| spoolinger | DC tool, packaging in Debian WIP |
45
| inspircd | patched to be able to reload the TLS certificate without restarting (not supported in v2) |
46
| xl2tpd | fixed upstream release |
47
| openldap |/2. backport for N-Way Sync and better cn=config management |
48
| python-ldap|
49 19 Marc Dequènes
| ruby-httpclient | backport to fix #995448 |
50 3 Marc Dequènes
51 2 Marc Dequènes
h2. Administration
52
53 1 Marc Dequènes
All files are stored into */srv/www/sites/repository.duckcorp.org* (config, packages, upload zone…). The user *dc-repository* has been created to handle all the necessary tasks with only limited rights.
54
55
Regular administration is to be done using the *adm_dc-repository* script as root. This script is able to sudo and pass local configuration options to reprepro, and avoid messing with the rights.
56
57
For example:
58
<pre>
59
# adm_dc-repository list jessie
60
jessie|dc-net|amd64: libiksemel-dev 1.4-2+dc1
61
jessie|dc-net|amd64: libiksemel-utils 1.4-2+dc1
62
jessie|dc-net|amd64: libiksemel3 1.4-2+dc1
63
jessie|dc-net|amd64: zabbix-agent 1:2.4.6+dfsg-1+dc1
64
65
jessie|dc-net|i386: zabbix-agent 1:2.4.6+dfsg-1+dc1
66
67
jessie|dc-net|source: libiksemel 1.4-2+dc1
68
jessie|dc-net|source: zabbix 1:2.4.6+dfsg-1+dc1
69
</pre>
70 2 Marc Dequènes
71
h2. Adding Contributors
72
73 15 Marc Dequènes
The list of uploader is setup into *data/duckcorp/debian_repository/reprepro_conf/dc-incoming-uploaders*. Use the _playbooks/tenants/duckcorp/debian_repository.yml_ playbook to deploy it.
74 6 Marc Dequènes
75
h2. Renewing Signing Key
76
77
gpg expects to have full control over the tty, so temporarily give the tty's ownership over to the _dc-repository_ user (or document here a better solution).
78
79
Key creation:
80
81
<pre>
82
chown dc-repository $(tty)
83
su - dc-repository
84
gpg --full-generate-key
85
# default key is fine
86
# expiration: 5y
87
# Real name: DuckCorp Archive Automatic Signing Key
88
# Email address: admin_at_duckcorp.org
89
# note the new <key-id>
90
gpg --armor --export <key-id> >duckcorp_repository.gpg.key
91
chown root $(tty)
92
</pre>
93
94
Update the <key_id> in _host_vars/Toushirou/debian_repository.yml_ and redeploy the repository configuration:
95
96
    ansible-playbook --diff playbooks/tenants/duckcorp/debian_repository.yml
97
98
Force resigning with the new key:
99
100
    adm_dc-repository --export=lookedat export
101
102
Then update the APT trusted keys on all hosts:
103
104
    ansible-playbook --diff -t apt playbooks/common.yml