Project

General

Profile

Debian Repository » History » Version 6

Marc Dequènes, 2020-08-04 05:47

1 1 Marc Dequènes
h1. Debian Repository
2
3 3 Marc Dequènes
h2. Content
4
5
Since Buster we document here the reason for having custom/ported packages in this repository.
6
7
h3. Buster
8
9
|_.Packages|Reason|
10 4 Marc Dequènes
|ftp-ssl|missing in Buster|
11 3 Marc Dequènes
|m2crypto|dependency for *srv_cert_tlsa_gen*|
12
|molly-guard|/2.backported "fix for Debian#914716":https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914716|
13
|usrmerge|
14 4 Marc Dequènes
|phpmyadmin|/7.phpmyadmin is missing from Buster and previous version was broken (#670), simple backport with a few dependencies|
15
|google-recaptcha|
16
|phpmyadmin-motranslator|
17
|phpmyadmin-shapefile|
18
|phpmyadmin-sql-parser|
19
|tcpdf|
20
|twig-extensions|
21 3 Marc Dequènes
|python-acme|/3.certbot with "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244|
22
|python-certbot|
23
|python-certbot-dns-rfc2136|
24 4 Marc Dequènes
|roundcube|/2.port of the 1.4 series to get important improvements|
25
|php-masterminds-html5|
26
|spoolinger|DC tool, packaging in Debian WIP|
27 5 Marc Dequènes
|inspircd|patched to be able to reload the TLS certificate without restarting|
28 3 Marc Dequènes
29
30 2 Marc Dequènes
h2. Administration
31
32 1 Marc Dequènes
All files are stored into */srv/www/sites/repository.duckcorp.org* (config, packages, upload zone…). The user *dc-repository* has been created to handle all the necessary tasks with only limited rights.
33
34
Regular administration is to be done using the *adm_dc-repository* script as root. This script is able to sudo and pass local configuration options to reprepro, and avoid messing with the rights.
35
36
For example:
37
<pre>
38
# adm_dc-repository list jessie
39
jessie|dc-net|amd64: libiksemel-dev 1.4-2+dc1
40
jessie|dc-net|amd64: libiksemel-utils 1.4-2+dc1
41
jessie|dc-net|amd64: libiksemel3 1.4-2+dc1
42
jessie|dc-net|amd64: zabbix-agent 1:2.4.6+dfsg-1+dc1
43
44
jessie|dc-net|i386: zabbix-agent 1:2.4.6+dfsg-1+dc1
45
46
jessie|dc-net|source: libiksemel 1.4-2+dc1
47
jessie|dc-net|source: zabbix 1:2.4.6+dfsg-1+dc1
48
</pre>
49 2 Marc Dequènes
50
h2. Adding Contributors
51
52
The list of uploader is setup into */srv/www/sites/repository.duckcorp.org/htdocs/debian/conf/dc-incoming-uploaders*.
53 6 Marc Dequènes
54
h2. Renewing Signing Key
55
56
gpg expects to have full control over the tty, so temporarily give the tty's ownership over to the _dc-repository_ user (or document here a better solution).
57
58
Key creation:
59
60
<pre>
61
chown dc-repository $(tty)
62
su - dc-repository
63
gpg --full-generate-key
64
# default key is fine
65
# expiration: 5y
66
# Real name: DuckCorp Archive Automatic Signing Key
67
# Email address: admin_at_duckcorp.org
68
# note the new <key-id>
69
gpg --armor --export <key-id> >duckcorp_repository.gpg.key
70
chown root $(tty)
71
</pre>
72
73
Update the <key_id> in _host_vars/Toushirou/debian_repository.yml_ and redeploy the repository configuration:
74
75
    ansible-playbook --diff playbooks/tenants/duckcorp/debian_repository.yml
76
77
Force resigning with the new key:
78
79
    adm_dc-repository --export=lookedat export
80
81
Then update the APT trusted keys on all hosts:
82
83
    ansible-playbook --diff -t apt playbooks/common.yml