Project

General

Profile

Debian Repository » History » Version 8

Marc Dequènes, 2021-08-16 07:47

1 1 Marc Dequènes
h1. Debian Repository
2
3 3 Marc Dequènes
h2. Content
4
5
Since Buster we document here the reason for having custom/ported packages in this repository.
6
7 8 Marc Dequènes
h3. Bullseye
8
9
|_.Packages|_.Reason|
10
|spoolinger|DC tool, packaging in Debian WIP|
11
|xl2tpd|fixed upstream release|
12
|openldap|N-Way Sync and better cn=config management|
13
|python-acme|/3.certbot with "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244|
14
|python-certbot|
15
|python-certbot-dns-rfc2136|
16
17 3 Marc Dequènes
h3. Buster
18 1 Marc Dequènes
19 8 Marc Dequènes
|_.Packages|_.Reason|
20 4 Marc Dequènes
|ftp-ssl|missing in Buster|
21 3 Marc Dequènes
|m2crypto|dependency for *srv_cert_tlsa_gen*|
22
|molly-guard|/2.backported "fix for Debian#914716":https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914716|
23
|usrmerge|
24 4 Marc Dequènes
|phpmyadmin|/7.phpmyadmin is missing from Buster and previous version was broken (#670), simple backport with a few dependencies|
25
|google-recaptcha|
26
|phpmyadmin-motranslator|
27
|phpmyadmin-shapefile|
28
|phpmyadmin-sql-parser|
29
|tcpdf|
30
|twig-extensions|
31 3 Marc Dequènes
|python-acme|/3.certbot with "CNAME resolution patch":https://github.com/certbot/certbot/pull/7244|
32
|python-certbot|
33
|python-certbot-dns-rfc2136|
34 4 Marc Dequènes
|roundcube|/2.port of the 1.4 series to get important improvements|
35
|php-masterminds-html5|
36
|spoolinger|DC tool, packaging in Debian WIP|
37 7 Marc Dequènes
|inspircd|patched to be able to reload the TLS certificate without restarting (not supported in v2)|
38
|xl2tpd|fixed upstream release|
39
|openldap|N-Way Sync and better cn=config management|
40 3 Marc Dequènes
41 2 Marc Dequènes
h2. Administration
42
43 1 Marc Dequènes
All files are stored into */srv/www/sites/repository.duckcorp.org* (config, packages, upload zone…). The user *dc-repository* has been created to handle all the necessary tasks with only limited rights.
44
45
Regular administration is to be done using the *adm_dc-repository* script as root. This script is able to sudo and pass local configuration options to reprepro, and avoid messing with the rights.
46
47
For example:
48
<pre>
49
# adm_dc-repository list jessie
50
jessie|dc-net|amd64: libiksemel-dev 1.4-2+dc1
51
jessie|dc-net|amd64: libiksemel-utils 1.4-2+dc1
52
jessie|dc-net|amd64: libiksemel3 1.4-2+dc1
53
jessie|dc-net|amd64: zabbix-agent 1:2.4.6+dfsg-1+dc1
54
55
jessie|dc-net|i386: zabbix-agent 1:2.4.6+dfsg-1+dc1
56
57
jessie|dc-net|source: libiksemel 1.4-2+dc1
58
jessie|dc-net|source: zabbix 1:2.4.6+dfsg-1+dc1
59
</pre>
60 2 Marc Dequènes
61
h2. Adding Contributors
62
63
The list of uploader is setup into */srv/www/sites/repository.duckcorp.org/htdocs/debian/conf/dc-incoming-uploaders*.
64 6 Marc Dequènes
65
h2. Renewing Signing Key
66
67
gpg expects to have full control over the tty, so temporarily give the tty's ownership over to the _dc-repository_ user (or document here a better solution).
68
69
Key creation:
70
71
<pre>
72
chown dc-repository $(tty)
73
su - dc-repository
74
gpg --full-generate-key
75
# default key is fine
76
# expiration: 5y
77
# Real name: DuckCorp Archive Automatic Signing Key
78
# Email address: admin_at_duckcorp.org
79
# note the new <key-id>
80
gpg --armor --export <key-id> >duckcorp_repository.gpg.key
81
chown root $(tty)
82
</pre>
83
84
Update the <key_id> in _host_vars/Toushirou/debian_repository.yml_ and redeploy the repository configuration:
85
86
    ansible-playbook --diff playbooks/tenants/duckcorp/debian_repository.yml
87
88
Force resigning with the new key:
89
90
    adm_dc-repository --export=lookedat export
91
92
Then update the APT trusted keys on all hosts:
93
94
    ansible-playbook --diff -t apt playbooks/common.yml