CrunchBang Linux Forums » Feedback & Suggestions » Suggestion: Do not use Backports by default
In reference to the discussion in this thread from post 236 onwards and in other well known threads
http://crunchbanglinux.org/forums/post/166136/#p166136
Change the pin value of the Squeeze repos so that backports is not used by default .
That is all 
Also, having Statler set as the default release in apt.conf invalidates the pin priority of 1001 in /etc/apt/preferences. I'm n ot on Statler, but I did replicate the same on my Squeeze box:
lekoraco@mrdeb ~ % cat /etc/apt/preferences
Package: *
Pin: release a=squeeze
Pin-Priority: 1001
lekoraco@mrdeb ~ % cat /etc/apt/apt.conf
APT::Default-Release "squeeze";So, even though I set the pin priority to 1001, check out what apt-cache says:
lekoraco@mrdeb ~ % apt-cache policy gedit
gedit:
Installed: (none)
Candidate: 2.30.4-1squeeze1
Version table:
2.30.4-1squeeze1 0
990 http://ftp.de.debian.org/debian/ squeeze/main amd64 PackagesThe value is set to 990, as per apt.conf. You can just leave Statler out from one or the other, because this way you don't get the desired pattern as per .../preferences. Namely, if you disable the Statler repo, dist-upgrade and pull in Squeeze packages, don't like it, then enable the Statler repo, there will be no downgrading of packages.
I was under the impression you had to apt-get -t squeeze-backports install "package" to install from backports?
I was under the impression you had to apt-get -t squeeze-backports install "package" to install from backports?
Not if backports has a higher priority as set in /etc/apt/preferences
I'm of the same mind as rhowaldt when he said to el_koraco
....you do a great job of explaining this stuff. despite those great explanations, i am still struggling with how all this works so you would not have seen much replies/interest from me, but let me tell you, just because it isn't visible doesn't mean it isn't there....
in this http://crunchbanglinux.org/forums/post/166157/#p166157 post.
A question though: is the default pinning set up during a Debian netinst sufficient if backports is uncommented even though that set up didn't create a file in /etc/apt/preferences or /etc/apt/apt.conf or would it be better, would my system be safer, if I create those files?? How should they look?? I saw them once or twice in the original Statler, but never messed with them. Just curious. 
EDIT -- I'm aware of and have read this http://crunchbanglinux.org/forums/post/111456/#p111456 but my question is: how much trust should I place in the default netinst setup to protect me and my system from being borked. I have no intention of pushing the wrong button but here be gremlins seems to often be the fallback rule. 
Last edited by dubois (2011-11-29 14:58:22)
A question though: is the default pinning set up during a Debian netinst sufficient if backports is uncommented even though that set up didn't create a file in /etc/apt/preferences or /etc/apt/apt.conf or would it be better, would my system be safer, if I create those files?? How should they look??
It is quite sufficient. in case of a regular netinstall, the default value for either Stable or Testing (depending what installer you used) get a priority of 500. This is handled by the release file or something, I'm not a 100 percent sure, dpkg is a cryptic beast.
Packages from backports get a priority of 100, so they won't conflict with the squeeze packages. Other third party repos vary. Debian multimedia packages get a priority of 500 as well, so they will get a priority over the stable packages, which is what you want really most of the time. Check this out, it's from a Squeeze install with backports and Multimedia added:
lekoraco@mrdeb ~ % apt-cache policy mplayer
mplayer:
Installed: 2:1.0~rc3++svn20100804-0.2squeeze1
Candidate: 2:1.0~rc3++svn20100804-0.2squeeze1
Version table:
2:1.0~rc4.dfsg1+svn33713-2~bpo60+1 0
100 http://backports.debian.org/debian-backports/ squeeze-backports/main amd64 Packages
*** 2:1.0~rc3++svn20100804-0.2squeeze1 0
500 http://www.debian-multimedia.org/ squeeze/main amd64 Packages
100 /var/lib/dpkg/status
2:1.0~rc3++final.dfsg1-1 0
500 http://ftp.de.debian.org/debian/ squeeze/main amd64 PackagesLook at the values - 100 for bpo, 500 for squeeze and multimedia.
When you add a default release in apt.conf, it gets a value of 990 - that's the case with packages from Statler on a regular #! install. In your case, if you plan to use Debian Stable as the base and add the Statler packages, declare Statler as the default release in apt.conf, don't even make a preferences file, and you're good to go. The main reason for the problems in #!, ie. backports upgrading everything they come into contact with, is the fact that Squeeze got a pin value of 100 in preferences.
OK. Thank you very much. I'd read something else you wrote that was very similar to what you just said but couldn't find it to check my memory. I'm using a Debian Xfce netinst with the Iceweasel release [currently 8.0.3] from http://mozilla.debian.net/ and it couldn't be sweeter. It'd make a great tee shirt, too: Trust me! I'm Debian. Thanks again for confirming.
so what do you think of this repo list?
#############################################################
################ ZACHARiA'S CRUNCHBANG REPOS ###############
#############################################################
################### OFFICIAL DEBIAN REPOS ###################
#############################################################
###### Debian Main Repos
deb http://ftp.pt.debian.org/debian/ squeeze main contrib non-free
deb-src http://ftp.pt.debian.org/debian/ squeeze main contrib non-free
###### Debian Update Repos
deb http://security.debian.org/ squeeze/updates main contrib non-free
deb-src http://security.debian.org/ squeeze/updates main contrib non-free
#### Debian Multimedia - http://www.debian-multimedia.org/
## Run this command: apt-get install debian-keyring
## And then this: sudo gpg --keyring /usr/share/keyrings/debian-keyring.gpg -a --export 07DC563D1F41B907 | sudo apt-key add -
deb http://www.debian-multimedia.org stable main non-free
#### DEBIAN BACKPORTS
deb http://backports.debian.org/debian-backports squeeze-backports main contrib non-free
deb-src http://backports.debian.org/debian-backports squeeze-backports main contrib non-free
##############################################################
##################### CRUNCHBANG REPOS ######################
##############################################################
## Compatible with Debian Squeeze, but use at your own risk.
deb http://packages.crunchbang.org/statler statler main
# deb-src http://packages.crunchbang.org/statler statler main
## CRUNCHBANG MULTIMEDIA
## Debian Multimedia Mirror
deb http://packages.crunchbang.org/statler-mm squeeze main non-free
# deb-src http://packages.crunchbang.org/statler-mm squeeze main non-free
## CRUNCHBANG MOZILLA
## Debian Mozilla Mirror
deb http://packages.crunchbang.org/statler-mozilla squeeze-backports iceweasel-release
#deb-src http://packages.crunchbang.org/statler-mozilla squeeze-backports iceweasel-release
##############################################################
######################## OTHER STUFF #########################
##############################################################
#### Video tools
## Run this command: wget -O - http://www.bunkus.org/gpg-pub-moritzbunkus.txt | sudo apt-key add -
deb http://www.bunkus.org/debian/squeeze/ ./
deb-src http://www.bunkus.org/debian/squeeze/ ./
#### Google Linux Software Repositories - http://www.google.com
## Run this command: sudo wget -q -O - https://dl-ssl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
deb http://dl.google.com/linux/deb/ stable non-free main
#### Wine - http://www.winehq.org
## Run this command: sudo wget -O - http://www.lamaresh.net/apt/key.gpg | sudo apt-key add -
deb http://www.lamaresh.net/apt squeeze main
#### Oracle VM VirtualBox.
## Run this command: sudo wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -
deb http://download.virtualbox.org/virtualbox/debian squeeze contrib
#### Plowshare - http://code.google.com/p/plowshare/
## Run this command: sudo apt-get --allow-unauthenticated install plowshare
deb http://mcrapet.free.fr/debian/ unstable/should i only keep #!'s repos and thats it? is this why archey tells me im using debian instead of #!?
kudos
Last edited by zacharias (2012-03-12 15:57:01)
Not sure about Archy, #! is Debian based anyway, but remove the CrunchBang Multimedia repo, you have already the Debian Multimedia repo. If you want more info about some issues I think are important look at my thread: http://crunchbanglinux.org/forums/topic … -updates/.
Not sure about Archy, #! is Debian based anyway, but remove the CrunchBang Multimedia repo, you have already the Debian Multimedia repo. If you want more info about some issues I think are important look at my thread: http://crunchbanglinux.org/forums/topic … -updates/.
many thanks. will do look at that once i get home, but i have the bpo version of #!. same applies to it?
kudos
^ Yes, same appplies to the backports version.
^ Yes, same appplies to the backports version.
ok. should i maintain these or ust kill them?
## Compatible with Debian Squeeze, but use at your own risk.
deb http://packages.crunchbang.org/statler statler mainkudos
^ I never said, you should remove the official #! repos.
Posts [ 13 ]
CrunchBang Linux Forums » Feedback & Suggestions » Suggestion: Do not use Backports by default
Forums powered by PunBB. Hosted by Linode.
Copyright © CrunchBang Linux.
Proudly powered by Debian GNU/Linux.
Debian is a registered trademark of Software in the Public Interest, Inc.