| Message ID | 20240719113403.149492-1-felix.moessbauer@siemens.com |
|---|---|
| State | Accepted, archived |
| Headers | show |
| Series | [1/1] switch debian snapshot mirror to snapshot.debian.org | expand |
On Fri, 2024-07-19 at 13:34 +0200, 'Felix Moessbauer' via isar-users wrote: > The cloudflare mirror is not updated since may 2024. By that, other > projects like reproducible-containers switched back to the "official" > snapshot.d.o mirror, after being informed by me. > > Having an outdated upstream mirror poses the risk of being > "non-reproducible", just because the SDE is more recent than the > latest > snapshot and once the mirror is updated, a more recent snapshot is > taken > (due to the redirect-to-latest logic of the snapshot mirror). > > This patch also switches the debian mirror to snapshot.debian.org to > at > least use an official and maintained mirror. In case downstream users > run into rate-limiting issues, they still can switch to other > mirrors. > > Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com> > --- > References: > > - snapshot-debian ML: > https://lists.debian.org/debian-snapshot/2024/06/msg00014.html > - docker-library issue: > https://github.com/docker-library/official-images/issues/16044#issuecomment-2238577223 > - reproducible-containers issue: > https://github.com/reproducible-containers/repro-sources-list.sh/issues/17 > > Best regards, > Felix Moessbauer > > meta/conf/distro/debian-common.conf | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/meta/conf/distro/debian-common.conf > b/meta/conf/distro/debian-common.conf > index 9b07efb5..d8556964 100644 > --- a/meta/conf/distro/debian-common.conf > +++ b/meta/conf/distro/debian-common.conf > @@ -41,4 +41,4 @@ COMPAT_DISTRO_ARCH:amd64 = "i386" > COMPAT_DISTRO_ARCH:arm64 = "armhf" > > # snapshot mirror for reproducible builds > -DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot- > cloudflare.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n" > \ No newline at end of file > +DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) > snapshot.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n" > -- > 2.39.2 > Applied to next, thanks.
diff --git a/meta/conf/distro/debian-common.conf b/meta/conf/distro/debian-common.conf index 9b07efb5..d8556964 100644 --- a/meta/conf/distro/debian-common.conf +++ b/meta/conf/distro/debian-common.conf @@ -41,4 +41,4 @@ COMPAT_DISTRO_ARCH:amd64 = "i386" COMPAT_DISTRO_ARCH:arm64 = "armhf" # snapshot mirror for reproducible builds -DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot-cloudflare.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n" \ No newline at end of file +DISTRO_APT_SNAPSHOT_PREMIRROR ??= "deb.debian.org/(.*) snapshot.debian.org/archive/\1/${APT_SNAPSHOT_DATE}/\n"
The cloudflare mirror is not updated since may 2024. By that, other projects like reproducible-containers switched back to the "official" snapshot.d.o mirror, after being informed by me. Having an outdated upstream mirror poses the risk of being "non-reproducible", just because the SDE is more recent than the latest snapshot and once the mirror is updated, a more recent snapshot is taken (due to the redirect-to-latest logic of the snapshot mirror). This patch also switches the debian mirror to snapshot.debian.org to at least use an official and maintained mirror. In case downstream users run into rate-limiting issues, they still can switch to other mirrors. Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com> --- References: - snapshot-debian ML: https://lists.debian.org/debian-snapshot/2024/06/msg00014.html - docker-library issue: https://github.com/docker-library/official-images/issues/16044#issuecomment-2238577223 - reproducible-containers issue: https://github.com/reproducible-containers/repro-sources-list.sh/issues/17 Best regards, Felix Moessbauer meta/conf/distro/debian-common.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)