tag/debian

will

git clone https://monorepo.liw.fi/git/debian

git init .
git add -v .
git commit -m "Debian 12 (bookworm), main"

commit 8ae3129b9f222534d6ed20dd0489fb8f2f1d1a97 (HEAD -> main, origin/main, origin/HEAD)
Author: Lars Wirzenius <liw@liw.fi>
Date:   Tue Mar 19 11:05:57 2024 +0000

    Debian 12 main

$ scp exolobe1-spec.yaml root@v-i:
exolobe1-spec.yaml                             100%  228   190.6KB/s   00:00
$ ssh root@v-i
Linux v-i 5.10.0-16-amd64 #1 SMP Debian 5.10.127-1 (2022-06-30) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Sun Aug  7 13:10:02 2022 from 10.1.1.54
root@v-i:~# time ./v-i exolobe1-spec.yaml
OK, done

real    1m11.003s
user    0m30.671s
sys 0m8.645s
root@v-i:~# reboot
Connection to v-i closed by remote host.
Connection to v-i closed.
$

hostname: exolobe1
drive: /dev/sda
extra_lvs:
  - name: home
    size: 300G
    mounted: /home
ansible_vars:
  user_pub: |
   ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPQe6lsTapAxiwhhEeE/ixuK+5N8esCsMWoekQqjtxjP liw personal systems

drive: /dev/nvme0n1
extra_drives:
  - /dev/nvme1n1
hostname: exolobe5
extra_playbooks:
  - exolobe5-ansible.yml
ansible_vars:
  user_pub: |
   ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPQe6lsTapAxiwhhEeE/ixuK+5N8esCsMWoekQqjtxjP liw personal systems
extra_lvs:
  - name: vms
    size: 1T
    fstype: ext4
    mounted: /mnt/vms

#!/bin/sh

PKG=perfectbackup
LIB="/var/lib/ $PKG"

rm -rf "$LIB"

liw@havelock$ ./systest -v --target 192.168.122.139 --user tomjon
test 1/6: cat
test 2/6: only-ssh-port
ERROR: Assertion failed: ['22/tcp', '139/tcp', '445/tcp'] != ['22/tcp']
[status 1]
liw@havelock$ ./systest -v --target 192.168.122.139 --user tomjon \
    cat ping6-localhost ping-localhost simple-dns-lookup ssh-login
test 1/5: cat
test 2/5: ping6-localhost
test 3/5: ping-localhost
test 4/5: simple-dns-lookup
test 5/5: ssh-login
liw@havelock$ 

sudo vmdebootstrap \
--log fboxlite.log \
--log-level debug \
--image fboxlite.img \
--hostname fboxlite \
--size 1G \
--verbose \
--enable-dhcp \
--package ssh \
--package apache2 \
--mirror http://mirror.lan/debian/ \
--customize=./fboxlite-customize \
--root-password=password1

#!/usr/bin/python

import crypt
import os
import subprocess
import sys

def runcmd(argv, stdin='', ignore_fail=False, **kwargs):
    p = subprocess.Popen(argv, stdin=subprocess.PIPE, 
                         stdout=subprocess.PIPE, stderr=subprocess.PIPE, 
                         **kwargs)
    out, err = p.communicate(stdin)
    if p.returncode != 0:
        msg = 'command failed: %s\n%s\n%s' % (argv, out, err)
        if not ignore_fail:
            raise Exception(msg)
    return out

print 'Customizing fboxlite'

rootdir = sys.argv[1]

# Create a fboxlite account.
runcmd(['chroot', rootdir, 'adduser', '--gecos', 'Freedombox Lite',
        '--disabled-password', 'fboxlite'])
encrypted = crypt.crypt('password1', '..')
runcmd(['chroot', rootdir, 'usermod', '-p', encrypted, 'fboxlite'])

# Create /srv/shared for holding shared files.
shared = os.path.join(rootdir, 'srv', 'shared')
os.mkdir(shared)
runcmd(['chroot', rootdir, 'chown', 'fboxlite:fboxlite', 'srv/shared'])
os.chmod(shared, 0775)

# Configure Apache to serve /srv/shared as /shared.
conf = os.path.join(rootdir, 'etc', 'apache2', 'sites-available', 'default')
text = open(conf, 'r').read()
lines = text.splitlines()
new_lines = [
    'Alias /shared "/srv/shared"',
    '<Directory "/srv/shared/">',
    'Options Indexes',
    '</Directory>',
]
lines = lines[:-1] + new_lines + lines[-1:]
text = ''.join('%s\n' % line for line in lines)
open(conf, 'w').write(text)

virt-install --connect qemu:///system -n fboxlite -r 512 \
--os-type linux --os-variant debiansqueeze \
--disk $(pwd)/fboxlite.img --vnc  --import

sftp://fboxlite@192.168.122.133/srv/shared/
http://192.168.122.133/shared/

sudo ./vmdebootstrap --image test.img --size 1G \
--log test.log --mirror http://mirror.lan/debian/

NAME
       addsysuser, delsysuser - create and remove systems user in Debian pack‐
       ages

SYNOPSIS
       addsysuser [options] username

       delsysuser [options] username

DESCRIPTION
       addsysuser creates a system user, and delsysuser removes it.  The  pur‐
       puse  of these tools is to make it easier for Debian packages to create
       and remove system users as  the  pacakges  are  installed  and  purged.
       These are wrappers around adduser(8) and deluser(8).

       addsysuser  will  create the system user, unless it already exists.  If
       the user already exists, it does nothing.

       delsysuser removes the user.  However,  the  system  administrator  may
       configure  it  to  never remove the user, or to remove only some users.
       Use the /etc/adduser.conf for the settings:

       DELETESYSTEMUSERS
          Set to true or false  depending  on  whether  delsysuser  should
          remove the system user or not.  Defaults to true.

OPTIONS
       -p, --packagePACKAGE
          Record the user as being used by a specific package.  Many pack‐
          ages can use the same user.  delsysuser  will  only  remove  the
          user when no packages are using it anymore.

       --no-act
          Only  pretend  to call adduser or deluser without actually doing
          so.  This allows easier testing of command lines.

FILES
       /etc/adduser.conf
          Configuration file for addsysuser and delsysuser.

EXAMPLE
       In the postinst script:

          addsysuser --package hello hellouser

       In the postrm script:

          delsysuser --package hello hellouser

SEE ALSO
       adduser(8), deluser(8).

piuparts foo.deb

piuparts -a foo

piuparts -a -d dapper -d hardy -d intrepid -d jaunty foo

piuparts -l foo.log foo.deb

2m11.0s INFO: PASS: All tests.
5m33.8s ERROR: Broken symlinks:

piuparts -d jaunty foo

sudo piuparts -d jaunty -p -l foo.log foo.deb

vmdebootstrap squeeze foo.img http://cdn.debian.net/debian 

scenario        % saved     comment
-----------------------------------
plain            3.7        plain zsync, original .debs
zsyncmakeZ       3.7        use zsync gzip magic, original .debs
rsyncable       25          gzip magic, recompress . with --rsyncable
rsyncable2      33          gzip magic, compress ar, not within tar
rsyncable3      33          gzip magic, convert lzma, bzip2 to gzip
uncompressed    50          uncompress tarballs within .debs

#!/usr/bin/debian-postinst
create-system-user httpd
update-config-file /etc/blipblop.conf

#!/bin/sh
set -e
case "$1" in
purge) dpkg-remove-logfiles --package=blipblop
esac

Year	Count	Names
1999	4	Joseph Carter, Ben Collins, Wichert Akkerman, Richard Braakman
2000	4	Ben Collins, Wichert Akkerman, Joel Klecker, Matthew Vernon
2001	4	Branden Robinson, Anand Kumria, Ben Collins, Bdale Garbee
2002	3	Branden Robinson, Raphaël Hertzog, Bdale Garbee
2003	4	Moshe Zadka, Bdale Garbee, Branden Robinson, Martin Michlmayr
2004	3	Martin Michlmayr, Gergely Nagy, Branden Robinson
2005	6	Matthew Garrett, Andreas Schuldei, Angus Lees, Anthony Towns, Jonathan Walther, Branden Robinson
2006	7	Jeroen van Wolffelaar, Ari Pollak, Steve McIntyre, Anthony Towns, Andreas Schuldei, Jonathan (Ted) Walther, Bill Allombert
2007	8	Wouter Verhelst, Aigars Mahinovs, Gustavo Franco, Sam Hocevar, Steve McIntyre, Raphaël Hertzog, Anthony Towns, Simon Richter
2008	3	Marc Brockschmidt, Raphaël Hertzog, Steve McIntyre
2009	2	Stefano Zacchiroli, Steve McIntyre
2010	4	Stefano Zacchiroli, Wouter Verhelst, Charles Plessy, Margarita Manterola
2011	1	Stefano Zacchiroli (no vote yet)

tag/debian

Why I use Debian

Why is Debian the way it is?

What Debian wants to be

The constitution, power structure, governance

Social contract and Debian free software guidelines

Self-contained

No bundled libraries

Membership process

Release code names

Changing slowly

Why does Debian change software?

Debian Git monorepo

Motivation

Future of ".dsc"

Resource use

Implementation

Disclaimer

DPL elections: candidate counts

v-i version 0.2: non-interactive Debian installer for bare metal machines

v-i 0.1, a Debian installer using vmdb2

Debian disappointment

Alternative Debian installer based on vmdb2: v-i

Why Debian isn't fun for me

Free software development doesn't have to be awful

Debian and the SKS signature flooding attack

Retiring from Debian

Idea for a Debian QA service: monitoring install size with dependencies

On flatpak, snap, distros, and software distribution

Building Debian packages in CI (ick)

Context

Overview

Package versioning

Where should Debian packaging be stored in version control?

The build process

dpkg maintainer script containerisation

What is Debian all about, really? Or: friction, packaging complex applications

Another weekend, another big mailing list thread

The problem

When I was young(er) the world was horrible

Debian made some things better

The world has changed around Debian

The big question: why Debian?

What about non-Linux free operating systems

What is it Debian tries to do, anyway?

The disconnect

Things for low-friction proponents to improve

Things for Debian to improve

Comments?

Baits

Debian and the GDPR

Enabling TRIM/DISCARD on Debian, ext4, luks, and lvm

Dropping Yakking from Planet Debian

Debian miniconf in Cambridge

20 years ago I became a Debian developer

Two-factor auth for local logins in Debian using U2F keys

Not-platform for Debian project leader elections 2016

NOT a platform for Debian project leader election, 2016

My plan, if elected

Social committee

About me

Update on 'Backups as a service in Debian': no news is bad news

On Norbert Preining, Sage Sharp, and Debian

Jessie release part in Helsinki

DPL elections for 2015 are going on

A vision of backups in Debian

Thoughtful, inspiring words from Russ

Debian: developing it wrong

Abstract

Introduction and background

Build tools should be intelligent, packaging should be dumb

Configuration file handling on upgrades: add ucf to dpkg already

Clean building shouldn't be hard

Mass building shouldn't be hard

One VCS to rule them all

debian/rules clean: really?

Large scale semi-mechanical changes require too much effort

Conclusion

Debian discussion culture: what doesn't work

Dabbling in diplomacy

`debian/rules clean`: really?