From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 9adf0b6d
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 00:10:28 +0000 (UTC)
Received: from mail-vk0-f45.google.com (mail-vk0-f45.google.com
 [209.85.213.45])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id a6044a3c
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 00:10:27 +0000 (UTC)
Received: by mail-vk0-f45.google.com with SMTP id t8so36796700vke.3
 for <wireguard@lists.zx2c4.com>; Fri, 10 Feb 2017 16:24:13 -0800 (PST)
MIME-Version: 1.0
From: David Anderson <dave@natulte.net>
Date: Fri, 10 Feb 2017 16:23:50 -0800
Message-ID: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
Subject: (Unofficial) wireguard packages for Debian Stretch (testing)
To: wireguard@lists.zx2c4.com
Content-Type: multipart/alternative; boundary=001a11415e88b6df330548363b05
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a11415e88b6df330548363b05
Content-Type: text/plain; charset=UTF-8

Mellow greetings,

In case it's of use to anyone, I've built wireguard packages for Debian
testing. I wanted to play with wireguard on my Debian Stretch systems, but
wireguard is currently locked to Sid only until 1.0 brings API stability
guarantees.

So, I set up a cronjob that rebuilds the Sid source package on a Stretch
system, and the result is wireguard packages that track the latest release,
but don't pull in unstable versions of libc and whatnot when you try to
install them, as would happen if you tried to install via package pinning.

Naturally, you have only my word that the packages are unmodified rebuilds
of Debian's original package, and you're trusting packagecloud to not
tamper with the packages (it's their signing keys, not mine) so caveat
emptor. It works for me, it might work for you as well.

With the warnings and disclaimers out of the way, here's the repo:
https://packagecloud.io/danderson/wireguard?filter=debs

- Dave

--001a11415e88b6df330548363b05
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Mellow greetings,</div><div><br></div><div>In case it=
&#39;s of use to anyone, I&#39;ve built wireguard packages for Debian testi=
ng. I wanted to play with wireguard on my Debian Stretch systems, but wireg=
uard is currently locked to Sid only until 1.0 brings API stability guarant=
ees.</div><div><br></div><div>So, I set up a cronjob that rebuilds the Sid =
source package on a Stretch system, and the result is wireguard packages th=
at track the latest release, but don&#39;t pull in unstable versions of lib=
c and whatnot when you try to install them, as would happen if you tried to=
 install via package pinning.</div><div><br></div><div>Naturally, you have =
only my word that the packages are unmodified rebuilds of Debian&#39;s orig=
inal package, and you&#39;re trusting packagecloud to not tamper with the p=
ackages (it&#39;s their signing keys, not mine) so caveat emptor. It works =
for me, it might work for you as well.</div><div><br></div><div>With the wa=
rnings and disclaimers out of the way, here&#39;s the repo:=C2=A0<a href=3D=
"https://packagecloud.io/danderson/wireguard?filter=3Ddebs">https://package=
cloud.io/danderson/wireguard?filter=3Ddebs</a></div><div><br></div><div>- D=
ave</div></div>

--001a11415e88b6df330548363b05--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id a2b065dc
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 08:49:29 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 3709e6a9
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 08:49:29 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 97128724
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 08:49:29 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 1537ddeb
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 08:49:29 +0000 (UTC)
Received: by mail-ot0-f171.google.com with SMTP id 32so43909306oth.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 01:03:17 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sat, 11 Feb 2017 10:03:16 +0100
Message-ID: <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Mellow yellow,

That's a great idea. Do you intend to track dkg's sid package more or
less faithfully? If so, I'd be happy to advertise this on the
wireguard.io/install/ page, since I'm sure a lot of people (including
myself!) would benefit immensely from that.

Could you send some bulletproof instructions -- 3 or 4 lines of
commands like what's there currently -- and I'll put it on the site?

Thanks,
Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 1b380df1
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:36:08 +0000 (UTC)
Received: from mail-ua0-f180.google.com (mail-ua0-f180.google.com
 [209.85.217.180])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 7897c0b8
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:36:08 +0000 (UTC)
Received: by mail-ua0-f180.google.com with SMTP id 96so43621166uaq.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 01:49:57 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 01:49:36 -0800
Message-ID: <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: "Jason A. Donenfeld" <Jason@zx2c4.com>
Content-Type: multipart/alternative; boundary=001a113cff4407a31b05483e238f
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a113cff4407a31b05483e238f
Content-Type: text/plain; charset=UTF-8

On Sat, Feb 11, 2017 at 1:03 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Mellow yellow,
>
> That's a great idea. Do you intend to track dkg's sid package more or
> less faithfully?


In that package repository, I intend to track the sid package exactly. If I
ever take up hacking on wireguard, I'll use a separate repository for any
modified versions.

If so, I'd be happy to advertise this on the
> wireguard.io/install/ page, since I'm sure a lot of people (including
> myself!) would benefit immensely from that.
>

Cool! I'll see about setting up debian stable as well.


> Could you send some bulletproof instructions -- 3 or 4 lines of
> commands like what's there currently -- and I'll put it on the site?
>

The instructions you have on there now are fine if you're okay with
packagecloud's shell script. Manual instructions that work are:

sudo apt-get install -y apt-transport-https linux-headers-amd64 curl
curl -L https://packagecloud.io/danderson/wireguard/gpgkey | sudo apt-key
add -
echo "deb https://packagecloud.io/danderson/wireguard/debian/ stretch main"
| sudo tee /etc/apt/sources.list.d/wireguard.list
sudo apt-get update
sudo apt-get install -y wireguard-dkms wireguard-tools

Note that right now, only amd64 packages are available. If you think
there's demand for Debian on 32-bit x86, I can set up i386 builders as well.

- Dave


> Thanks,
> Jason
>

--001a113cff4407a31b05483e238f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On S=
at, Feb 11, 2017 at 1:03 AM, Jason A. Donenfeld <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:Jason@zx2c4.com" target=3D"_blank">Jason@zx2c4.com</a>&gt;</sp=
an> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px=
 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Mellow yell=
ow,<br>
<br>
That&#39;s a great idea. Do you intend to track dkg&#39;s sid package more =
or<br>
less faithfully?</blockquote><div><br></div><div>In that package repository=
, I intend to track the sid package exactly. If I ever take up hacking on w=
ireguard, I&#39;ll use a separate repository for any modified versions.</di=
v><div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px =
0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">If so, I=
&#39;d be happy to advertise this on the<br>
<a href=3D"http://wireguard.io/install/" rel=3D"noreferrer" target=3D"_blan=
k">wireguard.io/install/</a> page, since I&#39;m sure a lot of people (incl=
uding<br>
myself!) would benefit immensely from that.<br></blockquote><div><br></div>=
<div>Cool! I&#39;ll see about setting up debian stable as well.</div><div>=
=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Could you sen=
d some bulletproof instructions -- 3 or 4 lines of<br>
commands like what&#39;s there currently -- and I&#39;ll put it on the site=
?<br></blockquote><div><br></div><div>The instructions you have on there no=
w are fine if you&#39;re okay with packagecloud&#39;s shell script. Manual =
instructions that work are:</div><div><br></div><div>sudo apt-get install -=
y apt-transport-https linux-headers-amd64 curl</div><div>curl -L <a href=3D=
"https://packagecloud.io/danderson/wireguard/gpgkey">https://packagecloud.i=
o/danderson/wireguard/gpgkey</a> | sudo apt-key add -</div><div>echo &quot;=
deb <a href=3D"https://packagecloud.io/danderson/wireguard/debian/">https:/=
/packagecloud.io/danderson/wireguard/debian/</a> stretch main&quot; | sudo =
tee /etc/apt/sources.list.d/wireguard.list</div><div>sudo apt-get update</d=
iv><div>sudo apt-get install -y wireguard-dkms wireguard-tools</div><div><b=
r></div><div>Note that right now, only amd64 packages are available. If you=
 think there&#39;s demand for Debian on 32-bit x86, I can set up i386 build=
ers as well.</div><div><br></div><div>- Dave</div><div><br></div><blockquot=
e class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px s=
olid rgb(204,204,204);padding-left:1ex">
<br>
Thanks,<br>
Jason<br>
</blockquote></div><br></div></div>

--001a113cff4407a31b05483e238f--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 3f423862
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:51:07 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 9e6969d3
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:51:07 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id a2819124
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:51:07 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 0373ac18
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 09:51:07 +0000 (UTC)
Received: by mail-ot0-f175.google.com with SMTP id 65so44240099otq.2
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 02:04:56 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sat, 11 Feb 2017 11:04:54 +0100
Message-ID: <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hi Dave,

Good idea. I don't like the scary pipe to bash one liners. I'll go
with what you suggested. However, is `linux-headers-amd64` really
required?

Thanks,
Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id c079f66d
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:02:25 +0000 (UTC)
Received: from mail-ua0-f173.google.com (mail-ua0-f173.google.com
 [209.85.217.173])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 4e8bfdd9
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:02:25 +0000 (UTC)
Received: by mail-ua0-f173.google.com with SMTP id y9so44012732uae.2
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 02:16:14 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 02:15:53 -0800
Message-ID: <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: "Jason A. Donenfeld" <Jason@zx2c4.com>
Content-Type: multipart/alternative; boundary=001a113cff44111a7105483e818a
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a113cff44111a7105483e818a
Content-Type: text/plain; charset=UTF-8

Hi,

Yes, linux-headers-amd64 is required, otherwise the wireguard-dkms package
won't build the kernel module, and leave a very confused user. I *think* I
saw a conversation in this list's archives about whether the headers should
be made a dependency of wireguard-dkms, but I can't find it now...

- Dave

On Sat, Feb 11, 2017 at 2:04 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Hi Dave,
>
> Good idea. I don't like the scary pipe to bash one liners. I'll go
> with what you suggested. However, is `linux-headers-amd64` really
> required?
>
> Thanks,
> Jason
>

--001a113cff44111a7105483e818a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>Yes, linux-headers-amd64 is require=
d, otherwise the wireguard-dkms package won&#39;t build the kernel module, =
and leave a very confused user. I *think* I saw a conversation in this list=
&#39;s archives about whether the headers should be made a dependency of wi=
reguard-dkms, but I can&#39;t find it now...</div><div><br></div><div>- Dav=
e</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On S=
at, Feb 11, 2017 at 2:04 AM, Jason A. Donenfeld <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:Jason@zx2c4.com" target=3D"_blank">Jason@zx2c4.com</a>&gt;</sp=
an> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex">Hi Dave,<br>
<br>
Good idea. I don&#39;t like the scary pipe to bash one liners. I&#39;ll go<=
br>
with what you suggested. However, is `linux-headers-amd64` really<br>
required?<br>
<br>
Thanks,<br>
Jason<br>
</blockquote></div><br></div>

--001a113cff44111a7105483e818a--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 8d593e86
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:03:22 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6224ca8d
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:03:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 4154f4f2
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:03:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 14a5e76d
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 10:03:21 +0000 (UTC)
Received: by mail-ot0-f172.google.com with SMTP id 32so44362098oth.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 02:17:10 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
 <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sat, 11 Feb 2017 11:17:09 +0100
Message-ID: <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hi Dave,

Ahh right, that old debate.

Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 7a061352
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 11:35:31 +0000 (UTC)
Received: from mail-vk0-f50.google.com (mail-vk0-f50.google.com
 [209.85.213.50])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6dfe75cc
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 11:35:31 +0000 (UTC)
Received: by mail-vk0-f50.google.com with SMTP id t8so40612246vke.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 03:49:20 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
 <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
 <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 03:48:59 -0800
Message-ID: <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: "Jason A. Donenfeld" <Jason@zx2c4.com>
Content-Type: multipart/alternative; boundary=94eb2c07ad500577bf05483fce9f
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--94eb2c07ad500577bf05483fce9f
Content-Type: text/plain; charset=UTF-8

Okay, I've set up a Debian stable builder as well... However, Debian stable
has a 3.16 kernel, and wireguard-dkms requires >=3.18, so installation
fails. Assuming 3.18 is a hard lower-bound on kernel versions, it looks
like jessie will never run in-kernel wireguard. Fortunately it'll be moot
in a few months when stretch becomes the new stable.

- Dave



On Sat, Feb 11, 2017 at 2:17 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Hi Dave,
>
> Ahh right, that old debate.
>
> Jason
>

--94eb2c07ad500577bf05483fce9f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Okay, I&#39;ve set up a Debian stable builder as well... H=
owever, Debian stable has a 3.16 kernel, and wireguard-dkms requires &gt;=
=3D3.18, so installation fails. Assuming 3.18 is a hard lower-bound on kern=
el versions, it looks like jessie will never run in-kernel wireguard. Fortu=
nately it&#39;ll be moot in a few months when stretch becomes the new stabl=
e.<div><br></div><div>- Dave<br><div><br></div><div><br></div></div></div><=
div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Sat, Feb 11, 20=
17 at 2:17 AM, Jason A. Donenfeld <span dir=3D"ltr">&lt;<a href=3D"mailto:J=
ason@zx2c4.com" target=3D"_blank">Jason@zx2c4.com</a>&gt;</span> wrote:<br>=
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">Hi Dave,<br>
<br>
Ahh right, that old debate.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Jason<br>
</font></span></blockquote></div><br></div>

--94eb2c07ad500577bf05483fce9f--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 5150742f
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 12:18:22 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 74d8b87f
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 12:18:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6c25dac2
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 12:18:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id ca75f6ff
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 12:18:22 +0000 (UTC)
Received: by mail-ot0-f174.google.com with SMTP id 32so45413171oth.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 04:32:11 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sat, 11 Feb 2017 13:32:10 +0100
Message-ID: <CAHmME9otoumBPt4VvdM2s4FEpzO_wK86aiRjVOCpUpGam+P64Q@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hey Dave,

On Sat, Feb 11, 2017 at 10:49 AM, David Anderson <dave@natulte.net> wrote:
> Note that right now, only amd64 packages are available. If you think there's
> demand for Debian on 32-bit x86, I can set up i386 builders as well.

I doubt anybody cares about i386, but likely armv{6,7} and arm64 are
in demand somewhat, at the very least due to Rasberrian users.

Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 1c15a5c5
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 13:15:00 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6b54b4e6
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 13:15:00 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 0d7f6401
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 13:15:00 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id e5708011
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 13:14:59 +0000 (UTC)
Received: by mail-oi0-f53.google.com with SMTP id w204so33609236oiw.0
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 05:28:49 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
 <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
 <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
 <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sat, 11 Feb 2017 14:28:47 +0100
Message-ID: <CAHmME9qmfSQ2=Bcdxzx=41vcF2NPkXBhDBVbrjCizkrDsB3KSA@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hey David,

On Sat, Feb 11, 2017 at 12:48 PM, David Anderson <dave@natulte.net> wrote:
> Okay, I've set up a Debian stable builder as well... However, Debian stable
> has a 3.16 kernel, and wireguard-dkms requires >=3.18, so installation
> fails. Assuming 3.18 is a hard lower-bound on kernel versions, it looks like
> jessie will never run in-kernel wireguard. Fortunately it'll be moot in a
> few months when stretch becomes the new stable.

I probably could backport to 3.16... It's a bit of a PITA but still
possible if there's sufficient demand. I'll wait to see if people pipe
up.

Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: baptiste@bitsofnetworks.org
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id cdf95eae
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 16:14:12 +0000 (UTC)
Received: from mails.bitsofnetworks.org (rezine.polyno.me [193.33.56.138])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id b147f9c5
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 16:14:12 +0000 (UTC)
Date: Sat, 11 Feb 2017 17:27:58 +0100
From: Baptiste Jonglez <baptiste@bitsofnetworks.org>
To: David Anderson <dave@natulte.net>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
Message-ID: <20170211162758.GA4633@tuxmachine.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
 <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
 <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
 <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="jI8keyz6grp/JLjh"
In-Reply-To: <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>


--jI8keyz6grp/JLjh
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Feb 11, 2017 at 03:48:59AM -0800, David Anderson wrote:
> Okay, I've set up a Debian stable builder as well... However, Debian stab=
le
> has a 3.16 kernel, and wireguard-dkms requires >=3D3.18, so installation
> fails. Assuming 3.18 is a hard lower-bound on kernel versions, it looks
> like jessie will never run in-kernel wireguard. Fortunately it'll be moot
> in a few months when stretch becomes the new stable.

Jessie-backports has linux 4.9, so it's probably much simpler to require
users to install this.

> On Sat, Feb 11, 2017 at 2:17 AM, Jason A. Donenfeld <Jason@zx2c4.com> wro=
te:
>=20
> > Hi Dave,
> >
> > Ahh right, that old debate.
> >
> > Jason
> >

> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard


--jI8keyz6grp/JLjh
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=chEj
-----END PGP SIGNATURE-----

--jI8keyz6grp/JLjh--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 8f6d414b
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 21:22:55 +0000 (UTC)
Received: from mail-ua0-f174.google.com (mail-ua0-f174.google.com
 [209.85.217.174])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 41220cde
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 21:22:55 +0000 (UTC)
Received: by mail-ua0-f174.google.com with SMTP id 35so48379410uak.1
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 13:36:47 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAHmME9otoumBPt4VvdM2s4FEpzO_wK86aiRjVOCpUpGam+P64Q@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9otoumBPt4VvdM2s4FEpzO_wK86aiRjVOCpUpGam+P64Q@mail.gmail.com>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 13:36:26 -0800
Message-ID: <CAMx+r7WMmcGxDLE7Dt2w6S5xj0tx3U22T-HQBhss1SzV0pgbiQ@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: "Jason A. Donenfeld" <Jason@zx2c4.com>
Content-Type: multipart/alternative; boundary=f403045f89f4e8bf1c05484802bc
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--f403045f89f4e8bf1c05484802bc
Content-Type: text/plain; charset=UTF-8

On Sat, Feb 11, 2017 at 4:32 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Hey Dave,
>
> On Sat, Feb 11, 2017 at 10:49 AM, David Anderson <dave@natulte.net> wrote:
> > Note that right now, only amd64 packages are available. If you think
> there's
> > demand for Debian on 32-bit x86, I can set up i386 builders as well.
>
> I doubt anybody cares about i386, but likely armv{6,7} and arm64 are
> in demand somewhat, at the very least due to Rasberrian users.
>

Hmm, I don't have functional arm-ish things on hand, but I'll see what I
can do with emulated setups. I'll skip i386 for now, if it turns out to be
in demand it's one VM spinup away.


> Jason
>

--f403045f89f4e8bf1c05484802bc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On S=
at, Feb 11, 2017 at 4:32 AM, Jason A. Donenfeld <span dir=3D"ltr">&lt;<a hr=
ef=3D"mailto:Jason@zx2c4.com" target=3D"_blank">Jason@zx2c4.com</a>&gt;</sp=
an> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;=
border-left:1px #ccc solid;padding-left:1ex">Hey Dave,<br>
<span class=3D""><br>
On Sat, Feb 11, 2017 at 10:49 AM, David Anderson &lt;<a href=3D"mailto:dave=
@natulte.net">dave@natulte.net</a>&gt; wrote:<br>
&gt; Note that right now, only amd64 packages are available. If you think t=
here&#39;s<br>
&gt; demand for Debian on 32-bit x86, I can set up i386 builders as well.<b=
r>
<br>
</span>I doubt anybody cares about i386, but likely armv{6,7} and arm64 are=
<br>
in demand somewhat, at the very least due to Rasberrian users.<br></blockqu=
ote><div><br></div><div>Hmm, I don&#39;t have functional arm-ish things on =
hand, but I&#39;ll see what I can do with emulated setups. I&#39;ll skip i3=
86 for now, if it turns out to be in demand it&#39;s one VM spinup away.</d=
iv><div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Jason<br>
</font></span></blockquote></div><br></div></div>

--f403045f89f4e8bf1c05484802bc--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f6e0bd71
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 21:24:36 +0000 (UTC)
Received: from mail-ua0-f174.google.com (mail-ua0-f174.google.com
 [209.85.217.174])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 5b5ef202
 for <wireguard@lists.zx2c4.com>;
 Sat, 11 Feb 2017 21:24:36 +0000 (UTC)
Received: by mail-ua0-f174.google.com with SMTP id y9so48531886uae.2
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 13:38:29 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <20170211162758.GA4633@tuxmachine.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9rumLr0V6yD=zoHk-GSN2-bCiGe644WHtt4EJvKrhtLoA@mail.gmail.com>
 <CAMx+r7VkgtkFdqkKVbeX_Pv=T1TO6KaTY-+T1iM2OphS-L8mWA@mail.gmail.com>
 <CAHmME9qkRgySY61Cqm76Lqs_f3U3V3p5YF1G0kE1CCPd9u398Q@mail.gmail.com>
 <CAMx+r7WLJ5S-Op_9dq4AY9BNmk6u7xMOwqwVoAis=_pqJX1_-g@mail.gmail.com>
 <20170211162758.GA4633@tuxmachine.polynome.dn42>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 13:38:08 -0800
Message-ID: <CAMx+r7VPbO5zvMYYnJ7anSf5fgg4Ofhr7V6Po-GazH1vFhVYkQ@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Baptiste Jonglez <baptiste@bitsofnetworks.org>
Content-Type: multipart/alternative; boundary=001a113ed1a2f805d005484808c9
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a113ed1a2f805d005484808c9
Content-Type: text/plain; charset=UTF-8

On Sat, Feb 11, 2017 at 8:27 AM, Baptiste Jonglez <
baptiste@bitsofnetworks.org> wrote:

> On Sat, Feb 11, 2017 at 03:48:59AM -0800, David Anderson wrote:
> > Okay, I've set up a Debian stable builder as well... However, Debian
> stable
> > has a 3.16 kernel, and wireguard-dkms requires >=3.18, so installation
> > fails. Assuming 3.18 is a hard lower-bound on kernel versions, it looks
> > like jessie will never run in-kernel wireguard. Fortunately it'll be moot
> > in a few months when stretch becomes the new stable.
>
> Jessie-backports has linux 4.9, so it's probably much simpler to require
> users to install this.
>

Oh, excellent! I'll leave the jessie builder running then.

Jason: I'll get back to you once I've looked into setting up builds for
arm, to see how to revise the instructions. Given that each distro version
is likely to be slightly different, perhaps it'd be better to just link to
a readme on packagecloud.io, to avoid cluttering the install instructions
on wireguard.io?

- Dave


>
> > On Sat, Feb 11, 2017 at 2:17 AM, Jason A. Donenfeld <Jason@zx2c4.com>
> wrote:
> >
> > > Hi Dave,
> > >
> > > Ahh right, that old debate.
> > >
> > > Jason
> > >
>
> > _______________________________________________
> > WireGuard mailing list
> > WireGuard@lists.zx2c4.com
> > https://lists.zx2c4.com/mailman/listinfo/wireguard
>
>

--001a113ed1a2f805d005484808c9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On S=
at, Feb 11, 2017 at 8:27 AM, Baptiste Jonglez <span dir=3D"ltr">&lt;<a href=
=3D"mailto:baptiste@bitsofnetworks.org" target=3D"_blank">baptiste@bitsofne=
tworks.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span cl=
ass=3D"">On Sat, Feb 11, 2017 at 03:48:59AM -0800, David Anderson wrote:<br=
>
&gt; Okay, I&#39;ve set up a Debian stable builder as well... However, Debi=
an stable<br>
&gt; has a 3.16 kernel, and wireguard-dkms requires &gt;=3D3.18, so install=
ation<br>
&gt; fails. Assuming 3.18 is a hard lower-bound on kernel versions, it look=
s<br>
&gt; like jessie will never run in-kernel wireguard. Fortunately it&#39;ll =
be moot<br>
&gt; in a few months when stretch becomes the new stable.<br>
<br>
</span>Jessie-backports has linux 4.9, so it&#39;s probably much simpler to=
 require<br>
users to install this.<br></blockquote><div><br></div><div>Oh, excellent! I=
&#39;ll leave the jessie builder running then.</div><div><br></div><div>Jas=
on: I&#39;ll get back to you once I&#39;ve looked into setting up builds fo=
r arm, to see how to revise the instructions. Given that each distro versio=
n is likely to be slightly different, perhaps it&#39;d be better to just li=
nk to a readme on <a href=3D"http://packagecloud.io">packagecloud.io</a>, t=
o avoid cluttering the install instructions on <a href=3D"http://wireguard.=
io">wireguard.io</a>?</div><div><br></div><div>- Dave</div><div>=C2=A0</div=
><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1=
px #ccc solid;padding-left:1ex">
<span class=3D""><br>
&gt; On Sat, Feb 11, 2017 at 2:17 AM, Jason A. Donenfeld &lt;<a href=3D"mai=
lto:Jason@zx2c4.com">Jason@zx2c4.com</a>&gt; wrote:<br>
&gt;<br>
&gt; &gt; Hi Dave,<br>
&gt; &gt;<br>
&gt; &gt; Ahh right, that old debate.<br>
&gt; &gt;<br>
&gt; &gt; Jason<br>
&gt; &gt;<br>
<br>
</span>&gt; ______________________________<wbr>_________________<br>
&gt; WireGuard mailing list<br>
&gt; <a href=3D"mailto:WireGuard@lists.zx2c4.com">WireGuard@lists.zx2c4.com=
</a><br>
&gt; <a href=3D"https://lists.zx2c4.com/mailman/listinfo/wireguard" rel=3D"=
noreferrer" target=3D"_blank">https://lists.zx2c4.com/<wbr>mailman/listinfo=
/wireguard</a><br>
<br>
</blockquote></div><br></div></div>

--001a113ed1a2f805d005484808c9--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f267c82d
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 02:27:11 +0000 (UTC)
Received: from mail-ua0-f178.google.com (mail-ua0-f178.google.com
 [209.85.217.178])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id b7929175
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 02:27:11 +0000 (UTC)
Received: by mail-ua0-f178.google.com with SMTP id 96so49737629uaq.3
 for <wireguard@lists.zx2c4.com>; Sat, 11 Feb 2017 18:41:04 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7WMmcGxDLE7Dt2w6S5xj0tx3U22T-HQBhss1SzV0pgbiQ@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9otoumBPt4VvdM2s4FEpzO_wK86aiRjVOCpUpGam+P64Q@mail.gmail.com>
 <CAMx+r7WMmcGxDLE7Dt2w6S5xj0tx3U22T-HQBhss1SzV0pgbiQ@mail.gmail.com>
From: David Anderson <dave@natulte.net>
Date: Sat, 11 Feb 2017 18:40:43 -0800
Message-ID: <CAMx+r7Xk+vVwLq++8gnn1GfSA=jvYr=nM0EaLUjdvHXbjWD1kQ@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: "Jason A. Donenfeld" <Jason@zx2c4.com>
Content-Type: multipart/alternative; boundary=001a113ed1a21e392a05484c4377
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a113ed1a21e392a05484c4377
Content-Type: text/plain; charset=UTF-8

I'm failing at setting up arm builds, raspbian/rpi emulation is not in a
great shape these days. In the meantime, debian stable for amd64 is up.
Updated instructions for both debian versions are at
https://packagecloud.io/danderson/wireguard#readme-scrollto . In
particular, the jessie install requires first installing a backported
kernel. I'll keep poking at arm builds for a bit, but I don't promise
anything.

- Dave

On Sat, Feb 11, 2017 at 1:36 PM, David Anderson <dave@natulte.net> wrote:

> On Sat, Feb 11, 2017 at 4:32 AM, Jason A. Donenfeld <Jason@zx2c4.com>
> wrote:
>
>> Hey Dave,
>>
>> On Sat, Feb 11, 2017 at 10:49 AM, David Anderson <dave@natulte.net>
>> wrote:
>> > Note that right now, only amd64 packages are available. If you think
>> there's
>> > demand for Debian on 32-bit x86, I can set up i386 builders as well.
>>
>> I doubt anybody cares about i386, but likely armv{6,7} and arm64 are
>> in demand somewhat, at the very least due to Rasberrian users.
>>
>
> Hmm, I don't have functional arm-ish things on hand, but I'll see what I
> can do with emulated setups. I'll skip i386 for now, if it turns out to be
> in demand it's one VM spinup away.
>
>
>> Jason
>>
>
>

--001a113ed1a21e392a05484c4377
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">I&#39;m failing at setting up arm builds, raspbian/rpi emu=
lation is not in a great shape these days. In the meantime, debian stable f=
or amd64 is up. Updated instructions for both debian versions are at=C2=A0<=
a href=3D"https://packagecloud.io/danderson/wireguard#readme-scrollto">http=
s://packagecloud.io/danderson/wireguard#readme-scrollto</a> . In particular=
, the jessie install requires first installing a backported kernel. I&#39;l=
l keep poking at arm builds for a bit, but I don&#39;t promise anything.<di=
v><br></div><div>- Dave</div></div><div class=3D"gmail_extra"><br><div clas=
s=3D"gmail_quote">On Sat, Feb 11, 2017 at 1:36 PM, David Anderson <span dir=
=3D"ltr">&lt;<a href=3D"mailto:dave@natulte.net" target=3D"_blank">dave@nat=
ulte.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=
=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote"><span class=
=3D"">On Sat, Feb 11, 2017 at 4:32 AM, Jason A. Donenfeld <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:Jason@zx2c4.com" target=3D"_blank">Jason@zx2c4.com</=
a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0=
 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hey Dave,<br>
<span><br>
On Sat, Feb 11, 2017 at 10:49 AM, David Anderson &lt;<a href=3D"mailto:dave=
@natulte.net" target=3D"_blank">dave@natulte.net</a>&gt; wrote:<br>
&gt; Note that right now, only amd64 packages are available. If you think t=
here&#39;s<br>
&gt; demand for Debian on 32-bit x86, I can set up i386 builders as well.<b=
r>
<br>
</span>I doubt anybody cares about i386, but likely armv{6,7} and arm64 are=
<br>
in demand somewhat, at the very least due to Rasberrian users.<br></blockqu=
ote><div><br></div></span><div>Hmm, I don&#39;t have functional arm-ish thi=
ngs on hand, but I&#39;ll see what I can do with emulated setups. I&#39;ll =
skip i386 for now, if it turns out to be in demand it&#39;s one VM spinup a=
way.</div><div><br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span class=3D"m_815601224337100925HOEnZb"><font color=3D"#888888"><br>
Jason<br>
</font></span></blockquote></div><br></div></div>
</blockquote></div><br></div>

--001a113ed1a21e392a05484c4377--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 5c7f326d
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 13:28:22 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 987d60f0
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 13:28:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 51f7d7c7
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 13:28:22 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 21abae9e
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 13:28:22 +0000 (UTC)
Received: by mail-ot0-f175.google.com with SMTP id 32so53987139oth.3
 for <wireguard@lists.zx2c4.com>; Sun, 12 Feb 2017 05:42:20 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <CAMx+r7Xk+vVwLq++8gnn1GfSA=jvYr=nM0EaLUjdvHXbjWD1kQ@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <CAHmME9q8+D7y0Hz4xOJv1MiVsq0=bUf3TgENseGEWWF2BEpx4Q@mail.gmail.com>
 <CAMx+r7VgJ0xDAy46d28Qv_Vv7vM8JO0yRbYEh6AHVWT55LEVAw@mail.gmail.com>
 <CAHmME9otoumBPt4VvdM2s4FEpzO_wK86aiRjVOCpUpGam+P64Q@mail.gmail.com>
 <CAMx+r7WMmcGxDLE7Dt2w6S5xj0tx3U22T-HQBhss1SzV0pgbiQ@mail.gmail.com>
 <CAMx+r7Xk+vVwLq++8gnn1GfSA=jvYr=nM0EaLUjdvHXbjWD1kQ@mail.gmail.com>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Sun, 12 Feb 2017 14:42:18 +0100
Message-ID: <CAHmME9rkFc+SKRUepfOsMR=aAP_QGJv0YQrKkxpa0hvPrZbvfg@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

On Sun, Feb 12, 2017 at 3:40 AM, David Anderson <dave@natulte.net> wrote:
>
> I'm failing at setting up arm builds, raspbian/rpi emulation is not in a =
great shape these days. In the meantime, debian stable for amd64 is up. Upd=
ated instructions for both debian versions are at https://packagecloud.io/d=
anderson/wireguard#readme-scrollto . In particular, the jessie install requ=
ires first installing a backported kernel. I'll keep poking at arm builds f=
or a bit, but I don't promise anything.


Good idea. I'll link to that instead.

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dkg@fifthhorseman.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6dbcf8b4
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 22:47:42 +0000 (UTC)
Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 7c34d6bf
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 22:47:42 +0000 (UTC)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: David Anderson <dave@natulte.net>, wireguard@lists.zx2c4.com
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
In-Reply-To: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
Date: Sun, 12 Feb 2017 18:01:34 -0500
Message-ID: <874lzzqai9.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Fri 2017-02-10 19:23:50 -0500, David Anderson wrote:
> In case it's of use to anyone, I've built wireguard packages for Debian
> testing. I wanted to play with wireguard on my Debian Stretch systems, but
> wireguard is currently locked to Sid only until 1.0 brings API stability
> guarantees.
>
> So, I set up a cronjob that rebuilds the Sid source package on a Stretch
> system, and the result is wireguard packages that track the latest releas=
e,
> but don't pull in unstable versions of libc and whatnot when you try to
> install them, as would happen if you tried to install via package pinning.
>
> Naturally, you have only my word that the packages are unmodified rebuilds
> of Debian's original package, and you're trusting packagecloud to not
> tamper with the packages (it's their signing keys, not mine) so caveat
> emptor. It works for me, it might work for you as well.
>
> With the warnings and disclaimers out of the way, here's the repo:
> https://packagecloud.io/danderson/wireguard?filter=3Ddebs

I appreciate your interest in getting wider distribution for wireguard,
David, but i'm not convinced this approach makes much sense.

It seems like a lot of extra work compared to just putting wireguard
into stretch-backports once stretch is released.

Until stretch releases, people running testing should be able to just
add the unstable repository and pin it to be lower priority than testing
(see apt_preferences(5)).

Using this standard approach, users won't need to:

 a) add a new key to their apt configuration, which increases the attack
    surface for all installed packages (btw, the proposed shell pipe
    into "apt-key add -" is deprecated, see for example commentary at
    https://bugs.debian.org/853858)
=20
 b) be dependent on some alternate suite of build daemons -- if debian
    supports your build environment, the buildds will have the wireguard
    packages.

So I don't see much to recommend the proposed approach by comparison,
and i don't think that it should be documented as a recommended approach
upstream, unless there are clearer benefits that i'm missing here.  In
that case, i'd like to know what those benefits are :)

         --dkg

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Wahu
-----END PGP SIGNATURE-----
--=-=-=--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id b55854ab
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 23:23:38 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 700e9f34
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 23:23:38 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id cf66b9c4
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 23:23:38 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id d2951dcc
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Sun, 12 Feb 2017 23:23:38 +0000 (UTC)
Received: by mail-ot0-f172.google.com with SMTP id 65so57821157otq.2
 for <wireguard@lists.zx2c4.com>; Sun, 12 Feb 2017 15:37:38 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <874lzzqai9.fsf@alice.fifthhorseman.net>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Mon, 13 Feb 2017 00:37:37 +0100
Message-ID: <CAHmME9pysPTZjbAZ7HUZJ5E+jLmuUvaxQkObxRGvqxiE5mJJcQ@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hey Daniel,

That makes sense to me. I don't know much about Debian best practices,
so I'll defer to your judgement and revert the /install/ page
instruction. If David manages to convince you otherwise, I'll re-add
it then.

Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 32893f63
 for <wireguard@lists.zx2c4.com>;
 Tue, 14 Feb 2017 04:41:58 +0000 (UTC)
Received: from mail-vk0-f44.google.com (mail-vk0-f44.google.com
 [209.85.213.44])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 0b364e54
 for <wireguard@lists.zx2c4.com>;
 Tue, 14 Feb 2017 04:41:58 +0000 (UTC)
Received: by mail-vk0-f44.google.com with SMTP id k127so73718565vke.0
 for <wireguard@lists.zx2c4.com>; Mon, 13 Feb 2017 20:56:07 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <874lzzqai9.fsf@alice.fifthhorseman.net>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
From: David Anderson <dave@natulte.net>
Date: Mon, 13 Feb 2017 20:55:45 -0800
Message-ID: <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: multipart/alternative; boundary=001a11415e88b491660548766155
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a11415e88b491660548766155
Content-Type: text/plain; charset=UTF-8

On Sun, Feb 12, 2017 at 3:01 PM, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
wrote:

> On Fri 2017-02-10 19:23:50 -0500, David Anderson wrote:
> > In case it's of use to anyone, I've built wireguard packages for Debian
> > testing. I wanted to play with wireguard on my Debian Stretch systems,
> but
> > wireguard is currently locked to Sid only until 1.0 brings API stability
> > guarantees.
> >
> > So, I set up a cronjob that rebuilds the Sid source package on a Stretch
> > system, and the result is wireguard packages that track the latest
> release,
> > but don't pull in unstable versions of libc and whatnot when you try to
> > install them, as would happen if you tried to install via package
> pinning.
> >
> > Naturally, you have only my word that the packages are unmodified
> rebuilds
> > of Debian's original package, and you're trusting packagecloud to not
> > tamper with the packages (it's their signing keys, not mine) so caveat
> > emptor. It works for me, it might work for you as well.
> >
> > With the warnings and disclaimers out of the way, here's the repo:
> > https://packagecloud.io/danderson/wireguard?filter=debs
>
> I appreciate your interest in getting wider distribution for wireguard,
> David, but i'm not convinced this approach makes much sense.
>
> It seems like a lot of extra work compared to just putting wireguard
> into stretch-backports once stretch is released.
>

"Once stretch is released" could be a few months still, right? It's only
just gone into final freeze. I agree that once it's released, backports is
definitely the right way to distribute.


> Until stretch releases, people running testing should be able to just
> add the unstable repository and pin it to be lower priority than testing
> (see apt_preferences(5)).
>

So, I'd initially tried doing this, by adding the unstable repository at a
negative priority. What turned me off is that even with that low
preference, attempting to install the wireguard packages seemed to pull in
some core system libraries (libc and such) from unstable as well. And while
I'm excited about wireguard, I'm not "install unstable base libraries"
excited :).

That said, it's quite possible I was just not using the preference system
correctly. If it's possible to express "Install *only* wireguard-* from
unstable, never anything else", then I agree, that's definitely the way to
go.


>
> Using this standard approach, users won't need to:
>
>  a) add a new key to their apt configuration, which increases the attack
>     surface for all installed packages (btw, the proposed shell pipe
>     into "apt-key add -" is deprecated, see for example commentary at
>     https://bugs.debian.org/853858)
>
>  b) be dependent on some alternate suite of build daemons -- if debian
>     supports your build environment, the buildds will have the wireguard
>     packages.
>
> So I don't see much to recommend the proposed approach by comparison,
> and i don't think that it should be documented as a recommended approach
> upstream, unless there are clearer benefits that i'm missing here.  In
> that case, i'd like to know what those benefits are :)
>

Fair enough, I defer to your greater experience with Debian packaging.
Fortunately, packagecloud's stats say that there were no installs from my
repository, so assuming I can get pinning to work properly, the only
systems that need cleanup are my own.

Cheers,
- Dave


>
>          --dkg
>

--001a11415e88b491660548766155
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On S=
un, Feb 12, 2017 at 3:01 PM, Daniel Kahn Gillmor <span dir=3D"ltr">&lt;<a h=
ref=3D"mailto:dkg@fifthhorseman.net" target=3D"_blank">dkg@fifthhorseman.ne=
t</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margi=
n:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=3D"">=
On Fri 2017-02-10 19:23:50 -0500, David Anderson wrote:<br>
&gt; In case it&#39;s of use to anyone, I&#39;ve built wireguard packages f=
or Debian<br>
&gt; testing. I wanted to play with wireguard on my Debian Stretch systems,=
 but<br>
&gt; wireguard is currently locked to Sid only until 1.0 brings API stabili=
ty<br>
&gt; guarantees.<br>
&gt;<br>
&gt; So, I set up a cronjob that rebuilds the Sid source package on a Stret=
ch<br>
&gt; system, and the result is wireguard packages that track the latest rel=
ease,<br>
&gt; but don&#39;t pull in unstable versions of libc and whatnot when you t=
ry to<br>
&gt; install them, as would happen if you tried to install via package pinn=
ing.<br>
&gt;<br>
&gt; Naturally, you have only my word that the packages are unmodified rebu=
ilds<br>
&gt; of Debian&#39;s original package, and you&#39;re trusting packagecloud=
 to not<br>
&gt; tamper with the packages (it&#39;s their signing keys, not mine) so ca=
veat<br>
&gt; emptor. It works for me, it might work for you as well.<br>
&gt;<br>
&gt; With the warnings and disclaimers out of the way, here&#39;s the repo:=
<br>
&gt; <a href=3D"https://packagecloud.io/danderson/wireguard?filter=3Ddebs" =
rel=3D"noreferrer" target=3D"_blank">https://packagecloud.io/<wbr>danderson=
/wireguard?filter=3D<wbr>debs</a><br>
<br>
</span>I appreciate your interest in getting wider distribution for wiregua=
rd,<br>
David, but i&#39;m not convinced this approach makes much sense.<br>
<br>
It seems like a lot of extra work compared to just putting wireguard<br>
into stretch-backports once stretch is released.<br></blockquote><div><br><=
/div><div>&quot;Once stretch is released&quot; could be a few months still,=
 right? It&#39;s only just gone into final freeze. I agree that once it&#39=
;s released, backports is definitely the right way to distribute.</div><div=
>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex">Until stretch releases, people =
running testing should be able to just<br>
add the unstable repository and pin it to be lower priority than testing<br=
>
(see apt_preferences(5)).<br></blockquote><div><br></div><div>So, I&#39;d i=
nitially tried doing this, by adding the unstable repository at a negative =
priority. What turned me off is that even with that low preference, attempt=
ing to install the wireguard packages seemed to pull in some core system li=
braries (libc and such) from unstable as well. And while I&#39;m excited ab=
out wireguard, I&#39;m not &quot;install unstable base libraries&quot; exci=
ted :).</div><div><br></div><div>That said, it&#39;s quite possible I was j=
ust not using the preference system correctly. If it&#39;s possible to expr=
ess &quot;Install *only* wireguard-* from unstable, never anything else&quo=
t;, then I agree, that&#39;s definitely the way to go.</div><div>=C2=A0</di=
v><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:=
1px #ccc solid;padding-left:1ex">
<br>
Using this standard approach, users won&#39;t need to:<br>
<br>
=C2=A0a) add a new key to their apt configuration, which increases the atta=
ck<br>
=C2=A0 =C2=A0 surface for all installed packages (btw, the proposed shell p=
ipe<br>
=C2=A0 =C2=A0 into &quot;apt-key add -&quot; is deprecated, see for example=
 commentary at<br>
=C2=A0 =C2=A0 <a href=3D"https://bugs.debian.org/853858" rel=3D"noreferrer"=
 target=3D"_blank">https://bugs.debian.org/853858</a><wbr>)<br>
<br>
=C2=A0b) be dependent on some alternate suite of build daemons -- if debian=
<br>
=C2=A0 =C2=A0 supports your build environment, the buildds will have the wi=
reguard<br>
=C2=A0 =C2=A0 packages.<br>
<br>
So I don&#39;t see much to recommend the proposed approach by comparison,<b=
r>
and i don&#39;t think that it should be documented as a recommended approac=
h<br>
upstream, unless there are clearer benefits that i&#39;m missing here.=C2=
=A0 In<br>
that case, i&#39;d like to know what those benefits are :)<br></blockquote>=
<div><br></div><div>Fair enough, I defer to your greater experience with De=
bian packaging. Fortunately, packagecloud&#39;s stats say that there were n=
o installs from my repository, so assuming I can get pinning to work proper=
ly, the only systems that need cleanup are my own.</div><div><br></div><div=
>Cheers,</div><div>- Dave</div><div>=C2=A0</div><blockquote class=3D"gmail_=
quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=
ex">
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0--dkg<br>
</font></span></blockquote></div><br></div></div>

--001a11415e88b491660548766155--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dkg@fifthhorseman.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f7d8eca3
 for <wireguard@lists.zx2c4.com>;
 Tue, 14 Feb 2017 21:39:20 +0000 (UTC)
Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id b7983b3d
 for <wireguard@lists.zx2c4.com>;
 Tue, 14 Feb 2017 21:39:20 +0000 (UTC)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: David Anderson <dave@natulte.net>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
In-Reply-To: <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
Date: Tue, 14 Feb 2017 10:50:14 -0500
Message-ID: <87o9y4n555.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: text/plain
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

On Mon 2017-02-13 23:55:45 -0500, David Anderson wrote:
> "Once stretch is released" could be a few months still, right? It's only
> just gone into final freeze. I agree that once it's released, backports is
> definitely the right way to distribute.

Yep, it could still be a few months, depending on how rapidly we're able
to fix the remaining outstanding release-critical bugs.  

> So, I'd initially tried doing this, by adding the unstable repository at a
> negative priority. What turned me off is that even with that low
> preference, attempting to install the wireguard packages seemed to pull in
> some core system libraries (libc and such) from unstable as well. And while
> I'm excited about wireguard, I'm not "install unstable base libraries"
> excited :).

absolutely!  However, i'm a little surprised that this happened.  If you
could show a transcript of what you did specifically, and what the
resultant proposed apt changes were, i'd be interested in understanding
what went on there.

on a similar system i'm using (stretch, with unstable available but
pinned low), i see only packages from stretch being installed (aside
from wireguard itself, clearly)

0 root@test:~# cat /etc/apt/sources.list.d/unstable.list 
deb http://ftp.us.debian.org/debian/ unstable main
0 root@test:~# cat /etc/apt/preferences.d/limit-unstable 
Package: *
Pin: release a=unstable
Pin-Priority: 200
1 root@test:~# apt install wireguard-dkms wireguard-tools -d
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libcilkrts5
  libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2
  libquadmath0 libtsan0 libubsan0 make patch
Suggested packages:
  binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib
  manpages-dev autoconf automake libtool flex bison gdb gcc-doc gcc-6-multilib
  gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasan3-dbg
  liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg
  libquadmath0-dbg make-doc ed diffutils-doc
Recommended packages:
  fakeroot sudo linux-headers-686-pae | linux-headers-amd64
  | linux-headers-generic | linux-headers lsb-release libc6-dev | libc-dev
  libc6-dev
The following NEW packages will be installed:
  binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libcilkrts5
  libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2
  libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-tools
0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.
Need to get 22.4 MB of archives.
After this operation, 94.5 MB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 libmpfr4 amd64 3.1.5-1 [556 kB]
Get:2 http://ftp.us.debian.org/debian stretch/main amd64 libmpc3 amd64 1.0.3-1 [40.2 kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 binutils amd64 2.27.90.20170124-2 [3,761 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 libisl15 amd64 0.18-1 [564 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64 cpp-6 amd64 6.3.0-6 [6,574 kB]
Get:6 http://ftp.us.debian.org/debian stretch/main amd64 cpp amd64 4:6.3.0-1 [18.6 kB]
Get:7 http://ftp.us.debian.org/debian stretch/main amd64 libcc1-0 amd64 6.3.0-6 [30.7 kB]
Get:8 http://ftp.us.debian.org/debian stretch/main amd64 libgomp1 amd64 6.3.0-6 [73.2 kB]
Get:9 http://ftp.us.debian.org/debian stretch/main amd64 libitm1 amd64 6.3.0-6 [27.3 kB]
Get:10 http://ftp.us.debian.org/debian stretch/main amd64 libatomic1 amd64 6.3.0-6 [8,904 B]
Get:11 http://ftp.us.debian.org/debian stretch/main amd64 libasan3 amd64 6.3.0-6 [311 kB]
Get:12 http://ftp.us.debian.org/debian stretch/main amd64 liblsan0 amd64 6.3.0-6 [115 kB]
Get:13 http://ftp.us.debian.org/debian stretch/main amd64 libtsan0 amd64 6.3.0-6 [256 kB]
Get:14 http://ftp.us.debian.org/debian stretch/main amd64 libubsan0 amd64 6.3.0-6 [107 kB]
Get:15 http://ftp.us.debian.org/debian stretch/main amd64 libcilkrts5 amd64 6.3.0-6 [40.6 kB]
Get:16 http://ftp.us.debian.org/debian stretch/main amd64 libmpx2 amd64 6.3.0-6 [11.2 kB]
Get:17 http://ftp.us.debian.org/debian stretch/main amd64 libquadmath0 amd64 6.3.0-6 [131 kB]
Get:18 http://ftp.us.debian.org/debian stretch/main amd64 libgcc-6-dev amd64 6.3.0-6 [2,296 kB]
Get:19 http://ftp.us.debian.org/debian stretch/main amd64 gcc-6 amd64 6.3.0-6 [6,852 kB]
Get:20 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64 4:6.3.0-1 [5,184 B]
Get:21 http://ftp.us.debian.org/debian stretch/main amd64 make amd64 4.1-9 [299 kB]
Get:22 http://ftp.us.debian.org/debian stretch/main amd64 patch amd64 2.7.5-1 [109 kB]
Get:23 http://ftp.us.debian.org/debian stretch/main amd64 dkms all 2.3-2 [74.8 kB]
Get:24 http://ftp.us.debian.org/debian unstable/main amd64 wireguard-dkms all 0.0.20170213-1 [90.2 kB]
Get:25 http://ftp.us.debian.org/debian unstable/main amd64 wireguard-tools amd64 0.0.20170213-1 [44.9 kB]
Fetched 22.4 MB in 2s (9,247 kB/s)     
Download complete and in download only mode
0 root@test:~# 

Please let me know what you're seeing that's different.

Regards,

       --dkg

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: baptiste@bitsofnetworks.org
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 4a5e4003
 for <wireguard@lists.zx2c4.com>;
 Wed, 15 Feb 2017 21:31:51 +0000 (UTC)
Received: from mails.bitsofnetworks.org (rezine.polyno.me [193.33.56.138])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 31d2a2d6
 for <wireguard@lists.zx2c4.com>;
 Wed, 15 Feb 2017 21:31:51 +0000 (UTC)
Date: Wed, 15 Feb 2017 22:31:54 +0100
From: Baptiste Jonglez <baptiste@bitsofnetworks.org>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
Message-ID: <20170215213153.GC16102@tuxmachine.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="9zSXsLTf0vkW971A"
In-Reply-To: <87o9y4n555.fsf@alice.fifthhorseman.net>
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>


--9zSXsLTf0vkW971A
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 14, 2017 at 10:50:14AM -0500, Daniel Kahn Gillmor wrote:
> on a similar system i'm using (stretch, with unstable available but
> pinned low), i see only packages from stretch being installed (aside
> from wireguard itself, clearly)
>=20
> 0 root@test:~# cat /etc/apt/sources.list.d/unstable.list=20
> deb http://ftp.us.debian.org/debian/ unstable main
> 0 root@test:~# cat /etc/apt/preferences.d/limit-unstable=20
> Package: *
> Pin: release a=3Dunstable
> Pin-Priority: 200

Thanks for the hint, it worked fine on my stretch system!  Here are the
packages that got pulled:

The following NEW packages will be installed:
  dkms linux-compiler-gcc-6-x86 linux-headers-4.9.0-1-amd64
  linux-headers-4.9.0-1-common linux-headers-amd64 linux-kbuild-4.9
  wireguard-dkms wireguard-tools


On jessie, it worked exactly the same with the 4.9 kernel from
jessie-backports:

# cat /etc/apt/sources.list
deb http://httpredir.debian.org/debian jessie main
deb http://httpredir.debian.org/debian jessie-backports main
deb http://httpredir.debian.org/debian unstable main
# cat /etc/apt/preferences.d/limit-unstable
Package: *
Pin: release a=3Dunstable
Pin-Priority: 200
# apt update
# apt install -t jessie-backports linux-image-amd64 linux-base
# reboot
# apt install wireguard-dkms wireguard-tools
# ./client.sh
# ping 192.168.4.1
PING 192.168.4.1 (192.168.4.1) 56(84) bytes of data.
64 bytes from 192.168.4.1: icmp_seq=3D1 ttl=3D64 time=3D15.1 ms

For the record, it also works fine with the 4.1.34.mptcp kernel from
multipath-tcp.org on jessie :)

Jason, can you write something up on the Wireguard website, since it's so
simple?

Baptiste

--9zSXsLTf0vkW971A
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEjVflzZuxNlVFbt5QvgHsIqBOLkYFAlikyLwACgkQvgHsIqBO
LkaiKRAApzurKfCspjbrhP1pDFn1wh31qlcGTY4VqnHHGcqk1dCQcmQsbpwed9DY
tQVzJTyFovluPalclFwyi+4lGBXo3iYEWpHqh5TKSQmp2AuS0t2L782Wo+Sv0amJ
3DUgQpCEvenS7VVNZRvWqKIlfIHMwX4nBZtBJWRAMdOlKRXIb4DcVeloMCQu3RNL
Q82Y3dRxWT+FHVZ2deShAp5ABnbSNgd0HwnvFmgCV04dPZGZkzzCKD6M9pWJK3/K
7yqq8RNq0tem79qLlVeb4ZRmH7OQC+O/jtqR0gct3z1U2a5qLYdmQyznpSltcn1t
ULkEsRE7goMB9Libg50jvSBNcC9/k30lZMxXKMCc3mklwxCQ3G7Z35AOgy9SoG73
3VEFWgqQCwXBAjOntYRQygh1E+LFgsgLEx6H4SZ/BhdAWMDeRqVRiKT8syY1FP3w
w2jXObO5vVTCavVAFFrRm7tsYMQ+1mx3pVVvNUHL+C+FzjXp9XefSr/TBx+QHzVf
Vx9eye4ExBLJy4iXEGS72JrGdDCJGNMM3UeQQd0oRg1md4c081L1NYbTvO2jly0p
ROIn5KLjHl6ckStBCxNwqoUzqZRWAc24HiO1q4UDui1GdjptCKJnqfPHKSLrHp7A
l486K7xxu1BmZLoDN0GxG9UUmgEFRNcepM6ZGGCKUNL+T/6j8gE=
=V0AZ
-----END PGP SIGNATURE-----

--9zSXsLTf0vkW971A--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dkg@fifthhorseman.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id a59a6f2b
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 02:48:59 +0000 (UTC)
Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id cba94a63
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 02:48:59 +0000 (UTC)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: Baptiste Jonglez <baptiste@bitsofnetworks.org>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
In-Reply-To: <20170215213153.GC16102@tuxmachine.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <20170215213153.GC16102@tuxmachine.polynome.dn42>
Date: Thu, 16 Feb 2017 21:46:15 -0500
Message-ID: <87y3x5h6vc.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--=-=-=
Content-Type: text/plain

Hi Baptiste--

On Wed 2017-02-15 16:31:54 -0500, Baptiste Jonglez wrote:
> On jessie, it worked exactly the same with the 4.9 kernel from
> jessie-backports:
>
> # cat /etc/apt/sources.list
> deb http://httpredir.debian.org/debian jessie main
> deb http://httpredir.debian.org/debian jessie-backports main
> deb http://httpredir.debian.org/debian unstable main
> # cat /etc/apt/preferences.d/limit-unstable
> Package: *
> Pin: release a=unstable
> Pin-Priority: 200
> # apt update
> # apt install -t jessie-backports linux-image-amd64 linux-base
> # reboot
> # apt install wireguard-dkms wireguard-tools
> # ./client.sh
> # ping 192.168.4.1
> PING 192.168.4.1 (192.168.4.1) 56(84) bytes of data.
> 64 bytes from 192.168.4.1: icmp_seq=1 ttl=64 time=15.1 ms

interesting, thanks for testing and reporting back!

are you sure that with this installation on jessie, the wireguard
packages are the only things that got pulled in from unstable?

If you have apt-show-versions installed, you might try grepping through
its output to make sure.

Regards,

       --dkg

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=DmIa
-----END PGP SIGNATURE-----
--=-=-=--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f5536fe9
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 03:14:16 +0000 (UTC)
Received: from mail-ua0-f174.google.com (mail-ua0-f174.google.com
 [209.85.217.174])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 3c25e919
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 03:14:16 +0000 (UTC)
Received: by mail-ua0-f174.google.com with SMTP id t17so14892303uae.3
 for <wireguard@lists.zx2c4.com>; Thu, 16 Feb 2017 19:14:33 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <87o9y4n555.fsf@alice.fifthhorseman.net>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
From: David Anderson <dave@natulte.net>
Date: Thu, 16 Feb 2017 19:14:11 -0800
Message-ID: <CAMx+r7X9ZLqqRf8YC8juk0+V1Y3SR6GzPDK7dLqBF0nfEWqg2w@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: multipart/alternative; boundary=94eb2c05b050f906e60548b14f9d
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--94eb2c05b050f906e60548b14f9d
Content-Type: text/plain; charset=UTF-8

On Tue, Feb 14, 2017 at 7:50 AM, Daniel Kahn Gillmor <dkg@fifthhorseman.net>
wrote:

> On Mon 2017-02-13 23:55:45 -0500, David Anderson wrote:
> > "Once stretch is released" could be a few months still, right? It's only
> > just gone into final freeze. I agree that once it's released, backports
> is
> > definitely the right way to distribute.
>
> Yep, it could still be a few months, depending on how rapidly we're able
> to fix the remaining outstanding release-critical bugs.
>
> > So, I'd initially tried doing this, by adding the unstable repository at
> a
> > negative priority. What turned me off is that even with that low
> > preference, attempting to install the wireguard packages seemed to pull
> in
> > some core system libraries (libc and such) from unstable as well. And
> while
> > I'm excited about wireguard, I'm not "install unstable base libraries"
> > excited :).
>
> absolutely!  However, i'm a little surprised that this happened.  If you
> could show a transcript of what you did specifically, and what the
> resultant proposed apt changes were, i'd be interested in understanding
> what went on there.
>

Apologies for the delay. I tried pinning again on a fresh Stretch VM. It
looks like I confused myself by assuming that all the extra packages to be
installed were from sid as well, whereas -d shows that the vast majority
are coming from stretch/main. Sorry about the confusion, given this
behavior I completely agree that this should be the documented way to get
wireguard before stretch gets released as stable.

The transcript below still shows one additional package being pulled from
sid/main, the dkms package. I find this strange: wireguard-dkms depends on
dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite the
negative priority for unstable, apt picks 2.3-3 from sid, even though the
dependency could be satisfied out of stretch. What am I missing?

root@atik # echo "deb http://ftp.us.debian.org/debian sid main"
>/etc/apt/sources.list.d/sid.list
root@atik # cat >/etc/apt/preferences.d/avoid_sid <<EOF
Package: *
Pin: release a=unstable
Pin-Priority: -10
EOF
root@atik # apt update
Hit:1 http://security.debian.org stretch/updates InRelease
Hit:2 http://ftp.us.debian.org/debian stretch InRelease

Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease

Get:4 http://ftp.us.debian.org/debian sid InRelease [231 kB]

Hit:5 http://deb.robustperception.io precise InRelease

Get:6 http://ftp.us.debian.org/debian sid/main amd64 Packages [7,446 kB]
Get:7 http://ftp.us.debian.org/debian sid/main Translation-en [5,645 kB]
Fetched 13.3 MB in 7s (1,739 kB/s)

Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
root@atik # apt upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@atik # apt install -d wireguard-dkms/unstable wireguard-tools/unstable
Reading package lists... Done
Building dependency tree
Reading state information... Done
Selected version '0.0.20170214-1' (Debian:unstable [all]) for
'wireguard-dkms'
Selected version '0.0.20170214-1' (Debian:unstable [amd64]) for
'wireguard-tools'
The following additional packages will be installed:
  dkms fakeroot gcc libfakeroot linux-headers-amd64
Suggested packages:
  python3-apport menu gcc-multilib autoconf automake libtool flex bison gdb
gcc-doc
The following NEW packages will be installed:
  dkms fakeroot gcc libfakeroot linux-headers-amd64 wireguard-dkms
wireguard-tools
0 upgraded, 7 newly installed, 0 to remove and 59 not upgraded.
Need to get 348 kB of archives.
After this operation, 1,360 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64
4:6.3.0-1 [5,184 B]
Get:2 http://ftp.us.debian.org/debian sid/main amd64 dkms all 2.3-3 [74.9
kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 libfakeroot amd64
1.21-3.1 [45.7 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 fakeroot amd64
1.21-3.1 [85.6 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64
linux-headers-amd64 amd64 4.9+78 [5,744 B]
Get:6 http://ftp.us.debian.org/debian sid/main amd64 wireguard-dkms all
0.0.20170214-1 [85.5 kB]
Get:7 http://ftp.us.debian.org/debian sid/main amd64 wireguard-tools amd64
0.0.20170214-1 [44.9 kB]
Fetched 348 kB in 0s (531 kB/s)
Download complete and in download only mode


Cheers,
- Dave


>
> on a similar system i'm using (stretch, with unstable available but
> pinned low), i see only packages from stretch being installed (aside
> from wireguard itself, clearly)
>
> 0 root@test:~# cat /etc/apt/sources.list.d/unstable.list
> deb http://ftp.us.debian.org/debian/ unstable main
> 0 root@test:~# cat /etc/apt/preferences.d/limit-unstable
> Package: *
> Pin: release a=unstable
> Pin-Priority: 200
> 1 root@test:~# apt install wireguard-dkms wireguard-tools -d
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following additional packages will be installed:
>   binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0
> libcilkrts5
>   libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2
>   libquadmath0 libtsan0 libubsan0 make patch
> Suggested packages:
>   binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib
>   manpages-dev autoconf automake libtool flex bison gdb gcc-doc
> gcc-6-multilib
>   gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg
> libasan3-dbg
>   liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg
>   libquadmath0-dbg make-doc ed diffutils-doc
> Recommended packages:
>   fakeroot sudo linux-headers-686-pae | linux-headers-amd64
>   | linux-headers-generic | linux-headers lsb-release libc6-dev | libc-dev
>   libc6-dev
> The following NEW packages will be installed:
>   binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0
> libcilkrts5
>   libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2
>   libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-tools
> 0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.
> Need to get 22.4 MB of archives.
> After this operation, 94.5 MB of additional disk space will be used.
> Do you want to continue? [Y/n]
> Get:1 http://ftp.us.debian.org/debian stretch/main amd64 libmpfr4 amd64
> 3.1.5-1 [556 kB]
> Get:2 http://ftp.us.debian.org/debian stretch/main amd64 libmpc3 amd64
> 1.0.3-1 [40.2 kB]
> Get:3 http://ftp.us.debian.org/debian stretch/main amd64 binutils amd64
> 2.27.90.20170124-2 [3,761 kB]
> Get:4 http://ftp.us.debian.org/debian stretch/main amd64 libisl15 amd64
> 0.18-1 [564 kB]
> Get:5 http://ftp.us.debian.org/debian stretch/main amd64 cpp-6 amd64
> 6.3.0-6 [6,574 kB]
> Get:6 http://ftp.us.debian.org/debian stretch/main amd64 cpp amd64
> 4:6.3.0-1 [18.6 kB]
> Get:7 http://ftp.us.debian.org/debian stretch/main amd64 libcc1-0 amd64
> 6.3.0-6 [30.7 kB]
> Get:8 http://ftp.us.debian.org/debian stretch/main amd64 libgomp1 amd64
> 6.3.0-6 [73.2 kB]
> Get:9 http://ftp.us.debian.org/debian stretch/main amd64 libitm1 amd64
> 6.3.0-6 [27.3 kB]
> Get:10 http://ftp.us.debian.org/debian stretch/main amd64 libatomic1
> amd64 6.3.0-6 [8,904 B]
> Get:11 http://ftp.us.debian.org/debian stretch/main amd64 libasan3 amd64
> 6.3.0-6 [311 kB]
> Get:12 http://ftp.us.debian.org/debian stretch/main amd64 liblsan0 amd64
> 6.3.0-6 [115 kB]
> Get:13 http://ftp.us.debian.org/debian stretch/main amd64 libtsan0 amd64
> 6.3.0-6 [256 kB]
> Get:14 http://ftp.us.debian.org/debian stretch/main amd64 libubsan0 amd64
> 6.3.0-6 [107 kB]
> Get:15 http://ftp.us.debian.org/debian stretch/main amd64 libcilkrts5
> amd64 6.3.0-6 [40.6 kB]
> Get:16 http://ftp.us.debian.org/debian stretch/main amd64 libmpx2 amd64
> 6.3.0-6 [11.2 kB]
> Get:17 http://ftp.us.debian.org/debian stretch/main amd64 libquadmath0
> amd64 6.3.0-6 [131 kB]
> Get:18 http://ftp.us.debian.org/debian stretch/main amd64 libgcc-6-dev
> amd64 6.3.0-6 [2,296 kB]
> Get:19 http://ftp.us.debian.org/debian stretch/main amd64 gcc-6 amd64
> 6.3.0-6 [6,852 kB]
> Get:20 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64
> 4:6.3.0-1 [5,184 B]
> Get:21 http://ftp.us.debian.org/debian stretch/main amd64 make amd64
> 4.1-9 [299 kB]
> Get:22 http://ftp.us.debian.org/debian stretch/main amd64 patch amd64
> 2.7.5-1 [109 kB]
> Get:23 http://ftp.us.debian.org/debian stretch/main amd64 dkms all 2.3-2
> [74.8 kB]
> Get:24 http://ftp.us.debian.org/debian unstable/main amd64 wireguard-dkms
> all 0.0.20170213-1 [90.2 kB]
> Get:25 http://ftp.us.debian.org/debian unstable/main amd64
> wireguard-tools amd64 0.0.20170213-1 [44.9 kB]
> Fetched 22.4 MB in 2s (9,247 kB/s)
> Download complete and in download only mode
> 0 root@test:~#
>
> Please let me know what you're seeing that's different.
>
> Regards,
>
>        --dkg
>

--94eb2c05b050f906e60548b14f9d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On T=
ue, Feb 14, 2017 at 7:50 AM, Daniel Kahn Gillmor <span dir=3D"ltr">&lt;<a h=
ref=3D"mailto:dkg@fifthhorseman.net" target=3D"_blank">dkg@fifthhorseman.ne=
t</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><span class=3D"gmail-">On Mon 2017-02-13 23:55:45 -0500, David Anderson w=
rote:<br>
&gt; &quot;Once stretch is released&quot; could be a few months still, righ=
t? It&#39;s only<br>
&gt; just gone into final freeze. I agree that once it&#39;s released, back=
ports is<br>
&gt; definitely the right way to distribute.<br>
<br>
</span>Yep, it could still be a few months, depending on how rapidly we&#39=
;re able<br>
to fix the remaining outstanding release-critical bugs.<br>
<span class=3D"gmail-"><br>
&gt; So, I&#39;d initially tried doing this, by adding the unstable reposit=
ory at a<br>
&gt; negative priority. What turned me off is that even with that low<br>
&gt; preference, attempting to install the wireguard packages seemed to pul=
l in<br>
&gt; some core system libraries (libc and such) from unstable as well. And =
while<br>
&gt; I&#39;m excited about wireguard, I&#39;m not &quot;install unstable ba=
se libraries&quot;<br>
&gt; excited :).<br>
<br>
</span>absolutely!=C2=A0 However, i&#39;m a little surprised that this happ=
ened.=C2=A0 If you<br>
could show a transcript of what you did specifically, and what the<br>
resultant proposed apt changes were, i&#39;d be interested in understanding=
<br>
what went on there.<br></blockquote><div><br></div><div>Apologies for the d=
elay. I tried pinning again on a fresh Stretch VM. It looks like I confused=
 myself by assuming that all the extra packages to be installed were from s=
id as well, whereas -d shows that the vast majority are coming from stretch=
/main. Sorry about the confusion, given this behavior I completely agree th=
at this should be the documented way to get wireguard before stretch gets r=
eleased as stable.</div><div><br></div><div>The transcript below still show=
s one additional package being pulled from sid/main, the dkms package. I fi=
nd this strange: wireguard-dkms depends on dkms &gt;=3D2.1.0.0, stretch has=
 dkms 2.3-2, and sid has dkms 2.3-3. Despite the negative priority for unst=
able, apt picks 2.3-3 from sid, even though the dependency could be satisfi=
ed out of stretch. What am I missing?</div><div><br></div><div>root@atik #=
=C2=A0echo &quot;deb <a href=3D"http://ftp.us.debian.org/debian">http://ftp=
.us.debian.org/debian</a> sid main&quot; &gt;/etc/apt/sources.list.d/sid.li=
st<br></div><div>root@atik # cat &gt;/etc/apt/preferences.d/avoid_sid &lt;&=
lt;EOF</div><div><div>Package: *</div><div>Pin: release a=3Dunstable</div><=
div>Pin-Priority: -10</div></div><div>EOF</div><div>root@atik # apt update<=
/div><div><div>Hit:1 <a href=3D"http://security.debian.org">http://security=
.debian.org</a> stretch/updates InRelease</div><div>Hit:2 <a href=3D"http:/=
/ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch InRe=
lease =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0=C2=A0</div><div>Hit:3 <a href=3D"http://ftp.us.debian.org/debian=
">http://ftp.us.debian.org/debian</a> stretch-updates InRelease =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0</div><div>Ge=
t:4 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.org/de=
bian</a> sid InRelease [231 kB] =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0</div><div>Hit:5 <a href=3D"ht=
tp://deb.robustperception.io">http://deb.robustperception.io</a> precise In=
Release =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0</div><div>Get:6 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.=
us.debian.org/debian</a> sid/main amd64 Packages [7,446 kB]</div><div>Get:7=
 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debia=
n</a> sid/main Translation-en [5,645 kB]</div><div>Fetched 13.3 MB in 7s (1=
,739 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0</div><div>Reading package lists... Done</div><d=
iv>Building dependency tree =C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>Reading st=
ate information... Done</div><div>All packages are up to date.</div></div><=
div>root@atik # apt upgrade</div><div><div>Reading package lists... Done</d=
iv><div>Building dependency tree =C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>Readi=
ng state information... Done</div><div>Calculating upgrade... Done</div><di=
v>0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.</div></div=
><div>root@atik # apt install -d wireguard-dkms/unstable wireguard-tools/un=
stable</div><div>Reading package lists... Done</div><div>Building dependenc=
y tree =C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>Reading state information... Do=
ne</div><div>Selected version &#39;0.0.20170214-1&#39; (Debian:unstable [al=
l]) for &#39;wireguard-dkms&#39;</div><div>Selected version &#39;0.0.201702=
14-1&#39; (Debian:unstable [amd64]) for &#39;wireguard-tools&#39;</div><div=
>The following additional packages will be installed:</div><div>=C2=A0 dkms=
 fakeroot gcc libfakeroot linux-headers-amd64</div><div>Suggested packages:=
</div><div>=C2=A0 python3-apport menu gcc-multilib autoconf automake libtoo=
l flex bison gdb gcc-doc</div><div>The following NEW packages will be insta=
lled:</div><div>=C2=A0 dkms fakeroot gcc libfakeroot linux-headers-amd64 wi=
reguard-dkms wireguard-tools</div><div>0 upgraded, 7 newly installed, 0 to =
remove and 59 not upgraded.</div><div>Need to get 348 kB of archives.</div>=
<div>After this operation, 1,360 kB of additional disk space will be used.<=
/div><div>Do you want to continue? [Y/n]=C2=A0</div><div>Get:1 <a href=3D"h=
ttp://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch=
/main amd64 gcc amd64 4:6.3.0-1 [5,184 B]</div><div>Get:2 <a href=3D"http:/=
/ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd=
64 dkms all 2.3-3 [74.9 kB]</div><div>Get:3 <a href=3D"http://ftp.us.debian=
.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 libfake=
root amd64 1.21-3.1 [45.7 kB]</div><div>Get:4 <a href=3D"http://ftp.us.debi=
an.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 faker=
oot amd64 1.21-3.1 [85.6 kB]</div><div>Get:5 <a href=3D"http://ftp.us.debia=
n.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 linux-=
headers-amd64 amd64 4.9+78 [5,744 B]</div><div>Get:6 <a href=3D"http://ftp.=
us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 wi=
reguard-dkms all 0.0.20170214-1 [85.5 kB]</div><div>Get:7 <a href=3D"http:/=
/ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd=
64 wireguard-tools amd64 0.0.20170214-1 [44.9 kB]</div><div>Fetched 348 kB =
in 0s (531 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0</div><div>Download compl=
ete and in download only mode</div><div><br></div><div><br></div><div>Cheer=
s,</div><div>- Dave</div><div>=C2=A0<br></div><blockquote class=3D"gmail_qu=
ote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,20=
4);padding-left:1ex">
<br>
on a similar system i&#39;m using (stretch, with unstable available but<br>
pinned low), i see only packages from stretch being installed (aside<br>
from wireguard itself, clearly)<br>
<br>
0 root@test:~# cat /etc/apt/sources.list.d/<wbr>unstable.list<br>
deb <a href=3D"http://ftp.us.debian.org/debian/" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian/</a> unstable main<br>
0 root@test:~# cat /etc/apt/preferences.d/limit-<wbr>unstable<br>
Package: *<br>
Pin: release a=3Dunstable<br>
Pin-Priority: 200<br>
1 root@test:~# apt install wireguard-dkms wireguard-tools -d<br>
Reading package lists... Done<br>
Building dependency tree<br>
Reading state information... Done<br>
The following additional packages will be installed:<br>
=C2=A0 binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libci=
lkrts5<br>
=C2=A0 libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 lib=
mpx2<br>
=C2=A0 libquadmath0 libtsan0 libubsan0 make patch<br>
Suggested packages:<br>
=C2=A0 binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib<=
br>
=C2=A0 manpages-dev autoconf automake libtool flex bison gdb gcc-doc gcc-6-=
multilib<br>
=C2=A0 gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasa=
n3-dbg<br>
=C2=A0 liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg<=
br>
=C2=A0 libquadmath0-dbg make-doc ed diffutils-doc<br>
Recommended packages:<br>
=C2=A0 fakeroot sudo linux-headers-686-pae | linux-headers-amd64<br>
=C2=A0 | linux-headers-generic | linux-headers lsb-release libc6-dev | libc=
-dev<br>
=C2=A0 libc6-dev<br>
The following NEW packages will be installed:<br>
=C2=A0 binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libci=
lkrts5<br>
=C2=A0 libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 lib=
mpx2<br>
=C2=A0 libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-=
tools<br>
0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.<br>
Need to get 22.4 MB of archives.<br>
After this operation, 94.5 MB of additional disk space will be used.<br>
Do you want to continue? [Y/n]<br>
Get:1 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
mpfr4 amd64 3.1.5-1 [556 kB]<br>
Get:2 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
mpc3 amd64 1.0.3-1 [40.2 kB]<br>
Get:3 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 bin=
utils amd64 2.27.90.20170124-2 [3,761 kB]<br>
Get:4 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
isl15 amd64 0.18-1 [564 kB]<br>
Get:5 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 cpp=
-6 amd64 6.3.0-6 [6,574 kB]<br>
Get:6 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 cpp=
 amd64 4:6.3.0-1 [18.6 kB]<br>
Get:7 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
cc1-0 amd64 6.3.0-6 [30.7 kB]<br>
Get:8 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
gomp1 amd64 6.3.0-6 [73.2 kB]<br>
Get:9 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" target=
=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 lib=
itm1 amd64 6.3.0-6 [27.3 kB]<br>
Get:10 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
batomic1 amd64 6.3.0-6 [8,904 B]<br>
Get:11 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
basan3 amd64 6.3.0-6 [311 kB]<br>
Get:12 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
blsan0 amd64 6.3.0-6 [115 kB]<br>
Get:13 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
btsan0 amd64 6.3.0-6 [256 kB]<br>
Get:14 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
bubsan0 amd64 6.3.0-6 [107 kB]<br>
Get:15 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
bcilkrts5 amd64 6.3.0-6 [40.6 kB]<br>
Get:16 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
bmpx2 amd64 6.3.0-6 [11.2 kB]<br>
Get:17 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
bquadmath0 amd64 6.3.0-6 [131 kB]<br>
Get:18 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 li=
bgcc-6-dev amd64 6.3.0-6 [2,296 kB]<br>
Get:19 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 gc=
c-6 amd64 6.3.0-6 [6,852 kB]<br>
Get:20 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 gc=
c amd64 4:6.3.0-1 [5,184 B]<br>
Get:21 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 ma=
ke amd64 4.1-9 [299 kB]<br>
Get:22 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 pa=
tch amd64 2.7.5-1 [109 kB]<br>
Get:23 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 dk=
ms all 2.3-2 [74.8 kB]<br>
Get:24 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> unstable/main amd64 w=
ireguard-dkms all 0.0.20170213-1 [90.2 kB]<br>
Get:25 <a href=3D"http://ftp.us.debian.org/debian" rel=3D"noreferrer" targe=
t=3D"_blank">http://ftp.us.debian.org/<wbr>debian</a> unstable/main amd64 w=
ireguard-tools amd64 0.0.20170213-1 [44.9 kB]<br>
Fetched 22.4 MB in 2s (9,247 kB/s)<br>
Download complete and in download only mode<br>
0 root@test:~#<br>
<br>
Please let me know what you&#39;re seeing that&#39;s different.<br>
<br>
Regards,<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0--dkg<br>
</blockquote></div><br></div></div>

--94eb2c05b050f906e60548b14f9d--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: baptiste@bitsofnetworks.org
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 90d3f74f
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 08:15:28 +0000 (UTC)
Received: from mails.bitsofnetworks.org (rezine.polyno.me [193.33.56.138])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 9b67fe8f
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 08:15:28 +0000 (UTC)
Date: Fri, 17 Feb 2017 09:15:32 +0100
From: Baptiste Jonglez <baptiste@bitsofnetworks.org>
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
Message-ID: <20170217081532.GA20080@lud.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <20170215213153.GC16102@tuxmachine.polynome.dn42>
 <87y3x5h6vc.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="a8Wt8u1KmwUX3Y2C"
In-Reply-To: <87y3x5h6vc.fsf@alice.fifthhorseman.net>
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>


--a8Wt8u1KmwUX3Y2C
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Feb 16, 2017 at 09:46:15PM -0500, Daniel Kahn Gillmor wrote:
> On Wed 2017-02-15 16:31:54 -0500, Baptiste Jonglez wrote:
> > On jessie, it worked exactly the same with the 4.9 kernel from
> > jessie-backports:
> >
> > # cat /etc/apt/sources.list
> > deb http://httpredir.debian.org/debian jessie main
> > deb http://httpredir.debian.org/debian jessie-backports main
> > deb http://httpredir.debian.org/debian unstable main
> > # cat /etc/apt/preferences.d/limit-unstable
> > Package: *
> > Pin: release a=3Dunstable
> > Pin-Priority: 200
> > # apt update
> > # apt install -t jessie-backports linux-image-amd64 linux-base
> > # reboot
> > # apt install wireguard-dkms wireguard-tools
> > # ./client.sh
> > # ping 192.168.4.1
> > PING 192.168.4.1 (192.168.4.1) 56(84) bytes of data.
> > 64 bytes from 192.168.4.1: icmp_seq=3D1 ttl=3D64 time=3D15.1 ms
>=20
> interesting, thanks for testing and reporting back!
>=20
> are you sure that with this installation on jessie, the wireguard
> packages are the only things that got pulled in from unstable?

Yes, it pulled only dkms and menu (from jessie).  Though I probably had
the other dependencies already installed (from jessie or jessie-backports).

--a8Wt8u1KmwUX3Y2C
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=vM2Q
-----END PGP SIGNATURE-----

--a8Wt8u1KmwUX3Y2C--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: Jason@zx2c4.com
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id c5238f5d
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 13:32:37 +0000 (UTC)
Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id fcb2ceb5
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 13:32:37 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 2b6b6c96
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 13:32:37 +0000 (UTC)
Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id f326d078
 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO)
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 13:32:37 +0000 (UTC)
Received: by mail-ot0-f179.google.com with SMTP id 32so31387782oth.3
 for <wireguard@lists.zx2c4.com>; Fri, 17 Feb 2017 05:32:57 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <20170217081532.GA20080@lud.polynome.dn42>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <20170215213153.GC16102@tuxmachine.polynome.dn42>
 <87y3x5h6vc.fsf@alice.fifthhorseman.net>
 <20170217081532.GA20080@lud.polynome.dn42>
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Fri, 17 Feb 2017 14:32:56 +0100
Message-ID: <CAHmME9oYw=qdkgHdSpbjiM=isJopRi8rmFNwrwPt49By+NXG-g@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Baptiste Jonglez <baptiste@bitsofnetworks.org>
Content-Type: text/plain; charset=UTF-8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

Hey guys,

Very nice investigation. I think adding some simple instructions on
this to the WireGuard website makes sense. If you've got a one or two
or three or four line command to magically add these files and sync
the repos, could you send it along? Then I'll include it on the page.

Jason

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dkg@fifthhorseman.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id e066739e
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 19:49:33 +0000 (UTC)
Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id d6e7f5d3
 for <wireguard@lists.zx2c4.com>;
 Fri, 17 Feb 2017 19:49:33 +0000 (UTC)
From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
To: David Anderson <dave@natulte.net>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
In-Reply-To: <CAMx+r7X9ZLqqRf8YC8juk0+V1Y3SR6GzPDK7dLqBF0nfEWqg2w@mail.gmail.com>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <CAMx+r7X9ZLqqRf8YC8juk0+V1Y3SR6GzPDK7dLqBF0nfEWqg2w@mail.gmail.com>
Date: Fri, 17 Feb 2017 14:49:13 -0500
Message-ID: <87efywha2u.fsf@alice.fifthhorseman.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--=-=-=
Content-Type: text/plain

On Thu 2017-02-16 22:14:11 -0500, David Anderson wrote:
> The transcript below still shows one additional package being pulled from
> sid/main, the dkms package. I find this strange: wireguard-dkms depends on
> dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite the
> negative priority for unstable, apt picks 2.3-3 from sid, even though the
> dependency could be satisfied out of stretch. What am I missing?

That is indeed weird.  what does "apt-cache policy dkms" show you?

what if you "apt install dkms" on its own first, which version do you
get?

        --dkg

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=iklP
-----END PGP SIGNATURE-----
--=-=-=--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: dave@natulte.net
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 12116eea
 for <wireguard@lists.zx2c4.com>;
 Mon, 20 Feb 2017 23:52:56 +0000 (UTC)
Received: from mail-vk0-f44.google.com (mail-vk0-f44.google.com
 [209.85.213.44])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 9f4086f5
 for <wireguard@lists.zx2c4.com>;
 Mon, 20 Feb 2017 23:52:56 +0000 (UTC)
Received: by mail-vk0-f44.google.com with SMTP id t8so70582884vke.3
 for <wireguard@lists.zx2c4.com>; Mon, 20 Feb 2017 15:53:42 -0800 (PST)
MIME-Version: 1.0
In-Reply-To: <87efywha2u.fsf@alice.fifthhorseman.net>
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <CAMx+r7X9ZLqqRf8YC8juk0+V1Y3SR6GzPDK7dLqBF0nfEWqg2w@mail.gmail.com>
 <87efywha2u.fsf@alice.fifthhorseman.net>
From: David Anderson <dave@natulte.net>
Date: Mon, 20 Feb 2017 15:53:21 -0800
Message-ID: <CAMx+r7Wq8z8pvEacHw07TM26jktuha08ZvThP2JBx=WUBtviKg@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: multipart/alternative; boundary=001a11440db81becc20548fef91d
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a11440db81becc20548fef91d
Content-Type: text/plain; charset=UTF-8

On Fri, Feb 17, 2017 at 11:49 AM, Daniel Kahn Gillmor <dkg@fifthhorseman.net
> wrote:

> On Thu 2017-02-16 22:14:11 -0500, David Anderson wrote:
> > The transcript below still shows one additional package being pulled from
> > sid/main, the dkms package. I find this strange: wireguard-dkms depends
> on
> > dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite
> the
> > negative priority for unstable, apt picks 2.3-3 from sid, even though the
> > dependency could be satisfied out of stretch. What am I missing?
>
> That is indeed weird.  what does "apt-cache policy dkms" show you?
>

# apt-cache policy dkms
dkms:
  Installed: (none)
  Candidate: 2.3-2
  Version table:
     2.3-3 -1
        -10 http://ftp.us.debian.org/debian sid/main amd64 Packages
        100 /var/lib/dpkg/status
     2.3-2 500
        500 http://ftp.us.debian.org/debian stretch/main amd64 Packages


what if you "apt install dkms" on its own first, which version do you
> get?
>

# apt install -d dkms
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  fakeroot gcc libfakeroot linux-headers-amd64
Suggested packages:
  python3-apport menu gcc-multilib autoconf automake libtool flex bison gdb
gcc-doc
The following NEW packages will be installed:
  dkms fakeroot gcc libfakeroot linux-headers-amd64
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 217 kB of archives.
After this operation, 717 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64
4:6.3.0-1 [5,184 B]
Get:2 http://ftp.us.debian.org/debian stretch/main amd64 dkms all 2.3-2
[74.8 kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 libfakeroot amd64
1.21-3.1 [45.7 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 fakeroot amd64
1.21-3.1 [85.6 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64
linux-headers-amd64 amd64 4.9+78 [5,744 B]
Fetched 217 kB in 0s (328 kB/s)
Download complete and in download only mode

Looks like installing just dkms correctly selects from Stretch, whereas
installing as a dependency of wireguard-dkms pulls in the sid version.

- Dave



>
>         --dkg
>

--001a11440db81becc20548fef91d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_quote">On F=
ri, Feb 17, 2017 at 11:49 AM, Daniel Kahn Gillmor <span dir=3D"ltr">&lt;<a =
href=3D"mailto:dkg@fifthhorseman.net" target=3D"_blank">dkg@fifthhorseman.n=
et</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e=
x"><span class=3D"gmail-">On Thu 2017-02-16 22:14:11 -0500, David Anderson =
wrote:<br>
&gt; The transcript below still shows one additional package being pulled f=
rom<br>
&gt; sid/main, the dkms package. I find this strange: wireguard-dkms depend=
s on<br>
&gt; dkms &gt;=3D2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. D=
espite the<br>
&gt; negative priority for unstable, apt picks 2.3-3 from sid, even though =
the<br>
&gt; dependency could be satisfied out of stretch. What am I missing?<br>
<br>
</span>That is indeed weird.=C2=A0 what does &quot;apt-cache policy dkms&qu=
ot; show you?<br></blockquote><div><br></div><div><div># apt-cache policy d=
kms</div><div>dkms:</div><div>=C2=A0 Installed: (none)</div><div>=C2=A0 Can=
didate: 2.3-2</div><div>=C2=A0 Version table:</div><div>=C2=A0 =C2=A0 =C2=
=A02.3-3 -1</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 -10 <a href=3D"http://ftp=
.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 P=
ackages</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 100 /var/lib/dpkg/status</div=
><div>=C2=A0 =C2=A0 =C2=A02.3-2 500</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 5=
00 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.org/deb=
ian</a> stretch/main amd64 Packages</div></div><div><br></div><div><br></di=
v><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;borde=
r-left:1px solid rgb(204,204,204);padding-left:1ex">what if you &quot;apt i=
nstall dkms&quot; on its own first, which version do you<br>
get?<br></blockquote><div><br></div><div><div># apt install -d dkms</div><d=
iv>Reading package lists... Done</div><div>Building dependency tree =C2=A0 =
=C2=A0 =C2=A0=C2=A0</div><div>Reading state information... Done</div><div>T=
he following additional packages will be installed:</div><div>=C2=A0 fakero=
ot gcc libfakeroot linux-headers-amd64</div><div>Suggested packages:</div><=
div>=C2=A0 python3-apport menu gcc-multilib autoconf automake libtool flex =
bison gdb gcc-doc</div><div>The following NEW packages will be installed:</=
div><div>=C2=A0 dkms fakeroot gcc libfakeroot linux-headers-amd64</div><div=
>0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.</div><div>N=
eed to get 217 kB of archives.</div><div>After this operation, 717 kB of ad=
ditional disk space will be used.</div><div>Do you want to continue? [Y/n]=
=C2=A0</div><div>Get:1 <a href=3D"http://ftp.us.debian.org/debian">http://f=
tp.us.debian.org/debian</a> stretch/main amd64 gcc amd64 4:6.3.0-1 [5,184 B=
]</div><div>Get:2 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us=
.debian.org/debian</a> stretch/main amd64 dkms all 2.3-2 [74.8 kB]</div><di=
v>Get:3 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.or=
g/debian</a> stretch/main amd64 libfakeroot amd64 1.21-3.1 [45.7 kB]</div><=
div>Get:4 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.=
org/debian</a> stretch/main amd64 fakeroot amd64 1.21-3.1 [85.6 kB]</div><d=
iv>Get:5 <a href=3D"http://ftp.us.debian.org/debian">http://ftp.us.debian.o=
rg/debian</a> stretch/main amd64 linux-headers-amd64 amd64 4.9+78 [5,744 B]=
</div><div>Fetched 217 kB in 0s (328 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0</div><div>Download complete and in download only mode</div></div=
><div><br></div><div>Looks like installing just dkms correctly selects from=
 Stretch, whereas installing as a dependency of wireguard-dkms pulls in the=
 sid version.</div><div><br></div><div>- Dave</div><div><br></div><div>=C2=
=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e=
x;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<span class=3D"gmail-HOEnZb"><font color=3D"#888888"><br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 --dkg<br>
</font></span></blockquote></div><br></div></div>

--001a11440db81becc20548fef91d--

From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: barhom@netsat.se
Received: from krantz.zx2c4.com (localhost [127.0.0.1])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 690d300d
 for <wireguard@lists.zx2c4.com>;
 Tue, 21 Feb 2017 00:52:57 +0000 (UTC)
Received: from mail-qt0-f177.google.com (mail-qt0-f177.google.com
 [209.85.216.177])
 by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f0beaf05
 for <wireguard@lists.zx2c4.com>;
 Tue, 21 Feb 2017 00:52:57 +0000 (UTC)
Received: by mail-qt0-f177.google.com with SMTP id k15so99978823qtg.3
 for <wireguard@lists.zx2c4.com>; Mon, 20 Feb 2017 16:53:42 -0800 (PST)
MIME-Version: 1.0
References: <CAMx+r7WsvfJ6j7JT9+Z5mNe=FEFwehTVNgX+7-8vnQMa5FxORg@mail.gmail.com>
 <874lzzqai9.fsf@alice.fifthhorseman.net>
 <CAMx+r7XsHgrxy+1T4ndqzSebA6Ds4XTjQrD9VmoCWAtJkLygHw@mail.gmail.com>
 <87o9y4n555.fsf@alice.fifthhorseman.net>
 <CAMx+r7X9ZLqqRf8YC8juk0+V1Y3SR6GzPDK7dLqBF0nfEWqg2w@mail.gmail.com>
 <87efywha2u.fsf@alice.fifthhorseman.net>
 <CAMx+r7Wq8z8pvEacHw07TM26jktuha08ZvThP2JBx=WUBtviKg@mail.gmail.com>
In-Reply-To: <CAMx+r7Wq8z8pvEacHw07TM26jktuha08ZvThP2JBx=WUBtviKg@mail.gmail.com>
From: Ibrahim Tachijian <barhom@netsat.se>
Date: Tue, 21 Feb 2017 00:53:31 +0000
Message-ID: <CACTq0bQ1onTE+jb4bwjstoTiXReEHEYb=vXqe=+rQC4pSL7qkA@mail.gmail.com>
Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing)
To: David Anderson <dave@natulte.net>,
 Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Content-Type: multipart/alternative; boundary=001a1140f04cb9862c0548ffcfc8
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
List-Id: Development discussion of WireGuard <wireguard.lists.zx2c4.com>
List-Unsubscribe: <https://lists.zx2c4.com/mailman/options/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=unsubscribe>
List-Archive: <http://lists.zx2c4.com/pipermail/wireguard/>
List-Post: <mailto:wireguard@lists.zx2c4.com>
List-Help: <mailto:wireguard-request@lists.zx2c4.com?subject=help>
List-Subscribe: <https://lists.zx2c4.com/mailman/listinfo/wireguard>,
 <mailto:wireguard-request@lists.zx2c4.com?subject=subscribe>

--001a1140f04cb9862c0548ffcfc8
Content-Type: text/plain; charset=UTF-8

I for one would love to be able to try WireGuard on Debian Jessie on 3.16
kernel.

The reason being is I do not see myself upgrading and/or running a
backported linux kernel for the foreseeable future.

Are there any limitations in 3.16 kernel when it comes to Wireguard
capabilities ?

Thanks,


On Tue, Feb 21, 2017 at 12:53 AM David Anderson <dave@natulte.net> wrote:

On Fri, Feb 17, 2017 at 11:49 AM, Daniel Kahn Gillmor <dkg@fifthhorseman.net
> wrote:

On Thu 2017-02-16 22:14:11 -0500, David Anderson wrote:
> The transcript below still shows one additional package being pulled from
> sid/main, the dkms package. I find this strange: wireguard-dkms depends on
> dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite
the
> negative priority for unstable, apt picks 2.3-3 from sid, even though the
> dependency could be satisfied out of stretch. What am I missing?

That is indeed weird.  what does "apt-cache policy dkms" show you?


# apt-cache policy dkms
dkms:
  Installed: (none)
  Candidate: 2.3-2
  Version table:
     2.3-3 -1
        -10 http://ftp.us.debian.org/debian sid/main amd64 Packages
        100 /var/lib/dpkg/status
     2.3-2 500
        500 http://ftp.us.debian.org/debian stretch/main amd64 Packages


what if you "apt install dkms" on its own first, which version do you
get?


# apt install -d dkms
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
  fakeroot gcc libfakeroot linux-headers-amd64
Suggested packages:
  python3-apport menu gcc-multilib autoconf automake libtool flex bison gdb
gcc-doc
The following NEW packages will be installed:
  dkms fakeroot gcc libfakeroot linux-headers-amd64
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 217 kB of archives.
After this operation, 717 kB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64
4:6.3.0-1 [5,184 B]
Get:2 http://ftp.us.debian.org/debian stretch/main amd64 dkms all 2.3-2
[74.8 kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 libfakeroot amd64
1.21-3.1 [45.7 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 fakeroot amd64
1.21-3.1 [85.6 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64
linux-headers-amd64 amd64 4.9+78 [5,744 B]
Fetched 217 kB in 0s (328 kB/s)
Download complete and in download only mode

Looks like installing just dkms correctly selects from Stretch, whereas
installing as a dependency of wireguard-dkms pulls in the sid version.

- Dave




        --dkg


_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

--001a1140f04cb9862c0548ffcfc8
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr" class=3D"gmail_msg">I for one would love =
to be able to try WireGuard on Debian Jessie on 3.16 kernel.<div class=3D"g=
mail_msg"><br class=3D"gmail_msg"></div><div class=3D"gmail_msg">The reason=
 being is I do not see myself upgrading and/or running a backported linux k=
ernel for the foreseeable future.</div><div class=3D"gmail_msg"><br></div><=
div class=3D"gmail_msg">Are there any limitations in 3.16 kernel when it co=
mes to Wireguard capabilities ?</div><div class=3D"gmail_msg"><br></div><di=
v class=3D"gmail_msg">Thanks,</div><div class=3D"gmail_msg">=C2=A0<br></div=
></div><br class=3D"gmail_msg"><div class=3D"gmail_quote gmail_msg"><div di=
r=3D"ltr" class=3D"gmail_msg">On Tue, Feb 21, 2017 at 12:53 AM David Anders=
on &lt;<a href=3D"mailto:dave@natulte.net" class=3D"gmail_msg" target=3D"_b=
lank">dave@natulte.net</a>&gt; wrote:<br class=3D"gmail_msg"></div><blockqu=
ote class=3D"gmail_quote gmail_msg" style=3D"margin:0 0 0 .8ex;border-left:=
1px #ccc solid;padding-left:1ex"><div dir=3D"ltr" class=3D"gmail_msg"><div =
class=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg">On Fri=
, Feb 17, 2017 at 11:49 AM, Daniel Kahn Gillmor <span dir=3D"ltr" class=3D"=
gmail_msg">&lt;<a href=3D"mailto:dkg@fifthhorseman.net" class=3D"gmail_msg"=
 target=3D"_blank">dkg@fifthhorseman.net</a>&gt;</span> wrote:<br class=3D"=
gmail_msg"><blockquote class=3D"gmail_quote gmail_msg" style=3D"margin:0px =
0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><spa=
n class=3D"m_-6198650694073987848m_-8255239338075419741gmail- gmail_msg">On=
 Thu 2017-02-16 22:14:11 -0500, David Anderson wrote:<br class=3D"gmail_msg=
">
&gt; The transcript below still shows one additional package being pulled f=
rom<br class=3D"gmail_msg">
&gt; sid/main, the dkms package. I find this strange: wireguard-dkms depend=
s on<br class=3D"gmail_msg">
&gt; dkms &gt;=3D2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. D=
espite the<br class=3D"gmail_msg">
&gt; negative priority for unstable, apt picks 2.3-3 from sid, even though =
the<br class=3D"gmail_msg">
&gt; dependency could be satisfied out of stretch. What am I missing?<br cl=
ass=3D"gmail_msg">
<br class=3D"gmail_msg">
</span>That is indeed weird.=C2=A0 what does &quot;apt-cache policy dkms&qu=
ot; show you?<br class=3D"gmail_msg"></blockquote><div class=3D"gmail_msg">=
<br class=3D"gmail_msg"></div></div></div></div><div dir=3D"ltr" class=3D"g=
mail_msg"><div class=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gm=
ail_msg"><div class=3D"gmail_msg"><div class=3D"gmail_msg"># apt-cache poli=
cy dkms</div><div class=3D"gmail_msg">dkms:</div><div class=3D"gmail_msg">=
=C2=A0 Installed: (none)</div><div class=3D"gmail_msg">=C2=A0 Candidate: 2.=
3-2</div><div class=3D"gmail_msg">=C2=A0 Version table:</div><div class=3D"=
gmail_msg">=C2=A0 =C2=A0 =C2=A02.3-3 -1</div><div class=3D"gmail_msg">=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 -10 <a href=3D"http://ftp.us.debian.org/debian" cl=
ass=3D"gmail_msg" target=3D"_blank">http://ftp.us.debian.org/debian</a> sid=
/main amd64 Packages</div><div class=3D"gmail_msg">=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 100 /var/lib/dpkg/status</div><div class=3D"gmail_msg">=C2=A0 =C2=A0 =
=C2=A02.3-2 500</div><div class=3D"gmail_msg">=C2=A0 =C2=A0 =C2=A0 =C2=A0 5=
00 <a href=3D"http://ftp.us.debian.org/debian" class=3D"gmail_msg" target=
=3D"_blank">http://ftp.us.debian.org/debian</a> stretch/main amd64 Packages=
</div></div></div></div></div><div dir=3D"ltr" class=3D"gmail_msg"><div cla=
ss=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg"><div clas=
s=3D"gmail_msg"><br class=3D"gmail_msg"></div><div class=3D"gmail_msg"><br =
class=3D"gmail_msg"></div><blockquote class=3D"gmail_quote gmail_msg" style=
=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=
-left:1ex">what if you &quot;apt install dkms&quot; on its own first, which=
 version do you<br class=3D"gmail_msg">
get?<br class=3D"gmail_msg"></blockquote><div class=3D"gmail_msg"><br class=
=3D"gmail_msg"></div></div></div></div><div dir=3D"ltr" class=3D"gmail_msg"=
><div class=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg">=
<div class=3D"gmail_msg"><div class=3D"gmail_msg"># apt install -d dkms</di=
v></div></div></div></div><div dir=3D"ltr" class=3D"gmail_msg"><div class=
=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg"><div class=
=3D"gmail_msg"><div class=3D"gmail_msg">Reading package lists... Done</div>=
<div class=3D"gmail_msg">Building dependency tree =C2=A0 =C2=A0 =C2=A0=C2=
=A0</div><div class=3D"gmail_msg">Reading state information... Done</div><d=
iv class=3D"gmail_msg">The following additional packages will be installed:=
</div><div class=3D"gmail_msg">=C2=A0 fakeroot gcc libfakeroot linux-header=
s-amd64</div><div class=3D"gmail_msg">Suggested packages:</div><div class=
=3D"gmail_msg">=C2=A0 python3-apport menu gcc-multilib autoconf automake li=
btool flex bison gdb gcc-doc</div><div class=3D"gmail_msg">The following NE=
W packages will be installed:</div><div class=3D"gmail_msg">=C2=A0 dkms fak=
eroot gcc libfakeroot linux-headers-amd64</div></div></div></div></div><div=
 dir=3D"ltr" class=3D"gmail_msg"><div class=3D"gmail_extra gmail_msg"><div =
class=3D"gmail_quote gmail_msg"><div class=3D"gmail_msg"><div class=3D"gmai=
l_msg">0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.</div>=
<div class=3D"gmail_msg">Need to get 217 kB of archives.</div><div class=3D=
"gmail_msg">After this operation, 717 kB of additional disk space will be u=
sed.</div></div></div></div></div><div dir=3D"ltr" class=3D"gmail_msg"><div=
 class=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg"><div =
class=3D"gmail_msg"><div class=3D"gmail_msg">Do you want to continue? [Y/n]=
=C2=A0</div><div class=3D"gmail_msg">Get:1 <a href=3D"http://ftp.us.debian.=
org/debian" class=3D"gmail_msg" target=3D"_blank">http://ftp.us.debian.org/=
debian</a> stretch/main amd64 gcc amd64 4:6.3.0-1 [5,184 B]</div></div></di=
v></div></div><div dir=3D"ltr" class=3D"gmail_msg"><div class=3D"gmail_extr=
a gmail_msg"><div class=3D"gmail_quote gmail_msg"><div class=3D"gmail_msg">=
<div class=3D"gmail_msg">Get:2 <a href=3D"http://ftp.us.debian.org/debian" =
class=3D"gmail_msg" target=3D"_blank">http://ftp.us.debian.org/debian</a> s=
tretch/main amd64 dkms all 2.3-2 [74.8 kB]</div></div></div></div></div><di=
v dir=3D"ltr" class=3D"gmail_msg"><div class=3D"gmail_extra gmail_msg"><div=
 class=3D"gmail_quote gmail_msg"><div class=3D"gmail_msg"><div class=3D"gma=
il_msg">Get:3 <a href=3D"http://ftp.us.debian.org/debian" class=3D"gmail_ms=
g" target=3D"_blank">http://ftp.us.debian.org/debian</a> stretch/main amd64=
 libfakeroot amd64 1.21-3.1 [45.7 kB]</div><div class=3D"gmail_msg">Get:4 <=
a href=3D"http://ftp.us.debian.org/debian" class=3D"gmail_msg" target=3D"_b=
lank">http://ftp.us.debian.org/debian</a> stretch/main amd64 fakeroot amd64=
 1.21-3.1 [85.6 kB]</div><div class=3D"gmail_msg">Get:5 <a href=3D"http://f=
tp.us.debian.org/debian" class=3D"gmail_msg" target=3D"_blank">http://ftp.u=
s.debian.org/debian</a> stretch/main amd64 linux-headers-amd64 amd64 4.9+78=
 [5,744 B]</div></div></div></div></div><div dir=3D"ltr" class=3D"gmail_msg=
"><div class=3D"gmail_extra gmail_msg"><div class=3D"gmail_quote gmail_msg"=
><div class=3D"gmail_msg"><div class=3D"gmail_msg">Fetched 217 kB in 0s (32=
8 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0</div></div></div></div></=
div><div dir=3D"ltr" class=3D"gmail_msg"><div class=3D"gmail_extra gmail_ms=
g"><div class=3D"gmail_quote gmail_msg"><div class=3D"gmail_msg"><div class=
=3D"gmail_msg">Download complete and in download only mode</div></div></div=
></div></div><div dir=3D"ltr" class=3D"gmail_msg"><div class=3D"gmail_extra=
 gmail_msg"><div class=3D"gmail_quote gmail_msg"><div class=3D"gmail_msg"><=
/div><div class=3D"gmail_msg"><br class=3D"gmail_msg"></div><div class=3D"g=
mail_msg">Looks like installing just dkms correctly selects from Stretch, w=
hereas installing as a dependency of wireguard-dkms pulls in the sid versio=
n.</div><div class=3D"gmail_msg"><br class=3D"gmail_msg"></div><div class=
=3D"gmail_msg">- Dave</div><div class=3D"gmail_msg"><br class=3D"gmail_msg"=
></div><div class=3D"gmail_msg">=C2=A0</div><blockquote class=3D"gmail_quot=
e gmail_msg" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);padding-left:1ex">
<span class=3D"m_-6198650694073987848m_-8255239338075419741gmail-HOEnZb gma=
il_msg"><font color=3D"#888888" class=3D"gmail_msg"><br class=3D"gmail_msg"=
>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 --dkg<br class=3D"gmail_msg">
</font></span></blockquote></div><br class=3D"gmail_msg"></div></div>
_______________________________________________<br class=3D"gmail_msg">
WireGuard mailing list<br class=3D"gmail_msg">
<a href=3D"mailto:WireGuard@lists.zx2c4.com" class=3D"gmail_msg" target=3D"=
_blank">WireGuard@lists.zx2c4.com</a><br class=3D"gmail_msg">
<a href=3D"https://lists.zx2c4.com/mailman/listinfo/wireguard" rel=3D"noref=
errer" class=3D"gmail_msg" target=3D"_blank">https://lists.zx2c4.com/mailma=
n/listinfo/wireguard</a><br class=3D"gmail_msg">
</blockquote></div></div>

--001a1140f04cb9862c0548ffcfc8--