From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: dave@natulte.net Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f5536fe9 for ; Fri, 17 Feb 2017 03:14:16 +0000 (UTC) Received: from mail-ua0-f174.google.com (mail-ua0-f174.google.com [209.85.217.174]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 3c25e919 for ; Fri, 17 Feb 2017 03:14:16 +0000 (UTC) Received: by mail-ua0-f174.google.com with SMTP id t17so14892303uae.3 for ; Thu, 16 Feb 2017 19:14:33 -0800 (PST) MIME-Version: 1.0 In-Reply-To: <87o9y4n555.fsf@alice.fifthhorseman.net> References: <874lzzqai9.fsf@alice.fifthhorseman.net> <87o9y4n555.fsf@alice.fifthhorseman.net> From: David Anderson Date: Thu, 16 Feb 2017 19:14:11 -0800 Message-ID: Subject: Re: (Unofficial) wireguard packages for Debian Stretch (testing) To: Daniel Kahn Gillmor Content-Type: multipart/alternative; boundary=94eb2c05b050f906e60548b14f9d Cc: WireGuard mailing list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , --94eb2c05b050f906e60548b14f9d Content-Type: text/plain; charset=UTF-8 On Tue, Feb 14, 2017 at 7:50 AM, Daniel Kahn Gillmor wrote: > On Mon 2017-02-13 23:55:45 -0500, David Anderson wrote: > > "Once stretch is released" could be a few months still, right? It's only > > just gone into final freeze. I agree that once it's released, backports > is > > definitely the right way to distribute. > > Yep, it could still be a few months, depending on how rapidly we're able > to fix the remaining outstanding release-critical bugs. > > > So, I'd initially tried doing this, by adding the unstable repository at > a > > negative priority. What turned me off is that even with that low > > preference, attempting to install the wireguard packages seemed to pull > in > > some core system libraries (libc and such) from unstable as well. And > while > > I'm excited about wireguard, I'm not "install unstable base libraries" > > excited :). > > absolutely! However, i'm a little surprised that this happened. If you > could show a transcript of what you did specifically, and what the > resultant proposed apt changes were, i'd be interested in understanding > what went on there. > Apologies for the delay. I tried pinning again on a fresh Stretch VM. It looks like I confused myself by assuming that all the extra packages to be installed were from sid as well, whereas -d shows that the vast majority are coming from stretch/main. Sorry about the confusion, given this behavior I completely agree that this should be the documented way to get wireguard before stretch gets released as stable. The transcript below still shows one additional package being pulled from sid/main, the dkms package. I find this strange: wireguard-dkms depends on dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite the negative priority for unstable, apt picks 2.3-3 from sid, even though the dependency could be satisfied out of stretch. What am I missing? root@atik # echo "deb http://ftp.us.debian.org/debian sid main" >/etc/apt/sources.list.d/sid.list root@atik # cat >/etc/apt/preferences.d/avoid_sid < > on a similar system i'm using (stretch, with unstable available but > pinned low), i see only packages from stretch being installed (aside > from wireguard itself, clearly) > > 0 root@test:~# cat /etc/apt/sources.list.d/unstable.list > deb http://ftp.us.debian.org/debian/ unstable main > 0 root@test:~# cat /etc/apt/preferences.d/limit-unstable > Package: * > Pin: release a=unstable > Pin-Priority: 200 > 1 root@test:~# apt install wireguard-dkms wireguard-tools -d > Reading package lists... Done > Building dependency tree > Reading state information... Done > The following additional packages will be installed: > binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 > libcilkrts5 > libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2 > libquadmath0 libtsan0 libubsan0 make patch > Suggested packages: > binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib > manpages-dev autoconf automake libtool flex bison gdb gcc-doc > gcc-6-multilib > gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg > libasan3-dbg > liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg > libquadmath0-dbg make-doc ed diffutils-doc > Recommended packages: > fakeroot sudo linux-headers-686-pae | linux-headers-amd64 > | linux-headers-generic | linux-headers lsb-release libc6-dev | libc-dev > libc6-dev > The following NEW packages will be installed: > binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 > libcilkrts5 > libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2 > libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-tools > 0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded. > Need to get 22.4 MB of archives. > After this operation, 94.5 MB of additional disk space will be used. > Do you want to continue? [Y/n] > Get:1 http://ftp.us.debian.org/debian stretch/main amd64 libmpfr4 amd64 > 3.1.5-1 [556 kB] > Get:2 http://ftp.us.debian.org/debian stretch/main amd64 libmpc3 amd64 > 1.0.3-1 [40.2 kB] > Get:3 http://ftp.us.debian.org/debian stretch/main amd64 binutils amd64 > 2.27.90.20170124-2 [3,761 kB] > Get:4 http://ftp.us.debian.org/debian stretch/main amd64 libisl15 amd64 > 0.18-1 [564 kB] > Get:5 http://ftp.us.debian.org/debian stretch/main amd64 cpp-6 amd64 > 6.3.0-6 [6,574 kB] > Get:6 http://ftp.us.debian.org/debian stretch/main amd64 cpp amd64 > 4:6.3.0-1 [18.6 kB] > Get:7 http://ftp.us.debian.org/debian stretch/main amd64 libcc1-0 amd64 > 6.3.0-6 [30.7 kB] > Get:8 http://ftp.us.debian.org/debian stretch/main amd64 libgomp1 amd64 > 6.3.0-6 [73.2 kB] > Get:9 http://ftp.us.debian.org/debian stretch/main amd64 libitm1 amd64 > 6.3.0-6 [27.3 kB] > Get:10 http://ftp.us.debian.org/debian stretch/main amd64 libatomic1 > amd64 6.3.0-6 [8,904 B] > Get:11 http://ftp.us.debian.org/debian stretch/main amd64 libasan3 amd64 > 6.3.0-6 [311 kB] > Get:12 http://ftp.us.debian.org/debian stretch/main amd64 liblsan0 amd64 > 6.3.0-6 [115 kB] > Get:13 http://ftp.us.debian.org/debian stretch/main amd64 libtsan0 amd64 > 6.3.0-6 [256 kB] > Get:14 http://ftp.us.debian.org/debian stretch/main amd64 libubsan0 amd64 > 6.3.0-6 [107 kB] > Get:15 http://ftp.us.debian.org/debian stretch/main amd64 libcilkrts5 > amd64 6.3.0-6 [40.6 kB] > Get:16 http://ftp.us.debian.org/debian stretch/main amd64 libmpx2 amd64 > 6.3.0-6 [11.2 kB] > Get:17 http://ftp.us.debian.org/debian stretch/main amd64 libquadmath0 > amd64 6.3.0-6 [131 kB] > Get:18 http://ftp.us.debian.org/debian stretch/main amd64 libgcc-6-dev > amd64 6.3.0-6 [2,296 kB] > Get:19 http://ftp.us.debian.org/debian stretch/main amd64 gcc-6 amd64 > 6.3.0-6 [6,852 kB] > Get:20 http://ftp.us.debian.org/debian stretch/main amd64 gcc amd64 > 4:6.3.0-1 [5,184 B] > Get:21 http://ftp.us.debian.org/debian stretch/main amd64 make amd64 > 4.1-9 [299 kB] > Get:22 http://ftp.us.debian.org/debian stretch/main amd64 patch amd64 > 2.7.5-1 [109 kB] > Get:23 http://ftp.us.debian.org/debian stretch/main amd64 dkms all 2.3-2 > [74.8 kB] > Get:24 http://ftp.us.debian.org/debian unstable/main amd64 wireguard-dkms > all 0.0.20170213-1 [90.2 kB] > Get:25 http://ftp.us.debian.org/debian unstable/main amd64 > wireguard-tools amd64 0.0.20170213-1 [44.9 kB] > Fetched 22.4 MB in 2s (9,247 kB/s) > Download complete and in download only mode > 0 root@test:~# > > Please let me know what you're seeing that's different. > > Regards, > > --dkg > --94eb2c05b050f906e60548b14f9d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On T= ue, Feb 14, 2017 at 7:50 AM, Daniel Kahn Gillmor <dkg@fifthhorseman.ne= t> wrote:
On Mon 2017-02-13 23:55:45 -0500, David Anderson w= rote:
> "Once stretch is released" could be a few months still, righ= t? It's only
> just gone into final freeze. I agree that once it's released, back= ports is
> definitely the right way to distribute.

Yep, it could still be a few months, depending on how rapidly we'= ;re able
to fix the remaining outstanding release-critical bugs.

> So, I'd initially tried doing this, by adding the unstable reposit= ory at a
> negative priority. What turned me off is that even with that low
> preference, attempting to install the wireguard packages seemed to pul= l in
> some core system libraries (libc and such) from unstable as well. And = while
> I'm excited about wireguard, I'm not "install unstable ba= se libraries"
> excited :).

absolutely!=C2=A0 However, i'm a little surprised that this happ= ened.=C2=A0 If you
could show a transcript of what you did specifically, and what the
resultant proposed apt changes were, i'd be interested in understanding=
what went on there.

Apologies for the d= elay. I tried pinning again on a fresh Stretch VM. It looks like I confused= myself by assuming that all the extra packages to be installed were from s= id as well, whereas -d shows that the vast majority are coming from stretch= /main. Sorry about the confusion, given this behavior I completely agree th= at this should be the documented way to get wireguard before stretch gets r= eleased as stable.

The transcript below still show= s one additional package being pulled from sid/main, the dkms package. I fi= nd this strange: wireguard-dkms depends on dkms >=3D2.1.0.0, stretch has= dkms 2.3-2, and sid has dkms 2.3-3. Despite the negative priority for unst= able, apt picks 2.3-3 from sid, even though the dependency could be satisfi= ed out of stretch. What am I missing?

root@atik #= =C2=A0echo "deb http://ftp= .us.debian.org/debian sid main" >/etc/apt/sources.list.d/sid.li= st
root@atik # cat >/etc/apt/preferences.d/avoid_sid <&= lt;EOF
Package: *
Pin: release a=3Dunstable
<= div>Pin-Priority: -10
EOF
root@atik # apt update<= /div>
Hit:1 http://security= .debian.org stretch/updates InRelease
Hit:2 http://ftp.us.debian.org/debian stretch InRe= lease =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0=C2=A0
Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
Ge= t:4 http://ftp.us.debian.org/de= bian sid InRelease [231 kB] =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
Hit:5 http://deb.robustperception.io precise In= Release =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0
Get:6 http://ftp.= us.debian.org/debian sid/main amd64 Packages [7,446 kB]
Get:7= http://ftp.us.debian.org/debia= n sid/main Translation-en [5,645 kB]
Fetched 13.3 MB in 7s (1= ,739 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0
Reading package lists... Done
Building dependency tree =C2=A0 =C2=A0 =C2=A0=C2=A0
Reading st= ate information... Done
All packages are up to date.
<= div>root@atik # apt upgrade
Reading package lists... Done
Building dependency tree =C2=A0 =C2=A0 =C2=A0=C2=A0
Readi= ng state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@atik # apt install -d wireguard-dkms/unstable wireguard-tools/un= stable
Reading package lists... Done
Building dependenc= y tree =C2=A0 =C2=A0 =C2=A0=C2=A0
Reading state information... Do= ne
Selected version '0.0.20170214-1' (Debian:unstable [al= l]) for 'wireguard-dkms'
Selected version '0.0.201702= 14-1' (Debian:unstable [amd64]) for 'wireguard-tools'
The following additional packages will be installed:
=C2=A0 dkms= fakeroot gcc libfakeroot linux-headers-amd64
Suggested packages:=
=C2=A0 python3-apport menu gcc-multilib autoconf automake libtoo= l flex bison gdb gcc-doc
The following NEW packages will be insta= lled:
=C2=A0 dkms fakeroot gcc libfakeroot linux-headers-amd64 wi= reguard-dkms wireguard-tools
0 upgraded, 7 newly installed, 0 to = remove and 59 not upgraded.
Need to get 348 kB of archives.
=
After this operation, 1,360 kB of additional disk space will be used.<= /div>
Do you want to continue? [Y/n]=C2=A0
Get:1 http://ftp.us.debian.org/debian stretch= /main amd64 gcc amd64 4:6.3.0-1 [5,184 B]
Get:2 http://ftp.us.debian.org/debian sid/main amd= 64 dkms all 2.3-3 [74.9 kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 libfake= root amd64 1.21-3.1 [45.7 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 faker= oot amd64 1.21-3.1 [85.6 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64 linux-= headers-amd64 amd64 4.9+78 [5,744 B]
Get:6 http://ftp.us.debian.org/debian sid/main amd64 wi= reguard-dkms all 0.0.20170214-1 [85.5 kB]
Get:7 http://ftp.us.debian.org/debian sid/main amd= 64 wireguard-tools amd64 0.0.20170214-1 [44.9 kB]
Fetched 348 kB = in 0s (531 kB/s) =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0
Download compl= ete and in download only mode


Cheer= s,
- Dave
=C2=A0

on a similar system i'm using (stretch, with unstable available but
pinned low), i see only packages from stretch being installed (aside
from wireguard itself, clearly)

0 root@test:~# cat /etc/apt/sources.list.d/unstable.list
deb http://ftp.us.debian.org/debian/ unstable main
0 root@test:~# cat /etc/apt/preferences.d/limit-unstable
Package: *
Pin: release a=3Dunstable
Pin-Priority: 200
1 root@test:~# apt install wireguard-dkms wireguard-tools -d
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
=C2=A0 binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libci= lkrts5
=C2=A0 libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 lib= mpx2
=C2=A0 libquadmath0 libtsan0 libubsan0 make patch
Suggested packages:
=C2=A0 binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib<= br> =C2=A0 manpages-dev autoconf automake libtool flex bison gdb gcc-doc gcc-6-= multilib
=C2=A0 gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasa= n3-dbg
=C2=A0 liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg<= br> =C2=A0 libquadmath0-dbg make-doc ed diffutils-doc
Recommended packages:
=C2=A0 fakeroot sudo linux-headers-686-pae | linux-headers-amd64
=C2=A0 | linux-headers-generic | linux-headers lsb-release libc6-dev | libc= -dev
=C2=A0 libc6-dev
The following NEW packages will be installed:
=C2=A0 binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libci= lkrts5
=C2=A0 libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 lib= mpx2
=C2=A0 libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-= tools
0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.
Need to get 22.4 MB of archives.
After this operation, 94.5 MB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ftp.us.debian.org/debian stretch/main amd64 lib= mpfr4 amd64 3.1.5-1 [556 kB]
Get:2 http://ftp.us.debian.org/debian stretch/main amd64 lib= mpc3 amd64 1.0.3-1 [40.2 kB]
Get:3 http://ftp.us.debian.org/debian stretch/main amd64 bin= utils amd64 2.27.90.20170124-2 [3,761 kB]
Get:4 http://ftp.us.debian.org/debian stretch/main amd64 lib= isl15 amd64 0.18-1 [564 kB]
Get:5 http://ftp.us.debian.org/debian stretch/main amd64 cpp= -6 amd64 6.3.0-6 [6,574 kB]
Get:6 http://ftp.us.debian.org/debian stretch/main amd64 cpp= amd64 4:6.3.0-1 [18.6 kB]
Get:7 http://ftp.us.debian.org/debian stretch/main amd64 lib= cc1-0 amd64 6.3.0-6 [30.7 kB]
Get:8 http://ftp.us.debian.org/debian stretch/main amd64 lib= gomp1 amd64 6.3.0-6 [73.2 kB]
Get:9 http://ftp.us.debian.org/debian stretch/main amd64 lib= itm1 amd64 6.3.0-6 [27.3 kB]
Get:10 http://ftp.us.debian.org/debian stretch/main amd64 li= batomic1 amd64 6.3.0-6 [8,904 B]
Get:11 http://ftp.us.debian.org/debian stretch/main amd64 li= basan3 amd64 6.3.0-6 [311 kB]
Get:12 http://ftp.us.debian.org/debian stretch/main amd64 li= blsan0 amd64 6.3.0-6 [115 kB]
Get:13 http://ftp.us.debian.org/debian stretch/main amd64 li= btsan0 amd64 6.3.0-6 [256 kB]
Get:14 http://ftp.us.debian.org/debian stretch/main amd64 li= bubsan0 amd64 6.3.0-6 [107 kB]
Get:15 http://ftp.us.debian.org/debian stretch/main amd64 li= bcilkrts5 amd64 6.3.0-6 [40.6 kB]
Get:16 http://ftp.us.debian.org/debian stretch/main amd64 li= bmpx2 amd64 6.3.0-6 [11.2 kB]
Get:17 http://ftp.us.debian.org/debian stretch/main amd64 li= bquadmath0 amd64 6.3.0-6 [131 kB]
Get:18 http://ftp.us.debian.org/debian stretch/main amd64 li= bgcc-6-dev amd64 6.3.0-6 [2,296 kB]
Get:19 http://ftp.us.debian.org/debian stretch/main amd64 gc= c-6 amd64 6.3.0-6 [6,852 kB]
Get:20 http://ftp.us.debian.org/debian stretch/main amd64 gc= c amd64 4:6.3.0-1 [5,184 B]
Get:21 http://ftp.us.debian.org/debian stretch/main amd64 ma= ke amd64 4.1-9 [299 kB]
Get:22 http://ftp.us.debian.org/debian stretch/main amd64 pa= tch amd64 2.7.5-1 [109 kB]
Get:23 http://ftp.us.debian.org/debian stretch/main amd64 dk= ms all 2.3-2 [74.8 kB]
Get:24 http://ftp.us.debian.org/debian unstable/main amd64 w= ireguard-dkms all 0.0.20170213-1 [90.2 kB]
Get:25 http://ftp.us.debian.org/debian unstable/main amd64 w= ireguard-tools amd64 0.0.20170213-1 [44.9 kB]
Fetched 22.4 MB in 2s (9,247 kB/s)
Download complete and in download only mode
0 root@test:~#

Please let me know what you're seeing that's different.

Regards,

=C2=A0 =C2=A0 =C2=A0 =C2=A0--dkg

--94eb2c05b050f906e60548b14f9d--