Hi I managed to add SHA256 Lines to the Release file. I have created a patch for apt-move to fix the issue. I have attached this patch to this bug report via email. But I don't know yet how to add these SHA256 lines into the Packages, Packages.gz and Packages.bz2 Files. The first package on the offical mirror in debian/dists/squeeze/main/binary-i386/Pacakges.gz looks like: Package: 2vcard ... Size: 14300 MD5sum: d831fd82a8605e9258b2314a7d703abe SHA1: e903a05f168a825ff84c87326898a182635f8175 SHA256: 2be9a86f0ec99b1299880c6bf0f4da8257c74a61341c14c103b70c9ec04b10ec On the mirror at my side created with apt-move it looks like that: Package: a2ps ... Size: 926602 MD5sum: ada9c133500447bc22f32419298e2d38 There is no SHA1 or SHA256 line. I have serious problem with debootstrap not accepting my local mirror created with apt-move. But debootstrap accepts the offical mirror so I think the problem is in apt-move and not debootstrap. After fixing the first issue (no SHA256 lines in the Release file) debootstrap goes a step further and stops then without a useful debug message. The only thing I have is a transfer log from vsftpd. Only 2 files were transfered to the debootstrap client: Sat Mar 3 11:18:13 2012 [pid 3] [ftp] OK DOWNLOAD: Client "aa.bb.cc.dd", "/pub/debian/squeeze/dists/squeeze/Release", 2719 bytes, 1429.87Kbyte/sec Sat Mar 3 11:18:13 2012 [pid 3] [ftp] OK DOWNLOAD: Client "aa.bb.cc.dd", "/pub/debian/squeeze/dists/squeeze/main/binary-i386/Packages.gz", 740149 bytes, 9509.55Kbyte/sec Please help me to fix the issue. sincerely yours Mario Koppensteiner
Hi: Do we still need MD5 sums in the Packages file? If not I'd suggest simply changing all existing references to md5 with sha256 and it should just work. Cheers,
Hi, I created a patch to solve the issue and attached it to that email. After the patch is applied the apt-move supports MD5, SHA1 and SHA256 sums. This patch includes the changed of my old patch attached to the bug so only this patch needs to be applied. I think this is a huge step forward. Mabe we can release a new minor version of apt-move? sincerely yours Mario
Hi, Please use this patch instaed. I added my self as a copyright holder because I added a bit of code. sincerely yours Mario
I created a patch for apt-move to add sha256 support for - the Release file - the Packages files - the Sources files On a wheezy system I installed apt-move_4.2.27-3_i386.deb and just after the installation of the deb file the patch can be applied. The other patches in this bug must not be applied for that patch to work. I applied the patch with: cd / patch -p1 < /pathtopatch/apt-move-sha256issue-20130821.diff On my wheezy system the apt-move dependencies have the following versions: bc Version: 1.06.95-2 dash Version: 0.5.7-3 libapt-pkg4.12 Version: 0.9.7.2 libc6 Version: 2.13-33 libgcc1 Version: 1:4.7.1-2 libstdc++6 Version: 4.7.1-2 Please find the patch attached to this post. sincerely yours Mario Koppensteiner
I created a patch for apt-move to add sha256 support for - the Packages files - the Sources files This patch also includes to former patches for version 4.2.27-1 so it also adds sha256 support for - The Release file On a squeeze system I installed apt-move_4.2.27-1+b8_i386.deb and just after the installation of the deb file the patch can be applied. The other patches in this bug must not be applied for that patch to work. I applied the patch with: cd / patch -p1 < /pathtopatch/apt-move-sha256issue-2013082102.patch On my squeeze system the apt-move dependencies have the following versions: bc Version: 1.06.95-2 dash Version: 0.5.5.1-7.4 libapt-pkg4.10: not installed on my system libc6 Version: 2.11.3-3 libgcc1 Version: 1:4.4.5-8 libstdc++6 Version: 4.4.5-8 Please find the patch attached to this post. sincerely yours Mario Koppensteiner