#891009 debootstrap: wrongly falls back to https://deb.debian.org when try to create Ubuntu chroot

Package:
debootstrap
Source:
debootstrap
Submitter:
Hideki Yamane
Date:
2024-02-14 14:45:06 UTC
Severity:
normal
Tags:
#891009#5
Date:
2018-02-21 13:31:02 UTC
From:
To:
Hi,

 If you try "debootstrap <ubuntu codename> <dir>", it automatically falls
 back to pre-defined HTTPS mirror.

 But defined DEF_HTTPS_MIRROR is https://deb.debian.org, it fails with
 a bit wrong error message.

 Expected behavior is
  - fails with just "Keyring file not available" error message
  - or falls back to Ubuntu https mirror.


 And, https assures only secure *connection*, not integrity of *contents*
 as GPG does, so this behavior is not good, IMO.
#891009#10
Date:
2018-08-04 04:19:48 UTC
From:
To:
 As I said above, what https ensures and gpg does is different, and "if
 there's no reliable keyring then fallback to https connection" behavior
 is not good. I suggest to remove this feature from debootstrap, do you
 have any idea for it? If so, please let me know it and why.
#891009#15
Date:
2024-02-14 13:41:59 UTC
From:
To:
This should be fixed in the next release.
https://salsa.debian.org/installer-team/debootstrap/-/commit/7e5923030e331f466ec1b56d875b023a274e9220