Updating Mageia 1 with Luigi's security commits

This forum is dedicated to packaging and translating :

On those activities rely the making of Mageia Linux Distribution.

Post all questions and information about packaging and translating : feedbacks, discussion about guidelines, packaging practices...

Updating Mageia 1 with Luigi's security commits

Postby marja » Feb 18th, '13, 21:53

For those who still have to use Mageia 1, or still need it as a backup, here is a list of the updates Luigi committed to SVN after Mageia 1's End Of Life.

After the list you'll find instructions on how to turn those commits into packages and how to install those:

    bind
    bogofilter
    claws-mail-plugins
    cups
    dbus-glib
    dnsmasq
    elinks
    fail2ban
      flash-player-plugin also has a newer version available, but since the Mageia 2 flash-player-plugin package works just fine on Mageia 1, Luigi won't be updating that one in SVN anymore.
    freetype2
    gimp
    gnupg
    gnupg2
    hplip
    jetty
    kdelibs4
    libssh
    libtiff
    libupnp
    mysql
    nagios
    openconnect
    openssh
    perl
    perl-Locale-Maketext
    php-ZendFramework
    pidgin
    proftpd
    python-django
    qemu
    samba
    snack
    squashfs-tools
    squid
    tomcat6
    tor
    vino
    webmin
      For Firefox and Thunderbird 10.0.12ESR updates install in this order:
      rootcerts
      nspr
      nss
      firefox
      firefox-l10n
      mozilla-thunderbird
      mozilla-thunderbird-l10n.

INSTRUCTIONS

You have to install the mgarepo and bm packages. There are some explanations about mgarepo on the Wiki that explain how to get it working with anonymous SVN access https://wiki.mageia.org/en/Mgarepo#I_don.27t_have_a_packager_account_and_want_to_do_an_anonymous_checkout_using_mgarepo, which most people would need to do.

Then, as normal user, do (replace package with name of the SRPM from above):
Code: Select all
mgarepo co -d 1 package

Code: Select all
cd package

Code: Select all
su -c urpmi --buildrequires SPECS/package.spec
to install buildrequires

Code: Select all
bm -l
this will build the RPMS and give the RPM filenames at the end

In most cases, this will suffice to install the updated packages:
Code: Select all
su root

Code: Select all
rpm -Fvh RPMS/*/*.rpm

Code: Select all
exit

Note: Don't use those instructions to do a fresh install of a package. If that is what you need, then first install the one that is available from a regular Mageia 1 repository and then update it.

1st-3rd edit: merged instructions, put list in alphabetical order, re-added dbus-glib
4th, 5th: adjusted according to Luigi's suggestions, removed comma and [DRAFT] message and tags
6th, 7th edit: s/10.0.12ESR/Firefox and Thunderbird 10.0.12ESR/ , added -d 1 to mgarepo command
8th edit: added hplip
Last edited by marja on Feb 22nd, '13, 23:30, edited 8 times in total.
User avatar
marja
 
Posts: 541
Joined: Aug 22nd, '11, 20:50

Re: [DRAFT] Updating Mageia 1 with Luigi's security commits

Postby doktor5000 » Feb 18th, '13, 22:25

IMHO there is no point in posting both the normal and the simplified instructions, as they do the same,
and currently this will just do the contrary, namely make it much more difficult than it actually is.
Maybe you should ask Luigi to take a look and simplify the instructions and consolidate mine into his.
Cauldron is not for the faint of heart!
Caution: Hot, bubbling magic inside. May explode or cook your kittens!
----
Disclaimer: Beware of allergic reactions in answer to unconstructive complaint-type posts
User avatar
doktor5000
 
Posts: 17659
Joined: Jun 4th, '11, 10:10
Location: Leipzig, Germany

Re: [DRAFT] Updating Mageia 1 with Luigi's security commits

Postby marja » Feb 18th, '13, 22:53

You're right, doktor5000, but I'll wait with asking until he processed the messages I already sent him since starting this thread

Edit: didn't need to ask :-D
Luigi already replied to most of that question, so I merged the instructions.
User avatar
marja
 
Posts: 541
Joined: Aug 22nd, '11, 20:50

Re: Updating Mageia 1 with Luigi's security commits

Postby marja » Feb 20th, '13, 13:38

Last night, Luigi updated (again):

    nspr
    nss

Note that in the instructions there was a mistake, that has been fixed last night, too. -d 1 was missing from
Code: Select all
mgarepo co -d 1 package


So if you were surprised to see Mageia 3 packages being built instead of Mageia 1 packages, just try again with the good command
User avatar
marja
 
Posts: 541
Joined: Aug 22nd, '11, 20:50

Re: Updating Mageia 1 with Luigi's security commits

Postby marja » Feb 22nd, '13, 23:26

Luigi added a patch to hplip in Mageia 1 SVN
User avatar
marja
 
Posts: 541
Joined: Aug 22nd, '11, 20:50

Re: Updating Mageia 1 with Luigi's security commits

Postby johnh » Feb 26th, '13, 19:41

After taking the steps described here https://wiki.mageia.org/en/Mgarepo#I_don.27t_have_a_packager_account_and_want_to_do_an_anonymous_checkout_using_mgarepo I get:

Code: Select all
[jan@woonkamer ~]$ mgarepo co -d 1 rootcerts
Permission denied (publickey,password,keyboard-interactive).
svn: To better debug SSH connection problems, remove the -q option from 'ssh' in the [tunnels] section of your Subversion configuration file.
svn: Network connection closed unexpectedly

It seems ssh-agent or ForwardAgent are not setup or your username is wrong. See http://www.mageia.org/wiki/doku.php?id=svn-faq for more information.
[jan@woonkamer ~]$


Should I have used a different command for an anonymous checkout?
The link http://www.mageia.org/wiki/doku.php?id=svn-faq doesn't work.
johnh
 
Posts: 1
Joined: Feb 26th, '13, 19:36

Re: Updating Mageia 1 with Luigi's security commits

Postby doktor5000 » Feb 26th, '13, 23:03

Well, to test it, and to rule out that my existing packager account is used, i've created a new user and did the steps:

Code: Select all
[doktor5000@Mageia2 MGA]$ su - test123
Passwort:
gpg-agent[23547]: Verzeichnis `/home/test123/.gnupg' erzeugt
gpg-agent[23547]: Verzeichnis `/home/test123/.gnupg/private-keys-v1.d' erzeugt
gpg-agent[23548]: gpg-agent (GnuPG) 2.0.18 started
[test123@Mageia2 ~]$ mkdir ~/.mgarepo; cp /etc/mgarepo.conf ~/.mgarepo/config
[test123@Mageia2 ~]$ mcedit ~/.mgarepo/config
[test123@Mageia2 ~]$ grep mirror ~/.mgarepo/config
mirror = svn://svn.mageia.org/svn/packages/


Checkout works (i just use a different syntax, as i'm used to that)
Code: Select all
[test123@Mageia2 ~]$ LC_ALL=C mgarepo co 1/rootcerts
Using the svn mirror.
To be able to commit changes, use 'mgarepo switch' first.
A    rootcerts/SPECS
--2013-02-26 22:02:02--  http://binrepo.mageia.org//07f9f6c8a3be4473497fe89174a32d32eb66bdd7
Resolving binrepo.mageia.org (binrepo.mageia.org)... 212.85.158.147, 2a02:2178:2:7::3
Connecting to binrepo.mageia.org (binrepo.mageia.org)|212.85.158.147|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1306494 (1.2M) [text/plain]
Saving to: `rootcerts/SOURCES/certdata.txt'

100%[==============================================================================================================================>] 1,306,494    416K/s   in 3.1s

2013-02-26 22:02:05 (416 KB/s) - `rootcerts/SOURCES/certdata.txt' saved [1306494/1306494]

--2013-02-26 22:02:05--  http://binrepo.mageia.org//54c4ec6b7d2c04dee64f80a2e1b4fe545b1b7484
Resolving binrepo.mageia.org (binrepo.mageia.org)... 212.85.158.147, 2a02:2178:2:7::3
Connecting to binrepo.mageia.org (binrepo.mageia.org)|212.85.158.147|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 159050 (155K) [text/plain]
Saving to: `rootcerts/SOURCES/rootcerts.tar.bz2'

100%[==============================================================================================================================>] 159,050      301K/s   in 0.5s

2013-02-26 22:02:06 (301 KB/s) - `rootcerts/SOURCES/rootcerts.tar.bz2' saved [159050/159050]


So please check your ~/.mgarepo/config again, or post the output of grep mirror ~/.mgarepo/config
Cauldron is not for the faint of heart!
Caution: Hot, bubbling magic inside. May explode or cook your kittens!
----
Disclaimer: Beware of allergic reactions in answer to unconstructive complaint-type posts
User avatar
doktor5000
 
Posts: 17659
Joined: Jun 4th, '11, 10:10
Location: Leipzig, Germany

Re: Updating Mageia 1 with Luigi's security commits

Postby marja » Mar 9th, '13, 09:55

The user I know from real life who stayed on 1, has now decided to upgrade to 2 and live with a downside. The ones who still use Mageia 1 as back-up system, won't build the packages from Luigi's commits and I don't have time to do it for them.

Does anybody read this thread who still needs Luigi's commits and who will use them?
User avatar
marja
 
Posts: 541
Joined: Aug 22nd, '11, 20:50

Re: Updating Mageia 1 with Luigi's security commits

Postby luigiwalser » May 20th, '13, 21:57

Just in case anyone was still using these, Mageia 3 is out now, so I won't be making any more commits to Mageia 1 SVN. The packages that have been updated in Mageia 1 SVN since this thread was last updated (February 22) are:
krb5
libxml2
git
ruby
libxslt
gajim
libarchive
postgresql9.0
curl
krb5 (again)
x11-server
util-linux-ng
libtiff
gpsd
python-httplib2
openvpn
openswan
luigiwalser
 
Posts: 3
Joined: Jan 29th, '12, 23:24


Return to Packaging and translating for Mageia

Who is online

Users browsing this forum: No registered users and 1 guest

cron