aptitude warning during installation

Toni Mueller support-fai at oeko.net
Thu Jun 8 16:29:01 CEST 2006


Hello,

On Wed, 26.04.2006 at 13:45:26 +0200, Holger Levsen <debian at layer-acht.org> wrote:
> On Wednesday 26 April 2006 08:50, Thomas Lange wrote:
> >     > My fai install is failing due to aptitude refusing to install
> >     > packages from an untrusted source i.e. my mirror.
> > Which FAI version are you using? FAI 2.10.1 does not have these
> > problems any more.
> 
> As happy as I am that fai _supports_ a workaround, I dont think circumventing 
> security should be the default.

asking the user questions about questionable packages in a Debian
mirror the user created at least defeats the purpose of doing a
non-interactive install, imho.

> http://bugs.debian.org/363701

Thanks for putting this up. I'm currently trying to heed this advice,
but currently fail because the suggested method does not install a
keyserver URI. Thus, retrieving the key does not work as advertised (I
have other gnupg installations where I manually configured it, just
that the default install of gnupg doesn't seem to have one).

Also, I experience a slightly different problem, but hope it goes away
when I get around to fully implementing your advice. Btw, this just
popped up after I installed from this FAI several times already, but
w/o that problem (WEIRD!).

Now from the logs (fai.log and software.log both have it):


Untrusted packages could compromise your system's security.
You should only proceed with the installation if you are certain that
this is what you want to do.

  python-crypto python-ldap dhcp3-client libsasl2 smbclient libbz2-1.0 
  python-moinmoin logrotate python2.3-ldap python-doc dhcp3-common 
  python2.3 libkrb53 python2.3-moinmoin python2.3-crypto python 
  dhcp3-server libgmp3 samba lsb-base python2.3-doc grub samba-common 
  moinmoin-common libreadline4 libreadline5 libcupsys2-gnutls10 libldap2 

Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No": Unrecognized input.  Enter either "Yes" or "No".
Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No": Unrecognized input.  Enter either "Yes" or "No".
Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No": Unrecognized input.  Enter either "Yes" or "No".

At this point, it's looping, although logging seems to stop after some
five megs worth of junk. But it's still happily spewing all over the
screen this way.



I'm trying to install Sarge/i386 from a Sarge/i386 + fai 2.10.1 box:

#  dpkg -l 'fai*'
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                    Version                 Description
+++-=======================-=======================-==============================================================
un  fai                     <none>                  (no description available)
ii  fai-client              2.10.1                  Fully Automatic Installation client package
ii  fai-doc                 2.10.1                  Documentation for FAI
ii  fai-kernels             1.9.1                   special kernels for FAI (Fully Automatic Installation)
in  fai-nfsroot             2.10.1                  (no description available)
ii  fai-quickstart          2.10.1                  Fully Automatic Installation quickstart package
ii  fai-server              2.10.1                  Fully Automatic Installation server package


Best,
--Toni++



More information about the linux-fai mailing list