<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Feb 14, 2017 at 7:50 AM, Daniel Kahn Gillmor <span dir="ltr"><<a href="mailto:dkg@fifthhorseman.net" target="_blank">dkg@fifthhorseman.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-">On Mon 2017-02-13 23:55:45 -0500, David Anderson wrote:<br>
> "Once stretch is released" could be a few months still, right? It's only<br>
> just gone into final freeze. I agree that once it's released, backports is<br>
> definitely the right way to distribute.<br>
<br>
</span>Yep, it could still be a few months, depending on how rapidly we're able<br>
to fix the remaining outstanding release-critical bugs.<br>
<span class="gmail-"><br>
> So, I'd initially tried doing this, by adding the unstable repository at a<br>
> negative priority. What turned me off is that even with that low<br>
> preference, attempting to install the wireguard packages seemed to pull in<br>
> some core system libraries (libc and such) from unstable as well. And while<br>
> I'm excited about wireguard, I'm not "install unstable base libraries"<br>
> excited :).<br>
<br>
</span>absolutely! However, i'm a little surprised that this happened. If you<br>
could show a transcript of what you did specifically, and what the<br>
resultant proposed apt changes were, i'd be interested in understanding<br>
what went on there.<br></blockquote><div><br></div><div>Apologies for the delay. I tried pinning again on a fresh Stretch VM. It looks like I confused myself by assuming that all the extra packages to be installed were from sid as well, whereas -d shows that the vast majority are coming from stretch/main. Sorry about the confusion, given this behavior I completely agree that this should be the documented way to get wireguard before stretch gets released as stable.</div><div><br></div><div>The transcript below still shows one additional package being pulled from sid/main, the dkms package. I find this strange: wireguard-dkms depends on dkms >=2.1.0.0, stretch has dkms 2.3-2, and sid has dkms 2.3-3. Despite the negative priority for unstable, apt picks 2.3-3 from sid, even though the dependency could be satisfied out of stretch. What am I missing?</div><div><br></div><div>root@atik # echo "deb <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid main" >/etc/apt/sources.list.d/sid.list<br></div><div>root@atik # cat >/etc/apt/preferences.d/avoid_sid <<EOF</div><div><div>Package: *</div><div>Pin: release a=unstable</div><div>Pin-Priority: -10</div></div><div>EOF</div><div>root@atik # apt update</div><div><div>Hit:1 <a href="http://security.debian.org">http://security.debian.org</a> stretch/updates InRelease</div><div>Hit:2 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch InRelease </div><div>Hit:3 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch-updates InRelease </div><div>Get:4 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid InRelease [231 kB] </div><div>Hit:5 <a href="http://deb.robustperception.io">http://deb.robustperception.io</a> precise InRelease </div><div>Get:6 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 Packages [7,446 kB]</div><div>Get:7 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main Translation-en [5,645 kB]</div><div>Fetched 13.3 MB in 7s (1,739 kB/s) </div><div>Reading package lists... Done</div><div>Building dependency tree </div><div>Reading state information... Done</div><div>All packages are up to date.</div></div><div>root@atik # apt upgrade</div><div><div>Reading package lists... Done</div><div>Building dependency tree </div><div>Reading state information... Done</div><div>Calculating upgrade... Done</div><div>0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.</div></div><div>root@atik # apt install -d wireguard-dkms/unstable wireguard-tools/unstable</div><div>Reading package lists... Done</div><div>Building dependency tree </div><div>Reading state information... Done</div><div>Selected version '0.0.20170214-1' (Debian:unstable [all]) for 'wireguard-dkms'</div><div>Selected version '0.0.20170214-1' (Debian:unstable [amd64]) for 'wireguard-tools'</div><div>The following additional packages will be installed:</div><div> dkms fakeroot gcc libfakeroot linux-headers-amd64</div><div>Suggested packages:</div><div> python3-apport menu gcc-multilib autoconf automake libtool flex bison gdb gcc-doc</div><div>The following NEW packages will be installed:</div><div> dkms fakeroot gcc libfakeroot linux-headers-amd64 wireguard-dkms wireguard-tools</div><div>0 upgraded, 7 newly installed, 0 to remove and 59 not upgraded.</div><div>Need to get 348 kB of archives.</div><div>After this operation, 1,360 kB of additional disk space will be used.</div><div>Do you want to continue? [Y/n] </div><div>Get:1 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 gcc amd64 4:6.3.0-1 [5,184 B]</div><div>Get:2 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 dkms all 2.3-3 [74.9 kB]</div><div>Get:3 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 libfakeroot amd64 1.21-3.1 [45.7 kB]</div><div>Get:4 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 fakeroot amd64 1.21-3.1 [85.6 kB]</div><div>Get:5 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> stretch/main amd64 linux-headers-amd64 amd64 4.9+78 [5,744 B]</div><div>Get:6 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 wireguard-dkms all 0.0.20170214-1 [85.5 kB]</div><div>Get:7 <a href="http://ftp.us.debian.org/debian">http://ftp.us.debian.org/debian</a> sid/main amd64 wireguard-tools amd64 0.0.20170214-1 [44.9 kB]</div><div>Fetched 348 kB in 0s (531 kB/s) </div><div>Download complete and in download only mode</div><div><br></div><div><br></div><div>Cheers,</div><div>- Dave</div><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
on a similar system i'm using (stretch, with unstable available but<br>
pinned low), i see only packages from stretch being installed (aside<br>
from wireguard itself, clearly)<br>
<br>
0 root@test:~# cat /etc/apt/sources.list.d/<wbr>unstable.list<br>
deb <a href="http://ftp.us.debian.org/debian/" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian/</a> unstable main<br>
0 root@test:~# cat /etc/apt/preferences.d/limit-<wbr>unstable<br>
Package: *<br>
Pin: release a=unstable<br>
Pin-Priority: 200<br>
1 root@test:~# apt install wireguard-dkms wireguard-tools -d<br>
Reading package lists... Done<br>
Building dependency tree<br>
Reading state information... Done<br>
The following additional packages will be installed:<br>
binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libcilkrts5<br>
libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2<br>
libquadmath0 libtsan0 libubsan0 make patch<br>
Suggested packages:<br>
binutils-doc cpp-doc gcc-6-locales python3-apport menu gcc-multilib<br>
manpages-dev autoconf automake libtool flex bison gdb gcc-doc gcc-6-multilib<br>
gcc-6-doc libgcc1-dbg libgomp1-dbg libitm1-dbg libatomic1-dbg libasan3-dbg<br>
liblsan0-dbg libtsan0-dbg libubsan0-dbg libcilkrts5-dbg libmpx2-dbg<br>
libquadmath0-dbg make-doc ed diffutils-doc<br>
Recommended packages:<br>
fakeroot sudo linux-headers-686-pae | linux-headers-amd64<br>
| linux-headers-generic | linux-headers lsb-release libc6-dev | libc-dev<br>
libc6-dev<br>
The following NEW packages will be installed:<br>
binutils cpp cpp-6 dkms gcc gcc-6 libasan3 libatomic1 libcc1-0 libcilkrts5<br>
libgcc-6-dev libgomp1 libisl15 libitm1 liblsan0 libmpc3 libmpfr4 libmpx2<br>
libquadmath0 libtsan0 libubsan0 make patch wireguard-dkms wireguard-tools<br>
0 upgraded, 25 newly installed, 0 to remove and 0 not upgraded.<br>
Need to get 22.4 MB of archives.<br>
After this operation, 94.5 MB of additional disk space will be used.<br>
Do you want to continue? [Y/n]<br>
Get:1 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libmpfr4 amd64 3.1.5-1 [556 kB]<br>
Get:2 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libmpc3 amd64 1.0.3-1 [40.2 kB]<br>
Get:3 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 binutils amd64 2.27.90.20170124-2 [3,761 kB]<br>
Get:4 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libisl15 amd64 0.18-1 [564 kB]<br>
Get:5 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 cpp-6 amd64 6.3.0-6 [6,574 kB]<br>
Get:6 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 cpp amd64 4:6.3.0-1 [18.6 kB]<br>
Get:7 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libcc1-0 amd64 6.3.0-6 [30.7 kB]<br>
Get:8 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libgomp1 amd64 6.3.0-6 [73.2 kB]<br>
Get:9 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libitm1 amd64 6.3.0-6 [27.3 kB]<br>
Get:10 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libatomic1 amd64 6.3.0-6 [8,904 B]<br>
Get:11 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libasan3 amd64 6.3.0-6 [311 kB]<br>
Get:12 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 liblsan0 amd64 6.3.0-6 [115 kB]<br>
Get:13 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libtsan0 amd64 6.3.0-6 [256 kB]<br>
Get:14 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libubsan0 amd64 6.3.0-6 [107 kB]<br>
Get:15 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libcilkrts5 amd64 6.3.0-6 [40.6 kB]<br>
Get:16 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libmpx2 amd64 6.3.0-6 [11.2 kB]<br>
Get:17 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libquadmath0 amd64 6.3.0-6 [131 kB]<br>
Get:18 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 libgcc-6-dev amd64 6.3.0-6 [2,296 kB]<br>
Get:19 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 gcc-6 amd64 6.3.0-6 [6,852 kB]<br>
Get:20 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 gcc amd64 4:6.3.0-1 [5,184 B]<br>
Get:21 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 make amd64 4.1-9 [299 kB]<br>
Get:22 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 patch amd64 2.7.5-1 [109 kB]<br>
Get:23 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> stretch/main amd64 dkms all 2.3-2 [74.8 kB]<br>
Get:24 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> unstable/main amd64 wireguard-dkms all 0.0.20170213-1 [90.2 kB]<br>
Get:25 <a href="http://ftp.us.debian.org/debian" rel="noreferrer" target="_blank">http://ftp.us.debian.org/<wbr>debian</a> unstable/main amd64 wireguard-tools amd64 0.0.20170213-1 [44.9 kB]<br>
Fetched 22.4 MB in 2s (9,247 kB/s)<br>
Download complete and in download only mode<br>
0 root@test:~#<br>
<br>
Please let me know what you're seeing that's different.<br>
<br>
Regards,<br>
<br>
--dkg<br>
</blockquote></div><br></div></div>