1. Forum
  2. Usenet
  3. LINUX.DEBIAN.SECURITY

  • Old kernel versions cleaned out of packages list

    From Adi Kriegisch@21:1/5 to All on Tue Aug 29 15:20:01 2023
    Dear maintainers,

    I hope this is the correct mailing list for my issue:

    Apparently all older kernel versions have been removed from Debian
    Security's Packages list some time on August 26th before 19:07[1].

    As I completely understand that the debian-security service is no archive
    for very old packages (like linux-image-5.10.0-9 for example),
    I'd very much apprechiate to at least keep one older version listed there
    as Debian itself also prefers to keep at least two kernel versions installed.

    The reason for this is that our monitoring system checks for packages not installed from a Debian repository and we got alerted for kernels linux-image-5.10.0-24 and linux-image-6.1.0-10.

    Is there any chance to get at least one more kernel "back"? :)

    thank you & all the best,
    Adi

    [1] http://snapshot.debian.org/archive/debian-security/20230826T190714Z/dists/bullseye-security/main/binary-amd64/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEENxTTbbOruRNI5poKdER8DqmFXL8FAmTt6h8ACgkQdER8DqmF XL9ONA//bFrMZr8ruc3hv+OTH2lLFRrgRERKoHllFSXBPJbI2TaMaEbttPADncTZ gIYW4cLuDQlYlyQE0DLtyh8T4iDdFpUTNZ++1nlr8cyGsP2SKLvTQGlRjNjivroq qSsHUTJ+0KcMalxYPzBZe1hKkHB8djutdmbjJ9ggYNsbxRhNjdfcZXVcdCWvtfJ9 OlZnzpJIklNwUsHSaMRMOD7JBIY8AGO7O8S79QQUMO1JihHnwXV1ByhelGBuU2Or mszIHQ9re2yqk0xZsd2aCdKmXrJvwrU8hRUnh9xixnwCeEIjYoOTak0ToBC9e9bx W53QKUWKilh5x8ZyoBD8FcizlWybqKlpxPlJLJ5/0zaC7tLtOFUnLbM9+Pp9JQ0f IJu+IaZaqC437Cob/5LvsNVWz/TquA4J5wupsxVDzAeWrWxcHoQtrZJxvsxfx+TT gzUlzYo2VbmGLJwGdwHl7fGIS22ib24l2b4UyQ0KKiYg7I5f4yzx1V1ES7v8GlHb pjo5NuOH1YIFPuWswp5Z0NPvVwzpZQy4qlV0wiwZ0RpkF5eTaFiGXaScGx/ndZKs q6Z4NKuAHQo1IcGXVaRXIFNBkblSRvwCNU8qm79fVpHCx7lByCQ4VAkG3Ae7ytZH M5NSPm3eeBW+QX0b6eApLNE1JnOvNq4DzUZm3tgFC/n8n1iYHOM=
    =HPXD
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvatore Bonaccorso@21:1/5 to Adi Kriegisch on Wed Aug 30 07:20:01 2023
    Hi,

    On Tue, Aug 29, 2023 at 02:52:55PM +0200, Adi Kriegisch wrote:
    Dear maintainers,

    I hope this is the correct mailing list for my issue:

    Apparently all older kernel versions have been removed from Debian
    Security's Packages list some time on August 26th before 19:07[1].

    As I completely understand that the debian-security service is no archive
    for very old packages (like linux-image-5.10.0-9 for example),
    I'd very much apprechiate to at least keep one older version listed there
    as Debian itself also prefers to keep at least two kernel versions installed.

    The reason for this is that our monitoring system checks for packages not installed from a Debian repository and we got alerted for kernels linux-image-5.10.0-24 and linux-image-6.1.0-10.

    Is there any chance to get at least one more kernel "back"? :)

    They were cleaned up to make up space, as they are superseeded by
    newer versions.

    In future this might even happen more automatically and the old
    package auto-decrufted from the archive once new version are present
    in the archive.

    Regards,
    Salvatore

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adi Kriegisch@21:1/5 to Salvatore Bonaccorso on Wed Aug 30 18:00:01 2023
    Hi Salvatore,

    thank you very much for getting back to me.

    On Wed, Aug 30, 2023 at 07:18:42AM +0200, Salvatore Bonaccorso wrote:
    Hi,

    On Tue, Aug 29, 2023 at 02:52:55PM +0200, Adi Kriegisch wrote:
    Dear maintainers,

    I hope this is the correct mailing list for my issue:

    Apparently all older kernel versions have been removed from Debian Security's Packages list some time on August 26th before 19:07[1].

    As I completely understand that the debian-security service is no archive for very old packages (like linux-image-5.10.0-9 for example),
    I'd very much apprechiate to at least keep one older version listed there as Debian itself also prefers to keep at least two kernel versions installed.

    The reason for this is that our monitoring system checks for packages not installed from a Debian repository and we got alerted for kernels linux-image-5.10.0-24 and linux-image-6.1.0-10.

    Is there any chance to get at least one more kernel "back"? :)

    They were cleaned up to make up space, as they are superseeded by
    newer versions.

    In future this might even happen more automatically and the old
    package auto-decrufted from the archive once new version are present
    in the archive.
    I am absolutely in favor of cleaning up and actually this is what we're
    doing after upgrading kernels (apt --purge autoremove). No matter what,
    Debian keeps the latest two ABI versions, currently 5.10.0-24 and
    5.10.0-25 or 6.1.0-10 and 6.1.0-11.

    We also try to do our best with testing upgrades from s-p-u where we once stumbled across an issue with mpt3sas and xen[1] (thank you very much,
    again, for your help with this!) which of course isn't easily possible
    for security upgrades. So there is value in having at least one older
    version available to reduce the risk of failure after an upgrade.

    And this is what I am asking for: would it be possible to just keep the
    kernels that Debian automatically keeps installed in the repository?

    all the best,
    Adi

    [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022126

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEENxTTbbOruRNI5poKdER8DqmFXL8FAmTvZvwACgkQdER8DqmF XL8iJBAAgwiFWfSpEWFSJulw4ZTfU5GhRGwQzxFQlXJIKFRhoXR7uHhXc/fSxG3R g/JYJTYoR6DXe5Yd9ZQN3jocp4Y0AlXiLVkM1i9Ys9XHf1/Vv8VmBA32tQA2ZdRq SL9obsgP/N9cC7f6svSS93n/v2eTjDExD//c7OzySM4Kd0kWOPwPsHwx+0ihqRbT 74S3dewACZUsHiwWTxSv1SWLyz3EwEnMDSqype+6PjK1k+D/KFMJ1lNzNM+S25nY rwwbz6HRbqUPiwkj3GRTJ8tDrc8HeAe4Fc5lKqxPxsLF4gHG1Vmv0UwTqEfqiM1t vAN8Sc3cWG/E84bAG5KveJhEFVfqFDa9JF7Q5mc0qLJNSJ/1tk6PnDuHVuV3gwlA qHWVxFPvmSMyE0M1aVkl58tHAnyeG5Y3HH9KvPOYbnvjUTXCQMw7Rvkc4t79wvod pSjIp5iK075dn6oTEaI+YZStimxL4TLXj5OSxMRyJbQYhXQ27isweSqNKzlNq32d FBG5LdY9OUZRwRziZVheTVMMLtLUaj6tvzIzqGMPfPQQwyN1FRaW7bHwNjsleXJW LwwtzgjjkS8wreAGuPNgYTQPAaz5wSd30T5Wf1LIdCQMuVu7/t3ITFp2p6eoAaTN m5xiM2MmDF4F0y4DIF9apr32BUO99oMbigDD6Av19wAkE8UP+Vo=
    =84MD
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From [email protected]@21:1/5 to All on Wed Aug 30 20:20:01 2023
    Hi,

    30 août 2023, 07:19 de [email protected]:

    They were cleaned up to make up space, as they are superseeded by
    newer versions.

    In future this might even happen more automatically and the old
    package auto-decrufted from the archive once new version are present
    in the archive.

    I totally understand that storage is not infinite and that space must be made sometimes.
    However, wouldn't be automatic and systematic purge contrary to the purpose of snapshot.debian.org? Or maybe would it be an exception here because we have no choice?

    Thanks in advance.
    l0f4r0

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)