-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Feb 2023 17:04:14 +0100 Source: debian-cd Architecture: source Version: 3.2.0 Distribution: unstable Urgency: medium Maintainer: Debian CD Group <debian-cd@lists.debian.org> Changed-By: Cyril Brulebois <kibi@debian.org> Closes: 1031424 Changes: debian-cd (3.2.0) unstable; urgency=medium . [ Cyril Brulebois — high-level summary ] * This release implements many changes related to the 2022 General Resolution about non-free firmware. In particular, this means adding metadata related to firmware packages, allowing hw-detect to configure apt-setup according to firmware packages getting deployed. In the general case, systems installed using netinst should only get main and non-free-firmware (if such firmware packages are needed) configured, without contrib or non-free. * Builds involving local packages (LOCAL and LOCALDEBS settings) were also reworked. This feature is not used for official builds, and some catch-up was needed (apt becomes stricter over time). The expected layout for local packages was clarified (see comments in CONF.sh), and while it is expected to be clearer and better than it was, it might require some local adjustments. . [ Cyril Brulebois ] * CONF.sh (and README): + Clarify expected layout below the LOCALDEBS directory. + Clarify relationships between NONFREE, NONFREE_COMPONENTS, and FORCE_FIRMWARE. + Keep only non-free-firmware in NONFREE_COMPONENTS, as the interesting firmware packages have been moved from non-free to non-free-firmware. + Unset CONTRIB for consistency: NONFREE is unset, and packages in contrib are usually there because they depend on packages in non-free. * apt-selection: + Annotate local repositories with [trusted=yes]. * easy-build.sh (and Packages-gen): + Create top-level Release files for local packages, allowing apt to validate Packages files (when UPDATE_LOCAL=1 is set). + Create both compressed and uncompress Packages files: apt is unhappy if uncompressed files are missing; the package indexing done in various places is unhappy if compressed files are missing. * generate_firmware_patterns: + Refresh modalias information for the firmware-sof-signed package (using linux-image-6.1.0-1-amd64 version 6.1.4-1). + Make sure dep11 metadata files are present. + Rewrite to work on a single package at once (working on ALL was mostly interesting during early development). * generate_firmware_tasks: + Search for firmware packages only in the configured components, instead of searching in all available components. This means main in any case, while contrib, non-free, and non-free-firmware depend on the CONTRIB, NONFREE, NONFREE_COMPONENTS, and related variables. + Implement support for pseudo-option --list-filenames, making the firmware package search reusable. * make-firmware-image: + Use generate_firmware_task to find firmware packages. + Implement firmware/dep11 generation for bookworm and later. This tool is responsible for generating the firmware tarball, zip, and cpio archives that can be used to extend installation media which don't contain firmware packages. This allows hw-detect to benefit from the same metadata as found in e.g. the netinst image. * make_disc_trees.pl: + Add leading / to paths in Contents-firmware indices, making it easier to use by hw-detect. + Add component column to Contents-firmware indices, making it possible for hw-detect to set the right apt-setup/$component parameters. + Store $package.component files alongside $package.patterns files for firmware packages, also to help hw-detect. + Create /firmware before adding symlinks, and error out if symlink creation fails. + Improve block calculation for firmware-related metadata files. + Merge “local” udebs into “main” explicitly. + Rewrite .disk/base_components if needed: setting LOCAL=1 results in debootstrap's being called with --components=main,local while there might be no debs on the image (depending on the contents of the LOCALDEBS directory)… in that case, rewrite base_components without “local”. * start_new_disc: + Remove /dists/local commodity symlink: it's unclear what it is or was useful for, and it generated a lot of confusion during this development cycle (local = component or codename?!), masking other shortcomings. * Replace all gzip -9 variations with pigz -9nm ones. * Add pigz to Depends accordingly. * Add uuid-runtime to Depends (missed in 3.1.36). . [ Samuel Thibault ] * Fix missing %install% replacements, fixing support for automatically starting a specific entry when a timeout is reached. . [ Steve McIntyre ] * make-firmware-image: Add a list file to show what's included in the firmware archives. * Add new config option DISABLE_UEFI_32 to control mixed-mode EFI on x86 builds. Closes: #1031424 * Add iucode-tool to the list of base packages wanted for amd64 and i386, so we will have it available for installing CPU microcode. Checksums-Sha1: bea7e42c17fb1599b99e575888a8bb58a6b22d9e 1762 debian-cd_3.2.0.dsc 87f9b0ce52a1153d7d3c75b8ee885049488b3523 1228228 debian-cd_3.2.0.tar.xz ac3f144bbcc532b8b7177aea817dd4147d74059c 6391 debian-cd_3.2.0_source.buildinfo Checksums-Sha256: c590dd8fa405e8794638a16fc24bd0b9fb6567229e5ea9a18cc5349127bed69f 1762 debian-cd_3.2.0.dsc 7af0e8099fa11a9b701eb498d56aebce373888774b24af92fd08165d12a69622 1228228 debian-cd_3.2.0.tar.xz d0bee9fe84bab755f4a7c74dcb555e2c1994d8852ebeec3766a95fcdd180eab9 6391 debian-cd_3.2.0_source.buildinfo Files: ec6a2e13e272c2e46d13fbd735c9852d 1762 admin optional debian-cd_3.2.0.dsc dd1562364c33cb37d9bcf2f10aaac2a2 1228228 admin optional debian-cd_3.2.0.tar.xz 2a2d9734251610527b4c10dcf8854d1e 6391 admin optional debian-cd_3.2.0_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJDBAEBCgAuFiEEtg6/KYRFPHDXTPR4/5FK8MKzVSAFAmP44b0QHGtpYmlAZGVi aWFuLm9yZwAKCRD/kUrwwrNVIOcND/Y6PrSe9Z/ZmzRMBJ8RbRD5sHHbBOrYHjTT wONOyWeyvl0ghhtRGzOZnbId/YrrF+DsSowApHBen0GrGxSBl6vZ0NFN/FXbuEwT AFRRH2VY8rMCG0gndqhb6LrunDJZ910ySeAh6WKk455Ivm9ZWD96Q1ahpGyECcnK MeeWfbpL4G5Hk5zAMF2QxiJ/SC8wzKJ2NBFaVa9hl8mf0nXQCB+LTn52VupAriNs oS4p8iBTddFf/g2d0oyauX5BJGsx4beWCqFz/abgLEVh1SToxHQyHwS9q07CIQs4 y1ds9U5EfcRO4zmENCpLkUKbaB+SCiF9iHJfF0cLXmDl2XPRpJi4X0VfWkoP6+m3 taxuJPWXk+d7dqmHVqpbT7Od4Qa/qIcelWOppbgop1j+3k4jB2Dr6SY7peONa1Jr jLdJDonRWbZhb+FLZ49psOz+ExBqkc72Kp96bWbzyGdsTLFSr3VIMws9j4k5gYd/ U4Guf8kdQ/GYCPUFLfoR+gSUDELwdQS2S5i0IMVGOuSFaNaDHZWld4iV7ArBrxE5 oaNwlybPDPo+fYc4WRebmvv6oM2fqBif+QOY86t9EVJKs2++Smh4b8EX6U08x1w6 oC6RZKP/OZeTFDHXSJqDq7eQEVTRJTUXGp/P6OKQ3f572GDWUpA2J4OVCoqBN6qr gUHw7dXd =HztF -----END PGP SIGNATURE-----
