Hello,

I have had an accident on my Debian-Archiv-Server and unfortunatly the
files "Packages.gz", "Packages.bz2", "Sources.gz", "Sources.bz2" and
"Release" from the directories

/debian/dists/${RELEASE}/main/binary-${ARCH}/
/debian/dists/${RELEASE}/main/sources/
/debian/dists/${RELEASE}/contrib/binary-${ARCH}/
/debian/dists/${RELEASE}/contrib/sources/
/debian/dists/${RELEASE}/non-free/binary-${ARCH}/
/debian/dists/${RELEASE}/non-free/sources/

deleted. The special is, that I have ALL Releases where ${RELEASES} is
like:

potato: 2.2r0 bis 2.2r5 => 6 Releases
woody: 3.0r0 bis 3.0r6 => 7 Releases
sarge: 3.1r0 bis 3.1r7 => 8 Releases
etch: 4.0r0 bis 4.0r2 => 3 Releases

Does anyone has this files? (e.g from the original CD's)

I have the ugencly need to restore several millionen Symlinks.

I need it urgently for the restore of the Archive-Server (the Raid-5
is gone on Thursday 2008-03-27 because a damaged caused by water from a
neighbour)

Note1: With the Archive-Mirroe I can install or restore ANY Release
because I have all "binaries" and "sources" since "SLINK"
plus partialy from "BUZZ", "REX", "BO" und "HAMM".

Note 2: The Archive-Server has currently seven Raid-5 of each fiveteen
300 GByte harddrives (=3600 GByte set) and with the release of
Lenny I will hit the space limit of 25 TByte.
(Currently I have no sponsor and even no fixed Internet
connection, so I am definitivly Off-Line)

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFH9N09C0FPBMSS+BIRAmZAAJ9A8ZFwQ2uEcaZ6c93HGe CjM8LY7gCg1cNg
6LiKDKhwHynSODUbNqW9PUM=
=avhD
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Michelle Konzack wrote on 2008-04-03 15:35:
> Hello,
>
> I have had an accident on my Debian-Archiv-Server and unfortunatly the
> files "Packages.gz", "Packages.bz2", "Sources.gz", "Sources.bz2" and
> "Release" from the directories
>
> /debian/dists/${RELEASE}/main/binary-${ARCH}/
> /debian/dists/${RELEASE}/main/sources/
> /debian/dists/${RELEASE}/contrib/binary-${ARCH}/
> /debian/dists/${RELEASE}/contrib/sources/
> /debian/dists/${RELEASE}/non-free/binary-${ARCH}/
> /debian/dists/${RELEASE}/non-free/sources/
>
> deleted. The special is, that I have ALL Releases where ${RELEASES} is
> like:
>
> potato: 2.2r0 bis 2.2r5 => 6 Releases
> woody: 3.0r0 bis 3.0r6 => 7 Releases
> sarge: 3.1r0 bis 3.1r7 => 8 Releases
> etch: 4.0r0 bis 4.0r2 => 3 Releases
>
> Does anyone has this files? (e.g from the original CD's)

How about [1]?

/-------------------
See http://www.debian.org/ for information about Debian GNU/Linux.

This FTP site is a repository for old debian releases. For new releases
please see ftp://ftp.debian.org/debian/.

Releases are stored by their codenames under the dists/ directory.
woody is Debian 3.0
potato is Debian 2.2
slink is Debian 2.1
hamm is Debian 2.0
bo is Debian 1.3
rex is Debian 1.2
buzz is Debian 1.1

No binaries, only source, are available for rex and buzz.

If you are using APT the relevent sources.list entries are like:
deb http://archive.debian.org/debian-archive/ hamm contrib main non-free
or
deb http://archive.debian.org/debian-archive/ bo bo-unstable contrib
main non-free

\-------------------

E.g. [2] contains
Index of /dists/woody/main/binary-i386
[ICO] Name Last modified Size
[DIR] Parent Directory -
[ ] Packages 01-Jan-2007 21:30 6.2M
[ ] Packages.bz2 01-Jan-2007 21:30 1.3M
[ ] Packages.gz 31-May-2005 22:25 1.7M
[ ] Release 31-May-2005 22:55 95

etc.

HTH, good luck!

Johannes

[1] http://archive.debian.org/README
[2] http://archive.debian.org/dists/woody/main/binary-i386/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH9im0C1NzPRl9qEURAqhPAJwIY3mqeBGHApB0B3GM2W eyUB9+twCeLN0o
fLnmz8PwtEFUgo1aqDN2Xww=
=+pZD
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Thu, Apr 03, 2008 at 03:35:57PM +0200, Michelle Konzack wrote:
> I have had an accident on my Debian-Archiv-Server and unfortunatly the
> files "Packages.gz", "Packages.bz2", "Sources.gz", "Sources.bz2" and
> "Release" from the directories
>
> /debian/dists/${RELEASE}/main/binary-${ARCH}/
> /debian/dists/${RELEASE}/main/sources/
> /debian/dists/${RELEASE}/contrib/binary-${ARCH}/
> /debian/dists/${RELEASE}/contrib/sources/
> /debian/dists/${RELEASE}/non-free/binary-${ARCH}/
> /debian/dists/${RELEASE}/non-free/sources/
>
> deleted. The special is, that I have ALL Releases where ${RELEASES} is
> like:
>
> potato: 2.2r0 bis 2.2r5 => 6 Releases
> woody: 3.0r0 bis 3.0r6 => 7 Releases
> sarge: 3.1r0 bis 3.1r7 => 8 Releases
> etch: 4.0r0 bis 4.0r2 => 3 Releases

Certainly archive.debian.org would have the last version of each release
(so 2.2r5, 3.0r6, etc).

> Does anyone has this files? (e.g from the original CD's)

The CDs would have had seperate (and different) Packages.gz since there
would be one on each CD covering just what was on that CD.

> I have the ugencly need to restore several millionen Symlinks.
>
> I need it urgently for the restore of the Archive-Server (the Raid-5
> is gone on Thursday 2008-03-27 because a damaged caused by water from a
> neighbour)
>
> Note1: With the Archive-Mirroe I can install or restore ANY Release
> because I have all "binaries" and "sources" since "SLINK"
> plus partialy from "BUZZ", "REX", "BO" und "HAMM".
>
> Note 2: The Archive-Server has currently seven Raid-5 of each fiveteen
> 300 GByte harddrives (=3600 GByte set) and with the release of
> Lenny I will hit the space limit of 25 TByte.
> (Currently I have no sponsor and even no fixed Internet
> connection, so I am definitivly Off-Line)

Neat project. I am not sure why being able to install 3.0r3 rather than
3.0r6 is necesarily very useful, but it is neat to have the choice.

Unfortunate that debian of course only keeps the current version of a
release on their servers, and archive.debian.org only ever archives the
last version of a given release.

--
Len Sorensen


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Fri, Apr 04, 2008 at 12:44:38PM -0400, Lennart Sorensen wrote:
> Neat project. I am not sure why being able to install 3.0r3 rather than
> 3.0r6 is necesarily very useful, but it is neat to have the choice.

To have reproducibility of installations, where such is necessary (e.g.,
software escrow situations).

--
<Lo-lan-do> Home is where you have to wash the dishes.
-- #debian-devel, Freenode, 2004-09-22


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Thu, Apr 03, 2008 at 03:35:57PM +0200, Michelle Konzack wrote:
> Hello,
>
> I have had an accident on my Debian-Archiv-Server and unfortunatly the
> files "Packages.gz", "Packages.bz2", "Sources.gz", "Sources.bz2" and
> "Release" from the directories
>
> /debian/dists/${RELEASE}/main/binary-${ARCH}/
> /debian/dists/${RELEASE}/main/sources/
> /debian/dists/${RELEASE}/contrib/binary-${ARCH}/
> /debian/dists/${RELEASE}/contrib/sources/
> /debian/dists/${RELEASE}/non-free/binary-${ARCH}/
> /debian/dists/${RELEASE}/non-free/sources/
>
> deleted. The special is, that I have ALL Releases where ${RELEASES} is
> like:
>
> potato: 2.2r0 bis 2.2r5 => 6 Releases
> woody: 3.0r0 bis 3.0r6 => 7 Releases
> sarge: 3.1r0 bis 3.1r7 => 8 Releases
> etch: 4.0r0 bis 4.0r2 => 3 Releases
>
> Does anyone has this files? (e.g from the original CD's)

Can't you fetch them from snapshot.debian.net?

--
<Lo-lan-do> Home is where you have to wash the dishes.
-- #debian-devel, Freenode, 2004-09-22


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Mon, Apr 07, 2008 at 12:52:06PM +0200, Wouter Verhelst wrote:
> On Fri, Apr 04, 2008 at 12:44:38PM -0400, Lennart Sorensen wrote:
> > Neat project. I am not sure why being able to install 3.0r3 rather than
> > 3.0r6 is necesarily very useful, but it is neat to have the choice.
>
> To have reproducibility of installations, where such is necessary (e.g.,
> software escrow situations).

Why not clone the whole disk on install and escrow the whole image?

Doug.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Hello Lennart,

Am 2008-04-04 12:44:38, schrieb Lennart Sorensen:
> Certainly archive.debian.org would have the last version of each release
> (so 2.2r5, 3.0r6, etc).

Thank you for this hint...

> The CDs would have had seperate (and different) Packages.gz since there
> would be one on each CD covering just what was on that CD.

Right, but if I have for example the Packages.gz fro 3.0r2
I can generate a new Packages.gz for the Mirror.

> Neat project. I am not sure why being able to install 3.0r3 rather than
> 3.0r6 is necesarily very useful, but it is neat to have the choice.

Sometimes it can to resolv errors if you upgrade from
one release to another.

> Unfortunate that debian of course only keeps the current version of a
> release on their servers, and archive.debian.org only ever archives the
> last version of a given release.

Yes unfortunately...

I think, this is WHY <archive.debian.org> can not realy run out
of Diskspace like my mirror

Maybe I ahave found a sponsor for a new cage of 15 drives since
currently it is an expensive hobby for me...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFH+THFC0FPBMSS+BIRAth1AKCbtYHegRxKBPTHXBcgFt ueQyTKEACgh+45
Sqp8ZEg5UAHJit8VMs2KJ1U=
=P0aY
-----END PGP SIGNATURE-----

On Thu, Apr 03, 2008 at 03:35:57PM +0200, Michelle Konzack wrote:
> I have had an accident on my Debian-Archiv-Server and unfortunatly the
> files "Packages.gz", "Packages.bz2", "Sources.gz", "Sources.bz2" and
> "Release" from the directories

Neat project. I'm jumping into it with a question which unfortunately is
not solving your problem.

You are asking generically Packages without specifying a mirror. Are
they granted to be identically replicated among all mirrors? Of course
they *probably* are due to how mirroring works, but is it *granted* that
there are no differences among mirrors?

Would such difference inhibit proper installation due to the apt-secure
stuff?

Cheers.

--
Stefano Zacchiroli -*- PhD in Computer Science ............... now what?
zack@{upsilon.cc,cs.unibo.it,debian.org} -<%>- http://upsilon.cc/zack/
(15:56:48) Zack: e la demo dema ? /\ All one has to do is hit the
(15:57:15) Bac: no, la demo scema \/ right keys at the right time

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIEZFXZN5jenMUa9QRAkn4AJ9t4PKmgHFDBLwCHqLXpf gSuF+YCACfUspF
T0VU4bRaJIewtTIe54HlmEQ=
=1nt2
-----END PGP SIGNATURE-----

On Fri, Apr 25, 2008 at 04:07:51PM +0800, Stefano Zacchiroli wrote:
> You are asking generically Packages without specifying a mirror. Are
> they granted to be identically replicated among all mirrors? Of course
> they *probably* are due to how mirroring works, but is it *granted* that
> there are no differences among mirrors?
>
> Would such difference inhibit proper installation due to the apt-secure
> stuff?

The Release file contains strong checksums of the Packages files, and
it is signed with the Debian Archive key. Both of these are checked
when apt does updates and installs. So as long as there are no keys
from rogue repositories in apt's keyring, it should be fine.

--
Eric Cooper e c c @ c m u . e d u


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Am 2008-04-25 16:07:51, schrieb Stefano Zacchiroli:
> You are asking generically Packages without specifying a mirror. Are
> they granted to be identically replicated among all mirrors? Of course
> they *probably* are due to how mirroring works, but is it *granted* that
> there are no differences among mirrors?
>
> Would such difference inhibit proper installation due to the apt-secure
> stuff?

If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build the
package tree from there since I have all original packages I only do not
know which packages went included in the releases...

And yes, there is a problem with the signed release files, but since I
can check my packages agains packages on <archive.debian.net> I am sure,
I have the right an unaltered ones.

And IF I recreate the packages.gz/Sources.gz, I sign it with MY key and
you CAN trust it or not...

And of course, you can pull down a couple of packages/files out of my
several million (nearly 20 TByte or ninety SCSI 300 GByte drives) and
check it against packages/files from <archive.debian.net>... :-)

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIEjO7C0FPBMSS+BIRAoWWAKDFzGanYeEBaZy62DHeO7 w5LH8cSwCcCw3T
hxVXor4lFlVDsSgoP9j63bQ=
=B2z0
-----END PGP SIGNATURE-----

Michelle Konzack <linux4michelle@freenet.de> writes:

> Am 2008-04-25 16:07:51, schrieb Stefano Zacchiroli:
>> You are asking generically Packages without specifying a mirror. Are
>> they granted to be identically replicated among all mirrors? Of course
>> they *probably* are due to how mirroring works, but is it *granted* that
>> there are no differences among mirrors?
>>
>> Would such difference inhibit proper installation due to the apt-secure
>> stuff?

They have to be identical accross all mirrors.

Release.gpg safeguards Release
Release safeguards Packages.gz
Packages.gz safeguards foo_ver_arch.deb

If any checksum check along that line fails apt will complain.

And nobody can create the Release.gpg unless they have the key from
ftp-master. Somebody elses key won't be in apts keyring unless this is
intentionally.

> If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build the
> package tree from there since I have all original packages I only do not
> know which packages went included in the releases...

Did anyone mention http://archive.debian.org/README yet?

> And yes, there is a problem with the signed release files, but since I
> can check my packages agains packages on <archive.debian.net> I am sure,
> I have the right an unaltered ones.
>
> And IF I recreate the packages.gz/Sources.gz, I sign it with MY key and
> you CAN trust it or not...
>
> And of course, you can pull down a couple of packages/files out of my
> several million (nearly 20 TByte or ninety SCSI 300 GByte drives) and
> check it against packages/files from <archive.debian.net>... :-)

If you get the Packages.gz, Release and Release.gpg files from a
CD/DVD set then you can verify them individually with the debian
archive key from that time and then merge them into a full list and
sign with your own key. You don't have to download anything from
archive.debian.net if you have those index file.

MfG
Goswin


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Am 2008-04-28 20:21:34, schrieb Goswin von Brederlow:
> > If you have for example the ORIGINAL CDs/DVD's of 3.1r4 I can build the
> > package tree from there since I have all original packages I only do not
> > know which packages went included in the releases...
>
> Did anyone mention http://archive.debian.org/README yet?

Yes, but the lists are not complete.

> If you get the Packages.gz, Release and Release.gpg files from a
> CD/DVD set then you can verify them individually with the debian
> archive key from that time and then merge them into a full list and
> sign with your own key. You don't have to download anything from
> archive.debian.net if you have those index file.

As I have written, I have nearly 20 TByte of Debian packages on my
mirror and only accidently killet the /debian/dists/ directory with all
its Packages.gz, Sources.gz, Release and releases.gpg files.

I have all downloaded I have found and arround 16% of the mirror
(generaly the last releses) restored. What I am missing, are the LISTS
of the packages from the Sub-Releases like r0, r1, ...

Since I have ONLY original Debian packages and trust them because it is
a private Non-Public mirror (up to now) I need only the Lists with the
files with its version numbers which went in the Sub-Releases to create
the Symlinks and generate the NEW Packages.gz and Sources.gz files.

Since I can not use the original GPG-Key I sign the Release files with
MY GPG-Key to be sure, no one else after me has modified it.

OK, there are peoples using my mirror, BUT THEY TRUST MY KEY even if
they have not signed it, because we have never meet us personaly.

Note: If I do bad things, peoples will find it out very fast,
and my business is ancien history...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIGd/AC0FPBMSS+BIRAqPXAJ9OA6xnQo8a8pFjnxUbqZj31NzdwQCeO HOK
wuhk6x2BD/MA25DHoqXjubQ=
=5l87
-----END PGP SIGNATURE-----

On Thu, May 01, 2008 at 05:20:32PM +0200, Michelle Konzack wrote:
> As I have written, I have nearly 20 TByte of Debian packages on my
> mirror and only accidently killet the /debian/dists/ directory with all
> its Packages.gz, Sources.gz, Release and releases.gpg files.
>
> I have all downloaded I have found and arround 16% of the mirror
> (generaly the last releses) restored. What I am missing, are the LISTS
> of the packages from the Sub-Releases like r0, r1, ...

You can use the jigdo files such as debian-40r2-i386-DVD-1.jigdo from
http://www.debian.co.il/debian-cd/4....386/jigdo-dvd/ or
http://ftp.pwr.wroc.pl/debian-iso/4....86-DVD-1.jigdo
to extract this information. jigdo files are just gzipped text files.

At least for the 4.0 release you should be able to find jigdo files ...
I think I can send you also some older releases such as Woody in a
private mail. Have to dig ...

Jens


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Hallo Jens,

Am 2008-05-05 15:29:27, schrieb Jens Seidel:
> You can use the jigdo files such as debian-40r2-i386-DVD-1.jigdo from
> http://www.debian.co.il/debian-cd/4....386/jigdo-dvd/ or
> http://ftp.pwr.wroc.pl/debian-iso/4....86-DVD-1.jigdo
> to extract this information. jigdo files are just gzipped text files.
>
> At least for the 4.0 release you should be able to find jigdo files ...
> I think I can send you also some older releases such as Woody in a
> private mail. Have to dig ...

In some days I have back my Server online and I can give you an sftp/scp
access to upload them. I think it is better then E-Mail...

Thanks, Greetings and nice Day
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant


--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIIB1zC0FPBMSS+BIRAu6cAJ93JFKBQC7M0cjmOE3ZLz i3Aet/HQCeLl0/
ss4efaegr9kGT99viQ6iw/k=
=3YD4
-----END PGP SIGNATURE-----