[opensuse-security] 12.3 update-non-oss outdated?

Hello, just noticed on a 12.3 server: # zypper lp Loading repository data... Warning: Repository 'openSUSE-12.3-Update-Non-Oss' appears to outdated. Consider using a different mirror or server. Reading installed packages... No updates found. Looks like there are not enough non-oss updates ;-) Nevertheless, someone[tm] should regularly update the "best before" ;-) timestamp of the repo. # zypper lr -u -E # | Alias | Name | Enabled | Refresh | URI --+---------------------+------------------------------+---------+---------+---------------------------------------------------------------------- 1 | home:cboltz | home:cboltz | Yes | Yes | http://download.opensuse.org/repositories/home:/cboltz/openSUSE_12.3/ 4 | repo-non-oss | openSUSE-12.3-Non-Oss | Yes | Yes | http://download.opensuse.org/distribution/12.3/repo/non-oss/ 5 | repo-oss | openSUSE-12.3-Oss | Yes | Yes | http://download.opensuse.org/distribution/12.3/repo/oss/ 7 | repo-update | openSUSE-12.3-Update | Yes | Yes | http://download.opensuse.org/update/12.3/ 8 | repo-update-non-oss | openSUSE-12.3-Update-Non-Oss | Yes | Yes | http://download.opensuse.org/update/12.3-non-oss/ Regards, Christian Boltz --
Entwickelt mein Rechner ein Eigenleben? Klar, das machen doch alle Rechner. Kann er das nicht in _seiner_ Freizeit ausleben? [> Helga Fischer und Hans-Alexander Leukert in suse-linux]
-- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org

On Mon, Aug 12, 2013 at 02:16:34AM +0200, Christian Boltz wrote:
Hello,
just noticed on a 12.3 server:
# zypper lp Loading repository data... Warning: Repository 'openSUSE-12.3-Update-Non-Oss' appears to outdated. Consider using a different mirror or server. Reading installed packages... No updates found.
Looks like there are not enough non-oss updates ;-)
Nevertheless, someone[tm] should regularly update the "best before" ;-) timestamp of the repo.
It currently requires releasing updates. Lucky we had Opera 12.16 in the queue, I just released that one and it should reset the timestamp. Flash Player is also due with tomorrows MS Patchday I suspect. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 El 2013-08-12 a las 09:22 +0200, Marcus Meissner escribió:
Nevertheless, someone[tm] should regularly update the "best before" ;-) timestamp of the repo.
It currently requires releasing updates.
How about recoding zypper/yast to consider that? ;-) - -- Cheers Carlos E. R. (from 11.4, with Evergreen, x86_64 "Celadon" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iF4EAREIAAYFAlIKywAACgkQja8UbcUWM1ys5QD/bmbCP/oyuZ6VbS0KStwhFTdC 2DnyAj+5Dq276DCwUGgA/2mMX3j+EP/j0HhgC62/Xq1KQNDC4CqalymjUb5EHADD =z2A/ -----END PGP SIGNATURE-----

On Wed, Aug 14, 2013 at 02:10:30AM +0200, Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
El 2013-08-12 a las 09:22 +0200, Marcus Meissner escribió:
Nevertheless, someone[tm] should regularly update the "best before" ;-) timestamp of the repo.
It currently requires releasing updates.
How about recoding zypper/yast to consider that? ;-)
No. It is basically a setting in the repo that could be adjusted to be longer, if it would not be configured in some perl script I have no access to in the buildservice. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 El 2013-08-14 a las 07:49 +0200, Marcus Meissner escribió:
On Wed, Aug 14, 2013 at 02:10:30AM +0200, Carlos E. R. wrote:
It currently requires releasing updates.
How about recoding zypper/yast to consider that? ;-)
No. It is basically a setting in the repo that could be adjusted to be longer, if it would not be configured in some perl script I have no access to in the buildservice.
Oh, Ok. I ask because it would be nice having something to adjust or disable the setting for update repos that do not change - I'm specifically thinking of evergreen: some people seeing the warning try to remove the old update repo, and that is wrong. It would be nice to be able to disable the warning, be it locally or on the server. - -- Cheers Carlos E. R. (from 11.4, with Evergreen, x86_64 "Celadon" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iF4EAREIAAYFAlILbDEACgkQja8UbcUWM1ya8gEAg+A7s1KZvhhWuCO7vb/FlpcA fw9eoDVu9tNv+5dJc88A/07+LxFy+nDdiimp4Vnas5ng38qNd6ikO7KUN15lv/Fe =Yidy -----END PGP SIGNATURE-----

On Wed, Aug 14, 2013 at 01:38:25PM +0200, Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
El 2013-08-14 a las 07:49 +0200, Marcus Meissner escribió:
On Wed, Aug 14, 2013 at 02:10:30AM +0200, Carlos E. R. wrote:
It currently requires releasing updates.
How about recoding zypper/yast to consider that? ;-)
No. It is basically a setting in the repo that could be adjusted to be longer, if it would not be configured in some perl script I have no access to in the buildservice.
Oh, Ok.
I ask because it would be nice having something to adjust or disable the setting for update repos that do not change - I'm specifically thinking of evergreen: some people seeing the warning try to remove the old update repo, and that is wrong.
It would be nice to be able to disable the warning, be it locally or on the server.
It is a necessary precaution for when you really use an outdated mirror or a mirror that is blocking updates for you. Usability adjustments might however be necessary if users react the wrong way. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 El 2013-08-14 a las 13:42 +0200, Marcus Meissner escribió:
It would be nice to be able to disable the warning, be it locally or on the server.
It is a necessary precaution for when you really use an outdated mirror or a mirror that is blocking updates for you.
Yes, I know. But when the system was designed the update repo always changed periodically, it would never be frozen. The situation is different now: there is the non-oss repo, that seldom changes, and there is evergreen, that has a frozen update repo plus an additional new update repo. Thus now we need some kind of override. For evergreen, a manual override, perhaps a flag file that is downloaded as an update from the evergreen repo. For non-oss, just a longer override, perhaps, or dummy updates. That's up to you devs and packagers to design ;-)
Usability adjustments might however be necessary if users react the wrong way.
True. - -- Cheers Carlos E. R. (from 11.4, with Evergreen, x86_64 "Celadon" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iF4EAREIAAYFAlILeZQACgkQja8UbcUWM1yftgEAoBWxHq75PIA/wPy7/NBCGqpW tJchLIjeeD4jeEfVOP4A/02VqR6fGKIxm3A/5QRt1GG55DqSny/asMFFSXux82dN =4GNH -----END PGP SIGNATURE-----
participants (3)
-
Carlos E. R.
-
Christian Boltz
-
Marcus Meissner