On 01/08/18 01:03, leloft wrote:

>
> I am experimenting with the idea of a customised local instance of the
> Debian security-tracker but configured for Devuan Beowulf . Thus I may
> have access to a local devuan-security mirror from which I could
> extract a beowulf summary for this list to accompany the DSA summaries
> for ascii. To this end, I have done the following:

Great idea. Would love it and will help where I can.
>
> 1) git clone
> git@???:security-tracker-team/security-tracker.git
> and issued $bin/setup-repo
>
> 2) with a view to a devuan-specific version of this
> https://security-team.debian.org/security_tracker.html#setting-up-a-local-testing-instance
>
> 3) by editing the ./security-tracker/Makefile to
> Devuan specific variables.
>
> 4) I was hoping it would be a trivial matter of
> replacing devuan values in place for debian e.g. 'ascii' for 'stretch'
> and Devuan URLs in place of
> MIRROR = http://debian.csail.mit.edu/debian
MIRROR = http://deb.devuan.org/merged

> SECURITY_MIRROR = http://security.debian.org/debian-security
SECURITY_MIRROR = http://deb.devuan.org/merged (same as normal)

You'll need to change the code to reflect our security suites to handle
<suite>-security

>
> Are there Devuan equivalents to these? Am I being naive?
^^

> My reasoning was that as the distance between Devuan
> and Debian grows, so the desirability for Devuan-specific security
> advisories may well increase in tandem. As this is going to add a
> layer of uncertainty for the already over-worked upstream, my hope was
> that I could do some of the preliminary spadework, although spadework
> is about all it would (could) be. I have also reasoned that if
> it was that simple, it's already been done, and probably better.

We're all busy people - it's needed but not as much as other stuff.
Would love if you could take this on!
>
> Is there anything in this idea that could be developed into a 'project'?
> I have had a look at the devuan-security pages, and would be more than
> willing to be a junior participant in such a project.
> https://git.devuan.org/devuan-security

Come over to #devuan-infra on freenode to discuss further

>
> All (any) advice or tips would be gratefully accepted.
>
> Many Thanks
>
> leloft
>
>
>
>
>
> _______________________________________________
> Dng mailing list
> Dng@???
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>


--
Daniel Reurich
Centurion Computer Technology (2005) Ltd.
021 797 722