[xen-tools-dev] Ubuntu, debootstrap, and -updates / -security repositories

[Axel Beckert]

Hi together,

On Mon, Nov 01, 2010 at 09:25:07PM +0100, Dmitry Nedospasov wrote:
> On Mon, Nov 01, 2010 at 11:38:24AM +1100, Nathan O'Sullivan wrote:
> > In regards to adding a flag, is there a good use-case for creating
> > images that are not as up-to-date as possible?
> 
> I mean first of all, I feel that xen-tools has made a name for itself in
> creating vms with an up-to-date base system.
> 
> Second, I think its silly not to install security updates...

Yes, with the exception for systems without network connection. IMHO
the default should be with (or the same as the Dom0) and there should
be an option (or role :-) to skip security updates.

> I really don't like adding a flag for everything though, is there
> another way to add this option? Check if security updates are installed
> on the dom0?

That's already done now in 20-setup-apt, but not for all distros (e.g.
debian != sid yes, but not karmic. For karmic security-updates are
hardcoded).

Also something we should unify by code deduplication.

		Kind regards, Axel
-- 
/~\  Plain Text Ribbon Campaign                   | Axel Beckert
\ /  Say No to HTML in E-Mail and News            | abe at deuxchevaux.org  (Mail)
 X   See http://www.asciiribbon.org/              | abe at noone.org (Mail+Jabber)
/ \  I love long mails: http://email.is-not-s.ms/ | http://noone.org/abe/ (Web)