d-i netinstall fails due to missing apt-transport-https package
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
debootstrap (Debian) |
Fix Released
|
Unknown
|
|||
debootstrap (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Bionic |
Fix Released
|
High
|
Matthew Ruffell | ||
Eoan |
Won't Fix
|
High
|
Unassigned | ||
Focal |
Fix Released
|
High
|
Matthew Ruffell |
Bug Description
[Impact]
When installing over the network using a netinstall image with pxe boot and with an https apt mirror, the installer fails with the error:
Debootstrap error
couldn't find these debs: apt-transport-https
Check /var/log/syslog or see virtual console 4 for the details
This happens due to apt-transport-https moving to universe from bionic onward, but still being required by debootstrap when it sees a https apt mirror, even though support for https mirrors is built into apt.
[Testcase]
With debootstrap alone:
$ sudo debootstrap bionic output-dir https://<https-mirror>
...
- Before: "E: Couldn't find these debs: apt-transport-
- After: "I: Base system installed successfully."
Or with the debian-installer:
Use the 18.04.4 LTS netinstall ISO to PXE boot with a preseed that uses a custom https apt mirror. Something like:
```
d-i mirror/country string manual
d-i mirror/protocol string https
d-i mirror/
d-i mirror/
d-i mirror/https/proxy string
```
The installer will fail with the error in the impact section.
There are test packages for debootstrap available in the following PPA, for both bionic and focal:
https:/
I have also built a test netinstall ISO with the test debootstrap packages, and is available here:
https:/
You probably want to use mini.iso for PXE boot, but vmlinuz and initrd.gz are provided as well.
[Regression Potential]
The fix adds checks for specific distribution releases, so if someone is trying to debootstrap a previous release where apt-transport-https is still required, it will still function.
For users of newer releases, it simply omits the package. apt-transport-https will still be available in universe if anyone still needs it.
If a regression did occur, users may not be able to access https apt mirrors when using debootstrap. In this case, users can use a plain http mirror until things are fixed.
Due to apt-transport-https not being needed in bionic onward, due to being built into apt directly, I believe this change won't introduce any regressions.
[Other info]
The fix landed in upstream debootstrap in the following commit:
commit 66cbaae642953be
From: Hideki Yamane <email address hidden>
Date: Fri, 28 Feb 2020 00:10:25 +0900
Subject: select codename for apt-transport-https (Closes: #920255, #879755)
Link: https:/
It adds a check for distro release name, and if they fall within Zesty and prior, then it requires apt-transport-
Changed in debootstrap (Debian): | |
status: | Unknown → New |
Changed in debootstrap (Debian): | |
status: | New → Fix Released |
Changed in debootstrap (Ubuntu Eoan): | |
status: | New → Won't Fix |
Changed in debootstrap (Ubuntu Bionic): | |
status: | New → In Progress |
Changed in debootstrap (Ubuntu Focal): | |
status: | New → In Progress |
Changed in debootstrap (Ubuntu Bionic): | |
importance: | Undecided → High |
Changed in debootstrap (Ubuntu Focal): | |
importance: | Undecided → High |
Changed in debootstrap (Ubuntu Bionic): | |
assignee: | nobody → Matthew Ruffell (mruffell) |
Changed in debootstrap (Ubuntu Focal): | |
assignee: | nobody → Matthew Ruffell (mruffell) |
tags: | added: sts |
description: | updated |
summary: |
- Can't find apt-transport-https + d-i netinstall fails due to missing apt-transport-https package |
description: | updated |
tags: | added: sts-sponsor-mfo |
description: | updated |
description: | updated |
Changed in debootstrap (Ubuntu): | |
importance: | Undecided → High |
Changed in debootstrap (Ubuntu Eoan): | |
importance: | Undecided → High |
tags: | removed: sts-sponsor-mfo |
Status changed to 'Confirmed' because the bug affects multiple users.