From: Adrian Zaugg on
Dear list

How do I prevent apt in a mixed stable/testing environment from
installing packages that first time appear in testing using apt-pinning?

Right now gcc-4.4-base would get installed on a mixed system by apt-get
upgrade, since it does arrange well with all required libraries found in
stable. It depends furthermore on libk5crypto3, which isn't in stable
neither, libk5crypto3's dependencies are fullfilled aswell. Once
installed you run into the bug #566988, which means apache, postgresql,
ssh, ... do not run anymore. Until this bug has been fixed I want to
prevent apt from installing packages from testing, that are not found in
stable, except such, that I mention explicitly in /etc/apt/preferences.
How can this be achieved?


Thank you, Adrian.


PS: If you see the error:
relocation error: /usr/lib/libkrb5.so.3: symbol krb5_hmac, version
k5crypto_3_MIT not defined in file libk5crypto.so.3 with link time reference
you were hit by the above mentioned bug. To solve, do the following:

apt-get remove --purge libk5crypto3

(You may need to purge others for hygienic reasons.) Then

apt-get install --reinstall libkrb53

....and finally prevent apt from reinstalling libk5crypto3. How? Read the
answers...


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Boyd Stephen Smith Jr. on
In <4B60D057.9020908(a)ente.limmat.ch>, Adrian Zaugg wrote:
>How do I prevent apt in a mixed stable/testing environment from
>installing packages that first time appear in testing using apt-pinning?

http://wiki.debian.org/AptPreferences

My setup is mostly stable on my server and (by now) mostly testing on my
desktop, but the configuration is virtually identical:
http://iguanasuicide.net/node/4

>Until this bug has been fixed I want to
>prevent apt from installing packages from testing, that are not found in
>stable, except such, that I mention explicitly in /etc/apt/preferences.
>How can this be achieved?

Pin testing @ -1. Pin the testing packages you use @ 100+.
--
Boyd Stephen Smith Jr. ,= ,-_-. =.
bss(a)iguanasuicide.net ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/ \_/
From: Osamu Aoki on
Hi,

On Thu, Jan 28, 2010 at 12:46:31AM +0100, Adrian Zaugg wrote:
> Dear list
>
> How do I prevent apt in a mixed stable/testing environment from
> installing packages that first time appear in testing using apt-pinning?

As I posted, mixed system comes with negatives.

Let's look at different side.

If you need new gcc to compile and test packages, I guess you are
ready to learn how we developer do this using specialized chroot
environment creation package: "pbuilder" .

Of course, you can use full featured virtualization tools such as kvm or
virtualbox-ose to use clean unstable desktop and build environment...

Osamu


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Adrian Zaugg on
Packages that rely solely on Java or PHP are not problematic to install
from Testing. That's what I do here. The suggestion for apt_prefernces

Package: *
Pin: release a=testing
Pin-Priority: -1

does unfortunately not hinder dselect from installing libk5crypto3. Any
other suggestions?


Regards, Adrian.


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org
From: Brian C on
Adrian Zaugg wrote on Wed, 27 Jan 2010 16:09:30 -0800

> PS: If you see the error:
>
> relocation error: /usr/lib/libkrb5.so.3: symbol krb5_hmac, version
> k5crypto_3_MIT not defined in file libk5crypto.so.3 with link time reference
>
> you were hit by the above mentioned bug. To solve, do the following:
>
> apt-get remove --purge libk5crypto3
>
> (You may need to purge others for hygienic reasons.) Then
>
> apt-get install --reinstall libkrb53

Thank you so much for mentioning this fix. I run (ran) a mixed
Lenny/Squeeze system and after the recent updates something installed
libk5crypto3 and made it so that apache2 would not start. This was on my
webserver, so that was obviously not good. Your message is (right now)
the only thing online that explains a fix. Thanks again.

(I don't know how to prevent libk5crypto3 from being installed again,
but I just set all my sources to Lenny and commented out the Squeeze
sources entirely for the time being, so that should work.)

Additionally, this same problem causes sshd not to work and to give this
deceptive error every time you try to login:

ssh_exchange_identification: Connection closed by remote host

Others who have that error have a hosts.deny problem, or need to
increase the MaxStartups, but none of this fixes the libk5crypto3 issue
that is actually the cause of sshd failing as well.

Brian


--
To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org