Debian Repo

This is a repo of Debian i386 packaged versions of my stuff for use with apt instead of individual downloads. The tree starts at ftp://download.tuxfamily.org/user42/debian/, or see the tree listing.

Direct apt-get to the repo with the following line in your /etc/apt/sources.list file, then "apt-get update" to fetch the indexes.

deb     https://download.tuxfamily.org/user42/debian user42 main other
deb-src https://download.tuxfamily.org/user42/debian user42 main other

Or ftp://download... or http://download... as desired. Browse through the Packages files directly for all the contents,

main Packages
other Packages

The packages were built on an i386 of an only moderately up-to-date "testing" at release time. All the Emacs things and most of the Perl are architecture "all". There's an amd64 pool which has just those "all" packages. On other archs something like the following might work to take just the "all" packages (or perhaps amd64 instead of i386, and new enough apt),

deb [arch=i386] https://download.tuxfamily.org/user42/debian user42 main other

The deb-src line is only needed to download sources with apt-get source PACKAGENAME. Each .orig.tar.gz is identical to the source .tar.gz, but with the deb package name. Each .diff.gz is empty (except on a binary rebuild) since the tar includes a debian dir.

Presently only some sources are in the repo but going to have all soon. The intended use is convenient rebuilding of packages against newer or older libraries. The simplest is by apt, but things like pbuilder can do whole environments and chains of depends.

apt-get source --compile libfile-locate-iterator-perl

If tests fail for a bad reason then try skipping with

DEB_BUILD_OPTIONS=nocheck apt-get source --compile ...

The Perl XS packages are built for Perl 5.28.1 but can be rebuilt from source for other versions. Perl minor versions are usually upwardly binary compatible but not major versions, requiring an irritating rebuild of all packages.

On non-i386 it might work to build and install binary dependencies individually and then let apt-get take the "all" packages as above.

The Emacs packages might have debhelper blobs which only work with emacsen-common version 2 and up. Those emacsen-common bits were designed to reduce dependencies but result in an undeclared dependency on its version 2 or higher. That version is now a while ago. The symptom of running with earlier is no byte compiling at package install.

Security

The repo and each .dsc are signed with my key. The Release file etc has SHA256 digests signed by 4096R so should work with Apt circa 2016 refusing SHA-1 (due to whatever computing power or algorithms approaching the time when it might no longer be secure).

With recent Apt, it may be necessary to tell Apt to trust my key or it won't even make packages available. This is annoying but it's an end-to-end check. (Previously you could answer yes to "without verification" warnings, or apt-get --allow-unauthenticated.) One way is to copy my keyring file user42_kevin.gpg to

/etc/apt/trusted.gpg.d/user42_kevin.gpg

But examine or verify first of course (gpg --list-keys, --list-sigs, etc). Read more in the apt-key and/or apt-secure man pages, or the Debian wiki on SecureApt. You can always review and dpkg -i filename.deb individual files.

Each source .dsc is signed by my key. This is a Gnu PG clear sign but is best verified by dscverify (from devscripts) which checks the .orig.tar.gz and .diff.gz are the SHAs listed in the .dsc.

dscverify --keyring user42_kevin.gpg FILENAME.dsc

Can list keyring file in DSCVERIFY_KEYRINGS environment variable or /etc/devscripts.conf, or add key to ~/.gnupg/trustedkeys.gpg, rather than --keyring each time.

All of tuxfamily can be reached by https. This would be recommended for security if going to actually run something. The HTTPS SSL certificate is from tuxfamily.


Other

The "other" packages are things from elsewhere put into debs. No guarantees about the quality, security, etc, except they seem fine. Each maintainer version is "0.1" or "0.2" so if/when there's a packaged version in the Debian archive it'll be higher and so hopefully preferred by apt etc.

The Perl packages are built with dh-make-perl, except those described below. The source .diff.gz is as generated by dh-make-perl, possibly with Depends tweaks, and possibly plus minor bug fixes to the package itself.

libpngwriter0c2 and libpngwriter0-dev are copied from snapshot.debian.org as they're no longer in the Debian archive. Both use libpng12 (also copied). Its corresponding libpng12-dev is no longer current, but using just the library is fine.

libgt-perl (about 1.1Mb deb) is the Perl modules of Genius Trader made with the following debian/ dir. This package is enough for programming and for the Chart tie-ins. The Genius Trader scripts aren't in a deb here.

libgt-perl-debian-dir-0.0.20120930-0.1.tar (20k, and sig)

libfinance-ta-perl (about 265kb deb) is the Perl interface (SWIG) of TA-Lib SVN snapshot made with the following debian/ dir. The dir uses tmake to fix some build rules in the TA sources. tmake is no longer in Debian, but a past version such as 1.8-1.1 works. The resulting deb has a static linked copy of the TA library, per its interface build rules, so there's no separate C library deb.

libfinance-ta-perl-debian-dir-1562-0.4.tar.gz (4k, and sig)


This page Copyright 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 Kevin Ryde.
(Back to the sitemap.)