Debian 7/Wheezy & 8/Jessie backports repos archived

Ever vigilant TurnKey community member, John Carver (aka Dude4Linux), has again bought to our attention an issue worth addressing. In a recent bug report John notes that the Debian old-old-stable (7/Wheezy) and old-stable (8/Jessie) backports apt repositories have now been archived.

To avoid errors jamming up your apt logs, TurnKey v13.x and v14.x users are advised to make an adjustment to their servers.

It is worth noting that the default daily security updates will still occur regardless, but without the update there will be additional errors being logged.

Please note that this does NOT currently affect TurnKey v15.x appliances.

What has happened?

A number of v13.x and v14.x TurnKey appliances (and all v14.2 appliances) have what is referred to as Debian backports enabled. Please follow the link for full details regarding backports, but essentially it provides additional and/or newer versions of software not available in the "main" Debian apt repositories.

Debian 7/Wheezy and 8/Jessie are now in ELTS (Extended Long Term Support) and LTS (Long Term Support) support periods respectively. Once Debian Security Team support ends (one year after a new stable release) support moves to the LTS Team. The LTS Team do not provide support for the backports repositories so I suspect that at least in part, this decision was made to avoid ongoing user confusion in this regard. Thus the backports repos have been archived and the current urls are no longer valid.

It may already be obvious, but to ensure it's completely clear, no further updates (including security updates) will occur for Wheezy and/or Jessie backports packages.

Who does this affect?

This affects many users of TurnKey versions v13.x & v14.x and all users of v14.2.

The v15.x (based on Debian 9/Stretch) appliances are NOT affected.

If you are unsure of which TurnKey version you have, please see the relevant section below.

If you wish to check whether you have backports repo enabled, grep is a useful tool. Run it like this:

grep -r backports /etc/apt/sources.list.d

What version of TurnKey do I have?

If you're not sure which version of TurnKey you are running, please log in via SSH (or Webshell) and run the following command:

turnkey-version

That will return a string in the following format:

turnkey-<APP_NAME>-<VERSION>-<CODENAME>-<ARCH>

Where:

  • APP_NAME is the appliance name; e.g. 'lamp'
  • VERSION is the TurnKey version number; e.g. '14.2'
  • CODENAME is the Debian codename; e.g. 'jessie'
  • ARCH is the system architecture; e.g. 'amd64'

So a 64 bit v14.2 LAMP appliance will return:

turnkey-lamp-14.2-jessie-amd64

Please see below for notes specific to the major TurnKey version relevant to you.

TurnKey v13.x/Debian 7/Wheezy users

Ideally no one is still using TurnKey v13.x anymore. Unless of course your server is not internet accessible, and/or you have subscribed to the Debian ELTS (and that is actually continuing post the currently anticipated cut off of June 2019 - i.e. now!).

This is because the basis of v13.x; Debian 7/Wheezy is now "old-old-stable" and is no longer receiving normal security updates, only very limited updates via the LTS Team (and as per above; that too is due to end any day).

So in most cases, the best course of action is to either migrate your data to a newer version of TurnKey, or do a "regular" in-place Debian upgrade (at least to Jessie; preferably Stretch).

TurnKey v14.x/Debian 8/Jessie users

The basis of TurnKey v14.x; Debian 8/Jessie is currently in its LTS (Long Term Support) phase. That means that there are security updates and bugfixes being provided, but not necessarily for all packages. Also, the updates that are available are being provided by the LTS team, rather than the Security Team.

Unless you have a need to remain on v14.x/Jessie, it is recommended that you either migrate your data to a newer TurnKey instance, or perform an in-place Debian upgrade.

If you do need to stick with v14.x/Jessie, then you will receive about 1 year more of LTS updates (until June 2020). After that time, Jessie will likely move to ELTS. Although usage of ELTS is not recommended unless you are a paid ELTS subscriber.

What do I need to do?

Beyond following the recommended path of updating, there are 2 other options available.

The first is to update the backports repo listing url so that is it in a "working" state again.

As there will be no further updates to backports, disabling backports altogether is another legitimate option.

I'll cover both possibilities in separate sections below. Please follow only one of these, not both.

Option 1: Update backports repo to use archive

To update the backports repo to use the archive involves 2 steps. The following detail assumes this is being done on a v14.x (Debian 8/Jessie) system. For v13.x (Debian 7/Wheezy) please adjust the first line accordingly.

Firstly you need to update the sources.list file url(s) which apt uses to access the repo:

CODENAME=jessie
sed -i "/$CODENAME-backports/ s|httpredir|archive|" /etc/apt/sources.list.d/*

Then because the release file has expired, you'll need to adjust the config so that apt ignores that issue:

echo 'Acquire::Check-Valid-Until no;' > /etc/apt/apt.conf.d/99no-check-valid-until

Then to check all is well, run:

apt update

Option 2: Disable backports completely

Alternatively, you can disable the use of backports completely. Do that like this:

CODENAME=jessie
sed -i "/$CODENAME-backports/ s|^ *deb|#deb|" /etc/apt/sources.list*

Then as per above, to check all is well, run:

apt update

As per always; feedback encouraged

As per always here at TurnKey we love your feedback. Please let us know how you go with this via the comments section below. If you encounter issues not noted, ideally please open a new thread in our support forums (free website user account required to start a new thread).

Good luck! :)

Comments

Giova's picture

Hi! I tried it. I cant disable backports as you explain. Any others option?

Jeremy Davis's picture

I missed the last bit of the sed line to disable backports. Sorry about that... I've fixed the post by to make it a bit easier for you, here it is:

CODENAME=jessie
sed -i "/$CODENAME-backports/ s|^ *deb|#deb|" /etc/apt/sources.list*
apt update

If that still doesn't work, please post back with the error message and I'll try again.

Pages

Add new comment