Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #198126 > unrolled thread
| Started by | Long Wind <longwind2@yahoo.com> |
|---|---|
| First post | 2018-08-01 00:00 +0200 |
| Last post | 2018-08-02 03:50 +0200 |
| Articles | 9 — 5 participants |
Back to article view | Back to linux.debian.user
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
how to prevent security update installation during stretch installation Long Wind <longwind2@yahoo.com> - 2018-08-01 00:00 +0200
Re: how to prevent security update installation during stretch installation David Christensen <dpchrist@holgerdanske.com> - 2018-08-01 02:40 +0200
Re: how to prevent security update installation during stretch installation Roberto C. Sánchez <roberto@debian.org> - 2018-08-01 02:50 +0200
Re: how to prevent security update installation during stretch installation David Christensen <dpchrist@holgerdanske.com> - 2018-08-01 03:10 +0200
Re: how to prevent security update installation during stretch installation Roberto C. Sánchez <roberto@debian.org> - 2018-08-01 03:30 +0200
Re: how to prevent security update installation during stretch installation deloptes <deloptes@gmail.com> - 2018-08-01 07:50 +0200
Re: how to prevent security update installation during stretch installation Long Wind <longwind2@yahoo.com> - 2018-08-01 10:10 +0200
Re: how to prevent security update installation during stretch installation Matthew Crews <mailinglists@mattcrews.com> - 2018-08-01 20:40 +0200
Re: how to prevent security update installation during stretch installation David Christensen <dpchrist@holgerdanske.com> - 2018-08-02 03:50 +0200
| From | Long Wind <longwind2@yahoo.com> |
|---|---|
| Date | 2018-08-01 00:00 +0200 |
| Subject | how to prevent security update installation during stretch installation |
| Message-ID | <whKQp-1zv-3@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
i plan to install debian by network i don't like security update, how to do it? Thanks!
[toc] | [next] | [standalone]
| From | David Christensen <dpchrist@holgerdanske.com> |
|---|---|
| Date | 2018-08-01 02:40 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whNlf-3c2-1@gated-at.bofh.it> |
| In reply to | #198126 |
On 07/31/2018 02:56 PM, Long Wind wrote: > i plan to install debian by network Okay. > i don't like security update, Why not? > how to do it? Thanks! One possibility is to configure your Internet gateway to block traffic between the host and the Internet, and then install from CD-1, DVD-*, BD-*, etc., media. David
[toc] | [prev] | [next] | [standalone]
| From | Roberto C. Sánchez <roberto@debian.org> |
|---|---|
| Date | 2018-08-01 02:50 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whNuV-3fz-1@gated-at.bofh.it> |
| In reply to | #198129 |
On Tue, Jul 31, 2018 at 05:36:41PM -0700, David Christensen wrote: > > One possibility is to configure your Internet gateway to block traffic > between the host and the Internet, and then install from CD-1, DVD-*, BD-*, > etc., media. > An easier approach would be that when the installer asks "Would you like to use a network mirror?" you just answer "no." The installer will then only use the packages available on the install media you supply. Regards, -Roberto -- Roberto C. Sánchez
[toc] | [prev] | [next] | [standalone]
| From | David Christensen <dpchrist@holgerdanske.com> |
|---|---|
| Date | 2018-08-01 03:10 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whNOh-3C1-3@gated-at.bofh.it> |
| In reply to | #198130 |
On 07/31/2018 05:42 PM, Roberto C. Sánchez wrote: > On Tue, Jul 31, 2018 at 05:36:41PM -0700, David Christensen wrote: >> >> One possibility is to configure your Internet gateway to block traffic >> between the host and the Internet, and then install from CD-1, DVD-*, BD-*, >> etc., media. >> > An easier approach would be that when the installer asks "Would you like > to use a network mirror?" you just answer "no." The installer will then > only use the packages available on the install media you supply. The first half of my suggestion implies your suggestion. The original post implies use of netinst media, which does not contain enough packages to install a working Debian system (?). Thus, the second half of my suggestion. David
[toc] | [prev] | [next] | [standalone]
| From | Roberto C. Sánchez <roberto@debian.org> |
|---|---|
| Date | 2018-08-01 03:30 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whO7D-3IB-1@gated-at.bofh.it> |
| In reply to | #198131 |
On Tue, Jul 31, 2018 at 06:05:04PM -0700, David Christensen wrote: > On 07/31/2018 05:42 PM, Roberto C. Sánchez wrote: > > On Tue, Jul 31, 2018 at 05:36:41PM -0700, David Christensen wrote: > > > > > > One possibility is to configure your Internet gateway to block traffic > > > between the host and the Internet, and then install from CD-1, DVD-*, BD-*, > > > etc., media. > > > > > An easier approach would be that when the installer asks "Would you like > > to use a network mirror?" you just answer "no." The installer will then > > only use the packages available on the install media you supply. > > The first half of my suggestion implies your suggestion. > > > The original post implies use of netinst media, which does not contain > enough packages to install a working Debian system (?). Thus, the second > half of my suggestion. > I should have read the entire thread before responding. Thanks for pointing out my oversight. You are correct that a netinst media does not have enough on it for a complete installation. However, that is sort of the point of the netinst media. Of course, another aspect of the way updates work in Debian is that when a point update is made all the security updates (and generally quite a few high priority non-security updates) become part of the stable release with an increased version number. For example in the last few weeks, Debian "Stretch" went from version 9.4 to 9.5. That sort of makes the "I want to install but I don't want security updates" not make any sense. Unless you get the install media for the first release of a new Stable before any point releases are made, you will end up with some security updates as part of your installation. Even then, the new stable release definitely also has security updates that are left over from the prior stable release (not all packages are refreshed from one release to the next). Regards, -Roberto -- Roberto C. Sánchez
[toc] | [prev] | [next] | [standalone]
| From | deloptes <deloptes@gmail.com> |
|---|---|
| Date | 2018-08-01 07:50 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whSbf-6g5-1@gated-at.bofh.it> |
| In reply to | #198129 |
David Christensen wrote: > Why not? I guess because he's in China and internet costs relatively much there.
[toc] | [prev] | [next] | [standalone]
| From | Long Wind <longwind2@yahoo.com> |
|---|---|
| Date | 2018-08-01 10:10 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <whUmJ-7Gx-1@gated-at.bofh.it> |
| In reply to | #198136 |
[Multipart message — attachments visible in raw view] — view raw
You're wrong, it has nothing to with money
internet cost used to be high in China
but that's very long time ago and
many broadband providers base their charge on time (e.g. a few months) not on data transfered
i don't like security update because i suspect it cause problem (some packaged can't be installed) during stretch installation last time
and i've used linux for a long time and i think it's stable even without security update. and installing update always takes time and space, and it offer little value
and since you haven't installed next update, your system is always insecure if you believe in security update
Thanks to all who reply!
On Wednesday, August 1, 2018, 1:44:17 PM GMT+8, deloptes <deloptes@gmail.com> wrote:
David Christensen wrote:
> Why not?
I guess because he's in China and internet costs relatively much there.
[toc] | [prev] | [next] | [standalone]
| From | Matthew Crews <mailinglists@mattcrews.com> |
|---|---|
| Date | 2018-08-01 20:40 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <wi4cq-57o-5@gated-at.bofh.it> |
| In reply to | #198139 |
On 8/1/18 1:00 AM, Long Wind wrote: > i don't like security update because i suspect it cause problem (some > packaged can't be installed) during stretch installation last time > > and i've used linux for a long time and i think it's stable even without > security update. and installing update always takes time and space, and > it offer little value I would beg to differ on the "little value" aspect. If you are still running Debian 9.0 (and not the latest version, 9.5) you are vulnerable to Meltdown, Spectre, various web browser exploits, and a whole host of other issues that are documented here: https://lists.debian.org/debian-security-announce/2017/threads.html https://lists.debian.org/debian-security-announce/2018/threads.html If you suspect a specific package has a problem due to a security update, I would file a bug against that package. But to blindly disregard security updates is irresponsible and dangerous.
[toc] | [prev] | [next] | [standalone]
| From | David Christensen <dpchrist@holgerdanske.com> |
|---|---|
| Date | 2018-08-02 03:50 +0200 |
| Subject | Re: how to prevent security update installation during stretch installation |
| Message-ID | <wiaUx-OQ-5@gated-at.bofh.it> |
| In reply to | #198139 |
On 08/01/2018 01:00 AM, Long Wind wrote: > i don't like security update because i suspect it cause problem (some packaged can't be installed) during stretch installation last time I suggest that you obtain the debian-9.5.0-amd64-xfce-CD-1.iso image (via jigdo), burn it to CD/USB, configure your Internet gateway to block the target host from connecting to the Internet, and install from local media only (e.g. do not select an package mirror during installation): https://www.debian.org/CD/jigdo-cd/ If it works, you're done. If it doesn't, start working backwards through the releases -- e.g. 9.4.0, 9.3.0, 9.2.0, etc.: https://cdimage.debian.org/cdimage/archive/ David
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web