Devuan bug report logs - #623
chimaera-backports repo being used unprompted- missing pin priority

Full log

Message #5 received at submit@bugs.devuan.org (full text, mbox, reply):

Received: (at submit) by bugs.devuan.org; 23 Oct 2021 23:30:03 +0000
Return-Path: <juu@protonmail.com>
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.0.beta4)
	for <debbugs@localhost> (single-drop); Sat, 23 Oct 2021 23:30:03 +0000 (UTC)
Received: from mail-4318.protonmail.ch (mail-4318.protonmail.ch [185.70.43.18])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 6250AF60CC7
	for <submit@bugs.devuan.org>; Sun, 24 Oct 2021 01:23:00 +0200 (CEST)
Authentication-Results: vm6.ganeti.dyne.org;
	dkim=pass (1024-bit key; secure) header.d=protonmail.com header.i=@protonmail.com header.b="aOeZ285d";
	dkim-atps=neutral
Date: Sat, 23 Oct 2021 23:22:56 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
	s=protonmail; t=1635031378;
	bh=ZKvX/fnm/c7UKWsLH/T9po6wi3lgNlUz4FeYu3oTXJM=;
	h=Date:To:From:Reply-To:Subject:In-Reply-To:References:From;
	b=aOeZ285dqeIq0usV6unBwRjpOIXGjoSXS7lAdiqmrdvT0gVVnSHyIB/XrO1SOp1ZM
	 t5vjIWLL5uZ0prI6FxeeHawGrma2CWuQxRBdHrjBQG6OBCyqXfrmxt441MIT2AX8KS
	 EKy0VEt/WM/p3as5R4CnpWXNRjeioFGX88mMxL3w=
To: "submit@bugs.devuan.org" <submit@bugs.devuan.org>
From: juu <juu@protonmail.com>
Reply-To: juu <juu@protonmail.com>
Subject: Re: chimaera-backports repo being used unprompted- missing pin priority
Message-ID: <83NzMF00IFDqRfqD0u5Zw7yVBnr95I3EXPgVBT1dPRsxwPgIyd6emko8Jnrs3tAPaL_PE4xt8RasfdRi9eq7D2zJ7QuDwgk2Q-jYA0d6vQM=@protonmail.com>
In-Reply-To: <6Zc5ETEJjsV2JjVTTN2cEP045oez8cWlYDehi_zMZ0s-Ehv67ObS8EyBu8APG2pfvVUAcJhxEsA8wBxVUbIffGNkyqVfUsHTPqrEeldi95w=@protonmail.com>
References: <6Zc5ETEJjsV2JjVTTN2cEP045oez8cWlYDehi_zMZ0s-Ehv67ObS8EyBu8APG2pfvVUAcJhxEsA8wBxVUbIffGNkyqVfUsHTPqrEeldi95w=@protonmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="b1_YBVtHNXurzfco5rpdHiq7fSlp3VEBC8G0CFEbeBAw"
X-Spam-Status: No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE,
	RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS,
	T_KAM_HTML_FONT_INVALID autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org

[Message part 1 (text/plain, inline)]

Package: chimaera-backports
Version: 4.0

I'm running Devuan Chimaera and recently discovered that packages were being upgraded from backports without me manually installing it from backports. I thought that these packages were just put into stable until realizing later that they were backported packages. As described here, a user on dev1galaxy forums realized that the Devuan release file does not put a pin priority of 100 on backports like it does in Debian.

The Debian bullseye-backports repository has a[Release file](http://deb.debian.org/debian/dists/bullseye-backports/Release)that contains these lines:

NotAutomatic: yes
ButAutomaticUpgrades: yes

This confers a pin priority of 100 for all packages, which means they will not be installed unless explicitly targetted (either by version or with the--targetoption forapt) but any packages that are installed from backports will be kept updated from there.

But the Devuan chimaera-backports repository[Release file](http://deb.devuan.org/devuan/dists/chimaera-backports/Release)does not have those lines.

For background, here is the thread where this is being discussed, starting at post #15 in the thread.
[https://dev1galaxy.org/viewtopic.php?id=4567](http://dev1galaxy.org/viewtopic.php?id=4567)

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Saturday, October 23rd, 2021 at 6:01 PM, juu <juu@protonmail.com> wrote:

> I'm running Devuan Chimaera and recently discovered that packages were being upgraded from backports without me manually installing it from backports. I thought that these packages were just put into stable until realizing later that they were backported packages. As described here, a user on dev1galaxy forums realized that the Devuan release file does not put a pin priority of 100 on backports like it does in Debian.
>
> The Debian bullseye-backports repository has a[Release file](http://deb.debian.org/debian/dists/bullseye-backports/Release)that contains these lines:
>
> NotAutomatic: yes
> ButAutomaticUpgrades: yes
>
> This confers a pin priority of 100 for all packages, which means they will not be installed unless explicitly targetted (either by version or with the--targetoption forapt) but any packages that are installed from backports will be kept updated from there.
>
> But the Devuan chimaera-backports repository[Release file](http://deb.devuan.org/devuan/dists/chimaera-backports/Release)does not have those lines.
>
> For background, here is the thread where this is being discussed, starting at post #15 in the thread.
> [https://dev1galaxy.org/viewtopic.php?id=4567](http://dev1galaxy.org/viewtopic.php?id=4567)

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.