Skip to content

Switch majority of deb repos to verbatim mode #543

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mnasiadka merged 2 commits into from
Jun 23, 2026
Merged

Switch majority of deb repos to verbatim mode #543

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1aece64
Switch majority of deb repos to verbatim mode
mnasiadka Jun 23, 2026
10cf3e7
Merge branch 'main' into grafana_verbatim
mnasiadka Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions ansible/inventory/group_vars/all/deb-package-repos
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,7 @@ deb_package_repos:
policy: immediate
distributions: stable
components: main
mirror: true
mode: verbatim
Comment on lines 228 to 231

@gemini-code-assist gemini-code-assist Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using mode: verbatim while filtering by distributions or components will result in broken repository metadata.

In Pulp (pulp_deb), verbatim publishing copies the upstream metadata files completely unmodified. If you filter the synced content (e.g., restricting to stable and main), the published metadata will still list packages for other distributions or components that were filtered out during sync. When client systems attempt to update or install packages, they will encounter 404 Not Found errors for any of the filtered-out packages.

To resolve this, you should use mode: structured instead. This preserves the repository's suite/component structure while regenerating the metadata to match only the actually synced packages.

    distributions: stable
    components: main
    mirror: true
    mode: structured

base_path: grafana/oss/apt/
short_name: ubuntu_noble_grafana
Expand All @@ -239,6 +240,8 @@ deb_package_repos:
architectures: amd64
distributions: stable
components: main
mirror: true
mode: verbatim
Comment on lines 240 to +244

@gemini-code-assist gemini-code-assist Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using mode: verbatim while filtering by architectures (such as architectures: amd64) will result in broken repository metadata.

In Pulp (pulp_deb), verbatim publishing copies the upstream metadata files completely unmodified. If you filter the synced content (e.g., restricting to amd64), the published metadata will still list packages for other architectures (like arm64) that were filtered out during sync. When client systems attempt to update or install packages, they will encounter 404 Not Found errors for any of the filtered-out packages.

To resolve this, you should use mode: structured instead. This preserves the repository's suite/component structure while regenerating the metadata to match only the actually synced packages.

    architectures: amd64
    distributions: stable
    components: main
    mirror: true
    mode: structured

base_path: opensearch/3.x/apt/
short_name: ubuntu_noble_opensearch
sync_group: third_party
Expand All @@ -250,6 +253,8 @@ deb_package_repos:
architectures: amd64
distributions: stable
components: main
mirror: true
mode: verbatim
Comment on lines 253 to +257

@gemini-code-assist gemini-code-assist Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using mode: verbatim with architectures: amd64 will cause client-side 404 errors for other architectures. Switch to mode: structured to ensure metadata is regenerated correctly for the synced packages.

    architectures: amd64
    distributions: stable
    components: main
    mirror: true
    mode: structured

base_path: opensearch-dashboards/3.x/apt/
short_name: ubuntu_noble_opensearch_dashboards
sync_group: third_party
Expand All @@ -261,6 +266,8 @@ deb_package_repos:
architectures: amd64
distributions: noble
components: main
mirror: true
mode: verbatim
Comment on lines 266 to +270

@gemini-code-assist gemini-code-assist Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using mode: verbatim with architectures: amd64 will result in broken metadata for other architectures listed in the upstream metadata but not synced. Switch to mode: structured to regenerate the metadata correctly for the synced packages.

    architectures: amd64
    distributions: noble
    components: main
    mirror: true
    mode: structured

base_path: ProxySQL/proxysql-3.0.x/noble/
short_name: ubuntu_noble_proxysql
sync_group: third_party
Expand All @@ -269,6 +276,8 @@ deb_package_repos:
- name: Fluentd - Ubuntu Noble
url: https://fluentd.cdn.cncf.io/lts/6/ubuntu/noble
policy: immediate
mirror: true
mode: verbatim
base_path: fluentd/lts/6/ubuntu/noble/
short_name: ubuntu_noble_fluentd
sync_group: third_party
Expand All @@ -279,6 +288,8 @@ deb_package_repos:
distributions: noble
components: main
architectures: amd64
mirror: true
mode: verbatim
Comment on lines 288 to +292

@gemini-code-assist gemini-code-assist Bot Jun 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using mode: verbatim with filters like architectures: amd64 will cause client-side 404 Not Found errors because the unmodified upstream metadata will reference packages (such as arm64 packages) that were filtered out during sync. Use mode: structured to safely regenerate the metadata for the synced architectures while preserving the repository structure.

    distributions: noble
    components: main
    architectures: amd64
    mirror: true
    mode: structured

base_path: mariadb-server/mariadb-11.4/repo/ubuntu/
short_name: ubuntu_noble_mariadb_11_4
sync_group: third_party
Expand Down