apt update stalls on security

slackhack · 05-25-2006, 02:51 PM

lately when i do apt-get update, it stalls at 99% on security.debian.org. does anyone know what's wrong with the repository, or is there another one to use instead?

UPDATE:

when i tried other mirrors, it still hangs.
original mirror:
deb http://security.debian.org/ stable/updates main

second mirror:
deb http://security.debian.org etch/updates main contrib non-free

third mirror:
deb http://secure-testing.debian.net/debian-secure-testing testing/security-updates main contrib non-free

in the time it took to type that, i'm getting this returned from trying the third mirror:

Code:

W: Couldn't stat source package list http://secure-testing.debian.net testing/security-updates/non-free Packages (/var/lib/apt/lists/secure-testing.debian.net_debian-secure-testing_dists_testing_security-updates_non-free_binary-i386_Packages) - stat (2 No such file or directory)
W: You may want to run apt-get update to correct these problems
E: Some index files failed to download, they have been ignored, or old ones used instead.

"you may want to run apt-get update?" that's what i am running.

rickh · 05-26-2006, 02:45 PM

Here's an old thread discussing Etch security, among other things ... Doesn't address your exact problem, but maybe something in there will trigger an epiphany.

Failing that ... maybe post your entire sources.list file.

slackhack · 05-26-2006, 02:57 PM

thanks, but nothing there seems to work. now i'm getting paranoid that i've been compromised, and the hacker altered something to prevent whatever exploit s/he used to get in from getting updated. every security URL i try times out -- it seems to be related to this Release.gpg file:

Code:

root@moe:/etc/apt # apt-get update
Get: 1 http://http.us.debian.org testing Release.gpg [189B]
Hit http://http.us.debian.org testing Release
Hit http://http.us.debian.org testing/main Packages               
Hit http://http.us.debian.org testing/contrib Packages
Hit http://http.us.debian.org testing/non-free Packages            
Errhttp://secure-testing.debian.net testing/security-updates Release.gpg                                                                   
  Could not connect to secure-testing.debian.net:80 (82.195.75.34), connection timed out
Fetched 1B in 2m0s (0B/s)                                   
Failed to fetch http://secure-testing.debian.net/debian-secure-testing/dists/testing/security-updates/Release.gpg  Could not connect to secure-testing.debian.net:80 (82.195.75.34), connection timed out
Reading package lists... Done
E: Some index files failed to download, they have been ignored, or old ones used instead.

[code]

i stripped down my sources.list until i can fix the problem:

Code:

###############
### testing ###
###############

#deb http://mirrors.kernel.org/debian/ testing main
deb http://http.us.debian.org/debian/ testing main contrib non-free


########################
### security updates ###
########################

#deb http://security.debian.org/ stable/updates main
#deb http://security.debian.org etch/updates main contrib non-free
deb http://secure-testing.debian.net/debian-secure-testing testing/security-updates main contrib non-free

craigevil · 05-26-2006, 03:01 PM

Change http://secure-testing.debian.net testing/ to
http://security.debian.org etch/updates main contrib non-free

The Etch security repo changed a while back.
A good Etch sources.list:
# Testing Etch
#deb http://http.us.debian.org/debian/ testing main contrib non-free
# Testing Sources
#deb-src http://http.us.debian.org/debian/ testing main contrib non-free
# Testing Security Updates
# For more info visit: http://secure-testing.debian.net/
#deb http://security.debian.org etch/updates main contrib non-free
#deb-src http://security.debian.org etch/updates main contrib non-free

slackhack · 05-26-2006, 03:10 PM

Quote:

Originally Posted by craigevil

Change http://secure-testing.debian.net testing/ to
http://security.debian.org etch/updates main contrib non-free

yeah, that's the second one i tried after reading through your sticky thread on the sources.list. it's hanging along with the other ones. i don't think it's the sources, i think something's going on that shouldn't be going on. i've started going through some of my logs now, but i'm not seeing anything weird yet. this is a headless server with ftp, http, bittorrent, mysql apps running. maybe someone got in...

rickh · 05-26-2006, 03:31 PM

Quote:

The Etch security repo changed a while back.

I read about that, and put the line in my sources.list, but it doesn't work yet for my AMD64 release. Either one works for the i386 install, tho.

Michael_aust · 05-26-2006, 05:08 PM

does the testing security repository have to point to:

deb http://security.debian.org etch/updates main contrib non-free

or will it still work if I have it in my sources list as;

deb http://security.debian.org testing/updates main contrib non-free

is the etch required or will i still be able to recieve the same security updates if I have it as the second version shown above?

new2penguin · 06-12-2006, 05:08 PM

It doesn't matter. The variable Etch is interchangable with testing just as Sarge is interchangable with stable and Sid is interchangable with unstable.

Hopefully this clears up the confusion.