mirror of
https://github.com/lrnselfreliance/wrolpi.git
synced 2026-10-26 19:01:39 -04:00
559bfebc56
* Installed Debian systems keep Caddy The Debian installer purges every package listed in the ISO's live/filesystem.packages-remove. live-build lists there every package installed after the package-lists install pass, which includes anything a chroot hook installs with apt -- and the hook installed Caddy that way. An installed system therefore had no Caddy: wrolpi-bootstrap failed copying the Caddyfile, the API/app/Kiwix were never enabled, and HTTPS never came up. Caddy now comes from package-lists/, with its repository and signing key in config/archives/ (installed into both the build chroot and the image). check-iso.sh fails the build when the installer would remove any package, and can be run by hand against any ISO. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Debian ISOs install Caddy from Caddy's repository Moving caddy into package-lists/ made apt read config/archives/ before ca-certificates was installed, so the HTTPS fetch of Caddy's repository failed certificate verification. apt ignores a failed repository, and the image silently got Debian's much older caddy 2.6.2 instead of 2.11. ca-certificates is now part of the bootstrap, and Debian's caddy is pinned to -1, so an unreachable Caddy repository fails the build and installed systems never switch to Debian's caddy. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
301 B
Text
7 lines
301 B
Text
# Only ever install Caddy from Caddy's repository (caddy-stable.list). Debian
|
|
# ships a much older caddy; if Caddy's repository is unreachable, the build
|
|
# fails instead of silently falling back to it, and installed systems never
|
|
# switch to it.
|
|
Package: caddy
|
|
Pin: release o=Debian
|
|
Pin-Priority: -1
|