[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #31130 [Applications/Tor Browser]: Use Debian 10 for our Android container images
#31130: Use Debian 10 for our Android container images
--------------------------------------+--------------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: needs_revision
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-rbm | Actual Points:
Parent ID: #31127 | Points: 0.5
Reviewer: | Sponsor:
--------------------------------------+--------------------------------
Comment (by boklm):
Replying to [comment:21 sisbell]:
> Replying to [comment:20 boklm]:
> > `8u222-b10-1~deb9u1` is the version that was built for stretch. Is
there any reason to use that one rather than `8u222-b10-1` from Unstable?
> I'm going from your comment:2 which said I should be using snapshot,
rather than unstable. This 222 version is the one in snapshot. Should I
switch back to unstable?
I did not say snapshot rather than unstable, which does not make any sense
since snapshot contains packages from all suites, including unstable. The
packages in unstable are changing frequently, so using snapshot.debian.org
allows us to use the packages that were available on a specific date.
If we want to use the package from unstable, the latest version that does
not require a new glibc seems to be `8u222-b10-1`, and we can download it
from snapshot.debian.org:
https://snapshot.debian.org/archive/debian/20190930T145141Z/pool/main/o/openjdk-8/openjdk-8-jdk_8u222-b10-1_amd64.deb
It seems using the package from stretch is an other option. And in this
case we could use the latest version of the package (which is
`8u232-b09-1~deb9u1` currently) as it doesn't require a new glibc:
https://deb.debian.org/debian/pool/main/o/openjdk-8/openjdk-8-jdk_8u232-b09-1~deb9u1_amd64.deb
> >
> > Or if we decide to use the package from stretch, then we might as well
use the latest version of the package (as it shouldn't require a new glibc
version in this case), which is `8u232-b09-1~deb9u1`.
>
> So should we go with stretch from snapshot or the unstable version?
>
The package from stretch might be better since it allows us to use a
version with the latest security fixes. However I don't know if this
package works correctly on buster, so this needs to be tested.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31130#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs