CVMFS packages for Ubuntu 24.04 LTS

Town Square
1

Hi all,

is there a time scale, when packages for Ubuntu 24.04 might come available (I guess, noble-prod and noble-testing…)?

Cheers,
Thomas

2

Hi Thomas,

hmmm, we are building packages for Ubuntu 24.04, both amd64 and arm64 (Index of /dist/cvmfs/cvmfs-2.11.5). Is there an issue with the apt repo?

Cheers,
Valentin

3

Or do you mean when they’ll be in the upstream ubuntu repos?

4

maybe we have a deprecated repo still here?

I.e., we are rolling out so far
https://cvmrepo.web.cern.ch/cvmrepo/apt/

is
https://ecsft.cern.ch/dist/cvmfs/
the base repo for Ubuntu (Debian?) (looks a bit crowded )

5

Hi Thomas,

ah, apologies for the confusion, indeed the apt repo still needed a manual change to include the 24.04 packages.

You should now be able to use them when manually updating /etc/apt/sources.list.d/cernvm.list to:

deb http://cvmrepo.s3.cern.ch/cvmrepo/apt noble-prod main
 # deb http://cvmrepo.s3.cern.ch/cvmrepo/apt noble-testing main

I’ll still need to update the cvmfs-release package, but that can be done soon too.

Note that Index of /cvmrepo/apt is an exact mirror, but we usually use the s3 url in production.

(And yes, indeed, Index of /dist/cvmfs is just the download area for all packages, not the repo)

Cheers,
Valentin

6

Actually hang on - still not quite there, need to sync another time.

7

noble-prod and noble-testing should now be available. I’ll update again once the cvmfs-release package is fixed.

1 Like
8

many thanks - we will update our puppet/hiera and pick the S3 backend :slight_smile:

9

Hi all,
I’m pinning the CVMFS release key in the /etc/apt/sources.list.d/cernvm.list like so:

deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/cernvm.gpg] http://cvmrepo.s3.cern.ch/cvmrepo/apt ${facts['lsbdistcodename']}-prod main

This works, but on 24.04 I get this warning from apt:

W: http://cvmrepo.s3.cern.ch/cvmrepo/apt/dists/noble-prod/Release.gpg: Signature by key 70B9890488208E315ED45208230D389D8AE45CE7 uses weak algorithm (dsa1024)

Is the release key really using that signature? Could it be upgraded to a stronger one?

Cheers,
Tim