PHP 5.3.2

On March 4th, PHP 5.3.2 was released by the PHP development team and on March 13th, it was uploaded to Unstable. Today, this version (5.3.2-1) was backported to Lenny and uploaded to lenny-custom.

As usual, both amd64 and i386 are available.

Apache updated

The backport of Apache 2.2 was updated to 2.2.15-2 from Testing. In Testing/Unstable, this package (apache2.2-bin, to be precise)  has a dependency on libssl >= 0.9.8m, because of some fixes concerning secure session renegotiation in mod_ssl. However, this version was built against Lenny’s 0.9.8g.

For more information on secure session renegotiation in OpenSSL, see  its documentation.

Packages are available for i386 and am64, as usual.

Libapache2-mod-h264-streaming

Last Sunday (Feb. 21st), libapache2-mod-h264-streaming was updated to version 2.2.7 (~tzz1~bp50), which was released in January. I haven’t been tracking the development of the module very closely recently, mostly because the upstream news page doesn’t give much indication that there is any development going on at all. That was a mistake, or so it seems.

Libapache2-mod-h264-streaming was the very first package to get a posting on this blog (July 7th, 2009), from when the software was not officially released yet. This is the first update since. As usual, packages are available for i386 and amd64, both in lenny-custom.

Etch repositories removed

As already announced in this post, the repositories for Etch have been removed, now that security support for Etch has ended. If you haven’t upgraded to Lenny yet, now is definately the time to do so…

PHP 5.3.1 again

Shortly after uploading PHP 5.3.1 to lenny-custom, a bug appeared in the Debian BTS, concerning the several SQLite extensions. I went ahead and fixed this bug (in my own way; the Debian maintainers may choose a different path!) and prepared new packages.  The situation regarding SQLite is now as follows:

  • There are three different extensions for SQLite: sqlite, sqlite3 and pdo_sqlite
  • sqlite is the ‘old’ sqlite extension, which works with SQLite 2
  • sqlite3 and pdo_sqlite are newer extensions, designed to work with SQLite 3, the current stable branch
  • All of these extensions are packaged in the php5-sqlite package
  • php5-sqlite 5.3.1-3~tzz50+3 depends on libsqlite0 (>= 2.8.17) and libsqlite3-0 (>= 3.6.21)

Please note the emphasis on the version of libsqlite3-0. This dependency cannot be fulfilled in clean Lenny, but SQLite 3.6.21 (or higher) is available from Backports.org. Other packages are needed from Bpo as well:

  • libpq5 (>= 8.4~0cvs20090328)
  • libmysqlclient16 (>= 5.1.36)

This site is now running on this very version of PHP, so if you notice any weirdness, don’t hesitate to leave a comment ;-)

UPDATE OF FEBRUARY 12th

The Debian PHP maintainers did another upload yesterday, containing a fix for the SQLite problem (exactly the same fix as I did, so that’s nice ;-) ). However, this upload also contains fixes for some other problems, that made it seem like another backport was justified. Hence, the version of PHP in lenny-custom is now 5.3.1-4~tzz50.

New repository layout, new GPG key

In the quest for more quality, functionality and ease of administration, the Lenny repositories have been converted to new repositories, that are managed by reprepro. Fortunately, the impact for you as a user is small. The URLs to the repositories have changed (a path component /debian was added), so please update your sources.list to make use of the following URLs:

deb http://debian.dev-zero.nl/debian lenny-backports main
deb http://debian.dev-zero.nl/debian lenny-custom main
deb http://debian.dev-zero.nl/debian lenny-experimental main

deb-src http://debian.dev-zero.nl/debian lenny-backports main
deb-src http://debian.dev-zero.nl/debian lenny-custom main
deb-src http://debian.dev-zero.nl/debian lenny-experimental main

However, the old URLs still work, and will be rewritten on the server to the new, correct location.

Reprepro also makes it easy to automatically sign the Release files. Because of that, a new GPG key has been created,which will be used to sign the repository from now on. If you run aptitude update on your DevZero-enabled servers now, you will see Aptitude complain about the keys:

W: GPG error: http://debian.dev-zero.nl lenny-backports Release: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY 6C28A78FCE3CD5E4

To update the key, upgrade the debian-devzero-keyring package to version 2010.02.09. Aptitude will tell you that you are trying to install an untrusted package and ask you if you are certain about that. Of course you are ;-)

There are two alternative ways to install the new key into Apt’s keyring. The first one is:

gpg –keyserver hkp://pgp.mit.edu –recv-keys CE3CD5E4
gpg –export CE3CD5E4 | sudo apt-key add -

And the second one is:

wget -q -O – http://debian.dev-zero.nl/devzero.asc | sudo apt-key add -

Some removals, Etch repositories

Today, the following packages were removed from the archive:

  • Exim 4.71, from lenny-experimental. It is now available on Backports.org.
  • Libapache-mod-security 2.5.9, from lenny-backports. It was outdated, and version 2.5.11 is available on Bpo.
  • PHP 5.3.0-3 (i386) and 5.3.1-1 (amd64), from lenny-experimental. The latest version, 5.3.1-3, is now available in lenny-custom.

Update 23:06h:

  • Sqlite3 3.6.18, from lenny-backports. It was outdated, version 3.6.21 is available on Bpo.

Furthermore, The Debian Security Team decided that security support for Debian Etch will end on February 15th. Since this means that no-one should run Etch anymore, the repositories on debian.dev-zero.nl (etch-backports and etch-custom) have lost their value (if they had any left, since the packages haven’t been updated for ages…) and will be deleted.

The Debian Security Team

PHP 5.3.1

PHP 5.3 has been living in lenny-experimental for a while, but yesterday, PHP 5.3.1-3 got uploaded to Debian Unstable. Time for a new backport to Lenny.

As of now, PHP 5.3.1-3, is available on lenny-custom, and php5-suhosin 0.9.29-1 (also backported from unstable) is available on lenny-backports.  All packages are available for i386 and amd64, as usual.

For completeness, please find the changelog entry for my version of PHP below:

php5 (5.3.1-3~tzz50+1) experimental; urgency=low

* Packaged for Lenny
* Added a patch to allow the 5th argument of mail() in safe mode
(001-safe_mode_mail_arg5_ok.patch)
* Fixed 033-we_WANT_libtool.patch; –install is not a supported
argument in Lenny’s libtool
* Lower build-dep on automake from 1.11 to
automake (>= 1.10) | automake1.10

– Martijn Grendelman <m@rtijn.net>  Mon, 08 Feb 2010 23:13:24 +0100

Sysinventory 0.1.19

Sysinventory is a little piece of software of my own hand, that reports system inventory information. This includes hardware specs, like type and speed of CPU, amount of memory, etc. and also software data, like kernel version, installed version of certain software packages, etc. It is written as a collection of Zsh shell snippets (called modules). It can be compared best to Facter, which does roughly the same in essence, but is written in Ruby. I did’t know of Facter’s existence when I started Sysinventory, otherwise I might just have used that and extended it where necessary, but in the mean time, Sysinventory got a life of its own.

The first version dates from July 24th, 2008 and since then, quite some updates have been made. There is no information availabe online other than this posting, but there ain’t much to it. Just install  and run it. It will report any information it finds on standard out.

Since version 0.1.19, Sysinventory has a configuration directory. There is one module, named package-generic, that uses it. It reports on whether a certain package is installed and if yes, which version. It was written to replace a number of modules, that did exactly the same thing, but for one particular packge only. The module tries to read a list of packages it should report on from a configuration file (/etc/sysinventory/package-generic). If the configuration file does not exist, the module doesn’t do anything. Empy lines in the configuration file are ignored.

Sysinventory is available in lenny-custom. Since it is a shell script, it runs on all architectures.

Updates and additions

Today, the following packages were added/updated:

  • phpmyadmin: updated to version 3.2.3-4 from unstable
  • libjs-mootools: version 1.2.4-1 from unstable added, as this is a new dependency for phpmyadmin
  • libclamunrar6: updated to version 0.95.3-1 from unstable

Architectures as usual: i386 and amd64 (not to mention ‘all‘ for some packages).