Debian Package Management - APT, *.deb, and Friends

[DevynCJohnson]

Many Linux distros are Debian-based. This group of Linux systems use the Debian installation packages (*.deb files). It helps to understand how to manage applications on such systems. Knowing the apt and dpkg software can greatly help system administrators and well as the average desktop user.


Advanced Packaging Tool (APT)

Apt is equivalent to Yum on RedHat-based systems; apt is to Debian as yum is to RedHat. Apt is commonly used to download software from repositories. Repositories are special servers that store installation packages for operating systems. For example, the command "apt-get install firefox" will download Firefox from a repository and install the software. Firefox can then be removed in one of two ways

Keep configuration files - apt-get remove firefox
Remove everything - apt-get purge firefox

NOTE: To manage software, Root privileges must be used.

The update command used by Apt refreshes the package index by downloading new index files (apt-get update). Apt is also used to download and apply updates to the local software - "apt-get upgrade". To apply updates that require other packages in the newer version, use "apt-get dist-upgrade".

When packages are being downloaded, they are stored in /var/cache/apt/archives/. Then, after all of the desired packages are in that directory, the installation process can begin one package at a time. Apt cannot install multiple packages at the exact same moment meaning that one is installed at a time. After the installation process, the *.deb files still remain in /var/cache/apt/archives/. To remove the cached Deb files that can no longer be installed on the system, execute "apt-get autoclean". To clear the cache, execute "apt-get clean".

Pinning is the act of specifying that a particular version of software be installed rather than the mainstream/newest version. This can also refer to specifying a piece of software from a non-default repository (repo). For example, an user may pin Firefox v21 to be the installed version even though Firefox v27 may be released. Or, the user may specify that only Firefox packages from repository "X" can be used. Pinning (also called apt-pinning) can easily be done in the GUI frontends (each frontend has different steps for performing a pin). Without a frontend, pinning is specified in this file - /etc/apt/preferences.

If a user wanted to compile a program, but needed all of the dependencies for building the application, then use "apt-get build-dep PROGRAM_PACKAGE_NAME" which will install the build dependencies. This will only work if the specified package is in the repositories.

One feature that makes Apt wonderful is that it can manage and find dependencies. This prevents the user from needing to manually find and install each and every dependency. The command "apt-get check" will see if any broken-dependencies exist on your system. A broken-dependency is the same as an unmet dependency, both of which mean a dependency is missing or there is a conflict among dependencies. If one occurs, there are a few ways to resolve the problem. One method is to use the command "apt-get -f install". Another way is to install the dependencies manually before installing the main software. If the issue results when many packages are being installed at once, then install a few packages at a time.

Sometimes, users may wish to configure an application an alternative way or hope to fix odd application behavior by reconfiguring the package. This is done using the "dpkg-reconfigure PACKAGE" command. To re-install a package, use this command - sudo apt-get --reinstall install PACKAGE

If users wish to clean the operating system, the libraries and other software that is no longer needed can be removed via "sudo apt-get autoremove". For illustration, assume many applications are installed along with their dependencies. Later, many of these applications are removed, but the dependencies are left on the system. No application is using this software, so these files are only wasting disk space. Removing the unneeded dependencies will free disk space and it may make the system perform better.

Various frontends exist for Apt. A frontend is software that provides an interface or an alternate platform for using a particular piece of software. Synaptic, Ubuntu Software Center, and Aptitude are some examples of popular Apt frontends.


APTonCD

APTonCD is a program that makes an ISO file containing all of the DEB files in the cache directory. This is useful when installing many applications after a fresh Linux install. Then, the user can have a copy of the installed software on a disk (if the ISO is burnt to a disk). This allows the user to install the same software off of the disk onto other Debian systems.


dpkg

Dpkg is equivalent to rpm (the command, not the file) on RedHat-based systems. To install a local Deb file, type "dpkg -i FILENAME" and to remove a package, type "dpkg -r PACKAGE".

To view the contents of a Deb file, use the "dpkg -c FILENAME" command. The output will look similar to executing "ls -l".

A Deb file can be extracted like this - dpkg -x FILE TARGET_DIR - However, this will only extract the files. For the control file, hash sum, and other metadata, try this command - dpkg -e FILE TARGET_DIR. Yes, this is the same, but with an "e" as the parameter.


wpkg

Debian-based Linux distros are not the only ones that use DEB files. wpkg is a program that allows Deb files to be installed on Windows. With wpkg, Debian files can be used on a Windows system just like on a Debian system. (http://windowspackager.org/documentation/wpkg)

NOTE: If anyone has tried this, please let us know. I do not believe that Debian software would work on Windows systems, but please feel free to prove me wrong. Do not be afraid; I will like it a lot. I mention this software in this article to inform readers of its existence.


Deb files (*.deb)

The Debian software package format is based off of the ar-archive format. The current Debian-file format version is 2.0. The Debian file contains two tar files, one containing the application and the other containing the control information (program info, description, install size, dependencies, etc.). The Deb file may use one of four compression formats - Bzip2, gzip, lzma, and XZ. However, compression is optional.

To see the actual tar files (the two mentioned above), use this command - ar -x FILE.deb - This command will also pull out a plain-text file stating the version of the Debian format. Users will see that each tar may be compressed. In addition, the tars may each use a different compression format.


Repositories (Repos)

As mentioned previously, repositories are a collection of installation packages. There are different types of repositories that offer different packages.

Stable - The current/mainstream software is found here.

Proposed - This repo contains updates that are being tested. BEWARE: the software may cause system conflicts and contain bugs.

Backports - Newer software.

Testing - Candidates for release are stored here. This software needs some more testing before being deemed stable. BEWARE: the software may cause system conflicts and contain bugs.

Unstable - Packages with known bugs are stored here. Obviously, this is dangerous software that should only be used by developers on dedicated computers. BEWARE: the software may cause system conflicts and contain bugs.

Oldstable - This software is stable. This repo is perfect for old systems where security is not a concern.

Snapshot - These repos contain old versions of software. Users needing some very old software will find this repo useful.

Experimental - The software here is highly experimental and in the early stages of development.

Non-free - Proprietary packages or software that does not pass the Debian Free Software Guidelines (DFSG) belong here.

Contrib - If a piece of software passes the DFSG, but depends on a package from "Non-free", then such a package goes here.

Within repos are further divisions called ports. For example, free stable software for SPARC processors would come from the SPARC port in "Stable". There are stable ports, unstable ports, and unofficial ports. “Stable” ports contain packages for well supported processors (i386, AMD64, MIPS, etc.). “Unstable” ports are still being developed (hurd-i386). “Unofficial” ports are unsupported except by small third-parties (ppc64, alpha, sh4, etc.).

The file that stores a list of the repositories used by the system is /etc/apt/sources.list. Lines that are commented are either comments or disabled repos. Here is a partial file -

# deb cdrom:[Ubuntu 13.10 _Saucy Salamander_ - Release amd64 (20131016.1)]/ saucy main restricted

# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://us.archive.ubuntu.com/ubuntu/ saucy main restricted
deb-src http://us.archive.ubuntu.com/ubuntu/ saucy main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb http://us.archive.ubuntu.com/ubuntu/ saucy-updates main restricted
deb-src http://us.archive.ubuntu.com/ubuntu/ saucy-updates main restricted

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb http://us.archive.ubuntu.com/ubuntu/ saucy universe
deb-src http://us.archive.ubuntu.com/ubuntu/ saucy universe
deb http://us.archive.ubuntu.com/ubuntu/ saucy-updates universe
deb-src http://us.archive.ubuntu.com/ubuntu/ saucy-updates universe

Now, Debian-based systems should be easier to understand and manage. For those of you that want to develop or contribute software to the Debian community may find the organization of the repos helpful.

 

[labrat]

"sudo apt-get install firefox" will download Firefox from a repository and install the software. Firefox can then be removed in one of two ways

Keep configuration files - sudo apt-get remove firefox
Remove everything - sudo apt-get purge firefox

NOTE: If you are logged in as Root, then the “sudo” command is not needed in any of these examples. If you are not Root, then be aware that your system may use a different command than "sudo" such as "su" or something else.

It would be better to omit sudo altogether and use code tags for your commands - would make the article more readable. You could cover the methods for gaining root privileges in a short sentence covering su and sudo.

Apt is also used to update the local software - "sudo apt-get upgrade". The update command used by Apt refreshes the package index (sudo apt-get update). The package index is /etc/apt/sources.list. This file stores a list of available packages and their location (repository). Apt can also upgrade the OS. For example, to upgrade from one version of Debian (or Debian-based system) to the next, use this command - "sudo apt-get dist-upgrade".

It would flow better to start with update and move to upgrade and dist-upgrade. Also your explanations of the latter two options is a little glossed over. I would suggest reading the man pages for apt-get to understand the difference.

The sources file is also not the index file, just a list of repositories (servers).

Index files are downloaded from the repository mirror when you issue:

# apt-get update

wiki debian org / SourcesList

To remove the cached Deb files that are no longer installed on the system, execute "apt-get autoclean". To clear the cache, execute "apt-get clean".

This is incorrect - "apt-get autoclean" removes obsolete packages/versions (packages which can no longer be downloaded) from the cache.

Pinning is the act of specifying that a particular [etc]

Without any expansion on this or practical examples of apt pinning, this section is just acting as padding.

Sometimes, administrators may wish to configure an application an alternative way or hope to fix odd application behavior by reconfiguring the package. This is done using the "dpkg-reconfigure PACKAGE" command. To re-install a package, use this command - sudo apt-get --reinstall install PACKAGE

You should refrain from alluding to "administrators" - the user is more often than not the "administrator" and anyone reading this article is likely to be a user who wants to learn more about package management. dpkg-reconfigure belongs under the dpkg section as a subsection.

If admins wish to clean the operating system, the libraries and other software that is no longer needed can be removed via "sudo apt-get autoremove". For illustration, assume many applications are installed along with their dependencies. Later, many of these applications are removed, but the dependencies are left on the system. No application is using this software, so these files are only wasting disk space. Removing the unneeded dependencies will free disk space and it may make the system perform better.

Misleading and over simplified. You would do better to focus on what it does, rather than supposed, unproven advantages. autoremove simply gets rid of orphaned dependencies, if you add --purge it will also get rid of configuration. (aptitude does an autoremove along with removal of a package anyway.)

Various frontends exist for Apt. A frontend is software that provides an interface or a better platform for using a particular piece of software. Synaptic, Ubuntu Software Center, and Aptitude are some examples of popular Apt frontends.

Also misleading "better" is subjective. None of those provide a "better platform", just a different approach or UI. Bog standard CLI driven apt, is the most powerful and versatile.

wpkg

wpkg is a program that allows Deb files to be installed on Windows. With wpkg, Debian files can be used on a Windows system just like on a Debian system.

NOTE: If anyone has tried this, please let us know. I do not believe that Debian software would work on Windows systems, but please feel free to prove me wrong. Do not be afraid; I will like it a lot. I mention this software in this article to inform readers of its existence.

This has nothing to do with Debian or apt, I would suggest removing it.

Repositories (Repos)

As mentioned previously, repositories are servers containing installation packages, or they may be a collection of packages (backport repos). There are different types of repositories that offer different packages or different versions of packages.

View attachment 870

Stable - The current/mainstream software is found here.

Proposed - This repo contains updates/software that may be added to "Stable" at some point in time. BEWARE: the software may cause system conflicts and contain bugs.

Backports - This repo is like "Proposed", but the software is newer. After the software is proven to be stable, the packages are moved to "Proposed". BEWARE: the software may cause system conflicts and contain bugs.

Testing - Packages for the next release of the distro that you are using are stored here. BEWARE: the software may cause system conflicts and contain bugs.

Unstable - Developing software is stored here. Obviously, this is dangerous software that should only be used by developers on dedicated computers. BEWARE: the software may cause system conflicts and contain bugs.

Oldstable - The packages that were previously in "Stable" (within a year) are now here. This software is stable, although it may lack the newest security updates. This repo is perfect for old systems where security is not a concern.

Snapshot - These repos contain old versions of software. When "Oldstable" gains software from "Stable", "Snapshot" gets the packages formerly in "Oldstable", in addition to the packages already in Snapshot. Users needing some very old software will find this repo useful.

NOTE: Oldstable and Snapshot are soon to be discontinued.

I have no idea where this info is from, but your definitions are way off... and you've mixed terms and confused repositories with branches or distributions.

In particular backports is not at all what you say it is. In fact you have missed the entire definition of a backport and don't seem to know what a backport actually is. I would suggest reading the Debian wiki on backports.

Some in depth reading and not to mention hands on experience, is needed before writing a section like that.

Now, Debian-based systems should be easier to understand and manage. For those of you that want to develop or contribute software to the Debian community may find the organization of the repos helpful.

It's not enough to just put together articles and post them online as flawed and full of glaring omissions and as error strewn as this one is. While you continue to put out articles of this quality, you will not be taken seriously.

I would suggest reading and actually learning how to use a Debian system first, before writing articles about it.

 

[DevynCJohnson]

It would be better to omit sudo altogether and use code tags for your commands - would make the article more readable. You could cover the methods for gaining root privileges in a short sentence covering su and sudo.


It would flow better to start with update and move to upgrade and dist-upgrade. Also your explanations of the latter two options is a little glossed over. I would suggest reading the man pages for apt-get to understand the difference.

The sources file is also not the index file, just a list of repositories (servers).

Index files are downloaded from the repository mirror when you issue:

# apt-get update

wiki debian org / SourcesList


This is incorrect - "apt-get autoclean" removes obsolete packages/versions (packages which can no longer be downloaded) from the cache.


Without any expansion on this or practical examples of apt pinning, this section is just acting as padding.


You should refrain from alluding to "administrators" - the user is more often than not the "administrator" and anyone reading this article is likely to be a user who wants to learn more about package management. dpkg-reconfigure belongs under the dpkg section as a subsection.


Misleading and over simplified. You would do better to focus on what it does, rather than supposed, unproven advantages. autoremove simply gets rid of orphaned dependencies, if you add --purge it will also get rid of configuration. (aptitude does an autoremove along with removal of a package anyway.)


Also misleading "better" is subjective. None of those provide a "better platform", just a different approach or UI. Bog standard CLI driven apt, is the most powerful and versatile.


This has nothing to do with Debian or apt, I would suggest removing it.



I have no idea where this info is from, but your definitions are way off... and you've mixed terms and confused repositories with branches or distributions.

In particular backports is not at all what you say it is. In fact you have missed the entire definition of a backport and don't seem to know what a backport actually is. I would suggest reading the Debian wiki on backports.

Some in depth reading and not to mention hands on experience, is needed before writing a section like that.


It's not enough to just put together articles and post them online as flawed and full of glaring omissions and as error strewn as this one is. While you continue to put out articles of this quality, you will not be taken seriously.

I would suggest reading and actually learning how to use a Debian system first, before writing articles about it.

Thank you for the critic. I will fix this soon. Thanks!

 

[labrat]

I don't think you understand... you need to pull this down and start from scratch. If you want to redo this and need advice, PM me and I'll help you out.

 

[Cyber-Berserker]

I finally got around to reading this article.
1) I agree with all of labrat's criticisms, especially

wpkg

Debian-based Linux distros are not the only ones that use DEB files. wpkg is a program that allows Deb files to be installed on Windows. With wpkg, Debian files can be used on a Windows system just like on a Debian system. (http://windowspackager.org/documentation/wpkg)

NOTE: If anyone has tried this, please let us know. I do not believe that Debian software would work on Windows systems, but please feel free to prove me wrong. Do not be afraid; I will like it a lot. I mention this software in this article to inform readers of its existence.

This has nothing to do with Debian or apt, I would suggest removing it.

and concerning repositories.

I have no idea where this info is from, but your definitions are way off... and you've mixed terms and confused repositories with branches or distributions.

Proposed
How many distros have such repositories?

Backports - This repo is like "Proposed", but the software comes from the testing repo and possibly tweaked for the intended distro.

What? This left me shaking my head.

Unstable - Developing software is stored here. Obviously, this is dangerous software that should only be used by developers on dedicated computers.

Again, what? Something for developers to use? Are you aware of Sid (Debian Unstable)?

Snapshot - These repos contain old versions of software. When "Oldstable" gains software from "Stable"

Old Stable gains software? The only thing Old Stable will gain is the occasional security update. Unless there is a strange distro or two that add software to their Old Stables.

Just like putting sudo in front of shell commands gives the wrong impression to newcomers that all Linux systems use Ubuntu's retarded procedure of sudo abuse, this section likewise gives the erroneous impression that all distros have the same repository structure and use the same nomenclature. After replacing the misinformation with facts, the repo section needs to be re-organised.

2) You should also stop doing this:
Dpkg is equivalent to rpm (the command, not the file) on RedHat-based systems; dpkg is to Debian as rpm is to RedHat.

Apt is equivalent to Yum on RedHat-based systems; apt is to Debian as yum is to RedHat.

Why the repetition?

3) Apt cannot install multiple packages at the same moment.
Misleading.

apt-get install openbox obmenu tint2

All three packages will be installed. Not simultaneously, but in succession in one procedure.

 

[labrat]

This was the PM I sent to Devyn 04/03/14:

I recommend:

a) Actually installing and using Debian for about six months
b) Reading the existing wiki pages on the Debian wiki while doing so
c) Register at and participate at the main Debian forums - debianuserforums org and forms debian net
d) Run the stable release for about 1 month, then upgrade to testing and run that for a few months and then learn how to run a mixed testing unstable system. You could finally finish of running a pure unstable system and learn how to maintain it and avoid buggy packages. Your final destination could be the stable release with backports and learning how to build your own backports This will equip you to fully understand debian package management and the differences between releases. This in turn will enable you to write the article(s) you're trying to write.

No response... and seemingly no interest in correcting the errors.

Though I know he means well, these types of ill researched articles will not only damage his reputation but also the reputation of this site.

 

[labrat]

Backports - Unsupported developmental software.

No - still wrong. Not even close in fact...

My suggestion? Just delete this article and start again - but before that actually use a Debian system...

Or to put it another way - who the fsck writes big articles about software, a distribution or OS they've clearly little to no experience of...?

 

[Cyber-Berserker]

I agree that the article needs to be re-written, preferably by someone with more in-depth knowledge, but one point in Devyn's defence is that the article is not just about Debian, but Debian-based systems. This creates a problem for the author, whoever that is, because the material covered by the article is very broad in scope. It includes systems from Debian to Ubuntu to Scientific Linux (I believe). That makes extensive knowledge/research necessary. I good idea would be to replace the article with a few shorter ones. One focusing on APT, including differences in usage between distros; another focusing on repositories, both in general and comparing between distros; etc. And the articles do not need to be all written by the same person. I suggest delegating the composition of the articles to people according to their expertise. For example, an article concerning repositories could be written by someone with experience using several distros. (Debian, Ubuntu, Mint, etc. Using several Buntus is not sufficient experience. The author would need to be familiar with a wide range of systems.)

Only advice. Take it or leave it.

 

[Cyber-Berserker]

Some examples of how the repository section could be cleaned up:

Stable - Packages thoroughly tested and available for the current release.

Backports -(Debian's definition copied from the backports web page.)

Backports are packages taken from the next Debian release (called "testing"), adjusted and recompiled for usage on Debian stable. Because the package is also present in the next Debian release, you can easily upgrade your stable+backports system once the next Debian release comes out. (In a few cases, usually for security updates, backports are also created from the Debian unstable distribution.)

Backports cannot be tested as extensively as Debian stable, and backports are provided on an as-is basis, with risk of incompatibilities with other components in Debian stable. Use with care!

It is therefore recommended to only select single backported packages that fit your needs, and not use all available backports.

For the purposes of this kind of article, it could be summed up as follows:
Backports are packages taken from the next (future) stable release (often called testing), adjusted and recompiled for usage on the stable release. Because the packages will be present in the next release, they can be easily upgraded when the next Stable release comes out.

Backports cannot be tested as extensively as the packages in Stable, and are provided on an as-is basis, with risk of incompatibilities with other components in Stable. Use with care!

Unstable - Where active development of the distribution occurs. Generally, this sytem is run by developers and those who like to live on the edge. Packages with known bugs can be stored here. Obviously, this is dangerous software for those who are not knowledgeable about the system, and therefore, should only be used by those who know what they are doing.

Oldstable - The previous release. Still receives security updates, but does not receive software updates.

Non-free -(Copied from the Debian Policy Manual. Could be shortened for continuity with the rest of the article.)
The non-free archive area contains supplemental packages intended to work with the Debian distribution that do not comply with the DFSG or have other problems that make their distribution problematic. They may not comply with all of the policy requirements in this manual due to restrictions on modifications or other limitations.

Packages must be placed in non-free if they are not compliant with the DFSG or are encumbered by patents or other legal issues that make their distribution problematic.

In addition, the packages in non-free

• must not be so buggy that we refuse to support them, and
• must meet all policy requirements presented in this manual that it is possible for them to meet.

Contrib - The contrib archive area contains supplemental packages intended to work with the Debian distribution, but which require software outside of the distribution to either build or function. (Copied from the Debian Policy Manual.)

 

[labrat]

but one point in Devyn's defence is that the article is not just about Debian, but Debian-based systems.

Irrelevant.

Debian package management is the same thing irrespective of distribution - apt/dpkg, .deb files, sources.list, etc. It simply takes a little research to find out what each repo does. Also he made no mention of the 'buntu sources - so it's hardly a "Debian-based systems" article.

In a Debian system there are repositories, every repository is typically split into three sub repositories:

main

- Fully DFSG compliant software (open source and source included)

contrib

- Free and open source software which requires or installs non-free software

non-free

- Non DFSG compliant software - e.g. proprietary drivers, flash, etc.

As of writing the current repositories are:

wheezy (stable)

- The stable distribution - packages here very rarely get version updates, instead bug fixes are backported from later versions.

- Supported for roughly two years as stable and about one more year once it becomes oldstable (Debian does not use time based releases, so this is just a rough guide).

- Stable means - "less prone to change". If that's still not clear enough - a stable system does not get a constant stream of updates, so the core system remains the same - this makes it suitable for production servers/workstations.

wheezy/updates

- Security updates - important patches for vulnerabilities, etc.

https://www.debian.org/security/faq

wheezy-updates

- Once known as the "volatile" repository - this repository contains updates such as AV databases, tzdata, etc.

wheezy-proposed-updates

- The best description is here: https://wiki.debian.org/StableProposedUpdates

- Or for the lazy - this is means to get the Debian point releases earlier.

- This can be considered optional.

wheezy-backports

- Packages which have been backported from the testing branch.

- backports is not a complete distribution nor should anyone try to install all packages from backports.

- More info: http://backports.debian.org/

jessie (testing)

- Auto-generated distribution made up of software which migrates from unstable after passing certain criteria (release critical bugs - Debian wiki has more info).

- Many users run testing as a means to get newer software than the stable release. There is a myth that testing is "stable" and never breaks and you will read about users who have been running it for 10 years with zero problems. These users usually arrive to tell you this life story once testing has broken...

- Packages can just disappear from testing due to bugs - i.e. testing depends on unstable so if a package can't get through unstable for whatever reason, it will disappear from testing if dependencies cannot be satisfied there.

jessie/updates

- Security updates - not as important for testing as it is for stable.

jessie-updates
jessie-proposed-updates
jessie-backports

- See wheezy/stable - usually only become active once testing freezes and goes stable.

unstable (sid)

- This is the first stage for any new version entering the Debian repositories - packages from incoming arrive here after being accepted.

-Unstable is a complete distribution, so it's possible for more experienced users - or those who are prepared to take the risks - to run a system which is sourced entirely from this repository.

- It's recommended to run apt-listbugs and apt-listchanges and check thoroughly before saying yes...

experimental

- Highly experimental software, e.g. gnome-shell (v3.x) spent a lot of time in here when it was first introduced. If anything is to be installed from here it should only be installed in a testing or unstable system.

- Not a complete distribution - i.e. you can't run an experimental system

- Most packages bypass this and go straight to unstable

testing/unstable/(experimental)

- These three repositories can be mixed, if you know what you're doing - discussing this is beyond the scope of this forum post. The stable distribution cannot be mixes with any of this unless you actually want a broken system.

- If something breaks in unstable (it happens), it's often necessary to downgrade to the version in testing and then pin or hold to that version - again beyond the scope...

squeeze - (oldstable)

- The previous release - still supported with security updates for roughly one year after the stable release.

squeeze-updates
squeeze-proposed-updates

- See wheezy

snapshot.debian.org

- Not a distribution but snapshots of repositories from given dates. Useful to users who need to revert back to a particular version at a particular point in time to overcome a bug (useful when the buggy package has made it through unstable into testing).

http://snapshot.debian.org/

The Debian Archive

- Once oldstable support ends, the old unsupported distribution will be shipped off to the archive along with, sarge, etch, lenny, et al....

- Unsupported distributions can contain security vulnerabilities.

wiki: http://www.debian.org/distrib/archive
howto/more info: http://archive.debian.net/

 

[DevynCJohnson]

@Cyber-Berserker and @labrat Thanks!

 

[DevynCJohnson]

More fixes have been applied to this article. Enjoy!

 

[ChristiW]

Great thread. Just wondering, since this is about package management, maybe include a section on what the difference is between "main", "multiverse" and "universe"? I am using the synaptic package manager and don't really understand the difference.

For example, earlier today I was reading the thread about text editors and it came to the section on "joe". I typed in the command line "joe try_joe", but joe didn't come installed in my distro (Mint 17.1 KDE). I am still very new and use the package manager, so I went to install "joe". It gave me a warning that the package could contain malicious code, etc. So I didn't install from there. In the package manger "joe" is listed in "universe", is that the reason for the warning?

I did eventually use the sudo apt-get install joe (figured that since you guys are doing tutorials on the product I didn't need to be worried) and no warning came up and it installed perfectly. Being new, I want to make sure that I don't download and install malicious software and I am confused that the synaptic package manager gave me a warning, yet apt-get did not.

Can you clarify?
Thanks!

ETA: I found the information here: http://www.linux.org/threads/debian-package-managers.4456/

I am still confused as to why I received that warning. My only thought is that is is not supported by my distro?

 

[DevynCJohnson]

Difference is between "main", "multiverse" and "universe"?

It gave me a warning that the package could contain malicious code, etc. So I didn't install from there. In the package manger "joe" is listed in "universe", is that the reason for the warning?

I did eventually use the sudo apt-get install joe (figured that since you guys are doing tutorials on the product I didn't need to be worried) and no warning came up and it installed perfectly. Being new, I want to make sure that I don't download and install malicious software and I am confused that the synaptic package manager gave me a warning, yet apt-get did not.

I am still confused as to why I received that warning. My only thought is that is is not supported by my distro?

As for the different repository types (also called "repos"), here is an excellent article - http://www.howtogeek.com/194247/wha...restricted-universe-and-multiverse-on-ubuntu/
In summary,

• main - supported open-source
• restricted - supported closed-source
  
• universe - general open-source
  
• multiverse - general closed-source

Typically, in nearly all cases, the software in the default repos are safe. As for warnings, Linux is paranoid. You may see warnings for many commands.

Synaptic is a GUI for the package management system. Synaptic provides a way for you to tell it what you want to do. Then, Synaptic gives the parameters to the package management command-line tools. Technically, Synaptic acting like a mediator between you and the command-line. Synaptic may ask additional questions to make sure you want to do what you told it to do.

 

[Robert Cosentino]

Hello,
Does a semi-graphical command line package manager exist? Looking for something like the old DOS Shell. I have a build here that wont have windowing system and am looking for a way to browse APT, etc.
Thanks in advance!

 

[DevynCJohnson]

Hello,
Does a semi-graphical command line package manager exist? Looking for something like the old DOS Shell. I have a build here that wont have windowing system and am looking for a way to browse APT, etc.
Thanks in advance!

Try Aptitude (http://en.wikipedia.org/wiki/Aptitude_(software))