Bug#859122: about 500 DLAs missing from the website

Holger Levsen <[email protected]> Sat, 9 Feb 2019 14:39:50 +0000

Newsgroups	gmane.linux.debian.devel.www
Message-ID	<20190209143950.xujg74khyxczzvwz__4014.14866080216$1549723349$gmane$org@layer-acht.org>

Hi Laura,

many many thanks for your work on this, including and especially this
writeup!

some comments below, where I dont say anything I mean 'yay"! :)

On Sat, Feb 09, 2019 at 03:55:44AM +0100, Laura Arjona Reina wrote:
> * The /lts/security/YYYY/index.*.html files show the last advisory for
> the cases where there are several files with the same beginning (e.g.
> for DSA-nnnn and DSA-nnnn-2, both html files are generated, but the
> index only points to the -2 file). If this is not the intended
> behaviour, changes in index.wml and Makefiles are needed.

I think we want the other DLAs linked from the indexes as well.

shall we file a bug to not forget this?

> * Please review the content (text, links) of these files:
> /lts/index.wml
> /lts/security/index.wml

the former seems a bit bare to me. Also, isnt the 2nd enough, so that we
can just drop/not have the former?

> * This new /lts section of the website is not referenced yet in other
> places of the Debian website. I'm not sure if it should be referenced in
> /security, in /releases/XXXX, or in both.

I think there is no hurry for this, rather I would suggest to not
reference for now and then look again in 2-4 weeks, so that we get a
better idea where we want it.
 
> * We still need the Apache redirects, so the people that try the old
> URLs (wether directly because they knew, or via the security tracker),
> find the files they need. What we need to do is send a patch to
> 
> https://salsa.debian.org/dsa-team/mirror/dsa-puppet/blob/master/modules/roles/templates/apache-www.debian.org.erb
> 
> that sets the redirect from
> https://www.debian.org/security/any_year/dla-whatever to
> https://www.debian.org/security/lts/any_year/dla-whatever

right. shall we file a bug to not forget this?

> * Adaptation in the security tracker so the new URL paths are used from
> now on is also needed.

right. shall we file a bug to not forget this?

> Thanks for reading so long!

Thank you for getting us here!


-- 
tschau,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

signature.asc (application/pgp-signature, 833 B)