.. -*- coding: utf-8; -*-

======
 Apt.
======
.. contents::
   :local:

Debian releases
===============

Workflow::

  experimental → unstable (sid) → testing → stable

Which package from witch release::

  $ aptitude search ~S~i~Astable
  $ aptitude search ~S~i~Atesting
  $ aptitude search ~S~i~Aunstable
  $ aptitude search ~S~i~Aexperimental

 * https://wiki.debian.org/DebianReleases
 * https://wiki.debian.org/DebianOldStable
 * https://wiki.debian.org/DebianStable
 * https://wiki.debian.org/DebianTesting
 * https://wiki.debian.org/DebianUnstable
 * https://wiki.debian.org/DebianExperimental

Conf files
==========

See man sources.list(5), apt.conf(5), apt_preferences(5).

``http://httpredir.debian.org/debian/`` used for automatic balancing to nearest
perository. Corresponding ``/etc/apt/sources.list`` may have::

  deb http://httpredir.debian.org/debian/  stable  main contrib non-free
  deb http://httpredir.debian.org/debian/  stable-backports  main contrib non-free
  deb http://httpredir.debian.org/debian/  unstable  main contrib non-free
  deb http://httpredir.debian.org/debian/  experimental  main contrib non-free
  deb http://httpredir.debian.org/debian/  testing  main contrib non-free
  deb http://httpredir.debian.org/debian/  testing  main contrib non-free

Security updates destributed via different URL (for ``oldstable``, ``stable``
and ``testing`` only, of cause there are no reason for ``sid`` or
``experimental``)::

  deb http://security.debian.org/  oldstable  main contrib non-free
  deb http://security.debian.org/  stable  main contrib non-free
  deb http://security.debian.org/  testing  main contrib non-free

Other useful repositories::

  deb http://www.deb-multimedia.org  testing  main non-free

To include config as separate file add file with name like::

  /etc/apt/sources.list.d/*.list

  /etc/apt/sources.list.d/testing.list
  /etc/apt/sources.list.d/sid.list

https://wiki.debian.org/SourcesList
  About ``/etc/apt/sources.list``.
http://httpredir.debian.org/
  The redirector aims to solve the problem of choosing a Debian mirror.
https://www.debian.org/security/
  Keeping your Debian system secure.
https://wiki.debian.org/UnofficialRepositories
  List of useful unofficial repositories.
https://www.google.com/linuxrepositories/
  Links to Google repositories and verification key.

Enable/disable recommends and suggestions
=========================================

To disable installation of recommended packages (which is by default) create file
``/etc/apt/apt.conf.d/01no-recommends``::

  APT::Install-Recommends "0";
  APT::AutoRemove::RecommendsImportant "1";

  APT::Install-Suggests "0";

Alternatively pass corresponding option to installation utility to suppress installation of
recommended packages::

  apt --no-install-recommends
  aptitude --without-recommends
  aptitude -R

To install suggested packages::

  apt --install-suggests
  aptitude --install-suggests

Verify  settings::

  apt-config dump | fgrep -i recommend
  apt-config dump | fgrep -i suggest

Find nearest mirror
===================

Newer approach for selecting mirror is via DNS balancing from
``httpredir.debian.org``. Just use::

  deb http://httpredir.debian.org/debian/  stable  main contrib non-free

Older approach to select nearest mirrors is::

  $ sudo apt-get install netselect-apt
  $ netselect-apt stable
  $ netselect-apt testing
  $ netselect-apt unstable
  $ netselect-apt experimental
  $ netselect-apt sid

Check package versions and priority
===================================

``/etc/apt/preferences``::

  Package: *
  Pin: release a=stable
  Pin-Priority: 800

  Package: *
  Pin: release a=testing
  Pin-Priority: 900

  Package: *
  Pin: release a=unstable
  Pin-Priority: 700

  Package: *
  Pin: release a=experimental
  Pin-Priority: 600

Example that prevent installing ``*systemd*`` packages (priority strictly below
``0`` forbid package to be installed)::

  Package: systemd
  Pin: origin ""
  Pin-Priority: -1

  Package: *systemd*
  Pin: origin ""
  Pin-Priority: -1

Example that avoid installing packages from different distribution (priority
strictly below ``100`` cause a version to be installed only if there is no
installed version of the package), you should keep main distribution priority
above foreign distro priority::

  Package: *
  Pin: release a=testing
  Pin-Priority: 990

  Package: *
  Pin: release o=Kali
  Pin-Priority: 50

To discover package priority::

  bash# apt-cache madison emacs24
     emacs24 |   24.5+1-3 | http://ftp.us.debian.org/debian/ testing/main amd64 Packages
     emacs24 |   24.4+1-5 | http://http.kali.org/kali/ kali-current/main amd64 Packages
     emacs24 |   24.5+1-3 | http://ftp.us.debian.org/debian/ testing/main Sources

  bash# apt-cache policy emacs24
  emacs24:
    Installed: 24.5+1-3
    Candidate: 24.5+1-3
    Version table:
   *** 24.5+1-3 0
          990 http://ftp.us.debian.org/debian/ testing/main amd64 Packages
          100 /var/lib/dpkg/status
       24.4+1-5 0
           50 http://http.kali.org/kali/ kali-current/main amd64 Packages

  bash# aptitude versions emacs24
  Package emacs24:
  p   24.4+1-5                                      kali-current              50
  i   24.5+1-3                                      testing                   990

Setup backport.
===============

Main backports archive located at http://www.backports.org.

To get packeges gpg sign key::

  $ su
  ...
  $ wget -O - http://backports.org/debian/archive.key | apt-key add -
  $ ^D

Write where packeges places::

  $ cat /etc/apt/sources.list
  deb http://www.backports.org/debian/ etch-backports main contrib non-free

Importing package signing key.
==============================

Usualy you can safely update keyring via ``debian-keyring`` package because it
is signed by prevoius keyring::

  $ sudo apt-get install debian-keyring

Defferent 3rd party provide keys for download. If you trust key (or get it in a
trusted way) it is easy to import it::

  $ sudo apt-key add $FILE.pgp

Another way to resolve warning::

  $ sudo apt-get update
  ...
  W: There is no public key available for the following key IDs:
  9AA38DCD55BE302B
  W: GPG error: http://http.us.debian.org etch Release: The following signatures
  couldn't be verified because the public key is not available: NO_PUBKEY
  9AA38DCD55BE302B
  ...

is to use key servers directly::

  $ gpg --keyserver pgp.mit.edu --recv-key 9AA38DCD55BE302B \
  --keyserver-options http-proxy=http://user:pass@192.168.1.1:3128
  gpg: requesting key 55BE302B from hkp server pgp.mit.edu
  gpg: key 55BE302B: public key "Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>" imported
  gpg: no ultimately trusted keys found
  gpg: Total number processed: 1
  gpg:               imported: 1  (RSA: 1)

  $ gpg --export 9AA38DCD55BE302B | sudo apt-key add -
  OK

List packages
=============

List all known packages::

  apt list

List installed packages::

  apt list --installed

List upgradable packages::

  apt list --upgradable

Install build dependency for package
====================================
::

  $ apt-get install build-essential    # install dev LIBC and GCC C/C++
  $ sudo apt-get build-dep $package

If all you want is checking what packages are needed to build a given package::

  $ apt-cache showsrc $package

or check 'Build-Depends' attribute in::

  $ apt-cache show $package

Delete config file for removed packages.
========================================

To get list of such packages use one of::

  $ aptitude search ~c
  $ grep-status -n -sPackage -FStatus config-files

To remove them::

  $ aptitude purge ~c

Delete obsolete packages.
=========================

To get list of such packages use::

  $ aptitude search ~o

To remove them::

  $ aptitude purge ~o

To remove packages that were automatically installed to satisfy dependencies and
are now no longer needed::

  $ sudo apt-get autoremove

Clean up packages cache.
========================

Remove everything from ``/var/cache/apt/archives/`` and
``/var/cache/apt/archives/partial/``::

  $ sudo apt-get clean

Removes package files that can no longer be downloaded, and are largely
useless::

  $ sudo apt-get autoclean

Check package files for modification.
=====================================
::

  $ sudo debsums --changed

Search for packages.
====================
::

  $ aptitude search '?tag(works-with::logfile)'

Show dependency graph.
======================
::

  $ apt-cache dotty $PKG | dot -Tsvg >$PKG.svg && see $PKG.svg

  $ sudo apt-get install debtree
  $ debtree $PKG | dot -Tsvg >$PKG.svg && see $PKG.svg

  $ sudo apt-get install apt-rdepends
  $ apt-rdepends $PKG
  $ apt-rdepends -r $PKG
  $ apt-rdepends -d $PKG | dot -Tsvg >$PKG.svg && see $PKG.svg
  $ apt-rdepends -d -r $PKG | dot -Tsvg >$PKG.svg && see $PKG.svg

Simulation mode
===============

Simulation for ``apt-get`` and ``aptitude`` shows what happen without actually
modifying or installing any packages.

Simulate install or upgrade with ``-s`` key::

  $ sudo apt-get install -s xterm
  $ sudo aptitude install -s xterm
  $ sudo apt-get upgrade -s
  $ sudo aptitude upgrade -s

Making aptitude forget changes
==============================

Following removes or override (like "hold" status) ``aptitude`` package state DB::

  sudo rm /var/lib/aptitude/pkgstates
  sudo aptitude keep-all