Skip to content

Commit 2284c9e

Browse files
taokytaoky
committed
debian,ubuntu: Update mirrorlist for new security config
1 parent 9cbdbfc commit 2284c9e

4 files changed

Lines changed: 53 additions & 83 deletions

File tree

‎debian/mirrorlist.zh.md‎

Lines changed: 18 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -4,40 +4,35 @@
44

55
该接口需要 APT 1.6 及以上版本（即 Debian 10 buster 及以上）。
66

7+
默认启用“安全更新使用官方索引”，在安全更新的 mirrorlist URL 中添加 `?official_index=1`，优先从官方源获取索引，再按镜像列表的顺序下载软件包；如果镜像站尚未同步所需软件包，会回退到官方源。官方索引不可用时，APT 也会尝试镜像站的索引。没有可用镜像时，列表仍保留官方源。关闭此选项只会移除该参数，索引和软件包都由 mirrorlist 中的镜像站提供。
8+
79
### 传统格式（`/etc/apt/sources.list`）
810

9-
```{ztmpl lang="properties" input="release src nf mirror_security" path="/etc/apt/sources.list"}
11+
```{ztmpl lang="properties" input="release src nf official_index" path="/etc/apt/sources.list"}
1012
# 默认注释了源码镜像以提高 apt update 速度，如有需要可自行取消注释
1113
{{#sid}}
12-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ sid main contrib{{#nf}}{{nonfree}}{{/nf}}
13-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ sid main contrib{{#nf}}{{nonfree}}{{/nf}}
14+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian sid main contrib{{#nf}}{{nonfree}}{{/nf}}
15+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian sid main contrib{{#nf}}{{nonfree}}{{/nf}}
1416
{{/sid}}
1517
{{^sid}}
16-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}} main contrib{{#nf}}{{nonfree}}{{/nf}}
17-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}} main contrib{{#nf}}{{nonfree}}{{/nf}}
18+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}} main contrib{{#nf}}{{nonfree}}{{/nf}}
19+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}} main contrib{{#nf}}{{nonfree}}{{/nf}}
1820
19-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}}-updates main contrib{{#nf}}{{nonfree}}{{/nf}}
20-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}}-updates main contrib{{#nf}}{{nonfree}}{{/nf}}
21+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}}-updates main contrib{{#nf}}{{nonfree}}{{/nf}}
22+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}}-updates main contrib{{#nf}}{{nonfree}}{{/nf}}
2123
22-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}}-backports main contrib{{#nf}}{{nonfree}}{{/nf}}
23-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian/ {{release}}-backports main contrib{{#nf}}{{nonfree}}{{/nf}}
24+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}}-backports main contrib{{#nf}}{{nonfree}}{{/nf}}
25+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian {{release}}-backports main contrib{{#nf}}{{nonfree}}{{/nf}}
2426
25-
{{#mirror_security}}
26-
# 以下安全更新软件源为镜像站配置
27-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
28-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
29-
{{/mirror_security}}
30-
{{^mirror_security}}
31-
# 以下安全更新软件源为官方源配置
32-
deb {{scheme}}://security.debian.org/debian-security {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
33-
{{src}}deb-src {{scheme}}://security.debian.org/debian-security {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
34-
{{/mirror_security}}
27+
# 安全更新软件源
28+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security{{#official_index}}?official_index=1{{/official_index}} {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
29+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security{{#official_index}}?official_index=1{{/official_index}} {{release}}{{security}} main contrib{{#nf}}{{nonfree}}{{/nf}}
3530
{{/sid}}
3631
```
3732

3833
### DEB822 格式（`/etc/apt/sources.list.d/debian.sources`）
3934

40-
```{ztmpl lang="yaml" input="release_deb822 src nf mirror_security" path="/etc/apt/sources.list.d/debian.sources"}
35+
```{ztmpl lang="yaml" input="release_deb822 src nf official_index" path="/etc/apt/sources.list.d/debian.sources"}
4136
{{#sid}}
4237
Types: deb
4338
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian
@@ -66,33 +61,17 @@ Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
6661
{{src}}Components: main contrib{{#nf}} non-free non-free-firmware{{/nf}}
6762
{{src}}Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
6863
69-
{{#mirror_security}}
70-
# 以下安全更新软件源为镜像站配置
71-
Types: deb
72-
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security
73-
Suites: {{release_deb822}}-security
74-
Components: main contrib{{#nf}} non-free non-free-firmware{{/nf}}
75-
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
76-
77-
{{src}}Types: deb-src
78-
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security
79-
{{src}}Suites: {{release_deb822}}-security
80-
{{src}}Components: main contrib{{#nf}} non-free non-free-firmware{{/nf}}
81-
{{src}}Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
82-
{{/mirror_security}}
83-
{{^mirror_security}}
84-
# 以下安全更新软件源为官方源配置
64+
# 安全更新软件源
8565
Types: deb
86-
URIs: {{scheme}}://security.debian.org/debian-security
66+
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security{{#official_index}}?official_index=1{{/official_index}}
8767
Suites: {{release_deb822}}-security
8868
Components: main contrib{{#nf}} non-free non-free-firmware{{/nf}}
8969
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
9070
9171
{{src}}Types: deb-src
92-
{{src}}URIs: {{scheme}}://security.debian.org/debian-security
72+
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/debian-security{{#official_index}}?official_index=1{{/official_index}}
9373
{{src}}Suites: {{release_deb822}}-security
9474
{{src}}Components: main contrib{{#nf}} non-free non-free-firmware{{/nf}}
9575
{{src}}Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
96-
{{/mirror_security}}
9776
{{/sid}}
9877
```

‎debian/zh.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,3 +49,8 @@ input:
4949
_: 强制安全更新使用镜像
5050
note: 为了更及时地获得安全更新，不推荐使用镜像站安全更新软件源
5151
true:
52+
official_index:
53+
_: 安全更新使用官方索引
54+
note: 优先获取官方索引，软件包优先从镜像站下载，失败时回退到官方源
55+
default: true
56+
true:

‎ubuntu/mirrorlist.zh.md‎

Lines changed: 25 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -4,88 +4,69 @@
44

55
该接口需要 APT 1.6 及以上版本（即 Ubuntu 18.04 及以上）。
66

7+
默认启用“安全更新使用官方索引”，在安全更新的 mirrorlist URL 中添加 `?official_index=1`，优先从官方源获取索引，再按镜像列表的顺序下载软件包；如果镜像站尚未同步所需软件包，会回退到官方源。官方索引不可用时，APT 也会尝试镜像站的索引。没有可用镜像时，列表仍保留官方源。关闭此选项只会移除该参数，索引和软件包都由 mirrorlist 中的镜像站提供。
8+
9+
Ubuntu 的安全更新需保持为独立条目，仅为 `-security` 条目的 URL 添加此参数，其他条目保持不变。
10+
711
### 传统格式（`/etc/apt/sources.list`）
812

9-
```{ztmpl lang="properties" input="release src proposed mirror_security" path="/etc/apt/sources.list"}
13+
```{ztmpl lang="properties" input="release src proposed official_index" path="/etc/apt/sources.list"}
1014
# 默认注释了源码镜像以提高 apt update 速度，如有需要可自行取消注释
11-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}} main restricted universe multiverse
12-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}} main restricted universe multiverse
13-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-updates main restricted universe multiverse
14-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-updates main restricted universe multiverse
15-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-backports main restricted universe multiverse
16-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-backports main restricted universe multiverse
17-
18-
{{#mirror_security}}
19-
# 以下安全更新软件源为镜像站配置
20-
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-security main restricted universe multiverse
21-
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-security main restricted universe multiverse
22-
{{/mirror_security}}
23-
{{^mirror_security}}
24-
# 以下安全更新软件源为官方源配置
25-
deb http://security.ubuntu.com/ubuntu/ {{release}}-security main restricted universe multiverse
26-
{{src}}deb-src http://security.ubuntu.com/ubuntu/ {{release}}-security main restricted universe multiverse
27-
{{/mirror_security}}
15+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}} main restricted universe multiverse
16+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}} main restricted universe multiverse
17+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-updates main restricted universe multiverse
18+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-updates main restricted universe multiverse
19+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-backports main restricted universe multiverse
20+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-backports main restricted universe multiverse
21+
22+
# 安全更新软件源
23+
deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu{{#official_index}}?official_index=1{{/official_index}} {{release}}-security main restricted universe multiverse
24+
{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu{{#official_index}}?official_index=1{{/official_index}} {{release}}-security main restricted universe multiverse
2825
2926
# 预发布软件源，不建议启用
30-
{{proposed}}deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-proposed main restricted universe multiverse
31-
{{proposed}}{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu// {{release}}-proposed main restricted universe multiverse
27+
{{proposed}}deb mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-proposed main restricted universe multiverse
28+
{{proposed}}{{src}}deb-src mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu {{release}}-proposed main restricted universe multiverse
3229
```
3330

3431
### DEB822 格式（`/etc/apt/sources.list.d/ubuntu.sources`）
3532

36-
```{ztmpl lang="yaml" input="release_deb822 src proposed mirror_security" path="/etc/apt/sources.list.d/ubuntu.sources"}
33+
```{ztmpl lang="yaml" input="release_deb822 src proposed official_index" path="/etc/apt/sources.list.d/ubuntu.sources"}
3734
Types: deb
38-
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
35+
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu
3936
Suites: {{release_deb822}} {{release_deb822}}-updates {{release_deb822}}-backports
4037
Components: main restricted universe multiverse
4138
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
4239
4340
# 默认注释了源码镜像以提高 apt update 速度，如有需要可自行取消注释
4441
{{src}}Types: deb-src
45-
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
42+
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu
4643
{{src}}Suites: {{release_deb822}} {{release_deb822}}-updates {{release_deb822}}-backports
4744
{{src}}Components: main restricted universe multiverse
4845
{{src}}Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
4946
50-
{{#mirror_security}}
51-
# 以下安全更新软件源为镜像站配置
52-
Types: deb
53-
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
54-
Suites: {{release_deb822}}-security
55-
Components: main restricted universe multiverse
56-
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
57-
58-
{{src}}Types: deb-src
59-
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
60-
{{src}}Suites: {{release_deb822}}-security
61-
{{src}}Components: main restricted universe multiverse
62-
{{src}}Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
63-
{{/mirror_security}}
64-
{{^mirror_security}}
65-
# 以下安全更新软件源为官方源配置
47+
# 安全更新软件源
6648
Types: deb
67-
URIs: http://security.ubuntu.com/ubuntu/
49+
URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu{{#official_index}}?official_index=1{{/official_index}}
6850
Suites: {{release_deb822}}-security
6951
Components: main restricted universe multiverse
7052
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
7153
7254
{{src}}Types: deb-src
73-
{{src}}URIs: http://security.ubuntu.com/ubuntu/
55+
{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu{{#official_index}}?official_index=1{{/official_index}}
7456
{{src}}Suites: {{release_deb822}}-security
7557
{{src}}Components: main restricted universe multiverse
7658
{{src}}Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
77-
{{/mirror_security}}
7859
7960
# 预发布软件源，不建议启用
8061
8162
{{proposed}}Types: deb
82-
{{proposed}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
63+
{{proposed}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu
8364
{{proposed}}Suites: {{release_deb822}}-proposed
8465
{{proposed}}Components: main restricted universe multiverse
8566
{{proposed}}Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
8667
8768
{{proposed}}{{src}}Types: deb-src
88-
{{proposed}}{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu/
69+
{{proposed}}{{src}}URIs: mirror+{{scheme}}://mirrors.cernet.edu.cn/api/apt/mirrorlist/ubuntu
8970
{{proposed}}{{src}}Suites: {{release_deb822}}-proposed
9071
{{proposed}}{{src}}Components: main restricted universe multiverse
9172
{{proposed}}{{src}}Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

‎ubuntu/zh.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,3 +40,8 @@ input:
4040
_: 强制安全更新使用镜像
4141
note: 为了更及时地获得安全更新，不推荐使用镜像站安全更新软件源
4242
true:
43+
official_index:
44+
_: 安全更新使用官方索引
45+
note: 优先获取官方索引，软件包优先从镜像站下载，失败时回退到官方源
46+
default: true
47+
true:

0 commit comments

Comments
 (0)