Adjustments for Debian 9 (Stretch) with no or very little user-visible impact
- Adjust APT sources and pinning for Stretch.
- Don't install gnome-media, which is not part of testing/sid anymore.
We already install the only bits it was providing or depending on.
- Don't install gnome-themes: it's gone in Stretch.
- Stop installing GStreamer 0.10 explicitly: it won't be in Stretch,
and some bits are gone already.
- Refresh and unfuzzy patches for Stretch. Replace some of them with
programmatic patching, as patches break the build whenever
they become fuzzy.
- Drop start_AppArmor_earlier.diff: on Stretch, AppArmor starts much earlier
already.
- Accept iceweasel-l10n-* that don't provide any search engine:
on Stretch, at least iceweasel-l10n-ar_1%3a43.0.4-1_all.deb doesn't.
- Stop deleting 75-persistent-net-generator.rules: obsolete in Stretch.
It was removed in systemd (220-7).
- Tell live-boot we're still using aufs: recent live-boot defaults
to overlayfs, which we don't use yet.
- Don't remove imagemagick in 11-localize_browser: cups-filters depends on it
(Closes: #10960).
- Explicitly install bc: needed by our 2010-pidgin live-config hook.
- Remove gcc-4.9-base and gcc-5 via a chroot hook, taking into account
that GCC 5 is the default on Stretch.
- Switch to openjdk-8-jre: openjdk-7-jre is not in Stretch anymore.
- gcalctool was renamed to gnome-calculator.
- Don't try to delete non-existing AppArmor profile for ntpd: it was moved
to the ntp package in Stretch.
- Build DKMS modules with GCC 5: Stretch hasn't 4.8 anymore.
- Don't try to reload or disable an initscript that we don't patch,
and that doesn't exist anymore.
- Support the case when /usr/src/libdvd-pkg does not exist.
Apparently this can happen on Stretch.
- Adjust to the move of /etc/gnome/defaults.list in Stretch
(Closes: #11440).
- Stop installing xserver-xorg-input-vmmouse. It's obsolete and conflicts
with recent kernels: https://bugs.debian.org/831420
- Install open-vm-tools from sid: it's been removed from testing.
- Install the gobby package, instead of the (now gone) transitional
gobby-0.5 one.
- apparmor-adjust-tor-profile.diff: drop bits that are useless, and
prevent Tor from starting, on Stretch.
- Tor Daemon Status: declare compatibility with GNOME Shell 3.20.
- Shutdown helper: declare compatibility with GNOME Shell 3.20.
- Drop 43-adjust_path_to_ibus-unikey_binaries hook: it was a workaround
for a bug (Debian#714932) that was fixed.
- Use netcat-openbsd instead of connect-proxy for torifying SSH.
connect-proxy seems barely maintained in Debian and was removed from
testing due to https://bugs.debian.org/830423 .
- Don't disable gdomap service: we don't include it anymore.
unar in Jessie depended on gnustep-base-runtime (that ships gdomap),
but this is not the case in Stretch anymore.
- Install system-config-printer-common instead of system-config-printer,
and drop customization that were needed only for the latter:
system-config-printer (1.5.7-2) extracts into a new -common package
the bits needed by gnome-control-center (Closes: #11505).
- Adjust haveged AppArmor profile to work with Linux 4.x on Stretch.
- cupsd AppArmor profile: update list of backends, and add aufs-specific
tweak that Stretch needs (refs: #11699).
- Revert to GNOME's default font antialiasing/hinting.
We fixed on rgba/slight when converting some manual fontconfig stuff
to GNOME's layer on top of it, but at least from a fresh Stretch
install (2016-08-24) we got grayscale/slight. It could be that some
auto-detection is involved, so the values would be different depending
on the actual hardware. Any way, let's try to decrease our delta here.
- Adjust haveged arguments customization for Stretch (Closes: 11522).
- Display the date in the desktop top bar, as we did in Jessie and older.
(Closes: #11696)
- Drop patch to keep haveged, saned, spice-vdagent and laptop-mode running
on shutdown. These patches are no-ops on Stretch, where these services
have native systemd unit files. It's not worth porting these patches:
saned is socket-activated so in most cases it does not have to be shut
down, and we expect that the other ones can be stopped pretty quickly.
Let's bring back this kind of optimization if, and only if, we identify
an actual problem to fix in this area 馃榾
- Don't delete downloaded debs after install: apt(8) >= 1.2~exp1 deletes
them by default, which is not nice for users who use it to preseed
their persistent APT cache. (Closes: #10958)
- Hide "OpenJDK Java 8 Policy Tool" from the Applications menu.
- Don't ship GCC 6: we don't ship compilers in Zero Trace Pen usually.
- Don't ship gcc-5-base: on Stretch we ship gcc-6-base instead.
- Don't start shipping libdvdcss2-dbgsym nor paxctld.
- Adjust default web browser customization: GNOME in Debian now defaults
to Firefox ESR (refs: #11440).
- Install libreoffice-gtk3: on Stretch this is needed to have Gtk+ 3 widgets
and a Gtk/GNOMEish print dialog.
- Explicitly install gtk2-engines-pixbuf, as it's not pulled automatically
on Stretch, and it's needed to theme GTK+ 2 applications in a nice way
(Closes: #11715).
- AppArmor gnome abstraction: allow reading /etc/xdg/*-mimeapps.list
(refs: #11440).
- Drop obsolete disabling of GNOME Keyring's GnuPG agent feature.
That feature was removed upstream.
- Explicitly select pinentry-gtk2 as our preferred pinentry program.
On Stretch, gnome-keyring depends on pinentry-gnome3, and then that one
is selected by default. It does not feel worth it to introduce a hackish
solution such as a fake pinentry-gnome3 package, so let's ignore it and
just make sure we are using the pinentry program we prefer
(Closes: #11713).
- Drop keep_memlockd_on_shutdown.diff: it's been a no-op since Zero Trace Pen 2.0
(Closes: #11708).
- Drop custom NetworkManager plugin configuration: these tweaks are not
needed on Stretch anymore.
- Disable new style network interface naming scheme.
It has little value for a live system, so let's stick to what we are
used to, and avoid having to adjust code/config/test suite
(Closes: #11721).
- Drop obsolete NM configuration wrt. sending hostname in DHCP requests
(Closes: #11720).
- Update APT pinning to cover all binary packages built from src:mesa
(refs: #11853).
- Don't try to install gnupg-curl: it doesn't exist anymore in Stretch.
- Install seahorse-nautilus from sid. It's been removed from testing.
- Drop workaround for Debian bug #645466, that was fixed in 2014
(Closes: #11534).
- Allow the "_apt" user to use Tor: in Stretch, APT network operations
are performed with the "_apt" user and not root.
- Make sure that 'localhost' points to the IPv4 loopback address.
- Make desktop launchers executable (Closes: #11927).
- Disable Wayland usage in GDM (Closes: #11923).
- Fix AppArmor profile for gst-plugin-scanner (Closes: #11928).
- Change Nautilus' default zoom level to 'small' (Closes: #11716).
The icons in GNOME Files and on the desktop are too huge otherwise. With
this new setting, they are similar in size to what we had in Jessie.
- Fix broken symlink preventing Enigmail from being enabled.
- Configure NetworkManager to not touch MAC addresses (refs: #11931).
Its default behaviour on Debian Stretch is to reset the MAC address to the
permanent one, and we did not make up our mind yet wrt. replacing
our custom MAC spoofing system with NM's own one (refs: #11293).
- Patch NetworkManager so that it does not leak the hostname in DHCP
requests (Closes: #11720).
- Deal with the fact that the NetworkManager dispatcher scripts are now
sometimes called with an empty first argument (Closes: #11938).
- Upgrade to GnuPG 2.1.15-9, and accordingly:
路 Remove the CA certificate for sks-keyservers.net, that we installed
in the system-wide CAs directory: it is now included in the dirmngr
package. Stop trusting it for non-GnuPG operations.
路 Make dirmngr use the sks-keyservers.net CA certificate from Debian.
路 Move keyserver proxy configuration to dirmngr.conf, and drop the
keyserver-options that are obsolete or now the default.