From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tokarev Subject: Re: kvm troubles Date: Fri, 25 Dec 2009 23:53:41 +0300 Message-ID: <4B352655.6040309@msgid.tls.msk.ru> References: <9232def20912240303r36d51aaak66122426b833811c@mail.gmail.com> <4B335045.3040904@chaschperli.ch> <9232def20912250309s64a111cex5d575783d009ced4@mail.gmail.com> <4B349FCD.4020102@chaschperli.ch> <9232def20912251148v7195d5c6qbca85de27a559ed7@mail.gmail.com> <4B351E16.7000401@msgid.tls.msk.ru> <9232def20912251240w66d02b3yb71e7d92d07d4b25@mail.gmail.com> <9232def20912251242p2d7b57d5h8ef7f5d38429625f@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: kvm@vger.kernel.org To: Divick Kishore Return-path: Received: from isrv.corpit.ru ([81.13.33.159]:48346 "EHLO isrv.corpit.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753203AbZLYUxn (ORCPT ); Fri, 25 Dec 2009 15:53:43 -0500 In-Reply-To: <9232def20912251242p2d7b57d5h8ef7f5d38429625f@mail.gmail.com> Sender: kvm-owner@vger.kernel.org List-ID: Divick Kishore wrote: >> Also I am not sure that as such packages __should__ not be downloaded >> from any unknown site but only from trusted debian mirrors. Am I not >> open to any security issues in case I install the package downloaded >> from www.corpit.ru? > > Or in fact downloaded from any other site pointed out by someone on > the mailing list. Why should / should not trust packages downloaded > from non standard debian mirrors? Well, it's your choice really. I maintained kvm (and later qemu-kvm) package for debian for a long time because the one in debian is too old to be usable. It was a long way before I was able to communicate with debian maintainer, and now I co-maintain it -- there is qemu-kvm-0.11.1 in -testing now, but it depends on many other libraries in -testing. For over a year kvm in debian was unusable - so much for trusted/standard mirrors. As of the error you've got -- you're the first to report it, apparently no one else noticed that it depends on a single package that is not in lenny -- it's libgnutls26. You can install this library from -testing or wait till I re-upload new version to www.corpit.ru. /mjt