Story #4866
Updated by pulpbot over 2 years ago
**Ticket moved to GitHub**: "pulp/pulp_deb/382":https://github.com/pulp/pulp_deb/issues/382 ---- Debian removes old versions of packages that have been updated from their mirrors. Because of that using lazy sync against official Debian mirrors might end up with incomplete repos when Pulp syncs metadata on day 1, on day 2 a package gets updated/replaced and on day 3 pulp tries to actually get that package. Debian offers a snapshot service at https://snapshot.debian.org/, where you can get almost every file ever seen in the Debian archive by accessing https://snapshot.debian.org/file/HASH (where HASH is currently the SHA1 hash of the file). The API docs of snapshot can be found at https://salsa.debian.org/snapshot-team/snapshot/raw/master/API The idea would be to allow a secondary source in pulp_deb that is tried when the primary mirror replied with a 404. This is probably also useful for other backends, not just Debian. Snapshot currently only supports sha1 hashes, but the authors promised to accept patches for sha256 if anyone would write one (the source of the service is in the same repo as the api doc linked above).
.