Bug 56971 - UCR template for apt.conf.d/80proxy should evaluate no_proxy but doesn't
UCR template for apt.conf.d/80proxy should evaluate no_proxy but doesn't
Status: NEW
Product: UCS
Classification: Unclassified
Component: General
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2024-01-10 11:15 CET by Oliver Friedrich
Modified: 2024-01-15 10:53 CET (History)
2 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Workaround is available
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Friedrich univentionstaff 2024-01-10 11:15:28 CET
Setup:
I have an UCS environment with the following parts:
- HTTP(S)-Proxy: UCRV proxy/* set
- internal Repository-Mirror → these hosts are in proxy/no_proxy

If I try to install e.g. UCS@School via Appcenter, then the configuration dialogue fails, because it tries to fetch apt packages from the internal mirror (because the */server UCRV is set to the internal deb mirror).

The problem is, that the file "/etc/apt/apt.conf.d/80proxy" takes care of the proxy variables WITHOUT evaluating the no_proxy variable!

It could be solved by adapting the UCR-Template to write the value of proxy/no_proxy as DIRECT

See: https://www.claudiokuenzler.com/blog/619/apt-behind-proxy-no-proxy-for-some-repositories
Comment 1 Robert Heyer univentionstaff 2024-01-15 10:20:06 CET
Proofed with squid proxy (no authentifiction).

UCS:

root@primary:/var/log/apt# univention-app info
UCS: 5.0-6 errata915
Installed: ucsschool=5.0 v4


Setting UCRV proxy/no_proxy to updates.software-univention.de:

root@primary:/var/log/apt# ucr get proxy/http
squid:3128
root@primary:/var/log/apt# ucr get proxy/https
squid:3128
root@primary:/var/log/apt# ucr get proxy/no_proxy 
updates.software-univention.de

UCRV proxy/no_proxy is not written to 80proxy:

###
root@primary:/var/log/apt# cat /etc/apt/apt.conf.d/80proxy 
// Warning: This file is auto-generated and might be overwritten by
//          univention-config-registry.
//          Please edit the following file(s) instead:
// Warnung: Diese Datei wurde automatisch generiert und kann durch
//          univention-config-registry ueberschrieben werden.
//          Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
// 
//      /etc/univention/templates/files/etc/apt/apt.conf.d/80proxy
// 

Acquire
{
    http
    {
        Proxy "http://squid:3128";
    }
}

Acquire
{
    https
    {
        Proxy "http://squid:3128";
    }
}
###

Result: UCS@school installer quits by message "ucs-school-multiserver": Paket existiert nicht.