Differences

This shows you the differences between two versions of the page.

--- mirrors:debian [2026/05/17 15:52] – created - external edit 127.0.0.1
+++ mirrors:debian [2026/07/22 16:23] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Debian — Mirror Configuration ======
-The local mirror covers Debian 11 (Bullseye), 12 (Bookworm), and 13 (Trixie) for ''amd64''. Security updates and backports are included.
+The local mirror covers Debian 11 (Bullseye), Debian 12 (Bookworm), Debian 13 (Trixie) for ''amd64''. Security updates and backports are included.
 <WRAP important>
-The security repository lives at a **/security/** subdirectory, not the same URI as the main archive. Make sure to use the correct URLs below.
+**Now matches the real Debian archive layout.** The mirror uses a single shared root (''/debian/dists/'', ''/debian/pool/'') across every release, exactly like ''deb.debian.org''/''ftp.se.debian.org''. Security has its own shared root at ''/debian/security/'', exactly like ''security.debian.org''. Point your client at these two URLs the same way you would at the upstream archive — just swap the host. No per-release path segment, and nothing to reconfigure when a new release is added.
 </WRAP>
-===== Debian 13 (Trixie) and 12 (Bookworm) =====
+===== Recommended: shared-root configuration =====
-These releases use the **deb822** format (''.sources'' files).
+Debian 13 (Trixie) and 12 (Bookworm) — **deb822** format (''.sources'' files). Replace ''/etc/apt/sources.list.d/debian.sources'' with:
-Replace ''/etc/apt/sources.list.d/debian.sources'' with:
 <code>
 Types: deb
-URIs: https://mirror.nplab.bth.se/debian/<release>/
+URIs: https://mirror.nplab.bth.se/debian/
 Suites: <release> <release>-updates <release>-backports
 Components: main contrib non-free non-free-firmware
@@ Line 21: / Line 19: @@
 Types: deb
-URIs: https://mirror.nplab.bth.se/debian/<release>/security/
+URIs: https://mirror.nplab.bth.se/debian/security/
 Suites: <release>-security
 Components: main contrib non-free non-free-firmware
@@ Line 27: / Line 25: @@
 </code>
-Replace ''<release>'' with ''trixie'' or ''bookworm''.
+Replace ''<release>'' with ''trixie'' or ''bookworm'' — same URL for both.
-===== Debian 11 (Bullseye) =====
+Debian 11 (Bullseye) — classic **sources.list** format (deb822 is not supported). Replace ''/etc/apt/sources.list'' with:
-Bullseye uses the classic **sources.list** format (deb822 is not supported).
+<code>
+deb https://mirror.nplab.bth.se/debian bullseye main contrib non-free
+deb https://mirror.nplab.bth.se/debian bullseye-updates main contrib non-free
+deb https://mirror.nplab.bth.se/debian/security bullseye-security main contrib non-free
+</code>
-Replace ''/etc/apt/sources.list'' with:
+This is exactly what the downloadable config files below contain.
+===== Legacy: per-release URLs (outdated) =====
+<WRAP alert>
+**Outdated — do not use for new installs.** Kept only so nodes already configured against the old per-release URLs (e.g. ''/debian/bookworm/dists/...'', ''/debian/bookworm/security/dists/...'') keep working. An nginx rewrite transparently maps these onto the shared roots above, so the content is identical and always current — but new installs should use the shared-root configuration instead.
+</WRAP>
 <code>
-deb https://mirror.nplab.bth.se/debian/bullseye bullseye main contrib non-free
+Types: deb
-deb https://mirror.nplab.bth.se/debian/bullseye bullseye-updates main contrib non-free
+URIs: https://mirror.nplab.bth.se/debian/<release>/
-deb https://mirror.nplab.bth.se/debian/bullseye/security bullseye-security main contrib non-free
+Suites: <release> <release>-updates <release>-backports
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+Types: deb
+URIs: https://mirror.nplab.bth.se/debian/<release>/security/
+Suites: <release>-security
+Components: main contrib non-free non-free-firmware
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 </code>
 ===== Release Reference =====
-^ Release ^ Version ^ Format ^ Local URL ^ Config File ^
+^ Release ^ Version ^ Format ^ Shared-root URL (recommended) ^ Config File ^
-| trixie | 13 | deb822 (.sources) | ''https://mirror.nplab.bth.se/debian/trixie/'' | [[https://mirror.nplab.bth.se/configs/debian/trixie.sources|trixie.sources]] |
+| trixie | 13 | deb822 | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/trixie.sources|trixie.sources]] |
-| bookworm | 12 | deb822 (.sources) | ''https://mirror.nplab.bth.se/debian/bookworm/'' | [[https://mirror.nplab.bth.se/configs/debian/bookworm.sources|bookworm.sources]] |
+| bookworm | 12 | deb822 | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/bookworm.sources|bookworm.sources]] |
-| bullseye | 11 | sources.list | ''https://mirror.nplab.bth.se/debian/bullseye/'' | [[https://mirror.nplab.bth.se/configs/debian/bullseye.list|bullseye.list]] |
+| bullseye | 11 | sources.list | ''https://mirror.nplab.bth.se/debian/'' | [[https://mirror.nplab.bth.se/configs/debian/bullseye.list|bullseye.list]] |
 **Download and apply (run as root):**
@@ Line 62: / Line 78: @@
 </code>
-===== Proxmox Templates =====
+===== Notes =====
-^ VM ID ^ Template Name ^ Release ^
+  * The security suite lives at its own shared root (''/debian/security/''), separate from the main archive — matches upstream ''security.debian.org''.
-| 9000 | debian-trixie-template | Debian 13 |
+  * The legacy per-release URLs will be retired once no client is observed using them — check nginx access logs before removing the rewrite.
-| 9001 | debian-bookworm-template | Debian 12 |
-| 9002 | debian-bullseye-template | Debian 11 |
-To clone and test:
-<code bash>
-qm clone 9001 200 --name bookworm-test --full
-qm start 200
-</code>