Skip to content

external: pull the Raspberry Pi archive suite that matches the release - #491

Merged
igorpecovnik merged 1 commit into
mainfrom
rpi-archive-suite-mapping
Sep 27, 2026
Merged

igorpecovnik merged 1 commit into
mainfrom
rpi-archive-suite-mapping

Conversation

@igorpecovnik

Copy link
Copy Markdown
Member

Every Debian-side rpi-* source pulled KEY="bookworm main" — including the ones serving trixie, forky and sid. Two of them (rpi-libraspberrypi-bin-trixie, -forky) are even named for a suite they did not pull.

archive.raspberrypi.com publishes three Debian suites now:

suite status
bookworm oldstable
trixie stable
forky testing

So trixie and later images have been getting oldstable packages:

package bookworm trixie
raspberrypi-sys-mods 20250930~bookworm 1:20260914
raspi-utils 20251002-1~bookworm 20260626-1
python3-libcamera 0.5.2+rpt20250903 0.7.2+rpt20260817
firmware-brcm80211 1:20240709-2 1:20260519-1
bluez 5.66-1 5.82-1.1

This is the root cause of armbian/build#10827

That PR removes /etc/sudoers.d/010_pi-nopasswd (pi ALL=(ALL) NOPASSWD: ALL) from Debian bcm2711 images with a pre_umount_final_image hook. I checked both packages:

bookworm  raspberrypi-sys-mods 20250930~bookworm   -> ships 010_pi-nopasswd
trixie    raspberrypi-sys-mods 1:20260914          -> does NOT ship it

Upstream already removed it. The images carry that rule only because they mirror the wrong suite. After this change, #10827 is a bookworm-scoped mitigation rather than the fix — still worth having there, since bookworm is oldstable upstream and won't get the newer package.

What changed

Split per release rather than widening one source, following the pattern already used by rpi-libraspberrypi-bin-{bookworm,trixie,forky}:

source serves pulls
rpi-debian-firmware-raspi.conf bookworm bookworm
rpi-debian-firmware-raspi-trixie.conf (new) trixie:forky:sid trixie
rpi-libcamera-debian.conf bookworm bookworm
rpi-libcamera-debian-trixie.conf (new) trixie trixie
rpi-pi-bluetooth-debian.conf bookworm bookworm
rpi-pi-bluetooth-debian-trixie.conf (new) trixie:forky:sid trixie

forky and sid point at trixie, not forky: upstream's forky suite contains three packages (binutils-source, gcc-16-source, gdb-source) and none of ours.

raspi-gpio is left out of the trixie glob — upstream retired it in favour of the raspi-utils tools and it does not exist in that suite. It stays available for bookworm.

Deliberately not changed

rpi-libraspberrypi-bin-trixie.conf and -forky.conf keep pulling bookworm. libraspberrypi-bin and libraspberrypi0 exist only in the bookworm suite — pointing them at trixie would mirror nothing. Both files now carry a comment saying so, because otherwise the next person reading this will "fix" them.

Verification

Every rpi-* source checked against the live index of the suite it now points at, both arm64 and armhf — each glob resolves to real packages, nothing resolves empty:

OK  rpi-debian-firmware-raspi-trixie.conf   trixie/arm64  11 pkgs
OK  rpi-debian-firmware-raspi.conf          bookworm/arm64 12 pkgs
OK  rpi-libcamera-debian-trixie.conf        trixie/arm64   2 pkgs
OK  rpi-libraspberrypi-bin-trixie.conf      bookworm/arm64  4 pkgs
OK  rpi-pi-bluetooth-debian-trixie.conf     trixie/arm64   2 pkgs
...
problems: 0

Worth knowing before merge

This bumps several packages by a year or more in trixie+ images — bluez 5.66 → 5.82 and firmware-brcm80211 2024 → 2026 are the notable ones. That is the point, but it is a real change in what ships, so the first nightly after this deserves a look rather than a rubber stamp.

Every Debian-side rpi-* source pulled KEY="bookworm main", including the ones
serving trixie, forky and sid -- two of them are even named for a suite they
did not pull. archive.raspberrypi.com now publishes bookworm (oldstable),
trixie (stable) and forky (testing), so trixie and later images have been
getting oldstable packages:

  raspberrypi-sys-mods   bookworm 20250930~bookworm   trixie 1:20260914
  raspi-utils            bookworm 20251002-1~bookworm trixie 20260626-1
  python3-libcamera      bookworm 0.5.2+rpt20250903   trixie 0.7.2+rpt20260817
  firmware-brcm80211     bookworm 1:20240709-2        trixie 1:20260519-1
  bluez                  bookworm 5.66-1              trixie 5.82-1.1

This is also the root cause behind armbian/build#10827: the sudoers rule
/etc/sudoers.d/010_pi-nopasswd is shipped by the bookworm build of
raspberrypi-sys-mods and is already gone from the trixie build. The images
carry it only because they mirror the wrong suite.

Split the three affected sources per release rather than widening one: the
existing file keeps serving bookworm, a new -trixie sibling serves
trixie:forky:sid. forky and sid go to trixie because upstream's forky suite
holds three packages (binutils-source, gcc-16-source, gdb-source) and none of
ours.

raspi-gpio is left out of the trixie glob: upstream retired it in favour of
the raspi-utils tools and it does not exist in that suite. It stays available
for bookworm.

rpi-libraspberrypi-bin-{trixie,forky} are deliberately NOT changed --
libraspberrypi-bin and libraspberrypi0 exist only in bookworm, so pointing
them at trixie would mirror nothing. Both now say so in a comment, since the
next person to read this will otherwise "fix" them.

Verified every rpi-* source against the live indexes it now points at, both
architectures: each glob resolves to real packages, nothing resolves empty.

Signed-off-by: Igor Pecovnik <igor@armbian.com>
@igorpecovnik
igorpecovnik merged commit abd348f into main Sep 27, 2026
12 checks passed
@igorpecovnik
igorpecovnik deleted the rpi-archive-suite-mapping branch September 27, 2026 05:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant