Add apt-pinning for deb-multimedia.org packages

[ghost]

In order to improve our control about packages from deb-multimedia repository, we should increase priority of needed packages (eg: vlc, codecs) and decrease the global repository priority.

[boyska]

next step: understand what deb-multimedia is really important for. Build a new image without it and understand what we are really lacking.

[ghost]

Below the list of installed packages from deb-multimedia:

paranoid@freepto:~$ cat /etc/freepto/build 
date=20150108
live-build_version=3.0.5-1
git_commit=7aa178ccd1bd5dae6e59f7cacfd9c9dd953cd270
git_tag=v1.0stable

paranoid@freepto:~$ aptitude search "?installed?origin(Unofficial Multimedia Packages)"
i   deb-multimedia-keyring          - GnuPG archive key of the deb-multimedia re
i A gstreamer0.10-ffmpeg            - FFmpeg plugin for GStreamer               
i A libaacplus2                     - AAC+ encoding library - runtime files     
i A libavcodec53                    - Library to encode decode multimedia stream
i A libavcodec54                    - Library to encode decode multimedia stream
i A libavformat53                   - FFmpeg file format library.               
i A libavformat54                   - FFmpeg file format library.               
i A libavutil51                     - FFmpeg avutil library - runtime files     
i A libdca0                         - decoding library for DTS Coherent Acoustic
i   libdvdcss2                      - Simple foundation for reading DVDs - runti
i A libfaac0                        - AAC audio encoder - library files.        
i A libfdk-aac0                     - Fraunhofer FDK AAC codec library.         
i A libmp3lame0                     - Shared libraries for MP3 encoding.        
i A libpostproc52                   - postproc shared libraries.                
i A libswscale2                     - FFmpeg video scaling library.             
i A libtag1-vanilla                 - audio meta-data library - vanilla flavour 
i A libtag1c2a                      - audio meta-data library                   
i A libtagc0                        - audio meta-data library - C bindings      
i A libvamp-hostsdk3                - helper library for Vamp hosts written in C
i A libvlc5                         - multimedia player and streamer library    
i A libvlccore5                     - base library for VLC and its modules      
i A libx264-124                     - x264 video coding library                 
i A libx264-132                     - x264 video coding library                 
i A libxvidcore4                    - High quality ISO MPEG4 codec library      
i   vlc                             - multimedia player and streamer            
i A vlc-data                        - Common data for VLC                       
i A vlc-nox                         - multimedia player and streamer (without X 
i A vlc-plugin-notify               - LibNotify plugin for VLC                  
i A vlc-plugin-pulse                - PulseAudio plugin for VLC                 
i   w32codecs                       - win32 binary codecs   

[boyska]

On Thu, May 07, 2015 at 01:29:53PM -0700, vinc3nt wrote:

Below the list of installed packages:

I checked all of them, and here is the result: most of those libraries are in jessie, too. Some of them are with a different (often more recent) version. Some are missing. These packages are missing

libaacplus2

Know nothing about it. What is it for? Is it important?

libdvdcss2

This is for css-protected DVD. Is it that much important?

w32codecs

according to debian wiki[1], the codecs contained here are not very useful.

gstreamer0.10-ffmpeg

odd: this is in wheezy and in sid, but not in jessie nor stretch

libx264-124 142 available libx264-132 142 available libswscale2 3 available libvlccore5 8 available libavutil51 54 available libavformat53 54 available libavformat54 54 available libavcodec54 54 available libavcodec53 56 available

This is missing, too, but it is pointless:

deb-multimedia-keyring

So we could:

• drop deb-multimedia entirely, and check that most use cases are still satisfied
• pin just the very specific packages that we need from that repository; this solution will make freepto stick closer to debian, but from the security point of view there is just no improvement from the current status

[1] https://wiki.debian.org/MultimediaCodecs#deb-multimedia.org

boyska

[ghost]

So we could:

• drop deb-multimedia entirely, and check that most use cases are still satisfied

I like this option. Let's build freepto without this repository.

vinc3nt

+-------------------------------------------------------------+ |GPG Id key: 4096R/DAA26AC4 2012-12-07 | |GPG Fingerprint: 19D8011C 81891778 7A1986DC 28E8567F DAA26AC4| |OTR Fingerprint: 86F3EE43 8A9340D2 FF92A828 81C84DC2 FEDD839E| +-------------------------------------------------------------+