As stated at http://http.debian.net/

 - the advantages of
http.debian.net over cdn.debian.net are for example:

* Mirrors whose copy is not in /debian (e.g. /pub/debian)
* Immediate effect on database changes (no DNS propagation lag)
* Lower chance of inconsistency
* Faster downloads (when APT is used, via parallel downloads)

Acked-by: Alexander Wirt <formorer@grml.org>
Acked-by: Evgeni Golov <evgeni@grml.org>

When running grml-debootrap over ssh like
  ssh root@grml grml-debootstrap ...
the password promt for the root user would fail, as you cannot stty
without a tty. The user should actually have called
  ssh -t root@grml grml-debootstrap ...
which would have allocated a TTY and all would have worked.

Display a warning to the user and fall back to displaying the entered
password when he continues to use grml-debootstrap w/o a TTY.

Closes: issue1200

Thanks: Evgeni Golov <evgeni@grml.org> for review and improving

It could be supported by any live system, but currently only Grml
provides it, so clarify that.

Thanks: Evgeni Golov <evgeni@grml.org> for review + improving

This will be confusing once Debian/wheezy is the current stable version
of Debian, so let's avoid making it more confusing than necessary. :)

it was broken since commit cbf40a49

it was broken since commit cbf40a49

Debian ISOs do not include the (non-free) firmware-linux meta-package.
As this meta-package just pulls in firmware-linux-free and
firmware-linux-nonfree, let's install firmware-linux-free by hand, so
it will be installed even when firmware-linux is not available.

Dynamically determine the correct kernel package name by
checking if the package exists. This allows bootstrapping from a
Debian ISO which, depending on the release, only contains the
linux-image-2.6-$ARCH or the linux-image-$ARCH meta-package.

Thanks to Ulrich Dangel for the initial patch and the great discussion!

Closes: issue1206

When bootrapping from an ISO or a local mirror, these are bind-mounted
into the chroot. After the bootstraping process, there is nothing
that would bind-mount them again, leaving useless entries in the
chroot's sources.list.

pass --no-check-gpg to debootstrap
pass --allow-untrusted to aptitude

previously the ISO codepath was never executed as MIRROR was always set
and thus -n "$MIRROR" was never false

do NOT unset MIRROR in the ISO case so that the resulting chroot has a
proper mirror configured

Without this package base ACPI events such as the power button
aren't handled, which is annoying for virtual machines handled
by management tools.

As noted in http://gsocdebian.wordpress.com/2012/06/06/dm_mod/

+ also fixed minor typo
+ synced dialog and text output order (release, hostname, mirror)

This makes debugging failing bootstrapping easier...

Restumbled upon it again during a discussion with Carsten Hey <carsten@debian.org>
regarding #670106

When deploying Debian/squeeze from Debian/wheezy it fails with:

| Release signed by unknown key (key id AED4B06F473041FA)

and as Ubuntu provides grml-debootstrap in universe but its
/etc/apt/trusted.gpg doesn't include Debian's repos keys it also
fails there.  As soon as
/usr/share/keyrings/debian-archive-keyring.gpg is available we
don't have to take care of it, so just drop the additional code
and deprecate the --insecure cmdline option and SECURE config
file option and instead depend on the debian-archive-keyring
package.

Quoting bugreport:

| [...] I found an issue which renders
| every preconfigured BOOTPARAMS for vmfiles useless.
|
| Near the end of grml-debootstrap the grub config is changed to boot in
| virtual environments. Unfortunately the whole line is replaced to
| root=/dev/sda1 and each parameter that was previously set is gone by
| then.
|
| See attached a diff that just replaces the root device string.

Thanks: Conny Seidel <conny.seidel@amd.com> for bugreport + patch

Thanks: Christian Hofstaedtler for the bugreport

This entry causes udev not to be loaded on current Debian Wheezy.

Closes: #670074