Un mémo sur comment utiliser la commande proxmox-offline-mirror pour créer un miroir local pour les distributions Debian et Ubuntu.
Pour la création d’un miroir local Pour Proxmox, voir cet article : https://memo-linux.com/proxmox-offline-mirror-creer-un-miroir-local-pour-proxmox/
Pour la création d’un miroir local pour la distribution Debian, rien de compliqué car c’est intégré à la commande proxmox-offline-mirror :
proxmox-offline-mirror setup
Dans mon cas, j’ai éxécuté la commande proxmox-offline-mirror setup 3 fois pour avoir les 3 miroirs : Main repository, Security et Updates.
nano /usr/local/bin/sync-debian.sh
Connexion
#!/bin/bash
export ALL_PROXY="http://proxyx.local:PORT"
mirror_dir="/srv/mirrors/debian"
symlink_dir="/srv/mirrors/debian/latest"
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'debian_bookworm_main'
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'debian_bookworm_updates'
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'debian_bookworm_security'
if [ $? -eq 0 ]; then
for dir in "${mirror_dir}"/*; do
if [ -d "$dir" ]; then
dir_name=$(basename "$dir")
if [[ "$dir_name" != "latest" && "$dir_name" != "lost+found" ]]; then
latest_subdir=$(ls -td "$dir"/*/ | head -n 1)
if [ -n "$latest_subdir" ]; then
latest_subdir_name=$(basename "$latest_subdir")
if [ -e "${symlink_dir}/${dir_name}" ]; then
rm -f "${symlink_dir}/${dir_name}"
fi
ln -s "$latest_subdir" "${symlink_dir}/${dir_name}"
fi
fi
fi
done
echo "Done on ${symlink_dir}."
else
echo "Error."
fi
chmod +x /usr/local/bin/sync-debian.sh
sync-debian.sh
crontab -e
0 2 * * * /usr/local/bin/sync-debian.sh
A la date de publication de l’article, la commande proxmox-offline-mirror setup n’est pas opérationnelle pour créer un miroir local pour la distribution Ubuntu.
Ici, je choisis la distribution Ubuntu 24.04 LTS Noble.
mkdir -p /srv/mirrors/ubuntu/noble/{ubuntu_noble_main,ubuntu_noble_updates,ubuntu_noble_security,latest}
mkdir -p /srv/mirrors/ubuntu/noble/.pool
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys F6ECB3762474EDA9D21B7022871920D1991BC93C
gpg --export F6ECB3762474EDA9D21B7022871920D1991BC93C | tee /usr/share/keyrings/ubuntu-archive-keyring.gpg > /dev/null
/etc/proxmox-offline-mirror.cfg à la suite des autres miroirs :nano /etc/proxmox-offline-mirror.cfg
mirror: ubuntu_noble_main
architectures amd64
architectures all
base-dir /srv/mirrors/ubuntu/noble
ignore-errors false
key-path /usr/share/keyrings/ubuntu-archive-keyring.gpg
repository deb https://fr.archive.ubuntu.com/ubuntu noble main restricted universe multiverse
sync true
verify true
mirror: ubuntu_noble_updates
architectures amd64
architectures all
base-dir /srv/mirrors/ubuntu/noble
ignore-errors false
key-path /usr/share/keyrings/ubuntu-archive-keyring.gpg
repository deb https://fr.archive.ubuntu.com/ubuntu noble-updates main restricted universe multiverse
sync true
verify true
mirror: ubuntu_noble_security
architectures amd64
architectures all
base-dir /srv/mirrors/ubuntu/noble
ignore-errors false
key-path /usr/share/keyrings/ubuntu-archive-keyring.gpg
repository deb https://fr.archive.ubuntu.com/ubuntu noble-security main restricted universe multiverse
sync true
verify true
nano /usr/local/bin/sync-ubuntu.sh
#!/bin/bash
export ALL_PROXY="http://proxy.local:PORT"
mirror_dir="/srv/mirrors/ubuntu/noble"
symlink_dir="/srv/mirrors/ubuntu/noble/latest"
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'ubuntu_noble_main'
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'ubuntu_noble_updates'
proxmox-offline-mirror mirror snapshot create --config '/etc/proxmox-offline-mirror.cfg' 'ubuntu_noble_security'
if [ $? -eq 0 ]; then
for dir in "${mirror_dir}"/*; do
if [ -d "$dir" ]; then
dir_name=$(basename "$dir")
if [[ "$dir_name" != "latest" && "$dir_name" != "lost+found" ]]; then
latest_subdir=$(ls -td "$dir"/*/ | head -n 1)
if [ -n "$latest_subdir" ]; then
latest_subdir_name=$(basename "$latest_subdir")
if [ -e "${symlink_dir}/${dir_name}" ]; then
rm -f "${symlink_dir}/${dir_name}"
fi
ln -s "$latest_subdir" "${symlink_dir}/${dir_name}"
fi
fi
fi
done
echo "Done on ${symlink_dir}."
else
echo "Error."
fi
chmod +x /usr/local/bin/sync-ubuntu.sh
sync-ubuntu.sh
/etc/apt/sources.list.
cat /etc/apt/sources.list
# Ubuntu sources have moved to /etc/apt/sources.list.d/ubuntu.sources
nano /etc/apt/sources.list.d/ubuntu.sources
Types: deb URIs: http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_main Suites: noble Components: main restricted universe multiverse Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg Types: deb URIs: http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_security Suites: noble-security Components: main restricted universe multiverse Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg Types: deb URIs: http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_updates Suites: noble-updates Components: main universe restricted multiverse Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg
apt update
Hit:1 http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_main noble InRelease Hit:2 http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_security noble-security InRelease Hit:3 http://mirrors.local/ubuntu/noble/latest/ubuntu_noble_updates noble-updates InRelease Reading package lists... Done Building dependency tree... Done Reading state information... Done 89 packages can be upgraded. Run 'apt list --upgradable' to see them
crontab -e
0 3 * * * /usr/local/bin/sync-ubuntu.sh
Un mémo sur comment créer un serveur miroir local sous Debian.
Pour ce tuto, je ne vais pas utiliser apt-mirroir ni debmirror mais simplement la commande lftp et comme serveur web Nginx.
De plus, mon miroir local sera dédié pour les distributions et en versions stables de Debian, Ubuntu.
Alors pourquoi lftp et non rsync ? car tout simplemement le proxy local n’accepte que les ports 80, 443 et 21 en sortie.
apt update && apt full-upgrade -y
apt install lftp nginx -y
mkdir -p /srv/mirrors/{debian,ubuntu}
chown -R www-data:www-data /srv/mirrors chmod -R 755 /srv/mirrors
nano /usr/local/bin/sync-debian.sh
#!/bin/bash
# Variables
BASE_URL_DEBIAN="http://deb.debian.org/debian"
BASE_URL_SECURITY="https://security.debian.org/debian-security"
LOCAL_DIR="/srv/mirrors/debian"
SECTIONS=("bookworm" "bookworm-updates" "bookworm-security")
# Proxy configuration
export http_proxy="http://monproxy.local:8080"
export https_proxy="http://monproxy.local:8080:"
# Options pour lftp
LFTP_OPTS="mirror --parallel=4 --verbose=2 --delete"
# Boucle sur les sections principales (bookworm, bookworm-updates)
for SECTION in "${SECTIONS[@]}"; do
if [ "$SECTION" == "bookworm-security" ]; then
# Pour le dépôt de sécurité, utiliser une URL différente
echo "Synchronisation de $SECTION..."
lftp -c "$LFTP_OPTS $BASE_URL_SECURITY/dists/bookworm-security $LOCAL_DIR/dists/bookworm-security"
else
# Pour les autres sections, utiliser l'URL Debian principale
echo "Synchronisation de $SECTION..."
lftp -c "$LFTP_OPTS $BASE_URL_DEBIAN/dists/$SECTION $LOCAL_DIR/dists/$SECTION"
fi
done
echo "Synchronisation terminée."
chmod +x /usr/local/bin/sync-debian.sh
nano /usr/local/bin/sync-ubuntu.sh
#!/bin/bash
# Variables
BASE_URL_UBUNTU="http://archive.ubuntu.com/ubuntu"
BASE_URL_UBUNTU_SECURITY="http://security.ubuntu.com/ubuntu"
LOCAL_DIR="/srv/mirrors/ubuntu"
SECTIONS=("noble" "noble-updates" "noble-security")
# Proxy configuration
export http_proxy="http://monproxy.local:8080"
export https_proxy="http://monproxy.local:8080"
# Options pour lftp
LFTP_OPTS="mirror --parallel=4 --verbose=2 --delete"
# Boucle sur les sections principales (noble, noble-updates)
for SECTION in "${SECTIONS[@]}"; do
if [ "$SECTION" == "noble-security" ]; then
# Pour le dépôt de sécurité, utiliser une URL différente
echo "Synchronisation de $SECTION..."
lftp -c "$LFTP_OPTS $BASE_URL_UBUNTU_SECURITY/dists/noble-security $LOCAL_DIR/dists/noble-security"
else
# Pour les autres sections, utiliser l'URL Ubuntu principale
echo "Synchronisation de $SECTION..."
lftp -c "$LFTP_OPTS $BASE_URL_UBUNTU/dists/$SECTION $LOCAL_DIR/dists/$SECTION"
fi
done
echo "Synchronisation terminée."
chmod +x /usr/local/bin/sync-ubuntu.sh
crontab -e
0 2 * * * /usr/local/bin/sync-debian.sh 0 3 * * * /usr/local/bin/sync-ubuntu.sh
nano /etc/nginx/sites-available/mirrors
server {
listen 80;
server_name mirrors.local;
root /srv/mirrors;
index index.html;
location /debian/ {
alias /srv/mirrors/debian/;
autoindex on;
}
location /ubuntu/ {
alias /srv/mirrors/ubuntu/;
autoindex on;
}
}
ln -s /etc/nginx/sites-available/mirrors /etc/nginx/sites-enabled/
nginx -t
systemctl reload nginx
Il ne reste que la modification des fichiers sources.list sur l’ensemble des serveurs.
Pour ce faire, modifier l’url par l’IP du serveur miroir local pour tous les dépôts.
Afin de déployer les modifcations de chaque serveur, je vous propose d’utiliser Ansible :
ansible-playbook -i inventory.yml update_sources_grouped.yml
Les playbooks Ansible sont disponible ici -> https://github.com/freddL/playbook_add_mirror_local/
