INC=$INC,gnat,gprbuild,acpid,acpi-support-base,libldns-dev,libunbound-dev
INC=$INC,dnsutils,libsoup2.4-dev,ca-certificates,unzip,libsystemd-dev
INC=$INC,python3,python3-setuptools,python3-dev,python3-pip,apt-transport-https
-INC=$INC,libjson-c-dev,libxslt1-dev,libapache2-mod-wsgi-py3,iptables-dev
-INC=$INC,libxerces-c-dev,libgcrypt20-dev,traceroute
+INC=$INC,libjson-c-dev,libxslt1-dev,libapache2-mod-wsgi-py3
+INC=$INC,libxerces-c-dev,libgcrypt20-dev,traceroute,iptables
+case "$BASEIMGSUITE" in
+bullseye)
+ INC=$INC,libiptc-dev
+ ;;
+*)
+ INC=$INC,iptables-dev
+ ;;
+esac
case "$BASEIMGSUITE" in
jessie)
INC=$INC,libahven4-dev,libxmlada5-dev,libgmpada5-dev
INC=$INC,libahven7-dev,libxmlada-schema8-dev,libgmpada8-dev
INC=$INC,libalog4-dev,dbus-user-session
;;
+bullseye)
+ INC=$INC,libahven9-dev,libxmlada-schema10-dev,libgmpada10-dev
+ INC=$INC,libalog6-dev,dbus-user-session
+ # workaround for dependency issue gdb -> libsource-highlight4v5 -> virtual
+ # package (libboost-regex1.74.0-icu67), which debootstrap can't resolve (#878961)
+ INC=$INC,libboost-regex1.74.0
+ ;;
*)
echo_warn "Package list for '$BASEIMGSUITE' might has to be updated"
;;
done
case "$BASEIMGSUITE" in
-buster)
+buster|bullseye)
log_action "Switching from iptables-nft to iptables-legacy"
execute_chroot "update-alternatives --set iptables /usr/sbin/iptables-legacy" 0
execute_chroot "update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy" 0
execute_chroot "dnssec-signzone -K /etc/bind -o org. /etc/bind/db.org" 0
execute_chroot "dnssec-signzone -K /etc/bind -o . /etc/bind/db.root" 0
- for service in "apache2 slapd bind9"
+ # on bullseye, enabling via bind9 doesn't work, while disabling does, so
+ # use named there. on the other hand, older releases don't have named
+ # service files (systemctl returns 0 even if files are not found)
+ for service in apache2 slapd bind9 named
do
execute_chroot "systemctl enable $service" 0
done