I recently started working on a website project for a company that has their own server setup. It's a Debian system, and after a while I noticed ntp wasn't installed and the server was losing time. So, I set out to install ntp. I ran into a few problems with package keys not being signed, but I got around that by installing debian-archive-keyring. The server is still on Debian 6 instead of 7 and I figured it hadn't been updated in a long time.
However, the weird and possibly dangerous thing I noticed was that apt was installing new programs from stable. I haven't used Debian much, but shouldn't it be contacting oldstable or squeeze because it is still Debian 6? Or is there some magic that goes on where apt actually gets the updates that are appropriate for squeeze?
I'm quite sure it is Debian 6, since /etc/debian_version says:
This is my sources.list for apt:
# Debian packages for stable deb http://mirror.steadfast.net/debian/ stable main contrib # Uncomment the deb-src line if you want 'apt-get source' # to work with most packages. # deb-src http://mirror.steadfast.net/debian/ stable main contrib # Security updates for stable deb http://security.debian.org/ stable/updates main contrib
My main concern is that down the road I will run apt-get upgrade or apt-get dist-upgrade and very incompatible package updates will be loaded. Could this happen, and should I change the sources.list to oldstable or squeeze? Did I do a bad thing by already installing ntp and upgrading some packages for that? Or is this a normal setup?
Thanks in advance.