From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6559169328210509824 X-Received: by 2002:a1c:a950:: with SMTP id s77-v6mr963492wme.27.1527175866797; Thu, 24 May 2018 08:31:06 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:8c4e:: with SMTP id o75-v6ls3699488wmd.12.gmail; Thu, 24 May 2018 08:31:06 -0700 (PDT) X-Google-Smtp-Source: AB8JxZp54RQ//59b1cSpdg9ilW8uI397iBX0OZ5sQDZnS9jnfz6ewvg4bYdOcDap5374ZNP2IDDv X-Received: by 2002:a1c:e701:: with SMTP id e1-v6mr1014554wmh.32.1527175866394; Thu, 24 May 2018 08:31:06 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1527175866; cv=none; d=google.com; s=arc-20160816; b=dJQbsxseC+rw3H7V4ZQXmsd9r2+t/8n82rgnTikDWk2JUME5Cs1Xi+6jnDb0/prMJc mwiPXTEXJaEq+kkDi/RNuX7iyk3IL94/+mm4NlKmT3qyZlhqN4ssU9N7M3UiSJqA99qy oci5iTfRrKsDJRHykScxto48BNdE6e/flNxAVJtPvGBZNdzKAR18CNheMuiA638WjtJQ GV2LzCWeBu0j5gtOWPGREe1HVpGUBEEgnIHQHreXcCQDbF32nq+8y5akr2+w9PNptVAL +oWBjfCvbK0hfdTWVuVXNh5bPMrSwDaOd5ozYmtKqbOs/i+BdmWoPPb/3N3YRN2fvGYd oe2w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:subject:cc:to:from:date:arc-authentication-results; bh=KJOLBpEZLDSD1MVggwgDiQJxSmt/bY5lvrM6mPjwUN4=; b=PPK0WtmMwJGgc4BnX7giSKpu7xYCy26PxgPR0q7QIx5Yh/9+VLqv7Z2WqJ76FkdccN UuSJq3Y82oi93ERsWjazcL/HHRjF6mH6tuNpRIWZKiW31vcQYTe7nIegE/6mCv1s/4NO OQJW4V2eV/bgrmaOF745xMa66+7eDvHei8KJhflR5f1YyvPqaVaZG++Uk7Z0awg0uZ9Y Ikz+jxh9399a/asczOHwYAWKj4h22J/fAe2EXto3Vck75z29TXZKcljtcy+F/TGNDO5Z 0ZmyIXmrpl6SecbnehLZ/h2Jn9N/WRt/HIy2vH9TO3frSLfmonCQdXriroA8dC42FN5I IJRg== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Return-Path: Received: from thoth.sbs.de (thoth.sbs.de. [192.35.17.2]) by gmr-mx.google.com with ESMTPS id z11-v6si705430edh.4.2018.05.24.08.31.06 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 May 2018 08:31:06 -0700 (PDT) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) client-ip=192.35.17.2; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Received: from mail2.siemens.de (mail2.siemens.de [139.25.208.11]) by thoth.sbs.de (8.15.2/8.15.2) with ESMTPS id w4OFV524006331 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 24 May 2018 17:31:05 +0200 Received: from md1pvb1c.ad001.siemens.net (md1pvb1c.ad001.siemens.net [139.25.68.40]) by mail2.siemens.de (8.15.2/8.15.2) with ESMTP id w4OFV5dt008268; Thu, 24 May 2018 17:31:05 +0200 Date: Thu, 24 May 2018 17:31:04 +0200 From: Henning Schild To: Cc: Alexander Smirnov Subject: Re: [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list Message-ID: <20180524173104.0a9134e0@md1pvb1c.ad001.siemens.net> In-Reply-To: References: X-Mailer: Claws Mail 3.15.0-dirty (GTK+ 2.24.31; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-TUID: v6G836BAI0Rp This first patch was missing in v1. Note this might collide with stuff that Claudius has in the queue. Please merge if needed. The second patch was just rebased and the buster images in v2 use wic. Henning Am Thu, 24 May 2018 17:26:51 +0200 schrieb Henning Schild : > Mark our own repository 'isar-apt' trusted in sources.list, and then > drop the '--allow-unauthenticated' switch we used for apt-get so far. > > Signed-off-by: Henning Schild > --- > meta/classes/isar-bootstrap-helper.bbclass | 5 ++--- > meta/recipes-devtools/buildchroot/files/build.sh | 3 --- > 2 files changed, 2 insertions(+), 6 deletions(-) > > diff --git a/meta/classes/isar-bootstrap-helper.bbclass > b/meta/classes/isar-bootstrap-helper.bbclass index 4284d02..30f768c > 100644 --- a/meta/classes/isar-bootstrap-helper.bbclass > +++ b/meta/classes/isar-bootstrap-helper.bbclass > @@ -11,15 +11,14 @@ setup_root_file_system() { > shift > shift > PACKAGES="$@" > - APT_ARGS="install --yes --allow-unauthenticated \ > - -o Debug::pkgProblemResolver=yes" > + APT_ARGS="install --yes -o Debug::pkgProblemResolver=yes" > CLEANHOSTLEAK_FILES="${ROOTFSDIR}/etc/hostname > ${ROOTFSDIR}/etc/resolv.conf" > sudo cp -Trpfx \ > "${DEPLOY_DIR_IMAGE}/isar-bootstrap-${DISTRO}-${DISTRO_ARCH}/" > \ "$ROOTFSDIR" > > - echo "deb file:///isar-apt ${DEBDISTRONAME} main" | \ > + echo "deb [trusted=yes] file:///isar-apt ${DEBDISTRONAME} main" > | \ sudo tee "$ROOTFSDIR/etc/apt/sources.list.d/isar-apt.list" > >/dev/null > echo "Package: *\nPin: release n=${DEBDISTRONAME}\nPin-Priority: > 1000" | \ diff --git > a/meta/recipes-devtools/buildchroot/files/build.sh > b/meta/recipes-devtools/buildchroot/files/build.sh index > aa769e4..73c0889 100644 --- > a/meta/recipes-devtools/buildchroot/files/build.sh +++ > b/meta/recipes-devtools/buildchroot/files/build.sh @@ -20,9 +20,6 @@ > export LANGUAGE=C # 2) we add -y to go non-interactive > install_cmd="apt-get -o Debug::pkgProblemResolver=yes > --no-install-recommends -y" -# Allow unauthenticated feeds > -install_cmd="${install_cmd} --allow-unauthenticated" > - > ( > # Lock-protected because apt and dpkg do not wait in case of > contention flock 42 || exit 1