public inbox for isar-users@googlegroups.com
 help / color / mirror / Atom feed
* [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list
@ 2018-05-24 15:26 Henning Schild
  2018-05-24 15:26 ` [PATCHv2 2/2] conf: Add support for new debian distro "buster" Henning Schild
  2018-05-24 15:31 ` [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list Henning Schild
  0 siblings, 2 replies; 10+ messages in thread
From: Henning Schild @ 2018-05-24 15:26 UTC (permalink / raw)
  To: isar-users; +Cc: Alexander Smirnov, Henning Schild

Mark our own repository 'isar-apt' trusted in sources.list, and then
drop the '--allow-unauthenticated' switch we used for apt-get so far.

Signed-off-by: Henning Schild <henning.schild@siemens.com>
---
 meta/classes/isar-bootstrap-helper.bbclass       | 5 ++---
 meta/recipes-devtools/buildchroot/files/build.sh | 3 ---
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/meta/classes/isar-bootstrap-helper.bbclass b/meta/classes/isar-bootstrap-helper.bbclass
index 4284d02..30f768c 100644
--- a/meta/classes/isar-bootstrap-helper.bbclass
+++ b/meta/classes/isar-bootstrap-helper.bbclass
@@ -11,15 +11,14 @@ setup_root_file_system() {
     shift
     shift
     PACKAGES="$@"
-    APT_ARGS="install --yes --allow-unauthenticated \
-              -o Debug::pkgProblemResolver=yes"
+    APT_ARGS="install --yes -o Debug::pkgProblemResolver=yes"
     CLEANHOSTLEAK_FILES="${ROOTFSDIR}/etc/hostname ${ROOTFSDIR}/etc/resolv.conf"
 
     sudo cp -Trpfx \
         "${DEPLOY_DIR_IMAGE}/isar-bootstrap-${DISTRO}-${DISTRO_ARCH}/" \
         "$ROOTFSDIR"
 
-    echo "deb file:///isar-apt ${DEBDISTRONAME} main" | \
+    echo "deb [trusted=yes] file:///isar-apt ${DEBDISTRONAME} main" | \
         sudo tee "$ROOTFSDIR/etc/apt/sources.list.d/isar-apt.list" >/dev/null
 
     echo "Package: *\nPin: release n=${DEBDISTRONAME}\nPin-Priority: 1000" | \
diff --git a/meta/recipes-devtools/buildchroot/files/build.sh b/meta/recipes-devtools/buildchroot/files/build.sh
index aa769e4..73c0889 100644
--- a/meta/recipes-devtools/buildchroot/files/build.sh
+++ b/meta/recipes-devtools/buildchroot/files/build.sh
@@ -20,9 +20,6 @@ export LANGUAGE=C
 #   2) we add -y to go non-interactive
 install_cmd="apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y"
 
-# Allow unauthenticated feeds
-install_cmd="${install_cmd} --allow-unauthenticated"
-
 (
     # Lock-protected because apt and dpkg do not wait in case of contention
     flock 42 || exit 1
-- 
2.16.1


^ permalink raw reply	[flat|nested] 10+ messages in thread
end of thread, other threads:[~2018-07-13 12:36 UTC | newest]

Thread overview: 10+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2018-05-24 15:26 [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list Henning Schild
2018-05-24 15:26 ` [PATCHv2 2/2] conf: Add support for new debian distro "buster" Henning Schild
2018-05-27 19:54   ` Alexander Smirnov
2018-06-07  9:53     ` Maxim Yu. Osipov
2018-06-25 12:44     ` Henning Schild
2018-06-25 12:47     ` [PATCH v3] " Henning Schild
2018-07-13 11:13       ` Maxim Yu. Osipov
2018-07-13 12:36         ` Jan Kiszka
2018-05-24 15:31 ` [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list Henning Schild
2018-06-01 15:52   ` Maxim Yu. Osipov

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox