From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6654236089293733888 X-Received: by 2002:a1c:e90c:: with SMTP id q12mr324192wmc.10.1549468519528; Wed, 06 Feb 2019 07:55:19 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a1c:e1c4:: with SMTP id y187ls290981wmg.8.gmail; Wed, 06 Feb 2019 07:55:19 -0800 (PST) X-Google-Smtp-Source: AHgI3IacuyQydA3DLrjJWTcQJEmVKvNqKyUV/6Y1DblFNnh7iQ7RDdqwvkJabK7zVvEVwkH/9i0B X-Received: by 2002:a7b:c849:: with SMTP id c9mr259488wml.5.1549468519115; Wed, 06 Feb 2019 07:55:19 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1549468519; cv=none; d=google.com; s=arc-20160816; b=MNnLP8m0q2rdovQEUVCtbhMXtkPC0Mucmj8pKInM4Z0IPQkwQorf9ClWU7MkX5OowT Jlx05efa03QHe/kwbNOfBzBP/CHyB1Ylc0kmNdDuiTFLKw0+sILiH4zkPz4ipm2j0cMe ENFg3azh3NgeEZgfJnreQEyS50PJmeMSblUygl35QEr0ufMmQNPx5Y26WR3qaJfiRgzF 4dSvCblu+QpcsikQOsS4z92+IoDpHmSa7FO6xD6FqmWrqHxmsleg32hwjva4RxZNHwd2 5LnpBjLl6dOAQqL3joX/2pko2DL2/ESY2gddjgy3Z2eowTl7w9bhgt4wChhQDCGLKUfh 6OqQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:date:subject:to:from; bh=2pnm4FIlyZCwSvDmYAC7SR4bpw+zHqCUbzVDAan4n8A=; b=UKz9DbhqY3PKm70BvZQlBp8uIOdUHWTEXxD0j15QGvS3k5nOh+He3/C62l8GAz0xgN R/wsCIboy0eyL8m4vNF4Og/1MMLUo0O345196fqs/66xcYbzb/AryLusaK0C6znjcbc+ n8nhd7nnyQKU7G8EOVcAvd//9z0y5cpMx3G98fNkEpPpq6j58A+6dcZZT14RsXNlM8Ei J9n84KNdkKXBzVje+EhcJlu/dV30SnAi+Po1dKkjkipyxOr+OaOninBgX7iXJF9lxX7T mwJIWlrdxrukgcRvx30CUmGmwSl3ucZa7Zw5jbejw/9azZFrVGbrsUAsFKJh+Jzg3qsv 9w5A== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=mosipov@ilbers.de Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id z207si775513wmc.2.2019.02.06.07.55.18 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 06 Feb 2019 07:55:19 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=mosipov@ilbers.de Received: from azat.m.ilbers.de (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8) with ESMTPSA id x16Fsnrf017026 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 6 Feb 2019 15:55:16 GMT From: "Maxim Yu. Osipov" To: isar-users@googlegroups.com Subject: [PATCH v2 3/3] doc/user_manual: Describe gpg signing of local repo Date: Wed, 6 Feb 2019 15:54:48 +0000 Message-Id: <20190206155448.7289-1-mosipov@ilbers.de> X-Mailer: git-send-email 2.11.0 X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: xrFmtq1LnDBz Signed-off-by: Maxim Yu. Osipov Signed-off-by: Baurzhan Ismagulov --- doc/user_manual.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/doc/user_manual.md b/doc/user_manual.md index ebc31c6..680ef9b 100644 --- a/doc/user_manual.md +++ b/doc/user_manual.md @@ -728,6 +728,16 @@ Cache upstream debian packages to reduce time for further downloads and to be ab ### Solution + - Signing of local repo (optional) + +By default, the local caching repo is not gpg signed. If you want to share it in a trusted way, you may sign it. +To do that, install `gpg` in your build environment, import the public and private keys, +and provide the path to the public key in `conf/local.conf`, e.g.: + +``` +BASE_REPO_KEY = "file://"' +``` + - Trigger creation of local apt caching Debian packages during image generation. ``` @@ -755,5 +765,4 @@ bitbake multiconfig:qemuarm-stretch:isar-image-base ### Limitation -So far the local base-apt repo is not gpg signed. Files fetched with the `SRC_URI` protocol "apt://" are not yet cached. -- 2.11.0