From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6658246660386193408 X-Received: by 2002:aa7:c6c9:: with SMTP id b9mr2223110eds.7.1550661792576; Wed, 20 Feb 2019 03:23:12 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a17:906:3555:: with SMTP id s21ls3822393eja.3.gmail; Wed, 20 Feb 2019 03:23:12 -0800 (PST) X-Google-Smtp-Source: AHgI3IZ3WaOLhRFRkVz5RnTGZ8Cq5vHAkWAJwWM7xy1uC6woPyaiFDPhXt3Y6dj7nAZD44pCSLg6 X-Received: by 2002:a17:906:584c:: with SMTP id h12mr2017155ejs.2.1550661792167; Wed, 20 Feb 2019 03:23:12 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1550661792; cv=none; d=google.com; s=arc-20160816; b=nfwmGpdTYmKdEzXp+12LtZ3P4/ULWSjx81zXDetzvU+ediV2HBOpEChAmYBb9whkPZ vHV8L+FwjlQP3fCmgbppCAgEqmnUUSX7sQQF5M435YmQoY2zCrChg1rCi9ebEFdvSH0c 4v+0q8BSwFlFAzfArwnbB1FkXQVovFTW/O0WdgOu/mUdofWMXo97Yvc51a78D5pTGupn x8cAN1VhjIJhW45faoKaTdCl252WWNFVgXiQcYiOB/WWJxDx/4CsuMx7d7EjsM29qInn 9RCKqME8yUCDF9SGiuzF12Rr56dwbBNzHURx/V4s1YrHGkJXZEZsC71TgBTjsrQ4uAsF HjEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from; bh=zb85iiE/fJrvC6ZDaw98JerqpMPrLkl/qNb8yQZfS2Y=; b=VkU2sYHjNvgRb/HD+uYOhFBkqfrDpvkVLnX3Q8cBXradHIKjXnxLeeh3+JWYjSpFcU nGx9uXiRxj9TduwLzDg9r0FaPinn+0dCjbE1qP6C1Ipz/E6DcG7Lyi1qG2+IagBlO6ef GSiWLS6D/F9K185ke2kXHvkwOBhYUCXWbRoYDpsCejBw18EmY9MxFeRA7uav08mzwFcG 03KHmdA2ceO6xmK54AsgpWacre9GdoZr1x+9Hl/hwqEAc3JAGb6eXGLnmR0+pWwKEVI2 8nY2mAQWXtcur17SkRkUeUBtGRm4pwCc5ig6Ae5PeANUOahRuyndyR6WMHIu68x5r4cx BK4A== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of andreas.reichel.ext@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=andreas.reichel.ext@siemens.com Return-Path: Received: from goliath.siemens.de (goliath.siemens.de. [192.35.17.28]) by gmr-mx.google.com with ESMTPS id c7si582691ejx.1.2019.02.20.03.23.12 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Feb 2019 03:23:12 -0800 (PST) Received-SPF: pass (google.com: domain of andreas.reichel.ext@siemens.com designates 192.35.17.28 as permitted sender) client-ip=192.35.17.28; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of andreas.reichel.ext@siemens.com designates 192.35.17.28 as permitted sender) smtp.mailfrom=andreas.reichel.ext@siemens.com Received: from mail3.siemens.de (mail3.siemens.de [139.25.208.14]) by goliath.siemens.de (8.15.2/8.15.2) with ESMTPS id x1KBNBRn004167 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK) for ; Wed, 20 Feb 2019 12:23:11 +0100 Received: from localhost.localdomain (golem.ppmd.siemens.net [139.25.69.17]) by mail3.siemens.de (8.15.2/8.15.2) with ESMTP id x1KBNBut023989; Wed, 20 Feb 2019 12:23:11 +0100 From: "Andreas J. Reichel" To: isar-users@googlegroups.com Cc: Andreas Reichel Subject: [PATCH 0/1] Fix remote key fetching apt keyring Date: Wed, 20 Feb 2019 12:21:32 +0100 Message-Id: <20190220112133.23122-1-andreas.reichel.ext@siemens.com> X-Mailer: git-send-email 2.20.1 In-Reply-To: <20190219162942.6bfb794b@md1za8fc.ad001.siemens.net> References: <20190219162942.6bfb794b@md1za8fc.ad001.siemens.net> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-TUID: WzVkY/RYkgxe From: Andreas Reichel Since my last mail was not answered, but this is an important topic, here is a patch that shows what the problem is. If we fetch the user apt key from remote, we need the basename, if we fetch it locally we need the absolute path... While this might not be the best way to fix this, it works as good as the rest of this code... At least it fixes Isar again up to adding the key to the keyring. But this still does not fix the next problem with the docker-ce key: | I: Running command: debootstrap --arch arm64 --foreign --verbose --variant=minbase --include=locales --components=main,contrib,non-free --keyring /build/build/tmp/work/debian-stretch-arm64/isar-bootstrap-target/apt-keyring.gpg stretch /build/build/tmp/work/debian-stretch-arm64/isar-bootstrap-target/rootfs http://ftp.debian.org/debian | I: Retrieving InRelease | I: Retrieving Release | I: Retrieving Release.gpg | I: Checking Release signature | E: Release signed by unknown key (key id EF0F382A1A7B6500) So something additionally must be done. Since I am not an expert on debian keyring/debootstrap and dpkg signing I will try to find a solution but maybe somebody has a good idea already? Andreas Reichel (1): Fix path to user gpg-keys meta/recipes-core/isar-bootstrap/isar-bootstrap.inc | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) -- 2.20.1