Re: [PATCH v2] isar-bootstrap: Run gpg-agent before starting apt-key

[Henning Schild <henning.schild@siemens.com>]

Am Wed, 20 Jan 2021 12:35:30 +0100
schrieb Baurzhan Ismagulov <ibr@radix50.net>:

> On Wed, Jan 20, 2021 at 12:04:57PM +0100, Henning Schild wrote:
> > It seems like a functional change. We did use the native agent
> > before and now never use it.  
> 
> This is a good point. Yes, we've focused on the CI and not on the
> interactive build. What do you mean by "native", is it the agent
> running on my host as my desktop user? If that is required, it would
> add some more complexity...

I was talking about an agent potentially already running on that host
under the user calling isar. (so i guess root)

> > But i guess the native agent is potentially still used i.e. when
> > building packages.  
> 
> This is also a good point. We need agent management, among other
> reasons, for clean unmounting of the filesystems. If the agent is
> started elsewhere, we should handle that, too. We used to
> dpkg-buildpackage -uc -us -- we'll have check that after this patch.

I would actually assume that all the sudo and chroot stuff would
automatically avoid accidental agent reuse from root on the host. But i
am not sure about it.

It could also be that the patch should just kill a potential agent in
the chroot with the command i suggested.

But as longs as its not understood where that problematic agent is
really coming from, i would refrain from proposing patches that are not
fully understood either.

Henning

> 
> With kind regards,
> Baurzhan.