From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 27 Nov 2024 08:15:18 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-ed1-f59.google.com (mail-ed1-f59.google.com [209.85.208.59]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 4AR7FIv3011788 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 27 Nov 2024 08:15:18 +0100 Received: by mail-ed1-f59.google.com with SMTP id 4fb4d7f45d1cf-5cff4d2d7ddsf4531819a12.1 for ; Tue, 26 Nov 2024 23:15:18 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1732691713; cv=pass; d=google.com; s=arc-20240605; b=UZc3L/MqAAh3fZ0w2/4auSi3ZgDSxE4Nqji0Ghn9uOueIUwLpHvxPYenBE11Jq3C/P lpZTLRX1dsnYHDke3N+gDaJdpTroqLIyseF1R0iP1eiu+wp3M6Xdp+IP9SEh/ysSboNK w9x+oxe5aaQuJADsgew+KHlqqbPL0o+U2o6SecgKn8oQs+O9l9pjxgxs/S3c7C3KWiKV pdFEkolzuYD49yZVC0pNv6WdGfAjZzRqzJMstg/2NMOcVK/ccKkUIxwZEdL1wmj15/9K vDoG+Z0WUn87prp/sVxBfE0MADH7rEqcZPEu0pG+RWdod1ak/MgkTXWuUr6qI4crFV/Z UnTw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:dkim-signature; bh=OJT70gGcs6sCpMOfk3Xp6JO0cE1Vy7TALR9M3xrsHQY=; fh=qWax2Vq+hgDR7utYOAPwGTOtb5JOSs/6oHlGF+4Qg+U=; b=RsD8lX4xcdPHqzBIrTlo8ZtsEBRZD9Cd6l2k480xcn/KJahI27dq7bMFMRknlivHoz 0KzMjGgBMPJ46ciRt1ARv5p6S30cJL7CYG9w2oUttDNq3VDDeK4kA3lR6deBzxIOlkGG 8H3mpSkSBLljyBznkSIaEiUKWet/qTD7tBtOb4IP98ktwN/0zHHcNtkfUriT8OXvtKQZ 1N9DCNFpuoPAOCB/QgjN83ze7Q+tzUvoJs2EPX/BIKetJSq67QxQBLCpt1fOhVSQZAtX GFwEDywE6rc94/GW+glgk12AeM57og2vuuTPU28b6QhK8WDodu9i0sq+74sUubhkiTCb eZpQ==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1732691713; x=1733296513; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:in-reply-to:from:content-language:references:cc :to:subject:user-agent:mime-version:date:message-id:sender:from:to :cc:subject:date:message-id:reply-to; bh=OJT70gGcs6sCpMOfk3Xp6JO0cE1Vy7TALR9M3xrsHQY=; b=Zq86K0v7/8wzIa7DI8KYXlUcPRYNdEbG1sdge7bGcJhuw2/9mlnM4DtWbhZy3qTFnC ixt7hUTLXIWkRFjAMVfpcV0hDsI/4VcfswrtE970fp/WU3/l2eB44BisVIbaxC1+bbyA V9cgG4upWmFIkjN1xr2+SOA022U64JC7hRSLCAn4occvSKlNFCaIKH/g56dVOVC74n1l HmDrA2iq7nzJh5jx86gTXcgCru3o0P8OM/nlsXCRoFhM68lzJuvG3Ep/2i9Nc4AVw/hu xBuStMtDSW3ZvlrfQIhPKDrMVGgWKHX0pbOqc/y3+aXu5YBqWilIjFMP9JvpfkU6PJuy F+sw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1732691713; x=1733296513; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:in-reply-to :from:content-language:references:cc:to:subject:user-agent :mime-version:date:message-id:x-beenthere:x-gm-message-state:sender :from:to:cc:subject:date:message-id:reply-to; bh=OJT70gGcs6sCpMOfk3Xp6JO0cE1Vy7TALR9M3xrsHQY=; b=inTXXUu5Q/pouO3r0aOma7TNM/nkuvl6EY4ldPM9dXTs9ZVJrxkwF2LYPVx6PZrLa0 UuNUXwOdkALYDQg+harVaxzmmOMfiAJuBScGac61s6huh8oDky9CJgsEFFV6Q9G+sxoP Txm8iIQfD6yVqm/2FgKr7da5Mnq0Wg0xbM8FVFuIzgUztyYO4OcbFm/Rhb16eugSlrQL Qi27sex3w6orspbnQv74yTvEbXu2HWisn5POQjbsVqCwWaA4EGa7k4TcNVa+Tazedq8k UAhQ7nJNqIH/yNOD//G9By4gegRvZIbDnejewXxLD2IAMSr6LrSr2RKsRON2zNFuwj7L tR7g== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCXBLnneHgSVnP9wesTMZqEIhNUIwz/bkMsmwmVOWMJ8nW5suLKu6aAzrOLA/w1pQTZ5j5fT@ilbers.de X-Gm-Message-State: AOJu0YyL7bEd/kwrFAGB42aRTaT5HtKn3qFmIU1MrpvEPqBqDH4O2JMK eu5CooWcCrZT2nrN9Gi/M368PNB5F1h4w4zIhodvDuiISnm2d/Xe X-Google-Smtp-Source: AGHT+IEPGdqr3k7WOSKVt1ufhisRvVCLI8TPbjahif7Ofjg4ZhrxTpxsUqHuq2kD0Ip6Aev0NHKT7A== X-Received: by 2002:a05:6402:26cf:b0:5d0:8f25:24ff with SMTP id 4fb4d7f45d1cf-5d08f252625mr31830a12.14.1732691712221; Tue, 26 Nov 2024 23:15:12 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:6402:1c98:b0:5cf:d4cb:86ab with SMTP id 4fb4d7f45d1cf-5d08f18b808ls16879a12.1.-pod-prod-06-eu; Tue, 26 Nov 2024 23:15:10 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCWFooNlTah0rSUP5Y3wF0/qPJU4Y6A7+/v2gvissGvAzIkLiASE4PjevIbvaVWuocm5jVcsW+HpHK7k@googlegroups.com X-Received: by 2002:a17:906:1ba9:b0:aa5:4672:663b with SMTP id a640c23a62f3a-aa581062a73mr107899066b.55.1732691710149; Tue, 26 Nov 2024 23:15:10 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1732691710; cv=none; d=google.com; s=arc-20240605; b=F++HBGezOiFKAd8zjihGpP9o/klPhw+lOg4+1soJARZ9kYlgr+4eE5qCs7vWJ0uZvG H9d7ao6NRNfnTlvKtgILI0FEvfLX7NINMEdgDoZH/RHxjiZ/vDSq0lwOPXjbApp6l5Ye D4cMwJMx42nzj3NrkDRnrEoQSXD9+rEzxP8XrXcxOp6HtToYFRwdNipEJxGPXLHNRYJs kVxIQnYML5+/xNuwkqCKc4mzbtSkTEQOC7dTzMKOzrOgux9/pP3bwLWR7eKLX1YMkkOv NQtO4f1U+XeoO0BvT+kVVNF5gocgXiEHdlB+41Y1isz3D3wO+QgntwKr79fwbKVMTgRX hTtA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id; bh=UUFEq3e8ggNXKQDQZEjVhp0IUUI1VlgPKtwfmtURUf0=; fh=oj2Lw3hN0xAF1UllTKVHI9r/7a2eBqx72zyDCjayfJ0=; b=h4ojh0rMRhwA8t974CEK5r3CpB3o2LBQjEIF9ZuqBCzIaYD0UgZi/kJrJ86iC1NYgQ ik9Jfn6uFVG8JgjvMwk26jyQFvJK3lRUxGGdTV2bxUnf1BZ3E0dulsO56l8siOnOLT19 f2Mp+6eXWBnZGxjdkg74/JHA1RMYPO34TpATgO78GbSXwYnwK7phwqc9x1Rs/sExr/a1 jRXiVzZBRKcMwJd/hcK3xUp7ZJuu/9qzrixGxiku0D4Bm29yDg/JuHNrPFupzSYLR3uO lBGuDDOdsj2evXRuo1PlGB7DJ3rpIe1uEsHjyYF7nYzkZwdrt4rNRkbSXiRCGaT5Lnql HK8w==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id a640c23a62f3a-aa51ba3f84bsi17147666b.1.2024.11.26.23.15.10 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Tue, 26 Nov 2024 23:15:10 -0800 (PST) Received-SPF: pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [127.0.0.1] (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 4AR7F8jm011781 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 27 Nov 2024 08:15:09 +0100 Message-ID: <249f873e-c7aa-4ca6-a507-dc8c11f58263@ilbers.de> Date: Wed, 27 Nov 2024 09:15:07 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH 1/1] fix: include ca-certificates in mmdebstrap if needed To: Felix Moessbauer , isar-users@googlegroups.com Cc: jan.kiszka@siemens.com References: <20241126141210.2004080-1-felix.moessbauer@siemens.com> Content-Language: en-US, ru-RU From: Anton Mikanovich In-Reply-To: <20241126141210.2004080-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8"; format=flowed X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: amikan@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of amikan@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=amikan@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: 2+b2W+y4UKOt 26/11/2024 16:12, 'Felix Moessbauer' via isar-users wrote: > In case we have apt URLs with https, we also need the ca-certificates > package. While that is not needed in mmdebstrap itself (as it uses the > host packages), it will be needed in the later rootfs install tasks like > sbuild-chroot and image install. Otherwise these tasks will fail due to > certificate errors. > > For now, I copied over the logic from the old isar-bootstrap file, but > we might want to unify this. Also, I did not copy the gnupg part as I'm > unsure if that is needed. > > Signed-off-by: Felix Moessbauer > --- > I'm wondering how that was not noticed earlier. It literally breaks > ALL Ubuntu builds against snapshot mirrors. > > Best regards, > Felix Moessbauer > Siemens AG Hello Felix, Thanks for that fix. It's all about changes between mmdebstrap versions of different distros. Original development of this implementation was done when bullseye still was using as host distro. And mmdebstrap in bullseye was handling https inside URIs itself: >If any mirror contains a https URI, then the packages apt-transport-https and ca-certificates will be installed inside the chroot. But it turns out this logic was changed in bookworm version of mmdebstrap: >If you specify a https or tor MIRROR and you want the chroot to be able to update itself, don't forget to also install the ca-certificates package, the apt-transport-https package for apt versions less than 1.5 and/or the apt-transport-tor package using the --include option, as necessary. So we should do it manually now. And probably cover snapshot mirrors by CI to avoid such a regression later. -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/249f873e-c7aa-4ca6-a507-dc8c11f58263%40ilbers.de.