From: Uladzimir Bely <ubely@ilbers.de>
To: isar-users@googlegroups.com
Subject: Re: [PATCH] meta-isar: Add local ubuntu-focal public key
Date: Wed, 12 Apr 2023 19:22:03 +0300 [thread overview]
Message-ID: <2657096.vuYhMxLoTh@hp> (raw)
In-Reply-To: <20230407052838.24924-1-ubely@ilbers.de>
In mail from Friday, 7 April 2023 08:28:38 +03 user Uladzimir Bely wrote:
> When debootstrapping Ubuntu in signed mode we need a local key
> taken from official Ubuntu repository, similar to RaspiOS.
>
> This makes debootstrapping more strict and additionally allows to use
> other debootstrapping utilities (like mmdebstrap).
>
> Signed-off-by: Uladzimir Bely <ubely@ilbers.de>
> ---
> Debootstrap log before the patch:
>
> ```
> I: Running command: debootstrap --verbose --variant=minbase
> --include=locales --arch=amd64
> --components=main,restricted,universe,multiverse focal
> /build/tmp/work/ubuntu-focal-amd64/isar-bootstrap-target/1.0-r0/rootfs
> http://archive.ubuntu.com/ubuntu /usr/share/debootstrap/scripts/gutsy W:
> Cannot check Release signature; keyring file not available
> /usr/share/keyrings/ubuntu-archive-keyring.gpg I: Retrieving InRelease
> I: Retrieving Packages
> ```
> Debootstrap log after the patch:
>
> ```
> I: Running command: debootstrap --verbose --variant=minbase
> --include=locales,gnupg
> --keyring=/build/tmp/work/ubuntu-focal-amd64/isar-bootstrap-target/1.0-r0/d
> istro-keyring.gpg --arch=amd64
> --components=main,restricted,universe,multiverse focal
> /build/tmp/work/ubuntu-focal-amd64/isar-bootstrap-target/1.0-r0/rootfs
> http://archive.ubuntu.com/ubuntu /usr/share/debootstrap/scripts/gutsy I:
> Retrieving InRelease
> I: Checking Release signature
> I: Valid Release signature (key id F6ECB3762474EDA9D21B7022871920D1991BC93C)
> I: Retrieving Packages
> ```
>
> meta-isar/conf/distro/ubuntu-focal.conf | 5 +++
> meta-isar/conf/distro/ubuntu.public.key | 53 +++++++++++++++++++++++++
> 2 files changed, 58 insertions(+)
Applied to next.
prev parent reply other threads:[~2023-04-12 16:22 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-04-07 5:28 Uladzimir Bely
2023-04-12 16:22 ` Uladzimir Bely [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2657096.vuYhMxLoTh@hp \
--to=ubely@ilbers.de \
--cc=isar-users@googlegroups.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox