From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 02 Dec 2024 10:25:00 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-wr1-f62.google.com (mail-wr1-f62.google.com [209.85.221.62]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 4B29P0r5009156 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 2 Dec 2024 10:25:00 +0100 Received: by mail-wr1-f62.google.com with SMTP id ffacd0b85a97d-385df72fe19sf212862f8f.1 for ; Mon, 02 Dec 2024 01:25:00 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1733131495; cv=pass; d=google.com; s=arc-20240605; b=DEW7JarDFFOPkZCejwX3IZ06e6PUudT2swjYzvPiLGENQEnVgtdht1dVNVeDT48A+q R/Xw/ai2xDzk43TPWwdKnmmoIpfbXid2mTgGA0mAUltj+Cxw1DLCvTlsR/LD3bZZZM0A QBXQdL3rzZDCNlcJgcHdVALfK3QPEtrUkPMn7bXqNkcziQhmtPewVtvRL6+x3lA/9YET QYCwhhCxbTI1N92Aw/yX+jKYrHadyh7aUMWPkYGLSgWhYnJ/UAE72NHhi7Qhl3LPa1Yt RWQ1NlH1jzI8ModjwDha19pgNp0GG95darMfTs/J5myuAZxS3sEgqlpTpCdX/mQahmFw 6/Yg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version:user-agent :content-transfer-encoding:references:in-reply-to:date:to:from :subject:message-id:sender:dkim-signature; bh=980AfWMjj01muD4A9vRgKK+rfY/ZbfvUF55Bdngk2U8=; fh=h6i+BIG9LB8QaHx/mkpToeeSb3dVleUkiogoRTS+cz8=; b=KsSnEcb6jr8m66dPc2RVbMIkPuakCxERaRDu0mlM9KS05fn81+sP9l9S4hDo54YD/s me1Q0GNGzFP1bHeM1+pyAtZcXH/B3DphI7LZ6PmhMSdCLNFeJM8PiMRY3f0Fp7Bz5Fgl Y0ALwCKRmHt3G5iNMhF8hkfN+eV8mR/PZeSyRLOcMU5BpXzXqKqBJCqZ0VLqsbKao9z7 KAa1gg0EGifl5qV6cMtxkWUdfQOPVFSEX4ggysFojCjeMTgGS4xLYToeG5fvPZI/X+SZ EZ97kLjMrf5w/BWTKqX5AJyX+6zwQv7dR7Zjy7p08e+uXUDLyNMeY9Ll7g5otEuFMJ1J J/lg==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1733131495; x=1733736295; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:user-agent:content-transfer-encoding :references:in-reply-to:date:to:from:subject:message-id:sender:from :to:cc:subject:date:message-id:reply-to; bh=980AfWMjj01muD4A9vRgKK+rfY/ZbfvUF55Bdngk2U8=; b=EIogae6BGg3bpkjDSvenymN93y4Ipmug08Up6wdUjK1ZbFgX3f8/Nwu7WiX9IzAj4F R76CF1+ZE+a8rlwayshMnJpIqQBuHeT2JWD0wEGO9mtE7yEQG0m+yGsPGHKbIcbddIGR UguZN2TajMOpiRBFpEg5d5DLJOrT57TTSwQKROkYPz/7RmWZwiDSDIXG/rdeSgRIuBZ3 UlxDnqDFa2Qk/Hzf7wi+llX4ebAnEt00XKl+ONa38zDBi/wucLcTnm+TeFUngNDDNRq9 ev/nuV9PzRDHDwkbtkNotJoDwmij1Dr8YK0OC/Oj2uW6SFd9QmLBFOeMiUgv0SgACv5L 9QNQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1733131495; x=1733736295; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :user-agent:content-transfer-encoding:references:in-reply-to:date:to :from:subject:message-id:x-beenthere:x-gm-message-state:sender:from :to:cc:subject:date:message-id:reply-to; bh=980AfWMjj01muD4A9vRgKK+rfY/ZbfvUF55Bdngk2U8=; b=wKclqPc0tr/UdRO69pmqEP6U2HrZ0E+CCvpAlC55ocg1c0+8iCtlUFGjf7vD72/AsL jFNMR12yTI/2kqkSw0e0h9MGgT/4tAJeztt6vxcTlSr7VugPaah3KM1w1OrFwoW0Pl4B NBClUBTrPO51sUj+ufs3QJRmfmfCcz2tlejRo2a7OudkzZ2BfRH228W8/6vi00gaVWmj pwVAYMQZNMRQkVa76vEIZY0zSkK+wLCrdR0dYvJS5IdKCcmIV68Av32+pujKHMUUITAg UM2oHqjVqVYwzrh61gsGcLN8JfKPhnZ8WL/LGKe25ZCHXXDfokpvYpyc62a4AIFFBjhg gTcQ== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCXrmCsEO72SYlFwGvxmhCf06vZA6PE28bTO8ZnmDDegLm3TOUrnSMxu/nSh1xdwuIgujaeb@ilbers.de X-Gm-Message-State: AOJu0YxxhP/d3DaouUAUoWyme6plRBYtYfktmtoC1UxCoBT6peGbdHkO mndFzTlc4PtgKWGIdOywCNsTq+lwz1Ii4yfVqY/Y6vcWF5dtDdss X-Google-Smtp-Source: AGHT+IEcyzYzBtWWVszsuEqXLhnQp7dFZK1hInV0phBzCKH8QJCgtPCHhGW1QXJGC2Nv0g4kNU02Dw== X-Received: by 2002:a05:600c:198d:b0:434:a1e4:d32d with SMTP id 5b1f17b1804b1-434a9d4f18cmr75348845e9.0.1733131493997; Mon, 02 Dec 2024 01:24:53 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:600c:4f12:b0:434:a7f8:bf1f with SMTP id 5b1f17b1804b1-434afce5cbdls23260545e9.1.-pod-prod-08-eu; Mon, 02 Dec 2024 01:24:51 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCUcHnxLfGevq55fika3k1dbG3Pom05tTduKTL68eBiN1ddvaP8OYxw2STD/m+oozycbMeKY1QSjtJSF@googlegroups.com X-Received: by 2002:a05:600c:4e8b:b0:434:a59c:43c6 with SMTP id 5b1f17b1804b1-434a9df6a99mr174301085e9.26.1733131491578; Mon, 02 Dec 2024 01:24:51 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1733131491; cv=none; d=google.com; s=arc-20240605; b=i2sTaegoKzsyYzTGOsuspF1jWFkq2t6sAF3DCZ/w37G1Fc1JEvKDVNITAD+g0lfZ5K JTPEHzrbKw0kt8SHGULByPNn+G+j4Lr0d7bEigC7WJAB48LKD7+/PYXDc/Bgm7F82Mbn kUJHNdsBJji+NQs8DCecD0jlCcTU/4wOe898qs8fmA/Gwq2lnMpoPMtpLf/3fkIb5f5T ynyLmmhPYLveIbMY4mWGmvuT/7p73pWeraBYCfr/acktnVjKtYmMLZLTcsT79jfV1skS fmnkLHraaStbEnHoXtcRTPcLhxHtYJnRT3DwUqjwayYQ6GZ0fKLZRXIfeQwoEmXPS3GU dXgA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:to:from:subject:message-id; bh=Le83kRdpYlhXRjqfLfrJT+UK9ElZ/xoRfHisaBNdKvI=; fh=ez+yYIN2+t1/A1KtVD1essDQ6+anTTnZTbSXjuK9WaU=; b=ZTLa5aglIr0s7UWqeJt9bmfxbnDsXZftWlqwQFzNIaf+qj47+lefuzaIfOeZ3kAxZL bqDXfBW11DxW1td5d5q9NYQK/ifgxuU9I5g5eRrzre26xD1jXh5F0rGK7fY6ncddV9ob 2miym8uTq+DGZISyC+1vuO4iATcD22LR7m+tl6ClpupLm72F/A7RBdVEVwkFGiBy2Yaa z18dz+iw9MMZxx+Zc+olNBkcJ4DxVNiuy1MDmuPwGCaRvxV43K3vRqARZgZ4IgErm0Y6 9mhNQJjvSgUERi+h1eESbF1JOnCErdlh+J1GeYeLCYMzpmyDcnB3Aca2ly/nU02DaWGr 3Aog==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-434a972ab5fsi6057465e9.1.2024.12.02.01.24.51 for (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Mon, 02 Dec 2024 01:24:51 -0800 (PST) Received-SPF: pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) client-ip=85.214.156.166; Received: from [127.0.0.1] (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPSA id 4B29OmAb009142 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 2 Dec 2024 10:24:50 +0100 Message-ID: <3def2a3205c5850f19af0e3e4d2596804b51836c.camel@ilbers.de> Subject: Re: [PATCH 1/1] fix: include ca-certificates in mmdebstrap if needed From: Uladzimir Bely To: Felix Moessbauer , isar-users@googlegroups.com Date: Mon, 02 Dec 2024 12:24:48 +0300 In-Reply-To: <20241126141210.2004080-1-felix.moessbauer@siemens.com> References: <20241126141210.2004080-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.54.1 (by Flathub.org) MIME-Version: 1.0 X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-Original-Sender: ubely@ilbers.de X-Original-Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of ubely@ilbers.de designates 85.214.156.166 as permitted sender) smtp.mailfrom=ubely@ilbers.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-TUID: UmlK943hCB2c On Tue, 2024-11-26 at 15:12 +0100, 'Felix Moessbauer' via isar-users wrote: > In case we have apt URLs with https, we also need the ca-certificates > package. While that is not needed in mmdebstrap itself (as it uses > the > host packages), it will be needed in the later rootfs install tasks > like > sbuild-chroot and image install. Otherwise these tasks will fail due > to > certificate errors. >=20 > For now, I copied over the logic from the old isar-bootstrap file, > but > we might want to unify this. Also, I did not copy the gnupg part as > I'm > unsure if that is needed. >=20 > Signed-off-by: Felix Moessbauer > --- > I'm wondering how that was not noticed earlier. It literally breaks > ALL Ubuntu builds against snapshot mirrors. >=20 > Best regards, > Felix Moessbauer > Siemens AG >=20 > =C2=A0.../isar-mmdebstrap/isar-mmdebstrap.inc=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | 13 > +++++++++++++ > =C2=A01 file changed, 13 insertions(+) >=20 > diff --git a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc > b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc > index 1043f2d1..c8ea53ab 100644 > --- a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc > +++ b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc > @@ -12,6 +12,8 @@ inherit deb-dl-dir > =C2=A0FILESEXTRAPATHS:append =3D ":${LAYERDIR_core}/recipes-core/isar- > bootstrap/files" > =C2=A0 > =C2=A0DISTRO_BOOTSTRAP_BASE_PACKAGES =3D "locales,apt,usrmerge" > +DISTRO_BOOTSTRAP_BASE_PACKAGES:append:https-support =3D ",ca- > certificates" > + > =C2=A0BOOTSTRAP_TMPDIR =3D "${WORKDIR}/tempdir" > =C2=A0 > =C2=A0# Fix for /var/lib/apt/available while maybe-jessie-or-older hook d= o > not work > @@ -24,6 +26,17 @@ MMHOOKS:debian-buster ?=3D "${DPKG_HOOKS}" > =C2=A0 > =C2=A0DISTRO_BOOTSTRAP_KEYRING =3D "${WORKDIR}/distro-keyring.gpg" > =C2=A0 > +def get_distro_have_https_source(d): > +=C2=A0=C2=A0=C2=A0 return any(source[2].startswith("https://") for sourc= e in > generate_distro_sources(d)) > + > +def get_distro_needs_https_support(d): > +=C2=A0=C2=A0=C2=A0 if get_distro_have_https_source(d): > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 return "https-support" > +=C2=A0=C2=A0=C2=A0 else: > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 return "" > + > +OVERRIDES:append =3D ":${@get_distro_needs_https_support(d)}" > + > =C2=A0do_generate_keyrings[cleandirs] =3D "${WORKDIR}/trusted.gpg.d" > =C2=A0do_generate_keyrings[dirs] =3D "${DEBDIR}" > =C2=A0do_generate_keyrings[vardeps] +=3D "DISTRO_BOOTSTRAP_KEYS > THIRD_PARTY_APT_KEYS" > --=20 > 2.39.5 >=20 Applied to next, thanks. --=20 Best regards, Uladzimir. --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 3def2a3205c5850f19af0e3e4d2596804b51836c.camel%40ilbers.de.