From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6559169328210509824 X-Received: by 2002:a2e:8086:: with SMTP id i6-v6mr722576ljg.14.1527868360134; Fri, 01 Jun 2018 08:52:40 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a2e:8087:: with SMTP id i7-v6ls1578411ljg.7.gmail; Fri, 01 Jun 2018 08:52:39 -0700 (PDT) X-Google-Smtp-Source: ADUXVKJCz8lYjYECKPB5rBq0D/XP9Bj69PDeB+ANUPJTUrphpVtSrwrXRsYytIILXplz3lgpFvsn X-Received: by 2002:a2e:4612:: with SMTP id t18-v6mr722771lja.12.1527868359583; Fri, 01 Jun 2018 08:52:39 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1527868359; cv=none; d=google.com; s=arc-20160816; b=VIoxKZu9totLBRMQgv5hzhZlqGN+lwV3GxrkCs0sXYqBUlkthMxO65KPBnO/Eiz7ws iDBUEwqdcTklisDw+3RyFsyinv03uj/q6OFkRQFtSBgz6IckOpqWX7uz4tm1RWBYPl0t 60ubCHQmDwNiW77v9mePEJutJMhiHZZKt8eCR/uos7DvZxbbR3L/0+D1PkOFep53+VOB 7lixcnNZ7HwVRNo7ZbLHq78xP85wMOvjkZcZ1Toy1VlTBsqxHqEow3RJeXLqKrFrVrVc HSgiCt18aeoe8KreZwkeZNGAmpOFrU30EuygAxIgogtMySj+xITymXXA6JwJJohjnSwz yyBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:organization:from:references:cc:to :subject:arc-authentication-results; bh=ufhtGsZBHYbMTg9QszIvng/araue1df8dodu3NNb4/A=; b=OHDsJ+FhM+lmgun8KOZvCRHHrUU7CB2u5tysd5Rf826nXxSRB8OuCDwV/6Zqv4oZ8W YLQ+EZ+Ql2QXQ37kyHJkoBbAouYT/3LWjCX1OkPdE21JXkv03ooZczX57B6iuJVDsgqU zje7KKyPJt9aoYLBH0aPZ37QIcqrAWAMhalMbPhzKiUkDxqS87GVUN7JXg10TcbCSe/c 667Q9wXSW53Tz82qwvnqEpwI3RVM889JDdDBDkGTiTXR0jTRi41Rei94/nocAZ5ahs3D uIUNF9V8SJlFlsfRVb/JkHOZey7L+ZDwjEXSgFYNXH1STkig0MD6oeKrVEA2vq2G1mg9 JuUw== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.62.211 as permitted sender) smtp.mailfrom=mosipov@ilbers.de Return-Path: Received: from aqmola.ilbers.de (aqmola.ilbers.de. [85.214.62.211]) by gmr-mx.google.com with ESMTPS id i26-v6si1925197ljj.2.2018.06.01.08.52.39 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 01 Jun 2018 08:52:39 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.62.211 as permitted sender) client-ip=85.214.62.211; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: best guess record for domain of mosipov@ilbers.de designates 85.214.62.211 as permitted sender) smtp.mailfrom=mosipov@ilbers.de Received: from [192.168.50.163] (d51A48A80.access.telenet.be [81.164.138.128]) (authenticated bits=0) by aqmola.ilbers.de (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id w51FqR15020531 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Fri, 1 Jun 2018 17:52:28 +0200 Subject: Re: [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list To: Henning Schild , isar-users@googlegroups.com Cc: Alexander Smirnov References: <20180524173104.0a9134e0@md1pvb1c.ad001.siemens.net> From: "Maxim Yu. Osipov" Organization: ilbers GmbH Message-ID: <9a8c7b13-2364-6f00-39e6-1e3da0ddf6bb@ilbers.de> Date: Fri, 1 Jun 2018 17:52:26 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <20180524173104.0a9134e0@md1pvb1c.ad001.siemens.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: bA1LN7oKnRxD On 05/24/2018 05:31 PM, Henning Schild wrote: > This first patch was missing in v1. Note this might collide with stuff > that Claudius has in the queue. Please merge if needed. Merged and applied to next, Thanks, Maxim. > The second patch was just rebased and the buster images in v2 use wic. > > Henning > > Am Thu, 24 May 2018 17:26:51 +0200 > schrieb Henning Schild : > >> Mark our own repository 'isar-apt' trusted in sources.list, and then >> drop the '--allow-unauthenticated' switch we used for apt-get so far. >> >> Signed-off-by: Henning Schild >> --- >> meta/classes/isar-bootstrap-helper.bbclass | 5 ++--- >> meta/recipes-devtools/buildchroot/files/build.sh | 3 --- >> 2 files changed, 2 insertions(+), 6 deletions(-) >> >> diff --git a/meta/classes/isar-bootstrap-helper.bbclass >> b/meta/classes/isar-bootstrap-helper.bbclass index 4284d02..30f768c >> 100644 --- a/meta/classes/isar-bootstrap-helper.bbclass >> +++ b/meta/classes/isar-bootstrap-helper.bbclass >> @@ -11,15 +11,14 @@ setup_root_file_system() { >> shift >> shift >> PACKAGES="$@" >> - APT_ARGS="install --yes --allow-unauthenticated \ >> - -o Debug::pkgProblemResolver=yes" >> + APT_ARGS="install --yes -o Debug::pkgProblemResolver=yes" >> CLEANHOSTLEAK_FILES="${ROOTFSDIR}/etc/hostname >> ${ROOTFSDIR}/etc/resolv.conf" >> sudo cp -Trpfx \ >> "${DEPLOY_DIR_IMAGE}/isar-bootstrap-${DISTRO}-${DISTRO_ARCH}/" >> \ "$ROOTFSDIR" >> >> - echo "deb file:///isar-apt ${DEBDISTRONAME} main" | \ >> + echo "deb [trusted=yes] file:///isar-apt ${DEBDISTRONAME} main" >> | \ sudo tee "$ROOTFSDIR/etc/apt/sources.list.d/isar-apt.list" >>> /dev/null >> echo "Package: *\nPin: release n=${DEBDISTRONAME}\nPin-Priority: >> 1000" | \ diff --git >> a/meta/recipes-devtools/buildchroot/files/build.sh >> b/meta/recipes-devtools/buildchroot/files/build.sh index >> aa769e4..73c0889 100644 --- >> a/meta/recipes-devtools/buildchroot/files/build.sh +++ >> b/meta/recipes-devtools/buildchroot/files/build.sh @@ -20,9 +20,6 @@ >> export LANGUAGE=C # 2) we add -y to go non-interactive >> install_cmd="apt-get -o Debug::pkgProblemResolver=yes >> --no-install-recommends -y" -# Allow unauthenticated feeds >> -install_cmd="${install_cmd} --allow-unauthenticated" >> - >> ( >> # Lock-protected because apt and dpkg do not wait in case of >> contention flock 42 || exit 1 > -- Maxim Osipov ilbers GmbH Maria-Merian-Str. 8 85521 Ottobrunn Germany +49 (151) 6517 6917 mosipov@ilbers.de http://ilbers.de/ Commercial register Munich, HRB 214197 General Manager: Baurzhan Ismagulov