From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6559169328210509824 X-Received: by 2002:a2e:8357:: with SMTP id l23-v6mr454447ljh.4.1527175616223; Thu, 24 May 2018 08:26:56 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a19:208b:: with SMTP id g133-v6ls2611197lfg.3.gmail; Thu, 24 May 2018 08:26:55 -0700 (PDT) X-Google-Smtp-Source: AB8JxZqyJ+f44dgIcXHPfvYg/JVDXnoOkFIZ/IA/obHqdjlbwlP6lb09xjdlEnww1kmGJypBZIOW X-Received: by 2002:a19:7907:: with SMTP id u7-v6mr345471lfc.33.1527175615639; Thu, 24 May 2018 08:26:55 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1527175615; cv=none; d=google.com; s=arc-20160816; b=HgVvL8zL83mkGRtkH6BVjULxRmxmXWLhF5GAe4TqaSJtskGz7DM8C8LuBQjLqIJXUj 5vtzdkydHdk2mC6FLlu3pwGLfNcm8TFWtFnPR2H4nGWjSMHeWKBPm1jwpxtsVJ5Ro1gX isAkHL6AR3WcFFypXkRgAI8aDk4g0zxAErPHQKGEIWvpzRDRv9/2tJCLiof12IH6ftMq cIcozadnLJYEKmqCFTxZRZD2RSdG0K3ipa68bYXwqDGjks12V5dB3ID2FK4+ihfxx+1a Q+Yg7NJfpihdjfMWngzjs49Uz2fYJNQ1XAkhjw/a3bJSspI/su1WDyuovPLKtuS9mTsd vSng== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:date:subject:cc:to:from:arc-authentication-results; bh=IDhovrAFcfdVgLzPqrPb68phyd1fAQ6DfRh0BTFGuoM=; b=iV18VoQiKdXAUhZg6DiO4trTKIE4TlHNZJe1WQeKOmcXq019XV0CF7ZhkthCIxxUtl nyQmKHypIS2lMFU9+MET4BbtLE7K6IFJrzQAcffTKUc1sqWmFF8PRRN280Z+pRG4lDck pyzSTrzoEz8shGFh2GktUyc0FZHJ13CCr6ueKGdsN7J79NJbvFl+FFSn074SqUxZuDVA bFKua97Jqel04f0g4aYFN/CAVeFDmOkRAVCwymp7IIKKU/XoP5WIm69Q7RY2fRYjJzCI Pa2KuAcE4yNAm/jMBjn96G/kVNF+lz6oyor7NYG6eI1JNFvK0ab33sXRMPHVdm+PR35j B2UA== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Return-Path: Received: from thoth.sbs.de (thoth.sbs.de. [192.35.17.2]) by gmr-mx.google.com with ESMTPS id j8-v6si949289ljh.3.2018.05.24.08.26.55 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 24 May 2018 08:26:55 -0700 (PDT) Received-SPF: pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) client-ip=192.35.17.2; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of henning.schild@siemens.com designates 192.35.17.2 as permitted sender) smtp.mailfrom=henning.schild@siemens.com Received: from mail3.siemens.de (mail3.siemens.de [139.25.208.14]) by thoth.sbs.de (8.15.2/8.15.2) with ESMTPS id w4OFQsxw018789 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 24 May 2018 17:26:54 +0200 Received: from md1pvb1c.ad001.siemens.net (md1pvb1c.ad001.siemens.net [139.25.68.40]) by mail3.siemens.de (8.15.2/8.15.2) with ESMTP id w4OFQs5r007182; Thu, 24 May 2018 17:26:54 +0200 From: Henning Schild To: isar-users@googlegroups.com Cc: Alexander Smirnov , Henning Schild Subject: [PATCHv2 1/2] isar-apt: Mark repo as trusted in sources.list Date: Thu, 24 May 2018 17:26:51 +0200 Message-Id: X-Mailer: git-send-email 2.16.1 X-TUID: 0gRng1A36hZS Mark our own repository 'isar-apt' trusted in sources.list, and then drop the '--allow-unauthenticated' switch we used for apt-get so far. Signed-off-by: Henning Schild --- meta/classes/isar-bootstrap-helper.bbclass | 5 ++--- meta/recipes-devtools/buildchroot/files/build.sh | 3 --- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/meta/classes/isar-bootstrap-helper.bbclass b/meta/classes/isar-bootstrap-helper.bbclass index 4284d02..30f768c 100644 --- a/meta/classes/isar-bootstrap-helper.bbclass +++ b/meta/classes/isar-bootstrap-helper.bbclass @@ -11,15 +11,14 @@ setup_root_file_system() { shift shift PACKAGES="$@" - APT_ARGS="install --yes --allow-unauthenticated \ - -o Debug::pkgProblemResolver=yes" + APT_ARGS="install --yes -o Debug::pkgProblemResolver=yes" CLEANHOSTLEAK_FILES="${ROOTFSDIR}/etc/hostname ${ROOTFSDIR}/etc/resolv.conf" sudo cp -Trpfx \ "${DEPLOY_DIR_IMAGE}/isar-bootstrap-${DISTRO}-${DISTRO_ARCH}/" \ "$ROOTFSDIR" - echo "deb file:///isar-apt ${DEBDISTRONAME} main" | \ + echo "deb [trusted=yes] file:///isar-apt ${DEBDISTRONAME} main" | \ sudo tee "$ROOTFSDIR/etc/apt/sources.list.d/isar-apt.list" >/dev/null echo "Package: *\nPin: release n=${DEBDISTRONAME}\nPin-Priority: 1000" | \ diff --git a/meta/recipes-devtools/buildchroot/files/build.sh b/meta/recipes-devtools/buildchroot/files/build.sh index aa769e4..73c0889 100644 --- a/meta/recipes-devtools/buildchroot/files/build.sh +++ b/meta/recipes-devtools/buildchroot/files/build.sh @@ -20,9 +20,6 @@ export LANGUAGE=C # 2) we add -y to go non-interactive install_cmd="apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y" -# Allow unauthenticated feeds -install_cmd="${install_cmd} --allow-unauthenticated" - ( # Lock-protected because apt and dpkg do not wait in case of contention flock 42 || exit 1 -- 2.16.1