From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6519007876157014016 X-Received: by 10.46.125.3 with SMTP id y3mr442368ljc.4.1517838998523; Mon, 05 Feb 2018 05:56:38 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 10.25.151.15 with SMTP id z15ls814556lfd.14.gmail; Mon, 05 Feb 2018 05:56:38 -0800 (PST) X-Google-Smtp-Source: AH8x227poBjcYn36PdN3aP0SUTTjoAseyvr5ooHOGiSEcv+s//M1WruMBwFkRufXRFkt69KaxvAR X-Received: by 10.25.32.194 with SMTP id g185mr3626647lfg.13.1517838998033; Mon, 05 Feb 2018 05:56:38 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1517838997; cv=none; d=google.com; s=arc-20160816; b=Eol5GJmvUaXp1zF7rni3Vlj5fwodo+oJX7NyswOI7L7VeN9JkEJQl+y65ITCvVtyvu 5USVcuYH8TYER4BEVVq0Ji1ZR5tRH9OIAa09ZGdVmGLOGwkWeegQpAjiVuIoNVOJEl8C 6p/oZqEhqR+70I2lbnluP4vLj3/6KE2UTzPevpbMh5tnBFmD1s3QwOJt3CKqNQuC8U47 Wxd1OalG+H/FSSbWffQ6DrienpR3VphK4u4HCmu1JdIWi2RQrJOuYLmyDY0/aMyDY8ij /c521ylIsG0t1a9eUCaJcXj2I0SjNEMJ/4Z1hYSlaYJENKBAcFq+lRPjeAbOqyPD+HS6 qY8A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:content-language:in-reply-to:mime-version :user-agent:date:message-id:from:references:to:subject :arc-authentication-results; bh=b45YRD8YpjXyz14CFLDXc4EtTL92tml2Laq9p/O1mLg=; b=ezraP87XciTXIjvjrNJDNiIyb6G1dRBNiMAdUQkHMaphQn0AwpwyaOqKI1uP7QQ1oK q9o2U0A9dd5I2lLw4C+0QVb0NIcLdBIFjuVsZ8pmX30cV7eXK5LhrjtFyAS0+V+zZSAE lF5iTR+j5cA0qvWwMp7/1gwl4UlwAL/2ss2892zf57FeIIamrsrPhJuFCoyTiWa3HO0D Mffg/pF5NtTLSZvG4P8DeP6H316/nS/KdwvrvYOhj3jaqOpUcB5CFuyZ4xTKoZ6Itavw GjHEXojwYmDIitqMLlVSnP2UP2XdLN4cyvsw6exxbA0PYSoWR/2TgzPNZTZoP6RUlLOe QQhQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: best guess record for domain of asmirnov@ilbers.de designates 85.214.62.211 as permitted sender) smtp.mailfrom=asmirnov@ilbers.de Return-Path: Received: from aqmola.ilbers.de (aqmola.ilbers.de. [85.214.62.211]) by gmr-mx.google.com with ESMTPS id n90si563568lfi.1.2018.02.05.05.56.37 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 05 Feb 2018 05:56:37 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of asmirnov@ilbers.de designates 85.214.62.211 as permitted sender) client-ip=85.214.62.211; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: best guess record for domain of asmirnov@ilbers.de designates 85.214.62.211 as permitted sender) smtp.mailfrom=asmirnov@ilbers.de Received: from [10.0.2.15] ([188.227.110.165]) (authenticated bits=0) by aqmola.ilbers.de (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id w15DuXdA025089 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 5 Feb 2018 14:56:35 +0100 Subject: Re: [PATCH 5/5] build.sh: Force 'yes' for apt To: Jan Kiszka , isar-users@googlegroups.com, Cedric Hombourger References: <20180205095931.23903-1-asmirnov@ilbers.de> <20180205095931.23903-6-asmirnov@ilbers.de> <8c8a4660-46b4-fb5a-ec0f-b3dd885a19ba@siemens.com> From: Alexander Smirnov Message-ID: Date: Mon, 5 Feb 2018 16:56:28 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: <8c8a4660-46b4-fb5a-ec0f-b3dd885a19ba@siemens.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-TUID: l8elG5QvtbV9 On 02/05/2018 02:52 PM, Jan Kiszka wrote: > On 2018-02-05 10:59, Alexander Smirnov wrote: >> Sometimes the following error occurs with custom repo: >> >> After this operation, 84.0 kB of additional disk space will be used. >> WARNING: The following packages cannot be authenticated! >> libhello libhello-dev >> E: There are problems and -y was used without --force-yes >> >> This patch adds '--force-yes' option to be sure that no dialog will occur. >> >> Signed-off-by: Alexander Smirnov >> --- >> meta/recipes-devtools/buildchroot/files/build.sh | 2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) >> >> diff --git a/meta/recipes-devtools/buildchroot/files/build.sh b/meta/recipes-devtools/buildchroot/files/build.sh >> index b63a27e..06df1da 100644 >> --- a/meta/recipes-devtools/buildchroot/files/build.sh >> +++ b/meta/recipes-devtools/buildchroot/files/build.sh >> @@ -21,7 +21,7 @@ cd $1 >> # Notes: >> # 1) everything before the -y switch is unchanged from the defaults >> # 2) we add -y to go non-interactive >> -install_cmd="apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y" >> +install_cmd="apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y --force-yes" >> >> # Install all build deps >> mk-build-deps -t "${install_cmd}" -i -r debian/control >> > > For this, I'm in favor of Cedric's patch because it has a more targeted > solution for the problem and explains it clearly this way. > Tested this series with his patch, works good - so no objection from me. So my one dropped and this will be applied. > However, we likely have to tune this further in the future: > > - avoid that installation from all repos can be unauthenticated > - deal with key installation for 3rd-party repos, likely carrying the > keys in a meta layer > > Eventually, we will also have to deal with reproducing builds from repos > that have expired keys. > The issue for me here is traceability for such problems where we disable interactive interface. To get error message about unsigned repo I had to run 'apt-get' manually inside buildchroot, bitbake do_build.log was empty. :-( It would be nice to have some traceability without manual attempts to reproduce the issue. P.S. I just share my thoughts, no questions to this patch. Alex