Re: [PATCH 0/3] Signing local cache repo

["Maxim Yu. Osipov" <mosipov@ilbers.de>]

On 2/4/19 8:54 PM, Maxim Yu. Osipov wrote:
> Hello everybody,
> 
> By default the local caching repo is not gpg signed.
> This series adds the ability to sign it.
> 
> Prerequsite: we suppose that gpg is installed on your host system
> and a default key pair is generated.
> 
>   -  set `BASE_REPO_KEY` in `conf/local.conf` to `SRC_URI` of your public key,
> f.e. BASE_REPO_KEY = "file:///home/user/my_pub.key" and
> follow usual procedure of  creation of local apt repo caching:
> 
>   - bitbake -c cache_base_repo multiconfig:qemuamd64-stretch:isar-image-base
> 
>   - Set `ISAR_USE_CACHED_BASE_REPO` in `conf/local.conf`:
> 
> ```
> # Uncomment this to enable use of cached base repository
> #ISAR_USE_CACHED_BASE_REPO ?= "1"
> ```
>   - Remove build artifacts to use only local base-apt:
> 
> ```
> sudo rm -rf tmp
> 
> ```
>   - Trigger again generation of image (now using local caching repo):
> 
> ```
> bitbake multiconfig:qemuamd64-stretch:isar-image-base
> ```
> 
> Note: Depending on your gpg configuration you may be asked to provide a passphrase
> (if it is non empty).
> 
> Kind regards,
> Maxim.

Applied to the 'next' (v2 of patch #3  was applied)

Maxim.

> Maxim Yu. Osipov (3):
>    isar-bootstrap: Allow to set local keys in DISTRO_APT_KEYS
>    base-apt: Introduce BASE_REPO_KEY to sign local repo
>    doc/user_manual: Describe gpg signing of local repo
> 
>   doc/user_manual.md                                  | 10 ++++++----
>   meta/recipes-core/isar-bootstrap/isar-bootstrap.inc | 16 ++++++++++++++--
>   meta/recipes-devtools/base-apt/base-apt.bb          |  6 ++++++
>   3 files changed, 26 insertions(+), 6 deletions(-)
> 


-- 
Maxim Osipov
ilbers GmbH
Maria-Merian-Str. 8
85521 Ottobrunn
Germany
+49 (151) 6517 6917
mosipov@ilbers.de
http://ilbers.de/
Commercial register Munich, HRB 214197
General Manager: Baurzhan Ismagulov