Support primary_key in mirror tag

Linutronix / elbe

Embedded Linux Build Environment

https://elbe-rfs.org

GNU General Public License v3.0

165 stars 59 forks source link

Support primary_key in mirror tag #367

Open kempfsn opened 1 year ago

kempfsn commented 1 year ago

This adds support for a public key of the primary mirror. The primary key is used in the following places:

to verify the Release of the primary mirror for the initvm
to add the primary key to the keyring of the initvm
to call debootstrap with the primary key when building the rootfs
to call debootstrap with the primary key when creating a pbuilder

Resolves #104 and #365.

d4nuu8 commented 1 year ago

We are having exactly the same problem. I'm going to test this patch with our code base and give you feedback.

@bgermann Could you take a look at this, too?

d4nuu8 commented 1 year ago

Doesn't work for me unfortunately. But I'm not sure if it is our special corporate environment or the patch. APT is failing to install packages because of verification errors (e.g. busybox).

I'm missing the time to dig deeper here right now. Sorry.