FIX: Install ca-certificates during bootstrap

RPi-Distro / pi-gen

Tool used to create the official Raspberry Pi OS images

BSD 3-Clause "New" or "Revised" License

2.52k stars 1.58k forks source link

FIX: Install ca-certificates during bootstrap #743

Closed mdsketch closed 6 months ago

mdsketch commented 6 months ago

Fixes #659 Same as #424 Can we fix this in the buster branch. I have cherry picked 40f67ce4bac65cb8f92a4a9ac72b05bc36ccedeb which is the fix in #424

XECDesign commented 6 months ago

Running buster is a security risk and I don't want to give the impression that we support it in any way.

mdsketch commented 6 months ago

@XECDesign except that Raspberry Pi foundation still supports it, and it is still receiving security updates. Therefore it is still a valid OS.

So you're telling me that you're saying it's valid, but then you're allowing the build pipeline to be broken?

XECDesign commented 6 months ago

It is getting security updates from Raspbian and Debian. The Raspberry Pi OS repo for Buster is not maintained at all. The last kernel/firmware update is from 20230509 and there won't be any other.