[elbe-devel] [PATCH] elbe: updated: resolve gpg errors while installing updates on target

[Kurt Kanzenbach]

There is a problem: Elbe signs the base and update repositories with internally
generated gpg keys. However, these keys aren't transferred onto the target. This
results in apt errors while installing Elbe update packages on target.

This patch marks the base and update repositories as trusted, so that update
packages can be installed onto the target. But, you should sign your complete
update packages with a gpg key. Elbe does that for you by using finetuning rule
<updated>fingerprint</updated> and Elbe sign command.

This is more like a temporarily solution in order to make updating via Elbe
Updated actually work. We should consider moving the internal repositories keys
to target as well.

Signed-off-by: Kurt Kanzenbach <kurt at linutronix.de>
---
 elbepack/finetuning.py | 2 +-
 elbepack/updated.py    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/elbepack/finetuning.py b/elbepack/finetuning.py
index d8510ac..d209e1b 100644
--- a/elbepack/finetuning.py
+++ b/elbepack/finetuning.py
@@ -372,7 +372,7 @@ class UpdatedAction(FinetuningAction):
         r.finalize ()
 
         slist = target.path + '/etc/apt/sources.list.d/base.list'
-        slist_txt = 'deb file:///var/cache/elbe/repos/base '
+        slist_txt = 'deb [trusted=yes] file:///var/cache/elbe/repos/base '
         slist_txt += target.xml.text ("/project/suite")
         slist_txt += " main"
 
diff --git a/elbepack/updated.py b/elbepack/updated.py
index 037916c..3364c59 100644
--- a/elbepack/updated.py
+++ b/elbepack/updated.py
@@ -224,7 +224,7 @@ def update_sourceslist (xml, update_dir, status):
         status.log ('invalid repository, not added to sources.list')
         return
 
-    deb =  "deb file://" + update_dir + " " + xml.text ("/project/suite")
+    deb =  "deb [trusted=yes] file://" + update_dir + " " + xml.text ("/project/suite")
     deb += " main\n"
     fname = "/etc/apt/sources.list.d/"
     fname += fname_replace (xml.text ("/project/name")) + "_"
-- 
2.11.0