[elbe-devel] [PATCH v2] rfs: add key for local repository

[Manuel Traut]

newer apt versions (like in stretch) verify the signature of copy
repositories.

Error Updating rpcaptcache: W:GPG error: copy:/repo stretch InRelease: The
following signatures couldn't be verified because the public key is not
available: NO_PUBKEY DCE4316BFFF45EAD, E:The repository 'copy:/repo stretch
InRelease' is not signed.

Therefore add the key while entering the chroot and remove it on exit.

Signed-off-by: Manuel Traut <manut at linutronix.de>
---
 elbepack/rfs.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/elbepack/rfs.py b/elbepack/rfs.py
index cb72aba0..cbe43c01 100644
--- a/elbepack/rfs.py
+++ b/elbepack/rfs.py
@@ -78,6 +78,10 @@ class BuildEnv (object):
                             self.xml.text("project/suite"), self.path))
         self.cdrom_mount()
         self.rfs.__enter__()
+        self.log.chroot(self.rfs.path,
+                        'apt-key '
+                        '--keyring /etc/apt/trusted.gpg.d/elbe-localrepo.gpg '
+                        'add /repo/repo.pub')
         return self
 
     def __exit__(self, typ, value, traceback):
@@ -86,6 +90,8 @@ class BuildEnv (object):
         if os.path.exists(self.path + '/repo'):
             self.log.do("mv %s/repo %s/../" % (self.path, self.path))
             self.log.do("rm %s/etc/apt/sources.list.d/local.list" % self.path)
+        self.log.do("rm %s/etc/apt/trusted.gpg.d/elbe-localrepo.gpg" %
+                    self.path)
 
     def debootstrap(self):
 
-- 
2.20.1