Am 09.07.21 um 12:30 schrieb Christian Teklenborg:
> Remove the Release.gpg and the InRelease file if noauth is given to
> prevent apt from checking the signature.
>
> Signed-off-by: Christian Teklenborg <chris at linutronix.de>
Side note: There may be a way to prevent debootstrap from downloading the signature files in the
first place but I also could not find any. The already used --no-check-gpg does not imply that.
Reviewed-by: Bastian Germann <bage at linutronix.de>
> ---
> elbepack/elbeproject.py | 11 +++++++++++
> 1 file changed, 11 insertions(+)
>
> diff --git a/elbepack/elbeproject.py b/elbepack/elbeproject.py
> index f4021ef3..8617d80f 100644
> --- a/elbepack/elbeproject.py
> +++ b/elbepack/elbeproject.py
> @@ -1000,6 +1000,17 @@ class ElbeProject:
> # pylint: disable=too-many-statements
> # pylint: disable=too-many-branches
>
> + # to workaround debian bug no. 872543
> + if self.xml.prj.has('noauth'):
> + inrelease = glob.glob("%s/var/lib/apt/lists/*InRelease" % self.chrootpath)
> + release_gpg = glob.glob("%s/var/lib/apt/lists/*.gpg" % self.chrootpath)
> + if inrelease:
> + system("rm %s;" % inrelease[0])
> + logging.info("Removed InRelease file!")
> + if release_gpg:
> + system("rm %s;" % release_gpg[0])
> + logging.info("Removed Release.gpg file!")
> +
> with target:
> # First update the apt cache
> try:
>