[elbe-devel] [PATCH v2 0/9] Repository key handling
Bastian Germann
bage at linutronix.de
Mon Mar 6 12:47:37 CET 2023
There are problems with Elbe's Debian repository key handling.
First off, there are copies of expired key in the repository.
The apt-key tool that Elbe uses to install mirror keys
needs a gpg installation on the target, which we can avoid.
The only thing that we need as a replacement is an ascii-unarmor
implementation.
Additionally, advertise the elbe-archive-keyring package in the
installation instructions.
Changelog:
v2:
* typo fixes, collect John's R-b
* replace the CRC-ignoring python unarmor with gpg call
(which will not happen in target context)
* use absolute paths for /cdrom in chroot context
* prefix the raw-keyN.gpg files
Bastian Germann (9):
examples: Renew and centralize outdated public key
examples: x86_64-docker-elbe: Drop elbe-common
docs: quickstart: Introduce elbe-archive-keyring
docs: elbeoverview: Drop installation instructions
initvm: Replace <key> with <raw-key>
egpg: Implement unarmor_openpgp_keyring
Eliminate most apt-key calls
rfs: Drop gpg from debootstrap include
elbeproject: Install full gnupg for pbuilder again
docs/elbeoverview-en.txt | 29 -----
docs/quickstart.txt | 12 +--
elbepack/egpg.py | 16 ++-
elbepack/elbeproject.py | 4 +-
elbepack/init/default-init.xml | 102 ++++++++++++++++--
elbepack/rfs.py | 49 ++++-----
elbepack/virtapt.py | 18 ++--
.../{devel/mirrors.xml => mirrorkey.xml} | 43 +++-----
examples/x86_64-docker-elbe.xml | 68 +-----------
9 files changed, 166 insertions(+), 175 deletions(-)
rename examples/includes/{devel/mirrors.xml => mirrorkey.xml} (60%)
--
2.39.2
More information about the elbe-devel
mailing list