[elbe-users] How to add the key for debootstrap in elbe ?

[Simon Han]

Hi everyone,

I would like to add more detail about what I tried.

As I am trying build an image for raspberrrypi with ELBE.
It was failed at debootstrap stage because of no gpg key available
for raspbian.raspberrrypi.org in the package debian-archive-keyring.
1. Tried to add the key to local machine, it failed.
   It seems that the keyring(from package debian-archive-keyring) in initvm
   is used for debootstrap.
2. Tried to add keyring to initvm, and it works.
   But it seems this should not be the right way to use it, right?
3. Tried with <noauth /> instead, it failed because of the bug
   ("uninitialized variable keyring", which is fixed by commit
   "49eaa69fd Prevent uninitialized variable".
4. Tried patch the bugfix to initvm, it works, but it should not be
   the right way to used either, right?
5. Tried to create the initvm with --devel with running the elbe from
   a git clone containing the commit 49eaa69fd, but the bug is still
   existed with elbe in initvm.

To use the ELBE build image for raspberrrypi before next formal release,
is there any other solution?  Solutions with <noauth /> or no <noauth />
are welcome.

Thanks a lot!

BR
Simon

From: Simon Han
Sent: Wednesday, May 5, 2021 2:01 PM
To: elbe-users at linutronix.de
Subject: How to add the key for debootstrap in elbe ?

Hello everyone,

I try to build a raspberrypi image on Debian 10.
When I elbe submit with a xml which contains  <primary_host>raspbian.raspberrypi.org</primary_host> under <mirror>,
I got error like this:
testing at TestEnvironment-RevPi:~$ elbe initvm submit ./armhf-raspios.xml
Build started, waiting till it finishes
[INFO] Build started
[INFO] ELBE Report for Project armhf-raspios
Report timestamp: 20210504-082442
[CMD] reprepro --basedir "/var/cache/elbe/457137fc-0510-4128-a232-eb649a8ef3e0/repo" export buster
[CMD] mkdir -p "/var/cache/elbe/457137fc-0510-4128-a232-eb649a8ef3e0/chroot"
[INFO] Debootstrap log
[CMD] dpkg --print-architecture
[CMD] debootstrap --include="gnupg" --foreign --arch=armhf "buster" "/var/cache/elbe/457137fc-0510-4128-a232-eb649a8ef3e0/chroot" "http://raspbian.raspberrypi.org/raspbian"<http://raspbian.raspberrypi.org/raspbian%22>
I: Retrieving InRelease
I: Checking Release signature
E: Release signed by unknown key (key id 9165938D90FDDD2E)

With command gpg -no-default-keyring -keyring <gpg file> --import <key file>:
I added the key for Raspbian.raspberrypi.org to /usr/share/keyring/Debian-archive-keyring.gpg on the local machine,  I got the same result, it works not.
I added the key to initvm/.elbe-in/*.gpg,  I got the same result, it works not.

Can anybody give some hints about how to get it work ?
Should I do something to the vm machine? And how ?

BR
Simon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linutronix.de/pipermail/elbe-users/attachments/20210506/67efc13d/attachment.htm>