[buildd-tools-devel] Bug#760832: Bug#760832: sbuild-createchroot does not honour --keyring=""

[Mattia Rizzolo]

On Thu, Dec 24, 2015 at 01:05:29AM +0100, Johannes Schauer wrote:
> Control: tag -1 + patch
> 
> > Passing --keyring="" does not actually prevent signature downloading/checking, despite sbuild-createchroot(8) indicating:
> > > Set to an empty string to disable signature checking.
> > 
> > root at porterbox:~# sbuild-createchroot precise /var/lib/schroot/chroots/precise-amd64/ --keyring="" http://mirror.local/ubuntu
> > mkdir /var/lib/schroot/chroots
> > mkdir /var/lib/schroot/chroots/precise-amd64/
> > I: SUITE: precise
> > I: TARGET: /var/lib/schroot/chroots/precise-amd64
> > I: MIRROR: http://repo/
> > I: Running debootstrap --arch=amd64 --variant=buildd --verbose --include=fakeroot,build-essential --components=main --resolve-deps precise /var/lib/schroot/chroots/precise-amd64 http://mirror.local/ubuntu
> > I: Retrieving Release
> > I: Retrieving Release.gpg
> > E: Failed getting release signature file http://mirror.local/dists/precise/Release.gpg
> > E: Error running debootstrap at /usr/sbin/sbuild-createchroot line 200.
> 
> yup, somehow the documentation documented something that was never implemented.
> The following patch should fix the issue:

this is really a debootstrap thing.

> +push @args, "--no-check-gpg" if $conf->get('KEYRING') eq "";

be aware debootstrap added this during this spring, and e.g. jessie does
not have it, and there will choke badly.
(I had to remove that option to the default debootstrap options set to
backport the newer pbuilder, which does so)

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  http://mapreri.org                              : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20151224/0d944d5b/attachment.sig>