Bug#579028: pbuilder: installs untrusted packages without asking

[Vagrant Cascadian]

in pbuilder-satisfydepends-aptitude:    $CHROOTEXEC aptitude -y --without-recommends -o APT::Install-Recommends=false -o Aptitude::CmdLine::Ignore-Trust-Violations=true -o Aptitude::ProblemResolver::StepScore=100 install pbuilder-satisfydepends-dummy

i don't know if the other satisfydepends scripts have similar issues.

seems like the Aptitude::CmdLine::Ignore-Trust-Violations=true should at least
be configureable somehow, if not defaulting to false.

this appears to have been added quite some time ago. from the ChangeLog:

2007-04-22  Loic Minier <lool at dooz.org>

        * pbuilder-satisfydepends-aptitude: Pass
        Aptitude::ProblemResolver::StepScore and
        Aptitude::CmdLine::Ignore-Trust-Violations flags to aptitude to
        help resolve complex situations relatively common in experimental and
        support unsigned repositories like we do for apt-get.

so it's obviously intentional...

live well,
  vagrant