Bug#836451: pbuilder: cdebootstrap: unrecognized option '--force-check-gpg'

[Sven Joachim]

On 2016-09-04 17:27 +0000, Mattia Rizzolo wrote:

> control: severity -1 minor
>
> On Sat, Sep 03, 2016 at 12:41:15PM +0200, Sven Joachim wrote:
>> Setting up a pbuilder chroot with cdebootstrap fails:
>> 
>> ,----
>> | # pbuilder create --debootstrap cdebootstrap 
>> | I: Distribution is sid.
>> | I: Current time: Sat Sep  3 12:33:51 CEST 2016
>> | I: pbuilder-time-stamp: 1472898831
>> | I: Building the build environment
>> | I: running cdebootstrap
>> | /usr/bin/cdebootstrap
>> | cdebootstrap: unrecognized option '--force-check-gpg'
>> | Try `cdebootstrap --help' for more information.
>> | E: cdebootstrap failed
>> | W: Aborting with an error
>> | I: cleaning the build env 
>> | I: removing directory /var/cache/pbuilder/build/18627 and its subdirectories
>> `----
>
> Well, then go change DEBOOTSTRAPOPTS too.
>
> That's currently not possible to do by the command line (as
> --debootstrapopts only *adds* flags to it).
> Would you find useful if --debootstrapots behaved like --debbuildopts
> where an empty string resets the variable?  Then you could do
>     pbuilder create --debotstrap cdebootstrap --debootstrapopts '' --debootstrapopts --variant=buildd
> without having to change pbuilderrc.
>
>
> Note that I don't consider this a bug, really.  I personally find
> --force-check-gpg quite a must and I am impressed we got without it for
> so long, so that's not going to go away.

This option makes no sense for cdebootstrap which verifies the Release
data by default (and has done so for a very long time, AFAIK), allowing
to override that with the "--allow-unauthenticated" option.

> I keep this bug open to understand whether a mean to reset
> DEBOOTSTRAPOPTS via cli is welcomed or not.

It would be welcome to set "--force-check-gpg" only for debootstrap and
remove it from DEBOOTSTRAPOPTS when using cdebootstrap.

>> This is particularly bad because debootstrap cannot currently be used
>> to create a sid chroot either (see #836446).  Oh well. :-(
>
> and cdebootstrap can?  :O interesting…

Yes.  Actually, after installing the Essential packages cdebootstrap
runs apt-get to install the rest, which is obviously better than
debootstrap's simplistic and error-prone dependency resolver.

Cheers,
       Sven