On 2016-07-18, Vagrant Cascadian wrote: > It happens before apt is run, so only debootstrap has installed packages > at that point. I think ltsp-build-client uses: > > debootstrap --variant=minbase > > Perhaps this also doesn't install recommends. I'll do Some quick tests > to verify that.
So, "debootstrap --variant=minbase" doesn't pull in gnupg or gnupg2, but without specifying the minbase variant, it does pull in gnupg or gnupg2. I've also verified that copying the keys into the chroot's /etc/apt/trusted.gpg.d/ instead of using apt-key will work, but it requires that the keys be in the binary form, rather than ascii-armored keys. If we accept that limitation, it doesn't require any dependency on gnupg*, and we can just copy the specified keys into place, which is more elegant as far as I'm concerned. I believe this is supported Debian's oldstable, and fairly old versions of Ubuntu as well, so I'm inclined to go this route... live well, vagrant
signature.asc
Description: PGP signature
