Hello, On Mon, Jun 12, 2006 at 04:11:38PM +0200, Andreas Beckmann wrote: [...] > My local solution was the following: > - my gpg key is available in a package on the local mirror and the > postinst script installs this key with apt-key add > - patched modules/debian: > * install packages listed in [debian]keyrings= with --force-yes to > override the missing trust > * run apt-get update (to trust packages from the local archive) > * install the packages from [debian]install= which now may contain > local packages, too > The patch for rootstrap.conf, modules/debian is attached, but probably > needs more eyes and thoughts before it's applied.
why not just run apt-get with -y --force-yes _always_? Or optionally if say the force_untrusted option (to be implemented) is set to yes/true. It seems lees complicate for those who can't/don't want to set up a package with the key itself. [...] > diff -ur modules/debian modules.org3/debian > --- modules/debian 2006-06-12 16:06:58.000000000 +0200 > +++ modules.org3/debian 2006-06-12 04:42:40.000000000 +0200 > @@ -62,17 +62,11 @@ > install -m 644 /etc/hosts $TARGET/etc/hosts > fi > > -if test -n "$install" || test -n "$keyrings"; then > +if test -n "$install"; then > divert $TARGET/sbin/start-stop-daemon > chroot $TARGET mount -t proc proc /proc > chroot $TARGET apt-get update > - if test -n "$keyrings"; then > - chroot $TARGET apt-get -y --force-yes install $keyrings > - chroot $TARGET apt-get update Ooops, reverted patch :) -- mattia :wq! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

