From patchwork Fri Mar 6 16:02:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4960 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Mar 2026 17:03:19 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f63.google.com (mail-oo1-f63.google.com [209.85.161.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 626G3GaU027660 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Mar 2026 17:03:17 +0100 Received: by mail-oo1-f63.google.com with SMTP id 006d021491bc7-679f6f264cesf150985304eaf.2 for ; Fri, 06 Mar 2026 08:03:17 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1772812991; cv=pass; d=google.com; s=arc-20240605; b=KStEI7rdrI5JJfyVwXwIU09CIvC6SfFJLUj7E5odDv2h2eR+Wb9y6pp1PHKjo6ZRkm 0z1075VKXJELNToBtZuYBzlaMn5/hXVzOxW77/gYyGnhdw+WbC2y/eU5NCDQTQJLDkfE xYBN6Ex0mHWYggy4/v6CoVWta7DYIZeXcIkrqRuCx9RYIEeW7l4XVwCgHfaRoHBq+fRA S+fwh2fzj94MFNzXrsVdOTswXqTWX3Fq/ub9nseZCi9VJFFmmlYz4FQ8v7RwXlgT5549 6oAwRP1Z4oYKcILgu0z07IesAipj39TorveY4TkCIu0L8vTq2Frwl1W2rGAT6exlAqtD COLA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; fh=XE3m1UTnQ4uGjPMYd0cOPHO9/IWYTMcjMVcKpDUgCck=; b=Itb8HenGQDCnXL6AFc+OWu1LuU3sSns7rdvyEsri0daFo31Lfn/lI0GWnmKs3egoRq 1s9dZv/xPTbIaMLG6b3t0H32V7bX8tRiAmNtwEJwAjWp2qQglifTb0SLgXRrlW1pGQVX dwsrwS+CldyKFrEjzYvngYfoH7qwabB5JDJ/bMIW9vRSNFq18lFzEZJWmdA2BVcHaz9l 9se7TzvTtOMEFHGT1+Twbr8h4N087pM3ImWRLRPB5mK52D+gh/ihL3AZ8MDPye1vEjJT VYSGmDetEmuI3h6tzwaencpSSPP40pI/yBIqS8+Rcxt8jK4AL0iLXqgwe8K3GZfQgCFr 4oSA==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1772812991; x=1773417791; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; b=oL57ZC2iXVy82fbCrLOg7dSokSE4VmGiUcBoIcEWaQ8a15LyCrpBlWnH7eT/Ns7Yel Cr7OJZ4AD3xzqYVV//OVSBpTPbREas7k0f53RsSyrNRLNaEiraD+yXde/YqX/5Wo/GaO sjT0HPYIHm1E00DPWQXUuZBBynNHELM9czZ8Ds+BHoFNqq2gOHpUCNmN1ZJRYcgRxMWW fQ0G+v8lDkeKe2dRfEVOv1L9d6uu61btl5srHZcNDGSE1QuJ2ABfYg4VM+rGstmXZilX fDroo5h1EZki2zqFOhuu9WLq7qpu5JJxoShx2t0P9gxpNibDynLdDUXUa26TGk3PE1H4 2rkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772812991; x=1773417791; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; b=BruzTJB6L51QNALVdgsf9FsBh0Z6EzVb5MRw/woFy6l5w3mp0hT1eyHOhXrK8XJpwe QH1Qk0hHpNCIBa20LEE2Dsy7wKJX+IEE3AIjYAXiJxVBtXeTKS6y0a6VHdGPkmgNA18i /wXzuQKKcPupZJ+UgEoXp4jaLiGPJKTtETW3YSUCXsXtIfz3S/UPQ7r+5JfKLbcScUT3 M6rIusYqqikkzUaHLPnPRxne7wWxPYgS8nc5o8kn6B2uIqM5d1TSlWw7ZCoj44ZHtBa+ KR+TDGC9EkI504BsIcCy5kZmw4EG3b8mFhVnKTmqFDFew9Vbo7jLqXqhnNfBp+xJqtlu EC7Q== X-Forwarded-Encrypted: i=3; AJvYcCUV6M+MGO9sVIgLmq9Fq9sYHf2SM7soRe+qlX+FsMBWMT4GXyHxZzFJUX5qHC0uWuvjb7Svfgk=@isar-build.org X-Gm-Message-State: AOJu0YzCIAXZhGsH6ueuMzR6bJs8HTEmjeprnMQV3eZkF8yyuY1zL9ai /9siyKHg3cn4wzoYPPjzvol11Lf9f5zUW3dkGhUBAF90l6178vD3qmnf X-Received: by 2002:a05:6820:308a:b0:659:9a49:904d with SMTP id 006d021491bc7-67b9bca17aemr1675373eaf.24.1772812990657; Fri, 06 Mar 2026 08:03:10 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+HmpVcpjJi/okaj+weHCgw+i2UzM+Fd4SyopUpF+d+o+w==" Received: by 2002:a05:6820:151a:b0:66a:9dfd:bbff with SMTP id 006d021491bc7-67b92fec292ls1766606eaf.2.-pod-prod-09-us; Fri, 06 Mar 2026 08:03:08 -0800 (PST) X-Received: by 2002:a05:6820:308a:b0:659:9a49:904d with SMTP id 006d021491bc7-67b9bca17aemr1675195eaf.24.1772812987746; Fri, 06 Mar 2026 08:03:07 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1772812987; cv=pass; d=google.com; s=arc-20240605; b=VcCTKWnPO0d1BR4o79MPr0e/gCko2PhNgdvOaTqgAZxGgMSvL4cbikLHpHF60WdX+G BTMvrxu59Ms4B6Dsg0KL8ROtQeya+r1/PyqD7Rw2b/HEnOXFMiFjB3xwaNgS/ao/IL5h loNP4lcB2gcJWwX17qjhsonqTe5HzXwXkW5pxRkT0/EU99hI6h9PcpnGWLn0Np6b/t40 FUIISVUMXtpewPf5/vFL6HeYVJWCa5F76BCZ8sVvyj593U5vLUxWcG5zjcDzAgRU6QlH Q33Q6l+Fnkgd4U2nW78cO4A8I9THO3+mi/DF/GcY6Yr34h1c2+wNre5TKSKtrfR79yqV Z47g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=hTUliOPRFq4gD0fVpSM8ztvyGbqL2O0Ztju5XJL55dw=; fh=y4Q4sSo60XIDMfQl4kOzeqW/gQkja1RlhaZM6hZs/O8=; b=Ur5/SJD3KD+0Djx91KsOiQ1rW7hO9cSO83pPPdLTmJHmLR9/QyUPtzCTTQhH03x6a2 mmwQBiKbnsLWxuOtOe9Ql6aJDos6QbLMU5lbtKrPEtQssnyD8e14yv2Sdq4RBOrmh37s Lxs/dLwaBCBWiwtFfmdSt7z2U6JhhKRh8emsWRzWu57DTMAsrI9n9I4fMxFb0Z6Mj0EU 8vmAqx11EGiAt1ZoNOAp6E3YxgzKah24hSMQgbM7kyr02+GjxgvetQNz3POTuFmI84Bt YnaPoqJgJPKQlAccEA19B3k0JyVQH9iDf1yXJJRYdHF0ODL+R5i8oSFXw5XGzDUcgOdu bg1g==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-67b9d5137c2si52626eaf.4.2026.03.06.08.03.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Mar 2026 08:03:07 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bffAr5OfeJXzOHvv5MxzT7xHgBgeVtUKvaDxxWrRcXKBeYkxvPM3G8L4bnOCSPW/sWWMpZnQXbdpdhUatt3Yqw6vMdtBnUB7jLUBXSFvLeFEv0BediSAg9Dkd9MRLfexoKq8d30DEYAI5rt50bb422SajHKIctsWcVHQNbR/07aVWb5vLE1W2p/zS5WUe7fzUDrywZUPs7eW3qXoEzX2s/bUwhkbeLhYyJ2bpI98MBK+EZhsvNnXt/v/6YPpyVpcCe1xMKvlgvaPqI2QfsupD0O2vIX6dBVVrbssLNnSWJXCx80Ctri+3Lc8RQr1mk+IZNC1pZ6JHT0vj/OxjrqF+Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=hTUliOPRFq4gD0fVpSM8ztvyGbqL2O0Ztju5XJL55dw=; b=JKIsCH+g2uHo9AsxraEy55dCEQleZdmHlqCqhRpWO+C2jUH7QMb2W0huQGgM/lENpp8tYammw/k3faEYed7NEDUr/DvMFBvxzqzwVDcQoLodpyRvfflYbGCJ23mEQslU2+v3m6Cxovl6D0gyPfRD6GU3Wr7pXY5hNw3HKd3DYVvsB1kDPuxcqPgY+tZ01zlNta1X/cWd80H9o4HmovbJLtdPd3SxcX/M1FKwpi3KWsqQT8wuy1K+WvHM4/roB1993nc+FOxHul3G0rsXbd0jBbOsDedYTmT52X/ka0W6ralmVs2dMfRPIUMJj+x90TaRH8c+4vOccjtah2OVl4YkBQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) by GV1PR10MB8706.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1ce::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9678.18; Fri, 6 Mar 2026 16:03:05 +0000 Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5]) by AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5%6]) with mapi id 15.20.9678.017; Fri, 6 Mar 2026 16:03:04 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: Felix Moessbauer Subject: [PATCH 2/2] work around bootstrapping issue of raspios due to SHA1 key removal Date: Fri, 6 Mar 2026 17:02:55 +0100 Message-ID: <20260306160255.1017503-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260306160255.1017503-1-felix.moessbauer@siemens.com> References: <20260306160255.1017503-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR0P281CA0160.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::14) To AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS2PR10MB6823:EE_|GV1PR10MB8706:EE_ X-MS-Office365-Filtering-Correlation-Id: 2d8ada79-8032-47da-39e3-08de7b99d9ba X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|366016|10070799003|7142099003|13003099007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(10070799003)(7142099003)(13003099007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: +LvvVuLs9K5U1xcv/QEY1nKj9rM+Sl4EX4A= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2d8ada79-8032-47da-39e3-08de7b99d9ba X-MS-Exchange-CrossTenant-AuthSource: AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2026 16:03:04.8133 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 4UJ1BDiiPPgDpnq40hVuXHd/EQlZKgf/hjmb1nFu+hA2etP3V9JiPDsefLLNPKGhiq1OhkJbBFyA3zBiUVmSJtpNR9FaKss7J4sXKnyHjpU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8706 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From Feburary 2026 on apt versions used on trixie and later will reject repository keys which use an SHA1 hash. While this issue needs to be fixed upstream, a workaround is needed to bootstrap these distributions from a > trixie host distribution (purely bootstrapping within a distribution is not affected, as then an older apt is used). We work around this by applying the recommended mmdebstrap option to disable key expiry checking (which internally switches from sqv to gpg which does process SHA1 keys). For details, see https://wiki.debian.org/Teams/Apt/Sha1Removal. Signed-off-by: Felix Moessbauer --- meta-isar/conf/distro/raspios-bookworm.conf | 2 ++ meta-isar/conf/distro/raspios-bullseye.conf | 2 ++ 2 files changed, 4 insertions(+) diff --git a/meta-isar/conf/distro/raspios-bookworm.conf b/meta-isar/conf/distro/raspios-bookworm.conf index edba011f..0bed3018 100644 --- a/meta-isar/conf/distro/raspios-bookworm.conf +++ b/meta-isar/conf/distro/raspios-bookworm.conf @@ -14,6 +14,8 @@ HOST_DISTRO_APT_SOURCES ?= "conf/distro/${HOST_DISTRO}.list" DISTRO_APT_SOURCES ?= "conf/distro/raspios-bookworm.list" DISTRO_APT_SOURCES:arm64 ?= "conf/distro/raspios-bookworm-64.list" +# workaround for https://wiki.debian.org/Teams/Apt/Sha1Removal +DISTRO_MM_OPTS += "${MMAPTOPT_NOEXPKEYSIGN}" DISTRO_BOOTSTRAP_KEYS = "http://raspbian.raspberrypi.org/raspbian.public.key;sha256sum=ca59cd4f2bcbc3a1d41ba6815a02a8dc5c175467a59bd87edeac458f4a5345de" DISTRO_BOOTSTRAP_KEYS:arm64 = "" diff --git a/meta-isar/conf/distro/raspios-bullseye.conf b/meta-isar/conf/distro/raspios-bullseye.conf index 60782f67..1b108649 100644 --- a/meta-isar/conf/distro/raspios-bullseye.conf +++ b/meta-isar/conf/distro/raspios-bullseye.conf @@ -14,6 +14,8 @@ HOST_DISTRO_APT_SOURCES ?= "conf/distro/${HOST_DISTRO}.list" DISTRO_APT_SOURCES ?= "conf/distro/raspios-bullseye.list" DISTRO_APT_SOURCES:arm64 ?= "conf/distro/raspios-bullseye-64.list" +# workaround for https://wiki.debian.org/Teams/Apt/Sha1Removal +DISTRO_MM_OPTS += "${MMAPTOPT_NOEXPKEYSIGN}" DISTRO_BOOTSTRAP_KEYS = "http://raspbian.raspberrypi.org/raspbian.public.key;sha256sum=ca59cd4f2bcbc3a1d41ba6815a02a8dc5c175467a59bd87edeac458f4a5345de" DISTRO_BOOTSTRAP_KEYS:arm64 = ""