diff mbox series

[2/2] bootstrap: place gnupg home below workdir instead of /tmp

Message ID 20260907114136.3946468-2-felix.moessbauer@siemens.com
State Under Review
Headers show
Series [1/2] sbuild: place tmpdir below WORKDIR on rootless | expand

Commit Message

Felix Moessbauer Sept. 7, 2026, 11:41 a.m. UTC 
We should not place any build artifacts below /tmp but place all
artifacts somewhere below TMPDIR.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
---
 meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
index ee6eda3c..11706b71 100644
--- a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
+++ b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
@@ -59,7 +59,7 @@  do_generate_keyrings[cleandirs] = "${WORKDIR}/trusted.gpg.d"
 do_generate_keyrings[dirs] = "${DEBDIR}"
 do_generate_keyrings[vardeps] += "DISTRO_BOOTSTRAP_KEYS THIRD_PARTY_APT_KEYS"
 do_generate_keyrings() {
-    export GNUPGHOME="$(mktemp -td gpghomeXXXXXXXXXX)"
+    export GNUPGHOME="$(mktemp -d ${BOOTSTRAP_TMPDIR}/gpghomeXXXXXXXXXX)"
     if [ -n "${@d.getVar("THIRD_PARTY_APT_KEYFILES") or ""}" ]; then
         for keyfile in ${@d.getVar("THIRD_PARTY_APT_KEYFILES")}; do
            gpg --no-autostart --keyring "gnupg-ring:${DISTRO_BOOTSTRAP_KEYRING}" \