[13/13] bootstrap: do not add ca-certificates

Message ID 20261002144936.246628-14-felix.moessbauer@siemens.com
State New
Headers show
Series More build time reductions | expand

Commit Message

Felix Moessbauer Oct. 2, 2026, 2:49 p.m. UTC
As we now use the host apt for all operations, there is no need to have
the ca-certificates in the rootfs. Drop it and remove related
infrastructure. If it is desired to have it in the generated rootfs,
just add it using IMAGE_PREINSTALL.

As sbuild might require it (e.g. if the apt sources use https), we just
unconditionally add it.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
---
 .../recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc | 12 ------------
 .../recipes-devtools/sbuild-chroot/sbuild-chroot.inc |  1 +
 2 files changed, 1 insertion(+), 12 deletions(-)

Patch

diff --git a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
index 103d03bf..4a99fdb9 100644
--- a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
+++ b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc
@@ -10,7 +10,6 @@  inherit compat
 inherit deb-dl-dir
 
 DISTRO_BOOTSTRAP_BASE_PACKAGES += "locales"
-DISTRO_BOOTSTRAP_BASE_PACKAGES:append:https-support = " ca-certificates"
 
 BOOTSTRAP_TMPDIR = "${WORKDIR}/tempdir"
 DEPLOYDIR = "${WORKDIR}/deploy"
@@ -31,17 +30,6 @@  MMOPTS ?= ""
 
 DISTRO_BOOTSTRAP_KEYRING = "${WORKDIR}/distro-keyring.gpg"
 
-def get_distro_have_https_source(d):
-    return any(source[2].startswith("https://") for source in generate_distro_sources(d))
-
-def get_distro_needs_https_support(d):
-    if get_distro_have_https_source(d):
-        return "https-support"
-    else:
-        return ""
-
-OVERRIDES:append = ":${@get_distro_needs_https_support(d)}"
-
 def get_apt_opts(d, param):
     opts = []
     retries = d.getVar('ISAR_APT_RETRIES') or "3"
diff --git a/meta/recipes-devtools/sbuild-chroot/sbuild-chroot.inc b/meta/recipes-devtools/sbuild-chroot/sbuild-chroot.inc
index 8414f4b8..7ddf7b46 100644
--- a/meta/recipes-devtools/sbuild-chroot/sbuild-chroot.inc
+++ b/meta/recipes-devtools/sbuild-chroot/sbuild-chroot.inc
@@ -55,6 +55,7 @@  SBUILD_CHROOT_PREINSTALL_COMMON = " \
     devscripts \
     equivs \
     apt \
+    ca-certificates \
 "
 
 SBUILD_CHROOT_DIR = "${WORKDIR}/rootfs"