From patchwork Fri Mar 6 16:02:54 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4959 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Mar 2026 17:03:18 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f58.google.com (mail-oo1-f58.google.com [209.85.161.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 626G3F5l027653 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Mar 2026 17:03:16 +0100 Received: by mail-oo1-f58.google.com with SMTP id 006d021491bc7-679dcff168dsf75889164eaf.3 for ; Fri, 06 Mar 2026 08:03:16 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1772812989; cv=pass; d=google.com; s=arc-20240605; b=kK1Ll7r2QhOiPHyUADF64aFgBvjGkCdsL9D9vr6XbA5f78219YcB9d766QFh7hTmOy zi3vYtUlzDTOp1gdvhbblj6jTQwgFa0t2w6U+Jt+jy01rNoHCD4ARaaJAqzI6AYkfuGW yAi/kvdDEFqsYV400E4Q5oKj+fI/6qbVCSdaei1nImQcXMJctJMvQUeEO+YzEHKV/fFt E3kzAkzObwetYzZUJofLBWmeyxkgYEW+hIq8TLb5YvNVvHXLZW7SLUQOkIkydYabw1+Q DRGZlLImqYKy6i5L7ZKTDMogLseV4AIDvJJJw5dt480pZUNgXbgHtjqLGZHzwWJW+2NF z8CQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=Ro1m/8JqwfpBtnULXzJbnWrzw9Yvfxn6powzJpznC9U=; fh=Iv1kg1uE2Ie5XoWTyT7HzsQUM9FzkMKr6IvF36XM5y8=; b=YmmaGbHT+EsgztbR1GWg8zI4ED1BCFWoUfVD9TZ2sqE1U2nOJt++y8Q7jyz/tU9xRY fUMmN29zxvkU0BdQDWLh1Lwno64W6jvQ+LnrVGNsx+ycRXQiliO5ES+wYaCqlPnwRHvM YlG3cCE9dbigBrKE5yjZzVQJAPqhwmXMZW7UUIy+UWSkmVSpMxY6IeI4Mt9MaJbobRbI rT8f4oMO0RJ9qoEHl4yyT1BK3iDI+jIjfbdGcW1syH8292vyEQtZIJvon8YH/P03+d2c p8R5N0X71sUXUNZGd8i7w2HNZvLkUSW72/Xvov2DP7Q12zHu14jk+vyNPERhqrOKM/jw YuUg==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=k14kAYT6; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1772812989; x=1773417789; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=Ro1m/8JqwfpBtnULXzJbnWrzw9Yvfxn6powzJpznC9U=; b=q/XyYEFewOE+s7JBJwhcafG0+otqnPk3hLiNsUcQs7cyMQ0Hv+Hn35qv7mNcZfabwn rBxA6usE4tejXA1sPjnohFmvnPSQH/hQV2phEm6THB6Gz6v7EvgJH2BYj28Z7AqlpXqV hbrJqhWbYRM5jygjuM5jqs1ca8eMpvUZ7kLxSof0Q3JMoWI6G0QUfy8DcQD4Gwi0OBKM /28r+BqjQRJ9cM9A4t86ugYFV8iROriCxnhz1Z0pFgLHro4QbnwMSj6IK2aWrGbZGLo0 B01dBxqeqo9rRaW05kw+PSiCalJ3zX9NZ6uLUjBk6J1O1ZRoJqHCiKAfWgf+1gqqZAEd aOyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772812989; x=1773417789; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Ro1m/8JqwfpBtnULXzJbnWrzw9Yvfxn6powzJpznC9U=; b=vc2qD+8ZRqwxlyqdiLRnuMYUAed+M5e2IwEicgOAZqby0Gykgbcs1dvsn+tYbaVRBO Vt4d0s8t3lfsdjx8NzE05fTD8W/i3cMbdtmg3nSJggJPlofpEIhq1EyoxnAmkqTmyqCU gtk0yQg1v/8x6XkF1JTg1Pxgd/qW9mtHfAb5o89JAdqCpULk7EaWjnbfOwTNVMX15Hwv 3Ad2jqKfyaKuJHvy0e5em6q3U3Tq5HUIsG4WZSfP8WP1S5An04gavBBPumRSAOTAbnKo YtwG6zibqx3QPhkR3X/LO2DlBchZ97GjPIDnu9TkVLxZmqePkR0CWfLFN0gIcABiarrB zsJQ== X-Forwarded-Encrypted: i=3; AJvYcCUkRdVYgt63uhnBhR6KLvjJaK44hpATMuWbdQutRJPQCZpIJgNFrrbWKW1o4xCBHYUeCGi91b0=@isar-build.org X-Gm-Message-State: AOJu0YxGTnaziyXAlunkcB2fxnheg42s99c1FXSEmRwqUScwJB/2PHEp z9DdN549YryGUfaSLv//AuRW+Ej8+9m5NdQCRwShXBh603qQpeaDyXHv X-Received: by 2002:a05:6820:6ac8:b0:66e:4279:3de7 with SMTP id 006d021491bc7-67b9bd3e3damr1639062eaf.53.1772812988640; Fri, 06 Mar 2026 08:03:08 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+Gyz7e6WGLsd5i6caEHTO9rZDlNfz2fvaxmwCgCBHGFMQ==" Received: by 2002:a4a:e9f4:0:b0:662:f738:c302 with SMTP id 006d021491bc7-67b92eeafc9ls659919eaf.0.-pod-prod-04-us; Fri, 06 Mar 2026 08:03:07 -0800 (PST) X-Received: by 2002:a05:6820:203:b0:662:c6f1:9231 with SMTP id 006d021491bc7-67b9bc53f62mr1823996eaf.4.1772812987316; Fri, 06 Mar 2026 08:03:07 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1772812987; cv=pass; d=google.com; s=arc-20240605; b=UrHNenui0iVtjc+J8lNOeE4Cq7oQJwj+2n9d+nxks7oJ3r1FLZ7OYPrpRS/X3pChbU 3ooiEpPD1MbOxH0pYAyH9z+0UzLi6LG4XyKvGhJKDXNBhgXVMKf1gRzfhpcfHwWCoIHS Cqfmxwvwi7iMu6le6cTjuj2iGfYoTLSgNCuDX17Amssh/8HyITKY3eiLI8cmY1x8f852 JeWnyRphFV9q7ztNwlpsylXUZAdBxL6dYSy8weN3akmGDT3hr7i0cAZNKHlxPB1Nyi+4 CCAZeYxLIBXjS71FbOSkghL3TcDzYRIqi7qE2QL8x/eq7ikuMHn0wnzR8qbo1UF5AxLK Phxw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=z6gcgcsB86ySgnyYpg/GloBW9h16mO+383mfkjTSdRE=; fh=y4Q4sSo60XIDMfQl4kOzeqW/gQkja1RlhaZM6hZs/O8=; b=e6wZHO5GEkHCYWt8pjXKcRTG26E429iWQ/41HuCVlBQ+n2LQu9B8lkLfE1lnhRosSW quHSXxIcH70JdDneI0CAHeZmUwMJHfh6mwmpQN09kkzpL18lbl/Iy8lumUhLk4HZBQ4l yktPqXhpkuRTmjc7zES5h+mKN4o0mqKkk3k6iCegnyNBmbLl+lyXd7GNQ4Mlat4pEDAB pbmhjf2uMzRB9DVQSk/DM/XSgcP9YmxiZz8csVTfN2ZWP+zNdXXSvuJr49XHKSkv6cvq w5QYZ8JXxdAanliYPkZjS3Dv3D/kHIOHtWI2vOtmH5/oH9qghB7s85UUzWhCtk2c4Zdj EaYA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=k14kAYT6; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-67b9d5137c2si52626eaf.4.2026.03.06.08.03.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Mar 2026 08:03:07 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=eGgUVF//0eS1pvG8KENHmDDKcB6L2o0LcEeKnmxxeJlYOnJmafkqFeMUsK1Tvkh4+bpnOAqs/02ZS5d690MInpkRlURsJz6smzOqnwdoMJ64IgPJuhCJFp7fUgImlyAFz2MiEVOeFJMdiyV4BpCyPlZ7YGCwvNDyRUFdhgn7hUOzo2Ih+pJdVLP7ilIyPnssg2IQS/Dw7xgOvMWBaeuAxrdNhmt9SkvP/rAQyth207YMeaJM0Wm3MMQuIFoiRrka6rJoGqkuUl6biUhcXdO+1rxS7qseJjO/uhpORs22T/zBGF/JPM8Gj5Q/g7VGNVoLCsvIslknTF8VUIp7VhDdNw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=z6gcgcsB86ySgnyYpg/GloBW9h16mO+383mfkjTSdRE=; b=t+ntmhCC9Ipxp0y95Unr4K2FRoxxWY5UtlstLuhezI/woXm3c1z3SlyKPkA1eSkmskU+79Odb4A1wpJde/OIvo959X9/p2m8WsCUCWSKUU05Xnx/HKOxx3atpUnUTNVVuN0kqKIAxNQdaNe5XGyazN5dNdMrZBtpdlqWS8xRjufw2BVrd7BIAmJvoppL53k7HZiwBYWpD5D7vSaDq3c6ydCK9Bi7kCmdEFYG/PiuFm5O8yKpY8acVcZGuGNBSqAKU9Q3vNrliWnEzy63/Bc2gwH8p0+wlMtwpWEX3bC4SvvVFMMOBZxt0PNGmJHK0yADbrpx3vXf4XvxIwQlTBctiQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) by GV1PR10MB8706.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1ce::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9678.18; Fri, 6 Mar 2026 16:03:04 +0000 Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5]) by AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5%6]) with mapi id 15.20.9678.017; Fri, 6 Mar 2026 16:03:04 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: Felix Moessbauer Subject: [PATCH 1/2] add variables to inject config into mmdebstrap Date: Fri, 6 Mar 2026 17:02:54 +0100 Message-ID: <20260306160255.1017503-2-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260306160255.1017503-1-felix.moessbauer@siemens.com> References: <20260306160255.1017503-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR0P281CA0160.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::14) To AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS2PR10MB6823:EE_|GV1PR10MB8706:EE_ X-MS-Office365-Filtering-Correlation-Id: 5c4c69c9-1cde-4085-d0f5-08de7b99d95d X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|366016|10070799003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(10070799003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: XXsnMVm43aRGY2KdmQmd6CoFtTwTvpJU5NZGpJaa/JydIF+w4oSaTRSPrUrsSgEVvdzcVm8+K7ljTJaqNIo018ImT7HB53qyCRXCgRofYYxk6GkMmvBLg8/wK6CEnVcQxcdPqpPuG3FaJqS77svA9bvCRjpazTFfR5/r9VaQ1q7ZdxOs5hzOZFFHEpCzy+K/6MDbJXFtAtacLLM6fQ3M3oBJD0bV2yNwO4k/QEm2MWBhmJXsTVylgEmsYdN8TVOJiOw6OLP3eyWNorKE5WyvEeiSxvx9z9M7G3sKmAB2m+fZq6BoNJwUseDkzZ4lteQmiyE8nh85iI5GV5eCAUznGU8gbjJFSfTC/Hw/UIx88Lva6eLfCGhPmPb8ZdTXNIIeA+dSpbpg+4kyLPbG5npzqauju5/Wiy+DougjvgPawhN5SVn4DWh0JsapVpnrcNNT38dS2x9JljfG6xaQHnxlA8213ETaK6lSj4ntYPgNrE2a2WVZgjsA7EudtSv0F1/Q3y84DpxNmcJmcxo+jFAFXTBB3w9CNUUTFOt925WkKcPvasCW2fT+aWmj9XDQ5Q7M4Bx6oJxjfCX3Cq0x1JD1Dr1tv7yD2pDvD0S1jXBv2xAKwtsAPe63K8eSE+xcwNMKYhDUDr5510nOT5eYJzqNHDlOneT29QmLdHUusbMVKphlrR8Ed7xWRrYbAtrQxkHuo4NiGEz2h0U4ObVaKD5Glyya6NVeveGrJI5fmPn5a+1mTfC82V2tiYusdQWAHjkZ0+Sn8Tx8ODVlgLBHR69eG3WTUoHdV+8OjDdLvaexwhykQGFoNdJfnRX9R7drkBpL2diZ/7kR+WQvrn8zU2Egi4uJbh0wCecjfxf+k96sHV6rs9GmweQm6edr9N2HXZ0QGvTR2hP2NtYYo/Hdd14/665KRSzmHCpY9TyHws4+Q82FEaKlH3PGa60lEg2wK9RtRxPdR3WTSy8X/TpDEuxiAO586tFeYzRjJM65Yq/3OFE2f8n4OHZFTClwxpjDpYgp5OAFBNOCbwvJ1exGLglDOpWUHS4P+zMicMkom4A/FJybqZlGh2F2b8g8VQ2G3KiudAJdcYVms1kywi978bxaFePNe78Jx6kToJJAtMD5H0FEbWL1ySbolmPz34obkSLxkkj2spzLY9zqNPrj9xVefYxCnF2yiyVQ/bVhXc+FAmcffnPP2e8unM56Exmx6IHZm8gygoeOTOYtni3pjIlLe+Hnfvu7800jgnLdOT2ABfsEiBt2TScBakZ13DmV/jfpFUoKnepdyfg/pPUTSjBvP/k2+C2lwrWuyxqUkSgC+fu1kUc7dmHvqouLp7YMFJv3yf63y/la3+99FnuBcaZto5qNR8xptUqHfDdbVWX2du3SiZfZUgmDyEqdhNE0defhOC8XAsdIDjVGu/tIB13f+qSPhf1hQCCX3v3djeE2EuDR+YfD7W6RbZDYkbi/0MaThS91Eu2Na+5vo1guO3yT+dL4oVcIByOq3HoCe7l1G1unbYDHKkRvygR2OVHXIeEEY4mKvIJqxW+W2wUvnjuFiNGv1uV1m/qQk9Bo8A8tNuXGB4GtssGwr7JwlYo1ag9zQQ8BkhkA6ZvWhX/l2WnrJUAARmynEAgNYTUiL9NAgYdSWYKsV2xBIALYEk/VMprFN4Yi6Z2pvjDFV4MY5wJceRiCiyS200qmRRB9AhXZTDtLoySiUQfsAaxZXoZv9agrdD2K8q/fsq1y3iAeYw+k6SttktGHAg1F3/UTCGBUu1AsePgX5uQCcHNspHb07zTpLcBPmCBB X-MS-Exchange-AntiSpam-MessageData-1: +vbAJr4HGu+H+U8n4Kpn4T1eDDXWgCxw7bo= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5c4c69c9-1cde-4085-d0f5-08de7b99d95d X-MS-Exchange-CrossTenant-AuthSource: AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2026 16:03:04.1983 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 6aAuNcLx2JZtmZXZUf4Ad57Tg21hPGPhyy7XyLaVEGfjHsx1LdshZ841LEPrAUCIDfCzU9o0iyXA3GFoTnhV/y12Sbps0hAYNEDjdyLJ4yg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8706 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=k14kAYT6; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= When working with old repos, signing keys might be used which are not considered secure by the host apt (which is used during ``mmdebstrap``), either due to the keys expiry date or due to insecure signature algorithms. To work around this, we introduce the variables ``MMAPTOPT_NOEXPKEYSIGN`` and ``DISTRO_MM_OPTS``. While the former provides an argument to disable the key expiry checking, the latter allows users to inject custom options into ``mmdebstrap``. Signed-off-by: Felix Moessbauer --- RECIPE-API-CHANGELOG.md | 10 ++++++++++ .../isar-mmdebstrap/isar-mmdebstrap-target.bb | 1 + meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc | 7 +++++++ 3 files changed, 18 insertions(+) diff --git a/RECIPE-API-CHANGELOG.md b/RECIPE-API-CHANGELOG.md index 0bad8a44..e44b4b9d 100644 --- a/RECIPE-API-CHANGELOG.md +++ b/RECIPE-API-CHANGELOG.md @@ -962,3 +962,13 @@ INSTALLER_UNATTENDED_ABORT_ENABLE = "1" # Optional: set countdown timeout in seconds (default 5) INSTALLER_UNATTENDED_ABORT_TIMEOUT = "5" ``` + +### Working with old and unofficial debian repos + +When working with old repos, signing keys might be used which are not considered +secure by the host apt (which is used during ``mmdebstrap``), either due to the +keys expiry date or due to insecure signature algorithms. To work around this, +we introduce the variables ``MMAPTOPT_NOEXPKEYSIGN`` and ``DISTRO_MM_OPTS``. +While the former provides an argument to disable the key expiry checking, the +latter allows users to inject custom options into ``mmdebstrap``. For details, +see ``man mmdebstrap``. Use with care! diff --git a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap-target.bb b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap-target.bb index 227ff04c..a9695d44 100644 --- a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap-target.bb +++ b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap-target.bb @@ -8,6 +8,7 @@ Description = "Minimal target Debian root file system" DEPLOY_ISAR_BOOTSTRAP = "${DEPLOY_DIR_BOOTSTRAP}/${DISTRO}-${DISTRO_ARCH}" +MMOPTS ?= "${DISTRO_MM_OPTS}" PROVIDES += "bootstrap-target" diff --git a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc index ce34245f..6c2cb170 100644 --- a/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc +++ b/meta/recipes-core/isar-mmdebstrap/isar-mmdebstrap.inc @@ -22,6 +22,12 @@ DPKG_HOOKS ?= "${@'--hook-dir='+d.getVar('MM_HOOK_JESSIE') \ MMHOOKS:focal ?= "${DPKG_HOOKS}" MMHOOKS:buster ?= "${DPKG_HOOKS}" +# disable key expiration checking during bootstrapping +# this also works around the blocking of Sha1 keys when using old repos +# https://wiki.debian.org/Teams/Apt/Sha1Removal +MMAPTOPT_NOEXPKEYSIGN = "--aptopt='Apt::Key::gpgvcommand \"/usr/libexec/mmdebstrap/gpgvnoexpkeysig\"'" +MMOPTS ?= "" + DISTRO_BOOTSTRAP_KEYRING = "${WORKDIR}/distro-keyring.gpg" def get_distro_have_https_source(d): @@ -236,6 +242,7 @@ do_bootstrap() { --customize-hook='chroot "$1" /usr/bin/apt-get -y clean' \ --skip=cleanup/apt \ --skip=download/empty \ + ${MMOPTS} \ ${@get_apt_opts(d, '--aptopt')} \ ${@get_distro_components_argument(d)} \ "${@get_distro_suite(d)}" \ From patchwork Fri Mar 6 16:02:55 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4960 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Mar 2026 17:03:19 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f63.google.com (mail-oo1-f63.google.com [209.85.161.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 626G3GaU027660 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Mar 2026 17:03:17 +0100 Received: by mail-oo1-f63.google.com with SMTP id 006d021491bc7-679f6f264cesf150985304eaf.2 for ; Fri, 06 Mar 2026 08:03:17 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1772812991; cv=pass; d=google.com; s=arc-20240605; b=KStEI7rdrI5JJfyVwXwIU09CIvC6SfFJLUj7E5odDv2h2eR+Wb9y6pp1PHKjo6ZRkm 0z1075VKXJELNToBtZuYBzlaMn5/hXVzOxW77/gYyGnhdw+WbC2y/eU5NCDQTQJLDkfE xYBN6Ex0mHWYggy4/v6CoVWta7DYIZeXcIkrqRuCx9RYIEeW7l4XVwCgHfaRoHBq+fRA S+fwh2fzj94MFNzXrsVdOTswXqTWX3Fq/ub9nseZCi9VJFFmmlYz4FQ8v7RwXlgT5549 6oAwRP1Z4oYKcILgu0z07IesAipj39TorveY4TkCIu0L8vTq2Frwl1W2rGAT6exlAqtD COLA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; fh=XE3m1UTnQ4uGjPMYd0cOPHO9/IWYTMcjMVcKpDUgCck=; b=Itb8HenGQDCnXL6AFc+OWu1LuU3sSns7rdvyEsri0daFo31Lfn/lI0GWnmKs3egoRq 1s9dZv/xPTbIaMLG6b3t0H32V7bX8tRiAmNtwEJwAjWp2qQglifTb0SLgXRrlW1pGQVX dwsrwS+CldyKFrEjzYvngYfoH7qwabB5JDJ/bMIW9vRSNFq18lFzEZJWmdA2BVcHaz9l 9se7TzvTtOMEFHGT1+Twbr8h4N087pM3ImWRLRPB5mK52D+gh/ihL3AZ8MDPye1vEjJT VYSGmDetEmuI3h6tzwaencpSSPP40pI/yBIqS8+Rcxt8jK4AL0iLXqgwe8K3GZfQgCFr 4oSA==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1772812991; x=1773417791; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; b=oL57ZC2iXVy82fbCrLOg7dSokSE4VmGiUcBoIcEWaQ8a15LyCrpBlWnH7eT/Ns7Yel Cr7OJZ4AD3xzqYVV//OVSBpTPbREas7k0f53RsSyrNRLNaEiraD+yXde/YqX/5Wo/GaO sjT0HPYIHm1E00DPWQXUuZBBynNHELM9czZ8Ds+BHoFNqq2gOHpUCNmN1ZJRYcgRxMWW fQ0G+v8lDkeKe2dRfEVOv1L9d6uu61btl5srHZcNDGSE1QuJ2ABfYg4VM+rGstmXZilX fDroo5h1EZki2zqFOhuu9WLq7qpu5JJxoShx2t0P9gxpNibDynLdDUXUa26TGk3PE1H4 2rkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772812991; x=1773417791; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=lF1V1/LENDZ/D52et00aJ/knTN09uKlDhA2dFgBH6Zc=; b=BruzTJB6L51QNALVdgsf9FsBh0Z6EzVb5MRw/woFy6l5w3mp0hT1eyHOhXrK8XJpwe QH1Qk0hHpNCIBa20LEE2Dsy7wKJX+IEE3AIjYAXiJxVBtXeTKS6y0a6VHdGPkmgNA18i /wXzuQKKcPupZJ+UgEoXp4jaLiGPJKTtETW3YSUCXsXtIfz3S/UPQ7r+5JfKLbcScUT3 M6rIusYqqikkzUaHLPnPRxne7wWxPYgS8nc5o8kn6B2uIqM5d1TSlWw7ZCoj44ZHtBa+ KR+TDGC9EkI504BsIcCy5kZmw4EG3b8mFhVnKTmqFDFew9Vbo7jLqXqhnNfBp+xJqtlu EC7Q== X-Forwarded-Encrypted: i=3; AJvYcCUV6M+MGO9sVIgLmq9Fq9sYHf2SM7soRe+qlX+FsMBWMT4GXyHxZzFJUX5qHC0uWuvjb7Svfgk=@isar-build.org X-Gm-Message-State: AOJu0YzCIAXZhGsH6ueuMzR6bJs8HTEmjeprnMQV3eZkF8yyuY1zL9ai /9siyKHg3cn4wzoYPPjzvol11Lf9f5zUW3dkGhUBAF90l6178vD3qmnf X-Received: by 2002:a05:6820:308a:b0:659:9a49:904d with SMTP id 006d021491bc7-67b9bca17aemr1675373eaf.24.1772812990657; Fri, 06 Mar 2026 08:03:10 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+HmpVcpjJi/okaj+weHCgw+i2UzM+Fd4SyopUpF+d+o+w==" Received: by 2002:a05:6820:151a:b0:66a:9dfd:bbff with SMTP id 006d021491bc7-67b92fec292ls1766606eaf.2.-pod-prod-09-us; Fri, 06 Mar 2026 08:03:08 -0800 (PST) X-Received: by 2002:a05:6820:308a:b0:659:9a49:904d with SMTP id 006d021491bc7-67b9bca17aemr1675195eaf.24.1772812987746; Fri, 06 Mar 2026 08:03:07 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1772812987; cv=pass; d=google.com; s=arc-20240605; b=VcCTKWnPO0d1BR4o79MPr0e/gCko2PhNgdvOaTqgAZxGgMSvL4cbikLHpHF60WdX+G BTMvrxu59Ms4B6Dsg0KL8ROtQeya+r1/PyqD7Rw2b/HEnOXFMiFjB3xwaNgS/ao/IL5h loNP4lcB2gcJWwX17qjhsonqTe5HzXwXkW5pxRkT0/EU99hI6h9PcpnGWLn0Np6b/t40 FUIISVUMXtpewPf5/vFL6HeYVJWCa5F76BCZ8sVvyj593U5vLUxWcG5zjcDzAgRU6QlH Q33Q6l+Fnkgd4U2nW78cO4A8I9THO3+mi/DF/GcY6Yr34h1c2+wNre5TKSKtrfR79yqV Z47g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=hTUliOPRFq4gD0fVpSM8ztvyGbqL2O0Ztju5XJL55dw=; fh=y4Q4sSo60XIDMfQl4kOzeqW/gQkja1RlhaZM6hZs/O8=; b=Ur5/SJD3KD+0Djx91KsOiQ1rW7hO9cSO83pPPdLTmJHmLR9/QyUPtzCTTQhH03x6a2 mmwQBiKbnsLWxuOtOe9Ql6aJDos6QbLMU5lbtKrPEtQssnyD8e14yv2Sdq4RBOrmh37s Lxs/dLwaBCBWiwtFfmdSt7z2U6JhhKRh8emsWRzWu57DTMAsrI9n9I4fMxFb0Z6Mj0EU 8vmAqx11EGiAt1ZoNOAp6E3YxgzKah24hSMQgbM7kyr02+GjxgvetQNz3POTuFmI84Bt YnaPoqJgJPKQlAccEA19B3k0JyVQH9iDf1yXJJRYdHF0ODL+R5i8oSFXw5XGzDUcgOdu bg1g==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-67b9d5137c2si52626eaf.4.2026.03.06.08.03.07 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Mar 2026 08:03:07 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=bffAr5OfeJXzOHvv5MxzT7xHgBgeVtUKvaDxxWrRcXKBeYkxvPM3G8L4bnOCSPW/sWWMpZnQXbdpdhUatt3Yqw6vMdtBnUB7jLUBXSFvLeFEv0BediSAg9Dkd9MRLfexoKq8d30DEYAI5rt50bb422SajHKIctsWcVHQNbR/07aVWb5vLE1W2p/zS5WUe7fzUDrywZUPs7eW3qXoEzX2s/bUwhkbeLhYyJ2bpI98MBK+EZhsvNnXt/v/6YPpyVpcCe1xMKvlgvaPqI2QfsupD0O2vIX6dBVVrbssLNnSWJXCx80Ctri+3Lc8RQr1mk+IZNC1pZ6JHT0vj/OxjrqF+Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=hTUliOPRFq4gD0fVpSM8ztvyGbqL2O0Ztju5XJL55dw=; b=JKIsCH+g2uHo9AsxraEy55dCEQleZdmHlqCqhRpWO+C2jUH7QMb2W0huQGgM/lENpp8tYammw/k3faEYed7NEDUr/DvMFBvxzqzwVDcQoLodpyRvfflYbGCJ23mEQslU2+v3m6Cxovl6D0gyPfRD6GU3Wr7pXY5hNw3HKd3DYVvsB1kDPuxcqPgY+tZ01zlNta1X/cWd80H9o4HmovbJLtdPd3SxcX/M1FKwpi3KWsqQT8wuy1K+WvHM4/roB1993nc+FOxHul3G0rsXbd0jBbOsDedYTmT52X/ka0W6ralmVs2dMfRPIUMJj+x90TaRH8c+4vOccjtah2OVl4YkBQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) by GV1PR10MB8706.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1ce::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9678.18; Fri, 6 Mar 2026 16:03:05 +0000 Received: from AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5]) by AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM ([fe80::349d:731e:a849:b4a5%6]) with mapi id 15.20.9678.017; Fri, 6 Mar 2026 16:03:04 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: Felix Moessbauer Subject: [PATCH 2/2] work around bootstrapping issue of raspios due to SHA1 key removal Date: Fri, 6 Mar 2026 17:02:55 +0100 Message-ID: <20260306160255.1017503-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260306160255.1017503-1-felix.moessbauer@siemens.com> References: <20260306160255.1017503-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR0P281CA0160.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::14) To AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:5f6::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AS2PR10MB6823:EE_|GV1PR10MB8706:EE_ X-MS-Office365-Filtering-Correlation-Id: 2d8ada79-8032-47da-39e3-08de7b99d9ba X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|366016|10070799003|7142099003|13003099007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(10070799003)(7142099003)(13003099007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-MS-Exchange-AntiSpam-MessageData-1: +LvvVuLs9K5U1xcv/QEY1nKj9rM+Sl4EX4A= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2d8ada79-8032-47da-39e3-08de7b99d9ba X-MS-Exchange-CrossTenant-AuthSource: AS2PR10MB6823.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2026 16:03:04.8133 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 4UJ1BDiiPPgDpnq40hVuXHd/EQlZKgf/hjmb1nFu+hA2etP3V9JiPDsefLLNPKGhiq1OhkJbBFyA3zBiUVmSJtpNR9FaKss7J4sXKnyHjpU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8706 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="OlKT4/DM"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From Feburary 2026 on apt versions used on trixie and later will reject repository keys which use an SHA1 hash. While this issue needs to be fixed upstream, a workaround is needed to bootstrap these distributions from a > trixie host distribution (purely bootstrapping within a distribution is not affected, as then an older apt is used). We work around this by applying the recommended mmdebstrap option to disable key expiry checking (which internally switches from sqv to gpg which does process SHA1 keys). For details, see https://wiki.debian.org/Teams/Apt/Sha1Removal. Signed-off-by: Felix Moessbauer --- meta-isar/conf/distro/raspios-bookworm.conf | 2 ++ meta-isar/conf/distro/raspios-bullseye.conf | 2 ++ 2 files changed, 4 insertions(+) diff --git a/meta-isar/conf/distro/raspios-bookworm.conf b/meta-isar/conf/distro/raspios-bookworm.conf index edba011f..0bed3018 100644 --- a/meta-isar/conf/distro/raspios-bookworm.conf +++ b/meta-isar/conf/distro/raspios-bookworm.conf @@ -14,6 +14,8 @@ HOST_DISTRO_APT_SOURCES ?= "conf/distro/${HOST_DISTRO}.list" DISTRO_APT_SOURCES ?= "conf/distro/raspios-bookworm.list" DISTRO_APT_SOURCES:arm64 ?= "conf/distro/raspios-bookworm-64.list" +# workaround for https://wiki.debian.org/Teams/Apt/Sha1Removal +DISTRO_MM_OPTS += "${MMAPTOPT_NOEXPKEYSIGN}" DISTRO_BOOTSTRAP_KEYS = "http://raspbian.raspberrypi.org/raspbian.public.key;sha256sum=ca59cd4f2bcbc3a1d41ba6815a02a8dc5c175467a59bd87edeac458f4a5345de" DISTRO_BOOTSTRAP_KEYS:arm64 = "" diff --git a/meta-isar/conf/distro/raspios-bullseye.conf b/meta-isar/conf/distro/raspios-bullseye.conf index 60782f67..1b108649 100644 --- a/meta-isar/conf/distro/raspios-bullseye.conf +++ b/meta-isar/conf/distro/raspios-bullseye.conf @@ -14,6 +14,8 @@ HOST_DISTRO_APT_SOURCES ?= "conf/distro/${HOST_DISTRO}.list" DISTRO_APT_SOURCES ?= "conf/distro/raspios-bullseye.list" DISTRO_APT_SOURCES:arm64 ?= "conf/distro/raspios-bullseye-64.list" +# workaround for https://wiki.debian.org/Teams/Apt/Sha1Removal +DISTRO_MM_OPTS += "${MMAPTOPT_NOEXPKEYSIGN}" DISTRO_BOOTSTRAP_KEYS = "http://raspbian.raspberrypi.org/raspbian.public.key;sha256sum=ca59cd4f2bcbc3a1d41ba6815a02a8dc5c175467a59bd87edeac458f4a5345de" DISTRO_BOOTSTRAP_KEYS:arm64 = ""