[Pbuilder-maint] Re: --keyring option for cdebootstrap

[Junichi Uekawa]

Hi,


> > > > There are several things that need to be done
> > > > 1. filing a bug on cdebootstrap to support --keyring option
> > > >  (does that install gnupg inside chroot as well?)
> > > This has already been done, as #351352
> > That bug report is different.
> > --keyring option is an option to check the downloaded base packages
> > against a keyring available on the host operating system.
> 
> Yes, but it also installs the keyring into /etc/apt/trusted.gpg in the
> target directory, and apt-get run in the chroot will then find the gpg
> keys and be able to validate further packages.
> 
> At least, that's what happened here.
> 
> If you however don't think #351352 is the right bug, please file a new
> one as you consider appropriate, instead of expecting me to know and do
> precisely what you want.

What was originally requested in 351352 wasn't quite fulfillable nor
satisfactory.

Waldi, would you prefer a new bug report or can we reuse this
bugreport for the --keyring feature (which will authenticate packages
against host key on cdebootstrapping)?


regards,
	junichi
-- 
dancer@{debian.org,netfort.gr.jp}   Debian Project