Am Freitag, den 25.10.2019, 09:57 +0200 schrieb Johannes Schauer: > Hi, > > Quoting Benjamin Drung (2019-10-24 11:54:14) > > Since automatically choosing the right keyring is non-reliable and > > adding symlinks into /etc/apt/trusted.gpg.d affects the host > > system, I > > like to have a --keyring parameter until there is a better solution > > found. > > > > This --keyring parameter should set the apt option > > Dir::Etc::Trusted if > > it points to a file and Dir::Etc::TrustedParts if it points to a > > directory. I can remember --keyring and find the correct full path > > without needing to look into a man page. > > actually I found an even better reason why a --keyring parameter is > no problem: > debootstrap has it as well! > > So the user might actually expect the parameter to exist and has an > idea of how > it works. > > And yes, it should set the apt options you mention depending on > whether a file > or directory is passed and it should be possible to specify the -- > keyring > parameter multiple times.
Great. If you want to make mmdebstrap more compatible with debootstrap, then you could use the default keyring files from debootstrap: $ grep -ir keyrings /usr/share/debootstrap/scripts/ /usr/share/debootstrap/scripts/woody:keyring /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/debootstrap/scripts/potato:keyring /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/debootstrap/scripts/woody.buildd:keyring /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/debootstrap/scripts/aequorea:keyring /usr/share/keyrings/tanglu-archive-keyring.gpg /usr/share/debootstrap/scripts/gutsy:keyring /usr/share/keyrings/ubuntu-archive-keyring.gpg /usr/share/debootstrap/scripts/kali:keyring /usr/share/keyrings/kali-archive-keyring.gpg /usr/share/debootstrap/scripts/sarge:keyring /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/debootstrap/scripts/etch:keyring /usr/share/keyrings/debian-archive-removed-keys.gpg /usr/share/debootstrap/scripts/sid:keyring /usr/share/keyrings/debian-archive-keyring.gpg The pattern for the keyring look quite straight forward. BTW, you can use libdistro-info-perl to determine if it is Debian or Ubuntu and if it is still supported. -- Benjamin Drung Debian & Ubuntu Developer Platform Engineering Compute (Enterprise Cloud) 1&1 IONOS SE | Greifswalder Str. 207 | 10405 Berlin | Germany E-mail: benjamin.dr...@cloud.ionos.com | Web: www.ionos.de Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 24498 Vorstand: Dr. Christian Böing, Hüseyin Dogan, Hans-Henning Kettler, Matthias Steinberg, Achim Weiß Aufsichtsratsvorsitzender: Markus Kadelke Member of United Internet
