On Wed, 2022-03-23 at 19:34 +0100, Ferry Toth wrote: > Hi Richard, > > I forgot to add a cover letter, sorry for that. The 2 patches together > implement DEB repository signing. > > This is necessary since Gatesgarth |apt| (1.8.2) has become more strict > and doesn’t allow unsigned repositories by default. > > It is possible to override this behavior |but||| is more work then to > enable signed DEB repositories. These patches makes DEB a first class > citizen as IPK and RPM. > > Patches have been in use in meta-intel-edison since Gatesgarth, see > https://edison-fw.github.io/meta-intel-edison/5.0-Creating-a-deb-repository.html\
What puzzles me is that we can build root filesystems using apt, we test this on the autobuilder. Saying repositories are broken since gatesgarth therefore seems confusing in the commit message. I guess we must configure apt to override that during the rootfs process and likely an end user with a remote feed could do the same, possibly with a warning from apt? I'm also worried that there isn't any automated testing of this change. The reason I worry is that since we don't show any testing failures right now, there is clearly a hole in our automated testing coverage and there is no guarantee that this feature will keep working. It is these smaller corner case issues which tend to make or break the project's experience as if a feature is present, people expect it to work. Can we improve the testing situation? Cheers, Richard
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#163601): https://lists.openembedded.org/g/openembedded-core/message/163601 Mute This Topic: https://lists.openembedded.org/mt/89962631/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
