Bug#928931: debian-installer: apt-setup/local0/key fails on buster because gnupg is not installed

[Cyril Brulebois]

Hi Philipp,

Philipp Huebner  (2019-05-20):
> I just ran into this very same issue.
> 
> > I seem to remember having seen some discussion regarding how to detect
> > binary or armoured keys; maybe a cheap(er) fix would be to make sure we
> > install the needed gnupg bits into /target when such a setting 
> > (apt-setup/local*/key) is detected?
> > 
> > See generators/60local in apt-setup.
> 
> Sounds good to me, I would like to see this fixed soon and can offer to
> test fixed d-i images.

Please use reply-all on the BTS, otherwise people don't see your replies
unless they specifically keep track of a particular bug report… I would
have taken care of this 10+ days ago if I had seen your reply earlier.

For the record, I've received dozens of 451 notifications from the bug
submitter, which would usually make me close the bug report directly.
But given that's a well-known issue, I'll refrain from doing so…


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant


signature.asc
Description: PGP signature

Bug#928931: debian-installer: apt-setup/local0/key fails on buster because gnupg is not installed

[Philipp Huebner]

Hi,

I just ran into this very same issue.

> I seem to remember having seen some discussion regarding how to detect
> binary or armoured keys; maybe a cheap(er) fix would be to make sure we
> install the needed gnupg bits into /target when such a setting 
> (apt-setup/local*/key) is detected?
> 
> See generators/60local in apt-setup.

Sounds good to me, I would like to see this fixed soon and can offer to
test fixed d-i images.


Best wishes,
-- 
 .''`.   Philipp Huebner 
: :'  :  pgp fp: 6719 25C5 B8CD E74A 5225  3DF9 E5CA 8C49 25E4 205F
`. `'`
  `-



signature.asc
Description: OpenPGP digital signature

Bug#928931: debian-installer: apt-setup/local0/key fails on buster because gnupg is not installed

[Cyril Brulebois]

Hi,

Mikko Tuumanen  (2019-05-13):
> Package: debian-installer
> Severity: normal
> 
> Dear Maintainer,
> 
> I tried to preseed Debian buster with
> 
> d-i apt-setup/local0/repository string http://foo/ buster bar
> d-i apt-setup/local0/key string http://foo/key
> d-i pkgsel/include string baz
> 
> and used netboot "linux" and "initrd.gz" dated 2019-04-10.
> 
> This caused
> 
> May 13 06:34:21 main-menu[300]: (process:30688): 2019-05-13 06:34:18
> URL:http://foo/key [2448/2448] -> "/target/tmp/_fetch-url_key0.pub.31236" [1]
> May 13 06:34:21 main-menu[300]: (process:30688): E: gnupg, gnupg2 and gnupg1 
> do
> not seem to be installed, but one of them is required for this operation
> 
> and later package baz was not found which stopped the installation.

Right, I had been meaning to take care of it, but this special use case
had way lower priority than other issues…

> Work-around:
> 
> d-i preseed/late_command string in-target /bin/bash -c "\
> wget -O /etc/foo.asc http://foo/key ;\
> echo 'deb [signed-by=/etc/foo.asc] http://foo/ buster bar'
> /etc/apt/sources.list ;\
> apt update ;\
> apt -y install baz"

I seem to remember having seen some discussion regarding how to detect
binary or armoured keys; maybe a cheap(er) fix would be to make sure we
install the needed gnupg bits into /target when such a setting 
(apt-setup/local*/key) is detected?

See generators/60local in apt-setup.


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant


signature.asc
Description: PGP signature

Bug#928931: debian-installer: apt-setup/local0/key fails on buster because gnupg is not installed

[Mikko Tuumanen]

Package: debian-installer
Severity: normal

Dear Maintainer,

I tried to preseed Debian buster with

d-i apt-setup/local0/repository string http://foo/ buster bar
d-i apt-setup/local0/key string http://foo/key
d-i pkgsel/include string baz

and used netboot "linux" and "initrd.gz" dated 2019-04-10.

This caused

May 13 06:34:21 main-menu[300]: (process:30688): 2019-05-13 06:34:18
URL:http://foo/key [2448/2448] -> "/target/tmp/_fetch-url_key0.pub.31236" [1]
May 13 06:34:21 main-menu[300]: (process:30688): E: gnupg, gnupg2 and gnupg1 do
not seem to be installed, but one of them is required for this operation

and later package baz was not found which stopped the installation.



Work-around:

d-i preseed/late_command string in-target /bin/bash -c "\
wget -O /etc/foo.asc http://foo/key ;\
echo 'deb [signed-by=/etc/foo.asc] http://foo/ buster bar'
/etc/apt/sources.list ;\
apt update ;\
apt -y install baz"




-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-4-amd64 (SMP w/6 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8), 
LANGUAGE=fi_FI.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled