That wouldn't work, since salt.list is copied too early, before the
first update, so the update fails (well, in ignores the repo but logs an
error in error.log) because it can't authenticate the external repo (it
misses ca-certificates, but to install ca-certificates it needs to
update the repo
On Wed, 2024-01-17 at 17:10 +0100, Markus Köberl wrote:
> FAI_DEBOOTSTRAP_OPTS="--include=ca-certificates,apt-transport-https"
Hey,
My approach for this kind of thing is to have a hook that install ca-
certificates. Probably updatebase.SALT - or better,
updatebase.CACERTIFICATES and have SALT set
Seems the copy is done by line 1115 of usr/lib/fai/subroutines:
fcopy -SBMir /etc/apt # copy all other apt config files from the config
space
It probably should be documented, especially since docs currently state
that files under files/ are not copied automatically but require an
fcopy. Or I j