How do I get deboostrap (via live-build) to use Raspbian's release keyring?

up vote
3
down vote

favorite

I am trying to use live-build 5.0 on Debian squeeze to build a Raspbian live image. The sudo lb build command fails during the debootstrap phase, at the step:

I: Checking Release signature
E: Release signed by unknown key (key id 9165938D90FDDD2E)

I have tried (on the build system):

installing the Raspbian repo key using sudo apt-key add

manually installing raspbian-archive-keyring_20120528.2_all.deb

adding the Raspbian key to config/archives/raspbian.key.(binary|chroot) (ie. from /usr/share/keyrings/raspbian-archive-keyring.gpg)

prepending DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" to lb config and lb build

same, but for /etc/apt/trusted.gpg

including --keyring-packages "raspbian-archive-keyring" in my auto/config

None of it worked. What do I need to do to tell debootstrap to use a different keyring? I don't want to tell it not to verify anything at all.

asked Jan 21 '16 at 3:30

detly

1,36341424

Try wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

add a commentÂ |Â

up vote
3
down vote

favorite

I am trying to use live-build 5.0 on Debian squeeze to build a Raspbian live image. The sudo lb build command fails during the debootstrap phase, at the step:

I: Checking Release signature
E: Release signed by unknown key (key id 9165938D90FDDD2E)

I have tried (on the build system):

installing the Raspbian repo key using sudo apt-key add

manually installing raspbian-archive-keyring_20120528.2_all.deb

adding the Raspbian key to config/archives/raspbian.key.(binary|chroot) (ie. from /usr/share/keyrings/raspbian-archive-keyring.gpg)

prepending DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" to lb config and lb build

same, but for /etc/apt/trusted.gpg

including --keyring-packages "raspbian-archive-keyring" in my auto/config

None of it worked. What do I need to do to tell debootstrap to use a different keyring? I don't want to tell it not to verify anything at all.

asked Jan 21 '16 at 3:30

detly

1,36341424

Try wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

add a commentÂ |Â

up vote
3
down vote

favorite

I am trying to use live-build 5.0 on Debian squeeze to build a Raspbian live image. The sudo lb build command fails during the debootstrap phase, at the step:

I: Checking Release signature
E: Release signed by unknown key (key id 9165938D90FDDD2E)

I have tried (on the build system):

installing the Raspbian repo key using sudo apt-key add

manually installing raspbian-archive-keyring_20120528.2_all.deb

adding the Raspbian key to config/archives/raspbian.key.(binary|chroot) (ie. from /usr/share/keyrings/raspbian-archive-keyring.gpg)

prepending DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" to lb config and lb build

same, but for /etc/apt/trusted.gpg

including --keyring-packages "raspbian-archive-keyring" in my auto/config

None of it worked. What do I need to do to tell debootstrap to use a different keyring? I don't want to tell it not to verify anything at all.

asked Jan 21 '16 at 3:30

detly

1,36341424

I am trying to use live-build 5.0 on Debian squeeze to build a Raspbian live image. The sudo lb build command fails during the debootstrap phase, at the step:

I: Checking Release signature
E: Release signed by unknown key (key id 9165938D90FDDD2E)

I have tried (on the build system):

installing the Raspbian repo key using sudo apt-key add

manually installing raspbian-archive-keyring_20120528.2_all.deb

adding the Raspbian key to config/archives/raspbian.key.(binary|chroot) (ie. from /usr/share/keyrings/raspbian-archive-keyring.gpg)

prepending DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" to lb config and lb build

same, but for /etc/apt/trusted.gpg

including --keyring-packages "raspbian-archive-keyring" in my auto/config

None of it worked. What do I need to do to tell debootstrap to use a different keyring? I don't want to tell it not to verify anything at all.

debian raspbian

asked Jan 21 '16 at 3:30

detly

1,36341424

asked Jan 21 '16 at 3:30

detly

1,36341424

asked Jan 21 '16 at 3:30

detly

1,36341424

asked Jan 21 '16 at 3:30

detly

1,36341424

asked Jan 21 '16 at 3:30

detly

1,36341424

Try wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

add a commentÂ |Â

Try wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

Try

wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg

If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

Try

wget https://archive.raspbian.org/raspbian.public.key gpg --import raspbian.public.key debootstrap --keyring /root/.gnupg/pubring.gpg

If the above fails then birchroad.wordpress.com/2012/06/09/â€¦ may be of use to you.
â€“Â ChrisK
Feb 8 '16 at 15:31

add a commentÂ |Â

2 Answers
2

active

oldest

votes

up vote
2
down vote

accepted

This was a very basic mistake. I was prepending DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" to lb config && sudo lb build, not realising that sudo does not allow environment variables through (because of the Defaults env_reset line in sudoers).

When I invoked with sudo DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" lb build, it was successful.

answered Feb 7 '16 at 19:12

detly

1,36341424

add a commentÂ |Â

up vote
0
down vote

As root run:

wget -qO - https://archive.raspbian.org/raspbian.public.key | gpg --import -
debootstrap --keyring /root/.gnupg/pubring.kbx ...

answered Aug 17 at 8:49

dimir

1413

add a commentÂ |Â

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);

);

draft saved

draft discarded

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f256702%2fhow-do-i-get-deboostrap-via-live-build-to-use-raspbians-release-keyring%23new-answer', 'question_page');

);

Post as a guest

Name

2 Answers
2

active

oldest

votes

2 Answers
2

active

oldest

votes

up vote
2
down vote

accepted

When I invoked with sudo DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" lb build, it was successful.

answered Feb 7 '16 at 19:12

detly

1,36341424

add a commentÂ |Â

up vote
2
down vote

accepted

When I invoked with sudo DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" lb build, it was successful.

answered Feb 7 '16 at 19:12

detly

1,36341424

add a commentÂ |Â

up vote
2
down vote

accepted

When I invoked with sudo DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" lb build, it was successful.

answered Feb 7 '16 at 19:12

detly

1,36341424

When I invoked with sudo DEBOOTSTRAP_OPTIONS="--keyring=/usr/share/keyrings/raspbian-archive-keyring.gpg" lb build, it was successful.

answered Feb 7 '16 at 19:12

detly

1,36341424

answered Feb 7 '16 at 19:12

detly

1,36341424

answered Feb 7 '16 at 19:12

detly

1,36341424

answered Feb 7 '16 at 19:12

detly

1,36341424

add a commentÂ |Â

up vote
0
down vote

As root run:

wget -qO - https://archive.raspbian.org/raspbian.public.key | gpg --import -
debootstrap --keyring /root/.gnupg/pubring.kbx ...

answered Aug 17 at 8:49

dimir

1413

add a commentÂ |Â

up vote
0
down vote

As root run:

wget -qO - https://archive.raspbian.org/raspbian.public.key | gpg --import -
debootstrap --keyring /root/.gnupg/pubring.kbx ...

answered Aug 17 at 8:49

dimir

1413

add a commentÂ |Â

up vote
0
down vote

As root run:

wget -qO - https://archive.raspbian.org/raspbian.public.key | gpg --import -
debootstrap --keyring /root/.gnupg/pubring.kbx ...

answered Aug 17 at 8:49

dimir

1413

As root run:

wget -qO - https://archive.raspbian.org/raspbian.public.key | gpg --import -
debootstrap --keyring /root/.gnupg/pubring.kbx ...

answered Aug 17 at 8:49

dimir

1413

answered Aug 17 at 8:49

dimir

1413

answered Aug 17 at 8:49

dimir

1413

answered Aug 17 at 8:49

dimir

1413

add a commentÂ |Â

draft saved

draft discarded

draft saved

draft discarded

Post as a guest

Name

搜尋此網誌

mjhjmtu