starlingx/root
Code Issues Proposed changes

build-image: remove [trusted=yes] from package feed

Browse Source 
Due to commit [26d7118 Dockerfiles: Add example gpg key
pair for repository signature] applied, this commit does
not trust package feed unconditionally, LAT tools will
use public key to verify package feed

Story: 2008846
Task: 45019

Test Plan:
Pass: Build image

Depends-On: https://review.opendev.org/c/starlingx/root/+/831081
Depends-On: https://review.opendev.org/c/starlingx/tools/+/837646

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Change-Id: I411cd7f55f07f8c3f4a6b5884ef652ec5219eb62
This commit is contained in:
Hongxu Jia 2022-04-12 10:59:33 +08:00
parent 9ab784b972
commit 6e4442c044
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
build-tools/stx/build-image
View File

@ -300,10 +300,10 @@ if __name__ == "__main__":
if update_debootstrap_mirror(lat_initramfs_yaml): if update_debootstrap_mirror(lat_initramfs_yaml):
logger.debug("Debootstrap switches to mirror %s in %s", REPO_ALL, lat_initramfs_yaml) logger.debug("Debootstrap switches to mirror %s in %s", REPO_ALL, lat_initramfs_yaml)
binary_repo_url = ''.join(['deb [trusted=yes] ', binary_repo_url = ''.join(['deb ',
os.environ.get('REPOMGR_DEPLOY_URL'), os.environ.get('REPOMGR_DEPLOY_URL'),
REPO_BINARY, ' bullseye main']) REPO_BINARY, ' bullseye main'])
build_repo_url = ''.join(['deb [trusted=yes] ', build_repo_url = ''.join(['deb ',
os.environ.get('REPOMGR_DEPLOY_URL'), os.environ.get('REPOMGR_DEPLOY_URL'),
REPO_BUILD, ' bullseye main']) REPO_BUILD, ' bullseye main'])