[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [XEN PATCH 2/4] automation: Ignore package authentification issue in Jessie container


  • To: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  • From: Anthony PERARD <anthony.perard@xxxxxxxxxx>
  • Date: Wed, 15 Feb 2023 16:21:34 +0000
  • Authentication-results: esa1.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none
  • Cc: <xen-devel@xxxxxxxxxxxxxxxxxxxx>, Doug Goldstein <cardoe@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>
  • Delivery-date: Wed, 15 Feb 2023 16:22:10 +0000
  • Ironport-data: A9a23:ehFjWqnSIOx5XrhIqQtRlTno5gy4JkRdPkR7XQ2eYbSJt1+Wr1Gzt xIfCD3Xb/aNN2L1KYoiaIm1/U8Ou5aEm9RgTAVsrCEzQiMWpZLJC+rCIxarNUt+DCFhoGFPt JxCN4aafKjYaleG+39B55C49SEUOZmgH+a6U6icfHgqH2eIcQ954Tp7gek1n4V0ttawBgKJq LvartbWfVSowFaYCEpNg064gE4p7auaVA8w5ARkPqgR5QKGzRH5MbpETU2PByqgKmVrNrbSq 9brlNmR4m7f9hExPdKp+p6TnpoiG+O60aCm0xK6aoD66vRwjnVaPpUTbZLwXXx/mTSR9+2d/ f0W3XCGpaXFCYWX8AgVe0Ew/yiTpsSq8pefSZS0mZT7I0Er7xIAahihZa07FdRwxwp5PY1B3 eMGNh0dTkiJvuuz/a+na+tFhNgjLPC+aevzulk4pd3YJfMvQJSFSKTW/95Imjw3g6iiH96HO ZBfM2A2Kk2dPVsWYAx/5JEWxY9EglH2dSFYr1SE47I6+WHJwCR60aT3McqTcduPLSlQthfH+ z2WrjSpav0cHIWwwiOK+C6ev9DsnwjbQ7JRTLigrMc/1TV/wURMUUZLBDNXu8KRkVWiUthSL 0gV/CsGrqUo8kGvCN7nUHWQqWaJpBcGV/JMEucx70eGza+8yw2QHGQDQxZKYcYqs8JwTjsvv neZktWsCTFxvbm9TXOG6qzSvT60ITISL2IJeWkDVwRt3jX4iNht1FSVFI8lSfPryISvQlkc3 gxmsgAhmas+ne5T3Zyy+G3anxOuj5rVTg4Ms1C/sn2e0it1Y4usZoqN4Ffd7OpdIIvxcmRtr EToiODFsrlQUMjleDilBbxUQer3v6rt3Cj02wYHInU3y9i6F5dPl6h06So2GkpmO91sldTBM B6K4lM5CHO+0RKXgU5Lj2CZUZ9CIUvIT46NuhXogjxmOMAZmOivoklTiba4hTyFraTVufhX1 W2nWcitF20GLq9s0SC7QewQuZdymH9gnjKCG8qqlUT9uVZ7WJJzYe1dWLdpRrpkhJ5oXS2Pq 4oPXyd040s3vBLCjtn/rtdIcAFiwYkTDpHqsc1HHtNv0SI/cFzN/8T5mOt7E6Q8xvQ9qws91 i3lMqOu4Aal1CKvxMTjQiwLVY4Dqr4u/S5qbHB1bQ7ANrpKSd/H0ZrzvqAfJdEPnNGPB9YuJ xXZU61s2shydwk=
  • Ironport-hdrordr: A9a23:odaSdak4IFR6HcpZwlAI69Wcgq3pDfLo3DAbv31ZSRFFG/Fw9/ rCoB17726QtN91YhsdcL+7V5VoLUmzyXcX2/hyAV7BZmnbUQKTRekP0WKL+Vbd8kbFh41gPM lbEpSXCLfLfCJHZcSR2njELz73quP3jJxBho3lvghQpRkBUdAF0+/gYDzranGfQmN9dP0EPa vZ3OVrjRy6d08aa8yqb0N1JNQq97Xw5fTbiQdtPW9f1DWz
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On Wed, Feb 15, 2023 at 12:36:30PM +0000, Andrew Cooper wrote:
> On 15/02/2023 12:02 pm, Anthony PERARD wrote:
> > We can't easily install package on Debian Jessie anymore, the release
> > keys seems to have expired without a way to get new ones. We have
> > these warning:
> >     W: GPG error: http://deb.debian.org jessie-updates InRelease: The 
> > following signatures were invalid: KEYEXPIRED 1668891673
> >     W: GPG error: http://deb.debian.org jessie Release: The following 
> > signatures were invalid: KEYEXPIRED 1668891673
> >
> > So, from now on, ignore the warning and force the installation of
> > packages that can't be authenticated.
> >
> > Signed-off-by: Anthony PERARD <anthony.perard@xxxxxxxxxx>
> > ---
> >
> > Or, we could just not test on Jessie anymore.
> 
> Jessie fell out of support in 2020, so its certainly not reasonable to
> be testing it any more.
> 
> But on older branches, we do want to keep it around, so I guess we want
> to fix the containers to still be buildable...
> 
> But is this really the best option?  Some googling suggests that all we
> need is a properly up-to-date debian-keyring package.  Are the jessie
> docker tags really shipping with a broken base package?

I did try to find a better solution that "--force-yes", I did find out
about installaling the latest "debian-archive-keyring", but it is
already up-to-date. Installing "debian-keyring" instead doesn't change
the keys.

But it looks like there's another way. We could use "debian/eol:jessie"
as base image instead of "debian:jessie", and that works. I'll update
the patch with that.

-- 
Anthony PERARD



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.